ci: fix Teams notification — use Adaptive Card with curl

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.env.production

@@ -0,0 +1,5 @@
+VITE_API_URL=https://engage-api.srv1477139.hstgr.cloud
+VITE_SIDECAR_URL=https://engage-api.srv1477139.hstgr.cloud
+VITE_SIP_URI=sip:523590@blr-pub-rtc4.ozonetel.com
+VITE_SIP_PASSWORD=523590
+VITE_SIP_WS_SERVER=wss://blr-pub-rtc4.ozonetel.com:444

.gitignore

@@ -23,3 +23,7 @@ dist-ssr
 *.sln
 *.sw?
 .env
+
+# Playwright
+test-results/
+playwright-report/

.woodpecker.yml

@@ -0,0 +1,54 @@
+# Woodpecker CI pipeline for Helix Engage
+#
+# Reports at operations.healix360.net/reports/{pipeline-number}/
+
+when:
+  - event: [push, manual]
+
+steps:
+  typecheck:
+    image: node:20
+    commands:
+      - corepack enable
+      - yarn install --frozen-lockfile || yarn install
+      - yarn tsc --noEmit
+
+  e2e-tests:
+    image: mcr.microsoft.com/playwright:v1.52.0-noble
+    commands:
+      - corepack enable
+      - yarn install --frozen-lockfile || yarn install
+      - npx playwright install chromium
+      - npx playwright test --reporter=list,html
+    environment:
+      E2E_BASE_URL: https://ramaiah.engage.healix360.net
+      PLAYWRIGHT_HTML_REPORT: playwright-report
+
+  publish-report:
+    image: plugins/s3
+    settings:
+      bucket: test-reports
+      source: playwright-report/**/*
+      target: /${CI_PIPELINE_NUMBER}
+      strip_prefix: playwright-report/
+      path_style: true
+      endpoint: http://minio:9000
+      access_key:
+        from_secret: s3_access_key
+      secret_key:
+        from_secret: s3_secret_key
+    when:
+      - status: [success, failure]
+
+  notify-teams:
+    image: curlimages/curl
+    environment:
+      TEAMS_WEBHOOK:
+        from_secret: teams_webhook
+    commands:
+      - >
+        curl -s -X POST "$TEAMS_WEBHOOK"
+        -H "Content-Type:application/json"
+        -d '{"type":"message","attachments":[{"contentType":"application/vnd.microsoft.card.adaptive","content":{"type":"AdaptiveCard","version":"1.4","body":[{"type":"TextBlock","size":"Medium","weight":"Bolder","text":"Helix Engage — Build #'"$CI_PIPELINE_NUMBER"'"},{"type":"TextBlock","text":"Branch: '"$CI_COMMIT_BRANCH"'","wrap":true},{"type":"TextBlock","text":"40 E2E tests completed","wrap":true}],"actions":[{"type":"Action.OpenUrl","title":"View Report","url":"https://operations.healix360.net/reports/'"$CI_PIPELINE_NUMBER"'/index.html"},{"type":"Action.OpenUrl","title":"View Pipeline","url":"https://operations.healix360.net/repos/1/pipeline/'"$CI_PIPELINE_NUMBER"'"}]}}]}'
+    when:
+      - status: [success, failure]

docs/architecture.md

@@ -0,0 +1,248 @@
+# Helix Engage — Architecture
+
+Single EC2 instance (Mumbai `ap-south-1`) hosting two isolated Helix Engage
+workspaces on top of a shared FortyTwo platform. Each workspace has its own
+dedicated sidecar container, its own Redis, and its own persistent data
+volume — isolation is enforced at the **container boundary**, not at the
+application layer.
+
+**Host:** `13.234.31.194` (m6i.xlarge, Ubuntu 22.04)
+**DNS:** Cloudflare zone `healix360.net`
+**TLS:** Caddy + Let's Encrypt, HTTP-01 challenge per hostname
+
+---
+
+## Principles
+
+1. **Platform is multi-tenant by design.** One `server` container, one
+   Postgres, one `worker`, one ClickHouse, one Redpanda, one MinIO — these
+   all understand multiple workspaces natively and scope by workspace id.
+
+2. **Sidecar is single-tenant by design.** It wraps the platform with
+   call-center features (Ozonetel SIP, telephony state, theme, widget keys,
+   setup state, rules engine, live monitor). Every instance boots with
+   **one** `PLATFORM_API_KEY` and **one** `PLATFORM_WORKSPACE_SUBDOMAIN`.
+   We run one instance per workspace.
+
+3. **Caddy is strictly host-routed.** No default or catchall tenant.
+   A request lands on a host block or it 404s. The apex
+   `engage.healix360.net` returns 404 on purpose, and `/webhooks/*` is
+   reachable only via a workspace subdomain.
+
+4. **Redis is per-sidecar.** Sidecars share Redis key names without a
+   workspace dimension. Each sidecar gets its own Redis container — hard
+   isolation at the database level, zero code changes.
+
+5. **Telephony dispatcher routes events by agent.** Ozonetel event
+   subscriptions are account-level (not per-campaign). A single dispatcher
+   receives all agent/call events and routes them to the correct sidecar
+   using Redis-backed service discovery.
+
+---
+
+## URL Layout
+
+| Who | URL | Routes to |
+|---|---|---|
+| Ramaiah platform UI | `https://ramaiah.app.healix360.net` | `server:4000` |
+| Ramaiah Helix Engage | `https://ramaiah.engage.healix360.net` | `sidecar-ramaiah:4100` |
+| Global platform UI | `https://global.app.healix360.net` | `server:4000` |
+| Global Helix Engage | `https://global.engage.healix360.net` | `sidecar-global:4100` |
+| Telephony dispatcher | `https://telephony.engage.healix360.net` | `telephony:4200` |
+| Apex (dead-end) | `https://engage.healix360.net` | `404` |
+
+Ozonetel campaign webhook URLs — per tenant:
+
+| Campaign | DID | Webhook URL |
+|---|---|---|
+| `Inbound_918041763400` | Ramaiah | `https://ramaiah.engage.healix360.net/webhooks/ozonetel/missed-call` |
+| `Inbound_918041763265` | Global (on VPS until cutover) | `https://global.engage.healix360.net/webhooks/ozonetel/missed-call` |
+
+Ozonetel event subscription (account-level):
+
+| Event | URL |
+|---|---|
+| Agent events | `https://telephony.engage.healix360.net/api/supervisor/agent-event` |
+| Call events | `https://telephony.engage.healix360.net/api/supervisor/call-event` |
+
+---
+
+## Diagram
+
+```mermaid
+flowchart TB
+    subgraph Internet
+        OZO[Ozonetel<br/>CCaaS]
+        USR_R[Ramaiah users]
+        USR_G[Global users]
+    end
+
+    subgraph EC2 ["EC2 — 13.234.31.194 (ap-south-1)"]
+        CADDY{{"caddy<br/>host-routed<br/>Let's Encrypt"}}
+
+        subgraph TEL ["Telephony Dispatcher"]
+            DISP["telephony<br/>NestJS:4200<br/>routes by agentId"]
+            RD_T[("redis-telephony")]
+        end
+
+        subgraph PLATFORM ["Platform (shared, multi-tenant)"]
+            SRV["server<br/>NestJS:4000<br/>platform API + SPA"]
+            WKR["worker<br/>BullMQ"]
+            DB[("db<br/>postgres:16<br/>workspace-per-schema")]
+            CH[("clickhouse<br/>analytics")]
+            RP[("redpanda<br/>event bus")]
+            MINIO[("minio<br/>S3 storage")]
+        end
+
+        subgraph RAMAIAH ["Ramaiah tenant (isolated)"]
+            SC_R["sidecar-ramaiah<br/>NestJS:4100<br/>API_KEY=ramaiah admin"]
+            RD_R[("redis-ramaiah")]
+            VOL_R[/"data-ramaiah volume<br/>theme, telephony,<br/>widget, rules,<br/>setup-state"/]
+        end
+
+        subgraph GLOBAL ["Global tenant (isolated)"]
+            SC_G["sidecar-global<br/>NestJS:4100<br/>API_KEY=global admin"]
+            RD_G[("redis-global")]
+            VOL_G[/"data-global volume<br/>theme, telephony,<br/>widget, rules,<br/>setup-state"/]
+        end
+    end
+
+    USR_R -->|"ramaiah.app.healix360.net"| CADDY
+    USR_R -->|"ramaiah.engage.healix360.net"| CADDY
+    USR_G -->|"global.app.healix360.net"| CADDY
+    USR_G -->|"global.engage.healix360.net"| CADDY
+
+    OZO -->|"webhooks/ozonetel/missed-call<br/>(Ramaiah DID 918041763400)"| CADDY
+    OZO -.->|"webhooks/ozonetel/missed-call<br/>(Global DID 918041763265<br/>— still on VPS today)"| CADDY
+    OZO -->|"agent + call events<br/>(account-level subscription)"| CADDY
+    CADDY -->|"telephony.engage.*"| DISP
+
+    CADDY -->|"*.app.healix360.net<br/>/graphql, /auth/*, SPA"| SRV
+    CADDY -->|"ramaiah.engage.*<br/>/api/*, /webhooks/*, SPA"| SC_R
+    CADDY -->|"global.engage.*<br/>/api/*, /webhooks/*, SPA"| SC_G
+
+    DISP -->|"agentId lookup<br/>→ forward to sidecar"| SC_R
+    DISP -->|"agentId lookup<br/>→ forward to sidecar"| SC_G
+    DISP --- RD_T
+
+    SC_R -->|"self-register on boot<br/>heartbeat 30s"| DISP
+    SC_G -->|"self-register on boot<br/>heartbeat 30s"| DISP
+
+    SC_R -->|"GraphQL<br/>Origin: ramaiah.app.*"| SRV
+    SC_G -->|"GraphQL<br/>Origin: global.app.*"| SRV
+
+    SC_R --- RD_R
+    SC_G --- RD_G
+    SC_R --- VOL_R
+    SC_G --- VOL_G
+
+    SRV --- DB
+    SRV --- CH
+    SRV --- RP
+    SRV --- MINIO
+    WKR --- DB
+    WKR --- RP
+
+    classDef shared fill:#e3f2fd,stroke:#1976d2,stroke-width:2px,color:#000
+    classDef ramaiah fill:#fff3e0,stroke:#f57c00,stroke-width:2px,color:#000
+    classDef global fill:#e8f5e9,stroke:#388e3c,stroke-width:2px,color:#000
+    classDef external fill:#f5f5f5,stroke:#757575,stroke-width:1px,color:#000
+    classDef edge fill:#fce4ec,stroke:#c2185b,stroke-width:2px,color:#000
+    classDef telephony fill:#f3e5f5,stroke:#7b1fa2,stroke-width:2px,color:#000
+
+    class SRV,WKR,DB,CH,RP,MINIO shared
+    class SC_R,RD_R,VOL_R ramaiah
+    class SC_G,RD_G,VOL_G global
+    class OZO,USR_R,USR_G external
+    class CADDY edge
+    class DISP,RD_T telephony
+```
+
+---
+
+## Components
+
+| Component | Scope | Container count | Purpose |
+|---|---|---|---|
+| Caddy | Shared | 1 | Host-routed reverse proxy, TLS terminator |
+| Platform server | Shared | 1 | Natively multi-tenant by Origin/subdomain |
+| Platform worker | Shared | 1 | BullMQ jobs carry workspace context per-job |
+| Postgres | Shared | 1 | Multi-tenant via per-workspace schemas |
+| ClickHouse | Shared | 1 | Analytics — workspace dimension per event |
+| Redpanda | Shared | 1 | Event bus — workspace dimension per message |
+| MinIO | Shared | 1 | S3-compatible storage |
+| **Telephony dispatcher** | **Shared** | **1** | Routes Ozonetel events to correct sidecar by agentId |
+| **Redis (telephony)** | **Shared** | **1** | Service discovery registry for dispatcher |
+| **Sidecar** | **Per-tenant** | **2** | Call center layer (Ramaiah + Global) |
+| **Redis (sidecar)** | **Per-tenant** | **2** | Session, agent state, theme, rules cache |
+| **Data volume** | **Per-tenant** | **2** | File-based config in `/app/data/` |
+
+---
+
+## Telephony Event Flow
+
+Ozonetel event subscriptions are **account-level** — one subscription per Ozonetel account, not per campaign. All agent login/logout/state events and call events are POSTed to a single URL.
+
+```
+Ozonetel → POST telephony.engage.healix360.net/api/supervisor/agent-event
+  → Dispatcher receives { agentId: "ramaiahadmin", action: "incall", ... }
+  → Redis lookup: agentId "ramaiahadmin" → sidecar-ramaiah:4100
+  → Forward event to sidecar-ramaiah
+  → sidecar-ramaiah updates SupervisorService state, emits SSE
+```
+
+**Service discovery:** Each sidecar self-registers on boot via `POST /api/supervisor/register` with its agent list. Heartbeat every 30s, TTL 90s. If a sidecar goes down, its entries expire and the dispatcher stops routing to it.
+
+---
+
+## Request Flow
+
+### Agent opens Ramaiah Helix Engage
+```
+Browser → https://ramaiah.engage.healix360.net/
+  → Caddy (TLS, Host=ramaiah.engage.healix360.net)
+  → static SPA from /srv/engage
+
+Browser → POST /api/auth/login { email, password }
+  → Caddy → sidecar-ramaiah:4100
+  → sidecar calls platform with:
+      Origin: https://ramaiah.app.healix360.net
+      Authorization: Bearer <Ramaiah API key>
+  → platform resolves workspace by Origin → Ramaiah
+  → JWT returned
+```
+
+### Ozonetel POSTs a missed-call webhook
+```
+Ozonetel → POST https://ramaiah.engage.healix360.net/webhooks/ozonetel/missed-call
+  → Caddy (Host=ramaiah.engage.healix360.net)
+  → sidecar-ramaiah:4100 ONLY
+  → writes call row into Ramaiah workspace via platform
+```
+
+Cross-tenant leakage is physically impossible — Caddy's host-routing guarantees a Ramaiah webhook can never reach sidecar-global.
+
+---
+
+## Failure Modes
+
+| Failure | Blast radius |
+|---|---|
+| `sidecar-ramaiah` crashes | Ramaiah Engage 502s. Global + platform unaffected. |
+| `sidecar-global` crashes | Global Engage 502s. Ramaiah + platform unaffected. |
+| `redis-ramaiah` crashes | Ramaiah agents kicked from SIP. Global unaffected. |
+| `telephony` crashes | Agent/call state events stop routing. Sidecars still serve UI. |
+| `server` (platform) crashes | **Both workspaces** down for data. |
+| `db` crashes | Same as above. |
+| Caddy crashes | Nothing reachable until restart. |
+
+---
+
+## Adding a New Hospital
+
+1. Add sidecar container + Redis + data volume in `docker-compose.yml`
+2. Add Caddy host block for `newhospital.engage.healix360.net`
+3. Create workspace on platform, generate API key
+4. Set sidecar env: `PLATFORM_API_KEY`, `PLATFORM_WORKSPACE_SUBDOMAIN`
+5. Configure Ozonetel campaign webhook to `newhospital.engage.healix360.net/webhooks/ozonetel/missed-call`
+6. Sidecar self-registers with telephony dispatcher on boot — no dispatcher config needed

docs/defect-fixing-plan.md

@@ -0,0 +1,212 @@
+# Helix Engage — Defect Fixing Plan
+
+**Date**: 2026-03-31
+**Status**: Analysis complete, implementation pending
+
+---
+
+## Item 1: Sidebar navigation during ongoing calls
+**Status**: NOT A BUG
+**Finding**: Sidebar is fully functional during calls. No code blocks navigation. Call state persists via Jotai atoms (`sipCallStateAtom`, `sipCallerNumberAtom`, `sipCallUcidAtom`) regardless of which page the agent navigates to. `CallWidget` in `app-shell.tsx` (line 80) renders on non-call-desk pages when a call is active, ensuring the agent can return.
+
+---
+
+## Item 2: Appointment form / Enquiry form visibility during calls
+**Status**: APPROVED REDESIGN — Convert to modals
+**Root Cause**: `active-call-card.tsx` renders AppointmentForm and EnquiryForm inside a `max-h-[50vh] overflow-y-auto` container (line 292). After the call header + controls take ~100px, the form is squeezed.
+
+**Approved approach**: Convert both forms to modal dialogs (like TransferDialog already is).
+
+**Flow**:
+```
+Agent clicks "Book Appt" → Modal opens → Log intent to LeadActivity → Agent fills form
+  → Save succeeds → setSuggestedDisposition('APPOINTMENT_BOOKED') → Modal closes
+  → Save abandoned → No disposition change → Intent logged for supervisor analytics
+```
+
+Same for Enquiry → `INFO_PROVIDED` on save, intent logged on open.
+
+**Files to change**:
+- `src/components/call-desk/active-call-card.tsx` — replace inline form expansion with modal triggers
+- `src/components/call-desk/appointment-form.tsx` — wrap in Modal/ModalOverlay from `src/components/application/modals/modal`
+- `src/components/call-desk/enquiry-form.tsx` — wrap in Modal/ModalOverlay
+
+**Benefits**: Solves Item 2 (form visibility), Item 10a (returning patient checkbox shift), keeps call card clean.
+
+**Effort**: Medium (3-4h)
+
+---
+
+## Item 3: Enquiry form disposition + modal disposition context
+**Status**: REAL ISSUE (two parts)
+
+### 3a: Remove disposition from enquiry form
+`enquiry-form.tsx` (lines 19-26, 195-198) has its own disposition field with 6 options (CONVERTED, FOLLOW_UP, GENERAL_QUERY, NO_ANSWER, INVALID_NUMBER, CALL_DROPPED). During an active call, NO_ANSWER and INVALID_NUMBER are nonsensical — the caller is connected.
+
+**Fix**: Remove disposition field from enquiry form entirely. Disposition is captured in the disposition modal after the call ends. The enquiry form's job is to log the enquiry, not to classify the call outcome.
+
+**Files**: `src/components/call-desk/enquiry-form.tsx` — remove disposition Select + validation
+
+### 3b: Context-aware disposition options in modal
+`disposition-modal.tsx` (lines 15-57) shows all 6 options regardless of call context. During an inbound answered call, "No Answer" and "Wrong Number" don't apply.
+
+**Fix**: Accept a `callContext` prop ('inbound-answered' | 'outbound' | 'missed-callback') and filter options accordingly:
+- Inbound answered: show APPOINTMENT_BOOKED, FOLLOW_UP_SCHEDULED, INFO_PROVIDED, CALLBACK_REQUESTED
+- Outbound: show all
+- Missed callback: show all
+
+**Files**: `src/components/call-desk/disposition-modal.tsx`, `src/components/call-desk/active-call-card.tsx`
+
+**Effort**: Low (2h)
+
+---
+
+## Item 4: Edit future appointment during inbound call
+**Status**: DONE (2026-03-30)
+**Implementation**: Context panel (`context-panel.tsx` lines 172-197) shows upcoming appointments with Edit button → opens `AppointmentForm` in edit mode with `existingAppointment` prop. Appointments fetched via `APPOINTMENTS_QUERY` in DataProvider.
+
+---
+
+## Item 5: My Performance page
+**Status**: THREE SUB-ISSUES
+
+### 5a: From/To date range filter
+**Current**: Only Today/Yesterday presets + single date picker in `my-performance.tsx` (lines 95-135).
+**Fix**: Add two DatePicker components (From/To) or a date range picker. Update API call to accept date range. Update chart/KPI computations to use range.
+**Effort**: Medium (3-4h)
+
+### 5b: Time Utilisation not displayed
+**Current**: Section renders conditionally at line 263 — only if `timeUtilization` is not null. If sidecar API returns null (Ozonetel getAgentSummary fails or VPN blocks), section silently disappears.
+**Fix**: Add placeholder/error state when null: "Time utilisation data unavailable — check Ozonetel connection"
+**Effort**: Low (30min)
+
+### 5c: Data loading slow
+**Current**: Fetches from `/api/ozonetel/performance` on every date change, no caching.
+**Fix**: Add response caching (memoize by date key), show skeleton loader during fetch, debounce date changes.
+**Effort**: Medium (2h)
+
+---
+
+## Item 6: Break and Training status not working
+**Status**: REAL ISSUE — likely Ozonetel API parameter mismatch
+
+**Root Cause**: `agent-status-toggle.tsx` (lines 41-64) calls `/api/ozonetel/agent-state` with `{ state: 'Pause', pauseReason: 'Break' }` or `'Training'`. Ozonetel's `changeAgentState` API may expect different pause reason enum values. Errors are caught and shown as generic toast — no specific failure reason.
+
+**Investigation needed**:
+1. Check sidecar logs for the actual Ozonetel API response when Break/Training is selected
+2. Verify Ozonetel API docs for valid `pauseReason` values (may need `BREAK`, `TRAINING`, or numeric codes)
+3. Check if the agent must be in `Ready` state before transitioning to `Pause`
+
+**Fix**: Correct pause reason values, add specific error messages.
+**Effort**: Low-Medium (2-3h including investigation)
+
+---
+
+## Item 7: Auto-refresh for Call Desk, Call History, Appointments
+**Status**: REAL ISSUE
+
+| Page | Current | Fix |
+|---|---|---|
+| Call Desk worklist | YES (30s via `use-worklist.ts`) | Working |
+| DataProvider (calls, leads, etc.) | NO — `useEffect([fetchData])` runs once | Add `setInterval(fetchData, 30000)` |
+| Call History | NO — uses `useData()` | Automatic once DataProvider fixed |
+| Appointments | NO — `useEffect([])` runs once | Add interval or move to DataProvider |
+
+**Files**: `src/providers/data-provider.tsx` (lines 117-119), `src/pages/appointments.tsx` (lines 76-81)
+**Effort**: Low (1-2h)
+
+---
+
+## Item 8: Appointments page improvements
+**Status**: THREE SUB-ISSUES
+
+### 8a: Appointment ID as primary field
+**Current**: No ID column in table. `appointments.tsx` shows Patient, Date, Time, Doctor, Department, Branch, Status, Chief Complaint.
+**Fix**: Add ID column (first column) showing appointment ID or a short reference number.
+**Effort**: Low (30min)
+
+### 8b: Edit Appointment option
+**Current**: No edit button on appointments page (only exists in call desk context panel).
+**Fix**: Add per-row Edit button → opens AppointmentForm in edit mode (same component, reuse `existingAppointment` prop).
+**Pending**: Confirmation from Meghana
+**Effort**: Low (1-2h)
+
+### 8c: Sort by status
+**Current**: Tabs filter by status but no column-level sorting.
+**Fix**: Add `allowsSorting` to table headers + `sortDescriptor`/`onSortChange` (same pattern as worklist).
+**Pending**: Confirmation from Meghana
+**Effort**: Low (1h)
+
+---
+
+## Item 9: AI Surface enlargement + patient historical data
+**Status**: PARTIALLY DONE
+
+### 9a: Panel width
+**Current**: Context panel is `w-[400px]` in `call-desk.tsx` (line 218).
+**Fix**: Increase to `w-[440px]` or `w-[460px]`.
+**Effort**: Trivial
+
+### 9b: Patient historical data
+**Current**: We added calls, follow-ups, and appointments to context panel (2026-03-30). Shows in "Upcoming" and "Recent" sections. Data requires `patientId` on the lead — populated by caller resolution service.
+**Verify**: Test with real inbound call to confirmed patient. If lead has no `patientId`, nothing shows.
+**Effort**: Done — verify only
+
+---
+
+## Item 10: Multiple issues
+
+### 10a: Returning Patient checkbox shifts form upward
+**Status**: WILL BE FIXED by Item 2 (modal conversion). Form in modal has its own layout — checkbox toggle won't affect call card.
+
+### 10b: Patients page table not scrollable
+**File**: `src/pages/patients.tsx`
+**Fix**: Add `overflow-auto` to table container wrapper. Check if outer div has proper `min-h-0` for flex overflow.
+**Effort**: Trivial (15min)
+
+### 10c: Call log data not appearing in worklist tabs
+**Status**: INVESTIGATION NEEDED
+**Possible causes**:
+1. Sidecar `/api/worklist` not returning data — check endpoint response
+2. Calls created via Ozonetel disposition lack `leadId` linkage — can't match to worklist
+3. Call records created but `callStatus` not set correctly (need `MISSED` for missed tab)
+**Action**: Check sidecar logs and `/api/worklist` response payload
+
+### 10d: Missed calls appearing in wrong sub-tabs (Attempted/Completed/Invalid instead of Pending)
+**Status**: INVESTIGATION NEEDED
+**Possible cause**: `callbackstatus` field being set to non-null value during call creation. `worklist-panel.tsx` (line 246) routes to Pending when `callbackstatus === 'PENDING_CALLBACK' || !callbackstatus`. If the sidecar sets a status during ingestion, it may skip Pending.
+**Action**: Check missed call ingestion code in sidecar — what `callbackstatus` is set on creation
+
+---
+
+## Item 11: Patient column filter in Call Desk
+**Status**: NOT A BUG
+**Finding**: The PATIENT column has `allowsSorting` (added 2026-03-30) which shows a sort arrow. This is a sort control, not a filter. The search box at the top of the worklist filters across name + phone. No separate column-level filter exists. Functionally correct.
+
+---
+
+## Priority Matrix
+
+| Priority | Items | Total Effort |
+|---|---|---|
+| **P0 — Do first** | #2 (modal conversion — solves 2, 10a), #7 (auto-refresh), #3 (disposition context) | ~7h |
+| **P1 — Quick wins** | #8a (appt ID), #8c (sort), #9a (panel width), #10b (scroll fix), #5b (time util placeholder) | ~3h |
+| **P2 — Medium** | #5a (date range), #5c (loading perf), #6 (break/training debug), #8b (edit appt) | ~8h |
+| **P3 — Investigation** | #10c (call log data), #10d (missed call routing) | ~2h investigation |
+| **Done** | #1, #4, #9b, #11 | — |
+
+## Data Seeding (separate from defects)
+
+### Patient/Lead seeding
+| Name | Phone | Action |
+|---|---|---|
+| Ganesh Bandi | 8885540404 | Create patient + lead, interestedService: "Back Pain" |
+| Meghana | 7702055204 | Update existing "Unknown" patient + lead, interestedService: "Hair Loss" |
+
+### CC Agent profiles (completed)
+```
+Agent     Email                         Password   Ozonetel ID     SIP Ext   Campaign
+--------  ----------------------------  ---------  --------------  --------  ----------------------
+Rekha S   rekha.cc@globalhospital.com    Test123$   global          523590    Inbound_918041763265
+Ganesh    ganesh.cc@globalhospital.com   Test123$   globalhealthx   523591    Inbound_918041763265
+```

docs/developer-operations-runbook.md

@@ -0,0 +1,389 @@
+# Helix Engage — Developer Operations Runbook
+
+## Architecture
+
+See [architecture.md](./architecture.md) for the full multi-tenant topology diagram.
+
+```
+Browser (India)
+    ↓ HTTPS
+Caddy (reverse proxy, TLS, host-routed)
+    ├── ramaiah.engage.healix360.net  → sidecar-ramaiah:4100
+    ├── global.engage.healix360.net   → sidecar-global:4100
+    ├── telephony.engage.healix360.net → telephony:4200
+    ├── *.app.healix360.net           → server:4000 (platform)
+    └── engage.healix360.net          → 404 (no catchall)
+
+Docker Compose stack (EC2 — 13.234.31.194):
+    ├── caddy              — Reverse proxy + TLS (Let's Encrypt)
+    ├── server             — FortyTwo platform (NestJS, port 4000)
+    ├── worker             — BullMQ background jobs
+    ├── sidecar-ramaiah    — Ramaiah sidecar (NestJS, port 4100)
+    ├── sidecar-global     — Global sidecar (NestJS, port 4100)
+    ├── telephony          — Event dispatcher (NestJS, port 4200)
+    ├── redis-ramaiah      — Ramaiah sidecar Redis
+    ├── redis-global       — Global sidecar Redis
+    ├── redis-telephony    — Telephony dispatcher Redis
+    ├── redis              — Platform Redis
+    ├── db                 — PostgreSQL 16 (workspace-per-schema)
+    ├── clickhouse         — Analytics
+    ├── minio              — S3-compatible object storage
+    └── redpanda           — Event bus (Kafka-compatible)
+```
+
+---
+
+## EC2 Access
+
+```bash
+# SSH into EC2
+ssh -i /tmp/ramaiah-ec2-key -o StrictHostKeyChecking=no ubuntu@13.234.31.194
+```
+
+| Detail | Value |
+|---|---|
+| Host | `13.234.31.194` |
+| User | `ubuntu` |
+| SSH key | `/tmp/ramaiah-ec2-key` (decrypted from `~/Downloads/fortytwoai_hostinger`) |
+| Docker compose dir | `/opt/fortytwo` |
+| Frontend static files | `/opt/fortytwo/helix-engage-frontend` |
+| Caddyfile | `/opt/fortytwo/Caddyfile` |
+
+### SSH Key Setup
+
+The key at `~/Downloads/fortytwoai_hostinger` is passphrase-protected (`SasiSuman@2007`).
+Create a decrypted copy for non-interactive use:
+
+```bash
+# One-time setup
+openssl pkey -in ~/Downloads/fortytwoai_hostinger -out /tmp/ramaiah-ec2-key
+chmod 600 /tmp/ramaiah-ec2-key
+
+# Verify
+ssh -i /tmp/ramaiah-ec2-key ubuntu@13.234.31.194 hostname
+```
+
+### Handy alias
+
+```bash
+alias ec2="ssh -i /tmp/ramaiah-ec2-key -o StrictHostKeyChecking=no ubuntu@13.234.31.194"
+```
+
+---
+
+## URLs
+
+| Service | URL |
+|---|---|
+| Ramaiah Engage (Frontend + API) | `https://ramaiah.engage.healix360.net` |
+| Global Engage (Frontend + API) | `https://global.engage.healix360.net` |
+| Ramaiah Platform | `https://ramaiah.app.healix360.net` |
+| Global Platform | `https://global.app.healix360.net` |
+| Telephony Dispatcher | `https://telephony.engage.healix360.net` |
+
+---
+
+## Login Credentials
+
+### Ramaiah Workspace
+
+| Role | Email | Password |
+|---|---|---|
+| Marketing Executive | `marketing@ramaiahcare.com` | `AdRamaiah@2026` |
+| Marketing Executive | `supervisor@ramaiahcare.com` | `MrRamaiah@2026` |
+| CC Agent | `ccagent@ramaiahcare.com` | `CcRamaiah@2026` |
+| Platform Admin | `dev@fortytwo.dev` | `tim@apple.dev` |
+
+### Ozonetel
+
+| Field | Value |
+|---|---|
+| API Key | `KK8110e6c3de02527f7243ffaa924fa93e` |
+| Username | `global_healthx` |
+| Ramaiah Campaign | `Inbound_918041763400` |
+| Ramaiah Agent | `ramaiahadmin` / ext `524435` |
+
+---
+
+## Local Development
+
+### Frontend (Vite dev server)
+
+```bash
+cd helix-engage
+npm run dev          # http://localhost:5173
+npx tsc --noEmit     # Type check
+npm run build        # Production build
+```
+
+The `.env.local` controls which sidecar the frontend talks to:
+```bash
+# Remote (default — uses EC2 backend)
+VITE_API_URL=https://ramaiah.engage.healix360.net
+
+# Local sidecar
+# VITE_API_URL=http://localhost:4100
+```
+
+### Sidecar (NestJS dev server)
+
+```bash
+cd helix-engage-server
+npm run start:dev    # http://localhost:4100 (watch mode)
+npm run build        # Build only
+```
+
+Sidecar `.env` must have:
+```bash
+PLATFORM_GRAPHQL_URL=https://ramaiah.app.healix360.net/graphql
+PLATFORM_API_KEY=<Ramaiah workspace API key>
+PLATFORM_WORKSPACE_SUBDOMAIN=ramaiah
+REDIS_URL=redis://localhost:6379
+```
+
+### Pre-deploy checklist
+
+1. `npx tsc --noEmit` — passes (frontend)
+2. `npm run build` — succeeds (sidecar)
+3. Test the changed feature locally
+4. Check `package.json` for new dependencies → decides quick vs full deploy
+
+---
+
+## Deployment
+
+### Frontend
+
+```bash
+cd helix-engage && npm run build
+
+rsync -avz -e "ssh -i /tmp/ramaiah-ec2-key -o StrictHostKeyChecking=no" \
+  dist/ ubuntu@13.234.31.194:/opt/fortytwo/helix-engage-frontend/
+
+ssh -i /tmp/ramaiah-ec2-key ubuntu@13.234.31.194 \
+  "cd /opt/fortytwo && sudo docker compose restart caddy"
+```
+
+### Sidecar (quick — code only, no new dependencies)
+
+```bash
+cd helix-engage-server
+
+aws ecr get-login-password --region ap-south-1 | \
+  docker login --username AWS --password-stdin 043728036361.dkr.ecr.ap-south-1.amazonaws.com
+
+docker buildx build --platform linux/amd64 \
+  -t 043728036361.dkr.ecr.ap-south-1.amazonaws.com/fortytwo-eap/helix-engage-sidecar:alpha \
+  --push .
+
+ssh -i /tmp/ramaiah-ec2-key ubuntu@13.234.31.194 \
+  "cd /opt/fortytwo && sudo docker compose pull sidecar-ramaiah sidecar-global && sudo docker compose up -d sidecar-ramaiah sidecar-global"
+```
+
+### How to decide
+
+```
+Did package.json change?
+  ├── YES → ECR build + push + pull (above)
+  └── NO  → Same steps (ECR is the only deploy path for EC2)
+```
+
+---
+
+## Post-Deploy: E2E Smoke Tests
+
+```bash
+cd helix-engage
+npx playwright test
+```
+
+27 tests covering login, all CC Agent pages, all Supervisor pages, and sign-out.
+The last test completes sign-out so the agent session is released for the next run.
+
+---
+
+## Checking Logs
+
+```bash
+# Ramaiah sidecar
+ssh -i /tmp/ramaiah-ec2-key ubuntu@13.234.31.194 \
+  "docker logs ramaiah-prod-sidecar-ramaiah-1 --tail 30 2>&1"
+
+# Follow live
+ssh -i /tmp/ramaiah-ec2-key ubuntu@13.234.31.194 \
+  "docker logs ramaiah-prod-sidecar-ramaiah-1 -f --tail 10 2>&1"
+
+# Filter errors
+ssh -i /tmp/ramaiah-ec2-key ubuntu@13.234.31.194 \
+  "docker logs ramaiah-prod-sidecar-ramaiah-1 --tail 100 2>&1" | grep -i "error\|fail"
+
+# Telephony dispatcher
+ssh -i /tmp/ramaiah-ec2-key ubuntu@13.234.31.194 \
+  "docker logs ramaiah-prod-telephony-1 --tail 30 2>&1"
+
+# Caddy
+ssh -i /tmp/ramaiah-ec2-key ubuntu@13.234.31.194 \
+  "docker logs ramaiah-prod-caddy-1 --tail 20 2>&1"
+
+# Platform server
+ssh -i /tmp/ramaiah-ec2-key ubuntu@13.234.31.194 \
+  "docker logs ramaiah-prod-server-1 --tail 30 2>&1"
+
+# All container status
+ssh -i /tmp/ramaiah-ec2-key ubuntu@13.234.31.194 \
+  "docker ps --format 'table {{.Names}}\t{{.Status}}'"
+```
+
+### Healthy startup
+
+Look for these in sidecar logs:
+```
+[NestApplication] Nest application successfully started
+Helix Engage Server running on port 4100
+[SessionService] Redis connected
+```
+
+### Common failure patterns
+
+| Log pattern | Meaning | Fix |
+|---|---|---|
+| `Cannot find module 'xxx'` | Missing npm dependency | Rebuild ECR image |
+| `UndefinedModuleException` | Circular dependency | Fix code, redeploy |
+| `ECONNREFUSED redis:6379` | Redis not ready | `docker compose up -d redis-ramaiah` |
+| `Forbidden resource` | Platform permission issue | Check user roles |
+| `429 Too Many Requests` | Ozonetel rate limit | Wait, reduce polling |
+
+---
+
+## Redis Operations
+
+```bash
+SSH="ssh -i /tmp/ramaiah-ec2-key -o StrictHostKeyChecking=no ubuntu@13.234.31.194"
+REDIS="docker exec ramaiah-prod-redis-ramaiah-1 redis-cli"
+
+# Clear agent session lock (fixes "already logged in from another device")
+$SSH "$REDIS DEL agent:session:ramaiahadmin"
+
+# List all keys
+$SSH "$REDIS KEYS '*'"
+
+# Clear caller cache (stale patient names)
+$SSH "$REDIS --scan --pattern 'caller:*' | xargs -r docker exec -i ramaiah-prod-redis-ramaiah-1 redis-cli DEL"
+
+# Clear masterdata cache (departments/doctors/clinics/slots)
+$SSH "$REDIS --scan --pattern 'masterdata:*' | xargs -r docker exec -i ramaiah-prod-redis-ramaiah-1 redis-cli DEL"
+
+# Clear recording analysis cache
+$SSH "$REDIS --scan --pattern 'call:analysis:*' | xargs -r docker exec -i ramaiah-prod-redis-ramaiah-1 redis-cli DEL"
+
+# Clear agent name cache
+$SSH "$REDIS --scan --pattern 'agent:name:*' | xargs -r docker exec -i ramaiah-prod-redis-ramaiah-1 redis-cli DEL"
+
+# Nuclear: flush all sidecar Redis
+$SSH "$REDIS FLUSHDB"
+```
+
+---
+
+## Database Access
+
+```bash
+ssh -i /tmp/ramaiah-ec2-key ubuntu@13.234.31.194 \
+  "docker exec -it ramaiah-prod-db-1 psql -U fortytwo -d fortytwo_eap"
+```
+
+### Useful queries
+
+```sql
+-- List workspace schemas
+SELECT schema_name FROM information_schema.schemata WHERE schema_name LIKE 'workspace_%';
+
+-- List custom entities
+SELECT "nameSingular", "isCustom" FROM core."objectMetadata" ORDER BY "nameSingular";
+
+-- List users
+SELECT u.email, u."firstName", u."lastName", uw.id as workspace_id
+FROM core."user" u
+JOIN core."userWorkspace" uw ON uw."userId" = u.id;
+
+-- List roles
+SELECT r.label, rt."userWorkspaceId"
+FROM core."roleTarget" rt
+JOIN core."role" r ON r.id = rt."roleId";
+```
+
+---
+
+## Troubleshooting
+
+### "Already logged in from another device"
+
+Single-session enforcement per Ozonetel agent. Clear the lock:
+```bash
+ssh -i /tmp/ramaiah-ec2-key ubuntu@13.234.31.194 \
+  "docker exec ramaiah-prod-redis-ramaiah-1 redis-cli DEL agent:session:ramaiahadmin"
+```
+
+### Agent stuck in ACW / Wrapping Up
+
+```bash
+curl -X POST https://ramaiah.engage.healix360.net/api/maint/force-ready \
+  -H "Content-Type: application/json" \
+  -d '{"agentId": "ramaiahadmin"}'
+```
+
+### Telephony events not routing
+
+```bash
+# Check dispatcher logs
+ssh -i /tmp/ramaiah-ec2-key ubuntu@13.234.31.194 \
+  "docker logs ramaiah-prod-telephony-1 --tail 30 2>&1"
+
+# Check service discovery registry
+ssh -i /tmp/ramaiah-ec2-key ubuntu@13.234.31.194 \
+  "docker exec ramaiah-prod-redis-telephony-1 redis-cli KEYS '*'"
+```
+
+### Theme/branding reset after Redis flush
+
+```bash
+curl -X PUT https://ramaiah.engage.healix360.net/api/config/theme \
+  -H "Content-Type: application/json" \
+  -d '{"defaults": {"brandName": "Helix Engage", "hospitalName": "Ramaiah Hospitals"}}'
+```
+
+---
+
+## Rollback
+
+### Frontend
+
+Checkout previous commit → `npm run build` → rsync to EC2.
+
+### Sidecar
+
+Checkout previous commit → ECR build + push → pull on EC2.
+
+For immediate rollback, re-tag a known-good ECR image as `:alpha` and pull.
+
+---
+
+## Git Repositories
+
+| Repo | Azure DevOps | Branch |
+|---|---|---|
+| Frontend | `helix-engage` in Patient Engagement Platform | `feature/omnichannel-widget` |
+| Sidecar | `helix-engage-server` in Patient Engagement Platform | `master` |
+| SDK App | `FortyTwoApps/helix-engage/` (monorepo) | `dev` |
+| Telephony | `helix-engage-telephony` in Patient Engagement Platform | `master` |
+
+---
+
+## ECR Details
+
+| Detail | Value |
+|---|---|
+| Registry | `043728036361.dkr.ecr.ap-south-1.amazonaws.com` |
+| Sidecar repo | `fortytwo-eap/helix-engage-sidecar` |
+| Tag | `alpha` |
+| Region | `ap-south-1` (Mumbai) |

docs/generate-pptx.cjs

@@ -0,0 +1,680 @@
+/**
+ * Helix Engage — Weekly Update (Mar 18–25, 2026)
+ * Light Mode PowerPoint Generator via PptxGenJS
+ */
+const PptxGenJS = require("pptxgenjs");
+
+// ── Design Tokens (Light Mode) ─────────────────────────────────────────
+const C = {
+  bg:         "FFFFFF",
+  bgSubtle:   "F8FAFC",
+  bgCard:     "F1F5F9",
+  bgCardAlt:  "E2E8F0",
+  text:       "1E293B",
+  textSec:    "475569",
+  textMuted:  "94A3B8",
+  accent1:    "0EA5E9",  // Sky blue (telephony)
+  accent2:    "8B5CF6",  // Violet (server/backend)
+  accent3:    "10B981",  // Emerald (UX)
+  accent4:    "F59E0B",  // Amber (features)
+  accent5:    "EF4444",  // Rose (ops)
+  accent6:    "6366F1",  // Indigo (timeline)
+  white:      "FFFFFF",
+  border:     "CBD5E1",
+};
+
+const FONT = {
+  heading: "Arial",
+  body:    "Arial",
+};
+
+// ── Helpers ──────────────────────────────────────────────────────────────
+function addSlideNumber(slide, num, total) {
+  slide.addText(`${num} / ${total}`, {
+    x: 8.8, y: 5.2, w: 1.2, h: 0.3,
+    fontSize: 8, color: C.textMuted,
+    fontFace: FONT.body,
+    align: "right",
+  });
+}
+
+function addAccentBar(slide, color) {
+  slide.addShape("rect", {
+    x: 0, y: 0, w: 10, h: 0.06,
+    fill: { color },
+  });
+}
+
+function addLabel(slide, text, color, x, y) {
+  slide.addShape("roundRect", {
+    x, y, w: text.length * 0.09 + 0.4, h: 0.3,
+    fill: { color, transparency: 88 },
+    rectRadius: 0.15,
+  });
+  slide.addText(text.toUpperCase(), {
+    x, y, w: text.length * 0.09 + 0.4, h: 0.3,
+    fontSize: 7, fontFace: FONT.heading, bold: true,
+    color, align: "center", valign: "middle",
+    letterSpacing: 2,
+  });
+}
+
+function addCard(slide, opts) {
+  const { x, y, w, h, title, titleColor, items, badge } = opts;
+  // Card background
+  slide.addShape("roundRect", {
+    x, y, w, h,
+    fill: { color: C.bgCard },
+    line: { color: C.border, width: 0.5 },
+    rectRadius: 0.1,
+  });
+  // Title
+  const titleText = badge
+    ? [{ text: title + "  ", options: { bold: true, color: titleColor, fontSize: 11 } },
+       { text: badge, options: { bold: true, color: C.white, fontSize: 7, highlight: titleColor } }]
+    : title;
+  slide.addText(titleText, {
+    x: x + 0.2, y: y + 0.08, w: w - 0.4, h: 0.35,
+    fontSize: 11, fontFace: FONT.heading, bold: true,
+    color: titleColor,
+  });
+  // Items as bullet list
+  if (items && items.length > 0) {
+    slide.addText(
+      items.map(item => ({
+        text: item,
+        options: {
+          fontSize: 8.5, fontFace: FONT.body, color: C.textSec,
+          bullet: { type: "bullet", style: "arabicPeriod" },
+          paraSpaceAfter: 2,
+          breakLine: true,
+        },
+      })),
+      {
+        x: x + 0.2, y: y + 0.4, w: w - 0.4, h: h - 0.5,
+        valign: "top",
+        bullet: { type: "bullet" },
+        lineSpacingMultiple: 1.1,
+      }
+    );
+  }
+}
+
+// ── Build Presentation ──────────────────────────────────────────────────
+async function build() {
+  const pptx = new PptxGenJS();
+  pptx.layout = "LAYOUT_16x9";
+  pptx.author = "Satya Suman Sari";
+  pptx.company = "FortyTwo Platform";
+  pptx.title = "Helix Engage — Weekly Update (Mar 18–25, 2026)";
+  pptx.subject = "Engineering Progress Report";
+
+  const TOTAL = 9;
+
+  // ═══════════════════════════════════════════════════════════════════════
+  // SLIDE 1 — Title
+  // ═══════════════════════════════════════════════════════════════════════
+  {
+    const slide = pptx.addSlide();
+    slide.background = { color: C.bg };
+
+    // Accent bar top
+    addAccentBar(slide, C.accent1);
+
+    // Decorative side stripe
+    slide.addShape("rect", {
+      x: 0, y: 0, w: 0.12, h: 5.63,
+      fill: { color: C.accent1 },
+    });
+
+    // Label
+    addLabel(slide, "Weekly Engineering Update", C.accent1, 3.0, 1.2);
+
+    // Title
+    slide.addText("Helix Engage", {
+      x: 1.0, y: 1.8, w: 8, h: 1.2,
+      fontSize: 44, fontFace: FONT.heading, bold: true,
+      color: C.accent1, align: "center",
+    });
+
+    // Subtitle
+    slide.addText("Contact Center CRM  ·  Real-time Telephony  ·  AI Copilot", {
+      x: 1.5, y: 2.9, w: 7, h: 0.5,
+      fontSize: 14, fontFace: FONT.body,
+      color: C.textSec, align: "center",
+    });
+
+    // Date
+    slide.addText("March 18 – 25, 2026", {
+      x: 3, y: 3.6, w: 4, h: 0.4,
+      fontSize: 12, fontFace: FONT.heading, bold: true,
+      color: C.textMuted, align: "center",
+      letterSpacing: 3,
+    });
+
+    // Bottom decoration
+    slide.addShape("rect", {
+      x: 3.5, y: 4.2, w: 3, h: 0.04,
+      fill: { color: C.accent2 },
+    });
+
+    // Author
+    slide.addText("Satya Suman Sari  ·  FortyTwo Platform", {
+      x: 2, y: 4.5, w: 6, h: 0.35,
+      fontSize: 9, fontFace: FONT.body,
+      color: C.textMuted, align: "center",
+    });
+
+    addSlideNumber(slide, 1, TOTAL);
+  }
+
+  // ═══════════════════════════════════════════════════════════════════════
+  // SLIDE 2 — At a Glance
+  // ═══════════════════════════════════════════════════════════════════════
+  {
+    const slide = pptx.addSlide();
+    slide.background = { color: C.bg };
+    addAccentBar(slide, C.accent2);
+
+    addLabel(slide, "At a Glance", C.accent2, 0.5, 0.3);
+
+    slide.addText("Week in Numbers", {
+      x: 0.5, y: 0.65, w: 5, h: 0.5,
+      fontSize: 24, fontFace: FONT.heading, bold: true,
+      color: C.text,
+    });
+
+    // Stat cards
+    const stats = [
+      { value: "78",  label: "Total Commits",    color: C.accent1 },
+      { value: "3",   label: "Repositories",      color: C.accent2 },
+      { value: "8",   label: "Days Active",        color: C.accent3 },
+      { value: "50",  label: "Frontend Commits",   color: C.accent4 },
+    ];
+
+    stats.forEach((s, i) => {
+      const x = 0.5 + i * 2.35;
+      // Card bg
+      slide.addShape("roundRect", {
+        x, y: 1.3, w: 2.1, h: 1.7,
+        fill: { color: C.bgCard },
+        line: { color: C.border, width: 0.5 },
+        rectRadius: 0.12,
+      });
+      // Accent top line
+      slide.addShape("rect", {
+        x: x + 0.2, y: 1.35, w: 1.7, h: 0.035,
+        fill: { color: s.color },
+      });
+      // Number
+      slide.addText(s.value, {
+        x, y: 1.5, w: 2.1, h: 0.9,
+        fontSize: 36, fontFace: FONT.heading, bold: true,
+        color: s.color, align: "center", valign: "middle",
+      });
+      // Label
+      slide.addText(s.label, {
+        x, y: 2.4, w: 2.1, h: 0.4,
+        fontSize: 9, fontFace: FONT.body,
+        color: C.textSec, align: "center",
+      });
+    });
+
+    // Repo breakdown pills
+    const repos = [
+      { name: "helix-engage", count: "50", clr: C.accent1 },
+      { name: "helix-engage-server", count: "27", clr: C.accent2 },
+      { name: "FortyTwoApps/SDK", count: "1", clr: C.accent3 },
+    ];
+    repos.forEach((r, i) => {
+      const x = 1.5 + i * 2.8;
+      slide.addShape("roundRect", {
+        x, y: 3.4, w: 2.5, h: 0.4,
+        fill: { color: C.bgCard },
+        line: { color: r.clr, width: 1 },
+        rectRadius: 0.2,
+      });
+      slide.addText(`${r.name}  ${r.count}`, {
+        x, y: 3.4, w: 2.5, h: 0.4,
+        fontSize: 9, fontFace: FONT.heading, bold: true,
+        color: r.clr, align: "center", valign: "middle",
+      });
+    });
+
+    // Summary text
+    slide.addText("3 repos ·  7 working days ·  78 commits shipped to production", {
+      x: 1, y: 4.2, w: 8, h: 0.35,
+      fontSize: 10, fontFace: FONT.body, italic: true,
+      color: C.textMuted, align: "center",
+    });
+
+    addSlideNumber(slide, 2, TOTAL);
+  }
+
+  // ═══════════════════════════════════════════════════════════════════════
+  // SLIDE 3 — Telephony & SIP
+  // ═══════════════════════════════════════════════════════════════════════
+  {
+    const slide = pptx.addSlide();
+    slide.background = { color: C.bg };
+    addAccentBar(slide, C.accent1);
+
+    addLabel(slide, "Core Infrastructure", C.accent1, 0.5, 0.3);
+
+    slide.addText([
+      { text: "☎  ", options: { fontSize: 22 } },
+      { text: "Telephony & SIP Overhaul", options: { fontSize: 22, bold: true, color: C.text } },
+    ], { x: 0.5, y: 0.65, w: 9, h: 0.5, fontFace: FONT.heading });
+
+    addCard(slide, {
+      x: 0.3, y: 1.35, w: 4.5, h: 2.0,
+      title: "Outbound Calling", titleColor: C.accent1, badge: "Frontend",
+      items: [
+        "Direct SIP call from browser — no Kookoo bridge",
+        "Immediate call card UI with auto-answer SIP bridge",
+        "End Call label fix, force active state after auto-answer",
+        "Reset outboundPending on call end",
+      ],
+    });
+
+    addCard(slide, {
+      x: 5.2, y: 1.35, w: 4.5, h: 2.0,
+      title: "Ozonetel Integration", titleColor: C.accent2, badge: "Server",
+      items: [
+        "Ozonetel V3 dial endpoint + webhook handler",
+        "Set Disposition API for ACW release",
+        "Force Ready endpoint for agent state mgmt",
+        "Token: 10-min cache, 401 invalidation, refresh on login",
+      ],
+    });
+
+    addCard(slide, {
+      x: 0.3, y: 3.55, w: 4.5, h: 1.8,
+      title: "SIP & Agent State", titleColor: C.accent1, badge: "Frontend",
+      items: [
+        "SIP driven by Agent entity with token refresh",
+        "Centralised outbound dial into useSip().dialOutbound()",
+        "UCID tracking from SIP headers for disposition",
+        "Network indicator for connection health",
+      ],
+    });
+
+    addCard(slide, {
+      x: 5.2, y: 3.55, w: 4.5, h: 1.8,
+      title: "Multi-Agent & Sessions", titleColor: C.accent2, badge: "Server",
+      items: [
+        "Multi-agent SIP with Redis session lockout",
+        "Strict duplicate login — one device per agent",
+        "Session lock stores IP + timestamp for debugging",
+        "SSE agent state broadcast for supervisor view",
+      ],
+    });
+
+    addSlideNumber(slide, 3, TOTAL);
+  }
+
+  // ═══════════════════════════════════════════════════════════════════════
+  // SLIDE 4 — Call Desk & Agent UX
+  // ═══════════════════════════════════════════════════════════════════════
+  {
+    const slide = pptx.addSlide();
+    slide.background = { color: C.bg };
+    addAccentBar(slide, C.accent3);
+
+    addLabel(slide, "User Experience", C.accent3, 0.5, 0.3);
+
+    slide.addText([
+      { text: "🖥  ", options: { fontSize: 22 } },
+      { text: "Call Desk & Agent UX", options: { fontSize: 22, bold: true, color: C.text } },
+    ], { x: 0.5, y: 0.65, w: 9, h: 0.5, fontFace: FONT.heading });
+
+    addCard(slide, {
+      x: 0.3, y: 1.35, w: 3.05, h: 2.6,
+      title: "Call Desk Redesign", titleColor: C.accent3,
+      items: [
+        "2-panel layout with collapsible sidebar & inline AI",
+        "Collapsible context panel, worklist/calls tabs",
+        "Pinned header & chat input, numpad dialler",
+        "Ringtone support for incoming calls",
+      ],
+    });
+
+    addCard(slide, {
+      x: 3.55, y: 1.35, w: 3.05, h: 2.6,
+      title: "Post-Call Workflow", titleColor: C.accent3,
+      items: [
+        "Disposition → appointment booking → follow-up",
+        "Disposition returns straight to worklist",
+        "Send disposition to sidecar with UCID for ACW",
+        "Enquiry in post-call, appointment skip button",
+      ],
+    });
+
+    addCard(slide, {
+      x: 6.8, y: 1.35, w: 2.9, h: 2.6,
+      title: "UI Polish", titleColor: C.accent3,
+      items: [
+        "FontAwesome Pro Duotone icon migration",
+        "Tooltips, sticky headers, roles, search",
+        "Fix React error #520 in prod tables",
+        "AI scroll containment, brand tokens refresh",
+      ],
+    });
+
+    addSlideNumber(slide, 4, TOTAL);
+  }
+
+  // ═══════════════════════════════════════════════════════════════════════
+  // SLIDE 5 — Features Shipped
+  // ═══════════════════════════════════════════════════════════════════════
+  {
+    const slide = pptx.addSlide();
+    slide.background = { color: C.bg };
+    addAccentBar(slide, C.accent4);
+
+    addLabel(slide, "Features Shipped", C.accent4, 0.5, 0.3);
+
+    slide.addText([
+      { text: "🚀  ", options: { fontSize: 22 } },
+      { text: "Major Features", options: { fontSize: 22, bold: true, color: C.text } },
+    ], { x: 0.5, y: 0.65, w: 9, h: 0.5, fontFace: FONT.heading });
+
+    addCard(slide, {
+      x: 0.3, y: 1.35, w: 4.5, h: 2.0,
+      title: "Supervisor Module", titleColor: C.accent4,
+      items: [
+        "Team performance analytics page",
+        "Live monitor with active calls visibility",
+        "Master data management pages",
+        "Server: team perf + active calls endpoints",
+      ],
+    });
+
+    addCard(slide, {
+      x: 5.2, y: 1.35, w: 4.5, h: 2.0,
+      title: "Missed Call Queue (Phase 2)", titleColor: C.accent4,
+      items: [
+        "Missed call queue ingestion & worklist",
+        "Auto-assignment engine for agents",
+        "Login redesign with role-based routing",
+        "Lead lookup for missed callers",
+      ],
+    });
+
+    addCard(slide, {
+      x: 0.3, y: 3.55, w: 4.5, h: 1.8,
+      title: "Agent Features (Phase 1)", titleColor: C.accent4,
+      items: [
+        "Agent status toggle (Ready / Not Ready / Break)",
+        "Global search across patients, leads, calls",
+        "Enquiry form for new patient intake",
+        "My Performance page + logout modal",
+      ],
+    });
+
+    addCard(slide, {
+      x: 5.2, y: 3.55, w: 4.5, h: 1.8,
+      title: "Recording Analysis", titleColor: C.accent4,
+      items: [
+        "Deepgram diarization + AI insights",
+        "Redis caching layer for analysis results",
+        "Full-stack: frontend player + server module",
+      ],
+    });
+
+    addSlideNumber(slide, 5, TOTAL);
+  }
+
+  // ═══════════════════════════════════════════════════════════════════════
+  // SLIDE 6 — Backend & Data
+  // ═══════════════════════════════════════════════════════════════════════
+  {
+    const slide = pptx.addSlide();
+    slide.background = { color: C.bg };
+    addAccentBar(slide, C.accent2);
+
+    addLabel(slide, "Backend & Data", C.accent2, 0.5, 0.3);
+
+    slide.addText([
+      { text: "⚙  ", options: { fontSize: 22 } },
+      { text: "Backend & Data Layer", options: { fontSize: 22, bold: true, color: C.text } },
+    ], { x: 0.5, y: 0.65, w: 9, h: 0.5, fontFace: FONT.heading });
+
+    addCard(slide, {
+      x: 0.3, y: 1.35, w: 4.5, h: 2.0,
+      title: "Platform Data Wiring", titleColor: C.accent2,
+      items: [
+        "Migrated frontend to Jotai + Vercel AI SDK",
+        "Corrected all 7 GraphQL queries (fields, LINKS/PHONES)",
+        "Webhook handler for Ozonetel call records",
+        "Complete seeder: 5 doctors, appointments linked",
+      ],
+    });
+
+    addCard(slide, {
+      x: 5.2, y: 1.35, w: 4.5, h: 2.0,
+      title: "Server Endpoints", titleColor: C.accent2,
+      items: [
+        "Call control, recording, CDR, missed calls, live assist",
+        "Agent summary, AHT, performance aggregation",
+        "Token refresh endpoint for auto-renewal",
+        "Search module with full-text capabilities",
+      ],
+    });
+
+    addCard(slide, {
+      x: 0.3, y: 3.55, w: 4.5, h: 1.8,
+      title: "Data Pages Built", titleColor: C.accent2,
+      items: [
+        "Worklist table, call history, patients, dashboard",
+        "Reports, team dashboard, campaigns, settings",
+        "Agent detail page, campaign edit slideout",
+        "Appointments page with data refresh on login",
+      ],
+    });
+
+    addCard(slide, {
+      x: 5.2, y: 3.55, w: 4.5, h: 1.8,
+      title: "SDK App", titleColor: C.accent3, badge: "FortyTwoApps",
+      items: [
+        "Helix Engage SDK app entity definitions",
+        "Call center CRM object model for platform",
+        "Foundation for platform-native data integration",
+      ],
+    });
+
+    addSlideNumber(slide, 6, TOTAL);
+  }
+
+  // ═══════════════════════════════════════════════════════════════════════
+  // SLIDE 7 — Deployment & Ops
+  // ═══════════════════════════════════════════════════════════════════════
+  {
+    const slide = pptx.addSlide();
+    slide.background = { color: C.bg };
+    addAccentBar(slide, C.accent5);
+
+    addLabel(slide, "Operations", C.accent5, 0.5, 0.3);
+
+    slide.addText([
+      { text: "🛠  ", options: { fontSize: 22 } },
+      { text: "Deployment & DevOps", options: { fontSize: 22, bold: true, color: C.text } },
+    ], { x: 0.5, y: 0.65, w: 9, h: 0.5, fontFace: FONT.heading });
+
+    addCard(slide, {
+      x: 0.3, y: 1.35, w: 3.05, h: 2.2,
+      title: "Deployment", titleColor: C.accent5,
+      items: [
+        "Deployed to Hostinger VPS with Docker",
+        "Switched to global_healthx Ozonetel account",
+        "Dockerfile for server-side containerization",
+      ],
+    });
+
+    addCard(slide, {
+      x: 3.55, y: 1.35, w: 3.05, h: 2.2,
+      title: "AI & Testing", titleColor: C.accent5,
+      items: [
+        "Migrated AI to Vercel AI SDK + OpenAI provider",
+        "AI flow test script — validates full pipeline",
+        "Live call assist integration",
+      ],
+    });
+
+    addCard(slide, {
+      x: 6.8, y: 1.35, w: 2.9, h: 2.2,
+      title: "Documentation", titleColor: C.accent5,
+      items: [
+        "Team onboarding README with arch guide",
+        "Supervisor module spec + plan",
+        "Multi-agent spec + plan",
+        "Next session plans in commits",
+      ],
+    });
+
+    addSlideNumber(slide, 7, TOTAL);
+  }
+
+  // ═══════════════════════════════════════════════════════════════════════
+  // SLIDE 8 — Timeline
+  // ═══════════════════════════════════════════════════════════════════════
+  {
+    const slide = pptx.addSlide();
+    slide.background = { color: C.bg };
+    addAccentBar(slide, C.accent6);
+
+    addLabel(slide, "Day by Day", C.accent6, 0.5, 0.3);
+
+    slide.addText([
+      { text: "📅  ", options: { fontSize: 22 } },
+      { text: "Development Timeline", options: { fontSize: 22, bold: true, color: C.text } },
+    ], { x: 0.5, y: 0.65, w: 9, h: 0.5, fontFace: FONT.heading });
+
+    const timeline = [
+      { date: "MAR 18 (Tue)", title: "Foundation Day", desc: "Call desk redesign, Jotai + AI SDK migration, seeder, AI flow test, VPS deploy" },
+      { date: "MAR 19 (Wed)", title: "Data Layer Sprint", desc: "All data pages, post-call workflow, GraphQL fixes, Kookoo IVR, outbound UI" },
+      { date: "MAR 20 (Thu)", title: "Telephony Breakthrough", desc: "Direct SIP replacing Kookoo, UCID tracking, Force Ready, Set Disposition" },
+      { date: "MAR 21 (Fri)", title: "Agent Experience", desc: "Phase 1: status toggle, search, enquiry form, My Performance, FA icons, AHT" },
+      { date: "MAR 23 (Sun)", title: "Scale & Reliability", desc: "Phase 2: missed call queue, auto-assign, Redis lockout, Patient 360, SDK defs" },
+      { date: "MAR 24 (Mon)", title: "Supervisor Module", desc: "Team perf, live monitor, master data, SSE, UUID fix, maintenance, QA sweep" },
+      { date: "MAR 25 (Tue)", title: "Intelligence Layer", desc: "Deepgram diarization, AI insights, SIP via Agent entity, token refresh, network" },
+    ];
+
+    // Vertical line
+    slide.addShape("rect", {
+      x: 1.4, y: 1.3, w: 0.025, h: 4.0,
+      fill: { color: C.accent6, transparency: 60 },
+    });
+
+    timeline.forEach((entry, i) => {
+      const y = 1.3 + i * 0.56;
+
+      // Dot
+      slide.addShape("ellipse", {
+        x: 1.32, y: y + 0.08, w: 0.18, h: 0.18,
+        fill: { color: C.accent6 },
+        line: { color: C.bg, width: 2 },
+      });
+
+      // Date
+      slide.addText(entry.date, {
+        x: 1.7, y: y, w: 1.6, h: 0.22,
+        fontSize: 7, fontFace: FONT.heading, bold: true,
+        color: C.accent6,
+      });
+
+      // Title
+      slide.addText(entry.title, {
+        x: 3.3, y: y, w: 2.0, h: 0.22,
+        fontSize: 9, fontFace: FONT.heading, bold: true,
+        color: C.text,
+      });
+
+      // Description
+      slide.addText(entry.desc, {
+        x: 5.3, y: y, w: 4.2, h: 0.45,
+        fontSize: 8, fontFace: FONT.body,
+        color: C.textSec,
+        valign: "top",
+      });
+    });
+
+    addSlideNumber(slide, 8, TOTAL);
+  }
+
+  // ═══════════════════════════════════════════════════════════════════════
+  // SLIDE 9 — Closing
+  // ═══════════════════════════════════════════════════════════════════════
+  {
+    const slide = pptx.addSlide();
+    slide.background = { color: C.bg };
+    addAccentBar(slide, C.accent3);
+
+    // Big headline
+    slide.addText("78 commits.  8 days.  Ship mode.", {
+      x: 0.5, y: 1.4, w: 9, h: 0.8,
+      fontSize: 32, fontFace: FONT.heading, bold: true,
+      color: C.accent3, align: "center",
+    });
+
+    // Ship emoji
+    slide.addText("🚢", {
+      x: 4.2, y: 2.3, w: 1.6, h: 0.6,
+      fontSize: 28, align: "center",
+    });
+
+    // Description
+    slide.addText(
+      "From browser-native SIP calling to AI-powered recording analysis — Helix Engage is becoming a production contact center platform.",
+      {
+        x: 1.5, y: 3.0, w: 7, h: 0.6,
+        fontSize: 11, fontFace: FONT.body,
+        color: C.textSec, align: "center",
+        lineSpacingMultiple: 1.3,
+      }
+    );
+
+    // Achievement pills
+    const achievements = [
+      { text: "SIP Calling  ✓", color: C.accent1 },
+      { text: "Multi-Agent  ✓", color: C.accent2 },
+      { text: "Supervisor  ✓", color: C.accent3 },
+      { text: "AI Copilot  ✓", color: C.accent4 },
+      { text: "Recording Analysis  ✓", color: C.accent5 },
+    ];
+
+    achievements.forEach((a, i) => {
+      const x = 0.8 + i * 1.8;
+      slide.addShape("roundRect", {
+        x, y: 3.9, w: 1.6, h: 0.35,
+        fill: { color: C.bgCard },
+        line: { color: a.color, width: 1 },
+        rectRadius: 0.17,
+      });
+      slide.addText(a.text, {
+        x, y: 3.9, w: 1.6, h: 0.35,
+        fontSize: 8, fontFace: FONT.heading, bold: true,
+        color: a.color, align: "center", valign: "middle",
+      });
+    });
+
+    // Author
+    slide.addText("Satya Suman Sari  ·  FortyTwo Platform", {
+      x: 2, y: 4.7, w: 6, h: 0.3,
+      fontSize: 9, fontFace: FONT.body,
+      color: C.textMuted, align: "center",
+    });
+
+    addSlideNumber(slide, 9, TOTAL);
+  }
+
+  // ── Save ──────────────────────────────────────────────────────────────
+  const outPath = "weekly-update-mar18-25.pptx";
+  await pptx.writeFile({ fileName: outPath });
+  console.log(`✅ Presentation saved: ${outPath}`);
+}
+
+build().catch(err => {
+  console.error("❌ Failed:", err.message);
+  process.exit(1);
+});

docs/generate-pptx.js

@@ -0,0 +1,680 @@
+/**
+ * Helix Engage — Weekly Update (Mar 18–25, 2026)
+ * Light Mode PowerPoint Generator via PptxGenJS
+ */
+const PptxGenJS = require("pptxgenjs");
+
+// ── Design Tokens (Light Mode) ─────────────────────────────────────────
+const C = {
+  bg:         "FFFFFF",
+  bgSubtle:   "F8FAFC",
+  bgCard:     "F1F5F9",
+  bgCardAlt:  "E2E8F0",
+  text:       "1E293B",
+  textSec:    "475569",
+  textMuted:  "94A3B8",
+  accent1:    "0EA5E9",  // Sky blue (telephony)
+  accent2:    "8B5CF6",  // Violet (server/backend)
+  accent3:    "10B981",  // Emerald (UX)
+  accent4:    "F59E0B",  // Amber (features)
+  accent5:    "EF4444",  // Rose (ops)
+  accent6:    "6366F1",  // Indigo (timeline)
+  white:      "FFFFFF",
+  border:     "CBD5E1",
+};
+
+const FONT = {
+  heading: "Arial",
+  body:    "Arial",
+};
+
+// ── Helpers ──────────────────────────────────────────────────────────────
+function addSlideNumber(slide, num, total) {
+  slide.addText(`${num} / ${total}`, {
+    x: 8.8, y: 5.2, w: 1.2, h: 0.3,
+    fontSize: 8, color: C.textMuted,
+    fontFace: FONT.body,
+    align: "right",
+  });
+}
+
+function addAccentBar(slide, color) {
+  slide.addShape("rect", {
+    x: 0, y: 0, w: 10, h: 0.06,
+    fill: { color },
+  });
+}
+
+function addLabel(slide, text, color, x, y) {
+  slide.addShape("roundRect", {
+    x, y, w: text.length * 0.09 + 0.4, h: 0.3,
+    fill: { color, transparency: 88 },
+    rectRadius: 0.15,
+  });
+  slide.addText(text.toUpperCase(), {
+    x, y, w: text.length * 0.09 + 0.4, h: 0.3,
+    fontSize: 7, fontFace: FONT.heading, bold: true,
+    color, align: "center", valign: "middle",
+    letterSpacing: 2,
+  });
+}
+
+function addCard(slide, opts) {
+  const { x, y, w, h, title, titleColor, items, badge } = opts;
+  // Card background
+  slide.addShape("roundRect", {
+    x, y, w, h,
+    fill: { color: C.bgCard },
+    line: { color: C.border, width: 0.5 },
+    rectRadius: 0.1,
+  });
+  // Title
+  const titleText = badge
+    ? [{ text: title + "  ", options: { bold: true, color: titleColor, fontSize: 11 } },
+       { text: badge, options: { bold: true, color: C.white, fontSize: 7, highlight: titleColor } }]
+    : title;
+  slide.addText(titleText, {
+    x: x + 0.2, y: y + 0.08, w: w - 0.4, h: 0.35,
+    fontSize: 11, fontFace: FONT.heading, bold: true,
+    color: titleColor,
+  });
+  // Items as bullet list
+  if (items && items.length > 0) {
+    slide.addText(
+      items.map(item => ({
+        text: item,
+        options: {
+          fontSize: 8.5, fontFace: FONT.body, color: C.textSec,
+          bullet: { type: "bullet", style: "arabicPeriod" },
+          paraSpaceAfter: 2,
+          breakLine: true,
+        },
+      })),
+      {
+        x: x + 0.2, y: y + 0.4, w: w - 0.4, h: h - 0.5,
+        valign: "top",
+        bullet: { type: "bullet" },
+        lineSpacingMultiple: 1.1,
+      }
+    );
+  }
+}
+
+// ── Build Presentation ──────────────────────────────────────────────────
+async function build() {
+  const pptx = new PptxGenJS();
+  pptx.layout = "LAYOUT_16x9";
+  pptx.author = "Satya Suman Sari";
+  pptx.company = "FortyTwo Platform";
+  pptx.title = "Helix Engage — Weekly Update (Mar 18–25, 2026)";
+  pptx.subject = "Engineering Progress Report";
+
+  const TOTAL = 9;
+
+  // ═══════════════════════════════════════════════════════════════════════
+  // SLIDE 1 — Title
+  // ═══════════════════════════════════════════════════════════════════════
+  {
+    const slide = pptx.addSlide();
+    slide.background = { color: C.bg };
+
+    // Accent bar top
+    addAccentBar(slide, C.accent1);
+
+    // Decorative side stripe
+    slide.addShape("rect", {
+      x: 0, y: 0, w: 0.12, h: 5.63,
+      fill: { color: C.accent1 },
+    });
+
+    // Label
+    addLabel(slide, "Weekly Engineering Update", C.accent1, 3.0, 1.2);
+
+    // Title
+    slide.addText("Helix Engage", {
+      x: 1.0, y: 1.8, w: 8, h: 1.2,
+      fontSize: 44, fontFace: FONT.heading, bold: true,
+      color: C.accent1, align: "center",
+    });
+
+    // Subtitle
+    slide.addText("Contact Center CRM  ·  Real-time Telephony  ·  AI Copilot", {
+      x: 1.5, y: 2.9, w: 7, h: 0.5,
+      fontSize: 14, fontFace: FONT.body,
+      color: C.textSec, align: "center",
+    });
+
+    // Date
+    slide.addText("March 18 – 25, 2026", {
+      x: 3, y: 3.6, w: 4, h: 0.4,
+      fontSize: 12, fontFace: FONT.heading, bold: true,
+      color: C.textMuted, align: "center",
+      letterSpacing: 3,
+    });
+
+    // Bottom decoration
+    slide.addShape("rect", {
+      x: 3.5, y: 4.2, w: 3, h: 0.04,
+      fill: { color: C.accent2 },
+    });
+
+    // Author
+    slide.addText("Satya Suman Sari  ·  FortyTwo Platform", {
+      x: 2, y: 4.5, w: 6, h: 0.35,
+      fontSize: 9, fontFace: FONT.body,
+      color: C.textMuted, align: "center",
+    });
+
+    addSlideNumber(slide, 1, TOTAL);
+  }
+
+  // ═══════════════════════════════════════════════════════════════════════
+  // SLIDE 2 — At a Glance
+  // ═══════════════════════════════════════════════════════════════════════
+  {
+    const slide = pptx.addSlide();
+    slide.background = { color: C.bg };
+    addAccentBar(slide, C.accent2);
+
+    addLabel(slide, "At a Glance", C.accent2, 0.5, 0.3);
+
+    slide.addText("Week in Numbers", {
+      x: 0.5, y: 0.65, w: 5, h: 0.5,
+      fontSize: 24, fontFace: FONT.heading, bold: true,
+      color: C.text,
+    });
+
+    // Stat cards
+    const stats = [
+      { value: "78",  label: "Total Commits",    color: C.accent1 },
+      { value: "3",   label: "Repositories",      color: C.accent2 },
+      { value: "8",   label: "Days Active",        color: C.accent3 },
+      { value: "50",  label: "Frontend Commits",   color: C.accent4 },
+    ];
+
+    stats.forEach((s, i) => {
+      const x = 0.5 + i * 2.35;
+      // Card bg
+      slide.addShape("roundRect", {
+        x, y: 1.3, w: 2.1, h: 1.7,
+        fill: { color: C.bgCard },
+        line: { color: C.border, width: 0.5 },
+        rectRadius: 0.12,
+      });
+      // Accent top line
+      slide.addShape("rect", {
+        x: x + 0.2, y: 1.35, w: 1.7, h: 0.035,
+        fill: { color: s.color },
+      });
+      // Number
+      slide.addText(s.value, {
+        x, y: 1.5, w: 2.1, h: 0.9,
+        fontSize: 36, fontFace: FONT.heading, bold: true,
+        color: s.color, align: "center", valign: "middle",
+      });
+      // Label
+      slide.addText(s.label, {
+        x, y: 2.4, w: 2.1, h: 0.4,
+        fontSize: 9, fontFace: FONT.body,
+        color: C.textSec, align: "center",
+      });
+    });
+
+    // Repo breakdown pills
+    const repos = [
+      { name: "helix-engage", count: "50", clr: C.accent1 },
+      { name: "helix-engage-server", count: "27", clr: C.accent2 },
+      { name: "FortyTwoApps/SDK", count: "1", clr: C.accent3 },
+    ];
+    repos.forEach((r, i) => {
+      const x = 1.5 + i * 2.8;
+      slide.addShape("roundRect", {
+        x, y: 3.4, w: 2.5, h: 0.4,
+        fill: { color: C.bgCard },
+        line: { color: r.clr, width: 1 },
+        rectRadius: 0.2,
+      });
+      slide.addText(`${r.name}  ${r.count}`, {
+        x, y: 3.4, w: 2.5, h: 0.4,
+        fontSize: 9, fontFace: FONT.heading, bold: true,
+        color: r.clr, align: "center", valign: "middle",
+      });
+    });
+
+    // Summary text
+    slide.addText("3 repos ·  7 working days ·  78 commits shipped to production", {
+      x: 1, y: 4.2, w: 8, h: 0.35,
+      fontSize: 10, fontFace: FONT.body, italic: true,
+      color: C.textMuted, align: "center",
+    });
+
+    addSlideNumber(slide, 2, TOTAL);
+  }
+
+  // ═══════════════════════════════════════════════════════════════════════
+  // SLIDE 3 — Telephony & SIP
+  // ═══════════════════════════════════════════════════════════════════════
+  {
+    const slide = pptx.addSlide();
+    slide.background = { color: C.bg };
+    addAccentBar(slide, C.accent1);
+
+    addLabel(slide, "Core Infrastructure", C.accent1, 0.5, 0.3);
+
+    slide.addText([
+      { text: "☎  ", options: { fontSize: 22 } },
+      { text: "Telephony & SIP Overhaul", options: { fontSize: 22, bold: true, color: C.text } },
+    ], { x: 0.5, y: 0.65, w: 9, h: 0.5, fontFace: FONT.heading });
+
+    addCard(slide, {
+      x: 0.3, y: 1.35, w: 4.5, h: 2.0,
+      title: "Outbound Calling", titleColor: C.accent1, badge: "Frontend",
+      items: [
+        "Direct SIP call from browser — no Kookoo bridge",
+        "Immediate call card UI with auto-answer SIP bridge",
+        "End Call label fix, force active state after auto-answer",
+        "Reset outboundPending on call end",
+      ],
+    });
+
+    addCard(slide, {
+      x: 5.2, y: 1.35, w: 4.5, h: 2.0,
+      title: "Ozonetel Integration", titleColor: C.accent2, badge: "Server",
+      items: [
+        "Ozonetel V3 dial endpoint + webhook handler",
+        "Set Disposition API for ACW release",
+        "Force Ready endpoint for agent state mgmt",
+        "Token: 10-min cache, 401 invalidation, refresh on login",
+      ],
+    });
+
+    addCard(slide, {
+      x: 0.3, y: 3.55, w: 4.5, h: 1.8,
+      title: "SIP & Agent State", titleColor: C.accent1, badge: "Frontend",
+      items: [
+        "SIP driven by Agent entity with token refresh",
+        "Centralised outbound dial into useSip().dialOutbound()",
+        "UCID tracking from SIP headers for disposition",
+        "Network indicator for connection health",
+      ],
+    });
+
+    addCard(slide, {
+      x: 5.2, y: 3.55, w: 4.5, h: 1.8,
+      title: "Multi-Agent & Sessions", titleColor: C.accent2, badge: "Server",
+      items: [
+        "Multi-agent SIP with Redis session lockout",
+        "Strict duplicate login — one device per agent",
+        "Session lock stores IP + timestamp for debugging",
+        "SSE agent state broadcast for supervisor view",
+      ],
+    });
+
+    addSlideNumber(slide, 3, TOTAL);
+  }
+
+  // ═══════════════════════════════════════════════════════════════════════
+  // SLIDE 4 — Call Desk & Agent UX
+  // ═══════════════════════════════════════════════════════════════════════
+  {
+    const slide = pptx.addSlide();
+    slide.background = { color: C.bg };
+    addAccentBar(slide, C.accent3);
+
+    addLabel(slide, "User Experience", C.accent3, 0.5, 0.3);
+
+    slide.addText([
+      { text: "🖥  ", options: { fontSize: 22 } },
+      { text: "Call Desk & Agent UX", options: { fontSize: 22, bold: true, color: C.text } },
+    ], { x: 0.5, y: 0.65, w: 9, h: 0.5, fontFace: FONT.heading });
+
+    addCard(slide, {
+      x: 0.3, y: 1.35, w: 3.05, h: 2.6,
+      title: "Call Desk Redesign", titleColor: C.accent3,
+      items: [
+        "2-panel layout with collapsible sidebar & inline AI",
+        "Collapsible context panel, worklist/calls tabs",
+        "Pinned header & chat input, numpad dialler",
+        "Ringtone support for incoming calls",
+      ],
+    });
+
+    addCard(slide, {
+      x: 3.55, y: 1.35, w: 3.05, h: 2.6,
+      title: "Post-Call Workflow", titleColor: C.accent3,
+      items: [
+        "Disposition → appointment booking → follow-up",
+        "Disposition returns straight to worklist",
+        "Send disposition to sidecar with UCID for ACW",
+        "Enquiry in post-call, appointment skip button",
+      ],
+    });
+
+    addCard(slide, {
+      x: 6.8, y: 1.35, w: 2.9, h: 2.6,
+      title: "UI Polish", titleColor: C.accent3,
+      items: [
+        "FontAwesome Pro Duotone icon migration",
+        "Tooltips, sticky headers, roles, search",
+        "Fix React error #520 in prod tables",
+        "AI scroll containment, brand tokens refresh",
+      ],
+    });
+
+    addSlideNumber(slide, 4, TOTAL);
+  }
+
+  // ═══════════════════════════════════════════════════════════════════════
+  // SLIDE 5 — Features Shipped
+  // ═══════════════════════════════════════════════════════════════════════
+  {
+    const slide = pptx.addSlide();
+    slide.background = { color: C.bg };
+    addAccentBar(slide, C.accent4);
+
+    addLabel(slide, "Features Shipped", C.accent4, 0.5, 0.3);
+
+    slide.addText([
+      { text: "🚀  ", options: { fontSize: 22 } },
+      { text: "Major Features", options: { fontSize: 22, bold: true, color: C.text } },
+    ], { x: 0.5, y: 0.65, w: 9, h: 0.5, fontFace: FONT.heading });
+
+    addCard(slide, {
+      x: 0.3, y: 1.35, w: 4.5, h: 2.0,
+      title: "Supervisor Module", titleColor: C.accent4,
+      items: [
+        "Team performance analytics page",
+        "Live monitor with active calls visibility",
+        "Master data management pages",
+        "Server: team perf + active calls endpoints",
+      ],
+    });
+
+    addCard(slide, {
+      x: 5.2, y: 1.35, w: 4.5, h: 2.0,
+      title: "Missed Call Queue (Phase 2)", titleColor: C.accent4,
+      items: [
+        "Missed call queue ingestion & worklist",
+        "Auto-assignment engine for agents",
+        "Login redesign with role-based routing",
+        "Lead lookup for missed callers",
+      ],
+    });
+
+    addCard(slide, {
+      x: 0.3, y: 3.55, w: 4.5, h: 1.8,
+      title: "Agent Features (Phase 1)", titleColor: C.accent4,
+      items: [
+        "Agent status toggle (Ready / Not Ready / Break)",
+        "Global search across patients, leads, calls",
+        "Enquiry form for new patient intake",
+        "My Performance page + logout modal",
+      ],
+    });
+
+    addCard(slide, {
+      x: 5.2, y: 3.55, w: 4.5, h: 1.8,
+      title: "Recording Analysis", titleColor: C.accent4,
+      items: [
+        "Deepgram diarization + AI insights",
+        "Redis caching layer for analysis results",
+        "Full-stack: frontend player + server module",
+      ],
+    });
+
+    addSlideNumber(slide, 5, TOTAL);
+  }
+
+  // ═══════════════════════════════════════════════════════════════════════
+  // SLIDE 6 — Backend & Data
+  // ═══════════════════════════════════════════════════════════════════════
+  {
+    const slide = pptx.addSlide();
+    slide.background = { color: C.bg };
+    addAccentBar(slide, C.accent2);
+
+    addLabel(slide, "Backend & Data", C.accent2, 0.5, 0.3);
+
+    slide.addText([
+      { text: "⚙  ", options: { fontSize: 22 } },
+      { text: "Backend & Data Layer", options: { fontSize: 22, bold: true, color: C.text } },
+    ], { x: 0.5, y: 0.65, w: 9, h: 0.5, fontFace: FONT.heading });
+
+    addCard(slide, {
+      x: 0.3, y: 1.35, w: 4.5, h: 2.0,
+      title: "Platform Data Wiring", titleColor: C.accent2,
+      items: [
+        "Migrated frontend to Jotai + Vercel AI SDK",
+        "Corrected all 7 GraphQL queries (fields, LINKS/PHONES)",
+        "Webhook handler for Ozonetel call records",
+        "Complete seeder: 5 doctors, appointments linked",
+      ],
+    });
+
+    addCard(slide, {
+      x: 5.2, y: 1.35, w: 4.5, h: 2.0,
+      title: "Server Endpoints", titleColor: C.accent2,
+      items: [
+        "Call control, recording, CDR, missed calls, live assist",
+        "Agent summary, AHT, performance aggregation",
+        "Token refresh endpoint for auto-renewal",
+        "Search module with full-text capabilities",
+      ],
+    });
+
+    addCard(slide, {
+      x: 0.3, y: 3.55, w: 4.5, h: 1.8,
+      title: "Data Pages Built", titleColor: C.accent2,
+      items: [
+        "Worklist table, call history, patients, dashboard",
+        "Reports, team dashboard, campaigns, settings",
+        "Agent detail page, campaign edit slideout",
+        "Appointments page with data refresh on login",
+      ],
+    });
+
+    addCard(slide, {
+      x: 5.2, y: 3.55, w: 4.5, h: 1.8,
+      title: "SDK App", titleColor: C.accent3, badge: "FortyTwoApps",
+      items: [
+        "Helix Engage SDK app entity definitions",
+        "Call center CRM object model for platform",
+        "Foundation for platform-native data integration",
+      ],
+    });
+
+    addSlideNumber(slide, 6, TOTAL);
+  }
+
+  // ═══════════════════════════════════════════════════════════════════════
+  // SLIDE 7 — Deployment & Ops
+  // ═══════════════════════════════════════════════════════════════════════
+  {
+    const slide = pptx.addSlide();
+    slide.background = { color: C.bg };
+    addAccentBar(slide, C.accent5);
+
+    addLabel(slide, "Operations", C.accent5, 0.5, 0.3);
+
+    slide.addText([
+      { text: "🛠  ", options: { fontSize: 22 } },
+      { text: "Deployment & DevOps", options: { fontSize: 22, bold: true, color: C.text } },
+    ], { x: 0.5, y: 0.65, w: 9, h: 0.5, fontFace: FONT.heading });
+
+    addCard(slide, {
+      x: 0.3, y: 1.35, w: 3.05, h: 2.2,
+      title: "Deployment", titleColor: C.accent5,
+      items: [
+        "Deployed to Hostinger VPS with Docker",
+        "Switched to global_healthx Ozonetel account",
+        "Dockerfile for server-side containerization",
+      ],
+    });
+
+    addCard(slide, {
+      x: 3.55, y: 1.35, w: 3.05, h: 2.2,
+      title: "AI & Testing", titleColor: C.accent5,
+      items: [
+        "Migrated AI to Vercel AI SDK + OpenAI provider",
+        "AI flow test script — validates full pipeline",
+        "Live call assist integration",
+      ],
+    });
+
+    addCard(slide, {
+      x: 6.8, y: 1.35, w: 2.9, h: 2.2,
+      title: "Documentation", titleColor: C.accent5,
+      items: [
+        "Team onboarding README with arch guide",
+        "Supervisor module spec + plan",
+        "Multi-agent spec + plan",
+        "Next session plans in commits",
+      ],
+    });
+
+    addSlideNumber(slide, 7, TOTAL);
+  }
+
+  // ═══════════════════════════════════════════════════════════════════════
+  // SLIDE 8 — Timeline
+  // ═══════════════════════════════════════════════════════════════════════
+  {
+    const slide = pptx.addSlide();
+    slide.background = { color: C.bg };
+    addAccentBar(slide, C.accent6);
+
+    addLabel(slide, "Day by Day", C.accent6, 0.5, 0.3);
+
+    slide.addText([
+      { text: "📅  ", options: { fontSize: 22 } },
+      { text: "Development Timeline", options: { fontSize: 22, bold: true, color: C.text } },
+    ], { x: 0.5, y: 0.65, w: 9, h: 0.5, fontFace: FONT.heading });
+
+    const timeline = [
+      { date: "MAR 18 (Tue)", title: "Foundation Day", desc: "Call desk redesign, Jotai + AI SDK migration, seeder, AI flow test, VPS deploy" },
+      { date: "MAR 19 (Wed)", title: "Data Layer Sprint", desc: "All data pages, post-call workflow, GraphQL fixes, Kookoo IVR, outbound UI" },
+      { date: "MAR 20 (Thu)", title: "Telephony Breakthrough", desc: "Direct SIP replacing Kookoo, UCID tracking, Force Ready, Set Disposition" },
+      { date: "MAR 21 (Fri)", title: "Agent Experience", desc: "Phase 1: status toggle, search, enquiry form, My Performance, FA icons, AHT" },
+      { date: "MAR 23 (Sun)", title: "Scale & Reliability", desc: "Phase 2: missed call queue, auto-assign, Redis lockout, Patient 360, SDK defs" },
+      { date: "MAR 24 (Mon)", title: "Supervisor Module", desc: "Team perf, live monitor, master data, SSE, UUID fix, maintenance, QA sweep" },
+      { date: "MAR 25 (Tue)", title: "Intelligence Layer", desc: "Deepgram diarization, AI insights, SIP via Agent entity, token refresh, network" },
+    ];
+
+    // Vertical line
+    slide.addShape("rect", {
+      x: 1.4, y: 1.3, w: 0.025, h: 4.0,
+      fill: { color: C.accent6, transparency: 60 },
+    });
+
+    timeline.forEach((entry, i) => {
+      const y = 1.3 + i * 0.56;
+
+      // Dot
+      slide.addShape("ellipse", {
+        x: 1.32, y: y + 0.08, w: 0.18, h: 0.18,
+        fill: { color: C.accent6 },
+        line: { color: C.bg, width: 2 },
+      });
+
+      // Date
+      slide.addText(entry.date, {
+        x: 1.7, y: y, w: 1.6, h: 0.22,
+        fontSize: 7, fontFace: FONT.heading, bold: true,
+        color: C.accent6,
+      });
+
+      // Title
+      slide.addText(entry.title, {
+        x: 3.3, y: y, w: 2.0, h: 0.22,
+        fontSize: 9, fontFace: FONT.heading, bold: true,
+        color: C.text,
+      });
+
+      // Description
+      slide.addText(entry.desc, {
+        x: 5.3, y: y, w: 4.2, h: 0.45,
+        fontSize: 8, fontFace: FONT.body,
+        color: C.textSec,
+        valign: "top",
+      });
+    });
+
+    addSlideNumber(slide, 8, TOTAL);
+  }
+
+  // ═══════════════════════════════════════════════════════════════════════
+  // SLIDE 9 — Closing
+  // ═══════════════════════════════════════════════════════════════════════
+  {
+    const slide = pptx.addSlide();
+    slide.background = { color: C.bg };
+    addAccentBar(slide, C.accent3);
+
+    // Big headline
+    slide.addText("78 commits.  8 days.  Ship mode.", {
+      x: 0.5, y: 1.4, w: 9, h: 0.8,
+      fontSize: 32, fontFace: FONT.heading, bold: true,
+      color: C.accent3, align: "center",
+    });
+
+    // Ship emoji
+    slide.addText("🚢", {
+      x: 4.2, y: 2.3, w: 1.6, h: 0.6,
+      fontSize: 28, align: "center",
+    });
+
+    // Description
+    slide.addText(
+      "From browser-native SIP calling to AI-powered recording analysis — Helix Engage is becoming a production contact center platform.",
+      {
+        x: 1.5, y: 3.0, w: 7, h: 0.6,
+        fontSize: 11, fontFace: FONT.body,
+        color: C.textSec, align: "center",
+        lineSpacingMultiple: 1.3,
+      }
+    );
+
+    // Achievement pills
+    const achievements = [
+      { text: "SIP Calling  ✓", color: C.accent1 },
+      { text: "Multi-Agent  ✓", color: C.accent2 },
+      { text: "Supervisor  ✓", color: C.accent3 },
+      { text: "AI Copilot  ✓", color: C.accent4 },
+      { text: "Recording Analysis  ✓", color: C.accent5 },
+    ];
+
+    achievements.forEach((a, i) => {
+      const x = 0.8 + i * 1.8;
+      slide.addShape("roundRect", {
+        x, y: 3.9, w: 1.6, h: 0.35,
+        fill: { color: C.bgCard },
+        line: { color: a.color, width: 1 },
+        rectRadius: 0.17,
+      });
+      slide.addText(a.text, {
+        x, y: 3.9, w: 1.6, h: 0.35,
+        fontSize: 8, fontFace: FONT.heading, bold: true,
+        color: a.color, align: "center", valign: "middle",
+      });
+    });
+
+    // Author
+    slide.addText("Satya Suman Sari  ·  FortyTwo Platform", {
+      x: 2, y: 4.7, w: 6, h: 0.3,
+      fontSize: 9, fontFace: FONT.body,
+      color: C.textMuted, align: "center",
+    });
+
+    addSlideNumber(slide, 9, TOTAL);
+  }
+
+  // ── Save ──────────────────────────────────────────────────────────────
+  const outPath = "weekly-update-mar18-25.pptx";
+  await pptx.writeFile({ fileName: outPath });
+  console.log(`✅ Presentation saved: ${outPath}`);
+}
+
+build().catch(err => {
+  console.error("❌ Failed:", err.message);
+  process.exit(1);
+});

docs/superpowers/plans/2026-03-23-multi-agent-sip-lockout.md

@@ -0,0 +1,643 @@
+# Multi-Agent SIP + Duplicate Login Lockout — Implementation Plan
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+
+**Goal:** Per-agent Ozonetel/SIP credentials resolved from platform Agent entity on login, with Redis-backed duplicate login lockout.
+
+**Architecture:** Sidecar queries Agent entity on CC login, checks Redis for active sessions, returns per-agent SIP config. Frontend SIP provider uses dynamic credentials from login response. Heartbeat keeps session alive.
+
+**Tech Stack:** NestJS sidecar + ioredis + FortyTwo platform GraphQL + React frontend
+
+**Spec:** `docs/superpowers/specs/2026-03-23-multi-agent-sip-lockout.md`
+
+---
+
+## File Map
+
+### Sidecar (`helix-engage-server/src/`)
+
+| File | Action | Responsibility |
+|------|--------|----------------|
+| `auth/session.service.ts` | Create | Redis session lock/unlock/refresh |
+| `auth/agent-config.service.ts` | Create | Query Agent entity, cache agent configs |
+| `auth/auth.controller.ts` | Modify | Use agent config + session locking on login, add logout + heartbeat |
+| `auth/auth.module.ts` | Modify | Register new services, import Redis |
+| `config/configuration.ts` | Modify | Add `REDIS_URL` + SIP domain config |
+
+### Frontend (`helix-engage/src/`)
+
+| File | Action | Responsibility |
+|------|--------|----------------|
+| `pages/login.tsx` | Modify | Store agentConfig, handle 403/409 errors |
+| `providers/sip-provider.tsx` | Modify | Read SIP config from agentConfig instead of env vars |
+| `components/layout/app-shell.tsx` | Modify | Add heartbeat interval for CC agents |
+| `lib/api-client.ts` | Modify | Add logout API call |
+| `providers/auth-provider.tsx` | Modify | Call sidecar logout on sign-out |
+
+### Docker
+
+| File | Action | Responsibility |
+|------|--------|----------------|
+| VPS `docker-compose.yml` | Modify | Add `REDIS_URL` to sidecar env |
+
+---
+
+## Task 1: Install ioredis + Redis Session Service
+
+**Files:**
+- Modify: `helix-engage-server/package.json`
+- Create: `helix-engage-server/src/auth/session.service.ts`
+- Modify: `helix-engage-server/src/config/configuration.ts`
+
+- [ ] **Step 1: Install ioredis**
+
+```bash
+cd helix-engage-server && npm install ioredis
+```
+
+- [ ] **Step 2: Add Redis URL to config**
+
+In `config/configuration.ts`, add to the returned object:
+
+```typescript
+redis: {
+    url: process.env.REDIS_URL ?? 'redis://localhost:6379',
+},
+sip: {
+    domain: process.env.SIP_DOMAIN ?? 'blr-pub-rtc4.ozonetel.com',
+    wsPort: process.env.SIP_WS_PORT ?? '444',
+},
+```
+
+- [ ] **Step 3: Create session service**
+
+```typescript
+// src/auth/session.service.ts
+import { Injectable, Logger, OnModuleInit } from '@nestjs/common';
+import { ConfigService } from '@nestjs/config';
+import Redis from 'ioredis';
+
+const SESSION_TTL = 3600; // 1 hour
+
+@Injectable()
+export class SessionService implements OnModuleInit {
+    private readonly logger = new Logger(SessionService.name);
+    private redis: Redis;
+
+    constructor(private config: ConfigService) {}
+
+    onModuleInit() {
+        const url = this.config.get<string>('redis.url', 'redis://localhost:6379');
+        this.redis = new Redis(url);
+        this.redis.on('connect', () => this.logger.log('Redis connected'));
+        this.redis.on('error', (err) => this.logger.error(`Redis error: ${err.message}`));
+    }
+
+    private key(agentId: string): string {
+        return `agent:session:${agentId}`;
+    }
+
+    async lockSession(agentId: string, memberId: string): Promise<void> {
+        await this.redis.set(this.key(agentId), memberId, 'EX', SESSION_TTL);
+    }
+
+    async isSessionLocked(agentId: string): Promise<string | null> {
+        return this.redis.get(this.key(agentId));
+    }
+
+    async refreshSession(agentId: string): Promise<void> {
+        await this.redis.expire(this.key(agentId), SESSION_TTL);
+    }
+
+    async unlockSession(agentId: string): Promise<void> {
+        await this.redis.del(this.key(agentId));
+    }
+}
+```
+
+- [ ] **Step 4: Verify sidecar compiles**
+
+```bash
+cd helix-engage-server && npm run build
+```
+
+- [ ] **Step 5: Commit**
+
+```bash
+git add package.json package-lock.json src/auth/session.service.ts src/config/configuration.ts
+git commit -m "feat: Redis session service for agent login lockout"
+```
+
+---
+
+## Task 2: Agent Config Service
+
+**Files:**
+- Create: `helix-engage-server/src/auth/agent-config.service.ts`
+
+- [ ] **Step 1: Create agent config service**
+
+```typescript
+// src/auth/agent-config.service.ts
+import { Injectable, Logger } from '@nestjs/common';
+import { ConfigService } from '@nestjs/config';
+import { PlatformGraphqlService } from '../platform/platform-graphql.service';
+
+export type AgentConfig = {
+    id: string;
+    ozonetelAgentId: string;
+    sipExtension: string;
+    sipPassword: string;
+    campaignName: string;
+    sipUri: string;
+    sipWsServer: string;
+};
+
+@Injectable()
+export class AgentConfigService {
+    private readonly logger = new Logger(AgentConfigService.name);
+    private readonly cache = new Map<string, AgentConfig>();
+    private readonly sipDomain: string;
+    private readonly sipWsPort: string;
+
+    constructor(
+        private platform: PlatformGraphqlService,
+        private config: ConfigService,
+    ) {
+        this.sipDomain = config.get<string>('sip.domain', 'blr-pub-rtc4.ozonetel.com');
+        this.sipWsPort = config.get<string>('sip.wsPort', '444');
+    }
+
+    async getByMemberId(memberId: string): Promise<AgentConfig | null> {
+        // Check cache first
+        const cached = this.cache.get(memberId);
+        if (cached) return cached;
+
+        try {
+            const data = await this.platform.query<any>(
+                `{ agents(first: 1, filter: { wsmemberId: { eq: "${memberId}" } }) { edges { node {
+                    id ozonetelagentid sipextension sippassword campaignname
+                } } } }`,
+            );
+
+            const node = data?.agents?.edges?.[0]?.node;
+            if (!node || !node.ozonetelagentid || !node.sipextension) return null;
+
+            const agentConfig: AgentConfig = {
+                id: node.id,
+                ozonetelAgentId: node.ozonetelagentid,
+                sipExtension: node.sipextension,
+                sipPassword: node.sippassword ?? node.sipextension,
+                campaignName: node.campaignname ?? process.env.OZONETEL_CAMPAIGN_NAME ?? 'Inbound_918041763265',
+                sipUri: `sip:${node.sipextension}@${this.sipDomain}`,
+                sipWsServer: `wss://${this.sipDomain}:${this.sipWsPort}`,
+            };
+
+            this.cache.set(memberId, agentConfig);
+            this.logger.log(`Loaded agent config for member ${memberId}: ${agentConfig.ozonetelAgentId} / ${agentConfig.sipExtension}`);
+            return agentConfig;
+        } catch (err) {
+            this.logger.warn(`Failed to fetch agent config: ${err}`);
+            return null;
+        }
+    }
+
+    getFromCache(memberId: string): AgentConfig | null {
+        return this.cache.get(memberId) ?? null;
+    }
+
+    clearCache(memberId: string): void {
+        this.cache.delete(memberId);
+    }
+}
+```
+
+- [ ] **Step 2: Verify sidecar compiles**
+
+```bash
+cd helix-engage-server && npm run build
+```
+
+- [ ] **Step 3: Commit**
+
+```bash
+git add src/auth/agent-config.service.ts
+git commit -m "feat: agent config service with platform query + in-memory cache"
+```
+
+---
+
+## Task 3: Update Auth Module + Controller
+
+**Files:**
+- Modify: `helix-engage-server/src/auth/auth.module.ts`
+- Modify: `helix-engage-server/src/auth/auth.controller.ts`
+
+- [ ] **Step 1: Update auth module to register new services**
+
+Read `src/auth/auth.module.ts` and add imports:
+
+```typescript
+import { SessionService } from './session.service';
+import { AgentConfigService } from './agent-config.service';
+import { PlatformModule } from '../platform/platform.module';
+
+@Module({
+    imports: [PlatformModule],
+    controllers: [AuthController],
+    providers: [SessionService, AgentConfigService],
+    exports: [SessionService, AgentConfigService],
+})
+```
+
+- [ ] **Step 2: Rewrite auth controller login for multi-agent**
+
+Inject new services into `AuthController`:
+
+```typescript
+constructor(
+    private config: ConfigService,
+    private ozonetelAgent: OzonetelAgentService,
+    private sessionService: SessionService,
+    private agentConfigService: AgentConfigService,
+) { ... }
+```
+
+Modify the CC agent section of `login()` (currently lines 115-128). Replace the hardcoded Ozonetel login with:
+
+```typescript
+if (appRole === 'cc-agent') {
+    const memberId = workspaceMember?.id;
+    if (!memberId) throw new HttpException('Workspace member not found', 400);
+
+    // Look up agent config from platform
+    const agentConfig = await this.agentConfigService.getByMemberId(memberId);
+    if (!agentConfig) {
+        throw new HttpException('Agent account not configured. Contact administrator.', 403);
+    }
+
+    // Check for duplicate login
+    const existingSession = await this.sessionService.isSessionLocked(agentConfig.ozonetelAgentId);
+    if (existingSession && existingSession !== memberId) {
+        throw new HttpException('You are already logged in on another device. Please log out there first.', 409);
+    }
+
+    // Lock session
+    await this.sessionService.lockSession(agentConfig.ozonetelAgentId, memberId);
+
+    // Login to Ozonetel with agent-specific credentials
+    const ozAgentPassword = process.env.OZONETEL_AGENT_PASSWORD ?? 'Test123$';
+    this.ozonetelAgent.loginAgent({
+        agentId: agentConfig.ozonetelAgentId,
+        password: ozAgentPassword,
+        phoneNumber: agentConfig.sipExtension,
+        mode: 'blended',
+    }).catch(err => {
+        this.logger.warn(`Ozonetel agent login failed (non-blocking): ${err.message}`);
+    });
+
+    // Return agent config to frontend
+    return {
+        accessToken,
+        refreshToken: tokens.refreshToken.token,
+        user: { ... }, // same as today
+        agentConfig: {
+            ozonetelAgentId: agentConfig.ozonetelAgentId,
+            sipExtension: agentConfig.sipExtension,
+            sipPassword: agentConfig.sipPassword,
+            sipUri: agentConfig.sipUri,
+            sipWsServer: agentConfig.sipWsServer,
+            campaignName: agentConfig.campaignName,
+        },
+    };
+}
+```
+
+Note: `workspaceMember.id` is already available from the profile query on line 87-88 of the existing code.
+
+- [ ] **Step 3: Add logout endpoint**
+
+Add after the `refresh` endpoint:
+
+```typescript
+@Post('logout')
+async logout(@Headers('authorization') auth: string) {
+    if (!auth) throw new HttpException('Authorization required', 401);
+
+    try {
+        // Resolve workspace member from JWT
+        const profileRes = await axios.post(this.graphqlUrl, {
+            query: '{ currentUser { workspaceMember { id } } }',
+        }, { headers: { 'Content-Type': 'application/json', Authorization: auth } });
+
+        const memberId = profileRes.data?.data?.currentUser?.workspaceMember?.id;
+        if (!memberId) return { status: 'ok' };
+
+        const agentConfig = this.agentConfigService.getFromCache(memberId);
+        if (agentConfig) {
+            // Unlock Redis session
+            await this.sessionService.unlockSession(agentConfig.ozonetelAgentId);
+
+            // Logout from Ozonetel
+            this.ozonetelAgent.logoutAgent({
+                agentId: agentConfig.ozonetelAgentId,
+                password: process.env.OZONETEL_AGENT_PASSWORD ?? 'Test123$',
+            }).catch(err => this.logger.warn(`Ozonetel logout failed: ${err.message}`));
+
+            // Clear cache
+            this.agentConfigService.clearCache(memberId);
+        }
+
+        return { status: 'ok' };
+    } catch (err) {
+        this.logger.warn(`Logout cleanup failed: ${err}`);
+        return { status: 'ok' };
+    }
+}
+```
+
+- [ ] **Step 4: Add heartbeat endpoint**
+
+```typescript
+@Post('heartbeat')
+async heartbeat(@Headers('authorization') auth: string) {
+    if (!auth) throw new HttpException('Authorization required', 401);
+
+    try {
+        const profileRes = await axios.post(this.graphqlUrl, {
+            query: '{ currentUser { workspaceMember { id } } }',
+        }, { headers: { 'Content-Type': 'application/json', Authorization: auth } });
+
+        const memberId = profileRes.data?.data?.currentUser?.workspaceMember?.id;
+        const agentConfig = memberId ? this.agentConfigService.getFromCache(memberId) : null;
+
+        if (agentConfig) {
+            await this.sessionService.refreshSession(agentConfig.ozonetelAgentId);
+        }
+
+        return { status: 'ok' };
+    } catch {
+        return { status: 'ok' };
+    }
+}
+```
+
+- [ ] **Step 5: Verify sidecar compiles**
+
+```bash
+cd helix-engage-server && npm run build
+```
+
+- [ ] **Step 6: Commit**
+
+```bash
+git add src/auth/auth.module.ts src/auth/auth.controller.ts
+git commit -m "feat: multi-agent login with Redis lockout, logout, heartbeat"
+```
+
+---
+
+## Task 4: Update Ozonetel Controller for Per-Agent Calls
+
+**Files:**
+- Modify: `helix-engage-server/src/ozonetel/ozonetel-agent.controller.ts`
+
+- [ ] **Step 1: Add AgentConfigService to Ozonetel controller**
+
+Import and inject `AgentConfigService`. Add a helper to resolve the agent config from the auth header:
+
+```typescript
+import { AgentConfigService } from '../auth/agent-config.service';
+
+// In constructor:
+private readonly agentConfig: AgentConfigService,
+
+// Helper method:
+private async resolveAgentId(authHeader: string): Promise<string> {
+    try {
+        const data = await this.platform.queryWithAuth<any>(
+            '{ currentUser { workspaceMember { id } } }',
+            undefined, authHeader,
+        );
+        const memberId = data.currentUser?.workspaceMember?.id;
+        const config = memberId ? this.agentConfig.getFromCache(memberId) : null;
+        return config?.ozonetelAgentId ?? this.defaultAgentId;
+    } catch {
+        return this.defaultAgentId;
+    }
+}
+```
+
+- [ ] **Step 2: Update dispose, agent-state, dial, and other endpoints**
+
+Replace `this.defaultAgentId` with `await this.resolveAgentId(authHeader)` in the endpoints that pass the auth header. The key endpoints to update:
+
+- `dispose()` — add `@Headers('authorization') auth: string` param, resolve agent ID
+- `agentState()` — same
+- `dial()` — same
+- `agentReady()` — same
+
+For endpoints that don't currently take the auth header, add it as a parameter.
+
+- [ ] **Step 3: Update auth module to handle circular dependency**
+
+The `OzonetelAgentModule` now needs `AgentConfigService` from `AuthModule`. Use `forwardRef` if needed, or export `AgentConfigService` from a shared module.
+
+Simplest approach: move `AgentConfigService` export from `AuthModule` and import it in `OzonetelAgentModule`.
+
+- [ ] **Step 4: Verify sidecar compiles**
+
+```bash
+cd helix-engage-server && npm run build
+```
+
+- [ ] **Step 5: Commit**
+
+```bash
+git add src/ozonetel/ozonetel-agent.controller.ts src/ozonetel/ozonetel-agent.module.ts src/auth/auth.module.ts
+git commit -m "feat: per-agent Ozonetel credentials in all controller endpoints"
+```
+
+---
+
+## Task 5: Frontend — Store Agent Config + Dynamic SIP
+
+**Files:**
+- Modify: `helix-engage/src/pages/login.tsx`
+- Modify: `helix-engage/src/providers/sip-provider.tsx`
+- Modify: `helix-engage/src/providers/auth-provider.tsx`
+
+- [ ] **Step 1: Store agentConfig on login**
+
+In `login.tsx`, after successful login, store the agent config:
+
+```typescript
+if (response.agentConfig) {
+    localStorage.setItem('helix_agent_config', JSON.stringify(response.agentConfig));
+}
+```
+
+Handle new error codes:
+```typescript
+} catch (err: any) {
+    if (err.message?.includes('not configured')) {
+        setError('Agent account not configured. Contact your administrator.');
+    } else if (err.message?.includes('already logged in')) {
+        setError('You are already logged in on another device. Please log out there first.');
+    } else {
+        setError(err.message);
+    }
+    setIsLoading(false);
+}
+```
+
+- [ ] **Step 2: Update SIP provider to use stored agent config**
+
+In `sip-provider.tsx`, replace the hardcoded `DEFAULT_CONFIG`:
+
+```typescript
+const getAgentSipConfig = (): SIPConfig => {
+    try {
+        const stored = localStorage.getItem('helix_agent_config');
+        if (stored) {
+            const config = JSON.parse(stored);
+            return {
+                displayName: 'Helix Agent',
+                uri: config.sipUri,
+                password: config.sipPassword,
+                wsServer: config.sipWsServer,
+                stunServers: 'stun:stun.l.google.com:19302',
+            };
+        }
+    } catch {}
+    // Fallback to env vars
+    return {
+        displayName: import.meta.env.VITE_SIP_DISPLAY_NAME ?? 'Helix Agent',
+        uri: import.meta.env.VITE_SIP_URI ?? '',
+        password: import.meta.env.VITE_SIP_PASSWORD ?? '',
+        wsServer: import.meta.env.VITE_SIP_WS_SERVER ?? '',
+        stunServers: 'stun:stun.l.google.com:19302',
+    };
+};
+```
+
+Use `getAgentSipConfig()` where `DEFAULT_CONFIG` was used.
+
+- [ ] **Step 3: Update auth provider logout to call sidecar**
+
+In `auth-provider.tsx`, modify `logout()` to call the sidecar first:
+
+```typescript
+const logout = async () => {
+    try {
+        const token = localStorage.getItem('helix_access_token');
+        if (token) {
+            await fetch(`${API_URL}/auth/logout`, {
+                method: 'POST',
+                headers: { Authorization: `Bearer ${token}` },
+            }).catch(() => {});
+        }
+    } finally {
+        localStorage.removeItem('helix_access_token');
+        localStorage.removeItem('helix_refresh_token');
+        localStorage.removeItem('helix_user');
+        localStorage.removeItem('helix_agent_config');
+        setUser(null);
+    }
+};
+```
+
+Note: `API_URL` needs to be available here. Import from `api-client.ts` or read from env.
+
+- [ ] **Step 4: Verify frontend compiles**
+
+```bash
+cd helix-engage && npm run build
+```
+
+- [ ] **Step 5: Commit**
+
+```bash
+git add src/pages/login.tsx src/providers/sip-provider.tsx src/providers/auth-provider.tsx
+git commit -m "feat: dynamic SIP config from login response, logout cleanup"
+```
+
+---
+
+## Task 6: Frontend — Heartbeat
+
+**Files:**
+- Modify: `helix-engage/src/components/layout/app-shell.tsx`
+
+- [ ] **Step 1: Add heartbeat interval for CC agents**
+
+In `AppShell`, add a heartbeat effect:
+
+```typescript
+const { isCCAgent } = useAuth();
+
+useEffect(() => {
+    if (!isCCAgent) return;
+
+    const interval = setInterval(() => {
+        const token = localStorage.getItem('helix_access_token');
+        if (token) {
+            fetch(`${import.meta.env.VITE_API_URL ?? 'http://localhost:4100'}/auth/heartbeat`, {
+                method: 'POST',
+                headers: { Authorization: `Bearer ${token}` },
+            }).catch(() => {});
+        }
+    }, 5 * 60 * 1000); // Every 5 minutes
+
+    return () => clearInterval(interval);
+}, [isCCAgent]);
+```
+
+- [ ] **Step 2: Verify frontend compiles**
+
+```bash
+cd helix-engage && npm run build
+```
+
+- [ ] **Step 3: Commit**
+
+```bash
+git add src/components/layout/app-shell.tsx
+git commit -m "feat: heartbeat every 5 min to keep agent session alive"
+```
+
+---
+
+## Task 7: Docker + Deploy
+
+**Files:**
+- Modify: VPS `docker-compose.yml`
+
+- [ ] **Step 1: Add REDIS_URL to sidecar in docker-compose**
+
+SSH to VPS and add `REDIS_URL: redis://redis:6379` to the sidecar environment section. Also add `redis` to the sidecar's `depends_on`.
+
+- [ ] **Step 2: Deploy using deploy script**
+
+```bash
+./deploy.sh all
+```
+
+- [ ] **Step 3: Verify sidecar connects to Redis**
+
+```bash
+ssh -i ~/Downloads/fortytwoai_hostinger root@148.230.67.184 "docker logs fortytwo-staging-sidecar-1 --tail 10 2>&1 | grep -i redis"
+```
+
+Expected: `Redis connected`
+
+- [ ] **Step 4: Test login flow**
+
+Login as rekha.cc → should get `agentConfig` in response. SIP should connect with her specific extension. Try logging in from another browser → should get "already logged in" error.
+
+- [ ] **Step 5: Commit docker-compose change and push all to Azure**
+
+```bash
+cd helix-engage && git add . && git push origin dev
+cd helix-engage-server && git add . && git push origin dev
+```

