Add backup images for login and background removal

- Added loginerps.png.bak (1134 KB) as a backup for the login image.
- Added whithoutbackground.png.bak (3455 KB) as a backup for the image without background.

.gitea/workflows/ci-cd.yml

@@ -1,106 +0,0 @@
-# test
-name: CI/CD - ERP Core Monorepo
-
-on:
-  pull_request:
-    branches:
-      - production
-    types:
-      - closed
-
-jobs:
-  backend-build-and-deploy:
-    name: Build & Deploy ERP Core Backend
-    runs-on: linux
-    if: github.event.pull_request.merged == true
-    steps:
-      - name: Checkout code
-        run: |
-          git clone \
-            --depth 1 \
-            --branch production \
-            https://oauth2:${{ secrets.ERPCORE }}@gitea.hexdive.com/New_REP_SYSTEM/ERP-core.git \
-            .
-
-      - name: Restore backend
-        working-directory: .gitea/workflows
-        run: dotnet restore ../../Backend/ERPCore.sln
-
-      - name: Publish backend
-        working-directory: .gitea/workflows
-        run: |
-          rm -rf /tmp/erpcore-deploy
-          mkdir -p /tmp/erpcore-deploy
-          dotnet publish ../../Backend/ERPCore/ERPCore.csproj \
-            -c Release \
-            -r linux-x64 \
-            --self-contained true \
-            -o /tmp/erpcore-deploy
-
-      - name: Stop backend service
-        run: systemctl stop erpcore.service
-
-      - name: Copy backend to deploy folder
-        run: |
-          mkdir -p /home/erp/core/publish
-          rm -rf /home/erp/core/publish/*
-          cp -r /tmp/erpcore-deploy/* /home/erp/core/publish/
-
-      - name: Fix backend ownership and permissions
-        run: |
-          chown -R erpuser:erpuser /home/erp/core/publish
-          find /home/erp/core/publish -type d -exec chmod 755 {} +
-          find /home/erp/core/publish -type f -exec chmod 644 {} +
-          chmod +x /home/erp/core/publish/ERPCore
-
-      - name: Restart backend service
-        run: systemctl restart erpcore.service
-
-      - name: Verify backend
-        run: |
-          systemctl is-active erpcore.service && echo "Backend service running" || echo "Backend service failed"
-
-  frontend-build-and-deploy:
-    name: Build & Deploy ERP Core Frontend
-    runs-on: linux
-    needs: backend-build-and-deploy
-    if: github.event.pull_request.merged == true
-    steps:
-      - name: Checkout code
-        run: |
-          git clone \
-            --depth 1 \
-            --branch Production \
-            https://oauth2:${{ secrets.ERPCORE }}@gitea.hexdive.com/New_REP_SYSTEM/ERP-core.git \
-            .
-
-      - name: Build frontend Docker image
-        working-directory: .gitea/workflows
-        run: docker build -t erpcore-frontend:latest ../../Frontend/erp-system
-
-      - name: Stop & remove existing frontend container
-        run: |
-          docker stop erpcore-frontend 2>/dev/null || true
-          docker rm erpcore-frontend 2>/dev/null || true
-
-      - name: Start frontend container
-        run: |
-          docker run -d \
-            --name erpcore-frontend \
-            -p 6702:6702 \
-            --add-host=host.docker.internal:host-gateway \
-            -e BACKEND_ORIGIN=http://host.docker.internal:6701 \
-            --restart unless-stopped \
-            --memory="512m" \
-            --cpus="1.0" \
-            --cap-drop ALL \
-            --security-opt no-new-privileges \
-            erpcore-frontend:latest
-
-      - name: Remove old frontend images
-        run: docker image prune -f
-
-      - name: Verify frontend
-        run: |
-          docker ps --filter name=erpcore-frontend --format "table {{.Names}}\t{{.Status}}\t{{.Ports}}" \
-            | grep erpcore-frontend && echo "Frontend container running" || echo "Frontend container failed"

Backend/ERPCore/Controllers/AuthController.cs

@@ -27,15 +27,13 @@ public sealed class AuthController : ControllerBase
     private readonly IAuthRecoveryService _recovery;
     private readonly IAuthAltService _alt;
     private readonly IRoleService _roles;
-    private readonly IAuditService _audit;
 
-    public AuthController(IAuthUserService users, IAuthRecoveryService recovery, IAuthAltService alt, IRoleService roles, IAuditService audit)
+    public AuthController(IAuthUserService users, IAuthRecoveryService recovery, IAuthAltService alt, IRoleService roles)
     {
         _users = users;
         _recovery = recovery;
         _alt = alt;
         _roles = roles;
-        _audit = audit;
     }
 
     /// <summary>
@@ -70,7 +68,6 @@ public sealed class AuthController : ControllerBase
     {
         var result = await _users.LoginAsync(request, ct);
         AuthCookieWriter.WriteSession(Response, result.AccessToken, result.RefreshToken, result.Body.ExpiresIn);
-        if (result.Body.User?.UserId is Guid authUserId) await _audit.RecordLoginAsync(authUserId, ClientIp(), ClientUserAgent(), ct);
         return Ok(result.Body);
     }
 
@@ -81,13 +78,9 @@ public sealed class AuthController : ControllerBase
     {
         var result = await _users.VerifyOtpForLoginAsync(request, ct);
         AuthCookieWriter.WriteSession(Response, result.AccessToken, result.RefreshToken, result.Body.ExpiresIn);
-        if (result.Body.User?.UserId is Guid authUserId) await _audit.RecordLoginAsync(authUserId, ClientIp(), ClientUserAgent(), ct);
         return Ok(result.Body);
     }
 
-    private string? ClientIp() => HttpContext.Connection.RemoteIpAddress?.ToString();
-    private string? ClientUserAgent() => Request.Headers.UserAgent.ToString() is { Length: > 0 } ua ? ua : null;
-
     [HttpPost("refresh-token")]
     [AllowAnonymous]
     [ProducesResponseType(typeof(AuthSessionResponse), StatusCodes.Status200OK)]

Backend/ERPCore/Controllers/BranchConfigController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Dtos.Config;
 using ERPCore.Services.Interfaces;
 using Microsoft.AspNetCore.Mvc;
@@ -16,7 +14,6 @@ namespace ERPCore.Controllers;
 /// </para>
 /// </summary>
 [Route("api/v1/branch-config")]
-[Authorize(Policy = NavPolicies.Prefix + "settings")]
 public sealed class BranchConfigController : ApiControllerBase
 {
     private readonly IBranchConfigService _config;

Backend/ERPCore/Controllers/BrandsController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Domain.Enums;
 using ERPCore.Dtos.Brands;
 using ERPCore.Dtos.Common;
@@ -10,7 +8,6 @@ namespace ERPCore.Controllers;
 
 /// <summary>Brand master endpoints (docs/11-BACKEND-PHASE1.md §2.6).</summary>
 [Route("api/v1/brands")]
-[Authorize(Policy = NavPolicies.Prefix + "products")]
 public sealed class BrandsController : ApiControllerBase
 {
     private readonly IBrandService _brands;

Backend/ERPCore/Controllers/BundleSalesController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Domain.Enums;
 using ERPCore.Dtos.Common;
 using ERPCore.Dtos.Sales;
@@ -9,7 +7,6 @@ using Microsoft.AspNetCore.Mvc;
 namespace ERPCore.Controllers;
 
 [Route("api/v1/bundle-sales")]
-[Authorize(Policy = NavPolicies.Prefix + "sales")]
 public sealed class BundleSalesController : ApiControllerBase
 {
     private readonly IBundleSaleService _bundles;

Backend/ERPCore/Controllers/CategoriesController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Domain.Enums;
 using ERPCore.Dtos.Categories;
 using ERPCore.Dtos.Common;
@@ -14,7 +12,6 @@ namespace ERPCore.Controllers;
 /// <c>?tree=true</c> parameter is gone along with the self-nesting model.
 /// </summary>
 [Route("api/v1/categories")]
-[Authorize(Policy = NavPolicies.Prefix + "products")]
 public sealed class CategoriesController : ApiControllerBase
 {
     private readonly ICategoryService _categories;

Backend/ERPCore/Controllers/CustomersController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Domain.Enums;
 using ERPCore.Dtos.Common;
 using ERPCore.Dtos.Customers;
@@ -10,7 +8,6 @@ namespace ERPCore.Controllers;
 
 /// <summary>Customer master endpoints for Phase 1 sales.</summary>
 [Route("api/v1/customers")]
-[Authorize(Policy = NavPolicies.Prefix + "sales")]
 public sealed class CustomersController : ApiControllerBase
 {
     private readonly ICustomerService _customers;

Backend/ERPCore/Controllers/DashboardController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Dtos.Dashboard;
 using ERPCore.Services.Interfaces;
 using Microsoft.AspNetCore.Mvc;
@@ -8,7 +6,6 @@ namespace ERPCore.Controllers;
 
 /// <summary>Dashboard overview stats — cross-domain counts, not a stored entity.</summary>
 [Route("api/v1/dashboard")]
-[Authorize(Policy = NavPolicies.Prefix + "dashboard")]
 public sealed class DashboardController : ApiControllerBase
 {
     private readonly IDashboardService _dashboard;

Backend/ERPCore/Controllers/FreeIssuesController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Domain.Enums;
 using ERPCore.Dtos.Common;
 using ERPCore.Dtos.Sales;
@@ -14,7 +12,6 @@ namespace ERPCore.Controllers;
 /// the existing sales-slip CRUD surface under a more business-friendly route.
 /// </summary>
 [Route("api/v1/free-issues")]
-[Authorize(Policy = NavPolicies.Prefix + "sales")]
 public sealed class FreeIssuesController : ApiControllerBase
 {
     private readonly ISalesSlipService _slips;

Backend/ERPCore/Controllers/GeneralLedgerController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Services.Interfaces;
 using Microsoft.AspNetCore.Mvc;
 
@@ -16,7 +14,6 @@ namespace ERPCore.Controllers;
 /// only and is never exposed to the frontend.
 /// </summary>
 [Route("api/v1/gl")]
-[Authorize(Policy = NavPolicies.Prefix + "ledgers")]
 public sealed class GeneralLedgerController : ApiControllerBase
 {
     private readonly IGeneralLedgerService _gl;

Backend/ERPCore/Controllers/GrnsController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Domain.Enums;
 using ERPCore.Dtos.Common;
 using ERPCore.Dtos.Grn;
@@ -10,7 +8,6 @@ namespace ERPCore.Controllers;
 
 /// <summary>Goods-receipt endpoints (docs/11 §4).</summary>
 [Route("api/v1/grns")]
-[Authorize(Policy = NavPolicies.Prefix + "receiving")]
 public sealed class GrnsController : ApiControllerBase
 {
     private readonly IGrnService _grns;

Backend/ERPCore/Controllers/Hrm/BranchesController.cs

@@ -61,14 +61,4 @@ public sealed class BranchesController : ApiControllerBase
         await _branches.SetStatusAsync(branchId, request.Status, ct);
         return NoContent();
     }
-
-    [HttpDelete("{branchId:int}")]
-    [ProducesResponseType(StatusCodes.Status204NoContent)]
-    [ProducesResponseType(StatusCodes.Status404NotFound)]
-    [ProducesResponseType(StatusCodes.Status409Conflict)]
-    public async Task<IActionResult> Delete(int branchId, CancellationToken ct)
-    {
-        await _branches.DeleteAsync(branchId, ct);
-        return NoContent();
-    }
 }

Backend/ERPCore/Controllers/Hrm/DepartmentsController.cs

@@ -62,14 +62,4 @@ public sealed class DepartmentsController : ApiControllerBase
         await _departments.SetStatusAsync(departmentId, request.Status, ct);
         return NoContent();
     }
-
-    [HttpDelete("{departmentId:int}")]
-    [ProducesResponseType(StatusCodes.Status204NoContent)]
-    [ProducesResponseType(StatusCodes.Status404NotFound)]
-    [ProducesResponseType(StatusCodes.Status409Conflict)]
-    public async Task<IActionResult> Delete(int departmentId, CancellationToken ct)
-    {
-        await _departments.DeleteAsync(departmentId, ct);
-        return NoContent();
-    }
 }

Backend/ERPCore/Controllers/Hrm/DesignationsController.cs

@@ -61,14 +61,4 @@ public sealed class DesignationsController : ApiControllerBase
         await _designations.SetStatusAsync(designationId, request.Status, ct);
         return NoContent();
     }
-
-    [HttpDelete("{designationId:int}")]
-    [ProducesResponseType(StatusCodes.Status204NoContent)]
-    [ProducesResponseType(StatusCodes.Status404NotFound)]
-    [ProducesResponseType(StatusCodes.Status409Conflict)]
-    public async Task<IActionResult> Delete(int designationId, CancellationToken ct)
-    {
-        await _designations.DeleteAsync(designationId, ct);
-        return NoContent();
-    }
 }

