diff --git a/.gitignore b/.gitignore
index ee53b660..8b370d98 100644
--- a/.gitignore
+++ b/.gitignore
@@ -365,3 +365,15 @@ SW.Bitween.NativeAdapters/JsonFieldMapper/Bitween-api.code-workspace
 .vscode/
 .postman/
 postman/
+
+# Admin UI build output (generated by ClientApp `yarn build` into wwwroot)
+SW.Bitween.Web/wwwroot/index.html
+SW.Bitween.Web/wwwroot/assets/
+SW.Bitween.Web/wwwroot/brand/
+SW.Bitween.Web/wwwroot/favicon.svg
+SW.Bitween.Web/wwwroot/icons.svg
+
+# Playwright MCP tool output and test-run artifacts (created at repo root when
+# run from here, separate from ClientApp's own .gitignore'd copies)
+/.playwright-mcp/
+/test-results/
diff --git a/Dockerfile b/Dockerfile
index 63224453..602cb04a 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -8,6 +8,14 @@ WORKDIR /app
 EXPOSE 8080
 EXPOSE 443
 
+# Build the admin UI (SPA) in its own stage; output lands in SW.Bitween.Web/wwwroot
+FROM node:22-alpine AS ui-build
+WORKDIR /src/SW.Bitween.Web/ClientApp
+COPY ["SW.Bitween.Web/ClientApp/package.json", "SW.Bitween.Web/ClientApp/yarn.lock", "./"]
+RUN yarn install --frozen-lockfile
+COPY ["SW.Bitween.Web/ClientApp/", "./"]
+RUN yarn build
+
 FROM mcr.microsoft.com/dotnet/sdk:8.0 AS build
 WORKDIR /src
 COPY ["SW.Bitween.Web/SW.Bitween.Web.csproj", "SW.Bitween.Web/"]
@@ -21,9 +29,11 @@ WORKDIR "/src/SW.Bitween.Web"
 RUN dotnet build "SW.Bitween.Web.csproj" -c Release -o /app/build
 
 FROM build AS publish
-RUN dotnet publish "SW.Bitween.Web.csproj" -c Release -o /app/publish
+# UI is built in the ui-build stage; the SDK image has no node
+RUN dotnet publish "SW.Bitween.Web.csproj" -c Release -o /app/publish -p:SkipClientBuild=true
 
 FROM base AS final
 WORKDIR /app
 COPY --from=publish /app/publish .
-ENTRYPOINT ["dotnet", "SW.Bitween.Web.dll"]
\ No newline at end of file
+COPY --from=ui-build /src/SW.Bitween.Web/wwwroot ./wwwroot
+ENTRYPOINT ["dotnet", "SW.Bitween.Web.dll"]
diff --git a/SW.Bitween.Api/Controllers/GatewayController.cs b/SW.Bitween.Api/Controllers/GatewayController.cs
index 43973b87..2debf48e 100644
--- a/SW.Bitween.Api/Controllers/GatewayController.cs
+++ b/SW.Bitween.Api/Controllers/GatewayController.cs
@@ -63,7 +63,7 @@ private async Task<IActionResult> ProcessAsync([FromRoute] string gatewayApiName
 
         var json = await new StreamReader(HttpContext.Request.Body).ReadToEndAsync();
 
-        var xchangeFile = new XchangeFile(json);
+        var xchangeFile = new XchangeFile(json, $"{gatewayApiName}.json");
 
         var validatorProperties = subscription.ValidatorProperties.ToDictionary()
             .Fill(partner, globalAdapterValuesSet);
diff --git a/SW.Bitween.Api/Data/BitweenDbContext.cs b/SW.Bitween.Api/Data/BitweenDbContext.cs
index cadd4704..200e098b 100644
--- a/SW.Bitween.Api/Data/BitweenDbContext.cs
+++ b/SW.Bitween.Api/Data/BitweenDbContext.cs
@@ -41,12 +41,13 @@ protected override void OnModelCreating(ModelBuilder modelBuilder)
             modelBuilder.Entity<Document>(b =>
             {
                 b.ToTable("Documents");
-                b.Property(p => p.Id).ValueGeneratedNever();
                 b.Property(p => p.Name).HasMaxLength(100).IsUnicode(false).IsRequired();
+                b.Property(p => p.Code).HasMaxLength(50).IsUnicode(false);
                 b.Property(p => p.BusMessageTypeName).IsUnicode(false).HasMaxLength(500);
                 b.Property(p => p.PromotedProperties).StoreAsJson();
                 b.Property(p => p.DisregardsUnfilteredMessages).IsRequired(false);
                 b.HasIndex(p => p.Name).IsUnique();
+                b.HasIndex(p => p.Code).IsUnique();
                 b.HasIndex(p => p.BusMessageTypeName).IsUnique();
 
                 b.HasMany<Subscription>().WithOne().HasForeignKey(p => p.DocumentId).OnDelete(DeleteBehavior.Restrict);
@@ -349,7 +350,6 @@ protected override void OnModelCreating(ModelBuilder modelBuilder)
                 b.HasIndex(p => p.Email).IsUnique();
 
                 b.Property(p => p.Email).IsUnicode(false).HasMaxLength(200);
-                b.Property(p => p.Phone).IsUnicode(false).HasMaxLength(20);
                 b.Property(p => p.Password).IsUnicode(false).HasMaxLength(500);
                 b.Property(p => p.DisplayName).IsRequired().HasMaxLength(200);
 
@@ -382,9 +382,57 @@ protected override void OnModelCreating(ModelBuilder modelBuilder)
                 b.Property(p => p.AccountId);
                 b.Property(p => p.LoginMethod).HasConversion<byte>();
             });
-            
+
+            modelBuilder.Entity<Role>(b =>
+            {
+                b.ToTable("Roles");
+                b.HasKey(p => p.Id);
+                b.Property(p => p.Id).ValueGeneratedOnAdd();
+                b.HasIndex(p => p.Name).IsUnique();
+
+                b.Property(p => p.Name).IsRequired().HasMaxLength(100);
+                b.Property(p => p.Description).HasMaxLength(500);
+                b.Property(p => p.Permissions).StoreAsJson();
+
+                b.HasData(SystemRoleSeed());
+            });
+
+            modelBuilder.Entity<AccountRoleLink>(b =>
+            {
+                b.ToTable("AccountRoles");
+                b.HasKey(p => new { p.AccountId, p.RoleId });
+                b.HasOne<Account>().WithMany().HasForeignKey(p => p.AccountId).OnDelete(DeleteBehavior.Cascade);
+                b.HasOne<Role>().WithMany().HasForeignKey(p => p.RoleId).OnDelete(DeleteBehavior.Cascade);
+            });
+
+            modelBuilder.Entity<Setting>(b =>
+            {
+                b.ToTable("Settings");
+                b.HasKey(p => p.Id);
+                // Id is the catalog key, e.g. "Theme.PrimaryColor". Value is left unbounded:
+                // it carries anything from a hex color to a license key or a page of blurb.
+                b.Property(p => p.Id).IsUnicode(false).HasMaxLength(200);
+            });
+
         }
 
+        /// <summary>
+        /// The built-in roles. Their grants aren't stored — <see cref="Role.GetEffectivePermissions"/>
+        /// derives them from the catalog — so adding a permission never needs a data fix-up here.
+        /// </summary>
+        protected Role[] SystemRoleSeed() =>
+        [
+            new Role(Role.AdministratorId, "Administrator",
+                    "Full access to everything, including members, roles and settings.")
+                { CreatedOn = defaultCreatedOn.ToUniversalTime() },
+            new Role(Role.MemberId, "Member",
+                    "Runs and configures integrations. Can't manage members, roles or settings.")
+                { CreatedOn = defaultCreatedOn.ToUniversalTime() },
+            new Role(Role.ViewerId, "Viewer",
+                    "Read-only access to integrations, exchanges and configuration.")
+                { CreatedOn = defaultCreatedOn.ToUniversalTime() }
+        ];
+
         async public override Task<int> SaveChangesAsync(CancellationToken cancellationToken = default)
         {
             ChangeTracker.ApplyAuditValues(requestContext.GetNameIdentifier());
diff --git a/SW.Bitween.Api/Domain/Accounts/Account.cs b/SW.Bitween.Api/Domain/Accounts/Account.cs
index a2bb0d0b..bbd28832 100644
--- a/SW.Bitween.Api/Domain/Accounts/Account.cs
+++ b/SW.Bitween.Api/Domain/Accounts/Account.cs
@@ -18,7 +18,6 @@ public Account(string displayName, string email, string password, AccountRole ro
         }
 
         public string Email { get; private set; }
-        public string Phone { get; private set; }
         public string DisplayName { get; set; }
 
         public AccountRole Role { get; private set; }
@@ -63,6 +62,26 @@ public void Update(string name, AccountRole role)
             Role = role;
         }
 
+        /// <summary>Self-service details. Deliberately cannot touch <see cref="Role"/>.</summary>
+        public void UpdateProfile(string name)
+        {
+            DisplayName = name;
+        }
+
+        /// <summary>
+        /// Legacy coarse role, kept in step with the account's roles for older API consumers.
+        /// Authorization itself reads the role assignments, not this.
+        /// </summary>
+        public void SetRole(AccountRole role)
+        {
+            Role = role;
+        }
+
+        public void SetDisabled(bool disabled)
+        {
+            Disabled = disabled;
+        }
+
         public DateTime CreatedOn { get; set; }
         public string CreatedBy { get; set; }
         public DateTime? ModifiedOn { get; set; }
diff --git a/SW.Bitween.Api/Domain/Accounts/AccountRoleLink.cs b/SW.Bitween.Api/Domain/Accounts/AccountRoleLink.cs
new file mode 100644
index 00000000..acc1047a
--- /dev/null
+++ b/SW.Bitween.Api/Domain/Accounts/AccountRoleLink.cs
@@ -0,0 +1,18 @@
+namespace SW.Bitween.Domain.Accounts;
+
+/// <summary>Which roles an account holds. Composite key — one row per account/role pair.</summary>
+public class AccountRoleLink
+{
+    private AccountRoleLink()
+    {
+    }
+
+    public AccountRoleLink(int accountId, int roleId)
+    {
+        AccountId = accountId;
+        RoleId = roleId;
+    }
+
+    public int AccountId { get; private set; }
+    public int RoleId { get; private set; }
+}
diff --git a/SW.Bitween.Api/Domain/Accounts/Role.cs b/SW.Bitween.Api/Domain/Accounts/Role.cs
new file mode 100644
index 00000000..99db343e
--- /dev/null
+++ b/SW.Bitween.Api/Domain/Accounts/Role.cs
@@ -0,0 +1,80 @@
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using SW.Bitween.Model;
+using SW.PrimitiveTypes;
+
+namespace SW.Bitween.Domain.Accounts;
+
+/// <summary>
+/// A reusable set of permission keys. Members hold any number of roles and may do anything
+/// any of their roles allows.
+/// </summary>
+public class Role : BaseEntity, IAudited
+{
+    public const int AdministratorId = 1;
+    public const int MemberId = 2;
+    public const int ViewerId = 3;
+
+    /// <summary>The groups the built-in Member and Viewer roles reach; Administration stays admin-only.</summary>
+    private static readonly string[] NonAdminGroups = ["Operate", "Integrations", "Configuration"];
+
+    private Role()
+    {
+    }
+
+    /// <summary>Seeding path for the built-in roles — fixed Id, grants computed at runtime.</summary>
+    public Role(int id, string name, string description)
+    {
+        Id = id;
+        Name = name;
+        Description = description;
+        IsSystem = true;
+    }
+
+    public Role(string name, string description, IEnumerable<string> permissions)
+    {
+        Name = name;
+        Description = description;
+        Permissions = PermissionCatalog.Sanitize(permissions);
+    }
+
+    public string Name { get; private set; }
+    public string Description { get; private set; }
+
+    /// <summary>
+    /// Catalog keys, stored as one JSON column. Empty for built-in roles — see
+    /// <see cref="GetEffectivePermissions"/>.
+    /// </summary>
+    public List<string> Permissions { get; private set; } = [];
+
+    /// <summary>Built-in roles can be assigned, but never edited or deleted.</summary>
+    public bool IsSystem { get; private set; }
+
+    public void Update(string name, string description, IEnumerable<string> permissions)
+    {
+        Name = name;
+        Description = description;
+        Permissions = PermissionCatalog.Sanitize(permissions);
+    }
+
+    /// <summary>
+    /// What this role actually grants. Built-in roles derive their grants from the catalog at
+    /// runtime instead of storing them, so adding a permission to the catalog reaches
+    /// Administrators — and the right groups — without a migration or a data fix-up.
+    /// </summary>
+    public List<string> GetEffectivePermissions() => IsSystem ? SystemPermissions(Id) : Permissions;
+
+    public static List<string> SystemPermissions(int roleId) => roleId switch
+    {
+        AdministratorId => PermissionCatalog.AllKeys.ToList(),
+        MemberId => PermissionCatalog.InGroups(false, NonAdminGroups),
+        ViewerId => PermissionCatalog.InGroups(true, NonAdminGroups),
+        _ => []
+    };
+
+    public DateTime CreatedOn { get; set; }
+    public string CreatedBy { get; set; }
+    public DateTime? ModifiedOn { get; set; }
+    public string ModifiedBy { get; set; }
+}
diff --git a/SW.Bitween.Api/Domain/Document/Document.cs b/SW.Bitween.Api/Domain/Document/Document.cs
index c9e4147b..e12a33eb 100644
--- a/SW.Bitween.Api/Domain/Document/Document.cs
+++ b/SW.Bitween.Api/Domain/Document/Document.cs
@@ -24,7 +24,17 @@ public Document(int id, string name, DocumentFormat format)
             DocumentFormat = format;
         }
 
+        /// <summary>Production creation path — Id is database-generated. Code is optional.</summary>
+        public Document(string code, string name, DocumentFormat format)
+        {
+            Code = code;
+            Name = name ?? throw new ArgumentNullException(nameof(name));
+            PromotedProperties = new Dictionary<string, string>();
+            DocumentFormat = format;
+        }
+
         public string Name { get; private set; }
+        public string Code { get; private set; }
         public bool BusEnabled { get; set; }
         public string BusMessageTypeName { get; set; }
         public int DuplicateInterval { get; set; }
@@ -37,5 +47,15 @@ public void SetDictionaries(IReadOnlyDictionary<string, string> promotedProperti
         {
             PromotedProperties = promotedProperties;
         }
+
+        public void SetName(string name)
+        {
+            Name = name ?? throw new ArgumentNullException(nameof(name));
+        }
+
+        public void SetCode(string code)
+        {
+            Code = code;
+        }
     }
 }
\ No newline at end of file
diff --git a/SW.Bitween.Api/Domain/Setting.cs b/SW.Bitween.Api/Domain/Setting.cs
new file mode 100644
index 00000000..61d566e8
--- /dev/null
+++ b/SW.Bitween.Api/Domain/Setting.cs
@@ -0,0 +1,26 @@
+using System;
+using SW.PrimitiveTypes;
+
+namespace SW.Bitween.Domain;
+
+/// <summary>
+/// One instance-wide setting, keyed by the setting's catalog key (e.g. <c>Theme.PrimaryColor</c>).
+/// This table is the single source of truth: configuration seeds a key once — on the first boot
+/// after that key exists — and is ignored for it from then on. Every catalog key normally has a
+/// row; "reset to default" rewrites the row with the product default rather than removing it.
+/// <para>
+/// Deliberately a plain key/value store: the definition of a key (label, section, type,
+/// whether it's a secret) lives in <see cref="Services.SettingsCatalog"/>, so adding a
+/// setting never needs a migration or a data fix-up. A secret's value is encrypted before it
+/// gets here — see <see cref="Services.SettingsProtector"/>.
+/// </para>
+/// </summary>
+public class Setting : BaseEntity<string>, IAudited
+{
+    public string Value { get; set; }
+
+    public DateTime CreatedOn { get; set; }
+    public string CreatedBy { get; set; }
+    public DateTime? ModifiedOn { get; set; }
+    public string ModifiedBy { get; set; }
+}
diff --git a/SW.Bitween.Api/Domain/Subscription/Schedule.cs b/SW.Bitween.Api/Domain/Subscription/Schedule.cs
index fe4909db..eaed7744 100644
--- a/SW.Bitween.Api/Domain/Subscription/Schedule.cs
+++ b/SW.Bitween.Api/Domain/Subscription/Schedule.cs
@@ -57,7 +57,11 @@ public override int GetHashCode()
 
         public DateTime Next(DateTime? currentDate = null)
         {
-            var utcNow = currentDate == null ? DateTime.UtcNow : currentDate.Value;
+            // On.Hours/On.Minutes are UTC wall-clock time — the Quartz cron trigger that
+            // actually fires this schedule is explicitly pinned to TimeZoneInfo.Utc
+            // (see SW.Scheduler's WithCronSchedule(...).InTimeZone(TimeZoneInfo.Utc) call
+            // sites), so this must agree rather than each side defaulting independently.
+            var utcNow = currentDate ?? DateTime.UtcNow;
             DateTime nextSelectedDate;
 
             switch (Recurrence)
diff --git a/SW.Bitween.Api/Domain/Xchange/Xchange.cs b/SW.Bitween.Api/Domain/Xchange/Xchange.cs
index e9389a36..e051fa49 100644
--- a/SW.Bitween.Api/Domain/Xchange/Xchange.cs
+++ b/SW.Bitween.Api/Domain/Xchange/Xchange.cs
@@ -76,15 +76,16 @@ public Xchange(Xchange xchange, XchangeFile file, IWorkGroup workGroup, IReadOnl
         }
 
         //retry with reset subscription properties
-        public Xchange(Subscription subscription, Xchange xchange, XchangeFile file, IReadOnlyDictionary<string, int> groupAttemptCounts = null) :
+        public Xchange(Subscription subscription, Xchange xchange, XchangeFile file, Partner gatewayPartner = null,
+            GlobalAdapterValuesSet[] globalAdapterValuesSets = null, IReadOnlyDictionary<string, int> groupAttemptCounts = null) :
             this(xchange.DocumentId, subscription.WorkGroup, file, xchange.References)
         {
             SubscriptionId = xchange.SubscriptionId;
             PartnerId = xchange.PartnerId ?? subscription.PartnerId;
             MapperId = subscription.MapperId;
             HandlerId = subscription.HandlerId;
-            MapperProperties = subscription.MapperProperties;
-            HandlerProperties = subscription.HandlerProperties;
+            MapperProperties = (subscription.MapperProperties ?? new Dictionary<string, string>()).ToDictionary().Fill(gatewayPartner, globalAdapterValuesSets);
+            HandlerProperties = (subscription.HandlerProperties ?? new Dictionary<string, string>()).ToDictionary().Fill(gatewayPartner, globalAdapterValuesSets);
             ResponseSubscriptionId = subscription.ResponseSubscriptionId;
             RetryFor = xchange.Id;
             CorrelationId = xchange.CorrelationId;
diff --git a/SW.Bitween.Api/Extensions/AccountExtensions.cs b/SW.Bitween.Api/Extensions/AccountExtensions.cs
index a0c3a6f5..a647579e 100644
--- a/SW.Bitween.Api/Extensions/AccountExtensions.cs
+++ b/SW.Bitween.Api/Extensions/AccountExtensions.cs
@@ -78,9 +78,6 @@ private static ClaimsIdentity CreateClaimsIdentity(this Account account, LoginMe
                 case LoginMethod.EmailAndPassword:
                     claims.Add(new Claim(ClaimTypes.Name, account.Email));
                     break;
-                case LoginMethod.PhoneAndOtp:
-                    claims.Add(new Claim(ClaimTypes.Name, account.Phone));
-                    break;
                 case LoginMethod.ApiKey:
                     claims.Add(new Claim(ClaimTypes.Name, account.Id.ToString()));
                     break;
@@ -91,7 +88,6 @@ private static ClaimsIdentity CreateClaimsIdentity(this Account account, LoginMe
             }
 
             if (account.Email != null) claims.Add(new Claim(ClaimTypes.Email, account.Email));
-            if (account.Phone != null) claims.Add(new Claim(ClaimTypes.MobilePhone, account.Phone));
 
 
             return new ClaimsIdentity(claims, "Bitween");
diff --git a/SW.Bitween.Api/Extensions/ClaimsPrincipalExtensions.cs b/SW.Bitween.Api/Extensions/ClaimsPrincipalExtensions.cs
deleted file mode 100644
index ec5900b7..00000000
--- a/SW.Bitween.Api/Extensions/ClaimsPrincipalExtensions.cs
+++ /dev/null
@@ -1,17 +0,0 @@
-using System;
-using System.Security.Claims;
-using SW.Bitween.Domain.Accounts;
-
-namespace SW.Bitween
-{
-    static class ClaimsPrincipalExtensions
-    {
-        public static AccountRole? GetRole(this ClaimsPrincipal claimsPrincipal)
-        {
-            var role = claimsPrincipal?.FindFirst("Role");
-            if (role is null)
-                return null;
-            return Enum.Parse<AccountRole>(role.Value);
-        }
-    }
-}
\ No newline at end of file
diff --git a/SW.Bitween.Api/Extensions/RequestContextExtensions.cs b/SW.Bitween.Api/Extensions/RequestContextExtensions.cs
index 32de6bfe..93f5bb8f 100644
--- a/SW.Bitween.Api/Extensions/RequestContextExtensions.cs
+++ b/SW.Bitween.Api/Extensions/RequestContextExtensions.cs
@@ -1,17 +1,77 @@
+using System.Collections.Generic;
 using System.Linq;
+using System.Threading.Tasks;
+using Microsoft.EntityFrameworkCore;
 using SW.Bitween.Domain.Accounts;
+using SW.Bitween.Model;
 using SW.PrimitiveTypes;
 
 namespace SW.Bitween
 {
     public static class RequestContextExtensions
     {
-        public static void EnsureAccess(this RequestContext requestContext, params AccountRole[] allowedRoles)
+        /// <summary>
+        /// Marks the break-glass token minted by POST /login from configured AdminCredentials. That
+        /// token has no account behind it, so its grants can't be resolved from the database. It
+        /// used to clear every check only because the old role guard failed open on a missing
+        /// claim; this claim makes the same grant deliberate instead of accidental.
+        /// </summary>
+        public const string SuperuserClaim = "bitween_superuser";
+
+        /// <summary>
+        /// Throws unless the caller holds at least one of <paramref name="anyOf"/>. This is really a
+        /// "forbidden" — the caller is signed in and simply isn't allowed — but CqApi renders
+        /// SWForbiddenException as a 401 that's byte-identical to sending no token, so there is no
+        /// distinction to be had on the wire. The client answers a 401 by refreshing the token and
+        /// retrying once, which means every denial costs a wasted round trip. Worth revisiting if
+        /// CqApi ever maps forbidden to 403.
+        /// </summary>
+        public static async Task EnsurePermission(this RequestContext requestContext, BitweenDbContext dbContext,
+            params string[] anyOf)
         {
+            var granted = await requestContext.GetPermissions(dbContext);
+            if (!anyOf.Any(granted.Contains))
+                throw new SWUnauthorizedException("INSUFFICIENT_PERMISSIONS");
+        }
 
-            var jobRole = requestContext.User.GetRole();
-            if (jobRole is not null && allowedRoles.All(a => a != jobRole))
+        public static async Task<bool> HasPermission(this RequestContext requestContext, BitweenDbContext dbContext,
+            string permission)
+        {
+            var granted = await requestContext.GetPermissions(dbContext);
+            return granted.Contains(permission);
+        }
+
+        /// <summary>
+        /// The union of every permission the caller's roles grant. Resolved from the database on
+        /// each call rather than carried in the token, so revoking a role takes effect immediately
+        /// instead of at token expiry. Handlers guard once, so that's one small indexed query.
+        /// </summary>
+        public static async Task<HashSet<string>> GetPermissions(this RequestContext requestContext,
+            BitweenDbContext dbContext)
+        {
+            if (requestContext.User?.FindFirst(SuperuserClaim) is not null)
+                return PermissionCatalog.AllKeys.ToHashSet();
+
+            // Fail closed: no identifiable account means no grants.
+            if (!int.TryParse(requestContext.GetNameIdentifier(), out var accountId))
                 throw new SWUnauthorizedException("INSUFFICIENT_PERMISSIONS");
+
+            return await GetPermissionsOf(dbContext, accountId);
+        }
+
+        public static async Task<HashSet<string>> GetPermissionsOf(BitweenDbContext dbContext, int accountId)
+        {
+            var roles = await (from link in dbContext.Set<AccountRoleLink>()
+                    join role in dbContext.Set<Role>() on link.RoleId equals role.Id
+                    where link.AccountId == accountId
+                    select new { role.Id, role.IsSystem, role.Permissions })
+                .AsNoTracking()
+                .ToListAsync();
+
+            var granted = new HashSet<string>();
+            foreach (var role in roles)
+                granted.UnionWith(role.IsSystem ? Role.SystemPermissions(role.Id) : role.Permissions ?? []);
+            return granted;
         }
     }
-}
\ No newline at end of file
+}
diff --git a/SW.Bitween.Api/Resources/Accounts/AccountRoles.cs b/SW.Bitween.Api/Resources/Accounts/AccountRoles.cs
new file mode 100644
index 00000000..6f6117e5
--- /dev/null
+++ b/SW.Bitween.Api/Resources/Accounts/AccountRoles.cs
@@ -0,0 +1,70 @@
+using System.Collections.Generic;
+using System.Linq;
+using System.Threading.Tasks;
+using Microsoft.EntityFrameworkCore;
+using SW.Bitween.Domain.Accounts;
+using SW.Bitween.Model;
+using SW.PrimitiveTypes;
+
+namespace SW.Bitween.Resources.Accounts;
+
+internal static class AccountRoles
+{
+    /// <summary>Role summaries for a set of accounts, in one query — keyed by account id.</summary>
+    public static async Task<Dictionary<int, List<AccountRoleSummary>>> For(BitweenDbContext dbContext,
+        List<int> accountIds)
+    {
+        var links = await (from link in dbContext.Set<AccountRoleLink>()
+                join role in dbContext.Set<Role>() on link.RoleId equals role.Id
+                where accountIds.Contains(link.AccountId)
+                select new { link.AccountId, role.Id, role.Name })
+            .AsNoTracking()
+            .ToListAsync();
+
+        return links
+            .GroupBy(l => l.AccountId)
+            .ToDictionary(
+                g => g.Key,
+                g => g.OrderBy(l => l.Name)
+                    .Select(l => new AccountRoleSummary { Id = l.Id, Name = l.Name })
+                    .ToList());
+    }
+
+    public static async Task<List<AccountRoleSummary>> Of(BitweenDbContext dbContext, int accountId) =>
+        (await For(dbContext, [accountId])).GetValueOrDefault(accountId, []);
+
+    /// <summary>
+    /// Replaces an account's roles. Rejects unknown ids so a stale UI can't silently strip access.
+    /// </summary>
+    public static async Task Set(BitweenDbContext dbContext, int accountId, List<int> roleIds)
+    {
+        var wanted = (roleIds ?? []).Distinct().ToList();
+
+        var known = await dbContext.Set<Role>().Where(r => wanted.Contains(r.Id)).Select(r => r.Id).ToListAsync();
+        var unknown = wanted.Except(known).ToList();
+        if (unknown.Count > 0)
+            throw new SWValidationException("ROLE_NOT_FOUND",
+                $"These roles don't exist: {string.Join(", ", unknown)}.");
+
+        var existing = await dbContext.Set<AccountRoleLink>().Where(l => l.AccountId == accountId).ToListAsync();
+
+        foreach (var link in existing.Where(l => !wanted.Contains(l.RoleId)))
+            dbContext.Remove(link);
+
+        foreach (var roleId in wanted.Except(existing.Select(l => l.RoleId)))
+            dbContext.Add(new AccountRoleLink(accountId, roleId));
+    }
+
+    /// <summary>
+    /// Keeps the legacy <see cref="Account.Role"/> column meaningful for older API consumers. It no
+    /// longer drives authorization — it's derived from whichever built-in role the member holds,
+    /// falling back to Member for someone who only holds custom roles.
+    /// </summary>
+    public static AccountRole LegacyRoleFor(List<int> roleIds)
+    {
+        if (roleIds.Contains(Role.AdministratorId)) return AccountRole.Admin;
+        if (roleIds.Contains(Role.MemberId)) return AccountRole.Member;
+        if (roleIds.Count == 0 || roleIds.Contains(Role.ViewerId)) return AccountRole.Viewer;
+        return AccountRole.Member;
+    }
+}
diff --git a/SW.Bitween.Api/Resources/Accounts/Administrators.cs b/SW.Bitween.Api/Resources/Accounts/Administrators.cs
new file mode 100644
index 00000000..fbd18109
--- /dev/null
+++ b/SW.Bitween.Api/Resources/Accounts/Administrators.cs
@@ -0,0 +1,38 @@
+using System.Linq;
+using System.Threading.Tasks;
+using Microsoft.EntityFrameworkCore;
+using SW.Bitween.Domain.Accounts;
+using SW.PrimitiveTypes;
+
+namespace SW.Bitween.Resources.Accounts;
+
+internal static class Administrators
+{
+    /// <summary>
+    /// How many other enabled accounts still hold the Administrator role. Guards every operation
+    /// that could otherwise leave an instance with nobody able to manage members and roles.
+    /// </summary>
+    public static Task<int> OtherThan(BitweenDbContext dbContext, int accountId) =>
+        (from link in dbContext.Set<AccountRoleLink>()
+            join account in dbContext.Set<Account>() on link.AccountId equals account.Id
+            where link.RoleId == Role.AdministratorId && link.AccountId != accountId && !account.Disabled
+            select link.AccountId).CountAsync();
+
+    public static Task<bool> Holds(BitweenDbContext dbContext, int accountId) =>
+        dbContext.Set<AccountRoleLink>()
+            .AnyAsync(l => l.AccountId == accountId && l.RoleId == Role.AdministratorId);
+
+    /// <summary>
+    /// Blocks an operation that would remove the last administrator. Only applies when the account
+    /// actually holds the role — otherwise nothing is being taken away.
+    /// </summary>
+    public static async Task EnsureNotTheLast(BitweenDbContext dbContext, int accountId)
+    {
+        if (!await Holds(dbContext, accountId))
+            return;
+
+        if (await OtherThan(dbContext, accountId) == 0)
+            throw new SWValidationException("LAST_ADMINISTRATOR",
+                "This is the only member with the Administrator role. Give it to someone else first.");
+    }
+}
diff --git a/SW.Bitween.Api/Resources/Accounts/ChangePassword.cs b/SW.Bitween.Api/Resources/Accounts/ChangePassword.cs
index 40ade9aa..7c6e8800 100644
--- a/SW.Bitween.Api/Resources/Accounts/ChangePassword.cs
+++ b/SW.Bitween.Api/Resources/Accounts/ChangePassword.cs
@@ -21,8 +21,8 @@ public ChangePassword(BitweenDbContext dbContext, RequestContext requestContext)
 
     public async Task<object> Handle(ChangePasswordModel request)
     {
-        _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member, AccountRole.Viewer);
-
+        // Self-service: this only ever changes the caller's own password, and the old one has to
+        // be supplied. The guard it replaces listed every role, so it granted nothing.
         var accountId = Convert.ToInt32(_requestContext.GetNameIdentifier());
         var account = await _dbContext.Set<Account>().FindAsync(accountId);
 
diff --git a/SW.Bitween.Api/Resources/Accounts/Create.cs b/SW.Bitween.Api/Resources/Accounts/Create.cs
index f8e10142..173f3b14 100644
--- a/SW.Bitween.Api/Resources/Accounts/Create.cs
+++ b/SW.Bitween.Api/Resources/Accounts/Create.cs
@@ -1,3 +1,4 @@
+using System.Linq;
 using System.Threading.Tasks;
 using FluentValidation;
 using Microsoft.EntityFrameworkCore;
@@ -23,7 +24,7 @@ public Create(BitweenDbContext dbContext, RequestContext requestContext, Bitween
 
         public async Task<object> Handle(CreateAccountModel request)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin);
+            await _requestContext.EnsurePermission(dbContext, Model.Permissions.Users.Create);
 
             if (string.IsNullOrEmpty(request.Name) || string.IsNullOrEmpty(request.Email) ||
                 (!_bitweenOptions.DisableEmailPasswordLogin && string.IsNullOrEmpty(request.Password)))
@@ -32,6 +33,17 @@ public async Task<object> Handle(CreateAccountModel request)
             if (await dbContext.Set<Account>().AnyAsync(a => a.Email == request.Email))
                 throw new SWValidationException("ACCOUNT_EXISTS", $"Account with email {request.Email} exists");
 
+            // Prefer explicit role ids, and fall back to the legacy coarse role only when one was
+            // actually sent. It used to be a plain int, so omitting it meant 0 — which is Admin —
+            // and adding a member with no roles ticked handed them the run of the instance.
+            var roleIds = request.RoleIds is { Count: > 0 }
+                ? request.RoleIds.Distinct().ToList()
+                : request.Role is null
+                    ? []
+                    : [BuiltInRoleFor((AccountRole)request.Role)];
+
+            // No password at all when this instance signs in through Microsoft only — the account
+            // exists purely to be matched by email.
             var password = _bitweenOptions.DisableEmailPasswordLogin
                 ? null
                 : SecurePasswordHasher.Hash(request.Password);
@@ -40,14 +52,23 @@ public async Task<object> Handle(CreateAccountModel request)
                 request.Name,
                 request.Email,
                 password,
-                (AccountRole)request.Role);
+                AccountRoles.LegacyRoleFor(roleIds));
             dbContext.Add(newAccount);
+            await dbContext.SaveChangesAsync();
 
+            await AccountRoles.Set(dbContext, newAccount.Id, roleIds);
             await dbContext.SaveChangesAsync();
 
-            return null;
+            return newAccount.Id;
         }
 
+        private static int BuiltInRoleFor(AccountRole role) => role switch
+        {
+            AccountRole.Admin => Role.AdministratorId,
+            AccountRole.Member => Role.MemberId,
+            _ => Role.ViewerId
+        };
+
         private class Validate : AbstractValidator<CreateAccountModel>
         {
             public Validate(BitweenOptions bitweenOptions)
@@ -55,7 +76,6 @@ public Validate(BitweenOptions bitweenOptions)
                 RuleFor(i => i.Name).NotEmpty();
                 RuleFor(i => i.Email).NotEmpty();
                 RuleFor(i => i.Password).NotEmpty().When(_ => !bitweenOptions.DisableEmailPasswordLogin);
-                RuleFor(i => i.Role).NotNull();
             }
         }
     }
diff --git a/SW.Bitween.Api/Resources/Accounts/Profile.cs b/SW.Bitween.Api/Resources/Accounts/Profile.cs
index 18eced18..ce4cf093 100644
--- a/SW.Bitween.Api/Resources/Accounts/Profile.cs
+++ b/SW.Bitween.Api/Resources/Accounts/Profile.cs
@@ -8,6 +8,10 @@
 
 namespace SW.Bitween.Resources.Accounts;
 
+/// <summary>
+/// Who am I and what may I do. Deliberately ungated — every signed-in caller needs it, and the
+/// permissions it returns are what the UI uses to decide which pages and actions to show.
+/// </summary>
 [HandlerName("profile")]
 public class Profile : IQueryHandler<object>
 {
@@ -23,16 +27,26 @@ public Profile(BitweenDbContext dbContext, RequestContext requestContext)
     public async Task<object> Handle()
     {
         var accountId = Convert.ToInt32(requestContext.GetNameIdentifier());
-        return await dbContext.Set<Account>()
+
+        var profile = await dbContext.Set<Account>()
             .AsNoTracking()
-            .Select(a => new AccountModel
+            .Where(a => a.Id == accountId)
+            .Select(a => new ProfileModel
             {
                 CreatedOn = a.CreatedOn,
                 Email = a.Email,
                 Name = a.DisplayName,
                 Id = a.Id,
+                Disabled = a.Disabled,
                 Role = a.Role.ToString()
             })
-            .FirstOrDefaultAsync(a => a.Id == accountId);
+            .SingleOrDefaultAsync();
+
+        if (profile is null)
+            return null;
+
+        profile.Roles = await AccountRoles.Of(dbContext, accountId);
+        profile.Permissions = (await requestContext.GetPermissions(dbContext)).OrderBy(p => p).ToList();
+        return profile;
     }
-}
\ No newline at end of file
+}
diff --git a/SW.Bitween.Api/Resources/Accounts/RemoveAccount.cs b/SW.Bitween.Api/Resources/Accounts/RemoveAccount.cs
index a93a6b50..dabe8792 100644
--- a/SW.Bitween.Api/Resources/Accounts/RemoveAccount.cs
+++ b/SW.Bitween.Api/Resources/Accounts/RemoveAccount.cs
@@ -1,3 +1,4 @@
+using System;
 using System.Threading.Tasks;
 using SW.Bitween.Domain.Accounts;
 using SW.PrimitiveTypes;
@@ -18,13 +19,18 @@ public RemoveAccountModel(BitweenDbContext dbContext, RequestContext requestCont
 
     public async Task<object> Handle(int key, RemoveAccountModel request)
     {
-        _requestContext.EnsureAccess(AccountRole.Admin);
+        await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Users.Delete);
 
         var account = await _dbContext.Set<Account>().FindAsync(key);
 
         if (account is null)
             throw new SWValidationException("ACCOUNT_NOT_FOUND", $"Account with {key} was not found");
 
+        if (key == Convert.ToInt32(_requestContext.GetNameIdentifier()))
+            throw new SWValidationException("CANNOT_REMOVE_SELF", "You can't remove your own account.");
+
+        await Administrators.EnsureNotTheLast(_dbContext, key);
+
         _dbContext.Remove(account);
         await _dbContext.SaveChangesAsync();
 
diff --git a/SW.Bitween.Api/Resources/Accounts/Search.cs b/SW.Bitween.Api/Resources/Accounts/Search.cs
index fd7afebc..be767dcd 100644
--- a/SW.Bitween.Api/Resources/Accounts/Search.cs
+++ b/SW.Bitween.Api/Resources/Accounts/Search.cs
@@ -1,3 +1,4 @@
+using System.Collections.Generic;
 using System.Linq;
 using System.Threading.Tasks;
 using Microsoft.EntityFrameworkCore;
@@ -7,22 +8,28 @@
 
 namespace SW.Bitween.Resources.Accounts
 {
-    public class Search : IQueryHandler<SearchMembersModel,object>
+    public class Search : IQueryHandler<SearchMembersModel, object>
     {
         private readonly BitweenDbContext dbContext;
+        private readonly RequestContext requestContext;
 
-        public Search(BitweenDbContext dbContext)
+        public Search(BitweenDbContext dbContext, RequestContext requestContext)
         {
             this.dbContext = dbContext;
+            this.requestContext = requestContext;
         }
 
         public async Task<object> Handle(SearchMembersModel request)
         {
+            // Lookup returns only id/name pairs, which document and integration trails use to turn
+            // createdBy ids into names; the member list itself is the data users.view covers.
+            if (!request.Lookup)
+                await requestContext.EnsurePermission(dbContext, Model.Permissions.Users.View);
+
             request.Limit ??= 20;
             request.Offset ??= 0;
             var query = dbContext.Set<Account>().AsNoTracking().AsQueryable();
 
-
             if (request.Lookup)
             {
                 return await query.OrderBy(i => i.DisplayName)
@@ -40,10 +47,16 @@ public async Task<object> Handle(SearchMembersModel request)
                     Email = a.Email,
                     Name = a.DisplayName,
                     Id = a.Id,
+                    Disabled = a.Disabled,
                     Role = a.Role.ToString()
                 })
                 .ToListAsync();
 
+            var accountIds = accounts.Select(a => a.Id).ToList();
+            var rolesByAccount = await AccountRoles.For(dbContext, accountIds);
+
+            foreach (var account in accounts)
+                account.Roles = rolesByAccount.GetValueOrDefault(account.Id, []);
 
             return new
             {
@@ -52,4 +65,4 @@ public async Task<object> Handle(SearchMembersModel request)
             };
         }
     }
-}
\ No newline at end of file
+}
diff --git a/SW.Bitween.Api/Resources/Accounts/SetDisabled.cs b/SW.Bitween.Api/Resources/Accounts/SetDisabled.cs
new file mode 100644
index 00000000..94185d31
--- /dev/null
+++ b/SW.Bitween.Api/Resources/Accounts/SetDisabled.cs
@@ -0,0 +1,46 @@
+using System;
+using System.Threading.Tasks;
+using SW.Bitween.Domain.Accounts;
+using SW.Bitween.Model;
+using SW.PrimitiveTypes;
+
+namespace SW.Bitween.Resources.Accounts;
+
+/// <summary>
+/// Suspends or restores an account. A disabled account keeps its roles and history but can't sign
+/// in — see the Disabled check in the login handler.
+/// </summary>
+[HandlerName("setDisabled")]
+public class SetDisabled : ICommandHandler<int, SetAccountDisabledModel, object>
+{
+    private readonly BitweenDbContext _dbContext;
+    private readonly RequestContext _requestContext;
+
+    public SetDisabled(BitweenDbContext dbContext, RequestContext requestContext)
+    {
+        _dbContext = dbContext;
+        _requestContext = requestContext;
+    }
+
+    public async Task<object> Handle(int key, SetAccountDisabledModel request)
+    {
+        await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Users.Edit);
+
+        var account = await _dbContext.Set<Account>().FindAsync(key);
+        if (account is null)
+            throw new SWValidationException("ACCOUNT_NOT_FOUND", $"No account exists with the id {key}");
+
+        if (request.Disabled)
+        {
+            if (key == Convert.ToInt32(_requestContext.GetNameIdentifier()))
+                throw new SWValidationException("CANNOT_DISABLE_SELF", "You can't disable your own account.");
+
+            await Administrators.EnsureNotTheLast(_dbContext, key);
+        }
+
+        account.SetDisabled(request.Disabled);
+        await _dbContext.SaveChangesAsync();
+
+        return null;
+    }
+}
diff --git a/SW.Bitween.Api/Resources/Accounts/SetPassword.cs b/SW.Bitween.Api/Resources/Accounts/SetPassword.cs
new file mode 100644
index 00000000..65ef407e
--- /dev/null
+++ b/SW.Bitween.Api/Resources/Accounts/SetPassword.cs
@@ -0,0 +1,52 @@
+using System;
+using System.Threading.Tasks;
+using FluentValidation;
+using SW.Bitween.Domain.Accounts;
+using SW.Bitween.Model;
+using SW.PrimitiveTypes;
+
+namespace SW.Bitween.Resources.Accounts;
+
+/// <summary>
+/// Sets a member's password on their behalf. Bitween has no outbound mail, so there's no
+/// self-service reset — without this, anyone who forgets their password is locked out for good.
+/// Changing your own password goes through ChangePassword, which asks for the current one.
+/// </summary>
+[HandlerName("setPassword")]
+public class SetPassword : ICommandHandler<int, SetAccountPasswordModel, object>
+{
+    private readonly BitweenDbContext _dbContext;
+    private readonly RequestContext _requestContext;
+
+    public SetPassword(BitweenDbContext dbContext, RequestContext requestContext)
+    {
+        _dbContext = dbContext;
+        _requestContext = requestContext;
+    }
+
+    public async Task<object> Handle(int key, SetAccountPasswordModel request)
+    {
+        await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Users.Edit);
+
+        if (key == Convert.ToInt32(_requestContext.GetNameIdentifier()))
+            throw new SWValidationException("USE_CHANGE_PASSWORD",
+                "Use Change password to set your own, so the current one is still required.");
+
+        var account = await _dbContext.Set<Account>().FindAsync(key);
+        if (account is null)
+            throw new SWValidationException("ACCOUNT_NOT_FOUND", $"No account exists with the id {key}");
+
+        account.SetPassword(request.Password);
+        await _dbContext.SaveChangesAsync();
+
+        return null;
+    }
+
+    private class Validate : AbstractValidator<SetAccountPasswordModel>
+    {
+        public Validate()
+        {
+            RuleFor(i => i.Password).NotEmpty().MinimumLength(8);
+        }
+    }
+}
diff --git a/SW.Bitween.Api/Resources/Accounts/SetRoles.cs b/SW.Bitween.Api/Resources/Accounts/SetRoles.cs
new file mode 100644
index 00000000..779b165b
--- /dev/null
+++ b/SW.Bitween.Api/Resources/Accounts/SetRoles.cs
@@ -0,0 +1,44 @@
+using System;
+using System.Linq;
+using System.Threading.Tasks;
+using SW.Bitween.Domain.Accounts;
+using SW.Bitween.Model;
+using SW.PrimitiveTypes;
+
+namespace SW.Bitween.Resources.Accounts;
+
+/// <summary>Replaces the whole set of roles a member holds.</summary>
+[HandlerName("setRoles")]
+public class SetRoles : ICommandHandler<int, SetAccountRolesModel, object>
+{
+    private readonly BitweenDbContext _dbContext;
+    private readonly RequestContext _requestContext;
+
+    public SetRoles(BitweenDbContext dbContext, RequestContext requestContext)
+    {
+        _dbContext = dbContext;
+        _requestContext = requestContext;
+    }
+
+    public async Task<object> Handle(int key, SetAccountRolesModel request)
+    {
+        await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Users.Edit);
+
+        var account = await _dbContext.Set<Account>().FindAsync(key);
+        if (account is null)
+            throw new SWValidationException("ACCOUNT_NOT_FOUND", $"No account exists with the id {key}");
+
+        var roleIds = (request.RoleIds ?? []).Distinct().ToList();
+
+        // Don't let the last administrator be demoted — including by themselves. Otherwise an
+        // instance ends up with nobody able to manage members or roles.
+        if (!roleIds.Contains(Role.AdministratorId))
+            await Administrators.EnsureNotTheLast(_dbContext, key);
+
+        await AccountRoles.Set(_dbContext, key, roleIds);
+        account.SetRole(AccountRoles.LegacyRoleFor(roleIds));
+        await _dbContext.SaveChangesAsync();
+
+        return null;
+    }
+}
diff --git a/SW.Bitween.Api/Resources/Accounts/Update.cs b/SW.Bitween.Api/Resources/Accounts/Update.cs
index d7b3a3e6..1a27b8a9 100644
--- a/SW.Bitween.Api/Resources/Accounts/Update.cs
+++ b/SW.Bitween.Api/Resources/Accounts/Update.cs
@@ -6,7 +6,7 @@
 
 namespace SW.Bitween.Resources.Accounts;
 
-public class Update : ICommandHandler<int, UpdateAccountModel,object>
+public class Update : ICommandHandler<int, UpdateAccountModel, object>
 {
     private readonly BitweenDbContext _dbContext;
     private readonly RequestContext _requestContext;
@@ -21,19 +21,35 @@ public async Task<object> Handle(int key, UpdateAccountModel request)
     {
         var loggedInUserId = Convert.ToInt32(_requestContext.GetNameIdentifier());
 
+        // Anyone may edit their own name; editing someone else needs the grant.
         if (key != loggedInUserId)
-            _requestContext.EnsureAccess(AccountRole.Admin);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Users.Edit);
 
-
-        
         var account = await _dbContext.Set<Account>().FindAsync(key);
         if (account is null)
             throw new SWValidationException("ACCOUNT_NOT_FOUND", $"No account exists with the id {key}");
 
+        account.UpdateProfile(request.Name);
+
+        // Changing a role is never self-service, or anyone could promote themselves.
+        if (request.Role is not null && (AccountRole)request.Role != account.Role)
+        {
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Users.Edit);
+            var role = (AccountRole)request.Role;
+            account.SetRole(role);
+            await AccountRoles.Set(_dbContext, key, [BuiltInRoleFor(role)]);
+        }
 
-        account.Update(request.Name, (AccountRole)request.Role);
         await _dbContext.SaveChangesAsync();
 
         return null;
     }
-}
\ No newline at end of file
+
+    /// <summary>Maps the legacy coarse role onto the built-in role that reproduces it.</summary>
+    private static int BuiltInRoleFor(AccountRole role) => role switch
+    {
+        AccountRole.Admin => Role.AdministratorId,
+        AccountRole.Member => Role.MemberId,
+        _ => Role.ViewerId
+    };
+}
diff --git a/SW.Bitween.Api/Resources/ApiGateways/AddPartner.cs b/SW.Bitween.Api/Resources/ApiGateways/AddPartner.cs
index 78e08409..764460ec 100644
--- a/SW.Bitween.Api/Resources/ApiGateways/AddPartner.cs
+++ b/SW.Bitween.Api/Resources/ApiGateways/AddPartner.cs
@@ -2,7 +2,6 @@
 using SW.Bitween.Model;
 using SW.PrimitiveTypes;
 using System.Threading.Tasks;
-using SW.Bitween.Domain.Accounts;
 using Microsoft.EntityFrameworkCore;
 using System.Linq;
 using SW.Bitween.Domain;
@@ -23,7 +22,7 @@ public AddPartner(BitweenDbContext dbContext, RequestContext requestContext)
 
         public async Task<object> Handle(int gatewayId, ApiGatewayPartnerCreate model)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.ApiGateways.Edit);
 
             var gateway = await _dbContext.Set<ApiGateway>()
                 .Include(ag => ag.Partners)
diff --git a/SW.Bitween.Api/Resources/ApiGateways/Create.cs b/SW.Bitween.Api/Resources/ApiGateways/Create.cs
index c4702745..60f633a8 100644
--- a/SW.Bitween.Api/Resources/ApiGateways/Create.cs
+++ b/SW.Bitween.Api/Resources/ApiGateways/Create.cs
@@ -2,7 +2,6 @@
 using SW.Bitween.Model;
 using SW.PrimitiveTypes;
 using System.Threading.Tasks;
-using SW.Bitween.Domain.Accounts;
 
 namespace SW.Bitween.Resources.ApiGateways
 {
@@ -19,7 +18,7 @@ public Create(BitweenDbContext dbContext, RequestContext requestContext)
 
         public async Task<object> Handle(ApiGatewayCreate model)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.ApiGateways.Create);
 
             if (string.IsNullOrWhiteSpace(model.UrlName))
                 throw new SWException("UrlName is required");
diff --git a/SW.Bitween.Api/Resources/ApiGateways/Delete.cs b/SW.Bitween.Api/Resources/ApiGateways/Delete.cs
index 88143b5a..bea7de8a 100644
--- a/SW.Bitween.Api/Resources/ApiGateways/Delete.cs
+++ b/SW.Bitween.Api/Resources/ApiGateways/Delete.cs
@@ -1,8 +1,8 @@
+using Microsoft.EntityFrameworkCore;
 using SW.EfCoreExtensions;
 using SW.Bitween.Domain.Gateway;
 using SW.PrimitiveTypes;
 using System.Threading.Tasks;
-using SW.Bitween.Domain.Accounts;
 
 namespace SW.Bitween.Resources.ApiGateways
 {
@@ -19,9 +19,21 @@ public Delete(BitweenDbContext dbContext, RequestContext requestContext)
 
         public async Task<object> Handle(int key)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.ApiGateways.Delete);
 
-            await _dbContext.DeleteByKeyAsync<ApiGateway>(key);
+            var gateway = await _dbContext.Set<ApiGateway>()
+                .Include(ag => ag.Partners)
+                .FirstOrDefaultAsync(ag => ag.Id == key);
+
+            if (gateway == null)
+                throw new SWNotFoundException($"ApiGateway with Id {key} not found");
+
+            // Partners are FK-restricted to the gateway; remove them explicitly before the gateway.
+            if (gateway.Partners != null && gateway.Partners.Count > 0)
+                _dbContext.RemoveRange(gateway.Partners);
+
+            _dbContext.Remove(gateway);
+            await _dbContext.SaveChangesAsync();
             return null;
         }
     }
diff --git a/SW.Bitween.Api/Resources/ApiGateways/Get.cs b/SW.Bitween.Api/Resources/ApiGateways/Get.cs
index 0b935c0b..6d8ce6aa 100644
--- a/SW.Bitween.Api/Resources/ApiGateways/Get.cs
+++ b/SW.Bitween.Api/Resources/ApiGateways/Get.cs
@@ -10,14 +10,18 @@ namespace SW.Bitween.Resources.ApiGateways
     public class Get : IGetHandler<int, object>
     {
         private readonly BitweenDbContext _dbContext;
+        private readonly RequestContext _requestContext;
 
-        public Get(BitweenDbContext dbContext)
+        public Get(BitweenDbContext dbContext, RequestContext requestContext)
         {
             _dbContext = dbContext;
+            _requestContext = requestContext;
         }
 
         public async Task<object> Handle(int key)
         {
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.ApiGateways.View);
+
             var gateway = await _dbContext.Set<ApiGateway>()
                 .AsNoTracking()
                 .Include(ag => ag.Partners)
diff --git a/SW.Bitween.Api/Resources/ApiGateways/RemovePartner.cs b/SW.Bitween.Api/Resources/ApiGateways/RemovePartner.cs
index 610ac43d..1dbca5e8 100644
--- a/SW.Bitween.Api/Resources/ApiGateways/RemovePartner.cs
+++ b/SW.Bitween.Api/Resources/ApiGateways/RemovePartner.cs
@@ -1,7 +1,6 @@
 using SW.Bitween.Domain.Gateway;
 using SW.PrimitiveTypes;
 using System.Threading.Tasks;
-using SW.Bitween.Domain.Accounts;
 using Microsoft.EntityFrameworkCore;
 using System.Linq;
 
@@ -21,7 +20,7 @@ public RemovePartner(BitweenDbContext dbContext, RequestContext requestContext)
 
         public async Task<object> Handle(int gatewayId, RemovePartnerRequest request)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.ApiGateways.Edit);
 
             var gateway = await _dbContext.Set<ApiGateway>()
                 .Include(ag => ag.Partners)
diff --git a/SW.Bitween.Api/Resources/ApiGateways/Search.cs b/SW.Bitween.Api/Resources/ApiGateways/Search.cs
index b22f722f..12db87cf 100644
--- a/SW.Bitween.Api/Resources/ApiGateways/Search.cs
+++ b/SW.Bitween.Api/Resources/ApiGateways/Search.cs
@@ -11,14 +11,21 @@ namespace SW.Bitween.Resources.ApiGateways
     public class Search : ISearchyHandler
     {
         private readonly BitweenDbContext _dbContext;
+        private readonly RequestContext _requestContext;
 
-        public Search(BitweenDbContext dbContext)
+        public Search(BitweenDbContext dbContext, RequestContext requestContext)
         {
             _dbContext = dbContext;
+            _requestContext = requestContext;
         }
 
         public async Task<object> Handle(SearchyRequest searchyRequest, bool lookup = false, string searchPhrase = null)
         {
+            // Lookup returns only id/name pairs, which pickers across the app rely on;
+            // the full list is the data, so that's what the view permission covers.
+            if (!lookup)
+                await _requestContext.EnsurePermission(_dbContext, Model.Permissions.ApiGateways.View);
+
             var query = from gateway in _dbContext.Set<ApiGateway>()
                         select new ApiGatewayRow
                         {
@@ -38,10 +45,35 @@ public async Task<object> Handle(SearchyRequest searchyRequest, bool lookup = fa
             // Apply ordering by Id descending
             query = query.OrderByDescending(g => g.Id);
 
+            var totalCount = await query.Search(searchyRequest.Conditions).CountAsync();
+            var result = await query.Search(searchyRequest.Conditions, searchyRequest.Sorts, searchyRequest.PageSize, searchyRequest.PageIndex).ToListAsync();
+
+            // The list screen needs full attachment detail up front (not just a
+            // count), so hydrate it with one grouped query instead of Get.cs's
+            // per-row Include (gateways are few, so this stays a single round trip).
+            var ids = result.Select(r => r.Id).ToList();
+            var partnersByGateway = (await _dbContext.Set<ApiGatewayPartner>()
+                .AsNoTracking()
+                .Where(p => ids.Contains(p.ApiGatewayId))
+                .Include(p => p.Partner)
+                .Include(p => p.Subscription)
+                .ToListAsync())
+                .ToLookup(p => p.ApiGatewayId);
+            foreach (var row in result)
+            {
+                row.Partners = partnersByGateway[row.Id].Select(p => new ApiGatewayPartnerDto
+                {
+                    PartnerId = p.PartnerId,
+                    SubscriptionId = p.SubscriptionId,
+                    PartnerName = p.Partner.Name,
+                    SubscriptionName = p.Subscription.Name
+                }).ToList();
+            }
+
             return new SearchyResponse<ApiGatewayRow>
             {
-                TotalCount = await query.Search(searchyRequest.Conditions).CountAsync(),
-                Result = await query.Search(searchyRequest.Conditions, searchyRequest.Sorts, searchyRequest.PageSize, searchyRequest.PageIndex).ToListAsync()
+                TotalCount = totalCount,
+                Result = result
             };
         }
     }
diff --git a/SW.Bitween.Api/Resources/ApiGateways/Update.cs b/SW.Bitween.Api/Resources/ApiGateways/Update.cs
index b53bef93..ddf88beb 100644
--- a/SW.Bitween.Api/Resources/ApiGateways/Update.cs
+++ b/SW.Bitween.Api/Resources/ApiGateways/Update.cs
@@ -3,7 +3,6 @@
 using SW.Bitween.Model;
 using SW.PrimitiveTypes;
 using System.Threading.Tasks;
-using SW.Bitween.Domain.Accounts;
 using Microsoft.EntityFrameworkCore;
 using System.Linq;
 
@@ -22,7 +21,7 @@ public Update(BitweenDbContext dbContext, RequestContext requestContext)
 
         public async Task<object> Handle(int key, ApiGatewayUpdate model)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.ApiGateways.Edit);
 
             var entity = await _dbContext.Set<ApiGateway>()
                 .Include(ag => ag.Partners)
diff --git a/SW.Bitween.Api/Resources/ApiGateways/UpdatePartner.cs b/SW.Bitween.Api/Resources/ApiGateways/UpdatePartner.cs
index 87405abb..ac5b0733 100644
--- a/SW.Bitween.Api/Resources/ApiGateways/UpdatePartner.cs
+++ b/SW.Bitween.Api/Resources/ApiGateways/UpdatePartner.cs
@@ -2,7 +2,6 @@
 using SW.Bitween.Model;
 using SW.PrimitiveTypes;
 using System.Threading.Tasks;
-using SW.Bitween.Domain.Accounts;
 using Microsoft.EntityFrameworkCore;
 using System.Linq;
 using SW.Bitween.Domain;
@@ -23,7 +22,7 @@ public UpdatePartner(BitweenDbContext dbContext, RequestContext requestContext)
 
         public async Task<object> Handle(int gatewayId, ApiGatewayPartnerCreate model)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.ApiGateways.Edit);
 
             var gateway = await _dbContext.Set<ApiGateway>()
                 .Include(ag => ag.Partners)
diff --git a/SW.Bitween.Api/Resources/BusGateways/AddRoute.cs b/SW.Bitween.Api/Resources/BusGateways/AddRoute.cs
index ef53e451..57ac2bfd 100644
--- a/SW.Bitween.Api/Resources/BusGateways/AddRoute.cs
+++ b/SW.Bitween.Api/Resources/BusGateways/AddRoute.cs
@@ -1,6 +1,5 @@
 using Microsoft.EntityFrameworkCore;
 using SW.Bitween.Domain;
-using SW.Bitween.Domain.Accounts;
 using SW.Bitween.Domain.Gateway;
 using SW.Bitween.Model;
 using SW.PrimitiveTypes;
@@ -24,7 +23,7 @@ public AddRoute(BitweenDbContext dbContext, RequestContext requestContext, IInfo
 
         public async Task<object> Handle(int gatewayId, BusGatewayRouteCreate model)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.BusGateways.Edit);
 
             var gateway = await _dbContext.Set<BusGateway>()
                 .FirstOrDefaultAsync(bg => bg.Id == gatewayId);
diff --git a/SW.Bitween.Api/Resources/BusGateways/Create.cs b/SW.Bitween.Api/Resources/BusGateways/Create.cs
index bc7cd75e..ddf94b56 100644
--- a/SW.Bitween.Api/Resources/BusGateways/Create.cs
+++ b/SW.Bitween.Api/Resources/BusGateways/Create.cs
@@ -1,7 +1,6 @@
 using FluentValidation;
 using Microsoft.EntityFrameworkCore;
 using SW.Bitween.Domain;
-using SW.Bitween.Domain.Accounts;
 using SW.Bitween.Domain.Gateway;
 using SW.Bitween.Model;
 using SW.PrimitiveTypes;
@@ -24,7 +23,7 @@ public Create(BitweenDbContext dbContext, RequestContext requestContext, IInfoli
 
         public async Task<object> Handle(BusGatewayCreate model)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.BusGateways.Create);
 
             var documentExists = await _dbContext.Set<Document>().AnyAsync(d => d.Id == model.DocumentId);
             if (!documentExists)
diff --git a/SW.Bitween.Api/Resources/BusGateways/Delete.cs b/SW.Bitween.Api/Resources/BusGateways/Delete.cs
index 0fbacf90..9958ec0d 100644
--- a/SW.Bitween.Api/Resources/BusGateways/Delete.cs
+++ b/SW.Bitween.Api/Resources/BusGateways/Delete.cs
@@ -1,5 +1,4 @@
 using Microsoft.EntityFrameworkCore;
-using SW.Bitween.Domain.Accounts;
 using SW.Bitween.Domain.Gateway;
 using SW.PrimitiveTypes;
 using System.Threading.Tasks;
@@ -21,7 +20,7 @@ public Delete(BitweenDbContext dbContext, RequestContext requestContext, IInfoli
 
         public async Task<object> Handle(int key)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.BusGateways.Delete);
 
             var gateway = await _dbContext.Set<BusGateway>()
                 .Include(bg => bg.Routes)
diff --git a/SW.Bitween.Api/Resources/BusGateways/Get.cs b/SW.Bitween.Api/Resources/BusGateways/Get.cs
index 2eefa3db..b9faeff7 100644
--- a/SW.Bitween.Api/Resources/BusGateways/Get.cs
+++ b/SW.Bitween.Api/Resources/BusGateways/Get.cs
@@ -11,14 +11,18 @@ namespace SW.Bitween.Resources.BusGateways
     public class Get : IGetHandler<int, object>
     {
         private readonly BitweenDbContext _dbContext;
+        private readonly RequestContext _requestContext;
 
-        public Get(BitweenDbContext dbContext)
+        public Get(BitweenDbContext dbContext, RequestContext requestContext)
         {
             _dbContext = dbContext;
+            _requestContext = requestContext;
         }
 
         public async Task<object> Handle(int key)
         {
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.BusGateways.View);
+
             var gateway = await _dbContext.Set<BusGateway>()
                 .AsNoTracking()
                 .Include(bg => bg.Routes)
diff --git a/SW.Bitween.Api/Resources/BusGateways/RemoveRoute.cs b/SW.Bitween.Api/Resources/BusGateways/RemoveRoute.cs
index e4ea6e6f..4f573df1 100644
--- a/SW.Bitween.Api/Resources/BusGateways/RemoveRoute.cs
+++ b/SW.Bitween.Api/Resources/BusGateways/RemoveRoute.cs
@@ -1,5 +1,4 @@
 using Microsoft.EntityFrameworkCore;
-using SW.Bitween.Domain.Accounts;
 using SW.Bitween.Domain.Gateway;
 using SW.Bitween.Model;
 using SW.PrimitiveTypes;
@@ -23,7 +22,7 @@ public RemoveRoute(BitweenDbContext dbContext, RequestContext requestContext, II
 
         public async Task<object> Handle(int gatewayId, RemoveRouteRequest request)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.BusGateways.Edit);
 
             var route = await _dbContext.Set<BusGatewayRoute>()
                 .FirstOrDefaultAsync(r => r.Id == request.RouteId && r.BusGatewayId == gatewayId);
diff --git a/SW.Bitween.Api/Resources/BusGateways/Search.cs b/SW.Bitween.Api/Resources/BusGateways/Search.cs
index 3210d3cd..62d8442c 100644
--- a/SW.Bitween.Api/Resources/BusGateways/Search.cs
+++ b/SW.Bitween.Api/Resources/BusGateways/Search.cs
@@ -12,14 +12,21 @@ namespace SW.Bitween.Resources.BusGateways
     public class Search : ISearchyHandler
     {
         private readonly BitweenDbContext _dbContext;
+        private readonly RequestContext _requestContext;
 