docs/superpowers/plans/2026-03-24-supervisor-module.md

@@ -0,0 +1,531 @@
+# Supervisor Module Implementation Plan
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+
+**Goal:** Build the supervisor module with team performance dashboard (PP-5), live call monitor (PP-6), master data pages, and admin sidebar restructure.
+
+**Architecture:** Frontend pages query platform GraphQL directly for entity data (calls, appointments, leads, agents). Sidecar provides Ozonetel-specific data (agent time breakdown, active calls via event subscription). No hardcoded/mock data anywhere.
+
+**Tech Stack:** React + Tailwind + ECharts (frontend), NestJS sidecar (Ozonetel integration), Fortytwo platform GraphQL
+
+**Spec:** `docs/superpowers/specs/2026-03-24-supervisor-module.md`
+
+---
+
+## File Map
+
+### Frontend (`helix-engage/src/`)
+
+| File | Action | Responsibility |
+|------|--------|----------------|
+| `pages/team-performance.tsx` | Create | PP-5 full dashboard |
+| `pages/live-monitor.tsx` | Create | PP-6 active call table |
+| `pages/call-recordings.tsx` | Create | Calls with recordings master |
+| `pages/missed-calls.tsx` | Create | Missed calls master (supervisor view) |
+| `components/layout/sidebar.tsx` | Modify | Admin nav restructure |
+| `main.tsx` | Modify | Add new routes |
+
+### Sidecar (`helix-engage-server/src/`)
+
+| File | Action | Responsibility |
+|------|--------|----------------|
+| `supervisor/supervisor.service.ts` | Create | Team perf aggregation + active call tracking |
+| `supervisor/supervisor.controller.ts` | Create | REST endpoints |
+| `supervisor/supervisor.module.ts` | Create | Module registration |
+| `app.module.ts` | Modify | Import SupervisorModule |
+
+---
+
+## Task 1: Admin Sidebar Nav + Routes
+
+**Files:**
+- Modify: `helix-engage/src/components/layout/sidebar.tsx`
+- Modify: `helix-engage/src/main.tsx`
+
+- [ ] **Step 1: Add new icon imports to sidebar**
+
+In `sidebar.tsx`, add to the FontAwesome imports:
+
+```typescript
+import {
+    // existing imports...
+    faRadio,
+    faFileAudio,
+    faPhoneMissed,
+    faChartLine,
+} from '@fortawesome/pro-duotone-svg-icons';
+```
+
+Add icon wrappers:
+
+```typescript
+const IconRadio = faIcon(faRadio);
+const IconFileAudio = faIcon(faFileAudio);
+const IconPhoneMissed = faIcon(faPhoneMissed);
+const IconChartLine = faIcon(faChartLine);
+```
+
+- [ ] **Step 2: Restructure admin nav**
+
+Replace the admin nav section (currently has Overview + Management + Admin groups) with:
+
+```typescript
+if (role === 'admin') {
+    return [
+        { label: 'Supervisor', items: [
+            { label: 'Dashboard', href: '/', icon: IconGrid2 },
+            { label: 'Team Performance', href: '/team-performance', icon: IconChartLine },
+            { label: 'Live Call Monitor', href: '/live-monitor', icon: IconRadio },
+        ]},
+        { label: 'Data & Reports', items: [
+            { label: 'Lead Master', href: '/leads', icon: IconUsers },
+            { label: 'Patient Master', href: '/patients', icon: IconHospitalUser },
+            { label: 'Appointment Master', href: '/appointments', icon: IconCalendarCheck },
+            { label: 'Call Log Master', href: '/call-history', icon: IconClockRewind },
+            { label: 'Call Recordings', href: '/call-recordings', icon: IconFileAudio },
+            { label: 'Missed Calls', href: '/missed-calls', icon: IconPhoneMissed },
+        ]},
+        { label: 'Admin', items: [
+            { label: 'Settings', href: '/settings', icon: IconGear },
+        ]},
+    ];
+}
+```
+
+- [ ] **Step 3: Add routes in main.tsx**
+
+Import new page components (they'll be created in later tasks — use placeholder components for now):
+
+```typescript
+import { TeamPerformancePage } from "@/pages/team-performance";
+import { LiveMonitorPage } from "@/pages/live-monitor";
+import { CallRecordingsPage } from "@/pages/call-recordings";
+import { MissedCallsPage } from "@/pages/missed-calls";
+```
+
+Add routes:
+
+```typescript
+<Route path="/team-performance" element={<TeamPerformancePage />} />
+<Route path="/live-monitor" element={<LiveMonitorPage />} />
+<Route path="/call-recordings" element={<CallRecordingsPage />} />
+<Route path="/missed-calls" element={<MissedCallsPage />} />
+```
+
+- [ ] **Step 4: Create placeholder pages**
+
+Create minimal placeholder files for each new page so the build doesn't fail:
+
+```typescript
+// src/pages/team-performance.tsx
+export const TeamPerformancePage = () => <div>Team Performance — coming soon</div>;
+
+// src/pages/live-monitor.tsx
+export const LiveMonitorPage = () => <div>Live Call Monitor — coming soon</div>;
+
+// src/pages/call-recordings.tsx
+export const CallRecordingsPage = () => <div>Call Recordings — coming soon</div>;
+
+// src/pages/missed-calls.tsx
+export const MissedCallsPage = () => <div>Missed Calls — coming soon</div>;
+```
+
+- [ ] **Step 5: Verify build**
+
+```bash
+cd helix-engage && npm run build
+```
+
+- [ ] **Step 6: Commit**
+
+```bash
+git add src/components/layout/sidebar.tsx src/main.tsx src/pages/team-performance.tsx src/pages/live-monitor.tsx src/pages/call-recordings.tsx src/pages/missed-calls.tsx
+git commit -m "feat: admin sidebar restructure + placeholder pages for supervisor module"
+```
+
+---
+
+## Task 2: Call Recordings Page
+
+**Files:**
+- Modify: `helix-engage/src/pages/call-recordings.tsx`
+
+- [ ] **Step 1: Implement call recordings page**
+
+Query platform for calls with recordings. Reuse patterns from `call-history.tsx`.
+
+```typescript
+// Query: calls where recording primaryLinkUrl is not empty
+const QUERY = `{ calls(first: 100, filter: {
+    recording: { primaryLinkUrl: { neq: "" } }
+}, orderBy: [{ startedAt: DescNullsLast }]) { edges { node {
+    id direction callStatus callerNumber { primaryPhoneNumber }
+    agentName startedAt durationSec disposition
+    recording { primaryLinkUrl primaryLinkLabel }
+} } } }`;
+```
+
+Table columns: Agent, Caller (PhoneActionCell), Type (In/Out badge), Date, Duration, Disposition, Recording (play button).
+
+Search by agent name or phone number. Date filter optional.
+
+- [ ] **Step 2: Verify build**
+
+```bash
+cd helix-engage && npm run build
+```
+
+- [ ] **Step 3: Commit**
+
+```bash
+git add src/pages/call-recordings.tsx
+git commit -m "feat: call recordings master page"
+```
+
+---
+
+## Task 3: Missed Calls Page (Supervisor View)
+
+**Files:**
+- Modify: `helix-engage/src/pages/missed-calls.tsx`
+
+- [ ] **Step 1: Implement missed calls page**
+
+Query platform for all missed calls — no agent filter (supervisor sees all).
+
+```typescript
+const QUERY = `{ calls(first: 100, filter: {
+    callStatus: { eq: MISSED }
+}, orderBy: [{ startedAt: DescNullsLast }]) { edges { node {
+    id callerNumber { primaryPhoneNumber } agentName
+    startedAt callsourcenumber callbackstatus missedcallcount callbackattemptedat
+} } } }`;
+```
+
+Table columns: Caller (PhoneActionCell), Date/Time, Branch (`callsourcenumber`), Agent, Callback Status (badge), SLA (computed from `startedAt`).
+
+Tabs: All | Pending (`PENDING_CALLBACK`) | Attempted (`CALLBACK_ATTEMPTED`) | Completed (`CALLBACK_COMPLETED` + `WRONG_NUMBER`).
+
+Search by phone or agent.
+
+- [ ] **Step 2: Verify build**
+
+```bash
+cd helix-engage && npm run build
+```
+
+- [ ] **Step 3: Commit**
+
+```bash
+git add src/pages/missed-calls.tsx
+git commit -m "feat: missed calls master page for supervisors"
+```
+
+---
+
+## Task 4: Sidecar — Supervisor Module
+
+**Files:**
+- Create: `helix-engage-server/src/supervisor/supervisor.service.ts`
+- Create: `helix-engage-server/src/supervisor/supervisor.controller.ts`
+- Create: `helix-engage-server/src/supervisor/supervisor.module.ts`
+- Modify: `helix-engage-server/src/app.module.ts`
+
+- [ ] **Step 1: Create supervisor service**
+
+```typescript
+// supervisor.service.ts
+// Two responsibilities:
+// 1. Aggregate Ozonetel agent summary across all agents
+// 2. Track active calls from Ozonetel real-time events
+
+import { Injectable, Logger, OnModuleInit } from '@nestjs/common';
+import { ConfigService } from '@nestjs/config';
+import { PlatformGraphqlService } from '../platform/platform-graphql.service';
+import { OzonetelAgentService } from '../ozonetel/ozonetel-agent.service';
+
+type ActiveCall = {
+    ucid: string;
+    agentId: string;
+    callerNumber: string;
+    callType: string;
+    startTime: string;
+    status: 'active' | 'on-hold';
+};
+
+@Injectable()
+export class SupervisorService implements OnModuleInit {
+    private readonly logger = new Logger(SupervisorService.name);
+    private readonly activeCalls = new Map<string, ActiveCall>();
+
+    constructor(
+        private platform: PlatformGraphqlService,
+        private ozonetel: OzonetelAgentService,
+        private config: ConfigService,
+    ) {}
+
+    async onModuleInit() {
+        // Subscribe to Ozonetel events (fire and forget)
+        // Will be implemented when webhook URL is configured
+        this.logger.log('Supervisor service initialized');
+    }
+
+    // Called by webhook when Ozonetel pushes call events
+    handleCallEvent(event: any) {
+        const { action, ucid, agent_id, caller_id, call_type, event_time } = event;
+        if (action === 'Answered' || action === 'Calling') {
+            this.activeCalls.set(ucid, {
+                ucid, agentId: agent_id, callerNumber: caller_id,
+                callType: call_type, startTime: event_time, status: 'active',
+            });
+        } else if (action === 'Disconnect') {
+            this.activeCalls.delete(ucid);
+        }
+    }
+
+    // Called by webhook when Ozonetel pushes agent events
+    handleAgentEvent(event: any) {
+        this.logger.log(`Agent event: ${event.agentId} → ${event.action}`);
+    }
+
+    getActiveCalls(): ActiveCall[] {
+        return Array.from(this.activeCalls.values());
+    }
+
+    // Aggregate time breakdown across all agents
+    async getTeamPerformance(date: string): Promise<any> {
+        // Get all agent IDs from platform
+        const agentData = await this.platform.query<any>(
+            `{ agents(first: 20) { edges { node {
+                id name ozonetelagentid npsscore maxidleminutes minnpsthreshold minconversionpercent
+            } } } }`,
+        );
+        const agents = agentData?.agents?.edges?.map((e: any) => e.node) ?? [];
+
+        // Fetch Ozonetel summary per agent
+        const summaries = await Promise.all(
+            agents.map(async (agent: any) => {
+                try {
+                    const summary = await this.ozonetel.getAgentSummary(agent.ozonetelagentid, date);
+                    return { ...agent, timeBreakdown: summary };
+                } catch {
+                    return { ...agent, timeBreakdown: null };
+                }
+            }),
+        );
+
+        return { date, agents: summaries };
+    }
+}
+```
+
+- [ ] **Step 2: Create supervisor controller**
+
+```typescript
+// supervisor.controller.ts
+import { Controller, Get, Post, Body, Query, Logger } from '@nestjs/common';
+import { SupervisorService } from './supervisor.service';
+
+@Controller('api/supervisor')
+export class SupervisorController {
+    private readonly logger = new Logger(SupervisorController.name);
+
+    constructor(private readonly supervisor: SupervisorService) {}
+
+    @Get('active-calls')
+    getActiveCalls() {
+        return this.supervisor.getActiveCalls();
+    }
+
+    @Get('team-performance')
+    async getTeamPerformance(@Query('date') date?: string) {
+        const targetDate = date ?? new Date().toISOString().split('T')[0];
+        return this.supervisor.getTeamPerformance(targetDate);
+    }
+
+    @Post('call-event')
+    handleCallEvent(@Body() body: any) {
+        // Ozonetel pushes events here
+        const event = body.data ?? body;
+        this.logger.log(`Call event: ${event.action} ucid=${event.ucid} agent=${event.agent_id}`);
+        this.supervisor.handleCallEvent(event);
+        return { received: true };
+    }
+
+    @Post('agent-event')
+    handleAgentEvent(@Body() body: any) {
+        const event = body.data ?? body;
+        this.logger.log(`Agent event: ${event.action} agent=${event.agentId}`);
+        this.supervisor.handleAgentEvent(event);
+        return { received: true };
+    }
+}
+```
+
+- [ ] **Step 3: Create supervisor module and register**
+
+```typescript
+// supervisor.module.ts
+import { Module } from '@nestjs/common';
+import { PlatformModule } from '../platform/platform.module';
+import { OzonetelAgentModule } from '../ozonetel/ozonetel-agent.module';
+import { SupervisorController } from './supervisor.controller';
+import { SupervisorService } from './supervisor.service';
+
+@Module({
+    imports: [PlatformModule, OzonetelAgentModule],
+    controllers: [SupervisorController],
+    providers: [SupervisorService],
+})
+export class SupervisorModule {}
+```
+
+Add to `app.module.ts`:
+```typescript
+import { SupervisorModule } from './supervisor/supervisor.module';
+// Add to imports array
+```
+
+- [ ] **Step 4: Verify sidecar build**
+
+```bash
+cd helix-engage-server && npm run build
+```
+
+- [ ] **Step 5: Commit**
+
+```bash
+git add src/supervisor/ src/app.module.ts
+git commit -m "feat: supervisor module with team performance + active calls endpoints"
+```
+
+---
+
+## Task 5: Team Performance Dashboard (PP-5)
+
+**Files:**
+- Modify: `helix-engage/src/pages/team-performance.tsx`
+
+This is the largest task. The page queries platform directly for calls/appointments/leads and the sidecar for time breakdown.
+
+- [ ] **Step 1: Build the full page**
+
+The page has 6 sections. Use `apiClient.graphql()` for platform data and `apiClient.get()` for sidecar data.
+
+**Queries needed:**
+- Calls by date range: `calls(first: 500, filter: { startedAt: { gte: "...", lte: "..." } })`
+- Appointments by date range: `appointments(first: 200, filter: { scheduledAt: { gte: "...", lte: "..." } })`
+- Leads: `leads(first: 200)`
+- Follow-ups: `followUps(first: 200)`
+- Agents with thresholds: `agents(first: 20) { ... npsscore maxidleminutes minnpsthreshold minconversionpercent }`
+- Sidecar: `GET /api/supervisor/team-performance?date=YYYY-MM-DD`
+
+**Date range logic:**
+- Today: today start → now
+- Week: Monday of current week → now
+- Month: 1st of current month → now
+- Year: Jan 1 → now
+- Custom: user-selected range
+
+**Sections to implement:**
+1. Key Metrics bar (6 cards in a row)
+2. Call Breakdown Trends (2 ECharts line charts side by side)
+3. Agent Performance table (sortable)
+4. Time Breakdown (team average + per-agent stacked bars)
+5. NPS + Conversion Metrics (donut + cards)
+6. Performance Alerts (threshold comparison)
+
+Check if ECharts is already installed:
+```bash
+grep echarts helix-engage/package.json
+```
+If not, install: `npm install echarts echarts-for-react`
+
+Follow the existing My Performance page (`my-performance.tsx`) for ECharts patterns.
+
+- [ ] **Step 2: Verify build**
+
+```bash
+cd helix-engage && npm run build
+```
+
+- [ ] **Step 3: Test locally**
+
+```bash
+cd helix-engage && npm run dev
+```
+
+Navigate to `/team-performance` as admin user. Verify all 6 sections render with real data.
+
+- [ ] **Step 4: Commit**
+
+```bash
+git add src/pages/team-performance.tsx package.json package-lock.json
+git commit -m "feat: team performance dashboard (PP-5) with 6 data sections"
+```
+
+---
+
+## Task 6: Live Call Monitor (PP-6)
+
+**Files:**
+- Modify: `helix-engage/src/pages/live-monitor.tsx`
+
+- [ ] **Step 1: Build the live monitor page**
+
+Page polls `GET /api/supervisor/active-calls` every 5 seconds.
+
+**Structure:**
+1. TopBar: "Live Call Monitor" with subtitle "Listen, whisper, or barge into active calls"
+2. Three KPI cards: Active Calls, On Hold, Avg Duration
+3. Active Calls table: Agent, Caller, Type, Department, Duration (live counter), Status, Actions
+4. Actions: Listen / Whisper / Barge buttons — all disabled with tooltip "Coming soon — pending Ozonetel API"
+5. Empty state: headphones icon + "No active calls"
+
+Duration should be a live counter — calculated client-side from `startTime` in the active call data. Use `setInterval` to update every second.
+
+Caller name: attempt to match `callerNumber` against leads from `useData()`. If matched, show lead name + phone. If not, show phone only.
+
+- [ ] **Step 2: Verify build**
+
+```bash
+cd helix-engage && npm run build
+```
+
+- [ ] **Step 3: Test locally**
+
+Navigate to `/live-monitor`. Verify empty state renders. If Ozonetel events are flowing, verify active calls appear.
+
+- [ ] **Step 4: Commit**
+
+```bash
+git add src/pages/live-monitor.tsx
+git commit -m "feat: live call monitor page (PP-6) with polling + KPI cards"
+```
+
+---
+
+## Task 7: Local Testing + Final Verification
+
+- [ ] **Step 1: Run both locally**
+
+Terminal 1: `cd helix-engage-server && npm run start:dev`
+Terminal 2: `cd helix-engage && npm run dev`
+
+- [ ] **Step 2: Test admin login**
+
+Login as admin (sanjay.marketing@globalhospital.com). Verify:
+- Sidebar shows new nav structure (Supervisor + Data & Reports sections)
+- Dashboard loads
+- Team Performance shows data from platform
+- Live Monitor shows empty state or active calls
+- All master data pages load (Lead, Patient, Appointment, Call Log, Call Recordings, Missed Calls)
+
+- [ ] **Step 3: Commit any fixes**
+
+- [ ] **Step 4: Push to Azure**
+
+```bash
+cd helix-engage && git push origin dev
+cd helix-engage-server && git push origin dev
+```

docs/superpowers/plans/2026-03-31-csv-lead-import.md

@@ -0,0 +1,735 @@
+# CSV Lead Import — Implementation Plan
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+
+**Goal:** Allow supervisors to import leads from CSV into an existing campaign via a modal wizard with column mapping and patient matching.
+
+**Architecture:** Client-side CSV parsing with a 3-step modal wizard (select campaign → upload/map/preview → import). Leads created via existing GraphQL proxy. No new sidecar endpoints needed.
+
+**Tech Stack:** React modal (Untitled UI), native FileReader + string split for CSV parsing, existing DataProvider for patient/lead matching, platform GraphQL mutations for lead creation.
+
+---
+
+## File Map
+
+| File | Action | Responsibility |
+|---|---|---|
+| `src/lib/csv-utils.ts` | Create | CSV parsing, phone normalization, fuzzy column matching |
+| `src/components/campaigns/lead-import-wizard.tsx` | Create | Modal wizard: campaign select → upload/preview → import |
+| `src/pages/campaigns.tsx` | Modify | Add "Import Leads" button |
+
+---
+
+### Task 1: CSV Parsing & Column Matching Utility
+
+**Files:**
+- Create: `src/lib/csv-utils.ts`
+
+- [ ] **Step 1: Create csv-utils.ts with parseCSV function**
+
+```typescript
+// src/lib/csv-utils.ts
+
+export type CSVRow = Record<string, string>;
+
+export type CSVParseResult = {
+    headers: string[];
+    rows: CSVRow[];
+};
+
+export const parseCSV = (text: string): CSVParseResult => {
+    const lines = text.split(/\r?\n/).filter(line => line.trim());
+    if (lines.length === 0) return { headers: [], rows: [] };
+
+    const parseLine = (line: string): string[] => {
+        const result: string[] = [];
+        let current = '';
+        let inQuotes = false;
+
+        for (let i = 0; i < line.length; i++) {
+            const char = line[i];
+            if (char === '"') {
+                if (inQuotes && line[i + 1] === '"') {
+                    current += '"';
+                    i++;
+                } else {
+                    inQuotes = !inQuotes;
+                }
+            } else if (char === ',' && !inQuotes) {
+                result.push(current.trim());
+                current = '';
+            } else {
+                current += char;
+            }
+        }
+        result.push(current.trim());
+        return result;
+    };
+
+    const headers = parseLine(lines[0]);
+    const rows = lines.slice(1).map(line => {
+        const values = parseLine(line);
+        const row: CSVRow = {};
+        headers.forEach((header, i) => {
+            row[header] = values[i] ?? '';
+        });
+        return row;
+    });
+
+    return { headers, rows };
+};
+```
+
+- [ ] **Step 2: Add normalizePhone function**
+
+```typescript
+export const normalizePhone = (raw: string): string => {
+    const digits = raw.replace(/\D/g, '');
+    const stripped = digits.length >= 12 && digits.startsWith('91') ? digits.slice(2) : digits;
+    return stripped.slice(-10);
+};
+```
+
+- [ ] **Step 3: Add fuzzy column matching**
+
+```typescript
+export type LeadFieldMapping = {
+    csvHeader: string;
+    leadField: string | null;
+    label: string;
+};
+
+const LEAD_FIELDS = [
+    { field: 'contactName.firstName', label: 'First Name', patterns: ['first name', 'firstname', 'name', 'patient name', 'patient'] },
+    { field: 'contactName.lastName', label: 'Last Name', patterns: ['last name', 'lastname', 'surname'] },
+    { field: 'contactPhone', label: 'Phone', patterns: ['phone', 'mobile', 'contact number', 'cell', 'phone number', 'mobile number'] },
+    { field: 'contactEmail', label: 'Email', patterns: ['email', 'email address', 'mail'] },
+    { field: 'interestedService', label: 'Interested Service', patterns: ['service', 'interested in', 'department', 'specialty', 'interest'] },
+    { field: 'priority', label: 'Priority', patterns: ['priority', 'urgency'] },
+    { field: 'utmSource', label: 'UTM Source', patterns: ['utm_source', 'utmsource', 'source'] },
+    { field: 'utmMedium', label: 'UTM Medium', patterns: ['utm_medium', 'utmmedium', 'medium'] },
+    { field: 'utmCampaign', label: 'UTM Campaign', patterns: ['utm_campaign', 'utmcampaign'] },
+    { field: 'utmTerm', label: 'UTM Term', patterns: ['utm_term', 'utmterm', 'term'] },
+    { field: 'utmContent', label: 'UTM Content', patterns: ['utm_content', 'utmcontent'] },
+];
+
+export const fuzzyMatchColumns = (csvHeaders: string[]): LeadFieldMapping[] => {
+    const used = new Set<string>();
+
+    return csvHeaders.map(header => {
+        const normalized = header.toLowerCase().trim().replace(/[^a-z0-9 ]/g, '');
+        let bestMatch: string | null = null;
+
+        for (const field of LEAD_FIELDS) {
+            if (used.has(field.field)) continue;
+            if (field.patterns.some(p => normalized === p || normalized.includes(p))) {
+                bestMatch = field.field;
+                used.add(field.field);
+                break;
+            }
+        }
+
+        return {
+            csvHeader: header,
+            leadField: bestMatch,
+            label: bestMatch ? LEAD_FIELDS.find(f => f.field === bestMatch)!.label : '',
+        };
+    });
+};
+
+export { LEAD_FIELDS };
+```
+
+- [ ] **Step 4: Add buildLeadPayload helper**
+
+```typescript
+export const buildLeadPayload = (
+    row: CSVRow,
+    mapping: LeadFieldMapping[],
+    campaignId: string,
+    patientId: string | null,
+    platform: string | null,
+) => {
+    const getValue = (field: string): string => {
+        const entry = mapping.find(m => m.leadField === field);
+        return entry ? (row[entry.csvHeader] ?? '').trim() : '';
+    };
+
+    const firstName = getValue('contactName.firstName') || 'Unknown';
+    const lastName = getValue('contactName.lastName');
+    const phone = normalizePhone(getValue('contactPhone'));
+
+    if (!phone || phone.length < 10) return null;
+
+    const sourceMap: Record<string, string> = {
+        FACEBOOK: 'FACEBOOK_AD',
+        GOOGLE: 'GOOGLE_AD',
+        INSTAGRAM: 'INSTAGRAM',
+        MANUAL: 'OTHER',
+    };
+
+    return {
+        name: `${firstName} ${lastName}`.trim(),
+        contactName: { firstName, lastName },
+        contactPhone: { primaryPhoneNumber: `+91${phone}` },
+        ...(getValue('contactEmail') ? { contactEmail: { primaryEmail: getValue('contactEmail') } } : {}),
+        ...(getValue('interestedService') ? { interestedService: getValue('interestedService') } : {}),
+        ...(getValue('utmSource') ? { utmSource: getValue('utmSource') } : {}),
+        ...(getValue('utmMedium') ? { utmMedium: getValue('utmMedium') } : {}),
+        ...(getValue('utmCampaign') ? { utmCampaign: getValue('utmCampaign') } : {}),
+        ...(getValue('utmTerm') ? { utmTerm: getValue('utmTerm') } : {}),
+        ...(getValue('utmContent') ? { utmContent: getValue('utmContent') } : {}),
+        source: sourceMap[platform ?? ''] ?? 'OTHER',
+        status: 'NEW',
+        campaignId,
+        ...(patientId ? { patientId } : {}),
+    };
+};
+```
+
+- [ ] **Step 5: Commit**
+
+```bash
+git add src/lib/csv-utils.ts
+git commit -m "feat: CSV parsing, phone normalization, and fuzzy column matching utility"
+```
+
+---
+
+### Task 2: Lead Import Wizard Component
+
+**Files:**
+- Create: `src/components/campaigns/lead-import-wizard.tsx`
+
+- [ ] **Step 1: Create wizard component with campaign selection step**
+
+```typescript
+// src/components/campaigns/lead-import-wizard.tsx
+import { useState, useMemo, useCallback } from 'react';
+import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
+import { faFileImport, faCheck, faSpinner, faTriangleExclamation, faCloudArrowUp } from '@fortawesome/pro-duotone-svg-icons';
+import { Dialog, Modal, ModalOverlay } from '@/components/application/modals/modal';
+import { Button } from '@/components/base/buttons/button';
+import { Badge } from '@/components/base/badges/badges';
+import { Table } from '@/components/application/table/table';
+import { FeaturedIcon } from '@/components/foundations/featured-icon/featured-icon';
+import { Select } from '@/components/base/select/select';
+import { useData } from '@/providers/data-provider';
+import { apiClient } from '@/lib/api-client';
+import { parseCSV, fuzzyMatchColumns, buildLeadPayload, normalizePhone, LEAD_FIELDS, type LeadFieldMapping, type CSVRow } from '@/lib/csv-utils';
+import { cx } from '@/utils/cx';
+import type { Campaign } from '@/types/entities';
+import type { FC } from 'react';
+
+const FileImportIcon: FC<{ className?: string }> = ({ className }) => (
+    <FontAwesomeIcon icon={faFileImport} className={className} />
+);
+
+type ImportStep = 'select-campaign' | 'upload-preview' | 'importing' | 'done';
+
+type ImportResult = {
+    created: number;
+    linkedToPatient: number;
+    skippedDuplicate: number;
+    skippedNoPhone: number;
+    failed: number;
+    total: number;
+};
+
+interface LeadImportWizardProps {
+    isOpen: boolean;
+    onOpenChange: (open: boolean) => void;
+}
+
+export const LeadImportWizard = ({ isOpen, onOpenChange }: LeadImportWizardProps) => {
+    const { campaigns, leads, patients, refresh } = useData();
+    const [step, setStep] = useState<ImportStep>('select-campaign');
+    const [selectedCampaign, setSelectedCampaign] = useState<Campaign | null>(null);
+    const [csvRows, setCsvRows] = useState<CSVRow[]>([]);
+    const [csvHeaders, setCsvHeaders] = useState<string[]>([]);
+    const [mapping, setMapping] = useState<LeadFieldMapping[]>([]);
+    const [result, setResult] = useState<ImportResult | null>(null);
+    const [importProgress, setImportProgress] = useState(0);
+
+    const activeCampaigns = useMemo(() =>
+        campaigns.filter(c => c.campaignStatus === 'ACTIVE' || c.campaignStatus === 'PAUSED'),
+        [campaigns],
+    );
+
+    const handleClose = () => {
+        onOpenChange(false);
+        // Reset state after close animation
+        setTimeout(() => {
+            setStep('select-campaign');
+            setSelectedCampaign(null);
+            setCsvRows([]);
+            setCsvHeaders([]);
+            setMapping([]);
+            setResult(null);
+            setImportProgress(0);
+        }, 300);
+    };
+
+    const handleCampaignSelect = (campaign: Campaign) => {
+        setSelectedCampaign(campaign);
+        setStep('upload-preview');
+    };
+
+    const handleFileUpload = (e: React.ChangeEvent<HTMLInputElement>) => {
+        const file = e.target.files?.[0];
+        if (!file) return;
+
+        const reader = new FileReader();
+        reader.onload = (event) => {
+            const text = event.target?.result as string;
+            const { headers, rows } = parseCSV(text);
+            setCsvHeaders(headers);
+            setCsvRows(rows);
+            setMapping(fuzzyMatchColumns(headers));
+        };
+        reader.readAsText(file);
+    };
+
+    const handleMappingChange = (csvHeader: string, leadField: string | null) => {
+        setMapping(prev => prev.map(m =>
+            m.csvHeader === csvHeader ? { ...m, leadField, label: leadField ? LEAD_FIELDS.find(f => f.field === leadField)?.label ?? '' : '' } : m,
+        ));
+    };
+
+    // Patient matching for preview
+    const rowsWithMatch = useMemo(() => {
+        const phoneMapping = mapping.find(m => m.leadField === 'contactPhone');
+        if (!phoneMapping || csvRows.length === 0) return [];
+
+        const existingLeadPhones = new Set(
+            leads.map(l => normalizePhone(l.contactPhone?.[0]?.number ?? '')).filter(p => p.length === 10),
+        );
+
+        const patientByPhone = new Map(
+            patients
+                .filter(p => p.phones?.primaryPhoneNumber)
+                .map(p => [normalizePhone(p.phones!.primaryPhoneNumber), p]),
+        );
+
+        return csvRows.map(row => {
+            const rawPhone = row[phoneMapping.csvHeader] ?? '';
+            const phone = normalizePhone(rawPhone);
+            const matchedPatient = phone.length === 10 ? patientByPhone.get(phone) : null;
+            const isDuplicate = phone.length === 10 && existingLeadPhones.has(phone);
+            const hasPhone = phone.length === 10;
+
+            return { row, phone, matchedPatient, isDuplicate, hasPhone };
+        });
+    }, [csvRows, mapping, leads, patients]);
+
+    const phoneIsMapped = mapping.some(m => m.leadField === 'contactPhone');
+    const validCount = rowsWithMatch.filter(r => r.hasPhone && !r.isDuplicate).length;
+    const duplicateCount = rowsWithMatch.filter(r => r.isDuplicate).length;
+    const noPhoneCount = rowsWithMatch.filter(r => !r.hasPhone).length;
+    const patientMatchCount = rowsWithMatch.filter(r => r.matchedPatient).length;
+
+    const handleImport = async () => {
+        if (!selectedCampaign) return;
+        setStep('importing');
+
+        const importResult: ImportResult = { created: 0, linkedToPatient: 0, skippedDuplicate: 0, skippedNoPhone: 0, failed: 0, total: rowsWithMatch.length };
+
+        for (let i = 0; i < rowsWithMatch.length; i++) {
+            const { row, isDuplicate, hasPhone, matchedPatient } = rowsWithMatch[i];
+
+            if (!hasPhone) { importResult.skippedNoPhone++; setImportProgress(i + 1); continue; }
+            if (isDuplicate) { importResult.skippedDuplicate++; setImportProgress(i + 1); continue; }
+
+            const payload = buildLeadPayload(row, mapping, selectedCampaign.id, matchedPatient?.id ?? null, selectedCampaign.platform);
+            if (!payload) { importResult.skippedNoPhone++; setImportProgress(i + 1); continue; }
+
+            try {
+                await apiClient.graphql(
+                    `mutation($data: LeadCreateInput!) { createLead(data: $data) { id } }`,
+                    { data: payload },
+                    { silent: true },
+                );
+                importResult.created++;
+                if (matchedPatient) importResult.linkedToPatient++;
+            } catch {
+                importResult.failed++;
+            }
+
+            setImportProgress(i + 1);
+        }
+
+        setResult(importResult);
+        setStep('done');
+        refresh();
+    };
+
+    // Available lead fields for mapping dropdown (exclude already-mapped ones)
+    const availableFields = useMemo(() => {
+        const usedFields = new Set(mapping.filter(m => m.leadField).map(m => m.leadField));
+        return LEAD_FIELDS.map(f => ({
+            id: f.field,
+            name: f.label,
+            isDisabled: usedFields.has(f.field),
+        }));
+    }, [mapping]);
+
+    return (
+        <ModalOverlay isOpen={isOpen} isDismissable onOpenChange={(open) => { if (!open) handleClose(); }}>
+            <Modal className="sm:max-w-3xl">
+                <Dialog>
+                    {() => (
+                        <div className="flex w-full flex-col rounded-xl bg-primary shadow-xl ring-1 ring-secondary overflow-hidden max-h-[85vh]">
+                            {/* Header */}
+                            <div className="flex items-center justify-between px-6 py-4 border-b border-secondary shrink-0">
+                                <div className="flex items-center gap-3">
+                                    <FeaturedIcon icon={FileImportIcon} color="brand" theme="light" size="sm" />
+                                    <div>
+                                        <h2 className="text-lg font-semibold text-primary">Import Leads</h2>
+                                        <p className="text-xs text-tertiary">
+                                            {step === 'select-campaign' && 'Select a campaign to import leads into'}
+                                            {step === 'upload-preview' && `Importing into: ${selectedCampaign?.campaignName}`}
+                                            {step === 'importing' && 'Importing leads...'}
+                                            {step === 'done' && 'Import complete'}
+                                        </p>
+                                    </div>
+                                </div>
+                                <button onClick={handleClose} className="text-fg-quaternary hover:text-fg-secondary text-lg">&times;</button>
+                            </div>
+
+                            {/* Content */}
+                            <div className="flex-1 overflow-y-auto px-6 py-4 min-h-0">
+
+                                {/* Step 1: Campaign Cards */}
+                                {step === 'select-campaign' && (
+                                    <div className="grid grid-cols-2 gap-3">
+                                        {activeCampaigns.length === 0 ? (
+                                            <p className="col-span-2 py-12 text-center text-sm text-tertiary">No active campaigns. Create a campaign first.</p>
+                                        ) : (
+                                            activeCampaigns.map(campaign => (
+                                                <button
+                                                    key={campaign.id}
+                                                    onClick={() => handleCampaignSelect(campaign)}
+                                                    className={cx(
+                                                        'flex flex-col items-start rounded-xl border-2 p-4 text-left transition duration-100 ease-linear hover:border-brand',
+                                                        selectedCampaign?.id === campaign.id ? 'border-brand bg-brand-primary' : 'border-secondary',
+                                                    )}
+                                                >
+                                                    <span className="text-sm font-semibold text-primary">{campaign.campaignName ?? 'Untitled'}</span>
+                                                    <div className="mt-1 flex items-center gap-2">
+                                                        {campaign.platform && <Badge size="sm" color="brand" type="pill-color">{campaign.platform}</Badge>}
+                                                        <Badge size="sm" color={campaign.campaignStatus === 'ACTIVE' ? 'success' : 'gray'} type="pill-color">
+                                                            {campaign.campaignStatus}
+                                                        </Badge>
+                                                    </div>
+                                                    <span className="mt-2 text-xs text-tertiary">{campaign.leadCount ?? 0} leads</span>
+                                                </button>
+                                            ))
+                                        )}
+                                    </div>
+                                )}
+
+                                {/* Step 2: Upload + Preview */}
+                                {step === 'upload-preview' && (
+                                    <div className="space-y-4">
+                                        {/* File upload */}
+                                        {csvRows.length === 0 ? (
+                                            <label className="flex flex-col items-center justify-center rounded-xl border-2 border-dashed border-secondary py-12 cursor-pointer hover:border-brand hover:bg-brand-primary transition duration-100 ease-linear">
+                                                <FontAwesomeIcon icon={faCloudArrowUp} className="size-8 text-fg-quaternary mb-3" />
+                                                <span className="text-sm font-medium text-secondary">Drop CSV file here or click to browse</span>
+                                                <span className="text-xs text-tertiary mt-1">CSV files only, max 5000 rows</span>
+                                                <input type="file" accept=".csv" onChange={handleFileUpload} className="hidden" />
+                                            </label>
+                                        ) : (
+                                            <>
+                                                {/* Validation banner */}
+                                                {!phoneIsMapped && (
+                                                    <div className="flex items-center gap-2 rounded-lg bg-error-primary px-4 py-3">
+                                                        <FontAwesomeIcon icon={faTriangleExclamation} className="size-4 text-fg-error-primary" />
+                                                        <span className="text-sm font-medium text-error-primary">Phone column must be mapped to proceed</span>
+                                                    </div>
+                                                )}
+
+                                                {/* Summary */}
+                                                <div className="flex items-center gap-4 text-xs text-tertiary">
+                                                    <span>{csvRows.length} rows</span>
+                                                    <span className="text-success-primary">{validCount} ready</span>
+                                                    {patientMatchCount > 0 && <span className="text-brand-secondary">{patientMatchCount} existing patients</span>}
+                                                    {duplicateCount > 0 && <span className="text-warning-primary">{duplicateCount} duplicates</span>}
+                                                    {noPhoneCount > 0 && <span className="text-error-primary">{noPhoneCount} no phone</span>}
+                                                </div>
+
+                                                {/* Column mapping + preview table */}
+                                                <div className="overflow-x-auto rounded-lg border border-secondary">
+                                                    <table className="w-full text-xs">
+                                                        {/* Mapping row */}
+                                                        <thead>
+                                                            <tr className="bg-secondary">
+                                                                {mapping.map(m => (
+                                                                    <th key={m.csvHeader} className="px-3 py-2 text-left font-normal">
+                                                                        <div className="space-y-1">
+                                                                            <span className="text-[10px] text-quaternary uppercase">{m.csvHeader}</span>
+                                                                            <select
+                                                                                value={m.leadField ?? ''}
+                                                                                onChange={e => handleMappingChange(m.csvHeader, e.target.value || null)}
+                                                                                className="w-full rounded border border-secondary bg-primary px-2 py-1 text-xs text-primary"
+                                                                            >
+                                                                                <option value="">Skip</option>
+                                                                                {LEAD_FIELDS.map(f => (
+                                                                                    <option key={f.field} value={f.field}>{f.label}</option>
+                                                                                ))}
+                                                                            </select>
+                                                                        </div>
+                                                                    </th>
+                                                                ))}
+                                                                <th className="px-3 py-2 text-left font-normal">
+                                                                    <span className="text-[10px] text-quaternary uppercase">Patient Match</span>
+                                                                </th>
+                                                            </tr>
+                                                        </thead>
+                                                        <tbody>
+                                                            {rowsWithMatch.slice(0, 20).map((item, i) => (
+                                                                <tr key={i} className={cx(
+                                                                    'border-t border-secondary',
+                                                                    item.isDuplicate && 'bg-warning-primary opacity-60',
+                                                                    !item.hasPhone && 'bg-error-primary opacity-40',
+                                                                )}>
+                                                                    {mapping.map(m => (
+                                                                        <td key={m.csvHeader} className="px-3 py-2 text-tertiary truncate max-w-[150px]">
+                                                                            {item.row[m.csvHeader] ?? ''}
+                                                                        </td>
+                                                                    ))}
+                                                                    <td className="px-3 py-2">
+                                                                        {item.matchedPatient ? (
+                                                                            <Badge size="sm" color="success" type="pill-color">
+                                                                                {item.matchedPatient.fullName?.firstName ?? 'Patient'}
+                                                                            </Badge>
+                                                                        ) : item.isDuplicate ? (
+                                                                            <Badge size="sm" color="warning" type="pill-color">Duplicate</Badge>
+                                                                        ) : !item.hasPhone ? (
+                                                                            <Badge size="sm" color="error" type="pill-color">No phone</Badge>
+                                                                        ) : (
+                                                                            <Badge size="sm" color="gray" type="pill-color">New</Badge>
+                                                                        )}
+                                                                    </td>
+                                                                </tr>
+                                                            ))}
+                                                        </tbody>
+                                                    </table>
+                                                    {csvRows.length > 20 && (
+                                                        <div className="bg-secondary px-3 py-2 text-center text-xs text-tertiary">
+                                                            Showing 20 of {csvRows.length} rows
+                                                        </div>
+                                                    )}
+                                                </div>
+                                            </>
+                                        )}
+                                    </div>
+                                )}
+
+                                {/* Step 3: Importing */}
+                                {step === 'importing' && (
+                                    <div className="flex flex-col items-center justify-center py-12">
+                                        <FontAwesomeIcon icon={faSpinner} className="size-8 animate-spin text-brand-secondary mb-4" />
+                                        <p className="text-sm font-semibold text-primary">Importing leads...</p>
+                                        <p className="text-xs text-tertiary mt-1">{importProgress} of {rowsWithMatch.length}</p>
+                                        <div className="mt-4 w-64 h-2 rounded-full bg-secondary overflow-hidden">
+                                            <div
+                                                className="h-full rounded-full bg-brand-solid transition-all duration-200"
+                                                style={{ width: `${(importProgress / rowsWithMatch.length) * 100}%` }}
+                                            />
+                                        </div>
+                                    </div>
+                                )}
+
+                                {/* Step 4: Done */}
+                                {step === 'done' && result && (
+                                    <div className="flex flex-col items-center justify-center py-12">
+                                        <FeaturedIcon icon={({ className }) => <FontAwesomeIcon icon={faCheck} className={className} />} color="success" theme="light" size="lg" />
+                                        <p className="text-lg font-semibold text-primary mt-4">Import Complete</p>
+                                        <div className="mt-4 grid grid-cols-2 gap-3 w-64 text-center">
+                                            <div className="rounded-lg bg-success-primary p-3">
+                                                <p className="text-xl font-bold text-success-primary">{result.created}</p>
+                                                <p className="text-xs text-tertiary">Created</p>
+                                            </div>
+                                            <div className="rounded-lg bg-brand-primary p-3">
+                                                <p className="text-xl font-bold text-brand-secondary">{result.linkedToPatient}</p>
+                                                <p className="text-xs text-tertiary">Linked to Patients</p>
+                                            </div>
+                                            {result.skippedDuplicate > 0 && (
+                                                <div className="rounded-lg bg-warning-primary p-3">
+                                                    <p className="text-xl font-bold text-warning-primary">{result.skippedDuplicate}</p>
+                                                    <p className="text-xs text-tertiary">Duplicates</p>
+                                                </div>
+                                            )}
+                                            {result.failed > 0 && (
+                                                <div className="rounded-lg bg-error-primary p-3">
+                                                    <p className="text-xl font-bold text-error-primary">{result.failed}</p>
+                                                    <p className="text-xs text-tertiary">Failed</p>
+                                                </div>
+                                            )}
+                                        </div>
+                                    </div>
+                                )}
+                            </div>
+
+                            {/* Footer */}
+                            <div className="flex items-center justify-between px-6 py-4 border-t border-secondary shrink-0">
+                                {step === 'select-campaign' && (
+                                    <Button size="sm" color="secondary" onClick={handleClose}>Cancel</Button>
+                                )}
+                                {step === 'upload-preview' && (
+                                    <>
+                                        <Button size="sm" color="secondary" onClick={() => { setStep('select-campaign'); setCsvRows([]); setMapping([]); }}>Back</Button>
+                                        <Button size="sm" color="primary" onClick={handleImport} isDisabled={!phoneIsMapped || validCount === 0}>
+                                            Import {validCount} Lead{validCount !== 1 ? 's' : ''}
+                                        </Button>
+                                    </>
+                                )}
+                                {step === 'done' && (
+                                    <Button size="sm" color="primary" onClick={handleClose} className="ml-auto">Done</Button>
+                                )}
+                            </div>
+                        </div>
+                    )}
+                </Dialog>
+            </Modal>
+        </ModalOverlay>
+    );
+};
+```
+
+- [ ] **Step 2: Commit**
+
+```bash
+git add src/components/campaigns/lead-import-wizard.tsx
+git commit -m "feat: lead import wizard with campaign selection, CSV preview, and patient matching"
+```
+
+---
+
+### Task 3: Add Import Button to Campaigns Page
+
+**Files:**
+- Modify: `src/pages/campaigns.tsx`
+
+- [ ] **Step 1: Import LeadImportWizard and add state + button**
+
+Add import at top of `campaigns.tsx`:
+
+```typescript
+import { LeadImportWizard } from '@/components/campaigns/lead-import-wizard';
+```
+
+Add state inside `CampaignsPage` component:
+
+```typescript
+const [importOpen, setImportOpen] = useState(false);
+```
+
+Add button next to the TopBar or in the header area. Replace the existing `TopBar` line:
+
+```typescript
+<TopBar title="Campaigns" subtitle={subtitle} />
+```
+
+with:
+
+```typescript
+<TopBar title="Campaigns" subtitle={subtitle}>
+    <Button
+        size="sm"
+        color="primary"
+        iconLeading={({ className }: { className?: string }) => (
+            <FontAwesomeIcon icon={faFileImport} className={className} />
+        )}
+        onClick={() => setImportOpen(true)}
+    >
+        Import Leads
+    </Button>
+</TopBar>
+```
+
+Add the import for `faFileImport`:
+
+```typescript
+import { faPenToSquare, faFileImport } from '@fortawesome/pro-duotone-svg-icons';
+```
+
+Add the wizard component before the closing `</div>` of the return, after the CampaignEditSlideout:
+
+```typescript
+<LeadImportWizard isOpen={importOpen} onOpenChange={setImportOpen} />
+```
+
+- [ ] **Step 2: Check if TopBar accepts children**
+
+Read `src/components/layout/top-bar.tsx` to verify it renders `children`. If not, place the button differently — inside the existing header div in campaigns.tsx.
+
+- [ ] **Step 3: Type check**
+
+Run: `npx tsc --noEmit --pretty`
+Expected: Clean (no errors)
+
+- [ ] **Step 4: Build**
+
+Run: `npm run build`
+Expected: Build succeeds
+
+- [ ] **Step 5: Commit**
+
+```bash
+git add src/pages/campaigns.tsx
+git commit -m "feat: add Import Leads button to campaigns page"
+```
+
+---
+
+### Task 4: Integration Verification
+
+- [ ] **Step 1: Verify full build**
+
+```bash
+npm run build
+```
+
+Expected: Build succeeds with no type errors.
+
+- [ ] **Step 2: Manual test checklist**
+
+1. Navigate to Campaigns page as admin
+2. "Import Leads" button visible
+3. Click → modal opens with campaign cards
+4. Select a campaign → proceeds to upload step
+5. Upload a test CSV → column mapping appears with fuzzy matches
+6. Phone column auto-detected
+7. Patient match column shows "Existing" or "New" badges
+8. Duplicate leads highlighted
+9. Click Import → progress bar → summary
+10. Close modal → campaign lead count updated
+
+- [ ] **Step 3: Create a test CSV file for verification**
+
+```csv
+First Name,Last Name,Phone,Email,Service,Priority
+Ganesh,Bandi,8885540404,ganesh@email.com,Back Pain,HIGH
+Meghana,,7702055204,meghana@email.com,Hair Loss,NORMAL
+Priya,Sharma,9949879837,,Prenatal Care,NORMAL
+New,Patient,9876500001,,General Checkup,LOW
+```
+
+- [ ] **Step 4: Final commit with test data**
+
+```bash
+git add -A
+git commit -m "feat: CSV lead import — complete wizard with campaign selection, mapping, and patient matching"
+```
+
+---
+
+## Execution Notes
+
+- The wizard uses the existing `ModalOverlay`/`Modal`/`Dialog` pattern from Untitled UI (same as disposition modal)
+- CSV parsing is native (no npm dependency) — handles quoted fields and commas
+- Patient matching uses DataProvider data already in memory — no additional API calls for matching
+- Lead creation uses existing GraphQL proxy — no new sidecar endpoint
+- The `useData().refresh()` call after import updates all DataProvider consumers (campaign lead counts, lead master, etc.)

docs/superpowers/plans/2026-04-02-design-tokens.md

@@ -0,0 +1,600 @@
+# Design Tokens — Implementation Plan
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+
+**Goal:** JSON-driven multi-hospital theming — sidecar serves theme config, frontend provider injects CSS variables + content tokens, supervisor edits branding from Settings.
+
+**Architecture:** Sidecar stores `data/theme.json`, serves via REST. Frontend `ThemeTokenProvider` fetches on mount, overrides CSS custom properties on `<html>`, exposes content tokens via React context. Settings page has a Branding tab for admins.
+
+**Tech Stack:** NestJS (sidecar controller/service), React context + CSS custom properties (frontend), Untitled UI components (settings form)
+
+**Spec:** `docs/superpowers/specs/2026-04-02-design-tokens-design.md`
+
+---
+
+## File Map
+
+| File | Action | Responsibility |
+|---|---|---|
+| `helix-engage-server/src/config/theme.controller.ts` | Create | GET/PUT/POST endpoints for theme |
+| `helix-engage-server/src/config/theme.service.ts` | Create | Read/write/validate/backup theme JSON |
+| `helix-engage-server/src/config/theme.defaults.ts` | Create | Default Global Hospital theme constant |
+| `helix-engage-server/src/config/config.module.ts` | Create | NestJS module for theme |
+| `helix-engage-server/src/app.module.ts` | Modify | Import ConfigThemeModule |
+| `helix-engage-server/data/theme.json` | Create | Default theme file |
+| `helix-engage/src/providers/theme-token-provider.tsx` | Create | Fetch theme, inject CSS vars, expose context |
+| `helix-engage/src/main.tsx` | Modify | Wrap app with ThemeTokenProvider |
+| `helix-engage/src/pages/login.tsx` | Modify | Consume tokens instead of hardcoded strings |
+| `helix-engage/src/components/layout/sidebar.tsx` | Modify | Consume tokens for title/subtitle |
+| `helix-engage/src/components/call-desk/ai-chat-panel.tsx` | Modify | Consume tokens for quick actions |
+| `helix-engage/src/pages/branding-settings.tsx` | Create | Branding tab in settings for admins |
+| `helix-engage/src/main.tsx` | Modify | Add branding settings route |
+
+---
+
+### Task 1: Default Theme Constant + Theme Service (Sidecar)
+
+**Files:**
+- Create: `helix-engage-server/src/config/theme.defaults.ts`
+- Create: `helix-engage-server/src/config/theme.service.ts`
+
+- [ ] **Step 1: Create theme.defaults.ts**
+
+```typescript
+// src/config/theme.defaults.ts
+
+export type ThemeConfig = {
+    brand: {
+        name: string;
+        hospitalName: string;
+        logo: string;
+        favicon: string;
+    };
+    colors: {
+        brand: Record<string, string>;
+    };
+    typography: {
+        body: string;
+        display: string;
+    };
+    login: {
+        title: string;
+        subtitle: string;
+        showGoogleSignIn: boolean;
+        showForgotPassword: boolean;
+        poweredBy: { label: string; url: string };
+    };
+    sidebar: {
+        title: string;
+        subtitle: string;
+    };
+    ai: {
+        quickActions: Array<{ label: string; prompt: string }>;
+    };
+};
+
+export const DEFAULT_THEME: ThemeConfig = {
+    brand: {
+        name: 'Helix Engage',
+        hospitalName: 'Global Hospital',
+        logo: '/helix-logo.png',
+        favicon: '/favicon.ico',
+    },
+    colors: {
+        brand: {
+            '25': 'rgb(239 246 255)',
+            '50': 'rgb(219 234 254)',
+            '100': 'rgb(191 219 254)',
+            '200': 'rgb(147 197 253)',
+            '300': 'rgb(96 165 250)',
+            '400': 'rgb(59 130 246)',
+            '500': 'rgb(37 99 235)',
+            '600': 'rgb(29 78 216)',
+            '700': 'rgb(30 64 175)',
+            '800': 'rgb(30 58 138)',
+            '900': 'rgb(23 37 84)',
+            '950': 'rgb(15 23 42)',
+        },
+    },
+    typography: {
+        body: "'Satoshi', var(--font-inter, 'Inter'), -apple-system, 'Segoe UI', Roboto, Arial, sans-serif",
+        display: "'General Sans', var(--font-inter, 'Inter'), -apple-system, 'Segoe UI', Roboto, Arial, sans-serif",
+    },
+    login: {
+        title: 'Sign in to Helix Engage',
+        subtitle: 'Global Hospital',
+        showGoogleSignIn: true,
+        showForgotPassword: true,
+        poweredBy: { label: 'Powered by F0rty2.ai', url: 'https://f0rty2.ai' },
+    },
+    sidebar: {
+        title: 'Helix Engage',
+        subtitle: 'Global Hospital · {role}',
+    },
+    ai: {
+        quickActions: [
+            { label: 'Doctor availability', prompt: 'What doctors are available and what are their visiting hours?' },
+            { label: 'Clinic timings', prompt: 'What are the clinic locations and timings?' },
+            { label: 'Patient history', prompt: "Can you summarize this patient's history?" },
+            { label: 'Treatment packages', prompt: 'What treatment packages are available?' },
+        ],
+    },
+};
+```
+
+- [ ] **Step 2: Create theme.service.ts**
+
+```typescript
+// src/config/theme.service.ts
+
+import { Injectable, Logger, OnModuleInit } from '@nestjs/common';
+import { readFileSync, writeFileSync, existsSync, mkdirSync, copyFileSync } from 'fs';
+import { join, dirname } from 'path';
+import { DEFAULT_THEME, type ThemeConfig } from './theme.defaults';
+
+const THEME_PATH = join(process.cwd(), 'data', 'theme.json');
+const BACKUP_DIR = join(process.cwd(), 'data', 'theme-backups');
+
+@Injectable()
+export class ThemeService implements OnModuleInit {
+    private readonly logger = new Logger(ThemeService.name);
+    private cached: ThemeConfig | null = null;
+
+    onModuleInit() {
+        this.load();
+    }
+
+    getTheme(): ThemeConfig {
+        if (this.cached) return this.cached;
+        return this.load();
+    }
+
+    updateTheme(updates: Partial<ThemeConfig>): ThemeConfig {
+        const current = this.getTheme();
+
+        // Deep merge
+        const merged: ThemeConfig = {
+            brand: { ...current.brand, ...updates.brand },
+            colors: {
+                brand: { ...current.colors.brand, ...updates.colors?.brand },
+            },
+            typography: { ...current.typography, ...updates.typography },
+            login: { ...current.login, ...updates.login, poweredBy: { ...current.login.poweredBy, ...updates.login?.poweredBy } },
+            sidebar: { ...current.sidebar, ...updates.sidebar },
+            ai: {
+                quickActions: updates.ai?.quickActions ?? current.ai.quickActions,
+            },
+        };
+
+        // Backup current
+        this.backup();
+
+        // Save
+        const dir = dirname(THEME_PATH);
+        if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
+        writeFileSync(THEME_PATH, JSON.stringify(merged, null, 2), 'utf8');
+        this.cached = merged;
+
+        this.logger.log('Theme updated and saved');
+        return merged;
+    }
+
+    resetTheme(): ThemeConfig {
+        this.backup();
+        const dir = dirname(THEME_PATH);
+        if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
+        writeFileSync(THEME_PATH, JSON.stringify(DEFAULT_THEME, null, 2), 'utf8');
+        this.cached = DEFAULT_THEME;
+        this.logger.log('Theme reset to defaults');
+        return DEFAULT_THEME;
+    }
+
+    private load(): ThemeConfig {
+        try {
+            if (existsSync(THEME_PATH)) {
+                const raw = readFileSync(THEME_PATH, 'utf8');
+                const parsed = JSON.parse(raw);
+                // Merge with defaults to fill missing fields
+                this.cached = {
+                    brand: { ...DEFAULT_THEME.brand, ...parsed.brand },
+                    colors: { brand: { ...DEFAULT_THEME.colors.brand, ...parsed.colors?.brand } },
+                    typography: { ...DEFAULT_THEME.typography, ...parsed.typography },
+                    login: { ...DEFAULT_THEME.login, ...parsed.login, poweredBy: { ...DEFAULT_THEME.login.poweredBy, ...parsed.login?.poweredBy } },
+                    sidebar: { ...DEFAULT_THEME.sidebar, ...parsed.sidebar },
+                    ai: { quickActions: parsed.ai?.quickActions ?? DEFAULT_THEME.ai.quickActions },
+                };
+                this.logger.log('Theme loaded from file');
+                return this.cached;
+            }
+        } catch (err) {
+            this.logger.warn(`Failed to load theme: ${err}`);
+        }
+
+        this.cached = DEFAULT_THEME;
+        this.logger.log('Using default theme');
+        return DEFAULT_THEME;
+    }
+
+    private backup() {
+        try {
+            if (!existsSync(THEME_PATH)) return;
+            if (!existsSync(BACKUP_DIR)) mkdirSync(BACKUP_DIR, { recursive: true });
+            const ts = new Date().toISOString().replace(/[:.]/g, '-');
+            copyFileSync(THEME_PATH, join(BACKUP_DIR, `theme-${ts}.json`));
+        } catch (err) {
+            this.logger.warn(`Backup failed: ${err}`);
+        }
+    }
+}
+```
+
+- [ ] **Step 3: Commit**
+
+```bash
+cd helix-engage-server
+git add src/config/theme.defaults.ts src/config/theme.service.ts
+git commit -m "feat: theme service — read/write/backup theme JSON"
+```
+
+---
+
+### Task 2: Theme Controller + Module (Sidecar)
+
+**Files:**
+- Create: `helix-engage-server/src/config/theme.controller.ts`
+- Create: `helix-engage-server/src/config/config.module.ts`
+- Modify: `helix-engage-server/src/app.module.ts`
+
+- [ ] **Step 1: Create theme.controller.ts**
+
+```typescript
+// src/config/theme.controller.ts
+
+import { Controller, Get, Put, Post, Body, Logger } from '@nestjs/common';
+import { ThemeService } from './theme.service';
+import type { ThemeConfig } from './theme.defaults';
+
+@Controller('api/config')
+export class ThemeController {
+    private readonly logger = new Logger(ThemeController.name);
+
+    constructor(private readonly theme: ThemeService) {}
+
+    @Get('theme')
+    getTheme() {
+        return this.theme.getTheme();
+    }
+
+    @Put('theme')
+    updateTheme(@Body() body: Partial<ThemeConfig>) {
+        this.logger.log('Theme update request');
+        return this.theme.updateTheme(body);
+    }
+
+    @Post('theme/reset')
+    resetTheme() {
+        this.logger.log('Theme reset request');
+        return this.theme.resetTheme();
+    }
+}
+```
+
+- [ ] **Step 2: Create config.module.ts**
+
+```typescript
+// src/config/config.module.ts
+// Named ConfigThemeModule to avoid conflict with NestJS ConfigModule
+
+import { Module } from '@nestjs/common';
+import { ThemeController } from './theme.controller';
+import { ThemeService } from './theme.service';
+
+@Module({
+    controllers: [ThemeController],
+    providers: [ThemeService],
+    exports: [ThemeService],
+})
+export class ConfigThemeModule {}
+```
+
+- [ ] **Step 3: Register in app.module.ts**
+
+Add import at top:
+```typescript
+import { ConfigThemeModule } from './config/config.module';
+```
+
+Add to imports array:
+```typescript
+ConfigThemeModule,
+```
+
+- [ ] **Step 4: Build and verify**
+
+```bash
+cd helix-engage-server && npm run build
+```
+
+- [ ] **Step 5: Commit**
+
+```bash
+git add src/config/ src/app.module.ts
+git commit -m "feat: theme REST API — GET/PUT/POST endpoints"
+```
+
+---
+
+### Task 3: ThemeTokenProvider (Frontend)
+
+**Files:**
+- Create: `helix-engage/src/providers/theme-token-provider.tsx`
+- Modify: `helix-engage/src/main.tsx`
+
+- [ ] **Step 1: Create theme-token-provider.tsx**
+
+```typescript
+// src/providers/theme-token-provider.tsx
+
+import type { ReactNode } from 'react';
+import { createContext, useContext, useEffect, useState, useCallback } from 'react';
+
+const API_URL = import.meta.env.VITE_API_URL ?? 'http://localhost:4100';
+
+export type ThemeTokens = {
+    brand: { name: string; hospitalName: string; logo: string; favicon: string };
+    colors: { brand: Record<string, string> };
+    typography: { body: string; display: string };
+    login: { title: string; subtitle: string; showGoogleSignIn: boolean; showForgotPassword: boolean; poweredBy: { label: string; url: string } };
+    sidebar: { title: string; subtitle: string };
+    ai: { quickActions: Array<{ label: string; prompt: string }> };
+};
+
+const DEFAULT_TOKENS: ThemeTokens = {
+    brand: { name: 'Helix Engage', hospitalName: 'Global Hospital', logo: '/helix-logo.png', favicon: '/favicon.ico' },
+    colors: { brand: {} },
+    typography: { body: '', display: '' },
+    login: { title: 'Sign in to Helix Engage', subtitle: 'Global Hospital', showGoogleSignIn: true, showForgotPassword: true, poweredBy: { label: 'Powered by F0rty2.ai', url: 'https://f0rty2.ai' } },
+    sidebar: { title: 'Helix Engage', subtitle: 'Global Hospital · {role}' },
+    ai: { quickActions: [
+        { label: 'Doctor availability', prompt: 'What doctors are available and what are their visiting hours?' },
+        { label: 'Clinic timings', prompt: 'What are the clinic locations and timings?' },
+        { label: 'Patient history', prompt: "Can you summarize this patient's history?" },
+        { label: 'Treatment packages', prompt: 'What treatment packages are available?' },
+    ] },
+};
+
+type ThemeTokenContextType = {
+    tokens: ThemeTokens;
+    refresh: () => Promise<void>;
+};
+
+const ThemeTokenContext = createContext<ThemeTokenContextType>({ tokens: DEFAULT_TOKENS, refresh: async () => {} });
+
+export const useThemeTokens = () => useContext(ThemeTokenContext);
+
+const applyColorTokens = (brandColors: Record<string, string>) => {
+    const root = document.documentElement;
+    for (const [stop, value] of Object.entries(brandColors)) {
+        root.style.setProperty(`--color-brand-${stop}`, value);
+    }
+};
+
+const applyTypographyTokens = (typography: { body: string; display: string }) => {
+    const root = document.documentElement;
+    if (typography.body) root.style.setProperty('--font-body', typography.body);
+    if (typography.display) root.style.setProperty('--font-display', typography.display);
+};
+
+export const ThemeTokenProvider = ({ children }: { children: ReactNode }) => {
+    const [tokens, setTokens] = useState<ThemeTokens>(DEFAULT_TOKENS);
+
+    const fetchTheme = useCallback(async () => {
+        try {
+            const res = await fetch(`${API_URL}/api/config/theme`);
+            if (res.ok) {
+                const data: ThemeTokens = await res.json();
+                setTokens(data);
+                if (data.colors?.brand && Object.keys(data.colors.brand).length > 0) {
+                    applyColorTokens(data.colors.brand);
+                }
+                if (data.typography) {
+                    applyTypographyTokens(data.typography);
+                }
+            }
+        } catch {
+            // Use defaults silently
+        }
+    }, []);
+
+    useEffect(() => { fetchTheme(); }, [fetchTheme]);
+
+    return (
+        <ThemeTokenContext.Provider value={{ tokens, refresh: fetchTheme }}>
+            {children}
+        </ThemeTokenContext.Provider>
+    );
+};
+```
+
+- [ ] **Step 2: Wrap app in main.tsx**
+
+In `main.tsx`, add import:
+```typescript
+import { ThemeTokenProvider } from '@/providers/theme-token-provider';
+```
+
+Wrap inside `ThemeProvider`:
+```tsx
+<ThemeProvider>
+    <ThemeTokenProvider>
+        <AuthProvider>
+            ...
+        </AuthProvider>
+    </ThemeTokenProvider>
+</ThemeProvider>
+```
+
+- [ ] **Step 3: Build and verify**
+
+```bash
+npx tsc --noEmit
+```
+
+- [ ] **Step 4: Commit**
+
+```bash
+git add src/providers/theme-token-provider.tsx src/main.tsx
+git commit -m "feat: ThemeTokenProvider — fetch theme, inject CSS variables"
+```
+
+---
+
+### Task 4: Consume Tokens in Login Page
+
+**Files:**
+- Modify: `helix-engage/src/pages/login.tsx`
+
+- [ ] **Step 1: Replace hardcoded values**
+
+Import `useThemeTokens`:
+```typescript
+import { useThemeTokens } from '@/providers/theme-token-provider';
+```
+
+Inside the component:
+```typescript
+const { tokens } = useThemeTokens();
+```
+
+Replace hardcoded strings:
+- `src="/helix-logo.png"` → `src={tokens.brand.logo}`
+- `"Sign in to Helix Engage"` → `{tokens.login.title}`
+- `"Global Hospital"` → `{tokens.login.subtitle}`
+- Google sign-in section: wrap with `{tokens.login.showGoogleSignIn && (...)}`
+- Forgot password: wrap with `{tokens.login.showForgotPassword && (...)}`
+- Powered by: `tokens.login.poweredBy.label` and `tokens.login.poweredBy.url`
+
+- [ ] **Step 2: Commit**
+
+```bash
+git add src/pages/login.tsx
+git commit -m "feat: login page consumes theme tokens"
+```
+
+---
+
+### Task 5: Consume Tokens in Sidebar + AI Chat
+
+**Files:**
+- Modify: `helix-engage/src/components/layout/sidebar.tsx`
+- Modify: `helix-engage/src/components/call-desk/ai-chat-panel.tsx`
+
+- [ ] **Step 1: Update sidebar.tsx**
+
+Import `useThemeTokens` and replace:
+- Line 167: `"Helix Engage"` → `{tokens.sidebar.title}`
+- Line 168: `"Global Hospital · {getRoleSubtitle(user.role)}"` → `{tokens.sidebar.subtitle.replace('{role}', getRoleSubtitle(user.role))}`
+- Line 164: favicon src → `tokens.brand.logo`
+
+- [ ] **Step 2: Update ai-chat-panel.tsx**
+
+Import `useThemeTokens` and replace:
+- Lines 21-25: hardcoded `QUICK_ACTIONS` array → `tokens.ai.quickActions`
+
+Move `QUICK_ACTIONS` usage inside the component:
+```typescript
+const { tokens } = useThemeTokens();
+const quickActions = tokens.ai.quickActions;
+```
+
+- [ ] **Step 3: Commit**
+
+```bash
+git add src/components/layout/sidebar.tsx src/components/call-desk/ai-chat-panel.tsx
+git commit -m "feat: sidebar + AI chat consume theme tokens"
+```
+
+---
+
+### Task 6: Branding Settings Page (Frontend)
+
+**Files:**
+- Create: `helix-engage/src/pages/branding-settings.tsx`
+- Modify: `helix-engage/src/main.tsx` (add route)
+- Modify: `helix-engage/src/components/layout/sidebar.tsx` (add nav item)
+
+- [ ] **Step 1: Create branding-settings.tsx**
+
+The page has 6 collapsible sections matching the spec. Uses Untitled UI `Input`, `TextArea`, `Checkbox`, `Button` components. On save, PUTs to `/api/config/theme` and calls `refresh()` from `useThemeTokens()`.
+
+Key patterns:
+- Fetch current theme on mount via `GET /api/config/theme`
+- Local state mirrors the theme JSON structure
+- Each section is a collapsible card
+- Color section: 12 text inputs for hex/rgb values with colored preview dots
+- Save button calls `PUT /api/config/theme` with the full state
+- Reset button calls `POST /api/config/theme/reset`
+- After save/reset, call `refresh()` to re-apply CSS variables immediately
+
+- [ ] **Step 2: Add route in main.tsx**
+
+```typescript
+import { BrandingSettingsPage } from '@/pages/branding-settings';
+```
+
+Add route:
+```tsx
+<Route path="/branding" element={<BrandingSettingsPage />} />
+```
+
+- [ ] **Step 3: Add nav item in sidebar.tsx**
+
+Under the Configuration section (near Rules Engine), add "Branding" link for admin role only.
+
+- [ ] **Step 4: Build and verify**
+
+```bash
+npx tsc --noEmit
+```
+
+- [ ] **Step 5: Commit**
+
+```bash
+git add src/pages/branding-settings.tsx src/main.tsx src/components/layout/sidebar.tsx
+git commit -m "feat: branding settings page — theme editor for supervisors"
+```
+
+---
+
+### Task 7: Default Theme File + Build Verification
+
+**Files:**
+- Create: `helix-engage-server/data/theme.json`
+
+- [ ] **Step 1: Create default theme.json**
+
+Copy the `DEFAULT_THEME` object as JSON to `data/theme.json`.
+
+- [ ] **Step 2: Build both projects**
+
+```bash
+cd helix-engage-server && npm run build
+cd ../helix-engage && npm run build
+```
+
+- [ ] **Step 3: Commit all**
+
+```bash
+git add data/theme.json
+git commit -m "chore: default theme.json file"
+```
+
+---
+
+## Execution Notes
+
+- ThemeTokenProvider fetches before login — the endpoint is public (no auth)
+- CSS variable override on `<html>` has higher specificity than the `@theme` block in `theme.css`
+- `tokens.sidebar.subtitle` supports `{role}` placeholder — replaced at render time by the sidebar component
+- The branding settings page is admin-only but the theme endpoint itself is unauthenticated (GET) — PUT requires auth
+- If the sidecar is unreachable, the frontend silently falls back to hardcoded defaults

docs/superpowers/plans/2026-04-05-website-widget.md

@@ -0,0 +1,979 @@
+# Website Widget — Implementation Plan
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+
+**Goal:** Build an embeddable website widget (AI chat + appointment booking + lead capture) served from the sidecar, with HMAC-signed site keys, captcha protection, and theme integration.
+
+**Architecture:** Sidecar gets a new `widget` module with endpoints for init, chat, booking, leads, and key management. A separate Preact-based widget bundle is built with Vite in library mode, served as a static file from the sidecar. The widget renders in a shadow DOM for CSS isolation and fetches theme/config via the site key.
+
+**Tech Stack:** NestJS (sidecar endpoints), Preact + Vite (widget bundle), Shadow DOM, HMAC-SHA256 (key signing), reCAPTCHA v3 (captcha)
+
+**Spec:** `docs/superpowers/specs/2026-04-05-website-widget-design.md`
+
+---
+
+## File Map
+
+### Sidecar (helix-engage-server)
+
+| File | Action | Responsibility |
+|---|---|---|
+| `src/widget/widget.module.ts` | Create | NestJS module |
+| `src/widget/widget.controller.ts` | Create | REST endpoints: init, chat, doctors, slots, book, lead |
+| `src/widget/widget.service.ts` | Create | Lead creation, appointment booking, doctor queries |
+| `src/widget/widget-keys.service.ts` | Create | HMAC key generation, validation, CRUD via Redis |
+| `src/widget/widget-key.guard.ts` | Create | NestJS guard for key + origin validation |
+| `src/widget/captcha.guard.ts` | Create | reCAPTCHA v3 token verification |
+| `src/widget/widget.types.ts` | Create | Types for widget requests/responses |
+| `src/auth/session.service.ts` | Modify | Add `setCachePersistent()` method |
+| `src/app.module.ts` | Modify | Import WidgetModule |
+| `src/main.ts` | Modify | Serve static widget.js file |
+
+### Widget Bundle (new package)
+
+| File | Action | Responsibility |
+|---|---|---|
+| `packages/helix-engage-widget/package.json` | Create | Package config |
+| `packages/helix-engage-widget/vite.config.ts` | Create | Library mode, IIFE output |
+| `packages/helix-engage-widget/tsconfig.json` | Create | TypeScript config |
+| `packages/helix-engage-widget/src/main.ts` | Create | Entry: read data-key, init widget |
+| `packages/helix-engage-widget/src/api.ts` | Create | HTTP client for widget endpoints |
+| `packages/helix-engage-widget/src/widget.tsx` | Create | Shadow DOM mount, theming, tab routing |
+| `packages/helix-engage-widget/src/chat.tsx` | Create | AI chatbot with streaming |
+| `packages/helix-engage-widget/src/booking.tsx` | Create | Appointment booking flow |
+| `packages/helix-engage-widget/src/contact.tsx` | Create | Lead capture form |
+| `packages/helix-engage-widget/src/captcha.ts` | Create | reCAPTCHA v3 integration |
+| `packages/helix-engage-widget/src/styles.ts` | Create | CSS-in-JS for shadow DOM |
+| `packages/helix-engage-widget/src/types.ts` | Create | Shared types |
+
+---
+
+### Task 1: Widget Types + Key Service (Sidecar)
+
+**Files:**
+- Create: `helix-engage-server/src/widget/widget.types.ts`
+- Create: `helix-engage-server/src/widget/widget-keys.service.ts`
+- Modify: `helix-engage-server/src/auth/session.service.ts`
+
+- [ ] **Step 1: Add setCachePersistent to SessionService**
+
+Add a method that sets a Redis key without TTL:
+
+```typescript
+async setCachePersistent(key: string, value: string): Promise<void> {
+    await this.redis.set(key, value);
+}
+```
+
+- [ ] **Step 2: Create widget.types.ts**
+
+```typescript
+// src/widget/widget.types.ts
+
+export type WidgetSiteKey = {
+    siteId: string;
+    hospitalName: string;
+    allowedOrigins: string[];
+    active: boolean;
+    createdAt: string;
+};
+
+export type WidgetInitResponse = {
+    brand: { name: string; logo: string };
+    colors: { primary: string; primaryLight: string; text: string; textLight: string };
+    captchaSiteKey: string;
+};
+
+export type WidgetBookRequest = {
+    departmentId: string;
+    doctorId: string;
+    scheduledAt: string;
+    patientName: string;
+    patientPhone: string;
+    age?: string;
+    gender?: string;
+    chiefComplaint?: string;
+    captchaToken: string;
+};
+
+export type WidgetLeadRequest = {
+    name: string;
+    phone: string;
+    interest?: string;
+    message?: string;
+    captchaToken: string;
+};
+
+export type WidgetChatRequest = {
+    messages: Array<{ role: string; content: string }>;
+    captchaToken?: string;
+};
+```
+
+- [ ] **Step 3: Create widget-keys.service.ts**
+
+```typescript
+// src/widget/widget-keys.service.ts
+
+import { Injectable, Logger } from '@nestjs/common';
+import { ConfigService } from '@nestjs/config';
+import { createHmac, timingSafeEqual, randomUUID } from 'crypto';
+import { SessionService } from '../auth/session.service';
+import type { WidgetSiteKey } from './widget.types';
+
+const KEY_PREFIX = 'widget:keys:';
+
+@Injectable()
+export class WidgetKeysService {
+    private readonly logger = new Logger(WidgetKeysService.name);
+    private readonly secret: string;
+
+    constructor(
+        private config: ConfigService,
+        private session: SessionService,
+    ) {
+        this.secret = process.env.WIDGET_SECRET ?? config.get<string>('WIDGET_SECRET') ?? 'helix-widget-default-secret';
+    }
+
+    generateKey(hospitalName: string, allowedOrigins: string[]): { key: string; siteKey: WidgetSiteKey } {
+        const siteId = randomUUID().replace(/-/g, '').substring(0, 16);
+        const signature = this.sign(siteId);
+        const key = `${siteId}.${signature}`;
+
+        const siteKey: WidgetSiteKey = {
+            siteId,
+            hospitalName,
+            allowedOrigins,
+            active: true,
+            createdAt: new Date().toISOString(),
+        };
+
+        return { key, siteKey };
+    }
+
+    async saveKey(siteKey: WidgetSiteKey): Promise<void> {
+        await this.session.setCachePersistent(`${KEY_PREFIX}${siteKey.siteId}`, JSON.stringify(siteKey));
+        this.logger.log(`Widget key saved: ${siteKey.siteId} (${siteKey.hospitalName})`);
+    }
+
+    async validateKey(rawKey: string): Promise<WidgetSiteKey | null> {
+        const dotIndex = rawKey.indexOf('.');
+        if (dotIndex === -1) return null;
+
+        const siteId = rawKey.substring(0, dotIndex);
+        const signature = rawKey.substring(dotIndex + 1);
+
+        // Verify HMAC
+        const expected = this.sign(siteId);
+        try {
+            if (!timingSafeEqual(Buffer.from(signature, 'hex'), Buffer.from(expected, 'hex'))) return null;
+        } catch {
+            return null;
+        }
+
+        // Fetch from Redis
+        const data = await this.session.getCache(`${KEY_PREFIX}${siteId}`);
+        if (!data) return null;
+
+        const siteKey: WidgetSiteKey = JSON.parse(data);
+        if (!siteKey.active) return null;
+
+        return siteKey;
+    }
+
+    validateOrigin(siteKey: WidgetSiteKey, origin: string | undefined): boolean {
+        if (!origin) return false;
+        if (siteKey.allowedOrigins.length === 0) return true;
+        return siteKey.allowedOrigins.some(allowed => origin.startsWith(allowed));
+    }
+
+    async listKeys(): Promise<WidgetSiteKey[]> {
+        const keys = await this.session.scanKeys(`${KEY_PREFIX}*`);
+        const results: WidgetSiteKey[] = [];
+        for (const key of keys) {
+            const data = await this.session.getCache(key);
+            if (data) results.push(JSON.parse(data));
+        }
+        return results;
+    }
+
+    async revokeKey(siteId: string): Promise<boolean> {
+        const data = await this.session.getCache(`${KEY_PREFIX}${siteId}`);
+        if (!data) return false;
+        const siteKey: WidgetSiteKey = JSON.parse(data);
+        siteKey.active = false;
+        await this.session.setCachePersistent(`${KEY_PREFIX}${siteId}`, JSON.stringify(siteKey));
+        this.logger.log(`Widget key revoked: ${siteId}`);
+        return true;
+    }
+
+    private sign(data: string): string {
+        return createHmac('sha256', this.secret).update(data).digest('hex');
+    }
+}
+```
+
+- [ ] **Step 4: Commit**
+
+```bash
+cd helix-engage-server
+git add src/widget/widget.types.ts src/widget/widget-keys.service.ts src/auth/session.service.ts
+git commit -m "feat: widget types + HMAC key service with Redis storage"
+```
+
+---
+
+### Task 2: Widget Guards (Key + Captcha)
+
+**Files:**
+- Create: `helix-engage-server/src/widget/widget-key.guard.ts`
+- Create: `helix-engage-server/src/widget/captcha.guard.ts`
+
+- [ ] **Step 1: Create widget-key.guard.ts**
+
+```typescript
+// src/widget/widget-key.guard.ts
+
+import { CanActivate, ExecutionContext, Injectable, HttpException } from '@nestjs/common';
+import { WidgetKeysService } from './widget-keys.service';
+
+@Injectable()
+export class WidgetKeyGuard implements CanActivate {
+    constructor(private readonly keys: WidgetKeysService) {}
+
+    async canActivate(context: ExecutionContext): Promise<boolean> {
+        const request = context.switchToHttp().getRequest();
+        const key = request.query?.key ?? request.headers['x-widget-key'];
+
+        if (!key) throw new HttpException('Widget key required', 401);
+
+        const siteKey = await this.keys.validateKey(key);
+        if (!siteKey) throw new HttpException('Invalid widget key', 403);
+
+        const origin = request.headers.origin ?? request.headers.referer;
+        if (!this.keys.validateOrigin(siteKey, origin)) {
+            throw new HttpException('Origin not allowed', 403);
+        }
+
+        // Attach to request for downstream use
+        request.widgetSiteKey = siteKey;
+        return true;
+    }
+}
+```
+
+- [ ] **Step 2: Create captcha.guard.ts**
+
+```typescript
+// src/widget/captcha.guard.ts
+
+import { CanActivate, ExecutionContext, Injectable, HttpException, Logger } from '@nestjs/common';
+
+const RECAPTCHA_VERIFY_URL = 'https://www.google.com/recaptcha/api/siteverify';
+
+@Injectable()
+export class CaptchaGuard implements CanActivate {
+    private readonly logger = new Logger(CaptchaGuard.name);
+    private readonly secretKey: string;
+
+    constructor() {
+        this.secretKey = process.env.RECAPTCHA_SECRET_KEY ?? '';
+    }
+
+    async canActivate(context: ExecutionContext): Promise<boolean> {
+        if (!this.secretKey) {
+            this.logger.warn('RECAPTCHA_SECRET_KEY not set — captcha disabled');
+            return true;
+        }
+
+        const request = context.switchToHttp().getRequest();
+        const token = request.body?.captchaToken;
+
+        if (!token) throw new HttpException('Captcha token required', 400);
+
+        try {
+            const res = await fetch(RECAPTCHA_VERIFY_URL, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+                body: `secret=${this.secretKey}&response=${token}`,
+            });
+            const data = await res.json();
+
+            if (!data.success || (data.score != null && data.score < 0.3)) {
+                this.logger.warn(`Captcha failed: score=${data.score} success=${data.success}`);
+                throw new HttpException('Captcha verification failed', 403);
+            }
+
+            return true;
+        } catch (err: any) {
+            if (err instanceof HttpException) throw err;
+            this.logger.error(`Captcha verification error: ${err.message}`);
+            return true; // Fail open if captcha service is down
+        }
+    }
+}
+```
+
+- [ ] **Step 3: Commit**
+
+```bash
+git add src/widget/widget-key.guard.ts src/widget/captcha.guard.ts
+git commit -m "feat: widget guards — HMAC key validation + reCAPTCHA v3"
+```
+
+---
+
+### Task 3: Widget Controller + Service + Module (Sidecar)
+
+**Files:**
+- Create: `helix-engage-server/src/widget/widget.service.ts`
+- Create: `helix-engage-server/src/widget/widget.controller.ts`
+- Create: `helix-engage-server/src/widget/widget.module.ts`
+- Modify: `helix-engage-server/src/app.module.ts`
+- Modify: `helix-engage-server/src/main.ts`
+
+- [ ] **Step 1: Create widget.service.ts**
+
+```typescript
+// src/widget/widget.service.ts
+
+import { Injectable, Logger } from '@nestjs/common';
+import { PlatformGraphqlService } from '../platform/platform-graphql.service';
+import { ConfigService } from '@nestjs/config';
+import type { WidgetInitResponse, WidgetBookRequest, WidgetLeadRequest } from './widget.types';
+import { ThemeService } from '../config/theme.service';
+
+@Injectable()
+export class WidgetService {
+    private readonly logger = new Logger(WidgetService.name);
+    private readonly apiKey: string;
+
+    constructor(
+        private platform: PlatformGraphqlService,
+        private theme: ThemeService,
+        private config: ConfigService,
+    ) {
+        this.apiKey = config.get<string>('platform.apiKey') ?? '';
+    }
+
+    getInitData(): WidgetInitResponse {
+        const t = this.theme.getTheme();
+        return {
+            brand: { name: t.brand.hospitalName, logo: t.brand.logo },
+            colors: {
+                primary: t.colors.brand['600'] ?? 'rgb(29 78 216)',
+                primaryLight: t.colors.brand['50'] ?? 'rgb(219 234 254)',
+                text: t.colors.brand['950'] ?? 'rgb(15 23 42)',
+                textLight: t.colors.brand['400'] ?? 'rgb(100 116 139)',
+            },
+            captchaSiteKey: process.env.RECAPTCHA_SITE_KEY ?? '',
+        };
+    }
+
+    async getDoctors(): Promise<any[]> {
+        const auth = `Bearer ${this.apiKey}`;
+        const data = await this.platform.queryWithAuth<any>(
+            `{ doctors(first: 50) { edges { node {
+                id name fullName { firstName lastName } department specialty visitingHours
+                consultationFeeNew { amountMicros currencyCode }
+                clinic { clinicName }
+            } } } }`,
+            undefined, auth,
+        );
+        return data.doctors.edges.map((e: any) => e.node);
+    }
+
+    async getSlots(doctorId: string, date: string): Promise<any> {
+        const auth = `Bearer ${this.apiKey}`;
+        const data = await this.platform.queryWithAuth<any>(
+            `{ appointments(first: 50, filter: { doctorId: { eq: "${doctorId}" }, scheduledAt: { gte: "${date}T00:00:00Z", lte: "${date}T23:59:59Z" } }) { edges { node { scheduledAt } } } }`,
+            undefined, auth,
+        );
+        const booked = data.appointments.edges.map((e: any) => {
+            const dt = new Date(e.node.scheduledAt);
+            return `${dt.getHours().toString().padStart(2, '0')}:${dt.getMinutes().toString().padStart(2, '0')}`;
+        });
+
+        const allSlots = ['09:00', '09:30', '10:00', '10:30', '11:00', '11:30', '14:00', '14:30', '15:00', '15:30', '16:00'];
+        return allSlots.map(s => ({ time: s, available: !booked.includes(s) }));
+    }
+
+    async bookAppointment(req: WidgetBookRequest): Promise<{ appointmentId: string; reference: string }> {
+        const auth = `Bearer ${this.apiKey}`;
+        const phone = req.patientPhone.replace(/[^0-9]/g, '').slice(-10);
+
+        // Create or find patient
+        let patientId: string | null = null;
+        try {
+            const existing = await this.platform.queryWithAuth<any>(
+                `{ patients(first: 1, filter: { phones: { primaryPhoneNumber: { like: "%${phone}" } } }) { edges { node { id } } } }`,
+                undefined, auth,
+            );
+            patientId = existing.patients.edges[0]?.node?.id ?? null;
+        } catch { /* continue */ }
+
+        if (!patientId) {
+            const created = await this.platform.queryWithAuth<any>(
+                `mutation($data: PatientCreateInput!) { createPatient(data: $data) { id } }`,
+                { data: {
+                    fullName: { firstName: req.patientName.split(' ')[0], lastName: req.patientName.split(' ').slice(1).join(' ') || '' },
+                    phones: { primaryPhoneNumber: `+91${phone}` },
+                    patientType: 'NEW',
+                } },
+                auth,
+            );
+            patientId = created.createPatient.id;
+        }
+
+        // Create appointment
+        const appt = await this.platform.queryWithAuth<any>(
+            `mutation($data: AppointmentCreateInput!) { createAppointment(data: $data) { id } }`,
+            { data: {
+                scheduledAt: req.scheduledAt,
+                durationMin: 30,
+                appointmentType: 'CONSULTATION',
+                status: 'SCHEDULED',
+                doctorId: req.doctorId,
+                department: req.departmentId,
+                reasonForVisit: req.chiefComplaint ?? '',
+                patientId,
+            } },
+            auth,
+        );
+
+        // Create lead
+        await this.platform.queryWithAuth<any>(
+            `mutation($data: LeadCreateInput!) { createLead(data: $data) { id } }`,
+            { data: {
+                name: req.patientName,
+                contactName: { firstName: req.patientName.split(' ')[0], lastName: req.patientName.split(' ').slice(1).join(' ') || '' },
+                contactPhone: { primaryPhoneNumber: `+91${phone}` },
+                source: 'WEBSITE',
+                status: 'APPOINTMENT_SET',
+                interestedService: req.chiefComplaint ?? 'Appointment Booking',
+                patientId,
+            } },
+            auth,
+        ).catch(err => this.logger.warn(`Widget lead creation failed: ${err}`));
+
+        const reference = appt.createAppointment.id.substring(0, 8).toUpperCase();
+        this.logger.log(`Widget booking: ${req.patientName} → ${req.doctorId} at ${req.scheduledAt} (ref: ${reference})`);
+
+        return { appointmentId: appt.createAppointment.id, reference };
+    }
+
+    async createLead(req: WidgetLeadRequest): Promise<{ leadId: string }> {
+        const auth = `Bearer ${this.apiKey}`;
+        const phone = req.phone.replace(/[^0-9]/g, '').slice(-10);
+
+        const data = await this.platform.queryWithAuth<any>(
+            `mutation($data: LeadCreateInput!) { createLead(data: $data) { id } }`,
+            { data: {
+                name: req.name,
+                contactName: { firstName: req.name.split(' ')[0], lastName: req.name.split(' ').slice(1).join(' ') || '' },
+                contactPhone: { primaryPhoneNumber: `+91${phone}` },
+                source: 'WEBSITE',
+                status: 'NEW',
+                interestedService: req.interest ?? 'Website Enquiry',
+            } },
+            auth,
+        );
+
+        this.logger.log(`Widget lead: ${req.name} (${phone}) — ${req.interest ?? 'general'}`);
+        return { leadId: data.createLead.id };
+    }
+}
+```
+
+- [ ] **Step 2: Create widget.controller.ts**
+
+```typescript
+// src/widget/widget.controller.ts
+
+import { Controller, Get, Post, Delete, Body, Query, Param, Req, Res, UseGuards, Logger, HttpException } from '@nestjs/common';
+import type { Request, Response } from 'express';
+import { WidgetService } from './widget.service';
+import { WidgetKeysService } from './widget-keys.service';
+import { WidgetKeyGuard } from './widget-key.guard';
+import { CaptchaGuard } from './captcha.guard';
+import { AiChatController } from '../ai/ai-chat.controller';
+import type { WidgetBookRequest, WidgetLeadRequest } from './widget.types';
+
+@Controller('api/widget')
+export class WidgetController {
+    private readonly logger = new Logger(WidgetController.name);
+
+    constructor(
+        private readonly widget: WidgetService,
+        private readonly keys: WidgetKeysService,
+    ) {}
+
+    @Get('init')
+    @UseGuards(WidgetKeyGuard)
+    init() {
+        return this.widget.getInitData();
+    }
+
+    @Get('doctors')
+    @UseGuards(WidgetKeyGuard)
+    async doctors() {
+        return this.widget.getDoctors();
+    }
+
+    @Get('slots')
+    @UseGuards(WidgetKeyGuard)
+    async slots(@Query('doctorId') doctorId: string, @Query('date') date: string) {
+        if (!doctorId || !date) throw new HttpException('doctorId and date required', 400);
+        return this.widget.getSlots(doctorId, date);
+    }
+
+    @Post('book')
+    @UseGuards(WidgetKeyGuard, CaptchaGuard)
+    async book(@Body() body: WidgetBookRequest) {
+        if (!body.patientName || !body.patientPhone || !body.doctorId || !body.scheduledAt) {
+            throw new HttpException('patientName, patientPhone, doctorId, and scheduledAt required', 400);
+        }
+        return this.widget.bookAppointment(body);
+    }
+
+    @Post('lead')
+    @UseGuards(WidgetKeyGuard, CaptchaGuard)
+    async lead(@Body() body: WidgetLeadRequest) {
+        if (!body.name || !body.phone) {
+            throw new HttpException('name and phone required', 400);
+        }
+        return this.widget.createLead(body);
+    }
+
+    // Key management (admin only — no widget key guard, requires JWT)
+    @Post('keys/generate')
+    async generateKey(@Body() body: { hospitalName: string; allowedOrigins: string[] }) {
+        if (!body.hospitalName) throw new HttpException('hospitalName required', 400);
+        const { key, siteKey } = this.keys.generateKey(body.hospitalName, body.allowedOrigins ?? []);
+        await this.keys.saveKey(siteKey);
+        return { key, siteKey };
+    }
+
+    @Get('keys')
+    async listKeys() {
+        return this.keys.listKeys();
+    }
+
+    @Delete('keys/:siteId')
+    async revokeKey(@Param('siteId') siteId: string) {
+        const revoked = await this.keys.revokeKey(siteId);
+        if (!revoked) throw new HttpException('Key not found', 404);
+        return { status: 'revoked' };
+    }
+}
+```
+
+- [ ] **Step 3: Create widget.module.ts**
+
+```typescript
+// src/widget/widget.module.ts
+
+import { Module } from '@nestjs/common';
+import { WidgetController } from './widget.controller';
+import { WidgetService } from './widget.service';
+import { WidgetKeysService } from './widget-keys.service';
+import { PlatformModule } from '../platform/platform.module';
+import { AuthModule } from '../auth/auth.module';
+import { ConfigThemeModule } from '../config/config-theme.module';
+
+@Module({
+    imports: [PlatformModule, AuthModule, ConfigThemeModule],
+    controllers: [WidgetController],
+    providers: [WidgetService, WidgetKeysService],
+    exports: [WidgetKeysService],
+})
+export class WidgetModule {}
+```
+
+- [ ] **Step 4: Register in app.module.ts**
+
+Add import:
+```typescript
+import { WidgetModule } from './widget/widget.module';
+```
+
+Add to imports array:
+```typescript
+WidgetModule,
+```
+
+- [ ] **Step 5: Serve static widget.js from main.ts**
+
+In `src/main.ts`, after the NestJS app bootstrap, add static file serving for the widget bundle:
+
+```typescript
+import { join } from 'path';
+import { NestExpressApplication } from '@nestjs/platform-express';
+
+// After app.listen():
+app.useStaticAssets(join(__dirname, '..', 'public'), { prefix: '/' });
+```
+
+Create `helix-engage-server/public/` directory for the widget bundle output.
+
+- [ ] **Step 6: Build and verify**
+
+```bash
+cd helix-engage-server && npm run build
+```
+
+- [ ] **Step 7: Commit**
+
+```bash
+git add src/widget/ src/app.module.ts src/main.ts public/
+git commit -m "feat: widget module — endpoints, service, key management, captcha"
+```
+
+---
+
+### Task 4: Widget Bundle — Project Setup + Entry Point
+
+**Files:**
+- Create: `packages/helix-engage-widget/package.json`
+- Create: `packages/helix-engage-widget/vite.config.ts`
+- Create: `packages/helix-engage-widget/tsconfig.json`
+- Create: `packages/helix-engage-widget/src/types.ts`
+- Create: `packages/helix-engage-widget/src/api.ts`
+- Create: `packages/helix-engage-widget/src/main.ts`
+
+- [ ] **Step 1: Create package.json**
+
+```json
+{
+  "name": "helix-engage-widget",
+  "version": "0.1.0",
+  "private": true,
+  "scripts": {
+    "dev": "vite",
+    "build": "vite build",
+    "preview": "vite preview"
+  },
+  "dependencies": {
+    "preact": "^10.25.0"
+  },
+  "devDependencies": {
+    "@preact/preset-vite": "^2.9.0",
+    "typescript": "^5.7.0",
+    "vite": "^7.0.0"
+  }
+}
+```
+
+- [ ] **Step 2: Create vite.config.ts**
+
+```typescript
+import { defineConfig } from 'vite';
+import preact from '@preact/preset-vite';
+
+export default defineConfig({
+    plugins: [preact()],
+    build: {
+        lib: {
+            entry: 'src/main.ts',
+            name: 'HelixWidget',
+            fileName: () => 'widget.js',
+            formats: ['iife'],
+        },
+        outDir: '../../helix-engage-server/public',
+        emptyOutDir: false,
+        minify: 'terser',
+        rollupOptions: {
+            output: {
+                inlineDynamicImports: true,
+            },
+        },
+    },
+});
+```
+
+- [ ] **Step 3: Create tsconfig.json**
+
+```json
+{
+  "compilerOptions": {
+    "target": "ES2020",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "jsx": "react-jsx",
+    "jsxImportSource": "preact",
+    "strict": true,
+    "esModuleInterop": true,
+    "outDir": "dist",
+    "skipLibCheck": true
+  },
+  "include": ["src"]
+}
+```
+
+- [ ] **Step 4: Create types.ts**
+
+```typescript
+// src/types.ts
+
+export type WidgetConfig = {
+    brand: { name: string; logo: string };
+    colors: { primary: string; primaryLight: string; text: string; textLight: string };
+    captchaSiteKey: string;
+};
+
+export type Doctor = {
+    id: string;
+    name: string;
+    fullName: { firstName: string; lastName: string };
+    department: string;
+    specialty: string;
+    visitingHours: string;
+    consultationFeeNew: { amountMicros: number; currencyCode: string } | null;
+    clinic: { clinicName: string } | null;
+};
+
+export type TimeSlot = {
+    time: string;
+    available: boolean;
+};
+
+export type ChatMessage = {
+    role: 'user' | 'assistant';
+    content: string;
+};
+```
+
+- [ ] **Step 5: Create api.ts**
+
+```typescript
+// src/api.ts
+
+import type { WidgetConfig, Doctor, TimeSlot } from './types';
+
+let baseUrl = '';
+let widgetKey = '';
+
+export const initApi = (url: string, key: string) => {
+    baseUrl = url;
+    widgetKey = key;
+};
+
+const headers = () => ({
+    'Content-Type': 'application/json',
+    'X-Widget-Key': widgetKey,
+});
+
+export const fetchInit = async (): Promise<WidgetConfig> => {
+    const res = await fetch(`${baseUrl}/api/widget/init?key=${widgetKey}`);
+    if (!res.ok) throw new Error('Widget init failed');
+    return res.json();
+};
+
+export const fetchDoctors = async (): Promise<Doctor[]> => {
+    const res = await fetch(`${baseUrl}/api/widget/doctors?key=${widgetKey}`);
+    if (!res.ok) throw new Error('Failed to load doctors');
+    return res.json();
+};
+
+export const fetchSlots = async (doctorId: string, date: string): Promise<TimeSlot[]> => {
+    const res = await fetch(`${baseUrl}/api/widget/slots?key=${widgetKey}&doctorId=${doctorId}&date=${date}`);
+    if (!res.ok) throw new Error('Failed to load slots');
+    return res.json();
+};
+
+export const submitBooking = async (data: any): Promise<{ appointmentId: string; reference: string }> => {
+    const res = await fetch(`${baseUrl}/api/widget/book?key=${widgetKey}`, {
+        method: 'POST', headers: headers(), body: JSON.stringify(data),
+    });
+    if (!res.ok) throw new Error('Booking failed');
+    return res.json();
+};
+
+export const submitLead = async (data: any): Promise<{ leadId: string }> => {
+    const res = await fetch(`${baseUrl}/api/widget/lead?key=${widgetKey}`, {
+        method: 'POST', headers: headers(), body: JSON.stringify(data),
+    });
+    if (!res.ok) throw new Error('Submission failed');
+    return res.json();
+};
+
+export const streamChat = async (messages: any[], captchaToken?: string): Promise<ReadableStream> => {
+    const res = await fetch(`${baseUrl}/api/widget/chat?key=${widgetKey}`, {
+        method: 'POST', headers: headers(),
+        body: JSON.stringify({ messages, captchaToken }),
+    });
+    if (!res.ok || !res.body) throw new Error('Chat failed');
+    return res.body;
+};
+```
+
+- [ ] **Step 6: Create main.ts**
+
+```typescript
+// src/main.ts
+
+import { render } from 'preact';
+import { initApi, fetchInit } from './api';
+import { Widget } from './widget';
+import type { WidgetConfig } from './types';
+
+const init = async () => {
+    const script = document.querySelector('script[data-key]') as HTMLScriptElement | null;
+    if (!script) { console.error('[HelixWidget] Missing data-key attribute'); return; }
+
+    const key = script.getAttribute('data-key') ?? '';
+    const baseUrl = script.src.replace(/\/widget\.js.*$/, '');
+
+    initApi(baseUrl, key);
+
+    let config: WidgetConfig;
+    try {
+        config = await fetchInit();
+    } catch (err) {
+        console.error('[HelixWidget] Init failed:', err);
+        return;
+    }
+
+    // Create shadow DOM host
+    const host = document.createElement('div');
+    host.id = 'helix-widget-host';
+    host.style.cssText = 'position:fixed;bottom:20px;right:20px;z-index:999999;';
+    document.body.appendChild(host);
+
+    const shadow = host.attachShadow({ mode: 'open' });
+    const mountPoint = document.createElement('div');
+    shadow.appendChild(mountPoint);
+
+    render(<Widget config={config} shadow={shadow} />, mountPoint);
+};
+
+if (document.readyState === 'loading') {
+    document.addEventListener('DOMContentLoaded', init);
+} else {
+    init();
+}
+```
+
+- [ ] **Step 7: Install dependencies and verify**
+
+```bash
+cd packages/helix-engage-widget && npm install
+```
+
+- [ ] **Step 8: Commit**
+
+```bash
+git add packages/helix-engage-widget/
+git commit -m "feat: widget bundle — project setup, API client, entry point"
+```
+
+---
+
+### Task 5: Widget UI Components (Preact)
+
+**Files:**
+- Create: `packages/helix-engage-widget/src/styles.ts`
+- Create: `packages/helix-engage-widget/src/widget.tsx`
+- Create: `packages/helix-engage-widget/src/chat.tsx`
+- Create: `packages/helix-engage-widget/src/booking.tsx`
+- Create: `packages/helix-engage-widget/src/contact.tsx`
+- Create: `packages/helix-engage-widget/src/captcha.ts`
+
+These are the Preact components rendered inside the shadow DOM. Each component is self-contained.
+
+- [ ] **Step 1: Create styles.ts** — CSS string injected into shadow DOM
+- [ ] **Step 2: Create widget.tsx** — Main shell with bubble, panel, tab routing
+- [ ] **Step 3: Create chat.tsx** — AI chat with streaming, quick actions, lead capture fallback
+- [ ] **Step 4: Create booking.tsx** — Step-by-step appointment booking
+- [ ] **Step 5: Create contact.tsx** — Simple lead capture form
+- [ ] **Step 6: Create captcha.ts** — Load reCAPTCHA script, get token
+
+Each component follows the pattern: fetch data from API, render form/chat, submit with captcha token.
+
+- [ ] **Step 7: Build the widget**
+
+```bash
+cd packages/helix-engage-widget && npm run build
+# Output: ../../helix-engage-server/public/widget.js
+```
+
+- [ ] **Step 8: Commit**
+
+```bash
+git add packages/helix-engage-widget/src/
+git commit -m "feat: widget UI — chat, booking, contact, theming, shadow DOM"
+```
+
+---
+
+### Task 6: Integration Test + Key Generation
+
+**Files:**
+- None new — testing the full flow
+
+- [ ] **Step 1: Generate a site key**
+
+```bash
+curl -s -X POST http://localhost:4100/api/widget/keys/generate \
+  -H "Content-Type: application/json" \
+  -d '{"hospitalName":"Global Hospital","allowedOrigins":["http://localhost:3000","http://localhost:5173"]}' | python3 -m json.tool
+```
+
+Save the returned `key` value.
+
+- [ ] **Step 2: Test init endpoint**
+
+```bash
+curl -s "http://localhost:4100/api/widget/init?key=SITE_KEY_HERE" | python3 -m json.tool
+```
+
+Should return theme config with brand name, colors, captcha site key.
+
+- [ ] **Step 3: Test widget.js serving**
+
+```bash
+curl -s -o /dev/null -w "%{http_code}" http://localhost:4100/widget.js
+```
+
+Should return 200.
+
+- [ ] **Step 4: Create a test HTML page**
+
+Create `packages/helix-engage-widget/test.html`:
+
+```html
+<!DOCTYPE html>
+<html>
+<head><title>Widget Test</title></head>
+<body>
+<h1>Hospital Website</h1>
+<p>This is a test page for the Helix Engage widget.</p>
+<script src="http://localhost:4100/widget.js" data-key="SITE_KEY_HERE"></script>
+</body>
+</html>
+```
+
+Open in browser, verify the floating bubble appears, themed correctly.
+
+- [ ] **Step 5: Test booking flow end-to-end**
+
+Click Book tab → select department → doctor → date → slot → fill name + phone → submit. Verify appointment + lead created in platform.
+
+- [ ] **Step 6: Build sidecar and commit all**
+
+```bash
+cd helix-engage-server && npm run build
+git add -A && git commit -m "feat: website widget — full integration (chat + booking + lead capture)"
+```
+
+---
+
+## Execution Notes
+
+- The widget bundle builds into `helix-engage-server/public/widget.js` — Vite outputs directly to the sidecar's public dir
+- The sidecar serves it via Express static middleware
+- Site keys use HMAC-SHA256 with `WIDGET_SECRET` env var
+- Captcha is gated by `RECAPTCHA_SECRET_KEY` env var — if not set, captcha is disabled (dev mode)
+- All widget endpoints use the server-side API key for platform queries (not the visitor's JWT)
+- The widget has no dependency on the main helix-engage frontend — completely standalone
+- Task 5 steps are intentionally less detailed — the UI components follow standard Preact patterns and depend on the API client from Task 4