Backend/ERPCore/Controllers/Hrm/EmployeesController.cs

@@ -83,6 +83,7 @@ public sealed class EmployeesController : ApiControllerBase
         return Ok(result.Value);
     }
 
+    /// <summary>Never a hard delete — Employee is retained forever (docs/12-BACKEND-HRM.md C.2).</summary>
     [HttpPatch("{employeeId:int}/status")]
     [ProducesResponseType(StatusCodes.Status204NoContent)]
     [ProducesResponseType(StatusCodes.Status404NotFound)]
@@ -92,17 +93,6 @@ public sealed class EmployeesController : ApiControllerBase
         return NoContent();
     }
 
-    /// <summary>Permanently deletes the employee and all dependent HR records. Blocked (409) if payroll history exists.</summary>
-    [HttpDelete("{employeeId:int}")]
-    [ProducesResponseType(typeof(EmployeeDeleteResultDto), StatusCodes.Status200OK)]
-    [ProducesResponseType(StatusCodes.Status404NotFound)]
-    [ProducesResponseType(StatusCodes.Status409Conflict)]
-    public async Task<ActionResult<EmployeeDeleteResultDto>> Delete(int employeeId, [FromQuery] bool deleteUserAccount, CancellationToken ct)
-    {
-        var result = await _employees.DeleteAsync(employeeId, deleteUserAccount, ct);
-        return Ok(result);
-    }
-
     [HttpPost("{employeeId:int}/link-user")]
     [ProducesResponseType(StatusCodes.Status204NoContent)]
     [ProducesResponseType(StatusCodes.Status404NotFound)]

Backend/ERPCore/Controllers/Hrm/EmploymentTypesController.cs

@@ -61,14 +61,4 @@ public sealed class EmploymentTypesController : ApiControllerBase
         await _employmentTypes.SetStatusAsync(employmentTypeId, request.Status, ct);
         return NoContent();
     }
-
-    [HttpDelete("{employmentTypeId:int}")]
-    [ProducesResponseType(StatusCodes.Status204NoContent)]
-    [ProducesResponseType(StatusCodes.Status404NotFound)]
-    [ProducesResponseType(StatusCodes.Status409Conflict)]
-    public async Task<IActionResult> Delete(int employmentTypeId, CancellationToken ct)
-    {
-        await _employmentTypes.DeleteAsync(employmentTypeId, ct);
-        return NoContent();
-    }
 }

Backend/ERPCore/Controllers/Hrm/HrDocumentTypesController.cs

@@ -61,14 +61,4 @@ public sealed class HrDocumentTypesController : ApiControllerBase
         await _types.SetStatusAsync(hrDocumentTypeId, request.Status, ct);
         return NoContent();
     }
-
-    [HttpDelete("{hrDocumentTypeId:int}")]
-    [ProducesResponseType(StatusCodes.Status204NoContent)]
-    [ProducesResponseType(StatusCodes.Status404NotFound)]
-    [ProducesResponseType(StatusCodes.Status409Conflict)]
-    public async Task<IActionResult> Delete(int hrDocumentTypeId, CancellationToken ct)
-    {
-        await _types.DeleteAsync(hrDocumentTypeId, ct);
-        return NoContent();
-    }
 }

Backend/ERPCore/Controllers/Hrm/LeaveTypesController.cs

@@ -61,14 +61,4 @@ public sealed class LeaveTypesController : ApiControllerBase
         await _leaveTypes.SetStatusAsync(leaveTypeId, request.Status, ct);
         return NoContent();
     }
-
-    [HttpDelete("{leaveTypeId:int}")]
-    [ProducesResponseType(StatusCodes.Status204NoContent)]
-    [ProducesResponseType(StatusCodes.Status404NotFound)]
-    [ProducesResponseType(StatusCodes.Status409Conflict)]
-    public async Task<IActionResult> Delete(int leaveTypeId, CancellationToken ct)
-    {
-        await _leaveTypes.DeleteAsync(leaveTypeId, ct);
-        return NoContent();
-    }
 }

Backend/ERPCore/Controllers/Hrm/SalaryComponentsController.cs

@@ -61,14 +61,4 @@ public sealed class SalaryComponentsController : ApiControllerBase
         await _components.SetStatusAsync(salaryComponentId, request.Status, ct);
         return NoContent();
     }
-
-    [HttpDelete("{salaryComponentId:int}")]
-    [ProducesResponseType(StatusCodes.Status204NoContent)]
-    [ProducesResponseType(StatusCodes.Status404NotFound)]
-    [ProducesResponseType(StatusCodes.Status409Conflict)]
-    public async Task<IActionResult> Delete(int salaryComponentId, CancellationToken ct)
-    {
-        await _components.DeleteAsync(salaryComponentId, ct);
-        return NoContent();
-    }
 }

Backend/ERPCore/Controllers/Hrm/WorkShiftsController.cs

@@ -61,14 +61,4 @@ public sealed class WorkShiftsController : ApiControllerBase
         await _shifts.SetStatusAsync(workShiftId, request.Status, ct);
         return NoContent();
     }
-
-    [HttpDelete("{workShiftId:int}")]
-    [ProducesResponseType(StatusCodes.Status204NoContent)]
-    [ProducesResponseType(StatusCodes.Status404NotFound)]
-    [ProducesResponseType(StatusCodes.Status409Conflict)]
-    public async Task<IActionResult> Delete(int workShiftId, CancellationToken ct)
-    {
-        await _shifts.DeleteAsync(workShiftId, ct);
-        return NoContent();
-    }
 }

Backend/ERPCore/Controllers/ItemTypesController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Domain.Enums;
 using ERPCore.Dtos.Common;
 using ERPCore.Dtos.ItemTypes;
@@ -15,7 +13,6 @@ namespace ERPCore.Controllers;
 /// into the client-generated SKU (docs/10 Part C.9).
 /// </summary>
 [Route("api/v1/item-types")]
-[Authorize(Policy = NavPolicies.Prefix + "products")]
 public sealed class ItemTypesController : ApiControllerBase
 {
     private readonly IItemTypeService _itemTypes;

Backend/ERPCore/Controllers/ItemsController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Domain.Enums;
 using ERPCore.Dtos.Common;
 using ERPCore.Dtos.Items;
@@ -10,7 +8,6 @@ namespace ERPCore.Controllers;
 
 /// <summary>Item master endpoints (docs/11-BACKEND-PHASE1.md §2.1–2.2).</summary>
 [Route("api/v1/items")]
-[Authorize(Policy = NavPolicies.Prefix + "products")]
 public sealed class ItemsController : ApiControllerBase
 {
     private readonly IItemService _items;
@@ -30,17 +27,6 @@ public sealed class ItemsController : ApiControllerBase
         CancellationToken ct)
         => Ok(await _items.ListAsync(query, status, categoryId, subCategoryId, brandId, trackingMode, ct));
 
-    /// <summary>Barcode/RFID lookup — matches an item's barcode/SKU, or a batch/serial
-    /// barcode/no (optionally scoped to <paramref name="itemId"/> first).</summary>
-    [HttpGet("scan")]
-    [ProducesResponseType(typeof(ItemScanResultDto), StatusCodes.Status200OK)]
-    [ProducesResponseType(StatusCodes.Status404NotFound)]
-    public async Task<ActionResult<ItemScanResultDto>> Scan([FromQuery] string code, [FromQuery] int? itemId, CancellationToken ct)
-    {
-        var result = await _items.ScanAsync(code, itemId, ct);
-        return result is null ? NotFound() : Ok(result);
-    }
-
     /// <summary>Get a single item; returns an <c>ETag</c> for optimistic concurrency.</summary>
     [HttpGet("{itemId:int}")]
     [ProducesResponseType(typeof(ItemDetailDto), StatusCodes.Status200OK)]

Backend/ERPCore/Controllers/JournalEntriesController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Dtos.Audit;
 using ERPCore.Dtos.Common;
 using ERPCore.Services.Interfaces;
@@ -12,7 +10,6 @@ namespace ERPCore.Controllers;
 /// Data only — no posting in Phase 1.
 /// </summary>
 [Route("api/v1/journal-entries")]
-[Authorize(Policy = NavPolicies.Prefix + "ledgers")]
 public sealed class JournalEntriesController : ApiControllerBase
 {
     private readonly IAuditService _audit;

Backend/ERPCore/Controllers/NotificationConfigController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Dtos.Notifications;
 using ERPCore.Services.Interfaces;
 using Microsoft.AspNetCore.Mvc;
@@ -7,7 +5,6 @@ using Microsoft.AspNetCore.Mvc;
 namespace ERPCore.Controllers;
 
 [Route("api/v1/notification-config")]
-[Authorize(Policy = NavPolicies.Prefix + "settings")]
 public sealed class NotificationConfigController : ApiControllerBase
 {
     private readonly INotificationConfigService _config;

Backend/ERPCore/Controllers/NotificationsController.cs

@@ -1,32 +0,0 @@
-using ERPCore.Infra.Auth;
-using ERPCore.Services.Interfaces;
-using Microsoft.AspNetCore.Mvc;
-
-namespace ERPCore.Controllers;
-
-[Route("api/v1/notifications")]
-public sealed class NotificationsController : ApiControllerBase
-{
-    private readonly INotificationService _notifications;
-    private readonly ICurrentUser _currentUser;
-
-    public NotificationsController(INotificationService notifications, ICurrentUser currentUser)
-    {
-        _notifications = notifications;
-        _currentUser = currentUser;
-    }
-
-    [HttpGet]
-    public async Task<ActionResult> Get([FromQuery] int take = 20, CancellationToken ct = default)
-    {
-        var feed = await _notifications.GetFeedAsync(_currentUser.AuditUserId, take, ct);
-        return Ok(feed);
-    }
-
-    [HttpPost("mark-all-read")]
-    public async Task<ActionResult> MarkAllRead(CancellationToken ct)
-    {
-        await _notifications.MarkAllReadAsync(_currentUser.AuditUserId, ct);
-        return NoContent();
-    }
-}

Backend/ERPCore/Controllers/ProductConfigController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Dtos.Config;
 using ERPCore.Services.Interfaces;
 using Microsoft.AspNetCore.Mvc;
@@ -18,7 +16,6 @@ namespace ERPCore.Controllers;
 /// </para>
 /// </summary>
 [Route("api/v1/product-config")]
-[Authorize(Policy = NavPolicies.Prefix + "products")]
 public sealed class ProductConfigController : ApiControllerBase
 {
     private readonly IProductConfigService _config;

Backend/ERPCore/Controllers/ProductionRunsController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Domain.Enums;
 using ERPCore.Dtos.Common;
 using ERPCore.Dtos.Production;
@@ -10,7 +8,6 @@ namespace ERPCore.Controllers;
 
 /// <summary>Production run endpoints (docs/30-BACKEND-PHASE2.md §D.2–D.3).</summary>
 [Route("api/v1/production-runs")]
-[Authorize(Policy = NavPolicies.Prefix + "production")]
 public sealed class ProductionRunsController : ApiControllerBase
 {
     private readonly IProductionRunService _runs;

Backend/ERPCore/Controllers/ProductionTemplatesController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Domain.Enums;
 using ERPCore.Dtos.Common;
 using ERPCore.Dtos.Production;
@@ -10,7 +8,6 @@ namespace ERPCore.Controllers;
 
 /// <summary>Production template endpoints (docs/30-BACKEND-PHASE2.md §D.1).</summary>
 [Route("api/v1/production-templates")]
-[Authorize(Policy = NavPolicies.Prefix + "production")]
 public sealed class ProductionTemplatesController : ApiControllerBase
 {
     private readonly IProductionTemplateService _templates;

Backend/ERPCore/Controllers/PurchaseInvoicesController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Domain.Enums;
 using ERPCore.Dtos.Common;
 using ERPCore.Dtos.Grn;
@@ -11,7 +9,6 @@ namespace ERPCore.Controllers;
 
 /// <summary>Purchase invoice endpoints — vendor invoices consolidating Confirmed GRNs.</summary>
 [Route("api/v1/purchase-invoices")]
-[Authorize(Policy = NavPolicies.Prefix + "procurement")]
 public sealed class PurchaseInvoicesController : ApiControllerBase
 {
     private readonly IPurchaseInvoiceService _invoices;

Backend/ERPCore/Controllers/PurchaseOrdersController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Domain.Enums;
 using ERPCore.Dtos.Common;
 using ERPCore.Dtos.Procurement;
@@ -10,7 +8,6 @@ namespace ERPCore.Controllers;
 
 /// <summary>Purchase-order endpoints (docs/11 §3.3).</summary>
 [Route("api/v1/purchase-orders")]
-[Authorize(Policy = NavPolicies.Prefix + "procurement")]
 public sealed class PurchaseOrdersController : ApiControllerBase
 {
     private readonly IPurchaseOrderService _pos;
@@ -35,7 +32,7 @@ public sealed class PurchaseOrdersController : ApiControllerBase
         return Ok(result.Value);
     }
 