-        public Search(BitweenDbContext dbContext)
+        public Search(BitweenDbContext dbContext, RequestContext requestContext)
         {
             _dbContext = dbContext;
+            _requestContext = requestContext;
         }
 
         public async Task<object> Handle(SearchyRequest searchyRequest, bool lookup = false, string searchPhrase = null)
         {
+            // Lookup returns only id/name pairs, which pickers across the app rely on;
+            // the full list is the data, so that's what the view permission covers.
+            if (!lookup)
+                await _requestContext.EnsurePermission(_dbContext, Model.Permissions.BusGateways.View);
+
             var documents = _dbContext.Set<Document>();
 
             var query = from gateway in _dbContext.Set<BusGateway>()
@@ -42,10 +49,37 @@ public async Task<object> Handle(SearchyRequest searchyRequest, bool lookup = fa
 
             query = query.OrderByDescending(g => g.Id);
 
+            var totalCount = await query.Search(searchyRequest.Conditions).CountAsync();
+            var result = await query.Search(searchyRequest.Conditions, searchyRequest.Sorts, searchyRequest.PageSize, searchyRequest.PageIndex).ToListAsync();
+
+            // The list screen needs full route detail up front (not just a count),
+            // so hydrate it with one grouped query instead of Get.cs's per-row
+            // Include (gateways are few, so this stays a single round trip).
+            var ids = result.Select(r => r.Id).ToList();
+            var routesByGateway = (await _dbContext.Set<BusGatewayRoute>()
+                .AsNoTracking()
+                .Where(r => ids.Contains(r.BusGatewayId))
+                .Include(r => r.Subscription)
+                .Include(r => r.Partner)
+                .ToListAsync())
+                .ToLookup(r => r.BusGatewayId);
+            foreach (var row in result)
+            {
+                row.Routes = routesByGateway[row.Id].Select(r => new BusGatewayRouteDto
+                {
+                    Id = r.Id,
+                    SubscriptionId = r.SubscriptionId,
+                    SubscriptionName = r.Subscription != null ? r.Subscription.Name : null,
+                    PartnerId = r.PartnerId,
+                    PartnerName = r.Partner != null ? r.Partner.Name : null,
+                    MatchExpression = r.MatchExpression
+                }).ToList();
+            }
+
             return new SearchyResponse<BusGatewayRow>
             {
-                TotalCount = await query.Search(searchyRequest.Conditions).CountAsync(),
-                Result = await query.Search(searchyRequest.Conditions, searchyRequest.Sorts, searchyRequest.PageSize, searchyRequest.PageIndex).ToListAsync()
+                TotalCount = totalCount,
+                Result = result
             };
         }
     }
diff --git a/SW.Bitween.Api/Resources/BusGateways/Update.cs b/SW.Bitween.Api/Resources/BusGateways/Update.cs
index 4aa50cbd..1235636f 100644
--- a/SW.Bitween.Api/Resources/BusGateways/Update.cs
+++ b/SW.Bitween.Api/Resources/BusGateways/Update.cs
@@ -1,6 +1,5 @@
 using FluentValidation;
 using Microsoft.EntityFrameworkCore;
-using SW.Bitween.Domain.Accounts;
 using SW.Bitween.Domain.Gateway;
 using SW.Bitween.Model;
 using SW.PrimitiveTypes;
@@ -23,7 +22,7 @@ public Update(BitweenDbContext dbContext, RequestContext requestContext, IInfoli
 
         public async Task<object> Handle(int key, BusGatewayUpdate model)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.BusGateways.Edit);
 
             var entity = await _dbContext.Set<BusGateway>()
                 .FirstOrDefaultAsync(bg => bg.Id == key);
diff --git a/SW.Bitween.Api/Resources/BusGateways/UpdateRoute.cs b/SW.Bitween.Api/Resources/BusGateways/UpdateRoute.cs
index 5bd79f38..32b6597d 100644
--- a/SW.Bitween.Api/Resources/BusGateways/UpdateRoute.cs
+++ b/SW.Bitween.Api/Resources/BusGateways/UpdateRoute.cs
@@ -1,5 +1,4 @@
 using Microsoft.EntityFrameworkCore;
-using SW.Bitween.Domain.Accounts;
 using SW.Bitween.Domain.Gateway;
 using SW.Bitween.Model;
 using SW.PrimitiveTypes;
@@ -23,7 +22,7 @@ public UpdateRoute(BitweenDbContext dbContext, RequestContext requestContext, II
 
         public async Task<object> Handle(int gatewayId, BusGatewayRouteUpdate model)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.BusGateways.Edit);
 
             var gateway = await _dbContext.Set<BusGateway>()
                 .FirstOrDefaultAsync(bg => bg.Id == gatewayId);
diff --git a/SW.Bitween.Api/Resources/Dashboard/ChartDataPoints.cs b/SW.Bitween.Api/Resources/Dashboard/ChartDataPoints.cs
index 8e13f439..6df53b00 100644
--- a/SW.Bitween.Api/Resources/Dashboard/ChartDataPoints.cs
+++ b/SW.Bitween.Api/Resources/Dashboard/ChartDataPoints.cs
@@ -11,16 +11,20 @@ namespace SW.Bitween.Resources.Dashboard;
 public class ChartsDataPoints : IQueryHandler<object>
 {
     private readonly BitweenDbContext _dbContext;
+    private readonly RequestContext _requestContext;
     private readonly DateTime _dataDateLimit;
 
-    public ChartsDataPoints(BitweenDbContext dbContext)
+    public ChartsDataPoints(BitweenDbContext dbContext, RequestContext requestContext)
     {
         _dbContext = dbContext;
+        _requestContext = requestContext;
         _dataDateLimit = DateTime.UtcNow.AddMonths(-3);
     }
 
     public async Task<object> Handle()
     {
+        await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Dashboard.View);
+
         var xChangesPerDay = await _dbContext.Set<Xchange>()
             .AsNoTracking()
             .Where(i => i.StartedOn >= _dataDateLimit)
diff --git a/SW.Bitween.Api/Resources/Dashboard/MainInfo.cs b/SW.Bitween.Api/Resources/Dashboard/MainInfo.cs
index c819cffe..b2a36b4f 100644
--- a/SW.Bitween.Api/Resources/Dashboard/MainInfo.cs
+++ b/SW.Bitween.Api/Resources/Dashboard/MainInfo.cs
@@ -12,14 +12,18 @@ namespace SW.Bitween.Resources.Dashboard;
 public class MainInfo : IQueryHandler<object>
 {
     private readonly BitweenDbContext _dbContext;
+    private readonly RequestContext _requestContext;
 
-    public MainInfo(BitweenDbContext dbContext)
+    public MainInfo(BitweenDbContext dbContext, RequestContext requestContext)
     {
         _dbContext = dbContext;
+        _requestContext = requestContext;
     }
 
     public async Task<object> Handle()
     {
+        await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Dashboard.View);
+
         var subscriptionsCount = await _dbContext.Set<Subscription>().AsNoTracking().CountAsync();
         var documentCount = await _dbContext.Set<Document>().AsNoTracking().CountAsync();
         var notifiersCount = await _dbContext.Set<Notifier>().AsNoTracking().CountAsync();
diff --git a/SW.Bitween.Api/Resources/Dashboard/XChangesAndSubscriptionsInfo.cs b/SW.Bitween.Api/Resources/Dashboard/XChangesAndSubscriptionsInfo.cs
index f2eec15a..7214d584 100644
--- a/SW.Bitween.Api/Resources/Dashboard/XChangesAndSubscriptionsInfo.cs
+++ b/SW.Bitween.Api/Resources/Dashboard/XChangesAndSubscriptionsInfo.cs
@@ -14,6 +14,7 @@ namespace SW.Bitween.Resources.Dashboard;
 public class XChangesAndSubscriptionsInfo : IQueryHandler<object>
 {
     private readonly BitweenDbContext _dbContext;
+    private readonly RequestContext _requestContext;
 
     private readonly DateTime _dataDateLimit;
     private readonly XchangeService _xchangeService;
@@ -21,9 +22,10 @@ public class XChangesAndSubscriptionsInfo : IQueryHandler<object>
     // private readonly IMemoryCache _memoryCache;
     // private const string CACHE_KEY = "XChangesAndSubscriptionsInfoCache";
 
-    public XChangesAndSubscriptionsInfo(BitweenDbContext dbContext, XchangeService xchangeService)
+    public XChangesAndSubscriptionsInfo(BitweenDbContext dbContext, XchangeService xchangeService, RequestContext requestContext)
     {
         _dbContext = dbContext;
+        _requestContext = requestContext;
         _xchangeService = xchangeService;
         //_memoryCache = memoryCache;
         _dataDateLimit = DateTime.UtcNow.AddMonths(-3);
@@ -31,6 +33,8 @@ public XChangesAndSubscriptionsInfo(BitweenDbContext dbContext, XchangeService x
 
     public async Task<object> Handle()
     {
+        await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Dashboard.View);
+
         var totalXchangesCount = await _dbContext.Set<Xchange>().AsNoTracking().CountAsync();
         var xChangeCountInTimeframe = await _dbContext.Set<Xchange>()
             .Where(i => i.StartedOn >= _dataDateLimit)
diff --git a/SW.Bitween.Api/Resources/DelayedRetries/RunNow.cs b/SW.Bitween.Api/Resources/DelayedRetries/RunNow.cs
index 9f287393..85c1b9d7 100644
--- a/SW.Bitween.Api/Resources/DelayedRetries/RunNow.cs
+++ b/SW.Bitween.Api/Resources/DelayedRetries/RunNow.cs
@@ -1,7 +1,6 @@
 using System.Threading.Tasks;
 using Microsoft.EntityFrameworkCore;
 using SW.Bitween.Domain;
-using SW.Bitween.Domain.Accounts;
 using SW.Bitween.Model;
 using SW.PrimitiveTypes;
 
@@ -23,7 +22,9 @@ public RunNow(BitweenDbContext dbContext, RequestContext requestContext, Xchange
 
         public async Task<object> Handle(string key, DelayedRetryRunNow request)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            // What's being operated on is an exchange, not the policy that scheduled the retry —
+            // and this is the same page the UI gates on exchange permissions.
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Exchanges.Operate);
 
             var delayedRetry = await _dbContext.Set<DelayedRetry>().FirstOrDefaultAsync(d => d.Id == key);
             if (delayedRetry == null)
diff --git a/SW.Bitween.Api/Resources/DelayedRetries/Search.cs b/SW.Bitween.Api/Resources/DelayedRetries/Search.cs
index 4925351c..cc138c00 100644
--- a/SW.Bitween.Api/Resources/DelayedRetries/Search.cs
+++ b/SW.Bitween.Api/Resources/DelayedRetries/Search.cs
@@ -11,14 +11,21 @@ namespace SW.Bitween.Resources.DelayedRetries
     public class Search : ISearchyHandler
     {
         private readonly BitweenDbContext _dbContext;
+        private readonly RequestContext _requestContext;
 
-        public Search(BitweenDbContext dbContext)
+        public Search(BitweenDbContext dbContext, RequestContext requestContext)
         {
             _dbContext = dbContext;
+            _requestContext = requestContext;
         }
 
         public async Task<object> Handle(SearchyRequest searchyRequest, bool lookup = false, string searchPhrase = null)
         {
+            // Lookup returns only id/name pairs, which pickers across the app rely on;
+            // the full list is the data, so that's what the view permission covers.
+            if (!lookup)
+                await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Exchanges.View, Model.Permissions.Dashboard.View);
+
             var query = from delayedRetry in _dbContext.Set<DelayedRetry>()
                         join xchange in _dbContext.Set<Xchange>() on delayedRetry.Id equals xchange.Id
                         join result in _dbContext.Set<XchangeResult>() on xchange.Id equals result.Id into xr
@@ -35,7 +42,9 @@ from subscriber in xs.DefaultIfEmpty()
                             DocumentId = xchange.DocumentId,
                             DocumentName = document.Name,
                             Exception = result.Exception,
-                            StartedOn = xchange.StartedOn
+                            StartedOn = xchange.StartedOn,
+                            RetryPolicyId = subscriber.RetryPolicyId,
+                            RetryPolicyName = subscriber.RetryPolicy.Name
                         };
 
             query = query.OrderBy(r => r.On).AsNoTracking();
diff --git a/SW.Bitween.Api/Resources/Documents/Create.cs b/SW.Bitween.Api/Resources/Documents/Create.cs
index 033e9cd9..c05848cd 100644
--- a/SW.Bitween.Api/Resources/Documents/Create.cs
+++ b/SW.Bitween.Api/Resources/Documents/Create.cs
@@ -1,4 +1,5 @@
 using FluentValidation;
+using Microsoft.EntityFrameworkCore;
 using SW.EfCoreExtensions;
 using SW.Bitween.Domain;
 using SW.Bitween.Model;
@@ -8,7 +9,6 @@
 using System.Linq;
 using System.Text;
 using System.Threading.Tasks;
-using SW.Bitween.Domain.Accounts;
 
 namespace SW.Bitween.Resources.Documents
 {
@@ -16,22 +16,50 @@ public class Create : ICommandHandler<DocumentCreate,object>
     {
         private readonly BitweenDbContext _dbContext;
         private readonly RequestContext _requestContext;
+        private readonly IBroadcast _broadcast;
 
-        public Create(BitweenDbContext dbContext, RequestContext requestContext)
+        public Create(BitweenDbContext dbContext, RequestContext requestContext, IBroadcast broadcast)
         {
             _dbContext = dbContext;
             _requestContext = requestContext;
+            _broadcast = broadcast;
         }
 
         public async Task<object> Handle(DocumentCreate model)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Documents.Create);
 
-            var entity = new Document(model.Id, model.Name, model.DocumentFormat);
+            var code = string.IsNullOrWhiteSpace(model.Code) ? null : model.Code;
+
+            if (code != null && await _dbContext.Set<Document>().AsNoTracking().AnyAsync(d => d.Code == code))
+                throw new SWValidationException("CODE_TAKEN", "This code is already in use.");
+
+            if (model.BusEnabled && !string.IsNullOrEmpty(model.BusMessageTypeName))
+            {
+                var busTypeNameDuplicated = await _dbContext.Set<Document>()
+                    .AsNoTracking()
+                    .AnyAsync(d => d.BusMessageTypeName == model.BusMessageTypeName);
+                if (busTypeNameDuplicated)
+                    throw new SWValidationException("DUPLICATED_BUS_TYPE_NAME",
+                        "Cant use duplicated bus Message type name");
+            }
+
+            var entity = new Document(code, model.Name, model.DocumentFormat)
+            {
+                BusEnabled = model.BusEnabled,
+                BusMessageTypeName = model.BusEnabled ? model.BusMessageTypeName : null,
+            };
             var trail = new DocumentTrail(DocumentTrailCode.Created, entity, true);
             _dbContext.Add(trail);
             _dbContext.Add(entity);
             await _dbContext.SaveChangesAsync();
+
+            // A bus-enabled type adds a queue, and the consumer set is only rebuilt when asked.
+            // Without this the queue is declared but nothing ever consumes it, until either an
+            // unrelated document update happens to refresh consumers or the app restarts.
+            if (entity.BusEnabled)
+                await _broadcast.RefreshConsumers();
+
             return entity.Id;
         }
 
@@ -39,8 +67,15 @@ private class Validate : AbstractValidator<DocumentCreate>
         {
             public Validate()
             {
-                RuleFor(i => i.Id).NotEmpty();
+                RuleFor(i => i.Code)
+                    .Matches("^[A-Z][A-Z0-9_]{1,49}$")
+                    .When(i => !string.IsNullOrEmpty(i.Code))
+                    .WithMessage("Codes are upper-case letters, digits and underscores (2-50 chars).");
                 RuleFor(i => i.Name).NotEmpty();
+                RuleFor(i => i.BusMessageTypeName)
+                    .Matches("^\\S+$")
+                    .When(i => !string.IsNullOrEmpty(i.BusMessageTypeName))
+                    .WithMessage("Bus message type name cannot contain spaces.");
             }
         }
     }
diff --git a/SW.Bitween.Api/Resources/Documents/Delete.cs b/SW.Bitween.Api/Resources/Documents/Delete.cs
index 2749201d..cddf1571 100644
--- a/SW.Bitween.Api/Resources/Documents/Delete.cs
+++ b/SW.Bitween.Api/Resources/Documents/Delete.cs
@@ -5,7 +5,6 @@
 using System.Collections.Generic;
 using System.Text;
 using System.Threading.Tasks;
-using SW.Bitween.Domain.Accounts;
 
 namespace SW.Bitween.Resources.Documents
 {
@@ -22,7 +21,7 @@ public Delete(BitweenDbContext dbContext, RequestContext requestContext)
 
         async public Task<object> Handle(int key)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Documents.Delete);
 
             await _dbContext.DeleteByKeyAsync<Document>(key);
             return null;
diff --git a/SW.Bitween.Api/Resources/Documents/Get.cs b/SW.Bitween.Api/Resources/Documents/Get.cs
index cbabd883..3b0a9885 100644
--- a/SW.Bitween.Api/Resources/Documents/Get.cs
+++ b/SW.Bitween.Api/Resources/Documents/Get.cs
@@ -14,17 +14,22 @@ namespace SW.Bitween.Resources.Documents
     public class Get : IGetHandler<int,object>
     {
         private readonly BitweenDbContext dbContext;
+        private readonly RequestContext requestContext;
 
-        public Get(BitweenDbContext dbContext)
+        public Get(BitweenDbContext dbContext, RequestContext requestContext)
         {
             this.dbContext = dbContext;
+            this.requestContext = requestContext;
         }
 
         public async Task<object> Handle(int key)
         {
+            await requestContext.EnsurePermission(dbContext, Model.Permissions.Documents.View);
+
             return await dbContext.Set<Document>().Search("Id", key).Select(document => new DocumentUpdate
             {
                 Id = document.Id,
+                Code = document.Code,
                 Name = document.Name,
                 BusEnabled = document.BusEnabled,
                 BusMessageTypeName = document.BusMessageTypeName,
diff --git a/SW.Bitween.Api/Resources/Documents/GetProperties.cs b/SW.Bitween.Api/Resources/Documents/GetProperties.cs
index afc108fd..acb65f24 100644
--- a/SW.Bitween.Api/Resources/Documents/GetProperties.cs
+++ b/SW.Bitween.Api/Resources/Documents/GetProperties.cs
@@ -12,14 +12,18 @@ namespace SW.Bitween.Resources.Documents
     public class GetProperties : IGetHandler<int,object>
     {
         private readonly BitweenDbContext dbContext;
+        private readonly RequestContext requestContext;
 
-        public GetProperties(BitweenDbContext dbContext)
+        public GetProperties(BitweenDbContext dbContext, RequestContext requestContext)
         {
             this.dbContext = dbContext;
+            this.requestContext = requestContext;
         }
 
         async public Task<object> Handle(int key)
         {
+            await requestContext.EnsurePermission(dbContext, Model.Permissions.Documents.View);
+
             var document = await dbContext.FindAsync<Document>(key);
             return document.PromotedProperties.ToDictionary(k => k.Key, v => v.Key);
         }
diff --git a/SW.Bitween.Api/Resources/Documents/GetTrail.cs b/SW.Bitween.Api/Resources/Documents/GetTrail.cs
index 19b02d8e..63cd6932 100644
--- a/SW.Bitween.Api/Resources/Documents/GetTrail.cs
+++ b/SW.Bitween.Api/Resources/Documents/GetTrail.cs
@@ -14,15 +14,19 @@ namespace SW.Bitween.Resources.Documents;
 public class GetTrail : IQueryHandler<SearchDocumentTrailModel,object>
 {
     private readonly BitweenDbContext dbContext;
+    private readonly RequestContext requestContext;
 
-    public GetTrail(BitweenDbContext dbContext)
+    public GetTrail(BitweenDbContext dbContext, RequestContext requestContext)
     {
         this.dbContext = dbContext;
+        this.requestContext = requestContext;
     }
 
 
     public async Task<object> Handle(SearchDocumentTrailModel request)
     {
+        await requestContext.EnsurePermission(dbContext, Model.Permissions.Documents.View);
+
         request.Limit ??= 20;
         request.Offset ??= 0;
         var trails = dbContext.Set<DocumentTrail>()
diff --git a/SW.Bitween.Api/Resources/Documents/Search.cs b/SW.Bitween.Api/Resources/Documents/Search.cs
index 77823590..1b2938f4 100644
--- a/SW.Bitween.Api/Resources/Documents/Search.cs
+++ b/SW.Bitween.Api/Resources/Documents/Search.cs
@@ -14,19 +14,27 @@ namespace SW.Bitween.Resources.Documents
     public class Search : ISearchyHandler
     {
         private readonly BitweenDbContext dbContext;
+        private readonly RequestContext requestContext;
 
-        public Search(BitweenDbContext dbContext)
+        public Search(BitweenDbContext dbContext, RequestContext requestContext)
         {
             this.dbContext = dbContext;
+            this.requestContext = requestContext;
         }
 
         async public Task<object> Handle(SearchyRequest searchyRequest, bool lookup = false, string searchPhrase = null)
         {
+            // Lookup returns only id/name pairs, which pickers across the app rely on;
+            // the full list is the data, so that's what the view permission covers.
+            if (!lookup)
+                await requestContext.EnsurePermission(dbContext, Model.Permissions.Documents.View);
+
             var query = from document in dbContext.Set<Document>()
 
                         select new DocumentRow
                         {
                             Id = document.Id,
+                            Code = document.Code,
                             Name = document.Name,
                             BusMessageTypeName = document.BusMessageTypeName,
                             BusEnabled = document.BusEnabled,
diff --git a/SW.Bitween.Api/Resources/Documents/Update.cs b/SW.Bitween.Api/Resources/Documents/Update.cs
index c899d93c..a76b7522 100644
--- a/SW.Bitween.Api/Resources/Documents/Update.cs
+++ b/SW.Bitween.Api/Resources/Documents/Update.cs
@@ -5,7 +5,6 @@
 using SW.PrimitiveTypes;
 using System.Threading.Tasks;
 using Microsoft.EntityFrameworkCore;
-using SW.Bitween.Domain.Accounts;
 using System.Text.RegularExpressions;
 
 namespace SW.Bitween.Resources.Documents
@@ -29,10 +28,40 @@ public Update(BitweenDbContext dbContext, IInfolinkCache BitweenCache, RequestCo
 
         public async Task<object> Handle(int key, DocumentUpdate model)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Documents.Edit);
 
             var entity = await _dbContext.FindAsync<Document>(key);
 
+            if (string.IsNullOrWhiteSpace(model.Name))
+                throw new SWValidationException("INVALID_NAME", "Give the information type a name.");
+
+            var nameDuplicated = await _dbContext.Set<Document>()
+                .AsNoTracking()
+                .Where(i => i.Id != key)
+                .AnyAsync(i => i.Name == model.Name);
+            if (nameDuplicated)
+                throw new SWValidationException("NAME_TAKEN", "An information type with this name already exists.");
+
+            var code = string.IsNullOrWhiteSpace(model.Code) ? null : model.Code;
+
+            if (code != null && !Regex.IsMatch(code, "^[A-Z][A-Z0-9_]{1,49}$"))
+                throw new SWValidationException("INVALID_CODE",
+                    "Codes are upper-case letters, digits and underscores (2-50 chars).");
+
+            if (code != null)
+            {
+                var codeDuplicated = await _dbContext.Set<Document>()
+                    .AsNoTracking()
+                    .Where(i => i.Id != key)
+                    .AnyAsync(i => i.Code == code);
+                if (codeDuplicated)
+                    throw new SWValidationException("CODE_TAKEN", "This code is already in use.");
+            }
+
+            if (!string.IsNullOrEmpty(model.BusMessageTypeName) && Regex.IsMatch(model.BusMessageTypeName, @"\s"))
+                throw new SWValidationException("INVALID_BUS_TYPE_NAME",
+                    "Bus message type name cannot contain spaces.");
+
             var busTypeNameDuplicated = await _dbContext.Set<Document>()
                 .AsNoTracking()
                 .Where(i => i.Id != key)
@@ -85,6 +114,10 @@ public async Task<object> Handle(int key, DocumentUpdate model)
 
             var trail = new DocumentTrail(DocumentTrailCode.Updated, entity);
             entity.SetDictionaries(model.PromotedProperties.ToDictionary());
+            // Name/Code have private setters — SetProperties only writes public-setter
+            // properties, so it silently no-ops on these two (verified empirically).
+            entity.SetName(model.Name);
+            entity.SetCode(code);
             _dbContext.Entry(entity).SetProperties(model);
 
             trail.SetAfter(entity);
diff --git a/SW.Bitween.Api/Resources/GlobalAdapterValuesSets/Create.cs b/SW.Bitween.Api/Resources/GlobalAdapterValuesSets/Create.cs
index 6d131146..551bc716 100644
--- a/SW.Bitween.Api/Resources/GlobalAdapterValuesSets/Create.cs
+++ b/SW.Bitween.Api/Resources/GlobalAdapterValuesSets/Create.cs
@@ -2,7 +2,6 @@
 using FluentValidation;
 using Microsoft.EntityFrameworkCore;
 using SW.Bitween.Domain;
-using SW.Bitween.Domain.Accounts;
 using SW.Bitween.Model;
 using SW.PrimitiveTypes;
 
@@ -21,7 +20,7 @@ public Create(BitweenDbContext dbContext, RequestContext requestContext)
 
         public async Task<object> Handle(GlobalAdapterValuesSetCreate request)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.GlobalValues.Create);
 
             var exists = await _dbContext.Set<GlobalAdapterValuesSet>().AnyAsync(x => x.Id == request.Id);
             if (exists)
diff --git a/SW.Bitween.Api/Resources/GlobalAdapterValuesSets/Delete.cs b/SW.Bitween.Api/Resources/GlobalAdapterValuesSets/Delete.cs
index 6a8e557a..40a20d97 100644
--- a/SW.Bitween.Api/Resources/GlobalAdapterValuesSets/Delete.cs
+++ b/SW.Bitween.Api/Resources/GlobalAdapterValuesSets/Delete.cs
@@ -1,6 +1,5 @@
 using System.Threading.Tasks;
 using SW.Bitween.Domain;
-using SW.Bitween.Domain.Accounts;
 using SW.Bitween.Model;
 using SW.PrimitiveTypes;
 
@@ -20,7 +19,7 @@ public Delete(BitweenDbContext dbContext, RequestContext requestContext)
 
         public async Task<object> Handle(string key, DeleteGlobalAdapterValuesSetModel _)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.GlobalValues.Delete);
 
             var entity = await _dbContext.Set<GlobalAdapterValuesSet>().FindAsync(key);
             if (entity is null)
diff --git a/SW.Bitween.Api/Resources/GlobalAdapterValuesSets/Get.cs b/SW.Bitween.Api/Resources/GlobalAdapterValuesSets/Get.cs
index 57a229e1..186f516f 100644
--- a/SW.Bitween.Api/Resources/GlobalAdapterValuesSets/Get.cs
+++ b/SW.Bitween.Api/Resources/GlobalAdapterValuesSets/Get.cs
@@ -19,7 +19,7 @@ public Get(BitweenDbContext dbContext, RequestContext requestContext)
 
         public async Task<object> Handle(string key)
         {
-            _requestContext.EnsureAccess(Domain.Accounts.AccountRole.Admin, Domain.Accounts.AccountRole.Member, Domain.Accounts.AccountRole.Viewer);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.GlobalValues.View);
 
             var entity = await _dbContext.Set<GlobalAdapterValuesSet>()
                 .AsNoTracking()
diff --git a/SW.Bitween.Api/Resources/GlobalAdapterValuesSets/Search.cs b/SW.Bitween.Api/Resources/GlobalAdapterValuesSets/Search.cs
index 9f3d1f73..15771b15 100644
--- a/SW.Bitween.Api/Resources/GlobalAdapterValuesSets/Search.cs
+++ b/SW.Bitween.Api/Resources/GlobalAdapterValuesSets/Search.cs
@@ -11,14 +11,21 @@ namespace SW.Bitween.Resources.GlobalAdapterValuesSets
     public class Search : ISearchyHandler
     {
         private readonly BitweenDbContext _dbContext;
+        private readonly RequestContext _requestContext;
 
-        public Search(BitweenDbContext dbContext)
+        public Search(BitweenDbContext dbContext, RequestContext requestContext)
         {
             _dbContext = dbContext;
+            _requestContext = requestContext;
         }
 
         public async Task<object> Handle(SearchyRequest searchyRequest, bool lookup = false, string searchPhrase = null)
         {
+            // Lookup returns only id/name pairs, which pickers across the app rely on;
+            // the full list is the data, so that's what the view permission covers.
+            if (!lookup)
+                await _requestContext.EnsurePermission(_dbContext, Model.Permissions.GlobalValues.View);
+
             var query = from item in _dbContext.Set<GlobalAdapterValuesSet>()
                         select new GlobalAdapterValuesSetRow
                         {
diff --git a/SW.Bitween.Api/Resources/GlobalAdapterValuesSets/Update.cs b/SW.Bitween.Api/Resources/GlobalAdapterValuesSets/Update.cs
index 43090d1b..46377ad0 100644
--- a/SW.Bitween.Api/Resources/GlobalAdapterValuesSets/Update.cs
+++ b/SW.Bitween.Api/Resources/GlobalAdapterValuesSets/Update.cs
@@ -1,7 +1,6 @@
 using System.Threading.Tasks;
 using FluentValidation;
 using SW.Bitween.Domain;
-using SW.Bitween.Domain.Accounts;
 using SW.Bitween.Model;
 using SW.PrimitiveTypes;
 
@@ -20,7 +19,7 @@ public Update(BitweenDbContext dbContext, RequestContext requestContext)
 
         public async Task<object> Handle(string key, GlobalAdapterValuesSetUpdate request)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.GlobalValues.Edit);
 
             var entity = await _dbContext.Set<GlobalAdapterValuesSet>().FindAsync(key);
             if (entity is null)
diff --git a/SW.Bitween.Api/Resources/Login/Login.cs b/SW.Bitween.Api/Resources/Login/Login.cs
index b5aa25ea..b823592a 100644
--- a/SW.Bitween.Api/Resources/Login/Login.cs
+++ b/SW.Bitween.Api/Resources/Login/Login.cs
@@ -31,9 +31,13 @@ public Task<object> Handle(UserLogin request)
             {
                 if (cred[1].Equals(request.Password))
                 {
+                    // No account backs these configured credentials, so there are no roles to
+                    // resolve — grant everything explicitly rather than relying on a guard that
+                    // fails open on a missing claim.
                     var claims = new List<Claim>
                     {
                         new Claim(ClaimTypes.Name, cred[0]),
+                        new Claim(RequestContextExtensions.SuperuserClaim, "true"),
                     };
 
                     return Task.FromResult<object>(new
diff --git a/SW.Bitween.Api/Resources/Notifications/Search.cs b/SW.Bitween.Api/Resources/Notifications/Search.cs
index cba67ac1..86052aff 100644
--- a/SW.Bitween.Api/Resources/Notifications/Search.cs
+++ b/SW.Bitween.Api/Resources/Notifications/Search.cs
@@ -11,14 +11,21 @@ namespace SW.Bitween.Resources.Notifications
     public class Search:ISearchyHandler
     {
         private readonly BitweenDbContext dbContext;
+        private readonly RequestContext requestContext;
 
-        public Search(BitweenDbContext dbContext)
+        public Search(BitweenDbContext dbContext, RequestContext requestContext)
         {
             this.dbContext = dbContext;
+            this.requestContext = requestContext;
         }
         
         public async Task<object> Handle(SearchyRequest searchyRequest, bool lookup = false, string searchPhrase = null)
         {
+            // Lookup returns only id/name pairs, which pickers across the app rely on;
+            // the full list is the data, so that's what the view permission covers.
+            if (!lookup)
+                await requestContext.EnsurePermission(dbContext, Model.Permissions.Notifiers.View);
+
             var query = from notification in dbContext.Set<XchangeNotification>()
                 select new NotificationsSearch()
                 {
diff --git a/SW.Bitween.Api/Resources/Notifiers/Create.cs b/SW.Bitween.Api/Resources/Notifiers/Create.cs
index d117784d..bc6bb088 100644
--- a/SW.Bitween.Api/Resources/Notifiers/Create.cs
+++ b/SW.Bitween.Api/Resources/Notifiers/Create.cs
@@ -1,7 +1,6 @@
 using System.Threading.Tasks;
 using FluentValidation;
 using SW.Bitween.Domain;
-using SW.Bitween.Domain.Accounts;
 using SW.Bitween.Model;
 using SW.PrimitiveTypes;
 
@@ -20,7 +19,7 @@ public Create(BitweenDbContext dbContext, RequestContext requestContext)
 
         public async Task<object> Handle(NotifierCreate request)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Notifiers.Create);
 
             var notifier = new Notifier(request.Name);
 
diff --git a/SW.Bitween.Api/Resources/Notifiers/Get.cs b/SW.Bitween.Api/Resources/Notifiers/Get.cs
index f675ed34..6f53ad20 100644
--- a/SW.Bitween.Api/Resources/Notifiers/Get.cs
+++ b/SW.Bitween.Api/Resources/Notifiers/Get.cs
@@ -11,14 +11,18 @@ namespace SW.Bitween.Resources.Notifiers
     public class Get: IGetHandler<int,object>
     {
         private readonly BitweenDbContext dbContext;
+        private readonly RequestContext requestContext;
 
-        public Get(BitweenDbContext dbContext)
+        public Get(BitweenDbContext dbContext, RequestContext requestContext)
         {
             this.dbContext = dbContext;
+            this.requestContext = requestContext;
         }
         
         public async Task<object> Handle(int key)
         {
+            await requestContext.EnsurePermission(dbContext, Model.Permissions.Notifiers.View);
+
             var notifier = await dbContext.Set<Notifier>().FirstOrDefaultAsync(n => n.Id == key);
             if (notifier == null) throw new SWNotFoundException();
 
diff --git a/SW.Bitween.Api/Resources/Notifiers/Search.cs b/SW.Bitween.Api/Resources/Notifiers/Search.cs
index 7752ceac..d1171ec4 100644
--- a/SW.Bitween.Api/Resources/Notifiers/Search.cs
+++ b/SW.Bitween.Api/Resources/Notifiers/Search.cs
@@ -11,14 +11,21 @@ namespace SW.Bitween.Resources.Notifiers
     public class Search: ISearchyHandler
     {
         private readonly BitweenDbContext dbContext;
+        private readonly RequestContext requestContext;
 
-        public Search(BitweenDbContext dbContext)
+        public Search(BitweenDbContext dbContext, RequestContext requestContext)
         {
             this.dbContext = dbContext;
+            this.requestContext = requestContext;
         }
         
         public async Task<object> Handle(SearchyRequest searchyRequest, bool lookup = false, string searchPhrase = null)
         {
+            // Lookup returns only id/name pairs, which pickers across the app rely on;
+            // the full list is the data, so that's what the view permission covers.
+            if (!lookup)
+                await requestContext.EnsurePermission(dbContext, Model.Permissions.Notifiers.View);
+
             var query = from notifier in dbContext.Set<Notifier>()
                 select new NotifierSearch()
                 {
diff --git a/SW.Bitween.Api/Resources/Notifiers/Update.cs b/SW.Bitween.Api/Resources/Notifiers/Update.cs
index 44cf96af..690bbbd4 100644
--- a/SW.Bitween.Api/Resources/Notifiers/Update.cs
+++ b/SW.Bitween.Api/Resources/Notifiers/Update.cs
@@ -2,7 +2,6 @@
 using System.Threading.Tasks;
 using FluentValidation;
 using SW.Bitween.Domain;
-using SW.Bitween.Domain.Accounts;
 using SW.Bitween.Model;
 using SW.PrimitiveTypes;
 
@@ -21,7 +20,7 @@ public Update(BitweenDbContext dbContext, RequestContext requestContext)
 
         public async Task<object> Handle(int key, NotifierUpdate request)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Notifiers.Edit);
 
             var notifier = await _dbContext.FindAsync<Notifier>(key);
 
diff --git a/SW.Bitween.Api/Resources/Ops/Alerts.cs b/SW.Bitween.Api/Resources/Ops/Alerts.cs
index 417cea4d..f48ba65f 100644
--- a/SW.Bitween.Api/Resources/Ops/Alerts.cs
+++ b/SW.Bitween.Api/Resources/Ops/Alerts.cs
@@ -1,14 +1,18 @@
 using System.Threading.Tasks;
+using SW.Bitween.Domain;
 using SW.Bus.RabbitMqExtensions;
 using SW.PrimitiveTypes;
 
 namespace SW.Bitween.Resources.Ops;
 
 [HandlerName("Alerts")]
-public class Alerts(IBusDashboardDataService dashboardDataService) : IQueryHandler<object>
+public class Alerts(IBusDashboardDataService dashboardDataService,
+    BitweenDbContext dbContext, RequestContext requestContext) : IQueryHandler<object>
 {
     public async Task<object> Handle()
     {
+        await requestContext.EnsurePermission(dbContext, Model.Permissions.Monitoring.View, Model.Permissions.Dashboard.View);
+
         return await dashboardDataService.GetAlertsAsync();
     }
 }
diff --git a/SW.Bitween.Api/Resources/Ops/Consumers.cs b/SW.Bitween.Api/Resources/Ops/Consumers.cs
index 72b9a4cf..a2593ebb 100644
--- a/SW.Bitween.Api/Resources/Ops/Consumers.cs
+++ b/SW.Bitween.Api/Resources/Ops/Consumers.cs
@@ -1,14 +1,18 @@
 using System.Threading.Tasks;
+using SW.Bitween.Domain;
 using SW.Bus.RabbitMqExtensions;
 using SW.PrimitiveTypes;
 
 namespace SW.Bitween.Resources.Ops;
 
 [HandlerName("Consumers")]
-public class Consumers(IBusDashboardDataService dashboardDataService) : IQueryHandler<object>
+public class Consumers(IBusDashboardDataService dashboardDataService,
+    BitweenDbContext dbContext, RequestContext requestContext) : IQueryHandler<object>
 {
     public async Task<object> Handle()
     {
+        await requestContext.EnsurePermission(dbContext, Model.Permissions.Monitoring.View, Model.Permissions.Dashboard.View);
+
         return await dashboardDataService.GetConsumerHealthAsync();
     }
 }
diff --git a/SW.Bitween.Api/Resources/Ops/DeadLetters.cs b/SW.Bitween.Api/Resources/Ops/DeadLetters.cs
index 39a790ce..f9c0d183 100644
--- a/SW.Bitween.Api/Resources/Ops/DeadLetters.cs
+++ b/SW.Bitween.Api/Resources/Ops/DeadLetters.cs
@@ -1,14 +1,18 @@
 using System.Threading.Tasks;
+using SW.Bitween.Domain;
 using SW.Bus.RabbitMqExtensions;
 using SW.PrimitiveTypes;
 
 namespace SW.Bitween.Resources.Ops;
 
 [HandlerName("DeadLetters")]
-public class DeadLetters(IBusDashboardDataService dashboardDataService) : IQueryHandler<object>
+public class DeadLetters(IBusDashboardDataService dashboardDataService,
+    BitweenDbContext dbContext, RequestContext requestContext) : IQueryHandler<object>
 {
     public async Task<object> Handle()
     {
+        await requestContext.EnsurePermission(dbContext, Model.Permissions.Monitoring.View, Model.Permissions.Dashboard.View);
+
         return await dashboardDataService.GetDeadLetterSummaryAsync();
     }
 }
diff --git a/SW.Bitween.Api/Resources/Ops/Queues.cs b/SW.Bitween.Api/Resources/Ops/Queues.cs
index 6ebb2f34..a12cb4ae 100644
--- a/SW.Bitween.Api/Resources/Ops/Queues.cs
+++ b/SW.Bitween.Api/Resources/Ops/Queues.cs
@@ -1,14 +1,18 @@
 using System.Threading.Tasks;
+using SW.Bitween.Domain;
 using SW.Bus.RabbitMqExtensions;
 using SW.PrimitiveTypes;
 
 namespace SW.Bitween.Resources.Ops;
 
 [HandlerName("Queues")]
-public class Queues(IBusDashboardDataService dashboardDataService) : IQueryHandler<object>
+public class Queues(IBusDashboardDataService dashboardDataService,
+    BitweenDbContext dbContext, RequestContext requestContext) : IQueryHandler<object>
 {
     public async Task<object> Handle()
     {
+        await requestContext.EnsurePermission(dbContext, Model.Permissions.Monitoring.View, Model.Permissions.Dashboard.View);
+
         return await dashboardDataService.GetQueueDetailsAsync();
     }
 }
diff --git a/SW.Bitween.Api/Resources/Ops/Retries.cs b/SW.Bitween.Api/Resources/Ops/Retries.cs
index 2f08bd75..0300d67d 100644
--- a/SW.Bitween.Api/Resources/Ops/Retries.cs
+++ b/SW.Bitween.Api/Resources/Ops/Retries.cs
@@ -1,14 +1,18 @@
 using System.Threading.Tasks;
+using SW.Bitween.Domain;
 using SW.Bus.RabbitMqExtensions;
 using SW.PrimitiveTypes;
 
 namespace SW.Bitween.Resources.Ops;
 
 [HandlerName("Retries")]
-public class Retries(IBusDashboardDataService dashboardDataService) : IQueryHandler<object>
+public class Retries(IBusDashboardDataService dashboardDataService,
+    BitweenDbContext dbContext, RequestContext requestContext) : IQueryHandler<object>
 {
     public async Task<object> Handle()
     {
+        await requestContext.EnsurePermission(dbContext, Model.Permissions.Monitoring.View, Model.Permissions.Dashboard.View);
+
         return await dashboardDataService.GetRetryAnalysisAsync();
     }
 }
diff --git a/SW.Bitween.Api/Resources/Ops/Summary.cs b/SW.Bitween.Api/Resources/Ops/Summary.cs
index ae4a30bb..538291c1 100644
--- a/SW.Bitween.Api/Resources/Ops/Summary.cs
+++ b/SW.Bitween.Api/Resources/Ops/Summary.cs
@@ -1,14 +1,18 @@
 using System.Threading.Tasks;
+using SW.Bitween.Domain;
 using SW.Bus.RabbitMqExtensions;
 using SW.PrimitiveTypes;
 
 namespace SW.Bitween.Resources.Ops;
 
 [HandlerName("Summary")]
-public class Summary(IBusDashboardDataService dashboardDataService) : IQueryHandler<object>
+public class Summary(IBusDashboardDataService dashboardDataService,
+    BitweenDbContext dbContext, RequestContext requestContext) : IQueryHandler<object>
 {
     public async Task<object> Handle()
     {
+        await requestContext.EnsurePermission(dbContext, Model.Permissions.Monitoring.View, Model.Permissions.Dashboard.View);
+
         return await dashboardDataService.GetSummaryAsync();
     }
 }
diff --git a/SW.Bitween.Api/Resources/Partners/Create.cs b/SW.Bitween.Api/Resources/Partners/Create.cs
index 00f3f1d6..e1513051 100644
--- a/SW.Bitween.Api/Resources/Partners/Create.cs
+++ b/SW.Bitween.Api/Resources/Partners/Create.cs
@@ -2,7 +2,6 @@
 using SW.Bitween.Model;
 using SW.PrimitiveTypes;
 using System.Threading.Tasks;
-using SW.Bitween.Domain.Accounts;
 
 namespace SW.Bitween.Resources.Partners
 {
@@ -19,7 +18,7 @@ public Create(BitweenDbContext dbContext, RequestContext requestContext)
 
         public async Task<object> Handle(PartnerCreate model)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Partners.Create);
 
             var entity = new Partner(model.Name);
             _dbContext.Add(entity);
diff --git a/SW.Bitween.Api/Resources/Partners/Delete.cs b/SW.Bitween.Api/Resources/Partners/Delete.cs
index 16cc960e..1bb7486a 100644
--- a/SW.Bitween.Api/Resources/Partners/Delete.cs
+++ b/SW.Bitween.Api/Resources/Partners/Delete.cs
@@ -5,7 +5,6 @@
 using System.Collections.Generic;
 using System.Text;
 using System.Threading.Tasks;
-using SW.Bitween.Domain.Accounts;
 
 namespace SW.Bitween.Resources.Partners
 {
@@ -23,7 +22,7 @@ public Delete(BitweenDbContext dbContext, RequestContext requestContext)
 
         public async Task<object> Handle(int key)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Partners.Delete);
 
             if (key == Partner.SystemId)
                 throw new SWException("System partner can not be deleted.");
diff --git a/SW.Bitween.Api/Resources/Partners/Get.cs b/SW.Bitween.Api/Resources/Partners/Get.cs
index bf96629b..e6cbb299 100644
--- a/SW.Bitween.Api/Resources/Partners/Get.cs
+++ b/SW.Bitween.Api/Resources/Partners/Get.cs
@@ -11,14 +11,18 @@ namespace SW.Bitween.Resources.Partners
     public class Get : IGetHandler<int,object>
     {
         private readonly BitweenDbContext dbContext;
+        private readonly RequestContext requestContext;
 
-        public Get(BitweenDbContext dbContext)
+        public Get(BitweenDbContext dbContext, RequestContext requestContext)
         {
             this.dbContext = dbContext;
+            this.requestContext = requestContext;
         }
 
         async public Task<object> Handle(int key)
         {
+            await requestContext.EnsurePermission(dbContext, Model.Permissions.Partners.View);
+
             return await dbContext.Set<Partner>().AsNoTracking().
                 Search("Id", key).
                 Select(partner => new PartnerUpdate
diff --git a/SW.Bitween.Api/Resources/Partners/Search.cs b/SW.Bitween.Api/Resources/Partners/Search.cs
index e43cc81d..60f7a037 100644
--- a/SW.Bitween.Api/Resources/Partners/Search.cs
+++ b/SW.Bitween.Api/Resources/Partners/Search.cs
@@ -4,28 +4,45 @@
 using System.Linq;
 using Microsoft.EntityFrameworkCore;
 using SW.Bitween.Domain;
+using SW.Bitween.Domain.Gateway;
 using SW.Bitween.Model;
+using System.Collections.Generic;
 
 namespace SW.Bitween.Resources.Partners
 {
     public class Search : ISearchyHandler
     {
         private readonly BitweenDbContext dbContext;
+        private readonly RequestContext requestContext;
 
-        public Search(BitweenDbContext dbContext)
+        public Search(BitweenDbContext dbContext, RequestContext requestContext)
         {
             this.dbContext = dbContext;
+            this.requestContext = requestContext;
         }
 
         async public Task<object> Handle(SearchyRequest searchyRequest, bool lookup = false, string searchPhrase = null)
         {
+            // Lookup returns only id/name pairs, which pickers across the app rely on;
+            // the full list is the data, so that's what the view permission covers.
+            if (!lookup)
+                await requestContext.EnsurePermission(dbContext, Model.Permissions.Partners.View);
+
             var query = from subscriber in dbContext.Set<Partner>()
                         select new PartnerRow
                         {
                             Id = subscriber.Id,
                             Name = subscriber.Name,
-                            SubscriptionsCount = subscriber.Subscriptions.Count,
+                            // Every place the partner is wired in, matching the three groups the
+                            // detail page lists. Counting only the direct subscription link left
+                            // "Used by" reading "—" for partners plainly in use through a gateway.
+                            SubscriptionsCount = subscriber.Subscriptions.Count
+                                + dbContext.Set<ApiGatewayPartner>().Count(g => g.PartnerId == subscriber.Id)
+                                + dbContext.Set<BusGatewayRoute>().Count(r => r.PartnerId == subscriber.Id),
                             Keys = subscriber.ApiCredentials.Count,
+                            // Selected so the key names can be lifted out below. AdapterProperties
+                            // is a JSON column, so picking its keys in SQL would be provider-specific.
+                            AdapterProperties = subscriber.AdapterProperties,
                         };
 
             query = query.AsNoTracking();
@@ -35,10 +52,19 @@ async public Task<object> Handle(SearchyRequest searchyRequest, bool lookup = fa
                 return await query.Search(searchyRequest.Conditions).ToDictionaryAsync(k => k.Id.ToString(), v => v.Name);
             }
 
+            var result = await query.Search(searchyRequest.Conditions, searchyRequest.Sorts, searchyRequest.PageSize, searchyRequest.PageIndex).ToListAsync();
+
+            foreach (var row in result)
+            {
+                row.PropertyKeys = row.AdapterProperties?.Keys.ToList() ?? new List<string>();
+                // Values can be secrets, so the list ships the names and nothing else.
+                row.AdapterProperties = null;
+            }
+
             return new SearchyResponse<PartnerRow>
             {
                 TotalCount = await query.Search(searchyRequest.Conditions).CountAsync(),
-                Result = await query.Search(searchyRequest.Conditions, searchyRequest.Sorts, searchyRequest.PageSize, searchyRequest.PageIndex).ToListAsync()
+                Result = result
             };
 
         }
diff --git a/SW.Bitween.Api/Resources/Partners/Update.cs b/SW.Bitween.Api/Resources/Partners/Update.cs
index 52d6601d..e18bfe76 100644
--- a/SW.Bitween.Api/Resources/Partners/Update.cs
+++ b/SW.Bitween.Api/Resources/Partners/Update.cs
@@ -7,7 +7,6 @@
 using System.Linq;
 using System.Text;
 using System.Threading.Tasks;
-using SW.Bitween.Domain.Accounts;
 
 namespace SW.Bitween.Resources.Partners
 {
@@ -25,7 +24,7 @@ public Update(BitweenDbContext dbContext, RequestContext requestContext)
 
         public async Task<object> Handle(int key, PartnerUpdate model)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Partners.Edit);
 
             var entity = await _dbContext.FindAsync<Partner>(key);
             entity.SetApiCredentials(model.ApiCredentials.Select(kv => new ApiCredential(kv.Key, kv.Value)));
diff --git a/SW.Bitween.Api/Resources/Permissions/Get.cs b/SW.Bitween.Api/Resources/Permissions/Get.cs
new file mode 100644
index 00000000..da2652f4
--- /dev/null
+++ b/SW.Bitween.Api/Resources/Permissions/Get.cs
@@ -0,0 +1,14 @@
+using System.Threading.Tasks;
+using SW.Bitween.Model;
+using SW.PrimitiveTypes;
+
+namespace SW.Bitween.Resources.Permissions;
+
+/// <summary>
+/// The permission catalog. Static data — the management UI builds its role matrix from this, so
+/// the grants it offers can't drift from what the handlers actually enforce.
+/// </summary>
+public class Get : IQueryHandler<object>
+{
+    public Task<object> Handle() => Task.FromResult<object>(PermissionCatalog.Areas);
+}
diff --git a/SW.Bitween.Api/Resources/RetryPolicies/Create.cs b/SW.Bitween.Api/Resources/RetryPolicies/Create.cs
index 4cb049f3..1c2ee391 100644
--- a/SW.Bitween.Api/Resources/RetryPolicies/Create.cs
+++ b/SW.Bitween.Api/Resources/RetryPolicies/Create.cs
@@ -1,6 +1,5 @@
 using System.Threading.Tasks;
 using SW.Bitween.Domain;
-using SW.Bitween.Domain.Accounts;
 using SW.Bitween.Model;
 using SW.PrimitiveTypes;
 
@@ -19,7 +18,7 @@ public Create(BitweenDbContext dbContext, RequestContext requestContext)
 
     public async Task<object> Handle(RetryPolicyCreate model)
     {
-        _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+        await _requestContext.EnsurePermission(_dbContext, Model.Permissions.RetryPolicies.Create);
 
         var entity = new RetryPolicy
         {
diff --git a/SW.Bitween.Api/Resources/RetryPolicies/Delete.cs b/SW.Bitween.Api/Resources/RetryPolicies/Delete.cs
index 571835e4..ba06bfdc 100644
--- a/SW.Bitween.Api/Resources/RetryPolicies/Delete.cs
+++ b/SW.Bitween.Api/Resources/RetryPolicies/Delete.cs
@@ -2,7 +2,6 @@
 using System.Threading.Tasks;
 using Microsoft.EntityFrameworkCore;
 using SW.Bitween.Domain;
-using SW.Bitween.Domain.Accounts;
 using SW.EfCoreExtensions;
 using SW.PrimitiveTypes;
 
@@ -21,7 +20,7 @@ public Delete(BitweenDbContext dbContext, RequestContext requestContext)
 
     public async Task<object> Handle(int key)
     {
-        _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+        await _requestContext.EnsurePermission(_dbContext, Model.Permissions.RetryPolicies.Delete);
 
         var inUse = await _dbContext.Set<Subscription>()
             .AnyAsync(s => s.RetryPolicyId == key);
diff --git a/SW.Bitween.Api/Resources/RetryPolicies/Get.cs b/SW.Bitween.Api/Resources/RetryPolicies/Get.cs
index 7241dc80..6b5b866a 100644
--- a/SW.Bitween.Api/Resources/RetryPolicies/Get.cs
+++ b/SW.Bitween.Api/Resources/RetryPolicies/Get.cs
@@ -11,14 +11,18 @@ namespace SW.Bitween.Resources.RetryPolicies;
 public class Get : IGetHandler<int, object>
 {
     private readonly BitweenDbContext _dbContext;
+    private readonly RequestContext _requestContext;
 
-    public Get(BitweenDbContext dbContext)
+    public Get(BitweenDbContext dbContext, RequestContext requestContext)
     {
         _dbContext = dbContext;
+        _requestContext = requestContext;
     }
 
     public async Task<object> Handle(int key)
     {
+        await _requestContext.EnsurePermission(_dbContext, Model.Permissions.RetryPolicies.View);
+
         return await _dbContext.Set<RetryPolicy>()
             .AsNoTracking()
             .Search("Id", key)
diff --git a/SW.Bitween.Api/Resources/RetryPolicies/Search.cs b/SW.Bitween.Api/Resources/RetryPolicies/Search.cs
index c41261f6..39ab5e7b 100644
--- a/SW.Bitween.Api/Resources/RetryPolicies/Search.cs
+++ b/SW.Bitween.Api/Resources/RetryPolicies/Search.cs
@@ -11,14 +11,21 @@ namespace SW.Bitween.Resources.RetryPolicies;
 public class Search : ISearchyHandler
 {
     private readonly BitweenDbContext _dbContext;
+    private readonly RequestContext _requestContext;
 
-    public Search(BitweenDbContext dbContext)
+    public Search(BitweenDbContext dbContext, RequestContext requestContext)
     {
         _dbContext = dbContext;
+        _requestContext = requestContext;
     }
 
     public async Task<object> Handle(SearchyRequest searchyRequest, bool lookup = false, string searchPhrase = null)
     {
+        // Lookup returns only id/name pairs, which pickers across the app rely on;
+        // the full list is the data, so that's what the view permission covers.
+        if (!lookup)
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.RetryPolicies.View);
+
         var query = from policy in _dbContext.Set<RetryPolicy>()
             select new RetryPolicyRow
             {
diff --git a/SW.Bitween.Api/Resources/RetryPolicies/Test.cs b/SW.Bitween.Api/Resources/RetryPolicies/Test.cs
index 8fbf12ec..e5a6f0a0 100644
--- a/SW.Bitween.Api/Resources/RetryPolicies/Test.cs
+++ b/SW.Bitween.Api/Resources/RetryPolicies/Test.cs
@@ -1,7 +1,6 @@
 using System;
 using System.Collections.Generic;
 using System.Threading.Tasks;
-using SW.Bitween.Domain.Accounts;
 using SW.Bitween.Model;
 using SW.PrimitiveTypes;
 
@@ -14,16 +13,19 @@ namespace SW.Bitween.Resources.RetryPolicies;
 [HandlerName("test")]
 public class Test : ICommandHandler<TestRetryPolicyRequest, object>
 {
+    private readonly BitweenDbContext _dbContext;
     private readonly RequestContext _requestContext;
 
-    public Test(RequestContext requestContext)
+    public Test(BitweenDbContext dbContext, RequestContext requestContext)
     {
+        _dbContext = dbContext;
         _requestContext = requestContext;
     }
 
-    public Task<object> Handle(TestRetryPolicyRequest request)
+    public async Task<object> Handle(TestRetryPolicyRequest request)
     {
-        _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+        // A pure simulation with no side effects, so viewing a policy is enough to dry-run one.
+        await _requestContext.EnsurePermission(_dbContext, Model.Permissions.RetryPolicies.View);
 
         if (request.ResultType == XchangeResultType.Success)
             throw new SWValidationException("INVALID_RESULT_TYPE",
@@ -53,6 +55,6 @@ public Task<object> Handle(TestRetryPolicyRequest request)
             if (!decision.ShouldRetry) break;
         }
 
-        return Task.FromResult<object>(new TestRetryPolicyResponse { Attempts = attempts });
+        return new TestRetryPolicyResponse { Attempts = attempts };
     }
 }
diff --git a/SW.Bitween.Api/Resources/RetryPolicies/Update.cs b/SW.Bitween.Api/Resources/RetryPolicies/Update.cs
index 5d815fd4..64eafbac 100644
--- a/SW.Bitween.Api/Resources/RetryPolicies/Update.cs
+++ b/SW.Bitween.Api/Resources/RetryPolicies/Update.cs
@@ -1,6 +1,5 @@
 using System.Threading.Tasks;
 using SW.Bitween.Domain;
-using SW.Bitween.Domain.Accounts;
 using SW.Bitween.Model;
 using SW.PrimitiveTypes;
 