docs/superpowers/plans/2026-04-06-hospital-onboarding-self-service.md

@@ -0,0 +1,348 @@
+# Hospital Onboarding & Self-Service Setup
+
+**Date:** 2026-04-06
+**Status:** Plan — pending implementation
+**Owner:** helix-engage
+
+---
+
+## Goal
+
+Make onboarding a new hospital a one-command devops action plus a guided self-service flow inside the staff portal. After running the script, the hospital admin should be able to log into a fresh workspace and reach a fully operational call center by filling in 6 setup pages — without anyone touching env vars, JSON files, or running shell commands a second time.
+
+## Non-goals
+
+- Per-tenant secrets management (env vars stay infra-owned for now).
+- Self-service Cloudflare Turnstile / Ozonetel account provisioning. Operator pastes pre-existing credentials.
+- Multi-hospital routing inside one sidecar. One sidecar per workspace; multi-tenancy is handled by the platform.
+- Bulk CSV import of doctors / staff. Single-row form CRUD only.
+- Email infrastructure for invitations beyond what core already does.
+
+---
+
+## User journey
+
+### T0 — devops, one-command bootstrap (~30 seconds)
+
+```bash
+./onboard-hospital.sh \
+  --create \
+  --display-name "Care Hospital" \
+  --subdomain care \
+  --admin-email admin@carehospital.com \
+  --admin-password 'TempCare#2026'
+```
+
+Script signs up the admin user, creates and activates the workspace, syncs the helix-engage SDK, mints an API key, writes a sidecar `.env`, and prints a credentials handoff block. Done.
+
+### T1 — hospital admin first login (~10 minutes)
+
+Admin opens the workspace URL, signs in with the temp password. App detects an unconfigured workspace and routes them to `/setup`. A 6-step wizard walks them through:
+
+1. **Hospital identity** — confirm display name, upload logo, pick brand colors → writes to `theme.json`
+2. **Clinics** — add at least one branch (name, address, phone, timings) → creates Clinic records on platform
+3. **Doctors** — add at least one doctor (name, specialty, clinic, visiting hours) → creates Doctor records on platform
+4. **Team** — create supervisors and CC agents **in place** (name, email, temp password, role). If the role is `HelixEngage User` the form also shows a SIP seat dropdown so the admin links the new employee to an Agent profile in the same step. Posts to sidecar `POST /api/team/members` which chains `signUpInWorkspace` (using the workspace's own `inviteHash` server-side — no email is sent) → `updateWorkspaceMember` → `updateWorkspaceMemberRole` → optional `updateAgent`. **Never uses `sendInvitations`** — see `feedback-no-invites` memory for the absolute rule.
+5. **Telephony** — read-only summary of which workspace members own which SIP seats. Seats themselves are seeded during onboarding (`onboard-hospital.sh` step 5b) and linked to members in step 4. Admin just confirms and advances.
+6. **AI assistant** — pick provider (OpenAI / Anthropic), model, optional system prompt override → writes to `ai.json`
+
+After step 6, admin clicks "Finish setup" and lands on the home dashboard. Setup state is recorded in `setup-state.json` so the wizard never auto-shows again.
+
+### T2 — hospital admin returns later (any time)
+
+Each setup page is also accessible standalone via the **Settings** menu. Admin can edit any of them at any time. Settings hub shows green checkmarks for completed sections and yellow badges for sections still using defaults.
+
+### T3 — agents and supervisors join
+
+The admin hands each employee their email + temp password directly (WhatsApp, in-person, etc.). Employees sign in, land on the home dashboard, and change their password from their profile. They're already role-assigned and (if CC agents) SIP-linked from T1 step 4, so they see the right pages — and can take calls — immediately.
+
+---
+
+## Architecture decisions
+
+### 1. Script does identity. Portal does configuration.
+
+- **In script:** anything requiring platform-admin credentials (signup, workspace activation, SDK sync, API key creation). One-time, devops-only.
+- **In staff portal:** anything that operates inside the workspace (clinics, doctors, team, sidecar config files). Self-serve, repeatable.
+
+This keeps the script's blast radius small and means the hospital admin never needs platform-admin access.
+
+### 2. Two distinct frontend → backend patterns
+
+**Pattern A — Direct GraphQL to platform** (for entities the platform owns)
+- Clinics, Doctors, Workspace Members
+- Frontend uses `apiClient.graphql<any>(...)` with the user's JWT
+- Already established by `settings.tsx` for member listing
+- No sidecar code needed
+
+**Pattern B — Sidecar admin endpoints** (for sidecar-owned config files)
+- Theme (`theme.json`), Widget (`widget.json`), Telephony (`telephony.json`), AI (`ai.json`), Setup state (`setup-state.json`)
+- Frontend uses `apiClient.fetch('/api/config/...')` 
+- Sidecar persists to disk via `*ConfigService` mirroring `ThemeService`
+- Already established by `branding-settings.tsx` and `WidgetConfigService`
+
+**Rule:** if it lives in a workspace schema on the platform, use Pattern A. If it's a sidecar config file, use Pattern B. Don't mix.
+
+### 3. Telephony config moves out of env vars
+
+`OZONETEL_*`, `SIP_*`, `EXOTEL_*` env vars become bootstrap defaults that seed `data/telephony.json` on first boot, then never read again. All runtime reads go through `TelephonyConfigService.getConfig()`. Six read sites refactor (auth.controller, ozonetel-agent.service, ozonetel-agent.controller, kookoo-ivr.controller, agent-config.service, maint.controller).
+
+### 4. AI config moves out of env vars
+
+Same pattern. `ANTHROPIC_API_KEY` / `OPENAI_API_KEY` stay in env (true secrets), but `AI_PROVIDER` / `AI_MODEL` move to `data/ai.json`. `WidgetChatService` and any other AI-using services read from `AiConfigService`.
+
+### 5. Setup state lives in its own file
+
+`data/setup-state.json` tracks completion status for each of the 6 setup steps + a global `wizardDismissed` flag. Frontend reads it on app load to decide whether to show the setup wizard. Each setup page marks its step complete on save.
+
+```json
+{
+  "version": 1,
+  "wizardDismissed": false,
+  "steps": {
+    "identity":  { "completed": false, "completedAt": null },
+    "clinics":   { "completed": false, "completedAt": null },
+    "doctors":   { "completed": false, "completedAt": null },
+    "team":      { "completed": false, "completedAt": null },
+    "telephony": { "completed": false, "completedAt": null },
+    "ai":        { "completed": false, "completedAt": null }
+  }
+}
+```
+
+### 6. Members are created in place — **never** via email invitation
+
+Absolute rule (see `feedback-no-invites` in memory): Helix Engage does not use the platform's `sendInvitations` flow for any reason, ever. Hospital admins are expected to onboard employees in person or over WhatsApp, hand out login credentials directly, and have the employee change the password on first login.
+
+The sidecar exposes `POST /api/team/members` taking `{ firstName, lastName, email, password, roleId, agentId? }`. Server-side it chains:
+
+1. `signUpInWorkspace(email, password, workspaceId, workspaceInviteHash)` — the platform's `isPublicInviteLinkEnabled` + `inviteHash` values are read once per boot and used to authorize the create. The hash is a server-side secret, never surfaced to the admin UI, and no email is sent.
+2. `updateWorkspaceMember` — set first name / last name (the signUp mutation doesn't take them).
+3. `updateWorkspaceMemberRole` — assign the role the admin picked.
+4. `updateAgent` (optional) — link the new workspace member to the chosen Agent profile if the admin selected a SIP seat.
+
+The Team wizard step and the `/settings/team` slideout both call this endpoint via the new `EmployeeCreateForm` component. The old `InviteMemberForm` and all `sendInvitations` call sites have been deleted.
+
+### 7. Roles are auto-synced by SDK
+
+`HelixEngage Manager`, `HelixEngage Supervisor`, and `HelixEngage User` roles are defined in `FortyTwoApps/helix-engage/src/roles/` and created automatically by `yarn app:sync`. The frontend's role dropdown in the team form queries the platform via `getRoles` and uses real role IDs (no email-pattern hacks). The "is this person a CC agent, so show the SIP seat dropdown?" check matches by the exact label `HelixEngage User` — see `CC_AGENT_ROLE_LABEL` in `wizard-step-team.tsx` / `team-settings.tsx`.
+
+---
+
+## Backend changes (helix-engage-server)
+
+### New services / files
+
+| File | Purpose |
+|---|---|
+| `src/config/setup-state.defaults.ts` | Type + defaults for `data/setup-state.json` |
+| `src/config/setup-state.service.ts` | Load / get / mark step complete / dismiss wizard |
+| `src/config/telephony.defaults.ts` | Type + defaults for `data/telephony.json` (Ozonetel + Exotel + SIP) |
+| `src/config/telephony-config.service.ts` | File-backed CRUD; `onModuleInit` seeds from env vars on first boot |
+| `src/config/ai.defaults.ts` | Type + defaults for `data/ai.json` |
+| `src/config/ai-config.service.ts` | File-backed CRUD; seeds from env on first boot |
+| `src/config/setup-state.controller.ts` | `GET /api/config/setup-state`, `PUT /api/config/setup-state/steps/:step`, `POST /api/config/setup-state/dismiss` |
+| `src/config/telephony-config.controller.ts` | `GET/PUT /api/config/telephony` with secret masking on GET |
+| `src/config/ai-config.controller.ts` | `GET/PUT /api/config/ai` with secret masking |
+
+### Modified files
+
+| File | Change |
+|---|---|
+| `src/config/config-theme.module.ts` | Register the 3 new services + 3 new controllers |
+| `src/config/widget.defaults.ts` | Drop `hospitalName` field (the long-standing duplicate) |
+| `src/config/widget-config.service.ts` | Inject `ThemeService`, read `brand.hospitalName` from theme at the 2 generateKey call sites |
+| `src/widget/widget.service.ts` | `getInitData()` reads captcha site key from `WidgetConfigService` instead of `process.env.RECAPTCHA_SITE_KEY` |
+| `src/auth/agent-config.service.ts:49` | Read `OZONETEL_CAMPAIGN_NAME` from `TelephonyConfigService` |
+| `src/auth/auth.controller.ts:141, 255` | Read `OZONETEL_AGENT_PASSWORD` from `TelephonyConfigService` |
+| `src/ozonetel/ozonetel-agent.service.ts:199, 235, 236` | Read `OZONETEL_DID`, `OZONETEL_SIP_ID` from `TelephonyConfigService` |
+| `src/ozonetel/ozonetel-agent.controller.ts:39, 42, 192` | Same |
+| `src/ozonetel/kookoo-ivr.controller.ts:11, 12` | Same |
+| `src/maint/maint.controller.ts:27` | Same |
+| `src/widget/widget-chat.service.ts` | Read `provider` and `model` from `AiConfigService` instead of `ConfigService` |
+| `src/ai/ai-provider.ts` | Same — provider/model from config file, API keys still from env |
+
+---
+
+## Frontend changes (helix-engage)
+
+### New pages
+
+| Page | Path | Purpose |
+|---|---|---|
+| `setup/setup-wizard.tsx` | `/setup` | 6-step wizard, auto-shown on first login when setup incomplete |
+| `pages/clinics.tsx` | `/settings/clinics` | List + add/edit clinic records (slideout pattern) |
+| `pages/doctors.tsx` | `/settings/doctors` | List + add/edit doctors, assign to clinics |
+| `pages/team-settings.tsx` | `/settings/team` | Member list + invite form + role editor (replaces current `settings.tsx` member view) |
+| `pages/telephony-settings.tsx` | `/settings/telephony` | Ozonetel + Exotel + SIP form (consumes `/api/config/telephony`) |
+| `pages/ai-settings.tsx` | `/settings/ai` | AI provider/model/prompt form (consumes `/api/config/ai`) |
+| `pages/widget-settings.tsx` | `/settings/widget` | Widget enabled/embed/captcha form (consumes `/api/config/widget`) |
+| `pages/settings-hub.tsx` | `/settings` | Index page listing all setup sections with completion badges. Replaces current `settings.tsx`. |
+
+### Modified pages
+
+| File | Change |
+|---|---|
+| `src/pages/login.tsx` | After successful login, fetch `/api/config/setup-state`. If incomplete and user is workspace admin, redirect to `/setup`. Otherwise existing flow. |
+| `src/pages/branding-settings.tsx` | On save, mark `identity` step complete via `PUT /api/config/setup-state/steps/identity` |
+| `src/components/layout/sidebar.tsx` | Add Settings hub entry; remove direct links to individual settings pages from main nav (move them under Settings) |
+| `src/providers/router-provider.tsx` | Register the 7 new routes |
+| `src/pages/integrations.tsx` | Remove the Ozonetel + Exotel cards (functionality moves to `telephony-settings.tsx`); keep WhatsApp/FB/Google/website cards for now |
+
+### New shared components
+
+| File | Purpose |
+|---|---|
+| `src/components/setup/wizard-shell.tsx` | Layout: progress bar, step navigation, footer with prev/next |
+| `src/components/setup/wizard-step.tsx` | Single-step container — title, description, content slot, validation hook |
+| `src/components/setup/section-card.tsx` | Settings hub section card with status badge |
+| `src/components/forms/clinic-form.tsx` | Reused by clinics page + setup wizard step 2 |
+| `src/components/forms/doctor-form.tsx` | Reused by doctors page + setup wizard step 3 |
+| `src/components/forms/invite-member-form.tsx` | Reused by team page + setup wizard step 4 |
+| `src/components/forms/telephony-form.tsx` | Reused by telephony settings + setup wizard step 5 |
+| `src/components/forms/ai-form.tsx` | Reused by ai settings + setup wizard step 6 |
+
+The pattern: each settings page renders the same form component the wizard step renders. Wizard steps just wrap the form in `<WizardStep>` and add prev/next navigation. Standalone settings pages wrap the form in a normal page layout. Form is the source of truth; wizard and settings page are two presentations of the same thing.
+
+---
+
+## Onboarding script changes
+
+`onboard-hospital.sh` is already 90% there. Three minor changes:
+
+1. **Drop the `--sidecar-env-out` default behavior** — print a structured "credentials handoff" block at the end with admin email, temp password, workspace URL, sidecar `.env` content. Operator copies what they need.
+2. **Change the credentials block format** — make it copy-pasteable as a single email body so the operator can email it to the hospital owner directly.
+3. **Add `setup-state.json` initialization** — the script writes a fresh `setup-state.json` to the sidecar's `data/` directory as part of step 6, so the first frontend load knows nothing is configured yet.
+
+---
+
+## Phasing
+
+Each phase is a coherent commit. Don't ship phases out of order.
+
+### Phase 1 — Backend foundations (config services + endpoints)
+
+**Files:** 9 new + 4 modified backend files. No frontend.
+
+- New services: `setup-state`, `telephony-config`, `ai-config`
+- New defaults files for each
+- New controllers for each
+- Module wiring
+- Drop `widget.json.hospitalName` (the original duplicate that started this whole thread)
+- Migrate the 6 Ozonetel read sites to `TelephonyConfigService`
+- Migrate the AI provider/model reads to `AiConfigService`
+- First-boot env-var seeding: each new service reads its respective env vars on `onModuleInit` and writes them to its config file if the file doesn't exist
+
+**Verifies:** sidecar still serves all existing endpoints, env-var-driven Ozonetel still works (because the seeding picks up the same values), `data/telephony.json` and `data/ai.json` exist on first boot.
+
+**Estimate:** 4-5 hours.
+
+### Phase 2 — Settings hub + first-run detection
+
+**Files:** 2 new pages + 4 modified frontend files + new shared `section-card` component.
+
+- `settings-hub.tsx` replaces `settings.tsx` as the `/settings` route
+- Move the existing member-list view from `settings.tsx` into a new `team-settings.tsx` (read-only for now; invite + role editing comes in Phase 3)
+- `login.tsx` fetches setup-state after successful login and redirects to `/setup` if incomplete
+- `setup/setup-wizard.tsx` shell renders the 6 step containers (with placeholder content for now)
+- Sidebar redesign: collapse all settings into one Settings entry that opens the hub
+- Router updates to register the new routes
+
+**Verifies:** clean login → setup wizard appearance for fresh workspace; Settings hub navigates to existing pages; nothing breaks for already-set-up workspaces.
+
+**Estimate:** 3-4 hours.
+
+### Phase 3 — Entity CRUD pages (Pattern A — direct platform GraphQL)
+
+**Files:** 3 new pages + 3 new form components + 1 modified team page.
+
+- `clinics.tsx` + `clinic-form.tsx` — list with add/edit slideout
+- `doctors.tsx` + `doctor-form.tsx` — list with add/edit, clinic dropdown sourced from `clinics`
+- `team-settings.tsx` becomes interactive — employees are created in place via the sidecar's `POST /api/team/members` endpoint (see architecture decision 6), real role dropdown via `getRoles`, role assignment via `updateWorkspaceMemberRole`. **Never uses `sendInvitations`.**
+
+**Verifies:** admin can create clinics, doctors, and invite team members from the staff portal without touching the database.
+
+**Estimate:** 5-6 hours.
+
+### Phase 4 — Sidecar-config CRUD pages (Pattern B — sidecar admin endpoints)
+
+**Files:** 3 new pages + 3 new form components.
+
+- `telephony-settings.tsx` + `telephony-form.tsx` — Ozonetel + Exotel + SIP fields
+- `ai-settings.tsx` + `ai-form.tsx` — provider, model, temperature, system prompt
+- `widget-settings.tsx` + `widget-form.tsx` — wraps the existing widget config endpoint with a real form
+
+**Verifies:** admin can edit telephony, AI, and widget config from the staff portal. Changes take effect without sidecar restart (since services use in-memory cache + file write).
+
+**Estimate:** 4-5 hours.
+
+### Phase 5 — Wizard step composition
+
+**Files:** 6 wizard step components, each thin wrappers around the Phase 3/4 forms.
+
+- `wizard-step-identity.tsx`
+- `wizard-step-clinics.tsx`
+- `wizard-step-doctors.tsx`
+- `wizard-step-team.tsx`
+- `wizard-step-telephony.tsx`
+- `wizard-step-ai.tsx`
+
+Each wraps the corresponding form, adds wizard validation (required fields enforced for setup completion), and on save calls `PUT /api/config/setup-state/steps/<step>` to mark the step complete.
+
+**Verifies:** admin can complete the entire setup wizard end-to-end on a fresh workspace. After step 6, redirected to home dashboard. Setup state file shows all 6 steps complete.
+
+**Estimate:** 2-3 hours.
+
+### Phase 6 — Polish
+
+- Onboarding script credentials handoff block format
+- "Resume setup" CTA on home dashboard if any step is incomplete
+- Loading states, error toasts, optimistic updates
+- Setup-state badges on the Settings hub
+- Validation: clinic count > 0 required for booking flow, doctor count > 0 required for booking flow, etc.
+- E2E smoke test against the Care Hospital workspace I already created
+
+**Estimate:** 2-3 hours.
+
+---
+
+## Total estimate
+
+**20-26 hours of focused implementation work** spanning ~30 new files and ~15 modified files. Realistic over 3-4 working days with checkpoints at each phase boundary.
+
+---
+
+## Out of scope (explicit)
+
+- Self-service Cloudflare Turnstile signup (operator pastes existing site key)
+- Self-service Ozonetel account creation (operator pastes credentials)
+- Bulk import of doctors / staff (single-row form only)
+- Per-tenant secrets management (env vars stay infra-owned for AI keys, captcha secret, HMAC secret)
+- Workspace deletion / archival
+- Multi-hospital admin (one admin per workspace; switching workspaces is platform-level)
+- Hospital templates ("clone from Ramaiah") — useful follow-up but not required for the first real onboarding
+- Self-service password reset for employees (handled by the existing platform reset-password flow)
+- Onboarding analytics / metrics
+
+---
+
+## Open questions before phase 1
+
+1. **Sidecar config file hot-reload** — when an admin updates `telephony.json` via the new endpoint, does the change need to take effect immediately (in-memory cache invalidation, no restart) or is a sidecar restart acceptable? Decision affects whether services need a "refresh" hook. **Recommendation: in-memory cache only, no restart needed** — already how `ThemeService` works.
+
+2. **Setup state visibility** — should the setup-state file be a simple flag set or should it track *who* completed each step and *when*? Recommendation: track `completedAt` timestamp + `completedBy` user id for audit trail.
+
+3. **Auto-mark "identity" step complete from existing branding** — if the workspace already has a `theme.json` with a non-default `brand.hospitalName`, should the wizard auto-skip step 1? **Recommendation: yes** — don't make admins re-confirm something they already configured.
+
+4. **What if the admin tries to create an employee whose email already exists on the platform?** `signUpInWorkspace` will surface the platform's "email already exists" error, which the sidecar's `TeamService.extractGraphqlMessage` passes through to the toast. No "find or link existing user" path yet — if this comes up in practice, add a `findUserByEmail` preflight lookup before the `signUpInWorkspace` call.
+
+5. **Logo upload** — do we accept a URL only (admin pastes a CDN link) or do we need real file upload to MinIO? **Recommendation: URL only for Phase 1**, file upload as Phase 6 polish.
+
+---
+
+## Risks
+
+- **`yarn app:sync` may sometimes fail to register HelixEngage roles cleanly** if a workspace was activated but never had its first sync — this would block the team page's role dropdown. Mitigation: script runs sync immediately after activation, before exiting.
+- **Frontend role queries require user JWT, not API key** — `settings.tsx` already noted this with the "Roles are only accessible via user JWT" comment. The team-settings page has to use direct GraphQL with user auth, not the sidecar proxy.
+- **Migrating Ozonetel env vars to a config file mid-session can break a running sidecar** if someone's actively using the call desk during deploy. Mitigation: deploy during low-usage window; the new service falls back to env vars if the config file is missing.
+- **Setup wizard auto-redirect could trap users in a loop** if `setup-state.json` write fails. Mitigation: wizard always has a "Skip for now" link in the top right that sets `wizardDismissed: true`.

docs/superpowers/specs/2026-03-23-multi-agent-sip-lockout.md

@@ -0,0 +1,176 @@
+# Multi-Agent SIP Credentials + Duplicate Login Lockout
+
+**Date**: 2026-03-23
+**Status**: Approved design
+
+---
+
+## Problem
+
+Single Ozonetel agent account (`global`) and SIP extension (`523590`) shared across all CC agents. When multiple agents log in, calls route to whichever browser registered last. No way to have multiple simultaneous CC agents.
+
+## Solution
+
+Per-agent Ozonetel credentials stored in the platform's Agent entity, resolved on login. Redis-backed session locking prevents duplicate logins. Frontend SIP provider uses dynamic credentials from login response.
+
+---
+
+## 1. Data Model
+
+**Agent entity** (already created on platform via admin portal):
+
+| Field (GraphQL) | Type | Purpose |
+|---|---|---|
+| `wsmemberId` | Relation | Links to workspace member |
+| `ozonetelagentid` | Text | Ozonetel agent ID (e.g. "global", "agent2") |
+| `sipextension` | Text | SIP extension number (e.g. "523590") |
+| `sippassword` | Text | SIP auth password |
+| `campaignname` | Text | Ozonetel campaign (e.g. "Inbound_918041763265") |
+
+Custom fields use **all-lowercase** GraphQL names. One Agent record per CC user.
+
+---
+
+## 2. Sidecar Changes
+
+### 2.1 Redis Integration
+
+Add `ioredis` dependency to `helix-engage-server`. Connect to `REDIS_URL` (default `redis://redis:6379`).
+
+New service: `src/auth/session.service.ts`
+
+```
+lockSession(agentId, memberId) → SET agent:session:{agentId} {memberId} EX 3600
+isSessionLocked(agentId) → GET agent:session:{agentId} → returns memberId or null
+refreshSession(agentId) → EXPIRE agent:session:{agentId} 3600
+unlockSession(agentId) → DEL agent:session:{agentId}
+```
+
+### 2.2 Auth Controller — Login Flow
+
+Modify `POST /auth/login`:
+
+1. Authenticate with platform → get JWT + user profile + workspace member ID
+2. Determine role (same as today)
+3. **If CC agent:**
+   a. Query platform: `agents(filter: { wsmemberId: { eq: "<memberId>" } })` using server API key
+   b. No Agent record → `403: "Agent account not configured. Contact administrator."`
+   c. Check Redis: `isSessionLocked(agent.ozonetelagentid)`
+   d. Locked by different user → `409: "You are already logged in on another device. Please log out there first."`
+   e. Locked by same user → refresh TTL (re-login from same browser)
+   f. Not locked → `lockSession(agent.ozonetelagentid, memberId)`
+   g. Login to Ozonetel with agent's specific credentials
+   h. Return `agentConfig` in response
+4. **If manager/executive:** No Agent query, no Redis, no SIP. Same as today.
+
+**Login response** (CC agent):
+```json
+{
+  "accessToken": "...",
+  "refreshToken": "...",
+  "user": { "id": "...", "role": "cc-agent", ... },
+  "agentConfig": {
+    "ozonetelAgentId": "global",
+    "sipExtension": "523590",
+    "sipPassword": "523590",
+    "sipUri": "sip:523590@blr-pub-rtc4.ozonetel.com",
+    "sipWsServer": "wss://blr-pub-rtc4.ozonetel.com:444",
+    "campaignName": "Inbound_918041763265"
+  }
+}
+```
+
+SIP domain (`blr-pub-rtc4.ozonetel.com`) and WS port (`444`) remain from env vars — these are shared infrastructure, not per-agent.
+
+### 2.3 Auth Controller — Logout
+
+Modify `POST /auth/logout` (or add if doesn't exist):
+1. Resolve agent from JWT
+2. `unlockSession(agent.ozonetelagentid)`
+3. Ozonetel agent logout
+
+### 2.4 Auth Controller — Heartbeat
+
+New endpoint: `POST /auth/heartbeat`
+1. Resolve agent from JWT
+2. `refreshSession(agent.ozonetelagentid)` → extends TTL to 1 hour
+3. Return `{ status: 'ok' }`
+
+### 2.5 Agent Config Cache
+
+On login, store agent config in an in-memory `Map<workspaceMemberId, AgentConfig>`.
+
+All Ozonetel controller endpoints currently use `this.defaultAgentId`. Change to:
+1. Resolve workspace member from JWT (already done in worklist controller's `resolveAgentName`)
+2. Lookup agent config from the in-memory map
+3. Use the agent's `ozonetelagentid` for Ozonetel API calls
+
+This avoids querying Redis/platform on every API call.
+
+Clear the cache entry on logout.
+
+### 2.6 Config
+
+New env var: `REDIS_URL` (default: `redis://redis:6379`)
+
+Existing env vars (`OZONETEL_AGENT_ID`, `OZONETEL_SIP_ID`, etc.) become fallbacks only — used when no Agent record exists (backward compatibility for dev).
+
+---
+
+## 3. Frontend Changes
+
+### 3.1 Store Agent Config
+
+On login, store `agentConfig` from the response in localStorage (`helix_agent_config`).
+
+On logout, clear it.
+
+### 3.2 SIP Provider
+
+`sip-provider.tsx`: Read SIP credentials from stored `agentConfig` instead of env vars.
+
+```
+const agentConfig = JSON.parse(localStorage.getItem('helix_agent_config'));
+const sipUri = agentConfig?.sipUri ?? import.meta.env.VITE_SIP_URI;
+const sipPassword = agentConfig?.sipPassword ?? import.meta.env.VITE_SIP_PASSWORD;
+const sipWsServer = agentConfig?.sipWsServer ?? import.meta.env.VITE_SIP_WS_SERVER;
+```
+
+If no `agentConfig` and no env vars → don't connect SIP.
+
+### 3.3 Heartbeat
+
+Add a heartbeat interval in `AppShell` (only for CC agents):
+- Every 5 minutes: `POST /auth/heartbeat`
+- If heartbeat fails with 401 → session expired, redirect to login
+
+### 3.4 Login Error Handling
+
+Handle new error codes from login:
+- `403` → "Agent account not configured. Contact administrator."
+- `409` → "You are already logged in on another device. Please log out there first."
+
+### 3.5 Logout
+
+On logout, call `POST /auth/logout` before clearing tokens (so sidecar can clean up Redis + Ozonetel).
+
+---
+
+## 4. Docker Compose
+
+Add `REDIS_URL` to sidecar environment in `docker-compose.yml`:
+```yaml
+sidecar:
+  environment:
+    REDIS_URL: redis://redis:6379
+```
+
+---
+
+## 5. Edge Cases
+
+- **Sidecar restart**: Redis retains session locks. Agent config cache is lost but rebuilt on next API call (query Agent entity lazily).
+- **Redis restart**: All session locks cleared. Agents can re-login. Acceptable — same as TTL expiry.
+- **Browser crash (no logout)**: Heartbeat stops → Redis key expires in ≤1 hour → lock clears.
+- **Same user, same browser re-login**: Detected by comparing `memberId` in Redis → refreshes TTL instead of blocking.
+- **Agent record deleted while logged in**: Next Ozonetel API call fails → sidecar clears cache → agent gets logged out.

docs/superpowers/specs/2026-03-24-supervisor-module.md

@@ -0,0 +1,191 @@
+# Supervisor Module — Team Performance, Live Call Monitor, Master Data
+
+**Date**: 2026-03-24
+**Jira**: PP-5 (Team Performance), PP-6 (Live Call Monitor)
+**Status**: Approved design
+
+---
+
+## Principle
+
+No hardcoded/mock data. All data from Ozonetel APIs or platform GraphQL queries.
+
+---
+
+## 1. Admin Sidebar Nav Restructure
+
+```
+SUPERVISOR
+  Dashboard             → /                  (existing team-dashboard.tsx — summary)
+  Team Performance      → /team-performance  (new — full PP-5)
+  Live Call Monitor     → /live-monitor      (new — PP-6)
+
+DATA & REPORTS
+  Lead Master           → /leads            (existing all-leads.tsx)
+  Patient Master        → /patients         (existing patients.tsx)
+  Appointment Master    → /appointments     (existing appointments.tsx)
+  Call Log Master       → /call-history     (existing call-history.tsx)
+  Call Recordings       → /call-recordings  (new — filtered calls with recordings)
+  Missed Calls          → /missed-calls     (new — standalone missed call table)
+```
+
+**Files**: `sidebar.tsx` (admin nav config), `main.tsx` (routes)
+
+---
+
+## 2. Team Performance Dashboard (PP-5)
+
+**Route**: `/team-performance`
+**Page**: `src/pages/team-performance.tsx`
+
+### Section 1: Key Metrics Bar
+- Active Agents / On Call Now → sidecar (from active calls tracking)
+- Total Calls → platform `calls` count by date range
+- Appointments → platform `appointments` count
+- Missed Calls → platform `calls` where `callStatus: MISSED`
+- Conversion Rate → appointments / total calls
+- Time filter: Today | Week | Month | Year | Custom
+
+### Section 2: Call Breakdown Trends
+- Left: Inbound vs Outbound line chart (ECharts) by day
+- Right: Leads vs Missed vs Follow-ups by day
+- Data: platform `calls` grouped by date + direction
+
+### Section 3: Agent Performance Table
+| Column | Source |
+|--------|--------|
+| Agent | Agent entity `name` |
+| Calls | Platform `calls` filtered by `agentName` |
+| Inbound | Platform `calls` where `direction: INBOUND` |
+| Missed | Platform `calls` where `callStatus: MISSED` |
+| Follow-ups | Platform `followUps` filtered by `assignedAgent` |
+| Leads | Platform `leads` filtered by `assignedAgent` |
+| Conv% | Derived: appointments / calls |
+| NPS | Agent entity `npsscore` |
+| Idle | Ozonetel `getAgentSummary` API |
+
+Sortable columns. Own time filter (Today/Week/Month/Year/Custom).
+
+### Section 4: Time Breakdown
+- Team average: Active / Wrap / Idle / Break totals
+- Per-agent horizontal stacked bars
+- Data: Ozonetel `getAgentSummary` per agent
+- Agents with idle > `maxidleminutes` threshold highlighted red
+
+### Section 5: NPS + Conversion Metrics
+- NPS donut chart (average of all agents' `npsscore`)
+- Per-agent NPS horizontal bars
+- Call→Appointment % card (big number)
+- Lead→Contact % card (big number)
+- Per-agent conversion breakdown below cards
+
+### Section 6: Performance Alerts
+- Compare actual metrics vs Agent entity thresholds:
+  - `maxidleminutes` → "Excessive Idle Time"
+  - `minnpsthreshold` → "Low NPS"
+  - `minconversionpercent` → "Low Lead-to-Contact"
+- Red-highlighted alert cards with agent name, alert type, value
+
+### Sidecar Endpoint
+`GET /api/supervisor/team-performance?date=YYYY-MM-DD`
+- Aggregates Ozonetel `getAgentSummary` across all agents
+- Returns per-agent time breakdown (active/wrap/idle/break in minutes)
+- Uses Agent entity to get list of all agent IDs
+
+---
+
+## 3. Live Call Monitor (PP-6)
+
+**Route**: `/live-monitor`
+**Page**: `src/pages/live-monitor.tsx`
+
+### KPI Cards
+- Active Calls count
+- On Hold count
+- Avg Duration
+
+### Active Calls Table
+| Column | Source |
+|--------|--------|
+| Agent | Ozonetel event `agent_id` → mapped to Agent entity name |
+| Caller | Event `caller_id` → matched against platform leads/patients |
+| Type | Event `call_type` (InBound/Manual) |
+| Department | From matched lead's `interestedService` or "—" |
+| Duration | Live counter from `event_time` |
+| Status | active / on-hold |
+| Actions | Listen / Whisper / Barge buttons (disabled until API confirmed) |
+
+### Data Flow
+1. Sidecar subscribes to Ozonetel real-time events on startup
+   - `POST https://subscription.ozonetel.com/events/subscribe`
+   - Body: `{ callEventsURL: "<sidecar-webhook-url>", agentEventsURL: "<sidecar-webhook-url>" }`
+2. Sidecar receives events at `POST /webhooks/ozonetel/call-event`
+3. In-memory map: `ucid → { agentId, callerNumber, callType, startTime, status }`
+   - `Calling` / `Answered` → add/update entry
+   - `Disconnect` → remove entry
+4. `GET /api/supervisor/active-calls` → returns current map
+5. Frontend polls every 5 seconds
+
+### Sidecar Changes
+- New module: `src/supervisor/`
+  - `supervisor.controller.ts` — team-performance + active-calls endpoints
+  - `supervisor.service.ts` — Ozonetel event subscription, active call tracking
+  - `supervisor.module.ts`
+- New webhook: `POST /webhooks/ozonetel/call-event`
+- Ozonetel event subscription on `onModuleInit`
+
+---
+
+## 4. Master Data Pages
+
+### Call Recordings (`/call-recordings`)
+**Page**: `src/pages/call-recordings.tsx`
+- Query: platform `calls` where `recording` is not null
+- Table: Agent, Caller, Type, Date, Duration, Recording Player
+- Search by agent/phone + date filter
+
+### Missed Calls (`/missed-calls`)
+**Page**: `src/pages/missed-calls.tsx`
+- Query: platform `calls` where `callStatus: MISSED`
+- Table: Caller, Date/Time, Branch (`callsourcenumber`), Agent, Callback Status, SLA
+- Tabs: All | Pending | Attempted | Completed (filter by `callbackstatus`)
+- Not filtered by agent — supervisor sees all
+
+---
+
+## 5. Agent Entity Fields (Already Configured)
+
+| GraphQL Field | Type | Purpose |
+|---|---|---|
+| `ozonetelagentid` | Text | Ozonetel agent ID |
+| `sipextension` | Text | SIP extension |
+| `sippassword` | Text | SIP password |
+| `campaignname` | Text | Ozonetel campaign |
+| `npsscore` | Number | Agent NPS score |
+| `maxidleminutes` | Number | Idle time alert threshold |
+| `minnpsthreshold` | Number | NPS alert threshold |
+| `minconversionpercent` | Number | Conversion alert threshold |
+
+All custom fields use **all-lowercase** GraphQL names.
+
+---
+
+## 6. File Map
+
+### New Files
+| File | Purpose |
+|------|---------|
+| `helix-engage/src/pages/team-performance.tsx` | PP-5 dashboard |
+| `helix-engage/src/pages/live-monitor.tsx` | PP-6 active call monitor |
+| `helix-engage/src/pages/call-recordings.tsx` | Call recordings master |
+| `helix-engage/src/pages/missed-calls.tsx` | Missed calls master |
+| `helix-engage-server/src/supervisor/supervisor.controller.ts` | Supervisor endpoints |
+| `helix-engage-server/src/supervisor/supervisor.service.ts` | Event subscription + active calls |
+| `helix-engage-server/src/supervisor/supervisor.module.ts` | Module registration |
+
+### Modified Files
+| File | Change |
+|------|--------|
+| `helix-engage/src/components/layout/sidebar.tsx` | Admin nav restructure |
+| `helix-engage/src/main.tsx` | New routes |
+| `helix-engage-server/src/app.module.ts` | Import SupervisorModule |

docs/superpowers/specs/2026-03-31-csv-lead-import-design.md

@@ -0,0 +1,165 @@
+# CSV Lead Import — Design Spec
+
+**Date**: 2026-03-31
+**Status**: Approved
+
+---
+
+## Overview
+
+Supervisors can import leads from a CSV file into an existing campaign. The feature is a modal wizard accessible from the Campaigns page. Leads are created via the platform GraphQL API and linked to the selected campaign. Existing patients are detected by phone number matching.
+
+---
+
+## User Flow
+
+### Entry Point
+"Import Leads" button on the Campaigns page (`/campaigns`). Admin role only.
+
+### Step 1 — Select Campaign (modal opens)
+- Campaign cards in a grid layout inside the modal
+- Each card shows: campaign name, platform badge (Facebook/Google/Instagram/Manual), status badge (Active/Paused/Completed), lead count
+- Click a card to select → proceeds to Step 2
+- Only ACTIVE and PAUSED campaigns shown (not COMPLETED)
+
+### Step 2 — Upload & Preview
+- File drop zone at top of modal (accepts `.csv` only)
+- On file upload, parse CSV client-side
+- Show preview table with:
+  - **Column mapping row**: each CSV column header has a dropdown to map to a Lead field. Fuzzy auto-match on load (e.g., "Phone" → contactPhone, "Name" → contactName.firstName, "Email" → contactEmail, "Service" → interestedService)
+  - **Data rows**: all rows displayed (paginated at 20 per page if large file)
+  - **Patient match column** (rightmost): for each row, check phone against existing patients in DataProvider
+    - Green badge: "Existing — {Patient Name}" (phone matched)
+    - Gray badge: "New" (no match)
+  - **Duplicate lead column**: check phone against existing leads
+    - Orange badge: "Duplicate" (phone already exists as a lead)
+    - No badge if clean
+- Validation:
+  - `contactPhone` mapping is required — show error banner if unmapped
+  - Rows with empty phone values are flagged as "Skip — no phone"
+- Footer shows summary: "48 leads ready, 3 existing patients, 2 duplicates, 1 skipped"
+- "Import" button enabled only when contactPhone is mapped and at least 1 valid row exists
+
+### Step 3 — Import Progress
+- "Import" button triggers sequential lead creation
+- Progress bar: "Importing 12 / 48..."
+- Each lead created via GraphQL mutation:
+  ```graphql
+  mutation($data: LeadCreateInput!) {
+    createLead(data: $data) { id }
+  }
+  ```
+- Data payload per lead:
+  - `name`: "{firstName} {lastName}" or phone if no name
+  - `contactName`: `{ firstName, lastName }` from mapped columns
+  - `contactPhone`: `{ primaryPhoneNumber }` from mapped column (normalized with +91 prefix)
+  - `contactEmail`: `{ primaryEmail }` if mapped
+  - `interestedService`: if mapped
+  - `source`: campaign platform (FACEBOOK_AD, GOOGLE_AD, etc.) or MANUAL
+  - `status`: NEW
+  - `campaignId`: selected campaign ID
+  - `patientId`: if phone matched an existing patient
+  - All other mapped fields set accordingly
+- Duplicate leads (phone already exists) are skipped
+- On complete: summary card — "45 created, 3 linked to existing patients, 2 skipped (duplicates), 1 skipped (no phone)"
+
+### Step 4 — Done
+- Summary with green checkmark
+- "Done" button closes modal
+- Campaigns page refreshes to show updated lead count
+
+---
+
+## Column Mapping — Fuzzy Match Rules
+
+CSV headers are normalized (lowercase, trim, remove special chars) and matched against Lead field labels:
+
+| CSV Header Pattern | Maps To | Field Type |
+|---|---|---|
+| name, first name, patient name | contactName.firstName | FULL_NAME |
+| last name, surname | contactName.lastName | FULL_NAME |
+| phone, mobile, contact number, cell | contactPhone | PHONES |
+| email, email address | contactEmail | EMAILS |
+| service, interested in, department, specialty | interestedService | TEXT |
+| priority | priority | SELECT |
+| source, lead source, channel | source | SELECT |
+| notes, comments, remarks | (stored as lead name suffix or skipped) | — |
+| utm_source, utm_medium, utm_campaign, utm_term, utm_content | utmSource/utmMedium/utmCampaign/utmTerm/utmContent | TEXT |
+
+Unmapped columns are ignored. User can override any auto-match via dropdown.
+
+---
+
+## Phone Normalization
+
+Before matching and creating:
+1. Strip all non-digit characters
+2. Remove leading `+91` or `91` if 12+ digits
+3. Take last 10 digits
+4. Store as `+91{10digits}` on the Lead
+
+---
+
+## Patient Matching
+
+Uses the `patients` array from DataProvider (already loaded in memory):
+- For each CSV row, normalize the phone number
+- Check against `patient.phones.primaryPhoneNumber` (last 10 digits)
+- If match found: set `patientId` on the created Lead, show patient name in preview
+- If no match: leave `patientId` null, caller resolution will handle it on first call
+
+---
+
+## Duplicate Lead Detection
+
+Uses the `leads` array from DataProvider:
+- For each CSV row, check normalized phone against existing `lead.contactPhone[0].number`
+- If match found: mark as duplicate in preview, skip during import
+- If no match: create normally
+
+---
+
+## Error Handling
+
+- Invalid CSV (no headers, empty file): show error banner in modal, no preview
+- File too large (>5000 rows): show warning, allow import but warn about duration
+- Individual mutation failures: log error, continue with remaining rows, show count in summary
+- Network failure mid-import: show partial result — "23 of 48 imported, import interrupted"
+
+---
+
+## Architecture
+
+### No new sidecar endpoint needed
+CSV parsing happens client-side. Lead creation uses the existing GraphQL proxy (`/graphql` → platform). Patient/lead matching uses DataProvider data already in memory.
+
+### Files
+
+| File | Action |
+|---|---|
+| `src/components/campaigns/lead-import-wizard.tsx` | **New** — Modal wizard component (Steps 1-4) |
+| `src/pages/campaigns.tsx` | **Modified** — Add "Import Leads" button |
+| `src/lib/csv-parser.ts` | **New** — CSV parsing + column fuzzy matching utility |
+
+### Dependencies
+- No new npm packages needed — `FileReader` API + string split for CSV parsing (or use existing `papaparse` if already in node_modules)
+- Untitled UI components: Modal, Button, Badge, Table, Input (file), FeaturedIcon
+
+---
+
+## Scope Boundaries
+
+**In scope:**
+- Campaign selection via cards
+- CSV upload and client-side parsing
+- Fuzzy column mapping with manual override
+- Preview with patient match + duplicate detection
+- Sequential lead creation with progress
+- Phone normalization
+
+**Out of scope (future):**
+- Dynamic campaign-specific entity creation (AI-driven schema)
+- Campaign content/template creation
+- Bulk update of existing leads from CSV
+- API-based lead ingestion (Facebook/Google webhooks)
+- Code generation webhook on schema changes

docs/superpowers/specs/2026-03-31-rules-engine-design.md

@@ -0,0 +1,432 @@
+# Rules Engine — Design Spec (v2)
+
+**Date**: 2026-03-31 (revised 2026-04-01)
+**Status**: Approved
+**Phase**: 1 (Engine + Storage + API + Priority Rules UI + Worklist Integration)
+
+---
+
+## Overview
+
+A configurable rules engine that governs how leads flow through the hospital's call center — which leads get called first, which agent handles them, when to escalate, and when to mark them lost. Each hospital defines its own rules. No code changes needed to change behavior.
+
+**Product pitch**: "Your hospital defines the rules, the call center follows them automatically."
+
+---
+
+## Two Rule Types
+
+The engine supports two categories of rules, each with different behavior and UI:
+
+### Priority Rules — "Who gets called first?"
+- Configures worklist ranking via weights, SLA curves, campaign modifiers
+- **Computed at request time** — scores are ephemeral, not persisted to entities
+- Time-sensitive (SLA elapsed changes every minute — can't be persisted)
+- Supervisor sees: weight sliders, SLA thresholds, campaign weights, live worklist preview
+- No draft/publish needed — changes affect ranking immediately
+
+### Automation Rules — "What should happen automatically?"
+- Triggers durable actions when conditions are met: field updates, assignments, notifications
+- **Writes back to entities** via platform GraphQL mutations (e.g., set lead.priority = HIGH)
+- Event-driven (fires on lead.created, call.missed, etc.) or scheduled (every 5m)
+- Supervisor sees: if-this-then-that condition builder with entity/field selectors
+- **Draft/publish workflow** — rules don't affect live data until published
+- Sub-types: Assignment, Escalation, Lifecycle
+
+| Aspect | Priority Rules | Automation Rules |
+|---|---|---|
+| When | On worklist request | On entity event / on schedule |
+| Effect | Ephemeral score for ranking | Durable entity mutation |
+| Persisted? | No (recomputed each request) | Yes (writes to platform) |
+| Draft/publish? | No (immediate) | Yes |
+| UI | Sliders + live preview | Condition builder + draft/publish |
+
+---
+
+## Architecture
+
+Self-contained NestJS module inside helix-engage-server (sidecar). Designed for extraction into a standalone microservice when needed.
+
+```
+helix-engage-server/src/rules-engine/
+├── rules-engine.module.ts          # NestJS module (self-contained)
+├── rules-engine.service.ts         # Core: json-rules-engine wrapper
+├── rules-engine.controller.ts      # REST API: CRUD + evaluate + config
+├── rules-storage.service.ts        # Redis (hot) + JSON file (backup)
+├── types/
+│   ├── rule.types.ts               # Rule schema (priority + automation)
+│   ├── fact.types.ts               # Fact definitions + computed facts
+│   └── action.types.ts             # Action handler interface
+├── facts/
+│   ├── lead-facts.provider.ts      # Lead/campaign data facts
+│   ├── call-facts.provider.ts      # Call/SLA data facts (+ computed: ageMinutes, slaElapsed)
+│   └── agent-facts.provider.ts     # Agent availability facts
+├── actions/
+│   ├── score.action.ts             # Priority scoring action
+│   ├── assign.action.ts            # Lead-to-agent assignment (stub)
+│   ├── escalate.action.ts          # SLA breach alerts (stub)
+│   └── update.action.ts            # Update entity field (stub)
+├── consumers/
+│   └── worklist.consumer.ts        # Applies scoring rules to worklist
+└── templates/
+    └── hospital-starter.json       # Pre-built rule set for new hospitals
+```
+
+### Dependencies
+- `json-rules-engine` (npm) — rule evaluation
+- Redis — active rule storage, score cache
+- Platform GraphQL — fact data (leads, calls, campaigns, agents)
+- No imports from other sidecar modules except via constructor injection
+
+### Communication
+- Own Redis namespace: `rules:*`
+- Own route prefix: `/api/rules/*`
+- Other modules call `RulesEngineService.evaluate()` — they don't import internals
+
+---
+
+## Fact System
+
+### Design Principle: Entity-Driven Facts
+Facts should ultimately be driven by entity metadata from the platform — adding a field to an entity automatically makes it available as a fact. This is the long-term goal.
+
+### Phase 1: Curated Facts + Computed Facts
+For Phase 1, facts are curated (hardcoded providers) with two categories:
+
+**Entity field facts** — direct field values from platform entities:
+- `lead.source`, `lead.status`, `lead.campaignId`, etc.
+- `call.direction`, `call.status`, `call.callbackStatus`, etc.
+- `agent.status`, `agent.skills`, etc.
+
+**Computed facts** — derived values that don't exist as entity fields:
+- `lead.ageMinutes` — computed from `createdAt`
+- `call.slaElapsedPercent` — computed from `createdAt` + task type SLA
+- `call.slaBreached` — computed from slaElapsedPercent > 100
+- `call.taskType` — inferred from call data (missed_call, follow_up, campaign_lead, etc.)
+
+### Phase 2: Metadata-Driven Discovery
+- Query platform metadata API to discover entities and fields dynamically
+- Each field's type (NUMBER, TEXT, SELECT, BOOLEAN) drives:
+  - Available operators in the condition builder UI
+  - Input type (slider, dropdown with enum values, text, toggle)
+- Computed facts remain registered in code alongside metadata-driven facts
+
+---
+
+## Rule Schema
+
+```typescript
+type RuleType = 'priority' | 'automation';
+
+type Rule = {
+    id: string;                          // UUID
+    ruleType: RuleType;                  // Priority or Automation
+    name: string;                        // Human-readable
+    description?: string;                // BA-friendly explanation
+    enabled: boolean;                    // Toggle on/off without deleting
+    priority: number;                    // Evaluation order (lower = first)
+
+    trigger: RuleTrigger;                // When to evaluate
+    conditions: RuleConditionGroup;      // What to check
+    action: RuleAction;                  // What to do
+
+    // Automation rules only
+    status?: 'draft' | 'published';      // Draft/publish workflow
+
+    metadata: {
+        createdAt: string;
+        updatedAt: string;
+        createdBy: string;
+        category: RuleCategory;
+        tags?: string[];
+    };
+};
+
+type RuleTrigger =
+    | { type: 'on_request'; request: 'worklist' | 'assignment' }
+    | { type: 'on_event'; event: string }
+    | { type: 'on_schedule'; interval: string }
+    | { type: 'always' };
+
+type RuleCategory =
+    | 'priority'        // Worklist scoring (Priority Rules)
+    | 'assignment'      // Lead/call routing to agent (Automation)
+    | 'escalation'      // SLA breach handling (Automation)
+    | 'lifecycle'       // Lead status transitions (Automation)
+    | 'qualification';  // Lead quality scoring (Automation)
+
+type RuleConditionGroup = {
+    all?: (RuleCondition | RuleConditionGroup)[];
+    any?: (RuleCondition | RuleConditionGroup)[];
+};
+
+type RuleCondition = {
+    fact: string;                        // Fact name
+    operator: RuleOperator;
+    value: any;
+    path?: string;                       // JSON path for nested facts
+};
+
+type RuleOperator =
+    | 'equal' | 'notEqual'
+    | 'greaterThan' | 'greaterThanInclusive'
+    | 'lessThan' | 'lessThanInclusive'
+    | 'in' | 'notIn'
+    | 'contains' | 'doesNotContain'
+    | 'exists' | 'doesNotExist';
+
+type RuleAction = {
+    type: RuleActionType;
+    params: ScoreActionParams | AssignActionParams | EscalateActionParams | UpdateActionParams;
+};
+
+type RuleActionType = 'score' | 'assign' | 'escalate' | 'update' | 'notify';
+
+// Score action params (Priority Rules)
+type ScoreActionParams = {
+    weight: number;              // 0-10 base weight
+    slaMultiplier?: boolean;     // Apply SLA urgency curve
+    campaignMultiplier?: boolean; // Apply campaign weight
+};
+
+// Assign action params (Automation Rules — stub)
+type AssignActionParams = {
+    agentId?: string;
+    agentPool?: string[];
+    strategy: 'specific' | 'round-robin' | 'least-loaded' | 'skill-based';
+};
+
+// Escalate action params (Automation Rules — stub)
+type EscalateActionParams = {
+    channel: 'toast' | 'notification' | 'sms' | 'email';
+    recipients: 'supervisor' | 'agent' | string[];
+    message: string;
+    severity: 'warning' | 'critical';
+};
+
+// Update action params (Automation Rules — stub)
+type UpdateActionParams = {
+    entity: string;
+    field: string;
+    value: any;
+};
+```
+
+---
+
+## Priority Rules — Scoring System
+
+### Formula
+```
+finalScore = baseScore × slaMultiplier × campaignMultiplier
+```
+
+### Base Score
+Determined by the rule's `weight` param (0-10). Multiple rules can fire for the same item — scores are **summed**.
+
+### SLA Multiplier (time-sensitive, computed at request time)
+```
+if slaElapsed <= 100%:  multiplier = (slaElapsed / 100) ^ 1.6
+if slaElapsed > 100%:   multiplier = 1.0 + (excess × 0.05)
+```
+Non-linear curve — urgency accelerates as deadline approaches. Continues increasing past breach.
+
+### Campaign Multiplier
+```
+campaignWeight (0-10) / 10 × sourceWeight (0-10) / 10
+```
+IVF(9) × WhatsApp(9) = 0.81. Health(7) × Instagram(5) = 0.35.
+
+### Priority Config (supervisor-editable)
+```typescript
+type PriorityConfig = {
+    taskWeights: Record<string, { weight: number; slaMinutes: number }>;
+    campaignWeights: Record<string, number>;   // campaignId → 0-10
+    sourceWeights: Record<string, number>;     // leadSource → 0-10
+};
+
+// Default config (from hospital starter template)
+const DEFAULT_PRIORITY_CONFIG = {
+    taskWeights: {
+        missed_call:   { weight: 9, slaMinutes: 720 },    // 12 hours
+        follow_up:     { weight: 8, slaMinutes: 1440 },   // 1 day
+        campaign_lead: { weight: 7, slaMinutes: 2880 },   // 2 days
+        attempt_2:     { weight: 6, slaMinutes: 1440 },
+        attempt_3:     { weight: 4, slaMinutes: 2880 },
+    },
+    campaignWeights: {},   // Empty = no campaign multiplier
+    sourceWeights: {
+        WHATSAPP: 9, PHONE: 8, FACEBOOK_AD: 7, GOOGLE_AD: 7,
+        INSTAGRAM: 5, WEBSITE: 7, REFERRAL: 6, WALK_IN: 5, OTHER: 5,
+    },
+};
+```
+
+This config is what the **Priority Rules UI** edits via sliders. Under the hood, each entry generates a json-rules-engine rule.
+
+---
+
+## Priority Rules UI (Supervisor Settings)
+
+### Layout
+Settings page → "Priority" tab with three sections:
+
+**Section 1: Task Type Weights**
+| Task Type | Weight (slider 0-10) | SLA (input) |
+|---|---|---|
+| Missed Calls | ████████░░ 9 | 12h |
+| Follow-ups | ███████░░░ 8 | 1d |
+| Campaign Leads | ██████░░░░ 7 | 2d |
+| 2nd Attempt | █████░░░░░ 6 | 1d |
+| 3rd Attempt | ███░░░░░░░ 4 | 2d |
+
+**Section 2: Campaign Weights**
+Shows existing campaigns with weight sliders. Default 5.
+| Campaign | Weight |
+|---|---|
+| IVF Awareness | ████████░░ 9 |
+| Health Checkup | ██████░░░░ 7 |
+| Cancer Screening | ███████░░░ 8 |
+
+**Section 3: Source Weights**
+| Source | Weight |
+|---|---|
+| WhatsApp | ████████░░ 9 |
+| Phone | ███████░░░ 8 |
+| Facebook Ad | ██████░░░░ 7 |
+| ... | ... |
+
+**Section 4: Live Preview**
+Shows the current worklist re-ranked with the configured weights. As supervisor adjusts sliders, preview updates in real-time (client-side computation using the same scoring formula).
+
+### Components
+- Untitled UI Slider (if available) or custom range input
+- Untitled UI Toggle for enable/disable per task type
+- Untitled UI Tabs for Priority / Automations
+- Score badges showing computed values in preview
+
+---
+
+## Storage
+
+### Redis Keys
+```
+rules:config                    # JSON array of all Rule objects
+rules:priority-config           # PriorityConfig JSON (slider values)
+rules:config:backup_path        # Path to JSON backup file
+rules:scores:{itemId}           # Cached base score per worklist item
+rules:scores:version            # Incremented on rule change (invalidates all scores)
+rules:eval:log:{ruleId}         # Last evaluation result (debug)
+```
+
+### JSON File Backup
+On every rule/config change:
+1. Write to Redis
+2. Persist to `data/rules-config.json` + `data/priority-config.json` in sidecar working directory
+3. On sidecar startup: if Redis is empty, load from JSON files
+
+---
+
+## API Endpoints
+
+### Priority Config (used by UI sliders)
+```
+GET    /api/rules/priority-config          # Get current priority config
+PUT    /api/rules/priority-config          # Update priority config (slider values)
+POST   /api/rules/priority-config/preview  # Preview scoring with modified config
+```
+
+### Rule CRUD (for automation rules)
+```
+GET    /api/rules                    # List all rules
+GET    /api/rules/:id                # Get single rule
+POST   /api/rules                    # Create rule
+PUT    /api/rules/:id                # Update rule
+DELETE /api/rules/:id                # Delete rule
+PATCH  /api/rules/:id/toggle         # Enable/disable
+POST   /api/rules/reorder            # Change evaluation order
+```
+
+### Evaluation
+```
+POST   /api/rules/evaluate           # Evaluate rules against provided facts
+```
+
+### Templates
+```
+GET    /api/rules/templates           # List available rule templates
+POST   /api/rules/templates/:id/apply # Apply a template (creates rules + config)
+```
+
+---
+
+## Worklist Integration
+
+### Current Flow
+```
+GET /api/worklist → returns { missedCalls, followUps, marketingLeads } → frontend sorts by priority + createdAt
+```
+
+### New Flow
+```
+GET /api/worklist → fetch 3 arrays → score each item via RulesEngineService → return with scores → frontend sorts by score
+```
+
+### Response Change
+Each worklist item gains:
+```typescript
+{
+    ...existingFields,
+    score: number;              // Computed priority score
+    scoreBreakdown: {           // Explainability
+        baseScore: number;
+        slaMultiplier: number;
+        campaignMultiplier: number;
+        rulesApplied: string[]; // Rule names that fired
+    };
+    slaStatus: 'low' | 'medium' | 'high' | 'critical';
+    slaElapsedPercent: number;
+}
+```
+
+### Frontend Changes
+- Worklist sorts by `score` descending instead of hardcoded priority
+- SLA status dot (green/amber/red/dark-red) replaces priority badge
+- Tooltip on score shows breakdown ("IVF campaign ×0.81, Missed call weight 9, SLA 72% elapsed")
+
+---
+
+## Hospital Starter Template
+
+Pre-configured priority config + automation rules for a typical hospital. Applied on first setup via `POST /api/rules/templates/hospital-starter/apply`.
+
+Creates:
+1. `PriorityConfig` with default task/campaign/source weights
+2. Scoring rules in `rules:config` matching the config
+3. One escalation rule stub (SLA breach → supervisor notification)
+
+---
+
+## Scope Boundaries
+
+**In scope (Phase 1 — Friday):**
+- `json-rules-engine` integration in sidecar
+- Rule schema with `ruleType: 'priority' | 'automation'` distinction
+- Curated fact providers (lead, call, agent) with computed facts
+- Score action handler (full) + assign/escalate/update stubs
+- Redis storage + JSON backup
+- PriorityConfig CRUD + preview endpoints
+- Rule CRUD API endpoints
+- Worklist consumer (scoring integration)
+- Hospital starter template
+- **Priority Rules UI** — supervisor settings page with weight sliders, SLA config, live preview
+- Frontend worklist changes (score display, SLA dots, breakdown tooltip)
+
+**Out of scope (Phase 2+):**
+- Automation Rules UI (condition builder with entity/field selectors)
+- Metadata-driven fact discovery from platform API
+- Assignment/escalation/update action handlers (stubs in Phase 1)
+- Event-driven rule evaluation (on_event triggers)
+- Scheduled rule evaluation (on_schedule triggers)
+- Draft/publish workflow for automation rules
+- Multi-tenant rule isolation

docs/superpowers/specs/2026-04-02-design-tokens-design.md

@@ -0,0 +1,240 @@
+# Design Tokens — Multi-Hospital Theming
+
+**Date**: 2026-04-02
+**Status**: Draft
+
+---
+
+## Overview
+
+A JSON-driven design token system that allows each hospital customer to rebrand Helix Engage by providing a single JSON configuration file. The JSON is served by the sidecar, consumed by the frontend at runtime via a React provider that injects CSS custom properties.
+
+---
+
+## Architecture
+
+```
+Sidecar (helix-engage-server)
+  └─ GET /api/config/theme → returns hospital theme JSON
+  └─ theme stored as JSON file at data/theme.json (editable, hot-reloadable)
+
+Frontend (helix-engage)
+  └─ ThemeTokenProvider (wraps app) → fetches theme JSON on mount
+  └─ Injects CSS custom properties on <html> element
+  └─ Exposes useThemeTokens() hook for content tokens (logo, name, text)
+  └─ Components read colors via existing Tailwind classes (no changes needed)
+```
+
+---
+
+## Theme JSON Schema
+
+```json
+{
+  "brand": {
+    "name": "Helix Engage",
+    "hospitalName": "Global Hospital",
+    "logo": "/helix-logo.png",
+    "favicon": "/favicon.ico"
+  },
+  "colors": {
+    "brand": {
+      "25": "rgb(239 246 255)",
+      "50": "rgb(219 234 254)",
+      "100": "rgb(191 219 254)",
+      "200": "rgb(147 197 253)",
+      "300": "rgb(96 165 250)",
+      "400": "rgb(59 130 246)",
+      "500": "rgb(37 99 235)",
+      "600": "rgb(29 78 216)",
+      "700": "rgb(30 64 175)",
+      "800": "rgb(30 58 138)",
+      "900": "rgb(23 37 84)",
+      "950": "rgb(15 23 42)"
+    }
+  },
+  "typography": {
+    "body": "Satoshi, Inter, -apple-system, sans-serif",
+    "display": "General Sans, Inter, -apple-system, sans-serif"
+  },
+  "login": {
+    "title": "Sign in to Helix Engage",
+    "subtitle": "Global Hospital",
+    "showGoogleSignIn": true,
+    "showForgotPassword": true,
+    "poweredBy": {
+      "label": "Powered by F0rty2.ai",
+      "url": "https://f0rty2.ai"
+    }
+  },
+  "sidebar": {
+    "title": "Helix Engage",
+    "subtitle": "Global Hospital · Call Center Agent"
+  },
+  "ai": {
+    "quickActions": [
+      { "label": "Doctor availability", "prompt": "What doctors are available?" },
+      { "label": "Clinic timings", "prompt": "What are the clinic timings?" },
+      { "label": "Patient history", "prompt": "Summarize this patient's history" },
+      { "label": "Treatment packages", "prompt": "What packages are available?" }
+    ]
+  }
+}
+```
+
+---
+
+## Sidecar Implementation
+
+### Endpoints
+
+```
+GET  /api/config/theme        — Returns theme JSON (no auth, public — needed before login)
+PUT  /api/config/theme        — Updates theme JSON (auth required, admin only)
+POST /api/config/theme/reset  — Resets to default theme (auth required, admin only)
+```
+
+- Stored in `data/theme.json` on the sidecar filesystem
+- Cached in memory, invalidated on PUT
+- If file doesn't exist, returns a hardcoded default (Global Hospital theme)
+- PUT validates the JSON schema before saving
+- PUT also writes a timestamped backup to `data/theme-backups/`
+
+### Files
+
+- `helix-engage-server/src/config/theme.controller.ts` — REST endpoints
+- `helix-engage-server/src/config/theme.service.ts` — read/write/validate/backup logic
+
+---
+
+## Frontend Implementation
+
+### ThemeTokenProvider
+
+New provider wrapping the app in `main.tsx`. Responsibilities:
+
+1. **Fetch** `GET /api/config/theme` on mount (before rendering anything)
+2. **Inject CSS variables** on `document.documentElement.style`:
+   - `--color-brand-25` through `--color-brand-950` (overrides the Untitled UI brand scale)
+   - `--font-body`, `--font-display` (overrides typography)
+3. **Store content tokens** in React context (brand name, logo, login text, sidebar text, quick actions)
+4. **Expose** `useThemeTokens()` hook for components to read content tokens
+
+### File: `src/providers/theme-token-provider.tsx`
+
+```tsx
+type ThemeTokens = {
+  brand: { name: string; hospitalName: string; logo: string; favicon: string };
+  login: { title: string; subtitle: string; showGoogleSignIn: boolean; showForgotPassword: boolean; poweredBy: { label: string; url: string } };
+  sidebar: { title: string; subtitle: string };
+  ai: { quickActions: Array<{ label: string; prompt: string }> };
+};
+```
+
+### CSS Variable Injection
+
+The provider maps `colors.brand.*` to CSS custom properties that Untitled UI already reads:
+
+```
+theme.colors.brand["500"] → document.documentElement.style.setProperty('--color-brand-500', value)
+```
+
+Since `theme.css` defines `--color-brand-500: var(--color-blue-500)`, setting `--color-brand-500` directly on `<html>` overrides the alias with higher specificity.
+
+Typography:
+```
+theme.typography.body → --font-body
+theme.typography.display → --font-display
+```
+
+### Consumers
+
+Components that currently hardcode hospital-specific content:
+
+| Component | Current hardcoded value | Token path |
+|---|---|---|
+| `login.tsx` line 93 | "Sign in to Helix Engage" | `login.title` |
+| `login.tsx` line 94 | "Global Hospital" | `login.subtitle` |
+| `login.tsx` line 92 | `/helix-logo.png` | `brand.logo` |
+| `login.tsx` line 181 | "Powered by F0rty2.ai" | `login.poweredBy.label` |
+| `sidebar.tsx` | "Helix Engage" | `sidebar.title` |
+| `sidebar.tsx` | "Global Hospital · Call Center Agent" | `sidebar.subtitle` |
+| `ai-chat-panel.tsx` lines 21-25 | Quick action prompts | `ai.quickActions` |
+| `app-shell.tsx` | favicon | `brand.favicon` |
+
+---
+
+## Default Theme
+
+If the sidecar returns no theme (endpoint down, file missing), the frontend uses a hardcoded default matching the current Global Hospital branding. This ensures the app works without a sidecar theme endpoint.
+
+---
+
+## Settings UI (Supervisor)
+
+New tab in the Settings page: **Branding**. Visible only to admin role.
+
+### Sections
+
+**1. Brand Identity**
+- Hospital name (text input)
+- App name (text input)
+- Logo upload (file input → stores URL)
+- Favicon upload
+
+**2. Brand Colors**
+- 12 color swatches (25 through 950) with hex/rgb input per swatch
+- Live preview strip showing the full scale
+- "Reset to default" button per section
+
+**3. Typography**
+- Body font family (text input with common font suggestions)
+- Display font family (text input)
+
+**4. Login Page**
+- Title text
+- Subtitle text
+- Show Google sign-in (toggle)
+- Show forgot password (toggle)
+- Powered-by label + URL
+
+**5. Sidebar**
+- Title text
+- Subtitle template (supports `{role}` placeholder — "Global Hospital · {role}")
+
+**6. AI Quick Actions**
+- Editable list of label + prompt pairs
+- Add / remove / reorder
+
+### Save Flow
+- Supervisor edits fields → clicks Save → `PUT /api/config/theme` → sidecar validates + saves + backs up
+- Frontend re-fetches theme on save → CSS variables update → page reflects changes immediately (no reload needed)
+
+### File
+`src/pages/settings.tsx` — new "Branding" tab (or `src/pages/branding-settings.tsx` if settings page is already complex)
+
+---
+
+## What This Does NOT Change
+
+- **Tailwind classes** — no changes. Components continue using `text-brand-secondary`, `bg-brand-solid`, etc. The CSS variables they reference are overridden at runtime.
+- **Component structure** — no layout changes. Only content strings and colors change.
+- **Untitled UI theme.css** — not modified. The provider overrides are applied inline on `<html>`, higher specificity.
+
+---
+
+## Scope
+
+**In scope:**
+- Sidecar theme endpoint + JSON file
+- ThemeTokenProvider + useThemeTokens hook
+- Login page consuming tokens
+- Sidebar consuming tokens
+- AI quick actions consuming tokens
+- Brand color override via CSS variables
+- Typography override via CSS variables
+
+**Out of scope:**
+- Dark mode customization (inherits from Untitled UI)
+- Per-role theming
+- Logo upload to cloud storage (uses URL for now — can be a data URI or hosted path)

docs/superpowers/specs/2026-04-05-website-widget-design.md

@@ -0,0 +1,337 @@
+# Website Widget — Embeddable AI Chat + Appointment Booking
+
+**Date**: 2026-04-05
+**Status**: Draft
+
+---
+
+## Overview
+
+A single JavaScript file that hospitals embed on their website via a `<script>` tag. Renders a floating chat bubble that opens to an AI chatbot (hospital knowledge base), appointment booking flow, and lead capture form. Themed to match the hospital's branding. All write endpoints are captcha-gated.
+
+---
+
+## Embed Code
+
+```html
+<script src="https://engage-api.srv1477139.hstgr.cloud/widget.js" 
+  data-key="a8f3e2b1.7c4d9e6f2a1b8c3d5e0f4a2b6c8d1e3f7a9b0c2d4e6f8a1b3c5d7e9f0a2b"></script>
+```
+
+The `data-key` is an HMAC-signed token: `{siteId}.{hmacSignature}`. Cannot be guessed or forged without the server-side secret.
+
+---
+
+## Architecture
+
+```
+Hospital Website (any tech stack)
+  └─ <script data-key="xxx"> loads widget.js from sidecar
+      └─ Widget initializes:
+          1. GET /api/widget/init?key=xxx → validates key, returns theme + config
+          2. Renders shadow DOM (CSS-isolated from host page)
+          3. All interactions go to /api/widget/* endpoints
+
+Sidecar (helix-engage-server):
+  └─ src/widget/
+      ├── widget.controller.ts    — REST endpoints for the widget
+      ├── widget.service.ts       — lead creation, appointment booking, key validation
+      ├── widget.guard.ts         — HMAC key validation + origin check
+      ├── captcha.guard.ts        — reCAPTCHA/Turnstile verification
+      └── widget-keys.service.ts  — generate/validate site keys
+
+Widget Bundle:
+  └─ packages/helix-engage-widget/
+      ├── src/
+      │   ├── main.ts             — entry point, reads data-key, initializes
+      │   ├── widget.ts           — shadow DOM mount, theming, tab routing
+      │   ├── chat.ts             — AI chatbot (streaming)
+      │   ├── booking.ts          — appointment booking flow
+      │   ├── contact.ts          — lead capture form
+      │   ├── captcha.ts          — captcha integration
+      │   ├── api.ts              — HTTP client for widget endpoints
+      │   └── styles.ts           — CSS-in-JS (injected into shadow DOM)
+      ├── vite.config.ts          — library mode, single IIFE bundle
+      └── package.json
+```
+
+---
+
+## Sidecar Endpoints
+
+All prefixed with `/api/widget/`. Public endpoints validate the site key. Write endpoints require captcha.
+
+| Method | Path | Auth | Captcha | Description |
+|---|---|---|---|---|
+| GET | `/init` | Key | No | Returns theme, config, captcha site key |
+| POST | `/chat` | Key | Yes (first message only) | AI chat stream (same knowledge base as agent AI) |
+| GET | `/doctors` | Key | No | Department + doctor list with visiting hours |
+| GET | `/slots` | Key | No | Available time slots for a doctor + date |
+| POST | `/book` | Key | Yes | Create appointment + lead + patient |
+| POST | `/lead` | Key | Yes | Create lead (contact form submission) |
+| POST | `/keys/generate` | Admin JWT | No | Generate a new site key for a hospital |
+| GET | `/keys` | Admin JWT | No | List all site keys |
+| DELETE | `/keys/:siteId` | Admin JWT | No | Revoke a site key |
+
+---
+
+## Site Key System
+
+### Generation
+
+```
+siteId = uuid v4 (random)
+payload = siteId
+signature = HMAC-SHA256(payload, SERVER_SECRET)
+key = `${siteId}.${signature}`
+```
+
+The `SERVER_SECRET` is an environment variable on the sidecar. Never leaves the server.
+
+### Validation
+
+```
+input = "a8f3e2b1.7c4d9e6f2a1b8c3d5e0f4a2b6c8d1e3f7a9b0c2d4e6f8a1b3c5d7e9f0a2b"
+[siteId, signature] = input.split('.')
+expectedSignature = HMAC-SHA256(siteId, SERVER_SECRET)
+valid = timingSafeEqual(signature, expectedSignature)
+```
+
+### Storage
+
+Site keys are stored in Redis (already running in the stack):
+
+```
+Key:   widget:keys:{siteId}
+Value: JSON { hospitalName, allowedOrigins, active, createdAt }
+TTL:   none (persistent until revoked)
+```
+
+Example:
+```
+widget:keys:a8f3e2b1 → {
+  "hospitalName": "Global Hospital",
+  "allowedOrigins": ["https://globalhospital.com", "https://www.globalhospital.com"],
+  "createdAt": "2026-04-05T10:00:00Z",
+  "active": true
+}
+```
+
+CRUD via `SessionService` (getCache/setCache/deleteCache/scanKeys) — same pattern as caller cache and agent names.
+
+### Origin Validation
+
+On every widget request, the sidecar checks:
+1. Key signature is valid (HMAC)
+2. `siteId` exists and is active
+3. `Referer` or `Origin` header matches `allowedOrigins` for this site key
+4. If origin doesn't match → 403
+
+---
+
+## Widget UI
+
+### Collapsed State (Floating Bubble)
+
+- Position: fixed bottom-right, 20px margin
+- Size: 56px circle
+- Shows hospital logo (from theme)
+- Pulse animation on first load
+- Click → expands panel
+- Z-index: 999999 (above host page content)
+
+### Expanded State (Panel)
+
+- Size: 380px wide × 520px tall
+- Anchored bottom-right
+- Shadow DOM container (CSS isolation from host page)
+- Header: hospital logo + name + close button
+- Three tabs: Chat (default) | Book | Contact
+- All styled with brand colors from theme
+
+### Chat Tab (Default)
+
+- AI chatbot interface
+- Streaming responses (same endpoint as agent AI, but with widget system prompt)
+- Quick action chips: "Doctor availability", "Clinic timings", "Book appointment", "Treatment packages"
+- If AI detects it can't help → shows: "An agent will call you shortly" + lead capture fields (name, phone)
+- First message triggers captcha verification (invisible reCAPTCHA v3)
+
+### Book Tab
+
+Step-by-step appointment booking:
+
+1. **Department** — dropdown populated from `/api/widget/doctors`
+2. **Doctor** — dropdown filtered by department, shows visiting hours
+3. **Date** — date picker (min: today, max: 30 days)
+4. **Time Slot** — grid of available slots from `/api/widget/slots`
+5. **Patient Details** — name, phone, age, gender, chief complaint
+6. **Captcha** — invisible reCAPTCHA v3 on submit
+7. **Confirmation** — "Appointment booked! Reference: ABC123. We'll send a confirmation SMS."
+
+On successful booking:
+- Creates patient (if new phone number)
+- Creates lead with `source: 'WEBSITE'`
+- Creates appointment linked to patient + doctor
+- Rules engine scores the lead
+- Pushes to agent worklist
+- Real-time notification to agents
+
+### Contact Tab
+
+Simple lead capture form:
+- Name (required)
+- Phone (required)
+- Interest / Department (dropdown, optional)
+- Message (textarea, optional)
+- Captcha on submit
+- Success: "Thank you! An agent will call you shortly."
+
+On submit:
+- Creates lead with `source: 'WEBSITE'`, `interestedService: interest`
+- Rules engine scores it
+- Pushes to agent worklist + notification
+
+---
+
+## Theming
+
+Widget fetches theme from `/api/widget/init`:
+
+```json
+{
+  "brand": { "name": "Global Hospital", "logo": "https://..." },
+  "colors": {
+    "primary": "rgb(29 78 216)",
+    "primaryLight": "rgb(219 234 254)",
+    "text": "rgb(15 23 42)",
+    "textLight": "rgb(100 116 139)"
+  },
+  "captchaSiteKey": "6Lc..."
+}
+```
+
+Colors are injected as CSS variables inside the shadow DOM:
+```css
+:host {
+  --widget-primary: rgb(29 78 216);
+  --widget-primary-light: rgb(219 234 254);
+  --widget-text: rgb(15 23 42);
+  --widget-text-light: rgb(100 116 139);
+}
+```
+
+All widget elements reference these variables. Changing the theme API → widget auto-updates on next load.
+
+---
+
+## Widget System Prompt (AI Chat)
+
+Different from the agent AI prompt — tailored for website visitors:
+
+```
+You are a virtual assistant for {hospitalName}.
+You help website visitors with:
+- Doctor availability and visiting hours
+- Clinic locations and timings
+- Health packages and pricing
+- Booking appointments
+- General hospital information
+
+RULES:
+1. Be friendly and welcoming — this is the hospital's first impression
+2. If someone wants to book an appointment, guide them to the Book tab
+3. If you can't answer a question, say "I'd be happy to have our team call you" and ask for their name and phone number
+4. Never give medical advice
+5. Keep responses under 80 words — visitors are scanning, not reading
+6. Always mention the hospital name naturally in first response
+
+KNOWLEDGE BASE:
+{same KB as agent AI — clinics, doctors, packages, insurance}
+```
+
+---
+
+## Captcha
+
+- **Provider**: Google reCAPTCHA v3 (invisible) or Cloudflare Turnstile
+- **When**: On first chat message, appointment booking submit, lead form submit
+- **How**: Widget loads captcha script, gets token, sends with request. Sidecar validates via provider API before processing.
+- **Fallback**: If captcha fails to load (ad blocker), show a simple challenge or allow with rate limiting
+
+---
+
+## Widget Bundle
+
+### Tech Stack
+
+- **Preact** — 3KB, React-compatible API, sufficient for the widget UI
+- **Vite** — library mode build, outputs single IIFE bundle
+- **CSS-in-JS** — styles injected into shadow DOM (no external CSS files)
+- **Target**: ~60KB gzipped (Preact + UI + styles)
+
+### Build Output
+
+```
+dist/
+  └── widget.js     — single IIFE bundle, self-contained
+```
+
+### Serving
+
+Sidecar serves `widget.js` as a static file:
+```
+GET /widget.js → serves dist/widget.js with Cache-Control: public, max-age=3600
+```
+
+---
+
+## Lead Flow (all channels)
+
+```
+Widget submit (chat/book/contact)
+  → POST /api/widget/lead or /api/widget/book
+  → captcha validation
+  → key + origin validation
+  → create patient (if new phone)
+  → create lead (source: WEBSITE, channel metadata)
+  → rules engine scores lead (source weight, campaign weight)
+  → push to agent worklist
+  → WebSocket notification to agents (bell + toast)
+  → response to widget: success + reference number
+```
+
+---
+
+## Rate Limiting
+
+| Endpoint | Limit |
+|---|---|
+| `/init` | 60/min per IP |
+| `/chat` | 10/min per IP |
+| `/doctors`, `/slots` | 30/min per IP |
+| `/book` | 5/min per IP |
+| `/lead` | 5/min per IP |
+
+---
+
+## Scope
+
+**In scope:**
+- Widget JS bundle (Preact + shadow DOM + theming)
+- Sidecar widget endpoints (init, chat, doctors, slots, book, lead)
+- Site key generation + validation (HMAC)
+- Captcha integration (reCAPTCHA v3)
+- Lead creation with worklist integration
+- Appointment booking end-to-end
+- Origin validation
+- Rate limiting
+- Widget served from sidecar
+
+**Out of scope:**
+- Live agent chat in widget (shows "agent will call you" instead)
+- Widget analytics/tracking dashboard
+- A/B testing widget variations
+- Multi-language widget UI
+- File upload in widget
+- Payment integration in widget

docs/weekly-update-mar18-25.html

@@ -0,0 +1,886 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Helix Engage — Weekly Update (Mar 18–25, 2026)</title>
+    <link rel="preconnect" href="https://fonts.googleapis.com">
+    <link href="https://fonts.googleapis.com/css2?family=DM+Sans:wght@400;500;700&family=Space+Grotesk:wght@400;500;600;700&display=swap" rel="stylesheet">
+    <style>
+        /* ===========================================
+           CSS CUSTOM PROPERTIES (DARK EXECUTIVE THEME)
+           =========================================== */
+        :root {
+            --bg-primary: #0b0e17;
+            --bg-secondary: #111827;
+            --bg-card: rgba(255,255,255,0.04);
+            --bg-card-hover: rgba(255,255,255,0.07);
+            --text-primary: #f0f2f5;
+            --text-secondary: #8892a4;
+            --text-muted: #4b5563;
+            --accent-cyan: #22d3ee;
+            --accent-violet: #a78bfa;
+            --accent-emerald: #34d399;
+            --accent-amber: #fbbf24;
+            --accent-rose: #fb7185;
+            --accent-blue: #60a5fa;
+            --glow-cyan: rgba(34,211,238,0.15);
+            --glow-violet: rgba(167,139,250,0.15);
+            --glow-emerald: rgba(52,211,153,0.15);
+            --font-display: 'Space Grotesk', sans-serif;
+            --font-body: 'DM Sans', sans-serif;
+            --slide-padding: clamp(2rem, 6vw, 5rem);
+            --ease-out-expo: cubic-bezier(0.16, 1, 0.3, 1);
+            --duration: 0.7s;
+        }
+
+        /* ===========================================
+           BASE RESET
+           =========================================== */
+        *, *::before, *::after { margin: 0; padding: 0; box-sizing: border-box; }
+        html { scroll-behavior: smooth; scroll-snap-type: y mandatory; }
+        body {
+            font-family: var(--font-body);
+            background: var(--bg-primary);
+            color: var(--text-primary);
+            overflow-x: hidden;
+            -webkit-font-smoothing: antialiased;
+        }
+
+        /* ===========================================
+           SLIDE CONTAINER
+           =========================================== */
+        .slide {
+            min-height: 100vh;
+            padding: var(--slide-padding);
+            scroll-snap-align: start;
+            display: flex;
+            flex-direction: column;
+            justify-content: center;
+            position: relative;
+            overflow: hidden;
+        }
+
+        /* ===========================================
+           PROGRESS BAR
+           =========================================== */
+        .progress-bar {
+            position: fixed; top: 0; left: 0;
+            height: 3px; width: 0%;
+            background: linear-gradient(90deg, var(--accent-cyan), var(--accent-violet));
+            z-index: 100;
+            transition: width 0.3s ease;
+        }
+
+        /* ===========================================
+           NAVIGATION DOTS
+           =========================================== */
+        .nav-dots {
+            position: fixed; right: 1.5rem; top: 50%;
+            transform: translateY(-50%);
+            display: flex; flex-direction: column; gap: 10px;
+            z-index: 100;
+        }
+        .nav-dot {
+            width: 10px; height: 10px;
+            border-radius: 50%;
+            background: var(--text-muted);
+            border: none; cursor: pointer;
+            transition: all 0.3s ease;
+        }
+        .nav-dot.active {
+            background: var(--accent-cyan);
+            box-shadow: 0 0 12px var(--glow-cyan);
+            transform: scale(1.3);
+        }
+
+        /* ===========================================
+           SLIDE COUNTER
+           =========================================== */
+        .slide-counter {
+            position: fixed; bottom: 1.5rem; right: 2rem;
+            font-family: var(--font-display);
+            font-size: 0.85rem;
+            color: var(--text-muted);
+            z-index: 100;
+            letter-spacing: 0.1em;
+        }
+
+        /* ===========================================
+           REVEAL ANIMATIONS
+           =========================================== */
+        .reveal {
+            opacity: 0;
+            transform: translateY(35px);
+            transition: opacity var(--duration) var(--ease-out-expo),
+                        transform var(--duration) var(--ease-out-expo);
+        }
+        .slide.visible .reveal { opacity: 1; transform: translateY(0); }
+        .reveal:nth-child(1) { transition-delay: 0.08s; }
+        .reveal:nth-child(2) { transition-delay: 0.16s; }
+        .reveal:nth-child(3) { transition-delay: 0.24s; }
+        .reveal:nth-child(4) { transition-delay: 0.32s; }
+        .reveal:nth-child(5) { transition-delay: 0.40s; }
+        .reveal:nth-child(6) { transition-delay: 0.48s; }
+        .reveal:nth-child(7) { transition-delay: 0.56s; }
+        .reveal:nth-child(8) { transition-delay: 0.64s; }
+
+        @media (prefers-reduced-motion: reduce) {
+            .reveal { transition: opacity 0.3s ease; transform: none; }
+        }
+
+        /* ===========================================
+           TYPOGRAPHY
+           =========================================== */
+        h1 { font-family: var(--font-display); font-weight: 700; }
+        h2 { font-family: var(--font-display); font-weight: 600; font-size: clamp(1.6rem, 4vw, 2.5rem); margin-bottom: 0.5em; }
+        h3 { font-family: var(--font-display); font-weight: 500; font-size: 1.1rem; }
+        p, li { line-height: 1.65; }
+
+        .label {
+            display: inline-block;
+            font-family: var(--font-display);
+            text-transform: uppercase;
+            letter-spacing: 0.15em;
+            font-size: 0.7rem;
+            font-weight: 600;
+            padding: 0.3em 0.9em;
+            border-radius: 100px;
+            margin-bottom: 1rem;
+        }
+
+        /* ===========================================
+           TITLE SLIDE
+           =========================================== */
+        .title-slide {
+            text-align: center;
+            background:
+                radial-gradient(ellipse at 30% 70%, rgba(34,211,238,0.08) 0%, transparent 50%),
+                radial-gradient(ellipse at 70% 30%, rgba(167,139,250,0.08) 0%, transparent 50%),
+                var(--bg-primary);
+        }
+        .title-slide h1 {
+            font-size: clamp(2.5rem, 6vw, 4.5rem);
+            background: linear-gradient(135deg, var(--accent-cyan) 0%, var(--accent-violet) 50%, var(--accent-emerald) 100%);
+            -webkit-background-clip: text;
+            -webkit-text-fill-color: transparent;
+            background-clip: text;
+            line-height: 1.15;
+            margin-bottom: 0.3em;
+        }
+        .title-slide .subtitle {
+            font-size: clamp(1rem, 2vw, 1.4rem);
+            color: var(--text-secondary);
+            margin-bottom: 0.4em;
+        }
+        .title-slide .date-range {
+            font-family: var(--font-display);
+            color: var(--text-muted);
+            font-size: 0.9rem;
+            letter-spacing: 0.08em;
+        }
+
+        /* ===========================================
+           STAT CARDS
+           =========================================== */
+        .stats-grid {
+            display: grid;
+            grid-template-columns: repeat(auto-fit, minmax(180px, 1fr));
+            gap: 1.2rem;
+            margin-top: 1.5rem;
+        }
+        .stat-card {
+            background: var(--bg-card);
+            border: 1px solid rgba(255,255,255,0.06);
+            border-radius: 16px;
+            padding: 1.8rem 1.5rem;
+            text-align: center;
+            transition: all 0.4s var(--ease-out-expo);
+            position: relative;
+            overflow: hidden;
+        }
+        .stat-card::after {
+            content: '';
+            position: absolute; top: 0; left: 0; right: 0;
+            height: 2px;
+            background: linear-gradient(90deg, transparent, var(--accent-cyan), transparent);
+            opacity: 0;
+            transition: opacity 0.4s ease;
+        }
+        .stat-card:hover { background: var(--bg-card-hover); transform: translateY(-4px); }
+        .stat-card:hover::after { opacity: 1; }
+        .stat-number {
+            font-family: var(--font-display);
+            font-size: 3rem;
+            font-weight: 700;
+            line-height: 1;
+            margin-bottom: 0.3em;
+        }
+        .stat-number.cyan { color: var(--accent-cyan); }
+        .stat-number.violet { color: var(--accent-violet); }
+        .stat-number.emerald { color: var(--accent-emerald); }
+        .stat-number.amber { color: var(--accent-amber); }
+        .stat-label { color: var(--text-secondary); font-size: 0.85rem; }
+
+        /* ===========================================
+           CONTENT CARDS
+           =========================================== */
+        .card-grid {
+            display: grid;
+            grid-template-columns: repeat(auto-fit, minmax(300px, 1fr));
+            gap: 1.2rem;
+            margin-top: 1.2rem;
+        }
+        .content-card {
+            background: var(--bg-card);
+            border: 1px solid rgba(255,255,255,0.06);
+            border-radius: 14px;
+            padding: 1.5rem;
+            transition: all 0.3s var(--ease-out-expo);
+        }
+        .content-card:hover { background: var(--bg-card-hover); border-color: rgba(255,255,255,0.1); }
+        .content-card h3 { margin-bottom: 0.6rem; }
+        .content-card ul {
+            list-style: none; padding: 0;
+        }
+        .content-card li {
+            position: relative;
+            padding-left: 1.2em;
+            margin-bottom: 0.45em;
+            color: var(--text-secondary);
+            font-size: 0.9rem;
+        }
+        .content-card li::before {
+            content: '›';
+            position: absolute;
+            left: 0;
+            color: var(--accent-cyan);
+            font-weight: 700;
+        }
+
+        /* ===========================================
+           TIMELINE
+           =========================================== */
+        .timeline {
+            position: relative;
+            padding-left: 2rem;
+            margin-top: 1.5rem;
+        }
+        .timeline::before {
+            content: '';
+            position: absolute; left: 0; top: 0; bottom: 0;
+            width: 2px;
+            background: linear-gradient(to bottom, var(--accent-cyan), var(--accent-violet), var(--accent-emerald));
+            opacity: 0.4;
+        }
+        .tl-item {
+            position: relative;
+            margin-bottom: 1.5rem;
+            padding-left: 1rem;
+        }
+        .tl-item::before {
+            content: '';
+            position: absolute; left: -2.35rem; top: 0.3em;
+            width: 10px; height: 10px;
+            border-radius: 50%;
+            background: var(--accent-cyan);
+            border: 2px solid var(--bg-primary);
+        }
+        .tl-date {
+            font-family: var(--font-display);
+            font-size: 0.75rem;
+            color: var(--accent-cyan);
+            letter-spacing: 0.08em;
+            margin-bottom: 0.15em;
+        }
+        .tl-title {
+            font-weight: 600;
+            font-size: 1rem;
+            margin-bottom: 0.15em;
+        }
+        .tl-desc {
+            font-size: 0.85rem;
+            color: var(--text-secondary);
+        }
+
+        /* ===========================================
+           REPO BADGE
+           =========================================== */
+        .repo-badge {
+            display: inline-block;
+            font-family: var(--font-display);
+            font-size: 0.65rem;
+            padding: 2px 8px;
+            border-radius: 4px;
+            font-weight: 600;
+            letter-spacing: 0.05em;
+            margin-left: 0.5em;
+            vertical-align: middle;
+        }
+        .badge-frontend { background: rgba(34,211,238,0.15); color: var(--accent-cyan); }
+        .badge-server { background: rgba(167,139,250,0.15); color: var(--accent-violet); }
+        .badge-sdk { background: rgba(52,211,153,0.15); color: var(--accent-emerald); }
+
+        /* ===========================================
+           PILL LIST
+           =========================================== */
+        .pill-list {
+            display: flex; flex-wrap: wrap; gap: 0.5rem;
+            margin-top: 0.8rem;
+        }
+        .pill {
+            display: inline-block;
+            font-size: 0.78rem;
+            padding: 0.3em 0.9em;
+            border-radius: 100px;
+            background: var(--bg-card);
+            border: 1px solid rgba(255,255,255,0.08);
+            color: var(--text-secondary);
+        }
+
+        /* ===========================================
+           SECTION HEADER
+           =========================================== */
+        .section-header {
+            display: flex;
+            align-items: center;
+            gap: 0.7rem;
+            margin-bottom: 0.3rem;
+        }
+        .section-icon {
+            width: 36px; height: 36px;
+            border-radius: 10px;
+            display: flex; align-items: center; justify-content: center;
+            font-size: 1.1rem;
+        }
+
+        /* ===========================================
+           KEYBOARD HINT
+           =========================================== */
+        .keyboard-hint {
+            position: fixed; bottom: 1.5rem; left: 2rem;
+            font-size: 0.75rem; color: var(--text-muted);
+            z-index: 100;
+            display: flex; align-items: center; gap: 0.5rem;
+            opacity: 0;
+            animation: hintFade 0.6s 2s forwards;
+        }
+        .key {
+            display: inline-block;
+            padding: 2px 8px;
+            border: 1px solid var(--text-muted);
+            border-radius: 4px;
+            font-family: var(--font-display);
+            font-size: 0.7rem;
+        }
+        @keyframes hintFade { to { opacity: 1; } }
+
+        /* ===========================================
+           CLOSING SLIDE
+           =========================================== */
+        .closing-slide {
+            text-align: center;
+            background:
+                radial-gradient(ellipse at 50% 50%, rgba(34,211,238,0.06) 0%, transparent 60%),
+                var(--bg-primary);
+        }
+        .closing-slide h2 {
+            font-size: clamp(1.8rem, 4vw, 3rem);
+            background: linear-gradient(135deg, var(--accent-emerald), var(--accent-cyan));
+            -webkit-background-clip: text; -webkit-text-fill-color: transparent;
+            background-clip: text;
+        }
+
+        /* ===========================================
+           RESPONSIVE
+           =========================================== */
+        @media (max-width: 768px) {
+            .nav-dots, .keyboard-hint { display: none; }
+            .stats-grid { grid-template-columns: repeat(2, 1fr); }
+            .card-grid { grid-template-columns: 1fr; }
+        }
+    </style>
+</head>
+<body>
+    <!-- Progress bar -->
+    <div class="progress-bar" id="progressBar"></div>
+
+    <!-- Navigation dots -->
+    <nav class="nav-dots" id="navDots"></nav>
+
+    <!-- Slide counter -->
+    <div class="slide-counter" id="slideCounter"></div>
+
+    <!-- Keyboard hint -->
+    <div class="keyboard-hint">
+        <span class="key">↑</span><span class="key">↓</span> or <span class="key">Space</span> to navigate
+    </div>
+
+    <!-- ======================================
+         SLIDE 1: TITLE
+         ====================================== -->
+    <section class="slide title-slide">
+        <div class="reveal">
+            <span class="label" style="background: var(--glow-cyan); color: var(--accent-cyan);">Weekly Engineering Update</span>
+        </div>
+        <h1 class="reveal">Helix Engage</h1>
+        <p class="subtitle reveal">Contact Center CRM · Real-time Telephony · AI Copilot</p>
+        <p class="date-range reveal">March 18 – 25, 2026</p>
+    </section>
+
+    <!-- ======================================
+         SLIDE 2: AT A GLANCE
+         ====================================== -->
+    <section class="slide">
+        <div class="reveal">
+            <span class="label" style="background: var(--glow-violet); color: var(--accent-violet);">At a Glance</span>
+        </div>
+        <h2 class="reveal">Week in Numbers</h2>
+        <div class="stats-grid">
+            <div class="stat-card reveal">
+                <div class="stat-number cyan" data-count="78">0</div>
+                <div class="stat-label">Total Commits</div>
+            </div>
+            <div class="stat-card reveal">
+                <div class="stat-number violet" data-count="3">0</div>
+                <div class="stat-label">Repositories</div>
+            </div>
+            <div class="stat-card reveal">
+                <div class="stat-number emerald" data-count="8">0</div>
+                <div class="stat-label">Days Active</div>
+            </div>
+            <div class="stat-card reveal">
+                <div class="stat-number amber" data-count="50">0</div>
+                <div class="stat-label">Frontend Commits</div>
+            </div>
+        </div>
+        <div class="pill-list reveal" style="margin-top:1.5rem; justify-content: center;">
+            <span class="pill" style="border-color: rgba(34,211,238,0.3); color: var(--accent-cyan);">helix-engage <b>50</b></span>
+            <span class="pill" style="border-color: rgba(167,139,250,0.3); color: var(--accent-violet);">helix-engage-server <b>27</b></span>
+            <span class="pill" style="border-color: rgba(52,211,153,0.3); color: var(--accent-emerald);">FortyTwoApps/SDK <b>1</b></span>
+        </div>
+    </section>
+
+    <!-- ======================================
+         SLIDE 3: TELEPHONY & SIP
+         ====================================== -->
+    <section class="slide">
+        <div class="reveal">
+            <div class="section-header">
+                <div class="section-icon" style="background: var(--glow-cyan);">📞</div>
+                <span class="label" style="background: var(--glow-cyan); color: var(--accent-cyan);">Core Infrastructure</span>
+            </div>
+        </div>
+        <h2 class="reveal">Telephony & SIP Overhaul</h2>
+        <div class="card-grid">
+            <div class="content-card reveal">
+                <h3 style="color: var(--accent-cyan);">Outbound Calling <span class="repo-badge badge-frontend">Frontend</span></h3>
+                <ul>
+                    <li>Direct SIP call from browser — no Kookoo bridge needed</li>
+                    <li>Immediate call card UI with auto-answer SIP bridge</li>
+                    <li>End Call label fix, force active state after auto-answer</li>
+                    <li>Reset outboundPending on call end to prevent inbound poisoning</li>
+                </ul>
+            </div>
+            <div class="content-card reveal">
+                <h3 style="color: var(--accent-violet);">Ozonetel Integration <span class="repo-badge badge-server">Server</span></h3>
+                <ul>
+                    <li>Ozonetel V3 dial endpoint + webhook handler for call events</li>
+                    <li>Kookoo IVR outbound bridging (deprecated → direct SIP)</li>
+                    <li>Set Disposition API for ACW release</li>
+                    <li>Force Ready endpoint for agent state management</li>
+                    <li>Token: 10-min cache, 401 invalidation, refresh on login</li>
+                </ul>
+            </div>
+            <div class="content-card reveal">
+                <h3 style="color: var(--accent-cyan);">SIP & Agent State <span class="repo-badge badge-frontend">Frontend</span></h3>
+                <ul>
+                    <li>SIP driven by Agent entity with token refresh</li>
+                    <li>Dynamic SIP from agentConfig, logout cleanup, heartbeat</li>
+                    <li>Centralised outbound dial into <code>useSip().dialOutbound()</code></li>
+                    <li>UCID tracking from SIP headers for Ozonetel disposition</li>
+                    <li>Network indicator for connection health</li>
+                </ul>
+            </div>
+            <div class="content-card reveal">
+                <h3 style="color: var(--accent-violet);">Multi-Agent & Sessions <span class="repo-badge badge-server">Server</span></h3>
+                <ul>
+                    <li>Multi-agent SIP with Redis session lockout</li>
+                    <li>Strict duplicate login lockout — one device per agent</li>
+                    <li>Session lock stores IP + timestamp for debugging</li>
+                    <li>SSE agent state broadcast for real-time supervisor view</li>
+                </ul>
+            </div>
+        </div>
+    </section>
+
+    <!-- ======================================
+         SLIDE 4: CALL DESK & UX
+         ====================================== -->
+    <section class="slide">
+        <div class="reveal">
+            <div class="section-header">
+                <div class="section-icon" style="background: var(--glow-emerald);">🖥️</div>
+                <span class="label" style="background: var(--glow-emerald); color: var(--accent-emerald);">User Experience</span>
+            </div>
+        </div>
+        <h2 class="reveal">Call Desk & Agent UX</h2>
+        <div class="card-grid">
+            <div class="content-card reveal">
+                <h3 style="color: var(--accent-emerald);">Call Desk Redesign</h3>
+                <ul>
+                    <li>2-panel layout with collapsible sidebar & inline AI</li>
+                    <li>Collapsible context panel, worklist/calls tabs, phone numbers</li>
+                    <li>Pinned header & chat input, numpad dialler</li>
+                    <li>Ringtone support for incoming calls</li>
+                </ul>
+            </div>
+            <div class="content-card reveal">
+                <h3 style="color: var(--accent-emerald);">Post-Call Workflow</h3>
+                <ul>
+                    <li>Disposition → appointment booking → follow-up creation</li>
+                    <li>Disposition returns straight to worklist — no intermediate screens</li>
+                    <li>Send disposition to sidecar with UCID for Ozonetel ACW</li>
+                    <li>Enquiry in post-call, appointment skip button</li>
+                </ul>
+            </div>
+            <div class="content-card reveal">
+                <h3 style="color: var(--accent-emerald);">UI Polish</h3>
+                <ul>
+                    <li>FontAwesome Pro Duotone icon migration (all icons)</li>
+                    <li>Tooltips, sticky headers, roles, search, AI prompts</li>
+                    <li>Fix React error #520 (isRowHeader) in production tables</li>
+                    <li>AI scroll containment, brand tokens refresh</li>
+                </ul>
+            </div>
+        </div>
+    </section>
+
+    <!-- ======================================
+         SLIDE 5: FEATURES SHIPPED
+         ====================================== -->
+    <section class="slide">
+        <div class="reveal">
+            <div class="section-header">
+                <div class="section-icon" style="background: rgba(251,191,36,0.15);">🚀</div>
+                <span class="label" style="background: rgba(251,191,36,0.15); color: var(--accent-amber);">Features Shipped</span>
+            </div>
+        </div>
+        <h2 class="reveal">Major Features</h2>
+        <div class="card-grid">
+            <div class="content-card reveal">
+                <h3 style="color: var(--accent-amber);">Supervisor Module</h3>
+                <ul>
+                    <li>Team performance analytics page</li>
+                    <li>Live monitor with active calls visibility</li>
+                    <li>Master data management pages</li>
+                    <li>Server: team perf + active calls endpoints</li>
+                </ul>
+            </div>
+            <div class="content-card reveal">
+                <h3 style="color: var(--accent-amber);">Missed Call Queue (Phase 2)</h3>
+                <ul>
+                    <li>Missed call queue ingestion & worklist</li>
+                    <li>Auto-assignment engine for agents</li>
+                    <li>Login redesign with role-based routing</li>
+                    <li>Lead lookup for missed callers</li>
+                </ul>
+            </div>
+            <div class="content-card reveal">
+                <h3 style="color: var(--accent-amber);">Agent Features (Phase 1)</h3>
+                <ul>
+                    <li>Agent status toggle (Ready / Not Ready / Break)</li>
+                    <li>Global search across patients, leads, calls</li>
+                    <li>Enquiry form for new patient intake</li>
+                    <li>My Performance page + logout modal</li>
+                </ul>
+            </div>
+            <div class="content-card reveal">
+                <h3 style="color: var(--accent-amber);">Recording Analysis</h3>
+                <ul>
+                    <li>Deepgram diarization + AI insights</li>
+                    <li>Redis caching layer for analysis results</li>
+                    <li>Full-stack: frontend player + server module</li>
+                </ul>
+            </div>
+        </div>
+    </section>
+
+    <!-- ======================================
+         SLIDE 6: DATA & BACKEND
+         ====================================== -->
+    <section class="slide">
+        <div class="reveal">
+            <div class="section-header">
+                <div class="section-icon" style="background: var(--glow-violet);">⚙️</div>
+                <span class="label" style="background: var(--glow-violet); color: var(--accent-violet);">Backend & Data</span>
+            </div>
+        </div>
+        <h2 class="reveal">Backend & Data Layer</h2>
+        <div class="card-grid">
+            <div class="content-card reveal">
+                <h3 style="color: var(--accent-violet);">Platform Data Wiring</h3>
+                <ul>
+                    <li>Migrated frontend to Jotai + Vercel AI SDK</li>
+                    <li>Corrected all 7 GraphQL queries (field names, LINKS/PHONES)</li>
+                    <li>Webhook handler for Ozonetel call records</li>
+                    <li>Complete seeder: 5 doctors, appointments linked, agent names match</li>
+                </ul>
+            </div>
+            <div class="content-card reveal">
+                <h3 style="color: var(--accent-violet);">Server Endpoints</h3>
+                <ul>
+                    <li>Call control, recording, CDR, missed calls, live call assist</li>
+                    <li>Agent summary, AHT, performance aggregation</li>
+                    <li>Token refresh endpoint for auto-renewal</li>
+                    <li>Search module with full-text capabilities</li>
+                </ul>
+            </div>
+            <div class="content-card reveal">
+                <h3 style="color: var(--accent-violet);">Data Pages Built</h3>
+                <ul>
+                    <li>Worklist table, call history, patients, dashboard</li>
+                    <li>Reports, team dashboard, campaigns, settings</li>
+                    <li>Agent detail page, campaign edit slideout</li>
+                    <li>Appointments page with data refresh on login</li>
+                </ul>
+            </div>
+            <div class="content-card reveal">
+                <h3 style="color: var(--accent-emerald);">SDK App <span class="repo-badge badge-sdk">FortyTwoApps</span></h3>
+                <ul>
+                    <li>Helix Engage SDK app entity definitions</li>
+                    <li>Call center CRM object model for Fortytwo platform</li>
+                    <li>Foundation for platform-native data integration</li>
+                </ul>
+            </div>
+        </div>
+    </section>
+
+    <!-- ======================================
+         SLIDE 7: DEPLOYMENT & OPS
+         ====================================== -->
+    <section class="slide">
+        <div class="reveal">
+            <div class="section-header">
+                <div class="section-icon" style="background: rgba(251,113,133,0.15);">🛠️</div>
+                <span class="label" style="background: rgba(251,113,133,0.15); color: var(--accent-rose);">Operations</span>
+            </div>
+        </div>
+        <h2 class="reveal">Deployment & DevOps</h2>
+        <div class="card-grid">
+            <div class="content-card reveal">
+                <h3 style="color: var(--accent-rose);">Deployment</h3>
+                <ul>
+                    <li>Deployed to Hostinger VPS with Docker</li>
+                    <li>Switched to global_healthx Ozonetel account</li>
+                    <li>Dockerfile for server-side containerization</li>
+                </ul>
+            </div>
+            <div class="content-card reveal">
+                <h3 style="color: var(--accent-rose);">AI & Testing</h3>
+                <ul>
+                    <li>Migrated AI to Vercel AI SDK + OpenAI provider</li>
+                    <li>AI flow test script — validates auth, lead, patient, doctor, appointments</li>
+                    <li>Live call assist integration</li>
+                </ul>
+            </div>
+            <div class="content-card reveal">
+                <h3 style="color: var(--accent-rose);">Documentation</h3>
+                <ul>
+                    <li>Team onboarding README with architecture guide</li>
+                    <li>Supervisor module spec + implementation plan</li>
+                    <li>Multi-agent spec + plan</li>
+                    <li>Next session plans documented in commits</li>
+                </ul>
+            </div>
+        </div>
+    </section>
+
+    <!-- ======================================
+         SLIDE 8: TIMELINE
+         ====================================== -->
+    <section class="slide">
+        <div class="reveal">
+            <div class="section-header">
+                <div class="section-icon" style="background: var(--glow-cyan);">📅</div>
+                <span class="label" style="background: var(--glow-cyan); color: var(--accent-cyan);">Day by Day</span>
+            </div>
+        </div>
+        <h2 class="reveal">Development Timeline</h2>
+        <div class="timeline reveal" style="max-height: 60vh; overflow-y: auto; padding-right: 1rem;">
+            <div class="tl-item">
+                <div class="tl-date">MAR 18 (Tue)</div>
+                <div class="tl-title">Foundation Day</div>
+                <div class="tl-desc">Call desk redesign, Jotai + Vercel AI SDK migration, seeder with 5 doctors + linked appointments, AI flow test script, deployed to VPS</div>
+            </div>
+            <div class="tl-item">
+                <div class="tl-date">MAR 19 (Wed)</div>
+                <div class="tl-title">Data Layer Sprint</div>
+                <div class="tl-desc">All data pages built (worklist, call history, patients, dashboard, reports), post-call workflow (disposition → booking), GraphQL fixes, Kookoo IVR outbound, outbound call UI</div>
+            </div>
+            <div class="tl-item">
+                <div class="tl-date">MAR 20 (Thu)</div>
+                <div class="tl-title">Telephony Breakthrough</div>
+                <div class="tl-desc">Direct SIP call from browser replacing Kookoo bridge, UCID tracking, Force Ready, Ozonetel Set Disposition, telephony overhaul</div>
+            </div>
+            <div class="tl-item">
+                <div class="tl-date">MAR 21 (Fri)</div>
+                <div class="tl-title">Agent Experience</div>
+                <div class="tl-desc">Phase 1 shipped — agent status toggle, global search, enquiry form, My Performance page, full FontAwesome icon migration, agent summary/AHT endpoints</div>
+            </div>
+            <div class="tl-item">
+                <div class="tl-date">MAR 23 (Sun)</div>
+                <div class="tl-title">Scale & Reliability</div>
+                <div class="tl-desc">Phase 2 — missed call queue + auto-assignment, multi-agent SIP with Redis lockout, duplicate login prevention, Patient 360 rewrite, onboarding docs, SDK entity defs</div>
+            </div>
+            <div class="tl-item">
+                <div class="tl-date">MAR 24 (Mon)</div>
+                <div class="tl-title">Supervisor Module</div>
+                <div class="tl-desc">Supervisor module with team performance + live monitor + master data, SSE agent state, UUID fix, maintenance module, QA bug sweep, supervisor endpoints</div>
+            </div>
+            <div class="tl-item">
+                <div class="tl-date">MAR 25 (Tue)</div>
+                <div class="tl-title">Intelligence Layer</div>
+                <div class="tl-desc">Call recording analysis with Deepgram diarization + AI insights, SIP driven by Agent entity, token refresh, network indicator</div>
+            </div>
+        </div>
+    </section>
+
+    <!-- ======================================
+         SLIDE 9: CLOSING
+         ====================================== -->
+    <section class="slide closing-slide">
+        <h2 class="reveal">78 commits. 8 days. Ship mode.&nbsp;🚢</h2>
+        <p class="reveal" style="color: var(--text-secondary); margin-top: 0.6em; font-size: 1.1rem; max-width: 600px; margin-inline: auto;">
+            From browser-native SIP calling to AI-powered recording analysis — Helix Engage is becoming a production contact center platform.
+        </p>
+        <div class="pill-list reveal" style="justify-content: center; margin-top: 1.5rem;">
+            <span class="pill" style="border-color: rgba(34,211,238,0.3); color: var(--accent-cyan);">SIP Calling ✓</span>
+            <span class="pill" style="border-color: rgba(167,139,250,0.3); color: var(--accent-violet);">Multi-Agent ✓</span>
+            <span class="pill" style="border-color: rgba(52,211,153,0.3); color: var(--accent-emerald);">Supervisor Module ✓</span>
+            <span class="pill" style="border-color: rgba(251,191,36,0.3); color: var(--accent-amber);">AI Copilot ✓</span>
+            <span class="pill" style="border-color: rgba(251,113,133,0.3); color: var(--accent-rose);">Recording Analysis ✓</span>
+        </div>
+        <p class="reveal" style="color: var(--text-muted); margin-top: 2rem; font-size: 0.8rem;">Satya Suman Sari · FortyTwo Platform</p>
+    </section>
+
+    <!-- ===========================================
+         SLIDE PRESENTATION CONTROLLER
+         =========================================== -->
+    <script>
+        class SlidePresentation {
+            constructor() {
+                this.slides = document.querySelectorAll('.slide');
+                this.progressBar = document.getElementById('progressBar');
+                this.navDots = document.getElementById('navDots');
+                this.slideCounter = document.getElementById('slideCounter');
+                this.currentSlide = 0;
+
+                this.createNavDots();
+                this.setupObserver();
+                this.setupKeyboard();
+                this.setupTouch();
+                this.animateCounters();
+                this.updateCounter();
+            }
+
+            /* --- Navigation dots --- */
+            createNavDots() {
+                this.slides.forEach((_, i) => {
+                    const dot = document.createElement('button');
+                    dot.classList.add('nav-dot');
+                    dot.setAttribute('aria-label', `Go to slide ${i + 1}`);
+                    dot.addEventListener('click', () => this.goToSlide(i));
+                    this.navDots.appendChild(dot);
+                });
+            }
+
+            /* --- Intersection Observer for reveal animations --- */
+            setupObserver() {
+                const observer = new IntersectionObserver((entries) => {
+                    entries.forEach(entry => {
+                        if (entry.isIntersecting) {
+                            entry.target.classList.add('visible');
+                            const idx = Array.from(this.slides).indexOf(entry.target);
+                            if (idx !== -1) {
+                                this.currentSlide = idx;
+                                this.updateProgress();
+                                this.updateDots();
+                                this.updateCounter();
+                                if (idx === 1) this.animateCounters();
+                            }
+                        }
+                    });
+                }, { threshold: 0.45 });
+
+                this.slides.forEach(slide => observer.observe(slide));
+            }
+
+            /* --- Keyboard navigation --- */
+            setupKeyboard() {
+                document.addEventListener('keydown', (e) => {
+                    if (e.key === 'ArrowDown' || e.key === ' ' || e.key === 'ArrowRight') {
+                        e.preventDefault();
+                        this.goToSlide(Math.min(this.currentSlide + 1, this.slides.length - 1));
+                    } else if (e.key === 'ArrowUp' || e.key === 'ArrowLeft') {
+                        e.preventDefault();
+                        this.goToSlide(Math.max(this.currentSlide - 1, 0));
+                    }
+                });
+            }
+
+            /* --- Touch swipe support --- */
+            setupTouch() {
+                let startY = 0;
+                document.addEventListener('touchstart', (e) => { startY = e.touches[0].clientY; });
+                document.addEventListener('touchend', (e) => {
+                    const dy = startY - e.changedTouches[0].clientY;
+                    if (Math.abs(dy) > 50) {
+                        if (dy > 0) this.goToSlide(Math.min(this.currentSlide + 1, this.slides.length - 1));
+                        else this.goToSlide(Math.max(this.currentSlide - 1, 0));
+                    }
+                });
+            }
+
+            goToSlide(idx) {
+                this.slides[idx].scrollIntoView({ behavior: 'smooth' });
+            }
+
+            updateProgress() {
+                const pct = ((this.currentSlide) / (this.slides.length - 1)) * 100;
+                this.progressBar.style.width = pct + '%';
+            }
+
+            updateDots() {
+                this.navDots.querySelectorAll('.nav-dot').forEach((dot, i) => {
+                    dot.classList.toggle('active', i === this.currentSlide);
+                });
+            }
+
+            updateCounter() {
+                this.slideCounter.textContent = `${this.currentSlide + 1} / ${this.slides.length}`;
+            }
+
+            /* --- Animate counter numbers --- */
+            animateCounters() {
+                document.querySelectorAll('[data-count]').forEach(el => {
+                    const target = parseInt(el.dataset.count);
+                    const duration = 1200;
+                    const start = performance.now();
+                    const animate = (now) => {
+                        const elapsed = now - start;
+                        const progress = Math.min(elapsed / duration, 1);
+                        const eased = 1 - Math.pow(1 - progress, 3);
+                        el.textContent = Math.round(eased * target);
+                        if (progress < 1) requestAnimationFrame(animate);
+                    };
+                    requestAnimationFrame(animate);
+                });
+            }
+        }
+
+        // Initialize
+        new SlidePresentation();
+    </script>
+</body>
+</html>