-    /// <summary>Create a PO — non-draft is issued straight into PendingApproval (FR-PROC-04). Totals computed server-side.</summary>
+    /// <summary>Create a PO — auto-approved on creation in Phase 1 (FR-PROC-04). Totals computed server-side.</summary>
     [HttpPost]
     [ProducesResponseType(typeof(PurchaseOrderDto), StatusCodes.Status201Created)]
     [ProducesResponseType(StatusCodes.Status422UnprocessableEntity)]
@@ -60,7 +57,7 @@ public sealed class PurchaseOrdersController : ApiControllerBase
         return Ok(result.Value);
     }
 
-    /// <summary>Submit a Draft PO (Draft → PendingApproval). 409 PO_NOT_EDITABLE if not Draft.</summary>
+    /// <summary>Submit a Draft PO (Draft → Approved). 409 PO_NOT_EDITABLE if not Draft.</summary>
     [HttpPost("{poId:int}/submit")]
     [ProducesResponseType(typeof(PurchaseOrderDto), StatusCodes.Status200OK)]
     [ProducesResponseType(StatusCodes.Status404NotFound)]
@@ -70,7 +67,6 @@ public sealed class PurchaseOrdersController : ApiControllerBase
 
     /// <summary>Delete a PO — permitted only while Draft (409 PO_NOT_EDITABLE otherwise).</summary>
     [HttpDelete("{poId:int}")]
-    [Authorize(Policy = NavPolicies.Prefix + "procurement" + NavPolicies.ActionSeparator + NavPolicies.DeleteAction)]
     [ProducesResponseType(StatusCodes.Status204NoContent)]
     [ProducesResponseType(StatusCodes.Status404NotFound)]
     [ProducesResponseType(StatusCodes.Status409Conflict)]
@@ -80,28 +76,13 @@ public sealed class PurchaseOrdersController : ApiControllerBase
         return NoContent();
     }
 
-    /// <summary>Approve — PendingApproval → Approved. 403 PO_APPROVAL_FORBIDDEN if the caller
-    /// isn't an Admin or is the PO's own creator; 409 PO_NOT_PENDING_APPROVAL otherwise.</summary>
+    /// <summary>Approve — no-op in Phase 1 (POs auto-approve); transitions PendingApproval→Approved when enabled.</summary>
     [HttpPost("{poId:int}/approve")]
-    [Authorize(Policy = NavPolicies.Prefix + "procurement" + NavPolicies.ActionSeparator + NavPolicies.ApproveAction)]
     [ProducesResponseType(typeof(PurchaseOrderDto), StatusCodes.Status200OK)]
-    [ProducesResponseType(StatusCodes.Status403Forbidden)]
     [ProducesResponseType(StatusCodes.Status404NotFound)]
-    [ProducesResponseType(StatusCodes.Status409Conflict)]
     public async Task<ActionResult<PurchaseOrderDto>> Approve(int poId, CancellationToken ct)
         => Ok(await _pos.ApproveAsync(poId, ct));
 
-    /// <summary>Reject — PendingApproval → Draft, so the requester can revise and resubmit.
-    /// Same caller restrictions as <see cref="Approve"/>.</summary>
-    [HttpPost("{poId:int}/reject")]
-    [Authorize(Policy = NavPolicies.Prefix + "procurement" + NavPolicies.ActionSeparator + NavPolicies.ApproveAction)]
-    [ProducesResponseType(typeof(PurchaseOrderDto), StatusCodes.Status200OK)]
-    [ProducesResponseType(StatusCodes.Status403Forbidden)]
-    [ProducesResponseType(StatusCodes.Status404NotFound)]
-    [ProducesResponseType(StatusCodes.Status409Conflict)]
-    public async Task<ActionResult<PurchaseOrderDto>> Reject(int poId, [FromBody] RejectPurchaseOrderRequest request, CancellationToken ct)
-        => Ok(await _pos.RejectAsync(poId, request.Reason, ct));
-
     /// <summary>Cancel — 409 if any goods have been received against the PO.</summary>
     [HttpPost("{poId:int}/cancel")]
     [ProducesResponseType(typeof(PurchaseOrderDto), StatusCodes.Status200OK)]

Backend/ERPCore/Controllers/PurchaseReturnsController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Dtos.Common;
 using ERPCore.Dtos.Procurement;
 using ERPCore.Services.Interfaces;
@@ -9,7 +7,6 @@ namespace ERPCore.Controllers;
 
 /// <summary>Purchase-return endpoints (docs/11 §3.4).</summary>
 [Route("api/v1/purchase-returns")]
-[Authorize(Policy = NavPolicies.Prefix + "procurement")]
 public sealed class PurchaseReturnsController : ApiControllerBase
 {
     private readonly IPurchaseReturnService _returns;

Backend/ERPCore/Controllers/RequisitionsController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Domain.Enums;
 using ERPCore.Dtos.Common;
 using ERPCore.Dtos.Procurement;
@@ -10,7 +8,6 @@ namespace ERPCore.Controllers;
 
 /// <summary>Purchase-requisition endpoints (docs/11 §3.1).</summary>
 [Route("api/v1/requisitions")]
-[Authorize(Policy = NavPolicies.Prefix + "procurement")]
 public sealed class RequisitionsController : ApiControllerBase
 {
     private readonly IRequisitionService _requisitions;

Backend/ERPCore/Controllers/RfqsController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Domain.Enums;
 using ERPCore.Dtos.Common;
 using ERPCore.Dtos.Procurement;
@@ -10,7 +8,6 @@ namespace ERPCore.Controllers;
 
 /// <summary>RFQ &amp; quotation endpoints (docs/11 §3.2).</summary>
 [Route("api/v1/rfqs")]
-[Authorize(Policy = NavPolicies.Prefix + "procurement")]
 public sealed class RfqsController : ApiControllerBase
 {
     private readonly IRfqService _rfqs;

Backend/ERPCore/Controllers/RolesController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Domain.Enums;
 using ERPCore.Dtos.Common;
 using ERPCore.Dtos.Rbac;
@@ -10,7 +8,6 @@ namespace ERPCore.Controllers;
 
 /// <summary>Role CRUD + permission assignment (mirrors AuthHex's Role; see docs/10 C.9).</summary>
 [Route("api/v1/roles")]
-[Authorize(Policy = NavPolicies.Prefix + "settings")]
 public sealed class RolesController : ApiControllerBase
 {
     private readonly IRoleService _roles;
@@ -67,7 +64,6 @@ public sealed class RolesController : ApiControllerBase
     }
 
     [HttpDelete("{roleId:int}")]
-    [Authorize(Policy = NavPolicies.Prefix + "settings" + NavPolicies.ActionSeparator + NavPolicies.DeleteAction)]
     [ProducesResponseType(StatusCodes.Status204NoContent)]
     [ProducesResponseType(StatusCodes.Status404NotFound)]
     [ProducesResponseType(StatusCodes.Status409Conflict)]

Backend/ERPCore/Controllers/SalesDayEndController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Dtos.Common;
 using ERPCore.Dtos.Sales;
 using ERPCore.Services.Interfaces;
@@ -10,7 +8,6 @@ namespace ERPCore.Controllers;
 /// <summary>Cashier day-end close-out — locks a cashier's Posted sales slips for a business
 /// date and posts one consolidated GL journal entry for the day (docs/14 Sales API).</summary>
 [Route("api/v1/sales-day-end")]
-[Authorize(Policy = NavPolicies.Prefix + "sales")]
 public sealed class SalesDayEndController : ApiControllerBase
 {
     private readonly ISalesDayEndService _dayEnds;

Backend/ERPCore/Controllers/SalesInvoicesController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Domain.Enums;
 using ERPCore.Dtos.Common;
 using ERPCore.Dtos.Sales;
@@ -9,7 +7,6 @@ using Microsoft.AspNetCore.Mvc;
 namespace ERPCore.Controllers;
 
 [Route("api/v1/sales-invoices")]
-[Authorize(Policy = NavPolicies.Prefix + "sales")]
 public sealed class SalesInvoicesController : ApiControllerBase
 {
     private readonly ISalesInvoiceService _invoices;

Backend/ERPCore/Controllers/SalesReportsController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Dtos.Sales;
 using ERPCore.Services.Interfaces;
 using Microsoft.AspNetCore.Mvc;
@@ -7,7 +5,6 @@ using Microsoft.AspNetCore.Mvc;
 namespace ERPCore.Controllers;
 
 [Route("api/v1/reports/sales")]
-[Authorize(Policy = NavPolicies.Prefix + "sales")]
 public sealed class SalesReportsController : ApiControllerBase
 {
     private readonly ISalesReportService _reports;

Backend/ERPCore/Controllers/SalesReturnsController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Dtos.Common;
 using ERPCore.Dtos.Sales;
 using ERPCore.Services.Interfaces;
@@ -9,7 +7,6 @@ namespace ERPCore.Controllers;
 
 /// <summary>Sales-return endpoints — customer returns of previously sold goods.</summary>
 [Route("api/v1/sales-returns")]
-[Authorize(Policy = NavPolicies.Prefix + "sales")]
 public sealed class SalesReturnsController : ApiControllerBase
 {
     private readonly ISalesReturnService _returns;

Backend/ERPCore/Controllers/SalesSlipPromotionsController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Dtos.Sales;
 using ERPCore.Services.Interfaces;
 using Microsoft.AspNetCore.Mvc;
@@ -7,7 +5,6 @@ using Microsoft.AspNetCore.Mvc;
 namespace ERPCore.Controllers;
 
 [Route("api/v1/sales-slips/{salesSlipId:int}/free-issue-suggestions")]
-[Authorize(Policy = NavPolicies.Prefix + "sales")]
 public sealed class SalesSlipPromotionsController : ApiControllerBase
 {
     private readonly ISalesPromotionSuggestionService _suggestions;

Backend/ERPCore/Controllers/SalesSlipsController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Domain.Enums;
 using ERPCore.Dtos.Common;
 using ERPCore.Dtos.Sales;
@@ -9,7 +7,6 @@ using Microsoft.AspNetCore.Mvc;
 namespace ERPCore.Controllers;
 
 [Route("api/v1/sales-slips")]
-[Authorize(Policy = NavPolicies.Prefix + "sales")]
 public sealed class SalesSlipsController : ApiControllerBase
 {
     private readonly ISalesSlipService _slips;

Backend/ERPCore/Controllers/SearchController.cs

@@ -1,20 +0,0 @@
-using ERPCore.Dtos.Search;
-using ERPCore.Services.Interfaces;
-using Microsoft.AspNetCore.Mvc;
-
-namespace ERPCore.Controllers;
-
-[Route("api/v1/search")]
-public sealed class SearchController : ApiControllerBase
-{
-    private readonly IGlobalSearchService _search;
-
-    public SearchController(IGlobalSearchService search) => _search = search;
-
-    [HttpGet]
-    public async Task<ActionResult<IReadOnlyList<GlobalSearchResultDto>>> Get([FromQuery] string q, CancellationToken ct)
-    {
-        var results = await _search.SearchAsync(q, 6, ct);
-        return Ok(results);
-    }
-}

Backend/ERPCore/Controllers/StockAdjustmentsController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Dtos.Common;
 using ERPCore.Dtos.Stock;
 using ERPCore.Services.Interfaces;
@@ -9,7 +7,6 @@ namespace ERPCore.Controllers;
 
 /// <summary>Stock-adjustment endpoints (docs/11 §5.5).</summary>
 [Route("api/v1/stock-adjustments")]
-[Authorize(Policy = NavPolicies.Prefix + "stock")]
 public sealed class StockAdjustmentsController : ApiControllerBase
 {
     private readonly IAdjustmentService _adjustments;

Backend/ERPCore/Controllers/StockController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Dtos.Common;
 using ERPCore.Dtos.Procurement;
 using ERPCore.Dtos.Stock;
@@ -10,7 +8,6 @@ namespace ERPCore.Controllers;
 
 /// <summary>Stock enquiry, ledger, valuation and reorder-alert endpoints (docs/11 §5.1–5.3, §5.7).</summary>
 [Route("api/v1/stock")]
-[Authorize(Policy = NavPolicies.Prefix + "stock")]
 public sealed class StockController : ApiControllerBase
 {
     private readonly IStockService _stock;

Backend/ERPCore/Controllers/StockCountsController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Domain.Enums;
 using ERPCore.Dtos.Common;
 using ERPCore.Dtos.Stock;
@@ -10,7 +8,6 @@ namespace ERPCore.Controllers;
 