@@ -19,7 +18,7 @@ public Update(BitweenDbContext dbContext, RequestContext requestContext)
 
     public async Task<object> Handle(int key, RetryPolicyUpdate model)
     {
-        _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+        await _requestContext.EnsurePermission(_dbContext, Model.Permissions.RetryPolicies.Edit);
 
         var entity = await _dbContext.FindAsync<RetryPolicy>(key);
         entity.Name = model.Name;
diff --git a/SW.Bitween.Api/Resources/Roles/Create.cs b/SW.Bitween.Api/Resources/Roles/Create.cs
new file mode 100644
index 00000000..a159ad66
--- /dev/null
+++ b/SW.Bitween.Api/Resources/Roles/Create.cs
@@ -0,0 +1,41 @@
+using System.Threading.Tasks;
+using FluentValidation;
+using SW.Bitween.Domain.Accounts;
+using SW.Bitween.Model;
+using SW.PrimitiveTypes;
+
+namespace SW.Bitween.Resources.Roles;
+
+public class Create : ICommandHandler<RoleCreate, object>
+{
+    private readonly BitweenDbContext _dbContext;
+    private readonly RequestContext _requestContext;
+
+    public Create(BitweenDbContext dbContext, RequestContext requestContext)
+    {
+        _dbContext = dbContext;
+        _requestContext = requestContext;
+    }
+
+    public async Task<object> Handle(RoleCreate model)
+    {
+        await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Roles.Create);
+
+        RoleValidation.EnsureKnownPermissions(model.Permissions);
+        await RoleValidation.EnsureNameIsFree(_dbContext, model.Name);
+
+        var role = new Role(model.Name, model.Description, model.Permissions);
+        _dbContext.Add(role);
+        await _dbContext.SaveChangesAsync();
+        return role.Id;
+    }
+
+    private class Validate : AbstractValidator<RoleCreate>
+    {
+        public Validate()
+        {
+            RuleFor(i => i.Name).NotEmpty().MaximumLength(100);
+            RuleFor(i => i.Description).MaximumLength(500);
+        }
+    }
+}
diff --git a/SW.Bitween.Api/Resources/Roles/Delete.cs b/SW.Bitween.Api/Resources/Roles/Delete.cs
new file mode 100644
index 00000000..b8520454
--- /dev/null
+++ b/SW.Bitween.Api/Resources/Roles/Delete.cs
@@ -0,0 +1,41 @@
+using System.Linq;
+using System.Threading.Tasks;
+using Microsoft.EntityFrameworkCore;
+using SW.Bitween.Domain.Accounts;
+using SW.Bitween.Model;
+using SW.PrimitiveTypes;
+
+namespace SW.Bitween.Resources.Roles;
+
+public class Delete : IDeleteHandler<int, object>
+{
+    private readonly BitweenDbContext _dbContext;
+    private readonly RequestContext _requestContext;
+
+    public Delete(BitweenDbContext dbContext, RequestContext requestContext)
+    {
+        _dbContext = dbContext;
+        _requestContext = requestContext;
+    }
+
+    public async Task<object> Handle(int key)
+    {
+        await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Roles.Delete);
+
+        var role = await RoleValidation.Load(_dbContext, key);
+
+        if (role.IsSystem)
+            throw new SWValidationException("ROLE_IS_BUILT_IN",
+                $"'{role.Name}' is a built-in role and can't be deleted.");
+
+        var memberCount = await _dbContext.Set<AccountRoleLink>().CountAsync(l => l.RoleId == key);
+        if (memberCount > 0)
+            throw new SWValidationException("ROLE_IN_USE",
+                $"'{role.Name}' is still assigned to {memberCount} member{(memberCount == 1 ? "" : "s")}. " +
+                "Move them to another role first.");
+
+        _dbContext.Remove(role);
+        await _dbContext.SaveChangesAsync();
+        return null;
+    }
+}
diff --git a/SW.Bitween.Api/Resources/Roles/Get.cs b/SW.Bitween.Api/Resources/Roles/Get.cs
new file mode 100644
index 00000000..0f7b4fed
--- /dev/null
+++ b/SW.Bitween.Api/Resources/Roles/Get.cs
@@ -0,0 +1,45 @@
+using System.Linq;
+using System.Threading.Tasks;
+using Microsoft.EntityFrameworkCore;
+using SW.Bitween.Domain.Accounts;
+using SW.Bitween.Model;
+using SW.PrimitiveTypes;
+
+namespace SW.Bitween.Resources.Roles;
+
+public class Get : IGetHandler<int, object>
+{
+    private readonly BitweenDbContext _dbContext;
+    private readonly RequestContext _requestContext;
+
+    public Get(BitweenDbContext dbContext, RequestContext requestContext)
+    {
+        _dbContext = dbContext;
+        _requestContext = requestContext;
+    }
+
+    public async Task<object> Handle(int key)
+    {
+        await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Roles.View);
+
+        var row = await _dbContext.Set<Role>()
+            .AsNoTracking()
+            .Where(role => role.Id == key)
+            .Select(role => new RoleRow
+            {
+                Id = role.Id,
+                Name = role.Name,
+                Description = role.Description,
+                IsSystem = role.IsSystem,
+                Permissions = role.Permissions,
+                CreatedOn = role.CreatedOn,
+                MemberCount = _dbContext.Set<AccountRoleLink>().Count(l => l.RoleId == role.Id)
+            })
+            .SingleOrDefaultAsync();
+
+        if (row is not null && row.IsSystem)
+            row.Permissions = Role.SystemPermissions(row.Id);
+
+        return row;
+    }
+}
diff --git a/SW.Bitween.Api/Resources/Roles/RoleValidation.cs b/SW.Bitween.Api/Resources/Roles/RoleValidation.cs
new file mode 100644
index 00000000..1e872a86
--- /dev/null
+++ b/SW.Bitween.Api/Resources/Roles/RoleValidation.cs
@@ -0,0 +1,45 @@
+using System.Collections.Generic;
+using System.Linq;
+using System.Threading.Tasks;
+using Microsoft.EntityFrameworkCore;
+using SW.Bitween.Domain.Accounts;
+using SW.Bitween.Model;
+using SW.PrimitiveTypes;
+
+namespace SW.Bitween.Resources.Roles;
+
+internal static class RoleValidation
+{
+    /// <summary>
+    /// Rejects keys the catalog doesn't define. The entity also sanitizes, but failing loudly at
+    /// the boundary surfaces a stale UI instead of silently dropping the grants it asked for.
+    /// </summary>
+    public static void EnsureKnownPermissions(List<string> permissions)
+    {
+        var unknown = (permissions ?? [])
+            .Where(k => !PermissionCatalog.AllKeys.Contains(k))
+            .Distinct()
+            .ToList();
+
+        if (unknown.Count > 0)
+            throw new SWValidationException("UNKNOWN_PERMISSIONS",
+                $"These permissions don't exist: {string.Join(", ", unknown)}.");
+    }
+
+    public static async Task EnsureNameIsFree(BitweenDbContext dbContext, string name, int? exceptId = null)
+    {
+        var taken = await dbContext.Set<Role>()
+            .AnyAsync(r => r.Name == name && (exceptId == null || r.Id != exceptId));
+
+        if (taken)
+            throw new SWValidationException("ROLE_EXISTS", $"A role named '{name}' already exists.");
+    }
+
+    public static async Task<Role> Load(BitweenDbContext dbContext, int key)
+    {
+        var role = await dbContext.Set<Role>().FindAsync(key);
+        if (role is null)
+            throw new SWValidationException("ROLE_NOT_FOUND", $"No role exists with the id {key}.");
+        return role;
+    }
+}
diff --git a/SW.Bitween.Api/Resources/Roles/Search.cs b/SW.Bitween.Api/Resources/Roles/Search.cs
new file mode 100644
index 00000000..0ec1f919
--- /dev/null
+++ b/SW.Bitween.Api/Resources/Roles/Search.cs
@@ -0,0 +1,57 @@
+using System.Linq;
+using System.Threading.Tasks;
+using Microsoft.EntityFrameworkCore;
+using SW.Bitween.Domain.Accounts;
+using SW.Bitween.Model;
+using SW.EfCoreExtensions;
+using SW.PrimitiveTypes;
+
+namespace SW.Bitween.Resources.Roles;
+
+public class Search : ISearchyHandler
+{
+    private readonly BitweenDbContext _dbContext;
+    private readonly RequestContext _requestContext;
+
+    public Search(BitweenDbContext dbContext, RequestContext requestContext)
+    {
+        _dbContext = dbContext;
+        _requestContext = requestContext;
+    }
+
+    public async Task<object> Handle(SearchyRequest searchyRequest, bool lookup = false, string searchPhrase = null)
+    {
+        await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Roles.View);
+
+        var query = from role in _dbContext.Set<Role>()
+            select new RoleRow
+            {
+                Id = role.Id,
+                Name = role.Name,
+                Description = role.Description,
+                IsSystem = role.IsSystem,
+                Permissions = role.Permissions,
+                CreatedOn = role.CreatedOn,
+                MemberCount = _dbContext.Set<AccountRoleLink>().Count(l => l.RoleId == role.Id)
+            };
+
+        query = query.AsNoTracking();
+
+        if (lookup)
+            return await query.Search(searchyRequest.Conditions)
+                .ToDictionaryAsync(k => k.Id.ToString(), v => v.Name);
+
+        var result = await query.Search(searchyRequest.Conditions, searchyRequest.Sorts,
+            searchyRequest.PageSize, searchyRequest.PageIndex).ToListAsync();
+
+        // Built-in roles derive their grants from the catalog, so fill them in after the query.
+        foreach (var row in result.Where(r => r.IsSystem))
+            row.Permissions = Role.SystemPermissions(row.Id);
+
+        return new SearchyResponse<RoleRow>
+        {
+            TotalCount = await query.Search(searchyRequest.Conditions).CountAsync(),
+            Result = result
+        };
+    }
+}
diff --git a/SW.Bitween.Api/Resources/Roles/Update.cs b/SW.Bitween.Api/Resources/Roles/Update.cs
new file mode 100644
index 00000000..5667f887
--- /dev/null
+++ b/SW.Bitween.Api/Resources/Roles/Update.cs
@@ -0,0 +1,47 @@
+using System.Threading.Tasks;
+using FluentValidation;
+using SW.Bitween.Model;
+using SW.PrimitiveTypes;
+
+namespace SW.Bitween.Resources.Roles;
+
+public class Update : ICommandHandler<int, RoleUpdate, object>
+{
+    private readonly BitweenDbContext _dbContext;
+    private readonly RequestContext _requestContext;
+
+    public Update(BitweenDbContext dbContext, RequestContext requestContext)
+    {
+        _dbContext = dbContext;
+        _requestContext = requestContext;
+    }
+
+    public async Task<object> Handle(int key, RoleUpdate model)
+    {
+        await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Roles.Edit);
+
+        var role = await RoleValidation.Load(_dbContext, key);
+
+        // Built-in roles are the floor an instance can always fall back to — if Administrator
+        // could be edited, an admin could lock everyone out of members and roles for good.
+        if (role.IsSystem)
+            throw new SWValidationException("ROLE_IS_BUILT_IN",
+                $"'{role.Name}' is a built-in role and can't be changed. Create a role instead.");
+
+        RoleValidation.EnsureKnownPermissions(model.Permissions);
+        await RoleValidation.EnsureNameIsFree(_dbContext, model.Name, key);
+
+        role.Update(model.Name, model.Description, model.Permissions);
+        await _dbContext.SaveChangesAsync();
+        return null;
+    }
+
+    private class Validate : AbstractValidator<RoleUpdate>
+    {
+        public Validate()
+        {
+            RuleFor(i => i.Name).NotEmpty().MaximumLength(100);
+            RuleFor(i => i.Description).MaximumLength(500);
+        }
+    }
+}
diff --git a/SW.Bitween.Api/Resources/Settings/Config.cs b/SW.Bitween.Api/Resources/Settings/Config.cs
index c6a95b5d..c8603170 100644
--- a/SW.Bitween.Api/Resources/Settings/Config.cs
+++ b/SW.Bitween.Api/Resources/Settings/Config.cs
@@ -27,7 +27,10 @@ public async Task<object> Handle()
             IsRabbitMqManagementConfigured = !string.IsNullOrWhiteSpace(_BitweenOptions.RabbitMqManagementUrl)
                                              && !string.IsNullOrWhiteSpace(_BitweenOptions.RabbitMqManagementUsername)
                                              && !string.IsNullOrWhiteSpace(_BitweenOptions.RabbitMqManagementPassword),
-            Theme = _themeOptions
+            Theme = _themeOptions,
+            // The product defaults, so the sign-in page — which has no session and can't read the
+            // settings list — can tell a brand value someone chose from one nobody has touched.
+            ThemeDefaults = SettingsService.DefaultsUnder("Theme.")
         };
     }
 }
diff --git a/SW.Bitween.Api/Resources/Settings/Delete.cs b/SW.Bitween.Api/Resources/Settings/Delete.cs
new file mode 100644
index 00000000..c78f5cde
--- /dev/null
+++ b/SW.Bitween.Api/Resources/Settings/Delete.cs
@@ -0,0 +1,61 @@
+using System;
+using System.Threading.Tasks;
+using SW.Bitween.Domain;
+using SW.Bitween.Services;
+using SW.PrimitiveTypes;
+
+namespace SW.Bitween.Resources.Settings;
+
+/// <summary>
+/// Resets one setting to the product default — the value the options class ships with.
+/// <para>
+/// The row is rewritten rather than deleted: a missing row is how startup recognises a key it has
+/// never imported, so dropping it would let configuration seep back in on the next boot. Reset
+/// therefore means "stop choosing", not "forget this key exists".
+/// </para>
+/// </summary>
+public class Delete(
+    BitweenDbContext dbContext,
+    RequestContext requestContext,
+    SettingsService settings,
+    IInfolinkCache cache,
+    IServiceProvider serviceProvider) : IDeleteHandler<string, object>
+{
+    public async Task<object> Handle(string key)
+    {
+        await requestContext.EnsurePermission(dbContext, Model.Permissions.Settings.Edit);
+
+        var definition = SettingsCatalog.Find(key)
+                         ?? throw new SWValidationException("SETTING_NOT_FOUND", $"'{key}' is not a known setting.");
+
+        if (!definition.Stored)
+            throw new SWValidationException("SETTING_NOT_EDITABLE",
+                $"{definition.Label} comes from this instance's configuration, so there's nothing to reset.");
+
+        if (!settings.CanStore(definition))
+            throw new SWValidationException("SETTING_ENCRYPTION_UNAVAILABLE",
+                $"{definition.Label} is a secret that isn't stored, so there's nothing to reset.");
+
+        var productDefault = SettingsService.DefaultOf(definition);
+        var stored = await dbContext.Set<Setting>().FindAsync(definition.Key);
+        var toStore = settings.ToStored(definition, productDefault);
+
+        if (stored is null)
+            dbContext.Add(new Setting { Id = definition.Key, Value = toStore });
+        else
+            stored.Value = toStore;
+
+        await dbContext.SaveChangesAsync();
+
+        // Resetting an already-default setting is a no-op, not an error — the UI can fire this for
+        // a staged reset it never saved a value for.
+        settings.Apply(definition, productDefault);
+
+        // A reset has to take effect the same way a write does — see Update.
+        if (definition.OnChange is not null) await definition.OnChange(serviceProvider);
+
+        await cache.BroadcastRevoke();
+
+        return null;
+    }
+}
diff --git a/SW.Bitween.Api/Resources/Settings/Get.cs b/SW.Bitween.Api/Resources/Settings/Get.cs
new file mode 100644
index 00000000..84614464
--- /dev/null
+++ b/SW.Bitween.Api/Resources/Settings/Get.cs
@@ -0,0 +1,85 @@
+using System;
+using System.Linq;
+using System.Threading.Tasks;
+using Microsoft.EntityFrameworkCore;
+using SW.Bitween.Domain;
+using SW.Bitween.Model;
+using SW.Bitween.Services;
+using SW.PrimitiveTypes;
+
+namespace SW.Bitween.Resources.Settings;
+
+/// <summary>
+/// Every editable setting, in catalog order: the definition from <see cref="SettingsCatalog"/>
+/// joined with the stored value. Rows normally exist for all of them — startup imports whatever
+/// configuration had — so a missing row means the key couldn't be stored yet.
+/// </summary>
+public class Get(BitweenDbContext dbContext, RequestContext requestContext, SettingsService settings)
+    : IQueryHandler<object>
+{
+    public async Task<object> Handle()
+    {
+        await requestContext.EnsurePermission(dbContext, Model.Permissions.Settings.View);
+
+        var rows = await dbContext.Set<Setting>().AsNoTracking()
+            .ToDictionaryAsync(s => s.Id, s => s.Value, StringComparer.OrdinalIgnoreCase);
+
+        return SettingsCatalog.All.Select(definition =>
+        {
+            // Environment-owned settings have no row to join to: they're reported straight from
+            // the options object, either with their value or as set/not set.
+            if (!definition.Stored) return EnvironmentRow(definition, settings.LiveValue(definition));
+
+            var hasRow = rows.TryGetValue(definition.Key, out var stored);
+            var productDefault = SettingsService.DefaultOf(definition);
+            // A secret's value is withheld either way round: only whether one is set is public.
+            var value = definition.Secret ? null : hasRow ? stored : productDefault;
+            // A secret has no product default, and its ciphertext couldn't be compared with one
+            // anyway — so for a secret both "is set" and "is overridden" mean the same thing:
+            // a non-empty value is stored.
+            var secretIsSet = hasRow && !string.IsNullOrEmpty(stored);
+
+            return new SettingRow
+            {
+                Key = definition.Key,
+                Section = definition.Section,
+                Label = definition.Label,
+                Description = definition.Description,
+                Kind = definition.Kind.ToString().ToLowerInvariant(),
+                DefaultValue = definition.Secret ? string.Empty : productDefault,
+                Value = value,
+                Secret = definition.Secret,
+                Overridden = definition.Secret ? secretIsSet : hasRow && stored != productDefault,
+                HasValue = definition.Secret
+                    ? secretIsSet
+                    : !string.IsNullOrEmpty(hasRow ? stored : productDefault),
+                // The only thing that makes a stored setting uneditable: a secret with no
+                // passphrase configured to protect it.
+                Editable = settings.CanStore(definition),
+                Access = Name(definition.Access)
+            };
+        }).ToArray();
+    }
+
+    /// <summary>
+    /// A setting the UI reports but can't change. There's no default and nothing to reset, so
+    /// those stay empty; a presence setting withholds the value the same way a secret does.
+    /// </summary>
+    private static SettingRow EnvironmentRow(SettingDefinition definition, string live) => new()
+    {
+        Key = definition.Key,
+        Section = definition.Section,
+        Label = definition.Label,
+        Description = definition.Description,
+        Kind = definition.Kind.ToString().ToLowerInvariant(),
+        DefaultValue = string.Empty,
+        Value = definition.Access == SettingAccess.Presence ? null : live,
+        Secret = false,
+        Overridden = false,
+        HasValue = !string.IsNullOrEmpty(live),
+        Editable = false,
+        Access = Name(definition.Access)
+    };
+
+    private static string Name(SettingAccess access) => access.ToString().ToLowerInvariant();
+}
diff --git a/SW.Bitween.Api/Resources/Settings/Update.cs b/SW.Bitween.Api/Resources/Settings/Update.cs
new file mode 100644
index 00000000..f47a2f6f
--- /dev/null
+++ b/SW.Bitween.Api/Resources/Settings/Update.cs
@@ -0,0 +1,79 @@
+using System;
+using System.Threading.Tasks;
+using SW.Bitween.Domain;
+using SW.Bitween.Model;
+using SW.Bitween.Services;
+using SW.PrimitiveTypes;
+
+namespace SW.Bitween.Resources.Settings;
+
+/// <summary>
+/// Stores a new value for one setting. It's applied to the live options singletons as well as
+/// stored, so the very next request already sees it; the cache-revoke broadcast carries the change
+/// to any other instance. Secrets are encrypted before they're written. Only editable settings can
+/// be written at all — the environment-owned ones the page also lists are rejected here.
+/// </summary>
+public class Update(
+    BitweenDbContext dbContext,
+    RequestContext requestContext,
+    SettingsService settings,
+    IInfolinkCache cache,
+    IServiceProvider serviceProvider) : ICommandHandler<string, SettingUpdate, object>
+{
+    public async Task<object> Handle(string key, SettingUpdate request)
+    {
+        await requestContext.EnsurePermission(dbContext, Model.Permissions.Settings.Edit);
+
+        var definition = SettingsCatalog.Find(key)
+                         ?? throw new SWValidationException("SETTING_NOT_FOUND", $"'{key}' is not a known setting.");
+
+        if (!definition.Stored)
+            throw new SWValidationException("SETTING_NOT_EDITABLE",
+                $"{definition.Label} comes from this instance's configuration and can't be changed here.");
+
+        if (!settings.CanStore(definition))
+            throw new SWValidationException("SETTING_ENCRYPTION_UNAVAILABLE",
+                $"{definition.Label} is a secret and can only be stored once " +
+                $"{BitweenOptions.ConfigurationSection}:{nameof(BitweenOptions.SettingsEncryptionKey)} is configured.");
+
+        // Empty is a real value — it's how you clear an optional link or a license key.
+        var value = request?.Value ?? string.Empty;
+
+        try
+        {
+            SettingsService.Validate(definition, value);
+        }
+        catch (FormatException ex)
+        {
+            throw new SWValidationException("SETTING_INVALID_VALUE", $"{definition.Label}: {ex.Message}");
+        }
+
+        await Store(definition, value);
+        settings.Apply(definition, value);
+
+        // Some settings need more than the property assignment above — re-scheduling a job, for
+        // instance. Runs after Apply so the hook reads the value that's now in effect.
+        if (definition.OnChange is not null) await definition.OnChange(serviceProvider);
+
+        await cache.BroadcastRevoke();
+
+        return null;
+    }
+
+    /// <summary>
+    /// Writes the value, creating the row if startup hasn't imported this key yet. Every setting
+    /// keeps exactly one row, keyed by the catalog key.
+    /// </summary>
+    private async Task Store(SettingDefinition definition, string value)
+    {
+        var stored = await dbContext.Set<Setting>().FindAsync(definition.Key);
+        var toStore = settings.ToStored(definition, value);
+
+        if (stored is null)
+            dbContext.Add(new Setting { Id = definition.Key, Value = toStore });
+        else
+            stored.Value = toStore;
+
+        await dbContext.SaveChangesAsync();
+    }
+}
diff --git a/SW.Bitween.Api/Resources/SubscriptionCategories/Search.cs b/SW.Bitween.Api/Resources/SubscriptionCategories/Search.cs
index d532712e..f6e1ccd1 100644
--- a/SW.Bitween.Api/Resources/SubscriptionCategories/Search.cs
+++ b/SW.Bitween.Api/Resources/SubscriptionCategories/Search.cs
@@ -16,10 +16,13 @@ public Search(BitweenDbContext dbContext, RequestContext requestContext)
     {
         _dbContext = dbContext;
         _requestContext = requestContext;
+        _requestContext = requestContext;
     }
 
     public async Task<object> Handle(SearchSubscriptionCategoryModel request)
     {
+        await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Subscriptions.View);
+
         request.Limit ??= 20;
         request.Offset ??= 0;
         var q = _dbContext.Set<SubscriptionCategory>().AsNoTracking().AsQueryable();
diff --git a/SW.Bitween.Api/Resources/Subscriptions/AggregateNow.cs b/SW.Bitween.Api/Resources/Subscriptions/AggregateNow.cs
index 653583c6..00c4cdbb 100644
--- a/SW.Bitween.Api/Resources/Subscriptions/AggregateNow.cs
+++ b/SW.Bitween.Api/Resources/Subscriptions/AggregateNow.cs
@@ -2,7 +2,6 @@
 using SW.Bitween.Model;
 using SW.PrimitiveTypes;
 using System.Threading.Tasks;
-using SW.Bitween.Domain.Accounts;
 
 namespace SW.Bitween.Resources.Subscriptions
 {
@@ -22,7 +21,7 @@ public AggregateNow(BitweenDbContext dbContext, RequestContext requestContext, S
 
         public async Task<object> Handle(int key, SubscriptionAggregateNow request)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Subscriptions.Operate);
 
             var entity = await _dbContext.FindAsync<Subscription>(key);
             entity.SetAggregateNow();
diff --git a/SW.Bitween.Api/Resources/Subscriptions/Create.cs b/SW.Bitween.Api/Resources/Subscriptions/Create.cs
index 2597bfbf..6cc935f7 100644
--- a/SW.Bitween.Api/Resources/Subscriptions/Create.cs
+++ b/SW.Bitween.Api/Resources/Subscriptions/Create.cs
@@ -3,7 +3,6 @@
 using SW.Bitween.Model;
 using SW.PrimitiveTypes;
 using System.Threading.Tasks;
-using SW.Bitween.Domain.Accounts;
 
 namespace SW.Bitween.Resources.Subscriptions
 {
@@ -20,7 +19,7 @@ public Create(BitweenDbContext dbContext, RequestContext requestContext)
 
         public async Task<object> Handle(SubscriptionCreate model)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Subscriptions.Create);
 
             Subscription entity;
 
diff --git a/SW.Bitween.Api/Resources/Subscriptions/Delete.cs b/SW.Bitween.Api/Resources/Subscriptions/Delete.cs
index dbb1c597..c4c31e92 100644
--- a/SW.Bitween.Api/Resources/Subscriptions/Delete.cs
+++ b/SW.Bitween.Api/Resources/Subscriptions/Delete.cs
@@ -5,7 +5,6 @@
 using System.Collections.Generic;
 using System.Text;
 using System.Threading.Tasks;
-using SW.Bitween.Domain.Accounts;
 
 namespace SW.Bitween.Resources.Subscriptions
 {
@@ -23,7 +22,7 @@ public Delete(BitweenDbContext dbContext, RequestContext requestContext)
 
         public async Task<object> Handle(int key)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Viewer);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Subscriptions.Delete);
 
             await _dbContext.DeleteByKeyAsync<Subscription>(key);
             return null;
diff --git a/SW.Bitween.Api/Resources/Subscriptions/Get.cs b/SW.Bitween.Api/Resources/Subscriptions/Get.cs
index 120855e4..6d0e9614 100644
--- a/SW.Bitween.Api/Resources/Subscriptions/Get.cs
+++ b/SW.Bitween.Api/Resources/Subscriptions/Get.cs
@@ -14,20 +14,24 @@ namespace SW.Bitween.Resources.Subscriptions
     public class Get : IGetHandler<int, object>
     {
         private readonly BitweenDbContext dbContext;
+        private readonly RequestContext requestContext;
         private readonly NativeAdapterDiscoveryService _nativeAdapterDiscovery;
         private readonly IServiceProvider _serviceProvider;
 
         private const string PrivateSentinel = "__private__";
 
-        public Get(BitweenDbContext dbContext, NativeAdapterDiscoveryService nativeAdapterDiscovery, IServiceProvider serviceProvider)
+        public Get(BitweenDbContext dbContext, NativeAdapterDiscoveryService nativeAdapterDiscovery, IServiceProvider serviceProvider, RequestContext requestContext)
         {
             this.dbContext = dbContext;
+            this.requestContext = requestContext;
             _nativeAdapterDiscovery = nativeAdapterDiscovery;
             _serviceProvider = serviceProvider;
         }
 
         public async Task<object> Handle(int key)
         {
+            await requestContext.EnsurePermission(dbContext, Model.Permissions.Subscriptions.View);
+
             var subscriber =
                 await dbContext.Set<Subscription>().AsNoTracking().Search("Id", key).SingleOrDefaultAsync();
 
diff --git a/SW.Bitween.Api/Resources/Subscriptions/GetTrail.cs b/SW.Bitween.Api/Resources/Subscriptions/GetTrail.cs
index 9894fd06..b9e6079c 100644
--- a/SW.Bitween.Api/Resources/Subscriptions/GetTrail.cs
+++ b/SW.Bitween.Api/Resources/Subscriptions/GetTrail.cs
@@ -14,15 +14,19 @@ namespace SW.Bitween.Resources.Subscriptions;
 public class GetTrail : IQueryHandler<SearchSubscriptionTrailModel,object>
 {
     private readonly BitweenDbContext dbContext;
+    private readonly RequestContext requestContext;
 
-    public GetTrail(BitweenDbContext dbContext)
+    public GetTrail(BitweenDbContext dbContext, RequestContext requestContext)
     {
         this.dbContext = dbContext;
+        this.requestContext = requestContext;
     }
 
 
     public async Task<object> Handle(SearchSubscriptionTrailModel request)
     {
+        await requestContext.EnsurePermission(dbContext, Model.Permissions.Subscriptions.View);
+
         request.Limit ??= 20;
         request.Offset ??= 0;
         var trails = dbContext.Set<SubscriptionTrail>()
diff --git a/SW.Bitween.Api/Resources/Subscriptions/Pause.cs b/SW.Bitween.Api/Resources/Subscriptions/Pause.cs
index 44d14d67..c56317ff 100644
--- a/SW.Bitween.Api/Resources/Subscriptions/Pause.cs
+++ b/SW.Bitween.Api/Resources/Subscriptions/Pause.cs
@@ -2,7 +2,6 @@
 using System.Threading.Tasks;
 using Newtonsoft.Json;
 using SW.Bitween.Domain;
-using SW.Bitween.Domain.Accounts;
 using SW.Bitween.Model;
 using SW.PrimitiveTypes;
 
@@ -23,7 +22,7 @@ public Pause(BitweenDbContext dbContext, RequestContext requestContext)
 
         public async Task<object> Handle(int key, SubscriptionPause request)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Subscriptions.Operate);
 
             var entity = await _dbContext.FindAsync<Subscription>(key);
             SubscriptionTrail trail;
diff --git a/SW.Bitween.Api/Resources/Subscriptions/ReceiveNow.cs b/SW.Bitween.Api/Resources/Subscriptions/ReceiveNow.cs
index 1dbcf31b..b6141b9f 100644
--- a/SW.Bitween.Api/Resources/Subscriptions/ReceiveNow.cs
+++ b/SW.Bitween.Api/Resources/Subscriptions/ReceiveNow.cs
@@ -2,7 +2,6 @@
 using SW.Bitween.Model;
 using SW.PrimitiveTypes;
 using System.Threading.Tasks;
-using SW.Bitween.Domain.Accounts;
 
 namespace SW.Bitween.Resources.Subscriptions
 {
@@ -22,7 +21,7 @@ public ReceiveNow(BitweenDbContext dbContext, RequestContext requestContext, Sub
 
         async public Task<object> Handle(int key, SubscriptionReceiveNow request)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Subscriptions.Operate);
 
             var entity = await _dbContext.FindAsync<Subscription>(key);
             entity.SetReceiveNow();
diff --git a/SW.Bitween.Api/Resources/Subscriptions/SaveMapper.cs b/SW.Bitween.Api/Resources/Subscriptions/SaveMapper.cs
index bacc50e6..7819dd5a 100644
--- a/SW.Bitween.Api/Resources/Subscriptions/SaveMapper.cs
+++ b/SW.Bitween.Api/Resources/Subscriptions/SaveMapper.cs
@@ -7,7 +7,6 @@
 using System;
 using System.Linq;
 using System.Threading.Tasks;
-using SW.Bitween.Domain.Accounts;
 
 namespace SW.Bitween.Resources.Subscriptions
 {
@@ -27,7 +26,7 @@ public SaveMapper(BitweenDbContext dbContext, IInfolinkCache BitweenCache, Reque
 
         public async Task<object> Handle(int key, SubscriptionSaveMapper model)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Subscriptions.Edit);
             var entity = await _dbContext.FindAsync<Subscription>(key);
 
             entity.MapperId = model.MapperId;
diff --git a/SW.Bitween.Api/Resources/Subscriptions/Search.cs b/SW.Bitween.Api/Resources/Subscriptions/Search.cs
index 4b6c9295..e87aaf00 100644
--- a/SW.Bitween.Api/Resources/Subscriptions/Search.cs
+++ b/SW.Bitween.Api/Resources/Subscriptions/Search.cs
@@ -15,11 +15,13 @@ namespace SW.Bitween.Resources.Subscriptions
     public class Search : ISearchyHandler
     {
         private readonly BitweenDbContext _dbContext;
+        private readonly RequestContext _requestContext;
         private readonly List<string> _edgeCaseProperties;
 
-        public Search(BitweenDbContext dbContext)
+        public Search(BitweenDbContext dbContext, RequestContext requestContext)
         {
             _dbContext = dbContext;
+            _requestContext = requestContext;
 
             _edgeCaseProperties = new List<string>
             {
@@ -32,6 +34,11 @@ public Search(BitweenDbContext dbContext)
 
         public async Task<object> Handle(SearchyRequest searchyRequest, bool lookup = false, string searchPhrase = null)
         {
+            // Lookup returns only id/name pairs, which pickers across the app rely on;
+            // the full list is the data, so that's what the view permission covers.
+            if (!lookup)
+                await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Subscriptions.View);
+
             var query = from subscriber in _dbContext.Set<Subscription>()
                 join document in _dbContext.Set<Document>() on subscriber.DocumentId equals document.Id
                 select new SubscriptionSearch
@@ -51,6 +58,9 @@ join document in _dbContext.Set<Document>() on subscriber.DocumentId equals docu
                     ReceiveOn = subscriber.ReceiveOn,
                     PausedOn = subscriber.PausedOn,
                     IsRunning = subscriber.IsRunning,
+                    ConsecutiveFailures = subscriber.ConsecutiveFailures,
+                    LastException = subscriber.LastException,
+                    RetryPolicyId = subscriber.RetryPolicyId,
                     MapperProperties = subscriber.MapperProperties.ToKeyAndValueCollection(),
                     HandlerProperties = subscriber.HandlerProperties.ToKeyAndValueCollection(),
                     ReceiverProperties = subscriber.ReceiverProperties.ToKeyAndValueCollection(),
@@ -62,7 +72,6 @@ join document in _dbContext.Set<Document>() on subscriber.DocumentId equals docu
                     WorkGroupId =  subscriber.WorkGroupId,
                     CategoryDescription = subscriber.Category.Description,
                     CategoryCode = subscriber.Category.Code,
-                    RetryPolicyId = subscriber.RetryPolicyId,
                     CustomRetryPolicy = subscriber.CustomRetryPolicy,
 
                 };
diff --git a/SW.Bitween.Api/Resources/Subscriptions/Update.cs b/SW.Bitween.Api/Resources/Subscriptions/Update.cs
index b93101b1..4fd0763c 100644
--- a/SW.Bitween.Api/Resources/Subscriptions/Update.cs
+++ b/SW.Bitween.Api/Resources/Subscriptions/Update.cs
@@ -10,7 +10,6 @@
 using System.Linq;
 using System.Threading.Tasks;
 using Microsoft.AspNetCore.Http;
-using SW.Bitween.Domain.Accounts;
 
 namespace SW.Bitween.Resources.Subscriptions
 {
@@ -33,7 +32,7 @@ public Update(BitweenDbContext dbContext, IInfolinkCache BitweenCache, RequestCo
 
         public async Task<object> Handle(int key, SubscriptionUpdate model)
         {
-            _requestContext.EnsureAccess(AccountRole.Admin, AccountRole.Member);
+            await _requestContext.EnsurePermission(_dbContext, Model.Permissions.Subscriptions.Edit);
             var entity = await _dbContext.FindAsync<Subscription>(key);
 
             // Capture before SetSchedules replaces the collection.
diff --git a/SW.Bitween.Api/Resources/WorkGroups/Create.cs b/SW.Bitween.Api/Resources/WorkGroups/Create.cs
index f22e0e3a..931f2699 100644
--- a/SW.Bitween.Api/Resources/WorkGroups/Create.cs
+++ b/SW.Bitween.Api/Resources/WorkGroups/Create.cs
@@ -1,6 +1,7 @@
 using System.Threading.Tasks;
+using FluentValidation;
 using SW.Bitween.Domain;
-using SW.Bitween.Model; 
+using SW.Bitween.Model;
 using SW.PrimitiveTypes;
 
 namespace SW.Bitween.Resources.WorkGroups;
@@ -12,6 +13,8 @@ public class Create(BitweenDbContext dbContext, RequestContext requestContext,II
 
     public async Task<object> Handle(CreateWorkGroupModel request)
     {
+        await _requestContext.EnsurePermission(dbContext, Model.Permissions.WorkGroups.Create);
+
         var workgroup = new WorkGroup()
         {
             Name = request.Name,
@@ -34,4 +37,15 @@ public async Task<object> Handle(CreateWorkGroupModel request)
             workgroup.Id
         };
     }
+
+    private class Validate : AbstractValidator<CreateWorkGroupModel>
+    {
+        public Validate()
+        {
+            RuleFor(i => i.BusMessageName)
+                .Matches("^\\S+$")
+                .When(i => !string.IsNullOrEmpty(i.BusMessageName))
+                .WithMessage("Bus message name cannot contain spaces.");
+        }
+    }
 }
\ No newline at end of file
diff --git a/SW.Bitween.Api/Resources/WorkGroups/Delete.cs b/SW.Bitween.Api/Resources/WorkGroups/Delete.cs
index 05b5dfed..23db025a 100644
--- a/SW.Bitween.Api/Resources/WorkGroups/Delete.cs
+++ b/SW.Bitween.Api/Resources/WorkGroups/Delete.cs
@@ -14,6 +14,8 @@ public class Delete(BitweenDbContext dbContext, RequestContext requestContext, I
 
     public async Task<object> Handle(int key, DeleteWorkGroupModel _)
     {
+        await _requestContext.EnsurePermission(dbContext, Model.Permissions.WorkGroups.Delete);
+
         var category = await dbContext.Set<WorkGroup>().FindAsync(key);
         if (category is null)
             throw new SWValidationException("CATEGORY_NOT_FOUND", $"Workgroup with id {key} was not found");
diff --git a/SW.Bitween.Api/Resources/WorkGroups/Search.cs b/SW.Bitween.Api/Resources/WorkGroups/Search.cs
index 099b9c7a..8a9868ae 100644
--- a/SW.Bitween.Api/Resources/WorkGroups/Search.cs
+++ b/SW.Bitween.Api/Resources/WorkGroups/Search.cs
@@ -11,7 +11,8 @@
 namespace SW.Bitween.Resources.WorkGroups;
 
 public class Search(
-    IInfolinkCache infolinkCache,
+    BitweenDbContext dbContext,
+    RequestContext requestContext,
     IConsumerReader consumerReader,
     ILogger<Search> logger)
     : IQueryHandler<SearchWorkGroupModel, object>
@@ -19,10 +20,19 @@ public class Search(
 
     public async Task<object> Handle(SearchWorkGroupModel request)
     {
+        await requestContext.EnsurePermission(dbContext, Model.Permissions.WorkGroups.View);
+
         request.Limit ??= 20;
         request.Offset ??= 0;
-        
-        var workGroups = await infolinkCache.ListWorkGroupsAsync();
+
+        // Read straight from the DB rather than IInfolinkCache: that cache only
+        // invalidates via a broadcast back to itself over RabbitMQ (see
+        // WorkGroups/Create|Update|Delete.cs calling BroadcastRevoke()), so a
+        // freshly created/edited/deleted work group can stay invisible here
+        // until the cache's own TTL expires whenever that broadcast doesn't
+        // land. GlobalAdapterValuesSets and RetryPolicies already read the DB
+        // directly for the same reason.
+        var workGroups = await dbContext.Set<WorkGroup>().AsNoTracking().ToArrayAsync();
         var consumerCounts = Array.Empty<ConsumerCount>();
 
         try
@@ -65,6 +75,7 @@ public async Task<object> Handle(SearchWorkGroupModel request)
                     NotifierIncomingRate = notifiersCounts?.IncomingRate,
                     NotifierProcessingCount = notifiersCounts?.ProcessingCount,
                     NotifierQueueCount = notifiersCounts?.QueueCount,
+                    ProcessorNodeCount = processorsCounts?.TotalNodes,
                 };
             }).ToList();
 
diff --git a/SW.Bitween.Api/Resources/WorkGroups/Update.cs b/SW.Bitween.Api/Resources/WorkGroups/Update.cs
index e24ee6b0..7cb8f5d8 100644
--- a/SW.Bitween.Api/Resources/WorkGroups/Update.cs
+++ b/SW.Bitween.Api/Resources/WorkGroups/Update.cs
@@ -5,14 +5,23 @@
 
 namespace SW.Bitween.Resources.WorkGroups;
 
-public class Update(BitweenDbContext dbContext,IInfolinkCache _BitweenCache, IBroadcast _broadcast) : ICommandHandler<int, CreateWorkGroupModel, object>
+public class Update(BitweenDbContext dbContext, RequestContext requestContext, IInfolinkCache _BitweenCache, IBroadcast _broadcast) : ICommandHandler<int, CreateWorkGroupModel, object>
 {
+    private readonly RequestContext _requestContext = requestContext;
+
     public async Task<object> Handle(int key, CreateWorkGroupModel request)
     {
+        await _requestContext.EnsurePermission(dbContext, Model.Permissions.WorkGroups.Edit);
+
         var workGroup = await dbContext.Set<WorkGroup>().FindAsync(key);
         if (workGroup is null)
             throw new SWValidationException("WORK_GROUP_NOT_FOUND", $"Category with id {key} was not found");
+
+        // Update binds the same CreateWorkGroupModel type as Create, so Create's
+        // Validate (IValidator<CreateWorkGroupModel>) already runs for this request too —
+        // CqApiController resolves validators by the request's concrete type.
         workGroup.Name = request.Name;
+        workGroup.BusMessageName = request.BusMessageName;
         workGroup.Options = new WorkGroupOptions
         {
             RabbitMqOptions = new ConsumerSettings
diff --git a/SW.Bitween.Api/Resources/Xchanges/BulkRetry.cs b/SW.Bitween.Api/Resources/Xchanges/BulkRetry.cs
index 282549e5..2d2a356d 100644
--- a/SW.Bitween.Api/Resources/Xchanges/BulkRetry.cs
+++ b/SW.Bitween.Api/Resources/Xchanges/BulkRetry.cs
@@ -49,7 +49,7 @@ public async Task<object> Handle(XchangeBulkRetry request)
                 else
                 {
                     
-                    await _xchangeService.CreateXchange(xchange, xchangeFile, subscription.WorkGroup);
+                    await _xchangeService.CreateXchange(xchange, xchangeFile, subscription?.WorkGroup);
                 }
             }
 
diff --git a/SW.Bitween.Api/Resources/Xchanges/Create.cs b/SW.Bitween.Api/Resources/Xchanges/Create.cs
index e54a9121..55208ede 100644
--- a/SW.Bitween.Api/Resources/Xchanges/Create.cs
+++ b/SW.Bitween.Api/Resources/Xchanges/Create.cs
@@ -22,7 +22,7 @@ public Create(XchangeService xchangeService, BitweenDbContext dbc)
         public async Task<object> Handle(CreateXchange request)
         {
 
-            var xchangeFile = new XchangeFile(request.Data);
+            var xchangeFile = new XchangeFile(request.Data, "manual.json");
             if (request.Option == CreateXchangeOption.DocumentId)
             {
                 var document = await _dbc.Set<Document>().FirstOrDefaultAsync(d => d.Id == request.DocumentId);
diff --git a/SW.Bitween.Api/Resources/Xchanges/GetInternal.cs b/SW.Bitween.Api/Resources/Xchanges/GetInternal.cs
index edadf257..974dc7de 100644
--- a/SW.Bitween.Api/Resources/Xchanges/GetInternal.cs
+++ b/SW.Bitween.Api/Resources/Xchanges/GetInternal.cs
@@ -15,14 +15,18 @@ namespace SW.Bitween.Resources.Xchanges
     public class GetInternal : IGetHandler<int,object>
     {
         private readonly BitweenDbContext dbContext;
+        private readonly RequestContext requestContext;
 
-        public GetInternal(BitweenDbContext dbContext)
+        public GetInternal(BitweenDbContext dbContext, RequestContext requestContext)
         {
             this.dbContext = dbContext;
+            this.requestContext = requestContext;
         }
 
         async public Task<object> Handle(int key)
         {
+            await requestContext.EnsurePermission(dbContext, Model.Permissions.Exchanges.View);
+
             return await dbContext.Set<Xchange>().AsNoTracking().
                 Search("Id", key).
                 Select( xchange => new XchangeRow
diff --git a/SW.Bitween.Api/Resources/Xchanges/Search.cs b/SW.Bitween.Api/Resources/Xchanges/Search.cs
index aef8e649..e096981e 100644
--- a/SW.Bitween.Api/Resources/Xchanges/Search.cs
+++ b/SW.Bitween.Api/Resources/Xchanges/Search.cs
@@ -15,16 +15,23 @@ namespace SW.Bitween.Resources.Xchanges
     public class Search : ISearchyHandler
     {
         private readonly BitweenDbContext dbContext;
+        private readonly RequestContext requestContext;
         private readonly XchangeService xchangeService;
 
-        public Search(BitweenDbContext dbContext, XchangeService xchangeService)
+        public Search(BitweenDbContext dbContext, XchangeService xchangeService, RequestContext requestContext)
         {
             this.dbContext = dbContext;
+            this.requestContext = requestContext;
             this.xchangeService = xchangeService;
         }
 
         public async Task<object> Handle(SearchyRequest searchyRequest, bool lookup = false, string searchPhrase = null)
         {
+            // Lookup returns only id/name pairs, which pickers across the app rely on;
+            // the full list is the data, so that's what the view permission covers.
+            if (!lookup)
+                await requestContext.EnsurePermission(dbContext, Model.Permissions.Exchanges.View, Model.Permissions.Dashboard.View);
+
             searchyRequest.DatesToUtc();
             await using var dr = await dbContext.Database.BeginTransactionAsync(IsolationLevel.ReadUncommitted);
 
@@ -72,7 +79,12 @@ from delayedRetry in drGroup.DefaultIfEmpty()
                             OutputFileName = result.OutputName,
                             ResponseFileName = result.ResponseName,
                             CorrelationId = xchange.CorrelationId,
-                            PartnerId = subscriber.PartnerId,
+                            // xchange.PartnerId is the authoritative source (set at creation from the
+                            // gateway/bus-route partner, or the subscription's own PartnerId as a
+                            // fallback there too) but the column was added later with no backfill, so
+                            // pre-migration xchanges have it null even when their subscription carries
+                            // a direct PartnerId — fall back to that for those legacy rows.
+                            PartnerId = xchange.PartnerId ?? subscriber.PartnerId,
                             ScheduledRetryOn = delayedRetry != null ? delayedRetry.On : (DateTime?)null
                         };
 
diff --git a/SW.Bitween.Api/Resources/Xchanges/Update.cs b/SW.Bitween.Api/Resources/Xchanges/Update.cs
index bb395ec1..b8191cdc 100644
--- a/SW.Bitween.Api/Resources/Xchanges/Update.cs
+++ b/SW.Bitween.Api/Resources/Xchanges/Update.cs
@@ -85,7 +85,9 @@ public async Task<object> Handle(string documentIdOrName, dynamic request)
 
             var xchangeFile = new XchangeFile(request.ToString());
 
-            await _xchangeService.RunValidator(sub.ValidatorId, sub.ValidatorProperties.ToDictionary(), xchangeFile);
+            var globalAdapterValuesSets = await _cache.ListGlobalAdapterValuesSetsAsync();
+            var validatorProperties = sub.ValidatorProperties.ToDictionary().Fill(par.Partner, globalAdapterValuesSets);
+            await _xchangeService.RunValidator(sub.ValidatorId, validatorProperties, xchangeFile);
 
             var xchangeId =
                 await _xchangeService.SubmitSubscriptionXchange(sub.Id, xchangeFile, xchangeReferences.ToArray());
diff --git a/SW.Bitween.Api/SW.Bitween.Api.csproj b/SW.Bitween.Api/SW.Bitween.Api.csproj
index 5a6e99d7..cc59e78b 100644
--- a/SW.Bitween.Api/SW.Bitween.Api.csproj
+++ b/SW.Bitween.Api/SW.Bitween.Api.csproj
@@ -24,6 +24,9 @@
     <PackageReference Include="Microsoft.EntityFrameworkCore.Relational" Version="8.0.23" />
     <PackageReference Include="Microsoft.IdentityModel.Protocols" Version="8.3.1" />
     <PackageReference Include="Microsoft.IdentityModel.Protocols.OpenIdConnect" Version="8.3.1" />
+    <!-- Compile-time only, for validating a cron expression before it's stored. Quartz already
+         ships with the app through SimplyWorks.Scheduler.EfCore. -->
+    <PackageReference Include="Quartz" Version="3.15.0" />
     <PackageReference Include="SimplyWorks.Bus.RabbitMqExtensions" Version="8.1.11" />
     <PackageReference Include="SimplyWorks.EfCoreExtensions" Version="8.1.2" />
     <PackageReference Include="SimplyWorks.Scheduler.Sdk" Version="8.1.7" />
diff --git a/SW.Bitween.Api/Services/BitweenOptions.cs b/SW.Bitween.Api/Services/BitweenOptions.cs
index a5b05aa3..a6b8da35 100644
--- a/SW.Bitween.Api/Services/BitweenOptions.cs
+++ b/SW.Bitween.Api/Services/BitweenOptions.cs
@@ -9,15 +9,13 @@ public class BitweenOptions
         public BitweenOptions()
         {
             //   AESEncryptionKey = "BitweenS9SecretKey";
-            AdapterPath = "./adapters";
+            AdapterPath = "adapters";
             AdminCredentials = "admin:1234512345";
             DocumentPrefix = "temp30/Bitweendocs";
-            ClientIpHeaderName = "X-Real-IP";
             DatabaseType = "MySql";
             AdminDatabaseName = "defaultdb";
             ServerlessCommandTimeout = 300;
             ApiCallSubscriptionResponseAcceptedStatusCode = 202;
-            ReceiversDelayInSeconds = 63;
             StorageProvider = "S3";
             JwtExpiryMinutes = 60;
             BusDefaultQueuePrefetch = 12;
@@ -29,14 +27,17 @@ public BitweenOptions()
 
         public string DatabaseType { get; set; }
         public string AdminDatabaseName { get; set; }
+
+        /// <summary>
+        /// Cloud-storage key prefix the serverless runner downloads custom adapter packages from
+        /// (<c>{AdapterPath}/{adapterId}</c>). Passed to <c>ServerlessOptions.AdapterRemotePath</c>.
+        /// </summary>
         public string AdapterPath { get; set; }
         public string AdminCredentials { get; set; }
         public string DocumentPrefix { get; set; }
-        public string ClientIpHeaderName { get; set; }
         public int ServerlessCommandTimeout { get; set; }
         public bool AreXChangeFilesPrivate { get; set; } = false;
         public int? ApiCallSubscriptionResponseAcceptedStatusCode { get; set; }
-        public int? ReceiversDelayInSeconds { get; set; }
 
         public string StorageProvider { get; set; }
 
@@ -71,12 +72,22 @@ public BitweenOptions()
         /// </summary>
         public string AzureManagedIdentityClientId { get; set; }
 
+        /// <summary>
+        /// Passphrase used to encrypt secret settings before they're stored. Environment-only and
+        /// never itself a setting — it's what protects the table, so it can't live in it. Without
+        /// it, secret settings are neither imported nor editable and keep coming from configuration.
+        /// Rotating it makes anything already stored unreadable.
+        /// </summary>
+        public string SettingsEncryptionKey { get; set; }
+
         public string RabbitMqManagementUrl { get; set; }
         public string RabbitMqManagementUsername { get; set; }
         public string RabbitMqManagementPassword { get; set; }
 
         /// <summary>
-        /// License key for the Rebex POP3 library. When not set, the native Rebex POP3 receiver adapter is not registered.
+        /// License key for the Rebex library the native POP3 and FTP adapters are built on. Those
+        /// adapters are always registered, so a key stored in Settings takes effect without a
+        /// restart; while no key is set they're kept out of the adapter pickers instead.
         /// </summary>
         public string RebexLicenseKey { get; set; }
 
diff --git a/SW.Bitween.Api/Services/CacheRevokeService.cs b/SW.Bitween.Api/Services/CacheRevokeService.cs
index 86e3b958..b499372e 100644
--- a/SW.Bitween.Api/Services/CacheRevokeService.cs
+++ b/SW.Bitween.Api/Services/CacheRevokeService.cs
@@ -1,4 +1,5 @@
 using System.Threading.Tasks;
+using SW.Bitween.Services;
 using SW.PrimitiveTypes;
 
 namespace SW.Bitween;
@@ -6,15 +7,21 @@ namespace SW.Bitween;
 public class CacheRevokeService : IListen<RevokeCacheMessage>
 {
     private readonly IInfolinkCache _BitweenCache;
+    private readonly SettingsService _settings;
+    private readonly BitweenDbContext _dbContext;
 
-    public CacheRevokeService(IInfolinkCache BitweenCache)
+    public CacheRevokeService(IInfolinkCache BitweenCache, SettingsService settings, BitweenDbContext dbContext)
     {
         _BitweenCache = BitweenCache;
+        _settings = settings;
+        _dbContext = dbContext;
     }
 
-    public Task Process(RevokeCacheMessage message)
+    public async Task Process(RevokeCacheMessage message)
     {
         _BitweenCache.Revoke();
-        return Task.CompletedTask;
+        // Settings live on singletons rather than in the cache, so they need their own refresh:
+        // this is how an instance picks up a setting changed on a different instance.
+        await _settings.Reload(_dbContext);
     }
-}
\ No newline at end of file
+}
diff --git a/SW.Bitween.Api/Services/Caching/InMemoryInfolinkCache.cs b/SW.Bitween.Api/Services/Caching/InMemoryInfolinkCache.cs
index e7168dd6..61dd86e7 100644
--- a/SW.Bitween.Api/Services/Caching/InMemoryInfolinkCache.cs
+++ b/SW.Bitween.Api/Services/Caching/InMemoryInfolinkCache.cs
@@ -124,11 +124,23 @@ public async Task<Document> DocumentByNameAsync(string documentName)
             string.Equals(d.Name, documentName, StringComparison.CurrentCultureIgnoreCase));
     }
 
-    public Task BroadcastRevoke()
+    public async Task BroadcastRevoke()
     {
-        using var scope = _ssf.CreateScope();
-        var broadcast = scope.ServiceProvider.GetRequiredService<IBroadcast>();
-        return broadcast.Broadcast(new RevokeCacheMessage());
+        // This is a best-effort cache-refresh signal, not part of the write
+        // itself — a dozen command handlers across Subscriptions/WorkGroups/
+        // BusGateways/Documents call this right after SaveChangesAsync, and an
+        // unhandled failure here (e.g. the RabbitMQ connection being down)
+        // must not turn an already-successful write into a 500 response.
+        try
+        {
+            using var scope = _ssf.CreateScope();
+            var broadcast = scope.ServiceProvider.GetRequiredService<IBroadcast>();
+            await broadcast.Broadcast(new RevokeCacheMessage());
+        }
+        catch (Exception ex)
+        {
+            _logger.LogWarning(ex, "Failed to broadcast cache revoke; cached reads may stay stale until they expire.");
+        }
     }
 
     public async Task<WorkGroup[]> ListWorkGroupsAsync()
diff --git a/SW.Bitween.Api/Services/NativeAdapterDiscoveryService.cs b/SW.Bitween.Api/Services/NativeAdapterDiscoveryService.cs
index 3a070a16..4fa61860 100644
--- a/SW.Bitween.Api/Services/NativeAdapterDiscoveryService.cs
+++ b/SW.Bitween.Api/Services/NativeAdapterDiscoveryService.cs
@@ -13,7 +13,8 @@ public class NativeAdapterDiscoveryService(
         IEnumerable<INativeInfolinkMapper> nativeMappers,
         IEnumerable<INativeInfolinkReceiver> nativeReceivers,
         IEnumerable<INativeInfolinkValidator> nativeValidators,
-        IEnumerable<INativeAdapter> nativeAdapters)
+        IEnumerable<INativeAdapter> nativeAdapters,
+        BitweenOptions bitweenOptions)
     {
         public const string NativePrefix = "native";
         public Dictionary<string, StartupValue> GetStartupValues(string adapterId)
@@ -148,6 +149,12 @@ public List<string> GetNativeAdapters(string? type)
                     return new List<string>();
             }
 
+            // Rebex-backed adapters are always registered (the license key is a setting that can
+            // change at runtime), so they're filtered out here while no key is set rather than
+            // being offered in a picker where they could only fail.
+            if (string.IsNullOrWhiteSpace(bitweenOptions.RebexLicenseKey))
+                adapters = adapters.Where(a => a is not IRequiresRebexLicense).ToList();
+
             return adapters.Select(a => a.GetType().Name).ToList();
         }
         private string? GetDefaultValue(PropertyInfo property)
diff --git a/SW.Bitween.Api/Services/ReceivingJob.cs b/SW.Bitween.Api/Services/ReceivingJob.cs
index 927888fc..83a10462 100644
--- a/SW.Bitween.Api/Services/ReceivingJob.cs
+++ b/SW.Bitween.Api/Services/ReceivingJob.cs
@@ -34,7 +34,8 @@ public async Task Execute(ReceivingJobParams jobParams)
 