e2e/.auth/.gitignore

@@ -0,0 +1 @@
+*.json

e2e/agent-login.spec.ts

@@ -0,0 +1,56 @@
+/**
+ * Login feature tests — covers multiple roles.
+ *
+ * These run WITHOUT saved auth state (fresh browser).
+ */
+import { test, expect } from '@playwright/test';
+import { waitForApp } from './helpers';
+
+const SUPERVISOR = { email: 'supervisor@ramaiahcare.com', password: 'MrRamaiah@2026' };
+
+test.describe('Login', () => {
+
+    test('login page renders with branding', async ({ page }) => {
+        await page.goto('/login');
+
+        await expect(page.locator('img[alt]').first()).toBeVisible();
+        await expect(page.locator('h1').first()).toBeVisible();
+        await expect(page.locator('form')).toBeVisible();
+        await expect(page.locator('input[type="email"], input[placeholder*="@"]').first()).toBeVisible();
+        await expect(page.locator('input[type="password"]').first()).toBeVisible();
+        await expect(page.getByRole('button', { name: 'Sign in', exact: true })).toBeVisible();
+    });
+
+    test('invalid credentials show error', async ({ page }) => {
+        await page.goto('/login');
+
+        await page.locator('input[type="email"], input[placeholder*="@"]').first().fill('bad@bad.com');
+        await page.locator('input[type="password"]').first().fill('wrongpassword');
+        await page.getByRole('button', { name: 'Sign in', exact: true }).click();
+
+        await expect(
+            page.locator('text=/not found|invalid|incorrect|failed|error|unauthorized/i').first(),
+        ).toBeVisible({ timeout: 10_000 });
+        await expect(page).toHaveURL(/\/login/);
+    });
+
+    test('Supervisor login → lands on app', async ({ page }) => {
+        await page.goto('/login');
+
+        await page.locator('input[type="email"], input[placeholder*="@"]').first().fill(SUPERVISOR.email);
+        await page.locator('input[type="password"]').first().fill(SUPERVISOR.password);
+        await page.getByRole('button', { name: 'Sign in', exact: true }).click();
+
+        await expect(page).not.toHaveURL(/\/login/, { timeout: 20_000 });
+        await waitForApp(page);
+
+        // Sidebar should be visible
+        await expect(page.locator('aside').first()).toBeVisible();
+    });
+
+    test('unauthenticated user redirected to login', async ({ page }) => {
+        await page.context().clearCookies();
+        await page.goto('/patients');
+        await expect(page).toHaveURL(/\/login/, { timeout: 10_000 });
+    });
+});

e2e/agent-smoke.spec.ts

@@ -0,0 +1,155 @@
+/**
+ * CC Agent — happy-path smoke tests.
+ *
+ * Role: cc-agent (ccagent@ramaiahcare.com)
+ * Landing: / → Call Desk
+ * Pages: Call Desk, Call History, Patients, Appointments, My Performance
+ */
+import { test, expect } from '@playwright/test';
+import { waitForApp } from './helpers';
+
+test.describe('CC Agent Smoke', () => {
+
+    test('lands on Call Desk after login', async ({ page }) => {
+        await page.goto('/');
+        await waitForApp(page);
+
+        await expect(page.locator('aside').first()).toContainText(/Call Center/i);
+    });
+
+    test('Call Desk page loads', async ({ page }) => {
+        await page.goto('/');
+        await waitForApp(page);
+
+        // Call Desk is the landing — just verify we're not on an error page
+        await expect(page.locator('aside').first()).toContainText(/Call Desk/i);
+    });
+
+    test('Call History page loads', async ({ page }) => {
+        await page.goto('/call-history');
+        await waitForApp(page);
+
+        // Should show "Call History" title whether or not there are calls
+        await expect(page.locator('text="Call History"').first()).toBeVisible();
+
+        // Filter dropdown present
+        await expect(page.locator('text=/All Calls/i').first()).toBeVisible();
+    });
+
+    test('Patients page loads with search', async ({ page }) => {
+        await page.goto('/patients');
+        await waitForApp(page);
+
+        const search = page.getByPlaceholder(/search/i).or(page.getByLabel(/search/i));
+        await expect(search.first()).toBeVisible();
+    });
+
+    test('Patients search filters results', async ({ page }) => {
+        await page.goto('/patients');
+        await waitForApp(page);
+
+        const search = page.getByPlaceholder(/search/i).or(page.getByLabel(/search/i));
+        await search.first().fill('zzz-nonexistent-patient');
+        await waitForApp(page);
+
+        // Should show empty state
+        const noResults = page.locator('text=/no patient|not found|no results/i');
+        const isEmpty = await noResults.isVisible({ timeout: 5_000 }).catch(() => false);
+        expect(isEmpty).toBe(true);
+    });
+
+    test('Appointments page loads', async ({ page }) => {
+        await page.goto('/appointments');
+        await waitForApp(page);
+
+        await expect(
+            page.locator('text=/Appointment|Schedule|No appointment/i').first(),
+        ).toBeVisible({ timeout: 10_000 });
+    });
+
+    test('My Performance loads with date controls', async ({ page }) => {
+        // Intercept API to verify agentId is sent
+        const apiHit = page.waitForRequest(
+            (r) => r.url().includes('/api/ozonetel/performance') && r.url().includes('agentId='),
+            { timeout: 15_000 },
+        );
+
+        await page.goto('/my-performance');
+        const req = await apiHit;
+
+        const url = new URL(req.url());
+        expect(url.searchParams.get('agentId')?.length).toBeGreaterThan(0);
+
+        await waitForApp(page);
+
+        await expect(page.getByRole('button', { name: 'Today' })).toBeVisible();
+        await expect(page.getByRole('button', { name: 'Yesterday' })).toBeVisible();
+
+        // Either KPI data or empty state
+        await expect(
+            page.locator('text=/Total Calls|No performance data/i').first(),
+        ).toBeVisible();
+    });
+
+    test('sidebar has all CC Agent nav items', async ({ page }) => {
+        await page.goto('/');
+        await waitForApp(page);
+
+        const sidebar = page.locator('aside').first();
+        for (const item of ['Call Desk', 'Call History', 'Patients', 'Appointments', 'My Performance']) {
+            await expect(sidebar.locator(`text="${item}"`)).toBeVisible();
+        }
+    });
+
+    test('sign-out shows confirmation modal and cancel keeps session', async ({ page }) => {
+        await page.goto('/');
+        await waitForApp(page);
+
+        const sidebar = page.locator('aside').first();
+        const accountArea = sidebar.locator('[class*="account"], [class*="avatar"]').last();
+        if (await accountArea.isVisible()) {
+            await accountArea.click();
+        }
+
+        const signOutBtn = page.locator('button, [role="menuitem"]').filter({ hasText: /sign out/i }).first();
+        if (await signOutBtn.isVisible({ timeout: 5_000 }).catch(() => false)) {
+            await signOutBtn.click();
+
+            const modal = page.locator('[role="dialog"]');
+            await expect(modal).toBeVisible({ timeout: 5_000 });
+            await expect(modal).toContainText(/sign out/i);
+
+            // Cancel — should stay logged in
+            await modal.getByRole('button', { name: /cancel/i }).click();
+            await expect(modal).not.toBeVisible();
+            await expect(page).not.toHaveURL(/\/login/);
+        }
+    });
+
+    // MUST be the last test — completes sign-out so the agent session is
+    // released and the next test run won't hit "already logged in".
+    test('sign-out completes and redirects to login', async ({ page }) => {
+        await page.goto('/');
+        await waitForApp(page);
+
+        const sidebar = page.locator('aside').first();
+        const accountArea = sidebar.locator('[class*="account"], [class*="avatar"]').last();
+        if (await accountArea.isVisible()) {
+            await accountArea.click();
+        }
+
+        const signOutBtn = page.locator('button, [role="menuitem"]').filter({ hasText: /sign out/i }).first();
+        if (await signOutBtn.isVisible({ timeout: 5_000 }).catch(() => false)) {
+            await signOutBtn.click();
+
+            const modal = page.locator('[role="dialog"]');
+            await expect(modal).toBeVisible({ timeout: 5_000 });
+
+            // Confirm sign out
+            await modal.getByRole('button', { name: /sign out/i }).click();
+
+            // Should redirect to login
+            await expect(page).toHaveURL(/\/login/, { timeout: 15_000 });
+        }
+    });
+});

e2e/auth.setup.ts

@@ -0,0 +1,29 @@
+import { test as setup, expect } from '@playwright/test';
+import path from 'path';
+import { fileURLToPath } from 'url';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const authFile = path.join(__dirname, '.auth/agent.json');
+
+setup('login as CC Agent', async ({ page, request, baseURL }) => {
+    // Clear any stale session lock before login
+    const url = baseURL ?? 'https://ramaiah.engage.healix360.net';
+    await request.post(`${url}/api/maint/unlock-agent`, {
+        headers: { 'Content-Type': 'application/json', 'x-maint-otp': '400168' },
+        data: { agentId: 'ramaiahadmin' },
+    }).catch(() => {});
+
+    await page.goto('/login');
+
+    await page.locator('input[type="email"], input[name="email"], input[placeholder*="@"]').first().fill('ccagent@ramaiahcare.com');
+    await page.locator('input[type="password"]').first().fill('CcRamaiah@2026');
+    await page.getByRole('button', { name: 'Sign in', exact: true }).click();
+
+    // Should land on Call Desk (/ for cc-agent role)
+    await expect(page).not.toHaveURL(/\/login/, { timeout: 20_000 });
+
+    // Sidebar should be visible
+    await expect(page.locator('aside').first()).toBeVisible({ timeout: 10_000 });
+
+    await page.context().storageState({ path: authFile });
+});

e2e/global-setup.ts

@@ -0,0 +1,25 @@
+import { test as setup, expect } from '@playwright/test';
+import path from 'path';
+import { fileURLToPath } from 'url';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const authFile = path.join(__dirname, '.auth/global-agent.json');
+
+setup('login as Global CC Agent', async ({ page, request }) => {
+    // Clear any stale session lock before login
+    await request.post('https://global.engage.healix360.net/api/maint/unlock-agent', {
+        headers: { 'Content-Type': 'application/json', 'x-maint-otp': '400168' },
+        data: { agentId: 'global' },
+    }).catch(() => {});
+
+    await page.goto('https://global.engage.healix360.net/login');
+
+    await page.locator('input[type="email"], input[placeholder*="@"]').first().fill('rekha.cc@globalcare.com');
+    await page.locator('input[type="password"]').first().fill('Global@123');
+    await page.getByRole('button', { name: 'Sign in', exact: true }).click();
+
+    await expect(page).not.toHaveURL(/\/login/, { timeout: 20_000 });
+    await expect(page.locator('aside').first()).toBeVisible({ timeout: 10_000 });
+
+    await page.context().storageState({ path: authFile });
+});

e2e/global-smoke.spec.ts

@@ -0,0 +1,120 @@
+/**
+ * Global Hospital — happy-path smoke tests.
+ *
+ * Uses saved auth state from global-setup.ts (same pattern as Ramaiah).
+ * Last test signs out to release the agent session.
+ */
+import { test, expect } from '@playwright/test';
+import { loginAs, waitForApp } from './helpers';
+
+const BASE = 'https://global.engage.healix360.net';
+
+test.describe('Global — CC Agent', () => {
+
+    test('landing page loads', async ({ page }) => {
+        await page.goto(BASE + '/');
+        await waitForApp(page);
+        await expect(page.locator('aside').first()).toBeVisible();
+    });
+
+    test('Call History page loads', async ({ page }) => {
+        await page.goto(BASE + '/call-history');
+        await waitForApp(page);
+        await expect(page.locator('text="Call History"').first()).toBeVisible();
+    });
+
+    test('Patients page loads', async ({ page }) => {
+        await page.goto(BASE + '/patients');
+        await waitForApp(page);
+        const search = page.getByPlaceholder(/search/i).or(page.getByLabel(/search/i));
+        await expect(search.first()).toBeVisible();
+    });
+
+    test('Appointments page loads', async ({ page }) => {
+        await page.goto(BASE + '/appointments');
+        await waitForApp(page);
+        await expect(
+            page.locator('text=/Appointment|Schedule|No appointment/i').first(),
+        ).toBeVisible({ timeout: 10_000 });
+    });
+
+    test('My Performance page loads', async ({ page }) => {
+        await page.goto(BASE + '/my-performance');
+        await waitForApp(page);
+        await expect(page.getByRole('button', { name: 'Today' })).toBeVisible();
+    });
+
+    test('sidebar has CC Agent nav items', async ({ page }) => {
+        await page.goto(BASE + '/');
+        await waitForApp(page);
+        const sidebar = page.locator('aside').first();
+        for (const item of ['Call Desk', 'Call History', 'Patients', 'Appointments', 'My Performance']) {
+            await expect(sidebar.locator(`text="${item}"`)).toBeVisible();
+        }
+    });
+
+    // Last test — sign out to release session
+    test('sign-out completes', async ({ page }) => {
+        await page.goto(BASE + '/');
+        await waitForApp(page);
+
+        const sidebar = page.locator('aside').first();
+        const accountArea = sidebar.locator('[class*="account"], [class*="avatar"]').last();
+        if (await accountArea.isVisible()) await accountArea.click();
+
+        const signOutBtn = page.locator('button, [role="menuitem"]').filter({ hasText: /sign out/i }).first();
+        if (await signOutBtn.isVisible({ timeout: 5_000 }).catch(() => false)) {
+            await signOutBtn.click();
+            const modal = page.locator('[role="dialog"]');
+            await expect(modal).toBeVisible({ timeout: 5_000 });
+            await modal.getByRole('button', { name: /sign out/i }).click();
+            await expect(page).toHaveURL(/\/login/, { timeout: 15_000 });
+        }
+    });
+});
+
+test.describe('Global — Supervisor', () => {
+    test.beforeEach(async ({ page }) => {
+        await page.goto(BASE + '/login');
+        await page.locator('input[type="email"], input[placeholder*="@"]').first().fill('dr.ramesh@globalcare.com');
+        await page.locator('input[type="password"]').first().fill('Global@123');
+        await page.getByRole('button', { name: 'Sign in', exact: true }).click();
+        await expect(page).not.toHaveURL(/\/login/, { timeout: 20_000 });
+        await waitForApp(page);
+    });
+
+    test('landing page loads', async ({ page }) => {
+        await expect(page.locator('aside').first()).toBeVisible();
+    });
+
+    test('Patients page loads', async ({ page }) => {
+        await page.goto(BASE + '/patients');
+        await waitForApp(page);
+        const search = page.getByPlaceholder(/search/i).or(page.getByLabel(/search/i));
+        await expect(search.first()).toBeVisible();
+    });
+
+    test('Appointments page loads', async ({ page }) => {
+        await page.goto(BASE + '/appointments');
+        await waitForApp(page);
+        await expect(
+            page.locator('text=/Appointment|Schedule|No appointment/i').first(),
+        ).toBeVisible({ timeout: 10_000 });
+    });
+
+    test('Campaigns page loads', async ({ page }) => {
+        await page.goto(BASE + '/campaigns');
+        await waitForApp(page);
+        await expect(
+            page.locator('text=/Campaign|No campaign/i').first(),
+        ).toBeVisible({ timeout: 10_000 });
+    });
+
+    test('Settings page loads', async ({ page }) => {
+        await page.goto(BASE + '/settings');
+        await waitForApp(page);
+        await expect(
+            page.locator('text=/Settings|Configuration/i').first(),
+        ).toBeVisible({ timeout: 10_000 });
+    });
+});

e2e/helpers.ts

@@ -0,0 +1,15 @@
+import { Page, expect } from '@playwright/test';
+
+export async function waitForApp(page: Page) {
+    await page.waitForLoadState('networkidle', { timeout: 15_000 }).catch(() => {});
+    await page.waitForTimeout(300);
+}
+
+export async function loginAs(page: Page, email: string, password: string) {
+    await page.goto('/login');
+    await page.locator('input[type="email"], input[name="email"], input[placeholder*="@"]').first().fill(email);
+    await page.locator('input[type="password"]').first().fill(password);
+    await page.getByRole('button', { name: 'Sign in', exact: true }).click();
+    await expect(page).not.toHaveURL(/\/login/, { timeout: 20_000 });
+    await waitForApp(page);
+}

e2e/supervisor-smoke.spec.ts

@@ -0,0 +1,121 @@
+/**
+ * Supervisor / Admin — happy-path smoke tests.
+ *
+ * Role: admin (supervisor@ramaiahcare.com)
+ * Landing: / → Dashboard
+ * Pages: Dashboard, Team Performance, Live Monitor,
+ *        Leads, Patients, Appointments, Call Log,
+ *        Call Recordings, Missed Calls, Campaigns, Settings
+ */
+import { test, expect } from '@playwright/test';
+import { loginAs, waitForApp } from './helpers';
+
+const EMAIL = 'supervisor@ramaiahcare.com';
+const PASSWORD = 'MrRamaiah@2026';
+
+test.describe('Supervisor Smoke', () => {
+    test.beforeEach(async ({ page }) => {
+        await loginAs(page, EMAIL, PASSWORD);
+    });
+
+    test('lands on Dashboard after login', async ({ page }) => {
+        await expect(page.locator('aside').first()).toBeVisible();
+        // Verify we're authenticated and on the app
+        await expect(page).not.toHaveURL(/\/login/);
+    });
+
+    test('Team Performance loads', async ({ page }) => {
+        await page.goto('/team-performance');
+        await waitForApp(page);
+
+        await expect(
+            page.locator('text=/Team|Performance|Agent|No data/i').first(),
+        ).toBeVisible({ timeout: 10_000 });
+    });
+
+    test('Live Call Monitor loads', async ({ page }) => {
+        await page.goto('/live-monitor');
+        await waitForApp(page);
+
+        await expect(
+            page.locator('text=/Live|Monitor|Active|No active/i').first(),
+        ).toBeVisible({ timeout: 10_000 });
+    });
+
+    test('Leads page loads', async ({ page }) => {
+        await page.goto('/leads');
+        await waitForApp(page);
+
+        await expect(
+            page.locator('text=/Lead|No leads/i').first(),
+        ).toBeVisible({ timeout: 10_000 });
+    });
+
+    test('Patients page loads', async ({ page }) => {
+        await page.goto('/patients');
+        await waitForApp(page);
+
+        const search = page.getByPlaceholder(/search/i).or(page.getByLabel(/search/i));
+        await expect(search.first()).toBeVisible();
+    });
+
+    test('Appointments page loads', async ({ page }) => {
+        await page.goto('/appointments');
+        await waitForApp(page);
+
+        await expect(
+            page.locator('text=/Appointment|Schedule|No appointment/i').first(),
+        ).toBeVisible({ timeout: 10_000 });
+    });
+
+    test('Call Log page loads', async ({ page }) => {
+        await page.goto('/call-history');
+        await waitForApp(page);
+
+        await expect(page.locator('text="Call History"').first()).toBeVisible();
+    });
+
+    test('Call Recordings page loads', async ({ page }) => {
+        await page.goto('/call-recordings');
+        await waitForApp(page);
+
+        await expect(
+            page.locator('text=/Recording|No recording/i').first(),
+        ).toBeVisible({ timeout: 10_000 });
+    });
+
+    test('Missed Calls page loads', async ({ page }) => {
+        await page.goto('/missed-calls');
+        await waitForApp(page);
+
+        await expect(
+            page.locator('text=/Missed|No missed/i').first(),
+        ).toBeVisible({ timeout: 10_000 });
+    });
+
+    test('Campaigns page loads', async ({ page }) => {
+        await page.goto('/campaigns');
+        await waitForApp(page);
+
+        await expect(
+            page.locator('text=/Campaign|No campaign/i').first(),
+        ).toBeVisible({ timeout: 10_000 });
+    });
+
+    test('Settings page loads', async ({ page }) => {
+        await page.goto('/settings');
+        await waitForApp(page);
+
+        await expect(
+            page.locator('text=/Settings|Configuration/i').first(),
+        ).toBeVisible({ timeout: 10_000 });
+    });
+
+    test('sidebar has expected nav items', async ({ page }) => {
+        const sidebar = page.locator('aside').first();
+        // Check key items — exact labels depend on the role the sidecar assigns
+        for (const item of ['Patients', 'Appointments', 'Campaigns']) {
+            await expect(sidebar.locator(`text="${item}"`)).toBeVisible();
+        }
+    });
+});

package-lock.json

@@ -8,6 +8,7 @@
             "name": "helix-engage",
             "version": "0.1.0",
             "dependencies": {
+                "@ai-sdk/react": "^1.2.12",
                 "@fortawesome/fontawesome-svg-core": "^7.2.0",
                 "@fortawesome/free-solid-svg-icons": "^7.2.0",
                 "@fortawesome/pro-duotone-svg-icons": "^7.2.0",
@@ -25,6 +26,7 @@
                 "jotai": "^2.18.1",
                 "jssip": "^3.13.6",
                 "motion": "^12.29.0",
+                "pptxgenjs": "^4.0.1",
                 "qr-code-styling": "^1.9.2",
                 "react": "^19.2.3",
                 "react-aria": "^3.46.0",
@@ -40,6 +42,7 @@
                 "tailwindcss-react-aria-components": "^2.0.1"
             },
             "devDependencies": {
+                "@playwright/test": "^1.59.1",
                 "@tailwindcss/postcss": "^4.1.18",
                 "@trivago/prettier-plugin-sort-imports": "^5.2.2",
                 "@types/jssip": "^3.5.3",
@@ -55,6 +58,76 @@
                 "vite": "^7.3.1"
             }
         },
+        "node_modules/@ai-sdk/provider": {
+            "version": "1.1.3",
+            "resolved": "http://localhost:4873/@ai-sdk/provider/-/provider-1.1.3.tgz",
+            "integrity": "sha512-qZMxYJ0qqX/RfnuIaab+zp8UAeJn/ygXXAffR5I4N0n1IrvA6qBsjc8hXLmBiMV2zoXlifkacF7sEFnYnjBcqg==",
+            "license": "Apache-2.0",
+            "dependencies": {
+                "json-schema": "^0.4.0"
+            },
+            "engines": {
+                "node": ">=18"
+            }
+        },
+        "node_modules/@ai-sdk/provider-utils": {
+            "version": "2.2.8",
+            "resolved": "http://localhost:4873/@ai-sdk/provider-utils/-/provider-utils-2.2.8.tgz",
+            "integrity": "sha512-fqhG+4sCVv8x7nFzYnFo19ryhAa3w096Kmc3hWxMQfW/TubPOmt3A6tYZhl4mUfQWWQMsuSkLrtjlWuXBVSGQA==",
+            "license": "Apache-2.0",
+            "dependencies": {
+                "@ai-sdk/provider": "1.1.3",
+                "nanoid": "^3.3.8",
+                "secure-json-parse": "^2.7.0"
+            },
+            "engines": {
+                "node": ">=18"
+            },
+            "peerDependencies": {
+                "zod": "^3.23.8"
+            }
+        },
+        "node_modules/@ai-sdk/react": {
+            "version": "1.2.12",
+            "resolved": "http://localhost:4873/@ai-sdk/react/-/react-1.2.12.tgz",
+            "integrity": "sha512-jK1IZZ22evPZoQW3vlkZ7wvjYGYF+tRBKXtrcolduIkQ/m/sOAVcVeVDUDvh1T91xCnWCdUGCPZg2avZ90mv3g==",
+            "license": "Apache-2.0",
+            "dependencies": {
+                "@ai-sdk/provider-utils": "2.2.8",
+                "@ai-sdk/ui-utils": "1.2.11",
+                "swr": "^2.2.5",
+                "throttleit": "2.1.0"
+            },
+            "engines": {
+                "node": ">=18"
+            },
+            "peerDependencies": {
+                "react": "^18 || ^19 || ^19.0.0-rc",
+                "zod": "^3.23.8"
+            },
+            "peerDependenciesMeta": {
+                "zod": {
+                    "optional": true
+                }
+            }
+        },
+        "node_modules/@ai-sdk/ui-utils": {
+            "version": "1.2.11",
+            "resolved": "http://localhost:4873/@ai-sdk/ui-utils/-/ui-utils-1.2.11.tgz",
+            "integrity": "sha512-3zcwCc8ezzFlwp3ZD15wAPjf2Au4s3vAbKsXQVyhxODHcmu0iyPO2Eua6D/vicq/AUm/BAo60r97O6HU+EI0+w==",
+            "license": "Apache-2.0",
+            "dependencies": {
+                "@ai-sdk/provider": "1.1.3",
+                "@ai-sdk/provider-utils": "2.2.8",
+                "zod-to-json-schema": "^3.24.1"
+            },
+            "engines": {
+                "node": ">=18"
+            },
+            "peerDependencies": {
+                "zod": "^3.23.8"
+            }
+        },
         "node_modules/@alloc/quick-lru": {
             "version": "5.2.0",
             "resolved": "http://localhost:4873/@alloc/quick-lru/-/quick-lru-5.2.0.tgz",
@@ -1005,6 +1078,22 @@
                 "@jridgewell/sourcemap-codec": "^1.4.14"
             }
         },
+        "node_modules/@playwright/test": {
+            "version": "1.59.1",
+            "resolved": "https://registry.npmjs.org/@playwright/test/-/test-1.59.1.tgz",
+            "integrity": "sha512-PG6q63nQg5c9rIi4/Z5lR5IVF7yU5MqmKaPOe0HSc0O2cX1fPi96sUQu5j7eo4gKCkB2AnNGoWt7y4/Xx3Kcqg==",
+            "dev": true,
+            "license": "Apache-2.0",
+            "dependencies": {
+                "playwright": "1.59.1"
+            },
+            "bin": {
+                "playwright": "cli.js"
+            },
+            "engines": {
+                "node": ">=18"
+            }
+        },
         "node_modules/@react-aria/autocomplete": {
             "version": "3.0.0-rc.6",
             "resolved": "http://localhost:4873/@react-aria/autocomplete/-/autocomplete-3.0.0-rc.6.tgz",
@@ -4115,6 +4204,12 @@
                 "url": "https://opencollective.com/express"
             }
         },
+        "node_modules/core-util-is": {
+            "version": "1.0.3",
+            "resolved": "http://localhost:4873/core-util-is/-/core-util-is-1.0.3.tgz",
+            "integrity": "sha512-ZQBvi1DcpJ4GDqanjucZ2Hj3wEO5pZDS89BWbkcrvdxksJorwUDDZamX9ldFkp9aw2lmBDLgkObEA4DWNJ9FYQ==",
+            "license": "MIT"
+        },
         "node_modules/cross-spawn": {
             "version": "7.0.6",
             "resolved": "http://localhost:4873/cross-spawn/-/cross-spawn-7.0.6.tgz",
@@ -4181,6 +4276,15 @@
             "license": "MIT",
             "peer": true
         },
+        "node_modules/dequal": {
+            "version": "2.0.3",
+            "resolved": "http://localhost:4873/dequal/-/dequal-2.0.3.tgz",
+            "integrity": "sha512-0je+qPKHEMohvfRTCEo3CrPG6cAzAYgmzKyxRiYSSDkS6eGJdyVJm7WaYA5ECaAD9wLB2T4EEeymA5aFVcYXCA==",
+            "license": "MIT",
+            "engines": {
+                "node": ">=6"
+            }
+        },
         "node_modules/detect-libc": {
             "version": "2.1.2",
             "resolved": "http://localhost:4873/detect-libc/-/detect-libc-2.1.2.tgz",
@@ -4646,6 +4750,12 @@
             "integrity": "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==",
             "license": "ISC"
         },
+        "node_modules/https": {
+            "version": "1.0.0",
+            "resolved": "http://localhost:4873/https/-/https-1.0.0.tgz",
+            "integrity": "sha512-4EC57ddXrkaF0x83Oj8sM6SLQHAWXw90Skqu2M4AEWENZ3F02dFJE/GARA8igO79tcgYqGrD7ae4f5L3um2lgg==",
+            "license": "ISC"
+        },
         "node_modules/ignore": {
             "version": "5.3.2",
             "resolved": "http://localhost:4873/ignore/-/ignore-5.3.2.tgz",
@@ -4657,6 +4767,27 @@
                 "node": ">= 4"
             }
         },
+        "node_modules/image-size": {
+            "version": "1.2.1",
+            "resolved": "http://localhost:4873/image-size/-/image-size-1.2.1.tgz",
+            "integrity": "sha512-rH+46sQJ2dlwfjfhCyNx5thzrv+dtmBIhPHk0zgRUukHzZ/kRueTJXoYYsclBaKcSMBWuGbOFXtioLpzTb5euw==",
+            "license": "MIT",
+            "dependencies": {
+                "queue": "6.0.2"
+            },
+            "bin": {
+                "image-size": "bin/image-size.js"
+            },
+            "engines": {
+                "node": ">=16.x"
+            }
+        },
+        "node_modules/immediate": {
+            "version": "3.0.6",
+            "resolved": "http://localhost:4873/immediate/-/immediate-3.0.6.tgz",
+            "integrity": "sha512-XXOFtyqDjNDAQxVfYxuF7g9Il/IbWmmlQg2MYKOH8ExIT1qg6xc4zyS3HaEEATgs1btfzxq15ciUiY7gjSXRGQ==",
+            "license": "MIT"
+        },
         "node_modules/imurmurhash": {
             "version": "0.1.4",
             "resolved": "http://localhost:4873/imurmurhash/-/imurmurhash-0.1.4.tgz",
@@ -4668,6 +4799,12 @@
                 "node": ">=0.8.19"
             }
         },
+        "node_modules/inherits": {
+            "version": "2.0.4",
+            "resolved": "http://localhost:4873/inherits/-/inherits-2.0.4.tgz",
+            "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==",
+            "license": "ISC"
+        },
         "node_modules/input-otp": {
             "version": "1.4.2",
             "resolved": "http://localhost:4873/input-otp/-/input-otp-1.4.2.tgz",
@@ -4715,6 +4852,12 @@
                 "node": ">=0.10.0"
             }
         },
+        "node_modules/isarray": {
+            "version": "1.0.0",
+            "resolved": "http://localhost:4873/isarray/-/isarray-1.0.0.tgz",
+            "integrity": "sha512-VLghIWNM6ELQzo7zwmcg0NmTVyWKYjvIeM83yjp0wRDTmUnrM678fQbcKBo6n2CJEF0szoG//ytg+TKla89ALQ==",
+            "license": "MIT"
+        },
         "node_modules/isexe": {
             "version": "2.0.0",
             "resolved": "http://localhost:4873/isexe/-/isexe-2.0.0.tgz",
@@ -4796,6 +4939,12 @@
             "license": "MIT",
             "peer": true
         },
+        "node_modules/json-schema": {
+            "version": "0.4.0",
+            "resolved": "http://localhost:4873/json-schema/-/json-schema-0.4.0.tgz",
+            "integrity": "sha512-es94M3nTIfsEPisRafak+HDLfHXnKBhV3vU5eqPcS3flIWqcxJWgXHXiey3YrpaNsanY5ei1VoYEbOzijuq9BA==",
+            "license": "(AFL-2.1 OR BSD-3-Clause)"
+        },
         "node_modules/json-schema-traverse": {
             "version": "0.4.1",
             "resolved": "http://localhost:4873/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz",
@@ -4823,6 +4972,18 @@
                 "sdp-transform": "^2.14.1"
             }
         },
+        "node_modules/jszip": {
+            "version": "3.10.1",
+            "resolved": "http://localhost:4873/jszip/-/jszip-3.10.1.tgz",
+            "integrity": "sha512-xXDvecyTpGLrqFrvkrUSoxxfJI5AH7U8zxxtVclpsUtMCq4JQ290LY8AW5c7Ggnr/Y/oK+bQMbqK2qmtk3pN4g==",
+            "license": "(MIT OR GPL-3.0-or-later)",
+            "dependencies": {
+                "lie": "~3.3.0",
+                "pako": "~1.0.2",
+                "readable-stream": "~2.3.6",
+                "setimmediate": "^1.0.5"
+            }
+        },
         "node_modules/keyv": {
             "version": "4.5.4",
             "resolved": "http://localhost:4873/keyv/-/keyv-4.5.4.tgz",
@@ -4849,6 +5010,15 @@
                 "node": ">= 0.8.0"
             }
         },
+        "node_modules/lie": {
+            "version": "3.3.0",
+            "resolved": "http://localhost:4873/lie/-/lie-3.3.0.tgz",
+            "integrity": "sha512-UaiMJzeWRlEujzAuw5LokY1L5ecNQYZKfmyZ9L7wDHb/p5etKaxXhohBcrw0EYby+G/NA52vRSN4N39dxHAIwQ==",
+            "license": "MIT",
+            "dependencies": {
+                "immediate": "~3.0.5"
+            }
+        },
         "node_modules/lightningcss": {
             "version": "1.31.1",
             "resolved": "http://localhost:4873/lightningcss/-/lightningcss-1.31.1.tgz",
@@ -5272,6 +5442,12 @@
                 "url": "https://github.com/sponsors/sindresorhus"
             }
         },
+        "node_modules/pako": {
+            "version": "1.0.11",
+            "resolved": "http://localhost:4873/pako/-/pako-1.0.11.tgz",
+            "integrity": "sha512-4hLB8Py4zZce5s4yd9XzopqwVv/yGNhV1Bl8NTmCq1763HeK2+EwVTv+leGeL13Dnh2wfbqowVPXCIO0z4taYw==",
+            "license": "(MIT AND Zlib)"
+        },
         "node_modules/path-exists": {
             "version": "4.0.0",
             "resolved": "http://localhost:4873/path-exists/-/path-exists-4.0.0.tgz",
@@ -5312,6 +5488,53 @@
                 "url": "https://github.com/sponsors/jonschlinkert"
             }
         },
+        "node_modules/playwright": {
+            "version": "1.59.1",
+            "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.59.1.tgz",
+            "integrity": "sha512-C8oWjPR3F81yljW9o5OxcWzfh6avkVwDD2VYdwIGqTkl+OGFISgypqzfu7dOe4QNLL2aqcWBmI3PMtLIK233lw==",
+            "dev": true,
+            "license": "Apache-2.0",
+            "dependencies": {
+                "playwright-core": "1.59.1"
+            },
+            "bin": {
+                "playwright": "cli.js"
+            },
+            "engines": {
+                "node": ">=18"
+            },
+            "optionalDependencies": {
+                "fsevents": "2.3.2"
+            }
+        },
+        "node_modules/playwright-core": {
+            "version": "1.59.1",
+            "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.59.1.tgz",
+            "integrity": "sha512-HBV/RJg81z5BiiZ9yPzIiClYV/QMsDCKUyogwH9p3MCP6IYjUFu/MActgYAvK0oWyV9NlwM3GLBjADyWgydVyg==",
+            "dev": true,
+            "license": "Apache-2.0",
+            "bin": {
+                "playwright-core": "cli.js"
+            },
+            "engines": {
+                "node": ">=18"
+            }
+        },
+        "node_modules/playwright/node_modules/fsevents": {
+            "version": "2.3.2",
+            "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz",
+            "integrity": "sha512-xiqMQR4xAeHTuB9uWm+fFRcIOgKBMiOBP+eXiyT7jsgVCq1bkVygt00oASowB7EdtpOHaaPgKt812P9ab+DDKA==",
+            "dev": true,
+            "hasInstallScript": true,
+            "license": "MIT",
+            "optional": true,
+            "os": [
+                "darwin"
+            ],
+            "engines": {
+                "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
+            }
+        },
         "node_modules/postcss": {
             "version": "8.5.8",
             "resolved": "http://localhost:4873/postcss/-/postcss-8.5.8.tgz",
@@ -5353,6 +5576,33 @@
                 "node": ">=4"
             }
         },
+        "node_modules/pptxgenjs": {
+            "version": "4.0.1",
+            "resolved": "http://localhost:4873/pptxgenjs/-/pptxgenjs-4.0.1.tgz",
+            "integrity": "sha512-TeJISr8wouAuXw4C1F/mC33xbZs/FuEG6nH9FG1Zj+nuPcGMP5YRHl6X+j3HSUnS1f3at6k75ZZXPMZlA5Lj9A==",
+            "license": "MIT",
+            "dependencies": {
+                "@types/node": "^22.8.1",
+                "https": "^1.0.0",
+                "image-size": "^1.2.1",
+                "jszip": "^3.10.1"
+            }
+        },
+        "node_modules/pptxgenjs/node_modules/@types/node": {
+            "version": "22.19.15",
+            "resolved": "http://localhost:4873/@types/node/-/node-22.19.15.tgz",
+            "integrity": "sha512-F0R/h2+dsy5wJAUe3tAU6oqa2qbWY5TpNfL/RGmo1y38hiyO1w3x2jPtt76wmuaJI4DQnOBu21cNXQ2STIUUWg==",
+            "license": "MIT",
+            "dependencies": {
+                "undici-types": "~6.21.0"
+            }
+        },
+        "node_modules/pptxgenjs/node_modules/undici-types": {
+            "version": "6.21.0",
+            "resolved": "http://localhost:4873/undici-types/-/undici-types-6.21.0.tgz",
+            "integrity": "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==",
+            "license": "MIT"
+        },
         "node_modules/prelude-ls": {
             "version": "1.2.1",
             "resolved": "http://localhost:4873/prelude-ls/-/prelude-ls-1.2.1.tgz",
@@ -5467,6 +5717,12 @@
                 }
             }
         },
+        "node_modules/process-nextick-args": {
+            "version": "2.0.1",
+            "resolved": "http://localhost:4873/process-nextick-args/-/process-nextick-args-2.0.1.tgz",
+            "integrity": "sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag==",
+            "license": "MIT"
+        },
         "node_modules/punycode": {
             "version": "2.3.1",
             "resolved": "http://localhost:4873/punycode/-/punycode-2.3.1.tgz",
@@ -5496,6 +5752,15 @@
             "integrity": "sha512-pItrW0Z9HnDBnFmgiNrY1uxRdri32Uh9EjNYLPVC2zZ3ZRIIEqBoDgm4DkvDwNNDHTK7FNkmr8zAa77BYc9xNw==",
             "license": "MIT"
         },
+        "node_modules/queue": {
+            "version": "6.0.2",
+            "resolved": "http://localhost:4873/queue/-/queue-6.0.2.tgz",
+            "integrity": "sha512-iHZWu+q3IdFZFX36ro/lKBkSvfkztY5Y7HMiPlOUjhupPcG2JMfst2KKEpu5XndviX/3UhFbRngUPNKtgvtZiA==",
+            "license": "MIT",
+            "dependencies": {
+                "inherits": "~2.0.3"
+            }
+        },
         "node_modules/react": {
             "version": "19.2.4",
             "resolved": "http://localhost:4873/react/-/react-19.2.4.tgz",
@@ -5681,6 +5946,21 @@
                 "react": "^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1"
             }
         },
+        "node_modules/readable-stream": {
+            "version": "2.3.8",
+            "resolved": "http://localhost:4873/readable-stream/-/readable-stream-2.3.8.tgz",
+            "integrity": "sha512-8p0AUk4XODgIewSi0l8Epjs+EVnWiK7NoDIEGU0HhE7+ZyY8D1IMY7odu5lRrFXGg71L15KG8QrPmum45RTtdA==",
+            "license": "MIT",
+            "dependencies": {
+                "core-util-is": "~1.0.0",
+                "inherits": "~2.0.3",
+                "isarray": "~1.0.0",
+                "process-nextick-args": "~2.0.0",
+                "safe-buffer": "~5.1.1",
+                "string_decoder": "~1.1.1",
+                "util-deprecate": "~1.0.1"
+            }
+        },
         "node_modules/rollup": {
             "version": "4.59.0",
             "resolved": "http://localhost:4873/rollup/-/rollup-4.59.0.tgz",
@@ -5725,6 +6005,12 @@
                 "fsevents": "~2.3.2"
             }
         },
+        "node_modules/safe-buffer": {
+            "version": "5.1.2",
+            "resolved": "http://localhost:4873/safe-buffer/-/safe-buffer-5.1.2.tgz",
+            "integrity": "sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g==",
+            "license": "MIT"
+        },
         "node_modules/scheduler": {
             "version": "0.27.0",
             "resolved": "http://localhost:4873/scheduler/-/scheduler-0.27.0.tgz",
@@ -5740,6 +6026,12 @@
                 "sdp-verify": "checker.js"
             }
         },
+        "node_modules/secure-json-parse": {
+            "version": "2.7.0",
+            "resolved": "http://localhost:4873/secure-json-parse/-/secure-json-parse-2.7.0.tgz",
+            "integrity": "sha512-6aU+Rwsezw7VR8/nyvKTx8QpWH9FrcYiXXlqC4z5d5XQBDRqtbfsRjnwGyqbi3gddNtWHuEk9OANUotL26qKUw==",
+            "license": "BSD-3-Clause"
+        },
         "node_modules/semver": {
             "version": "7.7.4",
             "resolved": "http://localhost:4873/semver/-/semver-7.7.4.tgz",
@@ -5759,6 +6051,12 @@
             "integrity": "sha512-oeM1lpU/UvhTxw+g3cIfxXHyJRc/uidd3yK1P242gzHds0udQBYzs3y8j4gCCW+ZJ7ad0yctld8RYO+bdurlvw==",
             "license": "MIT"
         },
+        "node_modules/setimmediate": {
+            "version": "1.0.5",
+            "resolved": "http://localhost:4873/setimmediate/-/setimmediate-1.0.5.tgz",
+            "integrity": "sha512-MATJdZp8sLqDl/68LfQmbP8zKPLQNV6BIZoIgrscFDQ+RsvK/BxeDQOgyxKKoh0y/8h3BqVFnCqQ/gd+reiIXA==",
+            "license": "MIT"
+        },
         "node_modules/shebang-command": {
             "version": "2.0.0",
             "resolved": "http://localhost:4873/shebang-command/-/shebang-command-2.0.0.tgz",
@@ -5837,6 +6135,28 @@
                 "node": ">=0.10.0"
             }
         },
+        "node_modules/string_decoder": {
+            "version": "1.1.1",
+            "resolved": "http://localhost:4873/string_decoder/-/string_decoder-1.1.1.tgz",
+            "integrity": "sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg==",
+            "license": "MIT",
+            "dependencies": {
+                "safe-buffer": "~5.1.0"
+            }
+        },
+        "node_modules/swr": {
+            "version": "2.4.1",
+            "resolved": "http://localhost:4873/swr/-/swr-2.4.1.tgz",
+            "integrity": "sha512-2CC6CiKQtEwaEeNiqWTAw9PGykW8SR5zZX8MZk6TeAvEAnVS7Visz8WzphqgtQ8v2xz/4Q5K+j+SeMaKXeeQIA==",
+            "license": "MIT",
+            "dependencies": {
+                "dequal": "^2.0.3",
+                "use-sync-external-store": "^1.6.0"
+            },
+            "peerDependencies": {
+                "react": "^16.11.0 || ^17.0.0 || ^18.0.0 || ^19.0.0"
+            }
+        },
         "node_modules/tailwind-merge": {
             "version": "3.5.0",
             "resolved": "http://localhost:4873/tailwind-merge/-/tailwind-merge-3.5.0.tgz",
@@ -5884,6 +6204,18 @@
                 "url": "https://opencollective.com/webpack"
             }
         },
+        "node_modules/throttleit": {
+            "version": "2.1.0",
+            "resolved": "http://localhost:4873/throttleit/-/throttleit-2.1.0.tgz",
+            "integrity": "sha512-nt6AMGKW1p/70DF/hGBdJB57B8Tspmbp5gfJ8ilhLnt7kkr2ye7hzD6NVG8GGErk2HWF34igrL2CXmNIkzKqKw==",
+            "license": "MIT",
+            "engines": {
+                "node": ">=18"
+            },
+            "funding": {
+                "url": "https://github.com/sponsors/sindresorhus"
+            }
+        },
         "node_modules/tinyglobby": {
             "version": "0.2.15",
             "resolved": "http://localhost:4873/tinyglobby/-/tinyglobby-0.2.15.tgz",
@@ -6149,6 +6481,25 @@
                 "url": "https://github.com/sponsors/sindresorhus"
             }
         },
+        "node_modules/zod": {
+            "version": "3.25.76",
+            "resolved": "http://localhost:4873/zod/-/zod-3.25.76.tgz",
+            "integrity": "sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==",
+            "license": "MIT",
+            "peer": true,
+            "funding": {
+                "url": "https://github.com/sponsors/colinhacks"
+            }
+        },
+        "node_modules/zod-to-json-schema": {
+            "version": "3.25.1",
+            "resolved": "http://localhost:4873/zod-to-json-schema/-/zod-to-json-schema-3.25.1.tgz",
+            "integrity": "sha512-pM/SU9d3YAggzi6MtR4h7ruuQlqKtad8e9S0fmxcMi+ueAK5Korys/aWcV9LIIHTVbj01NdzxcnXSN+O74ZIVA==",
+            "license": "ISC",
+            "peerDependencies": {
+                "zod": "^3.25 || ^4"
+            }
+        },
         "node_modules/zrender": {
             "version": "6.0.0",
             "resolved": "https://registry.npmjs.org/zrender/-/zrender-6.0.0.tgz",

package.json

@@ -9,6 +9,7 @@
         "preview": "vite preview"
     },
     "dependencies": {
+        "@ai-sdk/react": "^1.2.12",
         "@fortawesome/fontawesome-svg-core": "^7.2.0",
         "@fortawesome/free-solid-svg-icons": "^7.2.0",
         "@fortawesome/pro-duotone-svg-icons": "^7.2.0",
@@ -26,6 +27,7 @@
         "jotai": "^2.18.1",
         "jssip": "^3.13.6",
         "motion": "^12.29.0",
+        "pptxgenjs": "^4.0.1",
         "qr-code-styling": "^1.9.2",
         "react": "^19.2.3",
         "react-aria": "^3.46.0",
@@ -41,6 +43,7 @@
         "tailwindcss-react-aria-components": "^2.0.1"
     },
     "devDependencies": {
+        "@playwright/test": "^1.59.1",
         "@tailwindcss/postcss": "^4.1.18",
         "@trivago/prettier-plugin-sort-imports": "^5.2.2",
         "@types/jssip": "^3.5.3",

playwright.config.ts

@@ -0,0 +1,65 @@
+import { defineConfig } from '@playwright/test';
+import path from 'path';
+import { fileURLToPath } from 'url';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+
+export default defineConfig({
+    testDir: './e2e',
+    timeout: 60_000,
+    expect: { timeout: 10_000 },
+    retries: 1,
+    workers: 1,
+    reporter: [['html', { open: 'never' }], ['list']],
+    use: {
+        baseURL: process.env.E2E_BASE_URL ?? 'https://ramaiah.engage.healix360.net',
+        headless: true,
+        screenshot: 'on',
+        trace: 'on-first-retry',
+        actionTimeout: 8_000,
+        navigationTimeout: 15_000,
+    },
+    projects: [
+        // Login tests run first — fresh browser, no saved auth
+        {
+            name: 'login',
+            testMatch: /agent-login\.spec\.ts/,
+            use: { browserName: 'chromium' },
+        },
+        // Auth setup — saves CC agent session for reuse
+        {
+            name: 'agent-setup',
+            testMatch: /auth\.setup\.ts/,
+        },
+        // CC Agent feature tests — reuse saved auth
+        {
+            name: 'cc-agent',
+            dependencies: ['agent-setup'],
+            use: {
+                storageState: path.join(__dirname, 'e2e/.auth/agent.json'),
+                browserName: 'chromium',
+            },
+            testMatch: /agent-smoke\.spec\.ts/,
+        },
+        // Supervisor tests — logs in fresh each run
+        {
+            name: 'supervisor',
+            testMatch: /supervisor-smoke\.spec\.ts/,
+            use: { browserName: 'chromium' },
+        },
+        // Global Hospital — auth setup + smoke tests
+        {
+            name: 'global-setup',
+            testMatch: /global-setup\.ts/,
+        },
+        {
+            name: 'global',
+            dependencies: ['global-setup'],
+            testMatch: /global-smoke\.spec\.ts/,
+            use: {
+                storageState: path.join(__dirname, 'e2e/.auth/global-agent.json'),
+                browserName: 'chromium',
+            },
+        },
+    ],
+});

scripts/seed-data.ts

@@ -1,23 +1,21 @@
 /**
  * Helix Engage — Platform Data Seeder
- * Creates 5 patient stories + 5 doctors with fully linked records.
- * Run: cd helix-engage && npx tsx scripts/seed-data.ts
+ * Creates 2 clinics, 5 doctors with multi-clinic visit slots,
+ * 3 patient stories with fully linked records (campaigns, leads,
+ * calls, appointments, follow-ups, lead activities).
  *
- * Platform field mapping (SDK name → platform name):
- *   Campaign: campaignType→typeCustom, campaignStatus→status, impressionCount→impressions,
- *     clickCount→clicks, contactedCount→contacted, convertedCount→converted, leadCount→leadsGenerated
- *   Lead: leadSource→source, leadStatus→status, firstContactedAt→firstContacted,
- *     lastContactedAt→lastContacted, landingPageUrl→landingPage
- *   Call: callDirection→direction, durationSeconds→durationSec
- *   Appointment: durationMinutes→durationMin, appointmentStatus→status, roomNumber→room
- *   FollowUp: followUpType→typeCustom, followUpStatus→status
- *   Patient: address→addressCustom
- *   Doctor: isActive→active, branch→branchClinic
+ * Run:  cd helix-engage && npx tsx scripts/seed-data.ts
+ * Env:  SEED_GQL (graphql url), SEED_ORIGIN (workspace origin), SEED_SUB (workspace subdomain)
+ *
+ * Schema alignment (2026-04-10):
+ *   - Doctor.visitingHours removed → replaced by DoctorVisitSlot entity
+ *   - Doctor.portalUserId omitted (workspace member IDs are per-deployment)
+ *   - Clinic entity added (needed for visit slot FK)
  *   NOTE: callNotes/visitNotes/clinicalNotes are RICH_TEXT — read-only, cannot seed
  */
 
 const GQL = process.env.SEED_GQL ?? 'http://localhost:4000/graphql';
-const SUB = 'fortytwo-dev';
+const SUB = process.env.SEED_SUB ?? 'fortytwo-dev';
 const ORIGIN = process.env.SEED_ORIGIN ?? 'http://fortytwo-dev.localhost:4010';
 
 let token = '';
@@ -51,28 +49,172 @@ async function mk(entity: string, data: any): Promise<string> {
     return d[`create${cap}`].id;
 }
 
+// Create a workspace member (user account) and return its workspace member id.
+// Uses signUpInWorkspace + updateWorkspaceMember for name + updateWorkspaceMemberRole.
+// The invite hash and role IDs are fetched once and cached.
+let _inviteHash = '';
+let _wsId = '';
+const _roleIds: Record<string, string> = {};
+
+async function ensureWorkspaceContext() {
+    if (_wsId) return;
+    const ws = await gql('{ currentWorkspace { id inviteHash } }');
+    _wsId = ws.currentWorkspace.id;
+    _inviteHash = ws.currentWorkspace.inviteHash;
+    const roles = await gql('{ getRoles { id label } }');
+    for (const r of roles.getRoles) _roleIds[r.label] = r.id;
+}
+
+async function mkMember(email: string, password: string, firstName: string, lastName: string, roleName?: string): Promise<string> {
+    await ensureWorkspaceContext();
+
+    // Check if already exists
+    const existing = await gql('{ workspaceMembers { edges { node { id userEmail } } } }');
+    const found = existing.workspaceMembers.edges.find((e: any) => e.node.userEmail.toLowerCase() === email.toLowerCase());
+    if (found) {
+        console.log(`   (exists) ${email} → ${found.node.id}`);
+        return found.node.id;
+    }
+
+    // Create the user + link to workspace
+    await gql(
+        `mutation($email: String!, $password: String!, $workspaceId: UUID!, $workspaceInviteHash: String!) {
+            signUpInWorkspace(email: $email, password: $password, workspaceId: $workspaceId, workspaceInviteHash: $workspaceInviteHash) { workspace { id } }
+        }`,
+        { email, password, workspaceId: _wsId, workspaceInviteHash: _inviteHash },
+    );
+
+    // Find the new member id
+    const members = await gql('{ workspaceMembers { edges { node { id userEmail } } } }');
+    const member = members.workspaceMembers.edges.find((e: any) => e.node.userEmail.toLowerCase() === email.toLowerCase());
+    if (!member) throw new Error(`Could not find workspace member for ${email}`);
+    const memberId = member.node.id;
+
+    // Set their display name
+    await gql(
+        `mutation($id: UUID!, $data: WorkspaceMemberUpdateInput!) { updateWorkspaceMember(id: $id, data: $data) { id } }`,
+        { id: memberId, data: { name: { firstName, lastName } } },
+    );
+
+    // Assign role if specified
+    if (roleName && _roleIds[roleName]) {
+        await gql(
+            `mutation($wm: UUID!, $role: UUID!) { updateWorkspaceMemberRole(workspaceMemberId: $wm, roleId: $role) { id } }`,
+            { wm: memberId, role: _roleIds[roleName] },
+        );
+    }
+
+    return memberId;
+}
+
+async function clearAll() {
+    // Delete in reverse dependency order
+    const entities = ['followUp', 'leadActivity', 'call', 'appointment', 'lead', 'patient', 'doctorVisitSlot', 'doctor', 'campaign', 'clinic'];
+    for (const entity of entities) {
+        const cap = entity[0].toUpperCase() + entity.slice(1);
+        try {
+            const data = await gql(`{ ${entity}s(first: 100) { edges { node { id } } } }`);
+            const ids: string[] = data[`${entity}s`].edges.map((e: any) => e.node.id);
+            if (ids.length === 0) { console.log(`   ${cap}: 0 records`); continue; }
+            for (const id of ids) {
+                await gql(`mutation { delete${cap}(id: "${id}") { id } }`);
+            }
+            console.log(`   ${cap}: deleted ${ids.length}`);
+        } catch (err: any) {
+            console.log(`   ${cap}: skip (${err.message?.slice(0, 60)})`);
+        }
+    }
+}
+
 async function main() {
     console.log('🌱 Seeding Helix Engage demo data...\n');
     await auth();
     console.log('✅ Auth OK\n');
 
-    // Workspace member IDs — switch based on target platform
-    const WM = GQL.includes('srv1477139') ? {
-        drSharma: '107efa70-fd32-4819-8936-994197c6ada1',
-        drPatel:  '7e1fe368-1f23-4a10-8c2f-3e9c3846b209',
-        drKumar:  'b86ff7d3-57de-44e5-aa13-e5da848a960c',
-        drReddy:  'b82693b6-701c-4783-8d02-cc137c9c306b',
-        drSingh:  'b2a00dd2-5bb5-4c29-8fb1-70a681193a4c',
-    } : {
-        drSharma: '251e9b32-3a83-4f3c-a904-fad7e8b840c3',
-        drPatel:  '2b1bbf20-3838-434f-9fe9-b98436362230',
-        drKumar:  '16109622-9b13-4682-b327-eb611ffa8338',
-        drReddy:  '478a9ccb-d231-48fb-a740-0228d3c9325b',
-        drSingh:  'b854b55b-7302-4981-8dfc-bea516abdc86',
-    };
+    // Clean slate — remove all existing entity data (not users)
+    console.log('🧹 Clearing existing data...');
+    await clearAll();
+    console.log('');
+
+    await auth();
 
     // ═══════════════════════════════════════════
-    // DOCTORS (linked to workspace members)
+    // CLINICS (needed for doctor visit slots)
+    // ═══════════════════════════════════════════
+    console.log('🏥 Clinics');
+    const clinicKor = await mk('clinic', {
+        name: 'Global Hospital — Koramangala',
+        clinicName: 'Global Hospital — Koramangala',
+        status: 'ACTIVE',
+        opensAt: '08:00', closesAt: '20:00',
+        openMonday: true, openTuesday: true, openWednesday: true,
+        openThursday: true, openFriday: true, openSaturday: true, openSunday: false,
+        phone: { primaryPhoneNumber: '8041763265', primaryPhoneCallingCode: '+91', primaryPhoneCountryCode: 'IN' },
+        addressCustom: { addressCity: 'Bangalore', addressState: 'Karnataka', addressCountry: 'India', addressStreet1: 'Koramangala 4th Block' },
+        onlineBooking: true, walkInAllowed: true, acceptsCash: 'YES', acceptsCard: 'YES', acceptsUpi: 'YES',
+    });
+    console.log(`   Koramangala: ${clinicKor}`);
+
+    const clinicWf = await mk('clinic', {
+        name: 'Global Hospital — Whitefield',
+        clinicName: 'Global Hospital — Whitefield',
+        status: 'ACTIVE',
+        opensAt: '09:00', closesAt: '18:00',
+        openMonday: true, openTuesday: true, openWednesday: true,
+        openThursday: true, openFriday: true, openSaturday: true, openSunday: false,
+        phone: { primaryPhoneNumber: '8041763400', primaryPhoneCallingCode: '+91', primaryPhoneCountryCode: 'IN' },
+        addressCustom: { addressCity: 'Bangalore', addressState: 'Karnataka', addressCountry: 'India', addressStreet1: 'ITPL Main Road, Whitefield' },
+        onlineBooking: true, walkInAllowed: true, acceptsCash: 'YES', acceptsCard: 'YES', acceptsUpi: 'YES',
+    });
+    console.log(`   Whitefield: ${clinicWf}\n`);
+
+    await auth();
+
+    // ═══════════════════════════════════════════
+    // CALL CENTER & MARKETING STAFF
+    //
+    // CC agents (HelixEngage User role) handle inbound/outbound calls.
+    // Marketing executives and supervisors use HelixEngage Supervisor role.
+    // Email domain uses globalcare.com to match the deployment.
+    // ═══════════════════════════════════════════
+    console.log('📞 Call center & marketing staff');
+    const wmRekha = await mkMember('rekha.cc@globalcare.com', 'Global@123', 'Rekha', 'Nair', 'HelixEngage User');
+    console.log(`   Rekha (CC Agent): ${wmRekha}`);
+    const wmGanesh = await mkMember('ganesh.cc@globalcare.com', 'Global@123', 'Ganesh', 'Iyer', 'HelixEngage User');
+    console.log(`   Ganesh (CC Agent): ${wmGanesh}`);
+    const wmSanjay = await mkMember('sanjay.marketing@globalcare.com', 'Global@123', 'Sanjay', 'Verma', 'HelixEngage Supervisor');
+    console.log(`   Sanjay (Marketing): ${wmSanjay}`);
+    const wmRamesh = await mkMember('dr.ramesh@globalcare.com', 'Global@123', 'Ramesh', 'Gupta', 'HelixEngage Supervisor');
+    console.log(`   Dr. Ramesh (Supervisor): ${wmRamesh}\n`);
+
+    await auth();
+
+    // ═══════════════════════════════════════════
+    // DOCTOR WORKSPACE MEMBERS
+    //
+    // Each doctor gets a real platform login so they can access the
+    // portal. Created via signUpInWorkspace, then linked to the Doctor
+    // entity via portalUserId. Email domain matches the deployment.
+    // ═══════════════════════════════════════════
+    console.log('👤 Doctor workspace members (role: HelixEngage Manager)');
+    const wmSharma = await mkMember('dr.sharma@globalcare.com', 'DrSharma@2026', 'Arun', 'Sharma', 'HelixEngage Manager');
+    console.log(`   Dr. Sharma member: ${wmSharma}`);
+    const wmPatel = await mkMember('dr.patel@globalcare.com', 'DrPatel@2026', 'Meena', 'Patel', 'HelixEngage Manager');
+    console.log(`   Dr. Patel member: ${wmPatel}`);
+    const wmKumar = await mkMember('dr.kumar@globalcare.com', 'DrKumar@2026', 'Rajesh', 'Kumar', 'HelixEngage Manager');
+    console.log(`   Dr. Kumar member: ${wmKumar}`);
+    const wmReddy = await mkMember('dr.reddy@globalcare.com', 'DrReddy@2026', 'Lakshmi', 'Reddy', 'HelixEngage Manager');
+    console.log(`   Dr. Reddy member: ${wmReddy}`);
+    const wmSingh = await mkMember('dr.singh@globalcare.com', 'DrSingh@2026', 'Harpreet', 'Singh', 'HelixEngage Manager');
+    console.log(`   Dr. Singh member: ${wmSingh}\n`);
+
+    await auth();
+
+    // ═══════════════════════════════════════════
+    // DOCTORS (linked to workspace members via portalUserId)
+    //
+    // visitingHours was removed — multi-clinic schedules now live
+    // on DoctorVisitSlot (seeded below).
     // ═══════════════════════════════════════════
     console.log('👨‍⚕️ Doctors');
     const drSharma = await mk('doctor', {
@@ -82,16 +224,15 @@ async function main() {
         specialty: 'Interventional Cardiology',
         qualifications: 'MBBS, MD (Medicine), DM (Cardiology), FACC',
         yearsOfExperience: 18,
-        visitingHours: 'Mon/Wed/Fri 10:00 AM – 1:00 PM',
         consultationFeeNew: { amountMicros: 800_000_000, currencyCode: 'INR' },
         consultationFeeFollowUp: { amountMicros: 500_000_000, currencyCode: 'INR' },
         phone: { primaryPhoneNumber: '9900100001', primaryPhoneCallingCode: '+91', primaryPhoneCountryCode: 'IN' },
-        email: { primaryEmail: 'dr.sharma@globalhospital.com' },
+        email: { primaryEmail: 'dr.sharma@globalcare.com' },
         registrationNumber: 'KMC-45672',
         active: true,
-        portalUserId: WM.drSharma,
+        portalUserId: wmSharma,
     });
-    console.log(`   Dr. Sharma (Cardiology, WM: ${WM.drSharma}): ${drSharma}`);
+    console.log(`   Dr. Sharma (Cardiology → ${wmSharma}): ${drSharma}`);
 
     const drPatel = await mk('doctor', {
         name: 'Dr. Meena Patel',
@@ -100,16 +241,15 @@ async function main() {
         specialty: 'Reproductive Medicine & IVF',
         qualifications: 'MBBS, MS (OBG), Fellowship in Reproductive Medicine',
         yearsOfExperience: 15,
-        visitingHours: 'Tue/Thu/Sat 9:00 AM – 12:00 PM',
         consultationFeeNew: { amountMicros: 700_000_000, currencyCode: 'INR' },
         consultationFeeFollowUp: { amountMicros: 400_000_000, currencyCode: 'INR' },
         phone: { primaryPhoneNumber: '9900100002', primaryPhoneCallingCode: '+91', primaryPhoneCountryCode: 'IN' },
-        email: { primaryEmail: 'dr.patel@globalhospital.com' },
+        email: { primaryEmail: 'dr.patel@globalcare.com' },
         registrationNumber: 'KMC-38291',
         active: true,
-        portalUserId: WM.drPatel,
+        portalUserId: wmPatel,
     });
-    console.log(`   Dr. Patel (Gynecology/IVF, WM: ${WM.drPatel}): ${drPatel}`);
+    console.log(`   Dr. Patel (Gynecology/IVF → ${wmPatel}): ${drPatel}`);
 
     const drKumar = await mk('doctor', {
         name: 'Dr. Rajesh Kumar',
@@ -118,16 +258,15 @@ async function main() {
         specialty: 'Joint Replacement & Sports Medicine',
         qualifications: 'MBBS, MS (Ortho), Fellowship in Arthroplasty',
         yearsOfExperience: 12,
-        visitingHours: 'Mon–Fri 2:00 PM – 5:00 PM',
         consultationFeeNew: { amountMicros: 600_000_000, currencyCode: 'INR' },
         consultationFeeFollowUp: { amountMicros: 400_000_000, currencyCode: 'INR' },
         phone: { primaryPhoneNumber: '9900100003', primaryPhoneCallingCode: '+91', primaryPhoneCountryCode: 'IN' },
-        email: { primaryEmail: 'dr.kumar@globalhospital.com' },
+        email: { primaryEmail: 'dr.kumar@globalcare.com' },
         registrationNumber: 'KMC-51003',
         active: true,
-        portalUserId: WM.drKumar,
+        portalUserId: wmKumar,
     });
-    console.log(`   Dr. Kumar (Orthopedics, WM: ${WM.drKumar}): ${drKumar}`);
+    console.log(`   Dr. Kumar (Orthopedics → ${wmKumar}): ${drKumar}`);
 
     const drReddy = await mk('doctor', {
         name: 'Dr. Lakshmi Reddy',
@@ -136,16 +275,15 @@ async function main() {
         specialty: 'Internal Medicine & Preventive Health',
         qualifications: 'MBBS, MD (General Medicine)',
         yearsOfExperience: 20,
-        visitingHours: 'Mon–Sat 9:00 AM – 6:00 PM',
         consultationFeeNew: { amountMicros: 500_000_000, currencyCode: 'INR' },
         consultationFeeFollowUp: { amountMicros: 300_000_000, currencyCode: 'INR' },
         phone: { primaryPhoneNumber: '9900100004', primaryPhoneCallingCode: '+91', primaryPhoneCountryCode: 'IN' },
-        email: { primaryEmail: 'dr.reddy@globalhospital.com' },
+        email: { primaryEmail: 'dr.reddy@globalcare.com' },
         registrationNumber: 'KMC-22145',
         active: true,
-        portalUserId: WM.drReddy,
+        portalUserId: wmReddy,
     });
-    console.log(`   Dr. Reddy (General Medicine, WM: ${WM.drReddy}): ${drReddy}`);
+    console.log(`   Dr. Reddy (General Medicine → ${wmReddy}): ${drReddy}`);
 
     const drSingh = await mk('doctor', {
         name: 'Dr. Harpreet Singh',
@@ -154,16 +292,57 @@ async function main() {
         specialty: 'Otorhinolaryngology & Head/Neck Surgery',
         qualifications: 'MBBS, MS (ENT), DNB',
         yearsOfExperience: 10,
-        visitingHours: 'Mon/Wed/Fri 11:00 AM – 3:00 PM',
         consultationFeeNew: { amountMicros: 600_000_000, currencyCode: 'INR' },
         consultationFeeFollowUp: { amountMicros: 400_000_000, currencyCode: 'INR' },
         phone: { primaryPhoneNumber: '9900100005', primaryPhoneCallingCode: '+91', primaryPhoneCountryCode: 'IN' },
-        email: { primaryEmail: 'dr.singh@globalhospital.com' },
+        email: { primaryEmail: 'dr.singh@globalcare.com' },
         registrationNumber: 'KMC-60782',
         active: true,
-        portalUserId: WM.drSingh,
+        portalUserId: wmSingh,
     });
-    console.log(`   Dr. Singh (ENT, WM: ${WM.drSingh}): ${drSingh}\n`);
+    console.log(`   Dr. Singh (ENT → ${wmSingh}): ${drSingh}\n`);
+
+    await auth();
+
+    // ═══════════════════════════════════════════
+    // DOCTOR VISIT SLOTS (weekly schedule per doctor × clinic)
+    // ═══════════════════════════════════════════
+    console.log('📅 Visit Slots');
+    const slots: Array<{ doc: string; docName: string; clinic: string; clinicName: string; day: string; start: string; end: string }> = [
+        // Dr. Sharma — Koramangala Mon/Wed/Fri 10:00–13:00
+        { doc: drSharma, docName: 'Sharma', clinic: clinicKor, clinicName: 'Kor', day: 'MONDAY', start: '10:00', end: '13:00' },
+        { doc: drSharma, docName: 'Sharma', clinic: clinicKor, clinicName: 'Kor', day: 'WEDNESDAY', start: '10:00', end: '13:00' },
+        { doc: drSharma, docName: 'Sharma', clinic: clinicKor, clinicName: 'Kor', day: 'FRIDAY', start: '10:00', end: '13:00' },
+        // Dr. Patel — Whitefield Tue/Thu/Sat 9:00–12:00
+        { doc: drPatel, docName: 'Patel', clinic: clinicWf, clinicName: 'WF', day: 'TUESDAY', start: '09:00', end: '12:00' },
+        { doc: drPatel, docName: 'Patel', clinic: clinicWf, clinicName: 'WF', day: 'THURSDAY', start: '09:00', end: '12:00' },
+        { doc: drPatel, docName: 'Patel', clinic: clinicWf, clinicName: 'WF', day: 'SATURDAY', start: '09:00', end: '12:00' },
+        // Dr. Kumar — Koramangala Mon–Fri 14:00–17:00
+        { doc: drKumar, docName: 'Kumar', clinic: clinicKor, clinicName: 'Kor', day: 'MONDAY', start: '14:00', end: '17:00' },
+        { doc: drKumar, docName: 'Kumar', clinic: clinicKor, clinicName: 'Kor', day: 'TUESDAY', start: '14:00', end: '17:00' },
+        { doc: drKumar, docName: 'Kumar', clinic: clinicKor, clinicName: 'Kor', day: 'WEDNESDAY', start: '14:00', end: '17:00' },
+        { doc: drKumar, docName: 'Kumar', clinic: clinicKor, clinicName: 'Kor', day: 'THURSDAY', start: '14:00', end: '17:00' },
+        { doc: drKumar, docName: 'Kumar', clinic: clinicKor, clinicName: 'Kor', day: 'FRIDAY', start: '14:00', end: '17:00' },
+        // Dr. Reddy — both clinics Mon–Sat
+        { doc: drReddy, docName: 'Reddy', clinic: clinicKor, clinicName: 'Kor', day: 'MONDAY', start: '09:00', end: '13:00' },
+        { doc: drReddy, docName: 'Reddy', clinic: clinicKor, clinicName: 'Kor', day: 'WEDNESDAY', start: '09:00', end: '13:00' },
+        { doc: drReddy, docName: 'Reddy', clinic: clinicKor, clinicName: 'Kor', day: 'FRIDAY', start: '09:00', end: '13:00' },
+        { doc: drReddy, docName: 'Reddy', clinic: clinicWf, clinicName: 'WF', day: 'TUESDAY', start: '14:00', end: '18:00' },
+        { doc: drReddy, docName: 'Reddy', clinic: clinicWf, clinicName: 'WF', day: 'THURSDAY', start: '14:00', end: '18:00' },
+        { doc: drReddy, docName: 'Reddy', clinic: clinicWf, clinicName: 'WF', day: 'SATURDAY', start: '14:00', end: '18:00' },
+        // Dr. Singh — Whitefield Mon/Wed/Fri 11:00–15:00
+        { doc: drSingh, docName: 'Singh', clinic: clinicWf, clinicName: 'WF', day: 'MONDAY', start: '11:00', end: '15:00' },
+        { doc: drSingh, docName: 'Singh', clinic: clinicWf, clinicName: 'WF', day: 'WEDNESDAY', start: '11:00', end: '15:00' },
+        { doc: drSingh, docName: 'Singh', clinic: clinicWf, clinicName: 'WF', day: 'FRIDAY', start: '11:00', end: '15:00' },
+    ];
+    for (const s of slots) {
+        await mk('doctorVisitSlot', {
+            name: `Dr. ${s.docName} — ${s.day} ${s.start}–${s.end} (${s.clinicName})`,
+            doctorId: s.doc, clinicId: s.clinic,
+            dayOfWeek: s.day, startTime: s.start, endTime: s.end,
+        });
+    }
+    console.log(`   ${slots.length} visit slots created\n`);
 
     await auth();
 
@@ -406,9 +585,10 @@ async function main() {
     console.log('   Vijay — appointment reminder (tomorrow 9am)\n');
 
     console.log('🎉 Seed complete!');
-    console.log('   5 doctors · 3 campaigns · 3 patients · 5 leads · 6 appointments · 10 calls · 22 activities · 2 follow-ups');
+    console.log('   2 clinics · 5 doctors · 20 visit slots · 3 campaigns');
+    console.log('   3 patients · 5 leads · 6 appointments · 10 calls · 22 activities · 2 follow-ups');
     console.log('   Demo phones: Priya=9949879837, Ravi=6309248884');
-    console.log('   All appointments linked to doctor entities');
+    console.log('   Doctors linked to clinics via visit slots (multi-clinic schedule)');
 }
 
 main().catch(e => { console.error('💥', e.message); process.exit(1); });

scripts/seed-ramaiah.ts

@@ -0,0 +1,117 @@
+/**
+ * Helix Engage — Ramaiah Hospital Data Seeder
+ *
+ * Seeds clinic + 195 doctors from scraped website data.
+ * Run: cd helix-engage && SEED_GQL=https://ramaiah.app.healix360.net/graphql SEED_SUB=ramaiah SEED_ORIGIN=https://ramaiah.app.healix360.net npx tsx scripts/seed-ramaiah.ts
+ */
+import { readFileSync } from 'fs';
+
+const GQL = process.env.SEED_GQL ?? 'http://localhost:4000/graphql';
+const SUB = process.env.SEED_SUB ?? 'ramaiah';
+const ORIGIN = process.env.SEED_ORIGIN ?? 'http://ramaiah.localhost:5080';
+const DATA_FILE = process.env.SEED_DATA ?? '/tmp/ramaiah-seed-data.json';
+
+let token = '';
+
+async function gql(query: string, variables?: any) {
+    const h: Record<string, string> = { 'Content-Type': 'application/json', 'X-Workspace-Subdomain': SUB };
+    if (token) h['Authorization'] = `Bearer ${token}`;
+    const r = await fetch(GQL, { method: 'POST', headers: h, body: JSON.stringify({ query, variables }) });
+    const d: any = await r.json();
+    if (d.errors) { console.error('❌', d.errors[0].message); throw new Error(d.errors[0].message); }
+    return d.data;
+}
+
+async function auth() {
+    const d1 = await gql(`mutation { getLoginTokenFromCredentials(email: "dev@fortytwo.dev", password: "tim@apple.dev", origin: "${ORIGIN}") { loginToken { token } } }`);
+    const lt = d1.getLoginTokenFromCredentials.loginToken.token;
+    const d2 = await gql(`mutation { getAuthTokensFromLoginToken(loginToken: "${lt}", origin: "${ORIGIN}") { tokens { accessOrWorkspaceAgnosticToken { token } } } }`);
+    token = d2.getAuthTokensFromLoginToken.tokens.accessOrWorkspaceAgnosticToken.token;
+}
+
+async function mk(entity: string, data: any): Promise<string> {
+    const cap = entity[0].toUpperCase() + entity.slice(1);
+    const d = await gql(`mutation($data: ${cap}CreateInput!) { create${cap}(data: $data) { id } }`, { data });
+    return d[`create${cap}`].id;
+}
+
+async function main() {
+    console.log('🌱 Seeding Ramaiah Hospital data...\n');
+
+    const raw = JSON.parse(readFileSync(DATA_FILE, 'utf-8'));
+    console.log(`📁 Loaded ${raw.doctors.length} doctors, ${raw.departments.length} departments\n`);
+
+    await auth();
+    console.log('✅ Auth OK\n');
+
+    // Clinic
+    console.log('🏥 Clinic');
+    const clinicId = await mk('clinic', {
+        name: raw.clinic.name,
+        clinicName: raw.clinic.name,
+        status: 'ACTIVE',
+        opensAt: '08:00',
+        closesAt: '20:00',
+        openMonday: true, openTuesday: true, openWednesday: true,
+        openThursday: true, openFriday: true, openSaturday: true, openSunday: false,
+        phone: {
+            primaryPhoneNumber: raw.clinic.phone?.replace(/[^0-9]/g, '').slice(-10) ?? '',
+            primaryPhoneCallingCode: '+91',
+            primaryPhoneCountryCode: 'IN',
+        },
+        addressCustom: {
+            addressStreet1: raw.clinic.address?.split(',')[0] ?? 'New BEL Road',
+            addressCity: raw.clinic.city ?? 'Bangalore',
+            addressState: raw.clinic.state ?? 'Karnataka',
+            addressCountry: 'India',
+            addressPostcode: raw.clinic.pincode ?? '560054',
+        },
+        onlineBooking: true,
+        walkInAllowed: true,
+    });
+    console.log(`   ${raw.clinic.name}: ${clinicId}\n`);
+
+    // Re-auth (long operation ahead)
+    await auth();
+
+    // Doctors — batch in groups of 20 with re-auth
+    console.log(`👨‍⚕️ Doctors (${raw.doctors.length})`);
+    let created = 0;
+    let failed = 0;
+
+    for (let i = 0; i < raw.doctors.length; i++) {
+        // Re-auth every 40 doctors (token may expire on long runs)
+        if (i > 0 && i % 40 === 0) {
+            await auth();
+            console.log(`   (re-authed at ${i})`);
+        }
+
+        const doc = raw.doctors[i];
+        const firstName = doc.name.replace(/^Dr\.?\s*/i, '').split(' ')[0] ?? '';
+        const lastNameParts = doc.name.replace(/^Dr\.?\s*/i, '').split(' ').slice(1);
+        const lastName = lastNameParts.join(' ');
+
+        try {
+            await mk('doctor', {
+                name: doc.name,
+                fullName: { firstName, lastName },
+                department: doc.department ?? 'Other',
+                specialty: doc.designation ?? 'Consultant',
+                qualifications: doc.qualifications ?? '',
+                registrationNumber: '',
+                active: true,
+            });
+            created++;
+            if (created % 20 === 0) console.log(`   ${created}/${raw.doctors.length} created...`);
+        } catch (err: any) {
+            failed++;
+            console.error(`   ✗ ${doc.name}: ${err.message?.slice(0, 80)}`);
+        }
+    }
+
+    console.log(`\n   ✅ ${created} doctors created, ${failed} failed\n`);
+    console.log('🎉 Ramaiah seed complete!');
+    console.log(`   1 clinic · ${created} doctors · ${raw.departments.length} departments`);
+}
+
+main().catch(e => { console.error('💥', e.message); process.exit(1); });

src/components/application/app-navigation/base-components/nav-account-card.tsx

@@ -2,12 +2,11 @@ import type { FC, HTMLAttributes } from "react";
 import { useCallback, useEffect, useRef } from "react";
 import type { Placement } from "@react-types/overlays";
 import { FontAwesomeIcon } from "@fortawesome/react-fontawesome";
-import { faUser, faGear, faArrowRightFromBracket, faPhoneVolume, faSort } from "@fortawesome/pro-duotone-svg-icons";
+import { faArrowRightFromBracket, faSort, faUser, faGear } from "@fortawesome/pro-duotone-svg-icons";
 
 const IconUser: FC<{ className?: string }> = ({ className }) => <FontAwesomeIcon icon={faUser} className={className} />;
 const IconSettings: FC<{ className?: string }> = ({ className }) => <FontAwesomeIcon icon={faGear} className={className} />;
 const IconLogout: FC<{ className?: string }> = ({ className }) => <FontAwesomeIcon icon={faArrowRightFromBracket} className={className} />;
-const IconForceReady: FC<{ className?: string }> = ({ className }) => <FontAwesomeIcon icon={faPhoneVolume} className={className} />;
 import { useFocusManager } from "react-aria";
 import type { DialogProps as AriaDialogProps } from "react-aria-components";
 import { Button as AriaButton, Dialog as AriaDialog, DialogTrigger as AriaDialogTrigger, Popover as AriaPopover } from "react-aria-components";
@@ -32,9 +31,10 @@ type NavAccountType = {
 export const NavAccountMenu = ({
     className,
     onSignOut,
-    onForceReady,
+    onViewProfile,
+    onAccountSettings,
     ...dialogProps
-}: AriaDialogProps & { className?: string; accounts?: NavAccountType[]; selectedAccountId?: string; onSignOut?: () => void; onForceReady?: () => void }) => {
+}: AriaDialogProps & { className?: string; accounts?: NavAccountType[]; selectedAccountId?: string; onSignOut?: () => void; onViewProfile?: () => void; onAccountSettings?: () => void }) => {
     const focusManager = useFocusManager();
     const dialogRef = useRef<HTMLDivElement>(null);
 
@@ -75,12 +75,10 @@ export const NavAccountMenu = ({
                 <>
                     <div className="rounded-xl bg-primary ring-1 ring-secondary">
                         <div className="flex flex-col gap-0.5 py-1.5">
-                            <NavAccountCardMenuItem label="View profile" icon={IconUser} shortcut="⌘K->P" />
-                            <NavAccountCardMenuItem label="Account settings" icon={IconSettings} shortcut="⌘S" />
-                            <NavAccountCardMenuItem label="Force Ready" icon={IconForceReady} onClick={() => { close(); onForceReady?.(); }} />
+                            <NavAccountCardMenuItem label="View profile" icon={IconUser} onClick={() => { close(); onViewProfile?.(); }} />
+                            <NavAccountCardMenuItem label="Account settings" icon={IconSettings} onClick={() => { close(); onAccountSettings?.(); }} />
                         </div>
                     </div>
-
                     <div className="pt-1 pb-1.5">
                         <NavAccountCardMenuItem label="Sign out" icon={IconLogout} shortcut="⌥⇧Q" onClick={() => { close(); onSignOut?.(); }} />
                     </div>
@@ -126,13 +124,15 @@ export const NavAccountCard = ({
     selectedAccountId,
     items = [],
     onSignOut,
-    onForceReady,
+    onViewProfile,
+    onAccountSettings,
 }: {
     popoverPlacement?: Placement;
     selectedAccountId?: string;
     items?: NavAccountType[];
     onSignOut?: () => void;
-    onForceReady?: () => void;
+    onViewProfile?: () => void;
+    onAccountSettings?: () => void;
 }) => {
     const triggerRef = useRef<HTMLDivElement>(null);
     const isDesktop = useBreakpoint("lg");
@@ -145,7 +145,7 @@ export const NavAccountCard = ({
     }
 
     return (
-        <div ref={triggerRef} className="relative flex items-center gap-3 rounded-xl p-3 ring-1 ring-secondary ring-inset">
+        <div ref={triggerRef} className="relative flex items-center gap-3 rounded-xl p-3">
             <AvatarLabelGroup
                 size="md"
                 src={selectedAccount.avatar}
@@ -173,7 +173,7 @@ export const NavAccountCard = ({
                             )
                         }
                     >
-                        <NavAccountMenu selectedAccountId={selectedAccountId} accounts={items} onSignOut={onSignOut} onForceReady={onForceReady} />
+                        <NavAccountMenu selectedAccountId={selectedAccountId} accounts={items} onSignOut={onSignOut} onViewProfile={onViewProfile} onAccountSettings={onAccountSettings} />
                     </AriaPopover>
                 </AriaDialogTrigger>
             </div>

src/components/application/app-navigation/base-components/nav-item.tsx

@@ -6,8 +6,8 @@ import { Badge } from "@/components/base/badges/badges";
 import { cx, sortCx } from "@/utils/cx";
 
 const styles = sortCx({
-    root: "group relative flex w-full cursor-pointer items-center rounded-md bg-primary outline-focus-ring transition duration-100 ease-linear select-none hover:bg-primary_hover focus-visible:z-10 focus-visible:outline-2 focus-visible:outline-offset-2",
-    rootSelected: "bg-active hover:bg-secondary_hover border-l-2 border-l-brand-600 text-brand-secondary",
+    root: "group relative flex w-full cursor-pointer items-center rounded-md outline-focus-ring transition duration-100 ease-linear select-none focus-visible:z-10 focus-visible:outline-2 focus-visible:outline-offset-2",
+    rootSelected: "bg-sidebar-active hover:bg-sidebar-active border-l-2 border-l-brand-600",
 });
 
 interface NavItemBaseProps {
@@ -48,9 +48,9 @@ export const NavItemBase = ({ current, type, badge, href, icon: Icon, children,
     const labelElement = (
         <span
             className={cx(
-                "flex-1 text-md font-semibold text-secondary transition-inherit-all group-hover:text-secondary_hover",
+                "flex-1 text-md font-semibold text-white transition-inherit-all",
                 truncate && "truncate",
-                current && "text-secondary_hover",
+                current ? "text-sidebar-active" : "group-hover:text-sidebar-hover",
             )}
         >
             {children}
@@ -62,7 +62,9 @@ export const NavItemBase = ({ current, type, badge, href, icon: Icon, children,
 
     if (type === "collapsible") {
         return (
-            <summary className={cx("px-3 py-2", styles.root, current && styles.rootSelected)} onClick={onClick}>
+            <summary 
+                className={cx("px-3 py-2 bg-sidebar", !current && "hover:bg-sidebar-hover", styles.root, current && styles.rootSelected)} 
+                onClick={onClick}>
                 {iconElement}
 
                 {labelElement}
@@ -80,7 +82,7 @@ export const NavItemBase = ({ current, type, badge, href, icon: Icon, children,
                 href={href!}
                 target={isExternal ? "_blank" : "_self"}
                 rel="noopener noreferrer"
-                className={cx("py-2 pr-3 pl-10", styles.root, current && styles.rootSelected)}
+                className={cx("py-2 pr-3 pl-10 bg-sidebar", !current && "hover:bg-sidebar-hover", styles.root, current && styles.rootSelected)}
                 onClick={onClick}
                 aria-current={current ? "page" : undefined}
             >
@@ -96,7 +98,7 @@ export const NavItemBase = ({ current, type, badge, href, icon: Icon, children,
             href={href!}
             target={isExternal ? "_blank" : "_self"}
             rel="noopener noreferrer"
-            className={cx("px-3 py-2", styles.root, current && styles.rootSelected)}
+            className={cx("px-3 py-2 bg-sidebar", !current && "hover:bg-sidebar-hover", styles.root, current && styles.rootSelected)}
             onClick={onClick}
             aria-current={current ? "page" : undefined}
         >

src/components/application/date-picker/date-picker.tsx

@@ -40,7 +40,8 @@ export const DatePicker = ({ value: valueProp, defaultValue, onChange, onApply,
             </AriaGroup>
             <AriaPopover
                 offset={8}
-                placement="bottom right"
+                placement="bottom start"
+                shouldFlip
                 className={({ isEntering, isExiting }) =>
                     cx(
                         "origin-(--trigger-anchor-point) will-change-transform",

src/components/application/date-picker/time-picker.tsx

@@ -0,0 +1,73 @@
+import { Select } from "@/components/base/select/select";
+
+// 30-minute increments from 05:00 to 23:00 → 37 slots.
+// Covers every realistic clinic opening / closing time.
+// Values are 24-hour HH:MM strings — the same format stored on the
+// Clinic + DoctorVisitSlot entities in the platform. Labels are
+// 12-hour format with AM/PM for readability.
+const TIME_SLOTS = Array.from({ length: 37 }, (_, i) => {
+    const totalMinutes = 5 * 60 + i * 30;
+    const hour = Math.floor(totalMinutes / 60);
+    const minute = totalMinutes % 60;
+    const h12 = hour % 12 || 12;
+    const period = hour >= 12 ? "PM" : "AM";
+    const id = `${String(hour).padStart(2, "0")}:${String(minute).padStart(2, "0")}`;
+    const label = `${h12}:${String(minute).padStart(2, "0")} ${period}`;
+    return { id, label };
+});
+
+type TimePickerProps = {
+    /** Field label rendered above the select. */
+    label?: string;
+    /** Current value in 24-hour HH:MM format, or null when unset. */
+    value: string | null;
+    /** Called with the new HH:MM string when the user picks a slot. */
+    onChange: (value: string) => void;
+    isRequired?: boolean;
+    isDisabled?: boolean;
+    placeholder?: string;
+};
+
+// A minimal time-of-day picker built on top of the existing base
+// Select component. Intentionally dropdown-based rather than the
+// full DateTimePicker popover pattern from the reference demo —
+// the clinic + doctor flows only need time, not date, and a
+// dropdown is faster to use when the agent already knows the time.
+//
+// Use this for: clinic.opensAt / closesAt, doctorVisitSlot.startTime /
+// endTime. For time-AND-date (appointment scheduling), stick with the
+// existing DatePicker in the same directory.
+export const TimePicker = ({
+    label,
+    value,
+    onChange,
+    isRequired,
+    isDisabled,
+    placeholder = "Select time",
+}: TimePickerProps) => (
+    <Select
+        label={label}
+        placeholder={placeholder}
+        items={TIME_SLOTS}
+        selectedKey={value}
+        onSelectionChange={(key) => {
+            if (key !== null) onChange(String(key));
+        }}
+        isRequired={isRequired}
+        isDisabled={isDisabled}
+    >
+        {(slot) => <Select.Item id={slot.id} label={slot.label} />}
+    </Select>
+);
+
+// Format a 24-hour HH:MM string as a 12-hour display label (e.g.
+// "09:30" → "9:30 AM"). Useful on list/detail pages that render
+// stored clinic hours without re-mounting the picker.
+export const formatTimeLabel = (hhmm: string | null | undefined): string => {
+    if (!hhmm) return "—";
+    const [h, m] = hhmm.split(":").map(Number);
+    if (Number.isNaN(h) || Number.isNaN(m)) return hhmm;
+    const h12 = h % 12 || 12;
+    const period = h >= 12 ? "PM" : "AM";
+    return `${h12}:${String(m).padStart(2, "0")} ${period}`;
+};

src/components/application/day-selector/day-selector.tsx

@@ -0,0 +1,108 @@
+import { cx } from "@/utils/cx";
+
+// Keys match the Clinic entity's openMonday..openSunday fields
+// directly — no translation layer needed when reading/writing the
+// form value into GraphQL mutations.
+export type DayKey =
+    | "monday"
+    | "tuesday"
+    | "wednesday"
+    | "thursday"
+    | "friday"
+    | "saturday"
+    | "sunday";
+
+export type DaySelection = Record<DayKey, boolean>;
+
+const DAYS: { key: DayKey; label: string }[] = [
+    { key: "monday", label: "Mon" },
+    { key: "tuesday", label: "Tue" },
+    { key: "wednesday", label: "Wed" },
+    { key: "thursday", label: "Thu" },
+    { key: "friday", label: "Fri" },
+    { key: "saturday", label: "Sat" },
+    { key: "sunday", label: "Sun" },
+];
+
+type DaySelectorProps = {
+    /** Selected-state for each weekday. */
+    value: DaySelection;
+    /** Fires with the full updated selection whenever a pill is tapped. */
+    onChange: (value: DaySelection) => void;
+    /** Optional heading above the pills. */
+    label?: string;
+    /** Optional helper text below the pills. */
+    hint?: string;
+};
+
+// Seven tappable Mon–Sun pills. Used on the Clinic form to pick which
+// days the clinic is open, since the Clinic entity has seven separate
+// BOOLEAN fields (openMonday..openSunday) — SDK has no MULTI_SELECT.
+// Also reusable anywhere else we need a weekly-recurrence picker
+// (future: follow-up schedules, on-call rotations).
+export const DaySelector = ({ value, onChange, label, hint }: DaySelectorProps) => (
+    <div className="flex flex-col gap-2">
+        {label && (
+            <span className="text-sm font-medium text-secondary">{label}</span>
+        )}
+        <div className="flex flex-wrap gap-2">
+            {DAYS.map(({ key, label: dayLabel }) => {
+                const isSelected = !!value[key];
+                return (
+                    <button
+                        key={key}
+                        type="button"
+                        onClick={() => onChange({ ...value, [key]: !isSelected })}
+                        className={cx(
+                            "flex h-10 min-w-12 items-center justify-center rounded-full border px-4 text-sm font-semibold transition duration-100 ease-linear",
+                            isSelected
+                                ? "border-brand bg-brand-solid text-white hover:bg-brand-solid_hover"
+                                : "border-secondary bg-primary text-secondary hover:border-primary hover:bg-secondary_hover",
+                        )}
+                        aria-pressed={isSelected}
+                    >
+                        {dayLabel}
+                    </button>
+                );
+            })}
+        </div>
+        {hint && <span className="text-xs text-tertiary">{hint}</span>}
+    </div>
+);
+
+// Helper factories — use these instead of spelling out the empty
+// object literal everywhere.
+export const emptyDaySelection = (): DaySelection => ({
+    monday: false,
+    tuesday: false,
+    wednesday: false,
+    thursday: false,
+    friday: false,
+    saturday: false,
+    sunday: false,
+});
+
+// The default new-clinic state: Mon–Sat open, Sun closed. Matches the
+// typical Indian outpatient hospital schedule.
+export const defaultDaySelection = (): DaySelection => ({
+    monday: true,
+    tuesday: true,
+    wednesday: true,
+    thursday: true,
+    friday: true,
+    saturday: true,
+    sunday: false,
+});
+
+// Format a DaySelection as a compact human-readable string for list
+// pages (e.g. "Mon–Fri", "Mon–Sat", "Mon Wed Fri"). Collapses
+// consecutive selected days into ranges.
+export const formatDaySelection = (sel: DaySelection): string => {
+    const openKeys = DAYS.filter((d) => sel[d.key]).map((d) => d.label);
+    if (openKeys.length === 0) return "Closed";
+    if (openKeys.length === 7) return "Every day";
+    // Monday-Friday, Monday-Saturday shorthand
+    if (openKeys.length === 5 && openKeys.join(",") === "Mon,Tue,Wed,Thu,Fri") return "Mon–Fri";
+    if (openKeys.length === 6 && openKeys.join(",") === "Mon,Tue,Wed,Thu,Fri,Sat") return "Mon–Sat";
+    return openKeys.join(" ");
+};

src/components/application/pagination/pagination.tsx

@@ -1,11 +1,10 @@
 import type { FC } from "react";
 import { FontAwesomeIcon } from "@fortawesome/react-fontawesome";
 import { faArrowLeft, faArrowRight } from "@fortawesome/pro-duotone-svg-icons";
+import { Button } from "@/components/base/buttons/button";
 
 const ArrowLeft: FC<{ className?: string }> = ({ className }) => <FontAwesomeIcon icon={faArrowLeft} className={className} />;
 const ArrowRight: FC<{ className?: string }> = ({ className }) => <FontAwesomeIcon icon={faArrowRight} className={className} />;
-import { ButtonGroup, ButtonGroupItem } from "@/components/base/button-group/button-group";
-import { Button } from "@/components/base/buttons/button";
 import { useBreakpoint } from "@/hooks/use-breakpoint";
 import { cx } from "@/utils/cx";
 import type { PaginationRootProps } from "./pagination-base";
@@ -23,7 +22,7 @@ const PaginationItem = ({ value, rounded, isCurrent }: { value: number; rounded?
             isCurrent={isCurrent}
             className={({ isSelected }) =>
                 cx(
-                    "flex size-10 cursor-pointer items-center justify-center p-3 text-sm font-medium text-quaternary outline-focus-ring transition duration-100 ease-linear hover:bg-primary_hover hover:text-secondary focus-visible:z-10 focus-visible:bg-primary_hover focus-visible:outline-2 focus-visible:outline-offset-2",
+                    "flex size-9 cursor-pointer items-center justify-center p-3 text-sm font-medium text-quaternary outline-focus-ring transition duration-100 ease-linear hover:bg-primary_hover hover:text-secondary focus-visible:z-10 focus-visible:bg-primary_hover focus-visible:outline-2 focus-visible:outline-offset-2",
                     rounded ? "rounded-full" : "rounded-lg",
                     isSelected && "bg-primary_hover text-secondary",
                 )
@@ -34,43 +33,6 @@ const PaginationItem = ({ value, rounded, isCurrent }: { value: number; rounded?
     );
 };
 