 /// <summary>Stock-count endpoints (docs/11 §5.6).</summary>
 [Route("api/v1/stock-counts")]
-[Authorize(Policy = NavPolicies.Prefix + "stock")]
 public sealed class StockCountsController : ApiControllerBase
 {
     private readonly ICountService _counts;

Backend/ERPCore/Controllers/StockTransfersController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Domain.Enums;
 using ERPCore.Dtos.Common;
 using ERPCore.Dtos.Stock;
@@ -10,7 +8,6 @@ namespace ERPCore.Controllers;
 
 /// <summary>Stock-transfer endpoints (docs/11 §5.4).</summary>
 [Route("api/v1/stock-transfers")]
-[Authorize(Policy = NavPolicies.Prefix + "stock")]
 public sealed class StockTransfersController : ApiControllerBase
 {
     private readonly ITransferService _transfers;

Backend/ERPCore/Controllers/SubCategoriesController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Dtos.Categories;
 using ERPCore.Services.Interfaces;
 using Microsoft.AspNetCore.Mvc;
@@ -12,7 +10,6 @@ namespace ERPCore.Controllers;
 /// since a subcategory only exists in the context of one.
 /// </summary>
 [Route("api/v1/subcategories")]
-[Authorize(Policy = NavPolicies.Prefix + "products")]
 public sealed class SubCategoriesController : ApiControllerBase
 {
     private readonly ICategoryService _categories;

Backend/ERPCore/Controllers/SupportTicketsController.cs

@@ -1,70 +0,0 @@
-using ERPCore.Dtos.Support;
-using ERPCore.Infra.Auth;
-using ERPCore.Services.Interfaces;
-using Microsoft.AspNetCore.Mvc;
-
-namespace ERPCore.Controllers;
-
-[Route("api/v1/support-tickets")]
-public sealed class SupportTicketsController : ApiControllerBase
-{
-    private readonly ISupportTicketService _tickets;
-    private readonly ICurrentUser _currentUser;
-
-    public SupportTicketsController(ISupportTicketService tickets, ICurrentUser currentUser)
-    {
-        _tickets = tickets;
-        _currentUser = currentUser;
-    }
-
-    [HttpPost]
-    [ProducesResponseType(typeof(SupportTicketDto), StatusCodes.Status201Created)]
-    public async Task<ActionResult<SupportTicketDto>> Create([FromBody] CreateSupportTicketRequest request, CancellationToken ct)
-    {
-        var result = await _tickets.CreateAsync(_currentUser.AuditUserId, request, ct);
-        SetETag(result.RowVersion);
-        return CreatedAtAction(nameof(GetById), new { id = result.Value.TicketId }, result.Value);
-    }
-
-    [HttpGet]
-    [ProducesResponseType(typeof(IReadOnlyList<SupportTicketSummaryDto>), StatusCodes.Status200OK)]
-    public async Task<ActionResult<IReadOnlyList<SupportTicketSummaryDto>>> GetList(CancellationToken ct)
-    {
-        var list = await _tickets.GetListAsync(_currentUser.AuditUserId, _currentUser.IsAdmin, ct);
-        return Ok(list);
-    }
-
-    [HttpGet("{id:int}")]
-    [ProducesResponseType(typeof(SupportTicketDto), StatusCodes.Status200OK)]
-    [ProducesResponseType(StatusCodes.Status404NotFound)]
-    public async Task<ActionResult<SupportTicketDto>> GetById(int id, CancellationToken ct)
-    {
-        var result = await _tickets.GetByIdAsync(id, _currentUser.AuditUserId, _currentUser.IsAdmin, ct);
-        SetETag(result.RowVersion);
-        return Ok(result.Value);
-    }
-
-    [HttpPost("{id:int}/messages")]
-    [ProducesResponseType(typeof(SupportTicketDto), StatusCodes.Status200OK)]
-    [ProducesResponseType(StatusCodes.Status404NotFound)]
-    [ProducesResponseType(StatusCodes.Status412PreconditionFailed)]
-    public async Task<ActionResult<SupportTicketDto>> AddMessage(int id, [FromBody] AddSupportTicketMessageRequest request, CancellationToken ct)
-    {
-        var expected = RequireIfMatch();
-        var result = await _tickets.AddMessageAsync(id, _currentUser.AuditUserId, _currentUser.IsAdmin, request, expected, ct);
-        SetETag(result.RowVersion);
-        return Ok(result.Value);
-    }
-
-    [HttpPut("{id:int}/status")]
-    [ProducesResponseType(typeof(SupportTicketDto), StatusCodes.Status200OK)]
-    [ProducesResponseType(StatusCodes.Status404NotFound)]
-    [ProducesResponseType(StatusCodes.Status412PreconditionFailed)]
-    public async Task<ActionResult<SupportTicketDto>> UpdateStatus(int id, [FromBody] UpdateSupportTicketStatusRequest request, CancellationToken ct)
-    {
-        var expected = RequireIfMatch();
-        var result = await _tickets.UpdateStatusAsync(id, _currentUser.AuditUserId, _currentUser.IsAdmin, request, expected, ct);
-        SetETag(result.RowVersion);
-        return Ok(result.Value);
-    }
-}

Backend/ERPCore/Controllers/TaxRatesController.cs

@@ -1,70 +0,0 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
-using ERPCore.Domain.Enums;
-using ERPCore.Dtos.Common;
-using ERPCore.Dtos.TaxRates;
-using ERPCore.Services.Interfaces;
-using Microsoft.AspNetCore.Mvc;
-
-namespace ERPCore.Controllers;
-
-/// <summary>Tax rate master endpoints — see <see cref="Domain.Entities.TaxRate"/>.</summary>
-[Route("api/v1/tax-rates")]
-[Authorize(Policy = NavPolicies.Prefix + "products")]
-public sealed class TaxRatesController : ApiControllerBase
-{
-    private readonly ITaxRateService _taxRates;
-
-    public TaxRatesController(ITaxRateService taxRates) => _taxRates = taxRates;
-
-    [HttpGet]
-    [ProducesResponseType(typeof(PagedResponse<TaxRateDto>), StatusCodes.Status200OK)]
-    public async Task<ActionResult<PagedResponse<TaxRateDto>>> List(
-        [FromQuery] PageQuery query, [FromQuery] EntityStatus? status, CancellationToken ct)
-        => Ok(await _taxRates.ListAsync(query, status, ct));
-
-    [HttpGet("{taxRateId:int}")]
-    [ProducesResponseType(typeof(TaxRateDto), StatusCodes.Status200OK)]
-    [ProducesResponseType(StatusCodes.Status404NotFound)]
-    public async Task<ActionResult<TaxRateDto>> GetById(int taxRateId, CancellationToken ct)
-    {
-        var result = await _taxRates.GetAsync(taxRateId, ct);
-        if (result is null) return NotFound();
-
-        SetETag(result.RowVersion);
-        return Ok(result.Value);
-    }
-
-    [HttpPost]
-    [ProducesResponseType(typeof(TaxRateDto), StatusCodes.Status201Created)]
-    [ProducesResponseType(StatusCodes.Status409Conflict)]
-    public async Task<ActionResult<TaxRateDto>> Create([FromBody] CreateTaxRateRequest request, CancellationToken ct)
-    {
-        var result = await _taxRates.CreateAsync(request, ct);
-        SetETag(result.RowVersion);
-        return Created($"/api/v1/tax-rates/{result.Value.TaxRateId}", result.Value);
-    }
-
-    [HttpPut("{taxRateId:int}")]
-    [ProducesResponseType(typeof(TaxRateDto), StatusCodes.Status200OK)]
-    [ProducesResponseType(StatusCodes.Status404NotFound)]
-    [ProducesResponseType(StatusCodes.Status409Conflict)]
-    [ProducesResponseType(StatusCodes.Status412PreconditionFailed)]
-    public async Task<ActionResult<TaxRateDto>> Update(int taxRateId, [FromBody] UpdateTaxRateRequest request, CancellationToken ct)
-    {
-        var expected = RequireIfMatch();
-        var result = await _taxRates.UpdateAsync(taxRateId, request, expected, ct);
-        SetETag(result.RowVersion);
-        return Ok(result.Value);
-    }
-
-    /// <summary>Deactivate/reactivate. Masters are never hard-deleted (FR-MD-08).</summary>
-    [HttpPatch("{taxRateId:int}/status")]
-    [ProducesResponseType(StatusCodes.Status204NoContent)]
-    [ProducesResponseType(StatusCodes.Status404NotFound)]
-    public async Task<IActionResult> SetStatus(int taxRateId, [FromBody] UpdateTaxRateStatusRequest request, CancellationToken ct)
-    {
-        await _taxRates.SetStatusAsync(taxRateId, request.Status, ct);
-        return NoContent();
-    }
-}

Backend/ERPCore/Controllers/UomsController.cs

@@ -1,6 +1,4 @@
 using ERPCore.Domain.Enums;
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Dtos.Common;
 using ERPCore.Dtos.Uoms;
 using ERPCore.Services.Interfaces;
@@ -10,7 +8,6 @@ namespace ERPCore.Controllers;
 
 /// <summary>Unit-of-measure endpoints (docs/11-BACKEND-PHASE1.md §2.2).</summary>
 [Route("api/v1/uoms")]
-[Authorize(Policy = NavPolicies.Prefix + "products")]
 public sealed class UomsController : ApiControllerBase
 {
     private readonly IUomService _uoms;

Backend/ERPCore/Controllers/UsersController.cs

@@ -1,13 +1,8 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Domain.Enums;
-using ERPCore.Dtos.Audit;
-using ERPCore.Dtos.Auth;
 using ERPCore.Dtos.Common;
 using ERPCore.Dtos.Hrm;
 using ERPCore.Dtos.Users;
 using ERPCore.Infra.Auth;
 using ERPCore.Services.Interfaces;
-using ERPCore.System.Errors;
 using Microsoft.AspNetCore.Mvc;
 
 namespace ERPCore.Controllers;
@@ -17,19 +12,16 @@ namespace ERPCore.Controllers;
 /// account creation orchestrated against AuthHex (see <see cref="IUserManagementService.CreateAsync"/>).
 /// </summary>
 [Route("api/v1/users")]
-[Authorize(Policy = NavPolicies.Prefix + "settings")]
 public sealed class UsersController : ApiControllerBase
 {
     private readonly IUserManagementService _users;
     private readonly IEmployeeUserLinkService _links;
-    private readonly IAuditService _audit;
     private readonly ICurrentUser _currentUser;
 
-    public UsersController(IUserManagementService users, IEmployeeUserLinkService links, IAuditService audit, ICurrentUser currentUser)
+    public UsersController(IUserManagementService users, IEmployeeUserLinkService links, ICurrentUser currentUser)
     {
         _users = users;
         _links = links;
-        _audit = audit;
         _currentUser = currentUser;
     }
 
@@ -41,8 +33,8 @@ public sealed class UsersController : ApiControllerBase
 
     [HttpGet]
     [ProducesResponseType(typeof(PagedResponse<ManagedUserDto>), StatusCodes.Status200OK)]
-    public async Task<ActionResult<PagedResponse<ManagedUserDto>>> List([FromQuery] PageQuery query, [FromQuery] EntityStatus? status, [FromQuery] string? roleCode, CancellationToken ct)
-        => Ok(await _users.ListAsync(query, status, roleCode, ct));
+    public async Task<ActionResult<PagedResponse<ManagedUserDto>>> List([FromQuery] PageQuery query, CancellationToken ct)
+        => Ok(await _users.ListAsync(query, ct));
 
     /// <summary>AuthHex UserType options for the create-user form's select.</summary>
     [HttpGet("user-types")]
@@ -73,34 +65,4 @@ public sealed class UsersController : ApiControllerBase
     [ProducesResponseType(StatusCodes.Status404NotFound)]
     public async Task<ActionResult<ManagedUserDto>> UpdateRole(int userId, [FromBody] UpdateUserRoleRequest request, CancellationToken ct)
         => Ok(await _users.UpdateRoleAsync(userId, request, ct));
-
-    /// <summary>Revokes/restores standing inside ERPCore only — see <see cref="IUserManagementService.SetStatusAsync"/>.</summary>
-    [HttpPatch("{userId:int}/status")]
-    [ProducesResponseType(typeof(ManagedUserDto), StatusCodes.Status200OK)]
-    [ProducesResponseType(StatusCodes.Status404NotFound)]
-    public async Task<ActionResult<ManagedUserDto>> UpdateStatus(int userId, [FromBody] UpdateUserStatusRequest request, CancellationToken ct)
-        => Ok(await _users.SetStatusAsync(userId, request.Status, ct));
-
-    /// <summary>Device/login history ERPCore captures itself — not AuthHex's "currently active sessions"
-    /// (which only ever reports the caller's own). See <see cref="IAuditService.ListLoginDevicesAsync"/>.</summary>
-    [HttpGet("{userId:int}/login-devices")]
-    [ProducesResponseType(typeof(PagedResponse<LoginActivityDto>), StatusCodes.Status200OK)]
-    public async Task<ActionResult<PagedResponse<LoginActivityDto>>> ListLoginDevices(int userId, [FromQuery] PageQuery query, CancellationToken ct)
-        => Ok(await _audit.ListLoginDevicesAsync(userId, query, ct));
-
-    /// <summary>
-    /// Admin-only escape hatch: permanently deletes a stale AuthHex identity (by email/mobile/NIC/
-    /// username) that is blocking new registrations. Does not touch ERPCore's own `users` table.
-    /// See <see cref="IUserManagementService.PurgeAuthHexIdentityAsync"/>.
-    /// </summary>
-    [HttpPost("purge-authhex-identity")]
-    [ProducesResponseType(typeof(DeleteAuthHexUserResult), StatusCodes.Status200OK)]
-    [ProducesResponseType(StatusCodes.Status403Forbidden)]
-    public async Task<ActionResult<DeleteAuthHexUserResult>> PurgeAuthHexIdentity([FromBody] PurgeAuthHexIdentityRequest request, CancellationToken ct)
-    {
-        if (!_currentUser.IsAdmin)
-            throw new DomainException("FORBIDDEN", "Only an administrator can purge an AuthHex identity.", 403);
-
-        return Ok(await _users.PurgeAuthHexIdentityAsync(request, ct));
-    }
 }