         try
         {
-            var startupParameters = rec.ReceiverProperties.ToDictionary();
+            var globals = await dbContext.Set<GlobalAdapterValuesSet>().ToArrayAsync();
+            var startupParameters = rec.ReceiverProperties.ToDictionary().Fill(null, globals);
             await RunReceiver(rec.ReceiverId, startupParameters, rec.Id);
             rec.SetSchedules();
             rec.SetHealth();
diff --git a/SW.Bitween.Api/Services/Settings/SettingsCatalog.cs b/SW.Bitween.Api/Services/Settings/SettingsCatalog.cs
new file mode 100644
index 00000000..2a4f94f5
--- /dev/null
+++ b/SW.Bitween.Api/Services/Settings/SettingsCatalog.cs
@@ -0,0 +1,374 @@
+using System;
+using System.Collections.Generic;
+using System.Globalization;
+using System.Linq;
+using System.Threading.Tasks;
+using Microsoft.Extensions.DependencyInjection;
+using Quartz;
+using SW.Scheduler;
+
+namespace SW.Bitween.Services;
+
+public enum SettingKind
+{
+    String,
+    Number,
+    Boolean,
+    Color
+}
+
+/// <summary>What the UI is allowed to do with a setting.</summary>
+public enum SettingAccess
+{
+    /// <summary>Stored in the <c>Settings</c> table and changeable from the UI.</summary>
+    Editable,
+
+    /// <summary>
+    /// Environment-owned: shown with its current value so an administrator can see what this
+    /// instance is running on, but not changeable here because it's read once at startup.
+    /// </summary>
+    ReadOnly,
+
+    /// <summary>
+    /// Environment-owned and private: only whether a value is set is reported, never the value —
+    /// for credentials and keys that would be pointless to leak into the browser.
+    /// </summary>
+    Presence
+}
+
+/// <summary>The two option singletons a setting can read from and write to.</summary>
+public sealed record SettingsTarget(BitweenOptions Bitween, ThemeOptions Theme);
+
+/// <summary>
+/// Everything known about one setting except its value: how to show it, and how to read and
+/// write it on the live options singletons.
+/// </summary>
+public sealed record SettingDefinition(
+    string Key,
+    string Section,
+    string Label,
+    string Description,
+    SettingKind Kind,
+    bool Secret,
+    Func<SettingsTarget, string> Read,
+    Action<SettingsTarget, string> Write)
+{
+    /// <summary>Editable unless a definition says otherwise — see <see cref="SettingAccess"/>.</summary>
+    public SettingAccess Access { get; init; } = SettingAccess.Editable;
+
+    /// <summary>
+    /// Extra work needed to make a new value take effect, where assigning the property isn't
+    /// enough — rescheduling a job, re-declaring queues. Runs on the instance that saved it,
+    /// after the value has been applied.
+    /// </summary>
+    public Func<IServiceProvider, Task> OnChange { get; init; }
+
+    /// <summary>Only editable settings get a row; the rest are read straight off the options.</summary>
+    public bool Stored => Access == SettingAccess.Editable;
+}
+
+/// <summary>
+/// Every setting the settings page shows, and — for the editable ones — the only keys the
+/// <c>Settings</c> table ever holds.
+/// <para>
+/// The membership rule is about <see cref="SettingAccess"/>, not about being listed here. A
+/// setting is <b>editable</b> only if every consumer reads it from the options singleton per call,
+/// so a change takes effect immediately. Anything captured once during
+/// <c>Startup.ConfigureServices</c> — the bus, CORS, storage, JWT signing, the DB provider — is
+/// environment-owned and appears as <see cref="SettingAccess.ReadOnly"/> (its value shown) or
+/// <see cref="SettingAccess.Presence"/> (only whether it's set), so an administrator can see what
+/// the instance is running on without being offered an edit that couldn't work.
+/// </para>
+/// <para>
+/// Read-only and presence settings never get a row: they're read straight off the options object,
+/// which configuration bound at startup.
+/// </para>
+/// </summary>
+public static class SettingsCatalog
+{
+    public static readonly IReadOnlyList<SettingDefinition> All =
+    [
+        // ——— Documents & storage ———
+        new("Bitween.AreXChangeFilesPrivate", "Documents & storage",
+            "Keep exchange files private",
+            "Turn this on if you want generated exchange files kept private and served through short-lived signed links instead of public URLs.",
+            SettingKind.Boolean, false,
+            t => Str(t.Bitween.AreXChangeFilesPrivate),
+            (t, v) => t.Bitween.AreXChangeFilesPrivate = Bool(v)),
+
+        View("Bitween.DocumentPrefix", "Documents & storage", "Document prefix",
+            "The cloud-storage key prefix every exchange document is written under. Fixed per environment — changing it would leave everything already stored unreachable.",
+            SettingKind.String, t => t.Bitween.DocumentPrefix),
+
+        // ——— API behavior ———
+        new("Bitween.ApiCallSubscriptionResponseAcceptedStatusCode", "API behavior",
+            "Accepted response status code",
+            "Change this if a partner's API expects a different HTTP status code (instead of 202 Accepted) when their request has been queued for async processing.",
+            SettingKind.Number, false,
+            t => t.Bitween.ApiCallSubscriptionResponseAcceptedStatusCode?.ToString(CultureInfo.InvariantCulture),
+            (t, v) => t.Bitween.ApiCallSubscriptionResponseAcceptedStatusCode = NullableInt(v)),
+
+        new("Bitween.JwtExpiryMinutes", "API behavior",
+            "Sign-in session length (minutes)",
+            "Shorten this for tighter session security, or lengthen it if teammates are being signed out more often than you'd like. Applies to sessions started after the change.",
+            SettingKind.Number, false,
+            t => t.Bitween.JwtExpiryMinutes.ToString(CultureInfo.InvariantCulture),
+            (t, v) => t.Bitween.JwtExpiryMinutes = Int(v)),
+
+        View("Bitween.CorsOrigins", "API behavior", "Allowed browser origins",
+            "The origins allowed to call this API with cookies attached. Read once when the CORS policy is built at startup.",
+            SettingKind.String, t => Join(t.Bitween.CorsOrigins)),
+
+        // ——— Single sign-on (Microsoft) ———
+        // Not secrets: these are public client identifiers, and the [Unprotect] Config endpoint
+        // already serves them to anonymous visitors so the login page can offer the MS button.
+        new("Bitween.MsalClientId", "Single sign-on (Microsoft)",
+            "Azure AD client ID",
+            "Add this — together with the tenant ID and redirect URI below — if you want to let teammates sign in with a Microsoft account. All three are required for Microsoft sign-in to turn on.",
+            SettingKind.String, false,
+            t => t.Bitween.MsalClientId,
+            (t, v) => t.Bitween.MsalClientId = v),
+
+        new("Bitween.MsalTenantId", "Single sign-on (Microsoft)",
+            "Azure AD tenant ID",
+            "The Azure AD tenant Microsoft sign-in is restricted to. Required alongside the client ID and redirect URI.",
+            SettingKind.String, false,
+            t => t.Bitween.MsalTenantId,
+            (t, v) => t.Bitween.MsalTenantId = v),
+
+        new("Bitween.MsalRedirectUri", "Single sign-on (Microsoft)",
+            "Azure AD redirect URI",
+            "The URL Azure AD sends users back to after signing in — must match the redirect URI registered on the Azure AD app. Required alongside the client ID and tenant ID.",
+            SettingKind.String, false,
+            t => t.Bitween.MsalRedirectUri,
+            (t, v) => t.Bitween.MsalRedirectUri = v),
+
+        new("Bitween.DisableEmailPasswordLogin", "Single sign-on (Microsoft)",
+            "Microsoft sign-in only",
+            "Turn this on to stop anyone signing in with an email and password — the sign-in page then offers Microsoft alone, and new teammates are added without a password. Only do this once Microsoft sign-in above is working, or nobody will be able to get in.",
+            SettingKind.Boolean, false,
+            t => Str(t.Bitween.DisableEmailPasswordLogin),
+            (t, v) => t.Bitween.DisableEmailPasswordLogin = Bool(v)),
+
+        // ——— Adapters ———
+        new("Bitween.RebexLicenseKey", "Adapters",
+            "Rebex license key",
+            "Add this if you want the native POP3 and FTP adapters, which are built on the Rebex library — without a key they aren't offered when picking a receiver or handler.",
+            SettingKind.String, true,
+            t => t.Bitween.RebexLicenseKey,
+            (t, v) => t.Bitween.RebexLicenseKey = v),
+
+        View("Bitween.AdapterPath", "Adapters", "Custom adapter path",
+            "The cloud-storage key prefix custom adapter packages are downloaded from. Handed to the serverless runner when it's configured at startup.",
+            SettingKind.String, t => t.Bitween.AdapterPath),
+
+        View("Bitween.ServerlessCommandTimeout", "Adapters", "Custom adapter timeout (seconds)",
+            "How long a custom adapter may run before the serverless runner gives up on it.",
+            SettingKind.Number, t => t.Bitween.ServerlessCommandTimeout.ToString(CultureInfo.InvariantCulture)),
+
+        // ——— Reliability & jobs ———
+        new("Bitween.RetryJobCron", "Reliability & jobs",
+            "Retry poll schedule",
+            "How often Bitween looks for exchanges whose scheduled retry has come due, as a cron expression: second minute hour day-of-month month day-of-week. Saving re-schedules the job straight away.",
+            SettingKind.String, false,
+            t => t.Bitween.RetryJobCron,
+            (t, v) => t.Bitween.RetryJobCron = Cron(v))
+        {
+            // Assigning the property isn't enough here: the trigger already lives in the Quartz
+            // store, so it has to be replaced. Schedule() reads the value we just applied.
+            OnChange = sp => sp.GetRequiredService<IScheduleRepository>()
+                .Schedule<RetryJob>(sp.GetRequiredService<BitweenOptions>().RetryJobCron)
+        },
+
+        // ——— Messaging ———
+        // All environment-owned: the bus connection and its queue topology are built once, during
+        // startup, so nothing here could take effect on a running instance.
+        View("Bitween.QueuePrefix", "Messaging", "Queue name prefix",
+            "Prefixed to every queue this instance declares, which is what keeps two Bitween deployments on one RabbitMQ from consuming each other's messages.",
+            SettingKind.String, t => t.Bitween.QueuePrefix),
+
+        View("Bitween.BusDefaultQueuePrefetch", "Messaging", "Default queue prefetch",
+            "How many messages a consumer may hold unacknowledged by default. A work group can override it for its own queue.",
+            SettingKind.Number, t => t.Bitween.BusDefaultQueuePrefetch?.ToString(CultureInfo.InvariantCulture)),
+
+        View("Bitween.ConsumeLegacyEventMessages", "Messaging", "Consume legacy event messages",
+            "Whether this instance also drains the five queues named after exchange events, which an older Bitween published to before work groups existed. Nothing publishes to them today, so this is only for finishing off messages left behind by an upgrade.",
+            SettingKind.Boolean, t => Str(t.Bitween.ConsumeLegacyEventMessages)),
+
+        Presence("Bitween.RabbitMqManagementUrl", "Messaging", "RabbitMQ management URL",
+            "The management API queue health is read from. All three management values are needed before queue depths can be shown.",
+            t => t.Bitween.RabbitMqManagementUrl),
+
+        Presence("Bitween.RabbitMqManagementUsername", "Messaging", "RabbitMQ management username",
+            "The account queue health reads with. Required alongside the URL and password.",
+            t => t.Bitween.RabbitMqManagementUsername),
+
+        Presence("Bitween.RabbitMqManagementPassword", "Messaging", "RabbitMQ management password",
+            "The password for the management account. Required alongside the URL and username.",
+            t => t.Bitween.RabbitMqManagementPassword),
+
+        // ——— Database ———
+        View("Bitween.UseAzureManagedIdentity", "Database", "Use Azure managed identity",
+            "Whether database connections authenticate with an Azure managed identity instead of a password in the connection string.",
+            SettingKind.Boolean, t => Str(t.Bitween.UseAzureManagedIdentity)),
+
+        Presence("Bitween.AzureManagedIdentityClientId", "Database", "Managed identity client ID",
+            "Set only when a user-assigned identity is used; left unset, the system-assigned identity is.",
+            t => t.Bitween.AzureManagedIdentityClientId),
+
+        // ——— Security ———
+        Presence("Bitween.SettingsEncryptionKey", "Security", "Settings encryption key",
+            "Encrypts secret settings before they're stored. Without it, a secret can't be saved here at all and stays environment-only.",
+            t => t.Bitween.SettingsEncryptionKey),
+
+        // ——— Brand & theme ———
+        new("Theme.PrimaryColor", "Brand & theme",
+            "Primary color",
+            "Re-brands the whole app's accent color — buttons, links, active nav, focus rings — instantly, without waiting on a deploy.",
+            SettingKind.Color, false,
+            t => t.Theme.PrimaryColor,
+            (t, v) => t.Theme.PrimaryColor = v),
+
+        new("Theme.CompanyName", "Brand & theme",
+            "Company name",
+            "Shown in the footer and used in a few page titles.",
+            SettingKind.String, false,
+            t => t.Theme.CompanyName,
+            (t, v) => t.Theme.CompanyName = v),
+
+        new("Theme.TabTitle", "Brand & theme",
+            "Browser tab title",
+            "What shows in the browser tab.",
+            SettingKind.String, false,
+            t => t.Theme.TabTitle,
+            (t, v) => t.Theme.TabTitle = v),
+
+        new("Theme.TabIcon", "Brand & theme",
+            "Favicon URL",
+            "The icon shown in the browser tab. Paste a URL to an .ico, .svg or .png.",
+            SettingKind.String, false,
+            t => t.Theme.TabIcon,
+            (t, v) => t.Theme.TabIcon = v),
+
+        new("Theme.LoginLogo", "Brand & theme",
+            "Sign-in page logo",
+            "The logo shown above the sign-in form.",
+            SettingKind.String, false,
+            t => t.Theme.LoginLogo,
+            (t, v) => t.Theme.LoginLogo = v),
+
+        new("Theme.BitweenLogo", "Brand & theme",
+            "Sidebar logo",
+            "The full logo shown at the top of the sidebar.",
+            SettingKind.String, false,
+            t => t.Theme.BitweenLogo,
+            (t, v) => t.Theme.BitweenLogo = v),
+
+        // Theme.BitweenIcon is deliberately absent: it configured the icon for a
+        // collapsed, icon-only sidebar, and this UI has no such mode. Leaving it
+        // editable meant a setting that silently did nothing. The ThemeOptions
+        // property stays so existing appsettings keep binding.
+
+        new("Theme.BitweenHeaderIcon", "Brand & theme",
+            "Mobile header icon",
+            "Shown instead of the sidebar logo in the narrow top bar on phones. Leave it as-is to reuse the sidebar logo.",
+            SettingKind.String, false,
+            t => t.Theme.BitweenHeaderIcon,
+            (t, v) => t.Theme.BitweenHeaderIcon = v),
+
+        new("Theme.BitweenText", "Brand & theme",
+            "Sign-in page blurb",
+            "The marketing description shown beside the sign-in form.",
+            SettingKind.String, false,
+            t => t.Theme.BitweenText,
+            (t, v) => t.Theme.BitweenText = v),
+
+        new("Theme.ShowFooter", "Brand & theme",
+            "Show the footer",
+            "Turn this off to hide the footer everywhere — the copyright line and the website / LinkedIn / GitHub links below every page.",
+            SettingKind.Boolean, false,
+            t => Str(t.Theme.ShowFooter),
+            (t, v) => t.Theme.ShowFooter = Bool(v)),
+
+        new("Theme.LinkedinLink", "Brand & theme",
+            "LinkedIn link",
+            "Add this if you want a LinkedIn link in the footer — leave blank to hide it.",
+            SettingKind.String, false,
+            t => t.Theme.LinkedinLink,
+            (t, v) => t.Theme.LinkedinLink = v),
+
+        new("Theme.GithubLink", "Brand & theme",
+            "GitHub link",
+            "Add this if you want a GitHub link in the footer — leave blank to hide it.",
+            SettingKind.String, false,
+            t => t.Theme.GithubLink,
+            (t, v) => t.Theme.GithubLink = v),
+
+        new("Theme.WebsiteLink", "Brand & theme",
+            "Website link",
+            "Add this if you want a company website link in the footer — leave blank to hide it.",
+            SettingKind.String, false,
+            t => t.Theme.WebsiteLink,
+            (t, v) => t.Theme.WebsiteLink = v),
+
+        new("Theme.AllRightsReserved", "Brand & theme",
+            "Copyright notice",
+            "The copyright notice text shown in the footer.",
+            SettingKind.String, false,
+            t => t.Theme.AllRightsReserved,
+            (t, v) => t.Theme.AllRightsReserved = v),
+
+        new("Theme.CopyRightsIcon", "Brand & theme",
+            "Copyright symbol",
+            "The symbol shown before the copyright notice.",
+            SettingKind.String, false,
+            t => t.Theme.CopyRightsIcon,
+            (t, v) => t.Theme.CopyRightsIcon = v)
+    ];
+
+    private static readonly Dictionary<string, SettingDefinition> ByKey =
+        All.ToDictionary(d => d.Key, StringComparer.OrdinalIgnoreCase);
+
+    public static SettingDefinition Find(string key) =>
+        key is not null && ByKey.TryGetValue(key, out var definition) ? definition : null;
+
+    /// <summary>
+    /// An environment value the UI shows but can't change. No <c>Write</c>: there's nowhere to
+    /// write it to that would matter, since whoever reads it did so at startup.
+    /// </summary>
+    private static SettingDefinition View(string key, string section, string label, string description,
+        SettingKind kind, Func<SettingsTarget, string> read) =>
+        new(key, section, label, description, kind, false, read, null) { Access = SettingAccess.ReadOnly };
+
+    /// <summary>An environment value reported only as set or not set, never by its content.</summary>
+    private static SettingDefinition Presence(string key, string section, string label, string description,
+        Func<SettingsTarget, string> read) =>
+        new(key, section, label, description, SettingKind.String, false, read, null)
+            { Access = SettingAccess.Presence };
+
+    private static string Str(bool value) => value ? "true" : "false";
+
+    private static string Join(string[] values) =>
+        values is null ? string.Empty : string.Join(", ", values);
+
+    /// <summary>
+    /// Rejected here rather than by the scheduler, because a bad expression that reached the table
+    /// would throw on the next boot — inside the background service that seeds every subscription's
+    /// schedule, taking all of them down with it.
+    /// </summary>
+    private static string Cron(string value) =>
+        CronExpression.IsValidExpression(value)
+            ? value
+            : throw new FormatException($"'{value}' is not a valid cron expression.");
+
+    /// <summary>Anything but an explicit "true" is off — matches how the UI posts checkboxes.</summary>
+    private static bool Bool(string value) => string.Equals(value, "true", StringComparison.OrdinalIgnoreCase);
+
+    private static int Int(string value) =>
+        int.TryParse(value, NumberStyles.Integer, CultureInfo.InvariantCulture, out var parsed)
+            ? parsed
+            : throw new FormatException($"'{value}' is not a whole number.");
+
+    private static int? NullableInt(string value) =>
+        string.IsNullOrWhiteSpace(value) ? null : Int(value);
+}
diff --git a/SW.Bitween.Api/Services/Settings/SettingsHostExtensions.cs b/SW.Bitween.Api/Services/Settings/SettingsHostExtensions.cs
new file mode 100644
index 00000000..f486b340
--- /dev/null
+++ b/SW.Bitween.Api/Services/Settings/SettingsHostExtensions.cs
@@ -0,0 +1,36 @@
+using System;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Hosting;
+using Microsoft.Extensions.Logging;
+
+namespace SW.Bitween.Services;
+
+public static class SettingsHostExtensions
+{
+    /// <summary>
+    /// Hands configuration over to the Settings table and applies what's stored, before the app
+    /// starts serving. Any key without a row yet is imported from configuration once; after that
+    /// the table is the only source. Runs after <c>MigrateDatabase</c> so the table is guaranteed
+    /// to exist; an unreachable database is logged and the app boots on its configured values
+    /// rather than failing to start.
+    /// </summary>
+    public static IHost ApplyStoredSettings(this IHost host)
+    {
+        using var scope = host.Services.CreateScope();
+        var settings = scope.ServiceProvider.GetRequiredService<SettingsService>();
+
+        try
+        {
+            var dbContext = scope.ServiceProvider.GetRequiredService<BitweenDbContext>();
+            settings.ImportMissing(dbContext).GetAwaiter().GetResult();
+            settings.Reload(dbContext).GetAwaiter().GetResult();
+        }
+        catch (Exception ex)
+        {
+            scope.ServiceProvider.GetRequiredService<ILogger<SettingsService>>()
+                .LogError(ex, "Could not load stored settings; starting on configured values only.");
+        }
+
+        return host;
+    }
+}
diff --git a/SW.Bitween.Api/Services/Settings/SettingsProtector.cs b/SW.Bitween.Api/Services/Settings/SettingsProtector.cs
new file mode 100644
index 00000000..0e5994fb
--- /dev/null
+++ b/SW.Bitween.Api/Services/Settings/SettingsProtector.cs
@@ -0,0 +1,87 @@
+using System;
+using System.Security.Cryptography;
+using System.Text;
+
+namespace SW.Bitween.Services;
+
+/// <summary>
+/// Encrypts secret settings before they're stored, so a database dump or backup never carries a
+/// license key in the clear. AES-GCM with a fresh salt and nonce per value: encrypting the same
+/// key twice produces different ciphertext, and tampering fails the authentication tag rather
+/// than decrypting to garbage.
+/// <para>
+/// The passphrase comes from <see cref="BitweenOptions.SettingsEncryptionKey"/> — configuration
+/// only, never the Settings table. When it isn't set, <see cref="IsConfigured"/> is false and
+/// secret settings stay out of the table entirely.
+/// </para>
+/// </summary>
+public class SettingsProtector
+{
+    private const string Prefix = "enc.v1:";
+    private const int SaltBytes = 16;
+    private const int NonceBytes = 12;
+    private const int TagBytes = 16;
+    private const int KeyBytes = 32;
+    private const int Iterations = 100_000;
+
+    private readonly string _passphrase;
+
+    public SettingsProtector(BitweenOptions options) => _passphrase = options.SettingsEncryptionKey;
+
+    /// <summary>Whether secrets can be stored at all. False = no passphrase configured.</summary>
+    public bool IsConfigured => !string.IsNullOrWhiteSpace(_passphrase);
+
+    public string Protect(string plaintext)
+    {
+        if (!IsConfigured)
+            throw new InvalidOperationException(
+                $"{BitweenOptions.ConfigurationSection}:{nameof(BitweenOptions.SettingsEncryptionKey)} is not configured.");
+
+        if (string.IsNullOrEmpty(plaintext)) return string.Empty;
+
+        var salt = RandomNumberGenerator.GetBytes(SaltBytes);
+        var nonce = RandomNumberGenerator.GetBytes(NonceBytes);
+        var cipher = new byte[Encoding.UTF8.GetByteCount(plaintext)];
+        var tag = new byte[TagBytes];
+
+        using var aes = new AesGcm(DeriveKey(salt), TagBytes);
+        aes.Encrypt(nonce, Encoding.UTF8.GetBytes(plaintext), cipher, tag);
+
+        var payload = new byte[SaltBytes + NonceBytes + TagBytes + cipher.Length];
+        salt.CopyTo(payload, 0);
+        nonce.CopyTo(payload, SaltBytes);
+        tag.CopyTo(payload, SaltBytes + NonceBytes);
+        cipher.CopyTo(payload, SaltBytes + NonceBytes + TagBytes);
+
+        return Prefix + Convert.ToBase64String(payload);
+    }
+
+    /// <summary>
+    /// Reverses <see cref="Protect"/>. A value without the marker is returned untouched — that's
+    /// how a hand-written row, or one stored before a passphrase existed, still reads back.
+    /// Throws when the value was written under a different passphrase or has been altered.
+    /// </summary>
+    public string Unprotect(string stored)
+    {
+        if (string.IsNullOrEmpty(stored) || !stored.StartsWith(Prefix, StringComparison.Ordinal))
+            return stored;
+
+        var payload = Convert.FromBase64String(stored[Prefix.Length..]);
+        if (payload.Length < SaltBytes + NonceBytes + TagBytes)
+            throw new CryptographicException("Encrypted setting value is truncated.");
+
+        var salt = payload.AsSpan(0, SaltBytes);
+        var nonce = payload.AsSpan(SaltBytes, NonceBytes);
+        var tag = payload.AsSpan(SaltBytes + NonceBytes, TagBytes);
+        var cipher = payload.AsSpan(SaltBytes + NonceBytes + TagBytes);
+        var plain = new byte[cipher.Length];
+
+        using var aes = new AesGcm(DeriveKey(salt.ToArray()), TagBytes);
+        aes.Decrypt(nonce, cipher, tag, plain);
+
+        return Encoding.UTF8.GetString(plain);
+    }
+
+    private byte[] DeriveKey(byte[] salt) =>
+        Rfc2898DeriveBytes.Pbkdf2(_passphrase, salt, Iterations, HashAlgorithmName.SHA256, KeyBytes);
+}
diff --git a/SW.Bitween.Api/Services/Settings/SettingsService.cs b/SW.Bitween.Api/Services/Settings/SettingsService.cs
new file mode 100644
index 00000000..d6b984be
--- /dev/null
+++ b/SW.Bitween.Api/Services/Settings/SettingsService.cs
@@ -0,0 +1,185 @@
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using System.Threading.Tasks;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Logging;
+using SW.Bitween.Domain;
+
+namespace SW.Bitween.Services;
+
+/// <summary>
+/// Keeps the <see cref="BitweenOptions"/> and <see cref="ThemeOptions"/> singletons in sync with
+/// the <c>Settings</c> table, which is the single source of truth for every editable setting.
+/// <para>
+/// Configuration (env / appsettings) is read <b>once per setting</b>: the first boot after a key
+/// exists copies what configuration says into a row (<see cref="ImportMissing"/>), and from then
+/// on configuration is ignored for that key. "Default" therefore means the product default —
+/// the initializer on the options class — which is what a reset returns a setting to.
+/// </para>
+/// <para>
+/// Applying a value is just assigning the property: both option objects are singletons that every
+/// consumer reads per call, so no consumer needs to know settings can change.
+/// </para>
+/// </summary>
+public class SettingsService
+{
+    /// <summary>Pristine options — never mutated, only read, to answer "what ships in the box?".</summary>
+    private static readonly SettingsTarget CodeDefaults = new(new BitweenOptions(), new ThemeOptions());
+
+    private readonly SettingsTarget _target;
+    private readonly SettingsProtector _protector;
+    private readonly ILogger<SettingsService> _logger;
+
+    /// <summary>
+    /// What configuration bound at startup. This is the import source, <b>not</b> the default —
+    /// captured before any stored value is applied, and used only for keys with no row yet.
+    /// </summary>
+    private readonly Dictionary<string, string> _configured;
+
+    public SettingsService(BitweenOptions bitweenOptions, ThemeOptions themeOptions,
+        SettingsProtector protector, ILogger<SettingsService> logger)
+    {
+        _target = new SettingsTarget(bitweenOptions, themeOptions);
+        _protector = protector;
+        _logger = logger;
+        _configured = SettingsCatalog.All.ToDictionary(d => d.Key, d => d.Read(_target) ?? string.Empty);
+    }
+
+    /// <summary>The product default: what this setting is without anyone having chosen anything.</summary>
+    public static string DefaultOf(SettingDefinition definition) => definition.Read(CodeDefaults) ?? string.Empty;
+
+    /// <summary>
+    /// Product defaults for one key prefix, keyed the way the options object serializes
+    /// (<c>Theme.LoginLogo</c> → <c>loginLogo</c>). Lets an unauthenticated client tell a brand
+    /// value someone chose from one nobody has touched.
+    /// </summary>
+    public static Dictionary<string, string> DefaultsUnder(string prefix) => SettingsCatalog.All
+        .Where(d => d.Key.StartsWith(prefix, StringComparison.Ordinal))
+        .ToDictionary(d => Camelize(d.Key[prefix.Length..]), DefaultOf);
+
+    /// <summary>
+    /// What this setting is right now on the live options singletons. For an environment-owned
+    /// setting that's the whole story — it's what configuration bound at startup.
+    /// </summary>
+    public string LiveValue(SettingDefinition definition) => definition.Read(_target) ?? string.Empty;
+
+    /// <summary>A secret can only be stored if there's a passphrase to protect it with.</summary>
+    public bool CanStore(SettingDefinition definition) =>
+        definition.Stored && (!definition.Secret || _protector.IsConfigured);
+
+    /// <summary>Ciphertext for a secret, the value itself for everything else.</summary>
+    public string ToStored(SettingDefinition definition, string value) =>
+        definition.Secret ? _protector.Protect(value) : value;
+
+    /// <summary>
+    /// Copies configuration into a row for any key that doesn't have one yet — the one-time
+    /// hand-off that lets an existing deployment keep the values it was configured with. Runs at
+    /// startup only.
+    /// </summary>
+    public async Task ImportMissing(BitweenDbContext dbContext)
+    {
+        var stored = await dbContext.Set<Setting>().AsNoTracking().Select(s => s.Id).ToListAsync();
+        var have = new HashSet<string>(stored, StringComparer.OrdinalIgnoreCase);
+
+        var imported = new List<string>();
+        foreach (var definition in SettingsCatalog.All)
+        {
+            // Read-only and presence settings are environment-owned; they never get a row.
+            if (!definition.Stored) continue;
+            if (have.Contains(definition.Key)) continue;
+            // A secret with nowhere safe to go stays in configuration until a passphrase exists.
+            if (!CanStore(definition)) continue;
+
+            var configured = _configured.GetValueOrDefault(definition.Key) ?? string.Empty;
+            dbContext.Add(new Setting { Id = definition.Key, Value = ToStored(definition, configured) });
+            imported.Add(definition.Key);
+        }
+
+        if (imported.Count == 0) return;
+
+        try
+        {
+            await dbContext.SaveChangesAsync();
+            _logger.LogInformation("Imported {Count} setting(s) from configuration: {Keys}",
+                imported.Count, string.Join(", ", imported));
+        }
+        catch (DbUpdateException ex)
+        {
+            // Two instances booting together both try to import; whoever loses just reads the
+            // other's rows in Reload. Nothing to repair.
+            _logger.LogWarning(ex, "Setting import collided with another instance; using the stored rows.");
+            dbContext.ChangeTracker.Clear();
+        }
+    }
+
+    /// <summary>
+    /// Re-reads every stored setting and applies it. Called once before the app starts serving,
+    /// and again on each cache-revoke broadcast so an instance picks up a change made on another.
+    /// </summary>
+    public async Task Reload(BitweenDbContext dbContext)
+    {
+        var rows = await dbContext.Set<Setting>().AsNoTracking()
+            .ToDictionaryAsync(s => s.Id, s => s.Value, StringComparer.OrdinalIgnoreCase);
+
+        foreach (var definition in SettingsCatalog.All)
+        {
+            // Environment-owned settings stay that way even if a row is hand-inserted for one.
+            if (!definition.Stored) continue;
+            // No row means nobody could store this key yet (a secret with no passphrase), so
+            // whatever configuration bound at startup stands.
+            if (!rows.TryGetValue(definition.Key, out var stored)) continue;
+
+            try
+            {
+                Assign(definition, definition.Secret ? _protector.Unprotect(stored) : stored);
+            }
+            catch (Exception ex)
+            {
+                _logger.LogError(ex,
+                    "Stored value for setting {Key} could not be read — it was likely written under a " +
+                    "different {Option}. Leaving the running value untouched.",
+                    definition.Key, nameof(BitweenOptions.SettingsEncryptionKey));
+            }
+        }
+    }
+
+    /// <summary>Applies one value immediately, so the request that saved it sees the effect.</summary>
+    public void Apply(SettingDefinition definition, string value) => Assign(definition, value);
+
+    /// <summary>
+    /// Runs the real write against throwaway option objects, so the endpoint can reject "abc"
+    /// for a number before it reaches the database — without the live values ever seeing it.
+    /// </summary>
+    public static void Validate(SettingDefinition definition, string value) =>
+        definition.Write(new SettingsTarget(new BitweenOptions(), new ThemeOptions()), value);
+
+    /// <summary>
+    /// A bad stored value must never stop the app from booting: log it and leave the key at its
+    /// product default.
+    /// </summary>
+    private void Assign(SettingDefinition definition, string value)
+    {
+        try
+        {
+            definition.Write(_target, value);
+        }
+        catch (Exception ex)
+        {
+            _logger.LogWarning(ex,
+                "Stored value for setting {Key} could not be applied; falling back to the product default.",
+                definition.Key);
+            try
+            {
+                definition.Write(_target, DefaultOf(definition));
+            }
+            catch (Exception fallbackEx)
+            {
+                _logger.LogError(fallbackEx, "Product default for setting {Key} is itself invalid.", definition.Key);
+            }
+        }
+    }
+
+    private static string Camelize(string name) =>
+        name.Length == 0 ? name : char.ToLowerInvariant(name[0]) + name[1..];
+}
diff --git a/SW.Bitween.Api/Services/ThemeOptions.cs b/SW.Bitween.Api/Services/ThemeOptions.cs
index 84f3699d..ea2300f7 100644
--- a/SW.Bitween.Api/Services/ThemeOptions.cs
+++ b/SW.Bitween.Api/Services/ThemeOptions.cs
@@ -1,21 +1,37 @@
 namespace SW.Bitween.Services
 {
+    /// <summary>
+    /// Branding. Every value here is an editable setting, so these initializers are the product
+    /// defaults — what "reset to default" returns a setting to. A deployment can still seed
+    /// different values through configuration, but only once: the first boot imports them into the
+    /// Settings table, and from then on the table is the only source (see <c>SettingsService</c>).
+    /// </summary>
     public class ThemeOptions
     {
         public const string ConfigurationSection = "Theme";
 
-        public string LoginLogo { get; set; }
-        public string BitweenLogo { get; set; }
-        public string BitweenText { get; set; }
-        public string LinkedinLink { get; set; }
-        public string GithubLink { get; set; }
-        public string BitweenIcon { get; set; }
-        public string BitweenHeaderIcon { get; set; }
-        public string WebsiteLink { get; set; }
-        public string CompanyName { get; set; }
-        public string AllRightsReserved { get; set; }
-        public string CopyRightsIcon { get; set; }
-        public string TabTitle { get; set; }
-        public string TabIcon { get; set; }
+        public string LoginLogo { get; set; } = "/brand/BitweenFull.svg";
+        public string BitweenLogo { get; set; } = "/brand/BitweenFull.svg";
+
+        public string BitweenText { get; set; } =
+            "is all-in-one solution to solving integration with third parties, automating workflows " +
+            "with exchanges coming from all forms of requests, ranging from internal messages to " +
+            "files dumped on a server.";
+
+        public string LinkedinLink { get; set; } = "https://www.linkedin.com/company/simplify9";
+        public string GithubLink { get; set; } = "https://github.com/simplify9";
+        public string BitweenIcon { get; set; } = "/brand/BitweenIcon.png";
+        public string BitweenHeaderIcon { get; set; } = "/brand/BitweenIcon.svg";
+        public string WebsiteLink { get; set; } = "https://www.simplify9.com/";
+        public string CompanyName { get; set; } = "Simplify9";
+        public string AllRightsReserved { get; set; } = "All Rights Reserved.";
+        public string CopyRightsIcon { get; set; } = "©";
+        public string TabTitle { get; set; } = "Bitween";
+        public string TabIcon { get; set; } = "/favicon.svg";
+
+        /// <summary>Accent color the UI derives its whole brand ramp from. Hex, e.g. <c>#e3311d</c>.</summary>
+        public string PrimaryColor { get; set; } = "#e3311d";
+
+        public bool ShowFooter { get; set; } = true;
     }
-}
\ No newline at end of file
+}
diff --git a/SW.Bitween.Api/Services/XchangeService.cs b/SW.Bitween.Api/Services/XchangeService.cs
index 31f6bb7f..78c3f2eb 100644
--- a/SW.Bitween.Api/Services/XchangeService.cs
+++ b/SW.Bitween.Api/Services/XchangeService.cs
@@ -95,7 +95,10 @@ public async Task CreateXchange(Xchange xchange, XchangeFile file, WorkGroup wor
     public async Task CreateXchange(Subscription subscription, Xchange xchange, XchangeFile file,
         string[] references = null, Dictionary<string, int> groupAttemptCounts = null)
     {
-        var newXchange = new Xchange(subscription, xchange, file, groupAttemptCounts);
+        var partnerId = xchange.PartnerId ?? subscription.PartnerId;
+        var partner = partnerId.HasValue ? await _dbContext.FindAsync<Partner>(partnerId.Value) : null;
+        var globalAdapterValuesSets = await _BitweenCache.ListGlobalAdapterValuesSetsAsync();
+        var newXchange = new Xchange(subscription, xchange, file, partner, globalAdapterValuesSets, groupAttemptCounts);
         await AddFile(newXchange.Id, XchangeFileType.Input, file);
         _dbContext.Add(newXchange);
     }
@@ -114,6 +117,11 @@ public async Task<Xchange> CreateXchange(Subscription subscription, XchangeFile
         string[] references = null, string correlationId = null, Partner gatewayPartner = null,
         GlobalAdapterValuesSet[] globalAdapterValuesSets = null)
     {
+        // Callers that have no partner/globals context of their own (scheduled receivers,
+        // aggregation, manual "create exchange", plain internal subscription fan-out) leave
+        // this null — resolve it here so {{globals.…}} always gets a chance to translate,
+        // instead of silently no-op'ing for whichever caller forgot to load it.
+        globalAdapterValuesSets ??= await _BitweenCache.ListGlobalAdapterValuesSetsAsync();
         var xchange = new Xchange(subscription, file, references, correlationId, gatewayPartner,
             globalAdapterValuesSets);
         await AddFile(xchange.Id, XchangeFileType.Input, file);
diff --git a/SW.Bitween.IntegrationTests/Fixtures/TestRequestContext.cs b/SW.Bitween.IntegrationTests/Fixtures/TestRequestContext.cs
new file mode 100644
index 00000000..a788ed4f
--- /dev/null
+++ b/SW.Bitween.IntegrationTests/Fixtures/TestRequestContext.cs
@@ -0,0 +1,21 @@
+using System.Security.Claims;
+using Microsoft.Extensions.DependencyInjection;
+using SW.PrimitiveTypes;
+
+namespace SW.Bitween.IntegrationTests.Fixtures;
+
+internal static class TestRequestContext
+{
+    /// <summary>
+    /// Handlers resolve their permissions from the database, and no account is signed in during
+    /// these tests. The break-glass superuser claim grants the whole catalog, so a test exercises
+    /// the handler rather than the guard in front of it.
+    /// </summary>
+    public static RequestContext Superuser(this AsyncServiceScope scope)
+    {
+        var ctx = scope.ServiceProvider.GetRequiredService<RequestContext>();
+        ctx.Set(new ClaimsPrincipal(new ClaimsIdentity(
+            [new Claim(Bitween.RequestContextExtensions.SuperuserClaim, "true")], "integration-test")));
+        return ctx;
+    }
+}
diff --git a/SW.Bitween.IntegrationTests/Tests/DelayedRetriesTests.cs b/SW.Bitween.IntegrationTests/Tests/DelayedRetriesTests.cs
index a410e084..1c3657b2 100644
--- a/SW.Bitween.IntegrationTests/Tests/DelayedRetriesTests.cs
+++ b/SW.Bitween.IntegrationTests/Tests/DelayedRetriesTests.cs
@@ -121,7 +121,7 @@ public async Task DelayedRetries_Search_returns_expected_row()
         db.Set<DelayedRetry>().Add(new DelayedRetry { Id = xchange.Id, On = scheduledOn });
         await db.SaveChangesAsync();
 
-        var search = new SW.Bitween.Resources.DelayedRetries.Search(db);
+        var search = new SW.Bitween.Resources.DelayedRetries.Search(db, scope.Superuser());
         var response = (SearchyResponse<DelayedRetryRow>)await search.Handle(EmptySearch());
 
         var row = response.Result.FirstOrDefault(r => r.Id == xchange.Id);
@@ -141,7 +141,7 @@ public async Task RunNow_executes_immediately_even_when_not_yet_due_and_removes_
         await using var scope = _fixture.CreateScope();
         var db = scope.ServiceProvider.GetRequiredService<BitweenDbContext>();
         var xs = scope.ServiceProvider.GetRequiredService<XchangeService>();
-        var ctx = scope.ServiceProvider.GetRequiredService<RequestContext>();
+        var ctx = scope.Superuser();
         var (_, _, xchange) = await CreateSubscriptionWithXchange(db, xs, 9006, "Run Now Doc");
 
         // Scheduled an hour from now — RunNow must still execute it immediately.
@@ -164,7 +164,7 @@ public async Task RunNow_throws_when_nothing_is_scheduled()
         await using var scope = _fixture.CreateScope();
         var db = scope.ServiceProvider.GetRequiredService<BitweenDbContext>();
         var xs = scope.ServiceProvider.GetRequiredService<XchangeService>();
-        var ctx = scope.ServiceProvider.GetRequiredService<RequestContext>();
+        var ctx = scope.Superuser();
 
         var runNow = new SW.Bitween.Resources.DelayedRetries.RunNow(db, ctx, xs);
 
@@ -186,7 +186,7 @@ public async Task Xchanges_Search_includes_ScheduledRetryOn_when_delayed_retry_e
         db.Set<DelayedRetry>().Add(new DelayedRetry { Id = xchange.Id, On = scheduledOn });
         await db.SaveChangesAsync();
 
-        var search = new SW.Bitween.Resources.Xchanges.Search(db, xs);
+        var search = new SW.Bitween.Resources.Xchanges.Search(db, xs, scope.Superuser());
         var response = (SearchyResponse<XchangeRow>)await search.Handle(EmptySearch());
 
         var row = response.Result.FirstOrDefault(r => r.Id == xchange.Id);
@@ -203,7 +203,7 @@ public async Task Xchanges_Search_has_null_ScheduledRetryOn_when_no_delayed_retr
         var xs = scope.ServiceProvider.GetRequiredService<XchangeService>();
         var (_, _, xchange) = await CreateSubscriptionWithXchange(db, xs, 9008, "Xchange Search Unscheduled Doc");
 
-        var search = new SW.Bitween.Resources.Xchanges.Search(db, xs);
+        var search = new SW.Bitween.Resources.Xchanges.Search(db, xs, scope.Superuser());
         var response = (SearchyResponse<XchangeRow>)await search.Handle(EmptySearch());
 
         var row = response.Result.FirstOrDefault(r => r.Id == xchange.Id);
diff --git a/SW.Bitween.IntegrationTests/Tests/RetryPolicyTests.cs b/SW.Bitween.IntegrationTests/Tests/RetryPolicyTests.cs
index 45f975f2..c144950c 100644
--- a/SW.Bitween.IntegrationTests/Tests/RetryPolicyTests.cs
+++ b/SW.Bitween.IntegrationTests/Tests/RetryPolicyTests.cs
@@ -27,7 +27,7 @@ public RetryPolicyTests(BitweenFixture fixture)
     private static (Create create, Get get, Update update, Delete delete)
         Handlers(BitweenDbContext db, RequestContext ctx) => (
             new Create(db, ctx),
-            new Get(db),
+            new Get(db, ctx),
             new Update(db, ctx),
             new Delete(db, ctx));
 
@@ -59,7 +59,7 @@ public async Task Can_create_and_get_retry_policy()
     {
         await using var scope = _fixture.CreateScope();
         var db = scope.ServiceProvider.GetRequiredService<BitweenDbContext>();
-        var ctx = scope.ServiceProvider.GetRequiredService<RequestContext>();
+        var ctx = scope.Superuser();
         var (create, get, _, _) = Handlers(db, ctx);
 
         var id = (int)await create.Handle(SimplePolicy("Round-trip Policy"));
@@ -77,7 +77,7 @@ public async Task Create_policy_with_complex_groups_round_trips_json_correctly()
     {
         await using var scope = _fixture.CreateScope();
         var db = scope.ServiceProvider.GetRequiredService<BitweenDbContext>();
-        var ctx = scope.ServiceProvider.GetRequiredService<RequestContext>();
+        var ctx = scope.Superuser();
         var (create, _, _, _) = Handlers(db, ctx);
 
         var policy = new RetryPolicyCreate
@@ -129,7 +129,7 @@ public async Task Can_update_retry_policy_name_and_groups()
     {
         await using var scope = _fixture.CreateScope();
         var db = scope.ServiceProvider.GetRequiredService<BitweenDbContext>();
-        var ctx = scope.ServiceProvider.GetRequiredService<RequestContext>();
+        var ctx = scope.Superuser();
         var (create, _, update, _) = Handlers(db, ctx);
 
         var id = (int)await create.Handle(SimplePolicy("Before Update"));
@@ -168,7 +168,7 @@ public async Task Can_delete_retry_policy_not_assigned_to_any_subscription()
     {
         await using var scope = _fixture.CreateScope();
         var db = scope.ServiceProvider.GetRequiredService<BitweenDbContext>();
-        var ctx = scope.ServiceProvider.GetRequiredService<RequestContext>();
+        var ctx = scope.Superuser();
         var (create, _, _, delete) = Handlers(db, ctx);
 
         var id = (int)await create.Handle(SimplePolicy("Deletable Policy"));
@@ -186,7 +186,7 @@ public async Task Cannot_delete_retry_policy_that_is_assigned_to_a_subscription(
     {
         await using var scope = _fixture.CreateScope();
         var db = scope.ServiceProvider.GetRequiredService<BitweenDbContext>();
-        var ctx = scope.ServiceProvider.GetRequiredService<RequestContext>();
+        var ctx = scope.Superuser();
         var (create, _, _, delete) = Handlers(db, ctx);
 
         var doc = new Document(7001, "Delete Guard Doc");
@@ -238,7 +238,7 @@ public async Task Subscription_retry_policy_id_is_persisted_and_fk_resolves()
     {
         await using var scope = _fixture.CreateScope();
         var db = scope.ServiceProvider.GetRequiredService<BitweenDbContext>();
-        var ctx = scope.ServiceProvider.GetRequiredService<RequestContext>();
+        var ctx = scope.Superuser();
         var (create, _, _, _) = Handlers(db, ctx);
 
         var doc = new Document(7002, "Sub FK Doc");
@@ -339,8 +339,9 @@ public async Task Removing_retry_policy_nullifies_subscription_fk_via_set_null_c
     public async Task Test_simulates_consecutive_attempts_and_stops_once_blocked()
     {
         await using var scope = _fixture.CreateScope();
-        var ctx = scope.ServiceProvider.GetRequiredService<RequestContext>();
-        var handler = new Resources.RetryPolicies.Test(ctx);
+        var db = scope.ServiceProvider.GetRequiredService<BitweenDbContext>();
+        var ctx = scope.Superuser();
+        var handler = new Resources.RetryPolicies.Test(db, ctx);
 
         var request = new TestRetryPolicyRequest
         {
@@ -369,8 +370,9 @@ public async Task Test_simulates_consecutive_attempts_and_stops_once_blocked()
     public async Task Test_rejects_success_result_type()
     {
         await using var scope = _fixture.CreateScope();
-        var ctx = scope.ServiceProvider.GetRequiredService<RequestContext>();
-        var handler = new Resources.RetryPolicies.Test(ctx);
+        var db = scope.ServiceProvider.GetRequiredService<BitweenDbContext>();
+        var ctx = scope.Superuser();
+        var handler = new Resources.RetryPolicies.Test(db, ctx);
 
         var request = new TestRetryPolicyRequest
         {
@@ -386,8 +388,9 @@ public async Task Test_rejects_success_result_type()
     public async Task Test_reports_no_match_when_no_group_applies()
     {
         await using var scope = _fixture.CreateScope();
-        var ctx = scope.ServiceProvider.GetRequiredService<RequestContext>();
-        var handler = new Resources.RetryPolicies.Test(ctx);
+        var db = scope.ServiceProvider.GetRequiredService<BitweenDbContext>();
+        var ctx = scope.Superuser();
+        var handler = new Resources.RetryPolicies.Test(db, ctx);
 
         var request = new TestRetryPolicyRequest
         {
diff --git a/SW.Bitween.MsSql/BitweenDbContext.cs b/SW.Bitween.MsSql/BitweenDbContext.cs
index 6088c1ef..ddef6d38 100644
--- a/SW.Bitween.MsSql/BitweenDbContext.cs
+++ b/SW.Bitween.MsSql/BitweenDbContext.cs
@@ -1,4 +1,5 @@
 using Microsoft.EntityFrameworkCore;
+using SW.Bitween.Domain;
 using SW.PrimitiveTypes;
 using SW.Scheduler.SqlServer;
 
@@ -6,6 +7,9 @@ namespace SW.Bitween.MsSql
 {
     public class BitweenDbContext : Bitween.BitweenDbContext
     {
+        /// <summary>Backs <see cref="Document"/> ids — see the note in OnModelCreating.</summary>
+        public const string DocumentIdSequence = "DocumentIds";
+
         public BitweenDbContext(DbContextOptions options, RequestContext requestContext, IPublish publish)
             : base(options, requestContext, publish) { }
 