-interface MobilePaginationProps {
-    /** The current page. */
-    page?: number;
-    /** The total number of pages. */
-    total?: number;
-    /** The class name of the pagination component. */
-    className?: string;
-    /** The function to call when the page changes. */
-    onPageChange?: (page: number) => void;
-}
-
-const MobilePagination = ({ page = 1, total = 10, className, onPageChange }: MobilePaginationProps) => {
-    return (
-        <nav aria-label="Pagination" className={cx("flex items-center justify-between md:hidden", className)}>
-            <Button
-                aria-label="Go to previous page"
-                iconLeading={ArrowLeft}
-                color="secondary"
-                size="sm"
-                onClick={() => onPageChange?.(Math.max(0, page - 1))}
-            />
-
-            <span className="text-sm text-fg-secondary">
-                Page <span className="font-medium">{page}</span> of <span className="font-medium">{total}</span>
-            </span>
-
-            <Button
-                aria-label="Go to next page"
-                iconLeading={ArrowRight}
-                color="secondary"
-                size="sm"
-                onClick={() => onPageChange?.(Math.min(total, page + 1))}
-            />
-        </nav>
-    );
-};
-
 export const PaginationPageDefault = ({ rounded, page = 1, total = 10, className, ...props }: PaginationProps) => {
     const isDesktop = useBreakpoint("md");
 
@@ -84,7 +46,7 @@ export const PaginationPageDefault = ({ rounded, page = 1, total = 10, className
             <div className="hidden flex-1 justify-start md:flex">
                 <Pagination.PrevTrigger asChild>
                     <Button iconLeading={ArrowLeft} color="link-gray" size="sm">
-                        {isDesktop ? "Previous" : undefined}{" "}
+                        {isDesktop ? "Previous" : undefined}
                     </Button>
                 </Pagination.PrevTrigger>
             </div>
@@ -103,7 +65,7 @@ export const PaginationPageDefault = ({ rounded, page = 1, total = 10, className
                                 page.type === "page" ? (
                                     <PaginationItem key={index} rounded={rounded} {...page} />
                                 ) : (
-                                    <Pagination.Ellipsis key={index} className="flex size-10 shrink-0 items-center justify-center text-tertiary">
+                                    <Pagination.Ellipsis key={index} className="flex size-9 shrink-0 items-center justify-center text-tertiary">
                                         &#8230;
                                     </Pagination.Ellipsis>
                                 ),
@@ -159,7 +121,7 @@ export const PaginationPageMinimalCenter = ({ rounded, page = 1, total = 10, cla
                                 page.type === "page" ? (
                                     <PaginationItem key={index} rounded={rounded} {...page} />
                                 ) : (
-                                    <Pagination.Ellipsis key={index} className="flex size-10 shrink-0 items-center justify-center text-tertiary">
+                                    <Pagination.Ellipsis key={index} className="flex size-9 shrink-0 items-center justify-center text-tertiary">
                                         &#8230;
                                     </Pagination.Ellipsis>
                                 ),
@@ -210,7 +172,7 @@ export const PaginationCardDefault = ({ rounded, page = 1, total = 10, ...props
                                 page.type === "page" ? (
                                     <PaginationItem key={index} rounded={rounded} {...page} />
                                 ) : (
-                                    <Pagination.Ellipsis key={index} className="flex size-10 shrink-0 items-center justify-center text-tertiary">
+                                    <Pagination.Ellipsis key={index} className="flex size-9 shrink-0 items-center justify-center text-tertiary">
                                         &#8230;
                                     </Pagination.Ellipsis>
                                 ),
@@ -235,99 +197,3 @@ export const PaginationCardDefault = ({ rounded, page = 1, total = 10, ...props
     );
 };
 
-interface PaginationCardMinimalProps {
-    /** The current page. */
-    page?: number;
-    /** The total number of pages. */
-    total?: number;
-    /** The alignment of the pagination. */
-    align?: "left" | "center" | "right";
-    /** The class name of the pagination component. */
-    className?: string;
-    /** The function to call when the page changes. */
-    onPageChange?: (page: number) => void;
-}
-
-export const PaginationCardMinimal = ({ page = 1, total = 10, align = "left", onPageChange, className }: PaginationCardMinimalProps) => {
-    return (
-        <div className={cx("border-t border-secondary px-4 py-3 md:px-6 md:pt-3 md:pb-4", className)}>
-            <MobilePagination page={page} total={total} onPageChange={onPageChange} />
-
-            <nav aria-label="Pagination" className={cx("hidden items-center gap-3 md:flex", align === "center" && "justify-between")}>
-                <div className={cx(align === "center" && "flex flex-1 justify-start")}>
-                    <Button isDisabled={page === 1} color="secondary" size="sm" onClick={() => onPageChange?.(Math.max(0, page - 1))}>
-                        Previous
-                    </Button>
-                </div>
-
-                <span
-                    className={cx(
-                        "text-sm font-medium text-fg-secondary",
-                        align === "right" && "order-first mr-auto",
-                        align === "left" && "order-last ml-auto",
-                    )}
-                >
-                    Page {page} of {total}
-                </span>
-
-                <div className={cx(align === "center" && "flex flex-1 justify-end")}>
-                    <Button isDisabled={page === total} color="secondary" size="sm" onClick={() => onPageChange?.(Math.min(total, page + 1))}>
-                        Next
-                    </Button>
-                </div>
-            </nav>
-        </div>
-    );
-};
-
-interface PaginationButtonGroupProps extends Partial<Omit<PaginationRootProps, "children">> {
-    /** The alignment of the pagination. */
-    align?: "left" | "center" | "right";
-}
-
-export const PaginationButtonGroup = ({ align = "left", page = 1, total = 10, ...props }: PaginationButtonGroupProps) => {
-    const isDesktop = useBreakpoint("md");
-
-    return (
-        <div
-            className={cx(
-                "flex border-t border-secondary px-4 py-3 md:px-6 md:pt-3 md:pb-4",
-                align === "left" && "justify-start",
-                align === "center" && "justify-center",
-                align === "right" && "justify-end",
-            )}
-        >
-            <Pagination.Root {...props} page={page} total={total}>
-                <Pagination.Context>
-                    {({ pages }) => (
-                        <ButtonGroup size="md">
-                            <Pagination.PrevTrigger asChild>
-                                <ButtonGroupItem iconLeading={ArrowLeft}>{isDesktop ? "Previous" : undefined}</ButtonGroupItem>
-                            </Pagination.PrevTrigger>
-
-                            {pages.map((page, index) =>
-                                page.type === "page" ? (
-                                    <Pagination.Item key={index} {...page} asChild>
-                                        <ButtonGroupItem isSelected={page.isCurrent} className="size-10 items-center justify-center">
-                                            {page.value}
-                                        </ButtonGroupItem>
-                                    </Pagination.Item>
-                                ) : (
-                                    <Pagination.Ellipsis key={index}>
-                                        <ButtonGroupItem className="pointer-events-none size-10 items-center justify-center rounded-none!">
-                                            &#8230;
-                                        </ButtonGroupItem>
-                                    </Pagination.Ellipsis>
-                                ),
-                            )}
-
-                            <Pagination.NextTrigger asChild>
-                                <ButtonGroupItem iconTrailing={ArrowRight}>{isDesktop ? "Next" : undefined}</ButtonGroupItem>
-                            </Pagination.NextTrigger>
-                        </ButtonGroup>
-                    )}
-                </Pagination.Context>
-            </Pagination.Root>
-        </div>
-    );
-};

src/components/application/slideout-menus/slideout-menu.tsx

@@ -16,7 +16,7 @@ export const ModalOverlay = (props: ModalOverlayProps) => {
             {...props}
             className={(state) =>
                 cx(
-                    "fixed inset-0 flex min-h-dvh w-full items-center justify-end bg-overlay/70 pl-6 outline-hidden ease-linear md:pl-10",
+                    "fixed inset-0 z-50 flex min-h-dvh w-full items-center justify-end bg-overlay/70 pl-6 outline-hidden ease-linear md:pl-10",
                     state.isEntering && "duration-300 animate-in fade-in",
                     state.isExiting && "duration-500 animate-out fade-out",
                     typeof props.className === "function" ? props.className(state) : props.className,
@@ -81,7 +81,7 @@ const Menu = ({ children, dialogClassName, ...props }: SlideoutMenuProps) => {
 Menu.displayName = "SlideoutMenu";
 
 const Content = ({ role = "main", ...props }: ComponentPropsWithRef<"div">) => {
-    return <div role={role} {...props} className={cx("flex size-full flex-col gap-6 overflow-y-auto overscroll-auto px-4 md:px-6", props.className)} />;
+    return <div role={role} {...props} className={cx("flex flex-1 min-h-0 flex-col gap-6 overflow-y-auto overscroll-auto px-4 md:px-6", props.className)} />;
 };
 Content.displayName = "SlideoutContent";
 

src/components/application/table/column-toggle.tsx

@@ -0,0 +1,93 @@
+import { useState, useRef, useEffect } from 'react';
+import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
+import { faColumns3 } from '@fortawesome/pro-duotone-svg-icons';
+import { Button } from '@/components/base/buttons/button';
+import type { FC } from 'react';
+
+const ColumnsIcon: FC<{ className?: string }> = ({ className }) => (
+    <FontAwesomeIcon icon={faColumns3} className={className} />
+);
+
+export type ColumnDef = {
+    id: string;
+    label: string;
+    defaultVisible?: boolean;
+};
+
+interface ColumnToggleProps {
+    columns: ColumnDef[];
+    visibleColumns: Set<string>;
+    onToggle: (columnId: string) => void;
+}
+
+export const ColumnToggle = ({ columns, visibleColumns, onToggle }: ColumnToggleProps) => {
+    const [open, setOpen] = useState(false);
+    const panelRef = useRef<HTMLDivElement>(null);
+
+    useEffect(() => {
+        if (!open) return;
+        const handler = (e: MouseEvent) => {
+            if (panelRef.current && !panelRef.current.contains(e.target as Node)) {
+                setOpen(false);
+            }
+        };
+        document.addEventListener('mousedown', handler);
+        return () => document.removeEventListener('mousedown', handler);
+    }, [open]);
+
+    return (
+        <div className="relative" ref={panelRef}>
+            <Button
+                size="sm"
+                color="secondary"
+                iconLeading={ColumnsIcon}
+                onClick={() => setOpen(!open)}
+            >
+                Columns
+            </Button>
+
+            {open && (
+                <div className="absolute top-full right-0 mt-2 w-56 rounded-xl bg-primary shadow-xl ring-1 ring-secondary z-50 overflow-hidden">
+                    <div className="px-3 py-2 border-b border-secondary">
+                        <span className="text-xs font-semibold text-tertiary">Show/Hide Columns</span>
+                    </div>
+                    <div className="max-h-64 overflow-y-auto py-1">
+                        {columns.map(col => (
+                            <button
+                                key={col.id}
+                                type="button"
+                                onClick={(e) => { e.stopPropagation(); onToggle(col.id); }}
+                                className="flex w-full items-center gap-2 px-3 py-1.5 text-xs text-primary hover:bg-primary_hover cursor-pointer text-left"
+                            >
+                                <span className={`flex size-4 shrink-0 items-center justify-center rounded border ${visibleColumns.has(col.id) ? 'bg-brand-solid border-brand text-white' : 'border-primary bg-primary'}`}>
+                                    {visibleColumns.has(col.id) && <span className="text-[10px]">✓</span>}
+                                </span>
+                                {col.label}
+                            </button>
+                        ))}
+                    </div>
+                </div>
+            )}
+        </div>
+    );
+};
+
+export const useColumnVisibility = (columns: ColumnDef[]) => {
+    const [visibleColumns, setVisibleColumns] = useState<Set<string>>(() => {
+        return new Set(columns.filter(c => c.defaultVisible !== false).map(c => c.id));
+    });
+
+    const toggle = (columnId: string) => {
+        setVisibleColumns(prev => {
+            const next = new Set(prev);
+            if (next.has(columnId)) {
+                next.delete(columnId);
+            } else {
+                next.add(columnId);
+            }
+            return next;
+        });
+    };
+
+    return { visibleColumns, toggle };
+};

src/components/application/table/dynamic-table.tsx

@@ -0,0 +1,63 @@
+import type { ReactNode } from 'react';
+import { TableBody as AriaTableBody } from 'react-aria-components';
+import { Table } from './table';
+
+export type DynamicColumn = {
+    id: string;
+    label: string;
+    headerRenderer?: () => ReactNode;
+    width?: string;
+};
+
+export type DynamicRow = {
+    id: string;
+    [key: string]: any;
+};
+
+interface DynamicTableProps<T extends DynamicRow> {
+    columns: DynamicColumn[];
+    rows: T[];
+    renderCell: (row: T, columnId: string) => ReactNode;
+    rowClassName?: (row: T) => string;
+    size?: 'sm' | 'md';
+    maxRows?: number;
+    className?: string;
+}
+
+export const DynamicTable = <T extends DynamicRow>({
+    columns,
+    rows,
+    renderCell,
+    rowClassName,
+    size = 'sm',
+    maxRows,
+    className,
+}: DynamicTableProps<T>) => {
+    const displayRows = maxRows ? rows.slice(0, maxRows) : rows;
+
+    return (
+        <Table size={size} aria-label="Dynamic table" className={className}>
+            <Table.Header>
+                {columns.map(col => (
+                    <Table.Head key={col.id} id={col.id} label={col.headerRenderer ? '' : col.label}>
+                        {col.headerRenderer?.()}
+                    </Table.Head>
+                ))}
+            </Table.Header>
+            <AriaTableBody items={displayRows}>
+                {(row) => (
+                    <Table.Row
+                        id={row.id}
+                        className={rowClassName?.(row)}
+                    >
+                        {columns.map(col => (
+                            <Table.Cell key={col.id}>
+                                {renderCell(row, col.id)}
+                            </Table.Cell>
+                        ))}
+                    </Table.Row>
+                )}
+            </AriaTableBody>
+        </Table>
+    );
+};

src/components/application/table/table.tsx

@@ -17,7 +17,9 @@ import {
     Cell as AriaCell,
     Collection as AriaCollection,
     Column as AriaColumn,
+    ColumnResizer as AriaColumnResizer,
     Group as AriaGroup,
+    ResizableTableContainer as AriaResizableTableContainer,
     Row as AriaRow,
     Table as AriaTable,
     TableBody as AriaTableBody,
@@ -55,7 +57,7 @@ const TableContext = createContext<{ size: "sm" | "md" }>({ size: "md" });
 const TableCardRoot = ({ children, className, size = "md", ...props }: HTMLAttributes<HTMLDivElement> & { size?: "sm" | "md" }) => {
     return (
         <TableContext.Provider value={{ size }}>
-            <div {...props} className={cx("overflow-hidden rounded-xl bg-primary shadow-xs ring-1 ring-secondary", className)}>
+            <div {...props} className={cx("flex flex-col overflow-hidden rounded-xl bg-primary shadow-xs ring-1 ring-secondary", className)}>
                 {children}
             </div>
         </TableContext.Provider>
@@ -81,7 +83,7 @@ const TableCardHeader = ({ title, badge, description, contentTrailing, className
     return (
         <div
             className={cx(
-                "relative flex flex-col items-start gap-4 border-b border-secondary bg-primary px-4 md:flex-row",
+                "relative shrink-0 flex flex-col items-start gap-4 border-b border-secondary bg-primary px-4 md:flex-row",
                 size === "sm" ? "py-4 md:px-5" : "py-5 md:px-6",
                 className,
             )}
@@ -115,9 +117,9 @@ const TableRoot = ({ className, size = "md", ...props }: TableRootProps) => {
 
     return (
         <TableContext.Provider value={{ size: context?.size ?? size }}>
-            <div className="overflow-x-auto">
-                <AriaTable className={(state) => cx("w-full overflow-x-hidden", typeof className === "function" ? className(state) : className)} {...props} />
-            </div>
+            <AriaResizableTableContainer className="flex-1 overflow-auto min-h-0">
+                <AriaTable className={(state) => cx("w-full", typeof className === "function" ? className(state) : className)} {...props} />
+            </AriaResizableTableContainer>
         </TableContext.Provider>
     );
 };
@@ -138,7 +140,7 @@ const TableHeader = <T extends object>({ columns, children, bordered = true, cla
             {...props}
             className={(state) =>
                 cx(
-                    "relative bg-secondary",
+                    "relative bg-secondary sticky top-0 z-10",
                     size === "sm" ? "h-9" : "h-11",
 
                     // Row border—using an "after" pseudo-element to avoid the border taking up space.
@@ -168,9 +170,10 @@ TableHeader.displayName = "TableHeader";
 interface TableHeadProps extends AriaColumnProps, Omit<ThHTMLAttributes<HTMLTableCellElement>, "children" | "className" | "style" | "id"> {
     label?: string;
     tooltip?: string;
+    resizable?: boolean;
 }
 
-const TableHead = ({ className, tooltip, label, children, ...props }: TableHeadProps) => {
+const TableHead = ({ className, tooltip, label, children, resizable = true, ...props }: TableHeadProps) => {
     const { selectionBehavior } = useTableOptions();
 
     return (
@@ -186,8 +189,8 @@ const TableHead = ({ className, tooltip, label, children, ...props }: TableHeadP
             }
         >
             {(state) => (
-                <AriaGroup className="flex items-center gap-1">
-                    <div className="flex items-center gap-1">
+                <AriaGroup className="flex items-center gap-1" role="presentation">
+                    <div className="flex flex-1 items-center gap-1 truncate">
                         {label && <span className="text-xs font-semibold whitespace-nowrap text-quaternary">{label}</span>}
                         {typeof children === "function" ? children(state) : children}
                     </div>
@@ -206,6 +209,12 @@ const TableHead = ({ className, tooltip, label, children, ...props }: TableHeadP
                         ) : (
                             <FontAwesomeIcon icon={faSort} className="text-fg-quaternary" />
                         ))}
+
+                    {resizable && (
+                        <AriaColumnResizer
+                            className="absolute right-0 top-1 bottom-1 w-[3px] rounded-full bg-tertiary cursor-col-resize touch-none hover:bg-brand-solid focus-visible:bg-brand-solid transition-colors duration-100"
+                        />
+                    )}
                 </AriaGroup>
             )}
         </AriaColumn>

src/components/base/avatar/avatar-label-group.tsx

@@ -20,8 +20,8 @@ export const AvatarLabelGroup = ({ title, subtitle, className, ...props }: Avata
         <figure className={cx("group flex min-w-0 flex-1 items-center", styles[props.size].root, className)}>
             <Avatar {...props} />
             <figcaption className="min-w-0 flex-1">
-                <p className={cx("text-primary", styles[props.size].title)}>{title}</p>
-                <p className={cx("truncate text-tertiary", styles[props.size].subtitle)}>{subtitle}</p>
+                <p className={cx("text-white", styles[props.size].title)}>{title}</p>
+                <p className={cx("truncate text-white opacity-70", styles[props.size].subtitle)}>{subtitle}</p>
             </figcaption>
         </figure>
     );

src/components/base/avatar/base-components/avatar-count.tsx

@@ -0,0 +1,14 @@
+import { cx } from "@/utils/cx";
+
+interface AvatarCountProps {
+    count: number;
+    className?: string;
+}
+
+export const AvatarCount = ({ count, className }: AvatarCountProps) => (
+    <div className={cx("absolute right-0 bottom-0 p-px", className)}>
+        <div className="flex size-3.5 items-center justify-center rounded-full bg-fg-error-primary text-center text-[10px] leading-[13px] font-bold text-white">
+            {count}
+        </div>
+    </div>
+);

src/components/base/pin-input/pin-input.tsx

@@ -65,7 +65,7 @@ const Group = ({ inputClassName, containerClassName, width, maxLength = 4, ...pr
             aria-label="Enter your pin"
             aria-labelledby={"pin-input-label-" + id}
             aria-describedby={"pin-input-description-" + id}
-            containerClassName={cx("flex flex-row gap-3", size === "sm" && "gap-2", heights[size], containerClassName)}
+            containerClassName={cx("flex flex-row items-center gap-3", size === "sm" && "gap-2", heights[size], containerClassName)}
             className={cx("w-full! disabled:cursor-not-allowed", inputClassName)}
         />
     );
@@ -115,8 +115,8 @@ const FakeCaret = ({ size = "md" }: { size?: "sm" | "md" | "lg" }) => {
 
 const Separator = (props: ComponentPropsWithRef<"p">) => {
     return (
-        <div role="separator" {...props} className={cx("text-center text-display-xl font-medium text-placeholder_subtle", props.className)}>
-            -
+        <div role="separator" {...props} className={cx("flex items-center justify-center text-lg text-placeholder_subtle", props.className)}>
+            –
         </div>
     );
 };

src/components/base/select/select-shared.tsx

@@ -0,0 +1,49 @@
+import type { FC, ReactNode } from "react";
+import { createContext } from "react";
+
+export type SelectItemType = {
+    /** Unique identifier for the item. */
+    id: string | number;
+    /** The primary display text. */
+    label?: string;
+    /** Avatar image URL. */
+    avatarUrl?: string;
+    /** Whether the item is disabled. */
+    isDisabled?: boolean;
+    /** Secondary text displayed alongside the label. */
+    supportingText?: string;
+    /** Leading icon component or element. */
+    icon?: FC | ReactNode;
+};
+
+export interface CommonProps {
+    /** Helper text displayed below the input. */
+    hint?: string;
+    /** Field label displayed above the input. */
+    label?: string;
+    /** Tooltip text for the help icon next to the label. */
+    tooltip?: string;
+    /**
+     * The size of the component.
+     * @default "md"
+     */
+    size?: "sm" | "md" | "lg";
+    /** Placeholder text when no value is selected. */
+    placeholder?: string;
+    /** Whether to hide the required indicator from the label. */
+    hideRequiredIndicator?: boolean;
+}
+
+export const sizes = {
+    sm: {
+        root: "py-2 pl-3 pr-2.5 gap-2 *:data-icon:size-4 *:data-icon:stroke-[2.25px]",
+        withIcon: "",
+        text: "text-sm",
+        textContainer: "gap-x-1.5",
+        shortcut: "pr-2.5",
+    },
+    md: { root: "py-2 px-3 gap-2 *:data-icon:size-5", withIcon: "", text: "text-md", textContainer: "gap-x-1.5", shortcut: "pr-2.5" },
+    lg: { root: "py-2.5 px-3.5 gap-2 *:data-icon:size-5", withIcon: "", text: "text-md", textContainer: "gap-x-1.5", shortcut: "pr-3" },
+};
+
+export const SelectContext = createContext<{ size: "sm" | "md" | "lg" }>({ size: "md" });

src/components/call-desk/active-call-card.tsx

@@ -1,8 +1,8 @@
-import { useState, useRef } from 'react';
+import { useState, useRef, useEffect } from 'react';
 import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
 import {
     faPhone, faPhoneHangup, faMicrophone, faMicrophoneSlash,
-    faPause, faPlay, faCalendarPlus, faCheckCircle,
+    faPause, faPlay, faCalendarPlus,
     faPhoneArrowRight, faRecordVinyl, faClipboardQuestion,
 } from '@fortawesome/pro-duotone-svg-icons';
 import { Button } from '@/components/base/buttons/button';
@@ -11,18 +11,17 @@ import { useSetAtom } from 'jotai';
 import { sipCallStateAtom, sipCallerNumberAtom, sipCallUcidAtom } from '@/state/sip-state';
 import { setOutboundPending } from '@/state/sip-manager';
 import { useSip } from '@/providers/sip-provider';
-import { DispositionForm } from './disposition-form';
+import { DispositionModal } from './disposition-modal';
 import { AppointmentForm } from './appointment-form';
 import { TransferDialog } from './transfer-dialog';
 import { EnquiryForm } from './enquiry-form';
 import { formatPhone } from '@/lib/format';
 import { apiClient } from '@/lib/api-client';
+import { useAuth } from '@/providers/auth-provider';
 import { cx } from '@/utils/cx';
 import { notify } from '@/lib/toast';
 import type { Lead, CallDisposition } from '@/types/entities';
 
-type PostCallStage = 'disposition' | 'appointment' | 'follow-up' | 'done';
-
 interface ActiveCallCardProps {
     lead: Lead | null;
     callerPhone: string;
@@ -37,22 +36,46 @@ const formatDuration = (seconds: number): string => {
 };
 
 export const ActiveCallCard = ({ lead, callerPhone, missedCallId, onCallComplete }: ActiveCallCardProps) => {
+    const { user } = useAuth();
     const { callState, callDuration, callUcid, isMuted, isOnHold, answer, reject, hangup, toggleMute, toggleHold } = useSip();
     const setCallState = useSetAtom(sipCallStateAtom);
     const setCallerNumber = useSetAtom(sipCallerNumberAtom);
     const setCallUcid = useSetAtom(sipCallUcidAtom);
-    const [postCallStage, setPostCallStage] = useState<PostCallStage | null>(null);
-    const [savedDisposition, setSavedDisposition] = useState<CallDisposition | null>(null);
     const [appointmentOpen, setAppointmentOpen] = useState(false);
-    const [appointmentBookedDuringCall, setAppointmentBookedDuringCall] = useState(false);
     const [transferOpen, setTransferOpen] = useState(false);
     const [recordingPaused, setRecordingPaused] = useState(false);
     const [enquiryOpen, setEnquiryOpen] = useState(false);
-    // Capture direction at mount — survives through disposition stage
+    const [dispositionOpen, setDispositionOpen] = useState(false);
+    const [callerDisconnected, setCallerDisconnected] = useState(false);
+    const [suggestedDisposition, setSuggestedDisposition] = useState<CallDisposition | null>(null);
+
     const callDirectionRef = useRef(callState === 'ringing-out' ? 'OUTBOUND' : 'INBOUND');
-    // Track if the call was ever answered (reached 'active' state)
     const wasAnsweredRef = useRef(callState === 'active');
 
+    useEffect(() => {
+        console.log(`[ACTIVE-CALL-CARD] Mounted: state=${callState} direction=${callDirectionRef.current} ucid=${callUcid ?? 'none'} lead=${lead?.id ?? 'none'} phone=${callerPhone}`);
+    }, []); // eslint-disable-line react-hooks/exhaustive-deps
+
+    // Sync UCID to localStorage so sendBeacon can fire auto-dispose on page refresh.
+    // Cleared on disposition submit (handleDisposition below) or when call resets to idle.
+    useEffect(() => {
+        if (callUcid) {
+            localStorage.setItem('helix_active_ucid', callUcid);
+        }
+        return () => {
+            // Don't clear on unmount if disposition hasn't fired — the
+            // beforeunload handler in SipProvider needs it
+        };
+    }, [callUcid]);
+
+    // Detect caller disconnect: call was active and ended without agent pressing End
+    useEffect(() => {
+        if (wasAnsweredRef.current && !dispositionOpen && (callState === 'ended' || callState === 'failed')) {
+            setCallerDisconnected(true);
+            setDispositionOpen(true);
+        }
+    }, [callState, dispositionOpen]);
+
     const firstName = lead?.contactName?.firstName ?? '';
     const lastName = lead?.contactName?.lastName ?? '';
     const fullName = `${firstName} ${lastName}`.trim();
@@ -60,28 +83,35 @@ export const ActiveCallCard = ({ lead, callerPhone, missedCallId, onCallComplete
     const phoneDisplay = phone ? formatPhone(phone) : callerPhone || 'Unknown';
 
     const handleDisposition = async (disposition: CallDisposition, notes: string) => {
-        setSavedDisposition(disposition);
+        // Hangup if still connected
+        if (callState === 'active' || callState === 'ringing-out' || callState === 'ringing-in') {
+            hangup();
+        }
 
-        // Submit disposition to sidecar — handles Ozonetel ACW release
+        // Submit disposition to sidecar
         if (callUcid) {
-            apiClient.post('/api/ozonetel/dispose', {
+            const agentCfg = JSON.parse(localStorage.getItem('helix_agent_config') ?? '{}');
+            const disposePayload = {
                 ucid: callUcid,
                 disposition,
+                agentId: agentCfg.ozonetelAgentId,
                 callerPhone,
                 direction: callDirectionRef.current,
                 durationSec: callDuration,
                 leadId: lead?.id ?? null,
                 notes,
                 missedCallId: missedCallId ?? undefined,
-            }).catch((err) => console.warn('Disposition failed:', err));
+            };
+            console.log('[DISPOSE] Sending disposition:', JSON.stringify(disposePayload));
+            apiClient.post('/api/ozonetel/dispose', disposePayload)
+                .then((res) => console.log('[DISPOSE] Response:', JSON.stringify(res)))
+                .catch((err) => console.error('[DISPOSE] Failed:', err));
+        } else {
+            console.warn('[DISPOSE] No callUcid — skipping disposition');
         }
 
-        if (disposition === 'APPOINTMENT_BOOKED') {
-            setPostCallStage('appointment');
-            setAppointmentOpen(true);
-        } else if (disposition === 'FOLLOW_UP_SCHEDULED') {
-            setPostCallStage('follow-up');
-            // Create follow-up
+        // Side effects
+        if (disposition === 'FOLLOW_UP_SCHEDULED') {
             try {
                 await apiClient.graphql(`mutation($data: FollowUpCreateInput!) { createFollowUp(data: $data) { id } }`, {
                     data: {
@@ -97,27 +127,24 @@ export const ActiveCallCard = ({ lead, callerPhone, missedCallId, onCallComplete
             } catch {
                 notify.info('Follow-up', 'Could not auto-create follow-up');
             }
-            setPostCallStage('done');
-        } else {
-            notify.success('Call Logged', `Disposition: ${disposition.replace(/_/g, ' ').toLowerCase()}`);
-            setPostCallStage('done');
         }
+
+        // Clear persisted UCID — disposition was submitted, no need for sendBeacon fallback
+        localStorage.removeItem('helix_active_ucid');
+
+        notify.success('Call Logged', `Disposition: ${disposition.replace(/_/g, ' ').toLowerCase()}`);
+        handleReset();
     };
 
     const handleAppointmentSaved = () => {
         setAppointmentOpen(false);
+        setSuggestedDisposition('APPOINTMENT_BOOKED');
         notify.success('Appointment Booked', 'Payment link will be sent to the patient');
-        // If booked during active call, don't skip to 'done' — wait for disposition after call ends
-        if (callState === 'active') {
-            setAppointmentBookedDuringCall(true);
-        } else {
-            setPostCallStage('done');
-        }
     };
 
     const handleReset = () => {
-        setPostCallStage(null);
-        setSavedDisposition(null);
+        setDispositionOpen(false);
+        setCallerDisconnected(false);
         setCallState('idle');
         setCallerNumber(null);
         setCallUcid(null);
@@ -125,7 +152,7 @@ export const ActiveCallCard = ({ lead, callerPhone, missedCallId, onCallComplete
         onCallComplete?.();
     };
 
-    // Outbound ringing — agent initiated the call
+    // Outbound ringing
     if (callState === 'ringing-out') {
         return (
             <div className="rounded-xl bg-brand-primary p-4">
@@ -144,7 +171,7 @@ export const ActiveCallCard = ({ lead, callerPhone, missedCallId, onCallComplete
                 </div>
                 <div className="mt-3 flex gap-2">
                     <Button size="sm" color="primary-destructive" onClick={() => { hangup(); handleReset(); }}>
-                        End Call
+                        Cancel
                     </Button>
                 </div>
             </div>
@@ -176,8 +203,8 @@ export const ActiveCallCard = ({ lead, callerPhone, missedCallId, onCallComplete
         );
     }
 
-    // Skip disposition for unanswered calls (ringing-in → ended without ever reaching active)
-    if (!wasAnsweredRef.current && postCallStage === null && (callState === 'ended' || callState === 'failed')) {
+    // Unanswered call (ringing → ended without ever reaching active)
+    if (!wasAnsweredRef.current && (callState === 'ended' || callState === 'failed')) {
         return (
             <div className="rounded-xl border border-secondary bg-primary p-4 text-center">
                 <FontAwesomeIcon icon={faPhoneHangup} className="size-6 text-fg-quaternary mb-2" />
@@ -190,70 +217,14 @@ export const ActiveCallCard = ({ lead, callerPhone, missedCallId, onCallComplete
         );
     }
 
-    // Post-call flow takes priority over active state (handles race between hangup + SIP ended event)
-    if (postCallStage !== null || callState === 'ended' || callState === 'failed') {
-        // Done state
-        if (postCallStage === 'done') {
-            return (
-                <div className="rounded-xl border border-success bg-success-primary p-4 text-center">
-                    <FontAwesomeIcon icon={faCheckCircle} className="size-8 text-fg-success-primary mb-2" />
-                    <p className="text-sm font-semibold text-success-primary">Call Completed</p>
-                    <p className="text-xs text-tertiary mt-1">
-                        {savedDisposition ? savedDisposition.replace(/_/g, ' ').toLowerCase() : 'logged'}
-                    </p>
-                    <Button size="sm" color="secondary" className="mt-3" onClick={handleReset}>
-                        Back to Worklist
-                    </Button>
-                </div>
-            );
-        }
-
-        // Appointment booking after disposition
-        if (postCallStage === 'appointment') {
-            return (
-                <>
-                    <div className="rounded-xl border border-brand bg-brand-primary p-4 text-center">
-                        <FontAwesomeIcon icon={faCalendarPlus} className="size-6 text-fg-brand-primary mb-2" />
-                        <p className="text-sm font-semibold text-brand-secondary">Booking Appointment</p>
-                        <p className="text-xs text-tertiary mt-1">for {fullName || phoneDisplay}</p>
-                    </div>
-                    <AppointmentForm
-                        isOpen={appointmentOpen}
-                        onOpenChange={(open) => {
-                            setAppointmentOpen(open);
-                            if (!open) setPostCallStage('done');
-                        }}
-                        callerNumber={callerPhone}
-                        leadName={fullName || null}
-                        leadId={lead?.id ?? null}
-                        onSaved={handleAppointmentSaved}
-                    />
-                </>
-            );
-        }
-
-        // Disposition form
-        return (
-            <div className="rounded-xl border border-secondary bg-primary p-4">
-                <div className="flex items-center gap-2 mb-3">
-                    <div className="flex size-8 items-center justify-center rounded-full bg-secondary">
-                        <FontAwesomeIcon icon={faPhoneHangup} className="size-3.5 text-fg-quaternary" />
-                    </div>
-                    <div>
-                        <p className="text-sm font-semibold text-primary">Call Ended — {fullName || phoneDisplay}</p>
-                        <p className="text-xs text-tertiary">{formatDuration(callDuration)} · Log this call</p>
-                    </div>
-                </div>
-                <DispositionForm onSubmit={handleDisposition} defaultDisposition={appointmentBookedDuringCall ? 'APPOINTMENT_BOOKED' : null} />
-            </div>
-        );
-    }
-
     // Active call
-    if (callState === 'active') {
+    if (callState === 'active' || dispositionOpen) {
         wasAnsweredRef.current = true;
         return (
-            <div className="rounded-xl border border-brand bg-primary p-4">
+            <>
+                <div className={cx('flex flex-col rounded-xl border border-brand bg-primary overflow-hidden', (appointmentOpen || enquiryOpen || transferOpen) && 'flex-1 min-h-0')}>
+                    {/* Pinned: caller info + controls */}
+                    <div className="shrink-0 p-4">
                         <div className="flex items-center justify-between">
                             <div className="flex items-center gap-3">
                                 <div className="flex size-10 items-center justify-center rounded-full bg-success-solid">
@@ -266,8 +237,9 @@ export const ActiveCallCard = ({ lead, callerPhone, missedCallId, onCallComplete
                             </div>
                             <Badge size="md" color="success" type="pill-color">{formatDuration(callDuration)}</Badge>
                         </div>
-                <div className="mt-3 flex items-center gap-1.5">
-                    {/* Icon-only toggles */}
+
+                        {/* Call controls */}
+                        <div className="mt-3 flex items-center gap-1.5 flex-wrap">
                             <button
                                 onClick={toggleMute}
                                 title={isMuted ? 'Unmute' : 'Mute'}
@@ -305,55 +277,84 @@ export const ActiveCallCard = ({ lead, callerPhone, missedCallId, onCallComplete
 
                             <div className="w-px h-6 bg-secondary mx-0.5" />
 
-                    {/* Text+Icon primary actions */}
-                    <Button size="sm" color="secondary"
+                            <Button size="sm" color={appointmentOpen ? 'primary' : 'secondary'}
                                 iconLeading={({ className, ...rest }: any) => <FontAwesomeIcon icon={faCalendarPlus} className={className} {...rest} />}
-                        onClick={() => setAppointmentOpen(true)}>Book Appt</Button>
-                    <Button size="sm" color="secondary"
+                                onClick={() => { setAppointmentOpen(!appointmentOpen); setEnquiryOpen(false); setTransferOpen(false); }}>Book Appt</Button>
+                            <Button size="sm" color={enquiryOpen ? 'primary' : 'secondary'}
                                 iconLeading={({ className, ...rest }: any) => <FontAwesomeIcon icon={faClipboardQuestion} className={className} {...rest} />}
-                        onClick={() => setEnquiryOpen(!enquiryOpen)}>Enquiry</Button>
-                    <Button size="sm" color="secondary"
+                                onClick={() => { setEnquiryOpen(!enquiryOpen); setAppointmentOpen(false); setTransferOpen(false); }}>Enquiry</Button>
+                            <Button size="sm" color={transferOpen ? 'primary' : 'secondary'}
                                 iconLeading={({ className, ...rest }: any) => <FontAwesomeIcon icon={faPhoneArrowRight} className={className} {...rest} />}
-                        onClick={() => setTransferOpen(!transferOpen)}>Transfer</Button>
+                                onClick={() => { setTransferOpen(!transferOpen); setAppointmentOpen(false); setEnquiryOpen(false); }}>Transfer</Button>
+
                             <Button size="sm" color="primary-destructive" className="ml-auto"
                                 iconLeading={({ className, ...rest }: any) => <FontAwesomeIcon icon={faPhoneHangup} className={className} {...rest} />}
-                        onClick={() => { hangup(); setPostCallStage('disposition'); }}>End</Button>
+                                onClick={() => setDispositionOpen(true)}>End Call</Button>
                         </div>
 
-                {/* Transfer dialog */}
+                    </div>
+
+                    {/* Scrollable: expanded forms + transfer */}
+                    {(appointmentOpen || enquiryOpen || transferOpen) && (
+                        <div className="flex flex-col min-h-0 flex-1 border-t border-secondary px-4 pb-4 pt-4">
                         {transferOpen && callUcid && (
                             <TransferDialog
                                 ucid={callUcid}
+                                currentAgentId={JSON.parse(localStorage.getItem('helix_agent_config') ?? '{}').ozonetelAgentId}
                                 onClose={() => setTransferOpen(false)}
                                 onTransferred={() => {
                                     setTransferOpen(false);
-                            hangup();
-                            setPostCallStage('disposition');
+                                    setSuggestedDisposition('FOLLOW_UP_SCHEDULED');
+                                    setDispositionOpen(true);
                                 }}
                             />
                         )}
-
-                {/* Appointment form accessible during call */}
                             <AppointmentForm
                                 isOpen={appointmentOpen}
                                 onOpenChange={setAppointmentOpen}
                                 callerNumber={callerPhone}
                                 leadName={fullName || null}
                                 leadId={lead?.id ?? null}
+                                patientId={(lead as any)?.patientId ?? null}
                                 onSaved={handleAppointmentSaved}
                             />
 
-                {/* Enquiry form */}
                             <EnquiryForm
                                 isOpen={enquiryOpen}
                                 onOpenChange={setEnquiryOpen}
                                 callerPhone={callerPhone}
+                                leadName={fullName || null}
+                                leadId={lead?.id ?? null}
+                                patientId={(lead as any)?.patientId ?? null}
+                                agentName={user.name}
                                 onSaved={() => {
                                     setEnquiryOpen(false);
+                                    setSuggestedDisposition('INFO_PROVIDED');
                                     notify.success('Enquiry Logged');
                                 }}
                             />
                         </div>
+                    )}
+                </div>
+
+                {/* Disposition Modal — the ONLY path to end a call */}
+                <DispositionModal
+                    isOpen={dispositionOpen}
+                    callerName={fullName || phoneDisplay}
+                    callerDisconnected={callerDisconnected}
+                    defaultDisposition={suggestedDisposition}
+                    onSubmit={handleDisposition}
+                    onDismiss={() => {
+                        // Agent wants to continue the call — close modal, call stays active
+                        if (!callerDisconnected) {
+                            setDispositionOpen(false);
+                        } else {
+                            // Caller already disconnected — dismiss goes to worklist
+                            handleReset();
+                        }
+                    }}
+                />
+            </>
         );
     }
 

src/components/call-desk/agent-status-toggle.tsx

@@ -1,97 +1,118 @@
 import { useState } from 'react';
 import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
 import { faCircle, faChevronDown } from '@fortawesome/pro-duotone-svg-icons';
+import { useAgentState } from '@/hooks/use-agent-state';
+import type { OzonetelState } from '@/hooks/use-agent-state';
 import { apiClient } from '@/lib/api-client';
 import { notify } from '@/lib/toast';
 import { cx } from '@/utils/cx';
 
-type AgentStatus = 'ready' | 'break' | 'training' | 'offline';
+type ToggleableStatus = 'ready' | 'break' | 'training';
 
-const statusConfig: Record<AgentStatus, { label: string; color: string; dotColor: string }> = {
+const displayConfig: Record<OzonetelState, { label: string; color: string; dotColor: string }> = {
     ready: { label: 'Ready', color: 'text-success-primary', dotColor: 'text-fg-success-primary' },
     break: { label: 'Break', color: 'text-warning-primary', dotColor: 'text-fg-warning-primary' },
     training: { label: 'Training', color: 'text-brand-secondary', dotColor: 'text-fg-brand-primary' },
+    calling: { label: 'Calling', color: 'text-brand-secondary', dotColor: 'text-fg-brand-primary' },
+    'in-call': { label: 'In Call', color: 'text-brand-secondary', dotColor: 'text-fg-brand-primary' },
+    acw: { label: 'Wrapping up', color: 'text-warning-primary', dotColor: 'text-fg-warning-primary' },
     offline: { label: 'Offline', color: 'text-tertiary', dotColor: 'text-fg-quaternary' },
 };
 
+const toggleOptions: Array<{ key: ToggleableStatus; label: string; color: string; dotColor: string }> = [
+    { key: 'ready', label: 'Ready', color: 'text-success-primary', dotColor: 'text-fg-success-primary' },
+    { key: 'break', label: 'Break', color: 'text-warning-primary', dotColor: 'text-fg-warning-primary' },
+    { key: 'training', label: 'Training', color: 'text-brand-secondary', dotColor: 'text-fg-brand-primary' },
+];
+
 type AgentStatusToggleProps = {
     isRegistered: boolean;
     connectionStatus: string;
 };
 
 export const AgentStatusToggle = ({ isRegistered, connectionStatus }: AgentStatusToggleProps) => {
-    const [status, setStatus] = useState<AgentStatus>(isRegistered ? 'ready' : 'offline');
+    const agentConfig = localStorage.getItem('helix_agent_config');
+    const agentId = agentConfig ? JSON.parse(agentConfig).ozonetelAgentId : null;
+    const ozonetelState = useAgentState(agentId);
+
     const [menuOpen, setMenuOpen] = useState(false);
     const [changing, setChanging] = useState(false);
 
-    const handleChange = async (newStatus: AgentStatus) => {
+    const handleChange = async (newStatus: ToggleableStatus) => {
         setMenuOpen(false);
-        if (newStatus === status) return;
+        if (newStatus === ozonetelState) return;
         setChanging(true);
 
         try {
             if (newStatus === 'ready') {
-                await apiClient.post('/api/ozonetel/agent-state', { state: 'Ready' });
-            } else if (newStatus === 'offline') {
-                await apiClient.post('/api/ozonetel/agent-logout', {
-                    agentId: 'global',
-                    password: 'Test123$',
-                });
+                console.log('[AGENT-STATE] Changing to Ready');
+                const res = await apiClient.post('/api/ozonetel/agent-state', { agentId, state: 'Ready' });
+                console.log('[AGENT-STATE] Ready response:', JSON.stringify(res));
             } else {
                 const pauseReason = newStatus === 'break' ? 'Break' : 'Training';
-                await apiClient.post('/api/ozonetel/agent-state', { state: 'Pause', pauseReason });
+                console.log(`[AGENT-STATE] Changing to Pause: ${pauseReason}`);
+                const res = await apiClient.post('/api/ozonetel/agent-state', { agentId, state: 'Pause', pauseReason });
+                console.log('[AGENT-STATE] Pause response:', JSON.stringify(res));
             }
-            setStatus(newStatus);
-        } catch {
+            // Don't setStatus — SSE will push the real state
+        } catch (err) {
+            console.error('[AGENT-STATE] Status change failed:', err);
             notify.error('Status Change Failed', 'Could not update agent status');
         } finally {
             setChanging(false);
         }
     };
 
-    // If SIP isn't connected, show connection status
+    // If SIP isn't connected, show connection status with user-friendly message
     if (!isRegistered) {
+        const statusMessages: Record<string, string> = {
+            disconnected: 'Telephony unavailable',
+            connecting: 'Connecting to telephony...',
+            connected: 'Registering...',
+            error: 'Telephony error — check VPN',
+        };
         return (
             <div className="flex items-center gap-1.5 rounded-full bg-secondary px-3 py-1">
                 <FontAwesomeIcon icon={faCircle} className="size-2 text-fg-warning-primary animate-pulse" />
-                <span className="text-xs font-medium text-tertiary">{connectionStatus}</span>
+                <span className="text-xs font-medium text-tertiary">{statusMessages[connectionStatus] ?? connectionStatus}</span>
             </div>
         );
     }
 
-    const current = statusConfig[status];
+    const current = displayConfig[ozonetelState] ?? displayConfig.offline;
+    const canToggle = ozonetelState === 'ready' || ozonetelState === 'break' || ozonetelState === 'training' || ozonetelState === 'offline';
 
     return (
         <div className="relative">
             <button
-                onClick={() => setMenuOpen(!menuOpen)}
-                disabled={changing}
+                onClick={() => canToggle && setMenuOpen(!menuOpen)}
+                disabled={changing || !canToggle}
                 className={cx(
                     'flex items-center gap-1.5 rounded-full bg-secondary px-3 py-1 transition duration-100 ease-linear',
-                    'hover:bg-secondary_hover cursor-pointer',
+                    canToggle ? 'hover:bg-secondary_hover cursor-pointer' : 'cursor-default',
                     changing && 'opacity-50',
                 )}
             >
                 <FontAwesomeIcon icon={faCircle} className={cx('size-2', current.dotColor)} />
                 <span className={cx('text-xs font-medium', current.color)}>{current.label}</span>
-                <FontAwesomeIcon icon={faChevronDown} className="size-2.5 text-fg-quaternary" />
+                {canToggle && <FontAwesomeIcon icon={faChevronDown} className="size-2.5 text-fg-quaternary" />}
             </button>
 
             {menuOpen && (
                 <>
                     <div className="fixed inset-0 z-40" onClick={() => setMenuOpen(false)} />
                     <div className="absolute right-0 top-full z-50 mt-1 w-36 rounded-lg bg-primary shadow-lg ring-1 ring-secondary py-1">
-                        {(Object.entries(statusConfig) as [AgentStatus, typeof current][]).map(([key, cfg]) => (
+                        {toggleOptions.map((opt) => (
                             <button
-                                key={key}
-                                onClick={() => handleChange(key)}
+                                key={opt.key}
+                                onClick={() => handleChange(opt.key)}
                                 className={cx(
                                     'flex w-full items-center gap-2 px-3 py-2 text-xs font-medium transition duration-100 ease-linear',
-                                    key === status ? 'bg-active' : 'hover:bg-primary_hover',
+                                    opt.key === ozonetelState ? 'bg-active' : 'hover:bg-primary_hover',
                                 )}
                             >
-                                <FontAwesomeIcon icon={faCircle} className={cx('size-2', cfg.dotColor)} />
-                                <span className={cfg.color}>{cfg.label}</span>
+                                <FontAwesomeIcon icon={faCircle} className={cx('size-2', opt.dotColor)} />
+                                <span className={opt.color}>{opt.label}</span>
                             </button>
                         ))}
                     </div>

src/components/call-desk/ai-chat-panel.tsx

@@ -1,17 +1,14 @@
 import type { ReactNode } from 'react';
-import { useCallback, useEffect, useRef, useState } from 'react';
+import { useRef, useEffect } from 'react';
+import { useThemeTokens } from '@/providers/theme-token-provider';
+import { useChat } from '@ai-sdk/react';
 import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
-import { faPaperPlaneTop, faRobot, faSparkles, faUserHeadset } from '@fortawesome/pro-duotone-svg-icons';
-import { apiClient } from '@/lib/api-client';
+import { faPaperPlaneTop, faSparkles, faUserHeadset } from '@fortawesome/pro-duotone-svg-icons';
 
-type ChatMessage = {
-    id: string;
-    role: 'user' | 'assistant';
-    content: string;
-    timestamp: Date;
-};
+const API_URL = import.meta.env.VITE_API_URL ?? 'http://localhost:4100';
 
 type CallerContext = {
+    type?: string;
     callerPhone?: string;
     leadId?: string;
     leadName?: string;
@@ -19,129 +16,64 @@ type CallerContext = {
 
 interface AiChatPanelProps {
     callerContext?: CallerContext;
-    role?: 'cc-agent' | 'admin' | 'executive';
+    onChatStart?: () => void;
 }
 
-const QUICK_ASK_AGENT = [
-    { label: 'Doctor availability', template: 'What are the visiting hours for all doctors?' },
-    { label: 'Clinic timings', template: 'What are the clinic locations and timings?' },
-    { label: 'Patient history', template: 'Can you summarize this patient\'s history?' },
-    { label: 'Treatment packages', template: 'What treatment packages are available?' },
-];
-
-const QUICK_ASK_MANAGER = [
-    { label: 'Agent performance', template: 'Which agents have the highest appointment conversion rates this week?' },
-    { label: 'Missed call risks', template: 'Which missed calls have been waiting the longest without a callback?' },
-    { label: 'Pending leads', template: 'How many leads are still pending first contact?' },
-    { label: 'Weekly summary', template: 'Give me a summary of this week\'s team performance — total calls, conversions, missed calls.' },
-];
-
-export const AiChatPanel = ({ callerContext, role = 'cc-agent' }: AiChatPanelProps) => {
-    const quickButtons = role === 'admin' ? QUICK_ASK_MANAGER : QUICK_ASK_AGENT;
-    const [messages, setMessages] = useState<ChatMessage[]>([]);
-    const [input, setInput] = useState('');
-    const [isLoading, setIsLoading] = useState(false);
+export const AiChatPanel = ({ callerContext, onChatStart }: AiChatPanelProps) => {
+    const { tokens } = useThemeTokens();
+    const quickActions = tokens.ai.quickActions;
     const messagesEndRef = useRef<HTMLDivElement>(null);
-    const inputRef = useRef<HTMLInputElement>(null);
+    const chatStartedRef = useRef(false);
 
-    const scrollToBottom = useCallback(() => {
-        messagesEndRef.current?.scrollIntoView({ behavior: 'smooth' });
-    }, []);
+    const token = localStorage.getItem('helix_access_token') ?? '';
 
-    useEffect(() => {
-        scrollToBottom();
-    }, [messages, scrollToBottom]);
-
-    const sendMessage = useCallback(async (text?: string) => {
-        const messageText = (text ?? input).trim();
-        if (messageText.length === 0 || isLoading) return;
-
-        const userMessage: ChatMessage = {
-            id: `user-${Date.now()}`,
-            role: 'user',
-            content: messageText,
-            timestamp: new Date(),
-        };
-
-        setMessages((prev) => [...prev, userMessage]);
-        setInput('');
-        setIsLoading(true);
-
-        try {
-            const data = await apiClient.post<{ reply: string; sources?: string[] }>('/api/ai/chat', {
-                message: messageText,
+    const { messages, input, handleSubmit, handleInputChange, isLoading, append } = useChat({
+        api: `${API_URL}/api/ai/stream`,
+        streamProtocol: 'text',
+        headers: {
+            'Authorization': `Bearer ${token}`,
+        },
+        body: {
             context: callerContext,
+        },
     });
 
-            const assistantMessage: ChatMessage = {
-                id: `assistant-${Date.now()}`,
-                role: 'assistant',
-                content: data.reply ?? 'Sorry, I could not process that request.',
-                timestamp: new Date(),
-            };
-
-            setMessages((prev) => [...prev, assistantMessage]);
-        } catch {
-            const errorMessage: ChatMessage = {
-                id: `error-${Date.now()}`,
-                role: 'assistant',
-                content: 'Sorry, I\'m having trouble connecting to the AI service. Please try again.',
-                timestamp: new Date(),
-            };
-            setMessages((prev) => [...prev, errorMessage]);
-        } finally {
-            setIsLoading(false);
-            inputRef.current?.focus();
+    useEffect(() => {
+        const el = messagesEndRef.current;
+        if (el?.parentElement) {
+            el.parentElement.scrollTop = el.parentElement.scrollHeight;
         }
-    }, [input, isLoading, callerContext]);
-
-    const handleKeyDown = useCallback((e: React.KeyboardEvent) => {
-        if (e.key === 'Enter' && !e.shiftKey) {
-            e.preventDefault();
-            sendMessage();
+        if (messages.length > 0 && !chatStartedRef.current) {
+            chatStartedRef.current = true;
+            onChatStart?.();
         }
-    }, [sendMessage]);
+    }, [messages, onChatStart]);
 
-    const handleQuickAsk = useCallback((template: string) => {
-        sendMessage(template);
-    }, [sendMessage]);
+    const handleQuickAction = (prompt: string) => {
+        append({ role: 'user', content: prompt });
+    };
 
     return (
-        <div className="flex h-full flex-col">
-            {/* Caller context banner */}
-            {callerContext?.leadName && (
-                <div className="mb-3 rounded-lg bg-brand-primary px-3 py-2">
-                    <span className="text-xs text-brand-secondary">
-                        Talking to: <span className="font-semibold">{callerContext.leadName}</span>
-                        {callerContext.callerPhone ? ` (${callerContext.callerPhone})` : ''}
-                    </span>
-                </div>
-            )}
-
-            {/* Quick ask buttons */}
+        <div className="flex h-full flex-col p-3">
+            <div className="flex-1 space-y-3 overflow-y-auto min-h-0">
                 {messages.length === 0 && (
-                <div className="mb-3 flex flex-wrap gap-1.5">
-                    {quickButtons.map((btn) => (
+                    <div className="flex flex-col items-center justify-center py-6 text-center">
+                        <FontAwesomeIcon icon={faSparkles} className="mb-2 size-6 text-fg-brand-primary" />
+                        <p className="text-xs text-tertiary">
+                            Ask me about doctors, clinics, packages, or patient info.
+                        </p>
+                        <div className="mt-3 flex flex-wrap justify-center gap-1.5">
+                            {quickActions.map((action) => (
                                 <button
-                            key={btn.label}
-                            onClick={() => handleQuickAsk(btn.template)}
+                                    key={action.label}
+                                    onClick={() => handleQuickAction(action.prompt)}
                                     disabled={isLoading}
-                            className="rounded-lg border border-secondary bg-primary px-2.5 py-1.5 text-xs font-medium text-secondary transition duration-100 ease-linear hover:bg-secondary hover:text-primary disabled:cursor-not-allowed disabled:opacity-50"
+                                    className="rounded-lg border border-secondary bg-primary px-2.5 py-1.5 text-xs font-medium text-secondary transition duration-100 ease-linear hover:bg-secondary hover:text-primary disabled:opacity-50"
                                 >
-                            {btn.label}
+                                    {action.label}
                                 </button>
                             ))}
                         </div>
-            )}
-
-            {/* Messages area */}
-            <div className="flex-1 space-y-3 overflow-y-auto">
-                {messages.length === 0 && (
-                    <div className="flex flex-col items-center justify-center py-8 text-center">
-                        <FontAwesomeIcon icon={faRobot} className="mb-3 size-8 text-fg-quaternary" />
-                        <p className="text-sm text-tertiary">
-                            Ask me about doctors, clinics, packages, or patient info.
-                        </p>
                     </div>
                 )}
 
@@ -183,37 +115,31 @@ export const AiChatPanel = ({ callerContext, role = 'cc-agent' }: AiChatPanelPro
                 <div ref={messagesEndRef} />
             </div>
 
-            {/* Input area */}
-            <div className="mt-3 flex items-center gap-2">
+            <form onSubmit={handleSubmit} className="mt-2 flex items-center gap-2 shrink-0">
                 <div className="flex flex-1 items-center rounded-lg border border-secondary bg-primary shadow-xs transition duration-100 ease-linear focus-within:border-brand focus-within:ring-4 focus-within:ring-brand-100">
-                    <FontAwesomeIcon
-                        icon={faUserHeadset}
-                        className="ml-2.5 size-3.5 text-fg-quaternary"
-                    />
+                    <FontAwesomeIcon icon={faUserHeadset} className="ml-2.5 size-3.5 text-fg-quaternary" />
                     <input
-                        ref={inputRef}
                         type="text"
                         value={input}
-                        onChange={(e) => setInput(e.target.value)}
-                        onKeyDown={handleKeyDown}
+                        onChange={handleInputChange}
                         placeholder="Ask the AI assistant..."
                         disabled={isLoading}
                         className="flex-1 bg-transparent px-2 py-2 text-xs text-primary placeholder:text-placeholder outline-none disabled:cursor-not-allowed"
                     />
                 </div>
                 <button
-                    onClick={() => sendMessage()}
+                    type="submit"
                     disabled={isLoading || input.trim().length === 0}
                     className="flex size-8 shrink-0 items-center justify-center rounded-lg bg-brand-solid text-white transition duration-100 ease-linear hover:bg-brand-solid_hover disabled:cursor-not-allowed disabled:bg-disabled"
                 >
                     <FontAwesomeIcon icon={faPaperPlaneTop} className="size-3.5" />
                 </button>
-            </div>
+            </form>
         </div>
     );
 };
+// Tool result cards will be added in Phase 2 when SDK versions are aligned for data stream protocol
 
-// Parse simple markdown-like text into React nodes (safe, no innerHTML)
 const parseLine = (text: string): ReactNode[] => {
     const parts: ReactNode[] = [];
     const boldPattern = /\*\*(.+?)\*\*/g;
@@ -221,33 +147,23 @@ const parseLine = (text: string): ReactNode[] => {
     let match: RegExpExecArray | null;
 
     while ((match = boldPattern.exec(text)) !== null) {
-        if (match.index > lastIndex) {
-            parts.push(text.slice(lastIndex, match.index));
-        }
-        parts.push(
-            <strong key={match.index} className="font-semibold">
-                {match[1]}
-            </strong>,
-        );
+        if (match.index > lastIndex) parts.push(text.slice(lastIndex, match.index));
+        parts.push(<strong key={match.index} className="font-semibold">{match[1]}</strong>);
         lastIndex = boldPattern.lastIndex;
     }
 
-    if (lastIndex < text.length) {
-        parts.push(text.slice(lastIndex));
-    }
-
+    if (lastIndex < text.length) parts.push(text.slice(lastIndex));
     return parts.length > 0 ? parts : [text];
 };
 
 const MessageContent = ({ content }: { content: string }) => {
+    if (!content) return null;
     const lines = content.split('\n');
 
     return (
         <div className="space-y-1">
             {lines.map((line, i) => {
                 if (line.trim().length === 0) return <div key={i} className="h-1" />;
-
-                // Bullet points
                 if (line.trimStart().startsWith('- ')) {
                     return (
                         <div key={i} className="flex gap-1.5 pl-1">
@@ -256,7 +172,6 @@ const MessageContent = ({ content }: { content: string }) => {
                         </div>
                     );
                 }
-
                 return <p key={i}>{parseLine(line)}</p>;
             })}
         </div>

src/components/call-desk/appointment-form.tsx

@@ -1,17 +1,16 @@
 import { useState, useEffect } from 'react';
-import { faCalendarPlus, faXmark } from '@fortawesome/pro-duotone-svg-icons';
-import { faIcon } from '@/lib/icon-wrapper';
-
-const CalendarPlus02 = faIcon(faCalendarPlus);
-const XClose = faIcon(faXmark);
+import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
+import { faUserPen } from '@fortawesome/pro-duotone-svg-icons';
 import { Input } from '@/components/base/input/input';
 import { Select } from '@/components/base/select/select';
 import { TextArea } from '@/components/base/textarea/textarea';
-import { Checkbox } from '@/components/base/checkbox/checkbox';
 import { Button } from '@/components/base/buttons/button';
+import { DatePicker } from '@/components/application/date-picker/date-picker';
+import { parseDate } from '@internationalized/date';
 import { apiClient } from '@/lib/api-client';
 import { cx } from '@/utils/cx';
 import { notify } from '@/lib/toast';
+import { EditPatientConfirmModal } from '@/components/modals/edit-patient-confirm-modal';
 
 type ExistingAppointment = {
     id: string;
@@ -20,7 +19,7 @@ type ExistingAppointment = {
     doctorId?: string;
     department: string;
     reasonForVisit?: string;
-    appointmentStatus: string;
+    status: string;
 };
 
 type AppointmentFormProps = {
@@ -29,17 +28,15 @@ type AppointmentFormProps = {
     callerNumber?: string | null;
     leadName?: string | null;
     leadId?: string | null;
+    patientId?: string | null;
     onSaved?: () => void;
     existingAppointment?: ExistingAppointment | null;
 };
 
 type DoctorRecord = { id: string; name: string; department: string; clinic: string };
 
-const clinicItems = [
-    { id: 'koramangala', label: 'Global Hospital - Koramangala' },
-    { id: 'whitefield', label: 'Global Hospital - Whitefield' },
-    { id: 'indiranagar', label: 'Global Hospital - Indiranagar' },
-];
+// Clinics are fetched dynamically from the platform — no hardcoded list.
+// If the workspace has no clinics configured, the dropdown shows empty.
 
 const genderItems = [
     { id: 'male', label: 'Male' },
@@ -47,22 +44,8 @@ const genderItems = [
     { id: 'other', label: 'Other' },
 ];
 
-const timeSlotItems = [
-    { id: '09:00', label: '9:00 AM' },
-    { id: '09:30', label: '9:30 AM' },
-    { id: '10:00', label: '10:00 AM' },
-    { id: '10:30', label: '10:30 AM' },
-    { id: '11:00', label: '11:00 AM' },
-    { id: '11:30', label: '11:30 AM' },
-    { id: '14:00', label: '2:00 PM' },
-    { id: '14:30', label: '2:30 PM' },
-    { id: '15:00', label: '3:00 PM' },
-    { id: '15:30', label: '3:30 PM' },
-    { id: '16:00', label: '4:00 PM' },
-];
-
-const formatDeptLabel = (dept: string) =>
-    dept.replace(/_/g, ' ').replace(/\b\w/g, c => c.toUpperCase());
+// Time slots are fetched from /api/masterdata/slots based on
+// doctor + date. No hardcoded times.
 
 export const AppointmentForm = ({
     isOpen,
@@ -70,6 +53,7 @@ export const AppointmentForm = ({
     callerNumber,
     leadName,
     leadId,
+    patientId,
     onSaved,
     existingAppointment,
 }: AppointmentFormProps) => {
@@ -78,17 +62,30 @@ export const AppointmentForm = ({
     // Doctor data from platform
     const [doctors, setDoctors] = useState<DoctorRecord[]>([]);
 
+    // Initial name captured at form open — used to detect whether the
+    // agent actually changed the name before we commit any destructive
+    // updatePatient / updateLead.contactName mutations.
+    const initialLeadName = (leadName ?? '').trim();
+
     // Form state — initialized from existing appointment in edit mode
     const [patientName, setPatientName] = useState(leadName ?? '');
+    // The patient-name input is locked by default when there's an
+    // existing caller name (to prevent accidental rename-on-save), and
+    // unlocked only after the agent clicks the Edit button and confirms
+    // in the warning modal. First-time callers with no existing name
+    // start unlocked because there's nothing to protect.
+    const [isNameEditable, setIsNameEditable] = useState(initialLeadName.length === 0);
+    const [editConfirmOpen, setEditConfirmOpen] = useState(false);
     const [patientPhone, setPatientPhone] = useState(callerNumber ?? '');
     const [age, setAge] = useState('');
     const [gender, setGender] = useState<string | null>(null);
     const [clinic, setClinic] = useState<string | null>(null);
+    const [clinicItems, setClinicItems] = useState<Array<{ id: string; label: string }>>([]);
     const [department, setDepartment] = useState<string | null>(existingAppointment?.department ?? null);
     const [doctor, setDoctor] = useState<string | null>(existingAppointment?.doctorId ?? null);
     const [date, setDate] = useState(() => {
         if (existingAppointment?.scheduledAt) return existingAppointment.scheduledAt.split('T')[0];
-        return '';
+        return new Date().toISOString().split('T')[0];
     });
     const [timeSlot, setTimeSlot] = useState<string | null>(() => {
         if (existingAppointment?.scheduledAt) {
@@ -98,9 +95,26 @@ export const AppointmentForm = ({
         return null;
     });
     const [chiefComplaint, setChiefComplaint] = useState(existingAppointment?.reasonForVisit ?? '');
-    const [isReturning, setIsReturning] = useState(false);
     const [source, setSource] = useState('Inbound Call');
     const [agentNotes, setAgentNotes] = useState('');
+    const [timeSlotItems, setTimeSlotItems] = useState<Array<{ id: string; label: string }>>([]);
+
+    // Fetch available time slots when doctor + date change
+    useEffect(() => {
+        if (!doctor || !date) {
+            setTimeSlotItems([]);
+            return;
+        }
+        apiClient.get<Array<{ time: string; label: string; clinicId: string; clinicName: string }>>(
+            `/api/masterdata/slots?doctorId=${doctor}&date=${date}`,
+        ).then(slots => {
+            setTimeSlotItems(slots.map(s => ({ id: s.time, label: s.label })));
+            // Auto-select clinic from the slot's clinic
+            if (slots.length > 0 && !clinic) {
+                setClinic(slots[0].clinicId);
+            }
+        }).catch(() => setTimeSlotItems([]));
+    }, [doctor, date]);
 
     // Availability state
     const [bookedSlots, setBookedSlots] = useState<string[]>([]);
@@ -109,23 +123,28 @@ export const AppointmentForm = ({
     const [isSaving, setIsSaving] = useState(false);
     const [error, setError] = useState<string | null>(null);
 
-    // Fetch doctors on mount
+    // Fetch doctors on mount. Doctors are hospital-wide — no single
+    // `clinic` field anymore. We pull the full visit-slot list via the
+    // Fetch clinics + doctors from the master data endpoint (Redis-cached).
+    // This is faster than direct GraphQL and returns pre-formatted data.
     useEffect(() => {
         if (!isOpen) return;
-        apiClient.graphql<{ doctors: { edges: Array<{ node: any }> } }>(
-            `{ doctors(first: 50) { edges { node {
-                id name fullName { firstName lastName } department clinic { id name clinicName }
-            } } } }`,
-        ).then(data => {
-            const docs = data.doctors.edges.map(e => ({
-                id: e.node.id,
-                name: e.node.fullName
-                    ? `Dr. ${e.node.fullName.firstName} ${e.node.fullName.lastName}`.trim()
-                    : e.node.name,
-                department: e.node.department ?? '',
-                clinic: e.node.clinic?.clinicName ?? e.node.clinic?.name ?? '',
-            }));
-            setDoctors(docs);
+        apiClient.get<Array<{ id: string; name: string; phone: string; address: string }>>('/api/masterdata/clinics')
+            .then(clinics => {
+                setClinicItems(clinics.map(c => ({ id: c.id, label: c.name || 'Unnamed Clinic' })));
+            }).catch(() => {});
+    }, [isOpen]);
+
+    useEffect(() => {
+        if (!isOpen) return;
+        apiClient.get<Array<{ id: string; name: string; department: string; qualifications: string }>>('/api/masterdata/doctors')
+            .then(docs => {
+                setDoctors(docs.map(d => ({
+                    id: d.id,
+                    name: d.name,
+                    department: d.department,
+                    clinic: '', // clinic assignment via visit slots, not on doctor directly
+                })));
             }).catch(() => {});
     }, [isOpen]);
 
@@ -141,11 +160,11 @@ export const AppointmentForm = ({
             `{ appointments(filter: {
                 doctorId: { eq: "${doctor}" },
                 scheduledAt: { gte: "${date}T00:00:00", lte: "${date}T23:59:59" }
-            }) { edges { node { id scheduledAt durationMin appointmentStatus } } } }`,
+            }) { edges { node { id scheduledAt durationMin status } } } }`,
         ).then(data => {
             // Filter out cancelled/completed appointments client-side
             const activeAppointments = data.appointments.edges.filter(e => {
-                const status = e.node.appointmentStatus;
+                const status = e.node.status;
                 return status !== 'CANCELLED' && status !== 'COMPLETED' && status !== 'NO_SHOW';
             });
             const slots = activeAppointments.map(e => {
@@ -175,9 +194,18 @@ export const AppointmentForm = ({
         setTimeSlot(null);
     }, [doctor, date]);
 
-    // Derive department and doctor lists from fetched data
-    const departmentItems = [...new Set(doctors.map(d => d.department).filter(Boolean))]
-        .map(dept => ({ id: dept, label: formatDeptLabel(dept) }));
+    // Departments from master data (or fallback to deriving from doctors)
+    const [departmentItems, setDepartmentItems] = useState<Array<{ id: string; label: string }>>([]);
+    useEffect(() => {
+        if (!isOpen) return;
+        apiClient.get<string[]>('/api/masterdata/departments')
+            .then(depts => setDepartmentItems(depts.map(d => ({ id: d, label: d }))))
+            .catch(() => {
+                // Fallback: derive from doctor list
+                const derived = [...new Set(doctors.map(d => d.department).filter(Boolean))];
+                setDepartmentItems(derived.map(d => ({ id: d, label: d })));
+            });
+    }, [isOpen, doctors]);
 
     const filteredDoctors = department
         ? doctors.filter(d => d.department === department)
@@ -196,6 +224,12 @@ export const AppointmentForm = ({
             return;
         }
 
+        const today = new Date().toISOString().split('T')[0];
+        if (!isEditMode && date < today) {
+            setError('Appointment date cannot be in the past.');
+            return;
+        }
+
         setIsSaving(true);
         setError(null);
 
@@ -206,7 +240,7 @@ export const AppointmentForm = ({
             if (isEditMode && existingAppointment) {
                 // Update existing appointment
                 await apiClient.graphql(
-                    `mutation UpdateAppointment($id: ID!, $data: AppointmentUpdateInput!) {
+                    `mutation UpdateAppointment($id: UUID!, $data: AppointmentUpdateInput!) {
                         updateAppointment(id: $id, data: $data) { id }
                     }`,
                     {
@@ -222,22 +256,6 @@ export const AppointmentForm = ({
                 );
                 notify.success('Appointment Updated');
             } else {
-                // Double-check slot availability before booking
-                const checkResult = await apiClient.graphql<{ appointments: { edges: Array<{ node: { appointmentStatus: string } }> } }>(
-                    `{ appointments(filter: {
-                        doctorId: { eq: "${doctor}" },
-                        scheduledAt: { gte: "${date}T${timeSlot}:00", lte: "${date}T${timeSlot}:00" }
-                    }) { edges { node { appointmentStatus } } } }`,
-                );
-                const activeBookings = checkResult.appointments.edges.filter(e =>
-                    e.node.appointmentStatus !== 'CANCELLED' && e.node.appointmentStatus !== 'NO_SHOW',
-                );
-                if (activeBookings.length > 0) {
-                    setError('This slot was just booked by someone else. Please select a different time.');
-                    setIsSaving(false);
-                    return;
-                }
-
                 // Create appointment
                 await apiClient.graphql(
                     `mutation CreateAppointment($data: AppointmentCreateInput!) {
@@ -248,31 +266,68 @@ export const AppointmentForm = ({
                             scheduledAt,
                             durationMin: 30,
                             appointmentType: 'CONSULTATION',
-                            appointmentStatus: 'SCHEDULED',
+                            status: 'SCHEDULED',
                             doctorName: selectedDoctor?.name ?? '',
                             department: selectedDoctor?.department ?? '',
                             doctorId: doctor,
                             reasonForVisit: chiefComplaint || null,
-                            ...(leadId ? { patientId: leadId } : {}),
+                            ...(patientId ? { patientId } : {}),
                         },
                     },
                 );
 
-                // Update lead status if we have a matched lead
+                // Determine whether the agent actually renamed the patient.
+                // Only a non-empty, changed-from-initial name counts — empty
+                // strings or an unchanged name never trigger the rename
+                // chain, even if the field was unlocked.
+                const trimmedName = patientName.trim();
+                const nameChanged = isNameEditable && trimmedName.length > 0 && trimmedName !== initialLeadName;
+
+                // DO NOT update the shared Patient entity when name changes
+                // during appointment creation. The Patient record is shared
+                // across all appointments — modifying it here would
+                // retroactively change the name on all past appointments.
+                // The patient name for THIS appointment is stored on the
+                // Appointment entity itself (via doctorName/department).
+                // Bug #527: removed updatePatient() call.
+
+                // Update lead status/lastContacted on every appointment book
+                // (those are genuinely about this appointment), but only
+                // touch lead.contactName if the agent explicitly renamed.
+                //
+                // NOTE: field name is `status`, NOT `leadStatus` — the
+                // staging platform schema renamed this. The old name is
+                // rejected by LeadUpdateInput.
                 if (leadId) {
                     await apiClient.graphql(
-                        `mutation UpdateLead($id: ID!, $data: LeadUpdateInput!) {
+                        `mutation UpdateLead($id: UUID!, $data: LeadUpdateInput!) {
                             updateLead(id: $id, data: $data) { id }
                         }`,
                         {
                             id: leadId,
                             data: {
-                                leadStatus: 'APPOINTMENT_SET',
-                                lastContactedAt: new Date().toISOString(),
+                                status: 'APPOINTMENT_SET',
+                                lastContacted: new Date().toISOString(),
+                                ...(nameChanged ? { contactName: { firstName: trimmedName.split(' ')[0], lastName: trimmedName.split(' ').slice(1).join(' ') || '' } } : {}),
                             },
                         },
                     ).catch((err: unknown) => console.warn('Failed to update lead:', err));
                 }
+
+                // If the agent actually renamed the patient, kick off the
+                // side-effect chain: regenerate the AI summary against the
+                // corrected identity AND invalidate the Redis caller
+                // resolution cache so the next incoming call from this
+                // phone picks up fresh data. Both are fire-and-forget —
+                // the save toast fires immediately either way.
+                if (nameChanged && leadId) {
+                    apiClient.post(`/api/lead/${leadId}/enrich`, { phone: callerNumber ?? undefined }, { silent: true }).catch(() => {});
+                } else if (callerNumber) {
+                    // No rename but still invalidate the cache so status +
+                    // lastContacted updates propagate cleanly to the next
+                    // lookup.
+                    apiClient.post('/api/caller/invalidate', { phone: callerNumber }, { silent: true }).catch(() => {});
+                }
             }
 
             onSaved?.();
@@ -289,12 +344,12 @@ export const AppointmentForm = ({
         setIsSaving(true);
         try {
             await apiClient.graphql(
-                `mutation CancelAppointment($id: ID!, $data: AppointmentUpdateInput!) {
+                `mutation CancelAppointment($id: UUID!, $data: AppointmentUpdateInput!) {
                     updateAppointment(id: $id, data: $data) { id }
                 }`,
                 {
                     id: existingAppointment.id,
-                    data: { appointmentStatus: 'CANCELLED' },
+                    data: { status: 'CANCELLED' },
                 },
             );
             notify.success('Appointment Cancelled');
@@ -309,31 +364,9 @@ export const AppointmentForm = ({
     if (!isOpen) return null;
 
     return (
-        <div className="rounded-xl border border-secondary bg-primary p-4">
-            {/* Header with close button */}
-            <div className="flex items-center justify-between mb-4">
-                <div className="flex items-center gap-3">
-                    <div className="flex size-8 items-center justify-center rounded-lg bg-brand-secondary">
-                        <CalendarPlus02 className="size-4 text-fg-brand-primary" />
-                    </div>
-                    <div>
-                        <h3 className="text-sm font-semibold text-primary">
-                            {isEditMode ? 'Edit Appointment' : 'Book Appointment'}
-                        </h3>
-                        <p className="text-xs text-tertiary">
-                            {isEditMode ? 'Modify or cancel this appointment' : 'Schedule a new patient visit'}
-                        </p>
-                    </div>
-                </div>
-                <button
-                    onClick={() => onOpenChange(false)}
-                    className="flex size-7 items-center justify-center rounded-md text-fg-quaternary hover:text-fg-secondary hover:bg-primary_hover transition duration-100 ease-linear"
-                >
-                    <XClose className="size-4" />
-                </button>
-            </div>
-
-            {/* Form fields */}
+        <div className="flex flex-col flex-1 min-h-0">
+            {/* Form fields — scrollable */}
+            <div className="flex-1 overflow-y-auto">
             <div className="flex flex-col gap-3">
                 {/* Patient Info — only for new appointments */}
                 {!isEditMode && (
@@ -344,12 +377,34 @@ export const AppointmentForm = ({
                             </span>
                         </div>
 
+                        {/* Patient name — locked by default for existing
+                            callers, unlocked for new callers with no
+                            prior name on record. The Edit button opens
+                            a confirm modal before unlocking; see
+                            EditPatientNameModal for the rationale. */}
+                        <div className="flex items-end gap-2">
+                            <div className="flex-1">
                                 <Input
                                     label="Patient Name"
                                     placeholder="Full name"
                                     value={patientName}
                                     onChange={setPatientName}
+                                    isDisabled={!isNameEditable}
                                 />
+                            </div>
+                            {!isNameEditable && initialLeadName.length > 0 && (
+                                <Button
+                                    size="sm"
+                                    color="secondary"
+                                    iconLeading={({ className }: { className?: string }) => (
+                                        <FontAwesomeIcon icon={faUserPen} className={className} />
+                                    )}
+                                    onClick={() => setEditConfirmOpen(true)}
+                                >
+                                    Edit
+                                </Button>
+                            )}
+                        </div>
 
                         <div className="grid grid-cols-2 gap-3">
                             <Input
@@ -400,37 +455,39 @@ export const AppointmentForm = ({
                     </Select>
                 )}
 
+                <div className="grid grid-cols-2 gap-3">
                     <Select
-                    label="Department / Specialty"
+                        label="Department *"
                         placeholder={doctors.length === 0 ? 'Loading...' : 'Select department'}
                         items={departmentItems}
                         selectedKey={department}
                         onSelectionChange={(key) => setDepartment(key as string)}
-                    isRequired
                         isDisabled={doctors.length === 0}
                     >
                         {(item) => <Select.Item id={item.id} label={item.label} />}
                     </Select>
 
                     <Select
-                    label="Doctor"
+                        label="Doctor *"
                         placeholder={!department ? 'Select department first' : 'Select doctor'}
                         items={doctorSelectItems}
                         selectedKey={doctor}
                         onSelectionChange={(key) => setDoctor(key as string)}
-                    isRequired
                         isDisabled={!department}
                     >
                         {(item) => <Select.Item id={item.id} label={item.label} />}
                     </Select>
+                </div>
 
-                <Input
-                    label="Date"
-                    type="date"
-                    value={date}
-                    onChange={setDate}
-                    isRequired
+                <div className="flex flex-col gap-1">
+                    <span className="text-xs font-medium text-secondary">Date <span className="text-error-primary">*</span></span>
+                    <DatePicker
+                        value={date ? parseDate(date) : null}
+                        onChange={(val) => setDate(val ? val.toString() : '')}
+                        granularity="day"
+                        isDisabled={!doctor}
                     />
+                </div>
 
                 {/* Time slot grid */}
                 {doctor && date && (
@@ -482,13 +539,6 @@ export const AppointmentForm = ({
                     <>
                         <div className="border-t border-secondary" />
 
-                        <Checkbox
-                            isSelected={isReturning}
-                            onChange={setIsReturning}
-                            label="Returning Patient"
-                            hint="Check if the patient has visited before"
-                        />
-
                         <Input
                             label="Source / Referral"
                             placeholder="How did the patient reach us?"
@@ -512,9 +562,10 @@ export const AppointmentForm = ({
                     </div>
                 )}
             </div>
+            </div>
 
-            {/* Footer buttons */}
-            <div className="flex items-center justify-between mt-4 pt-4 border-t border-secondary">
+            {/* Footer — pinned */}
+            <div className="shrink-0 flex items-center justify-between pt-4 border-t border-secondary">
                 <div>
                     {isEditMode && (
                         <Button size="sm" color="primary-destructive" isLoading={isSaving} onClick={handleCancel}>
@@ -531,6 +582,24 @@ export const AppointmentForm = ({
                     </Button>
                 </div>
             </div>
+
+            <EditPatientConfirmModal
+                isOpen={editConfirmOpen}
+                onOpenChange={setEditConfirmOpen}
+                onConfirm={() => {
+                    setIsNameEditable(true);
+                    setEditConfirmOpen(false);
+                }}
+                description={
+                    <>
+                        You&apos;re about to change the name on this patient&apos;s record. This will
+                        update their profile across Helix Engage, including past appointments,
+                        lead history, and AI summary. Only proceed if the current name is
+                        actually wrong — for all other cases, cancel and continue with the
+                        appointment as-is.
+                    </>
+                }
+            />
         </div>
     );
 };

src/components/call-desk/call-control-strip.tsx

@@ -0,0 +1,61 @@
+import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
+import {
+    faMicrophone, faMicrophoneSlash,
+    faPause, faPlay, faPhoneHangup,
+} from '@fortawesome/pro-duotone-svg-icons';
+import { useSip } from '@/providers/sip-provider';
+import { cx } from '@/utils/cx';
+
+const formatDuration = (seconds: number): string => {
+    const m = Math.floor(seconds / 60).toString().padStart(2, '0');
+    const s = (seconds % 60).toString().padStart(2, '0');
+    return `${m}:${s}`;
+};
+
+export const CallControlStrip = () => {
+    const { callState, callDuration, isMuted, isOnHold, toggleMute, toggleHold, hangup } = useSip();
+
+    if (callState !== 'active' && callState !== 'ringing-out') return null;
+
+    return (
+        <div className="flex items-center justify-between rounded-lg bg-success-secondary px-3 py-2">
+            <div className="flex items-center gap-2">
+                <span className="relative flex size-2">
+                    <span className="absolute inline-flex size-full animate-ping rounded-full bg-success-solid opacity-75" />
+                    <span className="relative inline-flex size-2 rounded-full bg-success-solid" />
+                </span>
+                <span className="text-xs font-semibold text-success-primary">Live Call</span>
+                <span className="text-xs font-bold tabular-nums text-success-primary">{formatDuration(callDuration)}</span>
+            </div>
+            <div className="flex items-center gap-1">
+                <button
+                    onClick={toggleMute}
+                    title={isMuted ? 'Unmute' : 'Mute'}
+                    className={cx(
+                        'flex size-7 items-center justify-center rounded-md transition duration-100 ease-linear',
+                        isMuted ? 'bg-error-solid text-white' : 'bg-primary text-fg-quaternary hover:text-fg-secondary',
+                    )}
+                >
+                    <FontAwesomeIcon icon={isMuted ? faMicrophoneSlash : faMicrophone} className="size-3" />
+                </button>
+                <button
+                    onClick={toggleHold}
+                    title={isOnHold ? 'Resume' : 'Hold'}
+                    className={cx(
+                        'flex size-7 items-center justify-center rounded-md transition duration-100 ease-linear',
+                        isOnHold ? 'bg-warning-solid text-white' : 'bg-primary text-fg-quaternary hover:text-fg-secondary',
+                    )}
+                >
+                    <FontAwesomeIcon icon={isOnHold ? faPlay : faPause} className="size-3" />
+                </button>
+                <button
+                    onClick={hangup}
+                    title="End Call"
+                    className="flex size-7 items-center justify-center rounded-md bg-error-solid text-white hover:bg-error-solid_hover transition duration-100 ease-linear"
+                >
+                    <FontAwesomeIcon icon={faPhoneHangup} className="size-3" />
+                </button>
+            </div>
+        </div>
+    );
+};

src/components/call-desk/call-widget.tsx

@@ -1,315 +1,82 @@
-import { useState, useEffect, useRef } from 'react';
-import {
-    faPhone,
-    faPhoneArrowDown,
-    faPhoneArrowUp,
-    faPhoneHangup,
-    faPhoneXmark,
-    faMicrophoneSlash,
-    faMicrophone,
-    faPause,
-    faCircleCheck,
-    faFloppyDisk,
-    faCalendarPlus,
-} from '@fortawesome/pro-duotone-svg-icons';
+import { useEffect } from 'react';
+import { useNavigate, useLocation } from 'react-router';
+import { faPhone, faPhoneArrowDown, faPhoneXmark, faCircleCheck } from '@fortawesome/pro-duotone-svg-icons';
 import { faIcon } from '@/lib/icon-wrapper';
 
 const Phone01 = faIcon(faPhone);
 const PhoneIncoming01 = faIcon(faPhoneArrowDown);
-const PhoneOutgoing01 = faIcon(faPhoneArrowUp);
-const PhoneHangUp = faIcon(faPhoneHangup);
 const PhoneX = faIcon(faPhoneXmark);
-const MicrophoneOff01 = faIcon(faMicrophoneSlash);
-const Microphone01 = faIcon(faMicrophone);
-const PauseCircle = faIcon(faPause);
 const CheckCircle = faIcon(faCircleCheck);
-const Save01 = faIcon(faFloppyDisk);
-const CalendarPlus02 = faIcon(faCalendarPlus);
 import { Button } from '@/components/base/buttons/button';
-import { TextArea } from '@/components/base/textarea/textarea';
-import { AppointmentForm } from '@/components/call-desk/appointment-form';
+import { useSetAtom } from 'jotai';
+import { sipCallStateAtom } from '@/state/sip-state';
 import { useSip } from '@/providers/sip-provider';
-import { useAuth } from '@/providers/auth-provider';
 import { cx } from '@/utils/cx';
-import type { CallDisposition } from '@/types/entities';
 
 const formatDuration = (seconds: number): string => {
-    const m = Math.floor(seconds / 60)
-        .toString()
-        .padStart(2, '0');
+    const m = Math.floor(seconds / 60).toString().padStart(2, '0');
     const s = (seconds % 60).toString().padStart(2, '0');
     return `${m}:${s}`;
 };
 
-const statusDotColor: Record<string, string> = {
-    registered: 'bg-success-500',
-    connecting: 'bg-warning-500',
-    disconnected: 'bg-quaternary',
-    error: 'bg-error-500',
-};
-
-const statusLabel: Record<string, string> = {
-    registered: 'Ready',
-    connecting: 'Connecting...',
-    disconnected: 'Offline',
-    error: 'Error',
-};
-
-const dispositionOptions: Array<{
-    value: CallDisposition;
-    label: string;
-    activeClass: string;
-    defaultClass: string;
-}> = [
-    {
-        value: 'APPOINTMENT_BOOKED',
-        label: 'Appt Booked',
-        activeClass: 'bg-success-solid text-white ring-transparent',
-        defaultClass: 'bg-success-primary text-success-primary border-success',
-    },
-    {
-        value: 'FOLLOW_UP_SCHEDULED',
-        label: 'Follow-up',
-        activeClass: 'bg-brand-solid text-white ring-transparent',
-        defaultClass: 'bg-brand-primary text-brand-secondary border-brand',
-    },
-    {
-        value: 'INFO_PROVIDED',
-        label: 'Info Given',
-        activeClass: 'bg-utility-blue-light-600 text-white ring-transparent',
-        defaultClass: 'bg-utility-blue-light-50 text-utility-blue-light-700 border-utility-blue-light-200',
-    },
-    {
-        value: 'NO_ANSWER',
-        label: 'No Answer',
-        activeClass: 'bg-warning-solid text-white ring-transparent',
-        defaultClass: 'bg-warning-primary text-warning-primary border-warning',
-    },
-    {
-        value: 'WRONG_NUMBER',
-        label: 'Wrong #',
-        activeClass: 'bg-secondary-solid text-white ring-transparent',
-        defaultClass: 'bg-secondary text-secondary border-secondary',
-    },
-    {
-        value: 'CALLBACK_REQUESTED',
-        label: 'Not Interested',
-        activeClass: 'bg-error-solid text-white ring-transparent',
-        defaultClass: 'bg-error-primary text-error-primary border-error',
-    },
-];
-
+// CallWidget is a lightweight floating notification for calls outside the Call Desk.
+// It only handles: ringing (answer/decline) + auto-redirect to Call Desk.
+// All active call management (mute, hold, end, disposition) happens on the Call Desk via ActiveCallCard.
 export const CallWidget = () => {
-    const {
-        connectionStatus,
-        callState,
-        callerNumber,
-        isMuted,
-        isOnHold,
-        callDuration,
-        answer,
-        reject,
-        hangup,
-        toggleMute,
-        toggleHold,
-    } = useSip();
-    const { user } = useAuth();
+    const { callState, callerNumber, callDuration, answer, reject } = useSip();
+    const setCallState = useSetAtom(sipCallStateAtom);
+    const navigate = useNavigate();
+    const { pathname } = useLocation();
 
-    const [disposition, setDisposition] = useState<CallDisposition | null>(null);
-    const [notes, setNotes] = useState('');
-    const [lastDuration, setLastDuration] = useState(0);
-    const [matchedLead, setMatchedLead] = useState<any>(null);
-    const [leadActivities, setLeadActivities] = useState<any[]>([]);
-    const [isSaving, setIsSaving] = useState(false);
-    const [isAppointmentOpen, setIsAppointmentOpen] = useState(false);
-    const callStartTimeRef = useRef<string | null>(null);
-
-    // Capture duration right before call ends
+    // Auto-navigate to Call Desk when a call becomes active or outbound ringing starts
     useEffect(() => {
-        if (callState === 'active' && callDuration > 0) {
-            setLastDuration(callDuration);
+        if (pathname === '/call-desk') return;
+        if (callState === 'active' || callState === 'ringing-out') {
+            console.log(`[CALL-WIDGET] Redirecting to Call Desk (state=${callState})`);
+            navigate('/call-desk');
         }
-    }, [callState, callDuration]);
+    }, [callState, pathname, navigate]);
 
-    // Track call start time
+    // Auto-dismiss ended/failed state after 3 seconds
     useEffect(() => {
-        if (callState === 'active' && !callStartTimeRef.current) {
-            callStartTimeRef.current = new Date().toISOString();
+        if (callState === 'ended' || callState === 'failed') {
+            const timer = setTimeout(() => {
+                console.log('[CALL-WIDGET] Auto-dismissing ended/failed state');
+                setCallState('idle');
+            }, 3000);
+            return () => clearTimeout(timer);
         }
-        if (callState === 'idle') {
-            callStartTimeRef.current = null;
-        }
-    }, [callState]);
+    }, [callState, setCallState]);
 
-    // Look up caller when call becomes active
+    // Log state changes
     useEffect(() => {
-        if (callState === 'ringing-in' && callerNumber && callerNumber !== 'Unknown') {
-            const lookup = async () => {
-                try {
-                    const { apiClient } = await import('@/lib/api-client');
-                    const token = apiClient.getStoredToken();
-                    if (!token) return;
-
-                    const API_URL = import.meta.env.VITE_API_URL ?? 'http://localhost:4100';
-                    const res = await fetch(`${API_URL}/api/call/lookup`, {
-                        method: 'POST',
-                        headers: {
-                            'Content-Type': 'application/json',
-                            'Authorization': `Bearer ${token}`,
-                        },
-                        body: JSON.stringify({ phoneNumber: callerNumber }),
-                    });
-                    const data = await res.json();
-                    if (data.matched && data.lead) {
-                        setMatchedLead(data.lead);
-                        setLeadActivities(data.activities ?? []);
-                    }
-                } catch (err) {
-                    console.warn('Lead lookup failed:', err);
-                }
-            };
-            lookup();
+        if (callState !== 'idle') {
+            console.log(`[CALL-WIDGET] State: ${callState} | caller=${callerNumber ?? 'none'}`);
         }
     }, [callState, callerNumber]);
 
-    // Reset state when returning to idle
-    useEffect(() => {
-        if (callState === 'idle') {
-            setDisposition(null);
-            setNotes('');
-            setMatchedLead(null);
-            setLeadActivities([]);
-        }
-    }, [callState]);
+    if (callState === 'idle') return null;
 
-    const handleSaveAndClose = async () => {
-        if (!disposition) return;
-        setIsSaving(true);
-
-        try {
-            const { apiClient } = await import('@/lib/api-client');
-
-            // 1. Create Call record on platform
-            await apiClient.graphql(
-                `mutation CreateCall($data: CallCreateInput!) {
-                    createCall(data: $data) { id }
-                }`,
-                {
-                    data: {
-                        callDirection: 'INBOUND',
-                        callStatus: 'COMPLETED',
-                        agentName: user.name,
-                        startedAt: callStartTimeRef.current,
-                        endedAt: new Date().toISOString(),
-                        durationSeconds: callDuration,
-                        disposition,
-                        callNotes: notes || null,
-                        leadId: matchedLead?.id ?? null,
-                    },
-                },
-            ).catch(err => console.warn('Failed to create call record:', err));
-
-            // 2. Update lead status if matched
-            if (matchedLead?.id) {
-                const statusMap: Partial<Record<string, string>> = {
-                    APPOINTMENT_BOOKED: 'APPOINTMENT_SET',
-                    FOLLOW_UP_SCHEDULED: 'CONTACTED',
-                    INFO_PROVIDED: 'CONTACTED',
-                    NO_ANSWER: 'CONTACTED',
-                    WRONG_NUMBER: 'LOST',
-                    CALLBACK_REQUESTED: 'CONTACTED',
-                    NOT_INTERESTED: 'LOST',
-                };
-                const newStatus = statusMap[disposition];
-                if (newStatus) {
-                    await apiClient.graphql(
-                        `mutation UpdateLead($id: ID!, $data: LeadUpdateInput!) {
-                            updateLead(id: $id, data: $data) { id }
-                        }`,
-                        {
-                            id: matchedLead.id,
-                            data: {
-                                leadStatus: newStatus,
-                                lastContactedAt: new Date().toISOString(),
-                            },
-                        },
-                    ).catch(err => console.warn('Failed to update lead:', err));
-                }
-
-                // 3. Create lead activity
-                await apiClient.graphql(
-                    `mutation CreateLeadActivity($data: LeadActivityCreateInput!) {
-                        createLeadActivity(data: $data) { id }
-                    }`,
-                    {
-                        data: {
-                            activityType: 'CALL_RECEIVED',
-                            summary: `Inbound call — ${disposition.replace(/_/g, ' ')}`,
-                            occurredAt: new Date().toISOString(),
-                            performedBy: user.name,
-                            channel: 'PHONE',
-                            durationSeconds: callDuration,
-                            leadId: matchedLead.id,
-                        },
-                    },
-                ).catch(err => console.warn('Failed to create activity:', err));
-            }
-        } catch (err) {
-            console.error('Save failed:', err);
-        }
-
-        setIsSaving(false);
-        hangup();
-        setDisposition(null);
-        setNotes('');
-    };
-
-    const dotColor = statusDotColor[connectionStatus] ?? 'bg-quaternary';
-    const label = statusLabel[connectionStatus] ?? connectionStatus;
-
-    // Idle: collapsed pill
-    if (callState === 'idle') {
-        return (
-            <div
-                className={cx(
-                    'fixed bottom-6 right-6 z-50',
-                    'inline-flex items-center gap-2 rounded-full border border-secondary bg-primary px-4 py-2.5 shadow-lg',
-                    'transition-all duration-300',
-                )}
-            >
-                <span className={cx('size-2.5 shrink-0 rounded-full', dotColor)} />
-                <span className="text-sm font-semibold text-secondary">{label}</span>
-                <span className="text-sm text-tertiary">Helix Phone</span>
-            </div>
-        );
-    }
-
-    // Ringing inbound
+    // Ringing inbound — answer redirects to Call Desk
     if (callState === 'ringing-in') {
         return (
-            <div
-                className={cx(
+            <div className={cx(
                 'fixed bottom-6 right-6 z-50 w-80',
                 'flex flex-col items-center gap-5 rounded-2xl border border-secondary bg-primary p-6 shadow-2xl',
                 'transition-all duration-300',
-                )}
-            >
+            )}>
                 <div className="relative">
                     <div className="absolute inset-0 animate-ping rounded-full bg-brand-solid opacity-20" />
                     <div className="relative animate-bounce">
                         <PhoneIncoming01 className="size-10 text-fg-brand-primary" />
                     </div>
                 </div>
-
                 <div className="flex flex-col items-center gap-1">
-                    <span className="text-xs font-bold uppercase tracking-wider text-brand-secondary">
-                        Incoming Call
-                    </span>
+                    <span className="text-xs font-bold uppercase tracking-wider text-brand-secondary">Incoming Call</span>
                     <span className="text-lg font-bold text-primary">{callerNumber ?? 'Unknown'}</span>
                 </div>
-
                 <div className="flex items-center gap-3">
-                    <Button size="md" color="primary" iconLeading={Phone01} onClick={answer}>
+                    <Button size="md" color="primary" iconLeading={Phone01} onClick={() => { answer(); navigate('/call-desk'); }}>
                         Answer
                     </Button>
                     <Button size="md" color="primary-destructive" iconLeading={PhoneX} onClick={reject}>
@@ -320,207 +87,25 @@ export const CallWidget = () => {
         );
     }
 
-    // Ringing outbound
-    if (callState === 'ringing-out') {
-        return (
-            <div
-                className={cx(
-                    'fixed bottom-6 right-6 z-50 w-80',
-                    'flex flex-col items-center gap-5 rounded-2xl border border-secondary bg-primary p-6 shadow-2xl',
-                    'transition-all duration-300',
-                )}
-            >
-                <PhoneOutgoing01 className="size-10 animate-pulse text-fg-brand-primary" />
-
-                <div className="flex flex-col items-center gap-1">
-                    <span className="text-xs font-bold uppercase tracking-wider text-brand-secondary">
-                        Calling...
-                    </span>
-                    <span className="text-lg font-bold text-primary">{callerNumber ?? 'Unknown'}</span>
-                </div>
-
-                <Button size="md" color="primary-destructive" iconLeading={PhoneHangUp} onClick={hangup}>
-                    Cancel
-                </Button>
-            </div>
-        );
-    }
-
-    // Active call (full widget)
-    if (callState === 'active') {
-        return (
-            <div
-                className={cx(
-                    'fixed bottom-6 right-6 z-50 w-80',
-                    'flex flex-col gap-4 rounded-2xl border border-secondary bg-primary p-5 shadow-2xl',
-                    'transition-all duration-300',
-                )}
-            >
-                {/* Header */}
-                <div className="flex items-center justify-between">
-                    <div className="flex items-center gap-2">
-                        <Phone01 className="size-4 text-fg-success-primary" />
-                        <span className="text-sm font-semibold text-primary">Active Call</span>
-                    </div>
-                    <span className="font-mono text-sm font-bold tabular-nums text-brand-secondary">
-                        {formatDuration(callDuration)}
-                    </span>
-                </div>
-
-                {/* Caller info */}
-                <div>
-                    <span className="text-lg font-bold text-primary">
-                        {matchedLead?.contactName
-                            ? `${matchedLead.contactName.firstName ?? ''} ${matchedLead.contactName.lastName ?? ''}`.trim()
-                            : callerNumber ?? 'Unknown'}
-                    </span>
-                    {matchedLead && (
-                        <span className="ml-2 text-sm text-tertiary">{callerNumber}</span>
-                    )}
-                </div>
-
-                {/* AI Summary */}
-                {matchedLead?.aiSummary && (
-                    <div className="rounded-xl bg-brand-primary p-3">
-                        <div className="mb-1 text-xs font-bold uppercase tracking-wider text-brand-secondary">AI Insight</div>
-                        <p className="text-sm text-primary">{matchedLead.aiSummary}</p>
-                        {matchedLead.aiSuggestedAction && (
-                            <span className="mt-2 inline-block rounded-lg bg-brand-solid px-3 py-1 text-xs font-semibold text-white">
-                                {matchedLead.aiSuggestedAction}
-                            </span>
-                        )}
-                    </div>
-                )}
-
-                {/* Recent activity */}
-                {leadActivities.length > 0 && (
-                    <div className="space-y-1">
-                        <div className="text-xs font-semibold text-tertiary">Recent Activity</div>
-                        {leadActivities.slice(0, 3).map((a: any, i: number) => (
-                            <div key={i} className="text-xs text-quaternary">
-                                {a.activityType?.replace(/_/g, ' ')}: {a.summary}
-                            </div>
-                        ))}
-                    </div>
-                )}
-
-                {/* Call controls */}
-                <div className="flex items-center gap-2">
-                    <Button
-                        size="sm"
-                        color={isMuted ? 'primary' : 'secondary'}
-                        iconLeading={isMuted ? MicrophoneOff01 : Microphone01}
-                        onClick={toggleMute}
-                    >
-                        {isMuted ? 'Unmute' : 'Mute'}
-                    </Button>
-                    <Button
-                        size="sm"
-                        color={isOnHold ? 'primary' : 'secondary'}
-                        iconLeading={PauseCircle}
-                        onClick={toggleHold}
-                    >
-                        {isOnHold ? 'Resume' : 'Hold'}
-                    </Button>
-                    <Button size="sm" color="primary-destructive" iconLeading={PhoneHangUp} onClick={hangup}>
-                        End
-                    </Button>
-                </div>
-
-                {/* Book Appointment */}
-                <Button
-                    size="sm"
-                    color="primary"
-                    iconLeading={CalendarPlus02}
-                    onClick={() => setIsAppointmentOpen(true)}
-                    className="w-full"
-                >
-                    Book Appointment
-                </Button>
-
-                <AppointmentForm
-                    isOpen={isAppointmentOpen}
-                    onOpenChange={setIsAppointmentOpen}
-                    callerNumber={callerNumber}
-                    leadName={matchedLead ? `${matchedLead.contactName?.firstName ?? ''} ${matchedLead.contactName?.lastName ?? ''}`.trim() : null}
-                    leadId={matchedLead?.id}
-                    onSaved={() => {
-                        setIsAppointmentOpen(false);
-                        setDisposition('APPOINTMENT_BOOKED');
-                    }}
-                />
-
-                {/* Divider */}
-                <div className="border-t border-secondary" />
-
-                {/* Disposition */}
-                <div className="flex flex-col gap-2.5">
-                    <span className="text-xs font-bold uppercase tracking-wider text-secondary">Disposition</span>
-                    <div className="grid grid-cols-2 gap-1.5">
-                        {dispositionOptions.map((opt) => {
-                            const isSelected = disposition === opt.value;
-                            return (
-                                <button
-                                    key={opt.value}
-                                    type="button"
-                                    onClick={() => setDisposition(opt.value)}
-                                    className={cx(
-                                        'cursor-pointer rounded-lg border px-2.5 py-1.5 text-xs font-semibold transition duration-100 ease-linear',
-                                        isSelected ? cx(opt.activeClass, 'ring-2 ring-brand') : opt.defaultClass,
-                                    )}
-                                >
-                                    {opt.label}
-                                </button>
-                            );
-                        })}
-                    </div>
-
-                    <TextArea
-                        placeholder="Add notes..."
-                        value={notes}
-                        onChange={(value) => setNotes(value)}
-                        rows={2}
-                        textAreaClassName="text-xs"
-                    />
-
-                    <Button
-                        size="sm"
-                        color="primary"
-                        iconLeading={Save01}
-                        isDisabled={disposition === null || isSaving}
-                        isLoading={isSaving}
-                        onClick={handleSaveAndClose}
-                        className="w-full"
-                    >
-                        {isSaving ? 'Saving...' : 'Save & Close'}
-                    </Button>
-                </div>
-            </div>
-        );
-    }
-
-    // Ended / Failed
+    // Ended / Failed — brief notification
     if (callState === 'ended' || callState === 'failed') {
         const isEnded = callState === 'ended';
         return (
-            <div
-                className={cx(
+            <div className={cx(
                 'fixed bottom-6 right-6 z-50 w-80',
                 'flex flex-col items-center gap-2 rounded-2xl border border-secondary bg-primary p-5 shadow-2xl',
                 'transition-all duration-300',
-                )}
-            >
-                <CheckCircle
-                    className={cx('size-8', isEnded ? 'text-fg-success-primary' : 'text-fg-error-primary')}
-                />
+            )}>
+                <CheckCircle className={cx('size-8', isEnded ? 'text-fg-success-primary' : 'text-fg-error-primary')} />
                 <span className="text-sm font-semibold text-primary">
                     {isEnded ? 'Call Ended' : 'Call Failed'}
-                    {lastDuration > 0 && ` \u00B7 ${formatDuration(lastDuration)}`}
+                    {callDuration > 0 && ` \u00B7 ${formatDuration(callDuration)}`}
                 </span>
                 <span className="text-xs text-tertiary">auto-closing...</span>
             </div>
         );
     }
 