Backend/ERPCore/Controllers/VendorsController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Domain.Enums;
 using ERPCore.Dtos.Common;
 using ERPCore.Dtos.Vendors;
@@ -10,7 +8,6 @@ namespace ERPCore.Controllers;
 
 /// <summary>Vendor master endpoints (docs/11-BACKEND-PHASE1.md §2.4).</summary>
 [Route("api/v1/vendors")]
-[Authorize(Policy = NavPolicies.Prefix + "vendors")]
 public sealed class VendorsController : ApiControllerBase
 {
     private readonly IVendorService _vendors;

Backend/ERPCore/Controllers/WarehousesController.cs

@@ -1,5 +1,3 @@
-using Microsoft.AspNetCore.Authorization;
-using ERPCore.Infra.Auth;
 using ERPCore.Dtos.Common;
 using ERPCore.Dtos.Warehouses;
 using ERPCore.Services.Interfaces;
@@ -9,7 +7,6 @@ namespace ERPCore.Controllers;
 
 /// <summary>Warehouse &amp; bin endpoints (docs/11-BACKEND-PHASE1.md §2.5).</summary>
 [Route("api/v1/warehouses")]
-[Authorize(Policy = NavPolicies.Prefix + "warehouses")]
 public sealed class WarehousesController : ApiControllerBase
 {
     private readonly IWarehouseService _warehouses;
@@ -18,9 +15,8 @@ public sealed class WarehousesController : ApiControllerBase
 
     [HttpGet]
     [ProducesResponseType(typeof(PagedResponse<WarehouseDto>), StatusCodes.Status200OK)]
-    public async Task<ActionResult<PagedResponse<WarehouseDto>>> List(
-        [FromQuery] PageQuery query, [FromQuery] int? branchId, CancellationToken ct)
-        => Ok(await _warehouses.ListAsync(query, branchId, ct));
+    public async Task<ActionResult<PagedResponse<WarehouseDto>>> List([FromQuery] PageQuery query, CancellationToken ct)
+        => Ok(await _warehouses.ListAsync(query, ct));
 
     [HttpGet("{warehouseId:int}")]
     [ProducesResponseType(typeof(WarehouseDto), StatusCodes.Status200OK)]
@@ -40,24 +36,6 @@ public sealed class WarehousesController : ApiControllerBase
         return Created($"/api/v1/warehouses/{dto.WarehouseId}", dto);
     }
 
-    [HttpPut("{warehouseId:int}")]
-    [ProducesResponseType(typeof(WarehouseDto), StatusCodes.Status200OK)]
-    [ProducesResponseType(StatusCodes.Status404NotFound)]
-    [ProducesResponseType(StatusCodes.Status409Conflict)]
-    public async Task<ActionResult<WarehouseDto>> Update(int warehouseId, [FromBody] UpdateWarehouseRequest request, CancellationToken ct)
-        => Ok(await _warehouses.UpdateAsync(warehouseId, request, ct));
-
-    [HttpDelete("{warehouseId:int}")]
-    [Authorize(Policy = NavPolicies.Prefix + "warehouses" + NavPolicies.ActionSeparator + NavPolicies.DeleteAction)]
-    [ProducesResponseType(StatusCodes.Status204NoContent)]
-    [ProducesResponseType(StatusCodes.Status404NotFound)]
-    [ProducesResponseType(StatusCodes.Status409Conflict)]
-    public async Task<IActionResult> Delete(int warehouseId, CancellationToken ct)
-    {
-        await _warehouses.DeleteAsync(warehouseId, ct);
-        return NoContent();
-    }
-
     [HttpGet("{warehouseId:int}/bins")]
     [ProducesResponseType(typeof(IReadOnlyList<BinDto>), StatusCodes.Status200OK)]
     [ProducesResponseType(StatusCodes.Status404NotFound)]

Backend/ERPCore/Domain/Entities/Batch.cs

@@ -13,7 +13,4 @@ public class Batch
 
     public string BatchNo { get; set; } = string.Empty;
     public DateOnly? ExpiryDate { get; set; }
-
-    /// <summary>Optional scan code for barcode/RFID lookup (unique when set).</summary>
-    public string? Barcode { get; set; }
 }

Backend/ERPCore/Domain/Entities/BranchConfig.cs

@@ -17,12 +17,6 @@ public class BranchConfig
 
     public bool BranchingEnabled { get; set; } = true;
 
-    /// <summary>Independent sub-toggle: when the global <see cref="BranchingEnabled"/> is on
-    /// but this is off, Warehouses stop asking for/showing a branch while Employees etc.
-    /// still do. Meaningless when <see cref="BranchingEnabled"/> is off (everything is
-    /// single-branch already).</summary>
-    public bool WarehouseBranchingEnabled { get; set; } = true;
-
     public DateTime? UpdatedAt { get; set; }
 
     public int? UpdatedBy { get; set; }

Backend/ERPCore/Domain/Entities/Customer.cs

@@ -29,9 +29,6 @@ public class Customer
     public int? DefaultWarehouseId { get; set; }
     public Warehouse? DefaultWarehouse { get; set; }
 
-    public int BranchId { get; set; }
-    public Branch? Branch { get; set; }
-
     public EntityStatus Status { get; set; } = EntityStatus.Active;
     public DateTime CreatedAt { get; set; }
     public DateTime? UpdatedAt { get; set; }

Backend/ERPCore/Domain/Entities/Employee.cs

@@ -6,10 +6,8 @@ namespace ERPCore.Domain.Entities;
 /// Staff record (FR-HR-MD-02) — distinct from <see cref="User"/> (the system login
 /// account): not every employee has a login, and not every login belongs to an
 /// employee. <see cref="UserId"/> is the optional, explicit, human-confirmed link
-/// between the two (docs/12-BACKEND-HRM.md A.5/C.2, Part B.3.2). Normal separation is
-/// recorded via <see cref="Status"/> + <see cref="LastWorkingDate"/> rather than deletion;
-/// an explicit hard delete is also available (<see cref="Services.Interfaces.IEmployeeService.DeleteAsync"/>)
-/// and cascades to every dependent HR record, blocked only if payroll history exists.
+/// between the two (docs/12-BACKEND-HRM.md A.5/C.2, Part B.3.2). Never hard-deleted —
+/// separation is recorded via <see cref="Status"/> + <see cref="LastWorkingDate"/>.
 /// <see cref="EmployeeCode"/> is user-entered (not <see cref="NumberSequence"/>-issued):
 /// HR departments keep their own legacy numbering scheme, and NumberSequence's
 /// year-scoping is the wrong shape for an identifier that must never look "reset".

Backend/ERPCore/Domain/Entities/Grn.cs

@@ -22,11 +22,6 @@ public class Grn
     public int WarehouseId { get; set; }
     public Warehouse? Warehouse { get; set; }
 
-    /// <summary>Owning branch, set explicitly at creation — warehouses are shared across
-    /// branches, so branch scope can no longer be derived from <see cref="Warehouse"/>.</summary>
-    public int BranchId { get; set; }
-    public Branch? Branch { get; set; }
-
     public GrnStatus Status { get; set; } = GrnStatus.Draft;
 
     public int CreatedBy { get; set; }

Backend/ERPCore/Domain/Entities/Item.cs

@@ -14,9 +14,6 @@ public class Item
     public string Name { get; set; } = string.Empty;
     public string? Description { get; set; }
 
-    /// <summary>Optional scan code for barcode/RFID lookup (unique when set).</summary>
-    public string? Barcode { get; set; }
-
     public int CategoryId { get; set; }
     public Category? Category { get; set; }
 
@@ -44,14 +41,7 @@ public class Item
     public Warranty Warranty { get; set; } = Warranty.NonWarranty;
     /// <summary>Coverage length in months (see <see cref="Enums.WarrantyPeriods.AllowedMonths"/>) when <see cref="Warranty"/> is Warranty; null otherwise.</summary>
     public int? WarrantyPeriodMonths { get; set; }
-
-    /// <summary>
-    /// The tax rate a sales/purchase line for this item defaults to (see
-    /// <see cref="TaxRate"/>) — replaces the old free-text "tax class" label that nothing
-    /// ever read. Null means no default; a line must be given an explicit tax percentage.
-    /// </summary>
-    public int? TaxRateId { get; set; }
-    public TaxRate? TaxRate { get; set; }
+    public string? TaxClass { get; set; }
 
     /// <summary>
     /// Optional selling price range and flat price used by Sales only.

Backend/ERPCore/Domain/Entities/LoginActivity.cs

@@ -1,22 +0,0 @@
-namespace ERPCore.Domain.Entities;
-
-/// <summary>
-/// One row per successful sign-in, captured directly by ERPCore (not AuthHex) so an
-/// admin can see a user's device/login history — AuthHex's own session listing only
-/// ever reports the currently-authenticated caller's own sessions, with no admin-scoped
-/// call to inspect anyone else's. This is a history of past logins, not a live "currently
-/// active sessions" view (that would need AuthHex to expose one).
-/// </summary>
-public class LoginActivity
-{
-    public int LoginActivityId { get; set; }
-    public int UserId { get; set; }
-    public User? User { get; set; }
-
-    public string? IpAddress { get; set; }
-    public string? UserAgent { get; set; }
-    /// <summary>Best-effort "Browser on OS" label parsed from <see cref="UserAgent"/> for display.</summary>
-    public string? DeviceLabel { get; set; }
-
-    public DateTime LoginAt { get; set; }
-}

Backend/ERPCore/Domain/Entities/Notification.cs

@@ -1,22 +0,0 @@
-namespace ERPCore.Domain.Entities;
-
-/// <summary>
-/// A single raised notification event (e.g. "GRN Confirmed"). Broadcast to
-/// active users via <see cref="NotificationRecipient"/> rows, gated by
-/// whether the module's InApp channel is enabled in <see cref="NotificationConfig"/>.
-/// </summary>
-public class Notification
-{
-    public int NotificationId { get; set; }
-
-    public string ModuleKey { get; set; } = string.Empty;
-    public string Title { get; set; } = string.Empty;
-    public string Message { get; set; } = string.Empty;
-
-    public string? RelatedEntityType { get; set; }
-    public int? RelatedEntityId { get; set; }
-
-    public DateTime CreatedAt { get; set; } = DateTime.UtcNow;
-
-    public ICollection<NotificationRecipient> Recipients { get; set; } = new List<NotificationRecipient>();
-}

Backend/ERPCore/Domain/Entities/NotificationRecipient.cs

@@ -1,18 +0,0 @@
-namespace ERPCore.Domain.Entities;
-
-/// <summary>
-/// Per-user read state for a broadcast <see cref="Notification"/>.
-/// </summary>
-public class NotificationRecipient
-{
-    public int NotificationRecipientId { get; set; }
-
-    public int NotificationId { get; set; }
-    public Notification? Notification { get; set; }
-
-    public int UserId { get; set; }
-    public User? User { get; set; }
-
-    public bool IsRead { get; set; }
-    public DateTime? ReadAt { get; set; }
-}

Backend/ERPCore/Domain/Entities/NumberSequence.cs

@@ -10,10 +10,6 @@ public class NumberSequence
 {
     public int SequenceId { get; set; }
     public string DocType { get; set; } = string.Empty;
-    /// <summary>Per-branch counter key (docs/BRANCH_ISOLATION_PLAN.md §5) — backfilled to the
-    /// deployment's default branch for rows that predate per-branch numbering.</summary>
-    public int BranchId { get; set; }
-    public Branch? Branch { get; set; }
     public int Year { get; set; }
     public int LastNumber { get; set; }
 }