@@ -13,6 +17,14 @@ protected override void OnModelCreating(ModelBuilder modelBuilder)
         {
             base.OnModelCreating(modelBuilder);
             modelBuilder.UseSchedulerSqlServer();
+
+            // Documents.Id became database-generated after the table already existed. SQL Server
+            // cannot add IDENTITY to an existing column — EF refuses outright ("to change the
+            // IDENTITY property of a column, the column needs to be dropped and recreated") — and
+            // rebuilding Documents would mean dropping the foreign keys Subscriptions and Xchanges
+            // hold against it. A sequence-backed default generates ids the same way with no table
+            // rebuild. Postgres uses identity and MySQL AUTO_INCREMENT, which both alter in place.
+            modelBuilder.Entity<Document>().Property(p => p.Id).UseSequence(DocumentIdSequence);
         }
     }
 }
diff --git a/SW.Bitween.MsSql/Migrations/20260726123726_AddDocumentCodeAndAutoId.Designer.cs b/SW.Bitween.MsSql/Migrations/20260726123726_AddDocumentCodeAndAutoId.Designer.cs
new file mode 100644
index 00000000..2d40e09e
--- /dev/null
+++ b/SW.Bitween.MsSql/Migrations/20260726123726_AddDocumentCodeAndAutoId.Designer.cs
@@ -0,0 +1,1904 @@
+// <auto-generated />
+using System;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using SW.Bitween.MsSql;
+
+#nullable disable
+
+namespace SW.Bitween.MsSql.Migrations
+{
+    [DbContext(typeof(BitweenDbContext))]
+    [Migration("20260726123726_AddDocumentCodeAndAutoId")]
+    partial class AddDocumentCodeAndAutoId
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasAnnotation("ProductVersion", "8.0.23")
+                .HasAnnotation("Relational:MaxIdentifierLength", 128);
+
+            SqlServerModelBuilderExtensions.UseIdentityColumns(modelBuilder);
+
+            modelBuilder.HasSequence("DocumentIds");
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.Account", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("Deleted")
+                        .HasColumnType("bit");
+
+                    b.Property<bool>("Disabled")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("DisplayName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<byte>("EmailProvider")
+                        .HasColumnType("tinyint");
+
+                    b.Property<byte>("LoginMethods")
+                        .HasColumnType("tinyint");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Password")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<string>("Phone")
+                        .HasMaxLength(20)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(20)");
+
+                    b.Property<int>("Role")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Email")
+                        .IsUnique()
+                        .HasFilter("[Email] IS NOT NULL");
+
+                    b.ToTable("Accounts", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 9999,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Deleted = false,
+                            Disabled = false,
+                            DisplayName = "Admin",
+                            Email = "admin@Bitween.systems",
+                            EmailProvider = (byte)0,
+                            LoginMethods = (byte)2,
+                            Password = "$SWHASH$V1$10000$VQCi48eitH4Ml5juvBMOFZrMdQwBbhuIQVXe6RR7qJdDF2bJ",
+                            Role = 0
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<int>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<byte>("LoginMethod")
+                        .HasColumnType("tinyint");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.ToTable("RefreshTokens", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DelayedRetry", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("GroupAttemptCounts")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("On")
+                        .HasColumnType("datetime2");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("On");
+
+                    b.ToTable("DelayedRetries", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Document", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int")
+                        .HasDefaultValueSql("NEXT VALUE FOR [DocumentIds]");
+
+                    SqlServerPropertyBuilderExtensions.UseSequence(b.Property<int>("Id"), "DocumentIds");
+
+                    b.Property<bool>("BusEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("BusMessageTypeName")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<string>("Code")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<bool?>("DisregardsUnfilteredMessages")
+                        .HasColumnType("bit");
+
+                    b.Property<int>("DocumentFormat")
+                        .HasColumnType("int");
+
+                    b.Property<int>("DuplicateInterval")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<string>("PromotedProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("BusMessageTypeName")
+                        .IsUnique()
+                        .HasFilter("[BusMessageTypeName] IS NOT NULL");
+
+                    b.HasIndex("Code")
+                        .IsUnique()
+                        .HasFilter("[Code] IS NOT NULL");
+
+                    b.HasIndex("Name")
+                        .IsUnique();
+
+                    b.ToTable("Documents", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 10001,
+                            BusEnabled = false,
+                            DocumentFormat = 0,
+                            DuplicateInterval = 0,
+                            Name = "Aggregation Document",
+                            PromotedProperties = "{}"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DocumentTrail", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int>("Code")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("StateAfter")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("StateBefore")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CreatedOn");
+
+                    b.HasIndex("DocumentId");
+
+                    b.ToTable("DocumentTrail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGateway", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("UrlName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UrlName")
+                        .IsUnique();
+
+                    b.ToTable("ApiGateways", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGatewayPartner", b =>
+                {
+                    b.Property<int>("ApiGatewayId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.HasKey("ApiGatewayId", "PartnerId", "SubscriptionId");
+
+                    b.HasIndex("PartnerId");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("ApiGatewayPartners", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DocumentId");
+
+                    b.ToTable("BusGateways", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGatewayRoute", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("BusGatewayId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("MatchExpression")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("BusGatewayId");
+
+                    b.HasIndex("PartnerId");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("BusGatewayRoutes", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.GlobalAdapterValuesSet", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Values")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("GlobalAdapterValuesSets", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Notifier", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("Inactive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<bool>("RunOnBadResult")
+                        .HasColumnType("bit");
+
+                    b.Property<bool>("RunOnFailedResult")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("RunOnSubscriptions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("RunOnSuccessfulResult")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Notifiers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.OnHoldXchange", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("BadData")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Data")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FileName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("References")
+                        .HasMaxLength(1024)
+                        .HasColumnType("nvarchar(1024)");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("OnHoldXchanges", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AdapterProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Partners", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 1,
+                            Name = "SYSTEM"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.RetryPolicy", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Groups")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("RetryPolicies", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Subscription", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("AggregateOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("AggregationForId")
+                        .HasColumnType("int");
+
+                    b.Property<byte>("AggregationTarget")
+                        .HasColumnType("tinyint");
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("ConsecutiveFailures")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CustomRetryPolicy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DocumentFilter")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("Inactive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool>("IsRunning")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("LastException")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("MapperId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("MapperProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("MatchExpression")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("PausedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ReceiveOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ReceiverId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("ReceiverProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ResponseMessageTypeName")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<int?>("ResponseSubscriptionId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("RetryPolicyId")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("Temporary")
+                        .HasColumnType("bit");
+
+                    b.Property<byte>("Type")
+                        .HasColumnType("tinyint");
+
+                    b.Property<string>("ValidatorId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("ValidatorProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkGroupId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AggregationForId");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("DocumentId");
+
+                    b.HasIndex("PartnerId");
+
+                    b.HasIndex("ResponseSubscriptionId");
+
+                    b.HasIndex("RetryPolicyId");
+
+                    b.HasIndex("WorkGroupId");
+
+                    b.ToTable("Subscriptions", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionCategory", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Code")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Code")
+                        .IsUnique()
+                        .HasFilter("[Code] IS NOT NULL");
+
+                    b.ToTable("SubscriptionCategory");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionTrail", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int>("Code")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("StateAfter")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("StateBefore")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CreatedOn");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("SubscriptionTrail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.WorkGroup", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BusMessageName")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Options")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("WorkGroup");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Xchange", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("CorrelationId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("GroupAttemptCounts")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InputContentType")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("InputHash")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("InputName")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<int>("InputSize")
+                        .HasColumnType("int");
+
+                    b.Property<string>("MapperId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("MapperProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("References")
+                        .HasMaxLength(1024)
+                        .HasColumnType("nvarchar(1024)");
+
+                    b.Property<string>("ResponseMessageTypeName")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<int?>("ResponseSubscriptionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RetryFor")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<DateTime>("StartedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DocumentId");
+
+                    b.HasIndex("InputHash");
+
+                    b.HasIndex("RetryFor");
+
+                    b.HasIndex("StartedOn");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("Xchanges", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeAggregation", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<DateTime>("AggregatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("AggregationXchangeId")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AggregationXchangeId");
+
+                    b.ToTable("XchangeAggregations", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeDelivery", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<DateTime>("DeliveredOn")
+                        .HasColumnType("datetime2");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DeliveredOn");
+
+                    b.ToTable("XchangeDeliveries", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeNotification", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Exception")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("FinishedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("NotifierId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("NotifierName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("Success")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("XchangeId")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("XchangeNotifications", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangePromotedProperties", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("Hits")
+                        .HasMaxLength(2000)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(2000)");
+
+                    b.Property<string>("Properties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PropertiesRaw")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("PropertiesRaw");
+
+                    b.ToTable("XchangePromotedProperties", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeResult", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("Exception")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("FinishedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("OutputBad")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("OutputContentType")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("OutputHash")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("OutputName")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<int>("OutputSize")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("ResponseBad")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ResponseContentType")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("ResponseHash")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("ResponseName")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<int>("ResponseSize")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ResponseXchangeId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("Success")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("XchangeResults", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.RunFlagUpdater+RunningResult", b =>
+                {
+                    b.Property<bool>("IsRunning")
+                        .HasColumnType("bit");
+
+                    b.ToTable((string)null);
+
+                    b.ToView(null, (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.JobExecution", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("bigint")
+                        .HasColumnName("id");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<long>("Id"));
+
+                    b.Property<string>("Context")
+                        .HasColumnType("nvarchar(max)")
+                        .HasColumnName("context");
+
+                    b.Property<long?>("DurationMs")
+                        .HasColumnType("bigint")
+                        .HasColumnName("duration_ms");
+
+                    b.Property<DateTime?>("EndTimeUtc")
+                        .HasColumnType("datetime2")
+                        .HasColumnName("end_time_utc");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("nvarchar(max)")
+                        .HasColumnName("error");
+
+                    b.Property<string>("FireInstanceId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("fire_instance_id");
+
+                    b.Property<string>("JobGroup")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_name");
+
+                    b.Property<string>("JobTypeName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_type_name");
+
+                    b.Property<string>("Node")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("node");
+
+                    b.Property<DateTime>("StartTimeUtc")
+                        .HasColumnType("datetime2")
+                        .HasColumnName("start_time_utc");
+
+                    b.Property<bool?>("Success")
+                        .HasColumnType("bit")
+                        .HasColumnName("success");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("FireInstanceId")
+                        .IsUnique()
+                        .HasDatabaseName("idx_je_fire_instance_id");
+
+                    b.HasIndex("StartTimeUtc")
+                        .HasDatabaseName("idx_je_start_time");
+
+                    b.HasIndex("Success")
+                        .HasDatabaseName("idx_je_success");
+
+                    b.HasIndex("JobGroup", "JobName", "StartTimeUtc")
+                        .HasDatabaseName("idx_je_group_name_start");
+
+                    b.ToTable("job_executions", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzBlobTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<byte[]>("BlobData")
+                        .HasColumnType("varbinary(max)")
+                        .HasColumnName("blob_data");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_blob_triggers", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCalendar", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("calendar_name");
+
+                    b.Property<byte[]>("Calendar")
+                        .IsRequired()
+                        .HasColumnType("varbinary(max)")
+                        .HasColumnName("calendar");
+
+                    b.HasKey("SchedulerName", "CalendarName");
+
+                    b.ToTable("QRTZ_calendars", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCronTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("CronExpression")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("cron_expression");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("time_zone_id");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_cron_triggers", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzFiredTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("EntryId")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("entry_id");
+
+                    b.Property<long>("FiredTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("fired_time");
+
+                    b.Property<string>("InstanceName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("instance_name");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("bit")
+                        .HasColumnName("is_nonconcurrent");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_name");
+
+                    b.Property<int>("Priority")
+                        .HasColumnType("int")
+                        .HasColumnName("priority");
+
+                    b.Property<bool?>("RequestsRecovery")
+                        .HasColumnType("bit")
+                        .HasColumnName("requests_recovery");
+
+                    b.Property<long>("ScheduledTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("sched_time");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("state");
+
+                    b.Property<string>("TriggerGroup")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("TriggerName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_name");
+
+                    b.HasKey("SchedulerName", "EntryId");
+
+                    b.HasIndex("InstanceName")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_inst_name");
+
+                    b.HasIndex("JobGroup")
+                        .HasDatabaseName("idx_QRTZ_ft_job_group");
+
+                    b.HasIndex("JobName")
+                        .HasDatabaseName("idx_QRTZ_ft_job_name");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("idx_QRTZ_ft_job_req_recovery");
+
+                    b.HasIndex("TriggerGroup")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_group");
+
+                    b.HasIndex("TriggerName")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_name");
+
+                    b.HasIndex("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_nm_gp");
+
+                    b.ToTable("QRTZ_fired_triggers", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzJobDetail", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_name");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("description");
+
+                    b.Property<bool>("IsDurable")
+                        .HasColumnType("bit")
+                        .HasColumnName("is_durable");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("bit")
+                        .HasColumnName("is_nonconcurrent");
+
+                    b.Property<bool>("IsUpdateData")
+                        .HasColumnType("bit")
+                        .HasColumnName("is_update_data");
+
+                    b.Property<string>("JobClassName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_class_name");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("varbinary(max)")
+                        .HasColumnName("job_data");
+
+                    b.Property<bool>("RequestsRecovery")
+                        .HasColumnType("bit")
+                        .HasColumnName("requests_recovery");
+
+                    b.HasKey("SchedulerName", "JobName", "JobGroup");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("idx_j_req_recovery");
+
+                    b.ToTable("QRTZ_job_details", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzLock", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("LockName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("lock_name");
+
+                    b.HasKey("SchedulerName", "LockName");
+
+                    b.ToTable("QRTZ_locks", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzPausedTriggerGroup", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.HasKey("SchedulerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_paused_trigger_grps", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSchedulerState", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("InstanceName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("instance_name");
+
+                    b.Property<long>("CheckInInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("checkin_interval");
+
+                    b.Property<long>("LastCheckInTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("last_checkin_time");
+
+                    b.HasKey("SchedulerName", "InstanceName");
+
+                    b.ToTable("QRTZ_scheduler_state", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<bool?>("BooleanProperty1")
+                        .HasColumnType("bit")
+                        .HasColumnName("bool_prop_1");
+
+                    b.Property<bool?>("BooleanProperty2")
+                        .HasColumnType("bit")
+                        .HasColumnName("bool_prop_2");
+
+                    b.Property<decimal?>("DecimalProperty1")
+                        .HasColumnType("numeric")
+                        .HasColumnName("dec_prop_1");
+
+                    b.Property<decimal?>("DecimalProperty2")
+                        .HasColumnType("numeric")
+                        .HasColumnName("dec_prop_2");
+
+                    b.Property<int?>("IntegerProperty1")
+                        .HasColumnType("int")
+                        .HasColumnName("int_prop_1");
+
+                    b.Property<int?>("IntegerProperty2")
+                        .HasColumnType("int")
+                        .HasColumnName("int_prop_2");
+
+                    b.Property<long?>("LongProperty1")
+                        .HasColumnType("bigint")
+                        .HasColumnName("long_prop_1");
+
+                    b.Property<long?>("LongProperty2")
+                        .HasColumnType("bigint")
+                        .HasColumnName("long_prop_2");
+
+                    b.Property<string>("StringProperty1")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("str_prop_1");
+
+                    b.Property<string>("StringProperty2")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("str_prop_2");
+
+                    b.Property<string>("StringProperty3")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("str_prop_3");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("time_zone_id");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_simprop_triggers", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimpleTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<long>("RepeatCount")
+                        .HasColumnType("bigint")
+                        .HasColumnName("repeat_count");
+
+                    b.Property<long>("RepeatInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("repeat_interval");
+
+                    b.Property<long>("TimesTriggered")
+                        .HasColumnType("bigint")
+                        .HasColumnName("times_triggered");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_simple_triggers", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("calendar_name");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("description");
+
+                    b.Property<long?>("EndTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("end_time");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("varbinary(max)")
+                        .HasColumnName("job_data");
+
+                    b.Property<string>("JobGroup")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_name");
+
+                    b.Property<int?>("MisfireInstruction")
+                        .HasColumnType("int")
+                        .HasColumnName("misfire_instr");
+
+                    b.Property<long?>("NextFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("next_fire_time");
+
+                    b.Property<long?>("PreviousFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("prev_fire_time");
+
+                    b.Property<int?>("Priority")
+                        .HasColumnType("int")
+                        .HasColumnName("priority");
+
+                    b.Property<long>("StartTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("start_time");
+
+                    b.Property<string>("TriggerState")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_state");
+
+                    b.Property<string>("TriggerType")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_type");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.HasIndex("NextFireTime")
+                        .HasDatabaseName("idx_t_next_fire_time");
+
+                    b.HasIndex("TriggerState")
+                        .HasDatabaseName("idx_t_state");
+
+                    b.HasIndex("NextFireTime", "TriggerState")
+                        .HasDatabaseName("idx_t_nft_st");
+
+                    b.HasIndex("SchedulerName", "JobName", "JobGroup");
+
+                    b.ToTable("QRTZ_triggers", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Accounts.Account", null)
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DocumentTrail", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", "Document")
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Document");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGatewayPartner", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Gateway.ApiGateway", "ApiGateway")
+                        .WithMany("Partners")
+                        .HasForeignKey("ApiGatewayId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Partner", "Partner")
+                        .WithMany()
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("ApiGateway");
+
+                    b.Navigation("Partner");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGatewayRoute", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Gateway.BusGateway", "BusGateway")
+                        .WithMany("Routes")
+                        .HasForeignKey("BusGatewayId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Partner", "Partner")
+                        .WithMany()
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("BusGateway");
+
+                    b.Navigation("Partner");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.OwnsMany("SW.Bitween.Domain.ApiCredential", "ApiCredentials", b1 =>
+                        {
+                            b1.Property<int>("PartnerId")
+                                .HasColumnType("int");
+
+                            b1.Property<int>("Id")
+                                .ValueGeneratedOnAdd()
+                                .HasColumnType("int");
+
+                            SqlServerPropertyBuilderExtensions.UseIdentityColumn(b1.Property<int>("Id"));
+
+                            b1.Property<string>("Key")
+                                .IsRequired()
+                                .HasMaxLength(500)
+                                .IsUnicode(false)
+                                .HasColumnType("varchar(500)");
+
+                            b1.Property<string>("Name")
+                                .IsRequired()
+                                .HasMaxLength(500)
+                                .HasColumnType("nvarchar(500)");
+
+                            b1.HasKey("PartnerId", "Id");
+
+                            b1.HasIndex("Key")
+                                .IsUnique();
+
+                            b1.ToTable("PartnerApiCredentials", (string)null);
+
+                            b1.WithOwner()
+                                .HasForeignKey("PartnerId");
+
+                            b1.HasData(
+                                new
+                                {
+                                    PartnerId = 1,
+                                    Id = 1,
+                                    Key = "7facc758283844b49cc4ffd26a75b1de",
+                                    Name = "default"
+                                });
+                        });
+
+                    b.Navigation("ApiCredentials");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Subscription", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Subscription", null)
+                        .WithMany()
+                        .HasForeignKey("AggregationForId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("FK_Subscriptions_AggFor");
+
+                    b.HasOne("SW.Bitween.Domain.SubscriptionCategory", "Category")
+                        .WithMany()
+                        .HasForeignKey("CategoryId");
+
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Partner", null)
+                        .WithMany("Subscriptions")
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", null)
+                        .WithMany()
+                        .HasForeignKey("ResponseSubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("FK_Subscriptions_RespSub");
+
+                    b.HasOne("SW.Bitween.Domain.RetryPolicy", "RetryPolicy")
+                        .WithMany()
+                        .HasForeignKey("RetryPolicyId")
+                        .OnDelete(DeleteBehavior.SetNull);
+
+                    b.HasOne("SW.Bitween.Domain.WorkGroup", "WorkGroup")
+                        .WithMany()
+                        .HasForeignKey("WorkGroupId");
+
+                    b.OwnsMany("SW.Bitween.Domain.Schedule", "Schedules", b1 =>
+                        {
+                            b1.Property<int>("SubscriptionId")
+                                .HasColumnType("int");
+
+                            b1.Property<int>("Id")
+                                .ValueGeneratedOnAdd()
+                                .HasColumnType("int");
+
+                            SqlServerPropertyBuilderExtensions.UseIdentityColumn(b1.Property<int>("Id"));
+
+                            b1.Property<bool>("Backwards")
+                                .HasColumnType("bit");
+
+                            b1.Property<long>("On")
+                                .HasColumnType("bigint");
+
+                            b1.Property<byte>("Recurrence")
+                                .HasColumnType("tinyint");
+
+                            b1.HasKey("SubscriptionId", "Id");
+
+                            b1.ToTable("SubscriptionSchedules", (string)null);
+
+                            b1.WithOwner()
+                                .HasForeignKey("SubscriptionId");
+                        });
+
+                    b.Navigation("Category");
+
+                    b.Navigation("RetryPolicy");
+
+                    b.Navigation("Schedules");
+
+                    b.Navigation("WorkGroup");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionTrail", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Xchange", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeAggregation", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeAggregation", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeDelivery", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeDelivery", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangePromotedProperties", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangePromotedProperties", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeResult", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeResult", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzBlobTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("BlobTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCronTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("CronTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("SimplePropertyTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimpleTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("SimpleTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzJobDetail", "JobDetail")
+                        .WithMany("Triggers")
+                        .HasForeignKey("SchedulerName", "JobName", "JobGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("JobDetail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGateway", b =>
+                {
+                    b.Navigation("Partners");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.Navigation("Routes");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.Navigation("Subscriptions");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzJobDetail", b =>
+                {
+                    b.Navigation("Triggers");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.Navigation("BlobTriggers");
+
+                    b.Navigation("CronTriggers");
+
+                    b.Navigation("SimplePropertyTriggers");
+
+                    b.Navigation("SimpleTriggers");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/SW.Bitween.MsSql/Migrations/20260726123726_AddDocumentCodeAndAutoId.cs b/SW.Bitween.MsSql/Migrations/20260726123726_AddDocumentCodeAndAutoId.cs
new file mode 100644
index 00000000..1d8071d7
--- /dev/null
+++ b/SW.Bitween.MsSql/Migrations/20260726123726_AddDocumentCodeAndAutoId.cs
@@ -0,0 +1,82 @@
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace SW.Bitween.MsSql.Migrations
+{
+    /// <inheritdoc />
+    public partial class AddDocumentCodeAndAutoId : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.CreateSequence(
+                name: "DocumentIds");
+
+            migrationBuilder.AlterColumn<int>(
+                name: "Id",
+                table: "Documents",
+                type: "int",
+                nullable: false,
+                defaultValueSql: "NEXT VALUE FOR [DocumentIds]",
+                oldClrType: typeof(int),
+                oldType: "int");
+
+            migrationBuilder.AddColumn<string>(
+                name: "Code",
+                table: "Documents",
+                type: "varchar(50)",
+                unicode: false,
+                maxLength: 50,
+                nullable: true);
+
+            migrationBuilder.UpdateData(
+                table: "Documents",
+                keyColumn: "Id",
+                keyValue: 10001,
+                column: "Code",
+                value: null);
+
+            migrationBuilder.CreateIndex(
+                name: "IX_Documents_Code",
+                table: "Documents",
+                column: "Code",
+                unique: true,
+                filter: "[Code] IS NOT NULL");
+
+            // The sequence starts at 1; realign it past the existing (user-assigned, pre-sequence)
+            // ids so the next INSERT can't collide with them. RESTART WITH needs a literal, hence
+            // the dynamic SQL.
+            migrationBuilder.Sql("""
+                DECLARE @next bigint = (SELECT ISNULL(MAX([Id]), 0) + 1 FROM [Documents]);
+                DECLARE @sql nvarchar(200) =
+                    N'ALTER SEQUENCE [DocumentIds] RESTART WITH ' + CAST(@next AS nvarchar(20));
+                EXEC sp_executesql @sql;
+                """);
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropIndex(
+                name: "IX_Documents_Code",
+                table: "Documents");
+
+            migrationBuilder.DropColumn(
+                name: "Code",
+                table: "Documents");
+
+            migrationBuilder.DropSequence(
+                name: "DocumentIds");
+
+            migrationBuilder.AlterColumn<int>(
+                name: "Id",
+                table: "Documents",
+                type: "int",
+                nullable: false,
+                oldClrType: typeof(int),
+                oldType: "int",
+                oldDefaultValueSql: "NEXT VALUE FOR [DocumentIds]");
+        }
+    }
+}
diff --git a/SW.Bitween.MsSql/Migrations/20260726123818_AddRolesAndPermissions.Designer.cs b/SW.Bitween.MsSql/Migrations/20260726123818_AddRolesAndPermissions.Designer.cs
new file mode 100644
index 00000000..0fb443f7
--- /dev/null
+++ b/SW.Bitween.MsSql/Migrations/20260726123818_AddRolesAndPermissions.Designer.cs
@@ -0,0 +1,2006 @@
+// <auto-generated />
+using System;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using SW.Bitween.MsSql;
+
+#nullable disable
+
+namespace SW.Bitween.MsSql.Migrations
+{
+    [DbContext(typeof(BitweenDbContext))]
+    [Migration("20260726123818_AddRolesAndPermissions")]
+    partial class AddRolesAndPermissions
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasAnnotation("ProductVersion", "8.0.23")
+                .HasAnnotation("Relational:MaxIdentifierLength", 128);
+
+            SqlServerModelBuilderExtensions.UseIdentityColumns(modelBuilder);
+
+            modelBuilder.HasSequence("DocumentIds");
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.Account", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("Deleted")
+                        .HasColumnType("bit");
+
+                    b.Property<bool>("Disabled")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("DisplayName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<byte>("EmailProvider")
+                        .HasColumnType("tinyint");
+
+                    b.Property<byte>("LoginMethods")
+                        .HasColumnType("tinyint");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Password")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<string>("Phone")
+                        .HasMaxLength(20)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(20)");
+
+                    b.Property<int>("Role")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Email")
+                        .IsUnique()
+                        .HasFilter("[Email] IS NOT NULL");
+
+                    b.ToTable("Accounts", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 9999,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Deleted = false,
+                            Disabled = false,
+                            DisplayName = "Admin",
+                            Email = "admin@Bitween.systems",
+                            EmailProvider = (byte)0,
+                            LoginMethods = (byte)2,
+                            Password = "$SWHASH$V1$10000$VQCi48eitH4Ml5juvBMOFZrMdQwBbhuIQVXe6RR7qJdDF2bJ",
+                            Role = 0
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.AccountRoleLink", b =>
+                {
+                    b.Property<int>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("RoleId")
+                        .HasColumnType("int");
+
+                    b.HasKey("AccountId", "RoleId");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AccountRoles", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<int>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<byte>("LoginMethod")
+                        .HasColumnType("tinyint");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.ToTable("RefreshTokens", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.Role", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasMaxLength(500)
+                        .HasColumnType("nvarchar(500)");
+
+                    b.Property<bool>("IsSystem")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("Permissions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Name")
+                        .IsUnique();
+
+                    b.ToTable("Roles", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 1,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Full access to everything, including members, roles and settings.",
+                            IsSystem = true,
+                            Name = "Administrator",
+                            Permissions = "[]"
+                        },
+                        new
+                        {
+                            Id = 2,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Runs and configures integrations. Can't manage members, roles or settings.",
+                            IsSystem = true,
+                            Name = "Member",
+                            Permissions = "[]"
+                        },
+                        new
+                        {
+                            Id = 3,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Read-only access to integrations, exchanges and configuration.",
+                            IsSystem = true,
+                            Name = "Viewer",
+                            Permissions = "[]"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DelayedRetry", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("GroupAttemptCounts")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("On")
+                        .HasColumnType("datetime2");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("On");
+
+                    b.ToTable("DelayedRetries", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Document", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int")
+                        .HasDefaultValueSql("NEXT VALUE FOR [DocumentIds]");
+
+                    SqlServerPropertyBuilderExtensions.UseSequence(b.Property<int>("Id"), "DocumentIds");
+
+                    b.Property<bool>("BusEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("BusMessageTypeName")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<string>("Code")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<bool?>("DisregardsUnfilteredMessages")
+                        .HasColumnType("bit");
+
+                    b.Property<int>("DocumentFormat")
+                        .HasColumnType("int");
+
+                    b.Property<int>("DuplicateInterval")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<string>("PromotedProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("BusMessageTypeName")
+                        .IsUnique()
+                        .HasFilter("[BusMessageTypeName] IS NOT NULL");
+
+                    b.HasIndex("Code")
+                        .IsUnique()
+                        .HasFilter("[Code] IS NOT NULL");
+
+                    b.HasIndex("Name")
+                        .IsUnique();
+
+                    b.ToTable("Documents", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 10001,
+                            BusEnabled = false,
+                            DocumentFormat = 0,
+                            DuplicateInterval = 0,
+                            Name = "Aggregation Document",
+                            PromotedProperties = "{}"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DocumentTrail", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int>("Code")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("StateAfter")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("StateBefore")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CreatedOn");
+
+                    b.HasIndex("DocumentId");
+
+                    b.ToTable("DocumentTrail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGateway", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("UrlName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UrlName")
+                        .IsUnique();
+
+                    b.ToTable("ApiGateways", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGatewayPartner", b =>
+                {
+                    b.Property<int>("ApiGatewayId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.HasKey("ApiGatewayId", "PartnerId", "SubscriptionId");
+
+                    b.HasIndex("PartnerId");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("ApiGatewayPartners", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DocumentId");
+
+                    b.ToTable("BusGateways", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGatewayRoute", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("BusGatewayId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("MatchExpression")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("BusGatewayId");
+
+                    b.HasIndex("PartnerId");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("BusGatewayRoutes", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.GlobalAdapterValuesSet", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Values")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("GlobalAdapterValuesSets", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Notifier", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("Inactive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<bool>("RunOnBadResult")
+                        .HasColumnType("bit");
+
+                    b.Property<bool>("RunOnFailedResult")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("RunOnSubscriptions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("RunOnSuccessfulResult")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Notifiers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.OnHoldXchange", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("BadData")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Data")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FileName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("References")
+                        .HasMaxLength(1024)
+                        .HasColumnType("nvarchar(1024)");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("OnHoldXchanges", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AdapterProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Partners", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 1,
+                            Name = "SYSTEM"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.RetryPolicy", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Groups")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("RetryPolicies", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Subscription", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("AggregateOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("AggregationForId")
+                        .HasColumnType("int");
+
+                    b.Property<byte>("AggregationTarget")
+                        .HasColumnType("tinyint");
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("ConsecutiveFailures")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CustomRetryPolicy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DocumentFilter")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("Inactive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool>("IsRunning")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("LastException")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("MapperId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("MapperProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("MatchExpression")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("PausedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ReceiveOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ReceiverId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("ReceiverProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ResponseMessageTypeName")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<int?>("ResponseSubscriptionId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("RetryPolicyId")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("Temporary")
+                        .HasColumnType("bit");
+
+                    b.Property<byte>("Type")
+                        .HasColumnType("tinyint");
+
+                    b.Property<string>("ValidatorId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("ValidatorProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkGroupId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AggregationForId");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("DocumentId");
+
+                    b.HasIndex("PartnerId");
+
+                    b.HasIndex("ResponseSubscriptionId");
+
+                    b.HasIndex("RetryPolicyId");
+
+                    b.HasIndex("WorkGroupId");
+
+                    b.ToTable("Subscriptions", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionCategory", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Code")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Code")
+                        .IsUnique()
+                        .HasFilter("[Code] IS NOT NULL");
+
+                    b.ToTable("SubscriptionCategory");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionTrail", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int>("Code")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("StateAfter")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("StateBefore")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CreatedOn");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("SubscriptionTrail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.WorkGroup", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BusMessageName")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Options")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("WorkGroup");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Xchange", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("CorrelationId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("GroupAttemptCounts")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InputContentType")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("InputHash")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("InputName")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<int>("InputSize")
+                        .HasColumnType("int");
+
+                    b.Property<string>("MapperId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("MapperProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("References")
+                        .HasMaxLength(1024)
+                        .HasColumnType("nvarchar(1024)");
+
+                    b.Property<string>("ResponseMessageTypeName")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<int?>("ResponseSubscriptionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RetryFor")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<DateTime>("StartedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DocumentId");
+
+                    b.HasIndex("InputHash");
+
+                    b.HasIndex("RetryFor");
+
+                    b.HasIndex("StartedOn");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("Xchanges", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeAggregation", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<DateTime>("AggregatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("AggregationXchangeId")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AggregationXchangeId");
+
+                    b.ToTable("XchangeAggregations", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeDelivery", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<DateTime>("DeliveredOn")
+                        .HasColumnType("datetime2");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DeliveredOn");
+
+                    b.ToTable("XchangeDeliveries", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeNotification", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Exception")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("FinishedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("NotifierId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("NotifierName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("Success")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("XchangeId")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("XchangeNotifications", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangePromotedProperties", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("Hits")
+                        .HasMaxLength(2000)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(2000)");
+
+                    b.Property<string>("Properties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PropertiesRaw")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("PropertiesRaw");
+
+                    b.ToTable("XchangePromotedProperties", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeResult", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("Exception")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("FinishedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("OutputBad")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("OutputContentType")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("OutputHash")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("OutputName")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<int>("OutputSize")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("ResponseBad")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ResponseContentType")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("ResponseHash")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("ResponseName")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<int>("ResponseSize")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ResponseXchangeId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("Success")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("XchangeResults", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.RunFlagUpdater+RunningResult", b =>
+                {
+                    b.Property<bool>("IsRunning")
+                        .HasColumnType("bit");
+
+                    b.ToTable((string)null);
+
+                    b.ToView(null, (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.JobExecution", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("bigint")
+                        .HasColumnName("id");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<long>("Id"));
+
+                    b.Property<string>("Context")
+                        .HasColumnType("nvarchar(max)")
+                        .HasColumnName("context");
+
+                    b.Property<long?>("DurationMs")
+                        .HasColumnType("bigint")
+                        .HasColumnName("duration_ms");
+
+                    b.Property<DateTime?>("EndTimeUtc")
+                        .HasColumnType("datetime2")
+                        .HasColumnName("end_time_utc");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("nvarchar(max)")
+                        .HasColumnName("error");
+
+                    b.Property<string>("FireInstanceId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("fire_instance_id");
+
+                    b.Property<string>("JobGroup")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_name");
+
+                    b.Property<string>("JobTypeName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_type_name");
+
+                    b.Property<string>("Node")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("node");
+
+                    b.Property<DateTime>("StartTimeUtc")
+                        .HasColumnType("datetime2")
+                        .HasColumnName("start_time_utc");
+
+                    b.Property<bool?>("Success")
+                        .HasColumnType("bit")
+                        .HasColumnName("success");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("FireInstanceId")
+                        .IsUnique()
+                        .HasDatabaseName("idx_je_fire_instance_id");
+
+                    b.HasIndex("StartTimeUtc")
+                        .HasDatabaseName("idx_je_start_time");
+
+                    b.HasIndex("Success")
+                        .HasDatabaseName("idx_je_success");
+
+                    b.HasIndex("JobGroup", "JobName", "StartTimeUtc")
+                        .HasDatabaseName("idx_je_group_name_start");
+
+                    b.ToTable("job_executions", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzBlobTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<byte[]>("BlobData")
+                        .HasColumnType("varbinary(max)")
+                        .HasColumnName("blob_data");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_blob_triggers", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCalendar", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("calendar_name");
+
+                    b.Property<byte[]>("Calendar")
+                        .IsRequired()
+                        .HasColumnType("varbinary(max)")
+                        .HasColumnName("calendar");
+
+                    b.HasKey("SchedulerName", "CalendarName");
+
+                    b.ToTable("QRTZ_calendars", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCronTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("CronExpression")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("cron_expression");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("time_zone_id");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_cron_triggers", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzFiredTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("EntryId")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("entry_id");
+
+                    b.Property<long>("FiredTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("fired_time");
+
+                    b.Property<string>("InstanceName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("instance_name");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("bit")
+                        .HasColumnName("is_nonconcurrent");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_name");
+
+                    b.Property<int>("Priority")
+                        .HasColumnType("int")
+                        .HasColumnName("priority");
+
+                    b.Property<bool?>("RequestsRecovery")
+                        .HasColumnType("bit")
+                        .HasColumnName("requests_recovery");
+
+                    b.Property<long>("ScheduledTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("sched_time");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("state");
+
+                    b.Property<string>("TriggerGroup")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("TriggerName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_name");
+
+                    b.HasKey("SchedulerName", "EntryId");
+
+                    b.HasIndex("InstanceName")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_inst_name");
+
+                    b.HasIndex("JobGroup")
+                        .HasDatabaseName("idx_QRTZ_ft_job_group");
+
+                    b.HasIndex("JobName")
+                        .HasDatabaseName("idx_QRTZ_ft_job_name");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("idx_QRTZ_ft_job_req_recovery");
+
+                    b.HasIndex("TriggerGroup")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_group");
+
+                    b.HasIndex("TriggerName")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_name");
+
+                    b.HasIndex("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_nm_gp");
+
+                    b.ToTable("QRTZ_fired_triggers", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzJobDetail", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_name");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("description");
+
+                    b.Property<bool>("IsDurable")
+                        .HasColumnType("bit")
+                        .HasColumnName("is_durable");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("bit")
+                        .HasColumnName("is_nonconcurrent");
+
+                    b.Property<bool>("IsUpdateData")
+                        .HasColumnType("bit")
+                        .HasColumnName("is_update_data");
+
+                    b.Property<string>("JobClassName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_class_name");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("varbinary(max)")
+                        .HasColumnName("job_data");
+
+                    b.Property<bool>("RequestsRecovery")
+                        .HasColumnType("bit")
+                        .HasColumnName("requests_recovery");
+
+                    b.HasKey("SchedulerName", "JobName", "JobGroup");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("idx_j_req_recovery");
+
+                    b.ToTable("QRTZ_job_details", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzLock", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("LockName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("lock_name");
+
+                    b.HasKey("SchedulerName", "LockName");
+
+                    b.ToTable("QRTZ_locks", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzPausedTriggerGroup", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.HasKey("SchedulerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_paused_trigger_grps", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSchedulerState", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("InstanceName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("instance_name");
+
+                    b.Property<long>("CheckInInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("checkin_interval");
+
+                    b.Property<long>("LastCheckInTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("last_checkin_time");
+
+                    b.HasKey("SchedulerName", "InstanceName");
+
+                    b.ToTable("QRTZ_scheduler_state", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<bool?>("BooleanProperty1")
+                        .HasColumnType("bit")
+                        .HasColumnName("bool_prop_1");
+
+                    b.Property<bool?>("BooleanProperty2")
+                        .HasColumnType("bit")
+                        .HasColumnName("bool_prop_2");
+
+                    b.Property<decimal?>("DecimalProperty1")
+                        .HasColumnType("numeric")
+                        .HasColumnName("dec_prop_1");
+
+                    b.Property<decimal?>("DecimalProperty2")
+                        .HasColumnType("numeric")
+                        .HasColumnName("dec_prop_2");
+
+                    b.Property<int?>("IntegerProperty1")
+                        .HasColumnType("int")
+                        .HasColumnName("int_prop_1");
+
+                    b.Property<int?>("IntegerProperty2")
+                        .HasColumnType("int")
+                        .HasColumnName("int_prop_2");
+
+                    b.Property<long?>("LongProperty1")
+                        .HasColumnType("bigint")
+                        .HasColumnName("long_prop_1");
+
+                    b.Property<long?>("LongProperty2")
+                        .HasColumnType("bigint")
+                        .HasColumnName("long_prop_2");
+
+                    b.Property<string>("StringProperty1")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("str_prop_1");
+
+                    b.Property<string>("StringProperty2")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("str_prop_2");
+
+                    b.Property<string>("StringProperty3")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("str_prop_3");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("time_zone_id");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_simprop_triggers", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimpleTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<long>("RepeatCount")
+                        .HasColumnType("bigint")
+                        .HasColumnName("repeat_count");
+
+                    b.Property<long>("RepeatInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("repeat_interval");
+
+                    b.Property<long>("TimesTriggered")
+                        .HasColumnType("bigint")
+                        .HasColumnName("times_triggered");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_simple_triggers", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("calendar_name");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("description");
+
+                    b.Property<long?>("EndTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("end_time");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("varbinary(max)")
+                        .HasColumnName("job_data");
+
+                    b.Property<string>("JobGroup")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_name");
+
+                    b.Property<int?>("MisfireInstruction")
+                        .HasColumnType("int")
+                        .HasColumnName("misfire_instr");
+
+                    b.Property<long?>("NextFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("next_fire_time");
+
+                    b.Property<long?>("PreviousFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("prev_fire_time");
+
+                    b.Property<int?>("Priority")
+                        .HasColumnType("int")
+                        .HasColumnName("priority");
+
+                    b.Property<long>("StartTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("start_time");
+
+                    b.Property<string>("TriggerState")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_state");
+
+                    b.Property<string>("TriggerType")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_type");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.HasIndex("NextFireTime")
+                        .HasDatabaseName("idx_t_next_fire_time");
+
+                    b.HasIndex("TriggerState")
+                        .HasDatabaseName("idx_t_state");
+
+                    b.HasIndex("NextFireTime", "TriggerState")
+                        .HasDatabaseName("idx_t_nft_st");
+
+                    b.HasIndex("SchedulerName", "JobName", "JobGroup");
+
+                    b.ToTable("QRTZ_triggers", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.AccountRoleLink", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Accounts.Account", null)
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Accounts.Role", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Accounts.Account", null)
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DocumentTrail", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", "Document")
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Document");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGatewayPartner", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Gateway.ApiGateway", "ApiGateway")
+                        .WithMany("Partners")
+                        .HasForeignKey("ApiGatewayId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Partner", "Partner")
+                        .WithMany()
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("ApiGateway");
+
+                    b.Navigation("Partner");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGatewayRoute", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Gateway.BusGateway", "BusGateway")
+                        .WithMany("Routes")
+                        .HasForeignKey("BusGatewayId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Partner", "Partner")
+                        .WithMany()
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("BusGateway");
+
+                    b.Navigation("Partner");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.OwnsMany("SW.Bitween.Domain.ApiCredential", "ApiCredentials", b1 =>
+                        {
+                            b1.Property<int>("PartnerId")
+                                .HasColumnType("int");
+
+                            b1.Property<int>("Id")
+                                .ValueGeneratedOnAdd()
+                                .HasColumnType("int");
+
+                            SqlServerPropertyBuilderExtensions.UseIdentityColumn(b1.Property<int>("Id"));
+
+                            b1.Property<string>("Key")
+                                .IsRequired()
+                                .HasMaxLength(500)
+                                .IsUnicode(false)
+                                .HasColumnType("varchar(500)");
+
+                            b1.Property<string>("Name")
+                                .IsRequired()
+                                .HasMaxLength(500)
+                                .HasColumnType("nvarchar(500)");
+
+                            b1.HasKey("PartnerId", "Id");
+
+                            b1.HasIndex("Key")
+                                .IsUnique();
+
+                            b1.ToTable("PartnerApiCredentials", (string)null);
+
+                            b1.WithOwner()
+                                .HasForeignKey("PartnerId");
+
+                            b1.HasData(
+                                new
+                                {
+                                    PartnerId = 1,
+                                    Id = 1,
+                                    Key = "7facc758283844b49cc4ffd26a75b1de",
+                                    Name = "default"
+                                });
+                        });
+
+                    b.Navigation("ApiCredentials");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Subscription", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Subscription", null)
+                        .WithMany()
+                        .HasForeignKey("AggregationForId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("FK_Subscriptions_AggFor");
+
+                    b.HasOne("SW.Bitween.Domain.SubscriptionCategory", "Category")
+                        .WithMany()
+                        .HasForeignKey("CategoryId");
+
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Partner", null)
+                        .WithMany("Subscriptions")
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", null)
+                        .WithMany()
+                        .HasForeignKey("ResponseSubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("FK_Subscriptions_RespSub");
+
+                    b.HasOne("SW.Bitween.Domain.RetryPolicy", "RetryPolicy")
+                        .WithMany()
+                        .HasForeignKey("RetryPolicyId")
+                        .OnDelete(DeleteBehavior.SetNull);
+
+                    b.HasOne("SW.Bitween.Domain.WorkGroup", "WorkGroup")
+                        .WithMany()
+                        .HasForeignKey("WorkGroupId");
+
+                    b.OwnsMany("SW.Bitween.Domain.Schedule", "Schedules", b1 =>
+                        {
+                            b1.Property<int>("SubscriptionId")
+                                .HasColumnType("int");
+
+                            b1.Property<int>("Id")
+                                .ValueGeneratedOnAdd()
+                                .HasColumnType("int");
+
+                            SqlServerPropertyBuilderExtensions.UseIdentityColumn(b1.Property<int>("Id"));
+
+                            b1.Property<bool>("Backwards")
+                                .HasColumnType("bit");
+
+                            b1.Property<long>("On")
+                                .HasColumnType("bigint");
+
+                            b1.Property<byte>("Recurrence")
+                                .HasColumnType("tinyint");
+
+                            b1.HasKey("SubscriptionId", "Id");
+
+                            b1.ToTable("SubscriptionSchedules", (string)null);
+
+                            b1.WithOwner()
+                                .HasForeignKey("SubscriptionId");
+                        });
+
+                    b.Navigation("Category");
+
+                    b.Navigation("RetryPolicy");
+
+                    b.Navigation("Schedules");
+
+                    b.Navigation("WorkGroup");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionTrail", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Xchange", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeAggregation", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeAggregation", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeDelivery", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeDelivery", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangePromotedProperties", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangePromotedProperties", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeResult", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeResult", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzBlobTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("BlobTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCronTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("CronTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("SimplePropertyTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimpleTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("SimpleTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzJobDetail", "JobDetail")
+                        .WithMany("Triggers")
+                        .HasForeignKey("SchedulerName", "JobName", "JobGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("JobDetail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGateway", b =>
+                {
+                    b.Navigation("Partners");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.Navigation("Routes");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.Navigation("Subscriptions");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzJobDetail", b =>
+                {
+                    b.Navigation("Triggers");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.Navigation("BlobTriggers");
+
+                    b.Navigation("CronTriggers");
+
+                    b.Navigation("SimplePropertyTriggers");
+
+                    b.Navigation("SimpleTriggers");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/SW.Bitween.MsSql/Migrations/20260726123818_AddRolesAndPermissions.cs b/SW.Bitween.MsSql/Migrations/20260726123818_AddRolesAndPermissions.cs
new file mode 100644
index 00000000..33fa07c5
--- /dev/null
+++ b/SW.Bitween.MsSql/Migrations/20260726123818_AddRolesAndPermissions.cs
@@ -0,0 +1,104 @@
+using System;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+#pragma warning disable CA1814 // Prefer jagged arrays over multidimensional
+
+namespace SW.Bitween.MsSql.Migrations
+{
+    /// <inheritdoc />
+    public partial class AddRolesAndPermissions : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.CreateTable(
+                name: "Roles",
+                columns: table => new
+                {
+                    Id = table.Column<int>(type: "int", nullable: false)
+                        .Annotation("SqlServer:Identity", "1, 1"),
+                    Name = table.Column<string>(type: "nvarchar(100)", maxLength: 100, nullable: false),
+                    Description = table.Column<string>(type: "nvarchar(500)", maxLength: 500, nullable: true),
+                    Permissions = table.Column<string>(type: "nvarchar(max)", nullable: true),
+                    IsSystem = table.Column<bool>(type: "bit", nullable: false),
+                    CreatedOn = table.Column<DateTime>(type: "datetime2", nullable: false),
+                    CreatedBy = table.Column<string>(type: "nvarchar(max)", nullable: true),
+                    ModifiedOn = table.Column<DateTime>(type: "datetime2", nullable: true),
+                    ModifiedBy = table.Column<string>(type: "nvarchar(max)", nullable: true)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_Roles", x => x.Id);
+                });
+
+            migrationBuilder.CreateTable(
+                name: "AccountRoles",
+                columns: table => new
+                {
+                    AccountId = table.Column<int>(type: "int", nullable: false),
+                    RoleId = table.Column<int>(type: "int", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_AccountRoles", x => new { x.AccountId, x.RoleId });
+                    table.ForeignKey(
+                        name: "FK_AccountRoles_Accounts_AccountId",
+                        column: x => x.AccountId,
+                        principalTable: "Accounts",
+                        principalColumn: "Id",
+                        onDelete: ReferentialAction.Cascade);
+                    table.ForeignKey(
+                        name: "FK_AccountRoles_Roles_RoleId",
+                        column: x => x.RoleId,
+                        principalTable: "Roles",
+                        principalColumn: "Id",
+                        onDelete: ReferentialAction.Cascade);
+                });
+
+            migrationBuilder.InsertData(
+                table: "Roles",
+                columns: new[] { "Id", "CreatedBy", "CreatedOn", "Description", "IsSystem", "ModifiedBy", "ModifiedOn", "Name", "Permissions" },
+                values: new object[,]
+                {
+                    { 1, null, new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc), "Full access to everything, including members, roles and settings.", true, null, null, "Administrator", "[]" },
+                    { 2, null, new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc), "Runs and configures integrations. Can't manage members, roles or settings.", true, null, null, "Member", "[]" },
+                    { 3, null, new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc), "Read-only access to integrations, exchanges and configuration.", true, null, null, "Viewer", "[]" }
+                });
+
+            migrationBuilder.CreateIndex(
+                name: "IX_AccountRoles_RoleId",
+                table: "AccountRoles",
+                column: "RoleId");
+
+            migrationBuilder.CreateIndex(
+                name: "IX_Roles_Name",
+                table: "Roles",
+                column: "Name",
+                unique: true);
+
+            // Every existing account keeps exactly the access it had: its coarse AccountRole
+            // (Admin=0, Viewer=10, Member=20) becomes the matching built-in role. Anything
+            // unrecognised lands on Viewer — least privilege. Idempotent, so re-running or
+            // ordering against the seeded admin account can't produce duplicates.
+            migrationBuilder.Sql("""
+                INSERT INTO [AccountRoles] ([AccountId], [RoleId])
+                SELECT a.[Id], CASE a.[Role] WHEN 0 THEN 1 WHEN 20 THEN 2 ELSE 3 END
+                FROM [Accounts] a
+                WHERE NOT EXISTS (
+                    SELECT 1 FROM [AccountRoles] l WHERE l.[AccountId] = a.[Id]);
+                """);
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropTable(
+                name: "AccountRoles");
+
+            migrationBuilder.DropTable(
+                name: "Roles");
+        }
+    }
+}
diff --git a/SW.Bitween.MsSql/Migrations/20260726151528_DropAccountPhone.Designer.cs b/SW.Bitween.MsSql/Migrations/20260726151528_DropAccountPhone.Designer.cs
new file mode 100644
index 00000000..b4c7b400
--- /dev/null
+++ b/SW.Bitween.MsSql/Migrations/20260726151528_DropAccountPhone.Designer.cs
@@ -0,0 +1,2001 @@
+// <auto-generated />
+using System;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using SW.Bitween.MsSql;
+
+#nullable disable
+
+namespace SW.Bitween.MsSql.Migrations
+{
+    [DbContext(typeof(BitweenDbContext))]
+    [Migration("20260726151528_DropAccountPhone")]
+    partial class DropAccountPhone
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasAnnotation("ProductVersion", "8.0.23")
+                .HasAnnotation("Relational:MaxIdentifierLength", 128);
+
+            SqlServerModelBuilderExtensions.UseIdentityColumns(modelBuilder);
+
+            modelBuilder.HasSequence("DocumentIds");
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.Account", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("Deleted")
+                        .HasColumnType("bit");
+
+                    b.Property<bool>("Disabled")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("DisplayName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<byte>("EmailProvider")
+                        .HasColumnType("tinyint");
+
+                    b.Property<byte>("LoginMethods")
+                        .HasColumnType("tinyint");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Password")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<int>("Role")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Email")
+                        .IsUnique()
+                        .HasFilter("[Email] IS NOT NULL");
+
+                    b.ToTable("Accounts", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 9999,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Deleted = false,
+                            Disabled = false,
+                            DisplayName = "Admin",
+                            Email = "admin@Bitween.systems",
+                            EmailProvider = (byte)0,
+                            LoginMethods = (byte)2,
+                            Password = "$SWHASH$V1$10000$VQCi48eitH4Ml5juvBMOFZrMdQwBbhuIQVXe6RR7qJdDF2bJ",
+                            Role = 0
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.AccountRoleLink", b =>
+                {
+                    b.Property<int>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("RoleId")
+                        .HasColumnType("int");
+
+                    b.HasKey("AccountId", "RoleId");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AccountRoles", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<int>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<byte>("LoginMethod")
+                        .HasColumnType("tinyint");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.ToTable("RefreshTokens", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.Role", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasMaxLength(500)
+                        .HasColumnType("nvarchar(500)");
+
+                    b.Property<bool>("IsSystem")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("Permissions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Name")
+                        .IsUnique();
+
+                    b.ToTable("Roles", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 1,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Full access to everything, including members, roles and settings.",
+                            IsSystem = true,
+                            Name = "Administrator",
+                            Permissions = "[]"
+                        },
+                        new
+                        {
+                            Id = 2,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Runs and configures integrations. Can't manage members, roles or settings.",
+                            IsSystem = true,
+                            Name = "Member",
+                            Permissions = "[]"
+                        },
+                        new
+                        {
+                            Id = 3,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Read-only access to integrations, exchanges and configuration.",
+                            IsSystem = true,
+                            Name = "Viewer",
+                            Permissions = "[]"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DelayedRetry", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("GroupAttemptCounts")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("On")
+                        .HasColumnType("datetime2");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("On");
+
+                    b.ToTable("DelayedRetries", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Document", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int")
+                        .HasDefaultValueSql("NEXT VALUE FOR [DocumentIds]");
+
+                    SqlServerPropertyBuilderExtensions.UseSequence(b.Property<int>("Id"), "DocumentIds");
+
+                    b.Property<bool>("BusEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("BusMessageTypeName")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<string>("Code")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<bool?>("DisregardsUnfilteredMessages")
+                        .HasColumnType("bit");
+
+                    b.Property<int>("DocumentFormat")
+                        .HasColumnType("int");
+
+                    b.Property<int>("DuplicateInterval")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<string>("PromotedProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("BusMessageTypeName")
+                        .IsUnique()
+                        .HasFilter("[BusMessageTypeName] IS NOT NULL");
+
+                    b.HasIndex("Code")
+                        .IsUnique()
+                        .HasFilter("[Code] IS NOT NULL");
+
+                    b.HasIndex("Name")
+                        .IsUnique();
+
+                    b.ToTable("Documents", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 10001,
+                            BusEnabled = false,
+                            DocumentFormat = 0,
+                            DuplicateInterval = 0,
+                            Name = "Aggregation Document",
+                            PromotedProperties = "{}"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DocumentTrail", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int>("Code")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("StateAfter")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("StateBefore")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CreatedOn");
+
+                    b.HasIndex("DocumentId");
+
+                    b.ToTable("DocumentTrail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGateway", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("UrlName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UrlName")
+                        .IsUnique();
+
+                    b.ToTable("ApiGateways", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGatewayPartner", b =>
+                {
+                    b.Property<int>("ApiGatewayId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.HasKey("ApiGatewayId", "PartnerId", "SubscriptionId");
+
+                    b.HasIndex("PartnerId");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("ApiGatewayPartners", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DocumentId");
+
+                    b.ToTable("BusGateways", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGatewayRoute", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("BusGatewayId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("MatchExpression")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("BusGatewayId");
+
+                    b.HasIndex("PartnerId");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("BusGatewayRoutes", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.GlobalAdapterValuesSet", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Values")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("GlobalAdapterValuesSets", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Notifier", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("Inactive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<bool>("RunOnBadResult")
+                        .HasColumnType("bit");
+
+                    b.Property<bool>("RunOnFailedResult")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("RunOnSubscriptions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("RunOnSuccessfulResult")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Notifiers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.OnHoldXchange", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("BadData")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Data")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FileName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("References")
+                        .HasMaxLength(1024)
+                        .HasColumnType("nvarchar(1024)");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("OnHoldXchanges", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AdapterProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Partners", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 1,
+                            Name = "SYSTEM"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.RetryPolicy", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Groups")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("RetryPolicies", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Subscription", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("AggregateOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("AggregationForId")
+                        .HasColumnType("int");
+
+                    b.Property<byte>("AggregationTarget")
+                        .HasColumnType("tinyint");
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("ConsecutiveFailures")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CustomRetryPolicy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DocumentFilter")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("Inactive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool>("IsRunning")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("LastException")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("MapperId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("MapperProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("MatchExpression")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("PausedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ReceiveOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ReceiverId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("ReceiverProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ResponseMessageTypeName")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<int?>("ResponseSubscriptionId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("RetryPolicyId")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("Temporary")
+                        .HasColumnType("bit");
+
+                    b.Property<byte>("Type")
+                        .HasColumnType("tinyint");
+
+                    b.Property<string>("ValidatorId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("ValidatorProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkGroupId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AggregationForId");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("DocumentId");
+
+                    b.HasIndex("PartnerId");
+
+                    b.HasIndex("ResponseSubscriptionId");
+
+                    b.HasIndex("RetryPolicyId");
+
+                    b.HasIndex("WorkGroupId");
+
+                    b.ToTable("Subscriptions", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionCategory", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Code")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Code")
+                        .IsUnique()
+                        .HasFilter("[Code] IS NOT NULL");
+
+                    b.ToTable("SubscriptionCategory");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionTrail", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int>("Code")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("StateAfter")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("StateBefore")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CreatedOn");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("SubscriptionTrail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.WorkGroup", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BusMessageName")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Options")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("WorkGroup");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Xchange", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("CorrelationId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("GroupAttemptCounts")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InputContentType")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("InputHash")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("InputName")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<int>("InputSize")
+                        .HasColumnType("int");
+
+                    b.Property<string>("MapperId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("MapperProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("References")
+                        .HasMaxLength(1024)
+                        .HasColumnType("nvarchar(1024)");
+
+                    b.Property<string>("ResponseMessageTypeName")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<int?>("ResponseSubscriptionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RetryFor")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<DateTime>("StartedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DocumentId");
+
+                    b.HasIndex("InputHash");
+
+                    b.HasIndex("RetryFor");
+
+                    b.HasIndex("StartedOn");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("Xchanges", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeAggregation", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<DateTime>("AggregatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("AggregationXchangeId")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AggregationXchangeId");
+
+                    b.ToTable("XchangeAggregations", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeDelivery", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<DateTime>("DeliveredOn")
+                        .HasColumnType("datetime2");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DeliveredOn");
+
+                    b.ToTable("XchangeDeliveries", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeNotification", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Exception")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("FinishedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("NotifierId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("NotifierName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("Success")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("XchangeId")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("XchangeNotifications", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangePromotedProperties", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("Hits")
+                        .HasMaxLength(2000)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(2000)");
+
+                    b.Property<string>("Properties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PropertiesRaw")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("PropertiesRaw");
+
+                    b.ToTable("XchangePromotedProperties", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeResult", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("Exception")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("FinishedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("OutputBad")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("OutputContentType")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("OutputHash")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("OutputName")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<int>("OutputSize")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("ResponseBad")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ResponseContentType")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("ResponseHash")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("ResponseName")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<int>("ResponseSize")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ResponseXchangeId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("Success")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("XchangeResults", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.RunFlagUpdater+RunningResult", b =>
+                {
+                    b.Property<bool>("IsRunning")
+                        .HasColumnType("bit");
+
+                    b.ToTable((string)null);
+
+                    b.ToView(null, (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.JobExecution", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("bigint")
+                        .HasColumnName("id");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<long>("Id"));
+
+                    b.Property<string>("Context")
+                        .HasColumnType("nvarchar(max)")
+                        .HasColumnName("context");
+
+                    b.Property<long?>("DurationMs")
+                        .HasColumnType("bigint")
+                        .HasColumnName("duration_ms");
+
+                    b.Property<DateTime?>("EndTimeUtc")
+                        .HasColumnType("datetime2")
+                        .HasColumnName("end_time_utc");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("nvarchar(max)")
+                        .HasColumnName("error");
+
+                    b.Property<string>("FireInstanceId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("fire_instance_id");
+
+                    b.Property<string>("JobGroup")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_name");
+
+                    b.Property<string>("JobTypeName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_type_name");
+
+                    b.Property<string>("Node")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("node");
+
+                    b.Property<DateTime>("StartTimeUtc")
+                        .HasColumnType("datetime2")
+                        .HasColumnName("start_time_utc");
+
+                    b.Property<bool?>("Success")
+                        .HasColumnType("bit")
+                        .HasColumnName("success");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("FireInstanceId")
+                        .IsUnique()
+                        .HasDatabaseName("idx_je_fire_instance_id");
+
+                    b.HasIndex("StartTimeUtc")
+                        .HasDatabaseName("idx_je_start_time");
+
+                    b.HasIndex("Success")
+                        .HasDatabaseName("idx_je_success");
+
+                    b.HasIndex("JobGroup", "JobName", "StartTimeUtc")
+                        .HasDatabaseName("idx_je_group_name_start");
+
+                    b.ToTable("job_executions", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzBlobTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<byte[]>("BlobData")
+                        .HasColumnType("varbinary(max)")
+                        .HasColumnName("blob_data");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_blob_triggers", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCalendar", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("calendar_name");
+
+                    b.Property<byte[]>("Calendar")
+                        .IsRequired()
+                        .HasColumnType("varbinary(max)")
+                        .HasColumnName("calendar");
+
+                    b.HasKey("SchedulerName", "CalendarName");
+
+                    b.ToTable("QRTZ_calendars", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCronTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("CronExpression")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("cron_expression");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("time_zone_id");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_cron_triggers", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzFiredTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("EntryId")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("entry_id");
+
+                    b.Property<long>("FiredTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("fired_time");
+
+                    b.Property<string>("InstanceName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("instance_name");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("bit")
+                        .HasColumnName("is_nonconcurrent");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_name");
+
+                    b.Property<int>("Priority")
+                        .HasColumnType("int")
+                        .HasColumnName("priority");
+
+                    b.Property<bool?>("RequestsRecovery")
+                        .HasColumnType("bit")
+                        .HasColumnName("requests_recovery");
+
+                    b.Property<long>("ScheduledTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("sched_time");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("state");
+
+                    b.Property<string>("TriggerGroup")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("TriggerName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_name");
+
+                    b.HasKey("SchedulerName", "EntryId");
+
+                    b.HasIndex("InstanceName")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_inst_name");
+
+                    b.HasIndex("JobGroup")
+                        .HasDatabaseName("idx_QRTZ_ft_job_group");
+
+                    b.HasIndex("JobName")
+                        .HasDatabaseName("idx_QRTZ_ft_job_name");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("idx_QRTZ_ft_job_req_recovery");
+
+                    b.HasIndex("TriggerGroup")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_group");
+
+                    b.HasIndex("TriggerName")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_name");
+
+                    b.HasIndex("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_nm_gp");
+
+                    b.ToTable("QRTZ_fired_triggers", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzJobDetail", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_name");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("description");
+
+                    b.Property<bool>("IsDurable")
+                        .HasColumnType("bit")
+                        .HasColumnName("is_durable");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("bit")
+                        .HasColumnName("is_nonconcurrent");
+
+                    b.Property<bool>("IsUpdateData")
+                        .HasColumnType("bit")
+                        .HasColumnName("is_update_data");
+
+                    b.Property<string>("JobClassName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_class_name");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("varbinary(max)")
+                        .HasColumnName("job_data");
+
+                    b.Property<bool>("RequestsRecovery")
+                        .HasColumnType("bit")
+                        .HasColumnName("requests_recovery");
+
+                    b.HasKey("SchedulerName", "JobName", "JobGroup");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("idx_j_req_recovery");
+
+                    b.ToTable("QRTZ_job_details", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzLock", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("LockName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("lock_name");
+
+                    b.HasKey("SchedulerName", "LockName");
+
+                    b.ToTable("QRTZ_locks", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzPausedTriggerGroup", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.HasKey("SchedulerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_paused_trigger_grps", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSchedulerState", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("InstanceName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("instance_name");
+
+                    b.Property<long>("CheckInInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("checkin_interval");
+
+                    b.Property<long>("LastCheckInTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("last_checkin_time");
+
+                    b.HasKey("SchedulerName", "InstanceName");
+
+                    b.ToTable("QRTZ_scheduler_state", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<bool?>("BooleanProperty1")
+                        .HasColumnType("bit")
+                        .HasColumnName("bool_prop_1");
+
+                    b.Property<bool?>("BooleanProperty2")
+                        .HasColumnType("bit")
+                        .HasColumnName("bool_prop_2");
+
+                    b.Property<decimal?>("DecimalProperty1")
+                        .HasColumnType("numeric")
+                        .HasColumnName("dec_prop_1");
+
+                    b.Property<decimal?>("DecimalProperty2")
+                        .HasColumnType("numeric")
+                        .HasColumnName("dec_prop_2");
+
+                    b.Property<int?>("IntegerProperty1")
+                        .HasColumnType("int")
+                        .HasColumnName("int_prop_1");
+
+                    b.Property<int?>("IntegerProperty2")
+                        .HasColumnType("int")
+                        .HasColumnName("int_prop_2");
+
+                    b.Property<long?>("LongProperty1")
+                        .HasColumnType("bigint")
+                        .HasColumnName("long_prop_1");
+
+                    b.Property<long?>("LongProperty2")
+                        .HasColumnType("bigint")
+                        .HasColumnName("long_prop_2");
+
+                    b.Property<string>("StringProperty1")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("str_prop_1");
+
+                    b.Property<string>("StringProperty2")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("str_prop_2");
+
+                    b.Property<string>("StringProperty3")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("str_prop_3");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("time_zone_id");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_simprop_triggers", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimpleTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<long>("RepeatCount")
+                        .HasColumnType("bigint")
+                        .HasColumnName("repeat_count");
+
+                    b.Property<long>("RepeatInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("repeat_interval");
+
+                    b.Property<long>("TimesTriggered")
+                        .HasColumnType("bigint")
+                        .HasColumnName("times_triggered");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_simple_triggers", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("calendar_name");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("description");
+
+                    b.Property<long?>("EndTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("end_time");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("varbinary(max)")
+                        .HasColumnName("job_data");
+
+                    b.Property<string>("JobGroup")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_name");
+
+                    b.Property<int?>("MisfireInstruction")
+                        .HasColumnType("int")
+                        .HasColumnName("misfire_instr");
+
+                    b.Property<long?>("NextFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("next_fire_time");
+
+                    b.Property<long?>("PreviousFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("prev_fire_time");
+
+                    b.Property<int?>("Priority")
+                        .HasColumnType("int")
+                        .HasColumnName("priority");
+
+                    b.Property<long>("StartTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("start_time");
+
+                    b.Property<string>("TriggerState")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_state");
+
+                    b.Property<string>("TriggerType")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_type");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.HasIndex("NextFireTime")
+                        .HasDatabaseName("idx_t_next_fire_time");
+
+                    b.HasIndex("TriggerState")
+                        .HasDatabaseName("idx_t_state");
+
+                    b.HasIndex("NextFireTime", "TriggerState")
+                        .HasDatabaseName("idx_t_nft_st");
+
+                    b.HasIndex("SchedulerName", "JobName", "JobGroup");
+
+                    b.ToTable("QRTZ_triggers", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.AccountRoleLink", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Accounts.Account", null)
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Accounts.Role", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Accounts.Account", null)
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DocumentTrail", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", "Document")
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Document");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGatewayPartner", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Gateway.ApiGateway", "ApiGateway")
+                        .WithMany("Partners")
+                        .HasForeignKey("ApiGatewayId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Partner", "Partner")
+                        .WithMany()
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("ApiGateway");
+
+                    b.Navigation("Partner");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGatewayRoute", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Gateway.BusGateway", "BusGateway")
+                        .WithMany("Routes")
+                        .HasForeignKey("BusGatewayId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Partner", "Partner")
+                        .WithMany()
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("BusGateway");
+
+                    b.Navigation("Partner");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.OwnsMany("SW.Bitween.Domain.ApiCredential", "ApiCredentials", b1 =>
+                        {
+                            b1.Property<int>("PartnerId")
+                                .HasColumnType("int");
+
+                            b1.Property<int>("Id")
+                                .ValueGeneratedOnAdd()
+                                .HasColumnType("int");
+
+                            SqlServerPropertyBuilderExtensions.UseIdentityColumn(b1.Property<int>("Id"));
+
+                            b1.Property<string>("Key")
+                                .IsRequired()
+                                .HasMaxLength(500)
+                                .IsUnicode(false)
+                                .HasColumnType("varchar(500)");
+
+                            b1.Property<string>("Name")
+                                .IsRequired()
+                                .HasMaxLength(500)
+                                .HasColumnType("nvarchar(500)");
+
+                            b1.HasKey("PartnerId", "Id");
+
+                            b1.HasIndex("Key")
+                                .IsUnique();
+
+                            b1.ToTable("PartnerApiCredentials", (string)null);
+
+                            b1.WithOwner()
+                                .HasForeignKey("PartnerId");
+
+                            b1.HasData(
+                                new
+                                {
+                                    PartnerId = 1,
+                                    Id = 1,
+                                    Key = "7facc758283844b49cc4ffd26a75b1de",
+                                    Name = "default"
+                                });
+                        });
+
+                    b.Navigation("ApiCredentials");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Subscription", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Subscription", null)
+                        .WithMany()
+                        .HasForeignKey("AggregationForId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("FK_Subscriptions_AggFor");
+
+                    b.HasOne("SW.Bitween.Domain.SubscriptionCategory", "Category")
+                        .WithMany()
+                        .HasForeignKey("CategoryId");
+
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Partner", null)
+                        .WithMany("Subscriptions")
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", null)
+                        .WithMany()
+                        .HasForeignKey("ResponseSubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("FK_Subscriptions_RespSub");
+
+                    b.HasOne("SW.Bitween.Domain.RetryPolicy", "RetryPolicy")
+                        .WithMany()
+                        .HasForeignKey("RetryPolicyId")
+                        .OnDelete(DeleteBehavior.SetNull);
+
+                    b.HasOne("SW.Bitween.Domain.WorkGroup", "WorkGroup")
+                        .WithMany()
+                        .HasForeignKey("WorkGroupId");
+
+                    b.OwnsMany("SW.Bitween.Domain.Schedule", "Schedules", b1 =>
+                        {
+                            b1.Property<int>("SubscriptionId")
+                                .HasColumnType("int");
+
+                            b1.Property<int>("Id")
+                                .ValueGeneratedOnAdd()
+                                .HasColumnType("int");
+
+                            SqlServerPropertyBuilderExtensions.UseIdentityColumn(b1.Property<int>("Id"));
+
+                            b1.Property<bool>("Backwards")
+                                .HasColumnType("bit");
+
+                            b1.Property<long>("On")
+                                .HasColumnType("bigint");
+
+                            b1.Property<byte>("Recurrence")
+                                .HasColumnType("tinyint");
+
+                            b1.HasKey("SubscriptionId", "Id");
+
+                            b1.ToTable("SubscriptionSchedules", (string)null);
+
+                            b1.WithOwner()
+                                .HasForeignKey("SubscriptionId");
+                        });
+
+                    b.Navigation("Category");
+
+                    b.Navigation("RetryPolicy");
+
+                    b.Navigation("Schedules");
+
+                    b.Navigation("WorkGroup");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionTrail", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Xchange", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeAggregation", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeAggregation", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeDelivery", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeDelivery", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangePromotedProperties", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangePromotedProperties", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeResult", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeResult", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzBlobTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("BlobTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCronTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("CronTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("SimplePropertyTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimpleTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("SimpleTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzJobDetail", "JobDetail")
+                        .WithMany("Triggers")
+                        .HasForeignKey("SchedulerName", "JobName", "JobGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("JobDetail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGateway", b =>
+                {
+                    b.Navigation("Partners");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.Navigation("Routes");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.Navigation("Subscriptions");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzJobDetail", b =>
+                {
+                    b.Navigation("Triggers");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.Navigation("BlobTriggers");
+
+                    b.Navigation("CronTriggers");
+
+                    b.Navigation("SimplePropertyTriggers");
+
+                    b.Navigation("SimpleTriggers");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/SW.Bitween.MsSql/Migrations/20260726151528_DropAccountPhone.cs b/SW.Bitween.MsSql/Migrations/20260726151528_DropAccountPhone.cs
new file mode 100644
index 00000000..00cb7c14
--- /dev/null
+++ b/SW.Bitween.MsSql/Migrations/20260726151528_DropAccountPhone.cs
@@ -0,0 +1,37 @@
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace SW.Bitween.MsSql.Migrations
+{
+    /// <inheritdoc />
+    public partial class DropAccountPhone : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropColumn(
+                name: "Phone",
+                table: "Accounts");
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.AddColumn<string>(
+                name: "Phone",
+                table: "Accounts",
+                type: "varchar(20)",
+                unicode: false,
+                maxLength: 20,
+                nullable: true);
+
+            migrationBuilder.UpdateData(
+                table: "Accounts",
+                keyColumn: "Id",
+                keyValue: 9999,
+                column: "Phone",
+                value: null);
+        }
+    }
+}
diff --git a/SW.Bitween.MsSql/Migrations/20260727133106_AddSettings.Designer.cs b/SW.Bitween.MsSql/Migrations/20260727133106_AddSettings.Designer.cs
new file mode 100644
index 00000000..690c1db1
--- /dev/null
+++ b/SW.Bitween.MsSql/Migrations/20260727133106_AddSettings.Designer.cs
@@ -0,0 +1,2028 @@
+// <auto-generated />
+using System;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using SW.Bitween.MsSql;
+
+#nullable disable
+
+namespace SW.Bitween.MsSql.Migrations
+{
+    [DbContext(typeof(BitweenDbContext))]
+    [Migration("20260727133106_AddSettings")]
+    partial class AddSettings
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasAnnotation("ProductVersion", "8.0.23")
+                .HasAnnotation("Relational:MaxIdentifierLength", 128);
+
+            SqlServerModelBuilderExtensions.UseIdentityColumns(modelBuilder);
+
+            modelBuilder.HasSequence("DocumentIds");
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.Account", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("Deleted")
+                        .HasColumnType("bit");
+
+                    b.Property<bool>("Disabled")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("DisplayName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<byte>("EmailProvider")
+                        .HasColumnType("tinyint");
+
+                    b.Property<byte>("LoginMethods")
+                        .HasColumnType("tinyint");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Password")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<int>("Role")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Email")
+                        .IsUnique()
+                        .HasFilter("[Email] IS NOT NULL");
+
+                    b.ToTable("Accounts", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 9999,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Deleted = false,
+                            Disabled = false,
+                            DisplayName = "Admin",
+                            Email = "admin@Bitween.systems",
+                            EmailProvider = (byte)0,
+                            LoginMethods = (byte)2,
+                            Password = "$SWHASH$V1$10000$VQCi48eitH4Ml5juvBMOFZrMdQwBbhuIQVXe6RR7qJdDF2bJ",
+                            Role = 0
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.AccountRoleLink", b =>
+                {
+                    b.Property<int>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("RoleId")
+                        .HasColumnType("int");
+
+                    b.HasKey("AccountId", "RoleId");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AccountRoles", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<int>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<byte>("LoginMethod")
+                        .HasColumnType("tinyint");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.ToTable("RefreshTokens", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.Role", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasMaxLength(500)
+                        .HasColumnType("nvarchar(500)");
+
+                    b.Property<bool>("IsSystem")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("Permissions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Name")
+                        .IsUnique();
+
+                    b.ToTable("Roles", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 1,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Full access to everything, including members, roles and settings.",
+                            IsSystem = true,
+                            Name = "Administrator",
+                            Permissions = "[]"
+                        },
+                        new
+                        {
+                            Id = 2,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Runs and configures integrations. Can't manage members, roles or settings.",
+                            IsSystem = true,
+                            Name = "Member",
+                            Permissions = "[]"
+                        },
+                        new
+                        {
+                            Id = 3,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Read-only access to integrations, exchanges and configuration.",
+                            IsSystem = true,
+                            Name = "Viewer",
+                            Permissions = "[]"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DelayedRetry", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("GroupAttemptCounts")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("On")
+                        .HasColumnType("datetime2");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("On");
+
+                    b.ToTable("DelayedRetries", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Document", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int")
+                        .HasDefaultValueSql("NEXT VALUE FOR [DocumentIds]");
+
+                    SqlServerPropertyBuilderExtensions.UseSequence(b.Property<int>("Id"), "DocumentIds");
+
+                    b.Property<bool>("BusEnabled")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("BusMessageTypeName")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<string>("Code")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<bool?>("DisregardsUnfilteredMessages")
+                        .HasColumnType("bit");
+
+                    b.Property<int>("DocumentFormat")
+                        .HasColumnType("int");
+
+                    b.Property<int>("DuplicateInterval")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<string>("PromotedProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("BusMessageTypeName")
+                        .IsUnique()
+                        .HasFilter("[BusMessageTypeName] IS NOT NULL");
+
+                    b.HasIndex("Code")
+                        .IsUnique()
+                        .HasFilter("[Code] IS NOT NULL");
+
+                    b.HasIndex("Name")
+                        .IsUnique();
+
+                    b.ToTable("Documents", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 10001,
+                            BusEnabled = false,
+                            DocumentFormat = 0,
+                            DuplicateInterval = 0,
+                            Name = "Aggregation Document",
+                            PromotedProperties = "{}"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DocumentTrail", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int>("Code")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("StateAfter")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("StateBefore")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CreatedOn");
+
+                    b.HasIndex("DocumentId");
+
+                    b.ToTable("DocumentTrail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGateway", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<string>("UrlName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UrlName")
+                        .IsUnique();
+
+                    b.ToTable("ApiGateways", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGatewayPartner", b =>
+                {
+                    b.Property<int>("ApiGatewayId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.HasKey("ApiGatewayId", "PartnerId", "SubscriptionId");
+
+                    b.HasIndex("PartnerId");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("ApiGatewayPartners", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DocumentId");
+
+                    b.ToTable("BusGateways", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGatewayRoute", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("BusGatewayId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("MatchExpression")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("BusGatewayId");
+
+                    b.HasIndex("PartnerId");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("BusGatewayRoutes", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.GlobalAdapterValuesSet", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Values")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("GlobalAdapterValuesSets", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Notifier", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("Inactive")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<bool>("RunOnBadResult")
+                        .HasColumnType("bit");
+
+                    b.Property<bool>("RunOnFailedResult")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("RunOnSubscriptions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("RunOnSuccessfulResult")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Notifiers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.OnHoldXchange", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("BadData")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("Data")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("FileName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("References")
+                        .HasMaxLength(1024)
+                        .HasColumnType("nvarchar(1024)");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("OnHoldXchanges", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AdapterProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Partners", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 1,
+                            Name = "SYSTEM"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.RetryPolicy", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Groups")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("RetryPolicies", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Setting", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Value")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Settings", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Subscription", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("AggregateOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("AggregationForId")
+                        .HasColumnType("int");
+
+                    b.Property<byte>("AggregationTarget")
+                        .HasColumnType("tinyint");
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("ConsecutiveFailures")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CustomRetryPolicy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("DocumentFilter")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("Inactive")
+                        .HasColumnType("bit");
+
+                    b.Property<bool>("IsRunning")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("LastException")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("MapperId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("MapperProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("MatchExpression")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("PausedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<DateTime?>("ReceiveOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ReceiverId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("ReceiverProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ResponseMessageTypeName")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<int?>("ResponseSubscriptionId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("RetryPolicyId")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("Temporary")
+                        .HasColumnType("bit");
+
+                    b.Property<byte>("Type")
+                        .HasColumnType("tinyint");
+
+                    b.Property<string>("ValidatorId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("ValidatorProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("WorkGroupId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AggregationForId");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("DocumentId");
+
+                    b.HasIndex("PartnerId");
+
+                    b.HasIndex("ResponseSubscriptionId");
+
+                    b.HasIndex("RetryPolicyId");
+
+                    b.HasIndex("WorkGroupId");
+
+                    b.ToTable("Subscriptions", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionCategory", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Code")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Code")
+                        .IsUnique()
+                        .HasFilter("[Code] IS NOT NULL");
+
+                    b.ToTable("SubscriptionCategory");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionTrail", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("nvarchar(50)");
+
+                    b.Property<int>("Code")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("StateAfter")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("StateBefore")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CreatedOn");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("SubscriptionTrail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.WorkGroup", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BusMessageName")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("Options")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("WorkGroup");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Xchange", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("CorrelationId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("GroupAttemptCounts")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("InputContentType")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("InputHash")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("InputName")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<int>("InputSize")
+                        .HasColumnType("int");
+
+                    b.Property<string>("MapperId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("MapperProperties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("References")
+                        .HasMaxLength(1024)
+                        .HasColumnType("nvarchar(1024)");
+
+                    b.Property<string>("ResponseMessageTypeName")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<int?>("ResponseSubscriptionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RetryFor")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<DateTime>("StartedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int?>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DocumentId");
+
+                    b.HasIndex("InputHash");
+
+                    b.HasIndex("RetryFor");
+
+                    b.HasIndex("StartedOn");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("Xchanges", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeAggregation", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<DateTime>("AggregatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("AggregationXchangeId")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AggregationXchangeId");
+
+                    b.ToTable("XchangeAggregations", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeDelivery", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<DateTime>("DeliveredOn")
+                        .HasColumnType("datetime2");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DeliveredOn");
+
+                    b.ToTable("XchangeDeliveries", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeNotification", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Exception")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("FinishedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<int>("NotifierId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("NotifierName")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("Success")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("XchangeId")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("XchangeNotifications", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangePromotedProperties", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("Hits")
+                        .HasMaxLength(2000)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(2000)");
+
+                    b.Property<string>("Properties")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<string>("PropertiesRaw")
+                        .HasColumnType("nvarchar(450)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("PropertiesRaw");
+
+                    b.ToTable("XchangePromotedProperties", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeResult", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("Exception")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("FinishedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<bool>("OutputBad")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("OutputContentType")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("OutputHash")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("OutputName")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<int>("OutputSize")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("ResponseBad")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ResponseContentType")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("ResponseHash")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("ResponseName")
+                        .HasMaxLength(200)
+                        .HasColumnType("nvarchar(200)");
+
+                    b.Property<int>("ResponseSize")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ResponseXchangeId")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<bool>("Success")
+                        .HasColumnType("bit");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("XchangeResults", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.RunFlagUpdater+RunningResult", b =>
+                {
+                    b.Property<bool>("IsRunning")
+                        .HasColumnType("bit");
+
+                    b.ToTable((string)null);
+
+                    b.ToView(null, (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.JobExecution", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("bigint")
+                        .HasColumnName("id");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<long>("Id"));
+
+                    b.Property<string>("Context")
+                        .HasColumnType("nvarchar(max)")
+                        .HasColumnName("context");
+
+                    b.Property<long?>("DurationMs")
+                        .HasColumnType("bigint")
+                        .HasColumnName("duration_ms");
+
+                    b.Property<DateTime?>("EndTimeUtc")
+                        .HasColumnType("datetime2")
+                        .HasColumnName("end_time_utc");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("nvarchar(max)")
+                        .HasColumnName("error");
+
+                    b.Property<string>("FireInstanceId")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("fire_instance_id");
+
+                    b.Property<string>("JobGroup")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_name");
+
+                    b.Property<string>("JobTypeName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_type_name");
+
+                    b.Property<string>("Node")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("node");
+
+                    b.Property<DateTime>("StartTimeUtc")
+                        .HasColumnType("datetime2")
+                        .HasColumnName("start_time_utc");
+
+                    b.Property<bool?>("Success")
+                        .HasColumnType("bit")
+                        .HasColumnName("success");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("FireInstanceId")
+                        .IsUnique()
+                        .HasDatabaseName("idx_je_fire_instance_id");
+
+                    b.HasIndex("StartTimeUtc")
+                        .HasDatabaseName("idx_je_start_time");
+
+                    b.HasIndex("Success")
+                        .HasDatabaseName("idx_je_success");
+
+                    b.HasIndex("JobGroup", "JobName", "StartTimeUtc")
+                        .HasDatabaseName("idx_je_group_name_start");
+
+                    b.ToTable("job_executions", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzBlobTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<byte[]>("BlobData")
+                        .HasColumnType("varbinary(max)")
+                        .HasColumnName("blob_data");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_blob_triggers", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCalendar", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("calendar_name");
+
+                    b.Property<byte[]>("Calendar")
+                        .IsRequired()
+                        .HasColumnType("varbinary(max)")
+                        .HasColumnName("calendar");
+
+                    b.HasKey("SchedulerName", "CalendarName");
+
+                    b.ToTable("QRTZ_calendars", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCronTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("CronExpression")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("cron_expression");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("time_zone_id");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_cron_triggers", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzFiredTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("EntryId")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("entry_id");
+
+                    b.Property<long>("FiredTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("fired_time");
+
+                    b.Property<string>("InstanceName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("instance_name");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("bit")
+                        .HasColumnName("is_nonconcurrent");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_name");
+
+                    b.Property<int>("Priority")
+                        .HasColumnType("int")
+                        .HasColumnName("priority");
+
+                    b.Property<bool?>("RequestsRecovery")
+                        .HasColumnType("bit")
+                        .HasColumnName("requests_recovery");
+
+                    b.Property<long>("ScheduledTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("sched_time");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("state");
+
+                    b.Property<string>("TriggerGroup")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("TriggerName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_name");
+
+                    b.HasKey("SchedulerName", "EntryId");
+
+                    b.HasIndex("InstanceName")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_inst_name");
+
+                    b.HasIndex("JobGroup")
+                        .HasDatabaseName("idx_QRTZ_ft_job_group");
+
+                    b.HasIndex("JobName")
+                        .HasDatabaseName("idx_QRTZ_ft_job_name");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("idx_QRTZ_ft_job_req_recovery");
+
+                    b.HasIndex("TriggerGroup")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_group");
+
+                    b.HasIndex("TriggerName")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_name");
+
+                    b.HasIndex("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_nm_gp");
+
+                    b.ToTable("QRTZ_fired_triggers", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzJobDetail", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_name");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("description");
+
+                    b.Property<bool>("IsDurable")
+                        .HasColumnType("bit")
+                        .HasColumnName("is_durable");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("bit")
+                        .HasColumnName("is_nonconcurrent");
+
+                    b.Property<bool>("IsUpdateData")
+                        .HasColumnType("bit")
+                        .HasColumnName("is_update_data");
+
+                    b.Property<string>("JobClassName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_class_name");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("varbinary(max)")
+                        .HasColumnName("job_data");
+
+                    b.Property<bool>("RequestsRecovery")
+                        .HasColumnType("bit")
+                        .HasColumnName("requests_recovery");
+
+                    b.HasKey("SchedulerName", "JobName", "JobGroup");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("idx_j_req_recovery");
+
+                    b.ToTable("QRTZ_job_details", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzLock", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("LockName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("lock_name");
+
+                    b.HasKey("SchedulerName", "LockName");
+
+                    b.ToTable("QRTZ_locks", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzPausedTriggerGroup", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.HasKey("SchedulerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_paused_trigger_grps", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSchedulerState", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("InstanceName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("instance_name");
+
+                    b.Property<long>("CheckInInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("checkin_interval");
+
+                    b.Property<long>("LastCheckInTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("last_checkin_time");
+
+                    b.HasKey("SchedulerName", "InstanceName");
+
+                    b.ToTable("QRTZ_scheduler_state", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<bool?>("BooleanProperty1")
+                        .HasColumnType("bit")
+                        .HasColumnName("bool_prop_1");
+
+                    b.Property<bool?>("BooleanProperty2")
+                        .HasColumnType("bit")
+                        .HasColumnName("bool_prop_2");
+
+                    b.Property<decimal?>("DecimalProperty1")
+                        .HasColumnType("numeric")
+                        .HasColumnName("dec_prop_1");
+
+                    b.Property<decimal?>("DecimalProperty2")
+                        .HasColumnType("numeric")
+                        .HasColumnName("dec_prop_2");
+
+                    b.Property<int?>("IntegerProperty1")
+                        .HasColumnType("int")
+                        .HasColumnName("int_prop_1");
+
+                    b.Property<int?>("IntegerProperty2")
+                        .HasColumnType("int")
+                        .HasColumnName("int_prop_2");
+
+                    b.Property<long?>("LongProperty1")
+                        .HasColumnType("bigint")
+                        .HasColumnName("long_prop_1");
+
+                    b.Property<long?>("LongProperty2")
+                        .HasColumnType("bigint")
+                        .HasColumnName("long_prop_2");
+
+                    b.Property<string>("StringProperty1")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("str_prop_1");
+
+                    b.Property<string>("StringProperty2")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("str_prop_2");
+
+                    b.Property<string>("StringProperty3")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("str_prop_3");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("time_zone_id");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_simprop_triggers", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimpleTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<long>("RepeatCount")
+                        .HasColumnType("bigint")
+                        .HasColumnName("repeat_count");
+
+                    b.Property<long>("RepeatInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("repeat_interval");
+
+                    b.Property<long>("TimesTriggered")
+                        .HasColumnType("bigint")
+                        .HasColumnName("times_triggered");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_simple_triggers", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("calendar_name");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("description");
+
+                    b.Property<long?>("EndTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("end_time");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("varbinary(max)")
+                        .HasColumnName("job_data");
+
+                    b.Property<string>("JobGroup")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("job_name");
+
+                    b.Property<int?>("MisfireInstruction")
+                        .HasColumnType("int")
+                        .HasColumnName("misfire_instr");
+
+                    b.Property<long?>("NextFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("next_fire_time");
+
+                    b.Property<long?>("PreviousFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("prev_fire_time");
+
+                    b.Property<int?>("Priority")
+                        .HasColumnType("int")
+                        .HasColumnName("priority");
+
+                    b.Property<long>("StartTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("start_time");
+
+                    b.Property<string>("TriggerState")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_state");
+
+                    b.Property<string>("TriggerType")
+                        .IsRequired()
+                        .HasColumnType("nvarchar(450)")
+                        .HasColumnName("trigger_type");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.HasIndex("NextFireTime")
+                        .HasDatabaseName("idx_t_next_fire_time");
+
+                    b.HasIndex("TriggerState")
+                        .HasDatabaseName("idx_t_state");
+
+                    b.HasIndex("NextFireTime", "TriggerState")
+                        .HasDatabaseName("idx_t_nft_st");
+
+                    b.HasIndex("SchedulerName", "JobName", "JobGroup");
+
+                    b.ToTable("QRTZ_triggers", "dbo");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.AccountRoleLink", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Accounts.Account", null)
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Accounts.Role", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Accounts.Account", null)
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DocumentTrail", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", "Document")
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Document");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGatewayPartner", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Gateway.ApiGateway", "ApiGateway")
+                        .WithMany("Partners")
+                        .HasForeignKey("ApiGatewayId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Partner", "Partner")
+                        .WithMany()
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("ApiGateway");
+
+                    b.Navigation("Partner");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGatewayRoute", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Gateway.BusGateway", "BusGateway")
+                        .WithMany("Routes")
+                        .HasForeignKey("BusGatewayId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Partner", "Partner")
+                        .WithMany()
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("BusGateway");
+
+                    b.Navigation("Partner");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.OwnsMany("SW.Bitween.Domain.ApiCredential", "ApiCredentials", b1 =>
+                        {
+                            b1.Property<int>("PartnerId")
+                                .HasColumnType("int");
+
+                            b1.Property<int>("Id")
+                                .ValueGeneratedOnAdd()
+                                .HasColumnType("int");
+
+                            SqlServerPropertyBuilderExtensions.UseIdentityColumn(b1.Property<int>("Id"));
+
+                            b1.Property<string>("Key")
+                                .IsRequired()
+                                .HasMaxLength(500)
+                                .IsUnicode(false)
+                                .HasColumnType("varchar(500)");
+
+                            b1.Property<string>("Name")
+                                .IsRequired()
+                                .HasMaxLength(500)
+                                .HasColumnType("nvarchar(500)");
+
+                            b1.HasKey("PartnerId", "Id");
+
+                            b1.HasIndex("Key")
+                                .IsUnique();
+
+                            b1.ToTable("PartnerApiCredentials", (string)null);
+
+                            b1.WithOwner()
+                                .HasForeignKey("PartnerId");
+
+                            b1.HasData(
+                                new
+                                {
+                                    PartnerId = 1,
+                                    Id = 1,
+                                    Key = "7facc758283844b49cc4ffd26a75b1de",
+                                    Name = "default"
+                                });
+                        });
+
+                    b.Navigation("ApiCredentials");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Subscription", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Subscription", null)
+                        .WithMany()
+                        .HasForeignKey("AggregationForId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("FK_Subscriptions_AggFor");
+
+                    b.HasOne("SW.Bitween.Domain.SubscriptionCategory", "Category")
+                        .WithMany()
+                        .HasForeignKey("CategoryId");
+
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Partner", null)
+                        .WithMany("Subscriptions")
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", null)
+                        .WithMany()
+                        .HasForeignKey("ResponseSubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("FK_Subscriptions_RespSub");
+
+                    b.HasOne("SW.Bitween.Domain.RetryPolicy", "RetryPolicy")
+                        .WithMany()
+                        .HasForeignKey("RetryPolicyId")
+                        .OnDelete(DeleteBehavior.SetNull);
+
+                    b.HasOne("SW.Bitween.Domain.WorkGroup", "WorkGroup")
+                        .WithMany()
+                        .HasForeignKey("WorkGroupId");
+
+                    b.OwnsMany("SW.Bitween.Domain.Schedule", "Schedules", b1 =>
+                        {
+                            b1.Property<int>("SubscriptionId")
+                                .HasColumnType("int");
+
+                            b1.Property<int>("Id")
+                                .ValueGeneratedOnAdd()
+                                .HasColumnType("int");
+
+                            SqlServerPropertyBuilderExtensions.UseIdentityColumn(b1.Property<int>("Id"));
+
+                            b1.Property<bool>("Backwards")
+                                .HasColumnType("bit");
+
+                            b1.Property<long>("On")
+                                .HasColumnType("bigint");
+
+                            b1.Property<byte>("Recurrence")
+                                .HasColumnType("tinyint");
+
+                            b1.HasKey("SubscriptionId", "Id");
+
+                            b1.ToTable("SubscriptionSchedules", (string)null);
+
+                            b1.WithOwner()
+                                .HasForeignKey("SubscriptionId");
+                        });
+
+                    b.Navigation("Category");
+
+                    b.Navigation("RetryPolicy");
+
+                    b.Navigation("Schedules");
+
+                    b.Navigation("WorkGroup");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionTrail", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Xchange", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeAggregation", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeAggregation", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeDelivery", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeDelivery", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangePromotedProperties", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangePromotedProperties", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeResult", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeResult", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzBlobTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("BlobTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCronTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("CronTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("SimplePropertyTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimpleTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("SimpleTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzJobDetail", "JobDetail")
+                        .WithMany("Triggers")
+                        .HasForeignKey("SchedulerName", "JobName", "JobGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("JobDetail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGateway", b =>
+                {
+                    b.Navigation("Partners");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.Navigation("Routes");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.Navigation("Subscriptions");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzJobDetail", b =>
+                {
+                    b.Navigation("Triggers");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.Navigation("BlobTriggers");
+
+                    b.Navigation("CronTriggers");
+
+                    b.Navigation("SimplePropertyTriggers");
+
+                    b.Navigation("SimpleTriggers");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/SW.Bitween.MsSql/Migrations/20260727133106_AddSettings.cs b/SW.Bitween.MsSql/Migrations/20260727133106_AddSettings.cs
new file mode 100644
index 00000000..82c5365a
--- /dev/null
+++ b/SW.Bitween.MsSql/Migrations/20260727133106_AddSettings.cs
@@ -0,0 +1,38 @@
+using System;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace SW.Bitween.MsSql.Migrations
+{
+    /// <inheritdoc />
+    public partial class AddSettings : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.CreateTable(
+                name: "Settings",
+                columns: table => new
+                {
+                    Id = table.Column<string>(type: "varchar(200)", unicode: false, maxLength: 200, nullable: false),
+                    Value = table.Column<string>(type: "nvarchar(max)", nullable: true),
+                    CreatedOn = table.Column<DateTime>(type: "datetime2", nullable: false),
+                    CreatedBy = table.Column<string>(type: "nvarchar(max)", nullable: true),
+                    ModifiedOn = table.Column<DateTime>(type: "datetime2", nullable: true),
+                    ModifiedBy = table.Column<string>(type: "nvarchar(max)", nullable: true)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_Settings", x => x.Id);
+                });
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropTable(
+                name: "Settings");
+        }
+    }
+}
diff --git a/SW.Bitween.MsSql/Migrations/BitweenDbContextModelSnapshot.cs b/SW.Bitween.MsSql/Migrations/BitweenDbContextModelSnapshot.cs
index 43e9d519..8b393eb8 100644
--- a/SW.Bitween.MsSql/Migrations/BitweenDbContextModelSnapshot.cs
+++ b/SW.Bitween.MsSql/Migrations/BitweenDbContextModelSnapshot.cs
@@ -22,6 +22,8 @@ protected override void BuildModel(ModelBuilder modelBuilder)
 