+    // Any other state (active, ringing-out) on a non-call-desk page — redirect handled by useEffect above
     return null;
 };

src/components/call-desk/click-to-call-button.tsx

@@ -2,14 +2,10 @@ import type { FC } from 'react';
 import { useState } from 'react';
 import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
 import { faPhone } from '@fortawesome/pro-duotone-svg-icons';
-import { useSetAtom } from 'jotai';
 
 const Phone01: FC<{ className?: string } & Record<string, any>> = ({ className, ...rest }) => <FontAwesomeIcon icon={faPhone} className={className} {...rest} />;
 import { Button } from '@/components/base/buttons/button';
 import { useSip } from '@/providers/sip-provider';
-import { sipCallStateAtom, sipCallerNumberAtom, sipCallUcidAtom } from '@/state/sip-state';
-import { setOutboundPending } from '@/state/sip-manager';
-import { apiClient } from '@/lib/api-client';
 import { notify } from '@/lib/toast';
 
 interface ClickToCallButtonProps {
@@ -20,33 +16,14 @@ interface ClickToCallButtonProps {
 }
 
 export const ClickToCallButton = ({ phoneNumber, label, size = 'sm' }: ClickToCallButtonProps) => {
-    const { isRegistered, isInCall } = useSip();
+    const { isRegistered, isInCall, dialOutbound } = useSip();
     const [dialing, setDialing] = useState(false);
-    const setCallState = useSetAtom(sipCallStateAtom);
-    const setCallerNumber = useSetAtom(sipCallerNumberAtom);
-    const setCallUcid = useSetAtom(sipCallUcidAtom);
 
     const handleDial = async () => {
         setDialing(true);
-
-        // Show call UI immediately
-        setCallState('ringing-out');
-        setCallerNumber(phoneNumber);
-        setOutboundPending(true);
-        // Safety: reset flag if SIP INVITE doesn't arrive within 30s
-        const safetyTimer = setTimeout(() => setOutboundPending(false), 30000);
-
         try {
-            const result = await apiClient.post<{ ucid?: string; status?: string }>('/api/ozonetel/dial', { phoneNumber });
-            if (result?.ucid) {
-                setCallUcid(result.ucid);
-            }
+            await dialOutbound(phoneNumber);
         } catch {
-            clearTimeout(safetyTimer);
-            setCallState('idle');
-            setCallerNumber(null);
-            setOutboundPending(false);
-            setCallUcid(null);
             notify.error('Dial Failed', 'Could not place the call');
         } finally {
             setDialing(false);

src/components/call-desk/context-panel.tsx

@@ -1,171 +1,324 @@
-import { useEffect, useState } from 'react';
+import { useState, useCallback, useMemo } from 'react';
 import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
-import { faSparkles, faUser } from '@fortawesome/pro-duotone-svg-icons';
+import {
+    faSparkles, faPhone, faChevronDown, faChevronUp,
+    faCalendarCheck, faClockRotateLeft, faPhoneMissed,
+    faPhoneArrowDown, faPhoneArrowUp, faListCheck,
+} from '@fortawesome/pro-duotone-svg-icons';
 import { AiChatPanel } from './ai-chat-panel';
-import { LiveTranscript } from './live-transcript';
-import { useCallAssist } from '@/hooks/use-call-assist';
 import { Badge } from '@/components/base/badges/badges';
 import { formatPhone, formatShortDate } from '@/lib/format';
 import { cx } from '@/utils/cx';
-import type { Lead, LeadActivity } from '@/types/entities';
-
-type ContextTab = 'ai' | 'lead360';
+import type { Lead, LeadActivity, Call, FollowUp, Patient, Appointment } from '@/types/entities';
+import { AppointmentForm } from './appointment-form';
 
 interface ContextPanelProps {
     selectedLead: Lead | null;
     activities: LeadActivity[];
+    calls: Call[];
+    followUps: FollowUp[];
+    appointments: Appointment[];
+    patients: Patient[];
     callerPhone?: string;
     isInCall?: boolean;
     callUcid?: string | null;
 }
 
-export const ContextPanel = ({ selectedLead, activities, callerPhone, isInCall, callUcid }: ContextPanelProps) => {
-    const [activeTab, setActiveTab] = useState<ContextTab>('ai');
+const formatTimeAgo = (dateStr: string): string => {
+    const minutes = Math.round((Date.now() - new Date(dateStr).getTime()) / 60000);
+    if (minutes < 1) return 'Just now';
+    if (minutes < 60) return `${minutes}m ago`;
+    const hours = Math.floor(minutes / 60);
+    if (hours < 24) return `${hours}h ago`;
+    return `${Math.floor(hours / 24)}d ago`;
+};
 
-    // Auto-switch to lead 360 when a lead is selected
-    useEffect(() => {
-        if (selectedLead) {
-            setActiveTab('lead360');
-        }
-    }, [selectedLead?.id]);
+const formatDuration = (sec: number): string => {
+    if (sec < 60) return `${sec}s`;
+    return `${Math.floor(sec / 60)}m ${sec % 60}s`;
+};
 
-    const { transcript, suggestions, connected: assistConnected } = useCallAssist(
-        isInCall ?? false,
-        callUcid ?? null,
-        selectedLead?.id ?? null,
-        callerPhone ?? null,
+const SectionHeader = ({ icon, label, count, expanded, onToggle }: {
+    icon: any; label: string; count?: number; expanded: boolean; onToggle: () => void;
+}) => (
+    <button
+        onClick={onToggle}
+        className="flex w-full items-center gap-1.5 py-1.5 text-left group"
+    >
+        <FontAwesomeIcon icon={icon} className="size-3 text-fg-quaternary" />
+        <span className="text-[11px] font-bold uppercase tracking-wider text-tertiary">{label}</span>
+        {count !== undefined && count > 0 && (
+            <span className="text-[10px] font-semibold text-brand-secondary bg-brand-primary px-1.5 py-0.5 rounded-full">{count}</span>
+        )}
+        <FontAwesomeIcon
+            icon={expanded ? faChevronUp : faChevronDown}
+            className="size-2.5 text-fg-quaternary ml-auto opacity-0 group-hover:opacity-100 transition duration-100 ease-linear"
+        />
+    </button>
+);
+
+export const ContextPanel = ({ selectedLead, activities, calls, followUps, appointments, patients, callerPhone, isInCall }: ContextPanelProps) => {
+    const [contextExpanded, setContextExpanded] = useState(true);
+    const [insightExpanded, setInsightExpanded] = useState(true);
+    const [actionsExpanded, setActionsExpanded] = useState(true);
+    const [recentExpanded, setRecentExpanded] = useState(true);
+    const [editingAppointment, setEditingAppointment] = useState<Appointment | null>(null);
+
+    const lead = selectedLead;
+    const firstName = lead?.contactName?.firstName ?? '';
+    const lastName = lead?.contactName?.lastName ?? '';
+    const fullName = `${firstName} ${lastName}`.trim();
+    const phone = lead?.contactPhone?.[0];
+
+    const callerContext = lead ? {
+        callerPhone: phone?.number ?? callerPhone,
+        leadId: lead.id,
+        leadName: fullName,
+    } : callerPhone ? { callerPhone } : undefined;
+
+    // Filter data for this lead
+    const leadCalls = useMemo(() =>
+        calls.filter(c => c.leadId === lead?.id || (callerPhone && c.callerNumber?.[0]?.number?.endsWith(callerPhone)))
+            .sort((a, b) => new Date(b.createdAt).getTime() - new Date(a.createdAt).getTime())
+            .slice(0, 5),
+        [calls, lead, callerPhone],
     );
 
-    const callerContext = selectedLead ? {
-        callerPhone: selectedLead.contactPhone?.[0]?.number ?? callerPhone,
-        leadId: selectedLead.id,
-        leadName: `${selectedLead.contactName?.firstName ?? ''} ${selectedLead.contactName?.lastName ?? ''}`.trim(),
-    } : callerPhone ? { callerPhone } : undefined;
+    const leadFollowUps = useMemo(() =>
+        followUps.filter(f => f.patientId === (lead as any)?.patientId && f.followUpStatus !== 'COMPLETED' && f.followUpStatus !== 'CANCELLED')
+            .sort((a, b) => new Date(a.scheduledAt ?? '').getTime() - new Date(b.scheduledAt ?? '').getTime())
+            .slice(0, 3),
+        [followUps, lead],
+    );
+
+    const leadAppointments = useMemo(() => {
+        const patientId = (lead as any)?.patientId;
+        if (!patientId) return [];
+        return appointments
+            .filter(a => a.patientId === patientId && a.appointmentStatus !== 'CANCELLED' && a.appointmentStatus !== 'NO_SHOW')
+            .sort((a, b) => new Date(a.scheduledAt ?? '').getTime() - new Date(b.scheduledAt ?? '').getTime())
+            .slice(0, 3);
+    }, [appointments, lead]);
+
+    const leadActivities = useMemo(() =>
+        activities.filter(a => a.leadId === lead?.id)
+            .sort((a, b) => new Date(b.occurredAt ?? '').getTime() - new Date(a.occurredAt ?? '').getTime())
+            .slice(0, 5),
+        [activities, lead],
+    );
+
+    // Linked patient
+    const linkedPatient = useMemo(() =>
+        patients.find(p => p.id === (lead as any)?.patientId),
+        [patients, lead],
+    );
+
+    // Auto-collapse context sections when chat starts
+    const handleChatStart = useCallback(() => {
+        setContextExpanded(false);
+    }, []);
+
+    const hasContext = !!(lead?.aiSummary || leadCalls.length || leadFollowUps.length || leadAppointments.length || leadActivities.length);
 
     return (
         <div className="flex h-full flex-col">
-            {/* Tab bar */}
-            <div className="flex shrink-0 border-b border-secondary">
+            {/* Lead header — always visible */}
+            {lead && (
+                <div className="shrink-0 border-b border-secondary">
                     <button
-                    onClick={() => setActiveTab('ai')}
-                    className={cx(
-                        "flex flex-1 items-center justify-center gap-1.5 px-3 py-2.5 text-xs font-semibold transition duration-100 ease-linear",
-                        activeTab === 'ai'
-                            ? "border-b-2 border-brand text-brand-secondary"
-                            : "text-tertiary hover:text-secondary",
-                    )}
+                        onClick={() => setContextExpanded(!contextExpanded)}
+                        className="flex w-full items-center gap-2 px-4 py-2.5 text-left hover:bg-primary_hover transition duration-100 ease-linear"
                     >
-                    <FontAwesomeIcon icon={faSparkles} className="size-3.5" />
-                    AI Assistant
+                        {isInCall && (
+                            <FontAwesomeIcon icon={faPhone} className="size-3 text-fg-success-primary shrink-0" />
+                        )}
+                        <span className="text-sm font-semibold text-primary truncate">{fullName || 'Unknown'}</span>
+                        {phone && (
+                            <span className="text-xs text-tertiary shrink-0">{formatPhone(phone)}</span>
+                        )}
+                        {lead.leadStatus && (
+                            <Badge size="sm" color="brand" type="pill-color" className="shrink-0">{lead.leadStatus.replace(/_/g, ' ')}</Badge>
+                        )}
+                        <FontAwesomeIcon
+                            icon={contextExpanded ? faChevronUp : faChevronDown}
+                            className="size-3 text-fg-quaternary ml-auto shrink-0"
+                        />
                     </button>
-                <button
-                    onClick={() => setActiveTab('lead360')}
-                    className={cx(
-                        "flex flex-1 items-center justify-center gap-1.5 px-3 py-2.5 text-xs font-semibold transition duration-100 ease-linear",
-                        activeTab === 'lead360'
-                            ? "border-b-2 border-brand text-brand-secondary"
-                            : "text-tertiary hover:text-secondary",
-                    )}
-                >
-                    <FontAwesomeIcon icon={faUser} className="size-3.5" />
-                    Lead 360
-                </button>
-            </div>
-
-            {/* Tab content */}
-            <div className="flex-1 overflow-y-auto">
-                {activeTab === 'ai' && (
-                    isInCall ? (
-                        <LiveTranscript transcript={transcript} suggestions={suggestions} connected={assistConnected} />
-                    ) : (
-                        <div className="flex h-full flex-col p-4">
-                            <AiChatPanel callerContext={callerContext} />
-                        </div>
-                    )
-                )}
-                {activeTab === 'lead360' && (
-                    <Lead360Tab lead={selectedLead} activities={activities} />
-                )}
-            </div>
-        </div>
-    );
-};
-
-const Lead360Tab = ({ lead, activities }: { lead: Lead | null; activities: LeadActivity[] }) => {
-    if (!lead) {
-        return (
-            <div className="flex flex-col items-center justify-center py-16 text-center px-4">
-                <FontAwesomeIcon icon={faUser} className="mb-3 size-8 text-fg-quaternary" />
-                <p className="text-sm text-tertiary">Select a lead from the worklist to see their full profile.</p>
-            </div>
-        );
-    }
-
-    const firstName = lead.contactName?.firstName ?? '';
-    const lastName = lead.contactName?.lastName ?? '';
-    const fullName = `${firstName} ${lastName}`.trim() || 'Unknown';
-    const phone = lead.contactPhone?.[0];
-    const email = lead.contactEmail?.[0]?.address;
-
-    const leadActivities = activities
-        .filter((a) => a.leadId === lead.id)
-        .sort((a, b) => new Date(b.occurredAt ?? b.createdAt ?? '').getTime() - new Date(a.occurredAt ?? a.createdAt ?? '').getTime())
-        .slice(0, 10);
-
-    return (
-        <div className="p-4 space-y-4">
-            {/* Profile */}
-            <div>
-                <h3 className="text-lg font-bold text-primary">{fullName}</h3>
-                {phone && <p className="text-sm text-secondary">{formatPhone(phone)}</p>}
-                {email && <p className="text-xs text-tertiary">{email}</p>}
-                <div className="mt-2 flex flex-wrap gap-1.5">
-                    {lead.leadStatus && <Badge size="sm" color="brand">{lead.leadStatus}</Badge>}
-                    {lead.leadSource && <Badge size="sm" color="gray">{lead.leadSource}</Badge>}
-                    {lead.priority && lead.priority !== 'NORMAL' && (
-                        <Badge size="sm" color={lead.priority === 'URGENT' ? 'error' : 'warning'}>{lead.priority}</Badge>
-                    )}
-                </div>
-                {lead.interestedService && (
-                    <p className="mt-2 text-sm text-secondary">Interested in: {lead.interestedService}</p>
-                )}
-                {lead.leadScore !== null && lead.leadScore !== undefined && (
-                    <p className="text-xs text-tertiary">Lead score: {lead.leadScore}</p>
-                )}
-            </div>
 
+                    {/* Expanded context sections */}
+                    {contextExpanded && (
+                        <div className="px-4 pb-3 space-y-1 overflow-y-auto" style={{ maxHeight: '50vh' }}>
                             {/* AI Insight */}
-            {(lead.aiSummary || lead.aiSuggestedAction) && (
-                <div className="rounded-lg bg-brand-primary p-3">
-                    <div className="mb-1 flex items-center gap-1.5">
-                        <FontAwesomeIcon icon={faSparkles} className="size-3 text-fg-brand-primary" />
-                        <span className="text-[10px] font-bold uppercase tracking-wider text-brand-secondary">AI Insight</span>
-                    </div>
-                    {lead.aiSummary && <p className="text-xs text-primary">{lead.aiSummary}</p>}
+                            {lead.aiSummary && (
+                                <div>
+                                    <SectionHeader icon={faSparkles} label="AI Insight" expanded={insightExpanded} onToggle={() => setInsightExpanded(!insightExpanded)} />
+                                    {insightExpanded && (
+                                        <div className="rounded-lg bg-brand-primary p-2.5 mb-1">
+                                            <p className="text-xs leading-relaxed text-primary">{lead.aiSummary}</p>
                                             {lead.aiSuggestedAction && (
-                        <p className="mt-1 text-xs font-semibold text-brand-secondary">{lead.aiSuggestedAction}</p>
+                                                <p className="mt-1.5 text-xs font-semibold text-brand-secondary">{lead.aiSuggestedAction}</p>
+                                            )}
+                                        </div>
                                     )}
                                 </div>
                             )}
 
-            {/* Activity timeline */}
-            {leadActivities.length > 0 && (
+                            {/* Quick Actions — upcoming appointments + follow-ups + linked patient */}
+                            {(leadAppointments.length > 0 || leadFollowUps.length > 0 || linkedPatient) && (
                                 <div>
-                    <h4 className="mb-2 text-xs font-bold text-secondary uppercase">Activity</h4>
-                    <div className="space-y-2">
-                        {leadActivities.map((a) => (
-                            <div key={a.id} className="flex items-start gap-2">
-                                <div className="mt-1.5 size-1.5 shrink-0 rounded-full bg-fg-quaternary" />
+                                    <SectionHeader icon={faListCheck} label="Upcoming" count={leadAppointments.length + leadFollowUps.length} expanded={actionsExpanded} onToggle={() => setActionsExpanded(!actionsExpanded)} />
+                                    {actionsExpanded && (
+                                        <div className="space-y-1 mb-1">
+                                            {leadAppointments.map(appt => (
+                                                <div key={appt.id} className="flex items-center gap-2 rounded-lg bg-secondary px-2.5 py-2">
+                                                    <FontAwesomeIcon icon={faCalendarCheck} className="size-3 text-fg-brand-primary shrink-0" />
                                                     <div className="min-w-0 flex-1">
-                                    <p className="text-xs text-primary">{a.summary}</p>
-                                    <p className="text-[10px] text-quaternary">
-                                        {a.activityType}{a.occurredAt ? ` · ${formatShortDate(a.occurredAt)}` : ''}
-                                    </p>
+                                                        <span className="text-xs font-medium text-primary">
+                                                            {appt.doctorName ?? 'Appointment'}
+                                                        </span>
+                                                        <span className="text-[11px] text-tertiary ml-1">
+                                                            {appt.department}
+                                                        </span>
+                                                        {appt.scheduledAt && (
+                                                            <span className="text-[11px] text-tertiary ml-1">
+                                                                — {formatShortDate(appt.scheduledAt)}
+                                                            </span>
+                                                        )}
                                                     </div>
+                                                    <Badge size="sm" color={appt.appointmentStatus === 'COMPLETED' ? 'success' : 'brand'} type="pill-color">
+                                                        {appt.appointmentStatus?.replace(/_/g, ' ') ?? 'Scheduled'}
+                                                    </Badge>
+                                                    <button
+                                                        onClick={() => setEditingAppointment(appt)}
+                                                        className="text-[11px] font-medium text-brand-secondary hover:text-brand-secondary_hover shrink-0"
+                                                    >
+                                                        Edit
+                                                    </button>
                                                 </div>
                                             ))}
+                                            {leadFollowUps.map(fu => (
+                                                <div key={fu.id} className="flex items-center gap-2 rounded-lg bg-secondary px-2.5 py-2">
+                                                    <FontAwesomeIcon icon={faClockRotateLeft} className="size-3 text-fg-warning-primary shrink-0" />
+                                                    <div className="min-w-0 flex-1">
+                                                        <span className="text-xs font-medium text-primary">
+                                                            {fu.followUpType?.replace(/_/g, ' ') ?? 'Follow-up'}
+                                                        </span>
+                                                        {fu.scheduledAt && (
+                                                            <span className="text-[11px] text-tertiary ml-1.5">
+                                                                {formatShortDate(fu.scheduledAt)}
+                                                            </span>
+                                                        )}
                                                     </div>
+                                                    <Badge size="sm" color={fu.followUpStatus === 'OVERDUE' ? 'error' : 'gray'} type="pill-color">
+                                                        {fu.followUpStatus?.replace(/_/g, ' ') ?? 'Pending'}
+                                                    </Badge>
                                                 </div>
+                                            ))}
+                                            {linkedPatient && (
+                                                <div className="flex items-center gap-2 rounded-lg bg-secondary px-2.5 py-2">
+                                                    <FontAwesomeIcon icon={faPhone} className="size-3 text-fg-success-primary shrink-0" />
+                                                    <span className="text-xs text-primary">
+                                                        Patient: <span className="font-medium">{linkedPatient.fullName?.firstName} {linkedPatient.fullName?.lastName}</span>
+                                                    </span>
+                                                    {linkedPatient.patientType && (
+                                                        <Badge size="sm" color="gray" type="pill-color" className="ml-auto">{linkedPatient.patientType}</Badge>
+                                                    )}
+                                                </div>
+                                            )}
+                                        </div>
+                                    )}
+                                </div>
+                            )}
+
+                            {/* Recent calls + activities */}
+                            {(leadCalls.length > 0 || leadActivities.length > 0) && (
+                                <div>
+                                    <SectionHeader
+                                        icon={faClockRotateLeft}
+                                        label="Recent"
+                                        count={leadCalls.length + leadActivities.length}
+                                        expanded={recentExpanded}
+                                        onToggle={() => setRecentExpanded(!recentExpanded)}
+                                    />
+                                    {recentExpanded && (
+                                        <div className="space-y-0.5 mb-1">
+                                            {leadCalls.map(call => (
+                                                <div key={call.id} className="flex items-center gap-2 py-1.5 px-1">
+                                                    <FontAwesomeIcon
+                                                        icon={call.callStatus === 'MISSED' ? faPhoneMissed : call.callDirection === 'INBOUND' ? faPhoneArrowDown : faPhoneArrowUp}
+                                                        className={cx('size-3 shrink-0',
+                                                            call.callStatus === 'MISSED' ? 'text-fg-error-primary' :
+                                                            call.callDirection === 'INBOUND' ? 'text-fg-success-secondary' : 'text-fg-brand-secondary'
+                                                        )}
+                                                    />
+                                                    <div className="min-w-0 flex-1">
+                                                        <span className="text-xs text-primary">
+                                                            {call.callStatus === 'MISSED' ? 'Missed' : call.callDirection === 'INBOUND' ? 'Inbound' : 'Outbound'} call
+                                                        </span>
+                                                        {call.durationSeconds != null && call.durationSeconds > 0 && (
+                                                            <span className="text-[11px] text-tertiary ml-1">— {formatDuration(call.durationSeconds)}</span>
+                                                        )}
+                                                        {call.disposition && (
+                                                            <span className="text-[11px] text-tertiary ml-1">, {call.disposition.replace(/_/g, ' ')}</span>
+                                                        )}
+                                                    </div>
+                                                    <span className="text-[11px] text-quaternary shrink-0">
+                                                        {formatTimeAgo(call.startedAt ?? call.createdAt)}
+                                                    </span>
+                                                </div>
+                                            ))}
+                                            {leadActivities
+                                                .filter(a => !leadCalls.some(c => a.summary?.includes(c.callerNumber?.[0]?.number ?? '---')))
+                                                .slice(0, 3)
+                                                .map(a => (
+                                                    <div key={a.id} className="flex items-center gap-2 py-1.5 px-1">
+                                                        <span className="size-1.5 rounded-full bg-fg-quaternary shrink-0" />
+                                                        <span className="text-xs text-tertiary truncate flex-1">{a.summary}</span>
+                                                        {a.occurredAt && (
+                                                            <span className="text-[11px] text-quaternary shrink-0">{formatTimeAgo(a.occurredAt)}</span>
+                                                        )}
+                                                    </div>
+                                                ))
+                                            }
+                                        </div>
+                                    )}
+                                </div>
+                            )}
+
+                            {/* No context available */}
+                            {!hasContext && (
+                                <p className="text-xs text-quaternary py-2">No history for this lead yet.</p>
+                            )}
+                        </div>
+                    )}
+                </div>
+            )}
+
+            {/* AI Chat — fills remaining space */}
+            <div className="flex flex-1 flex-col min-h-0 overflow-hidden">
+                <AiChatPanel callerContext={callerContext} onChatStart={handleChatStart} />
+            </div>
+
+            {/* Appointment edit form */}
+            {editingAppointment && (
+                <AppointmentForm
+                    isOpen={!!editingAppointment}
+                    onOpenChange={(open) => { if (!open) setEditingAppointment(null); }}
+                    callerNumber={callerPhone}
+                    leadName={fullName}
+                    leadId={lead?.id}
+                    patientId={editingAppointment.patientId}
+                    existingAppointment={{
+                        id: editingAppointment.id,
+                        scheduledAt: editingAppointment.scheduledAt ?? '',
+                        doctorName: editingAppointment.doctorName ?? '',
+                        doctorId: editingAppointment.doctorId ?? undefined,
+                        department: editingAppointment.department ?? '',
+                        reasonForVisit: editingAppointment.reasonForVisit ?? undefined,
+                        status: editingAppointment.appointmentStatus ?? 'SCHEDULED',
+                    }}
+                    onSaved={() => setEditingAppointment(null)}
+                />
             )}
         </div>
     );

src/components/call-desk/disposition-modal.tsx

@@ -0,0 +1,169 @@
+import { useState, useRef } from 'react';
+import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
+import { faPhoneHangup } from '@fortawesome/pro-duotone-svg-icons';
+import { Dialog, Modal, ModalOverlay } from '@/components/application/modals/modal';
+import { FeaturedIcon } from '@/components/foundations/featured-icon/featured-icon';
+import { TextArea } from '@/components/base/textarea/textarea';
+import type { FC } from 'react';
+import type { CallDisposition } from '@/types/entities';
+import { cx } from '@/utils/cx';
+
+const PhoneHangUpIcon: FC<{ className?: string }> = ({ className }) => (
+    <FontAwesomeIcon icon={faPhoneHangup} className={className} />
+);
+
+const dispositionOptions: Array<{
+    value: CallDisposition;
+    label: string;
+    activeClass: string;
+    defaultClass: string;
+}> = [
+    {
+        value: 'APPOINTMENT_BOOKED',
+        label: 'Appointment Booked',
+        activeClass: 'bg-success-solid text-white border-transparent',
+        defaultClass: 'bg-success-primary text-success-primary border-success',
+    },
+    {
+        value: 'FOLLOW_UP_SCHEDULED',
+        label: 'Follow-up Needed',
+        activeClass: 'bg-brand-solid text-white border-transparent',
+        defaultClass: 'bg-brand-primary text-brand-secondary border-brand',
+    },
+    {
+        value: 'INFO_PROVIDED',
+        label: 'Info Provided',
+        activeClass: 'bg-utility-blue-light-600 text-white border-transparent',
+        defaultClass: 'bg-utility-blue-light-50 text-utility-blue-light-700 border-utility-blue-light-200',
+    },
+    {
+        value: 'NO_ANSWER',
+        label: 'No Answer',
+        activeClass: 'bg-warning-solid text-white border-transparent',
+        defaultClass: 'bg-warning-primary text-warning-primary border-warning',
+    },
+    {
+        value: 'WRONG_NUMBER',
+        label: 'Wrong Number',
+        activeClass: 'bg-secondary-solid text-white border-transparent',
+        defaultClass: 'bg-secondary text-secondary border-secondary',
+    },
+    {
+        value: 'CALLBACK_REQUESTED',
+        label: 'Not Interested',
+        activeClass: 'bg-error-solid text-white border-transparent',
+        defaultClass: 'bg-error-primary text-error-primary border-error',
+    },
+];
+
+type DispositionModalProps = {
+    isOpen: boolean;
+    callerName: string;
+    callerDisconnected: boolean;
+    defaultDisposition?: CallDisposition | null;
+    onSubmit: (disposition: CallDisposition, notes: string) => void;
+    onDismiss?: () => void;
+};
+
+export const DispositionModal = ({ isOpen, callerName, callerDisconnected, defaultDisposition, onSubmit, onDismiss }: DispositionModalProps) => {
+    const [selected, setSelected] = useState<CallDisposition | null>(null);
+    const [notes, setNotes] = useState('');
+    const appliedDefaultRef = useRef<CallDisposition | null | undefined>(undefined);
+
+    // Pre-select when modal opens with a suggestion
+    if (isOpen && defaultDisposition && appliedDefaultRef.current !== defaultDisposition) {
+        appliedDefaultRef.current = defaultDisposition;
+        setSelected(defaultDisposition);
+    }
+
+    const handleSubmit = () => {
+        if (selected === null) return;
+        onSubmit(selected, notes);
+        setSelected(null);
+        setNotes('');
+        appliedDefaultRef.current = undefined;
+    };
+
+    return (
+        <ModalOverlay isOpen={isOpen} isDismissable onOpenChange={(open) => { if (!open && onDismiss) onDismiss(); }}>
+            <Modal className="sm:max-w-md">
+                <Dialog>
+                    {() => (
+                        <div className="flex w-full flex-col rounded-xl bg-primary shadow-xl ring-1 ring-secondary overflow-hidden">
+                            {/* Header */}
+                            <div className="flex flex-col items-center gap-3 px-6 pt-6 pb-4">
+                                <FeaturedIcon icon={PhoneHangUpIcon} color={callerDisconnected ? 'warning' : 'error'} theme="light" size="md" />
+                                <div className="text-center">
+                                    <h2 className="text-lg font-semibold text-primary">
+                                        {callerDisconnected ? 'Call Disconnected' : 'End Call'}
+                                    </h2>
+                                    <p className="mt-1 text-sm text-tertiary">
+                                        {callerDisconnected
+                                            ? `${callerName} disconnected. What was the outcome?`
+                                            : `Select a reason to end the call with ${callerName}.`
+                                        }
+                                    </p>
+                                </div>
+                            </div>
+
+                            {/* Disposition options */}
+                            <div className="px-6 pb-4">
+                                <div className="grid grid-cols-2 gap-2">
+                                    {dispositionOptions.map((option) => {
+                                        const isSelected = selected === option.value;
+                                        return (
+                                            <button
+                                                key={option.value}
+                                                type="button"
+                                                onClick={() => setSelected(option.value)}
+                                                className={cx(
+                                                    'cursor-pointer rounded-xl border-2 p-3 text-sm font-semibold transition duration-100 ease-linear',
+                                                    isSelected
+                                                        ? cx(option.activeClass, 'ring-2 ring-brand')
+                                                        : option.defaultClass,
+                                                )}
+                                            >
+                                                {option.label}
+                                            </button>
+                                        );
+                                    })}
+                                </div>
+
+                                <div className="mt-3">
+                                    <TextArea
+                                        label="Notes (optional)"
+                                        placeholder="Add any notes about this call..."
+                                        value={notes}
+                                        onChange={(value) => setNotes(value)}
+                                        rows={2}
+                                        textAreaClassName="text-sm"
+                                    />
+                                </div>
+                            </div>
+
+                            {/* Footer */}
+                            <div className="border-t border-secondary px-6 py-4">
+                                <button
+                                    type="button"
+                                    onClick={handleSubmit}
+                                    disabled={selected === null}
+                                    className={cx(
+                                        'w-full rounded-xl px-6 py-2.5 text-sm font-semibold transition duration-100 ease-linear',
+                                        selected !== null
+                                            ? 'cursor-pointer bg-error-solid text-white hover:bg-error-solid_hover'
+                                            : 'cursor-not-allowed bg-disabled text-disabled',
+                                    )}
+                                >
+                                    {callerDisconnected
+                                        ? (selected ? 'Submit & Close' : 'Select a reason')
+                                        : (selected ? 'End Call & Submit' : 'Select a reason to end call')
+                                    }
+                                </button>
+                            </div>
+                        </div>
+                    )}
+                </Dialog>
+            </Modal>
+        </ModalOverlay>
+    );
+};

src/components/call-desk/enquiry-form.tsx

@@ -1,11 +1,12 @@
 import { useState, useEffect } from 'react';
 import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
-import { faClipboardQuestion, faXmark } from '@fortawesome/pro-duotone-svg-icons';
+import { faUserPen } from '@fortawesome/pro-duotone-svg-icons';
 import { Input } from '@/components/base/input/input';
 import { Select } from '@/components/base/select/select';
 import { TextArea } from '@/components/base/textarea/textarea';
 import { Checkbox } from '@/components/base/checkbox/checkbox';
 import { Button } from '@/components/base/buttons/button';
+import { EditPatientConfirmModal } from '@/components/modals/edit-patient-confirm-modal';
 import { apiClient } from '@/lib/api-client';
 import { notify } from '@/lib/toast';
 
@@ -13,20 +14,26 @@ type EnquiryFormProps = {
     isOpen: boolean;
     onOpenChange: (open: boolean) => void;
     callerPhone?: string | null;
+    // Pre-populated caller name (from caller-resolution). When set, the
+    // patient-name field is locked behind the Edit-confirm modal to
+    // prevent accidental rename-on-save. When empty or null, the field
+    // starts unlocked because there's no existing name to protect.
+    leadName?: string | null;
+    leadId?: string | null;
+    patientId?: string | null;
+    agentName?: string | null;
     onSaved?: () => void;
 };
 
-const dispositionItems = [
-    { id: 'CONVERTED', label: 'Converted' },
-    { id: 'FOLLOW_UP', label: 'Follow-up Needed' },
-    { id: 'GENERAL_QUERY', label: 'General Query' },
-    { id: 'NO_ANSWER', label: 'No Answer' },
-    { id: 'INVALID_NUMBER', label: 'Invalid Number' },
-    { id: 'CALL_DROPPED', label: 'Call Dropped' },
-];
 
-export const EnquiryForm = ({ isOpen, onOpenChange, callerPhone, onSaved }: EnquiryFormProps) => {
-    const [patientName, setPatientName] = useState('');
+export const EnquiryForm = ({ isOpen, onOpenChange, callerPhone, leadName, leadId: propLeadId, patientId, agentName, onSaved }: EnquiryFormProps) => {
+    // Initial name captured at form open — used to detect whether the
+    // agent actually changed the name before committing any updatePatient /
+    // updateLead.contactName mutations. See also appointment-form.tsx.
+    const initialLeadName = (leadName ?? '').trim();
+    const [patientName, setPatientName] = useState(leadName ?? '');
+    const [isNameEditable, setIsNameEditable] = useState(initialLeadName.length === 0);
+    const [editConfirmOpen, setEditConfirmOpen] = useState(false);
     const [source, setSource] = useState('Phone Inquiry');
     const [queryAsked, setQueryAsked] = useState('');
     const [isExisting, setIsExisting] = useState(false);
@@ -35,7 +42,6 @@ export const EnquiryForm = ({ isOpen, onOpenChange, callerPhone, onSaved }: Enqu
     const [doctor, setDoctor] = useState<string | null>(null);
     const [followUpNeeded, setFollowUpNeeded] = useState(false);
     const [followUpDate, setFollowUpDate] = useState('');
-    const [disposition, setDisposition] = useState<string | null>(null);
     const [isSaving, setIsSaving] = useState(false);
     const [error, setError] = useState<string | null>(null);
 
@@ -64,8 +70,8 @@ export const EnquiryForm = ({ isOpen, onOpenChange, callerPhone, onSaved }: Enqu
     const doctorItems = filteredDoctors.map(d => ({ id: d.id, label: d.name }));
 
     const handleSave = async () => {
-        if (!patientName.trim() || !queryAsked.trim() || !disposition) {
-            setError('Please fill in required fields: patient name, query, and disposition.');
+        if (!patientName.trim() || !queryAsked.trim()) {
+            setError('Please fill in required fields: patient name and query.');
             return;
         }
 
@@ -73,23 +79,93 @@ export const EnquiryForm = ({ isOpen, onOpenChange, callerPhone, onSaved }: Enqu
         setError(null);
 
         try {
-            // Create a lead with source PHONE_INQUIRY
+            // Use passed leadId or resolve from phone
+            let leadId: string | null = propLeadId ?? null;
+            if (!leadId && registeredPhone) {
+                const resolved = await apiClient.post<{ leadId: string; patientId: string }>('/api/caller/resolve', { phone: registeredPhone }, { silent: true });
+                leadId = resolved.leadId;
+            }
+
+            // Determine whether the agent actually renamed the patient.
+            // Only a non-empty, changed-from-initial name counts — empty
+            // strings or an unchanged name never trigger the rename
+            // chain, even if the field was unlocked.
+            const trimmedName = patientName.trim();
+            const nameChanged = isNameEditable && trimmedName.length > 0 && trimmedName !== initialLeadName;
+            const nameParts = {
+                firstName: trimmedName.split(' ')[0],
+                lastName: trimmedName.split(' ').slice(1).join(' ') || '',
+            };
+
+            if (leadId) {
+                // Update existing lead with enquiry details. Only touches
+                // contactName if the agent explicitly renamed — otherwise
+                // we leave the existing caller identity alone.
+                await apiClient.graphql(
+                    `mutation($id: UUID!, $data: LeadUpdateInput!) { updateLead(id: $id, data: $data) { id } }`,
+                    {
+                        id: leadId,
+                        data: {
+                            name: `Enquiry — ${trimmedName || 'Unknown caller'}`,
+                            source: 'PHONE',
+                            status: 'CONTACTED',
+                            interestedService: queryAsked.substring(0, 100),
+                            ...(nameChanged ? { contactName: nameParts } : {}),
+                        },
+                    },
+                );
+            } else {
+                // No matched lead — create a fresh one. For net-new leads
+                // we always populate contactName from the typed value
+                // (there's no existing record to protect).
                 await apiClient.graphql(
                     `mutation($data: LeadCreateInput!) { createLead(data: $data) { id } }`,
                     {
                         data: {
-                        name: `Enquiry — ${patientName}`,
-                        contactName: { firstName: patientName.split(' ')[0], lastName: patientName.split(' ').slice(1).join(' ') || '' },
+                            name: `Enquiry — ${trimmedName || 'Unknown caller'}`,
+                            contactName: nameParts,
                             contactPhone: registeredPhone ? { primaryPhoneNumber: registeredPhone } : undefined,
-                        source: 'PHONE_INQUIRY',
-                        status: disposition === 'CONVERTED' ? 'CONVERTED' : 'NEW',
+                            source: 'PHONE',
+                            status: 'CONTACTED',
                             interestedService: queryAsked.substring(0, 100),
                         },
                     },
                 );
+            }
+
+            // Update linked patient's name ONLY if the agent explicitly
+            // renamed. Fixes the long-standing bug where typing a name
+            // into this form silently overwrote the existing patient
+            // record.
+            if (nameChanged && patientId) {
+                await apiClient.graphql(
+                    `mutation($id: UUID!, $data: PatientUpdateInput!) { updatePatient(id: $id, data: $data) { id } }`,
+                    {
+                        id: patientId,
+                        data: {
+                            fullName: nameParts,
+                        },
+                    },
+                ).catch((err: unknown) => console.warn('Failed to update patient name:', err));
+            }
+
+            // Post-save side-effects. If the agent actually renamed the
+            // patient, kick off AI summary regen + cache invalidation.
+            // Otherwise just invalidate the cache so the status update
+            // propagates.
+            if (nameChanged && leadId) {
+                apiClient.post(`/api/lead/${leadId}/enrich`, { phone: callerPhone ?? undefined }, { silent: true }).catch(() => {});
+            } else if (callerPhone) {
+                apiClient.post('/api/caller/invalidate', { phone: callerPhone }, { silent: true }).catch(() => {});
+            }
 
             // Create follow-up if needed
-            if (followUpNeeded && followUpDate) {
+            if (followUpNeeded) {
+                if (!followUpDate) {
+                    setError('Please select a follow-up date.');
+                    setIsSaving(false);
+                    return;
+                }
                 await apiClient.graphql(
                     `mutation($data: FollowUpCreateInput!) { createFollowUp(data: $data) { id } }`,
                     {
@@ -98,7 +174,9 @@ export const EnquiryForm = ({ isOpen, onOpenChange, callerPhone, onSaved }: Enqu
                             typeCustom: 'CALLBACK',
                             status: 'PENDING',
                             priority: 'NORMAL',
+                            assignedAgent: agentName ?? undefined,
                             scheduledAt: new Date(`${followUpDate}T09:00:00`).toISOString(),
+                            patientId: patientId ?? undefined,
                         },
                     },
                     { silent: true },
@@ -117,27 +195,38 @@ export const EnquiryForm = ({ isOpen, onOpenChange, callerPhone, onSaved }: Enqu
     if (!isOpen) return null;
 
     return (
-        <div className="rounded-xl border border-secondary bg-primary p-4">
-            <div className="flex items-center justify-between mb-4">
-                <div className="flex items-center gap-3">
-                    <div className="flex size-8 items-center justify-center rounded-lg bg-warning-secondary">
-                        <FontAwesomeIcon icon={faClipboardQuestion} className="size-4 text-fg-warning-primary" />
-                    </div>
-                    <div>
-                        <h3 className="text-sm font-semibold text-primary">Log Enquiry</h3>
-                        <p className="text-xs text-tertiary">Capture caller's question and details</p>
-                    </div>
-                </div>
-                <button
-                    onClick={() => onOpenChange(false)}
-                    className="flex size-7 items-center justify-center rounded-md text-fg-quaternary hover:text-fg-secondary hover:bg-primary_hover transition duration-100 ease-linear"
-                >
-                    <FontAwesomeIcon icon={faXmark} className="size-4" />
-                </button>
-            </div>
-
+        <div className="flex flex-col flex-1 min-h-0">
+            {/* Form fields — scrollable */}
+            <div className="flex-1 overflow-y-auto">
             <div className="flex flex-col gap-3">
-                <Input label="Patient Name" placeholder="Full name" value={patientName} onChange={setPatientName} isRequired />
+                {/* Patient name — locked by default for existing callers,
+                    unlocked for new callers with no prior name on record.
+                    The Edit button opens a confirm modal before unlocking;
+                    see EditPatientConfirmModal for the rationale. */}
+                <div className="flex items-end gap-2">
+                    <div className="flex-1">
+                        <Input
+                            label="Patient Name"
+                            placeholder="Full name"
+                            value={patientName}
+                            onChange={setPatientName}
+                            isRequired
+                            isDisabled={!isNameEditable}
+                        />
+                    </div>
+                    {!isNameEditable && initialLeadName.length > 0 && (
+                        <Button
+                            size="sm"
+                            color="secondary"
+                            iconLeading={({ className }: { className?: string }) => (
+                                <FontAwesomeIcon icon={faUserPen} className={className} />
+                            )}
+                            onClick={() => setEditConfirmOpen(true)}
+                        >
+                            Edit
+                        </Button>
+                    )}
+                </div>
 
                 <Input label="Source / Referral" placeholder="How did they reach us?" value={source} onChange={setSource} isRequired />
 
@@ -168,22 +257,37 @@ export const EnquiryForm = ({ isOpen, onOpenChange, callerPhone, onSaved }: Enqu
                     <Input label="Follow-up Date" type="date" value={followUpDate} onChange={setFollowUpDate} isRequired />
                 )}
 
-                <Select label="Disposition" placeholder="Select outcome" items={dispositionItems} selectedKey={disposition}
-                    onSelectionChange={(key) => setDisposition(key as string)} isRequired>
-                    {(item) => <Select.Item id={item.id} label={item.label} />}
-                </Select>
-
                 {error && (
                     <div className="rounded-lg bg-error-primary p-3 text-sm text-error-primary">{error}</div>
                 )}
             </div>
+            </div>
 
-            <div className="flex items-center justify-end gap-3 mt-4 pt-4 border-t border-secondary">
+            {/* Footer — pinned */}
+            <div className="shrink-0 flex items-center justify-end gap-3 pt-4 border-t border-secondary">
                 <Button size="sm" color="secondary" onClick={() => onOpenChange(false)}>Cancel</Button>
                 <Button size="sm" color="primary" isLoading={isSaving} showTextWhileLoading onClick={handleSave}>
                     {isSaving ? 'Saving...' : 'Log Enquiry'}
                 </Button>
             </div>
+
+            <EditPatientConfirmModal
+                isOpen={editConfirmOpen}
+                onOpenChange={setEditConfirmOpen}
+                onConfirm={() => {
+                    setIsNameEditable(true);
+                    setEditConfirmOpen(false);
+                }}
+                description={
+                    <>
+                        You&apos;re about to change the name on this patient&apos;s record. This will
+                        update their profile across Helix Engage, including past appointments,
+                        lead history, and AI summary. Only proceed if the current name is
+                        actually wrong — for all other cases, cancel and continue logging the
+                        enquiry as-is.
+                    </>
+                }
+            />
         </div>
     );
 };

src/components/call-desk/live-transcript.tsx

@@ -1,6 +1,7 @@
 import { useEffect, useRef } from 'react';
 import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
 import { faSparkles, faMicrophone } from '@fortawesome/pro-duotone-svg-icons';
+import { formatTimeFull } from '@/lib/format';
 import { cx } from '@/utils/cx';
 
 type TranscriptLine = {
@@ -78,7 +79,7 @@ export const LiveTranscript = ({ transcript, suggestions, connected }: LiveTrans
                             item.isFinal ? "text-primary" : "text-tertiary italic",
                         )}>
                             <span className="text-xs text-quaternary mr-2">
-                                {item.timestamp.toLocaleTimeString('en-IN', { hour: '2-digit', minute: '2-digit', second: '2-digit' })}
+                                {formatTimeFull(item.timestamp.toISOString())}
                             </span>
                             {item.text}
                         </div>

src/components/call-desk/phone-action-cell.tsx

@@ -1,11 +1,7 @@
 import { useState, useRef, useEffect } from 'react';
 import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
 import { faPhone, faCommentDots, faEllipsisVertical, faMessageDots } from '@fortawesome/pro-duotone-svg-icons';
-import { useSetAtom } from 'jotai';
 import { useSip } from '@/providers/sip-provider';
-import { sipCallStateAtom, sipCallerNumberAtom, sipCallUcidAtom } from '@/state/sip-state';
-import { setOutboundPending } from '@/state/sip-manager';
-import { apiClient } from '@/lib/api-client';
 import { notify } from '@/lib/toast';
 import { cx } from '@/utils/cx';
 
@@ -13,13 +9,11 @@ type PhoneActionCellProps = {
     phoneNumber: string;
     displayNumber: string;
     leadId?: string;
+    onDial?: () => void;
 };
 
-export const PhoneActionCell = ({ phoneNumber, displayNumber, leadId: _leadId }: PhoneActionCellProps) => {
-    const { isRegistered, isInCall } = useSip();
-    const setCallState = useSetAtom(sipCallStateAtom);
-    const setCallerNumber = useSetAtom(sipCallerNumberAtom);
-    const setCallUcid = useSetAtom(sipCallUcidAtom);
+export const PhoneActionCell = ({ phoneNumber, displayNumber, leadId: _leadId, onDial }: PhoneActionCellProps) => {
+    const { isRegistered, isInCall, dialOutbound } = useSip();
     const [menuOpen, setMenuOpen] = useState(false);
     const [dialing, setDialing] = useState(false);
     const menuRef = useRef<HTMLDivElement>(null);
@@ -41,20 +35,10 @@ export const PhoneActionCell = ({ phoneNumber, displayNumber, leadId: _leadId }:
         if (!isRegistered || isInCall || dialing) return;
         setMenuOpen(false);
         setDialing(true);
-        setCallState('ringing-out');
-        setCallerNumber(phoneNumber);
-        setOutboundPending(true);
-        const safetyTimer = setTimeout(() => setOutboundPending(false), 30000);
-
         try {
-            const result = await apiClient.post<{ ucid?: string }>('/api/ozonetel/dial', { phoneNumber });
-            if (result?.ucid) setCallUcid(result.ucid);
+            onDial?.();
+            await dialOutbound(phoneNumber);
         } catch {
-            clearTimeout(safetyTimer);
-            setCallState('idle');
-            setCallerNumber(null);
-            setOutboundPending(false);
-            setCallUcid(null);
             notify.error('Dial Failed', 'Could not place the call');
         } finally {
             setDialing(false);

src/components/call-desk/recording-analysis.tsx

@@ -0,0 +1,302 @@
+import { useEffect, useRef, useState } from 'react';
+import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
+import { faWaveformLines, faSpinner, faPlay, faPause } from '@fortawesome/pro-duotone-svg-icons';
+import { Badge } from '@/components/base/badges/badges';
+import { Button } from '@/components/base/buttons/button';
+import { SlideoutMenu } from '@/components/application/slideout-menus/slideout-menu';
+import { apiClient } from '@/lib/api-client';
+import { formatPhone, formatDateOnly } from '@/lib/format';
+import { cx } from '@/utils/cx';
+
+type Utterance = {
+    speaker: number;
+    start: number;
+    end: number;
+    text: string;
+};
+
+type Insights = {
+    keyTopics: string[];
+    actionItems: string[];
+    coachingNotes: string[];
+    complianceFlags: string[];
+    patientSatisfaction: string;
+    callOutcome: string;
+};
+
+type Analysis = {
+    transcript: Utterance[];
+    summary: string | null;
+    sentiment: 'positive' | 'neutral' | 'negative' | 'mixed';
+    sentimentScore: number;
+    insights: Insights;
+    durationSec: number;
+};
+
+const sentimentConfig = {
+    positive: { label: 'Positive', color: 'success' as const },
+    neutral: { label: 'Neutral', color: 'gray' as const },
+    negative: { label: 'Negative', color: 'error' as const },
+    mixed: { label: 'Mixed', color: 'warning' as const },
+};
+
+const formatTimestamp = (sec: number): string => {
+    const m = Math.floor(sec / 60);
+    const s = Math.floor(sec % 60);
+    return `${m}:${s.toString().padStart(2, '0')}`;
+};
+
+const formatDuration = (sec: number | null): string => {
+    if (!sec) return '';
+    const m = Math.floor(sec / 60);
+    const s = sec % 60;
+    return `${m}:${s.toString().padStart(2, '0')}`;
+};
+
+// Inline audio player for the slideout header
+const SlideoutPlayer = ({ url }: { url: string }) => {
+    const audioRef = useRef<HTMLAudioElement>(null);
+    const [playing, setPlaying] = useState(false);
+
+    const toggle = () => {
+        if (!audioRef.current) return;
+        if (playing) { audioRef.current.pause(); } else { audioRef.current.play(); }
+        setPlaying(!playing);
+    };
+
+    return (
+        <div className="flex items-center gap-2">
+            <button
+                onClick={toggle}
+                className="flex size-8 items-center justify-center rounded-full bg-brand-solid text-white hover:opacity-90 transition duration-100 ease-linear"
+            >
+                <FontAwesomeIcon icon={playing ? faPause : faPlay} className="size-3.5" />
+            </button>
+            <span className="text-xs text-tertiary">{playing ? 'Playing...' : 'Play recording'}</span>
+            <audio ref={audioRef} src={url} onEnded={() => setPlaying(false)} />
+        </div>
+    );
+};
+
+// Insights section rendered after analysis completes
+const InsightsSection = ({ label, children }: { label: string; children: React.ReactNode }) => (
+    <div className="rounded-lg bg-secondary p-3">
+        <span className="text-xs font-semibold text-tertiary uppercase tracking-wider">{label}</span>
+        <div className="mt-1">{children}</div>
+    </div>
+);
+
+type RecordingAnalysisSlideoutProps = {
+    isOpen: boolean;
+    onOpenChange: (open: boolean) => void;
+    recordingUrl: string;
+    callId: string;
+    agentName: string | null;
+    callerNumber: string | null;
+    direction: string | null;
+    startedAt: string | null;
+    durationSec: number | null;
+    disposition: string | null;
+};
+
+export const RecordingAnalysisSlideout = ({
+    isOpen,
+    onOpenChange,
+    recordingUrl,
+    callId,
+    agentName,
+    callerNumber,
+    direction,
+    startedAt,
+    durationSec,
+    disposition,
+}: RecordingAnalysisSlideoutProps) => {
+    const [analysis, setAnalysis] = useState<Analysis | null>(null);
+    const [loading, setLoading] = useState(false);
+    const [error, setError] = useState<string | null>(null);
+    const hasTriggered = useRef(false);
+
+    // Auto-trigger analysis when the slideout opens
+    useEffect(() => {
+        if (!isOpen || hasTriggered.current) return;
+        hasTriggered.current = true;
+
+        setLoading(true);
+        setError(null);
+        apiClient.post<Analysis>('/api/recordings/analyze', { recordingUrl, callId })
+            .then((result) => setAnalysis(result))
+            .catch((err: any) => setError(err.message ?? 'Analysis failed'))
+            .finally(() => setLoading(false));
+    }, [isOpen, recordingUrl, callId]);
+
+    const dirLabel = direction === 'INBOUND' ? 'Inbound' : 'Outbound';
+    const dirColor = direction === 'INBOUND' ? 'blue' : 'brand';
+    const formattedPhone = callerNumber
+        ? formatPhone({ number: callerNumber, callingCode: '+91' })
+        : null;
+
+    return (
+        <SlideoutMenu isOpen={isOpen} onOpenChange={onOpenChange} isDismissable>
+            {({ close }) => (
+                <>
+                    <SlideoutMenu.Header onClose={close}>
+                        <div className="flex flex-col gap-1.5 pr-8">
+                            <h2 className="text-lg font-semibold text-primary">Call Analysis</h2>
+                            <div className="flex flex-wrap items-center gap-2 text-sm text-tertiary">
+                                <Badge size="sm" color={dirColor} type="pill-color">{dirLabel}</Badge>
+                                {agentName && <span>{agentName}</span>}
+                                {formattedPhone && (
+                                    <>
+                                        <span className="text-quaternary">-</span>
+                                        <span>{formattedPhone}</span>
+                                    </>
+                                )}
+                            </div>
+                            <div className="flex flex-wrap items-center gap-3 text-xs text-quaternary">
+                                {startedAt && <span>{formatDateOnly(startedAt)}</span>}
+                                {durationSec != null && durationSec > 0 && <span>{formatDuration(durationSec)}</span>}
+                                {disposition && (
+                                    <Badge size="sm" color="gray" type="pill-color">
+                                        {disposition.replace(/_/g, ' ').toLowerCase().replace(/\b\w/g, c => c.toUpperCase())}
+                                    </Badge>
+                                )}
+                            </div>
+                            <div className="mt-1">
+                                <SlideoutPlayer url={recordingUrl} />
+                            </div>
+                        </div>
+                    </SlideoutMenu.Header>
+
+                    <SlideoutMenu.Content>
+                        {loading && (
+                            <div className="flex flex-col items-center justify-center gap-3 py-16">
+                                <FontAwesomeIcon icon={faSpinner} className="size-6 animate-spin text-brand-secondary" />
+                                <p className="text-sm text-tertiary">Analyzing recording...</p>
+                                <p className="text-xs text-quaternary">Transcribing and generating insights</p>
+                            </div>
+                        )}
+
+                        {error && !loading && (
+                            <div className="flex flex-col items-center gap-3 py-12">
+                                <p className="text-sm text-tertiary">Transcription is temporarily unavailable. Please try again.</p>
+                                <Button
+                                    size="sm"
+                                    color="secondary"
+                                    iconLeading={<FontAwesomeIcon icon={faWaveformLines} data-icon className="size-3.5" />}
+                                    onClick={() => {
+                                        hasTriggered.current = false;
+                                        setLoading(true);
+                                        setError(null);
+                                        apiClient.post<Analysis>('/api/recordings/analyze', { recordingUrl, callId })
+                                            .then((result) => setAnalysis(result))
+                                            .catch((err: any) => setError(err.message ?? 'Analysis failed'))
+                                            .finally(() => setLoading(false));
+                                    }}
+                                >
+                                    Retry
+                                </Button>
+                            </div>
+                        )}
+
+                        {analysis && !loading && (
+                            <AnalysisResults analysis={analysis} />
+                        )}
+                    </SlideoutMenu.Content>
+                </>
+            )}
+        </SlideoutMenu>
+    );
+};
+
+// Separated analysis results display for readability
+const AnalysisResults = ({ analysis }: { analysis: Analysis }) => {
+    const sentCfg = sentimentConfig[analysis.sentiment];
+
+    return (
+        <div className="flex flex-col gap-4">
+            {/* Sentiment + topics */}
+            <div className="flex flex-wrap items-center gap-2">
+                <Badge size="sm" color={sentCfg.color} type="pill-color">{sentCfg.label}</Badge>
+                {analysis.insights.keyTopics.slice(0, 4).map((topic) => (
+                    <Badge key={topic} size="sm" color="gray" type="pill-color">{topic}</Badge>
+                ))}
+            </div>
+
+            {/* Summary */}
+            {analysis.summary && (
+                <div className="rounded-lg bg-secondary p-3">
+                    <span className="text-xs font-semibold text-tertiary uppercase tracking-wider">Summary</span>
+                    <p className="mt-1 text-sm text-primary">{analysis.summary}</p>
+                </div>
+            )}
+
+            {/* Call outcome */}
+            <div className="rounded-lg bg-brand-secondary p-3">
+                <span className="text-xs font-semibold text-brand-tertiary uppercase tracking-wider">Call Outcome</span>
+                <p className="mt-1 text-sm text-primary_on-brand font-medium">{analysis.insights.callOutcome}</p>
+            </div>
+
+            {/* Insights grid */}
+            <div className="grid grid-cols-1 gap-3">
+                <InsightsSection label="Patient Satisfaction">
+                    <p className="text-sm text-primary">{analysis.insights.patientSatisfaction}</p>
+                </InsightsSection>
+
+                {analysis.insights.actionItems.length > 0 && (
+                    <InsightsSection label="Action Items">
+                        <ul className="space-y-0.5">
+                            {analysis.insights.actionItems.map((item, i) => (
+                                <li key={i} className="text-sm text-primary">- {item}</li>
+                            ))}
+                        </ul>
+                    </InsightsSection>
+                )}
+
+                {analysis.insights.coachingNotes.length > 0 && (
+                    <InsightsSection label="Coaching Notes">
+                        <ul className="space-y-0.5">
+                            {analysis.insights.coachingNotes.map((note, i) => (
+                                <li key={i} className="text-sm text-primary">- {note}</li>
+                            ))}
+                        </ul>
+                    </InsightsSection>
+                )}
+
+                {analysis.insights.complianceFlags.length > 0 && (
+                    <div className="rounded-lg bg-error-secondary p-3">
+                        <span className="text-xs font-semibold text-error-primary uppercase tracking-wider">Compliance Flags</span>
+                        <ul className="mt-1 space-y-0.5">
+                            {analysis.insights.complianceFlags.map((flag, i) => (
+                                <li key={i} className="text-sm text-error-primary">- {flag}</li>
+                            ))}
+                        </ul>
+                    </div>
+                )}
+            </div>
+
+            {/* Transcript */}
+            {analysis.transcript.length > 0 && (
+                <div>
+                    <span className="text-xs font-semibold text-tertiary uppercase tracking-wider">Transcript</span>
+                    <div className="mt-2 space-y-2 rounded-lg bg-secondary p-3">
+                        {analysis.transcript.map((u, i) => {
+                            const isAgent = u.speaker === 0;
+                            return (
+                                <div key={i} className="flex gap-2">
+                                    <span className="shrink-0 text-xs text-quaternary tabular-nums w-10">{formatTimestamp(u.start)}</span>
+                                    <span className={cx(
+                                        'text-xs font-semibold shrink-0 w-16',
+                                        isAgent ? 'text-brand-secondary' : 'text-success-primary',
+                                    )}>
+                                        {isAgent ? 'Agent' : 'Customer'}
+                                    </span>
+                                    <span className="text-sm text-primary">{u.text}</span>
+                                </div>
+                            );
+                        })}
+                    </div>
+                </div>
+            )}
+        </div>
+    );
+};

src/components/call-desk/transfer-dialog.tsx

@@ -1,49 +1,157 @@
-import { useState } from 'react';
+import { useState, useEffect } from 'react';
 import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
-import { faXmark } from '@fortawesome/pro-duotone-svg-icons';
+import { faPhone, faUserDoctor, faHeadset, faShieldCheck, faMagnifyingGlass } from '@fortawesome/pro-duotone-svg-icons';
+import { faIcon } from '@/lib/icon-wrapper';
 import { Input } from '@/components/base/input/input';
 import { Button } from '@/components/base/buttons/button';
 import { apiClient } from '@/lib/api-client';
 import { notify } from '@/lib/toast';
+import { cx } from '@/utils/cx';
+
+const SearchIcon = faIcon(faMagnifyingGlass);
+
+type TransferTarget = {
+    id: string;
+    name: string;
+    type: 'agent' | 'supervisor' | 'doctor';
+    department?: string;
+    phoneNumber: string;
+    status?: 'ready' | 'busy' | 'offline' | 'on-call' | 'break';
+};
 
 type TransferDialogProps = {
     ucid: string;
+    currentAgentId?: string;
     onClose: () => void;
     onTransferred: () => void;
 };
 
-export const TransferDialog = ({ ucid, onClose, onTransferred }: TransferDialogProps) => {
-    const [number, setNumber] = useState('');
-    const [transferring, setTransferring] = useState(false);
-    const [stage, setStage] = useState<'input' | 'connected'>('input');
+const statusConfig: Record<string, { label: string; dotClass: string }> = {
+    ready: { label: 'Ready', dotClass: 'bg-success-solid' },
+    'on-call': { label: 'On Call', dotClass: 'bg-error-solid' },
+    'in-call': { label: 'On Call', dotClass: 'bg-error-solid' },
+    busy: { label: 'Busy', dotClass: 'bg-warning-solid' },
+    acw: { label: 'Wrapping', dotClass: 'bg-warning-solid' },
+    break: { label: 'Break', dotClass: 'bg-tertiary' },
+    training: { label: 'Training', dotClass: 'bg-tertiary' },
+    offline: { label: 'Offline', dotClass: 'bg-quaternary' },
+};
 
-    const handleConference = async () => {
-        if (!number.trim()) return;
+const typeIcons = {
+    agent: faHeadset,
+    supervisor: faShieldCheck,
+    doctor: faUserDoctor,
+};
+
+export const TransferDialog = ({ ucid, currentAgentId, onClose, onTransferred }: TransferDialogProps) => {
+    const [targets, setTargets] = useState<TransferTarget[]>([]);
+    const [search, setSearch] = useState('');
+    const [loading, setLoading] = useState(true);
+    const [transferring, setTransferring] = useState(false);
+    const [selectedTarget, setSelectedTarget] = useState<TransferTarget | null>(null);
+    const [connectedTarget, setConnectedTarget] = useState<TransferTarget | null>(null);
+
+    // Fetch transfer targets
+    useEffect(() => {
+        const fetchTargets = async () => {
+            try {
+                const [agentsRes, doctorsRes] = await Promise.all([
+                    apiClient.graphql<any>(`{ agents(first: 20) { edges { node { id name ozonetelagentid sipextension } } } }`),
+                    apiClient.graphql<any>(`{ doctors(first: 20) { edges { node { id name department phone { primaryPhoneNumber } } } } }`),
+                ]);
+
+                const agents: TransferTarget[] = (agentsRes.agents?.edges ?? [])
+                    .map((e: any) => e.node)
+                    .filter((a: any) => a.ozonetelagentid !== currentAgentId)
+                    .map((a: any) => ({
+                        id: a.id,
+                        name: a.name,
+                        type: 'agent' as const,
+                        phoneNumber: `0${a.sipextension}`,
+                        status: 'offline' as const,
+                    }));
+
+                const doctors: TransferTarget[] = (doctorsRes.doctors?.edges ?? [])
+                    .map((e: any) => e.node)
+                    .filter((d: any) => d.phone?.primaryPhoneNumber)
+                    .map((d: any) => ({
+                        id: d.id,
+                        name: d.name,
+                        type: 'doctor' as const,
+                        department: d.department?.replace(/_/g, ' '),
+                        phoneNumber: `0${d.phone.primaryPhoneNumber}`,
+                    }));
+
+                setTargets([...agents, ...doctors]);
+            } catch (err) {
+                console.warn('Failed to fetch transfer targets:', err);
+            } finally {
+                setLoading(false);
+            }
+        };
+        fetchTargets();
+    }, [currentAgentId]);
+
+    // Subscribe to agent state via SSE for live status
+    useEffect(() => {
+        const agentTargets = targets.filter(t => t.type === 'agent');
+        if (agentTargets.length === 0) return;
+
+        // Poll agent states from the supervisor endpoint
+        const fetchStates = async () => {
+            for (const agent of agentTargets) {
+                try {
+                    const res = await apiClient.get<any>(`/api/supervisor/agent-state/${agent.phoneNumber.replace(/^0/, '')}`, { silent: true });
+                    if (res?.state) {
+                        setTargets(prev => prev.map(t =>
+                            t.id === agent.id ? { ...t, status: res.state } : t,
+                        ));
+                    }
+                } catch { /* best effort */ }
+            }
+        };
+        fetchStates();
+        const interval = setInterval(fetchStates, 10000);
+        return () => clearInterval(interval);
+    }, [targets.length]);
+
+    const filtered = search.trim()
+        ? targets.filter(t => t.name.toLowerCase().includes(search.toLowerCase()) || (t.department ?? '').toLowerCase().includes(search.toLowerCase()))
+        : targets;
+
+    const agents = filtered.filter(t => t.type === 'agent');
+    const doctors = filtered.filter(t => t.type === 'doctor');
+
+    const handleConnect = async () => {
+        const target = selectedTarget;
+        if (!target) return;
         setTransferring(true);
         try {
             await apiClient.post('/api/ozonetel/call-control', {
                 action: 'CONFERENCE',
                 ucid,
-                conferenceNumber: `0${number.replace(/\D/g, '')}`,
+                conferenceNumber: target.phoneNumber,
             });
-            notify.success('Connected', 'Third party connected. Click Complete to transfer.');
-            setStage('connected');
+            setConnectedTarget(target);
+            notify.success('Connected', `Speaking with ${target.name}. Click Complete to transfer.`);
         } catch {
-            notify.error('Transfer Failed', 'Could not connect to the target number');
+            notify.error('Transfer Failed', `Could not connect to ${target.name}`);
         } finally {
             setTransferring(false);
         }
     };
 
+
     const handleComplete = async () => {
+        if (!connectedTarget) return;
         setTransferring(true);
         try {
             await apiClient.post('/api/ozonetel/call-control', {
                 action: 'KICK_CALL',
                 ucid,
-                conferenceNumber: `0${number.replace(/\D/g, '')}`,
+                conferenceNumber: connectedTarget.phoneNumber,
             });
-            notify.success('Transferred', 'Call transferred successfully');
+            notify.success('Transferred', `Call transferred to ${connectedTarget.name}`);
             onTransferred();
         } catch {
             notify.error('Transfer Failed', 'Could not complete transfer');
@@ -52,40 +160,138 @@ export const TransferDialog = ({ ucid, onClose, onTransferred }: TransferDialogP
         }
     };
 
+    const handleCancel = async () => {
+        if (!connectedTarget) { onClose(); return; }
+        // Disconnect the third party, keep the caller
+        setTransferring(true);
+        try {
+            await apiClient.post('/api/ozonetel/call-control', {
+                action: 'KICK_CALL',
+                ucid,
+                conferenceNumber: connectedTarget.phoneNumber,
+            });
+            setConnectedTarget(null);
+            notify.info('Cancelled', 'Transfer cancelled, caller reconnected');
+        } catch {
+            notify.error('Error', 'Could not disconnect third party');
+        } finally {
+            setTransferring(false);
+        }
+    };
+
+    // Connected state — show target + complete/cancel buttons
+    if (connectedTarget) {
         return (
-        <div className="mt-3 rounded-lg border border-secondary bg-secondary p-3">
-            <div className="flex items-center justify-between mb-2">
-                <span className="text-xs font-semibold text-secondary">Transfer Call</span>
-                <button onClick={onClose} className="text-fg-quaternary hover:text-fg-secondary transition duration-100 ease-linear">
-                    <FontAwesomeIcon icon={faXmark} className="size-3" />
-                </button>
+            <div className="flex flex-col flex-1 min-h-0">
+                <div className="flex items-center justify-center gap-3 py-8">
+                    <div className="flex size-10 items-center justify-center rounded-full bg-success-secondary">
+                        <FontAwesomeIcon icon={typeIcons[connectedTarget.type] ?? faPhone} className="size-4 text-fg-success-primary" />
                     </div>
-            {stage === 'input' ? (
-                <div className="flex gap-2">
-                    <Input
-                        size="sm"
-                        placeholder="Enter phone number"
-                        value={number}
-                        onChange={setNumber}
-                    />
-                    <Button
-                        size="sm"
-                        color="primary"
-                        isLoading={transferring}
-                        onClick={handleConference}
-                        isDisabled={!number.trim()}
-                    >
+                    <div>
+                        <p className="text-sm font-semibold text-primary">Connected to {connectedTarget.name}</p>
+                        <p className="text-xs text-tertiary">Speak privately, then complete the transfer</p>
+                    </div>
+                </div>
+                <div className="shrink-0 flex items-center justify-center gap-3 pt-4 border-t border-secondary">
+                    <Button size="sm" color="secondary" onClick={handleCancel} isLoading={transferring}>Cancel</Button>
+                    <Button size="sm" color="primary" onClick={handleComplete} isLoading={transferring}>Complete Transfer</Button>
+                </div>
+            </div>
+        );
+    }
+
+    // Target selection
+    return (
+        <div className="flex flex-col flex-1 min-h-0">
+            {/* Search + actions — pinned */}
+            <div className="shrink-0 flex items-center gap-2 mb-3">
+                <div className="flex-1">
+                    <Input size="sm" placeholder="Search agent, doctor..." icon={SearchIcon} value={search} onChange={setSearch} />
+                </div>
+                <Button size="sm" color="secondary" onClick={onClose}>Cancel</Button>
+                <Button size="sm" color="primary" isLoading={transferring} isDisabled={!selectedTarget} onClick={handleConnect}>
                     Connect
                 </Button>
             </div>
+
+            {/* Scrollable target list */}
+            <div className="flex-1 overflow-y-auto space-y-4">
+                {loading ? (
+                    <p className="text-xs text-tertiary text-center py-4">Loading...</p>
                 ) : (
-                <div className="flex items-center justify-between">
-                    <span className="text-xs text-tertiary">Connected to {number}</span>
-                    <Button size="sm" color="primary" isLoading={transferring} onClick={handleComplete}>
-                        Complete Transfer
-                    </Button>
+                    <>
+                        {/* Agents */}
+                        {agents.length > 0 && (
+                            <div>
+                                <p className="text-xs font-bold uppercase tracking-wider text-tertiary mb-2">Agents</p>
+                                <div className="space-y-1">
+                                    {agents.map(agent => {
+                                        const st = statusConfig[agent.status ?? 'offline'] ?? statusConfig.offline;
+                                        const isSelected = selectedTarget?.id === agent.id;
+                                        return (
+                                            <button
+                                                key={agent.id}
+                                                onClick={() => setSelectedTarget(agent)}
+                                                disabled={transferring}
+                                                className={cx(
+                                                    'flex w-full items-center justify-between rounded-lg px-3 py-2.5 text-left transition duration-100 ease-linear',
+                                                    isSelected ? 'bg-brand-secondary ring-2 ring-brand' : 'hover:bg-secondary cursor-pointer',
+                                                )}
+                                            >
+                                                <div className="flex items-center gap-2.5">
+                                                    <FontAwesomeIcon icon={faHeadset} className="size-3.5 text-fg-quaternary" />
+                                                    <span className="text-sm font-medium text-primary">{agent.name}</span>
+                                                </div>
+                                                <div className="flex items-center gap-1.5">
+                                                    <span className={cx('size-2 rounded-full', st.dotClass)} />
+                                                    <span className="text-xs text-tertiary">{st.label}</span>
+                                                </div>
+                                            </button>
+                                        );
+                                    })}
+                                </div>
                             </div>
                         )}
+
+                        {/* Doctors */}
+                        {doctors.length > 0 && (
+                            <div>
+                                <p className="text-xs font-bold uppercase tracking-wider text-tertiary mb-2">Doctors</p>
+                                <div className="space-y-1">
+                                    {doctors.map(doc => {
+                                        const isSelected = selectedTarget?.id === doc.id;
+                                        return (
+                                        <button
+                                            key={doc.id}
+                                            onClick={() => setSelectedTarget(doc)}
+                                            disabled={transferring}
+                                            className={cx(
+                                                'flex w-full items-center justify-between rounded-lg px-3 py-2.5 text-left transition duration-100 ease-linear',
+                                                isSelected ? 'bg-brand-secondary ring-2 ring-brand' : 'hover:bg-secondary cursor-pointer',
+                                            )}
+                                        >
+                                            <div className="flex items-center gap-2.5">
+                                                <FontAwesomeIcon icon={faUserDoctor} className="size-3.5 text-fg-quaternary" />
+                                                <div>
+                                                    <span className="text-sm font-medium text-primary">{doc.name}</span>
+                                                    {doc.department && <span className="ml-2 text-xs text-tertiary">{doc.department}</span>}
+                                                </div>
+                                            </div>
+                                        </button>
+                                        );
+                                    })}
+                                </div>
+                            </div>
+                        )}
+
+
+                        {filtered.length === 0 && !loading && (
+                            <p className="text-xs text-quaternary text-center py-4">No matching targets</p>
+                        )}
+                    </>
+                )}
+            </div>
+
         </div>
     );
 };

src/components/call-desk/worklist-panel.tsx

@@ -1,5 +1,6 @@
 import { useCallback, useEffect, useMemo, useRef, useState } from 'react';
 import { faPhoneArrowDown, faPhoneArrowUp, faMagnifyingGlass } from '@fortawesome/pro-duotone-svg-icons';
+import type { SortDescriptor } from 'react-aria-components';
 import { faIcon } from '@/lib/icon-wrapper';
 import { Table } from '@/components/application/table/table';
 
@@ -8,7 +9,7 @@ import { Badge } from '@/components/base/badges/badges';
 import { Input } from '@/components/base/input/input';
 import { Tabs, TabList, Tab } from '@/components/application/tabs/tabs';
 import { PhoneActionCell } from './phone-action-cell';
-import { formatPhone } from '@/lib/format';
+import { formatPhone, formatTimeOnly, formatShortDate } from '@/lib/format';
 import { notify } from '@/lib/toast';
 import { cx } from '@/utils/cx';
 
@@ -60,6 +61,7 @@ interface WorklistPanelProps {
     loading: boolean;
     onSelectLead: (lead: WorklistLead) => void;
     selectedLeadId: string | null;
+    onDialMissedCall?: (missedCallId: string) => void;
 }
 
 type TabKey = 'all' | 'missed' | 'leads' | 'follow-ups';
@@ -82,6 +84,12 @@ type WorklistRow = {
     contactAttempts: number;
     source: string | null;
     lastDisposition: string | null;
+    missedCallId: string | null;
+    // Rules engine scoring (from sidecar)
+    score?: number;
+    scoreBreakdown?: { baseScore: number; slaMultiplier: number; campaignMultiplier: number; rulesApplied: string[] };
+    slaStatus?: 'low' | 'medium' | 'high' | 'critical';
+    slaElapsedPercent?: number;
 };
 
 const priorityConfig: Record<string, { color: 'error' | 'warning' | 'brand' | 'gray'; label: string; sort: number }> = {
@@ -154,7 +162,7 @@ const buildRows = (missedCalls: MissedCall[], followUps: WorklistFollowUp[], lea
             direction: call.callDirection === 'OUTBOUND' ? 'outbound' : 'inbound',
             typeLabel: 'Missed Call',
             reason: call.startedAt
-                ? `Missed at ${new Date(call.startedAt).toLocaleTimeString('en-IN', { hour: 'numeric', minute: '2-digit', hour12: true })}${sourceSuffix}`
+                ? `Missed at ${formatTimeOnly(call.startedAt)}${sourceSuffix}`
                 : 'Missed call',
             createdAt: call.createdAt,
             taskState: call.callbackstatus === 'CALLBACK_ATTEMPTED' ? 'ATTEMPTED' : 'PENDING',
@@ -164,6 +172,7 @@ const buildRows = (missedCalls: MissedCall[], followUps: WorklistFollowUp[], lea
             contactAttempts: 0,
             source: call.callsourcenumber ?? null,
             lastDisposition: call.disposition ?? null,
+            missedCallId: call.id,
         });
     }
 
@@ -180,7 +189,7 @@ const buildRows = (missedCalls: MissedCall[], followUps: WorklistFollowUp[], lea
             direction: null,
             typeLabel: fu.followUpType === 'CALLBACK' ? 'Callback' : 'Follow-up',
             reason: fu.scheduledAt
-                ? `Scheduled ${new Date(fu.scheduledAt).toLocaleString('en-IN', { month: 'short', day: 'numeric', hour: 'numeric', minute: '2-digit', hour12: true })}`
+                ? `Scheduled ${formatShortDate(fu.scheduledAt)}`
                 : '',
             createdAt: fu.createdAt ?? fu.scheduledAt ?? new Date().toISOString(),
             taskState: isOverdue ? 'PENDING' : (fu.followUpStatus === 'COMPLETED' ? 'ATTEMPTED' : 'SCHEDULED'),
@@ -190,6 +199,7 @@ const buildRows = (missedCalls: MissedCall[], followUps: WorklistFollowUp[], lea
             contactAttempts: 0,
             source: null,
             lastDisposition: null,
+            missedCallId: null,
         });
     }
 
@@ -216,26 +226,30 @@ const buildRows = (missedCalls: MissedCall[], followUps: WorklistFollowUp[], lea
             contactAttempts: lead.contactAttempts ?? 0,
             source: lead.leadSource ?? lead.utmCampaign ?? null,
             lastDisposition: null,
+            missedCallId: null,
         });
     }
 
     // Remove rows without a phone number — agent can't act on them
     const actionableRows = rows.filter(r => r.phoneRaw);
 
+    // Sort by rules engine score if available, otherwise by priority + createdAt
     actionableRows.sort((a, b) => {
+        if (a.score != null && b.score != null) return b.score - a.score;
         const pa = priorityConfig[a.priority]?.sort ?? 2;
         const pb = priorityConfig[b.priority]?.sort ?? 2;
         if (pa !== pb) return pa - pb;
-        return new Date(a.createdAt).getTime() - new Date(b.createdAt).getTime();
+        return new Date(b.createdAt).getTime() - new Date(a.createdAt).getTime();
     });
 
     return actionableRows;
 };
 
-export const WorklistPanel = ({ missedCalls, followUps, leads, loading, onSelectLead, selectedLeadId }: WorklistPanelProps) => {
+export const WorklistPanel = ({ missedCalls, followUps, leads, loading, onSelectLead, selectedLeadId, onDialMissedCall }: WorklistPanelProps) => {
     const [tab, setTab] = useState<TabKey>('all');
     const [search, setSearch] = useState('');
     const [missedSubTab, setMissedSubTab] = useState<MissedSubTab>('pending');
+    const [sortDescriptor, setSortDescriptor] = useState<SortDescriptor>({ column: 'sla', direction: 'descending' });
 
     const missedByStatus = useMemo(() => ({
         pending: missedCalls.filter(c => c.callbackstatus === 'PENDING_CALLBACK' || !c.callbackstatus),
@@ -268,8 +282,31 @@ export const WorklistPanel = ({ missedCalls, followUps, leads, loading, onSelect
             );
         }
 
+        if (sortDescriptor.column) {
+            const dir = sortDescriptor.direction === 'ascending' ? 1 : -1;
+            rows = [...rows].sort((a, b) => {
+                switch (sortDescriptor.column) {
+                    case 'priority': {
+                        if (a.score != null && b.score != null) return (a.score - b.score) * dir;
+                        const pa = priorityConfig[a.priority]?.sort ?? 2;
+                        const pb = priorityConfig[b.priority]?.sort ?? 2;
+                        return (pa - pb) * dir;
+                    }
+                    case 'name':
+                        return a.name.localeCompare(b.name) * dir;
+                    case 'sla': {
+                        const ta = new Date(a.lastContactedAt ?? a.createdAt).getTime();
+                        const tb = new Date(b.lastContactedAt ?? b.createdAt).getTime();
+                        return (ta - tb) * dir;
+                    }
+                    default:
+                        return 0;
+                }
+            });
+        }
+
         return rows;
-    }, [allRows, tab, search]);
+    }, [allRows, tab, search, sortDescriptor, missedSubTabRows]);
 
     const missedCount = allRows.filter((r) => r.type === 'missed').length;
     const leadCount = allRows.filter((r) => r.type === 'lead').length;
@@ -320,9 +357,9 @@ export const WorklistPanel = ({ missedCalls, followUps, leads, loading, onSelect
     }
 
     return (
-        <div className="flex flex-1 flex-col">
+        <div className="flex flex-1 flex-col min-h-0 overflow-hidden">
             {/* Filter tabs + search */}
-            <div className="flex items-end justify-between border-b border-secondary px-5 pt-3 pb-0.5">
+            <div className="flex shrink-0 items-end justify-between border-b border-secondary px-5 pt-3 pb-0.5">
                 <Tabs selectedKey={tab} onSelectionChange={(key) => handleTabChange(key as TabKey)}>
                     <TabList items={tabItems} type="underline" size="sm">
                         {(item) => <Tab key={item.id} id={item.id} label={item.label} badge={item.badge} />}
@@ -342,7 +379,7 @@ export const WorklistPanel = ({ missedCalls, followUps, leads, loading, onSelect
 
             {/* Missed call status sub-tabs */}
             {tab === 'missed' && (
-                <div className="flex gap-1 px-5 py-2 border-b border-secondary">
+                <div className="flex shrink-0 gap-1 px-5 py-2 border-b border-secondary">
                     {(['pending', 'attempted', 'completed', 'invalid'] as MissedSubTab[]).map(sub => (
                         <button
                             key={sub}
@@ -372,14 +409,14 @@ export const WorklistPanel = ({ missedCalls, followUps, leads, loading, onSelect
                     </p>
                 </div>
             ) : (
-                <div className="px-2 pt-3">
-                <Table size="sm">
+                <div className="flex flex-1 flex-col min-h-0 overflow-hidden px-2 pt-3">
+                <Table size="sm" sortDescriptor={sortDescriptor} onSortChange={setSortDescriptor}>
                     <Table.Header>
-                        <Table.Head label="PRIORITY" className="w-20" isRowHeader />
-                        <Table.Head label="PATIENT" />
+                        <Table.Head id="priority" label="SCORE" className="w-20" isRowHeader allowsSorting />
+                        <Table.Head id="name" label="PATIENT" allowsSorting />
                         <Table.Head label="PHONE" />
                         <Table.Head label={tab === 'missed' ? 'BRANCH' : 'SOURCE'} className="w-28" />
-                        <Table.Head label="SLA" className="w-24" />
+                        <Table.Head id="sla" label="SLA" className="w-24" allowsSorting />
                     </Table.Header>
                     <Table.Body items={pagedRows}>
                         {(row) => {
@@ -404,9 +441,22 @@ export const WorklistPanel = ({ missedCalls, followUps, leads, loading, onSelect
                                     }}
                                 >
                                     <Table.Cell>
+                                        {row.score != null ? (
+                                            <div className="flex items-center gap-2" title={row.scoreBreakdown ? `${row.scoreBreakdown.rulesApplied.join(', ')}\nSLA: ×${row.scoreBreakdown.slaMultiplier}\nCampaign: ×${row.scoreBreakdown.campaignMultiplier}` : undefined}>
+                                                <span className={cx(
+                                                    'size-2.5 rounded-full shrink-0',
+                                                    row.slaStatus === 'low' && 'bg-success-solid',
+                                                    row.slaStatus === 'medium' && 'bg-warning-solid',
+                                                    row.slaStatus === 'high' && 'bg-error-solid',
+                                                    row.slaStatus === 'critical' && 'bg-error-solid animate-pulse',
+                                                )} />
+                                                <span className="text-xs font-bold tabular-nums text-primary">{row.score.toFixed(1)}</span>
+                                            </div>
+                                        ) : (
                                             <Badge size="sm" color={priority.color} type="pill-color">
                                                 {priority.label}
                                             </Badge>
+                                        )}
                                     </Table.Cell>
                                     <Table.Cell>
                                         <div className="flex items-center gap-2">
@@ -432,6 +482,7 @@ export const WorklistPanel = ({ missedCalls, followUps, leads, loading, onSelect
                                                 phoneNumber={row.phoneRaw}
                                                 displayNumber={row.phone}
                                                 leadId={row.leadId ?? undefined}
+                                                onDial={row.missedCallId ? () => onDialMissedCall?.(row.missedCallId!) : undefined}
                                             />
                                         ) : (
                                             <span className="text-xs text-quaternary italic">No phone</span>
@@ -457,7 +508,7 @@ export const WorklistPanel = ({ missedCalls, followUps, leads, loading, onSelect
                     </Table.Body>
                 </Table>
                 {totalPages > 1 && (
-                    <div className="flex items-center justify-between border-t border-secondary px-5 py-3">
+                    <div className="flex shrink-0 items-center justify-between border-t border-secondary px-5 py-3">
                         <span className="text-xs text-tertiary">
                             Showing {(page - 1) * PAGE_SIZE + 1}–{Math.min(page * PAGE_SIZE, filteredRows.length)} of {filteredRows.length}
                         </span>

src/components/campaigns/campaign-card.tsx

@@ -57,7 +57,7 @@ export const CampaignCard = ({ campaign, ads, leads }: CampaignCardProps) => {
     return (
         <div
             className={cx(
-                'rounded-2xl border border-secondary bg-primary overflow-hidden transition hover:shadow-lg cursor-pointer',
+                'flex flex-col rounded-2xl border border-secondary bg-primary overflow-hidden transition hover:shadow-lg cursor-pointer h-full',
                 isPaused && 'opacity-60',
             )}
         >

src/components/campaigns/campaign-edit-slideout.tsx

@@ -53,7 +53,7 @@ export const CampaignEditSlideout = ({ isOpen, onOpenChange, campaign, onSaved }
             const budgetMicros = budget ? Number(budget) * 1_000_000 : null;
 
             await apiClient.graphql(
-                `mutation UpdateCampaign($id: ID!, $data: CampaignUpdateInput!) {
+                `mutation UpdateCampaign($id: UUID!, $data: CampaignUpdateInput!) {
                     updateCampaign(id: $id, data: $data) { id }
                 }`,
                 {

src/components/campaigns/campaign-hero.tsx

@@ -8,6 +8,7 @@ const LinkExternal01: FC<{ className?: string }> = ({ className }) => <FontAweso
 
 import { Button } from '@/components/base/buttons/button';
 import { CampaignStatusBadge } from '@/components/shared/status-badge';
+import { formatDateOnly } from '@/lib/format';
 import type { Campaign } from '@/types/entities';
 
 interface CampaignHeroProps {
@@ -15,12 +16,9 @@ interface CampaignHeroProps {
 }
 
 const formatDateRange = (startDate: string | null, endDate: string | null): string => {
-    const fmt = (d: string) =>
-        new Intl.DateTimeFormat('en-IN', { month: 'short', day: 'numeric', year: 'numeric' }).format(new Date(d));
-
     if (!startDate) return '--';
-    if (!endDate) return `${fmt(startDate)} \u2014 Ongoing`;
-    return `${fmt(startDate)} \u2014 ${fmt(endDate)}`;
+    if (!endDate) return `${formatDateOnly(startDate)} \u2014 Ongoing`;
+    return `${formatDateOnly(startDate)} \u2014 ${formatDateOnly(endDate)}`;
 };
 
 const formatDuration = (startDate: string | null, endDate: string | null): string => {

src/components/campaigns/lead-import-wizard.tsx

@@ -0,0 +1,451 @@
+import { useState, useMemo } from 'react';
+import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
+import { faFileImport, faCheck, faSpinner, faTriangleExclamation, faCloudArrowUp, faArrowRight } from '@fortawesome/pro-duotone-svg-icons';
+import { Dialog, Modal, ModalOverlay } from '@/components/application/modals/modal';
+import { Button } from '@/components/base/buttons/button';
+import { Badge } from '@/components/base/badges/badges';
+import { Select } from '@/components/base/select/select';
+import { DynamicTable } from '@/components/application/table/dynamic-table';
+import type { DynamicColumn, DynamicRow } from '@/components/application/table/dynamic-table';
+import { FeaturedIcon } from '@/components/foundations/featured-icon/featured-icon';
+import { useData } from '@/providers/data-provider';
+import { apiClient } from '@/lib/api-client';
+import { parseCSV, fuzzyMatchColumns, buildLeadPayload, normalizePhone, LEAD_FIELDS } from '@/lib/csv-utils';
+import { cx } from '@/utils/cx';
+import type { Campaign } from '@/types/entities';
+import type { LeadFieldMapping, CSVRow } from '@/lib/csv-utils';
+import type { FC } from 'react';
+
+const FileImportIcon: FC<{ className?: string }> = ({ className }) => (
+    <FontAwesomeIcon icon={faFileImport} className={className} />
+);
+
+type ImportStep = 'select-campaign' | 'map-columns' | 'preview' | 'importing' | 'done';
+
+const WIZARD_STEPS = [
+    { key: 'select-campaign', label: 'Select Campaign', number: 1 },
+    { key: 'map-columns', label: 'Upload & Map', number: 2 },
+    { key: 'preview', label: 'Preview', number: 3 },
+    { key: 'done', label: 'Import', number: 4 },
+] as const;
+
+const StepIndicator = ({ currentStep }: { currentStep: ImportStep }) => {
+    const activeIndex = currentStep === 'importing'
+        ? 3
+        : WIZARD_STEPS.findIndex(s => s.key === currentStep);
+
+    return (
+        <div className="flex items-center justify-center gap-0 px-6 py-3 border-b border-secondary shrink-0">
+            {WIZARD_STEPS.map((step, i) => {
+                const isComplete = i < activeIndex;
+                const isActive = i === activeIndex;
+                const isLast = i === WIZARD_STEPS.length - 1;
+
+                return (
+                    <div key={step.key} className="flex items-center">
+                        <div className="flex items-center gap-2">
+                            <div className={cx(
+                                'flex size-7 items-center justify-center rounded-full text-xs font-semibold transition duration-100 ease-linear',
+                                isComplete ? 'bg-brand-solid text-white' :
+                                isActive ? 'bg-brand-solid text-white ring-4 ring-brand-100' :
+                                'bg-secondary text-quaternary',
+                            )}>
+                                {isComplete ? <FontAwesomeIcon icon={faCheck} className="size-3" /> : step.number}
+                            </div>
+                            <span className={cx(
+                                'text-xs font-medium whitespace-nowrap',
+                                isActive ? 'text-brand-secondary' : isComplete ? 'text-primary' : 'text-quaternary',
+                            )}>
+                                {step.label}
+                            </span>
+                        </div>
+                        {!isLast && (
+                            <div className={cx(
+                                'mx-3 h-px w-12',
+                                i < activeIndex ? 'bg-brand-solid' : 'bg-secondary',
+                            )} />
+                        )}
+                    </div>
+                );
+            })}
+        </div>
+    );
+};
+
+type ImportResult = {
+    created: number;
+    linkedToPatient: number;
+    skippedDuplicate: number;
+    skippedNoPhone: number;
+    failed: number;
+    total: number;
+};
+
+interface LeadImportWizardProps {
+    isOpen: boolean;
+    onOpenChange: (open: boolean) => void;
+}
+
+const PAGE_SIZE = 15;
+
+export const LeadImportWizard = ({ isOpen, onOpenChange }: LeadImportWizardProps) => {
+    const { campaigns, leads, patients, refresh } = useData();
+    const [step, setStep] = useState<ImportStep>('select-campaign');
+    const [selectedCampaign, setSelectedCampaign] = useState<Campaign | null>(null);
+    const [csvRows, setCsvRows] = useState<CSVRow[]>([]);
+    const [mapping, setMapping] = useState<LeadFieldMapping[]>([]);
+    const [result, setResult] = useState<ImportResult | null>(null);
+    const [importProgress, setImportProgress] = useState(0);
+    const [previewPage, setPreviewPage] = useState(1);
+
+    const activeCampaigns = useMemo(() =>
+        campaigns.filter(c => c.campaignStatus === 'ACTIVE' || c.campaignStatus === 'PAUSED'),
+        [campaigns],
+    );
+
+    const handleClose = () => {
+        onOpenChange(false);
+        setTimeout(() => {
+            setStep('select-campaign');
+            setSelectedCampaign(null);
+            setCsvRows([]);
+            setMapping([]);
+            setResult(null);
+            setImportProgress(0);
+            setPreviewPage(1);
+        }, 300);
+    };
+
+    const handleFileUpload = (e: React.ChangeEvent<HTMLInputElement>) => {
+        const file = e.target.files?.[0];
+        if (!file) return;
+        const reader = new FileReader();
+        reader.onload = (event) => {
+            const text = event.target?.result as string;
+            const { rows, headers } = parseCSV(text);
+            setCsvRows(rows);
+            setMapping(fuzzyMatchColumns(headers));
+        };
+        reader.readAsText(file);
+    };
+
+    const handleMappingChange = (csvHeader: string, leadField: string | null) => {
+        setMapping(prev => prev.map(m =>
+            m.csvHeader === csvHeader ? { ...m, leadField, label: leadField ? LEAD_FIELDS.find(f => f.field === leadField)?.label ?? '' : '' } : m,
+        ));
+    };
+
+    // Patient matching
+    const rowsWithMatch = useMemo(() => {
+        const phoneMapping = mapping.find(m => m.leadField === 'contactPhone');
+        if (!phoneMapping || csvRows.length === 0) return [];
+
+        const existingLeadPhones = new Set(
+            leads.map(l => normalizePhone(l.contactPhone?.[0]?.number ?? '')).filter(p => p.length === 10),
+        );
+        const patientByPhone = new Map(
+            patients.filter(p => p.phones?.primaryPhoneNumber).map(p => [normalizePhone(p.phones!.primaryPhoneNumber), p]),
+        );
+
+        return csvRows.map(row => {
+            const rawPhone = row[phoneMapping.csvHeader] ?? '';
+            const phone = normalizePhone(rawPhone);
+            const matchedPatient = phone.length === 10 ? patientByPhone.get(phone) : null;
+            const isDuplicate = phone.length === 10 && existingLeadPhones.has(phone);
+            const hasPhone = phone.length === 10;
+            return { row, phone, matchedPatient, isDuplicate, hasPhone };
+        });
+    }, [csvRows, mapping, leads, patients]);
+
+    const phoneIsMapped = mapping.some(m => m.leadField === 'contactPhone');
+    const validCount = rowsWithMatch.filter(r => r.hasPhone && !r.isDuplicate).length;
+    const duplicateCount = rowsWithMatch.filter(r => r.isDuplicate).length;
+    const noPhoneCount = rowsWithMatch.filter(r => !r.hasPhone).length;
+    const patientMatchCount = rowsWithMatch.filter(r => r.matchedPatient).length;
+    const totalPreviewPages = Math.max(1, Math.ceil(rowsWithMatch.length / PAGE_SIZE));
+
+    const handleImport = async () => {
+        if (!selectedCampaign) return;
+        setStep('importing');
+
+        const importResult: ImportResult = { created: 0, linkedToPatient: 0, skippedDuplicate: 0, skippedNoPhone: 0, failed: 0, total: rowsWithMatch.length };
+
+        for (let i = 0; i < rowsWithMatch.length; i++) {
+            const { row, isDuplicate, hasPhone, matchedPatient } = rowsWithMatch[i];
+            if (!hasPhone) { importResult.skippedNoPhone++; setImportProgress(i + 1); continue; }
+            if (isDuplicate) { importResult.skippedDuplicate++; setImportProgress(i + 1); continue; }
+
+            const payload = buildLeadPayload(row, mapping, selectedCampaign.id, matchedPatient?.id ?? null, selectedCampaign.platform);
+            if (!payload) { importResult.skippedNoPhone++; setImportProgress(i + 1); continue; }
+
+            try {
+                await apiClient.graphql(`mutation($data: LeadCreateInput!) { createLead(data: $data) { id } }`, { data: payload }, { silent: true });
+                importResult.created++;
+                if (matchedPatient) importResult.linkedToPatient++;
+            } catch { importResult.failed++; }
+            setImportProgress(i + 1);
+        }
+
+        setResult(importResult);
+        setStep('done');
+        refresh();
+    };
+
+    // Select dropdown items for mapping
+    const mappingOptions = [
+        { id: '__skip__', label: '— Skip —' },
+        ...LEAD_FIELDS.map(f => ({ id: f.field, label: f.label })),
+    ];
+
+    return (
+        <ModalOverlay isOpen={isOpen} isDismissable onOpenChange={(open) => { if (!open) handleClose(); }}>
+            <Modal className="sm:max-w-5xl">
+                <Dialog>
+                    {() => (
+                        <div className="flex w-full flex-col rounded-xl bg-primary shadow-xl ring-1 ring-secondary overflow-hidden" style={{ height: '80vh', minHeight: '500px' }}>
+                            {/* Header */}
+                            <div className="flex items-center justify-between px-6 py-4 border-b border-secondary shrink-0">
+                                <div className="flex items-center gap-3">
+                                    <FeaturedIcon icon={FileImportIcon} color="brand" theme="light" size="sm" />
+                                    <div>
+                                        <h2 className="text-lg font-semibold text-primary">Import Leads</h2>
+                                        <p className="text-xs text-tertiary">
+                                            {step === 'select-campaign' && 'Select a campaign to import leads into'}
+                                            {step === 'map-columns' && 'Upload CSV and map columns to lead fields'}
+                                            {step === 'preview' && `Preview: ${selectedCampaign?.campaignName}`}
+                                            {step === 'importing' && 'Importing leads...'}
+                                            {step === 'done' && 'Import complete'}
+                                        </p>
+                                    </div>
+                                </div>
+                                <button onClick={handleClose} className="text-fg-quaternary hover:text-fg-secondary text-lg">&times;</button>
+                            </div>
+
+                            <StepIndicator currentStep={step} />
+
+                            {/* Content */}
+                            <div className="flex flex-1 flex-col min-h-0 overflow-hidden">
+
+                                {/* Step 1: Campaign Cards */}
+                                {step === 'select-campaign' && (
+                                    <div className="flex-1 overflow-y-auto px-6 py-4">
+                                        <div className="grid grid-cols-2 gap-3">
+                                            {activeCampaigns.length === 0 ? (
+                                                <p className="col-span-2 py-12 text-center text-sm text-tertiary">No active campaigns.</p>
+                                            ) : activeCampaigns.map(campaign => (
+                                                <button
+                                                    key={campaign.id}
+                                                    onClick={() => { setSelectedCampaign(campaign); setStep('map-columns'); }}
+                                                    className={cx(
+                                                        'flex flex-col items-start rounded-xl border-2 p-4 text-left transition duration-100 ease-linear hover:border-brand',
+                                                        selectedCampaign?.id === campaign.id ? 'border-brand bg-brand-primary' : 'border-secondary',
+                                                    )}
+                                                >
+                                                    <span className="text-sm font-semibold text-primary">{campaign.campaignName ?? 'Untitled'}</span>
+                                                    <div className="mt-1 flex items-center gap-2">
+                                                        {campaign.platform && <Badge size="sm" color="brand" type="pill-color">{campaign.platform}</Badge>}
+                                                        <Badge size="sm" color={campaign.campaignStatus === 'ACTIVE' ? 'success' : 'gray'} type="pill-color">{campaign.campaignStatus}</Badge>
+                                                    </div>
+                                                    <span className="mt-2 text-xs text-tertiary">{leads.filter(l => l.campaignId === campaign.id).length} leads</span>
+                                                </button>
+                                            ))}
+                                        </div>
+                                    </div>
+                                )}
+
+                                {/* Step 2: Upload + Column Mapping */}
+                                {step === 'map-columns' && (
+                                    <div className="flex-1 overflow-y-auto px-6 py-4 space-y-4">
+                                        {csvRows.length === 0 ? (
+                                            <label className="flex flex-col items-center justify-center rounded-xl border-2 border-dashed border-secondary py-16 cursor-pointer hover:border-brand hover:bg-brand-primary transition duration-100 ease-linear">
+                                                <FontAwesomeIcon icon={faCloudArrowUp} className="size-10 text-fg-quaternary mb-3" />
+                                                <span className="text-sm font-medium text-secondary">Drop CSV file here or click to browse</span>
+                                                <span className="text-xs text-tertiary mt-1">CSV files only, max 5000 rows</span>
+                                                <input type="file" accept=".csv" onChange={handleFileUpload} className="hidden" />
+                                            </label>
+                                        ) : (
+                                            <>
+                                                <div className="flex items-center justify-between">
+                                                    <span className="text-sm font-medium text-primary">{csvRows.length} rows detected — map columns to lead fields:</span>
+                                                    {!phoneIsMapped && (
+                                                        <div className="flex items-center gap-1.5 text-xs text-error-primary">
+                                                            <FontAwesomeIcon icon={faTriangleExclamation} className="size-3" />
+                                                            Phone column required
+                                                        </div>
+                                                    )}
+                                                </div>
+
+                                                <div className="grid grid-cols-2 gap-3">
+                                                    {mapping.map(m => (
+                                                        <div key={m.csvHeader} className="flex items-center gap-3 rounded-lg border border-secondary p-3">
+                                                            <div className="min-w-0 flex-1">
+                                                                <span className="text-xs font-semibold text-primary block">{m.csvHeader}</span>
+                                                                <span className="text-[10px] text-quaternary">CSV column</span>
+                                                            </div>
+                                                            <FontAwesomeIcon icon={faArrowRight} className="size-3 text-fg-quaternary shrink-0" />
+                                                            <div className="w-44 shrink-0">
+                                                                <Select
+                                                                    size="sm"
+                                                                    placeholder="Skip"
+                                                                    items={mappingOptions}
+                                                                    selectedKey={m.leadField ?? '__skip__'}
+                                                                    onSelectionChange={(key) => handleMappingChange(m.csvHeader, key === '__skip__' ? null : String(key))}
+                                                                >
+                                                                    {(item) => <Select.Item id={item.id}>{item.label}</Select.Item>}
+                                                                </Select>
+                                                            </div>
+                                                        </div>
+                                                    ))}
+                                                </div>
+                                            </>
+                                        )}
+                                    </div>
+                                )}
+
+                                {/* Step 3: Preview Table */}
+                                {step === 'preview' && (
+                                    <div className="flex flex-1 flex-col min-h-0">
+                                        {/* Summary bar */}
+                                        <div className="flex shrink-0 items-center gap-4 px-6 py-2 border-b border-secondary text-xs text-tertiary">
+                                            <span>{rowsWithMatch.length} rows</span>
+                                            <span className="text-success-primary">{validCount} ready</span>
+                                            {patientMatchCount > 0 && <span className="text-brand-secondary">{patientMatchCount} existing patients</span>}
+                                            {duplicateCount > 0 && <span className="text-warning-primary">{duplicateCount} duplicates</span>}
+                                            {noPhoneCount > 0 && <span className="text-error-primary">{noPhoneCount} no phone</span>}
+                                        </div>
+
+                                        {/* Table — fills remaining space, header pinned, body scrolls */}
+                                        <div className="flex flex-1 flex-col min-h-0 px-4 pt-2">
+                                            <DynamicTable<DynamicRow>
+                                                columns={[
+                                                    ...mapping.filter(m => m.leadField).map(m => ({
+                                                        id: m.csvHeader,
+                                                        label: LEAD_FIELDS.find(f => f.field === m.leadField)?.label ?? m.csvHeader,
+                                                    }) as DynamicColumn),
+                                                    { id: '__match__', label: 'Patient Match' },
+                                                ]}
+                                                rows={rowsWithMatch.slice((previewPage - 1) * PAGE_SIZE, previewPage * PAGE_SIZE).map((item, i) => ({ id: `row-${i}`, ...item }))}
+                                                renderCell={(row, columnId) => {
+                                                    if (columnId === '__match__') {
+                                                        if (row.matchedPatient) return <Badge size="sm" color="success" type="pill-color">{row.matchedPatient.fullName?.firstName ?? 'Patient'}</Badge>;
+                                                        if (row.isDuplicate) return <Badge size="sm" color="warning" type="pill-color">Duplicate</Badge>;
+                                                        if (!row.hasPhone) return <Badge size="sm" color="error" type="pill-color">No phone</Badge>;
+                                                        return <Badge size="sm" color="gray" type="pill-color">New</Badge>;
+                                                    }
+                                                    return <span className="text-tertiary truncate block max-w-[200px]">{row.row?.[columnId] ?? ''}</span>;
+                                                }}
+                                                rowClassName={(row) => cx(
+                                                    row.isDuplicate && 'bg-warning-primary opacity-60',
+                                                    !row.hasPhone && 'bg-error-primary opacity-40',
+                                                )}
+                                            />
+                                        </div>
+
+                                        {/* Pagination — pinned at bottom */}
+                                        {totalPreviewPages > 1 && (
+                                            <div className="flex shrink-0 items-center justify-between border-t border-secondary px-6 py-2">
+                                                <span className="text-xs text-tertiary">
+                                                    Page {previewPage} of {totalPreviewPages}
+                                                </span>
+                                                <div className="flex items-center gap-1">
+                                                    <button
+                                                        onClick={() => setPreviewPage(Math.max(1, previewPage - 1))}
+                                                        disabled={previewPage === 1}
+                                                        className="px-2 py-1 text-xs font-medium text-secondary rounded-md hover:bg-primary_hover disabled:text-disabled disabled:cursor-not-allowed"
+                                                    >
+                                                        Previous
+                                                    </button>
+                                                    <button
+                                                        onClick={() => setPreviewPage(Math.min(totalPreviewPages, previewPage + 1))}
+                                                        disabled={previewPage === totalPreviewPages}
+                                                        className="px-2 py-1 text-xs font-medium text-secondary rounded-md hover:bg-primary_hover disabled:text-disabled disabled:cursor-not-allowed"
+                                                    >
+                                                        Next
+                                                    </button>
+                                                </div>
+                                            </div>
+                                        )}
+                                    </div>
+                                )}
+
+                                {/* Step 4a: Importing */}
+                                {step === 'importing' && (
+                                    <div className="flex flex-1 items-center justify-center">
+                                        <div className="flex flex-col items-center">
+                                            <FontAwesomeIcon icon={faSpinner} className="size-8 animate-spin text-brand-secondary mb-4" />
+                                            <p className="text-sm font-semibold text-primary">Importing leads...</p>
+                                            <p className="text-xs text-tertiary mt-1">{importProgress} of {rowsWithMatch.length}</p>
+                                            <div className="mt-4 w-64 h-2 rounded-full bg-secondary overflow-hidden">
+                                                <div className="h-full rounded-full bg-brand-solid transition-all duration-200" style={{ width: `${(importProgress / rowsWithMatch.length) * 100}%` }} />
+                                            </div>
+                                        </div>
+                                    </div>
+                                )}
+
+                                {/* Step 4b: Done */}
+                                {step === 'done' && result && (
+                                    <div className="flex flex-1 items-center justify-center">
+                                        <div className="flex flex-col items-center">
+                                            <FeaturedIcon icon={({ className }) => <FontAwesomeIcon icon={faCheck} className={className} />} color="success" theme="light" size="lg" />
+                                            <p className="text-lg font-semibold text-primary mt-4">Import Complete</p>
+                                            <div className="mt-4 grid grid-cols-2 gap-3 w-64 text-center">
+                                                <div className="rounded-lg bg-success-primary p-3">
+                                                    <p className="text-xl font-bold text-success-primary">{result.created}</p>
+                                                    <p className="text-xs text-tertiary">Created</p>
+                                                </div>
+                                                <div className="rounded-lg bg-brand-primary p-3">
+                                                    <p className="text-xl font-bold text-brand-secondary">{result.linkedToPatient}</p>
+                                                    <p className="text-xs text-tertiary">Linked</p>
+                                                </div>
+                                                {result.skippedDuplicate > 0 && (
+                                                    <div className="rounded-lg bg-warning-primary p-3">
+                                                        <p className="text-xl font-bold text-warning-primary">{result.skippedDuplicate}</p>
+                                                        <p className="text-xs text-tertiary">Duplicates</p>
+                                                    </div>
+                                                )}
+                                                {result.failed > 0 && (
+                                                    <div className="rounded-lg bg-error-primary p-3">
+                                                        <p className="text-xl font-bold text-error-primary">{result.failed}</p>
+                                                        <p className="text-xs text-tertiary">Failed</p>
+                                                    </div>
+                                                )}
+                                            </div>
+                                        </div>
+                                    </div>
+                                )}
+                            </div>
+
+                            {/* Footer */}
+                            <div className="flex items-center justify-between px-6 py-4 border-t border-secondary shrink-0">
+                                {step === 'select-campaign' && (
+                                    <Button size="sm" color="secondary" onClick={handleClose}>Cancel</Button>
+                                )}
+                                {step === 'map-columns' && (
+                                    <>
+                                        <Button size="sm" color="secondary" onClick={() => { setStep('select-campaign'); setCsvRows([]); setMapping([]); }}>Back</Button>
+                                        {csvRows.length > 0 && (
+                                            <Button size="sm" color="primary" onClick={() => { setPreviewPage(1); setStep('preview'); }} isDisabled={!phoneIsMapped}>
+                                                Preview {validCount} Lead{validCount !== 1 ? 's' : ''}
+                                            </Button>
+                                        )}
+                                    </>
+                                )}
+                                {step === 'preview' && (
+                                    <>
+                                        <Button size="sm" color="secondary" onClick={() => setStep('map-columns')}>Back to Mapping</Button>
+                                        <Button size="sm" color="primary" onClick={handleImport} isDisabled={validCount === 0}>
+                                            Import {validCount} Lead{validCount !== 1 ? 's' : ''}
+                                        </Button>
+                                    </>
+                                )}
+                                {step === 'done' && (
+                                    <Button size="sm" color="primary" onClick={handleClose} className="ml-auto">Done</Button>
+                                )}
+                            </div>
+                        </div>
+                    )}
+                </Dialog>
+            </Modal>
+        </ModalOverlay>
+    );
+};