Backend/ERPCore/Domain/Entities/PurchaseInvoice.cs

@@ -20,9 +20,6 @@ public class PurchaseInvoice
     public int VendorId { get; set; }
     public Vendor? Vendor { get; set; }
 
-    public int BranchId { get; set; }
-    public Branch? Branch { get; set; }
-
     public string VendorSnapshotName { get; set; } = string.Empty;
     public string? VendorSnapshotTaxNo { get; set; }
 

Backend/ERPCore/Domain/Entities/PurchaseOrder.cs

@@ -5,10 +5,9 @@ namespace ERPCore.Domain.Entities;
 /// <summary>
 /// Purchase order header (FR-PROC-03..06). Mutable aggregate with a
 /// <see cref="RowVersion"/> ETag token; editable while open (FR-PROC-05).
-/// A submitted/issued PO goes to <see cref="PurchaseOrderStatus.PendingApproval"/> and
-/// needs a separate Approve action (an Admin who isn't <see cref="CreatedBy"/>) before it
-/// reaches <see cref="PurchaseOrderStatus.Approved"/>. Totals are computed server-side
-/// from lines (not stored). Model: docs/10 Part C.2.
+/// Phase 1 auto-approves on creation; <see cref="ApprovalRequired"/> is retained
+/// for the future approval workflow. Totals are computed server-side from lines
+/// (not stored). Model: docs/10 Part C.2.
 /// </summary>
 public class PurchaseOrder
 {
@@ -18,25 +17,15 @@ public class PurchaseOrder
     public int VendorId { get; set; }
     public Vendor? Vendor { get; set; }
 
-    public int BranchId { get; set; }
-    public Branch? Branch { get; set; }
-
     public int? RequisitionId { get; set; }
     public Requisition? Requisition { get; set; }
 
     public PurchaseOrderStatus Status { get; set; } = PurchaseOrderStatus.Draft;
-    /// <summary>True once the PO has been (or needs to be) routed through approval —
-    /// i.e. it is not a still-editable Draft.</summary>
     public bool ApprovalRequired { get; set; }
 
     public int CreatedBy { get; set; }
     public User? Creator { get; set; }
 
-    /// <summary>Who approved this PO — set only when <see cref="Status"/> reaches Approved.</summary>
-    public int? ApprovedBy { get; set; }
-    public User? Approver { get; set; }
-    public DateTime? ApprovedAt { get; set; }
-
     public DateTime CreatedAt { get; set; }
     public DateTime? UpdatedAt { get; set; }
 

Backend/ERPCore/Domain/Entities/Requisition.cs

@@ -14,9 +14,6 @@ public class Requisition
     public int RequestedBy { get; set; }
     public User? Requester { get; set; }
 
-    public int BranchId { get; set; }
-    public Branch? Branch { get; set; }
-
     public RequisitionStatus Status { get; set; } = RequisitionStatus.Draft;
     public DateTime CreatedAt { get; set; }
 

Backend/ERPCore/Domain/Entities/Rfq.cs

@@ -14,9 +14,6 @@ public class Rfq
     public int RequisitionId { get; set; }
     public Requisition? Requisition { get; set; }
 
-    public int BranchId { get; set; }
-    public Branch? Branch { get; set; }
-
     public RfqStatus Status { get; set; } = RfqStatus.Open;
     public DateTime CreatedAt { get; set; }
 

Backend/ERPCore/Domain/Entities/RolePermission.cs

@@ -1,5 +1,3 @@
-using ERPCore.Domain.Enums;
-
 namespace ERPCore.Domain.Entities;
 
 /// <summary>Join row granting a <see cref="Role"/> visibility of a <see cref="Permission"/> (nav node).</summary>
@@ -8,13 +6,6 @@ public class RolePermission
     public int RoleId { get; set; }
     public int PermissionId { get; set; }
 
-    /// <summary>
-    /// Which mutating actions the role may perform within this permission's module
-    /// (see <see cref="RolePermissionAction"/>); defaults to <see cref="RolePermissionAction.All"/>
-    /// so existing grants keep today's behavior until an admin narrows them.
-    /// </summary>
-    public RolePermissionAction Actions { get; set; } = RolePermissionAction.All;
-
     public Role? Role { get; set; }
     public Permission? Permission { get; set; }
 }

Backend/ERPCore/Domain/Entities/SalesDayEnd.cs

@@ -27,16 +27,6 @@ public class SalesDayEnd
     public decimal TaxTotal { get; set; }
     public decimal GrandTotal { get; set; }
 
-    /// <summary>
-    /// Sum of <see cref="SalesSlip.PaidAmount"/> across the day's slips (bundle sales have no
-    /// partial-payment field and are always counted as fully paid) — what actually gets debited
-    /// to Cash on close. <see cref="BalanceTotal"/> is the rest (<c>GrandTotal - PaidTotal</c>),
-    /// debited to Accounts Receivable instead. Before partial payments existed these were always
-    /// equal to GrandTotal/0 respectively (every sale was assumed fully cash).
-    /// </summary>
-    public decimal PaidTotal { get; set; }
-    public decimal BalanceTotal { get; set; }
-
     /// <summary>Sum of the FIFO cost consumed for these slips (from <see cref="StockLedger"/>), for the COGS GL lines.</summary>
     public decimal CostOfGoodsSold { get; set; }
 

Backend/ERPCore/Domain/Entities/SalesInvoice.cs

@@ -17,11 +17,6 @@ public class SalesInvoice
     public int WarehouseId { get; set; }
     public Warehouse? Warehouse { get; set; }
 
-    /// <summary>Owning branch, set explicitly at creation — warehouses are shared across
-    /// branches, so branch scope can no longer be derived from <see cref="Warehouse"/>.</summary>
-    public int BranchId { get; set; }
-    public Branch? Branch { get; set; }
-
     public SalesInvoiceType InvoiceType { get; set; } = SalesInvoiceType.B2C;
     public SalesInvoiceStatus Status { get; set; } = SalesInvoiceStatus.Draft;
 

Backend/ERPCore/Domain/Entities/SalesSlipLine.cs

@@ -19,12 +19,6 @@ public class SalesSlipLine
     public int WarehouseId { get; set; }
     public Warehouse? Warehouse { get; set; }
 
-    public int? BatchId { get; set; }
-    public Batch? Batch { get; set; }
-
-    public int? SerialId { get; set; }
-    public Serial? Serial { get; set; }
-
     public decimal UnitPrice { get; set; }
     public decimal BaseCost { get; set; }
     public string PriceSource { get; set; } = string.Empty;

Backend/ERPCore/Domain/Entities/Serial.cs

@@ -13,7 +13,4 @@ public class Serial
 
     public string SerialNo { get; set; } = string.Empty;
     public string Status { get; set; } = "InStock";
-
-    /// <summary>Optional scan code for barcode/RFID lookup (unique when set).</summary>
-    public string? Barcode { get; set; }
 }

Backend/ERPCore/Domain/Entities/StockAdjustment.cs

@@ -19,11 +19,6 @@ public class StockAdjustment
     public int ReasonCodeId { get; set; }
     public ReasonCode? ReasonCode { get; set; }
 
-    /// <summary>Owning branch, set explicitly at creation — warehouses are shared across
-    /// branches, so branch scope can no longer be derived from <see cref="Warehouse"/>.</summary>
-    public int BranchId { get; set; }
-    public Branch? Branch { get; set; }
-
     public AdjustmentStatus Status { get; set; } = AdjustmentStatus.Posted;
 
     public int CreatedBy { get; set; }

Backend/ERPCore/Domain/Entities/StockCount.cs

@@ -16,11 +16,6 @@ public class StockCount
     public int WarehouseId { get; set; }
     public Warehouse? Warehouse { get; set; }
 
-    /// <summary>Owning branch, set explicitly at creation — warehouses are shared across
-    /// branches, so branch scope can no longer be derived from <see cref="Warehouse"/>.</summary>
-    public int BranchId { get; set; }
-    public Branch? Branch { get; set; }
-
     public CountType CountType { get; set; }
     public CountStatus Status { get; set; } = CountStatus.Draft;
 

Backend/ERPCore/Domain/Entities/StockCountLine.cs

@@ -16,12 +16,6 @@ public class StockCountLine
 
     public int? BinId { get; set; }
 
-    public int? BatchId { get; set; }
-    public Batch? Batch { get; set; }
-
-    public int? SerialId { get; set; }
-    public Serial? Serial { get; set; }
-
     public decimal SystemQty { get; set; }
     public decimal? CountedQty { get; set; }
     public decimal? Variance { get; set; }

Backend/ERPCore/Domain/Entities/StockTransfer.cs

@@ -19,11 +19,6 @@ public class StockTransfer
     public int DestWarehouseId { get; set; }
     public Warehouse? DestWarehouse { get; set; }
 
-    /// <summary>Owning branch, set explicitly at creation — warehouses are shared across
-    /// branches, so branch scope can no longer be derived from src/dest warehouse.</summary>
-    public int BranchId { get; set; }
-    public Branch? Branch { get; set; }
-
     public TransferStatus Status { get; set; } = TransferStatus.Draft;
 
     public int CreatedBy { get; set; }

Backend/ERPCore/Domain/Entities/SupportTicket.cs

@@ -1,25 +0,0 @@
-using ERPCore.Domain.Enums;
-
-namespace ERPCore.Domain.Entities;
-
-/// <summary>
-/// A help-desk ticket raised by a user from the Help page. Status is
-/// admin-managed; the conversation is a flat thread of <see cref="SupportTicketMessage"/> rows.
-/// Field/concurrency shape follows the same conventions as <see cref="Employee"/>
-/// (CreatedBy/UpdatedBy actor stamps, RowVersion for optimistic concurrency).
-/// </summary>
-public class SupportTicket
-{
-    public int TicketId { get; set; }
-
-    public string Subject { get; set; } = string.Empty;
-    public TicketStatus Status { get; set; } = TicketStatus.Open;
-
-    public int CreatedBy { get; set; }
-    public DateTime CreatedAt { get; set; } = DateTime.UtcNow;
-    public int? UpdatedBy { get; set; }
-    public DateTime? UpdatedAt { get; set; }
-    public uint RowVersion { get; set; }
-
-    public ICollection<SupportTicketMessage> Messages { get; set; } = new List<SupportTicketMessage>();
-}

Backend/ERPCore/Domain/Entities/SupportTicketMessage.cs

@@ -1,16 +0,0 @@
-namespace ERPCore.Domain.Entities;
-
-/// <summary>One message in a <see cref="SupportTicket"/> thread — from the submitter or an admin.</summary>
-public class SupportTicketMessage
-{
-    public int MessageId { get; set; }
-
-    public int TicketId { get; set; }
-    public SupportTicket? Ticket { get; set; }
-
-    public int SenderUserId { get; set; }
-    public bool IsFromAdmin { get; set; }
-    public string Message { get; set; } = string.Empty;
-
-    public DateTime CreatedAt { get; set; } = DateTime.UtcNow;
-}

Backend/ERPCore/Domain/Entities/TaxRate.cs

@@ -1,27 +0,0 @@
-using ERPCore.Domain.Enums;
-
-namespace ERPCore.Domain.Entities;
-
-/// <summary>
-/// A named tax rate (e.g. "Standard" 15%, "Zero-Rated" 0%, "Exempt" 0%) — the real backing
-/// for <see cref="Item.TaxRateId"/>. Before this existed, <c>Item.TaxClass</c> was a free-text
-/// label nothing ever read, and every sales/purchase line carried its own hand-typed tax
-/// percentage with no link back to the item at all. Now a line's tax defaults to whatever
-/// percentage the item's assigned TaxRate carries at the moment the line is created — change
-/// the rate here and every new document picks it up; a line already created keeps the percentage
-/// it was given (SalesSlipLine.TaxPct etc. are snapshots, never recomputed from this table).
-/// </summary>
-public class TaxRate
-{
-    public int TaxRateId { get; set; }
-    public string Code { get; set; } = string.Empty;
-    public string Name { get; set; } = string.Empty;
-    public decimal Percentage { get; set; }
-    public EntityStatus Status { get; set; } = EntityStatus.Active;
-
-    public DateTime CreatedAt { get; set; }
-    public DateTime? UpdatedAt { get; set; }
-
-    /// <summary>PostgreSQL xmin-backed optimistic concurrency token (ETag source).</summary>
-    public uint RowVersion { get; set; }
-}

Backend/ERPCore/Domain/Entities/Vendor.cs

@@ -17,9 +17,6 @@ public class Vendor
     public string Currency { get; set; } = "LKR";
     public EntityStatus Status { get; set; } = EntityStatus.Active;
 
-    public int BranchId { get; set; }
-    public Branch? Branch { get; set; }
-
     public DateTime CreatedAt { get; set; }
     public DateTime? UpdatedAt { get; set; }
 