             SqlServerModelBuilderExtensions.UseIdentityColumns(modelBuilder);
 
+            modelBuilder.HasSequence("DocumentIds");
+
             modelBuilder.Entity("SW.Bitween.Domain.Accounts.Account", b =>
                 {
                     b.Property<int>("Id")
@@ -69,11 +71,6 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                         .IsUnicode(false)
                         .HasColumnType("varchar(500)");
 
-                    b.Property<string>("Phone")
-                        .HasMaxLength(20)
-                        .IsUnicode(false)
-                        .HasColumnType("varchar(20)");
-
                     b.Property<int>("Role")
                         .HasColumnType("int");
 
@@ -101,6 +98,21 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                         });
                 });
 
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.AccountRoleLink", b =>
+                {
+                    b.Property<int>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("RoleId")
+                        .HasColumnType("int");
+
+                    b.HasKey("AccountId", "RoleId");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AccountRoles", (string)null);
+                });
+
             modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
                 {
                     b.Property<string>("Id")
@@ -124,6 +136,78 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                     b.ToTable("RefreshTokens", (string)null);
                 });
 
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.Role", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    SqlServerPropertyBuilderExtensions.UseIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Description")
+                        .HasMaxLength(500)
+                        .HasColumnType("nvarchar(500)");
+
+                    b.Property<bool>("IsSystem")
+                        .HasColumnType("bit");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("nvarchar(100)");
+
+                    b.Property<string>("Permissions")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Name")
+                        .IsUnique();
+
+                    b.ToTable("Roles", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 1,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Full access to everything, including members, roles and settings.",
+                            IsSystem = true,
+                            Name = "Administrator",
+                            Permissions = "[]"
+                        },
+                        new
+                        {
+                            Id = 2,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Runs and configures integrations. Can't manage members, roles or settings.",
+                            IsSystem = true,
+                            Name = "Member",
+                            Permissions = "[]"
+                        },
+                        new
+                        {
+                            Id = 3,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Read-only access to integrations, exchanges and configuration.",
+                            IsSystem = true,
+                            Name = "Viewer",
+                            Permissions = "[]"
+                        });
+                });
+
             modelBuilder.Entity("SW.Bitween.Domain.DelayedRetry", b =>
                 {
                     b.Property<string>("Id")
@@ -147,7 +231,11 @@ protected override void BuildModel(ModelBuilder modelBuilder)
             modelBuilder.Entity("SW.Bitween.Domain.Document", b =>
                 {
                     b.Property<int>("Id")
-                        .HasColumnType("int");
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int")
+                        .HasDefaultValueSql("NEXT VALUE FOR [DocumentIds]");
+
+                    SqlServerPropertyBuilderExtensions.UseSequence(b.Property<int>("Id"), "DocumentIds");
 
                     b.Property<bool>("BusEnabled")
                         .HasColumnType("bit");
@@ -157,6 +245,11 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                         .IsUnicode(false)
                         .HasColumnType("varchar(500)");
 
+                    b.Property<string>("Code")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
                     b.Property<bool?>("DisregardsUnfilteredMessages")
                         .HasColumnType("bit");
 
@@ -181,6 +274,10 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                         .IsUnique()
                         .HasFilter("[BusMessageTypeName] IS NOT NULL");
 
+                    b.HasIndex("Code")
+                        .IsUnique()
+                        .HasFilter("[Code] IS NOT NULL");
+
                     b.HasIndex("Name")
                         .IsUnique();
 
@@ -531,6 +628,33 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                     b.ToTable("RetryPolicies", (string)null);
                 });
 
+            modelBuilder.Entity("SW.Bitween.Domain.Setting", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime2");
+
+                    b.Property<string>("Value")
+                        .HasColumnType("nvarchar(max)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Settings", (string)null);
+                });
+
             modelBuilder.Entity("SW.Bitween.Domain.Subscription", b =>
                 {
                     b.Property<int>("Id")
@@ -1535,6 +1659,21 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                     b.ToTable("QRTZ_triggers", "dbo");
                 });
 
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.AccountRoleLink", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Accounts.Account", null)
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Accounts.Role", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
             modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
                 {
                     b.HasOne("SW.Bitween.Domain.Accounts.Account", null)
diff --git a/SW.Bitween.MySql/Migrations/20260726123628_AddDocumentCodeAndAutoId.Designer.cs b/SW.Bitween.MySql/Migrations/20260726123628_AddDocumentCodeAndAutoId.Designer.cs
new file mode 100644
index 00000000..991b2d09
--- /dev/null
+++ b/SW.Bitween.MySql/Migrations/20260726123628_AddDocumentCodeAndAutoId.Designer.cs
@@ -0,0 +1,1897 @@
+// <auto-generated />
+using System;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using SW.Bitween.MySql;
+
+#nullable disable
+
+namespace SW.Bitween.MySql.Migrations
+{
+    [DbContext(typeof(BitweenDbContext))]
+    [Migration("20260726123628_AddDocumentCodeAndAutoId")]
+    partial class AddDocumentCodeAndAutoId
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasAnnotation("ProductVersion", "8.0.23")
+                .HasAnnotation("Relational:MaxIdentifierLength", 64);
+
+            MySqlModelBuilderExtensions.AutoIncrementColumns(modelBuilder);
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.Account", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<bool>("Deleted")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<bool>("Disabled")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("DisplayName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<byte>("EmailProvider")
+                        .HasColumnType("tinyint unsigned");
+
+                    b.Property<byte>("LoginMethods")
+                        .HasColumnType("tinyint unsigned");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Password")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<string>("Phone")
+                        .HasMaxLength(20)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(20)");
+
+                    b.Property<int>("Role")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Email")
+                        .IsUnique();
+
+                    b.ToTable("Accounts", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 9999,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Deleted = false,
+                            Disabled = false,
+                            DisplayName = "Admin",
+                            Email = "admin@Bitween.systems",
+                            EmailProvider = (byte)0,
+                            LoginMethods = (byte)2,
+                            Password = "$SWHASH$V1$10000$VQCi48eitH4Ml5juvBMOFZrMdQwBbhuIQVXe6RR7qJdDF2bJ",
+                            Role = 0
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<int>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<byte>("LoginMethod")
+                        .HasColumnType("tinyint unsigned");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.ToTable("RefreshTokens", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DelayedRetry", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("GroupAttemptCounts")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("On")
+                        .HasColumnType("datetime(6)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("On");
+
+                    b.ToTable("DelayedRetries", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Document", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("BusEnabled")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("BusMessageTypeName")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<string>("Code")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<bool?>("DisregardsUnfilteredMessages")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<int>("DocumentFormat")
+                        .HasColumnType("int");
+
+                    b.Property<int>("DuplicateInterval")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<string>("PromotedProperties")
+                        .HasColumnType("longtext");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("BusMessageTypeName")
+                        .IsUnique();
+
+                    b.HasIndex("Code")
+                        .IsUnique();
+
+                    b.HasIndex("Name")
+                        .IsUnique();
+
+                    b.ToTable("Documents", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 10001,
+                            BusEnabled = false,
+                            DocumentFormat = 0,
+                            DuplicateInterval = 0,
+                            Name = "Aggregation Document",
+                            PromotedProperties = "{}"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DocumentTrail", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<int>("Code")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("StateAfter")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("StateBefore")
+                        .HasColumnType("longtext");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CreatedOn");
+
+                    b.HasIndex("DocumentId");
+
+                    b.ToTable("DocumentTrail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGateway", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("UrlName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UrlName")
+                        .IsUnique();
+
+                    b.ToTable("ApiGateways", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGatewayPartner", b =>
+                {
+                    b.Property<int>("ApiGatewayId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.HasKey("ApiGatewayId", "PartnerId", "SubscriptionId");
+
+                    b.HasIndex("PartnerId");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("ApiGatewayPartners", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DocumentId");
+
+                    b.ToTable("BusGateways", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGatewayRoute", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("BusGatewayId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("MatchExpression")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("BusGatewayId");
+
+                    b.HasIndex("PartnerId");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("BusGatewayRoutes", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.GlobalAdapterValuesSet", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("Values")
+                        .HasColumnType("longtext");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("GlobalAdapterValuesSets", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Notifier", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<bool>("Inactive")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<bool>("RunOnBadResult")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<bool>("RunOnFailedResult")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("RunOnSubscriptions")
+                        .HasColumnType("longtext");
+
+                    b.Property<bool>("RunOnSuccessfulResult")
+                        .HasColumnType("tinyint(1)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Notifiers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.OnHoldXchange", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("BadData")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("Data")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("FileName")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("References")
+                        .HasMaxLength(1024)
+                        .HasColumnType("varchar(1024)");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("OnHoldXchanges", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AdapterProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Partners", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 1,
+                            Name = "SYSTEM"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.RetryPolicy", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Groups")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("RetryPolicies", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Subscription", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("AggregateOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<int?>("AggregationForId")
+                        .HasColumnType("int");
+
+                    b.Property<byte>("AggregationTarget")
+                        .HasColumnType("tinyint unsigned");
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("ConsecutiveFailures")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CustomRetryPolicy")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("DocumentFilter")
+                        .HasColumnType("longtext");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<bool>("Inactive")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<bool>("IsRunning")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("LastException")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("MapperId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("MapperProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("MatchExpression")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("PausedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<DateTime?>("ReceiveOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("ReceiverId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("ReceiverProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("ResponseMessageTypeName")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<int?>("ResponseSubscriptionId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("RetryPolicyId")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("Temporary")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<byte>("Type")
+                        .HasColumnType("tinyint unsigned");
+
+                    b.Property<string>("ValidatorId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("ValidatorProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<int?>("WorkGroupId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AggregationForId");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("DocumentId");
+
+                    b.HasIndex("PartnerId");
+
+                    b.HasIndex("ResponseSubscriptionId");
+
+                    b.HasIndex("RetryPolicyId");
+
+                    b.HasIndex("WorkGroupId");
+
+                    b.ToTable("Subscriptions", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionCategory", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Code")
+                        .HasColumnType("varchar(255)");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Code")
+                        .IsUnique();
+
+                    b.ToTable("SubscriptionCategory");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionTrail", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<int>("Code")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("StateAfter")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("StateBefore")
+                        .HasColumnType("longtext");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CreatedOn");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("SubscriptionTrail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.WorkGroup", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BusMessageName")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("Options")
+                        .HasColumnType("longtext");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("WorkGroup");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Xchange", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("CorrelationId")
+                        .HasColumnType("longtext");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("GroupAttemptCounts")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("InputContentType")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("InputHash")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("InputName")
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<int>("InputSize")
+                        .HasColumnType("int");
+
+                    b.Property<string>("MapperId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("MapperProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("References")
+                        .HasMaxLength(1024)
+                        .HasColumnType("varchar(1024)");
+
+                    b.Property<string>("ResponseMessageTypeName")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<int?>("ResponseSubscriptionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RetryFor")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<DateTime>("StartedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<int?>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DocumentId");
+
+                    b.HasIndex("InputHash");
+
+                    b.HasIndex("RetryFor");
+
+                    b.HasIndex("StartedOn");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("Xchanges", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeAggregation", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<DateTime>("AggregatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("AggregationXchangeId")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AggregationXchangeId");
+
+                    b.ToTable("XchangeAggregations", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeDelivery", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<DateTime>("DeliveredOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DeliveredOn");
+
+                    b.ToTable("XchangeDeliveries", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeNotification", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Exception")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("FinishedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<int>("NotifierId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("NotifierName")
+                        .HasColumnType("longtext");
+
+                    b.Property<bool>("Success")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("XchangeId")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("XchangeNotifications", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangePromotedProperties", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("Hits")
+                        .HasMaxLength(2000)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(2000)");
+
+                    b.Property<string>("Properties")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("PropertiesRaw")
+                        .HasColumnType("varchar(255)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("PropertiesRaw");
+
+                    b.ToTable("XchangePromotedProperties", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeResult", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("Exception")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("FinishedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<bool>("OutputBad")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("OutputContentType")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("OutputHash")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("OutputName")
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<int>("OutputSize")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("ResponseBad")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("ResponseContentType")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("ResponseHash")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("ResponseName")
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<int>("ResponseSize")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ResponseXchangeId")
+                        .HasColumnType("longtext");
+
+                    b.Property<bool>("Success")
+                        .HasColumnType("tinyint(1)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("XchangeResults", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.RunFlagUpdater+RunningResult", b =>
+                {
+                    b.Property<bool>("IsRunning")
+                        .HasColumnType("tinyint(1)");
+
+                    b.ToTable((string)null);
+
+                    b.ToView(null, (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.JobExecution", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("bigint")
+                        .HasColumnName("id");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<long>("Id"));
+
+                    b.Property<string>("Context")
+                        .HasColumnType("longtext")
+                        .HasColumnName("context");
+
+                    b.Property<long?>("DurationMs")
+                        .HasColumnType("bigint")
+                        .HasColumnName("duration_ms");
+
+                    b.Property<DateTime?>("EndTimeUtc")
+                        .HasColumnType("datetime(6)")
+                        .HasColumnName("end_time_utc");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("longtext")
+                        .HasColumnName("error");
+
+                    b.Property<string>("FireInstanceId")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("fire_instance_id");
+
+                    b.Property<string>("JobGroup")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_name");
+
+                    b.Property<string>("JobTypeName")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_type_name");
+
+                    b.Property<string>("Node")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("node");
+
+                    b.Property<DateTime>("StartTimeUtc")
+                        .HasColumnType("datetime(6)")
+                        .HasColumnName("start_time_utc");
+
+                    b.Property<bool?>("Success")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("success");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("FireInstanceId")
+                        .IsUnique()
+                        .HasDatabaseName("idx_je_fire_instance_id");
+
+                    b.HasIndex("StartTimeUtc")
+                        .HasDatabaseName("idx_je_start_time");
+
+                    b.HasIndex("Success")
+                        .HasDatabaseName("idx_je_success");
+
+                    b.HasIndex("JobGroup", "JobName", "StartTimeUtc")
+                        .HasDatabaseName("idx_je_group_name_start");
+
+                    b.ToTable("job_executions", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzBlobTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<byte[]>("BlobData")
+                        .HasColumnType("longblob")
+                        .HasColumnName("blob_data");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_blob_triggers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCalendar", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("calendar_name");
+
+                    b.Property<byte[]>("Calendar")
+                        .IsRequired()
+                        .HasColumnType("longblob")
+                        .HasColumnName("calendar");
+
+                    b.HasKey("SchedulerName", "CalendarName");
+
+                    b.ToTable("QRTZ_calendars", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCronTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("CronExpression")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("cron_expression");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("time_zone_id");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_cron_triggers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzFiredTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("EntryId")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("entry_id");
+
+                    b.Property<long>("FiredTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("fired_time");
+
+                    b.Property<string>("InstanceName")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("instance_name");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("is_nonconcurrent");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_name");
+
+                    b.Property<int>("Priority")
+                        .HasColumnType("int")
+                        .HasColumnName("priority");
+
+                    b.Property<bool?>("RequestsRecovery")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("requests_recovery");
+
+                    b.Property<long>("ScheduledTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("sched_time");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("state");
+
+                    b.Property<string>("TriggerGroup")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("TriggerName")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_name");
+
+                    b.HasKey("SchedulerName", "EntryId");
+
+                    b.HasIndex("InstanceName")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_inst_name");
+
+                    b.HasIndex("JobGroup")
+                        .HasDatabaseName("idx_QRTZ_ft_job_group");
+
+                    b.HasIndex("JobName")
+                        .HasDatabaseName("idx_QRTZ_ft_job_name");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("idx_QRTZ_ft_job_req_recovery");
+
+                    b.HasIndex("TriggerGroup")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_group");
+
+                    b.HasIndex("TriggerName")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_name");
+
+                    b.HasIndex("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_nm_gp");
+
+                    b.ToTable("QRTZ_fired_triggers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzJobDetail", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_name");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("description");
+
+                    b.Property<bool>("IsDurable")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("is_durable");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("is_nonconcurrent");
+
+                    b.Property<bool>("IsUpdateData")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("is_update_data");
+
+                    b.Property<string>("JobClassName")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_class_name");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("longblob")
+                        .HasColumnName("job_data");
+
+                    b.Property<bool>("RequestsRecovery")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("requests_recovery");
+
+                    b.HasKey("SchedulerName", "JobName", "JobGroup");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("idx_j_req_recovery");
+
+                    b.ToTable("QRTZ_job_details", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzLock", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("LockName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("lock_name");
+
+                    b.HasKey("SchedulerName", "LockName");
+
+                    b.ToTable("QRTZ_locks", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzPausedTriggerGroup", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.HasKey("SchedulerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_paused_trigger_grps", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSchedulerState", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("InstanceName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("instance_name");
+
+                    b.Property<long>("CheckInInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("checkin_interval");
+
+                    b.Property<long>("LastCheckInTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("last_checkin_time");
+
+                    b.HasKey("SchedulerName", "InstanceName");
+
+                    b.ToTable("QRTZ_scheduler_state", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<bool?>("BooleanProperty1")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("bool_prop_1");
+
+                    b.Property<bool?>("BooleanProperty2")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("bool_prop_2");
+
+                    b.Property<decimal?>("DecimalProperty1")
+                        .HasColumnType("numeric")
+                        .HasColumnName("dec_prop_1");
+
+                    b.Property<decimal?>("DecimalProperty2")
+                        .HasColumnType("numeric")
+                        .HasColumnName("dec_prop_2");
+
+                    b.Property<int?>("IntegerProperty1")
+                        .HasColumnType("int")
+                        .HasColumnName("int_prop_1");
+
+                    b.Property<int?>("IntegerProperty2")
+                        .HasColumnType("int")
+                        .HasColumnName("int_prop_2");
+
+                    b.Property<long?>("LongProperty1")
+                        .HasColumnType("bigint")
+                        .HasColumnName("long_prop_1");
+
+                    b.Property<long?>("LongProperty2")
+                        .HasColumnType("bigint")
+                        .HasColumnName("long_prop_2");
+
+                    b.Property<string>("StringProperty1")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("str_prop_1");
+
+                    b.Property<string>("StringProperty2")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("str_prop_2");
+
+                    b.Property<string>("StringProperty3")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("str_prop_3");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("time_zone_id");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_simprop_triggers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimpleTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<long>("RepeatCount")
+                        .HasColumnType("bigint")
+                        .HasColumnName("repeat_count");
+
+                    b.Property<long>("RepeatInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("repeat_interval");
+
+                    b.Property<long>("TimesTriggered")
+                        .HasColumnType("bigint")
+                        .HasColumnName("times_triggered");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_simple_triggers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("calendar_name");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("description");
+
+                    b.Property<long?>("EndTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("end_time");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("longblob")
+                        .HasColumnName("job_data");
+
+                    b.Property<string>("JobGroup")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_name");
+
+                    b.Property<int?>("MisfireInstruction")
+                        .HasColumnType("int")
+                        .HasColumnName("misfire_instr");
+
+                    b.Property<long?>("NextFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("next_fire_time");
+
+                    b.Property<long?>("PreviousFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("prev_fire_time");
+
+                    b.Property<int?>("Priority")
+                        .HasColumnType("int")
+                        .HasColumnName("priority");
+
+                    b.Property<long>("StartTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("start_time");
+
+                    b.Property<string>("TriggerState")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_state");
+
+                    b.Property<string>("TriggerType")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_type");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.HasIndex("NextFireTime")
+                        .HasDatabaseName("idx_t_next_fire_time");
+
+                    b.HasIndex("TriggerState")
+                        .HasDatabaseName("idx_t_state");
+
+                    b.HasIndex("NextFireTime", "TriggerState")
+                        .HasDatabaseName("idx_t_nft_st");
+
+                    b.HasIndex("SchedulerName", "JobName", "JobGroup");
+
+                    b.ToTable("QRTZ_triggers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Accounts.Account", null)
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DocumentTrail", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", "Document")
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Document");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGatewayPartner", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Gateway.ApiGateway", "ApiGateway")
+                        .WithMany("Partners")
+                        .HasForeignKey("ApiGatewayId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Partner", "Partner")
+                        .WithMany()
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("ApiGateway");
+
+                    b.Navigation("Partner");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGatewayRoute", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Gateway.BusGateway", "BusGateway")
+                        .WithMany("Routes")
+                        .HasForeignKey("BusGatewayId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Partner", "Partner")
+                        .WithMany()
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("BusGateway");
+
+                    b.Navigation("Partner");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.OwnsMany("SW.Bitween.Domain.ApiCredential", "ApiCredentials", b1 =>
+                        {
+                            b1.Property<int>("PartnerId")
+                                .HasColumnType("int");
+
+                            b1.Property<int>("Id")
+                                .ValueGeneratedOnAdd()
+                                .HasColumnType("int");
+
+                            MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b1.Property<int>("Id"));
+
+                            b1.Property<string>("Key")
+                                .IsRequired()
+                                .HasMaxLength(500)
+                                .IsUnicode(false)
+                                .HasColumnType("varchar(500)");
+
+                            b1.Property<string>("Name")
+                                .IsRequired()
+                                .HasMaxLength(500)
+                                .HasColumnType("varchar(500)");
+
+                            b1.HasKey("PartnerId", "Id");
+
+                            b1.HasIndex("Key")
+                                .IsUnique();
+
+                            b1.ToTable("PartnerApiCredentials", (string)null);
+
+                            b1.WithOwner()
+                                .HasForeignKey("PartnerId");
+
+                            b1.HasData(
+                                new
+                                {
+                                    PartnerId = 1,
+                                    Id = 1,
+                                    Key = "7facc758283844b49cc4ffd26a75b1de",
+                                    Name = "default"
+                                });
+                        });
+
+                    b.Navigation("ApiCredentials");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Subscription", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Subscription", null)
+                        .WithMany()
+                        .HasForeignKey("AggregationForId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("FK_Subscriptions_AggFor");
+
+                    b.HasOne("SW.Bitween.Domain.SubscriptionCategory", "Category")
+                        .WithMany()
+                        .HasForeignKey("CategoryId");
+
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Partner", null)
+                        .WithMany("Subscriptions")
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", null)
+                        .WithMany()
+                        .HasForeignKey("ResponseSubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("FK_Subscriptions_RespSub");
+
+                    b.HasOne("SW.Bitween.Domain.RetryPolicy", "RetryPolicy")
+                        .WithMany()
+                        .HasForeignKey("RetryPolicyId")
+                        .OnDelete(DeleteBehavior.SetNull);
+
+                    b.HasOne("SW.Bitween.Domain.WorkGroup", "WorkGroup")
+                        .WithMany()
+                        .HasForeignKey("WorkGroupId");
+
+                    b.OwnsMany("SW.Bitween.Domain.Schedule", "Schedules", b1 =>
+                        {
+                            b1.Property<int>("SubscriptionId")
+                                .HasColumnType("int");
+
+                            b1.Property<int>("Id")
+                                .ValueGeneratedOnAdd()
+                                .HasColumnType("int");
+
+                            MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b1.Property<int>("Id"));
+
+                            b1.Property<bool>("Backwards")
+                                .HasColumnType("tinyint(1)");
+
+                            b1.Property<long>("On")
+                                .HasColumnType("bigint");
+
+                            b1.Property<byte>("Recurrence")
+                                .HasColumnType("tinyint unsigned");
+
+                            b1.HasKey("SubscriptionId", "Id");
+
+                            b1.ToTable("SubscriptionSchedules", (string)null);
+
+                            b1.WithOwner()
+                                .HasForeignKey("SubscriptionId");
+                        });
+
+                    b.Navigation("Category");
+
+                    b.Navigation("RetryPolicy");
+
+                    b.Navigation("Schedules");
+
+                    b.Navigation("WorkGroup");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionTrail", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Xchange", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeAggregation", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeAggregation", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeDelivery", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeDelivery", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangePromotedProperties", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangePromotedProperties", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeResult", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeResult", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzBlobTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("BlobTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCronTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("CronTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("SimplePropertyTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimpleTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("SimpleTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzJobDetail", "JobDetail")
+                        .WithMany("Triggers")
+                        .HasForeignKey("SchedulerName", "JobName", "JobGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("JobDetail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGateway", b =>
+                {
+                    b.Navigation("Partners");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.Navigation("Routes");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.Navigation("Subscriptions");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzJobDetail", b =>
+                {
+                    b.Navigation("Triggers");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.Navigation("BlobTriggers");
+
+                    b.Navigation("CronTriggers");
+
+                    b.Navigation("SimplePropertyTriggers");
+
+                    b.Navigation("SimpleTriggers");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/SW.Bitween.MySql/Migrations/20260726123628_AddDocumentCodeAndAutoId.cs b/SW.Bitween.MySql/Migrations/20260726123628_AddDocumentCodeAndAutoId.cs
new file mode 100644
index 00000000..c32df956
--- /dev/null
+++ b/SW.Bitween.MySql/Migrations/20260726123628_AddDocumentCodeAndAutoId.cs
@@ -0,0 +1,67 @@
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace SW.Bitween.MySql.Migrations
+{
+    /// <inheritdoc />
+    public partial class AddDocumentCodeAndAutoId : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.AlterColumn<int>(
+                name: "Id",
+                table: "Documents",
+                type: "int",
+                nullable: false,
+                oldClrType: typeof(int),
+                oldType: "int")
+                .Annotation("MySql:ValueGenerationStrategy", MySqlValueGenerationStrategy.IdentityColumn);
+
+            migrationBuilder.AddColumn<string>(
+                name: "Code",
+                table: "Documents",
+                type: "varchar(50)",
+                unicode: false,
+                maxLength: 50,
+                nullable: true)
+                .Annotation("MySql:CharSet", "utf8mb4");
+
+            migrationBuilder.UpdateData(
+                table: "Documents",
+                keyColumn: "Id",
+                keyValue: 10001,
+                column: "Code",
+                value: null);
+
+            migrationBuilder.CreateIndex(
+                name: "IX_Documents_Code",
+                table: "Documents",
+                column: "Code",
+                unique: true);
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropIndex(
+                name: "IX_Documents_Code",
+                table: "Documents");
+
+            migrationBuilder.DropColumn(
+                name: "Code",
+                table: "Documents");
+
+            migrationBuilder.AlterColumn<int>(
+                name: "Id",
+                table: "Documents",
+                type: "int",
+                nullable: false,
+                oldClrType: typeof(int),
+                oldType: "int")
+                .OldAnnotation("MySql:ValueGenerationStrategy", MySqlValueGenerationStrategy.IdentityColumn);
+        }
+    }
+}
diff --git a/SW.Bitween.MySql/Migrations/20260726123824_AddRolesAndPermissions.Designer.cs b/SW.Bitween.MySql/Migrations/20260726123824_AddRolesAndPermissions.Designer.cs
new file mode 100644
index 00000000..9c4272f0
--- /dev/null
+++ b/SW.Bitween.MySql/Migrations/20260726123824_AddRolesAndPermissions.Designer.cs
@@ -0,0 +1,1999 @@
+// <auto-generated />
+using System;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using SW.Bitween.MySql;
+
+#nullable disable
+
+namespace SW.Bitween.MySql.Migrations
+{
+    [DbContext(typeof(BitweenDbContext))]
+    [Migration("20260726123824_AddRolesAndPermissions")]
+    partial class AddRolesAndPermissions
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasAnnotation("ProductVersion", "8.0.23")
+                .HasAnnotation("Relational:MaxIdentifierLength", 64);
+
+            MySqlModelBuilderExtensions.AutoIncrementColumns(modelBuilder);
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.Account", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<bool>("Deleted")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<bool>("Disabled")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("DisplayName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<byte>("EmailProvider")
+                        .HasColumnType("tinyint unsigned");
+
+                    b.Property<byte>("LoginMethods")
+                        .HasColumnType("tinyint unsigned");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Password")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<string>("Phone")
+                        .HasMaxLength(20)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(20)");
+
+                    b.Property<int>("Role")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Email")
+                        .IsUnique();
+
+                    b.ToTable("Accounts", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 9999,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Deleted = false,
+                            Disabled = false,
+                            DisplayName = "Admin",
+                            Email = "admin@Bitween.systems",
+                            EmailProvider = (byte)0,
+                            LoginMethods = (byte)2,
+                            Password = "$SWHASH$V1$10000$VQCi48eitH4Ml5juvBMOFZrMdQwBbhuIQVXe6RR7qJdDF2bJ",
+                            Role = 0
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.AccountRoleLink", b =>
+                {
+                    b.Property<int>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("RoleId")
+                        .HasColumnType("int");
+
+                    b.HasKey("AccountId", "RoleId");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AccountRoles", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<int>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<byte>("LoginMethod")
+                        .HasColumnType("tinyint unsigned");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.ToTable("RefreshTokens", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.Role", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Description")
+                        .HasMaxLength(500)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<bool>("IsSystem")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<string>("Permissions")
+                        .HasColumnType("longtext");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Name")
+                        .IsUnique();
+
+                    b.ToTable("Roles", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 1,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Full access to everything, including members, roles and settings.",
+                            IsSystem = true,
+                            Name = "Administrator",
+                            Permissions = "[]"
+                        },
+                        new
+                        {
+                            Id = 2,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Runs and configures integrations. Can't manage members, roles or settings.",
+                            IsSystem = true,
+                            Name = "Member",
+                            Permissions = "[]"
+                        },
+                        new
+                        {
+                            Id = 3,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Read-only access to integrations, exchanges and configuration.",
+                            IsSystem = true,
+                            Name = "Viewer",
+                            Permissions = "[]"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DelayedRetry", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("GroupAttemptCounts")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("On")
+                        .HasColumnType("datetime(6)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("On");
+
+                    b.ToTable("DelayedRetries", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Document", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("BusEnabled")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("BusMessageTypeName")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<string>("Code")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<bool?>("DisregardsUnfilteredMessages")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<int>("DocumentFormat")
+                        .HasColumnType("int");
+
+                    b.Property<int>("DuplicateInterval")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<string>("PromotedProperties")
+                        .HasColumnType("longtext");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("BusMessageTypeName")
+                        .IsUnique();
+
+                    b.HasIndex("Code")
+                        .IsUnique();
+
+                    b.HasIndex("Name")
+                        .IsUnique();
+
+                    b.ToTable("Documents", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 10001,
+                            BusEnabled = false,
+                            DocumentFormat = 0,
+                            DuplicateInterval = 0,
+                            Name = "Aggregation Document",
+                            PromotedProperties = "{}"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DocumentTrail", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<int>("Code")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("StateAfter")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("StateBefore")
+                        .HasColumnType("longtext");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CreatedOn");
+
+                    b.HasIndex("DocumentId");
+
+                    b.ToTable("DocumentTrail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGateway", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("UrlName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UrlName")
+                        .IsUnique();
+
+                    b.ToTable("ApiGateways", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGatewayPartner", b =>
+                {
+                    b.Property<int>("ApiGatewayId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.HasKey("ApiGatewayId", "PartnerId", "SubscriptionId");
+
+                    b.HasIndex("PartnerId");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("ApiGatewayPartners", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DocumentId");
+
+                    b.ToTable("BusGateways", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGatewayRoute", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("BusGatewayId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("MatchExpression")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("BusGatewayId");
+
+                    b.HasIndex("PartnerId");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("BusGatewayRoutes", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.GlobalAdapterValuesSet", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("Values")
+                        .HasColumnType("longtext");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("GlobalAdapterValuesSets", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Notifier", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<bool>("Inactive")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<bool>("RunOnBadResult")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<bool>("RunOnFailedResult")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("RunOnSubscriptions")
+                        .HasColumnType("longtext");
+
+                    b.Property<bool>("RunOnSuccessfulResult")
+                        .HasColumnType("tinyint(1)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Notifiers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.OnHoldXchange", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("BadData")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("Data")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("FileName")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("References")
+                        .HasMaxLength(1024)
+                        .HasColumnType("varchar(1024)");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("OnHoldXchanges", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AdapterProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Partners", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 1,
+                            Name = "SYSTEM"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.RetryPolicy", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Groups")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("RetryPolicies", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Subscription", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("AggregateOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<int?>("AggregationForId")
+                        .HasColumnType("int");
+
+                    b.Property<byte>("AggregationTarget")
+                        .HasColumnType("tinyint unsigned");
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("ConsecutiveFailures")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CustomRetryPolicy")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("DocumentFilter")
+                        .HasColumnType("longtext");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<bool>("Inactive")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<bool>("IsRunning")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("LastException")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("MapperId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("MapperProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("MatchExpression")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("PausedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<DateTime?>("ReceiveOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("ReceiverId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("ReceiverProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("ResponseMessageTypeName")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<int?>("ResponseSubscriptionId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("RetryPolicyId")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("Temporary")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<byte>("Type")
+                        .HasColumnType("tinyint unsigned");
+
+                    b.Property<string>("ValidatorId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("ValidatorProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<int?>("WorkGroupId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AggregationForId");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("DocumentId");
+
+                    b.HasIndex("PartnerId");
+
+                    b.HasIndex("ResponseSubscriptionId");
+
+                    b.HasIndex("RetryPolicyId");
+
+                    b.HasIndex("WorkGroupId");
+
+                    b.ToTable("Subscriptions", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionCategory", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Code")
+                        .HasColumnType("varchar(255)");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Code")
+                        .IsUnique();
+
+                    b.ToTable("SubscriptionCategory");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionTrail", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<int>("Code")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("StateAfter")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("StateBefore")
+                        .HasColumnType("longtext");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CreatedOn");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("SubscriptionTrail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.WorkGroup", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BusMessageName")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("Options")
+                        .HasColumnType("longtext");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("WorkGroup");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Xchange", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("CorrelationId")
+                        .HasColumnType("longtext");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("GroupAttemptCounts")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("InputContentType")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("InputHash")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("InputName")
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<int>("InputSize")
+                        .HasColumnType("int");
+
+                    b.Property<string>("MapperId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("MapperProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("References")
+                        .HasMaxLength(1024)
+                        .HasColumnType("varchar(1024)");
+
+                    b.Property<string>("ResponseMessageTypeName")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<int?>("ResponseSubscriptionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RetryFor")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<DateTime>("StartedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<int?>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DocumentId");
+
+                    b.HasIndex("InputHash");
+
+                    b.HasIndex("RetryFor");
+
+                    b.HasIndex("StartedOn");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("Xchanges", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeAggregation", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<DateTime>("AggregatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("AggregationXchangeId")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AggregationXchangeId");
+
+                    b.ToTable("XchangeAggregations", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeDelivery", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<DateTime>("DeliveredOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DeliveredOn");
+
+                    b.ToTable("XchangeDeliveries", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeNotification", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Exception")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("FinishedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<int>("NotifierId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("NotifierName")
+                        .HasColumnType("longtext");
+
+                    b.Property<bool>("Success")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("XchangeId")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("XchangeNotifications", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangePromotedProperties", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("Hits")
+                        .HasMaxLength(2000)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(2000)");
+
+                    b.Property<string>("Properties")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("PropertiesRaw")
+                        .HasColumnType("varchar(255)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("PropertiesRaw");
+
+                    b.ToTable("XchangePromotedProperties", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeResult", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("Exception")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("FinishedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<bool>("OutputBad")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("OutputContentType")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("OutputHash")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("OutputName")
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<int>("OutputSize")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("ResponseBad")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("ResponseContentType")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("ResponseHash")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("ResponseName")
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<int>("ResponseSize")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ResponseXchangeId")
+                        .HasColumnType("longtext");
+
+                    b.Property<bool>("Success")
+                        .HasColumnType("tinyint(1)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("XchangeResults", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.RunFlagUpdater+RunningResult", b =>
+                {
+                    b.Property<bool>("IsRunning")
+                        .HasColumnType("tinyint(1)");
+
+                    b.ToTable((string)null);
+
+                    b.ToView(null, (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.JobExecution", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("bigint")
+                        .HasColumnName("id");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<long>("Id"));
+
+                    b.Property<string>("Context")
+                        .HasColumnType("longtext")
+                        .HasColumnName("context");
+
+                    b.Property<long?>("DurationMs")
+                        .HasColumnType("bigint")
+                        .HasColumnName("duration_ms");
+
+                    b.Property<DateTime?>("EndTimeUtc")
+                        .HasColumnType("datetime(6)")
+                        .HasColumnName("end_time_utc");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("longtext")
+                        .HasColumnName("error");
+
+                    b.Property<string>("FireInstanceId")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("fire_instance_id");
+
+                    b.Property<string>("JobGroup")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_name");
+
+                    b.Property<string>("JobTypeName")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_type_name");
+
+                    b.Property<string>("Node")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("node");
+
+                    b.Property<DateTime>("StartTimeUtc")
+                        .HasColumnType("datetime(6)")
+                        .HasColumnName("start_time_utc");
+
+                    b.Property<bool?>("Success")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("success");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("FireInstanceId")
+                        .IsUnique()
+                        .HasDatabaseName("idx_je_fire_instance_id");
+
+                    b.HasIndex("StartTimeUtc")
+                        .HasDatabaseName("idx_je_start_time");
+
+                    b.HasIndex("Success")
+                        .HasDatabaseName("idx_je_success");
+
+                    b.HasIndex("JobGroup", "JobName", "StartTimeUtc")
+                        .HasDatabaseName("idx_je_group_name_start");
+
+                    b.ToTable("job_executions", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzBlobTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<byte[]>("BlobData")
+                        .HasColumnType("longblob")
+                        .HasColumnName("blob_data");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_blob_triggers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCalendar", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("calendar_name");
+
+                    b.Property<byte[]>("Calendar")
+                        .IsRequired()
+                        .HasColumnType("longblob")
+                        .HasColumnName("calendar");
+
+                    b.HasKey("SchedulerName", "CalendarName");
+
+                    b.ToTable("QRTZ_calendars", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCronTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("CronExpression")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("cron_expression");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("time_zone_id");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_cron_triggers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzFiredTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("EntryId")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("entry_id");
+
+                    b.Property<long>("FiredTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("fired_time");
+
+                    b.Property<string>("InstanceName")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("instance_name");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("is_nonconcurrent");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_name");
+
+                    b.Property<int>("Priority")
+                        .HasColumnType("int")
+                        .HasColumnName("priority");
+
+                    b.Property<bool?>("RequestsRecovery")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("requests_recovery");
+
+                    b.Property<long>("ScheduledTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("sched_time");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("state");
+
+                    b.Property<string>("TriggerGroup")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("TriggerName")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_name");
+
+                    b.HasKey("SchedulerName", "EntryId");
+
+                    b.HasIndex("InstanceName")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_inst_name");
+
+                    b.HasIndex("JobGroup")
+                        .HasDatabaseName("idx_QRTZ_ft_job_group");
+
+                    b.HasIndex("JobName")
+                        .HasDatabaseName("idx_QRTZ_ft_job_name");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("idx_QRTZ_ft_job_req_recovery");
+
+                    b.HasIndex("TriggerGroup")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_group");
+
+                    b.HasIndex("TriggerName")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_name");
+
+                    b.HasIndex("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_nm_gp");
+
+                    b.ToTable("QRTZ_fired_triggers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzJobDetail", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_name");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("description");
+
+                    b.Property<bool>("IsDurable")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("is_durable");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("is_nonconcurrent");
+
+                    b.Property<bool>("IsUpdateData")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("is_update_data");
+
+                    b.Property<string>("JobClassName")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_class_name");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("longblob")
+                        .HasColumnName("job_data");
+
+                    b.Property<bool>("RequestsRecovery")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("requests_recovery");
+
+                    b.HasKey("SchedulerName", "JobName", "JobGroup");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("idx_j_req_recovery");
+
+                    b.ToTable("QRTZ_job_details", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzLock", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("LockName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("lock_name");
+
+                    b.HasKey("SchedulerName", "LockName");
+
+                    b.ToTable("QRTZ_locks", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzPausedTriggerGroup", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.HasKey("SchedulerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_paused_trigger_grps", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSchedulerState", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("InstanceName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("instance_name");
+
+                    b.Property<long>("CheckInInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("checkin_interval");
+
+                    b.Property<long>("LastCheckInTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("last_checkin_time");
+
+                    b.HasKey("SchedulerName", "InstanceName");
+
+                    b.ToTable("QRTZ_scheduler_state", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<bool?>("BooleanProperty1")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("bool_prop_1");
+
+                    b.Property<bool?>("BooleanProperty2")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("bool_prop_2");
+
+                    b.Property<decimal?>("DecimalProperty1")
+                        .HasColumnType("numeric")
+                        .HasColumnName("dec_prop_1");
+
+                    b.Property<decimal?>("DecimalProperty2")
+                        .HasColumnType("numeric")
+                        .HasColumnName("dec_prop_2");
+
+                    b.Property<int?>("IntegerProperty1")
+                        .HasColumnType("int")
+                        .HasColumnName("int_prop_1");
+
+                    b.Property<int?>("IntegerProperty2")
+                        .HasColumnType("int")
+                        .HasColumnName("int_prop_2");
+
+                    b.Property<long?>("LongProperty1")
+                        .HasColumnType("bigint")
+                        .HasColumnName("long_prop_1");
+
+                    b.Property<long?>("LongProperty2")
+                        .HasColumnType("bigint")
+                        .HasColumnName("long_prop_2");
+
+                    b.Property<string>("StringProperty1")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("str_prop_1");
+
+                    b.Property<string>("StringProperty2")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("str_prop_2");
+
+                    b.Property<string>("StringProperty3")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("str_prop_3");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("time_zone_id");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_simprop_triggers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimpleTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<long>("RepeatCount")
+                        .HasColumnType("bigint")
+                        .HasColumnName("repeat_count");
+
+                    b.Property<long>("RepeatInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("repeat_interval");
+
+                    b.Property<long>("TimesTriggered")
+                        .HasColumnType("bigint")
+                        .HasColumnName("times_triggered");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_simple_triggers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("calendar_name");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("description");
+
+                    b.Property<long?>("EndTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("end_time");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("longblob")
+                        .HasColumnName("job_data");
+
+                    b.Property<string>("JobGroup")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_name");
+
+                    b.Property<int?>("MisfireInstruction")
+                        .HasColumnType("int")
+                        .HasColumnName("misfire_instr");
+
+                    b.Property<long?>("NextFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("next_fire_time");
+
+                    b.Property<long?>("PreviousFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("prev_fire_time");
+
+                    b.Property<int?>("Priority")
+                        .HasColumnType("int")
+                        .HasColumnName("priority");
+
+                    b.Property<long>("StartTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("start_time");
+
+                    b.Property<string>("TriggerState")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_state");
+
+                    b.Property<string>("TriggerType")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_type");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.HasIndex("NextFireTime")
+                        .HasDatabaseName("idx_t_next_fire_time");
+
+                    b.HasIndex("TriggerState")
+                        .HasDatabaseName("idx_t_state");
+
+                    b.HasIndex("NextFireTime", "TriggerState")
+                        .HasDatabaseName("idx_t_nft_st");
+
+                    b.HasIndex("SchedulerName", "JobName", "JobGroup");
+
+                    b.ToTable("QRTZ_triggers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.AccountRoleLink", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Accounts.Account", null)
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Accounts.Role", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Accounts.Account", null)
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DocumentTrail", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", "Document")
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Document");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGatewayPartner", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Gateway.ApiGateway", "ApiGateway")
+                        .WithMany("Partners")
+                        .HasForeignKey("ApiGatewayId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Partner", "Partner")
+                        .WithMany()
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("ApiGateway");
+
+                    b.Navigation("Partner");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGatewayRoute", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Gateway.BusGateway", "BusGateway")
+                        .WithMany("Routes")
+                        .HasForeignKey("BusGatewayId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Partner", "Partner")
+                        .WithMany()
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("BusGateway");
+
+                    b.Navigation("Partner");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.OwnsMany("SW.Bitween.Domain.ApiCredential", "ApiCredentials", b1 =>
+                        {
+                            b1.Property<int>("PartnerId")
+                                .HasColumnType("int");
+
+                            b1.Property<int>("Id")
+                                .ValueGeneratedOnAdd()
+                                .HasColumnType("int");
+
+                            MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b1.Property<int>("Id"));
+
+                            b1.Property<string>("Key")
+                                .IsRequired()
+                                .HasMaxLength(500)
+                                .IsUnicode(false)
+                                .HasColumnType("varchar(500)");
+
+                            b1.Property<string>("Name")
+                                .IsRequired()
+                                .HasMaxLength(500)
+                                .HasColumnType("varchar(500)");
+
+                            b1.HasKey("PartnerId", "Id");
+
+                            b1.HasIndex("Key")
+                                .IsUnique();
+
+                            b1.ToTable("PartnerApiCredentials", (string)null);
+
+                            b1.WithOwner()
+                                .HasForeignKey("PartnerId");
+
+                            b1.HasData(
+                                new
+                                {
+                                    PartnerId = 1,
+                                    Id = 1,
+                                    Key = "7facc758283844b49cc4ffd26a75b1de",
+                                    Name = "default"
+                                });
+                        });
+
+                    b.Navigation("ApiCredentials");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Subscription", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Subscription", null)
+                        .WithMany()
+                        .HasForeignKey("AggregationForId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("FK_Subscriptions_AggFor");
+
+                    b.HasOne("SW.Bitween.Domain.SubscriptionCategory", "Category")
+                        .WithMany()
+                        .HasForeignKey("CategoryId");
+
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Partner", null)
+                        .WithMany("Subscriptions")
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", null)
+                        .WithMany()
+                        .HasForeignKey("ResponseSubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("FK_Subscriptions_RespSub");
+
+                    b.HasOne("SW.Bitween.Domain.RetryPolicy", "RetryPolicy")
+                        .WithMany()
+                        .HasForeignKey("RetryPolicyId")
+                        .OnDelete(DeleteBehavior.SetNull);
+
+                    b.HasOne("SW.Bitween.Domain.WorkGroup", "WorkGroup")
+                        .WithMany()
+                        .HasForeignKey("WorkGroupId");
+
+                    b.OwnsMany("SW.Bitween.Domain.Schedule", "Schedules", b1 =>
+                        {
+                            b1.Property<int>("SubscriptionId")
+                                .HasColumnType("int");
+
+                            b1.Property<int>("Id")
+                                .ValueGeneratedOnAdd()
+                                .HasColumnType("int");
+
+                            MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b1.Property<int>("Id"));
+
+                            b1.Property<bool>("Backwards")
+                                .HasColumnType("tinyint(1)");
+
+                            b1.Property<long>("On")
+                                .HasColumnType("bigint");
+
+                            b1.Property<byte>("Recurrence")
+                                .HasColumnType("tinyint unsigned");
+
+                            b1.HasKey("SubscriptionId", "Id");
+
+                            b1.ToTable("SubscriptionSchedules", (string)null);
+
+                            b1.WithOwner()
+                                .HasForeignKey("SubscriptionId");
+                        });
+
+                    b.Navigation("Category");
+
+                    b.Navigation("RetryPolicy");
+
+                    b.Navigation("Schedules");
+
+                    b.Navigation("WorkGroup");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionTrail", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Xchange", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeAggregation", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeAggregation", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeDelivery", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeDelivery", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangePromotedProperties", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangePromotedProperties", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeResult", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeResult", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzBlobTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("BlobTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCronTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("CronTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("SimplePropertyTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimpleTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("SimpleTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzJobDetail", "JobDetail")
+                        .WithMany("Triggers")
+                        .HasForeignKey("SchedulerName", "JobName", "JobGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("JobDetail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGateway", b =>
+                {
+                    b.Navigation("Partners");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.Navigation("Routes");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.Navigation("Subscriptions");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzJobDetail", b =>
+                {
+                    b.Navigation("Triggers");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.Navigation("BlobTriggers");
+
+                    b.Navigation("CronTriggers");
+
+                    b.Navigation("SimplePropertyTriggers");
+
+                    b.Navigation("SimpleTriggers");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/SW.Bitween.MySql/Migrations/20260726123824_AddRolesAndPermissions.cs b/SW.Bitween.MySql/Migrations/20260726123824_AddRolesAndPermissions.cs
new file mode 100644
index 00000000..7b5ba487
--- /dev/null
+++ b/SW.Bitween.MySql/Migrations/20260726123824_AddRolesAndPermissions.cs
@@ -0,0 +1,112 @@
+using System;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+#pragma warning disable CA1814 // Prefer jagged arrays over multidimensional
+
+namespace SW.Bitween.MySql.Migrations
+{
+    /// <inheritdoc />
+    public partial class AddRolesAndPermissions : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.CreateTable(
+                name: "Roles",
+                columns: table => new
+                {
+                    Id = table.Column<int>(type: "int", nullable: false)
+                        .Annotation("MySql:ValueGenerationStrategy", MySqlValueGenerationStrategy.IdentityColumn),
+                    Name = table.Column<string>(type: "varchar(100)", maxLength: 100, nullable: false)
+                        .Annotation("MySql:CharSet", "utf8mb4"),
+                    Description = table.Column<string>(type: "varchar(500)", maxLength: 500, nullable: true)
+                        .Annotation("MySql:CharSet", "utf8mb4"),
+                    Permissions = table.Column<string>(type: "longtext", nullable: true)
+                        .Annotation("MySql:CharSet", "utf8mb4"),
+                    IsSystem = table.Column<bool>(type: "tinyint(1)", nullable: false),
+                    CreatedOn = table.Column<DateTime>(type: "datetime(6)", nullable: false),
+                    CreatedBy = table.Column<string>(type: "longtext", nullable: true)
+                        .Annotation("MySql:CharSet", "utf8mb4"),
+                    ModifiedOn = table.Column<DateTime>(type: "datetime(6)", nullable: true),
+                    ModifiedBy = table.Column<string>(type: "longtext", nullable: true)
+                        .Annotation("MySql:CharSet", "utf8mb4")
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_Roles", x => x.Id);
+                })
+                .Annotation("MySql:CharSet", "utf8mb4");
+
+            migrationBuilder.CreateTable(
+                name: "AccountRoles",
+                columns: table => new
+                {
+                    AccountId = table.Column<int>(type: "int", nullable: false),
+                    RoleId = table.Column<int>(type: "int", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_AccountRoles", x => new { x.AccountId, x.RoleId });
+                    table.ForeignKey(
+                        name: "FK_AccountRoles_Accounts_AccountId",
+                        column: x => x.AccountId,
+                        principalTable: "Accounts",
+                        principalColumn: "Id",
+                        onDelete: ReferentialAction.Cascade);
+                    table.ForeignKey(
+                        name: "FK_AccountRoles_Roles_RoleId",
+                        column: x => x.RoleId,
+                        principalTable: "Roles",
+                        principalColumn: "Id",
+                        onDelete: ReferentialAction.Cascade);
+                })
+                .Annotation("MySql:CharSet", "utf8mb4");
+
+            migrationBuilder.InsertData(
+                table: "Roles",
+                columns: new[] { "Id", "CreatedBy", "CreatedOn", "Description", "IsSystem", "ModifiedBy", "ModifiedOn", "Name", "Permissions" },
+                values: new object[,]
+                {
+                    { 1, null, new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc), "Full access to everything, including members, roles and settings.", true, null, null, "Administrator", "[]" },
+                    { 2, null, new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc), "Runs and configures integrations. Can't manage members, roles or settings.", true, null, null, "Member", "[]" },
+                    { 3, null, new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc), "Read-only access to integrations, exchanges and configuration.", true, null, null, "Viewer", "[]" }
+                });
+
+            migrationBuilder.CreateIndex(
+                name: "IX_AccountRoles_RoleId",
+                table: "AccountRoles",
+                column: "RoleId");
+
+            migrationBuilder.CreateIndex(
+                name: "IX_Roles_Name",
+                table: "Roles",
+                column: "Name",
+                unique: true);
+
+            // Every existing account keeps exactly the access it had: its coarse AccountRole
+            // (Admin=0, Viewer=10, Member=20) becomes the matching built-in role. Anything
+            // unrecognised lands on Viewer — least privilege. Idempotent, so re-running or
+            // ordering against the seeded admin account can't produce duplicates.
+            migrationBuilder.Sql("""
+                INSERT INTO `AccountRoles` (`AccountId`, `RoleId`)
+                SELECT a.`Id`, CASE a.`Role` WHEN 0 THEN 1 WHEN 20 THEN 2 ELSE 3 END
+                FROM `Accounts` a
+                WHERE NOT EXISTS (
+                    SELECT 1 FROM `AccountRoles` l WHERE l.`AccountId` = a.`Id`);
+                """);
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropTable(
+                name: "AccountRoles");
+
+            migrationBuilder.DropTable(
+                name: "Roles");
+        }
+    }
+}
diff --git a/SW.Bitween.MySql/Migrations/20260726151533_DropAccountPhone.Designer.cs b/SW.Bitween.MySql/Migrations/20260726151533_DropAccountPhone.Designer.cs
new file mode 100644
index 00000000..4102d5ff
--- /dev/null
+++ b/SW.Bitween.MySql/Migrations/20260726151533_DropAccountPhone.Designer.cs
@@ -0,0 +1,1994 @@
+// <auto-generated />
+using System;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using SW.Bitween.MySql;
+
+#nullable disable
+
+namespace SW.Bitween.MySql.Migrations
+{
+    [DbContext(typeof(BitweenDbContext))]
+    [Migration("20260726151533_DropAccountPhone")]
+    partial class DropAccountPhone
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasAnnotation("ProductVersion", "8.0.23")
+                .HasAnnotation("Relational:MaxIdentifierLength", 64);
+
+            MySqlModelBuilderExtensions.AutoIncrementColumns(modelBuilder);
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.Account", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<bool>("Deleted")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<bool>("Disabled")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("DisplayName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<byte>("EmailProvider")
+                        .HasColumnType("tinyint unsigned");
+
+                    b.Property<byte>("LoginMethods")
+                        .HasColumnType("tinyint unsigned");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Password")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<int>("Role")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Email")
+                        .IsUnique();
+
+                    b.ToTable("Accounts", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 9999,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Deleted = false,
+                            Disabled = false,
+                            DisplayName = "Admin",
+                            Email = "admin@Bitween.systems",
+                            EmailProvider = (byte)0,
+                            LoginMethods = (byte)2,
+                            Password = "$SWHASH$V1$10000$VQCi48eitH4Ml5juvBMOFZrMdQwBbhuIQVXe6RR7qJdDF2bJ",
+                            Role = 0
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.AccountRoleLink", b =>
+                {
+                    b.Property<int>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("RoleId")
+                        .HasColumnType("int");
+
+                    b.HasKey("AccountId", "RoleId");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AccountRoles", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<int>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<byte>("LoginMethod")
+                        .HasColumnType("tinyint unsigned");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.ToTable("RefreshTokens", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.Role", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Description")
+                        .HasMaxLength(500)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<bool>("IsSystem")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<string>("Permissions")
+                        .HasColumnType("longtext");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Name")
+                        .IsUnique();
+
+                    b.ToTable("Roles", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 1,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Full access to everything, including members, roles and settings.",
+                            IsSystem = true,
+                            Name = "Administrator",
+                            Permissions = "[]"
+                        },
+                        new
+                        {
+                            Id = 2,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Runs and configures integrations. Can't manage members, roles or settings.",
+                            IsSystem = true,
+                            Name = "Member",
+                            Permissions = "[]"
+                        },
+                        new
+                        {
+                            Id = 3,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Read-only access to integrations, exchanges and configuration.",
+                            IsSystem = true,
+                            Name = "Viewer",
+                            Permissions = "[]"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DelayedRetry", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("GroupAttemptCounts")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("On")
+                        .HasColumnType("datetime(6)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("On");
+
+                    b.ToTable("DelayedRetries", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Document", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("BusEnabled")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("BusMessageTypeName")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<string>("Code")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<bool?>("DisregardsUnfilteredMessages")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<int>("DocumentFormat")
+                        .HasColumnType("int");
+
+                    b.Property<int>("DuplicateInterval")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<string>("PromotedProperties")
+                        .HasColumnType("longtext");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("BusMessageTypeName")
+                        .IsUnique();
+
+                    b.HasIndex("Code")
+                        .IsUnique();
+
+                    b.HasIndex("Name")
+                        .IsUnique();
+
+                    b.ToTable("Documents", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 10001,
+                            BusEnabled = false,
+                            DocumentFormat = 0,
+                            DuplicateInterval = 0,
+                            Name = "Aggregation Document",
+                            PromotedProperties = "{}"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DocumentTrail", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<int>("Code")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("StateAfter")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("StateBefore")
+                        .HasColumnType("longtext");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CreatedOn");
+
+                    b.HasIndex("DocumentId");
+
+                    b.ToTable("DocumentTrail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGateway", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("UrlName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UrlName")
+                        .IsUnique();
+
+                    b.ToTable("ApiGateways", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGatewayPartner", b =>
+                {
+                    b.Property<int>("ApiGatewayId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.HasKey("ApiGatewayId", "PartnerId", "SubscriptionId");
+
+                    b.HasIndex("PartnerId");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("ApiGatewayPartners", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DocumentId");
+
+                    b.ToTable("BusGateways", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGatewayRoute", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("BusGatewayId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("MatchExpression")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("BusGatewayId");
+
+                    b.HasIndex("PartnerId");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("BusGatewayRoutes", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.GlobalAdapterValuesSet", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("Values")
+                        .HasColumnType("longtext");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("GlobalAdapterValuesSets", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Notifier", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<bool>("Inactive")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<bool>("RunOnBadResult")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<bool>("RunOnFailedResult")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("RunOnSubscriptions")
+                        .HasColumnType("longtext");
+
+                    b.Property<bool>("RunOnSuccessfulResult")
+                        .HasColumnType("tinyint(1)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Notifiers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.OnHoldXchange", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("BadData")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("Data")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("FileName")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("References")
+                        .HasMaxLength(1024)
+                        .HasColumnType("varchar(1024)");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("OnHoldXchanges", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AdapterProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Partners", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 1,
+                            Name = "SYSTEM"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.RetryPolicy", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Groups")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("RetryPolicies", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Subscription", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("AggregateOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<int?>("AggregationForId")
+                        .HasColumnType("int");
+
+                    b.Property<byte>("AggregationTarget")
+                        .HasColumnType("tinyint unsigned");
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("ConsecutiveFailures")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CustomRetryPolicy")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("DocumentFilter")
+                        .HasColumnType("longtext");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<bool>("Inactive")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<bool>("IsRunning")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("LastException")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("MapperId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("MapperProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("MatchExpression")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("PausedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<DateTime?>("ReceiveOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("ReceiverId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("ReceiverProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("ResponseMessageTypeName")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<int?>("ResponseSubscriptionId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("RetryPolicyId")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("Temporary")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<byte>("Type")
+                        .HasColumnType("tinyint unsigned");
+
+                    b.Property<string>("ValidatorId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("ValidatorProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<int?>("WorkGroupId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AggregationForId");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("DocumentId");
+
+                    b.HasIndex("PartnerId");
+
+                    b.HasIndex("ResponseSubscriptionId");
+
+                    b.HasIndex("RetryPolicyId");
+
+                    b.HasIndex("WorkGroupId");
+
+                    b.ToTable("Subscriptions", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionCategory", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Code")
+                        .HasColumnType("varchar(255)");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Code")
+                        .IsUnique();
+
+                    b.ToTable("SubscriptionCategory");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionTrail", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<int>("Code")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("StateAfter")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("StateBefore")
+                        .HasColumnType("longtext");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CreatedOn");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("SubscriptionTrail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.WorkGroup", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BusMessageName")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("Options")
+                        .HasColumnType("longtext");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("WorkGroup");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Xchange", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("CorrelationId")
+                        .HasColumnType("longtext");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("GroupAttemptCounts")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("InputContentType")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("InputHash")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("InputName")
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<int>("InputSize")
+                        .HasColumnType("int");
+
+                    b.Property<string>("MapperId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("MapperProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("References")
+                        .HasMaxLength(1024)
+                        .HasColumnType("varchar(1024)");
+
+                    b.Property<string>("ResponseMessageTypeName")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<int?>("ResponseSubscriptionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RetryFor")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<DateTime>("StartedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<int?>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DocumentId");
+
+                    b.HasIndex("InputHash");
+
+                    b.HasIndex("RetryFor");
+
+                    b.HasIndex("StartedOn");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("Xchanges", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeAggregation", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<DateTime>("AggregatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("AggregationXchangeId")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AggregationXchangeId");
+
+                    b.ToTable("XchangeAggregations", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeDelivery", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<DateTime>("DeliveredOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DeliveredOn");
+
+                    b.ToTable("XchangeDeliveries", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeNotification", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Exception")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("FinishedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<int>("NotifierId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("NotifierName")
+                        .HasColumnType("longtext");
+
+                    b.Property<bool>("Success")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("XchangeId")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("XchangeNotifications", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangePromotedProperties", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("Hits")
+                        .HasMaxLength(2000)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(2000)");
+
+                    b.Property<string>("Properties")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("PropertiesRaw")
+                        .HasColumnType("varchar(255)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("PropertiesRaw");
+
+                    b.ToTable("XchangePromotedProperties", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeResult", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("Exception")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("FinishedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<bool>("OutputBad")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("OutputContentType")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("OutputHash")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("OutputName")
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<int>("OutputSize")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("ResponseBad")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("ResponseContentType")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("ResponseHash")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("ResponseName")
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<int>("ResponseSize")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ResponseXchangeId")
+                        .HasColumnType("longtext");
+
+                    b.Property<bool>("Success")
+                        .HasColumnType("tinyint(1)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("XchangeResults", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.RunFlagUpdater+RunningResult", b =>
+                {
+                    b.Property<bool>("IsRunning")
+                        .HasColumnType("tinyint(1)");
+
+                    b.ToTable((string)null);
+
+                    b.ToView(null, (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.JobExecution", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("bigint")
+                        .HasColumnName("id");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<long>("Id"));
+
+                    b.Property<string>("Context")
+                        .HasColumnType("longtext")
+                        .HasColumnName("context");
+
+                    b.Property<long?>("DurationMs")
+                        .HasColumnType("bigint")
+                        .HasColumnName("duration_ms");
+
+                    b.Property<DateTime?>("EndTimeUtc")
+                        .HasColumnType("datetime(6)")
+                        .HasColumnName("end_time_utc");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("longtext")
+                        .HasColumnName("error");
+
+                    b.Property<string>("FireInstanceId")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("fire_instance_id");
+
+                    b.Property<string>("JobGroup")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_name");
+
+                    b.Property<string>("JobTypeName")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_type_name");
+
+                    b.Property<string>("Node")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("node");
+
+                    b.Property<DateTime>("StartTimeUtc")
+                        .HasColumnType("datetime(6)")
+                        .HasColumnName("start_time_utc");
+
+                    b.Property<bool?>("Success")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("success");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("FireInstanceId")
+                        .IsUnique()
+                        .HasDatabaseName("idx_je_fire_instance_id");
+
+                    b.HasIndex("StartTimeUtc")
+                        .HasDatabaseName("idx_je_start_time");
+
+                    b.HasIndex("Success")
+                        .HasDatabaseName("idx_je_success");
+
+                    b.HasIndex("JobGroup", "JobName", "StartTimeUtc")
+                        .HasDatabaseName("idx_je_group_name_start");
+
+                    b.ToTable("job_executions", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzBlobTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<byte[]>("BlobData")
+                        .HasColumnType("longblob")
+                        .HasColumnName("blob_data");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_blob_triggers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCalendar", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("calendar_name");
+
+                    b.Property<byte[]>("Calendar")
+                        .IsRequired()
+                        .HasColumnType("longblob")
+                        .HasColumnName("calendar");
+
+                    b.HasKey("SchedulerName", "CalendarName");
+
+                    b.ToTable("QRTZ_calendars", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCronTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("CronExpression")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("cron_expression");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("time_zone_id");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_cron_triggers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzFiredTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("EntryId")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("entry_id");
+
+                    b.Property<long>("FiredTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("fired_time");
+
+                    b.Property<string>("InstanceName")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("instance_name");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("is_nonconcurrent");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_name");
+
+                    b.Property<int>("Priority")
+                        .HasColumnType("int")
+                        .HasColumnName("priority");
+
+                    b.Property<bool?>("RequestsRecovery")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("requests_recovery");
+
+                    b.Property<long>("ScheduledTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("sched_time");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("state");
+
+                    b.Property<string>("TriggerGroup")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("TriggerName")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_name");
+
+                    b.HasKey("SchedulerName", "EntryId");
+
+                    b.HasIndex("InstanceName")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_inst_name");
+
+                    b.HasIndex("JobGroup")
+                        .HasDatabaseName("idx_QRTZ_ft_job_group");
+
+                    b.HasIndex("JobName")
+                        .HasDatabaseName("idx_QRTZ_ft_job_name");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("idx_QRTZ_ft_job_req_recovery");
+
+                    b.HasIndex("TriggerGroup")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_group");
+
+                    b.HasIndex("TriggerName")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_name");
+
+                    b.HasIndex("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_nm_gp");
+
+                    b.ToTable("QRTZ_fired_triggers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzJobDetail", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_name");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("description");
+
+                    b.Property<bool>("IsDurable")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("is_durable");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("is_nonconcurrent");
+
+                    b.Property<bool>("IsUpdateData")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("is_update_data");
+
+                    b.Property<string>("JobClassName")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_class_name");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("longblob")
+                        .HasColumnName("job_data");
+
+                    b.Property<bool>("RequestsRecovery")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("requests_recovery");
+
+                    b.HasKey("SchedulerName", "JobName", "JobGroup");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("idx_j_req_recovery");
+
+                    b.ToTable("QRTZ_job_details", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzLock", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("LockName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("lock_name");
+
+                    b.HasKey("SchedulerName", "LockName");
+
+                    b.ToTable("QRTZ_locks", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzPausedTriggerGroup", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.HasKey("SchedulerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_paused_trigger_grps", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSchedulerState", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("InstanceName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("instance_name");
+
+                    b.Property<long>("CheckInInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("checkin_interval");
+
+                    b.Property<long>("LastCheckInTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("last_checkin_time");
+
+                    b.HasKey("SchedulerName", "InstanceName");
+
+                    b.ToTable("QRTZ_scheduler_state", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<bool?>("BooleanProperty1")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("bool_prop_1");
+
+                    b.Property<bool?>("BooleanProperty2")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("bool_prop_2");
+
+                    b.Property<decimal?>("DecimalProperty1")
+                        .HasColumnType("numeric")
+                        .HasColumnName("dec_prop_1");
+
+                    b.Property<decimal?>("DecimalProperty2")
+                        .HasColumnType("numeric")
+                        .HasColumnName("dec_prop_2");
+
+                    b.Property<int?>("IntegerProperty1")
+                        .HasColumnType("int")
+                        .HasColumnName("int_prop_1");
+
+                    b.Property<int?>("IntegerProperty2")
+                        .HasColumnType("int")
+                        .HasColumnName("int_prop_2");
+
+                    b.Property<long?>("LongProperty1")
+                        .HasColumnType("bigint")
+                        .HasColumnName("long_prop_1");
+
+                    b.Property<long?>("LongProperty2")
+                        .HasColumnType("bigint")
+                        .HasColumnName("long_prop_2");
+
+                    b.Property<string>("StringProperty1")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("str_prop_1");
+
+                    b.Property<string>("StringProperty2")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("str_prop_2");
+
+                    b.Property<string>("StringProperty3")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("str_prop_3");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("time_zone_id");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_simprop_triggers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimpleTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<long>("RepeatCount")
+                        .HasColumnType("bigint")
+                        .HasColumnName("repeat_count");
+
+                    b.Property<long>("RepeatInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("repeat_interval");
+
+                    b.Property<long>("TimesTriggered")
+                        .HasColumnType("bigint")
+                        .HasColumnName("times_triggered");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_simple_triggers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("calendar_name");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("description");
+
+                    b.Property<long?>("EndTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("end_time");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("longblob")
+                        .HasColumnName("job_data");
+
+                    b.Property<string>("JobGroup")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_name");
+
+                    b.Property<int?>("MisfireInstruction")
+                        .HasColumnType("int")
+                        .HasColumnName("misfire_instr");
+
+                    b.Property<long?>("NextFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("next_fire_time");
+
+                    b.Property<long?>("PreviousFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("prev_fire_time");
+
+                    b.Property<int?>("Priority")
+                        .HasColumnType("int")
+                        .HasColumnName("priority");
+
+                    b.Property<long>("StartTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("start_time");
+
+                    b.Property<string>("TriggerState")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_state");
+
+                    b.Property<string>("TriggerType")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_type");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.HasIndex("NextFireTime")
+                        .HasDatabaseName("idx_t_next_fire_time");
+
+                    b.HasIndex("TriggerState")
+                        .HasDatabaseName("idx_t_state");
+
+                    b.HasIndex("NextFireTime", "TriggerState")
+                        .HasDatabaseName("idx_t_nft_st");
+
+                    b.HasIndex("SchedulerName", "JobName", "JobGroup");
+
+                    b.ToTable("QRTZ_triggers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.AccountRoleLink", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Accounts.Account", null)
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Accounts.Role", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Accounts.Account", null)
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DocumentTrail", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", "Document")
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Document");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGatewayPartner", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Gateway.ApiGateway", "ApiGateway")
+                        .WithMany("Partners")
+                        .HasForeignKey("ApiGatewayId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Partner", "Partner")
+                        .WithMany()
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("ApiGateway");
+
+                    b.Navigation("Partner");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGatewayRoute", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Gateway.BusGateway", "BusGateway")
+                        .WithMany("Routes")
+                        .HasForeignKey("BusGatewayId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Partner", "Partner")
+                        .WithMany()
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("BusGateway");
+
+                    b.Navigation("Partner");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.OwnsMany("SW.Bitween.Domain.ApiCredential", "ApiCredentials", b1 =>
+                        {
+                            b1.Property<int>("PartnerId")
+                                .HasColumnType("int");
+
+                            b1.Property<int>("Id")
+                                .ValueGeneratedOnAdd()
+                                .HasColumnType("int");
+
+                            MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b1.Property<int>("Id"));
+
+                            b1.Property<string>("Key")
+                                .IsRequired()
+                                .HasMaxLength(500)
+                                .IsUnicode(false)
+                                .HasColumnType("varchar(500)");
+
+                            b1.Property<string>("Name")
+                                .IsRequired()
+                                .HasMaxLength(500)
+                                .HasColumnType("varchar(500)");
+
+                            b1.HasKey("PartnerId", "Id");
+
+                            b1.HasIndex("Key")
+                                .IsUnique();
+
+                            b1.ToTable("PartnerApiCredentials", (string)null);
+
+                            b1.WithOwner()
+                                .HasForeignKey("PartnerId");
+
+                            b1.HasData(
+                                new
+                                {
+                                    PartnerId = 1,
+                                    Id = 1,
+                                    Key = "7facc758283844b49cc4ffd26a75b1de",
+                                    Name = "default"
+                                });
+                        });
+
+                    b.Navigation("ApiCredentials");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Subscription", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Subscription", null)
+                        .WithMany()
+                        .HasForeignKey("AggregationForId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("FK_Subscriptions_AggFor");
+
+                    b.HasOne("SW.Bitween.Domain.SubscriptionCategory", "Category")
+                        .WithMany()
+                        .HasForeignKey("CategoryId");
+
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Partner", null)
+                        .WithMany("Subscriptions")
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", null)
+                        .WithMany()
+                        .HasForeignKey("ResponseSubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("FK_Subscriptions_RespSub");
+
+                    b.HasOne("SW.Bitween.Domain.RetryPolicy", "RetryPolicy")
+                        .WithMany()
+                        .HasForeignKey("RetryPolicyId")
+                        .OnDelete(DeleteBehavior.SetNull);
+
+                    b.HasOne("SW.Bitween.Domain.WorkGroup", "WorkGroup")
+                        .WithMany()
+                        .HasForeignKey("WorkGroupId");
+
+                    b.OwnsMany("SW.Bitween.Domain.Schedule", "Schedules", b1 =>
+                        {
+                            b1.Property<int>("SubscriptionId")
+                                .HasColumnType("int");
+
+                            b1.Property<int>("Id")
+                                .ValueGeneratedOnAdd()
+                                .HasColumnType("int");
+
+                            MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b1.Property<int>("Id"));
+
+                            b1.Property<bool>("Backwards")
+                                .HasColumnType("tinyint(1)");
+
+                            b1.Property<long>("On")
+                                .HasColumnType("bigint");
+
+                            b1.Property<byte>("Recurrence")
+                                .HasColumnType("tinyint unsigned");
+
+                            b1.HasKey("SubscriptionId", "Id");
+
+                            b1.ToTable("SubscriptionSchedules", (string)null);
+
+                            b1.WithOwner()
+                                .HasForeignKey("SubscriptionId");
+                        });
+
+                    b.Navigation("Category");
+
+                    b.Navigation("RetryPolicy");
+
+                    b.Navigation("Schedules");
+
+                    b.Navigation("WorkGroup");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionTrail", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Xchange", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeAggregation", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeAggregation", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeDelivery", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeDelivery", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangePromotedProperties", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangePromotedProperties", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeResult", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeResult", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzBlobTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("BlobTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCronTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("CronTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("SimplePropertyTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimpleTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("SimpleTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzJobDetail", "JobDetail")
+                        .WithMany("Triggers")
+                        .HasForeignKey("SchedulerName", "JobName", "JobGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("JobDetail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGateway", b =>
+                {
+                    b.Navigation("Partners");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.Navigation("Routes");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.Navigation("Subscriptions");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzJobDetail", b =>
+                {
+                    b.Navigation("Triggers");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.Navigation("BlobTriggers");
+
+                    b.Navigation("CronTriggers");
+
+                    b.Navigation("SimplePropertyTriggers");
+
+                    b.Navigation("SimpleTriggers");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/SW.Bitween.MySql/Migrations/20260726151533_DropAccountPhone.cs b/SW.Bitween.MySql/Migrations/20260726151533_DropAccountPhone.cs
new file mode 100644
index 00000000..e19d8877
--- /dev/null
+++ b/SW.Bitween.MySql/Migrations/20260726151533_DropAccountPhone.cs
@@ -0,0 +1,38 @@
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace SW.Bitween.MySql.Migrations
+{
+    /// <inheritdoc />
+    public partial class DropAccountPhone : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropColumn(
+                name: "Phone",
+                table: "Accounts");
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.AddColumn<string>(
+                name: "Phone",
+                table: "Accounts",
+                type: "varchar(20)",
+                unicode: false,
+                maxLength: 20,
+                nullable: true)
+                .Annotation("MySql:CharSet", "utf8mb4");
+
+            migrationBuilder.UpdateData(
+                table: "Accounts",
+                keyColumn: "Id",
+                keyValue: 9999,
+                column: "Phone",
+                value: null);
+        }
+    }
+}
diff --git a/SW.Bitween.MySql/Migrations/20260727133053_AddSettings.Designer.cs b/SW.Bitween.MySql/Migrations/20260727133053_AddSettings.Designer.cs
new file mode 100644
index 00000000..e61dd77f
--- /dev/null
+++ b/SW.Bitween.MySql/Migrations/20260727133053_AddSettings.Designer.cs
@@ -0,0 +1,2021 @@
+// <auto-generated />
+using System;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using SW.Bitween.MySql;
+
+#nullable disable
+
+namespace SW.Bitween.MySql.Migrations
+{
+    [DbContext(typeof(BitweenDbContext))]
+    [Migration("20260727133053_AddSettings")]
+    partial class AddSettings
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasAnnotation("ProductVersion", "8.0.23")
+                .HasAnnotation("Relational:MaxIdentifierLength", 64);
+
+            MySqlModelBuilderExtensions.AutoIncrementColumns(modelBuilder);
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.Account", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<bool>("Deleted")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<bool>("Disabled")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("DisplayName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<byte>("EmailProvider")
+                        .HasColumnType("tinyint unsigned");
+
+                    b.Property<byte>("LoginMethods")
+                        .HasColumnType("tinyint unsigned");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Password")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<int>("Role")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Email")
+                        .IsUnique();
+
+                    b.ToTable("Accounts", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 9999,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Deleted = false,
+                            Disabled = false,
+                            DisplayName = "Admin",
+                            Email = "admin@Bitween.systems",
+                            EmailProvider = (byte)0,
+                            LoginMethods = (byte)2,
+                            Password = "$SWHASH$V1$10000$VQCi48eitH4Ml5juvBMOFZrMdQwBbhuIQVXe6RR7qJdDF2bJ",
+                            Role = 0
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.AccountRoleLink", b =>
+                {
+                    b.Property<int>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("RoleId")
+                        .HasColumnType("int");
+
+                    b.HasKey("AccountId", "RoleId");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AccountRoles", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<int>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<byte>("LoginMethod")
+                        .HasColumnType("tinyint unsigned");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AccountId");
+
+                    b.ToTable("RefreshTokens", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.Role", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Description")
+                        .HasMaxLength(500)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<bool>("IsSystem")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<string>("Permissions")
+                        .HasColumnType("longtext");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Name")
+                        .IsUnique();
+
+                    b.ToTable("Roles", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 1,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Full access to everything, including members, roles and settings.",
+                            IsSystem = true,
+                            Name = "Administrator",
+                            Permissions = "[]"
+                        },
+                        new
+                        {
+                            Id = 2,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Runs and configures integrations. Can't manage members, roles or settings.",
+                            IsSystem = true,
+                            Name = "Member",
+                            Permissions = "[]"
+                        },
+                        new
+                        {
+                            Id = 3,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Read-only access to integrations, exchanges and configuration.",
+                            IsSystem = true,
+                            Name = "Viewer",
+                            Permissions = "[]"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DelayedRetry", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("GroupAttemptCounts")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("On")
+                        .HasColumnType("datetime(6)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("On");
+
+                    b.ToTable("DelayedRetries", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Document", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("BusEnabled")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("BusMessageTypeName")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<string>("Code")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<bool?>("DisregardsUnfilteredMessages")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<int>("DocumentFormat")
+                        .HasColumnType("int");
+
+                    b.Property<int>("DuplicateInterval")
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<string>("PromotedProperties")
+                        .HasColumnType("longtext");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("BusMessageTypeName")
+                        .IsUnique();
+
+                    b.HasIndex("Code")
+                        .IsUnique();
+
+                    b.HasIndex("Name")
+                        .IsUnique();
+
+                    b.ToTable("Documents", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 10001,
+                            BusEnabled = false,
+                            DocumentFormat = 0,
+                            DuplicateInterval = 0,
+                            Name = "Aggregation Document",
+                            PromotedProperties = "{}"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DocumentTrail", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<int>("Code")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("StateAfter")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("StateBefore")
+                        .HasColumnType("longtext");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CreatedOn");
+
+                    b.HasIndex("DocumentId");
+
+                    b.ToTable("DocumentTrail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGateway", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("UrlName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("UrlName")
+                        .IsUnique();
+
+                    b.ToTable("ApiGateways", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGatewayPartner", b =>
+                {
+                    b.Property<int>("ApiGatewayId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.HasKey("ApiGatewayId", "PartnerId", "SubscriptionId");
+
+                    b.HasIndex("PartnerId");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("ApiGatewayPartners", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DocumentId");
+
+                    b.ToTable("BusGateways", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGatewayRoute", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("BusGatewayId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("MatchExpression")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("BusGatewayId");
+
+                    b.HasIndex("PartnerId");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("BusGatewayRoutes", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.GlobalAdapterValuesSet", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("Values")
+                        .HasColumnType("longtext");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("GlobalAdapterValuesSets", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Notifier", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<bool>("Inactive")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<bool>("RunOnBadResult")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<bool>("RunOnFailedResult")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("RunOnSubscriptions")
+                        .HasColumnType("longtext");
+
+                    b.Property<bool>("RunOnSuccessfulResult")
+                        .HasColumnType("tinyint(1)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Notifiers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.OnHoldXchange", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("BadData")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("Data")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("FileName")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("References")
+                        .HasMaxLength(1024)
+                        .HasColumnType("varchar(1024)");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("OnHoldXchanges", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("AdapterProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Partners", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 1,
+                            Name = "SYSTEM"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.RetryPolicy", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Groups")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("RetryPolicies", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Setting", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Value")
+                        .HasColumnType("longtext");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Settings", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Subscription", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("AggregateOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<int?>("AggregationForId")
+                        .HasColumnType("int");
+
+                    b.Property<byte>("AggregationTarget")
+                        .HasColumnType("tinyint unsigned");
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("ConsecutiveFailures")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CustomRetryPolicy")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("DocumentFilter")
+                        .HasColumnType("longtext");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<bool>("Inactive")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<bool>("IsRunning")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("LastException")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("MapperId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("MapperProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("MatchExpression")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime?>("PausedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<DateTime?>("ReceiveOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("ReceiverId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("ReceiverProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("ResponseMessageTypeName")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<int?>("ResponseSubscriptionId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("RetryPolicyId")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("Temporary")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<byte>("Type")
+                        .HasColumnType("tinyint unsigned");
+
+                    b.Property<string>("ValidatorId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("ValidatorProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<int?>("WorkGroupId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AggregationForId");
+
+                    b.HasIndex("CategoryId");
+
+                    b.HasIndex("DocumentId");
+
+                    b.HasIndex("PartnerId");
+
+                    b.HasIndex("ResponseSubscriptionId");
+
+                    b.HasIndex("RetryPolicyId");
+
+                    b.HasIndex("WorkGroupId");
+
+                    b.ToTable("Subscriptions", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionCategory", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Code")
+                        .HasColumnType("varchar(255)");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Code")
+                        .IsUnique();
+
+                    b.ToTable("SubscriptionCategory");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionTrail", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<int>("Code")
+                        .HasColumnType("int");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("StateAfter")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("StateBefore")
+                        .HasColumnType("longtext");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("CreatedOn");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("SubscriptionTrail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.WorkGroup", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BusMessageName")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("Options")
+                        .HasColumnType("longtext");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("WorkGroup");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Xchange", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("CorrelationId")
+                        .HasColumnType("longtext");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("GroupAttemptCounts")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("InputContentType")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("InputHash")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("InputName")
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<int>("InputSize")
+                        .HasColumnType("int");
+
+                    b.Property<string>("MapperId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("MapperProperties")
+                        .HasColumnType("longtext");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("References")
+                        .HasMaxLength(1024)
+                        .HasColumnType("varchar(1024)");
+
+                    b.Property<string>("ResponseMessageTypeName")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<int?>("ResponseSubscriptionId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("RetryFor")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<DateTime>("StartedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<int?>("SubscriptionId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DocumentId");
+
+                    b.HasIndex("InputHash");
+
+                    b.HasIndex("RetryFor");
+
+                    b.HasIndex("StartedOn");
+
+                    b.HasIndex("SubscriptionId");
+
+                    b.ToTable("Xchanges", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeAggregation", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<DateTime>("AggregatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("AggregationXchangeId")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AggregationXchangeId");
+
+                    b.ToTable("XchangeAggregations", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeDelivery", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<DateTime>("DeliveredOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("DeliveredOn");
+
+                    b.ToTable("XchangeDeliveries", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeNotification", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Exception")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("FinishedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<int>("NotifierId")
+                        .HasColumnType("int");
+
+                    b.Property<string>("NotifierName")
+                        .HasColumnType("longtext");
+
+                    b.Property<bool>("Success")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("XchangeId")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("XchangeNotifications", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangePromotedProperties", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("Hits")
+                        .HasMaxLength(2000)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(2000)");
+
+                    b.Property<string>("Properties")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("PropertiesRaw")
+                        .HasColumnType("varchar(255)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("PropertiesRaw");
+
+                    b.ToTable("XchangePromotedProperties", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeResult", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("Exception")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("FinishedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<bool>("OutputBad")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("OutputContentType")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("OutputHash")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("OutputName")
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<int>("OutputSize")
+                        .HasColumnType("int");
+
+                    b.Property<bool>("ResponseBad")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("ResponseContentType")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("ResponseHash")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
+                    b.Property<string>("ResponseName")
+                        .HasMaxLength(200)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<int>("ResponseSize")
+                        .HasColumnType("int");
+
+                    b.Property<string>("ResponseXchangeId")
+                        .HasColumnType("longtext");
+
+                    b.Property<bool>("Success")
+                        .HasColumnType("tinyint(1)");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("XchangeResults", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.RunFlagUpdater+RunningResult", b =>
+                {
+                    b.Property<bool>("IsRunning")
+                        .HasColumnType("tinyint(1)");
+
+                    b.ToTable((string)null);
+
+                    b.ToView(null, (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.JobExecution", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("bigint")
+                        .HasColumnName("id");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<long>("Id"));
+
+                    b.Property<string>("Context")
+                        .HasColumnType("longtext")
+                        .HasColumnName("context");
+
+                    b.Property<long?>("DurationMs")
+                        .HasColumnType("bigint")
+                        .HasColumnName("duration_ms");
+
+                    b.Property<DateTime?>("EndTimeUtc")
+                        .HasColumnType("datetime(6)")
+                        .HasColumnName("end_time_utc");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("longtext")
+                        .HasColumnName("error");
+
+                    b.Property<string>("FireInstanceId")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("fire_instance_id");
+
+                    b.Property<string>("JobGroup")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_name");
+
+                    b.Property<string>("JobTypeName")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_type_name");
+
+                    b.Property<string>("Node")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("node");
+
+                    b.Property<DateTime>("StartTimeUtc")
+                        .HasColumnType("datetime(6)")
+                        .HasColumnName("start_time_utc");
+
+                    b.Property<bool?>("Success")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("success");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("FireInstanceId")
+                        .IsUnique()
+                        .HasDatabaseName("idx_je_fire_instance_id");
+
+                    b.HasIndex("StartTimeUtc")
+                        .HasDatabaseName("idx_je_start_time");
+
+                    b.HasIndex("Success")
+                        .HasDatabaseName("idx_je_success");
+
+                    b.HasIndex("JobGroup", "JobName", "StartTimeUtc")
+                        .HasDatabaseName("idx_je_group_name_start");
+
+                    b.ToTable("job_executions", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzBlobTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<byte[]>("BlobData")
+                        .HasColumnType("longblob")
+                        .HasColumnName("blob_data");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_blob_triggers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCalendar", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("calendar_name");
+
+                    b.Property<byte[]>("Calendar")
+                        .IsRequired()
+                        .HasColumnType("longblob")
+                        .HasColumnName("calendar");
+
+                    b.HasKey("SchedulerName", "CalendarName");
+
+                    b.ToTable("QRTZ_calendars", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCronTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("CronExpression")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("cron_expression");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("time_zone_id");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_cron_triggers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzFiredTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("EntryId")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("entry_id");
+
+                    b.Property<long>("FiredTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("fired_time");
+
+                    b.Property<string>("InstanceName")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("instance_name");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("is_nonconcurrent");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_name");
+
+                    b.Property<int>("Priority")
+                        .HasColumnType("int")
+                        .HasColumnName("priority");
+
+                    b.Property<bool?>("RequestsRecovery")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("requests_recovery");
+
+                    b.Property<long>("ScheduledTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("sched_time");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("state");
+
+                    b.Property<string>("TriggerGroup")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("TriggerName")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_name");
+
+                    b.HasKey("SchedulerName", "EntryId");
+
+                    b.HasIndex("InstanceName")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_inst_name");
+
+                    b.HasIndex("JobGroup")
+                        .HasDatabaseName("idx_QRTZ_ft_job_group");
+
+                    b.HasIndex("JobName")
+                        .HasDatabaseName("idx_QRTZ_ft_job_name");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("idx_QRTZ_ft_job_req_recovery");
+
+                    b.HasIndex("TriggerGroup")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_group");
+
+                    b.HasIndex("TriggerName")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_name");
+
+                    b.HasIndex("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasDatabaseName("idx_QRTZ_ft_trig_nm_gp");
+
+                    b.ToTable("QRTZ_fired_triggers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzJobDetail", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_name");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("description");
+
+                    b.Property<bool>("IsDurable")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("is_durable");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("is_nonconcurrent");
+
+                    b.Property<bool>("IsUpdateData")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("is_update_data");
+
+                    b.Property<string>("JobClassName")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_class_name");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("longblob")
+                        .HasColumnName("job_data");
+
+                    b.Property<bool>("RequestsRecovery")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("requests_recovery");
+
+                    b.HasKey("SchedulerName", "JobName", "JobGroup");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("idx_j_req_recovery");
+
+                    b.ToTable("QRTZ_job_details", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzLock", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("LockName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("lock_name");
+
+                    b.HasKey("SchedulerName", "LockName");
+
+                    b.ToTable("QRTZ_locks", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzPausedTriggerGroup", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.HasKey("SchedulerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_paused_trigger_grps", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSchedulerState", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("InstanceName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("instance_name");
+
+                    b.Property<long>("CheckInInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("checkin_interval");
+
+                    b.Property<long>("LastCheckInTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("last_checkin_time");
+
+                    b.HasKey("SchedulerName", "InstanceName");
+
+                    b.ToTable("QRTZ_scheduler_state", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<bool?>("BooleanProperty1")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("bool_prop_1");
+
+                    b.Property<bool?>("BooleanProperty2")
+                        .HasColumnType("tinyint(1)")
+                        .HasColumnName("bool_prop_2");
+
+                    b.Property<decimal?>("DecimalProperty1")
+                        .HasColumnType("numeric")
+                        .HasColumnName("dec_prop_1");
+
+                    b.Property<decimal?>("DecimalProperty2")
+                        .HasColumnType("numeric")
+                        .HasColumnName("dec_prop_2");
+
+                    b.Property<int?>("IntegerProperty1")
+                        .HasColumnType("int")
+                        .HasColumnName("int_prop_1");
+
+                    b.Property<int?>("IntegerProperty2")
+                        .HasColumnType("int")
+                        .HasColumnName("int_prop_2");
+
+                    b.Property<long?>("LongProperty1")
+                        .HasColumnType("bigint")
+                        .HasColumnName("long_prop_1");
+
+                    b.Property<long?>("LongProperty2")
+                        .HasColumnType("bigint")
+                        .HasColumnName("long_prop_2");
+
+                    b.Property<string>("StringProperty1")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("str_prop_1");
+
+                    b.Property<string>("StringProperty2")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("str_prop_2");
+
+                    b.Property<string>("StringProperty3")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("str_prop_3");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("time_zone_id");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_simprop_triggers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimpleTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<long>("RepeatCount")
+                        .HasColumnType("bigint")
+                        .HasColumnName("repeat_count");
+
+                    b.Property<long>("RepeatInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("repeat_interval");
+
+                    b.Property<long>("TimesTriggered")
+                        .HasColumnType("bigint")
+                        .HasColumnName("times_triggered");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.ToTable("QRTZ_simple_triggers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("calendar_name");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("description");
+
+                    b.Property<long?>("EndTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("end_time");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("longblob")
+                        .HasColumnName("job_data");
+
+                    b.Property<string>("JobGroup")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("job_name");
+
+                    b.Property<int?>("MisfireInstruction")
+                        .HasColumnType("int")
+                        .HasColumnName("misfire_instr");
+
+                    b.Property<long?>("NextFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("next_fire_time");
+
+                    b.Property<long?>("PreviousFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("prev_fire_time");
+
+                    b.Property<int?>("Priority")
+                        .HasColumnType("int")
+                        .HasColumnName("priority");
+
+                    b.Property<long>("StartTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("start_time");
+
+                    b.Property<string>("TriggerState")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_state");
+
+                    b.Property<string>("TriggerType")
+                        .IsRequired()
+                        .HasColumnType("varchar(200)")
+                        .HasColumnName("trigger_type");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup");
+
+                    b.HasIndex("NextFireTime")
+                        .HasDatabaseName("idx_t_next_fire_time");
+
+                    b.HasIndex("TriggerState")
+                        .HasDatabaseName("idx_t_state");
+
+                    b.HasIndex("NextFireTime", "TriggerState")
+                        .HasDatabaseName("idx_t_nft_st");
+
+                    b.HasIndex("SchedulerName", "JobName", "JobGroup");
+
+                    b.ToTable("QRTZ_triggers", (string)null);
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.AccountRoleLink", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Accounts.Account", null)
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Accounts.Role", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Accounts.Account", null)
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DocumentTrail", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", "Document")
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Document");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGatewayPartner", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Gateway.ApiGateway", "ApiGateway")
+                        .WithMany("Partners")
+                        .HasForeignKey("ApiGatewayId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Partner", "Partner")
+                        .WithMany()
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("ApiGateway");
+
+                    b.Navigation("Partner");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGatewayRoute", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Gateway.BusGateway", "BusGateway")
+                        .WithMany("Routes")
+                        .HasForeignKey("BusGatewayId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Partner", "Partner")
+                        .WithMany()
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.Navigation("BusGateway");
+
+                    b.Navigation("Partner");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.OwnsMany("SW.Bitween.Domain.ApiCredential", "ApiCredentials", b1 =>
+                        {
+                            b1.Property<int>("PartnerId")
+                                .HasColumnType("int");
+
+                            b1.Property<int>("Id")
+                                .ValueGeneratedOnAdd()
+                                .HasColumnType("int");
+
+                            MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b1.Property<int>("Id"));
+
+                            b1.Property<string>("Key")
+                                .IsRequired()
+                                .HasMaxLength(500)
+                                .IsUnicode(false)
+                                .HasColumnType("varchar(500)");
+
+                            b1.Property<string>("Name")
+                                .IsRequired()
+                                .HasMaxLength(500)
+                                .HasColumnType("varchar(500)");
+
+                            b1.HasKey("PartnerId", "Id");
+
+                            b1.HasIndex("Key")
+                                .IsUnique();
+
+                            b1.ToTable("PartnerApiCredentials", (string)null);
+
+                            b1.WithOwner()
+                                .HasForeignKey("PartnerId");
+
+                            b1.HasData(
+                                new
+                                {
+                                    PartnerId = 1,
+                                    Id = 1,
+                                    Key = "7facc758283844b49cc4ffd26a75b1de",
+                                    Name = "default"
+                                });
+                        });
+
+                    b.Navigation("ApiCredentials");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Subscription", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Subscription", null)
+                        .WithMany()
+                        .HasForeignKey("AggregationForId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("FK_Subscriptions_AggFor");
+
+                    b.HasOne("SW.Bitween.Domain.SubscriptionCategory", "Category")
+                        .WithMany()
+                        .HasForeignKey("CategoryId");
+
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Partner", null)
+                        .WithMany("Subscriptions")
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict);
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", null)
+                        .WithMany()
+                        .HasForeignKey("ResponseSubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("FK_Subscriptions_RespSub");
+
+                    b.HasOne("SW.Bitween.Domain.RetryPolicy", "RetryPolicy")
+                        .WithMany()
+                        .HasForeignKey("RetryPolicyId")
+                        .OnDelete(DeleteBehavior.SetNull);
+
+                    b.HasOne("SW.Bitween.Domain.WorkGroup", "WorkGroup")
+                        .WithMany()
+                        .HasForeignKey("WorkGroupId");
+
+                    b.OwnsMany("SW.Bitween.Domain.Schedule", "Schedules", b1 =>
+                        {
+                            b1.Property<int>("SubscriptionId")
+                                .HasColumnType("int");
+
+                            b1.Property<int>("Id")
+                                .ValueGeneratedOnAdd()
+                                .HasColumnType("int");
+
+                            MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b1.Property<int>("Id"));
+
+                            b1.Property<bool>("Backwards")
+                                .HasColumnType("tinyint(1)");
+
+                            b1.Property<long>("On")
+                                .HasColumnType("bigint");
+
+                            b1.Property<byte>("Recurrence")
+                                .HasColumnType("tinyint unsigned");
+
+                            b1.HasKey("SubscriptionId", "Id");
+
+                            b1.ToTable("SubscriptionSchedules", (string)null);
+
+                            b1.WithOwner()
+                                .HasForeignKey("SubscriptionId");
+                        });
+
+                    b.Navigation("Category");
+
+                    b.Navigation("RetryPolicy");
+
+                    b.Navigation("Schedules");
+
+                    b.Navigation("WorkGroup");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionTrail", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Xchange", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeAggregation", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeAggregation", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeDelivery", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeDelivery", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangePromotedProperties", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangePromotedProperties", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeResult", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeResult", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzBlobTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("BlobTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCronTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("CronTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("SimplePropertyTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimpleTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("SimpleTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzJobDetail", "JobDetail")
+                        .WithMany("Triggers")
+                        .HasForeignKey("SchedulerName", "JobName", "JobGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("JobDetail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGateway", b =>
+                {
+                    b.Navigation("Partners");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.Navigation("Routes");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.Navigation("Subscriptions");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzJobDetail", b =>
+                {
+                    b.Navigation("Triggers");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.Navigation("BlobTriggers");
+
+                    b.Navigation("CronTriggers");
+
+                    b.Navigation("SimplePropertyTriggers");
+
+                    b.Navigation("SimpleTriggers");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/SW.Bitween.MySql/Migrations/20260727133053_AddSettings.cs b/SW.Bitween.MySql/Migrations/20260727133053_AddSettings.cs
new file mode 100644
index 00000000..b93fdb8a
--- /dev/null
+++ b/SW.Bitween.MySql/Migrations/20260727133053_AddSettings.cs
@@ -0,0 +1,43 @@
+using System;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace SW.Bitween.MySql.Migrations
+{
+    /// <inheritdoc />
+    public partial class AddSettings : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.CreateTable(
+                name: "Settings",
+                columns: table => new
+                {
+                    Id = table.Column<string>(type: "varchar(200)", unicode: false, maxLength: 200, nullable: false)
+                        .Annotation("MySql:CharSet", "utf8mb4"),
+                    Value = table.Column<string>(type: "longtext", nullable: true)
+                        .Annotation("MySql:CharSet", "utf8mb4"),
+                    CreatedOn = table.Column<DateTime>(type: "datetime(6)", nullable: false),
+                    CreatedBy = table.Column<string>(type: "longtext", nullable: true)
+                        .Annotation("MySql:CharSet", "utf8mb4"),
+                    ModifiedOn = table.Column<DateTime>(type: "datetime(6)", nullable: true),
+                    ModifiedBy = table.Column<string>(type: "longtext", nullable: true)
+                        .Annotation("MySql:CharSet", "utf8mb4")
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_Settings", x => x.Id);
+                })
+                .Annotation("MySql:CharSet", "utf8mb4");
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropTable(
+                name: "Settings");
+        }
+    }
+}
diff --git a/SW.Bitween.MySql/Migrations/BitweenDbContextModelSnapshot.cs b/SW.Bitween.MySql/Migrations/BitweenDbContextModelSnapshot.cs
index ee14e415..66cd9ef7 100644
--- a/SW.Bitween.MySql/Migrations/BitweenDbContextModelSnapshot.cs
+++ b/SW.Bitween.MySql/Migrations/BitweenDbContextModelSnapshot.cs
@@ -69,11 +69,6 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                         .IsUnicode(false)
                         .HasColumnType("varchar(500)");
 