src/components/forms/ai-form.tsx

@@ -0,0 +1,136 @@
+import { Input } from '@/components/base/input/input';
+import { Select } from '@/components/base/select/select';
+import { TextArea } from '@/components/base/textarea/textarea';
+
+// AI assistant form — mirrors AiConfig in
+// helix-engage-server/src/config/ai.defaults.ts. API keys stay in env vars
+// (true secrets, rotated at the infra level); everything the admin can safely
+// adjust lives here: provider choice, model, temperature, and an optional
+// system-prompt addendum appended to the hospital-specific prompts that the
+// WidgetChatService generates.
+
+export type AiProvider = 'openai' | 'anthropic';
+
+export type AiFormValues = {
+    provider: AiProvider;
+    model: string;
+    temperature: string;
+    systemPromptAddendum: string;
+};
+
+export const emptyAiFormValues = (): AiFormValues => ({
+    provider: 'openai',
+    model: 'gpt-4o-mini',
+    temperature: '0.7',
+    systemPromptAddendum: '',
+});
+
+const PROVIDER_ITEMS = [
+    { id: 'openai', label: 'OpenAI' },
+    { id: 'anthropic', label: 'Anthropic' },
+];
+
+// Recommended model presets per provider. Admin can still type any model
+// string they want — these are suggestions, not the only options.
+export const MODEL_SUGGESTIONS: Record<AiProvider, string[]> = {
+    openai: ['gpt-4o-mini', 'gpt-4o', 'gpt-4-turbo', 'gpt-3.5-turbo'],
+    anthropic: ['claude-3-5-sonnet-latest', 'claude-3-5-haiku-latest', 'claude-3-opus-latest'],
+};
+
+type AiFormProps = {
+    value: AiFormValues;
+    onChange: (value: AiFormValues) => void;
+};
+
+export const AiForm = ({ value, onChange }: AiFormProps) => {
+    const patch = (updates: Partial<AiFormValues>) => onChange({ ...value, ...updates });
+
+    const suggestions = MODEL_SUGGESTIONS[value.provider];
+
+    return (
+        <div className="flex flex-col gap-6">
+            <section className="flex flex-col gap-4">
+                <div>
+                    <h3 className="text-sm font-semibold text-primary">Provider & model</h3>
+                    <p className="mt-1 text-xs text-tertiary">
+                        Choose the AI vendor powering the website widget chat and call-summary features.
+                        Changing providers takes effect immediately.
+                    </p>
+                </div>
+
+                <Select
+                    label="Provider"
+                    placeholder="Select provider"
+                    items={PROVIDER_ITEMS}
+                    selectedKey={value.provider}
+                    onSelectionChange={(key) => {
+                        const next = key as AiProvider;
+                        // When switching providers, also reset the model to the first
+                        // suggested model for that provider — saves the admin a second
+                        // edit step and avoids leaving an OpenAI model selected while
+                        // provider=anthropic.
+                        patch({
+                            provider: next,
+                            model: MODEL_SUGGESTIONS[next][0],
+                        });
+                    }}
+                >
+                    {(item) => <Select.Item id={item.id} label={item.label} />}
+                </Select>
+
+                <div>
+                    <Input
+                        label="Model"
+                        placeholder="Model identifier"
+                        value={value.model}
+                        onChange={(v) => patch({ model: v })}
+                    />
+                    <div className="mt-2 flex flex-wrap gap-1.5">
+                        {suggestions.map((model) => (
+                            <button
+                                key={model}
+                                type="button"
+                                onClick={() => patch({ model })}
+                                className={`rounded-md border px-2 py-1 text-xs transition duration-100 ease-linear ${
+                                    value.model === model
+                                        ? 'border-brand bg-brand-secondary text-brand-secondary'
+                                        : 'border-secondary bg-primary text-tertiary hover:bg-secondary'
+                                }`}
+                            >
+                                {model}
+                            </button>
+                        ))}
+                    </div>
+                </div>
+
+                <Input
+                    label="Temperature"
+                    type="number"
+                    placeholder="0.7"
+                    hint="0 = deterministic, 1 = balanced, 2 = very creative"
+                    value={value.temperature}
+                    onChange={(v) => patch({ temperature: v })}
+                />
+            </section>
+
+            <section className="flex flex-col gap-4">
+                <div>
+                    <h3 className="text-sm font-semibold text-primary">System prompt addendum</h3>
+                    <p className="mt-1 text-xs text-tertiary">
+                        Optional — gets appended to the hospital-specific prompts the widget generates
+                        automatically from your doctors and clinics. Use this to add tone guidelines,
+                        escalation rules, or topics the assistant should avoid. Leave blank for the default
+                        behaviour.
+                    </p>
+                </div>
+                <TextArea
+                    label="Additional instructions"
+                    placeholder="e.g. Always respond in the patient's language. Never quote specific medication dosages; refer them to a doctor for prescriptions."
+                    value={value.systemPromptAddendum}
+                    onChange={(v) => patch({ systemPromptAddendum: v })}
+                    rows={6}
+                />
+            </section>
+        </div>
+    );
+};

src/components/forms/clinic-form.tsx

@@ -0,0 +1,514 @@
+import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
+import { faPlus, faTrash } from '@fortawesome/pro-duotone-svg-icons';
+import { parseDate, getLocalTimeZone, today } from '@internationalized/date';
+import type { DateValue } from 'react-aria-components';
+import { Input } from '@/components/base/input/input';
+import { Select } from '@/components/base/select/select';
+import { Toggle } from '@/components/base/toggle/toggle';
+import { Button } from '@/components/base/buttons/button';
+import { DatePicker } from '@/components/application/date-picker/date-picker';
+import { TimePicker } from '@/components/application/date-picker/time-picker';
+import {
+    DaySelector,
+    defaultDaySelection,
+    type DaySelection,
+} from '@/components/application/day-selector/day-selector';
+
+// Reusable clinic form used by /settings/clinics slideout and the /setup
+// wizard step. The parent owns form state + the save flow so it can decide
+// how to orchestrate the multi-step create chain (one createClinic, then one
+// createHoliday per holiday, then one createClinicRequiredDocument per doc).
+//
+// Schema (matches the Clinic entity in
+// FortyTwoApps/helix-engage/src/objects/clinic.object.ts, column names
+// derived from SDK labels — that's why opensAt/closesAt and not openTime/
+// closeTime):
+//   - clinicName (TEXT)
+//   - address (ADDRESS → addressCustomAddress*)
+//   - phone (PHONES)
+//   - email (EMAILS)
+//   - openMonday..openSunday (7 BOOLEANs)
+//   - opensAt / closesAt (TEXT, HH:MM)
+//   - status (SELECT enum)
+//   - walkInAllowed / onlineBooking (BOOLEAN)
+//   - cancellationWindowHours / arriveEarlyMin (NUMBER)
+//
+// Plus two child entities populated separately:
+//   - Holiday (one record per closure date)
+//   - ClinicRequiredDocument (one record per required doc type)
+
+export type ClinicStatus = 'ACTIVE' | 'TEMPORARILY_CLOSED' | 'PERMANENTLY_CLOSED';
+
+// Matches the SELECT enum on ClinicRequiredDocument. Keep in sync with
+// FortyTwoApps/helix-engage/src/objects/clinic-required-document.object.ts.
+export type DocumentType =
+    | 'ID_PROOF'
+    | 'AADHAAR'
+    | 'PAN'
+    | 'REFERRAL_LETTER'
+    | 'PRESCRIPTION'
+    | 'INSURANCE_CARD'
+    | 'PREVIOUS_REPORTS'
+    | 'PHOTO'
+    | 'OTHER';
+
+const DOCUMENT_TYPE_LABELS: Record<DocumentType, string> = {
+    ID_PROOF: 'Government ID',
+    AADHAAR: 'Aadhaar Card',
+    PAN: 'PAN Card',
+    REFERRAL_LETTER: 'Referral Letter',
+    PRESCRIPTION: 'Prescription',
+    INSURANCE_CARD: 'Insurance Card',
+    PREVIOUS_REPORTS: 'Previous Reports',
+    PHOTO: 'Passport Photo',
+    OTHER: 'Other',
+};
+
+const DOCUMENT_TYPE_ORDER: DocumentType[] = [
+    'ID_PROOF',
+    'AADHAAR',
+    'PAN',
+    'REFERRAL_LETTER',
+    'PRESCRIPTION',
+    'INSURANCE_CARD',
+    'PREVIOUS_REPORTS',
+    'PHOTO',
+    'OTHER',
+];
+
+export type ClinicHolidayEntry = {
+    // Populated on the existing record when editing; undefined for freshly
+    // added holidays the user hasn't saved yet. Used by the parent to
+    // decide create vs update vs delete on save.
+    id?: string;
+    date: string; // ISO yyyy-MM-dd
+    label: string;
+};
+
+export type ClinicFormValues = {
+    // Core clinic fields
+    clinicName: string;
+    addressStreet1: string;
+    addressStreet2: string;
+    addressCity: string;
+    addressState: string;
+    addressPostcode: string;
+    phone: string;
+    email: string;
+    // Schedule — simple pattern
+    openDays: DaySelection;
+    opensAt: string | null;
+    closesAt: string | null;
+    // Status + booking policy
+    status: ClinicStatus;
+    walkInAllowed: boolean;
+    onlineBooking: boolean;
+    cancellationWindowHours: string;
+    arriveEarlyMin: string;
+    // Children (persisted via separate mutations)
+    requiredDocumentTypes: DocumentType[];
+    holidays: ClinicHolidayEntry[];
+};
+
+export const emptyClinicFormValues = (): ClinicFormValues => ({
+    clinicName: '',
+    addressStreet1: '',
+    addressStreet2: '',
+    addressCity: '',
+    addressState: '',
+    addressPostcode: '',
+    phone: '',
+    email: '',
+    openDays: defaultDaySelection(),
+    opensAt: '09:00',
+    closesAt: '18:00',
+    status: 'ACTIVE',
+    walkInAllowed: true,
+    onlineBooking: true,
+    cancellationWindowHours: '24',
+    arriveEarlyMin: '15',
+    requiredDocumentTypes: [],
+    holidays: [],
+});
+
+const STATUS_ITEMS = [
+    { id: 'ACTIVE', label: 'Active' },
+    { id: 'TEMPORARILY_CLOSED', label: 'Temporarily closed' },
+    { id: 'PERMANENTLY_CLOSED', label: 'Permanently closed' },
+];
+
+// Build the payload for `createClinic` / `updateClinic`. Holidays and
+// required-documents are NOT included here — they're child records with
+// their own mutations, orchestrated by the parent component after the
+// clinic itself has been created and its id is known.
+export const clinicCoreToGraphQLInput = (v: ClinicFormValues): Record<string, unknown> => {
+    const input: Record<string, unknown> = {
+        clinicName: v.clinicName.trim(),
+        status: v.status,
+        walkInAllowed: v.walkInAllowed,
+        onlineBooking: v.onlineBooking,
+        openMonday: v.openDays.monday,
+        openTuesday: v.openDays.tuesday,
+        openWednesday: v.openDays.wednesday,
+        openThursday: v.openDays.thursday,
+        openFriday: v.openDays.friday,
+        openSaturday: v.openDays.saturday,
+        openSunday: v.openDays.sunday,
+    };
+
+    // Column names on the platform come from the SDK `label`, not
+    // `name`. "Opens At" → opensAt, "Closes At" → closesAt.
+    if (v.opensAt) input.opensAt = v.opensAt;
+    if (v.closesAt) input.closesAt = v.closesAt;
+
+    const hasAddress =
+        v.addressStreet1 || v.addressCity || v.addressState || v.addressPostcode;
+    if (hasAddress) {
+        input.addressCustom = {
+            addressStreet1: v.addressStreet1 || null,
+            addressStreet2: v.addressStreet2 || null,
+            addressCity: v.addressCity || null,
+            addressState: v.addressState || null,
+            addressPostcode: v.addressPostcode || null,
+            addressCountry: 'India',
+        };
+    }
+
+    if (v.phone.trim()) {
+        input.phone = {
+            primaryPhoneNumber: v.phone.trim(),
+            primaryPhoneCountryCode: 'IN',
+            primaryPhoneCallingCode: '+91',
+            additionalPhones: null,
+        };
+    }
+
+    if (v.email.trim()) {
+        input.email = {
+            primaryEmail: v.email.trim(),
+            additionalEmails: null,
+        };
+    }
+
+    if (v.cancellationWindowHours.trim()) {
+        const n = Number(v.cancellationWindowHours);
+        if (!Number.isNaN(n)) input.cancellationWindowHours = n;
+    }
+    if (v.arriveEarlyMin.trim()) {
+        const n = Number(v.arriveEarlyMin);
+        if (!Number.isNaN(n)) input.arriveEarlyMin = n;
+    }
+
+    return input;
+};
+
+// Helper: build HolidayCreateInput payloads. Use after the clinic has
+// been created and its id is known.
+export const holidayInputsFromForm = (
+    v: ClinicFormValues,
+    clinicId: string,
+): Array<Record<string, unknown>> =>
+    v.holidays.map((h) => ({
+        date: h.date,
+        reasonLabel: h.label.trim() || null, // column name matches the SDK label "Reason / Label"
+        clinicId,
+    }));
+
+// Helper: build ClinicRequiredDocumentCreateInput payloads. One per
+// selected document type.
+export const requiredDocInputsFromForm = (
+    v: ClinicFormValues,
+    clinicId: string,
+): Array<Record<string, unknown>> =>
+    v.requiredDocumentTypes.map((t) => ({
+        documentType: t,
+        clinicId,
+    }));
+
+type ClinicFormProps = {
+    value: ClinicFormValues;
+    onChange: (value: ClinicFormValues) => void;
+};
+
+export const ClinicForm = ({ value, onChange }: ClinicFormProps) => {
+    const patch = (updates: Partial<ClinicFormValues>) => onChange({ ...value, ...updates });
+
+    // Required-docs add/remove handlers. The user picks a type from the
+    // dropdown; it gets added to the list; the pill row below shows
+    // selected types with an X to remove. Dropdown filters out
+    // already-selected types so the user can't pick duplicates.
+    const availableDocTypes = DOCUMENT_TYPE_ORDER.filter(
+        (t) => !value.requiredDocumentTypes.includes(t),
+    ).map((t) => ({ id: t, label: DOCUMENT_TYPE_LABELS[t] }));
+
+    const addDocType = (type: DocumentType) => {
+        if (value.requiredDocumentTypes.includes(type)) return;
+        patch({ requiredDocumentTypes: [...value.requiredDocumentTypes, type] });
+    };
+
+    const removeDocType = (type: DocumentType) => {
+        patch({
+            requiredDocumentTypes: value.requiredDocumentTypes.filter((t) => t !== type),
+        });
+    };
+
+    // Holiday add/remove handlers. Freshly-added entries have no `id`
+    // field; the parent's save flow treats those as "create".
+    const addHoliday = () => {
+        const todayIso = today(getLocalTimeZone()).toString();
+        patch({ holidays: [...value.holidays, { date: todayIso, label: '' }] });
+    };
+
+    const updateHoliday = (index: number, updates: Partial<ClinicHolidayEntry>) => {
+        const next = [...value.holidays];
+        next[index] = { ...next[index], ...updates };
+        patch({ holidays: next });
+    };
+
+    const removeHoliday = (index: number) => {
+        patch({ holidays: value.holidays.filter((_, i) => i !== index) });
+    };
+
+    return (
+        <div className="flex flex-col gap-4">
+            <Input
+                label="Clinic name"
+                isRequired
+                placeholder="e.g. Main Hospital Campus"
+                value={value.clinicName}
+                onChange={(v) => patch({ clinicName: v })}
+            />
+
+            <Select
+                label="Status"
+                placeholder="Select status"
+                items={STATUS_ITEMS}
+                selectedKey={value.status}
+                onSelectionChange={(key) => patch({ status: key as ClinicStatus })}
+            >
+                {(item) => <Select.Item id={item.id} label={item.label} />}
+            </Select>
+
+            {/* Address */}
+            <div className="flex flex-col gap-3">
+                <p className="text-xs font-semibold uppercase tracking-wider text-quaternary">
+                    Address
+                </p>
+                <Input
+                    label="Street address"
+                    placeholder="Street / building / landmark"
+                    value={value.addressStreet1}
+                    onChange={(v) => patch({ addressStreet1: v })}
+                />
+                <Input
+                    label="Area / locality (optional)"
+                    placeholder="Area, neighbourhood"
+                    value={value.addressStreet2}
+                    onChange={(v) => patch({ addressStreet2: v })}
+                />
+                <div className="grid grid-cols-2 gap-3">
+                    <Input
+                        label="City"
+                        placeholder="Bengaluru"
+                        value={value.addressCity}
+                        onChange={(v) => patch({ addressCity: v })}
+                    />
+                    <Input
+                        label="State"
+                        placeholder="Karnataka"
+                        value={value.addressState}
+                        onChange={(v) => patch({ addressState: v })}
+                    />
+                </div>
+                <Input
+                    label="Postcode"
+                    placeholder="560034"
+                    value={value.addressPostcode}
+                    onChange={(v) => patch({ addressPostcode: v })}
+                />
+            </div>
+
+            {/* Contact */}
+            <div className="flex flex-col gap-3">
+                <p className="text-xs font-semibold uppercase tracking-wider text-quaternary">
+                    Contact
+                </p>
+                <Input
+                    label="Phone"
+                    type="tel"
+                    placeholder="9876543210"
+                    value={value.phone}
+                    onChange={(v) => patch({ phone: v })}
+                />
+                <Input
+                    label="Email"
+                    type="email"
+                    placeholder="branch@hospital.com"
+                    value={value.email}
+                    onChange={(v) => patch({ email: v })}
+                />
+            </div>
+
+            {/* Visiting hours — day pills + single time range */}
+            <div className="flex flex-col gap-3">
+                <p className="text-xs font-semibold uppercase tracking-wider text-quaternary">
+                    Visiting hours
+                </p>
+                <DaySelector
+                    label="Open days"
+                    hint="Pick the days this clinic is open. The time range below applies to every selected day."
+                    value={value.openDays}
+                    onChange={(openDays) => patch({ openDays })}
+                />
+                <div className="grid grid-cols-2 gap-3">
+                    <TimePicker
+                        label="Opens at"
+                        value={value.opensAt}
+                        onChange={(opensAt) => patch({ opensAt })}
+                    />
+                    <TimePicker
+                        label="Closes at"
+                        value={value.closesAt}
+                        onChange={(closesAt) => patch({ closesAt })}
+                    />
+                </div>
+            </div>
+
+            {/* Holiday closures */}
+            <div className="flex flex-col gap-3">
+                <p className="text-xs font-semibold uppercase tracking-wider text-quaternary">
+                    Holiday closures (optional)
+                </p>
+                {value.holidays.length === 0 && (
+                    <p className="text-xs text-tertiary">
+                        No holidays configured. Add dates when this clinic is closed (Diwali,
+                        Republic Day, maintenance days, etc.).
+                    </p>
+                )}
+                {value.holidays.map((h, idx) => (
+                    <div
+                        key={idx}
+                        className="flex items-end gap-2 rounded-lg border border-secondary bg-secondary p-3"
+                    >
+                        <div className="shrink-0">
+                            <span className="mb-1 block text-xs font-medium text-secondary">
+                                Date
+                            </span>
+                            <DatePicker
+                                value={h.date ? parseDate(h.date) : null}
+                                onChange={(dv: DateValue | null) =>
+                                    updateHoliday(idx, { date: dv ? dv.toString() : '' })
+                                }
+                            />
+                        </div>
+                        <div className="flex-1">
+                            <Input
+                                label="Reason"
+                                placeholder="e.g. Diwali"
+                                value={h.label}
+                                onChange={(label) => updateHoliday(idx, { label })}
+                            />
+                        </div>
+                        <Button
+                            size="sm"
+                            color="tertiary-destructive"
+                            iconLeading={({ className }: { className?: string }) => (
+                                <FontAwesomeIcon icon={faTrash} className={className} />
+                            )}
+                            onClick={() => removeHoliday(idx)}
+                        >
+                            Remove
+                        </Button>
+                    </div>
+                ))}
+                <Button
+                    size="sm"
+                    color="secondary"
+                    iconLeading={({ className }: { className?: string }) => (
+                        <FontAwesomeIcon icon={faPlus} className={className} />
+                    )}
+                    onClick={addHoliday}
+                    className="self-start"
+                >
+                    Add holiday
+                </Button>
+            </div>
+
+            {/* Booking policy */}
+            <div className="flex flex-col gap-3">
+                <p className="text-xs font-semibold uppercase tracking-wider text-quaternary">
+                    Booking policy
+                </p>
+                <div className="flex flex-col gap-3 rounded-lg border border-secondary bg-secondary p-4">
+                    <Toggle
+                        label="Walk-ins allowed"
+                        isSelected={value.walkInAllowed}
+                        onChange={(checked) => patch({ walkInAllowed: checked })}
+                    />
+                    <Toggle
+                        label="Accept online bookings"
+                        isSelected={value.onlineBooking}
+                        onChange={(checked) => patch({ onlineBooking: checked })}
+                    />
+                </div>
+                <div className="grid grid-cols-2 gap-3">
+                    <Input
+                        label="Cancel window (hours)"
+                        type="number"
+                        value={value.cancellationWindowHours}
+                        onChange={(v) => patch({ cancellationWindowHours: v })}
+                    />
+                    <Input
+                        label="Arrive early (min)"
+                        type="number"
+                        value={value.arriveEarlyMin}
+                        onChange={(v) => patch({ arriveEarlyMin: v })}
+                    />
+                </div>
+            </div>
+
+            {/* Required documents — multi-select → pills */}
+            <div className="flex flex-col gap-3">
+                <p className="text-xs font-semibold uppercase tracking-wider text-quaternary">
+                    Required documents (optional)
+                </p>
+                {availableDocTypes.length > 0 && (
+                    <Select
+                        label="Add a required document"
+                        placeholder="Pick a document type..."
+                        items={availableDocTypes}
+                        selectedKey={null}
+                        onSelectionChange={(key) => {
+                            if (key) addDocType(key as DocumentType);
+                        }}
+                    >
+                        {(item) => <Select.Item id={item.id} label={item.label} />}
+                    </Select>
+                )}
+                {value.requiredDocumentTypes.length > 0 && (
+                    <div className="flex flex-wrap gap-2">
+                        {value.requiredDocumentTypes.map((t) => (
+                            <button
+                                key={t}
+                                type="button"
+                                onClick={() => removeDocType(t)}
+                                className="group flex items-center gap-2 rounded-full border border-brand bg-brand-secondary px-3 py-1.5 text-sm font-medium text-brand-secondary transition hover:bg-brand-primary_hover"
+                            >
+                                {DOCUMENT_TYPE_LABELS[t]}
+                                <FontAwesomeIcon
+                                    icon={faTrash}
+                                    className="size-3 text-fg-quaternary group-hover:text-fg-error-primary"
+                                />
+                            </button>
+                        ))}
+                    </div>
+                )}
+                {value.requiredDocumentTypes.length === 0 && (
+                    <p className="text-xs text-tertiary">
+                        No required documents. Patients won't be asked to bring anything.
+                    </p>
+                )}
+            </div>
+        </div>
+    );
+};

src/components/forms/doctor-form.tsx

@@ -0,0 +1,401 @@
+import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
+import { faPlus, faTrash } from '@fortawesome/pro-duotone-svg-icons';
+import { Input } from '@/components/base/input/input';
+import { Select } from '@/components/base/select/select';
+import { Toggle } from '@/components/base/toggle/toggle';
+import { Button } from '@/components/base/buttons/button';
+import { TimePicker } from '@/components/application/date-picker/time-picker';
+
+// Doctor form — hospital-wide profile with multi-clinic, multi-day
+// visiting schedule. Each row in the "visiting schedule" section maps
+// to one DoctorVisitSlot child record. The parent component owns the
+// mutation orchestration (create doctor, then create each slot).
+//
+// Previously the form had a single `clinicId` dropdown + a free-text
+// `visitingHours` textarea. Both dropped — doctors are now hospital-
+// wide, and their presence at each clinic is expressed via the
+// DoctorVisitSlot records.
+
+export type DoctorDepartment =
+    | 'CARDIOLOGY'
+    | 'GYNECOLOGY'
+    | 'ORTHOPEDICS'
+    | 'GENERAL_MEDICINE'
+    | 'ENT'
+    | 'DERMATOLOGY'
+    | 'PEDIATRICS'
+    | 'ONCOLOGY';
+
+// Matches the DoctorVisitSlot.dayOfWeek SELECT enum on the SDK entity.
+export type DayOfWeek =
+    | 'MONDAY'
+    | 'TUESDAY'
+    | 'WEDNESDAY'
+    | 'THURSDAY'
+    | 'FRIDAY'
+    | 'SATURDAY'
+    | 'SUNDAY';
+
+export type DoctorVisitSlotEntry = {
+    // Populated on existing records when editing; undefined for
+    // freshly-added rows. Used by the parent to decide create vs
+    // update vs delete on save.
+    id?: string;
+    clinicId: string;
+    dayOfWeek: DayOfWeek | '';
+    startTime: string | null;
+    endTime: string | null;
+};
+
+export type DoctorFormValues = {
+    firstName: string;
+    lastName: string;
+    department: DoctorDepartment | '';
+    specialty: string;
+    qualifications: string;
+    yearsOfExperience: string;
+    consultationFeeNew: string;
+    consultationFeeFollowUp: string;
+    phone: string;
+    email: string;
+    registrationNumber: string;
+    active: boolean;
+    // Multi-clinic, multi-day visiting schedule. One entry per slot.
+    visitSlots: DoctorVisitSlotEntry[];
+};
+
+export const emptyDoctorFormValues = (): DoctorFormValues => ({
+    firstName: '',
+    lastName: '',
+    department: '',
+    specialty: '',
+    qualifications: '',
+    yearsOfExperience: '',
+    consultationFeeNew: '',
+    consultationFeeFollowUp: '',
+    phone: '',
+    email: '',
+    registrationNumber: '',
+    active: true,
+    visitSlots: [],
+});
+
+const DEPARTMENT_ITEMS: { id: DoctorDepartment; label: string }[] = [
+    { id: 'CARDIOLOGY', label: 'Cardiology' },
+    { id: 'GYNECOLOGY', label: 'Gynecology' },
+    { id: 'ORTHOPEDICS', label: 'Orthopedics' },
+    { id: 'GENERAL_MEDICINE', label: 'General medicine' },
+    { id: 'ENT', label: 'ENT' },
+    { id: 'DERMATOLOGY', label: 'Dermatology' },
+    { id: 'PEDIATRICS', label: 'Pediatrics' },
+    { id: 'ONCOLOGY', label: 'Oncology' },
+];
+
+const DAY_ITEMS: { id: DayOfWeek; label: string }[] = [
+    { id: 'MONDAY', label: 'Monday' },
+    { id: 'TUESDAY', label: 'Tuesday' },
+    { id: 'WEDNESDAY', label: 'Wednesday' },
+    { id: 'THURSDAY', label: 'Thursday' },
+    { id: 'FRIDAY', label: 'Friday' },
+    { id: 'SATURDAY', label: 'Saturday' },
+    { id: 'SUNDAY', label: 'Sunday' },
+];
+
+// Build the createDoctor / updateDoctor mutation payload. Visit slots
+// are persisted via a separate mutation chain — see the parent
+// component's handleSave.
+export const doctorCoreToGraphQLInput = (v: DoctorFormValues): Record<string, unknown> => {
+    const input: Record<string, unknown> = {
+        fullName: {
+            firstName: v.firstName.trim(),
+            lastName: v.lastName.trim(),
+        },
+        active: v.active,
+    };
+
+    if (v.department) input.department = v.department;
+    if (v.specialty.trim()) input.specialty = v.specialty.trim();
+    if (v.qualifications.trim()) input.qualifications = v.qualifications.trim();
+    if (v.yearsOfExperience.trim()) {
+        const n = Number(v.yearsOfExperience);
+        if (!Number.isNaN(n)) input.yearsOfExperience = n;
+    }
+    if (v.consultationFeeNew.trim()) {
+        const n = Number(v.consultationFeeNew);
+        if (!Number.isNaN(n)) {
+            input.consultationFeeNew = {
+                amountMicros: Math.round(n * 1_000_000),
+                currencyCode: 'INR',
+            };
+        }
+    }
+    if (v.consultationFeeFollowUp.trim()) {
+        const n = Number(v.consultationFeeFollowUp);
+        if (!Number.isNaN(n)) {
+            input.consultationFeeFollowUp = {
+                amountMicros: Math.round(n * 1_000_000),
+                currencyCode: 'INR',
+            };
+        }
+    }
+    if (v.phone.trim()) {
+        input.phone = {
+            primaryPhoneNumber: v.phone.trim(),
+            primaryPhoneCountryCode: 'IN',
+            primaryPhoneCallingCode: '+91',
+            additionalPhones: null,
+        };
+    }
+    if (v.email.trim()) {
+        input.email = {
+            primaryEmail: v.email.trim(),
+            additionalEmails: null,
+        };
+    }
+    if (v.registrationNumber.trim()) input.registrationNumber = v.registrationNumber.trim();
+
+    return input;
+};
+
+// Build one DoctorVisitSlotCreateInput per complete slot. Drops any
+// half-filled rows silently — the form can't validate mid-entry
+// without blocking the user.
+export const visitSlotInputsFromForm = (
+    v: DoctorFormValues,
+    doctorId: string,
+): Array<Record<string, unknown>> =>
+    v.visitSlots
+        .filter((s) => s.clinicId && s.dayOfWeek && s.startTime && s.endTime)
+        .map((s) => ({
+            doctorId,
+            clinicId: s.clinicId,
+            dayOfWeek: s.dayOfWeek,
+            startTime: s.startTime,
+            endTime: s.endTime,
+        }));
+
+type ClinicOption = { id: string; label: string };
+
+type DoctorFormProps = {
+    value: DoctorFormValues;
+    onChange: (value: DoctorFormValues) => void;
+    clinics: ClinicOption[];
+};
+
+export const DoctorForm = ({ value, onChange, clinics }: DoctorFormProps) => {
+    const patch = (updates: Partial<DoctorFormValues>) => onChange({ ...value, ...updates });
+
+    // Visit-slot handlers — add/edit/remove inline inside the form.
+    const addSlot = () => {
+        patch({
+            visitSlots: [
+                ...value.visitSlots,
+                { clinicId: clinics[0]?.id ?? '', dayOfWeek: '', startTime: '09:00', endTime: '13:00' },
+            ],
+        });
+    };
+
+    const updateSlot = (index: number, updates: Partial<DoctorVisitSlotEntry>) => {
+        const next = [...value.visitSlots];
+        next[index] = { ...next[index], ...updates };
+        patch({ visitSlots: next });
+    };
+
+    const removeSlot = (index: number) => {
+        patch({ visitSlots: value.visitSlots.filter((_, i) => i !== index) });
+    };
+
+    return (
+        <div className="flex flex-col gap-4">
+            <div className="grid grid-cols-2 gap-3">
+                <Input
+                    label="First name"
+                    isRequired
+                    placeholder="Ananya"
+                    value={value.firstName}
+                    onChange={(v) => patch({ firstName: v })}
+                />
+                <Input
+                    label="Last name"
+                    isRequired
+                    placeholder="Rao"
+                    value={value.lastName}
+                    onChange={(v) => patch({ lastName: v })}
+                />
+            </div>
+
+            <Select
+                label="Department"
+                placeholder="Select department"
+                items={DEPARTMENT_ITEMS}
+                selectedKey={value.department || null}
+                onSelectionChange={(key) => patch({ department: (key as DoctorDepartment) || '' })}
+            >
+                {(item) => <Select.Item id={item.id} label={item.label} />}
+            </Select>
+
+            <Input
+                label="Specialty"
+                placeholder="e.g. Interventional cardiology"
+                value={value.specialty}
+                onChange={(v) => patch({ specialty: v })}
+            />
+
+            <div className="grid grid-cols-2 gap-3">
+                <Input
+                    label="Qualifications"
+                    placeholder="MBBS, MD"
+                    value={value.qualifications}
+                    onChange={(v) => patch({ qualifications: v })}
+                />
+                <Input
+                    label="Experience (years)"
+                    type="number"
+                    value={value.yearsOfExperience}
+                    onChange={(v) => patch({ yearsOfExperience: v })}
+                />
+            </div>
+
+            {/* Visiting schedule — one row per clinic/day slot */}
+            <div className="flex flex-col gap-3">
+                <p className="text-xs font-semibold uppercase tracking-wider text-quaternary">
+                    Visiting schedule
+                </p>
+                {clinics.length === 0 ? (
+                    <div className="rounded-lg border border-dashed border-warning bg-warning-primary p-4">
+                        <p className="text-sm font-semibold text-warning-primary">Add a clinic first</p>
+                        <p className="mt-1 text-xs text-tertiary">
+                            You need at least one clinic before you can schedule doctor visits.
+                        </p>
+                    </div>
+                ) : (
+                    <>
+                        {value.visitSlots.length === 0 && (
+                            <p className="text-xs text-tertiary">
+                                No visit slots. Add rows for each clinic + day this doctor visits.
+                            </p>
+                        )}
+                        {value.visitSlots.map((slot, idx) => (
+                            <div
+                                key={idx}
+                                className="flex flex-col gap-3 rounded-lg border border-secondary bg-secondary p-3"
+                            >
+                                <div className="grid grid-cols-2 gap-3">
+                                    <Select
+                                        label="Clinic"
+                                        placeholder="Select clinic"
+                                        items={clinics}
+                                        selectedKey={slot.clinicId || null}
+                                        onSelectionChange={(key) =>
+                                            updateSlot(idx, { clinicId: (key as string) || '' })
+                                        }
+                                    >
+                                        {(item) => <Select.Item id={item.id} label={item.label} />}
+                                    </Select>
+                                    <Select
+                                        label="Day"
+                                        placeholder="Select day"
+                                        items={DAY_ITEMS}
+                                        selectedKey={slot.dayOfWeek || null}
+                                        onSelectionChange={(key) =>
+                                            updateSlot(idx, { dayOfWeek: (key as DayOfWeek) || '' })
+                                        }
+                                    >
+                                        {(item) => <Select.Item id={item.id} label={item.label} />}
+                                    </Select>
+                                </div>
+                                <div className="grid grid-cols-2 gap-3">
+                                    <TimePicker
+                                        label="Start time"
+                                        value={slot.startTime}
+                                        onChange={(startTime) => updateSlot(idx, { startTime })}
+                                    />
+                                    <TimePicker
+                                        label="End time"
+                                        value={slot.endTime}
+                                        onChange={(endTime) => updateSlot(idx, { endTime })}
+                                    />
+                                </div>
+                                <div className="flex justify-end">
+                                    <Button
+                                        size="sm"
+                                        color="tertiary-destructive"
+                                        iconLeading={({ className }: { className?: string }) => (
+                                            <FontAwesomeIcon icon={faTrash} className={className} />
+                                        )}
+                                        onClick={() => removeSlot(idx)}
+                                    >
+                                        Remove slot
+                                    </Button>
+                                </div>
+                            </div>
+                        ))}
+                        <Button
+                            size="sm"
+                            color="secondary"
+                            iconLeading={({ className }: { className?: string }) => (
+                                <FontAwesomeIcon icon={faPlus} className={className} />
+                            )}
+                            onClick={addSlot}
+                            className="self-start"
+                        >
+                            Add visit slot
+                        </Button>
+                    </>
+                )}
+            </div>
+
+            <div className="grid grid-cols-2 gap-3">
+                <Input
+                    label="New consult fee (₹)"
+                    type="number"
+                    placeholder="800"
+                    value={value.consultationFeeNew}
+                    onChange={(v) => patch({ consultationFeeNew: v })}
+                />
+                <Input
+                    label="Follow-up fee (₹)"
+                    type="number"
+                    placeholder="500"
+                    value={value.consultationFeeFollowUp}
+                    onChange={(v) => patch({ consultationFeeFollowUp: v })}
+                />
+            </div>
+
+            <div className="flex flex-col gap-3">
+                <p className="text-xs font-semibold uppercase tracking-wider text-quaternary">Contact</p>
+                <Input
+                    label="Phone"
+                    type="tel"
+                    placeholder="9876543210"
+                    value={value.phone}
+                    onChange={(v) => patch({ phone: v })}
+                />
+                <Input
+                    label="Email"
+                    type="email"
+                    placeholder="doctor@hospital.com"
+                    value={value.email}
+                    onChange={(v) => patch({ email: v })}
+                />
+                <Input
+                    label="Registration number"
+                    placeholder="Medical council reg no."
+                    value={value.registrationNumber}
+                    onChange={(v) => patch({ registrationNumber: v })}
+                />
+            </div>
+
+            <div className="flex flex-col gap-2 rounded-lg border border-secondary bg-secondary p-4">
+                <Toggle
+                    label="Accepting appointments"
+                    isSelected={value.active}
+                    onChange={(checked) => patch({ active: checked })}
+                />
+                <p className="text-xs text-tertiary">
+                    Inactive doctors are hidden from appointment booking and call-desk transfer lists.
+                </p>
+            </div>
+        </div>
+    );
+};

src/components/forms/employee-create-form.tsx

@@ -0,0 +1,205 @@
+import { useState } from 'react';
+import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
+import { faEye, faEyeSlash, faRotate } from '@fortawesome/pro-duotone-svg-icons';
+import { Input } from '@/components/base/input/input';
+import { Select } from '@/components/base/select/select';
+
+// In-place employee creation form used by the Team wizard step and
+// the /settings/team slideout. Replaces the multi-email InviteMemberForm
+// — this project never uses email invitations, all employees are
+// created directly with a temp password that the admin hands out.
+//
+// Two modes:
+//
+//   - 'create': all fields editable. The temp password is auto-generated
+//     on form mount (parent does this) and revealed via an eye icon. A
+//     refresh icon next to the eye lets the admin re-roll the password
+//     before saving.
+//
+//   - 'edit':  email is read-only (it's the login id, can't change),
+//     password field is hidden entirely (no reset-password from the
+//     wizard). Only firstName/lastName/role can change.
+//
+// SIP seat assignment is intentionally NOT in this form — it lives
+// exclusively in the Telephony wizard step, so there's a single source
+// of truth for "who is on which seat" and admins don't have to remember
+// two places to manage the same thing.
+
+export type RoleOption = {
+    id: string;
+    label: string;
+    supportingText?: string;
+};
+
+export type EmployeeCreateFormValues = {
+    firstName: string;
+    lastName: string;
+    email: string;
+    password: string;
+    roleId: string;
+};
+
+export const emptyEmployeeCreateFormValues: EmployeeCreateFormValues = {
+    firstName: '',
+    lastName: '',
+    email: '',
+    password: '',
+    roleId: '',
+};
+
+// Random temp password generator. Skips visually-ambiguous chars
+// (0/O/1/l/I) so admins can read the password back over a phone call
+// without typo risk. 11 alphanumerics + 1 symbol = 12 chars total.
+export const generateTempPassword = (): string => {
+    const chars = 'abcdefghjkmnpqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ23456789';
+    const symbols = '!@#$';
+    let pwd = '';
+    for (let i = 0; i < 11; i++) {
+        pwd += chars[Math.floor(Math.random() * chars.length)];
+    }
+    pwd += symbols[Math.floor(Math.random() * symbols.length)];
+    return pwd;
+};
+
+type EmployeeCreateFormProps = {
+    value: EmployeeCreateFormValues;
+    onChange: (value: EmployeeCreateFormValues) => void;
+    roles: RoleOption[];
+    // 'create' = full form, 'edit' = name + role only.
+    mode?: 'create' | 'edit';
+};
+
+// Eye / eye-slash button rendered inside the password field's
+// trailing slot. Stays internal to this form since password reveal
+// is the only place we need it right now.
+const EyeButton = ({ visible, onClick, title }: { visible: boolean; onClick: () => void; title: string }) => (
+    <button
+        type="button"
+        onClick={onClick}
+        title={title}
+        aria-label={title}
+        className="flex size-7 items-center justify-center rounded-md text-fg-quaternary hover:bg-secondary_hover hover:text-fg-tertiary_hover"
+    >
+        <FontAwesomeIcon icon={visible ? faEyeSlash : faEye} className="size-4" />
+    </button>
+);
+
+const RegenerateButton = ({ onClick }: { onClick: () => void }) => (
+    <button
+        type="button"
+        onClick={onClick}
+        title="Generate a new password"
+        aria-label="Generate a new password"
+        className="flex size-7 items-center justify-center rounded-md text-fg-quaternary hover:bg-secondary_hover hover:text-fg-tertiary_hover"
+    >
+        <FontAwesomeIcon icon={faRotate} className="size-4" />
+    </button>
+);
+
+// Kept simple — name + contact + creds + role. No avatar, no phone,
+// no title. The goal is to get employees onto the system fast; they
+// can fill in the rest from their own profile page later.
+export const EmployeeCreateForm = ({
+    value,
+    onChange,
+    roles,
+    mode = 'create',
+}: EmployeeCreateFormProps) => {
+    const [showPassword, setShowPassword] = useState(false);
+
+    const patch = (partial: Partial<EmployeeCreateFormValues>) =>
+        onChange({ ...value, ...partial });
+
+    const isEdit = mode === 'edit';
+
+    return (
+        <div className="flex flex-col gap-4">
+            <div className="grid grid-cols-2 gap-3">
+                <Input
+                    label="First name"
+                    placeholder="Priya"
+                    value={value.firstName}
+                    onChange={(v) => patch({ firstName: v })}
+                    isRequired
+                />
+                <Input
+                    label="Last name"
+                    placeholder="Sharma"
+                    value={value.lastName}
+                    onChange={(v) => patch({ lastName: v })}
+                />
+            </div>
+
+            <Input
+                label="Email"
+                type="email"
+                placeholder="priya@hospital.com"
+                value={value.email}
+                onChange={(v) => patch({ email: v })}
+                isRequired={!isEdit}
+                isReadOnly={isEdit}
+                isDisabled={isEdit}
+                hint={
+                    isEdit
+                        ? 'Email is the login id and cannot be changed.'
+                        : 'This is the login id for the employee. Cannot be changed later.'
+                }
+            />
+
+            {!isEdit && (
+                <div>
+                    <label className="block text-sm font-medium text-secondary">
+                        Temporary password <span className="text-error-primary">*</span>
+                    </label>
+                    <div className="mt-1.5 flex items-center gap-2 rounded-lg border border-secondary bg-primary px-3 shadow-xs focus-within:border-brand focus-within:ring-2 focus-within:ring-brand-100">
+                        <input
+                            type={showPassword ? 'text' : 'password'}
+                            value={value.password}
+                            onChange={(e) => patch({ password: e.target.value })}
+                            placeholder="Auto-generated"
+                            className="flex-1 bg-transparent py-2 font-mono text-sm text-primary placeholder:text-placeholder outline-none"
+                        />
+                        <EyeButton
+                            visible={showPassword}
+                            onClick={() => setShowPassword((v) => !v)}
+                            title={showPassword ? 'Hide password' : 'Show password'}
+                        />
+                        <RegenerateButton
+                            onClick={() => {
+                                patch({ password: generateTempPassword() });
+                                setShowPassword(true);
+                            }}
+                        />
+                    </div>
+                    <p className="mt-1 text-xs text-tertiary">
+                        Auto-generated. Click the refresh icon to roll a new one. Share with the
+                        employee directly — they should change it after first login.
+                    </p>
+                </div>
+            )}
+
+            <Select
+                label="Role"
+                placeholder={roles.length === 0 ? 'No roles available' : 'Select a role'}
+                isDisabled={roles.length === 0}
+                items={roles}
+                selectedKey={value.roleId || null}
+                onSelectionChange={(key) => patch({ roleId: (key as string) || '' })}
+                isRequired
+            >
+                {(item) => (
+                    <Select.Item
+                        id={item.id}
+                        label={item.label}
+                        supportingText={item.supportingText}
+                    />
+                )}
+            </Select>
+
+            <div className="rounded-lg border border-dashed border-secondary bg-secondary p-3 text-xs text-tertiary">
+                SIP seats are managed in the <b>Telephony</b> step — create the employee here
+                first, then assign them a seat there.
+            </div>
+        </div>
+    );
+};

src/components/forms/telephony-form.tsx

@@ -0,0 +1,177 @@
+import { Input } from '@/components/base/input/input';
+
+// Telephony form — covers Ozonetel cloud-call-center, the Ozonetel WebRTC
+// gateway, and Exotel REST API credentials. Mirrors the TelephonyConfig shape
+// in helix-engage-server/src/config/telephony.defaults.ts.
+//
+// Secrets (ozonetel.agentPassword, exotel.apiToken) come back from the GET
+// endpoint as the sentinel '***masked***' — the form preserves that sentinel
+// untouched unless the admin actually edits the field, in which case the
+// backend overwrites the stored value. This is the same convention used by
+// TelephonyConfigService.getMaskedConfig / updateConfig.
+
+export type TelephonyFormValues = {
+    ozonetel: {
+        agentId: string;
+        agentPassword: string;
+        did: string;
+        sipId: string;
+        campaignName: string;
+    };
+    sip: {
+        domain: string;
+        wsPort: string;
+    };
+    exotel: {
+        apiKey: string;
+        apiToken: string;
+        accountSid: string;
+        subdomain: string;
+    };
+};
+
+export const emptyTelephonyFormValues = (): TelephonyFormValues => ({
+    ozonetel: {
+        agentId: '',
+        agentPassword: '',
+        did: '',
+        sipId: '',
+        campaignName: '',
+    },
+    sip: {
+        domain: 'blr-pub-rtc4.ozonetel.com',
+        wsPort: '444',
+    },
+    exotel: {
+        apiKey: '',
+        apiToken: '',
+        accountSid: '',
+        subdomain: 'api.exotel.com',
+    },
+});
+
+type TelephonyFormProps = {
+    value: TelephonyFormValues;
+    onChange: (value: TelephonyFormValues) => void;
+};
+
+export const TelephonyForm = ({ value, onChange }: TelephonyFormProps) => {
+    const patchOzonetel = (updates: Partial<TelephonyFormValues['ozonetel']>) =>
+        onChange({ ...value, ozonetel: { ...value.ozonetel, ...updates } });
+    const patchSip = (updates: Partial<TelephonyFormValues['sip']>) =>
+        onChange({ ...value, sip: { ...value.sip, ...updates } });
+    const patchExotel = (updates: Partial<TelephonyFormValues['exotel']>) =>
+        onChange({ ...value, exotel: { ...value.exotel, ...updates } });
+
+    return (
+        <div className="flex flex-col gap-8">
+            <section className="flex flex-col gap-4">
+                <div>
+                    <h3 className="text-sm font-semibold text-primary">Ozonetel Cloud Agent</h3>
+                    <p className="mt-1 text-xs text-tertiary">
+                        Outbound dialing, SIP registration, and agent provisioning. Get these values from your
+                        Ozonetel dashboard under Admin → Users and Numbers.
+                    </p>
+                </div>
+                <div className="grid grid-cols-2 gap-3">
+                    <Input
+                        label="Agent ID"
+                        placeholder="e.g. agent001"
+                        value={value.ozonetel.agentId}
+                        onChange={(v) => patchOzonetel({ agentId: v })}
+                    />
+                    <Input
+                        label="Agent password"
+                        type="password"
+                        placeholder="Leave '***masked***' to keep current"
+                        value={value.ozonetel.agentPassword}
+                        onChange={(v) => patchOzonetel({ agentPassword: v })}
+                    />
+                </div>
+                <div className="grid grid-cols-2 gap-3">
+                    <Input
+                        label="Default DID"
+                        placeholder="Primary hospital number"
+                        value={value.ozonetel.did}
+                        onChange={(v) => patchOzonetel({ did: v })}
+                    />
+                    <Input
+                        label="SIP ID"
+                        placeholder="Softphone extension"
+                        value={value.ozonetel.sipId}
+                        onChange={(v) => patchOzonetel({ sipId: v })}
+                    />
+                </div>
+                <Input
+                    label="Campaign name"
+                    placeholder="CloudAgent campaign for outbound dial"
+                    value={value.ozonetel.campaignName}
+                    onChange={(v) => patchOzonetel({ campaignName: v })}
+                />
+            </section>
+
+            <section className="flex flex-col gap-4">
+                <div>
+                    <h3 className="text-sm font-semibold text-primary">SIP Gateway (WebRTC)</h3>
+                    <p className="mt-1 text-xs text-tertiary">
+                        Used by the staff portal softphone. Defaults work for most Indian Ozonetel tenants — only
+                        change if Ozonetel support instructs you to.
+                    </p>
+                </div>
+                <div className="grid grid-cols-2 gap-3">
+                    <Input
+                        label="SIP domain"
+                        placeholder="blr-pub-rtc4.ozonetel.com"
+                        value={value.sip.domain}
+                        onChange={(v) => patchSip({ domain: v })}
+                    />
+                    <Input
+                        label="WebSocket port"
+                        placeholder="444"
+                        value={value.sip.wsPort}
+                        onChange={(v) => patchSip({ wsPort: v })}
+                    />
+                </div>
+            </section>
+
+            <section className="flex flex-col gap-4">
+                <div>
+                    <h3 className="text-sm font-semibold text-primary">Exotel (SMS + inbound numbers)</h3>
+                    <p className="mt-1 text-xs text-tertiary">
+                        Optional — only required if you use Exotel for SMS or want inbound number management from
+                        this portal.
+                    </p>
+                </div>
+                <div className="grid grid-cols-2 gap-3">
+                    <Input
+                        label="API key"
+                        placeholder="Exotel API key"
+                        value={value.exotel.apiKey}
+                        onChange={(v) => patchExotel({ apiKey: v })}
+                    />
+                    <Input
+                        label="API token"
+                        type="password"
+                        placeholder="Leave '***masked***' to keep current"
+                        value={value.exotel.apiToken}
+                        onChange={(v) => patchExotel({ apiToken: v })}
+                    />
+                </div>
+                <div className="grid grid-cols-2 gap-3">
+                    <Input
+                        label="Account SID"
+                        placeholder="Exotel account SID"
+                        value={value.exotel.accountSid}
+                        onChange={(v) => patchExotel({ accountSid: v })}
+                    />
+                    <Input
+                        label="Subdomain"
+                        placeholder="api.exotel.com"
+                        value={value.exotel.subdomain}
+                        onChange={(v) => patchExotel({ subdomain: v })}
+                    />
+                </div>
+            </section>
+        </div>
+    );
+};

src/components/forms/widget-form.tsx

@@ -0,0 +1,167 @@
+import { useState } from 'react';
+import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
+import { faPlus, faTrash } from '@fortawesome/pro-duotone-svg-icons';
+import { Input } from '@/components/base/input/input';
+import { Toggle } from '@/components/base/toggle/toggle';
+import { Button } from '@/components/base/buttons/button';
+
+// Widget form — mirrors WidgetConfig from
+// helix-engage-server/src/config/widget.defaults.ts. The site key and site ID
+// are read-only (generated / rotated by the backend), the rest are editable.
+//
+// allowedOrigins is an origin allowlist — an empty list means "any origin"
+// which is useful for testing but should be tightened in production.
+
+export type WidgetFormValues = {
+    enabled: boolean;
+    url: string;
+    allowedOrigins: string[];
+    embed: {
+        loginPage: boolean;
+    };
+};
+
+export const emptyWidgetFormValues = (): WidgetFormValues => ({
+    enabled: true,
+    url: '',
+    allowedOrigins: [],
+    embed: {
+        loginPage: false,
+    },
+});
+
+type WidgetFormProps = {
+    value: WidgetFormValues;
+    onChange: (value: WidgetFormValues) => void;
+};
+
+export const WidgetForm = ({ value, onChange }: WidgetFormProps) => {
+    const [originDraft, setOriginDraft] = useState('');
+
+    const addOrigin = () => {
+        const trimmed = originDraft.trim();
+        if (!trimmed) return;
+        if (value.allowedOrigins.includes(trimmed)) {
+            setOriginDraft('');
+            return;
+        }
+        onChange({ ...value, allowedOrigins: [...value.allowedOrigins, trimmed] });
+        setOriginDraft('');
+    };
+
+    const removeOrigin = (origin: string) => {
+        onChange({ ...value, allowedOrigins: value.allowedOrigins.filter((o) => o !== origin) });
+    };
+
+    return (
+        <div className="flex flex-col gap-8">
+            <section className="flex flex-col gap-4">
+                <div>
+                    <h3 className="text-sm font-semibold text-primary">Activation</h3>
+                    <p className="mt-1 text-xs text-tertiary">
+                        When disabled, widget.js returns an empty response and the script no-ops on the
+                        embedding page. Use this as a kill switch if something goes wrong in production.
+                    </p>
+                </div>
+                <div className="rounded-lg border border-secondary bg-secondary p-4">
+                    <Toggle
+                        label="Website widget enabled"
+                        isSelected={value.enabled}
+                        onChange={(checked) => onChange({ ...value, enabled: checked })}
+                    />
+                </div>
+            </section>
+
+            <section className="flex flex-col gap-4">
+                <div>
+                    <h3 className="text-sm font-semibold text-primary">Hosting</h3>
+                    <p className="mt-1 text-xs text-tertiary">
+                        Public base URL where widget.js is served from. Leave blank to use the same origin as
+                        this sidecar (the common case).
+                    </p>
+                </div>
+                <Input
+                    label="Public URL"
+                    placeholder="https://widget.hospital.com"
+                    value={value.url}
+                    onChange={(v) => onChange({ ...value, url: v })}
+                />
+            </section>
+
+            <section className="flex flex-col gap-4">
+                <div>
+                    <h3 className="text-sm font-semibold text-primary">Allowed origins</h3>
+                    <p className="mt-1 text-xs text-tertiary">
+                        Origins where the widget may be embedded. An empty list means any origin is accepted
+                        (test mode). In production, list every hospital website + staging environment
+                        explicitly.
+                    </p>
+                </div>
+                <div className="flex items-center gap-2">
+                    <div className="flex-1">
+                        <Input
+                            placeholder="https://hospital.com"
+                            value={originDraft}
+                            onChange={setOriginDraft}
+                        />
+                    </div>
+                    <Button
+                        size="sm"
+                        color="secondary"
+                        iconLeading={({ className }: { className?: string }) => (
+                            <FontAwesomeIcon icon={faPlus} className={className} />
+                        )}
+                        onClick={addOrigin}
+                        isDisabled={!originDraft.trim()}
+                    >
+                        Add
+                    </Button>
+                </div>
+                {value.allowedOrigins.length === 0 ? (
+                    <p className="rounded-lg border border-dashed border-secondary bg-secondary p-4 text-center text-xs text-tertiary">
+                        Any origin allowed — widget runs in test mode.
+                    </p>
+                ) : (
+                    <ul className="flex flex-col gap-2 rounded-lg border border-secondary bg-secondary p-3">
+                        {value.allowedOrigins.map((origin) => (
+                            <li
+                                key={origin}
+                                className="flex items-center justify-between rounded-md bg-primary px-3 py-2 text-sm"
+                            >
+                                <span className="font-mono text-primary">{origin}</span>
+                                <button
+                                    type="button"
+                                    onClick={() => removeOrigin(origin)}
+                                    className="flex size-6 items-center justify-center rounded-md text-fg-quaternary hover:bg-secondary_hover hover:text-fg-error-primary"
+                                    title="Remove origin"
+                                >
+                                    <FontAwesomeIcon icon={faTrash} className="size-3" />
+                                </button>
+                            </li>
+                        ))}
+                    </ul>
+                )}
+            </section>
+
+            <section className="flex flex-col gap-4">
+                <div>
+                    <h3 className="text-sm font-semibold text-primary">Embed surfaces</h3>
+                    <p className="mt-1 text-xs text-tertiary">
+                        Where inside this application the widget should auto-render. Keep these off if you
+                        only plan to embed it on your public hospital website.
+                    </p>
+                </div>
+                <div className="rounded-lg border border-secondary bg-secondary p-4">
+                    <Toggle
+                        label="Show on staff login page"
+                        hint="Useful for smoke-testing without a public landing page."
+                        isSelected={value.embed.loginPage}
+                        onChange={(checked) =>
+                            onChange({ ...value, embed: { ...value.embed, loginPage: checked } })
+                        }
+                    />
+                </div>
+            </section>
+        </div>
+    );
+};

src/components/layout/app-shell.tsx

@@ -1,9 +1,22 @@
-import type { ReactNode } from 'react';
+import { useEffect, useState, useCallback, type ReactNode } from 'react';
 import { useLocation } from 'react-router';
+import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
+import { faWifi, faWifiSlash } from '@fortawesome/pro-duotone-svg-icons';
 import { Sidebar } from './sidebar';
 import { SipProvider } from '@/providers/sip-provider';
+import { useSip } from '@/providers/sip-provider';
 import { CallWidget } from '@/components/call-desk/call-widget';
+import { MaintOtpModal } from '@/components/modals/maint-otp-modal';
+import { AgentStatusToggle } from '@/components/call-desk/agent-status-toggle';
+import { NotificationBell } from './notification-bell';
+import { ResumeSetupBanner } from '@/components/setup/resume-setup-banner';
+import { Badge } from '@/components/base/badges/badges';
 import { useAuth } from '@/providers/auth-provider';
+import { useData } from '@/providers/data-provider';
+import { useMaintShortcuts } from '@/hooks/use-maint-shortcuts';
+import { useNetworkStatus } from '@/hooks/use-network-status';
+import { apiClient } from '@/lib/api-client';
+import { cx } from '@/utils/cx';
 
 interface AppShellProps {
     children: ReactNode;
@@ -11,15 +24,137 @@ interface AppShellProps {
 
 export const AppShell = ({ children }: AppShellProps) => {
     const { pathname } = useLocation();
-    const { isCCAgent } = useAuth();
+    const { isCCAgent, isAdmin } = useAuth();
+    const { isOpen, activeAction, close } = useMaintShortcuts();
+    const { connectionStatus, isRegistered } = useSip();
+    const networkQuality = useNetworkStatus();
+    const hasAgentConfig = !!localStorage.getItem('helix_agent_config');
+
+    // Pre-step state for actions that need user input before OTP
+    const [preStepPayload, setPreStepPayload] = useState<Record<string, any> | undefined>(undefined);
+    const { campaigns, leads, refresh } = useData();
+
+    const leadsPerCampaign = useCallback((campaignId: string) =>
+        leads.filter(l => l.campaignId === campaignId).length,
+        [leads],
+    );
+
+    // Client-side handler for clearing campaign leads
+    const clearCampaignLeadsHandler = useCallback(async (payload: any) => {
+        const campaignId = payload?.campaignId;
+        if (!campaignId) return { status: 'error', message: 'No campaign selected' };
+
+        const campaignLeads = leads.filter(l => l.campaignId === campaignId);
+        if (campaignLeads.length === 0) return { status: 'ok', message: 'No leads to clear' };
+
+        let deleted = 0;
+        for (const lead of campaignLeads) {
+            try {
+                await apiClient.graphql(`mutation($id: UUID!) { deleteLead(id: $id) { id } }`, { id: lead.id }, { silent: true });
+                deleted++;
+            } catch { /* continue */ }
+        }
+
+        refresh();
+        return { status: 'ok', message: `${deleted} leads deleted` };
+    }, [leads, refresh]);
+
+    // Attach client-side handler to the action when it's clear-campaign-leads
+    const enrichedAction = activeAction ? {
+        ...activeAction,
+        ...(activeAction.endpoint === 'clear-campaign-leads' ? { clientSideHandler: clearCampaignLeadsHandler } : {}),
+    } : null;
+
+    // Reset pre-step when modal closes
+    useEffect(() => {
+        if (!isOpen) setPreStepPayload(undefined);
+    }, [isOpen]);
+
+    // Pre-step content for campaign selection
+    const campaignPreStep = activeAction?.needsPreStep && activeAction.endpoint === 'clear-campaign-leads' ? (
+        <div className="space-y-2 max-h-48 overflow-y-auto">
+            {campaigns.map(c => {
+                const count = leadsPerCampaign(c.id);
+                const isSelected = preStepPayload?.campaignId === c.id;
+                return (
+                    <button
+                        key={c.id}
+                        onClick={() => setPreStepPayload({ campaignId: c.id })}
+                        className={cx(
+                            'flex w-full items-center justify-between rounded-lg border-2 px-3 py-2.5 text-left transition duration-100 ease-linear',
+                            isSelected ? 'border-error bg-error-primary' : 'border-secondary hover:border-error',
+                        )}
+                    >
+                        <span className="text-sm font-medium text-primary">{c.campaignName ?? 'Untitled'}</span>
+                        <Badge size="sm" color={count > 0 ? 'error' : 'gray'} type="pill-color">{count} leads</Badge>
+                    </button>
+                );
+            })}
+        </div>
+    ) : undefined;
+
+    // Heartbeat: keep agent session alive in Redis (CC agents only)
+    useEffect(() => {
+        if (!isCCAgent) return;
+
+        const beat = () => {
+            const token = localStorage.getItem('helix_access_token');
+            if (token) {
+                const apiUrl = import.meta.env.VITE_API_URL ?? 'http://localhost:4100';
+                fetch(`${apiUrl}/auth/heartbeat`, {
+                    method: 'POST',
+                    headers: { Authorization: `Bearer ${token}` },
+                }).catch(() => {});
+            }
+        };
+
+        const interval = setInterval(beat, 5 * 60 * 1000);
+        return () => clearInterval(interval);
+    }, [isCCAgent]);
 
     return (
         <SipProvider>
-            <div className="flex min-h-screen bg-primary">
+            <div className="flex h-screen bg-primary">
                 <Sidebar activeUrl={pathname} />
-                <main className="flex flex-1 flex-col overflow-auto">{children}</main>
+                <div className="flex flex-1 flex-col overflow-hidden">
+                    {/* Persistent top bar — visible on all pages */}
+                    {(hasAgentConfig || isAdmin) && (
+                        <div className="flex shrink-0 items-center justify-end gap-2 border-b border-secondary px-4 py-2">
+                            {isAdmin && <NotificationBell />}
+                            {hasAgentConfig && (
+                                <>
+                                    <div className={cx(
+                                        'flex items-center gap-1.5 rounded-full px-2.5 py-1 text-xs font-medium',
+                                        networkQuality === 'good'
+                                            ? 'bg-success-primary text-success-primary'
+                                            : networkQuality === 'offline'
+                                                ? 'bg-error-secondary text-error-primary'
+                                                : 'bg-warning-secondary text-warning-primary',
+                                    )}>
+                                        <FontAwesomeIcon
+                                            icon={networkQuality === 'offline' ? faWifiSlash : faWifi}
+                                            className="size-3"
+                                        />
+                                        {networkQuality === 'good' ? 'Connected' : networkQuality === 'offline' ? 'No connection' : 'Unstable'}
+                                    </div>
+                                    <AgentStatusToggle isRegistered={isRegistered} connectionStatus={connectionStatus} />
+                                </>
+                            )}
+                        </div>
+                    )}
+                    <ResumeSetupBanner />
+                    <main className="flex flex-1 flex-col overflow-hidden">{children}</main>
+                </div>
                 {isCCAgent && pathname !== '/' && pathname !== '/call-desk' && <CallWidget />}
             </div>
+            <MaintOtpModal
+                isOpen={isOpen}
+                onOpenChange={(open) => !open && close()}
+                action={enrichedAction}
+                preStepContent={campaignPreStep}
+                preStepPayload={preStepPayload}
+                preStepReady={!activeAction?.needsPreStep || !!preStepPayload}
+            />
         </SipProvider>
     );
 };

src/components/layout/notification-bell.tsx

@@ -0,0 +1,142 @@
+import { useState, useRef, useEffect } from 'react';
+import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
+import { faBell, faTriangleExclamation, faXmark, faCheck } from '@fortawesome/pro-duotone-svg-icons';
+import { Badge } from '@/components/base/badges/badges';
+import { usePerformanceAlerts, type PerformanceAlert } from '@/hooks/use-performance-alerts';
+import { cx } from '@/utils/cx';
+
+const DEMO_ALERTS: PerformanceAlert[] = [
+    { id: 'demo-1', agent: 'Riya Mehta', type: 'Excessive Idle Time', value: '120m', severity: 'error', dismissed: false },
+    { id: 'demo-2', agent: 'Arjun Kapoor', type: 'Excessive Idle Time', value: '180m', severity: 'error', dismissed: false },
+    { id: 'demo-3', agent: 'Sneha Iyer', type: 'Excessive Idle Time', value: '250m', severity: 'error', dismissed: false },
+    { id: 'demo-4', agent: 'Vikrant Desai', type: 'Excessive Idle Time', value: '300m', severity: 'error', dismissed: false },
+    { id: 'demo-5', agent: 'Vikrant Desai', type: 'Low NPS', value: '35', severity: 'warning', dismissed: false },
+    { id: 'demo-6', agent: 'Vikrant Desai', type: 'Low Conversion', value: '40%', severity: 'warning', dismissed: false },
+    { id: 'demo-7', agent: 'Pooja Rao', type: 'Excessive Idle Time', value: '200m', severity: 'error', dismissed: false },
+    { id: 'demo-8', agent: 'Mohammed Rizwan', type: 'Excessive Idle Time', value: '80m', severity: 'error', dismissed: false },
+];
+
+export const NotificationBell = () => {
+    const { alerts: liveAlerts, dismiss: liveDismiss, dismissAll: liveDismissAll } = usePerformanceAlerts();
+    const [demoAlerts, setDemoAlerts] = useState<PerformanceAlert[]>(DEMO_ALERTS);
+    const [open, setOpen] = useState(true);
+    const panelRef = useRef<HTMLDivElement>(null);
+
+    // Use live alerts if available, otherwise demo
+    const alerts = liveAlerts.length > 0 ? liveAlerts : demoAlerts.filter(a => !a.dismissed);
+    const isDemo = liveAlerts.length === 0;
+
+    const dismiss = (id: string) => {
+        if (isDemo) {
+            setDemoAlerts(prev => prev.map(a => a.id === id ? { ...a, dismissed: true } : a));
+        } else {
+            liveDismiss(id);
+        }
+    };
+
+    const dismissAll = () => {
+        if (isDemo) {
+            setDemoAlerts(prev => prev.map(a => ({ ...a, dismissed: true })));
+        } else {
+            liveDismissAll();
+        }
+    };
+
+    // Close on outside click
+    useEffect(() => {
+        if (!open) return;
+        const handler = (e: MouseEvent) => {
+            if (panelRef.current && !panelRef.current.contains(e.target as Node)) {
+                setOpen(false);
+            }
+        };
+        document.addEventListener('mousedown', handler);
+        return () => document.removeEventListener('mousedown', handler);
+    }, [open]);
+
+    return (
+        <div className="relative" ref={panelRef}>
+            <button
+                onClick={() => setOpen(!open)}
+                className={cx(
+                    'relative flex size-9 items-center justify-center rounded-lg border transition duration-100 ease-linear',
+                    alerts.length > 0
+                        ? 'border-error bg-error-primary text-fg-error-primary hover:bg-error-secondary'
+                        : open
+                            ? 'border-brand bg-active text-brand-secondary'
+                            : 'border-secondary bg-primary text-fg-secondary hover:bg-primary_hover',
+                )}
+                title="Notifications"
+            >
+                <FontAwesomeIcon icon={faBell} className="size-5" />
+                {alerts.length > 0 && (
+                    <span className="absolute -top-1.5 -right-1.5 flex size-5 items-center justify-center rounded-full bg-error-solid text-[10px] font-bold text-white ring-2 ring-white">
+                        {alerts.length > 9 ? '9+' : alerts.length}
+                    </span>
+                )}
+            </button>
+
+            {open && (
+                <div className="absolute top-full right-0 mt-2 w-96 rounded-xl bg-primary shadow-xl ring-1 ring-secondary z-50 overflow-hidden">
+                    {/* Header */}
+                    <div className="flex items-center justify-between px-4 py-3 border-b border-secondary">
+                        <div className="flex items-center gap-2">
+                            <span className="text-sm font-semibold text-primary">Notifications</span>
+                            {alerts.length > 0 && (
+                                <Badge size="sm" color="error" type="pill-color">{alerts.length}</Badge>
+                            )}
+                        </div>
+                        {alerts.length > 0 && (
+                            <button
+                                onClick={dismissAll}
+                                className="text-xs font-medium text-brand-secondary hover:text-brand-secondary_hover transition duration-100 ease-linear"
+                            >
+                                Clear all
+                            </button>
+                        )}
+                    </div>
+
+                    {/* Alert list */}
+                    <div className="max-h-96 overflow-y-auto">
+                        {alerts.length === 0 ? (
+                            <div className="flex flex-col items-center justify-center py-8 text-center">
+                                <FontAwesomeIcon icon={faCheck} className="size-5 text-fg-success-primary mb-2" />
+                                <p className="text-xs text-tertiary">No active alerts</p>
+                            </div>
+                        ) : (
+                            alerts.map(alert => (
+                                <div
+                                    key={alert.id}
+                                    className={cx(
+                                        'flex items-center gap-3 px-4 py-3 border-b border-secondary last:border-b-0',
+                                        alert.severity === 'error' ? 'bg-error-primary' : 'bg-warning-primary',
+                                    )}
+                                >
+                                    <FontAwesomeIcon
+                                        icon={faTriangleExclamation}
+                                        className={cx(
+                                            'size-4 shrink-0',
+                                            alert.severity === 'error' ? 'text-fg-error-primary' : 'text-fg-warning-primary',
+                                        )}
+                                    />
+                                    <div className="min-w-0 flex-1">
+                                        <p className="text-sm font-medium text-primary">{alert.agent}</p>
+                                        <p className="text-xs text-tertiary">{alert.type}</p>
+                                    </div>
+                                    <Badge size="sm" color={alert.severity} type="pill-color">{alert.value}</Badge>
+                                    <button
+                                        onClick={() => dismiss(alert.id)}
+                                        className="text-fg-quaternary hover:text-fg-secondary shrink-0 transition duration-100 ease-linear"
+                                        title="Dismiss"
+                                    >
+                                        <FontAwesomeIcon icon={faXmark} className="size-3.5" />
+                                    </button>
+                                </div>
+                            ))
+                        )}
+                    </div>
+                </div>
+            )}
+        </div>
+    );
+};

src/components/layout/sidebar.tsx

@@ -10,10 +10,14 @@ import {
     faGear,
     faGrid2,
     faHospitalUser,
+    faCalendarCheck,
     faPhone,
-    faPlug,
     faUsers,
     faArrowRightFromBracket,
+    faTowerBroadcast,
+    faChartLine,
+    faFileAudio,
+    faPhoneMissed,
 } from "@fortawesome/pro-duotone-svg-icons";
 import { faIcon } from "@/lib/icon-wrapper";
 import { useAtom } from "jotai";
@@ -25,9 +29,9 @@ import { NavAccountCard } from "@/components/application/app-navigation/base-com
 import { NavItemBase } from "@/components/application/app-navigation/base-components/nav-item";
 import type { NavItemType } from "@/components/application/app-navigation/config";
 import { Avatar } from "@/components/base/avatar/avatar";
-import { apiClient } from "@/lib/api-client";
-import { notify } from "@/lib/toast";
 import { useAuth } from "@/providers/auth-provider";
+import { useAgentState } from "@/hooks/use-agent-state";
+import { useThemeTokens } from "@/providers/theme-token-provider";
 import { sidebarCollapsedAtom } from "@/state/sidebar-state";
 import { cx } from "@/utils/cx";
 
@@ -38,12 +42,16 @@ const IconGrid2 = faIcon(faGrid2);
 const IconBullhorn = faIcon(faBullhorn);
 const IconCommentDots = faIcon(faCommentDots);
 const IconChartMixed = faIcon(faChartMixed);
-const IconPlug = faIcon(faPlug);
 const IconGear = faIcon(faGear);
 const IconPhone = faIcon(faPhone);
 const IconClockRewind = faIcon(faClockRotateLeft);
 const IconUsers = faIcon(faUsers);
 const IconHospitalUser = faIcon(faHospitalUser);
+const IconCalendarCheck = faIcon(faCalendarCheck);
+const IconTowerBroadcast = faIcon(faTowerBroadcast);
+const IconChartLine = faIcon(faChartLine);
+const IconFileAudio = faIcon(faFileAudio);
+const IconPhoneMissed = faIcon(faPhoneMissed);
 
 type NavSection = {
     label: string;
@@ -53,13 +61,26 @@ type NavSection = {
 const getNavSections = (role: string): NavSection[] => {
     if (role === 'admin') {
         return [
-            { label: 'Overview', items: [{ label: 'Team Dashboard', href: '/', icon: IconGrid2 }] },
-            { label: 'Management', items: [
-                { label: 'Campaigns', href: '/campaigns', icon: IconBullhorn },
-                { label: 'Analytics', href: '/reports', icon: IconChartMixed },
+            { label: 'Supervisor', items: [
+                { label: 'Dashboard', href: '/', icon: IconGrid2 },
+                { label: 'Team Performance', href: '/team-performance', icon: IconChartLine },
+                { label: 'Live Call Monitor', href: '/live-monitor', icon: IconTowerBroadcast },
             ]},
+            { label: 'Data & Reports', items: [
+                { label: 'Leads', href: '/leads', icon: IconUsers },
+                { label: 'Patients', href: '/patients', icon: IconHospitalUser },
+                { label: 'Appointments', href: '/appointments', icon: IconCalendarCheck },
+                { label: 'Call Log', href: '/call-history', icon: IconClockRewind },
+                { label: 'Call Recordings', href: '/call-recordings', icon: IconFileAudio },
+                { label: 'Missed Calls', href: '/missed-calls', icon: IconPhoneMissed },
+            ]},
+            { label: 'Marketing', items: [
+                { label: 'Campaigns', href: '/campaigns', icon: IconBullhorn },
+            ]},
+            // Settings hub absorbs branding, rules, team, clinics, doctors,
+            // telephony, ai, widget — one entry, navigates to the hub which
+            // links to each section page.
             { label: 'Admin', items: [
-                { label: 'Integrations', href: '/integrations', icon: IconPlug },
                 { label: 'Settings', href: '/settings', icon: IconGear },
             ]},
         ];
@@ -71,6 +92,7 @@ const getNavSections = (role: string): NavSection[] => {
                 { label: 'Call Desk', href: '/', icon: IconPhone },
                 { label: 'Call History', href: '/call-history', icon: IconClockRewind },
                 { label: 'Patients', href: '/patients', icon: IconHospitalUser },
+                { label: 'Appointments', href: '/appointments', icon: IconCalendarCheck },
                 { label: 'My Performance', href: '/my-performance', icon: IconChartMixed },
             ]},
         ];
@@ -81,6 +103,7 @@ const getNavSections = (role: string): NavSection[] => {
             { label: 'Lead Workspace', href: '/', icon: IconGrid2 },
             { label: 'All Leads', href: '/leads', icon: IconUsers },
             { label: 'Patients', href: '/patients', icon: IconHospitalUser },
+            { label: 'Appointments', href: '/appointments', icon: IconCalendarCheck },
             { label: 'Campaigns', href: '/campaigns', icon: IconBullhorn },
             { label: 'Outreach', href: '/outreach', icon: IconCommentDots },
         ]},
@@ -104,8 +127,13 @@ interface SidebarProps {
 
 export const Sidebar = ({ activeUrl = "/" }: SidebarProps) => {
     const { logout, user } = useAuth();
+    const { tokens } = useThemeTokens();
     const navigate = useNavigate();
     const [collapsed, setCollapsed] = useAtom(sidebarCollapsedAtom);
+    const agentConfig = typeof window !== 'undefined' ? localStorage.getItem('helix_agent_config') : null;
+    const agentId = agentConfig ? (() => { try { return JSON.parse(agentConfig).ozonetelAgentId; } catch { return null; } })() : null;
+    const ozonetelState = useAgentState(agentId);
+    const avatarStatus: 'online' | 'offline' = ozonetelState === 'ready' ? 'online' : 'offline';
 
     const width = collapsed ? COLLAPSED_WIDTH : EXPANDED_WIDTH;
 
@@ -115,38 +143,29 @@ export const Sidebar = ({ activeUrl = "/" }: SidebarProps) => {
         setLogoutOpen(true);
     };
 
-    const confirmSignOut = () => {
+    const confirmSignOut = async () => {
         setLogoutOpen(false);
-        logout();
+        await logout();
         navigate('/login');
     };
 
-    const handleForceReady = async () => {
-        try {
-            await apiClient.post('/api/ozonetel/agent-ready', {});
-            notify.success('Agent Ready', 'Agent state has been reset to Ready');
-        } catch {
-            notify.error('Force Ready Failed', 'Could not reset agent state');
-        }
-    };
-
     const navSections = getNavSections(user.role);
 
     const content = (
         <aside
             style={{ "--width": `${width}px` } as React.CSSProperties}
             className={cx(
-                "flex h-full w-full max-w-full flex-col justify-between overflow-auto border-secondary bg-primary pt-4 shadow-xs transition-all duration-200 ease-linear md:border-r lg:w-(--width) lg:rounded-xl lg:border lg:pt-5",
+                "flex h-full w-full max-w-full flex-col justify-between overflow-auto bg-sidebar pt-4 shadow-xs transition-all duration-200 ease-linear lg:w-(--width) lg:pt-5",
             )}
         >
             {/* Logo + collapse toggle */}
             <div className={cx("flex items-center gap-2", collapsed ? "justify-center px-2" : "justify-between px-4 lg:px-5")}>
                 {collapsed ? (
-                    <img src="/favicon-32.png" alt="Helix Engage" className="size-8 rounded-lg shrink-0" />
+                    <img src={tokens.brand.logo} alt={tokens.brand.name} className="size-8 rounded-lg shrink-0" />
                 ) : (
                     <div className="flex flex-col gap-1">
-                        <span className="text-md font-bold text-primary">Helix Engage</span>
-                        <span className="text-xs text-tertiary">Global Hospital &middot; {getRoleSubtitle(user.role)}</span>
+                        <span className="text-md font-bold text-white">{tokens.sidebar.title}</span>
+                        <span className="text-xs text-white opacity-70">{tokens.sidebar.subtitle.replace('{role}', getRoleSubtitle(user.role))}</span>
                     </div>
                 )}
                 <button
@@ -163,7 +182,7 @@ export const Sidebar = ({ activeUrl = "/" }: SidebarProps) => {
                 {navSections.map((group) => (
                     <li key={group.label}>
                         {!collapsed && (
-                            <div className="px-5 pb-1">
+                            <div className="px-5 pb-1 bg-sidebar">
                                 <p className="text-xs font-bold text-quaternary uppercase">{group.label}</p>
                             </div>
                         )}
@@ -174,11 +193,19 @@ export const Sidebar = ({ activeUrl = "/" }: SidebarProps) => {
                                         <Link
                                             to={item.href ?? '/'}
                                             title={item.label}
+                                            style={
+                                                item.href !== activeUrl
+                                                    ? {
+                                                          "--hover-bg": "var(--color-sidebar-nav-item-hover-bg)",
+                                                          "--hover-text": "var(--color-sidebar-nav-item-hover-text)",
+                                                      } as React.CSSProperties
+                                                    : undefined
+                                            }
                                             className={cx(
                                                 "flex size-10 items-center justify-center rounded-lg transition duration-100 ease-linear",
                                                 item.href === activeUrl
-                                                    ? "bg-active text-fg-brand-primary"
-                                                    : "text-fg-quaternary hover:bg-primary_hover hover:text-fg-secondary",
+                                                    ? "bg-sidebar-active text-sidebar-active"
+                                                    : "text-fg-quaternary hover:bg-(--hover-bg) hover:text-(--hover-text)",
                                             )}
                                         >
                                             {item.icon && <item.icon className="size-5" />}
@@ -207,9 +234,10 @@ export const Sidebar = ({ activeUrl = "/" }: SidebarProps) => {
                     <button
                         onClick={handleSignOut}
                         title={`${user.name}\nSign out`}
-                        className="rounded-lg p-1 hover:bg-primary_hover transition duration-100 ease-linear"
+                        style={{ "--hover-bg": "var(--color-sidebar-nav-item-hover-bg)" } as React.CSSProperties}
+                        className="rounded-lg p-1 hover:bg-(--hover-bg) transition duration-100 ease-linear"
                     >
-                        <Avatar size="sm" initials={user.initials} status="online" />
+                        <Avatar size="sm" initials={user.initials} status={avatarStatus} />
                     </button>
                 ) : (
                     <NavAccountCard
@@ -218,11 +246,13 @@ export const Sidebar = ({ activeUrl = "/" }: SidebarProps) => {
                             name: user.name,
                             email: user.email,
                             avatar: '',
-                            status: 'online' as const,
+                            status: avatarStatus,
                         }]}
                         selectedAccountId="current"
+                        popoverPlacement="top"
                         onSignOut={handleSignOut}
-                        onForceReady={handleForceReady}
+                        onViewProfile={() => navigate('/profile')}
+                        onAccountSettings={() => navigate('/account-settings')}
                     />
                 )}
             </div>
@@ -232,9 +262,9 @@ export const Sidebar = ({ activeUrl = "/" }: SidebarProps) => {
     return (
         <>
             <MobileNavigationHeader>{content}</MobileNavigationHeader>
-            <div className="hidden lg:fixed lg:inset-y-0 lg:left-0 lg:flex lg:py-1 lg:pl-1">{content}</div>
+            <div className="hidden lg:fixed lg:inset-y-0 lg:left-0 lg:flex">{content}</div>
             <div
-                style={{ paddingLeft: width + 4 }}
+                style={{ paddingLeft: width }}
                 className="invisible hidden lg:sticky lg:top-0 lg:bottom-0 lg:left-0 lg:block transition-all duration-200 ease-linear"
             />
 

src/components/leads/lead-table.tsx

@@ -24,6 +24,7 @@ type LeadTableProps = {
     sortDirection: 'asc' | 'desc';
     onSort: (field: string) => void;
     onViewActivity?: (lead: Lead) => void;
+    visibleColumns?: Set<string>;
 };
 
 type TableRow = {
@@ -53,6 +54,7 @@ export const LeadTable = ({
     sortDirection,
     onSort,
     onViewActivity,
+    visibleColumns,
 }: LeadTableProps) => {
     const [expandedDupId, setExpandedDupId] = useState<string | null>(null);
 
@@ -92,24 +94,28 @@ export const LeadTable = ({
         return rows;
     }, [leads, expandedDupId]);
 
-    const columns = [
-        { id: 'phone', label: 'Phone', allowsSorting: true },
-        { id: 'name', label: 'Name', allowsSorting: true },
-        { id: 'email', label: 'Email', allowsSorting: false },
-        { id: 'campaign', label: 'Campaign', allowsSorting: false },
-        { id: 'ad', label: 'Ad', allowsSorting: false },
-        { id: 'source', label: 'Source', allowsSorting: true },
-        { id: 'firstContactedAt', label: 'First Contact', allowsSorting: true },
-        { id: 'lastContactedAt', label: 'Last Contact', allowsSorting: true },
-        { id: 'status', label: 'Status', allowsSorting: true },
-        { id: 'createdAt', label: 'Age', allowsSorting: true },
-        { id: 'spamScore', label: 'Spam', allowsSorting: true },
-        { id: 'dups', label: 'Dups', allowsSorting: false },
-        { id: 'actions', label: '', allowsSorting: false },
+    const allColumns = [
+        { id: 'phone', label: 'Phone', allowsSorting: true, defaultWidth: 150 },
+        { id: 'name', label: 'Name', allowsSorting: true, defaultWidth: 160 },
+        { id: 'email', label: 'Email', allowsSorting: false, defaultWidth: 180 },
+        { id: 'campaign', label: 'Campaign', allowsSorting: false, defaultWidth: 140 },
+        { id: 'ad', label: 'Ad', allowsSorting: false, defaultWidth: 80 },
+        { id: 'source', label: 'Source', allowsSorting: true, defaultWidth: 100 },
+        { id: 'firstContactedAt', label: 'First Contact', allowsSorting: true, defaultWidth: 130 },
+        { id: 'lastContactedAt', label: 'Last Contact', allowsSorting: true, defaultWidth: 130 },
+        { id: 'status', label: 'Status', allowsSorting: true, defaultWidth: 100 },
+        { id: 'createdAt', label: 'Age', allowsSorting: true, defaultWidth: 80 },
+        { id: 'spamScore', label: 'Spam', allowsSorting: true, defaultWidth: 70 },
+        { id: 'dups', label: 'Dups', allowsSorting: false, defaultWidth: 60 },
+        { id: 'actions', label: '', allowsSorting: false, defaultWidth: 50 },
     ];
 
+    const columns = visibleColumns
+        ? allColumns.filter(c => visibleColumns.has(c.id) || c.id === 'actions')
+        : allColumns;
+
     return (
-        <div className="overflow-hidden rounded-xl ring-1 ring-secondary">
+        <div className="flex flex-1 flex-col min-h-0 overflow-hidden rounded-xl ring-1 ring-secondary">
             <Table
                 aria-label="Leads table"
                 selectionMode="multiple"
@@ -204,6 +210,8 @@ export const LeadTable = ({
                         const isDup = lead.isDuplicate === true;
                         const isExpanded = expandedDupId === lead.id;
 
+                        const isCol = (id: string) => !visibleColumns || visibleColumns.has(id);
+
                         return (
                             <Table.Row
                                 key={row.id}
@@ -213,16 +221,16 @@ export const LeadTable = ({
                                     isSelected && 'bg-brand-primary',
                                 )}
                             >
-                                <Table.Cell>
+                                {isCol('phone') && <Table.Cell>
                                     <span className="font-semibold text-primary">{phone}</span>
-                                </Table.Cell>
-                                <Table.Cell>
+                                </Table.Cell>}
+                                {isCol('name') && <Table.Cell>
                                     <span className="text-secondary">{name}</span>
-                                </Table.Cell>
-                                <Table.Cell>
+                                </Table.Cell>}
+                                {isCol('email') && <Table.Cell>
                                     <span className="text-tertiary">{email}</span>
-                                </Table.Cell>
-                                <Table.Cell>
+                                </Table.Cell>}
+                                {isCol('campaign') && <Table.Cell>
                                     {lead.utmCampaign ? (
                                         <Badge size="sm" type="pill-color" color="purple">
                                             {lead.utmCampaign}
@@ -230,8 +238,8 @@ export const LeadTable = ({
                                     ) : (
                                         <span className="text-tertiary">{'\u2014'}</span>
                                     )}
-                                </Table.Cell>
-                                <Table.Cell>
+                                </Table.Cell>}
+                                {isCol('ad') && <Table.Cell>
                                     {lead.adId ? (
                                         <Badge size="sm" type="pill-color" color="success">
                                             Ad
@@ -239,50 +247,50 @@ export const LeadTable = ({
                                     ) : (
                                         <span className="text-tertiary">{'\u2014'}</span>
                                     )}
-                                </Table.Cell>
-                                <Table.Cell>
+                                </Table.Cell>}
+                                {isCol('source') && <Table.Cell>
                                     {lead.leadSource ? (
                                         <SourceTag source={lead.leadSource} />
                                     ) : (
                                         <span className="text-tertiary">{'\u2014'}</span>
                                     )}
-                                </Table.Cell>
-                                <Table.Cell>
+                                </Table.Cell>}
+                                {isCol('firstContactedAt') && <Table.Cell>
                                     <span className="text-tertiary">
                                         {lead.firstContactedAt
                                             ? formatShortDate(lead.firstContactedAt)
                                             : '\u2014'}
                                     </span>
-                                </Table.Cell>
-                                <Table.Cell>
+                                </Table.Cell>}
+                                {isCol('lastContactedAt') && <Table.Cell>
                                     <span className="text-tertiary">
                                         {lead.lastContactedAt
                                             ? formatShortDate(lead.lastContactedAt)
                                             : '\u2014'}
                                     </span>
-                                </Table.Cell>
-                                <Table.Cell>
+                                </Table.Cell>}
+                                {isCol('status') && <Table.Cell>
                                     {lead.leadStatus ? (
                                         <LeadStatusBadge status={lead.leadStatus} />
                                     ) : (
                                         <span className="text-tertiary">{'\u2014'}</span>
                                     )}
-                                </Table.Cell>
-                                <Table.Cell>
+                                </Table.Cell>}
+                                {isCol('createdAt') && <Table.Cell>
                                     {lead.createdAt ? (
                                         <AgeIndicator dateStr={lead.createdAt} />
                                     ) : (
                                         <span className="text-tertiary">{'\u2014'}</span>
                                     )}
-                                </Table.Cell>
-                                <Table.Cell>
+                                </Table.Cell>}
+                                {isCol('spamScore') && <Table.Cell>
                                     {lead.spamScore != null ? (
                                         <SpamDisplay score={lead.spamScore} />
                                     ) : (
                                         <span className="text-tertiary">0%</span>
                                     )}
-                                </Table.Cell>
-                                <Table.Cell>
+                                </Table.Cell>}
+                                {isCol('dups') && <Table.Cell>
                                     {isDup ? (
                                         <button
                                             type="button"
@@ -297,7 +305,7 @@ export const LeadTable = ({
                                     ) : (
                                         <span className="text-tertiary">0</span>
                                     )}
-                                </Table.Cell>
+                                </Table.Cell>}
                                 <Table.Cell>
                                     <Button
                                         size="sm"

src/components/modals/edit-patient-confirm-modal.tsx

@@ -0,0 +1,84 @@
+import type { ReactNode } from 'react';
+import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
+import { faUserPen } from '@fortawesome/pro-duotone-svg-icons';
+import { ModalOverlay, Modal, Dialog } from '@/components/application/modals/modal';
+import { Button } from '@/components/base/buttons/button';
+
+// Generic confirmation modal shown before any destructive edit to a
+// patient's record. Used by the call-desk forms (appointment, enquiry)
+// to gate the patient-name rename flow, but intentionally non-specific:
+// any page that needs a "are you sure you want to change this patient
+// field?" confirm should reuse this modal instead of building its own.
+//
+// The lock-by-default + explicit-confirm gate is deliberately heavy
+// because patient edits cascade workspace-wide — they hit past
+// appointments, lead history, AI summaries, and the Redis
+// caller-resolution cache. The default path should always be "don't
+// touch the record"; the only way to actually commit a change is
+// clicking an Edit button, reading this prompt, and confirming.
+//
+// Styling matches the sign-out confirmation in sidebar.tsx — same
+// warning circle, same button layout — so the weight of the action
+// reads immediately.
+
+type EditPatientConfirmModalProps = {
+    isOpen: boolean;
+    onOpenChange: (open: boolean) => void;
+    onConfirm: () => void;
+    /** Modal heading. Defaults to "Edit patient details?". */
+    title?: string;
+    /** Body copy explaining the consequences of the edit. Accepts any
+     *  ReactNode so callers can inline markup / inline the specific
+     *  field being edited. A sensible generic default is provided. */
+    description?: ReactNode;
+    /** Confirm-button label. Defaults to "Yes, edit details". */
+    confirmLabel?: string;
+};
+
+const DEFAULT_TITLE = 'Edit patient details?';
+
+const DEFAULT_DESCRIPTION = (
+    <>
+        You&apos;re about to change a detail on this patient&apos;s record. The update will cascade
+        across Helix Engage — past appointments, lead history, and the AI summary all reflect
+        the new value. Only proceed if the current data is actually wrong; for all other
+        cases, cancel and continue with the current record.
+    </>
+);
+
+const DEFAULT_CONFIRM_LABEL = 'Yes, edit details';
+
+export const EditPatientConfirmModal = ({
+    isOpen,
+    onOpenChange,
+    onConfirm,
+    title = DEFAULT_TITLE,
+    description = DEFAULT_DESCRIPTION,
+    confirmLabel = DEFAULT_CONFIRM_LABEL,
+}: EditPatientConfirmModalProps) => (
+    <ModalOverlay isOpen={isOpen} onOpenChange={onOpenChange} isDismissable>
+        <Modal className="max-w-md">
+            <Dialog>
+                <div className="rounded-xl bg-primary p-6 shadow-xl">
+                    <div className="flex flex-col items-center text-center gap-4">
+                        <div className="flex size-12 items-center justify-center rounded-full bg-warning-secondary">
+                            <FontAwesomeIcon icon={faUserPen} className="size-5 text-fg-warning-primary" />
+                        </div>
+                        <div>
+                            <h3 className="text-lg font-semibold text-primary">{title}</h3>
+                            <p className="mt-1 text-sm text-tertiary">{description}</p>
+                        </div>
+                        <div className="flex w-full gap-3">
+                            <Button size="md" color="secondary" className="flex-1" onClick={() => onOpenChange(false)}>
+                                Cancel
+                            </Button>
+                            <Button size="md" color="primary-destructive" className="flex-1" onClick={onConfirm}>
+                                {confirmLabel}
+                            </Button>
+                        </div>
+                    </div>
+                </div>
+            </Dialog>
+        </Modal>
+    </ModalOverlay>
+);

src/components/modals/maint-otp-modal.tsx

@@ -0,0 +1,179 @@
+import { useState, type ReactNode } from 'react';
+import { REGEXP_ONLY_DIGITS } from 'input-otp';
+import { Button } from '@/components/base/buttons/button';
+import { Dialog, Modal, ModalOverlay } from '@/components/application/modals/modal';
+import { PinInput } from '@/components/base/pin-input/pin-input';
+import { FeaturedIcon } from '@/components/foundations/featured-icon/featured-icon';
+import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
+import { faShieldKeyhole } from '@fortawesome/pro-duotone-svg-icons';
+import type { FC } from 'react';
+import { notify } from '@/lib/toast';
+
+const ShieldIcon: FC<{ className?: string }> = ({ className }) => (
+    <FontAwesomeIcon icon={faShieldKeyhole} className={className} />
+);
+
+const API_URL = import.meta.env.VITE_API_URL ?? 'http://localhost:4100';
+
+type MaintAction = {
+    endpoint: string;
+    label: string;
+    description: string;
+    needsPreStep?: boolean;
+    clientSideHandler?: (payload: any) => Promise<{ status: string; message: string }>;
+};
+
+type MaintOtpModalProps = {
+    isOpen: boolean;
+    onOpenChange: (open: boolean) => void;
+    action: MaintAction | null;
+    preStepContent?: ReactNode;
+    preStepPayload?: Record<string, any>;
+    preStepReady?: boolean;
+};
+
+export const MaintOtpModal = ({ isOpen, onOpenChange, action, preStepContent, preStepPayload, preStepReady = true }: MaintOtpModalProps) => {
+    const [otp, setOtp] = useState('');
+    const [loading, setLoading] = useState(false);
+    const [error, setError] = useState<string | null>(null);
+
+    const handleSubmit = async () => {
+        if (!action || otp.length < 6) return;
+        setLoading(true);
+        setError(null);
+
+        try {
+            if (action.clientSideHandler) {
+                // Client-side action — OTP verified by calling a dummy maint endpoint first
+                const otpRes = await fetch(`${API_URL}/api/maint/force-ready`, {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json', 'x-maint-otp': otp },
+                });
+                if (!otpRes.ok) {
+                    setError('Invalid maintenance code');
+                    setLoading(false);
+                    return;
+                }
+                const result = await action.clientSideHandler(preStepPayload);
+                notify.success(action.label, result.message ?? 'Completed');
+                onOpenChange(false);
+                setOtp('');
+            } else {
+                // Standard sidecar endpoint — include agentId from agent config
+                const agentCfg = localStorage.getItem('helix_agent_config');
+                const agentId = agentCfg ? JSON.parse(agentCfg).ozonetelAgentId : undefined;
+                const payload = { ...preStepPayload, ...(agentId ? { agentId } : {}) };
+
+                const res = await fetch(`${API_URL}/api/maint/${action.endpoint}`, {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/json',
+                        'x-maint-otp': otp,
+                    },
+                    body: JSON.stringify(payload),
+                });
+                const data = await res.json();
+                if (res.ok) {
+                    console.log(`[MAINT] ${action.label}:`, data);
+                    notify.success(action.label, data.message ?? 'Completed successfully');
+                    onOpenChange(false);
+                    setOtp('');
+                } else {
+                    setError(data.message ?? 'Failed');
+                }
+            }
+        } catch {
+            setError('Request failed');
+        } finally {
+            setLoading(false);
+        }
+    };
+
+    const handleOtpChange = (value: string) => {
+        setOtp(value);
+        setError(null);
+    };
+
+    const handleClose = () => {
+        onOpenChange(false);
+        setOtp('');
+        setError(null);
+    };
+
+    if (!action) return null;
+
+    const showOtp = !action.needsPreStep || preStepReady;
+
+    return (
+        <ModalOverlay isOpen={isOpen} onOpenChange={handleClose} isDismissable>
+            <Modal className="sm:max-w-[400px]">
+                <Dialog>
+                    {() => (
+                        <div className="flex w-full flex-col rounded-xl bg-primary shadow-xl ring-1 ring-secondary overflow-hidden">
+                            {/* Header */}
+                            <div className="flex flex-col items-center gap-4 px-6 pt-6 pb-5">
+                                <FeaturedIcon icon={ShieldIcon} color="brand" theme="light" size="md" />
+                                <div className="flex flex-col items-center gap-1 text-center">
+                                    <h2 className="text-lg font-semibold text-primary">{action.label}</h2>
+                                    <p className="text-sm text-tertiary">{action.description}</p>
+                                </div>
+                            </div>
+
+                            {/* Pre-step content (e.g., campaign selection) */}
+                            {action.needsPreStep && preStepContent && (
+                                <div className="px-6 pb-4">
+                                    {preStepContent}
+                                </div>
+                            )}
+
+                            {/* Pin Input — shown when pre-step is ready (or no pre-step needed) */}
+                            {showOtp && (
+                                <div className="flex flex-col items-center gap-2 px-6 pb-5">
+                                    <PinInput size="sm">
+                                        <PinInput.Label>Enter maintenance code</PinInput.Label>
+                                        <PinInput.Group
+                                            maxLength={6}
+                                            pattern={REGEXP_ONLY_DIGITS}
+                                            value={otp}
+                                            onChange={handleOtpChange}
+                                            onComplete={handleSubmit}
+                                            containerClassName="flex flex-row gap-2 h-14"
+                                        >
+                                            <PinInput.Slot index={0} className="!size-12 !text-display-sm" />
+                                            <PinInput.Slot index={1} className="!size-12 !text-display-sm" />
+                                            <PinInput.Slot index={2} className="!size-12 !text-display-sm" />
+                                            <PinInput.Separator />
+                                            <PinInput.Slot index={3} className="!size-12 !text-display-sm" />
+                                            <PinInput.Slot index={4} className="!size-12 !text-display-sm" />
+                                            <PinInput.Slot index={5} className="!size-12 !text-display-sm" />
+                                        </PinInput.Group>
+                                    </PinInput>
+                                    {error && (
+                                        <p className="text-sm text-error-primary mt-1">{error}</p>
+                                    )}
+                                </div>
+                            )}
+
+                            {/* Footer */}
+                            <div className="flex items-center gap-3 border-t border-secondary px-6 py-4">
+                                <Button size="md" color="secondary" onClick={handleClose} className="flex-1">
+                                    Cancel
+                                </Button>
+                                <Button
+                                    size="md"
+                                    color="primary"
+                                    isDisabled={otp.length < 6 || loading || (action.needsPreStep && !preStepReady)}
+                                    isLoading={loading}
+                                    onClick={handleSubmit}
+                                    className="flex-1"
+                                >
+                                    Confirm
+                                </Button>
+                            </div>
+                        </div>
+                    )}
+                </Dialog>
+            </Modal>
+        </ModalOverlay>
+    );
+};

src/components/rules/campaign-weights-panel.tsx

@@ -0,0 +1,55 @@
+import { useMemo } from 'react';
+import { WeightSliderRow } from './weight-slider-row';
+import { CollapsibleSection } from './collapsible-section';
+import { useData } from '@/providers/data-provider';
+import type { PriorityConfig } from '@/lib/scoring';
+
+interface CampaignWeightsPanelProps {
+    config: PriorityConfig;
+    onChange: (config: PriorityConfig) => void;
+}
+
+export const CampaignWeightsPanel = ({ config, onChange }: CampaignWeightsPanelProps) => {
+    const { campaigns } = useData();
+
+    const updateCampaign = (campaignId: string, weight: number) => {
+        onChange({
+            ...config,
+            campaignWeights: { ...config.campaignWeights, [campaignId]: weight },
+        });
+    };
+
+    const badge = useMemo(() => {
+        if (!campaigns || campaigns.length === 0) return 'No campaigns';
+        const configured = campaigns.filter(c => config.campaignWeights[c.id] != null).length;
+        return `${campaigns.length} campaigns · ${configured} configured`;
+    }, [campaigns, config.campaignWeights]);
+
+    if (!campaigns || campaigns.length === 0) {
+        return (
+            <CollapsibleSection title="Campaign Weights" badge="No campaigns" defaultOpen={false}>
+                <p className="text-xs text-tertiary py-2">Campaign weights will apply once campaigns are created.</p>
+            </CollapsibleSection>
+        );
+    }
+
+    return (
+        <CollapsibleSection
+            title="Campaign Weights"
+            subtitle="Higher-weighted campaigns get their leads called first"
+            badge={badge}
+            defaultOpen={false}
+        >
+            <div className="divide-y divide-tertiary">
+                {campaigns.map(campaign => (
+                    <WeightSliderRow
+                        key={campaign.id}
+                        label={campaign.campaignName ?? 'Untitled Campaign'}
+                        weight={config.campaignWeights[campaign.id] ?? 5}
+                        onWeightChange={(w) => updateCampaign(campaign.id, w)}
+                    />
+                ))}
+            </div>
+        </CollapsibleSection>
+    );
+};

src/components/rules/collapsible-section.tsx

@@ -0,0 +1,56 @@
+import { useState } from 'react';
+import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
+import { faChevronDown, faChevronRight } from '@fortawesome/pro-duotone-svg-icons';
+import { cx } from '@/utils/cx';
+
+interface CollapsibleSectionProps {
+    title: string;
+    subtitle?: string;
+    badge?: string;
+    badgeColor?: string;
+    defaultOpen?: boolean;
+    children: React.ReactNode;
+}
+
+export const CollapsibleSection = ({
+    title,
+    subtitle,
+    badge,
+    badgeColor = 'text-brand-secondary',
+    defaultOpen = true,
+    children,
+}: CollapsibleSectionProps) => {
+    const [open, setOpen] = useState(defaultOpen);
+
+    return (
+        <div className="rounded-xl border border-secondary bg-primary overflow-hidden">
+            <button
+                onClick={() => setOpen(!open)}
+                className="flex w-full items-center justify-between px-5 py-3.5 hover:bg-primary_hover transition duration-100 ease-linear"
+            >
+                <div className="flex items-center gap-3">
+                    <FontAwesomeIcon
+                        icon={open ? faChevronDown : faChevronRight}
+                        className="size-3 text-fg-quaternary"
+                    />
+                    <div className="text-left">
+                        <div className="flex items-center gap-2">
+                            <span className="text-sm font-semibold text-primary">{title}</span>
+                            {badge && (
+                                <span className={cx('text-xs font-medium tabular-nums', badgeColor)}>
+                                    {badge}
+                                </span>
+                            )}
+                        </div>
+                        {subtitle && <p className="text-xs text-tertiary mt-0.5">{subtitle}</p>}
+                    </div>
+                </div>
+            </button>
+            {open && (
+                <div className="border-t border-secondary px-5 pb-4">
+                    {children}
+                </div>
+            )}
+        </div>
+    );
+};