Backend/ERPCore/Domain/Entities/Warehouse.cs

@@ -9,8 +9,6 @@ public class Warehouse
     public int WarehouseId { get; set; }
     public string Code { get; set; } = string.Empty;
     public string Name { get; set; } = string.Empty;
-    public string? Address { get; set; }
-    public string? Phone { get; set; }
     public int BranchId { get; set; }
     public Branch? Branch { get; set; }
 

Backend/ERPCore/Domain/Enums/AuditAction.cs

@@ -5,8 +5,5 @@ public enum AuditAction
 {
     Create,
     Update,
-    Delete,
-    /// <summary>A successful sign-in — written explicitly (not via ErpDbContext's automatic
-    /// entity-change capture, since a login mutates nothing) by AuthController.</summary>
-    Login
+    Delete
 }

Backend/ERPCore/Domain/Enums/PurchaseOrderStatus.cs

@@ -1,10 +1,9 @@
 namespace ERPCore.Domain.Enums;
 
 /// <summary>
-/// Purchase-order lifecycle (docs/11 §8; docs/10 §B.8.1). Issuing a PO (create
-/// non-draft, or submit a Draft) enters <see cref="PendingApproval"/>; an Admin who
-/// isn't the creator must Approve it to reach <see cref="Approved"/>, or Reject it back
-/// to <see cref="Draft"/> (FR-PROC-04). Stored as a string.
+/// Purchase-order lifecycle (docs/11 §8; docs/10 §B.8.1). Phase 1 auto-approves on
+/// creation, so <see cref="PendingApproval"/> is reserved (not entered) until the
+/// approval workflow is enabled (FR-PROC-04). Stored as a string.
 /// </summary>
 public enum PurchaseOrderStatus
 {

Backend/ERPCore/Domain/Enums/RolePermissionAction.cs

@@ -1,21 +0,0 @@
-namespace ERPCore.Domain.Enums;
-
-/// <summary>
-/// Fine-grained actions a <see cref="Entities.RolePermission"/> can grant within a module
-/// it already has nav-level access to (see <see cref="Infra.Auth.NavPolicies"/>). Nav-level
-/// access answers "can this role reach this module"; this answers "which mutations within
-/// it can this role actually perform" — e.g. a role that can see Procurement but should not
-/// be able to delete or approve purchase orders.
-/// </summary>
-[Flags]
-public enum RolePermissionAction
-{
-    None = 0,
-    View = 1,
-    Create = 2,
-    Edit = 4,
-    Delete = 8,
-    Approve = 16,
-
-    All = View | Create | Edit | Delete | Approve
-}

Backend/ERPCore/Domain/Enums/TicketStatus.cs

@@ -1,8 +0,0 @@
-namespace ERPCore.Domain.Enums;
-
-public enum TicketStatus
-{
-    Open,
-    InProgress,
-    Resolved
-}

Backend/ERPCore/Dtos/Audit/AuditDtos.cs

@@ -10,7 +10,3 @@ public sealed record AuditLogDto(
 /// <summary>A GL-ready journal stub emitted per stock movement (FR-STK-13).</summary>
 public sealed record JournalEntryStubDto(
     int JournalId, string SourceDocType, int SourceDocId, string DebitAccount, string CreditAccount, decimal Amount);
-
-/// <summary>A captured past sign-in — device history, not a live "currently active sessions" view.</summary>
-public sealed record LoginActivityDto(
-    int LoginActivityId, string? IpAddress, string? DeviceLabel, DateTime LoginAt);

Backend/ERPCore/Dtos/Auth/AuthUserDtos.cs

@@ -29,21 +29,6 @@ public sealed class AuthSessionResponse
     public int ExpiresIn { get; set; }
 }
 
-/// <summary>Result of AuthHex's admin-only deleteUser function.</summary>
-public sealed class DeleteAuthHexUserResult
-{
-    public int DeletedCount { get; set; }
-    public List<DeletedAuthHexUser>? Deleted { get; set; }
-}
-
-public sealed class DeletedAuthHexUser
-{
-    public Guid Id { get; set; }
-    public string? FullName { get; set; }
-    public string? UserName { get; set; }
-    public string? Email { get; set; }
-}
-
 public sealed class RegisterRequest
 {
     /// <summary>Optional — AuthHex requires a client-supplied id; ERPCore generates one when omitted.</summary>

Backend/ERPCore/Dtos/Config/BranchConfigDtos.cs

@@ -4,7 +4,7 @@ namespace ERPCore.Dtos.Config;
 
 /// <summary>Branch configuration resource — the singleton toggle for whether this deployment
 /// requires a branch on Employee/Warehouse records at all.</summary>
-public sealed record BranchConfigDto(bool BranchingEnabled, bool WarehouseBranchingEnabled, DateTime? UpdatedAt, int? UpdatedBy);
+public sealed record BranchConfigDto(bool BranchingEnabled, DateTime? UpdatedAt, int? UpdatedBy);
 
 /// <summary>
 /// Full replacement of the flag. <c>UpdatedBy</c> is derived from the token, never posted.
@@ -17,5 +17,4 @@ public sealed record BranchConfigDto(bool BranchingEnabled, bool WarehouseBranch
 public sealed class UpdateBranchConfigRequest
 {
     [Required] public bool? BranchingEnabled { get; set; }
-    [Required] public bool? WarehouseBranchingEnabled { get; set; }
 }

Backend/ERPCore/Dtos/Customers/CustomerDtos.cs

@@ -21,7 +21,6 @@ public sealed record CustomerDto(
     int CreditDays,
     int? DefaultWarehouseId,
     EntityStatus Status,
-    int BranchId,
     DateTime CreatedAt,
     DateTime? UpdatedAt);
 
@@ -41,7 +40,6 @@ public sealed class CreateCustomerRequest
     [Range(0, double.MaxValue)] public decimal CreditLimit { get; set; }
     [Range(0, int.MaxValue)] public int CreditDays { get; set; }
     public int? DefaultWarehouseId { get; set; }
-    public int BranchId { get; set; }
 }
 
 public sealed class UpdateCustomerRequest
@@ -60,7 +58,6 @@ public sealed class UpdateCustomerRequest
     [Range(0, double.MaxValue)] public decimal CreditLimit { get; set; }
     [Range(0, int.MaxValue)] public int CreditDays { get; set; }
     public int? DefaultWarehouseId { get; set; }
-    public int BranchId { get; set; }
 }
 
 public sealed class UpdateCustomerStatusRequest

Backend/ERPCore/Dtos/Dashboard/DashboardDtos.cs

@@ -4,12 +4,9 @@ namespace ERPCore.Dtos.Dashboard;
 /// Aggregate counts for the dashboard overview — mirrors the widget set in
 /// docs/dashboard-implementation.pdf: reorder alerts, on-hand summary, stock valuation,
 /// pending-approval POs, pending GRNs, open requisitions, open counts awaiting posting,
-/// open RFQs, pending leave requests, and overdue sales invoices. Also reused as small
-/// KPI tiles on individual list pages (Purchase Orders, GRN, Requisitions, RFQs, Stock
-/// Counts, Reorder Alerts, HRM Leave, Sales Invoices), not just the Dashboard home page.
-/// Recent movements isn't here — it's just GET /stock/ledger with a small pageSize, no
-/// aggregation needed. A single computed-on-read object, not a stored entity — same as
-/// reorder alerts (docs/11 §5.7).
+/// and open RFQs. Recent movements isn't here — it's just GET /stock/ledger with a small
+/// pageSize, no aggregation needed. A single computed-on-read object, not a stored
+/// entity — same as reorder alerts (docs/11 §5.7).
 /// </summary>
 public sealed record DashboardStatsDto(
     int LowStockAlerts,
@@ -21,9 +18,7 @@ public sealed record DashboardStatsDto(
     int PendingGrns,
     int OpenRequisitions,
     int PendingCounts,
-    int OpenRfqs,
-    int PendingLeaveRequests,
-    int OverdueSalesInvoices);
+    int OpenRfqs);
 
 /// <summary>One bar in the Stock Valuation chart — total FIFO layer value for a warehouse.</summary>
 public sealed record WarehouseValuationDto(int WarehouseId, decimal Total);

Backend/ERPCore/Dtos/Grn/GrnDtos.cs

@@ -15,13 +15,13 @@ public sealed record GrnLineDto(
     HoldStatus HoldStatus, int? BatchId, IReadOnlyList<GrnLineWarrantyNumberDto> WarrantyNumbers);
 
 public sealed record GrnDto(
-    int GrnId, string DocNo, int? PoId, int VendorId, int WarehouseId, int BranchId, GrnStatus Status,
+    int GrnId, string DocNo, int? PoId, int VendorId, int WarehouseId, GrnStatus Status,
     int CreatedBy, DateTime CreatedAt, DateTime? PostedAt, string? GlJournalNo,
     int? PurchaseInvoiceId, string? PurchaseInvoiceNo, IReadOnlyList<GrnLineDto> Lines);
 
 /// <summary>Row shape for <c>GET /grns</c> — line count instead of the lines themselves.</summary>
 public sealed record GrnSummaryDto(
-    int GrnId, string DocNo, int? PoId, int VendorId, int WarehouseId, int BranchId, GrnStatus Status,
+    int GrnId, string DocNo, int? PoId, int VendorId, int WarehouseId, GrnStatus Status,
     int CreatedBy, DateTime CreatedAt, DateTime? PostedAt, int LineCount,
     int? PurchaseInvoiceId, string? PurchaseInvoiceNo);
 
@@ -63,9 +63,8 @@ public sealed class CreateGrnLineInput
     [Range(0, double.MaxValue)] public decimal UnitCost { get; set; }
     /// <summary>Trade discount percentage (0–100). Reduces the inventory cost.</summary>
     [Range(0, 100)] public decimal DiscountPct { get; set; }
-    /// <summary>VAT percentage (0–100). Recoverable — does not affect stock value. Explicit
-    /// override; omit (null) to use the item's assigned TaxRate percentage instead.</summary>
-    [Range(0, 100)] public decimal? VatPct { get; set; }
+    /// <summary>VAT percentage (0–100). Recoverable — does not affect stock value.</summary>
+    [Range(0, 100)] public decimal VatPct { get; set; }
     [EnumDataType(typeof(HoldStatus))] public HoldStatus HoldStatus { get; set; } = HoldStatus.Available;
     public BatchInput? Batch { get; set; }
     /// <summary>
@@ -82,9 +81,6 @@ public sealed class CreateGrnRequest
     /// <summary>Required for a direct receipt (no PO); ignored otherwise (vendor derives from the PO).</summary>
     public int? VendorId { get; set; }
     [Required] public int WarehouseId { get; set; }
-    /// <summary>Owning branch for this GRN — warehouses are shared, so this is what actually
-    /// scopes the document (resolved via IBranchConfigService; required when branching is enabled).</summary>
-    [Required] public int BranchId { get; set; }
     [Required, MinLength(1)] public List<CreateGrnLineInput> Lines { get; set; } = new();
 }
 

Backend/ERPCore/Dtos/Hrm/EmployeeDtos.cs

@@ -3,8 +3,6 @@ using ERPCore.Domain.Enums;
 
 namespace ERPCore.Dtos.Hrm;
 
-public sealed record EmployeeDeleteResultDto(bool UserAccountDeleted, bool UserAccountDeactivated, bool AuthHexIdentityPurged = false);
-
 public sealed record EmployeeListItemDto(
     int EmployeeId, string EmployeeCode, string FullName, string? Email,
     int DepartmentId, string? DepartmentName, int DesignationId, string? DesignationName,

Backend/ERPCore/Dtos/Items/ItemDtos.cs

@@ -10,11 +10,10 @@ public sealed record ItemListItemDto(
     int ItemId, string Sku, string Name, int CategoryId, int? SubCategoryId, int? BrandId,
     int BaseUomId, int? DefaultVendorId, StockNature StockNature, TrackingMode TrackingMode,
     Warranty Warranty, int? WarrantyPeriodMonths,
-    int? TaxRateId, string? TaxRateName, decimal? TaxRatePercentage,
-    decimal? SellingMinPrice, decimal? SellingMaxPrice, decimal? SellingFlatPrice,
+    string? TaxClass, decimal? SellingMinPrice, decimal? SellingMaxPrice, decimal? SellingFlatPrice,
     decimal? ContentQty, MeasureUnit? ContentUnit,
     decimal? ContentBaseQty, MeasureUnit? ContentBaseUnit,
-    EntityStatus Status, string? Barcode);
+    EntityStatus Status);
 