-                    b.Property<string>("Phone")
-                        .HasMaxLength(20)
-                        .IsUnicode(false)
-                        .HasColumnType("varchar(20)");
-
                     b.Property<int>("Role")
                         .HasColumnType("int");
 
@@ -100,6 +95,21 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                         });
                 });
 
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.AccountRoleLink", b =>
+                {
+                    b.Property<int>("AccountId")
+                        .HasColumnType("int");
+
+                    b.Property<int>("RoleId")
+                        .HasColumnType("int");
+
+                    b.HasKey("AccountId", "RoleId");
+
+                    b.HasIndex("RoleId");
+
+                    b.ToTable("AccountRoles", (string)null);
+                });
+
             modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
                 {
                     b.Property<string>("Id")
@@ -123,6 +133,78 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                     b.ToTable("RefreshTokens", (string)null);
                 });
 
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.Role", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Description")
+                        .HasMaxLength(500)
+                        .HasColumnType("varchar(500)");
+
+                    b.Property<bool>("IsSystem")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("varchar(100)");
+
+                    b.Property<string>("Permissions")
+                        .HasColumnType("longtext");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Name")
+                        .IsUnique();
+
+                    b.ToTable("Roles", (string)null);
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 1,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Full access to everything, including members, roles and settings.",
+                            IsSystem = true,
+                            Name = "Administrator",
+                            Permissions = "[]"
+                        },
+                        new
+                        {
+                            Id = 2,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Runs and configures integrations. Can't manage members, roles or settings.",
+                            IsSystem = true,
+                            Name = "Member",
+                            Permissions = "[]"
+                        },
+                        new
+                        {
+                            Id = 3,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Read-only access to integrations, exchanges and configuration.",
+                            IsSystem = true,
+                            Name = "Viewer",
+                            Permissions = "[]"
+                        });
+                });
+
             modelBuilder.Entity("SW.Bitween.Domain.DelayedRetry", b =>
                 {
                     b.Property<string>("Id")
@@ -146,8 +228,11 @@ protected override void BuildModel(ModelBuilder modelBuilder)
             modelBuilder.Entity("SW.Bitween.Domain.Document", b =>
                 {
                     b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
                         .HasColumnType("int");
 
+                    MySqlPropertyBuilderExtensions.UseMySqlIdentityColumn(b.Property<int>("Id"));
+
                     b.Property<bool>("BusEnabled")
                         .HasColumnType("tinyint(1)");
 
@@ -156,6 +241,11 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                         .IsUnicode(false)
                         .HasColumnType("varchar(500)");
 
+                    b.Property<string>("Code")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(50)");
+
                     b.Property<bool?>("DisregardsUnfilteredMessages")
                         .HasColumnType("tinyint(1)");
 
@@ -179,6 +269,9 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                     b.HasIndex("BusMessageTypeName")
                         .IsUnique();
 
+                    b.HasIndex("Code")
+                        .IsUnique();
+
                     b.HasIndex("Name")
                         .IsUnique();
 
@@ -529,6 +622,33 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                     b.ToTable("RetryPolicies", (string)null);
                 });
 
+            modelBuilder.Entity("SW.Bitween.Domain.Setting", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("varchar(200)");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Value")
+                        .HasColumnType("longtext");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Settings", (string)null);
+                });
+
             modelBuilder.Entity("SW.Bitween.Domain.Subscription", b =>
                 {
                     b.Property<int>("Id")
@@ -1532,6 +1652,21 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                     b.ToTable("QRTZ_triggers", (string)null);
                 });
 
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.AccountRoleLink", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Accounts.Account", null)
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.HasOne("SW.Bitween.Domain.Accounts.Role", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+                });
+
             modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
                 {
                     b.HasOne("SW.Bitween.Domain.Accounts.Account", null)
diff --git a/SW.Bitween.NativeAdapters/Interfaces.cs b/SW.Bitween.NativeAdapters/Interfaces.cs
index b03f2083..a204ce5b 100644
--- a/SW.Bitween.NativeAdapters/Interfaces.cs
+++ b/SW.Bitween.NativeAdapters/Interfaces.cs
@@ -9,6 +9,13 @@ public interface INativeAdapter
     public Type StartupValuesType { get; }
 }
 
+/// <summary>
+/// Marks an adapter that only works with a Rebex license key configured. Such adapters are
+/// always registered — the key is a setting that can change at runtime — but they're kept out
+/// of the adapter pickers while no key is set.
+/// </summary>
+public interface IRequiresRebexLicense { }
+
 public interface INativeInfolinkHandler : INativeAdapter, IInfolinkHandler { }
 public interface INativeInfolinkMapper : INativeAdapter, IInfolinkHandler { }
 public interface INativeInfolinkValidator : IInfolinkValidator, INativeAdapter { }
diff --git a/SW.Bitween.NativeAdapters/RebexFtpReceiver/NativeRebexFtpReceiver.cs b/SW.Bitween.NativeAdapters/RebexFtpReceiver/NativeRebexFtpReceiver.cs
index 18e8335b..65dadebf 100644
--- a/SW.Bitween.NativeAdapters/RebexFtpReceiver/NativeRebexFtpReceiver.cs
+++ b/SW.Bitween.NativeAdapters/RebexFtpReceiver/NativeRebexFtpReceiver.cs
@@ -4,7 +4,7 @@
 
 namespace SW.Bitween.NativeAdapters.RebexFtpReceiver;
 
-public class NativeRebexFtpReceiver : INativeInfolinkReceiver
+public class NativeRebexFtpReceiver : INativeInfolinkReceiver, IRequiresRebexLicense
 {
     private readonly string? _licenseKey;
     private RebexFtpReceiverInput _options = new();
diff --git a/SW.Bitween.NativeAdapters/RebexFtpUploadHandler/NativeRebexFtpUploadHandler.cs b/SW.Bitween.NativeAdapters/RebexFtpUploadHandler/NativeRebexFtpUploadHandler.cs
index bee8c876..7041bf85 100644
--- a/SW.Bitween.NativeAdapters/RebexFtpUploadHandler/NativeRebexFtpUploadHandler.cs
+++ b/SW.Bitween.NativeAdapters/RebexFtpUploadHandler/NativeRebexFtpUploadHandler.cs
@@ -4,7 +4,7 @@
 
 namespace SW.Bitween.NativeAdapters.RebexFtpUploadHandler;
 
-public class NativeRebexFtpUploadHandler : INativeInfolinkHandler
+public class NativeRebexFtpUploadHandler : INativeInfolinkHandler, IRequiresRebexLicense
 {
     private readonly string? _licenseKey;
     private RebexFtpUploadHandlerInput _options = new();
diff --git a/SW.Bitween.NativeAdapters/RebexPop3Receiver/NativeRebexPop3Receiver.cs b/SW.Bitween.NativeAdapters/RebexPop3Receiver/NativeRebexPop3Receiver.cs
index 7ef949f7..328de326 100644
--- a/SW.Bitween.NativeAdapters/RebexPop3Receiver/NativeRebexPop3Receiver.cs
+++ b/SW.Bitween.NativeAdapters/RebexPop3Receiver/NativeRebexPop3Receiver.cs
@@ -4,7 +4,7 @@
 
 namespace SW.Bitween.NativeAdapters.RebexPop3Receiver;
 
-public class NativeRebexPop3Receiver : INativeInfolinkReceiver
+public class NativeRebexPop3Receiver : INativeInfolinkReceiver, IRequiresRebexLicense
 {
     private readonly string? _licenseKey;
 
diff --git a/SW.Bitween.NativeAdapters/ServiceCollectionExtensions.cs b/SW.Bitween.NativeAdapters/ServiceCollectionExtensions.cs
index 5f0c882a..fb0d0750 100644
--- a/SW.Bitween.NativeAdapters/ServiceCollectionExtensions.cs
+++ b/SW.Bitween.NativeAdapters/ServiceCollectionExtensions.cs
@@ -13,7 +13,13 @@ namespace SW.Bitween.NativeAdapters;
 
 public static class ServiceCollectionExtensions
 {
-    public static void AddNativeAdapters(this IServiceCollection serviceCollection, string? rebexLicenseKey = null)
+    /// <param name="rebexLicenseKey">
+    /// Reads the current Rebex license key. Called per adapter instance rather than once here,
+    /// because the key is a setting that can be changed while the app is running — pasting one in
+    /// makes the Rebex adapters usable without a restart.
+    /// </param>
+    public static void AddNativeAdapters(this IServiceCollection serviceCollection,
+        Func<IServiceProvider, string?>? rebexLicenseKey = null)
     {
         serviceCollection.ConfigureHttpClientDefaults(builder =>
         {
@@ -54,16 +60,16 @@ public static void AddNativeAdapters(this IServiceCollection serviceCollection,
         serviceCollection.AddScoped<INativeInfolinkReceiver, NativeAzureBlobReceiver>();
         serviceCollection.AddScoped<INativeAdapter, NativeAzureBlobReceiver>();
 
-        if (!string.IsNullOrEmpty(rebexLicenseKey))
+        if (rebexLicenseKey is not null)
         {
-            serviceCollection.AddScoped<INativeInfolinkReceiver>(_ => new NativeRebexPop3Receiver(rebexLicenseKey));
-            serviceCollection.AddScoped<INativeAdapter>(_ => new NativeRebexPop3Receiver(rebexLicenseKey));
+            serviceCollection.AddScoped<INativeInfolinkReceiver>(sp => new NativeRebexPop3Receiver(rebexLicenseKey(sp)));
+            serviceCollection.AddScoped<INativeAdapter>(sp => new NativeRebexPop3Receiver(rebexLicenseKey(sp)));
 
-            serviceCollection.AddScoped<INativeInfolinkHandler>(_ => new NativeRebexFtpUploadHandler(rebexLicenseKey));
-            serviceCollection.AddScoped<INativeAdapter>(_ => new NativeRebexFtpUploadHandler(rebexLicenseKey));
+            serviceCollection.AddScoped<INativeInfolinkHandler>(sp => new NativeRebexFtpUploadHandler(rebexLicenseKey(sp)));
+            serviceCollection.AddScoped<INativeAdapter>(sp => new NativeRebexFtpUploadHandler(rebexLicenseKey(sp)));
 
-            serviceCollection.AddScoped<INativeInfolinkReceiver>(_ => new NativeRebexFtpReceiver(rebexLicenseKey));
-            serviceCollection.AddScoped<INativeAdapter>(_ => new NativeRebexFtpReceiver(rebexLicenseKey));
+            serviceCollection.AddScoped<INativeInfolinkReceiver>(sp => new NativeRebexFtpReceiver(rebexLicenseKey(sp)));
+            serviceCollection.AddScoped<INativeAdapter>(sp => new NativeRebexFtpReceiver(rebexLicenseKey(sp)));
         }
     }
 }
\ No newline at end of file
diff --git a/SW.Bitween.PgSql/BitweenDbContext.cs b/SW.Bitween.PgSql/BitweenDbContext.cs
index b159f6ce..44f45cc3 100644
--- a/SW.Bitween.PgSql/BitweenDbContext.cs
+++ b/SW.Bitween.PgSql/BitweenDbContext.cs
@@ -41,12 +41,13 @@ protected override void OnModelCreating(ModelBuilder modelBuilder)
             modelBuilder.Entity<Document>(b =>
             {
                 //b.ToTable("Documents");
-                b.Property(p => p.Id).ValueGeneratedNever();
                 b.Property(p => p.Name).HasMaxLength(100).IsRequired();
+                b.Property(p => p.Code).HasMaxLength(50);
                 b.Property(p => p.BusMessageTypeName).HasMaxLength(500);
                 b.Property(p => p.PromotedProperties).StoreAsJson().HasColumnType("jsonb");
                 b.Property(p => p.DisregardsUnfilteredMessages).IsRequired(false);
                 b.HasIndex(p => p.Name).IsUnique();
+                b.HasIndex(p => p.Code).IsUnique();
                 b.HasIndex(p => p.BusMessageTypeName).IsUnique();
 
                 b.HasMany<Subscription>().WithOne().HasForeignKey(p => p.DocumentId).OnDelete(DeleteBehavior.Restrict);
@@ -320,7 +321,6 @@ protected override void OnModelCreating(ModelBuilder modelBuilder)
                 b.HasIndex(p => p.Email).IsUnique();
 
                 b.Property(p => p.Email).IsUnicode(false).HasMaxLength(200);
-                b.Property(p => p.Phone).IsUnicode(false).HasMaxLength(20);
                 b.Property(p => p.Password).IsUnicode(false).HasMaxLength(500);
                 b.Property(p => p.DisplayName).IsRequired().HasMaxLength(200);
 
@@ -354,6 +354,37 @@ protected override void OnModelCreating(ModelBuilder modelBuilder)
                 b.Property(p => p.LoginMethod).HasConversion<byte>();
             });
 