src/components/rules/priority-config-panel.tsx

@@ -0,0 +1,80 @@
+import { useMemo } from 'react';
+import { WeightSliderRow } from './weight-slider-row';
+import { CollapsibleSection } from './collapsible-section';
+import { TASK_TYPE_LABELS } from '@/lib/scoring';
+import type { PriorityConfig } from '@/lib/scoring';
+
+interface PriorityConfigPanelProps {
+    config: PriorityConfig;
+    onChange: (config: PriorityConfig) => void;
+}
+
+const TASK_TYPE_ORDER = ['missed_call', 'follow_up', 'campaign_lead', 'attempt_2', 'attempt_3'];
+
+export const PriorityConfigPanel = ({ config, onChange }: PriorityConfigPanelProps) => {
+    const updateTaskWeight = (taskType: string, weight: number) => {
+        onChange({
+            ...config,
+            taskWeights: {
+                ...config.taskWeights,
+                [taskType]: { ...config.taskWeights[taskType], weight },
+            },
+        });
+    };
+
+    const updateTaskSla = (taskType: string, slaMinutes: number) => {
+        onChange({
+            ...config,
+            taskWeights: {
+                ...config.taskWeights,
+                [taskType]: { ...config.taskWeights[taskType], slaMinutes },
+            },
+        });
+    };
+
+    const toggleTask = (taskType: string, enabled: boolean) => {
+        onChange({
+            ...config,
+            taskWeights: {
+                ...config.taskWeights,
+                [taskType]: { ...config.taskWeights[taskType], enabled },
+            },
+        });
+    };
+
+    const badge = useMemo(() => {
+        const entries = Object.values(config.taskWeights).filter(t => t.enabled);
+        if (entries.length === 0) return 'All disabled';
+        const avg = entries.reduce((s, t) => s + t.weight, 0) / entries.length;
+        return `${entries.length} active · Avg ${avg.toFixed(1)}`;
+    }, [config.taskWeights]);
+
+    return (
+        <CollapsibleSection
+            title="Task Type Weights"
+            subtitle="Higher weight = called first"
+            badge={badge}
+            defaultOpen
+        >
+            <div className="divide-y divide-tertiary">
+                {TASK_TYPE_ORDER.map(taskType => {
+                    const taskConfig = config.taskWeights[taskType];
+                    if (!taskConfig) return null;
+                    return (
+                        <WeightSliderRow
+                            key={taskType}
+                            label={TASK_TYPE_LABELS[taskType] ?? taskType}
+                            weight={taskConfig.weight}
+                            onWeightChange={(w) => updateTaskWeight(taskType, w)}
+                            enabled={taskConfig.enabled}
+                            onToggle={(e) => toggleTask(taskType, e)}
+                            slaMinutes={taskConfig.slaMinutes}
+                            onSlaChange={(m) => updateTaskSla(taskType, m)}
+                            showSla
+                        />
+                    );
+                })}
+            </div>
+        </CollapsibleSection>
+    );
+};

src/components/rules/rules-ai-assistant.tsx

@@ -0,0 +1,142 @@
+import { useState, useRef, useEffect } from 'react';
+import { useChat } from '@ai-sdk/react';
+import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
+import { faPaperPlaneTop, faSparkles, faChevronDown, faChevronUp } from '@fortawesome/pro-duotone-svg-icons';
+import type { PriorityConfig } from '@/lib/scoring';
+import { cx } from '@/utils/cx';
+
+const API_URL = import.meta.env.VITE_API_URL ?? 'http://localhost:4100';
+
+interface RulesAiAssistantProps {
+    config: PriorityConfig;
+}
+
+const QUICK_ACTIONS = [
+    { label: 'Explain scoring', prompt: 'How does the priority scoring formula work?' },
+    { label: 'Optimize weights', prompt: 'What would you recommend changing to better prioritize urgent cases?' },
+    { label: 'SLA best practices', prompt: 'What SLA thresholds are recommended for a hospital call center?' },
+    { label: 'Campaign strategy', prompt: 'How should I weight campaigns for IVF vs general health checkups?' },
+];
+
+export const RulesAiAssistant = ({ config }: RulesAiAssistantProps) => {
+    const [expanded, setExpanded] = useState(false);
+    const messagesEndRef = useRef<HTMLDivElement>(null);
+    const token = localStorage.getItem('helix_access_token') ?? '';
+
+    const { messages, input, handleSubmit, handleInputChange, isLoading, append } = useChat({
+        api: `${API_URL}/api/ai/stream`,
+        streamProtocol: 'text',
+        headers: {
+            'Authorization': `Bearer ${token}`,
+        },
+        body: {
+            context: {
+                type: 'rules-engine',
+                currentConfig: config,
+            },
+        },
+    });
+
+    // Auto-expand when messages arrive
+    useEffect(() => {
+        if (messages.length > 0) setExpanded(true);
+    }, [messages.length]);
+
+    useEffect(() => {
+        const el = messagesEndRef.current;
+        if (el?.parentElement) {
+            el.parentElement.scrollTop = el.parentElement.scrollHeight;
+        }
+    }, [messages]);
+
+    return (
+        <div className={cx('flex flex-col border-t border-secondary', expanded ? 'flex-1 min-h-0' : '')}>
+            {/* Collapsible header */}
+            <button
+                onClick={() => setExpanded(!expanded)}
+                className="flex items-center justify-between px-4 py-3 hover:bg-primary_hover transition duration-100 ease-linear"
+            >
+                <div className="flex items-center gap-2">
+                    <FontAwesomeIcon icon={faSparkles} className="size-3.5 text-fg-brand-primary" />
+                    <span className="text-sm font-semibold text-primary">AI Assistant</span>
+                    {messages.length > 0 && (
+                        <span className="rounded-full bg-brand-primary px-1.5 py-0.5 text-[10px] font-medium text-brand-secondary">
+                            {messages.length}
+                        </span>
+                    )}
+                </div>
+                <FontAwesomeIcon
+                    icon={expanded ? faChevronDown : faChevronUp}
+                    className="size-3 text-fg-quaternary"
+                />
+            </button>
+
+            {/* Expandable content */}
+            {expanded && (
+                <div className="flex flex-1 flex-col min-h-0 px-4 pb-3">
+                    {/* Messages */}
+                    <div className="flex-1 overflow-y-auto min-h-0 space-y-2 mb-3">
+                        {messages.length === 0 && (
+                            <div className="text-center py-3">
+                                <p className="text-[11px] text-tertiary mb-2">
+                                    Ask about rule configuration, scoring, or best practices.
+                                </p>
+                                <div className="flex flex-wrap justify-center gap-1">
+                                    {QUICK_ACTIONS.map((action) => (
+                                        <button
+                                            key={action.label}
+                                            onClick={() => append({ role: 'user', content: action.prompt })}
+                                            disabled={isLoading}
+                                            className="rounded-md border border-secondary bg-primary px-2 py-1 text-[10px] font-medium text-secondary transition duration-100 ease-linear hover:bg-secondary hover:text-primary disabled:opacity-50"
+                                        >
+                                            {action.label}
+                                        </button>
+                                    ))}
+                                </div>
+                            </div>
+                        )}
+                        {messages.map((msg) => (
+                            <div
+                                key={msg.id}
+                                className={msg.role === 'user'
+                                    ? 'ml-8 rounded-lg bg-brand-solid px-2.5 py-1.5 text-[11px] text-white'
+                                    : 'mr-4 rounded-lg bg-primary px-2.5 py-1.5 text-[11px] text-primary leading-relaxed'
+                                }
+                            >
+                                <div className="whitespace-pre-wrap">{msg.content}</div>
+                            </div>
+                        ))}
+                        {isLoading && (
+                            <div className="mr-4 rounded-lg bg-primary px-2.5 py-1.5">
+                                <div className="flex gap-1">
+                                    <span className="size-1.5 rounded-full bg-tertiary animate-bounce" style={{ animationDelay: '0ms' }} />
+                                    <span className="size-1.5 rounded-full bg-tertiary animate-bounce" style={{ animationDelay: '150ms' }} />
+                                    <span className="size-1.5 rounded-full bg-tertiary animate-bounce" style={{ animationDelay: '300ms' }} />
+                                </div>
+                            </div>
+                        )}
+                        <div ref={messagesEndRef} />
+                    </div>
+
+                    {/* Input */}
+                    <form onSubmit={handleSubmit} className="flex items-center gap-2 shrink-0">
+                        <input
+                            value={input}
+                            onChange={handleInputChange}
+                            placeholder="Ask about rules..."
+                            disabled={isLoading}
+                            className="flex-1 rounded-lg border border-secondary bg-primary px-3 py-2 text-xs text-primary placeholder:text-placeholder focus:border-brand focus:outline-none disabled:opacity-50"
+                        />
+                        <button
+                            type="submit"
+                            disabled={isLoading || !input.trim()}
+                            className="flex size-8 items-center justify-center rounded-lg bg-brand-solid text-white transition duration-100 ease-linear hover:bg-brand-solid_hover disabled:opacity-50"
+                        >
+                            <FontAwesomeIcon icon={faPaperPlaneTop} className="size-3.5" />
+                        </button>
+                    </form>
+                </div>
+            )}
+        </div>
+    );
+};

src/components/rules/source-weights-panel.tsx

@@ -0,0 +1,48 @@
+import { useMemo } from 'react';
+import { WeightSliderRow } from './weight-slider-row';
+import { CollapsibleSection } from './collapsible-section';
+import { SOURCE_LABELS } from '@/lib/scoring';
+import type { PriorityConfig } from '@/lib/scoring';
+
+interface SourceWeightsPanelProps {
+    config: PriorityConfig;
+    onChange: (config: PriorityConfig) => void;
+}
+
+const SOURCE_ORDER = ['WHATSAPP', 'PHONE', 'FACEBOOK_AD', 'GOOGLE_AD', 'INSTAGRAM', 'WEBSITE', 'REFERRAL', 'WALK_IN', 'OTHER'];
+
+export const SourceWeightsPanel = ({ config, onChange }: SourceWeightsPanelProps) => {
+    const updateSource = (source: string, weight: number) => {
+        onChange({
+            ...config,
+            sourceWeights: { ...config.sourceWeights, [source]: weight },
+        });
+    };
+
+    const badge = useMemo(() => {
+        const weights = SOURCE_ORDER.map(s => config.sourceWeights[s] ?? 5);
+        const avg = weights.reduce((a, b) => a + b, 0) / weights.length;
+        const highest = SOURCE_ORDER.reduce((best, s) => (config.sourceWeights[s] ?? 5) > (config.sourceWeights[best] ?? 5) ? s : best, SOURCE_ORDER[0]);
+        return `Avg ${avg.toFixed(1)} · Top: ${SOURCE_LABELS[highest]}`;
+    }, [config.sourceWeights]);
+
+    return (
+        <CollapsibleSection
+            title="Source Weights"
+            subtitle="Leads from higher-weighted sources get priority"
+            badge={badge}
+            defaultOpen={false}
+        >
+            <div className="divide-y divide-tertiary">
+                {SOURCE_ORDER.map(source => (
+                    <WeightSliderRow
+                        key={source}
+                        label={SOURCE_LABELS[source] ?? source}
+                        weight={config.sourceWeights[source] ?? 5}
+                        onWeightChange={(w) => updateSource(source, w)}
+                    />
+                ))}
+            </div>
+        </CollapsibleSection>
+    );
+};

src/components/rules/weight-slider-row.tsx

@@ -0,0 +1,78 @@
+import { Slider } from '@/components/base/slider/slider';
+import { Select } from '@/components/base/select/select';
+import { Toggle } from '@/components/base/toggle/toggle';
+import { cx } from '@/utils/cx';
+
+interface WeightSliderRowProps {
+    label: string;
+    weight: number;
+    onWeightChange: (value: number) => void;
+    enabled?: boolean;
+    onToggle?: (enabled: boolean) => void;
+    slaMinutes?: number;
+    onSlaChange?: (minutes: number) => void;
+    showSla?: boolean;
+    className?: string;
+}
+
+const SLA_OPTIONS = [
+    { id: '60', label: '1h' },
+    { id: '240', label: '4h' },
+    { id: '720', label: '12h' },
+    { id: '1440', label: '1d' },
+    { id: '2880', label: '2d' },
+    { id: '4320', label: '3d' },
+];
+
+export const WeightSliderRow = ({
+    label,
+    weight,
+    onWeightChange,
+    enabled = true,
+    onToggle,
+    slaMinutes,
+    onSlaChange,
+    showSla = false,
+    className,
+}: WeightSliderRowProps) => {
+    return (
+        <div className={cx('flex items-center gap-4 py-3', !enabled && 'opacity-40', className)}>
+            {onToggle && (
+                <Toggle size="sm" isSelected={enabled} onChange={onToggle} />
+            )}
+            <div className="w-36 shrink-0">
+                <span className="text-sm font-medium text-primary">{label}</span>
+            </div>
+            <div className="flex-1 min-w-[140px]">
+                <Slider
+                    minValue={0}
+                    maxValue={10}
+                    step={1}
+                    value={weight}
+                    onChange={(v) => onWeightChange(v as number)}
+                    isDisabled={!enabled}
+                    formatOptions={{ style: 'decimal', maximumFractionDigits: 0 }}
+                />
+            </div>
+            <div className="w-8 text-center">
+                <span className={cx('text-sm font-bold tabular-nums', weight >= 8 ? 'text-error-primary' : weight >= 5 ? 'text-warning-primary' : 'text-tertiary')}>
+                    {weight}
+                </span>
+            </div>
+            {showSla && slaMinutes != null && onSlaChange && (
+                <div className="w-20 shrink-0">
+                    <Select
+                        size="sm"
+                        placeholder="SLA"
+                        items={SLA_OPTIONS}
+                        selectedKey={String(slaMinutes)}
+                        onSelectionChange={(key) => onSlaChange(Number(key))}
+                        isDisabled={!enabled}
+                    >
+                        {(item) => <Select.Item id={item.id}>{item.label}</Select.Item>}
+                    </Select>
+                </div>
+            )}
+        </div>
+    );
+};

src/components/rules/worklist-preview.tsx

@@ -0,0 +1,118 @@
+import { useMemo } from 'react';
+import { useData } from '@/providers/data-provider';
+import { scoreAndRankItems } from '@/lib/scoring';
+import type { PriorityConfig, ScoreResult } from '@/lib/scoring';
+import { cx } from '@/utils/cx';
+
+interface WorklistPreviewProps {
+    config: PriorityConfig;
+}
+
+const slaColors: Record<string, string> = {
+    low: 'bg-success-solid',
+    medium: 'bg-warning-solid',
+    high: 'bg-error-solid',
+    critical: 'bg-error-solid animate-pulse',
+};
+
+const slaTextColor: Record<string, string> = {
+    low: 'text-success-primary',
+    medium: 'text-warning-primary',
+    high: 'text-error-primary',
+    critical: 'text-error-primary',
+};
+
+const shortType: Record<string, string> = {
+    missed_call: 'Missed',
+    follow_up: 'Follow-up',
+    campaign_lead: 'Campaign',
+    attempt_2: '2nd Att.',
+    attempt_3: '3rd Att.',
+};
+
+export const WorklistPreview = ({ config }: WorklistPreviewProps) => {
+    const { calls, leads, followUps } = useData();
+
+    const previewItems = useMemo(() => {
+        const items: any[] = [];
+
+        if (calls) {
+            calls
+                .filter((c: any) => c.callStatus === 'MISSED')
+                .slice(0, 5)
+                .forEach((c: any) => items.push({ ...c, type: 'missed', _label: c.callerNumber?.primaryPhoneNumber ?? c.name ?? 'Unknown' }));
+        }
+
+        if (followUps) {
+            followUps
+                .slice(0, 5)
+                .forEach((f: any) => items.push({ ...f, type: 'follow-up', _label: f.name ?? 'Follow-up' }));
+        }
+
+        if (leads) {
+            leads
+                .filter((l: any) => l.campaignId)
+                .slice(0, 5)
+                .forEach((l: any) => items.push({
+                    ...l,
+                    type: 'lead',
+                    _label: l.contactName ? `${l.contactName.firstName ?? ''} ${l.contactName.lastName ?? ''}`.trim() : l.contactPhone?.primaryPhoneNumber ?? 'Unknown',
+                }));
+        }
+
+        return items;
+    }, [calls, leads, followUps]);
+
+    const scored = useMemo(() => scoreAndRankItems(previewItems, config), [previewItems, config]);
+
+    return (
+        <div className="flex flex-col min-h-0">
+            <div className="flex items-center justify-between mb-3">
+                <h3 className="text-sm font-semibold text-primary">Live Preview</h3>
+                <span className="text-xs text-tertiary">{scored.length} items</span>
+            </div>
+            <div className="rounded-xl border border-secondary overflow-hidden bg-primary">
+                {/* Header */}
+                <div className="flex items-center gap-2 px-3 py-2 bg-secondary text-xs font-medium text-tertiary border-b border-secondary">
+                    <span className="w-3" />
+                    <span className="flex-1 min-w-0">Name</span>
+                    <span className="w-16 text-right">Score</span>
+                </div>
+                {/* Rows */}
+                <div className="divide-y divide-tertiary overflow-y-auto max-h-[320px]">
+                    {scored.map((item: any & ScoreResult, index: number) => (
+                        <div
+                            key={item.id ?? index}
+                            className="flex items-center gap-2 px-3 py-2 hover:bg-primary_hover transition duration-100 ease-linear"
+                        >
+                            <span className={cx('size-2 rounded-full shrink-0', slaColors[item.slaStatus])} />
+                            <div className="flex-1 min-w-0">
+                                <div className="text-xs font-medium text-primary truncate">
+                                    {item._label ?? item.name ?? 'Item'}
+                                </div>
+                                <div className="flex items-center gap-1.5 mt-0.5">
+                                    <span className="text-[10px] text-tertiary">
+                                        {shortType[item.taskType] ?? item.taskType}
+                                    </span>
+                                    <span className="text-quaternary">&middot;</span>
+                                    <span className={cx('text-[10px] font-medium', slaTextColor[item.slaStatus])}>
+                                        {item.slaElapsedPercent}% SLA
+                                    </span>
+                                </div>
+                            </div>
+                            <span className="w-16 text-right text-sm font-bold tabular-nums text-primary shrink-0">
+                                {item.score.toFixed(1)}
+                            </span>
+                        </div>
+                    ))}
+                    {scored.length === 0 && (
+                        <div className="px-3 py-6 text-center text-xs text-tertiary">
+                            No worklist items to preview
+                        </div>
+                    )}
+                </div>
+            </div>
+        </div>
+    );
+};
+

src/components/setup/resume-setup-banner.tsx

@@ -0,0 +1,83 @@
+import { useEffect, useState } from 'react';
+import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
+import { faCircleInfo, faXmark, faArrowRight } from '@fortawesome/pro-duotone-svg-icons';
+import { Button } from '@/components/base/buttons/button';
+import { getSetupState, SETUP_STEP_NAMES, type SetupState } from '@/lib/setup-state';
+import { useAuth } from '@/providers/auth-provider';
+
+// Dismissible banner shown across the top of authenticated pages when
+// the hospital workspace has incomplete setup steps AND the admin has
+// already dismissed the auto-wizard. This is the "nudge" layer —
+// a persistent reminder that setup is still outstanding, without the
+// intrusion of the full-page wizard.
+//
+// Visibility rules:
+//   - Admin users only (other roles can't complete setup)
+//   - At least one setup step is still `completed: false`
+//   - `setup-state.wizardDismissed === true` (otherwise the wizard
+//     auto-shows on next login and this banner would be redundant)
+//   - Not dismissed in the current browser session (resets on reload)
+export const ResumeSetupBanner = () => {
+    const { isAdmin } = useAuth();
+    const [state, setState] = useState<SetupState | null>(null);
+    const [dismissed, setDismissed] = useState(
+        () => sessionStorage.getItem('helix_resume_setup_dismissed') === '1',
+    );
+
+    useEffect(() => {
+        if (!isAdmin || dismissed) return;
+        getSetupState()
+            .then(setState)
+            .catch(() => {
+                // Non-fatal — if setup-state isn't reachable, just
+                // skip the banner. The wizard still works.
+            });
+    }, [isAdmin, dismissed]);
+
+    if (!isAdmin || !state || dismissed) return null;
+
+    const incompleteCount = SETUP_STEP_NAMES.filter((s) => !state.steps[s].completed).length;
+    if (incompleteCount === 0) return null;
+
+    // If the wizard hasn't been dismissed yet, the first-run redirect
+    // in login.tsx handles pushing the admin into /setup — no need
+    // for this nudge.
+    if (!state.wizardDismissed) return null;
+
+    const handleDismiss = () => {
+        sessionStorage.setItem('helix_resume_setup_dismissed', '1');
+        setDismissed(true);
+    };
+
+    return (
+        <div className="flex shrink-0 items-center justify-between gap-4 border-b border-brand bg-brand-primary px-4 py-2">
+            <div className="flex items-center gap-3">
+                <FontAwesomeIcon icon={faCircleInfo} className="size-4 text-brand-primary" />
+                <span className="text-sm text-primary">
+                    <b>Finish setting up your hospital</b> — {incompleteCount} step
+                    {incompleteCount === 1 ? '' : 's'} still need your attention.
+                </span>
+            </div>
+            <div className="flex items-center gap-2">
+                <Button
+                    size="sm"
+                    color="primary"
+                    href="/setup"
+                    iconTrailing={({ className }: { className?: string }) => (
+                        <FontAwesomeIcon icon={faArrowRight} className={className} />
+                    )}
+                >
+                    Resume setup
+                </Button>
+                <button
+                    type="button"
+                    onClick={handleDismiss}
+                    className="flex size-7 items-center justify-center rounded-md text-fg-quaternary hover:bg-secondary_hover hover:text-fg-secondary transition duration-100 ease-linear"
+                    title="Dismiss for this session"
+                >
+                    <FontAwesomeIcon icon={faXmark} className="size-3" />
+                </button>
+            </div>
+        </div>
+    );
+};

src/components/setup/section-card.tsx

@@ -0,0 +1,67 @@
+import { Link } from 'react-router';
+import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
+import { faArrowRight, faCircleCheck, faCircleExclamation } from '@fortawesome/pro-duotone-svg-icons';
+import { cx } from '@/utils/cx';
+
+type SectionStatus = 'complete' | 'incomplete' | 'unknown';
+
+type SectionCardProps = {
+    title: string;
+    description: string;
+    icon: any;
+    iconColor?: string;
+    href: string;
+    status?: SectionStatus;
+};
+
+// Settings hub card. Each card represents one setup-able section (Branding,
+// Clinics, Doctors, Team, Telephony, AI, Widget, Rules) and links to its
+// dedicated page. The status badge mirrors the wizard's setup-state so an
+// admin can see at a glance which sections still need attention.
+export const SectionCard = ({
+    title,
+    description,
+    icon,
+    iconColor = 'text-brand-primary',
+    href,
+    status = 'unknown',
+}: SectionCardProps) => {
+    return (
+        <Link
+            to={href}
+            className="group block rounded-xl border border-secondary bg-primary p-5 shadow-xs transition hover:border-brand hover:shadow-md"
+        >
+            <div className="flex items-start justify-between gap-4">
+                <div className="flex items-start gap-4">
+                    <div className="flex size-11 shrink-0 items-center justify-center rounded-lg bg-secondary">
+                        <FontAwesomeIcon icon={icon} className={cx('size-5', iconColor)} />
+                    </div>
+                    <div className="min-w-0">
+                        <h3 className="text-sm font-semibold text-primary">{title}</h3>
+                        <p className="mt-1 text-xs text-tertiary">{description}</p>
+                    </div>
+                </div>
+                <FontAwesomeIcon
+                    icon={faArrowRight}
+                    className="size-4 shrink-0 text-quaternary transition group-hover:translate-x-0.5 group-hover:text-brand-primary"
+                />
+            </div>
+
+            {status !== 'unknown' && (
+                <div className="mt-4 flex items-center gap-2 border-t border-secondary pt-3">
+                    {status === 'complete' ? (
+                        <span className="inline-flex items-center gap-1.5 text-xs font-medium text-success-primary">
+                            <FontAwesomeIcon icon={faCircleCheck} className="size-3.5" />
+                            Configured
+                        </span>
+                    ) : (
+                        <span className="inline-flex items-center gap-1.5 text-xs font-medium text-warning-primary">
+                            <FontAwesomeIcon icon={faCircleExclamation} className="size-3.5" />
+                            Setup needed
+                        </span>
+                    )}
+                </div>
+            )}
+        </Link>
+    );
+};

src/components/setup/wizard-layout-context.tsx

@@ -0,0 +1,27 @@
+import { createContext } from 'react';
+
+// Context that lets each WizardStep render content into the wizard
+// shell's right pane via a portal — without lifting per-step data
+// fetching up to the page. The shell sets `rightPaneEl` to the
+// `<aside>` DOM node once it mounts; child WizardStep components read
+// it and createPortal their `rightPane` prop into it.
+//
+// Why a portal and not a state-lifted prop on WizardShell:
+//   - The right pane is tightly coupled to the active step's data
+//     (e.g. "list of clinics created so far") which lives in the step
+//     component's state. Lifting that state to the page would mean
+//     duplicating the data-fetching layer, OR re-querying everything
+//     from the page.
+//   - Trying to pass `rightPane: ReactNode` upward via callbacks
+//     either causes a one-frame flash (useEffect) or violates the
+//     "no setState during render" rule.
+//   - Portals are React-native, no extra render cycles, and the
+//     DOM target is already part of the layout.
+
+export type WizardLayoutContextValue = {
+    rightPaneEl: HTMLElement | null;
+};
+
+export const WizardLayoutContext = createContext<WizardLayoutContextValue>({
+    rightPaneEl: null,
+});

src/components/setup/wizard-right-panes.tsx

@@ -0,0 +1,426 @@
+import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
+import {
+    faBuilding,
+    faCircle,
+    faCircleCheck,
+    faCopy,
+    faHeadset,
+    faPenToSquare,
+    faPhone,
+    faRobot,
+    faStethoscope,
+    faUser,
+    faUsers,
+} from '@fortawesome/pro-duotone-svg-icons';
+
+// Reusable right-pane preview components for the onboarding wizard.
+// Each one is a pure presentation component that takes already-fetched
+// data as props — the parent step component owns the state + fetches
+// + refetches after a successful save. Keeping the panes data-only
+// means the active step can pass the same source of truth to both
+// the middle (form) pane and this preview without two GraphQL queries
+// running side by side.
+
+// Shared title/empty state primitives so every pane has the same
+// visual rhythm.
+const PaneCard = ({
+    title,
+    count,
+    children,
+}: {
+    title: string;
+    count?: number;
+    children: React.ReactNode;
+}) => (
+    <div className="rounded-xl border border-secondary bg-primary shadow-xs">
+        <div className="flex items-center justify-between border-b border-secondary px-4 py-3">
+            <p className="text-xs font-semibold uppercase tracking-wider text-quaternary">{title}</p>
+            {typeof count === 'number' && (
+                <span className="rounded-full bg-secondary px-2 py-0.5 text-xs font-semibold text-tertiary">
+                    {count}
+                </span>
+            )}
+        </div>
+        {children}
+    </div>
+);
+
+const EmptyState = ({ message }: { message: string }) => (
+    <div className="px-4 py-6 text-center text-xs text-tertiary">{message}</div>
+);
+
+// ---------------------------------------------------------------------------
+// Identity step — short "about this step" card. Explains what the
+// admin is configuring and where it shows up in the staff portal so
+// the right pane stays useful even when there's nothing to list yet.
+// ---------------------------------------------------------------------------
+
+const IDENTITY_BULLETS: { title: string; body: string }[] = [
+    {
+        title: 'Hospital name',
+        body: 'Shown on the staff portal sidebar, the login screen, and every patient-facing widget greeting.',
+    },
+    {
+        title: 'Logo',
+        body: 'Used as the avatar at the top of the staff portal and on the website widget header. Square images work best.',
+    },
+    {
+        title: 'Brand identity',
+        body: 'Colors, fonts and login copy live on the full Branding page — open it from Settings any time after setup.',
+    },
+];
+
+export const IdentityRightPane = () => (
+    <PaneCard title="About this step">
+        <div className="px-4 py-4">
+            <p className="text-sm text-tertiary">
+                This is how patients and staff first see your hospital across Helix Engage.
+                Get the basics in now — you can polish branding later.
+            </p>
+            <ul className="mt-4 flex flex-col gap-3">
+                {IDENTITY_BULLETS.map((b) => (
+                    <li key={b.title} className="flex items-start gap-2.5">
+                        <FontAwesomeIcon
+                            icon={faCircleCheck}
+                            className="mt-0.5 size-4 shrink-0 text-fg-brand-primary"
+                        />
+                        <div>
+                            <p className="text-sm font-semibold text-primary">{b.title}</p>
+                            <p className="text-xs text-tertiary">{b.body}</p>
+                        </div>
+                    </li>
+                ))}
+            </ul>
+        </div>
+    </PaneCard>
+);
+
+// ---------------------------------------------------------------------------
+// Clinics step — list of clinics created so far.
+// ---------------------------------------------------------------------------
+
+export type ClinicSummary = {
+    id: string;
+    clinicName: string | null;
+    addressCity?: string | null;
+    clinicStatus?: string | null;
+};
+
+export const ClinicsRightPane = ({ clinics }: { clinics: ClinicSummary[] }) => (
+    <PaneCard title="Clinics added" count={clinics.length}>
+        {clinics.length === 0 ? (
+            <EmptyState message="No clinics yet — add your first one in the form on the left." />
+        ) : (
+            <ul className="divide-y divide-secondary">
+                {clinics.map((c) => (
+                    <li key={c.id} className="flex items-start gap-3 px-4 py-3">
+                        <div className="flex size-9 shrink-0 items-center justify-center rounded-full bg-brand-secondary text-brand-secondary">
+                            <FontAwesomeIcon icon={faBuilding} className="size-4" />
+                        </div>
+                        <div className="min-w-0 flex-1">
+                            <p className="truncate text-sm font-semibold text-primary">
+                                {c.clinicName ?? 'Unnamed clinic'}
+                            </p>
+                            <p className="truncate text-xs text-tertiary">
+                                {c.addressCity ?? 'No city'}
+                                {c.clinicStatus && ` · ${c.clinicStatus.toLowerCase()}`}
+                            </p>
+                        </div>
+                    </li>
+                ))}
+            </ul>
+        )}
+    </PaneCard>
+);
+
+// ---------------------------------------------------------------------------
+// Doctors step — grouped by department, since the user explicitly asked
+// for "doctors grouped by department" earlier in the design discussion.
+// ---------------------------------------------------------------------------
+
+export type DoctorSummary = {
+    id: string;
+    fullName: { firstName: string | null; lastName: string | null } | null;
+    department?: string | null;
+    specialty?: string | null;
+};
+
+const doctorDisplayName = (d: DoctorSummary): string => {
+    const first = d.fullName?.firstName?.trim() ?? '';
+    const last = d.fullName?.lastName?.trim() ?? '';
+    const full = `${first} ${last}`.trim();
+    return full.length > 0 ? full : 'Unnamed';
+};
+
+export const DoctorsRightPane = ({ doctors }: { doctors: DoctorSummary[] }) => {
+    // Group by department. Doctors with no department land in
+    // "Unassigned" so they're not silently dropped.
+    const grouped: Record<string, DoctorSummary[]> = {};
+    for (const d of doctors) {
+        const key = d.department?.trim() || 'Unassigned';
+        (grouped[key] ??= []).push(d);
+    }
+    const sortedKeys = Object.keys(grouped).sort();
+
+    return (
+        <PaneCard title="Doctors added" count={doctors.length}>
+            {doctors.length === 0 ? (
+                <EmptyState message="No doctors yet — add your first one in the form on the left." />
+            ) : (
+                <div className="divide-y divide-secondary">
+                    {sortedKeys.map((dept) => (
+                        <div key={dept} className="px-4 py-3">
+                            <p className="text-xs font-semibold uppercase tracking-wider text-quaternary">
+                                {dept}{' '}
+                                <span className="text-tertiary">({grouped[dept].length})</span>
+                            </p>
+                            <ul className="mt-2 flex flex-col gap-2">
+                                {grouped[dept].map((d) => (
+                                    <li
+                                        key={d.id}
+                                        className="flex items-start gap-2.5 text-sm text-primary"
+                                    >
+                                        <FontAwesomeIcon
+                                            icon={faStethoscope}
+                                            className="mt-0.5 size-3.5 text-fg-quaternary"
+                                        />
+                                        <div className="min-w-0 flex-1">
+                                            <p className="truncate font-medium">
+                                                {doctorDisplayName(d)}
+                                            </p>
+                                            {d.specialty && (
+                                                <p className="truncate text-xs text-tertiary">
+                                                    {d.specialty}
+                                                </p>
+                                            )}
+                                        </div>
+                                    </li>
+                                ))}
+                            </ul>
+                        </div>
+                    ))}
+                </div>
+            )}
+        </PaneCard>
+    );
+};
+
+// ---------------------------------------------------------------------------
+// Team step — list of employees with role + SIP badge.
+// ---------------------------------------------------------------------------
+
+export type TeamMemberSummary = {
+    id: string;
+    userEmail: string;
+    name: { firstName: string | null; lastName: string | null } | null;
+    roleLabel: string | null;
+    sipExtension: string | null;
+    // True if this row represents the currently logged-in admin —
+    // suppresses the edit/copy icons since admins shouldn't edit
+    // themselves from the wizard.
+    isCurrentUser: boolean;
+    // True if the parent has the plaintext temp password in memory
+    // (i.e. this employee was created in the current session).
+    // Drives whether the copy icon shows.
+    canCopyCredentials: boolean;
+};
+
+const memberDisplayName = (m: TeamMemberSummary): string => {
+    const first = m.name?.firstName?.trim() ?? '';
+    const last = m.name?.lastName?.trim() ?? '';
+    const full = `${first} ${last}`.trim();
+    return full.length > 0 ? full : m.userEmail;
+};
+
+// Tiny icon button shared between the edit and copy actions on the
+// employee row. Kept inline since it's only used here and the styling
+// matches the existing right-pane density.
+const RowIconButton = ({
+    icon,
+    title,
+    onClick,
+}: {
+    icon: typeof faPenToSquare;
+    title: string;
+    onClick: () => void;
+}) => (
+    <button
+        type="button"
+        onClick={onClick}
+        title={title}
+        aria-label={title}
+        className="flex size-7 shrink-0 items-center justify-center rounded-md text-fg-quaternary hover:bg-secondary_hover hover:text-fg-tertiary_hover"
+    >
+        <FontAwesomeIcon icon={icon} className="size-3.5" />
+    </button>
+);
+
+export const TeamRightPane = ({
+    members,
+    onEdit,
+    onCopy,
+}: {
+    members: TeamMemberSummary[];
+    onEdit?: (memberId: string) => void;
+    onCopy?: (memberId: string) => void;
+}) => (
+    <PaneCard title="Employees" count={members.length}>
+        {members.length === 0 ? (
+            <EmptyState message="No employees yet — create your first one in the form on the left." />
+        ) : (
+            <ul className="divide-y divide-secondary">
+                {members.map((m) => (
+                    <li key={m.id} className="flex items-start gap-3 px-4 py-3">
+                        <div className="flex size-9 shrink-0 items-center justify-center rounded-full bg-brand-secondary text-brand-secondary">
+                            <FontAwesomeIcon icon={faUser} className="size-4" />
+                        </div>
+                        <div className="min-w-0 flex-1">
+                            <p className="truncate text-sm font-semibold text-primary">
+                                {memberDisplayName(m)}
+                            </p>
+                            <p className="truncate text-xs text-tertiary">
+                                {m.userEmail}
+                                {m.roleLabel && ` · ${m.roleLabel}`}
+                            </p>
+                            {m.sipExtension && (
+                                <span className="mt-1 inline-flex items-center gap-1 rounded-full bg-success-secondary px-2 py-0.5 text-xs font-medium text-success-primary">
+                                    <FontAwesomeIcon icon={faHeadset} className="size-3" />
+                                    {m.sipExtension}
+                                </span>
+                            )}
+                        </div>
+                        {/* Admin row gets neither button — admins
+                            shouldn't edit themselves from here, and
+                            their password isn't in our session
+                            memory anyway. */}
+                        {!m.isCurrentUser && (
+                            <div className="flex shrink-0 items-center gap-1">
+                                {m.canCopyCredentials && onCopy && (
+                                    <RowIconButton
+                                        icon={faCopy}
+                                        title="Copy login credentials"
+                                        onClick={() => onCopy(m.id)}
+                                    />
+                                )}
+                                {onEdit && (
+                                    <RowIconButton
+                                        icon={faPenToSquare}
+                                        title="Edit employee"
+                                        onClick={() => onEdit(m.id)}
+                                    />
+                                )}
+                            </div>
+                        )}
+                    </li>
+                ))}
+            </ul>
+        )}
+    </PaneCard>
+);
+
+// ---------------------------------------------------------------------------
+// Telephony step — live SIP → member mapping.
+// ---------------------------------------------------------------------------
+
+export type SipSeatSummary = {
+    id: string;
+    sipExtension: string | null;
+    ozonetelAgentId: string | null;
+    workspaceMember: {
+        name: { firstName: string | null; lastName: string | null } | null;
+        userEmail: string;
+    } | null;
+};
+
+const seatMemberLabel = (m: SipSeatSummary['workspaceMember']): string => {
+    if (!m) return 'Unassigned';
+    const first = m.name?.firstName?.trim() ?? '';
+    const last = m.name?.lastName?.trim() ?? '';
+    const full = `${first} ${last}`.trim();
+    return full.length > 0 ? full : m.userEmail;
+};
+
+export const TelephonyRightPane = ({ seats }: { seats: SipSeatSummary[] }) => (
+    <PaneCard title="SIP seats" count={seats.length}>
+        {seats.length === 0 ? (
+            <EmptyState message="No SIP seats configured — contact support to provision seats." />
+        ) : (
+            <ul className="divide-y divide-secondary">
+                {seats.map((seat) => {
+                    const isAssigned = seat.workspaceMember !== null;
+                    return (
+                        <li key={seat.id} className="flex items-start gap-3 px-4 py-3">
+                            <div
+                                className={`flex size-9 shrink-0 items-center justify-center rounded-full ${
+                                    isAssigned
+                                        ? 'bg-brand-secondary text-brand-secondary'
+                                        : 'bg-secondary text-quaternary'
+                                }`}
+                            >
+                                <FontAwesomeIcon icon={faPhone} className="size-4" />
+                            </div>
+                            <div className="min-w-0 flex-1">
+                                <p className="truncate text-sm font-semibold text-primary">
+                                    Ext {seat.sipExtension ?? '—'}
+                                </p>
+                                <p className="truncate text-xs text-tertiary">
+                                    {seatMemberLabel(seat.workspaceMember)}
+                                </p>
+                            </div>
+                            {!isAssigned && (
+                                <span className="inline-flex shrink-0 items-center rounded-full bg-secondary px-2 py-0.5 text-xs font-medium text-tertiary">
+                                    Available
+                                </span>
+                            )}
+                        </li>
+                    );
+                })}
+            </ul>
+        )}
+    </PaneCard>
+);
+
+// ---------------------------------------------------------------------------
+// AI step — static cards for each configured actor with last-edited info.
+// Filled in once the backend prompt config refactor lands.
+// ---------------------------------------------------------------------------
+
+export type AiActorSummary = {
+    key: string;
+    label: string;
+    description: string;
+    lastEditedAt: string | null;
+    isCustom: boolean;
+};
+
+export const AiRightPane = ({ actors }: { actors: AiActorSummary[] }) => (
+    <PaneCard title="AI personas" count={actors.length}>
+        {actors.length === 0 ? (
+            <EmptyState message="Loading personas…" />
+        ) : (
+            <ul className="divide-y divide-secondary">
+                {actors.map((a) => (
+                    <li key={a.key} className="flex items-start gap-3 px-4 py-3">
+                        <div className="flex size-9 shrink-0 items-center justify-center rounded-full bg-brand-secondary text-brand-secondary">
+                            <FontAwesomeIcon icon={faRobot} className="size-4" />
+                        </div>
+                        <div className="min-w-0 flex-1">
+                            <p className="truncate text-sm font-semibold text-primary">
+                                {a.label}
+                            </p>
+                            <p className="truncate text-xs text-tertiary">
+                                {a.isCustom
+                                    ? `Edited ${a.lastEditedAt ? new Date(a.lastEditedAt).toLocaleDateString() : 'recently'}`
+                                    : 'Default'}
+                            </p>
+                        </div>
+                    </li>
+                ))}
+            </ul>
+        )}
+    </PaneCard>
+);
+
+// Suppress unused-import warnings for icons reserved for future use.
+void faCircle;
+void faUsers;

src/components/setup/wizard-shell.tsx

@@ -0,0 +1,159 @@
+import { useState, type ReactNode } from 'react';
+import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
+import { faCircleCheck, faCircle } from '@fortawesome/pro-duotone-svg-icons';
+import { Button } from '@/components/base/buttons/button';
+import { cx } from '@/utils/cx';
+import { SETUP_STEP_NAMES, SETUP_STEP_LABELS, type SetupStepName, type SetupState } from '@/lib/setup-state';
+import { WizardLayoutContext } from './wizard-layout-context';
+
+type WizardShellProps = {
+    state: SetupState;
+    activeStep: SetupStepName;
+    onSelectStep: (step: SetupStepName) => void;
+    onDismiss: () => void;
+    // Form column (middle pane). The active step component renders
+    // its form into this slot. The right pane is filled via the
+    // WizardLayoutContext + a portal — see wizard-step.tsx.
+    children: ReactNode;
+};
+
+// Layout shell for the onboarding wizard. Three-pane layout:
+//   left   — step navigator (fixed width)
+//   middle — form (flexible, the focus column)
+//   right  — preview pane fed by the active step component (sticky,
+//            hides below xl breakpoint)
+//
+// The whole shell is `fixed inset-0` so the document body cannot
+// scroll while the wizard is mounted — fixes the double-scrollbar
+// bug where the body was rendered taller than the viewport and
+// scrolled alongside the form column. The form and preview columns
+// each scroll independently inside the shell.
+//
+// The header has a "Skip for now" affordance that dismisses the
+// wizard for this workspace; once dismissed it never auto-shows
+// again on login.
+export const WizardShell = ({
+    state,
+    activeStep,
+    onSelectStep,
+    onDismiss,
+    children,
+}: WizardShellProps) => {
+    const completedCount = SETUP_STEP_NAMES.filter((s) => state.steps[s].completed).length;
+    const totalSteps = SETUP_STEP_NAMES.length;
+    const progressPct = Math.round((completedCount / totalSteps) * 100);
+
+    // Callback ref → state — guarantees that consumers re-render once
+    // the aside is mounted (a plain useRef would not propagate the
+    // attached node back through the context). The element is also
+    // updated to null on unmount so the context is always honest about
+    // whether the slot is currently available for portals.
+    const [rightPaneEl, setRightPaneEl] = useState<HTMLElement | null>(null);
+
+    return (
+        <WizardLayoutContext.Provider value={{ rightPaneEl }}>
+        <div className="fixed inset-0 z-50 flex flex-col bg-primary">
+            {/* Header — pinned. Progress bar always visible (grey
+                track when 0%), sits flush under the title row. */}
+            <header className="shrink-0 border-b border-secondary bg-primary">
+                <div className="mx-auto flex w-full max-w-screen-2xl items-center justify-between gap-6 px-8 pt-4 pb-3">
+                    <div className="flex items-center gap-4">
+                        <div>
+                            <h1 className="text-lg font-bold text-primary">Set up your hospital</h1>
+                            <p className="text-xs text-tertiary">
+                                {completedCount} of {totalSteps} steps complete · finish setup to start
+                                using your workspace
+                            </p>
+                        </div>
+                    </div>
+                    <Button color="link-gray" size="sm" onClick={onDismiss}>
+                        Skip for now
+                    </Button>
+                </div>
+                <div className="mx-auto w-full max-w-screen-2xl px-8 pb-3">
+                    <div className="h-1.5 w-full overflow-hidden rounded-full bg-secondary">
+                        <div
+                            className="h-full rounded-full bg-brand-solid transition-all duration-300"
+                            style={{ width: `${progressPct}%` }}
+                        />
+                    </div>
+                </div>
+            </header>
+
+            {/* Body — three columns inside a fixed-height flex row.
+                min-h-0 on the row + each column lets the inner
+                overflow-y-auto actually take effect. */}
+            <div className="mx-auto flex min-h-0 w-full max-w-screen-2xl flex-1 gap-6 px-8 py-6">
+                {/* Left — step navigator. Scrolls if it overflows on
+                    very short viewports, but in practice it fits. */}
+                <nav className="w-60 shrink-0 overflow-y-auto">
+                    <ol className="flex flex-col gap-1">
+                        {SETUP_STEP_NAMES.map((step, idx) => {
+                            const meta = SETUP_STEP_LABELS[step];
+                            const status = state.steps[step];
+                            const isActive = step === activeStep;
+                            const isComplete = status.completed;
+                            return (
+                                <li key={step}>
+                                    <button
+                                        type="button"
+                                        onClick={() => onSelectStep(step)}
+                                        className={cx(
+                                            'group flex w-full items-start gap-3 rounded-lg border px-3 py-2.5 text-left transition',
+                                            isActive
+                                                ? 'border-brand bg-brand-primary'
+                                                : 'border-transparent hover:bg-secondary',
+                                        )}
+                                    >
+                                        <span className="mt-0.5 shrink-0">
+                                            <FontAwesomeIcon
+                                                icon={isComplete ? faCircleCheck : faCircle}
+                                                className={cx(
+                                                    'size-5',
+                                                    isComplete
+                                                        ? 'text-success-primary'
+                                                        : 'text-quaternary',
+                                                )}
+                                            />
+                                        </span>
+                                        <span className="flex-1">
+                                            <span className="block text-xs font-medium text-tertiary">
+                                                Step {idx + 1}
+                                            </span>
+                                            <span
+                                                className={cx(
+                                                    'block text-sm font-semibold',
+                                                    isActive ? 'text-brand-primary' : 'text-primary',
+                                                )}
+                                            >
+                                                {meta.title}
+                                            </span>
+                                        </span>
+                                    </button>
+                                </li>
+                            );
+                        })}
+                    </ol>
+                </nav>
+
+                {/* Middle — form column. min-w-0 prevents children from
+                    forcing the column wider than its flex basis (long
+                    inputs, etc.). overflow-y-auto so it scrolls
+                    independently of the right pane. */}
+                <main className="flex min-w-0 flex-1 flex-col overflow-y-auto">{children}</main>
+
+                {/* Right — preview pane. Always rendered as a stable
+                    portal target (so the active step's WizardStep can
+                    createPortal into it via WizardLayoutContext).
+                    Hidden below xl breakpoint (1280px) so the wizard
+                    collapses cleanly to two columns on smaller screens.
+                    Independent scroll. */}
+                <aside
+                    ref={setRightPaneEl}
+                    className="hidden w-80 shrink-0 overflow-y-auto xl:block"
+                />
+            </div>
+        </div>
+        </WizardLayoutContext.Provider>
+    );
+};

src/components/setup/wizard-step-ai.tsx

@@ -0,0 +1,434 @@
+import { useCallback, useEffect, useMemo, useState } from 'react';
+import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
+import { faPenToSquare, faRotateLeft, faRobot } from '@fortawesome/pro-duotone-svg-icons';
+import { WizardStep } from './wizard-step';
+import { AiRightPane, type AiActorSummary } from './wizard-right-panes';
+import { AiForm, emptyAiFormValues, type AiFormValues, type AiProvider } from '@/components/forms/ai-form';
+import { Button } from '@/components/base/buttons/button';
+import { SlideoutMenu } from '@/components/application/slideout-menus/slideout-menu';
+import { EditPatientConfirmModal } from '@/components/modals/edit-patient-confirm-modal';
+import { apiClient } from '@/lib/api-client';
+import { notify } from '@/lib/toast';
+import { useAuth } from '@/providers/auth-provider';
+import type { WizardStepComponentProps } from './wizard-step-types';
+
+// AI step (post-prompt-config rework). The middle pane has two sections:
+//
+//   1. Provider / model / temperature picker — same as before, drives the
+//      provider that all actors use under the hood.
+//   2. AI personas — list of 7 actor cards, each with name, description,
+//      truncated current template, and an Edit button. Edit triggers a
+//      confirmation modal warning about unintended consequences, then
+//      opens a slideout with the full template + a "variables you can
+//      use" reference + Save / Reset.
+//
+// The right pane shows the same 7 personas as compact "last edited" cards
+// so the admin can scan recent activity at a glance.
+//
+// Backend wiring lives in helix-engage-server/src/config/ai.defaults.ts
+// (DEFAULT_AI_PROMPTS) + ai-config.service.ts (renderPrompt / updatePrompt
+// / resetPrompt). The 7 service files (widget chat, CC agent helper,
+// supervisor, lead enrichment, call insight, call assist, recording
+// analysis) all call AiConfigService.renderPrompt(actor, vars) so any
+// edit here lands instantly.
+
+type ServerPromptConfig = {
+    label: string;
+    description: string;
+    variables: { key: string; description: string }[];
+    template: string;
+    defaultTemplate: string;
+    lastEditedAt: string | null;
+    lastEditedBy: string | null;
+};
+
+type ServerAiConfig = {
+    provider?: AiProvider;
+    model?: string;
+    temperature?: number;
+    prompts?: Record<string, ServerPromptConfig>;
+};
+
+// Display order for the actor cards. Mirrors AI_ACTOR_KEYS in
+// ai.defaults.ts so the wizard renders personas in the same order
+// admins see them documented elsewhere.
+const ACTOR_ORDER = [
+    'widgetChat',
+    'ccAgentHelper',
+    'supervisorChat',
+    'leadEnrichment',
+    'callInsight',
+    'callAssist',
+    'recordingAnalysis',
+] as const;
+
+const truncate = (s: string, max: number): string =>
+    s.length > max ? s.slice(0, max).trimEnd() + '…' : s;
+
+export const WizardStepAi = (props: WizardStepComponentProps) => {
+    const { user } = useAuth();
+    const [values, setValues] = useState<AiFormValues>(emptyAiFormValues);
+    const [prompts, setPrompts] = useState<Record<string, ServerPromptConfig>>({});
+    const [loading, setLoading] = useState(true);
+    const [saving, setSaving] = useState(false);
+
+    // Edit flow state — three phases:
+    //   1. confirmingActor: which actor's Edit button was just clicked
+    //      (drives the confirmation modal)
+    //   2. editingActor: which actor's slideout is open (only set after
+    //      the user confirms past the warning prompt)
+    //   3. draftTemplate: the current textarea contents in the slideout
+    const [confirmingActor, setConfirmingActor] = useState<string | null>(null);
+    const [editingActor, setEditingActor] = useState<string | null>(null);
+    const [draftTemplate, setDraftTemplate] = useState('');
+    const [savingPrompt, setSavingPrompt] = useState(false);
+
+    const fetchConfig = useCallback(async () => {
+        try {
+            const data = await apiClient.get<ServerAiConfig>('/api/config/ai', { silent: true });
+            setValues({
+                provider: data.provider ?? 'openai',
+                model: data.model ?? 'gpt-4o-mini',
+                temperature: data.temperature != null ? String(data.temperature) : '0.7',
+                systemPromptAddendum: '',
+            });
+            setPrompts(data.prompts ?? {});
+        } catch (err) {
+            console.error('[wizard/ai] fetch failed', err);
+        } finally {
+            setLoading(false);
+        }
+    }, []);
+
+    useEffect(() => {
+        fetchConfig();
+    }, [fetchConfig]);
+
+    const handleSaveProviderConfig = async () => {
+        if (!values.model.trim()) {
+            notify.error('Model is required');
+            return;
+        }
+        const temperature = Number(values.temperature);
+        setSaving(true);
+        try {
+            await apiClient.put('/api/config/ai', {
+                provider: values.provider,
+                model: values.model.trim(),
+                temperature: Number.isNaN(temperature) ? 0.7 : Math.min(2, Math.max(0, temperature)),
+            });
+            notify.success('AI settings saved', 'Provider and model updated.');
+            await fetchConfig();
+            if (!props.isCompleted) {
+                await props.onComplete('ai');
+            }
+        } catch (err) {
+            console.error('[wizard/ai] save provider failed', err);
+        } finally {
+            setSaving(false);
+        }
+    };
+
+    // Confirmation modal → slideout flow.
+    const handleEditClick = (actor: string) => {
+        setConfirmingActor(actor);
+    };
+
+    const handleConfirmEdit = () => {
+        if (!confirmingActor) return;
+        const prompt = prompts[confirmingActor];
+        if (!prompt) return;
+        setEditingActor(confirmingActor);
+        setDraftTemplate(prompt.template);
+        setConfirmingActor(null);
+    };
+
+    const handleSavePrompt = async (close: () => void) => {
+        if (!editingActor) return;
+        if (!draftTemplate.trim()) {
+            notify.error('Prompt cannot be empty');
+            return;
+        }
+        setSavingPrompt(true);
+        try {
+            await apiClient.put(`/api/config/ai/prompts/${editingActor}`, {
+                template: draftTemplate,
+                editedBy: user?.email ?? null,
+            });
+            notify.success('Prompt updated', `${prompts[editingActor]?.label ?? editingActor} saved`);
+            await fetchConfig();
+            close();
+            setEditingActor(null);
+        } catch (err) {
+            console.error('[wizard/ai] save prompt failed', err);
+        } finally {
+            setSavingPrompt(false);
+        }
+    };
+
+    const handleResetPrompt = async (close: () => void) => {
+        if (!editingActor) return;
+        setSavingPrompt(true);
+        try {
+            await apiClient.post(`/api/config/ai/prompts/${editingActor}/reset`);
+            notify.success('Prompt reset', `${prompts[editingActor]?.label ?? editingActor} restored to default`);
+            await fetchConfig();
+            close();
+            setEditingActor(null);
+        } catch (err) {
+            console.error('[wizard/ai] reset prompt failed', err);
+        } finally {
+            setSavingPrompt(false);
+        }
+    };
+
+    // Build the right-pane summary entries from the loaded prompts.
+    // `isCustom` is true when the template differs from the shipped
+    // default OR when the audit fields are populated — either way the
+    // admin has touched it.
+    const actorSummaries = useMemo<AiActorSummary[]>(() => {
+        return ACTOR_ORDER.filter((key) => prompts[key]).map((key) => {
+            const p = prompts[key];
+            return {
+                key,
+                label: p.label,
+                description: p.description,
+                lastEditedAt: p.lastEditedAt,
+                isCustom: p.template !== p.defaultTemplate || p.lastEditedAt !== null,
+            };
+        });
+    }, [prompts]);
+
+    const editingPrompt = editingActor ? prompts[editingActor] : null;
+    const confirmingLabel = confirmingActor ? prompts[confirmingActor]?.label : '';
+
+    return (
+        <WizardStep
+            step="ai"
+            isCompleted={props.isCompleted}
+            isLast={props.isLast}
+            onPrev={props.onPrev}
+            onNext={props.onNext}
+            onMarkComplete={handleSaveProviderConfig}
+            onFinish={props.onFinish}
+            saving={saving}
+            rightPane={<AiRightPane actors={actorSummaries} />}
+        >
+            {loading ? (
+                <p className="text-sm text-tertiary">Loading AI settings…</p>
+            ) : (
+                <div className="flex flex-col gap-8">
+                    <section>
+                        <h3 className="mb-3 text-sm font-semibold text-primary">Provider & model</h3>
+                        <AiForm value={values} onChange={setValues} />
+                    </section>
+
+                    <section>
+                        <div className="mb-3 flex items-center justify-between">
+                            <h3 className="text-sm font-semibold text-primary">AI personas</h3>
+                            <span className="text-xs text-tertiary">
+                                {actorSummaries.length} configurable prompts
+                            </span>
+                        </div>
+                        <p className="mb-4 text-xs text-tertiary">
+                            Each persona below is a different AI surface in Helix Engage. Editing a
+                            prompt changes how that persona sounds and what rules it follows. Defaults
+                            are tuned for hospital call centers — only edit if you have a specific
+                            reason and can test the result.
+                        </p>
+                        <ul className="flex flex-col gap-3">
+                            {ACTOR_ORDER.map((key) => {
+                                const prompt = prompts[key];
+                                if (!prompt) return null;
+                                const isCustom =
+                                    prompt.template !== prompt.defaultTemplate ||
+                                    prompt.lastEditedAt !== null;
+                                return (
+                                    <li
+                                        key={key}
+                                        className="rounded-xl border border-secondary bg-primary p-4 shadow-xs"
+                                    >
+                                        <div className="flex items-start gap-3">
+                                            <div className="flex size-10 shrink-0 items-center justify-center rounded-full bg-brand-secondary text-brand-secondary">
+                                                <FontAwesomeIcon icon={faRobot} className="size-5" />
+                                            </div>
+                                            <div className="min-w-0 flex-1">
+                                                <div className="flex items-start justify-between gap-3">
+                                                    <div className="min-w-0">
+                                                        <h4 className="truncate text-sm font-semibold text-primary">
+                                                            {prompt.label}
+                                                        </h4>
+                                                        <p className="mt-0.5 text-xs text-tertiary">
+                                                            {prompt.description}
+                                                        </p>
+                                                    </div>
+                                                    {isCustom && (
+                                                        <span className="shrink-0 rounded-full bg-warning-secondary px-2 py-0.5 text-xs font-medium text-warning-primary">
+                                                            Edited
+                                                        </span>
+                                                    )}
+                                                </div>
+                                                <p className="mt-3 line-clamp-3 rounded-lg border border-secondary bg-secondary p-3 font-mono text-xs leading-relaxed text-tertiary">
+                                                    {truncate(prompt.template, 220)}
+                                                </p>
+                                                <div className="mt-3 flex justify-end">
+                                                    <Button
+                                                        size="sm"
+                                                        color="secondary"
+                                                        onClick={() => handleEditClick(key)}
+                                                        iconLeading={({ className }: { className?: string }) => (
+                                                            <FontAwesomeIcon
+                                                                icon={faPenToSquare}
+                                                                className={className}
+                                                            />
+                                                        )}
+                                                    >
+                                                        Edit
+                                                    </Button>
+                                                </div>
+                                            </div>
+                                        </div>
+                                    </li>
+                                );
+                            })}
+                        </ul>
+                    </section>
+                </div>
+            )}
+
+            {/* Confirmation modal — reused from the patient-edit gate. */}
+            <EditPatientConfirmModal
+                isOpen={confirmingActor !== null}
+                onOpenChange={(open) => {
+                    if (!open) setConfirmingActor(null);
+                }}
+                onConfirm={handleConfirmEdit}
+                title={`Edit ${confirmingLabel} prompt?`}
+                description={
+                    <>
+                        Modifying this prompt can affect call quality, lead summaries, and supervisor
+                        insights in ways that are hard to predict. The defaults are tuned for hospital
+                        call centers — only edit if you have a specific reason and can test the
+                        result. You can always reset back to default from the editor.
+                    </>
+                }
+                confirmLabel="Yes, edit prompt"
+            />
+
+            {/* Slideout editor — only opens after the warning is confirmed. */}
+            <SlideoutMenu
+                isOpen={editingActor !== null}
+                onOpenChange={(open) => {
+                    if (!open) setEditingActor(null);
+                }}
+                isDismissable
+            >
+                {({ close }) => (
+                    <>
+                        <SlideoutMenu.Header onClose={close}>
+                            <div className="flex items-center gap-3 pr-8">
+                                <div className="flex size-10 items-center justify-center rounded-lg bg-brand-secondary">
+                                    <FontAwesomeIcon
+                                        icon={faRobot}
+                                        className="size-5 text-fg-brand-primary"
+                                    />
+                                </div>
+                                <div>
+                                    <h2 className="text-lg font-semibold text-primary">
+                                        Edit {editingPrompt?.label}
+                                    </h2>
+                                    <p className="text-sm text-tertiary">
+                                        {editingPrompt?.description}
+                                    </p>
+                                </div>
+                            </div>
+                        </SlideoutMenu.Header>
+
+                        <SlideoutMenu.Content>
+                            <div className="flex flex-col gap-4">
+                                <div>
+                                    <label className="block text-sm font-medium text-secondary">
+                                        Prompt template
+                                    </label>
+                                    <textarea
+                                        value={draftTemplate}
+                                        onChange={(e) => setDraftTemplate(e.target.value)}
+                                        rows={18}
+                                        className="mt-1.5 w-full resize-y rounded-lg border border-secondary bg-primary p-3 font-mono text-xs text-primary outline-none focus:border-brand focus:ring-2 focus:ring-brand-100"
+                                    />
+                                    <p className="mt-1 text-xs text-tertiary">
+                                        Variables wrapped in <code>{'{{double-braces}}'}</code> get
+                                        substituted at runtime with live data.
+                                    </p>
+                                </div>
+
+                                {editingPrompt?.variables && editingPrompt.variables.length > 0 && (
+                                    <div className="rounded-lg border border-secondary bg-secondary p-3">
+                                        <p className="text-xs font-semibold uppercase tracking-wider text-quaternary">
+                                            Variables you can use
+                                        </p>
+                                        <ul className="mt-2 flex flex-col gap-1.5">
+                                            {editingPrompt.variables.map((v) => (
+                                                <li key={v.key} className="flex items-start gap-2 text-xs">
+                                                    <code className="shrink-0 rounded bg-primary px-1.5 py-0.5 font-mono text-brand-primary">
+                                                        {`{{${v.key}}}`}
+                                                    </code>
+                                                    <span className="text-tertiary">
+                                                        {v.description}
+                                                    </span>
+                                                </li>
+                                            ))}
+                                        </ul>
+                                    </div>
+                                )}
+
+                                {editingPrompt?.lastEditedAt && (
+                                    <p className="text-xs text-tertiary">
+                                        Last edited{' '}
+                                        {new Date(editingPrompt.lastEditedAt).toLocaleString()}
+                                        {editingPrompt.lastEditedBy && ` by ${editingPrompt.lastEditedBy}`}
+                                    </p>
+                                )}
+                            </div>
+                        </SlideoutMenu.Content>
+
+                        <SlideoutMenu.Footer>
+                            <div className="flex items-center justify-between gap-3">
+                                <Button
+                                    size="md"
+                                    color="link-gray"
+                                    isDisabled={savingPrompt}
+                                    onClick={() => handleResetPrompt(close)}
+                                    iconLeading={({ className }: { className?: string }) => (
+                                        <FontAwesomeIcon icon={faRotateLeft} className={className} />
+                                    )}
+                                >
+                                    Reset to default
+                                </Button>
+                                <div className="flex items-center gap-3">
+                                    <Button
+                                        size="md"
+                                        color="secondary"
+                                        isDisabled={savingPrompt}
+                                        onClick={close}
+                                    >
+                                        Cancel
+                                    </Button>
+                                    <Button
+                                        size="md"
+                                        color="primary"
+                                        isLoading={savingPrompt}
+                                        showTextWhileLoading
+                                        onClick={() => handleSavePrompt(close)}
+                                    >
+                                        {savingPrompt ? 'Saving…' : 'Save prompt'}
+                                    </Button>
+                                </div>
+                            </div>
+                        </SlideoutMenu.Footer>
+                    </>
+                )}
+            </SlideoutMenu>
+        </WizardStep>
+    );
+};

src/components/setup/wizard-step-clinics.tsx

@@ -0,0 +1,171 @@
+import { useCallback, useEffect, useState } from 'react';
+import { WizardStep } from './wizard-step';
+import { ClinicsRightPane, type ClinicSummary } from './wizard-right-panes';
+import {
+    ClinicForm,
+    clinicCoreToGraphQLInput,
+    holidayInputsFromForm,
+    requiredDocInputsFromForm,
+    emptyClinicFormValues,
+    type ClinicFormValues,
+} from '@/components/forms/clinic-form';
+import { apiClient } from '@/lib/api-client';
+import { notify } from '@/lib/toast';
+import type { WizardStepComponentProps } from './wizard-step-types';
+
+// Clinic step — presents a single-clinic form. On save the wizard runs
+// a three-stage create chain:
+//   1. createClinic (main record → get id)
+//   2. createHoliday × N (one per holiday entry)
+//   3. createClinicRequiredDocument × N (one per required doc type)
+//
+// This mirrors what the /settings/clinics list page does, minus the
+// delete-old-first step (wizard is always creating, never updating).
+// Failures inside the chain throw up through onComplete so the user
+// sees the error loud, and the wizard stays on the current step.
+export const WizardStepClinics = (props: WizardStepComponentProps) => {
+    const [values, setValues] = useState<ClinicFormValues>(emptyClinicFormValues);
+    const [saving, setSaving] = useState(false);
+    const [clinics, setClinics] = useState<ClinicSummary[]>([]);
+
+    const fetchClinics = useCallback(async () => {
+        try {
+            // Field names match what the platform actually exposes:
+            //  - the SDK ADDRESS field is named "address" but the
+            //    platform mounts it as `addressCustom` (composite type
+            //    with addressCity / addressStreet / etc.)
+            //  - the SDK SELECT field labelled "Status" lands as plain
+            //    `status: ClinicStatusEnum`, NOT `clinicStatus`
+            // Verified via __type introspection — keep this query
+            // pinned to the actual schema to avoid silent empty fetches.
+            type ClinicNode = {
+                id: string;
+                clinicName: string | null;
+                addressCustom: { addressCity: string | null } | null;
+                status: string | null;
+            };
+            const data = await apiClient.graphql<{
+                clinics: { edges: { node: ClinicNode }[] };
+            }>(
+                `{ clinics(first: 100, orderBy: { createdAt: DescNullsLast }) {
+                    edges { node {
+                        id clinicName
+                        addressCustom { addressCity }
+                        status
+                    } }
+                } }`,
+                undefined,
+                { silent: true },
+            );
+            // Flatten into the shape ClinicsRightPane expects.
+            setClinics(
+                data.clinics.edges.map((e) => ({
+                    id: e.node.id,
+                    clinicName: e.node.clinicName,
+                    addressCity: e.node.addressCustom?.addressCity ?? null,
+                    clinicStatus: e.node.status,
+                })),
+            );
+        } catch (err) {
+            console.error('[wizard/clinics] fetch failed', err);
+        }
+    }, []);
+
+    useEffect(() => {
+        fetchClinics();
+    }, [fetchClinics]);
+
+    const handleSave = async () => {
+        if (!values.clinicName.trim()) {
+            notify.error('Clinic name is required');
+            return;
+        }
+        setSaving(true);
+        try {
+            // 1. Core clinic record
+            const res = await apiClient.graphql<{ createClinic: { id: string } }>(
+                `mutation CreateClinic($data: ClinicCreateInput!) {
+                    createClinic(data: $data) { id }
+                }`,
+                { data: clinicCoreToGraphQLInput(values) },
+            );
+            const clinicId = res.createClinic.id;
+
+            // 2. Holidays
+            if (values.holidays.length > 0) {
+                const holidayInputs = holidayInputsFromForm(values, clinicId);
+                await Promise.all(
+                    holidayInputs.map((data) =>
+                        apiClient.graphql(
+                            `mutation CreateHoliday($data: HolidayCreateInput!) {
+                                createHoliday(data: $data) { id }
+                            }`,
+                            { data },
+                        ),
+                    ),
+                );
+            }
+
+            // 3. Required documents
+            if (values.requiredDocumentTypes.length > 0) {
+                const docInputs = requiredDocInputsFromForm(values, clinicId);
+                await Promise.all(
+                    docInputs.map((data) =>
+                        apiClient.graphql(
+                            `mutation CreateClinicRequiredDocument($data: ClinicRequiredDocumentCreateInput!) {
+                                createClinicRequiredDocument(data: $data) { id }
+                            }`,
+                            { data },
+                        ),
+                    ),
+                );
+            }
+
+            notify.success('Clinic added', values.clinicName);
+            await fetchClinics();
+            // Mark complete on first successful create. Don't auto-advance —
+            // admins typically add multiple clinics in one sitting; the
+            // Continue button on the wizard nav handles forward motion.
+            if (!props.isCompleted) {
+                await props.onComplete('clinics');
+            }
+            setValues(emptyClinicFormValues());
+        } catch (err) {
+            console.error('[wizard/clinics] save failed', err);
+        } finally {
+            setSaving(false);
+        }
+    };
+
+    // Same trick as the Team step: once at least one clinic exists,
+    // flip isCompleted=true so the WizardStep renders the "Continue"
+    // button as the primary action — the form stays open below for
+    // adding more clinics.
+    const pretendCompleted = props.isCompleted || clinics.length > 0;
+
+    return (
+        <WizardStep
+            step="clinics"
+            isCompleted={pretendCompleted}
+            isLast={props.isLast}
+            onPrev={props.onPrev}
+            onNext={props.onNext}
+            onMarkComplete={handleSave}
+            onFinish={props.onFinish}
+            saving={saving}
+            rightPane={<ClinicsRightPane clinics={clinics} />}
+        >
+            <ClinicForm value={values} onChange={setValues} />
+            <div className="mt-6 flex justify-end">
+                <button
+                    type="button"
+                    disabled={saving}
+                    onClick={handleSave}
+                    className="inline-flex items-center gap-2 rounded-lg bg-brand-solid px-4 py-2 text-sm font-semibold text-primary_on-brand shadow-xs transition hover:bg-brand-solid_hover disabled:opacity-60"
+                >
+                    {saving ? 'Adding…' : 'Add clinic'}
+                </button>
+            </div>
+        </WizardStep>
+    );
+};

src/components/setup/wizard-step-doctors.tsx

@@ -0,0 +1,150 @@
+import { useCallback, useEffect, useMemo, useState } from 'react';
+import { WizardStep } from './wizard-step';
+import { DoctorsRightPane, type DoctorSummary } from './wizard-right-panes';
+import {
+    DoctorForm,
+    doctorCoreToGraphQLInput,
+    visitSlotInputsFromForm,
+    emptyDoctorFormValues,
+    type DoctorFormValues,
+} from '@/components/forms/doctor-form';
+import { apiClient } from '@/lib/api-client';
+import { notify } from '@/lib/toast';
+import type { WizardStepComponentProps } from './wizard-step-types';
+
+// Doctor step — mirrors the clinics step but also fetches the clinic list
+// for the DoctorForm's clinic dropdown. If there are no clinics yet we let
+// the admin know they need to complete step 2 first (the wizard doesn't
+// force ordering, but a doctor without a clinic is useless).
+
+type ClinicLite = { id: string; clinicName: string | null };
+
+export const WizardStepDoctors = (props: WizardStepComponentProps) => {
+    const [values, setValues] = useState<DoctorFormValues>(emptyDoctorFormValues);
+    const [clinics, setClinics] = useState<ClinicLite[]>([]);
+    const [doctors, setDoctors] = useState<DoctorSummary[]>([]);
+    const [loadingClinics, setLoadingClinics] = useState(true);
+    const [saving, setSaving] = useState(false);
+
+    const fetchData = useCallback(async () => {
+        try {
+            const data = await apiClient.graphql<{
+                clinics: { edges: { node: ClinicLite }[] };
+                doctors: { edges: { node: DoctorSummary }[] };
+            }>(
+                `{
+                    clinics(first: 100) { edges { node { id clinicName } } }
+                    doctors(first: 100, orderBy: { createdAt: DescNullsLast }) {
+                        edges { node { id fullName { firstName lastName } department specialty } }
+                    }
+                }`,
+                undefined,
+                { silent: true },
+            );
+            setClinics(data.clinics.edges.map((e) => e.node));
+            setDoctors(data.doctors.edges.map((e) => e.node));
+        } catch (err) {
+            console.error('[wizard/doctors] fetch failed', err);
+            setClinics([]);
+            setDoctors([]);
+        } finally {
+            setLoadingClinics(false);
+        }
+    }, []);
+
+    useEffect(() => {
+        fetchData();
+    }, [fetchData]);
+
+    const clinicOptions = useMemo(
+        () => clinics.map((c) => ({ id: c.id, label: c.clinicName ?? 'Unnamed clinic' })),
+        [clinics],
+    );
+
+    const handleSave = async () => {
+        if (!values.firstName.trim() || !values.lastName.trim()) {
+            notify.error('First and last name are required');
+            return;
+        }
+        setSaving(true);
+        try {
+            // 1. Core doctor record
+            const res = await apiClient.graphql<{ createDoctor: { id: string } }>(
+                `mutation CreateDoctor($data: DoctorCreateInput!) {
+                    createDoctor(data: $data) { id }
+                }`,
+                { data: doctorCoreToGraphQLInput(values) },
+            );
+            const doctorId = res.createDoctor.id;
+
+            // 2. Visit slots (doctor can be at multiple clinics on
+            // multiple days with different times each).
+            const slotInputs = visitSlotInputsFromForm(values, doctorId);
+            if (slotInputs.length > 0) {
+                await Promise.all(
+                    slotInputs.map((data) =>
+                        apiClient.graphql(
+                            `mutation CreateDoctorVisitSlot($data: DoctorVisitSlotCreateInput!) {
+                                createDoctorVisitSlot(data: $data) { id }
+                            }`,
+                            { data },
+                        ),
+                    ),
+                );
+            }
+
+            notify.success('Doctor added', `Dr. ${values.firstName} ${values.lastName}`);
+            await fetchData();
+            if (!props.isCompleted) {
+                await props.onComplete('doctors');
+            }
+            setValues(emptyDoctorFormValues());
+        } catch (err) {
+            console.error('[wizard/doctors] save failed', err);
+        } finally {
+            setSaving(false);
+        }
+    };
+
+    const pretendCompleted = props.isCompleted || doctors.length > 0;
+
+    return (
+        <WizardStep
+            step="doctors"
+            isCompleted={pretendCompleted}
+            isLast={props.isLast}
+            onPrev={props.onPrev}
+            onNext={props.onNext}
+            onMarkComplete={handleSave}
+            onFinish={props.onFinish}
+            saving={saving}
+            rightPane={<DoctorsRightPane doctors={doctors} />}
+        >
+            {loadingClinics ? (
+                <p className="text-sm text-tertiary">Loading clinics…</p>
+            ) : clinics.length === 0 ? (
+                <div className="rounded-lg border border-dashed border-warning bg-warning-primary p-4">
+                    <p className="text-sm font-semibold text-warning-primary">Add a clinic first</p>
+                    <p className="mt-1 text-xs text-tertiary">
+                        You need at least one clinic before you can assign doctors. Go back to the{' '}
+                        <b>Clinics</b> step and add a branch first.
+                    </p>
+                </div>
+            ) : (
+                <>
+                    <DoctorForm value={values} onChange={setValues} clinics={clinicOptions} />
+                    <div className="mt-6 flex justify-end">
+                        <button
+                            type="button"
+                            disabled={saving}
+                            onClick={handleSave}
+                            className="inline-flex items-center gap-2 rounded-lg bg-brand-solid px-4 py-2 text-sm font-semibold text-primary_on-brand shadow-xs transition hover:bg-brand-solid_hover disabled:opacity-60"
+                        >
+                            {saving ? 'Adding…' : 'Add doctor'}
+                        </button>
+                    </div>
+                </>
+            )}
+        </WizardStep>
+    );
+};

src/components/setup/wizard-step-identity.tsx

@@ -0,0 +1,122 @@
+import { useEffect, useState } from 'react';
+import { Link } from 'react-router';
+import { Input } from '@/components/base/input/input';
+import { WizardStep } from './wizard-step';
+import { IdentityRightPane } from './wizard-right-panes';
+import { notify } from '@/lib/toast';
+import type { WizardStepComponentProps } from './wizard-step-types';
+
+// Minimal identity step — just the two most important fields (hospital name
+// and logo URL). Full branding (colors, fonts, login copy) is handled on the
+// /branding page and linked from here. Keeping the wizard lean means admins
+// can clear setup in under ten minutes; the branding page is there whenever
+// they want to polish further.
+
+const THEME_API_URL =
+    import.meta.env.VITE_THEME_API_URL ?? import.meta.env.VITE_API_URL ?? 'http://localhost:4100';
+
+export const WizardStepIdentity = (props: WizardStepComponentProps) => {
+    const [hospitalName, setHospitalName] = useState('');
+    const [logoUrl, setLogoUrl] = useState('');
+    const [loading, setLoading] = useState(true);
+    const [saving, setSaving] = useState(false);
+
+    useEffect(() => {
+        fetch(`${THEME_API_URL}/api/config/theme`)
+            .then((r) => (r.ok ? r.json() : null))
+            .then((data) => {
+                if (data?.brand) {
+                    setHospitalName(data.brand.hospitalName ?? '');
+                    setLogoUrl(data.brand.logo ?? '');
+                }
+            })
+            .catch(() => {
+                // non-fatal — admin can fill in fresh values
+            })
+            .finally(() => setLoading(false));
+    }, []);
+
+    const handleSave = async () => {
+        if (!hospitalName.trim()) {
+            notify.error('Hospital name is required');
+            return;
+        }
+        setSaving(true);
+        try {
+            const response = await fetch(`${THEME_API_URL}/api/config/theme`, {
+                method: 'PUT',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({
+                    brand: {
+                        hospitalName: hospitalName.trim(),
+                        logo: logoUrl.trim() || undefined,
+                    },
+                }),
+            });
+            if (!response.ok) throw new Error(`PUT /api/config/theme failed: ${response.status}`);
+            notify.success('Identity saved', 'Hospital name and logo updated.');
+            await props.onComplete('identity');
+            props.onAdvance();
+        } catch (err) {
+            notify.error('Save failed', 'Could not update hospital identity. Please try again.');
+            console.error('[wizard/identity] save failed', err);
+        } finally {
+            setSaving(false);
+        }
+    };
+
+    return (
+        <WizardStep
+            step="identity"
+            isCompleted={props.isCompleted}
+            isLast={props.isLast}
+            onPrev={props.onPrev}
+            onNext={props.onNext}
+            onMarkComplete={handleSave}
+            onFinish={props.onFinish}
+            saving={saving}
+            rightPane={<IdentityRightPane />}
+        >
+            {loading ? (
+                <p className="text-sm text-tertiary">Loading current branding…</p>
+            ) : (
+                <div className="flex flex-col gap-5">
+                    <Input
+                        label="Hospital name"
+                        isRequired
+                        placeholder="e.g. Ramaiah Memorial Hospital"
+                        value={hospitalName}
+                        onChange={setHospitalName}
+                    />
+                    <Input
+                        label="Logo URL"
+                        placeholder="https://yourhospital.com/logo.png"
+                        hint="Paste a URL to your hospital logo. Square images work best."
+                        value={logoUrl}
+                        onChange={setLogoUrl}
+                    />
+                    {logoUrl && (
+                        <div className="flex items-center gap-3 rounded-lg border border-secondary bg-secondary p-3">
+                            <span className="text-xs font-semibold text-tertiary">Preview:</span>
+                            <img
+                                src={logoUrl}
+                                alt="Logo preview"
+                                className="size-10 rounded-lg border border-secondary bg-primary object-contain p-1"
+                                onError={(e) => ((e.target as HTMLImageElement).style.display = 'none')}
+                            />
+                        </div>
+                    )}
+                    <div className="rounded-lg border border-dashed border-secondary bg-secondary p-4">
+                        <p className="text-xs text-tertiary">
+                            Need to pick brand colors, fonts, or customise the login page copy? Open the full{' '}
+                            <Link to="/branding" className="font-semibold text-brand-primary underline">
+                                branding settings
+                            </Link>{' '}
+                            page after completing setup.
+                        </p>
+                    </div>
+                </div>
+            )}
+        </WizardStep>
+    );
+};

src/components/setup/wizard-step-team.tsx

@@ -0,0 +1,441 @@
+import { useCallback, useEffect, useMemo, useState } from 'react';
+import { WizardStep } from './wizard-step';
+import { TeamRightPane, type TeamMemberSummary } from './wizard-right-panes';
+import {
+    EmployeeCreateForm,
+    emptyEmployeeCreateFormValues,
+    generateTempPassword,
+    type EmployeeCreateFormValues,
+    type RoleOption,
+} from '@/components/forms/employee-create-form';
+import { Button } from '@/components/base/buttons/button';
+import { apiClient } from '@/lib/api-client';
+import { notify } from '@/lib/toast';
+import { useAuth } from '@/providers/auth-provider';
+import type { WizardStepComponentProps } from './wizard-step-types';
+
+// Team step (post-rework) — creates workspace members directly from
+// the portal via the sidecar's /api/team/members endpoint. The admin
+// enters name + email + temp password + role. SIP seat assignment is
+// NOT done here — it lives exclusively in the Telephony wizard step
+// so admins manage one thing in one place.
+//
+// Edit mode: clicking the pencil icon on an employee row in the right
+// pane loads that member back into the form (name + role only — email,
+// password and SIP seat are not editable here). Save in edit mode
+// fires PUT /api/team/members/:id instead of POST.
+//
+// Email invitations are NOT used anywhere in this flow. The admin is
+// expected to share the temp password with the employee directly.
+// Recently-created employees keep their plaintext password in
+// component state so the right pane's copy icon can paste a
+// shareable credentials block to the clipboard. Page reload clears
+// that state — only employees created in the current session show
+// the copy icon. Older members get only the edit icon.
+
+// In-memory record of an employee the admin just created in this
+// session. Holds the plaintext temp password so the copy-icon flow
+// works without ever sending the password back from the server.
+type CreatedMemberRecord = {
+    id: string;
+    userEmail: string;
+    firstName: string;
+    lastName: string;
+    roleId: string;
+    tempPassword: string;
+};
+
+type RoleRow = {
+    id: string;
+    label: string;
+    description: string | null;
+    canBeAssignedToUsers: boolean;
+};
+
+type AgentRow = {
+    id: string;
+    name: string | null;
+    sipExtension: string | null;
+    ozonetelAgentId: string | null;
+    workspaceMemberId: string | null;
+    workspaceMember: {
+        id: string;
+        name: { firstName: string | null; lastName: string | null } | null;
+        userEmail: string;
+    } | null;
+};
+
+type WorkspaceMemberRow = {
+    id: string;
+    userEmail: string;
+    name: { firstName: string | null; lastName: string | null } | null;
+    // Platform returns `null` (not an empty array) for members with no
+    // role assigned — touching `.roles[0]` directly throws. Always
+    // optional-chain reads.
+    roles: { id: string; label: string }[] | null;
+};
+
+const AI_EMAIL_SUFFIX = '@ai.fortytwo.local';
+
+// Build the credentials block that gets copied to the clipboard. Two
+// lines (login url + email) plus the temp password — formatted so
+// the admin can paste it straight into WhatsApp / SMS. Login URL is
+// derived from the current browser origin since the wizard is always
+// loaded from the workspace's own URL (or Vite dev), so this matches
+// what the employee will use.
+const buildCredentialsBlock = (email: string, tempPassword: string): string => {
+    const origin = typeof window !== 'undefined' ? window.location.origin : '';
+    return `Login: ${origin}/login\nEmail: ${email}\nTemporary password: ${tempPassword}`;
+};
+
+export const WizardStepTeam = (props: WizardStepComponentProps) => {
+    const { user } = useAuth();
+    const currentUserEmail = user?.email ?? null;
+
+    // Initialise the form with a fresh temp password so the admin
+    // doesn't have to click "regenerate" before saving the very first
+    // employee.
+    const [values, setValues] = useState<EmployeeCreateFormValues>(() => ({
+        ...emptyEmployeeCreateFormValues,
+        password: generateTempPassword(),
+    }));
+    const [editingMemberId, setEditingMemberId] = useState<string | null>(null);
+    const [roles, setRoles] = useState<RoleOption[]>([]);
+    // Agents are still fetched (even though we don't show a SIP seat
+    // picker here) because the right-pane summary needs each member's
+    // current SIP extension to show the green badge.
+    const [agents, setAgents] = useState<AgentRow[]>([]);
+    const [members, setMembers] = useState<WorkspaceMemberRow[]>([]);
+    const [createdMembers, setCreatedMembers] = useState<CreatedMemberRecord[]>([]);
+    const [saving, setSaving] = useState(false);
+    const [loading, setLoading] = useState(true);
+
+    const isEditing = editingMemberId !== null;
+
+    const fetchRolesAndAgents = useCallback(async () => {
+        try {
+            const data = await apiClient.graphql<{
+                getRoles: RoleRow[];
+                agents: { edges: { node: AgentRow }[] };
+                workspaceMembers: { edges: { node: WorkspaceMemberRow }[] };
+            }>(
+                `{
+                    getRoles { id label description canBeAssignedToUsers }
+                    agents(first: 100) {
+                        edges { node {
+                            id name sipExtension ozonetelAgentId workspaceMemberId
+                            workspaceMember { id name { firstName lastName } userEmail }
+                        } }
+                    }
+                    workspaceMembers(first: 200) {
+                        edges { node {
+                            id userEmail name { firstName lastName }
+                            roles { id label }
+                        } }
+                    }
+                }`,
+                undefined,
+                { silent: true },
+            );
+            const assignable = data.getRoles.filter((r) => r.canBeAssignedToUsers);
+            setRoles(
+                assignable.map((r) => ({
+                    id: r.id,
+                    label: r.label,
+                    supportingText: r.description ?? undefined,
+                })),
+            );
+            setAgents(data.agents.edges.map((e) => e.node));
+            setMembers(
+                data.workspaceMembers.edges
+                    .map((e) => e.node)
+                    .filter((m) => !m.userEmail.endsWith(AI_EMAIL_SUFFIX)),
+            );
+        } catch (err) {
+            console.error('[wizard/team] fetch roles/agents failed', err);
+        } finally {
+            setLoading(false);
+        }
+    }, []);
+
+    useEffect(() => {
+        fetchRolesAndAgents();
+    }, [fetchRolesAndAgents]);
+
+    // Reset form back to a fresh "create" state with a new auto-gen
+    // password. Used after both create-success and edit-cancel.
+    const resetForm = () => {
+        setEditingMemberId(null);
+        setValues({
+            ...emptyEmployeeCreateFormValues,
+            password: generateTempPassword(),
+        });
+    };
+
+    const handleSaveCreate = async () => {
+        const firstName = values.firstName.trim();
+        const email = values.email.trim();
+        if (!firstName) {
+            notify.error('First name is required');
+            return;
+        }
+        if (!email) {
+            notify.error('Email is required');
+            return;
+        }
+        if (!values.password) {
+            notify.error('Temporary password is required');
+            return;
+        }
+        if (!values.roleId) {
+            notify.error('Pick a role');
+            return;
+        }
+
+        setSaving(true);
+        try {
+            const created = await apiClient.post<{
+                id: string;
+                userEmail: string;
+                firstName: string;
+                lastName: string;
+                roleId: string;
+            }>('/api/team/members', {
+                firstName,
+                lastName: values.lastName.trim(),
+                email,
+                password: values.password,
+                roleId: values.roleId,
+            });
+
+            // Stash the plaintext temp password alongside the created
+            // member so the copy-icon can build a credentials block
+            // later. The password is NOT sent back from the server —
+            // we hold the only copy in this component's memory.
+            setCreatedMembers((prev) => [
+                ...prev,
+                { ...created, tempPassword: values.password },
+            ]);
+            notify.success(
+                'Employee created',
+                `${firstName} ${values.lastName.trim()}`.trim() || email,
+            );
+            await fetchRolesAndAgents();
+            resetForm();
+            if (!props.isCompleted) {
+                await props.onComplete('team');
+            }
+        } catch (err) {
+            console.error('[wizard/team] create failed', err);
+        } finally {
+            setSaving(false);
+        }
+    };
+
+    const handleSaveUpdate = async () => {
+        if (!editingMemberId) return;
+        const firstName = values.firstName.trim();
+        if (!firstName) {
+            notify.error('First name is required');
+            return;
+        }
+        if (!values.roleId) {
+            notify.error('Pick a role');
+            return;
+        }
+        setSaving(true);
+        try {
+            await apiClient.put(`/api/team/members/${editingMemberId}`, {
+                firstName,
+                lastName: values.lastName.trim(),
+                roleId: values.roleId,
+            });
+            notify.success(
+                'Employee updated',
+                `${firstName} ${values.lastName.trim()}`.trim() || values.email,
+            );
+            await fetchRolesAndAgents();
+            resetForm();
+        } catch (err) {
+            console.error('[wizard/team] update failed', err);
+        } finally {
+            setSaving(false);
+        }
+    };
+
+    const handleSave = isEditing ? handleSaveUpdate : handleSaveCreate;
+
+    // Right-pane edit handler — populate the form with the picked
+    // member's data and switch into edit mode. Email is preserved as
+    // the row's email (read-only in edit mode); password is cleared
+    // since the form hides the field anyway.
+    const handleEditMember = (memberId: string) => {
+        const member = members.find((m) => m.id === memberId);
+        if (!member) return;
+        const firstRole = member.roles?.[0] ?? null;
+        setEditingMemberId(memberId);
+        setValues({
+            firstName: member.name?.firstName ?? '',
+            lastName: member.name?.lastName ?? '',
+            email: member.userEmail,
+            password: '',
+            roleId: firstRole?.id ?? '',
+        });
+    };
+
+    // Right-pane copy handler — build the shareable credentials block
+    // and put it on the clipboard. Only fires for members in the
+    // createdMembers in-memory map; rows without a known temp password
+    // don't show the icon at all.
+    const handleCopyCredentials = async (memberId: string) => {
+        const member = members.find((m) => m.id === memberId);
+        if (!member) return;
+
+        // Three-tier fallback:
+        //   1. In-browser memory (createdMembers state) — populated when
+        //      the admin created this employee in the current session,
+        //      survives until refresh. Fastest path, no network call.
+        //   2. Sidecar Redis cache via GET /api/team/members/:id/temp-password
+        //      — populated for any member created via this endpoint
+        //      within the last 24h, survives reloads.
+        //   3. Cache miss → tell the admin the password is no longer
+        //      recoverable and direct them to the platform reset flow.
+        const fromMemory =
+            createdMembers.find(
+                (c) => c.userEmail.toLowerCase() === member.userEmail.toLowerCase(),
+            ) ?? createdMembers.find((c) => c.id === memberId);
+        let tempPassword = fromMemory?.tempPassword ?? null;
+
+        if (!tempPassword) {
+            try {
+                const res = await apiClient.get<{ password: string | null }>(
+                    `/api/team/members/${memberId}/temp-password`,
+                    { silent: true },
+                );
+                tempPassword = res.password;
+            } catch (err) {
+                console.error('[wizard/team] temp-password fetch failed', err);
+            }
+        }
+
+        if (!tempPassword) {
+            notify.error(
+                'Password unavailable',
+                'The temp password expired (>24h). Reset the password from settings to mint a new one.',
+            );
+            return;
+        }
+
+        const block = buildCredentialsBlock(member.userEmail, tempPassword);
+        try {
+            await navigator.clipboard.writeText(block);
+            notify.success('Copied', 'Credentials copied to clipboard');
+        } catch (err) {
+            console.error('[wizard/team] clipboard write failed', err);
+            notify.error('Copy failed', 'Could not write to clipboard');
+        }
+    };
+
+    // Trick: we lie to WizardStep about isCompleted so that once at
+    // least one employee exists, the primary wizard button flips to
+    // "Continue" and the create form stays available below for more
+    // adds.
+    const pretendCompleted = props.isCompleted || members.length > 0 || createdMembers.length > 0;
+
+    // Build the right pane summary. Every non-admin row gets the
+    // copy icon — `canCopyCredentials: true` unconditionally — and
+    // the click handler figures out at action time whether to read
+    // from in-browser memory or the sidecar's Redis cache. If both
+    // are empty (>24h old), the click toasts a "password expired"
+    // message instead of silently failing.
+    const teamSummaries = useMemo<TeamMemberSummary[]>(
+        () =>
+            members.map((m) => {
+                const seat = agents.find((a) => a.workspaceMemberId === m.id);
+                const firstRole = m.roles?.[0] ?? null;
+                return {
+                    id: m.id,
+                    userEmail: m.userEmail,
+                    name: m.name,
+                    roleLabel: firstRole?.label ?? null,
+                    sipExtension: seat?.sipExtension ?? null,
+                    isCurrentUser: currentUserEmail !== null && m.userEmail === currentUserEmail,
+                    canCopyCredentials: true,
+                };
+            }),
+        [members, agents, currentUserEmail],
+    );
+
+    return (
+        <WizardStep
+            step="team"
+            isCompleted={pretendCompleted}
+            isLast={props.isLast}
+            onPrev={props.onPrev}
+            onNext={props.onNext}
+            onMarkComplete={handleSave}
+            onFinish={props.onFinish}
+            saving={saving}
+            rightPane={
+                <TeamRightPane
+                    members={teamSummaries}
+                    onEdit={handleEditMember}
+                    onCopy={handleCopyCredentials}
+                />
+            }
+        >
+            {loading ? (
+                <p className="text-sm text-tertiary">Loading team settings…</p>
+            ) : (
+                <div className="flex flex-col gap-6">
+                    <div className="rounded-lg border border-secondary bg-secondary p-4 text-xs text-tertiary">
+                        {isEditing ? (
+                            <p>
+                                Editing an existing employee. You can change their name and role.
+                                To change their SIP seat, go to the <b>Telephony</b> step.
+                            </p>
+                        ) : (
+                            <p>
+                                Create employees in-place. Each person gets an auto-generated
+                                temporary password that you share directly — no email
+                                invitations are sent. Click the eye icon to reveal it before
+                                you save. After creating CC agents, head to the <b>Telephony</b>{' '}
+                                step to assign them SIP seats.
+                            </p>
+                        )}
+                    </div>
+
+                    <EmployeeCreateForm
+                        value={values}
+                        onChange={setValues}
+                        roles={roles}
+                        mode={isEditing ? 'edit' : 'create'}
+                    />
+
+                    <div className="flex items-center justify-end gap-3">
+                        {isEditing && (
+                            <Button size="md" color="secondary" isDisabled={saving} onClick={resetForm}>
+                                Cancel
+                            </Button>
+                        )}
+                        <button
+                            type="button"
+                            disabled={saving}
+                            onClick={handleSave}
+                            className="inline-flex items-center gap-2 rounded-lg bg-brand-solid px-4 py-2 text-sm font-semibold text-primary_on-brand shadow-xs transition hover:bg-brand-solid_hover disabled:opacity-60"
+                        >
+                            {saving
+                                ? isEditing
+                                    ? 'Updating…'
+                                    : 'Creating…'
+                                : isEditing
+                                ? 'Update employee'
+                                : 'Create employee'}
+                        </button>
+                    </div>
+                </div>
+            )}
+        </WizardStep>
+    );
+};
+

src/components/setup/wizard-step-telephony.tsx

@@ -0,0 +1,322 @@
+import { useCallback, useEffect, useMemo, useState } from 'react';
+import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
+import { faHeadset, faTrash } from '@fortawesome/pro-duotone-svg-icons';
+import { WizardStep } from './wizard-step';
+import { TelephonyRightPane, type SipSeatSummary } from './wizard-right-panes';
+import { Select } from '@/components/base/select/select';
+import { Button } from '@/components/base/buttons/button';
+import { apiClient } from '@/lib/api-client';
+import { notify } from '@/lib/toast';
+import type { WizardStepComponentProps } from './wizard-step-types';
+
+// Telephony step (post-3-pane rework). The middle pane is now an
+// assign/unassign editor: pick a SIP seat, pick a workspace member,
+// click Assign — or pick an already-mapped seat and click Unassign.
+// The right pane shows the live current state (read-only mapping
+// summary). Editing here calls updateAgent to set/clear
+// workspaceMemberId, then refetches.
+//
+// SIP seats themselves are pre-provisioned by onboard-hospital.sh
+// (see step 5b) — admins can't add or delete seats from this UI,
+// only link them to people. To add a new seat, contact support.
+
+type AgentRow = {
+    id: string;
+    name: string | null;
+    sipExtension: string | null;
+    ozonetelAgentId: string | null;
+    workspaceMemberId: string | null;
+    workspaceMember: {
+        id: string;
+        name: { firstName: string | null; lastName: string | null } | null;
+        userEmail: string;
+    } | null;
+};
+
+type WorkspaceMemberRow = {
+    id: string;
+    userEmail: string;
+    name: { firstName: string | null; lastName: string | null } | null;
+};
+
+const AI_EMAIL_SUFFIX = '@ai.fortytwo.local';
+
+const memberDisplayName = (m: {
+    name: { firstName: string | null; lastName: string | null } | null;
+    userEmail: string;
+}): string => {
+    const first = m.name?.firstName?.trim() ?? '';
+    const last = m.name?.lastName?.trim() ?? '';
+    const full = `${first} ${last}`.trim();
+    return full.length > 0 ? full : m.userEmail;
+};
+
+export const WizardStepTelephony = (props: WizardStepComponentProps) => {
+    const [agents, setAgents] = useState<AgentRow[]>([]);
+    const [members, setMembers] = useState<WorkspaceMemberRow[]>([]);
+    const [loading, setLoading] = useState(true);
+    const [saving, setSaving] = useState(false);
+    // Editor state — which seat is selected, which member to assign.
+    const [selectedSeatId, setSelectedSeatId] = useState<string>('');
+    const [selectedMemberId, setSelectedMemberId] = useState<string>('');
+
+    const fetchData = useCallback(async () => {
+        try {
+            const data = await apiClient.graphql<{
+                agents: { edges: { node: AgentRow }[] };
+                workspaceMembers: { edges: { node: WorkspaceMemberRow }[] };
+            }>(
+                `{
+                    agents(first: 100) {
+                        edges { node {
+                            id name sipExtension ozonetelAgentId workspaceMemberId
+                            workspaceMember { id name { firstName lastName } userEmail }
+                        } }
+                    }
+                    workspaceMembers(first: 200) {
+                        edges { node {
+                            id userEmail name { firstName lastName }
+                        } }
+                    }
+                }`,
+                undefined,
+                { silent: true },
+            );
+            setAgents(data.agents.edges.map((e) => e.node));
+            setMembers(
+                data.workspaceMembers.edges
+                    .map((e) => e.node)
+                    .filter((m) => !m.userEmail.endsWith(AI_EMAIL_SUFFIX)),
+            );
+        } catch (err) {
+            console.error('[wizard/telephony] fetch failed', err);
+        } finally {
+            setLoading(false);
+        }
+    }, []);
+
+    useEffect(() => {
+        fetchData();
+    }, [fetchData]);
+
+    // Map every agent to a SipSeatSummary for the right pane. Single
+    // source of truth — both panes read from `agents`.
+    const seatSummaries = useMemo<SipSeatSummary[]>(
+        () =>
+            agents.map((a) => ({
+                id: a.id,
+                sipExtension: a.sipExtension,
+                ozonetelAgentId: a.ozonetelAgentId,
+                workspaceMember: a.workspaceMember,
+            })),
+        [agents],
+    );
+
+    // Pre-compute lookups for the editor — which member already owns
+    // each seat, and which members are already taken (so the dropdown
+    // can hide them).
+    const takenMemberIds = useMemo(
+        () =>
+            new Set(
+                agents
+                    .filter((a) => a.workspaceMemberId !== null)
+                    .map((a) => a.workspaceMemberId!),
+            ),
+        [agents],
+    );
+
+    const seatItems = useMemo(
+        () =>
+            agents.map((a) => ({
+                id: a.id,
+                label: `Ext ${a.sipExtension ?? '—'}`,
+                supportingText: a.workspaceMember
+                    ? `Currently: ${memberDisplayName(a.workspaceMember)}`
+                    : 'Unassigned',
+            })),
+        [agents],
+    );
+
+    // Members dropdown — when a seat is selected and the seat is
+    // currently mapped, force the member field to show the current
+    // owner so the admin can see who they're displacing. When seat
+    // is unassigned, only show free members (the takenMemberIds
+    // filter).
+    const memberItems = useMemo(() => {
+        const selectedSeat = agents.find((a) => a.id === selectedSeatId);
+        const currentOwnerId = selectedSeat?.workspaceMemberId ?? null;
+        return members
+            .filter((m) => m.id === currentOwnerId || !takenMemberIds.has(m.id))
+            .map((m) => ({
+                id: m.id,
+                label: memberDisplayName(m),
+                supportingText: m.userEmail,
+            }));
+    }, [members, agents, selectedSeatId, takenMemberIds]);
+
+    // When the admin picks a seat, default the member dropdown to
+    // whoever currently owns it (if anyone) so Unassign just works.
+    useEffect(() => {
+        if (!selectedSeatId) {
+            setSelectedMemberId('');
+            return;
+        }
+        const seat = agents.find((a) => a.id === selectedSeatId);
+        setSelectedMemberId(seat?.workspaceMemberId ?? '');
+    }, [selectedSeatId, agents]);
+
+    const selectedSeat = agents.find((a) => a.id === selectedSeatId);
+    const isCurrentlyMapped = selectedSeat?.workspaceMemberId !== null && selectedSeat?.workspaceMemberId !== undefined;
+
+    const updateSeat = async (seatId: string, workspaceMemberId: string | null) => {
+        setSaving(true);
+        try {
+            await apiClient.graphql(
+                `mutation UpdateAgent($id: UUID!, $data: AgentUpdateInput!) {
+                    updateAgent(id: $id, data: $data) { id workspaceMemberId }
+                }`,
+                { id: seatId, data: { workspaceMemberId } },
+            );
+            await fetchData();
+            // Mark the step complete on first successful action so
+            // the wizard can advance. Subsequent edits don't re-mark.
+            if (!props.isCompleted) {
+                await props.onComplete('telephony');
+            }
+            // Clear editor selection so the admin starts the next
+            // assign from scratch.
+            setSelectedSeatId('');
+            setSelectedMemberId('');
+        } catch (err) {
+            console.error('[wizard/telephony] updateAgent failed', err);
+        } finally {
+            setSaving(false);
+        }
+    };
+
+    const handleAssign = () => {
+        if (!selectedSeatId || !selectedMemberId) {
+            notify.error('Pick a seat and a member to assign');
+            return;
+        }
+        updateSeat(selectedSeatId, selectedMemberId);
+    };
+
+    const handleUnassign = () => {
+        if (!selectedSeatId) return;
+        updateSeat(selectedSeatId, null);
+    };
+
+    const pretendCompleted = props.isCompleted || agents.some((a) => a.workspaceMemberId !== null);
+
+    return (
+        <WizardStep
+            step="telephony"
+            isCompleted={pretendCompleted}
+            isLast={props.isLast}
+            onPrev={props.onPrev}
+            onNext={props.onNext}
+            onMarkComplete={async () => {
+                if (!props.isCompleted) {
+                    await props.onComplete('telephony');
+                }
+                props.onAdvance();
+            }}
+            onFinish={props.onFinish}
+            saving={saving}
+            rightPane={<TelephonyRightPane seats={seatSummaries} />}
+        >
+            {loading ? (
+                <p className="text-sm text-tertiary">Loading SIP seats…</p>
+            ) : agents.length === 0 ? (
+                <div className="rounded-lg border border-secondary bg-secondary p-6 text-sm text-tertiary">
+                    <p className="font-medium text-primary">No SIP seats configured</p>
+                    <p className="mt-1">
+                        This hospital has no pre-provisioned agent profiles. Contact support to
+                        add SIP seats, then come back to finish setup.
+                    </p>
+                </div>
+            ) : (
+                <div className="flex flex-col gap-5">
+                    <div className="rounded-lg border border-secondary bg-secondary p-4 text-xs text-tertiary">
+                        <p>
+                            Pick a SIP seat and assign it to a workspace member. To free up a seat,
+                            select it and click <b>Unassign</b>. The right pane shows the live
+                            mapping — what you change here updates there immediately.
+                        </p>
+                    </div>
+
+                    <Select
+                        label="SIP seat"
+                        placeholder="Select a seat"
+                        items={seatItems}
+                        selectedKey={selectedSeatId || null}
+                        onSelectionChange={(key) => setSelectedSeatId((key as string) || '')}
+                    >
+                        {(item) => (
+                            <Select.Item
+                                id={item.id}
+                                label={item.label}
+                                supportingText={item.supportingText}
+                            />
+                        )}
+                    </Select>
+
+                    <Select
+                        label="Workspace member"
+                        placeholder={
+                            !selectedSeatId
+                                ? 'Pick a seat first'
+                                : memberItems.length === 0
+                                ? 'No available members'
+                                : 'Select a member'
+                        }
+                        isDisabled={!selectedSeatId || memberItems.length === 0}
+                        items={memberItems}
+                        selectedKey={selectedMemberId || null}
+                        onSelectionChange={(key) => setSelectedMemberId((key as string) || '')}
+                    >
+                        {(item) => (
+                            <Select.Item
+                                id={item.id}
+                                label={item.label}
+                                supportingText={item.supportingText}
+                            />
+                        )}
+                    </Select>
+
+                    <div className="flex items-center justify-end gap-3">
+                        {isCurrentlyMapped && (
+                            <Button
+                                color="secondary-destructive"
+                                size="md"
+                                isDisabled={saving}
+                                onClick={handleUnassign}
+                                iconLeading={({ className }: { className?: string }) => (
+                                    <FontAwesomeIcon icon={faTrash} className={className} />
+                                )}
+                            >
+                                Unassign
+                            </Button>
+                        )}
+                        <Button
+                            color="primary"
+                            size="md"
+                            isDisabled={saving || !selectedSeatId || !selectedMemberId}
+                            onClick={handleAssign}
+                            iconLeading={({ className }: { className?: string }) => (
+                                <FontAwesomeIcon icon={faHeadset} className={className} />
+                            )}
+                        >
+                            {selectedSeat?.workspaceMemberId === selectedMemberId
+                                ? 'Already assigned'
+                                : isCurrentlyMapped
+                                ? 'Reassign'
+                                : 'Assign'}
+                        </Button>
+                    </div>
+                </div>
+            )}
+        </WizardStep>
+    );
+};

src/components/setup/wizard-step-types.ts

@@ -0,0 +1,20 @@
+import type { SetupStepName } from '@/lib/setup-state';
+
+// Shared prop shape for every wizard step. The parent (setup-wizard.tsx)
+// dispatches to the right component based on activeStep; each component
+// handles its own data loading, form state, and save action, then calls
+// onComplete + onAdvance when the user clicks "Mark complete".
+export type WizardStepComponentProps = {
+    isCompleted: boolean;
+    isLast: boolean;
+    onPrev: (() => void) | null;
+    onNext: (() => void) | null;
+    // Called by each step after a successful save. Parent handles both the
+    // markSetupStepComplete API call AND the local state update so the left
+    // nav reflects the new completion immediately.
+    onComplete: (step: SetupStepName) => Promise<void>;
+    // Move to the next step (used after a successful save, or directly via
+    // the Next button when the step is already complete).
+    onAdvance: () => void;
+    onFinish: () => void;
+};