 /// <summary>A single per-warehouse reorder policy row.</summary>
 public sealed record ItemReorderDto(int WarehouseId, decimal ReorderPoint, decimal ReorderQty);
@@ -32,11 +31,10 @@ public sealed record ItemDetailDto(
     int? SubCategoryId, int? BrandId, int BaseUomId, int? DefaultVendorId,
     StockNature StockNature, TrackingMode TrackingMode,
     Warranty Warranty, int? WarrantyPeriodMonths,
-    int? TaxRateId, string? TaxRateName, decimal? TaxRatePercentage,
-    decimal? SellingMinPrice, decimal? SellingMaxPrice, decimal? SellingFlatPrice,
+    string? TaxClass, decimal? SellingMinPrice, decimal? SellingMaxPrice, decimal? SellingFlatPrice,
     decimal? ContentQty, MeasureUnit? ContentUnit,
     decimal? ContentBaseQty, MeasureUnit? ContentBaseUnit,
-    EntityStatus Status, string? Barcode, IReadOnlyList<ItemReorderDto> Reorder,
+    EntityStatus Status, IReadOnlyList<ItemReorderDto> Reorder,
     DateTime CreatedAt, DateTime? UpdatedAt);
 
 /// <summary>Response body for <c>PUT /items/{id}/reorder</c>.</summary>
@@ -66,8 +64,7 @@ public sealed class CreateItemRequest
     [EnumDataType(typeof(Warranty))] public Warranty Warranty { get; set; } = Warranty.NonWarranty;
     /// <summary>Required (one of <see cref="Enums.WarrantyPeriods.AllowedMonths"/>) when <see cref="Warranty"/> is Warranty; ignored otherwise.</summary>
     public int? WarrantyPeriodMonths { get; set; }
-    /// <summary>The tax rate sales/purchase lines for this item default to — see <see cref="Domain.Entities.TaxRate"/>.</summary>
-    public int? TaxRateId { get; set; }
+    [StringLength(20)] public string? TaxClass { get; set; }
     /// <summary>Optional fixed sale price (Sales only). Null ⇒ sell at stock/FIFO value.</summary>
     [Range(0, double.MaxValue)] public decimal? SellingMinPrice { get; set; }
     [Range(0, double.MaxValue)] public decimal? SellingMaxPrice { get; set; }
@@ -80,8 +77,6 @@ public sealed class CreateItemRequest
     /// </summary>
     [Range(0.0001, double.MaxValue)] public decimal? ContentQty { get; set; }
     [EnumDataType(typeof(MeasureUnit))] public MeasureUnit? ContentUnit { get; set; }
-    /// <summary>Optional scan code for barcode/RFID lookup. Unlike <see cref="Sku"/>, not required.</summary>
-    [StringLength(100)] public string? Barcode { get; set; }
 }
 
 public sealed class UpdateItemRequest
@@ -101,8 +96,7 @@ public sealed class UpdateItemRequest
     [EnumDataType(typeof(Warranty))] public Warranty Warranty { get; set; } = Warranty.NonWarranty;
     /// <summary>Required (one of <see cref="Enums.WarrantyPeriods.AllowedMonths"/>) when <see cref="Warranty"/> is Warranty; ignored otherwise.</summary>
     public int? WarrantyPeriodMonths { get; set; }
-    /// <summary>The tax rate sales/purchase lines for this item default to — see <see cref="Domain.Entities.TaxRate"/>.</summary>
-    public int? TaxRateId { get; set; }
+    [StringLength(20)] public string? TaxClass { get; set; }
     /// <summary>Optional fixed sale price (Sales only). Null ⇒ sell at stock/FIFO value.</summary>
     [Range(0, double.MaxValue)] public decimal? SellingMinPrice { get; set; }
     [Range(0, double.MaxValue)] public decimal? SellingMaxPrice { get; set; }
@@ -115,8 +109,6 @@ public sealed class UpdateItemRequest
     /// </summary>
     [Range(0.0001, double.MaxValue)] public decimal? ContentQty { get; set; }
     [EnumDataType(typeof(MeasureUnit))] public MeasureUnit? ContentUnit { get; set; }
-    /// <summary>Optional scan code for barcode/RFID lookup. Unlike <see cref="Sku"/>, not required.</summary>
-    [StringLength(100)] public string? Barcode { get; set; }
 }
 
 public sealed class UpdateItemStatusRequest

Backend/ERPCore/Dtos/Items/ItemScanDtos.cs

@@ -1,11 +0,0 @@
-using ERPCore.Domain.Enums;
-
-namespace ERPCore.Dtos.Items;
-
-/// <summary>Result of a barcode/RFID scan lookup — an item, or an item resolved via a
-/// specific batch/serial. See <see cref="Services.Interfaces.IItemService.ScanAsync"/>.</summary>
-public sealed record ItemScanResultDto(
-    int ItemId, string Sku, string Name, TrackingMode TrackingMode, int BaseUomId,
-    string MatchedBy, // "Item" | "Batch" | "Serial"
-    int? BatchId, string? BatchNo, DateOnly? ExpiryDate,
-    int? SerialId, string? SerialNo, string? SerialStatus);

Backend/ERPCore/Dtos/Notifications/NotificationDtos.cs

@@ -1,15 +0,0 @@
-namespace ERPCore.Dtos.Notifications;
-
-public sealed record NotificationDto(
-    int NotificationId,
-    string ModuleKey,
-    string Title,
-    string Message,
-    string? RelatedEntityType,
-    int? RelatedEntityId,
-    DateTime CreatedAt,
-    bool IsRead);
-
-public sealed record NotificationFeedDto(
-    IReadOnlyList<NotificationDto> Notifications,
-    int UnreadCount);

Backend/ERPCore/Dtos/Procurement/PurchaseInvoiceDtos.cs

@@ -12,14 +12,14 @@ public sealed record PurchaseInvoiceTotalsDto(
 
 public sealed record PurchaseInvoiceDto(
     int PurchaseInvoiceId, string DocNo, string VendorInvoiceNo, DateTime VendorInvoiceDate,
-    int VendorId, int BranchId, string VendorSnapshotName, string? VendorSnapshotTaxNo,
+    int VendorId, string VendorSnapshotName, string? VendorSnapshotTaxNo,
     PurchaseInvoiceStatus Status, int GrnCount, int CreatedBy, DateTime CreatedAt, DateTime? UpdatedAt,
     string? GlJournalNo, DateTime? GlPostedAt,
     PurchaseInvoiceTotalsDto Totals, IReadOnlyList<PurchaseInvoiceLineDto> Lines);
 
 public sealed record PurchaseInvoiceSummaryDto(
     int PurchaseInvoiceId, string DocNo, string VendorInvoiceNo, DateTime VendorInvoiceDate,
-    int VendorId, int BranchId, string VendorSnapshotName, PurchaseInvoiceStatus Status, int GrnCount,
+    int VendorId, string VendorSnapshotName, PurchaseInvoiceStatus Status, int GrnCount,
     PurchaseInvoiceTotalsDto Totals, DateTime CreatedAt, string? GlJournalNo);
 
 public sealed record PurchaseInvoicePaymentDto(

Backend/ERPCore/Dtos/Procurement/PurchaseOrderDtos.cs

@@ -12,14 +12,13 @@ public sealed record PoLineDto(
 public sealed record PoTotalsDto(decimal SubTotal, decimal Tax, decimal GrandTotal, string Currency);
 
 public sealed record PurchaseOrderDto(
-    int PoId, string DocNo, int VendorId, int BranchId, int? RequisitionId, PurchaseOrderStatus Status,
-    bool ApprovalRequired, int CreatedBy, int? ApprovedBy, DateTime? ApprovedAt,
-    DateTime CreatedAt, DateTime? UpdatedAt,
+    int PoId, string DocNo, int VendorId, int? RequisitionId, PurchaseOrderStatus Status,
+    bool ApprovalRequired, int CreatedBy, DateTime CreatedAt, DateTime? UpdatedAt,
     PoTotalsDto Totals, IReadOnlyList<PoLineDto> Lines);
 
 public sealed record PurchaseOrderSummaryDto(
-    int PoId, string DocNo, int VendorId, int BranchId, PurchaseOrderStatus Status,
-    bool ApprovalRequired, int CreatedBy, DateTime CreatedAt, PoTotalsDto Totals);
+    int PoId, string DocNo, int VendorId, PurchaseOrderStatus Status,
+    bool ApprovalRequired, DateTime CreatedAt, PoTotalsDto Totals);
 
 // Requests — server sets docNo, status, createdBy, timestamps, qtyReceived, totals
 
@@ -36,13 +35,12 @@ public sealed class CreatePurchaseOrderRequest
 {
     [Required] public int VendorId { get; set; }
     public int? RequisitionId { get; set; }
-    public int BranchId { get; set; }
     [Required, MinLength(1)] public List<CreatePoLineInput> Lines { get; set; } = new();
 
     /// <summary>
     /// When true the PO is created in <c>Draft</c> (editable/deletable, not yet issued).
-    /// When false (default) it is issued immediately into <c>PendingApproval</c>, same as
-    /// submitting a Draft (docs/11 §3.3).
+    /// When false (default) it auto-approves on creation, preserving the Requisition→PO
+    /// and RFQ→PO flows unchanged (docs/11 §3.3).
     /// </summary>
     public bool SaveAsDraft { get; set; }
 }
@@ -51,7 +49,6 @@ public sealed class UpdatePurchaseOrderRequest
 {
     [Required] public int VendorId { get; set; }
     public int? RequisitionId { get; set; }
-    public int BranchId { get; set; }
     [Required, MinLength(1)] public List<CreatePoLineInput> Lines { get; set; } = new();
 }
 
@@ -59,8 +56,3 @@ public sealed class CancelPurchaseOrderRequest
 {
     [StringLength(500)] public string? Reason { get; set; }
 }
-
-public sealed class RejectPurchaseOrderRequest
-{
-    [StringLength(500)] public string? Reason { get; set; }
-}

Backend/ERPCore/Dtos/Procurement/RequisitionDtos.cs

@@ -8,11 +8,11 @@ namespace ERPCore.Dtos.Procurement;
 public sealed record RequisitionLineDto(int ReqLineId, int ItemId, decimal Qty, DateOnly? RequiredBy);
 
 public sealed record RequisitionDto(
-    int RequisitionId, string DocNo, RequisitionStatus Status, int RequestedBy, int BranchId,
+    int RequisitionId, string DocNo, RequisitionStatus Status, int RequestedBy,
     DateTime CreatedAt, IReadOnlyList<RequisitionLineDto> Lines);
 
 public sealed record RequisitionSummaryDto(
-    int RequisitionId, string DocNo, RequisitionStatus Status, int RequestedBy, int BranchId, DateTime CreatedAt, int LineCount);
+    int RequisitionId, string DocNo, RequisitionStatus Status, int RequestedBy, DateTime CreatedAt, int LineCount);
 
 // Requests — server sets docNo, status, requestedBy (audit actor), timestamps ----
 
@@ -26,7 +26,4 @@ public sealed class CreateRequisitionLineInput
 public sealed class CreateRequisitionRequest
 {
     [Required, MinLength(1)] public List<CreateRequisitionLineInput> Lines { get; set; } = new();
-    /// <summary>Optional — resolved via <see cref="Services.Interfaces.IBranchConfigService.ResolveBranchIdAsync"/>
-    /// when branching is enabled; ignored (defaulted) otherwise.</summary>
-    public int BranchId { get; set; }
 }

Backend/ERPCore/Dtos/Procurement/RfqDtos.cs

@@ -8,11 +8,11 @@ namespace ERPCore.Dtos.Procurement;
 public sealed record RfqLineDto(int RfqLineId, int ItemId, decimal Qty);
 
 public sealed record RfqDto(
-    int RfqId, string DocNo, int RequisitionId, int BranchId, RfqStatus Status, IReadOnlyList<RfqLineDto> Lines);
+    int RfqId, string DocNo, int RequisitionId, RfqStatus Status, IReadOnlyList<RfqLineDto> Lines);
 
 /// <summary>Row shape for <c>GET /rfqs</c> — line/quotation counts instead of the lines themselves.</summary>
 public sealed record RfqSummaryDto(
-    int RfqId, string DocNo, int RequisitionId, int BranchId, RfqStatus Status, int LineCount, int QuotationCount);
+    int RfqId, string DocNo, int RequisitionId, RfqStatus Status, int LineCount, int QuotationCount);
 
 public sealed record QuotationLineDto(int ItemId, decimal UnitPrice, int LeadDays);
 

Backend/ERPCore/Dtos/Rbac/MeDtos.cs

@@ -11,4 +11,4 @@ namespace ERPCore.Dtos.Rbac;
 /// entirely rather than merely restricting them by role.</summary>
 public sealed record MeResponseDto(
     string? RoleCode, string? RoleName, IReadOnlyList<string> NavCodes,
-    bool IsAdmin, int? BranchId, string? BranchName, bool BranchingEnabled, bool WarehouseBranchingEnabled);
+    bool IsAdmin, int? BranchId, string? BranchName, bool BranchingEnabled);