+            modelBuilder.Entity<Role>(b =>
+            {
+                b.ToTable("Roles");
+                b.HasKey(p => p.Id);
+                b.Property(p => p.Id).ValueGeneratedOnAdd();
+                b.HasIndex(p => p.Name).IsUnique();
+
+                b.Property(p => p.Name).IsRequired().HasMaxLength(100);
+                b.Property(p => p.Description).HasMaxLength(500);
+                b.Property(p => p.Permissions).StoreAsJson();
+
+                b.HasData(SystemRoleSeed());
+            });
+
+            modelBuilder.Entity<AccountRoleLink>(b =>
+            {
+                b.ToTable("AccountRoles");
+                b.HasKey(p => new { p.AccountId, p.RoleId });
+                b.HasOne<Account>().WithMany().HasForeignKey(p => p.AccountId).OnDelete(DeleteBehavior.Cascade);
+                b.HasOne<Role>().WithMany().HasForeignKey(p => p.RoleId).OnDelete(DeleteBehavior.Cascade);
+            });
+
+            modelBuilder.Entity<Setting>(b =>
+            {
+                b.ToTable("Settings");
+                b.HasKey(p => p.Id);
+                // Id is the catalog key, e.g. "Theme.PrimaryColor". Value is left unbounded:
+                // it carries anything from a hex color to a license key or a page of blurb.
+                b.Property(p => p.Id).IsUnicode(false).HasMaxLength(200);
+            });
+
             modelBuilder.Entity<RetryPolicy>(b =>
             {
                 b.HasKey(p => p.Id);
diff --git a/SW.Bitween.PgSql/Migrations/20260719141125_AddDocumentCodeAndAutoId.Designer.cs b/SW.Bitween.PgSql/Migrations/20260719141125_AddDocumentCodeAndAutoId.Designer.cs
new file mode 100644
index 00000000..77f9ae78
--- /dev/null
+++ b/SW.Bitween.PgSql/Migrations/20260719141125_AddDocumentCodeAndAutoId.Designer.cs
@@ -0,0 +1,2171 @@
+// <auto-generated />
+using System;
+using System.Collections.Generic;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
+using SW.Bitween.Model;
+using SW.Bitween.PgSql;
+
+#nullable disable
+
+namespace SW.Bitween.PgSql.Migrations
+{
+    [DbContext(typeof(BitweenDbContext))]
+    [Migration("20260719141125_AddDocumentCodeAndAutoId")]
+    partial class AddDocumentCodeAndAutoId
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasDefaultSchema("infolink")
+                .HasAnnotation("ProductVersion", "8.0.23")
+                .HasAnnotation("Relational:MaxIdentifierLength", 63);
+
+            NpgsqlModelBuilderExtensions.UseIdentityByDefaultColumns(modelBuilder);
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.Account", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<bool>("Deleted")
+                        .HasColumnType("boolean")
+                        .HasColumnName("deleted");
+
+                    b.Property<bool>("Disabled")
+                        .HasColumnType("boolean")
+                        .HasColumnName("disabled");
+
+                    b.Property<string>("DisplayName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("display_name");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("email");
+
+                    b.Property<byte>("EmailProvider")
+                        .HasColumnType("smallint")
+                        .HasColumnName("email_provider");
+
+                    b.Property<byte>("LoginMethods")
+                        .HasColumnType("smallint")
+                        .HasColumnName("login_methods");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.Property<string>("Password")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("password");
+
+                    b.Property<string>("Phone")
+                        .HasMaxLength(20)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(20)")
+                        .HasColumnName("phone");
+
+                    b.Property<int>("Role")
+                        .HasColumnType("integer")
+                        .HasColumnName("role");
+
+                    b.HasKey("Id")
+                        .HasName("pk_accounts");
+
+                    b.HasIndex("Email")
+                        .IsUnique()
+                        .HasDatabaseName("ix_accounts_email");
+
+                    b.ToTable("Accounts", "infolink");
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 9999,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Deleted = false,
+                            Disabled = false,
+                            DisplayName = "Admin",
+                            Email = "admin@Bitween.systems",
+                            EmailProvider = (byte)0,
+                            LoginMethods = (byte)2,
+                            Password = "$SWHASH$V1$10000$VQCi48eitH4Ml5juvBMOFZrMdQwBbhuIQVXe6RR7qJdDF2bJ",
+                            Role = 0
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<int>("AccountId")
+                        .HasColumnType("integer")
+                        .HasColumnName("account_id");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<byte>("LoginMethod")
+                        .HasColumnType("smallint")
+                        .HasColumnName("login_method");
+
+                    b.HasKey("Id")
+                        .HasName("pk_refresh_tokens");
+
+                    b.HasIndex("AccountId")
+                        .HasDatabaseName("ix_refresh_tokens_account_id");
+
+                    b.ToTable("RefreshTokens", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DelayedRetry", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<Dictionary<string, int>>("GroupAttemptCounts")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("group_attempt_counts");
+
+                    b.Property<DateTime>("On")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("on");
+
+                    b.HasKey("Id")
+                        .HasName("pk_delayed_retry");
+
+                    b.HasIndex("On")
+                        .HasDatabaseName("ix_delayed_retry_on");
+
+                    b.ToTable("delayed_retry", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Document", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("BusEnabled")
+                        .HasColumnType("boolean")
+                        .HasColumnName("bus_enabled");
+
+                    b.Property<string>("BusMessageTypeName")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("bus_message_type_name");
+
+                    b.Property<string>("Code")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("code");
+
+                    b.Property<bool?>("DisregardsUnfilteredMessages")
+                        .HasColumnType("boolean")
+                        .HasColumnName("disregards_unfiltered_messages");
+
+                    b.Property<int>("DocumentFormat")
+                        .HasColumnType("integer")
+                        .HasColumnName("document_format");
+
+                    b.Property<int>("DuplicateInterval")
+                        .HasColumnType("integer")
+                        .HasColumnName("duplicate_interval");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("name");
+
+                    b.Property<string>("PromotedProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("promoted_properties");
+
+                    b.HasKey("Id")
+                        .HasName("pk_document");
+
+                    b.HasIndex("BusMessageTypeName")
+                        .IsUnique()
+                        .HasDatabaseName("ix_document_bus_message_type_name");
+
+                    b.HasIndex("Code")
+                        .IsUnique()
+                        .HasDatabaseName("ix_document_code");
+
+                    b.HasIndex("Name")
+                        .IsUnique()
+                        .HasDatabaseName("ix_document_name");
+
+                    b.ToTable("document", "infolink");
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 10001,
+                            BusEnabled = false,
+                            DocumentFormat = 0,
+                            DuplicateInterval = 0,
+                            Name = "Aggregation Document",
+                            PromotedProperties = "{}"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DocumentTrail", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("text")
+                        .HasColumnName("id");
+
+                    b.Property<int>("Code")
+                        .HasColumnType("integer")
+                        .HasColumnName("code");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("integer")
+                        .HasColumnName("document_id");
+
+                    b.Property<string>("StateAfter")
+                        .HasColumnType("text")
+                        .HasColumnName("state_after");
+
+                    b.Property<string>("StateBefore")
+                        .HasColumnType("text")
+                        .HasColumnName("state_before");
+
+                    b.HasKey("Id")
+                        .HasName("pk_document_trail");
+
+                    b.HasIndex("CreatedOn")
+                        .HasDatabaseName("ix_document_trail_created_on");
+
+                    b.HasIndex("DocumentId")
+                        .HasDatabaseName("ix_document_trail_document_id");
+
+                    b.ToTable("document_trail", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGateway", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("name");
+
+                    b.Property<string>("UrlName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("url_name");
+
+                    b.HasKey("Id")
+                        .HasName("pk_api_gateway");
+
+                    b.HasIndex("UrlName")
+                        .IsUnique()
+                        .HasDatabaseName("ix_api_gateway_url_name");
+
+                    b.ToTable("api_gateway", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGatewayPartner", b =>
+                {
+                    b.Property<int>("ApiGatewayId")
+                        .HasColumnType("integer")
+                        .HasColumnName("api_gateway_id");
+
+                    b.Property<int>("PartnerId")
+                        .HasColumnType("integer")
+                        .HasColumnName("partner_id");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("subscription_id");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.HasKey("ApiGatewayId", "PartnerId", "SubscriptionId")
+                        .HasName("pk_api_gateway_partner");
+
+                    b.HasIndex("PartnerId")
+                        .HasDatabaseName("ix_api_gateway_partner_partner_id");
+
+                    b.HasIndex("SubscriptionId")
+                        .HasDatabaseName("ix_api_gateway_partner_subscription_id");
+
+                    b.ToTable("api_gateway_partner", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("integer")
+                        .HasColumnName("document_id");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("name");
+
+                    b.HasKey("Id")
+                        .HasName("pk_bus_gateway");
+
+                    b.HasIndex("DocumentId")
+                        .HasDatabaseName("ix_bus_gateway_document_id");
+
+                    b.ToTable("bus_gateway", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGatewayRoute", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("BusGatewayId")
+                        .HasColumnType("integer")
+                        .HasColumnName("bus_gateway_id");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("MatchExpression")
+                        .HasColumnType("text")
+                        .HasColumnName("match_expression");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("integer")
+                        .HasColumnName("partner_id");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("subscription_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_bus_gateway_route");
+
+                    b.HasIndex("BusGatewayId")
+                        .HasDatabaseName("ix_bus_gateway_route_bus_gateway_id");
+
+                    b.HasIndex("PartnerId")
+                        .HasDatabaseName("ix_bus_gateway_route_partner_id");
+
+                    b.HasIndex("SubscriptionId")
+                        .HasDatabaseName("ix_bus_gateway_route_subscription_id");
+
+                    b.ToTable("bus_gateway_route", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.GlobalAdapterValuesSet", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("text")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("text")
+                        .HasColumnName("name");
+
+                    b.Property<Dictionary<string, string>>("Values")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("values");
+
+                    b.HasKey("Id")
+                        .HasName("pk_global_adapter_values_set");
+
+                    b.ToTable("global_adapter_values_set", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Notifier", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("handler_id");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("text")
+                        .HasColumnName("handler_properties");
+
+                    b.Property<bool>("Inactive")
+                        .HasColumnType("boolean")
+                        .HasColumnName("inactive");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("name");
+
+                    b.Property<bool>("RunOnBadResult")
+                        .HasColumnType("boolean")
+                        .HasColumnName("run_on_bad_result");
+
+                    b.Property<bool>("RunOnFailedResult")
+                        .HasColumnType("boolean")
+                        .HasColumnName("run_on_failed_result");
+
+                    b.Property<int[]>("RunOnSubscriptions")
+                        .HasColumnType("integer[]")
+                        .HasColumnName("run_on_subscriptions");
+
+                    b.Property<bool>("RunOnSuccessfulResult")
+                        .HasColumnType("boolean")
+                        .HasColumnName("run_on_successful_result");
+
+                    b.HasKey("Id")
+                        .HasName("pk_notifier");
+
+                    b.ToTable("notifier", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.OnHoldXchange", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("BadData")
+                        .HasColumnType("boolean")
+                        .HasColumnName("bad_data");
+
+                    b.Property<string>("Data")
+                        .HasColumnType("text")
+                        .HasColumnName("data");
+
+                    b.Property<string>("FileName")
+                        .HasColumnType("text")
+                        .HasColumnName("file_name");
+
+                    b.Property<string[]>("References")
+                        .HasColumnType("text[]")
+                        .HasColumnName("references");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("subscription_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_on_hold_xchange");
+
+                    b.HasIndex("SubscriptionId")
+                        .HasDatabaseName("ix_on_hold_xchange_subscription_id");
+
+                    b.ToTable("on_hold_xchange", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<Dictionary<string, string>>("AdapterProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("adapter_properties");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("name");
+
+                    b.HasKey("Id")
+                        .HasName("pk_partner");
+
+                    b.ToTable("partner", "infolink");
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 1,
+                            Name = "SYSTEM"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.RetryPolicy", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("Groups")
+                        .HasColumnType("text")
+                        .HasColumnName("groups");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("name");
+
+                    b.HasKey("Id")
+                        .HasName("pk_retry_policy");
+
+                    b.ToTable("retry_policy", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Subscription", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("AggregateOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("aggregate_on");
+
+                    b.Property<int?>("AggregationForId")
+                        .HasColumnType("integer")
+                        .HasColumnName("aggregation_for_id");
+
+                    b.Property<byte>("AggregationTarget")
+                        .HasColumnType("smallint")
+                        .HasColumnName("aggregation_target");
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("integer")
+                        .HasColumnName("category_id");
+
+                    b.Property<int>("ConsecutiveFailures")
+                        .HasColumnType("integer")
+                        .HasColumnName("consecutive_failures");
+
+                    b.Property<string>("CustomRetryPolicy")
+                        .HasColumnType("text")
+                        .HasColumnName("custom_retry_policy");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("DocumentFilter")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("document_filter");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("integer")
+                        .HasColumnName("document_id");
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("handler_id");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("HandlerProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("handler_properties");
+
+                    b.Property<bool>("Inactive")
+                        .HasColumnType("boolean")
+                        .HasColumnName("inactive");
+
+                    b.Property<bool>("IsRunning")
+                        .HasColumnType("boolean")
+                        .HasColumnName("is_running");
+
+                    b.Property<string>("LastException")
+                        .HasColumnType("text")
+                        .HasColumnName("last_exception");
+
+                    b.Property<string>("MapperId")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("mapper_id");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("MapperProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("mapper_properties");
+
+                    b.Property<string>("MatchExpression")
+                        .HasColumnType("text")
+                        .HasColumnName("match_expression");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("name");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("integer")
+                        .HasColumnName("partner_id");
+
+                    b.Property<DateTime?>("PausedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("paused_on");
+
+                    b.Property<DateTime?>("ReceiveOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("receive_on");
+
+                    b.Property<string>("ReceiverId")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("receiver_id");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("ReceiverProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("receiver_properties");
+
+                    b.Property<string>("ResponseMessageTypeName")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("response_message_type_name");
+
+                    b.Property<int?>("ResponseSubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("response_subscription_id");
+
+                    b.Property<int?>("RetryPolicyId")
+                        .HasColumnType("integer")
+                        .HasColumnName("retry_policy_id");
+
+                    b.Property<bool>("Temporary")
+                        .HasColumnType("boolean")
+                        .HasColumnName("temporary");
+
+                    b.Property<byte>("Type")
+                        .HasColumnType("smallint")
+                        .HasColumnName("type");
+
+                    b.Property<string>("ValidatorId")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("validator_id");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("ValidatorProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("validator_properties");
+
+                    b.Property<int?>("WorkGroupId")
+                        .HasColumnType("integer")
+                        .HasColumnName("work_group_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_subscription");
+
+                    b.HasIndex("AggregationForId")
+                        .HasDatabaseName("ix_subscription_aggregation_for_id");
+
+                    b.HasIndex("CategoryId")
+                        .HasDatabaseName("ix_subscription_category_id");
+
+                    b.HasIndex("DocumentId")
+                        .HasDatabaseName("ix_subscription_document_id");
+
+                    b.HasIndex("PartnerId")
+                        .HasDatabaseName("ix_subscription_partner_id");
+
+                    b.HasIndex("ResponseSubscriptionId")
+                        .HasDatabaseName("ix_subscription_response_subscription_id");
+
+                    b.HasIndex("RetryPolicyId")
+                        .HasDatabaseName("ix_subscription_retry_policy_id");
+
+                    b.HasIndex("WorkGroupId")
+                        .HasDatabaseName("ix_subscription_work_group_id");
+
+                    b.ToTable("subscription", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionCategory", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Code")
+                        .HasColumnType("text")
+                        .HasColumnName("code");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("text")
+                        .HasColumnName("description");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.HasKey("Id")
+                        .HasName("pk_subscription_category");
+
+                    b.HasIndex("Code")
+                        .IsUnique()
+                        .HasDatabaseName("ix_subscription_category_code");
+
+                    b.ToTable("subscription_category", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionTrail", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<int>("Code")
+                        .HasColumnType("integer")
+                        .HasColumnName("code");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("StateAfter")
+                        .HasColumnType("text")
+                        .HasColumnName("state_after");
+
+                    b.Property<string>("StateBefore")
+                        .HasColumnType("text")
+                        .HasColumnName("state_before");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("subscription_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_subscription_trail");
+
+                    b.HasIndex("CreatedOn")
+                        .HasDatabaseName("ix_subscription_trail_created_on");
+
+                    b.HasIndex("SubscriptionId")
+                        .HasDatabaseName("ix_subscription_trail_subscription_id");
+
+                    b.ToTable("subscription_trail", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.WorkGroup", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BusMessageName")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("bus_message_name");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("text")
+                        .HasColumnName("name");
+
+                    b.Property<WorkGroupOptions>("Options")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("options");
+
+                    b.HasKey("Id")
+                        .HasName("pk_work_group");
+
+                    b.ToTable("work_group", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Xchange", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<string>("CorrelationId")
+                        .HasColumnType("text")
+                        .HasColumnName("correlation_id");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("integer")
+                        .HasColumnName("document_id");
+
+                    b.Property<IReadOnlyDictionary<string, int>>("GroupAttemptCounts")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("group_attempt_counts");
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("handler_id");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("HandlerProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("handler_properties");
+
+                    b.Property<string>("InputContentType")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("input_content_type");
+
+                    b.Property<string>("InputHash")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("input_hash");
+
+                    b.Property<string>("InputName")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("input_name");
+
+                    b.Property<int>("InputSize")
+                        .HasColumnType("integer")
+                        .HasColumnName("input_size");
+
+                    b.Property<string>("MapperId")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("mapper_id");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("MapperProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("mapper_properties");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("integer")
+                        .HasColumnName("partner_id");
+
+                    b.Property<string[]>("References")
+                        .HasColumnType("text[]")
+                        .HasColumnName("references");
+
+                    b.Property<string>("ResponseMessageTypeName")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("response_message_type_name");
+
+                    b.Property<int?>("ResponseSubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("response_subscription_id");
+
+                    b.Property<string>("RetryFor")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("retry_for");
+
+                    b.Property<DateTime>("StartedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("started_on");
+
+                    b.Property<int?>("SubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("subscription_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_xchange");
+
+                    b.HasIndex("DocumentId")
+                        .HasDatabaseName("ix_xchange_document_id");
+
+                    b.HasIndex("InputHash")
+                        .HasDatabaseName("ix_xchange_input_hash");
+
+                    b.HasIndex("RetryFor")
+                        .HasDatabaseName("ix_xchange_retry_for");
+
+                    b.HasIndex("StartedOn")
+                        .HasDatabaseName("ix_xchange_started_on");
+
+                    b.HasIndex("SubscriptionId")
+                        .HasDatabaseName("ix_xchange_subscription_id");
+
+                    b.ToTable("xchange", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeAggregation", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<DateTime>("AggregatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("aggregated_on");
+
+                    b.Property<string>("AggregationXchangeId")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("aggregation_xchange_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_xchange_aggregation");
+
+                    b.HasIndex("AggregationXchangeId")
+                        .HasDatabaseName("ix_xchange_aggregation_aggregation_xchange_id");
+
+                    b.ToTable("xchange_aggregation", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeDelivery", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<DateTime>("DeliveredOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("delivered_on");
+
+                    b.HasKey("Id")
+                        .HasName("pk_xchange_delivery");
+
+                    b.HasIndex("DeliveredOn")
+                        .HasDatabaseName("ix_xchange_delivery_delivered_on");
+
+                    b.ToTable("xchange_delivery", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeNotification", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Exception")
+                        .HasColumnType("text")
+                        .HasColumnName("exception");
+
+                    b.Property<DateTime>("FinishedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("finished_on");
+
+                    b.Property<int>("NotifierId")
+                        .HasColumnType("integer")
+                        .HasColumnName("notifier_id");
+
+                    b.Property<string>("NotifierName")
+                        .HasColumnType("text")
+                        .HasColumnName("notifier_name");
+
+                    b.Property<bool>("Success")
+                        .HasColumnType("boolean")
+                        .HasColumnName("success");
+
+                    b.Property<string>("XchangeId")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("xchange_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_xchange_notification");
+
+                    b.ToTable("xchange_notification", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangePromotedProperties", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<int[]>("Hits")
+                        .HasColumnType("integer[]")
+                        .HasColumnName("hits");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("Properties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("properties");
+
+                    b.Property<string>("PropertiesRaw")
+                        .HasColumnType("text")
+                        .HasColumnName("properties_raw");
+
+                    b.HasKey("Id")
+                        .HasName("pk_xchange_promoted_properties");
+
+                    b.HasIndex("PropertiesRaw")
+                        .HasDatabaseName("ix_xchange_promoted_properties_properties_raw");
+
+                    b.ToTable("xchange_promoted_properties", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeResult", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Exception")
+                        .HasColumnType("text")
+                        .HasColumnName("exception");
+
+                    b.Property<DateTime>("FinishedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("finished_on");
+
+                    b.Property<bool>("OutputBad")
+                        .HasColumnType("boolean")
+                        .HasColumnName("output_bad");
+
+                    b.Property<string>("OutputContentType")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("output_content_type");
+
+                    b.Property<string>("OutputHash")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("output_hash");
+
+                    b.Property<string>("OutputName")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("output_name");
+
+                    b.Property<int>("OutputSize")
+                        .HasColumnType("integer")
+                        .HasColumnName("output_size");
+
+                    b.Property<bool>("ResponseBad")
+                        .HasColumnType("boolean")
+                        .HasColumnName("response_bad");
+
+                    b.Property<string>("ResponseContentType")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("response_content_type");
+
+                    b.Property<string>("ResponseHash")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("response_hash");
+
+                    b.Property<string>("ResponseName")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("response_name");
+
+                    b.Property<int>("ResponseSize")
+                        .HasColumnType("integer")
+                        .HasColumnName("response_size");
+
+                    b.Property<string>("ResponseXchangeId")
+                        .HasColumnType("text")
+                        .HasColumnName("response_xchange_id");
+
+                    b.Property<bool>("Success")
+                        .HasColumnType("boolean")
+                        .HasColumnName("success");
+
+                    b.HasKey("Id")
+                        .HasName("pk_xchange_result");
+
+                    b.ToTable("xchange_result", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.RunFlagUpdater+RunningResult", b =>
+                {
+                    b.Property<bool>("IsRunning")
+                        .HasColumnType("boolean")
+                        .HasColumnName("is_running");
+
+                    b.ToTable("running_result", "infolink");
+
+                    b.ToView(null, (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.JobExecution", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("bigint")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<long>("Id"));
+
+                    b.Property<string>("Context")
+                        .HasColumnType("text")
+                        .HasColumnName("context");
+
+                    b.Property<long?>("DurationMs")
+                        .HasColumnType("bigint")
+                        .HasColumnName("duration_ms");
+
+                    b.Property<DateTime?>("EndTimeUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("end_time_utc");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<string>("FireInstanceId")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("fire_instance_id");
+
+                    b.Property<string>("JobGroup")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("job_name");
+
+                    b.Property<string>("JobTypeName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("job_type_name");
+
+                    b.Property<string>("Node")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("node");
+
+                    b.Property<DateTime>("StartTimeUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("start_time_utc");
+
+                    b.Property<bool?>("Success")
+                        .HasColumnType("boolean")
+                        .HasColumnName("success");
+
+                    b.HasKey("Id")
+                        .HasName("pk_job_executions");
+
+                    b.HasIndex("FireInstanceId")
+                        .IsUnique()
+                        .HasDatabaseName("idx_je_fire_instance_id");
+
+                    b.HasIndex("StartTimeUtc")
+                        .HasDatabaseName("idx_je_start_time");
+
+                    b.HasIndex("Success")
+                        .HasDatabaseName("idx_je_success");
+
+                    b.HasIndex("JobGroup", "JobName", "StartTimeUtc")
+                        .HasDatabaseName("idx_je_group_name_start");
+
+                    b.ToTable("job_executions", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzBlobTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<byte[]>("BlobData")
+                        .HasColumnType("bytea")
+                        .HasColumnName("blob_data");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasName("pk_qrtz_blob_triggers");
+
+                    b.ToTable("qrtz_blob_triggers", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCalendar", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("text")
+                        .HasColumnName("calendar_name");
+
+                    b.Property<byte[]>("Calendar")
+                        .IsRequired()
+                        .HasColumnType("bytea")
+                        .HasColumnName("calendar");
+
+                    b.HasKey("SchedulerName", "CalendarName")
+                        .HasName("pk_qrtz_calendars");
+
+                    b.ToTable("qrtz_calendars", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCronTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("CronExpression")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("cron_expression");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("text")
+                        .HasColumnName("time_zone_id");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasName("pk_qrtz_cron_triggers");
+
+                    b.ToTable("qrtz_cron_triggers", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzFiredTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("EntryId")
+                        .HasColumnType("text")
+                        .HasColumnName("entry_id");
+
+                    b.Property<long>("FiredTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("fired_time");
+
+                    b.Property<string>("InstanceName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("instance_name");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("bool")
+                        .HasColumnName("is_nonconcurrent");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("text")
+                        .HasColumnName("job_name");
+
+                    b.Property<int>("Priority")
+                        .HasColumnType("integer")
+                        .HasColumnName("priority");
+
+                    b.Property<bool?>("RequestsRecovery")
+                        .HasColumnType("bool")
+                        .HasColumnName("requests_recovery");
+
+                    b.Property<long>("ScheduledTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("sched_time");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("state");
+
+                    b.Property<string>("TriggerGroup")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("TriggerName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.HasKey("SchedulerName", "EntryId")
+                        .HasName("pk_qrtz_fired_triggers");
+
+                    b.HasIndex("InstanceName")
+                        .HasDatabaseName("idx_qrtz_ft_trig_inst_name");
+
+                    b.HasIndex("JobGroup")
+                        .HasDatabaseName("idx_qrtz_ft_job_group");
+
+                    b.HasIndex("JobName")
+                        .HasDatabaseName("idx_qrtz_ft_job_name");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("idx_qrtz_ft_job_req_recovery");
+
+                    b.HasIndex("TriggerGroup")
+                        .HasDatabaseName("idx_qrtz_ft_trig_group");
+
+                    b.HasIndex("TriggerName")
+                        .HasDatabaseName("idx_qrtz_ft_trig_name");
+
+                    b.HasIndex("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasDatabaseName("idx_qrtz_ft_trig_nm_gp");
+
+                    b.ToTable("qrtz_fired_triggers", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzJobDetail", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("text")
+                        .HasColumnName("job_name");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("text")
+                        .HasColumnName("description");
+
+                    b.Property<bool>("IsDurable")
+                        .HasColumnType("bool")
+                        .HasColumnName("is_durable");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("bool")
+                        .HasColumnName("is_nonconcurrent");
+
+                    b.Property<bool>("IsUpdateData")
+                        .HasColumnType("bool")
+                        .HasColumnName("is_update_data");
+
+                    b.Property<string>("JobClassName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("job_class_name");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("bytea")
+                        .HasColumnName("job_data");
+
+                    b.Property<bool>("RequestsRecovery")
+                        .HasColumnType("bool")
+                        .HasColumnName("requests_recovery");
+
+                    b.HasKey("SchedulerName", "JobName", "JobGroup")
+                        .HasName("pk_qrtz_job_details");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("idx_j_req_recovery");
+
+                    b.ToTable("qrtz_job_details", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzLock", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("LockName")
+                        .HasColumnType("text")
+                        .HasColumnName("lock_name");
+
+                    b.HasKey("SchedulerName", "LockName")
+                        .HasName("pk_qrtz_locks");
+
+                    b.ToTable("qrtz_locks", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzPausedTriggerGroup", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.HasKey("SchedulerName", "TriggerGroup")
+                        .HasName("pk_qrtz_paused_trigger_grps");
+
+                    b.ToTable("qrtz_paused_trigger_grps", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSchedulerState", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("InstanceName")
+                        .HasColumnType("text")
+                        .HasColumnName("instance_name");
+
+                    b.Property<long>("CheckInInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("checkin_interval");
+
+                    b.Property<long>("LastCheckInTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("last_checkin_time");
+
+                    b.HasKey("SchedulerName", "InstanceName")
+                        .HasName("pk_qrtz_scheduler_state");
+
+                    b.ToTable("qrtz_scheduler_state", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<bool?>("BooleanProperty1")
+                        .HasColumnType("bool")
+                        .HasColumnName("bool_prop_1");
+
+                    b.Property<bool?>("BooleanProperty2")
+                        .HasColumnType("bool")
+                        .HasColumnName("bool_prop_2");
+
+                    b.Property<decimal?>("DecimalProperty1")
+                        .HasColumnType("numeric")
+                        .HasColumnName("dec_prop_1");
+
+                    b.Property<decimal?>("DecimalProperty2")
+                        .HasColumnType("numeric")
+                        .HasColumnName("dec_prop_2");
+
+                    b.Property<int?>("IntegerProperty1")
+                        .HasColumnType("integer")
+                        .HasColumnName("int_prop_1");
+
+                    b.Property<int?>("IntegerProperty2")
+                        .HasColumnType("integer")
+                        .HasColumnName("int_prop_2");
+
+                    b.Property<long?>("LongProperty1")
+                        .HasColumnType("bigint")
+                        .HasColumnName("long_prop_1");
+
+                    b.Property<long?>("LongProperty2")
+                        .HasColumnType("bigint")
+                        .HasColumnName("long_prop_2");
+
+                    b.Property<string>("StringProperty1")
+                        .HasColumnType("text")
+                        .HasColumnName("str_prop_1");
+
+                    b.Property<string>("StringProperty2")
+                        .HasColumnType("text")
+                        .HasColumnName("str_prop_2");
+
+                    b.Property<string>("StringProperty3")
+                        .HasColumnType("text")
+                        .HasColumnName("str_prop_3");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("text")
+                        .HasColumnName("time_zone_id");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasName("pk_qrtz_simprop_triggers");
+
+                    b.ToTable("qrtz_simprop_triggers", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimpleTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<long>("RepeatCount")
+                        .HasColumnType("bigint")
+                        .HasColumnName("repeat_count");
+
+                    b.Property<long>("RepeatInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("repeat_interval");
+
+                    b.Property<long>("TimesTriggered")
+                        .HasColumnType("bigint")
+                        .HasColumnName("times_triggered");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasName("pk_qrtz_simple_triggers");
+
+                    b.ToTable("qrtz_simple_triggers", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("text")
+                        .HasColumnName("calendar_name");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("text")
+                        .HasColumnName("description");
+
+                    b.Property<long?>("EndTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("end_time");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("bytea")
+                        .HasColumnName("job_data");
+
+                    b.Property<string>("JobGroup")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("job_name");
+
+                    b.Property<int?>("MisfireInstruction")
+                        .HasColumnType("integer")
+                        .HasColumnName("misfire_instr");
+
+                    b.Property<long?>("NextFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("next_fire_time");
+
+                    b.Property<long?>("PreviousFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("prev_fire_time");
+
+                    b.Property<int?>("Priority")
+                        .HasColumnType("integer")
+                        .HasColumnName("priority");
+
+                    b.Property<long>("StartTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("start_time");
+
+                    b.Property<string>("TriggerState")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_state");
+
+                    b.Property<string>("TriggerType")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_type");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasName("pk_qrtz_triggers");
+
+                    b.HasIndex("NextFireTime")
+                        .HasDatabaseName("idx_t_next_fire_time");
+
+                    b.HasIndex("TriggerState")
+                        .HasDatabaseName("idx_t_state");
+
+                    b.HasIndex("NextFireTime", "TriggerState")
+                        .HasDatabaseName("idx_t_nft_st");
+
+                    b.HasIndex("SchedulerName", "JobName", "JobGroup")
+                        .HasDatabaseName("ix_qrtz_triggers_sched_name_job_name_job_group");
+
+                    b.ToTable("qrtz_triggers", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Accounts.Account", null)
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_refresh_tokens_accounts_account_id");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DocumentTrail", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", "Document")
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_document_trail_document_document_id");
+
+                    b.Navigation("Document");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGatewayPartner", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Gateway.ApiGateway", "ApiGateway")
+                        .WithMany("Partners")
+                        .HasForeignKey("ApiGatewayId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_api_gateway_partner_api_gateway_api_gateway_id");
+
+                    b.HasOne("SW.Bitween.Domain.Partner", "Partner")
+                        .WithMany()
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_api_gateway_partner_partner_partner_id");
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_api_gateway_partner_subscription_subscription_id");
+
+                    b.Navigation("ApiGateway");
+
+                    b.Navigation("Partner");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_bus_gateway_document_document_id");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGatewayRoute", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Gateway.BusGateway", "BusGateway")
+                        .WithMany("Routes")
+                        .HasForeignKey("BusGatewayId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_bus_gateway_route_bus_gateway_bus_gateway_id");
+
+                    b.HasOne("SW.Bitween.Domain.Partner", "Partner")
+                        .WithMany()
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("fk_bus_gateway_route_partner_partner_id");
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_bus_gateway_route_subscription_subscription_id");
+
+                    b.Navigation("BusGateway");
+
+                    b.Navigation("Partner");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.OwnsMany("SW.Bitween.Domain.ApiCredential", "ApiCredentials", b1 =>
+                        {
+                            b1.Property<int>("PartnerId")
+                                .HasColumnType("integer")
+                                .HasColumnName("partner_id");
+
+                            b1.Property<int>("Id")
+                                .ValueGeneratedOnAdd()
+                                .HasColumnType("integer")
+                                .HasColumnName("id");
+
+                            NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b1.Property<int>("Id"));
+
+                            b1.Property<string>("Key")
+                                .IsRequired()
+                                .HasMaxLength(500)
+                                .HasColumnType("character varying(500)")
+                                .HasColumnName("key");
+
+                            b1.Property<string>("Name")
+                                .IsRequired()
+                                .HasMaxLength(500)
+                                .HasColumnType("character varying(500)")
+                                .HasColumnName("name");
+
+                            b1.HasKey("PartnerId", "Id")
+                                .HasName("pk_partner_api_credential");
+
+                            b1.HasIndex("Key")
+                                .IsUnique()
+                                .HasDatabaseName("ix_partner_api_credential_key");
+
+                            b1.ToTable("partner_api_credential", "infolink");
+
+                            b1.WithOwner()
+                                .HasForeignKey("PartnerId")
+                                .HasConstraintName("fk_partner_api_credential_partner_partner_id");
+
+                            b1.HasData(
+                                new
+                                {
+                                    PartnerId = 1,
+                                    Id = 1,
+                                    Key = "7facc758283844b49cc4ffd26a75b1de",
+                                    Name = "default"
+                                });
+                        });
+
+                    b.Navigation("ApiCredentials");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Subscription", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Subscription", null)
+                        .WithMany()
+                        .HasForeignKey("AggregationForId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("fk_subscription_aggregation_for");
+
+                    b.HasOne("SW.Bitween.Domain.SubscriptionCategory", "Category")
+                        .WithMany()
+                        .HasForeignKey("CategoryId")
+                        .HasConstraintName("fk_subscription_subscription_category_category_id");
+
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_subscription_document_document_id");
+
+                    b.HasOne("SW.Bitween.Domain.Partner", null)
+                        .WithMany("Subscriptions")
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("fk_subscription_partner_partner_id");
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", null)
+                        .WithMany()
+                        .HasForeignKey("ResponseSubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("fk_subscription_response_subscriber");
+
+                    b.HasOne("SW.Bitween.Domain.RetryPolicy", "RetryPolicy")
+                        .WithMany()
+                        .HasForeignKey("RetryPolicyId")
+                        .OnDelete(DeleteBehavior.SetNull)
+                        .HasConstraintName("fk_subscription_retry_policy_retry_policy_id");
+
+                    b.HasOne("SW.Bitween.Domain.WorkGroup", "WorkGroup")
+                        .WithMany()
+                        .HasForeignKey("WorkGroupId")
+                        .HasConstraintName("fk_subscription_work_group_work_group_id");
+
+                    b.OwnsMany("SW.Bitween.Domain.Schedule", "Schedules", b1 =>
+                        {
+                            b1.Property<int>("SubscriptionId")
+                                .HasColumnType("integer")
+                                .HasColumnName("subscription_id");
+
+                            b1.Property<int>("Id")
+                                .ValueGeneratedOnAdd()
+                                .HasColumnType("integer")
+                                .HasColumnName("id");
+
+                            NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b1.Property<int>("Id"));
+
+                            b1.Property<bool>("Backwards")
+                                .HasColumnType("boolean")
+                                .HasColumnName("backwards");
+
+                            b1.Property<long>("On")
+                                .HasColumnType("bigint")
+                                .HasColumnName("on");
+
+                            b1.Property<byte>("Recurrence")
+                                .HasColumnType("smallint")
+                                .HasColumnName("recurrence");
+
+                            b1.HasKey("SubscriptionId", "Id")
+                                .HasName("pk_subscription_schedule");
+
+                            b1.ToTable("subscription_schedule", "infolink");
+
+                            b1.WithOwner()
+                                .HasForeignKey("SubscriptionId")
+                                .HasConstraintName("fk_subscription_schedule_subscription_subscription_id");
+                        });
+
+                    b.Navigation("Category");
+
+                    b.Navigation("RetryPolicy");
+
+                    b.Navigation("Schedules");
+
+                    b.Navigation("WorkGroup");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionTrail", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_subscription_trail_subscription_subscription_id");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Xchange", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_xchange_document_document_id");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeAggregation", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeAggregation", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_xchange_aggregation_xchange_id");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeDelivery", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeDelivery", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_xchange_delivery_xchange_id");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangePromotedProperties", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangePromotedProperties", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_xchange_promoted_properties_xchange_id");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeResult", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeResult", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_xchange_result_xchange_id");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzBlobTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("BlobTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_qrtz_blob_triggers_qrtz_triggers_sched_name_trigger_name_tr");
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCronTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("CronTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_qrtz_cron_triggers_qrtz_triggers_sched_name_trigger_name_tr");
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("SimplePropertyTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_qrtz_simprop_triggers_qrtz_triggers_sched_name_trigger_name");
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimpleTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("SimpleTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_qrtz_simple_triggers_qrtz_triggers_sched_name_trigger_name_");
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzJobDetail", "JobDetail")
+                        .WithMany("Triggers")
+                        .HasForeignKey("SchedulerName", "JobName", "JobGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_qrtz_triggers_qrtz_job_details_sched_name_job_name_job_group");
+
+                    b.Navigation("JobDetail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGateway", b =>
+                {
+                    b.Navigation("Partners");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.Navigation("Routes");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.Navigation("Subscriptions");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzJobDetail", b =>
+                {
+                    b.Navigation("Triggers");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.Navigation("BlobTriggers");
+
+                    b.Navigation("CronTriggers");
+
+                    b.Navigation("SimplePropertyTriggers");
+
+                    b.Navigation("SimpleTriggers");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/SW.Bitween.PgSql/Migrations/20260719141125_AddDocumentCodeAndAutoId.cs b/SW.Bitween.PgSql/Migrations/20260719141125_AddDocumentCodeAndAutoId.cs
new file mode 100644
index 00000000..7c5b10da
--- /dev/null
+++ b/SW.Bitween.PgSql/Migrations/20260719141125_AddDocumentCodeAndAutoId.cs
@@ -0,0 +1,82 @@
+using Microsoft.EntityFrameworkCore.Migrations;
+using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
+
+#nullable disable
+
+namespace SW.Bitween.PgSql.Migrations
+{
+    /// <inheritdoc />
+    public partial class AddDocumentCodeAndAutoId : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.AlterColumn<int>(
+                name: "id",
+                schema: "infolink",
+                table: "document",
+                type: "integer",
+                nullable: false,
+                oldClrType: typeof(int),
+                oldType: "integer")
+                .Annotation("Npgsql:ValueGenerationStrategy", NpgsqlValueGenerationStrategy.IdentityByDefaultColumn);
+
+            migrationBuilder.AddColumn<string>(
+                name: "code",
+                schema: "infolink",
+                table: "document",
+                type: "character varying(50)",
+                maxLength: 50,
+                nullable: true);
+
+            migrationBuilder.UpdateData(
+                schema: "infolink",
+                table: "document",
+                keyColumn: "id",
+                keyValue: 10001,
+                column: "code",
+                value: null);
+
+            // Code is optional — existing rows stay code = NULL rather than being
+            // backfilled from name, which risked duplicate-derived codes colliding
+            // against the unique index on environments with less controlled data.
+            migrationBuilder.CreateIndex(
+                name: "ix_document_code",
+                schema: "infolink",
+                table: "document",
+                column: "code",
+                unique: true);
+
+            // The identity sequence starts at 1; realign it past the existing (user-assigned,
+            // pre-identity) ids so the next INSERT doesn't eventually collide with them.
+            migrationBuilder.Sql(@"
+                SELECT setval(
+                    pg_get_serial_sequence('infolink.document', 'id'),
+                    (SELECT COALESCE(MAX(id), 0) FROM infolink.document));");
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropIndex(
+                name: "ix_document_code",
+                schema: "infolink",
+                table: "document");
+
+            migrationBuilder.DropColumn(
+                name: "code",
+                schema: "infolink",
+                table: "document");
+
+            migrationBuilder.AlterColumn<int>(
+                name: "id",
+                schema: "infolink",
+                table: "document",
+                type: "integer",
+                nullable: false,
+                oldClrType: typeof(int),
+                oldType: "integer")
+                .OldAnnotation("Npgsql:ValueGenerationStrategy", NpgsqlValueGenerationStrategy.IdentityByDefaultColumn);
+        }
+    }
+}
diff --git a/SW.Bitween.PgSql/Migrations/20260726105636_AddRolesAndPermissions.Designer.cs b/SW.Bitween.PgSql/Migrations/20260726105636_AddRolesAndPermissions.Designer.cs
new file mode 100644
index 00000000..8032a518
--- /dev/null
+++ b/SW.Bitween.PgSql/Migrations/20260726105636_AddRolesAndPermissions.Designer.cs
@@ -0,0 +1,2290 @@
+// <auto-generated />
+using System;
+using System.Collections.Generic;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
+using SW.Bitween.Model;
+using SW.Bitween.PgSql;
+
+#nullable disable
+
+namespace SW.Bitween.PgSql.Migrations
+{
+    [DbContext(typeof(BitweenDbContext))]
+    [Migration("20260726105636_AddRolesAndPermissions")]
+    partial class AddRolesAndPermissions
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasDefaultSchema("infolink")
+                .HasAnnotation("ProductVersion", "8.0.23")
+                .HasAnnotation("Relational:MaxIdentifierLength", 63);
+
+            NpgsqlModelBuilderExtensions.UseIdentityByDefaultColumns(modelBuilder);
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.Account", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<bool>("Deleted")
+                        .HasColumnType("boolean")
+                        .HasColumnName("deleted");
+
+                    b.Property<bool>("Disabled")
+                        .HasColumnType("boolean")
+                        .HasColumnName("disabled");
+
+                    b.Property<string>("DisplayName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("display_name");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("email");
+
+                    b.Property<byte>("EmailProvider")
+                        .HasColumnType("smallint")
+                        .HasColumnName("email_provider");
+
+                    b.Property<byte>("LoginMethods")
+                        .HasColumnType("smallint")
+                        .HasColumnName("login_methods");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.Property<string>("Password")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("password");
+
+                    b.Property<string>("Phone")
+                        .HasMaxLength(20)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(20)")
+                        .HasColumnName("phone");
+
+                    b.Property<int>("Role")
+                        .HasColumnType("integer")
+                        .HasColumnName("role");
+
+                    b.HasKey("Id")
+                        .HasName("pk_accounts");
+
+                    b.HasIndex("Email")
+                        .IsUnique()
+                        .HasDatabaseName("ix_accounts_email");
+
+                    b.ToTable("Accounts", "infolink");
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 9999,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Deleted = false,
+                            Disabled = false,
+                            DisplayName = "Admin",
+                            Email = "admin@Bitween.systems",
+                            EmailProvider = (byte)0,
+                            LoginMethods = (byte)2,
+                            Password = "$SWHASH$V1$10000$VQCi48eitH4Ml5juvBMOFZrMdQwBbhuIQVXe6RR7qJdDF2bJ",
+                            Role = 0
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.AccountRoleLink", b =>
+                {
+                    b.Property<int>("AccountId")
+                        .HasColumnType("integer")
+                        .HasColumnName("account_id");
+
+                    b.Property<int>("RoleId")
+                        .HasColumnType("integer")
+                        .HasColumnName("role_id");
+
+                    b.HasKey("AccountId", "RoleId")
+                        .HasName("pk_account_roles");
+
+                    b.HasIndex("RoleId")
+                        .HasDatabaseName("ix_account_roles_role_id");
+
+                    b.ToTable("AccountRoles", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<int>("AccountId")
+                        .HasColumnType("integer")
+                        .HasColumnName("account_id");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<byte>("LoginMethod")
+                        .HasColumnType("smallint")
+                        .HasColumnName("login_method");
+
+                    b.HasKey("Id")
+                        .HasName("pk_refresh_tokens");
+
+                    b.HasIndex("AccountId")
+                        .HasDatabaseName("ix_refresh_tokens_account_id");
+
+                    b.ToTable("RefreshTokens", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.Role", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("Description")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("description");
+
+                    b.Property<bool>("IsSystem")
+                        .HasColumnType("boolean")
+                        .HasColumnName("is_system");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("name");
+
+                    b.Property<string>("Permissions")
+                        .HasColumnType("text")
+                        .HasColumnName("permissions");
+
+                    b.HasKey("Id")
+                        .HasName("pk_roles");
+
+                    b.HasIndex("Name")
+                        .IsUnique()
+                        .HasDatabaseName("ix_roles_name");
+
+                    b.ToTable("Roles", "infolink");
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 1,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Full access to everything, including members, roles and settings.",
+                            IsSystem = true,
+                            Name = "Administrator",
+                            Permissions = "[]"
+                        },
+                        new
+                        {
+                            Id = 2,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Runs and configures integrations. Can't manage members, roles or settings.",
+                            IsSystem = true,
+                            Name = "Member",
+                            Permissions = "[]"
+                        },
+                        new
+                        {
+                            Id = 3,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Read-only access to integrations, exchanges and configuration.",
+                            IsSystem = true,
+                            Name = "Viewer",
+                            Permissions = "[]"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DelayedRetry", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<Dictionary<string, int>>("GroupAttemptCounts")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("group_attempt_counts");
+
+                    b.Property<DateTime>("On")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("on");
+
+                    b.HasKey("Id")
+                        .HasName("pk_delayed_retry");
+
+                    b.HasIndex("On")
+                        .HasDatabaseName("ix_delayed_retry_on");
+
+                    b.ToTable("delayed_retry", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Document", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("BusEnabled")
+                        .HasColumnType("boolean")
+                        .HasColumnName("bus_enabled");
+
+                    b.Property<string>("BusMessageTypeName")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("bus_message_type_name");
+
+                    b.Property<string>("Code")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("code");
+
+                    b.Property<bool?>("DisregardsUnfilteredMessages")
+                        .HasColumnType("boolean")
+                        .HasColumnName("disregards_unfiltered_messages");
+
+                    b.Property<int>("DocumentFormat")
+                        .HasColumnType("integer")
+                        .HasColumnName("document_format");
+
+                    b.Property<int>("DuplicateInterval")
+                        .HasColumnType("integer")
+                        .HasColumnName("duplicate_interval");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("name");
+
+                    b.Property<string>("PromotedProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("promoted_properties");
+
+                    b.HasKey("Id")
+                        .HasName("pk_document");
+
+                    b.HasIndex("BusMessageTypeName")
+                        .IsUnique()
+                        .HasDatabaseName("ix_document_bus_message_type_name");
+
+                    b.HasIndex("Code")
+                        .IsUnique()
+                        .HasDatabaseName("ix_document_code");
+
+                    b.HasIndex("Name")
+                        .IsUnique()
+                        .HasDatabaseName("ix_document_name");
+
+                    b.ToTable("document", "infolink");
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 10001,
+                            BusEnabled = false,
+                            DocumentFormat = 0,
+                            DuplicateInterval = 0,
+                            Name = "Aggregation Document",
+                            PromotedProperties = "{}"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DocumentTrail", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("text")
+                        .HasColumnName("id");
+
+                    b.Property<int>("Code")
+                        .HasColumnType("integer")
+                        .HasColumnName("code");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("integer")
+                        .HasColumnName("document_id");
+
+                    b.Property<string>("StateAfter")
+                        .HasColumnType("text")
+                        .HasColumnName("state_after");
+
+                    b.Property<string>("StateBefore")
+                        .HasColumnType("text")
+                        .HasColumnName("state_before");
+
+                    b.HasKey("Id")
+                        .HasName("pk_document_trail");
+
+                    b.HasIndex("CreatedOn")
+                        .HasDatabaseName("ix_document_trail_created_on");
+
+                    b.HasIndex("DocumentId")
+                        .HasDatabaseName("ix_document_trail_document_id");
+
+                    b.ToTable("document_trail", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGateway", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("name");
+
+                    b.Property<string>("UrlName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("url_name");
+
+                    b.HasKey("Id")
+                        .HasName("pk_api_gateway");
+
+                    b.HasIndex("UrlName")
+                        .IsUnique()
+                        .HasDatabaseName("ix_api_gateway_url_name");
+
+                    b.ToTable("api_gateway", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGatewayPartner", b =>
+                {
+                    b.Property<int>("ApiGatewayId")
+                        .HasColumnType("integer")
+                        .HasColumnName("api_gateway_id");
+
+                    b.Property<int>("PartnerId")
+                        .HasColumnType("integer")
+                        .HasColumnName("partner_id");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("subscription_id");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.HasKey("ApiGatewayId", "PartnerId", "SubscriptionId")
+                        .HasName("pk_api_gateway_partner");
+
+                    b.HasIndex("PartnerId")
+                        .HasDatabaseName("ix_api_gateway_partner_partner_id");
+
+                    b.HasIndex("SubscriptionId")
+                        .HasDatabaseName("ix_api_gateway_partner_subscription_id");
+
+                    b.ToTable("api_gateway_partner", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("integer")
+                        .HasColumnName("document_id");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("name");
+
+                    b.HasKey("Id")
+                        .HasName("pk_bus_gateway");
+
+                    b.HasIndex("DocumentId")
+                        .HasDatabaseName("ix_bus_gateway_document_id");
+
+                    b.ToTable("bus_gateway", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGatewayRoute", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("BusGatewayId")
+                        .HasColumnType("integer")
+                        .HasColumnName("bus_gateway_id");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("MatchExpression")
+                        .HasColumnType("text")
+                        .HasColumnName("match_expression");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("integer")
+                        .HasColumnName("partner_id");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("subscription_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_bus_gateway_route");
+
+                    b.HasIndex("BusGatewayId")
+                        .HasDatabaseName("ix_bus_gateway_route_bus_gateway_id");
+
+                    b.HasIndex("PartnerId")
+                        .HasDatabaseName("ix_bus_gateway_route_partner_id");
+
+                    b.HasIndex("SubscriptionId")
+                        .HasDatabaseName("ix_bus_gateway_route_subscription_id");
+
+                    b.ToTable("bus_gateway_route", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.GlobalAdapterValuesSet", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("text")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("text")
+                        .HasColumnName("name");
+
+                    b.Property<Dictionary<string, string>>("Values")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("values");
+
+                    b.HasKey("Id")
+                        .HasName("pk_global_adapter_values_set");
+
+                    b.ToTable("global_adapter_values_set", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Notifier", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("handler_id");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("text")
+                        .HasColumnName("handler_properties");
+
+                    b.Property<bool>("Inactive")
+                        .HasColumnType("boolean")
+                        .HasColumnName("inactive");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("name");
+
+                    b.Property<bool>("RunOnBadResult")
+                        .HasColumnType("boolean")
+                        .HasColumnName("run_on_bad_result");
+
+                    b.Property<bool>("RunOnFailedResult")
+                        .HasColumnType("boolean")
+                        .HasColumnName("run_on_failed_result");
+
+                    b.Property<int[]>("RunOnSubscriptions")
+                        .HasColumnType("integer[]")
+                        .HasColumnName("run_on_subscriptions");
+
+                    b.Property<bool>("RunOnSuccessfulResult")
+                        .HasColumnType("boolean")
+                        .HasColumnName("run_on_successful_result");
+
+                    b.HasKey("Id")
+                        .HasName("pk_notifier");
+
+                    b.ToTable("notifier", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.OnHoldXchange", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("BadData")
+                        .HasColumnType("boolean")
+                        .HasColumnName("bad_data");
+
+                    b.Property<string>("Data")
+                        .HasColumnType("text")
+                        .HasColumnName("data");
+
+                    b.Property<string>("FileName")
+                        .HasColumnType("text")
+                        .HasColumnName("file_name");
+
+                    b.Property<string[]>("References")
+                        .HasColumnType("text[]")
+                        .HasColumnName("references");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("subscription_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_on_hold_xchange");
+
+                    b.HasIndex("SubscriptionId")
+                        .HasDatabaseName("ix_on_hold_xchange_subscription_id");
+
+                    b.ToTable("on_hold_xchange", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<Dictionary<string, string>>("AdapterProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("adapter_properties");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("name");
+
+                    b.HasKey("Id")
+                        .HasName("pk_partner");
+
+                    b.ToTable("partner", "infolink");
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 1,
+                            Name = "SYSTEM"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.RetryPolicy", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("Groups")
+                        .HasColumnType("text")
+                        .HasColumnName("groups");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("name");
+
+                    b.HasKey("Id")
+                        .HasName("pk_retry_policy");
+
+                    b.ToTable("retry_policy", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Subscription", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("AggregateOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("aggregate_on");
+
+                    b.Property<int?>("AggregationForId")
+                        .HasColumnType("integer")
+                        .HasColumnName("aggregation_for_id");
+
+                    b.Property<byte>("AggregationTarget")
+                        .HasColumnType("smallint")
+                        .HasColumnName("aggregation_target");
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("integer")
+                        .HasColumnName("category_id");
+
+                    b.Property<int>("ConsecutiveFailures")
+                        .HasColumnType("integer")
+                        .HasColumnName("consecutive_failures");
+
+                    b.Property<string>("CustomRetryPolicy")
+                        .HasColumnType("text")
+                        .HasColumnName("custom_retry_policy");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("DocumentFilter")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("document_filter");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("integer")
+                        .HasColumnName("document_id");
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("handler_id");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("HandlerProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("handler_properties");
+
+                    b.Property<bool>("Inactive")
+                        .HasColumnType("boolean")
+                        .HasColumnName("inactive");
+
+                    b.Property<bool>("IsRunning")
+                        .HasColumnType("boolean")
+                        .HasColumnName("is_running");
+
+                    b.Property<string>("LastException")
+                        .HasColumnType("text")
+                        .HasColumnName("last_exception");
+
+                    b.Property<string>("MapperId")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("mapper_id");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("MapperProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("mapper_properties");
+
+                    b.Property<string>("MatchExpression")
+                        .HasColumnType("text")
+                        .HasColumnName("match_expression");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("name");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("integer")
+                        .HasColumnName("partner_id");
+
+                    b.Property<DateTime?>("PausedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("paused_on");
+
+                    b.Property<DateTime?>("ReceiveOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("receive_on");
+
+                    b.Property<string>("ReceiverId")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("receiver_id");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("ReceiverProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("receiver_properties");
+
+                    b.Property<string>("ResponseMessageTypeName")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("response_message_type_name");
+
+                    b.Property<int?>("ResponseSubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("response_subscription_id");
+
+                    b.Property<int?>("RetryPolicyId")
+                        .HasColumnType("integer")
+                        .HasColumnName("retry_policy_id");
+
+                    b.Property<bool>("Temporary")
+                        .HasColumnType("boolean")
+                        .HasColumnName("temporary");
+
+                    b.Property<byte>("Type")
+                        .HasColumnType("smallint")
+                        .HasColumnName("type");
+
+                    b.Property<string>("ValidatorId")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("validator_id");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("ValidatorProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("validator_properties");
+
+                    b.Property<int?>("WorkGroupId")
+                        .HasColumnType("integer")
+                        .HasColumnName("work_group_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_subscription");
+
+                    b.HasIndex("AggregationForId")
+                        .HasDatabaseName("ix_subscription_aggregation_for_id");
+
+                    b.HasIndex("CategoryId")
+                        .HasDatabaseName("ix_subscription_category_id");
+
+                    b.HasIndex("DocumentId")
+                        .HasDatabaseName("ix_subscription_document_id");
+
+                    b.HasIndex("PartnerId")
+                        .HasDatabaseName("ix_subscription_partner_id");
+
+                    b.HasIndex("ResponseSubscriptionId")
+                        .HasDatabaseName("ix_subscription_response_subscription_id");
+
+                    b.HasIndex("RetryPolicyId")
+                        .HasDatabaseName("ix_subscription_retry_policy_id");
+
+                    b.HasIndex("WorkGroupId")
+                        .HasDatabaseName("ix_subscription_work_group_id");
+
+                    b.ToTable("subscription", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionCategory", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Code")
+                        .HasColumnType("text")
+                        .HasColumnName("code");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("text")
+                        .HasColumnName("description");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.HasKey("Id")
+                        .HasName("pk_subscription_category");
+
+                    b.HasIndex("Code")
+                        .IsUnique()
+                        .HasDatabaseName("ix_subscription_category_code");
+
+                    b.ToTable("subscription_category", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionTrail", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<int>("Code")
+                        .HasColumnType("integer")
+                        .HasColumnName("code");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("StateAfter")
+                        .HasColumnType("text")
+                        .HasColumnName("state_after");
+
+                    b.Property<string>("StateBefore")
+                        .HasColumnType("text")
+                        .HasColumnName("state_before");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("subscription_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_subscription_trail");
+
+                    b.HasIndex("CreatedOn")
+                        .HasDatabaseName("ix_subscription_trail_created_on");
+
+                    b.HasIndex("SubscriptionId")
+                        .HasDatabaseName("ix_subscription_trail_subscription_id");
+
+                    b.ToTable("subscription_trail", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.WorkGroup", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BusMessageName")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("bus_message_name");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("text")
+                        .HasColumnName("name");
+
+                    b.Property<WorkGroupOptions>("Options")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("options");
+
+                    b.HasKey("Id")
+                        .HasName("pk_work_group");
+
+                    b.ToTable("work_group", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Xchange", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<string>("CorrelationId")
+                        .HasColumnType("text")
+                        .HasColumnName("correlation_id");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("integer")
+                        .HasColumnName("document_id");
+
+                    b.Property<IReadOnlyDictionary<string, int>>("GroupAttemptCounts")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("group_attempt_counts");
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("handler_id");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("HandlerProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("handler_properties");
+
+                    b.Property<string>("InputContentType")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("input_content_type");
+
+                    b.Property<string>("InputHash")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("input_hash");
+
+                    b.Property<string>("InputName")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("input_name");
+
+                    b.Property<int>("InputSize")
+                        .HasColumnType("integer")
+                        .HasColumnName("input_size");
+
+                    b.Property<string>("MapperId")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("mapper_id");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("MapperProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("mapper_properties");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("integer")
+                        .HasColumnName("partner_id");
+
+                    b.Property<string[]>("References")
+                        .HasColumnType("text[]")
+                        .HasColumnName("references");
+
+                    b.Property<string>("ResponseMessageTypeName")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("response_message_type_name");
+
+                    b.Property<int?>("ResponseSubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("response_subscription_id");
+
+                    b.Property<string>("RetryFor")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("retry_for");
+
+                    b.Property<DateTime>("StartedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("started_on");
+
+                    b.Property<int?>("SubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("subscription_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_xchange");
+
+                    b.HasIndex("DocumentId")
+                        .HasDatabaseName("ix_xchange_document_id");
+
+                    b.HasIndex("InputHash")
+                        .HasDatabaseName("ix_xchange_input_hash");
+
+                    b.HasIndex("RetryFor")
+                        .HasDatabaseName("ix_xchange_retry_for");
+
+                    b.HasIndex("StartedOn")
+                        .HasDatabaseName("ix_xchange_started_on");
+
+                    b.HasIndex("SubscriptionId")
+                        .HasDatabaseName("ix_xchange_subscription_id");
+
+                    b.ToTable("xchange", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeAggregation", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<DateTime>("AggregatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("aggregated_on");
+
+                    b.Property<string>("AggregationXchangeId")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("aggregation_xchange_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_xchange_aggregation");
+
+                    b.HasIndex("AggregationXchangeId")
+                        .HasDatabaseName("ix_xchange_aggregation_aggregation_xchange_id");
+
+                    b.ToTable("xchange_aggregation", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeDelivery", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<DateTime>("DeliveredOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("delivered_on");
+
+                    b.HasKey("Id")
+                        .HasName("pk_xchange_delivery");
+
+                    b.HasIndex("DeliveredOn")
+                        .HasDatabaseName("ix_xchange_delivery_delivered_on");
+
+                    b.ToTable("xchange_delivery", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeNotification", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Exception")
+                        .HasColumnType("text")
+                        .HasColumnName("exception");
+
+                    b.Property<DateTime>("FinishedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("finished_on");
+
+                    b.Property<int>("NotifierId")
+                        .HasColumnType("integer")
+                        .HasColumnName("notifier_id");
+
+                    b.Property<string>("NotifierName")
+                        .HasColumnType("text")
+                        .HasColumnName("notifier_name");
+
+                    b.Property<bool>("Success")
+                        .HasColumnType("boolean")
+                        .HasColumnName("success");
+
+                    b.Property<string>("XchangeId")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("xchange_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_xchange_notification");
+
+                    b.ToTable("xchange_notification", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangePromotedProperties", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<int[]>("Hits")
+                        .HasColumnType("integer[]")
+                        .HasColumnName("hits");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("Properties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("properties");
+
+                    b.Property<string>("PropertiesRaw")
+                        .HasColumnType("text")
+                        .HasColumnName("properties_raw");
+
+                    b.HasKey("Id")
+                        .HasName("pk_xchange_promoted_properties");
+
+                    b.HasIndex("PropertiesRaw")
+                        .HasDatabaseName("ix_xchange_promoted_properties_properties_raw");
+
+                    b.ToTable("xchange_promoted_properties", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeResult", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Exception")
+                        .HasColumnType("text")
+                        .HasColumnName("exception");
+
+                    b.Property<DateTime>("FinishedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("finished_on");
+
+                    b.Property<bool>("OutputBad")
+                        .HasColumnType("boolean")
+                        .HasColumnName("output_bad");
+
+                    b.Property<string>("OutputContentType")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("output_content_type");
+
+                    b.Property<string>("OutputHash")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("output_hash");
+
+                    b.Property<string>("OutputName")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("output_name");
+
+                    b.Property<int>("OutputSize")
+                        .HasColumnType("integer")
+                        .HasColumnName("output_size");
+
+                    b.Property<bool>("ResponseBad")
+                        .HasColumnType("boolean")
+                        .HasColumnName("response_bad");
+
+                    b.Property<string>("ResponseContentType")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("response_content_type");
+
+                    b.Property<string>("ResponseHash")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("response_hash");
+
+                    b.Property<string>("ResponseName")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("response_name");
+
+                    b.Property<int>("ResponseSize")
+                        .HasColumnType("integer")
+                        .HasColumnName("response_size");
+
+                    b.Property<string>("ResponseXchangeId")
+                        .HasColumnType("text")
+                        .HasColumnName("response_xchange_id");
+
+                    b.Property<bool>("Success")
+                        .HasColumnType("boolean")
+                        .HasColumnName("success");
+
+                    b.HasKey("Id")
+                        .HasName("pk_xchange_result");
+
+                    b.ToTable("xchange_result", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.RunFlagUpdater+RunningResult", b =>
+                {
+                    b.Property<bool>("IsRunning")
+                        .HasColumnType("boolean")
+                        .HasColumnName("is_running");
+
+                    b.ToTable("running_result", "infolink");
+
+                    b.ToView(null, (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.JobExecution", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("bigint")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<long>("Id"));
+
+                    b.Property<string>("Context")
+                        .HasColumnType("text")
+                        .HasColumnName("context");
+
+                    b.Property<long?>("DurationMs")
+                        .HasColumnType("bigint")
+                        .HasColumnName("duration_ms");
+
+                    b.Property<DateTime?>("EndTimeUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("end_time_utc");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<string>("FireInstanceId")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("fire_instance_id");
+
+                    b.Property<string>("JobGroup")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("job_name");
+
+                    b.Property<string>("JobTypeName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("job_type_name");
+
+                    b.Property<string>("Node")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("node");
+
+                    b.Property<DateTime>("StartTimeUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("start_time_utc");
+
+                    b.Property<bool?>("Success")
+                        .HasColumnType("boolean")
+                        .HasColumnName("success");
+
+                    b.HasKey("Id")
+                        .HasName("pk_job_executions");
+
+                    b.HasIndex("FireInstanceId")
+                        .IsUnique()
+                        .HasDatabaseName("idx_je_fire_instance_id");
+
+                    b.HasIndex("StartTimeUtc")
+                        .HasDatabaseName("idx_je_start_time");
+
+                    b.HasIndex("Success")
+                        .HasDatabaseName("idx_je_success");
+
+                    b.HasIndex("JobGroup", "JobName", "StartTimeUtc")
+                        .HasDatabaseName("idx_je_group_name_start");
+
+                    b.ToTable("job_executions", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzBlobTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<byte[]>("BlobData")
+                        .HasColumnType("bytea")
+                        .HasColumnName("blob_data");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasName("pk_qrtz_blob_triggers");
+
+                    b.ToTable("qrtz_blob_triggers", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCalendar", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("text")
+                        .HasColumnName("calendar_name");
+
+                    b.Property<byte[]>("Calendar")
+                        .IsRequired()
+                        .HasColumnType("bytea")
+                        .HasColumnName("calendar");
+
+                    b.HasKey("SchedulerName", "CalendarName")
+                        .HasName("pk_qrtz_calendars");
+
+                    b.ToTable("qrtz_calendars", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCronTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("CronExpression")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("cron_expression");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("text")
+                        .HasColumnName("time_zone_id");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasName("pk_qrtz_cron_triggers");
+
+                    b.ToTable("qrtz_cron_triggers", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzFiredTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("EntryId")
+                        .HasColumnType("text")
+                        .HasColumnName("entry_id");
+
+                    b.Property<long>("FiredTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("fired_time");
+
+                    b.Property<string>("InstanceName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("instance_name");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("bool")
+                        .HasColumnName("is_nonconcurrent");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("text")
+                        .HasColumnName("job_name");
+
+                    b.Property<int>("Priority")
+                        .HasColumnType("integer")
+                        .HasColumnName("priority");
+
+                    b.Property<bool?>("RequestsRecovery")
+                        .HasColumnType("bool")
+                        .HasColumnName("requests_recovery");
+
+                    b.Property<long>("ScheduledTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("sched_time");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("state");
+
+                    b.Property<string>("TriggerGroup")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("TriggerName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.HasKey("SchedulerName", "EntryId")
+                        .HasName("pk_qrtz_fired_triggers");
+
+                    b.HasIndex("InstanceName")
+                        .HasDatabaseName("idx_qrtz_ft_trig_inst_name");
+
+                    b.HasIndex("JobGroup")
+                        .HasDatabaseName("idx_qrtz_ft_job_group");
+
+                    b.HasIndex("JobName")
+                        .HasDatabaseName("idx_qrtz_ft_job_name");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("idx_qrtz_ft_job_req_recovery");
+
+                    b.HasIndex("TriggerGroup")
+                        .HasDatabaseName("idx_qrtz_ft_trig_group");
+
+                    b.HasIndex("TriggerName")
+                        .HasDatabaseName("idx_qrtz_ft_trig_name");
+
+                    b.HasIndex("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasDatabaseName("idx_qrtz_ft_trig_nm_gp");
+
+                    b.ToTable("qrtz_fired_triggers", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzJobDetail", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("text")
+                        .HasColumnName("job_name");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("text")
+                        .HasColumnName("description");
+
+                    b.Property<bool>("IsDurable")
+                        .HasColumnType("bool")
+                        .HasColumnName("is_durable");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("bool")
+                        .HasColumnName("is_nonconcurrent");
+
+                    b.Property<bool>("IsUpdateData")
+                        .HasColumnType("bool")
+                        .HasColumnName("is_update_data");
+
+                    b.Property<string>("JobClassName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("job_class_name");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("bytea")
+                        .HasColumnName("job_data");
+
+                    b.Property<bool>("RequestsRecovery")
+                        .HasColumnType("bool")
+                        .HasColumnName("requests_recovery");
+
+                    b.HasKey("SchedulerName", "JobName", "JobGroup")
+                        .HasName("pk_qrtz_job_details");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("idx_j_req_recovery");
+
+                    b.ToTable("qrtz_job_details", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzLock", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("LockName")
+                        .HasColumnType("text")
+                        .HasColumnName("lock_name");
+
+                    b.HasKey("SchedulerName", "LockName")
+                        .HasName("pk_qrtz_locks");
+
+                    b.ToTable("qrtz_locks", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzPausedTriggerGroup", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.HasKey("SchedulerName", "TriggerGroup")
+                        .HasName("pk_qrtz_paused_trigger_grps");
+
+                    b.ToTable("qrtz_paused_trigger_grps", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSchedulerState", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("InstanceName")
+                        .HasColumnType("text")
+                        .HasColumnName("instance_name");
+
+                    b.Property<long>("CheckInInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("checkin_interval");
+
+                    b.Property<long>("LastCheckInTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("last_checkin_time");
+
+                    b.HasKey("SchedulerName", "InstanceName")
+                        .HasName("pk_qrtz_scheduler_state");
+
+                    b.ToTable("qrtz_scheduler_state", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<bool?>("BooleanProperty1")
+                        .HasColumnType("bool")
+                        .HasColumnName("bool_prop_1");
+
+                    b.Property<bool?>("BooleanProperty2")
+                        .HasColumnType("bool")
+                        .HasColumnName("bool_prop_2");
+
+                    b.Property<decimal?>("DecimalProperty1")
+                        .HasColumnType("numeric")
+                        .HasColumnName("dec_prop_1");
+
+                    b.Property<decimal?>("DecimalProperty2")
+                        .HasColumnType("numeric")
+                        .HasColumnName("dec_prop_2");
+
+                    b.Property<int?>("IntegerProperty1")
+                        .HasColumnType("integer")
+                        .HasColumnName("int_prop_1");
+
+                    b.Property<int?>("IntegerProperty2")
+                        .HasColumnType("integer")
+                        .HasColumnName("int_prop_2");
+
+                    b.Property<long?>("LongProperty1")
+                        .HasColumnType("bigint")
+                        .HasColumnName("long_prop_1");
+
+                    b.Property<long?>("LongProperty2")
+                        .HasColumnType("bigint")
+                        .HasColumnName("long_prop_2");
+
+                    b.Property<string>("StringProperty1")
+                        .HasColumnType("text")
+                        .HasColumnName("str_prop_1");
+
+                    b.Property<string>("StringProperty2")
+                        .HasColumnType("text")
+                        .HasColumnName("str_prop_2");
+
+                    b.Property<string>("StringProperty3")
+                        .HasColumnType("text")
+                        .HasColumnName("str_prop_3");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("text")
+                        .HasColumnName("time_zone_id");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasName("pk_qrtz_simprop_triggers");
+
+                    b.ToTable("qrtz_simprop_triggers", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimpleTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<long>("RepeatCount")
+                        .HasColumnType("bigint")
+                        .HasColumnName("repeat_count");
+
+                    b.Property<long>("RepeatInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("repeat_interval");
+
+                    b.Property<long>("TimesTriggered")
+                        .HasColumnType("bigint")
+                        .HasColumnName("times_triggered");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasName("pk_qrtz_simple_triggers");
+
+                    b.ToTable("qrtz_simple_triggers", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("text")
+                        .HasColumnName("calendar_name");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("text")
+                        .HasColumnName("description");
+
+                    b.Property<long?>("EndTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("end_time");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("bytea")
+                        .HasColumnName("job_data");
+
+                    b.Property<string>("JobGroup")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("job_name");
+
+                    b.Property<int?>("MisfireInstruction")
+                        .HasColumnType("integer")
+                        .HasColumnName("misfire_instr");
+
+                    b.Property<long?>("NextFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("next_fire_time");
+
+                    b.Property<long?>("PreviousFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("prev_fire_time");
+
+                    b.Property<int?>("Priority")
+                        .HasColumnType("integer")
+                        .HasColumnName("priority");
+
+                    b.Property<long>("StartTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("start_time");
+
+                    b.Property<string>("TriggerState")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_state");
+
+                    b.Property<string>("TriggerType")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_type");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasName("pk_qrtz_triggers");
+
+                    b.HasIndex("NextFireTime")
+                        .HasDatabaseName("idx_t_next_fire_time");
+
+                    b.HasIndex("TriggerState")
+                        .HasDatabaseName("idx_t_state");
+
+                    b.HasIndex("NextFireTime", "TriggerState")
+                        .HasDatabaseName("idx_t_nft_st");
+
+                    b.HasIndex("SchedulerName", "JobName", "JobGroup")
+                        .HasDatabaseName("ix_qrtz_triggers_sched_name_job_name_job_group");
+
+                    b.ToTable("qrtz_triggers", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.AccountRoleLink", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Accounts.Account", null)
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_account_roles_accounts_account_id");
+
+                    b.HasOne("SW.Bitween.Domain.Accounts.Role", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_account_roles_roles_role_id");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Accounts.Account", null)
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_refresh_tokens_accounts_account_id");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DocumentTrail", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", "Document")
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_document_trail_document_document_id");
+
+                    b.Navigation("Document");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGatewayPartner", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Gateway.ApiGateway", "ApiGateway")
+                        .WithMany("Partners")
+                        .HasForeignKey("ApiGatewayId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_api_gateway_partner_api_gateway_api_gateway_id");
+
+                    b.HasOne("SW.Bitween.Domain.Partner", "Partner")
+                        .WithMany()
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_api_gateway_partner_partner_partner_id");
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_api_gateway_partner_subscription_subscription_id");
+
+                    b.Navigation("ApiGateway");
+
+                    b.Navigation("Partner");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_bus_gateway_document_document_id");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGatewayRoute", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Gateway.BusGateway", "BusGateway")
+                        .WithMany("Routes")
+                        .HasForeignKey("BusGatewayId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_bus_gateway_route_bus_gateway_bus_gateway_id");
+
+                    b.HasOne("SW.Bitween.Domain.Partner", "Partner")
+                        .WithMany()
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("fk_bus_gateway_route_partner_partner_id");
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_bus_gateway_route_subscription_subscription_id");
+
+                    b.Navigation("BusGateway");
+
+                    b.Navigation("Partner");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.OwnsMany("SW.Bitween.Domain.ApiCredential", "ApiCredentials", b1 =>
+                        {
+                            b1.Property<int>("PartnerId")
+                                .HasColumnType("integer")
+                                .HasColumnName("partner_id");
+
+                            b1.Property<int>("Id")
+                                .ValueGeneratedOnAdd()
+                                .HasColumnType("integer")
+                                .HasColumnName("id");
+
+                            NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b1.Property<int>("Id"));
+
+                            b1.Property<string>("Key")
+                                .IsRequired()
+                                .HasMaxLength(500)
+                                .HasColumnType("character varying(500)")
+                                .HasColumnName("key");
+
+                            b1.Property<string>("Name")
+                                .IsRequired()
+                                .HasMaxLength(500)
+                                .HasColumnType("character varying(500)")
+                                .HasColumnName("name");
+
+                            b1.HasKey("PartnerId", "Id")
+                                .HasName("pk_partner_api_credential");
+
+                            b1.HasIndex("Key")
+                                .IsUnique()
+                                .HasDatabaseName("ix_partner_api_credential_key");
+
+                            b1.ToTable("partner_api_credential", "infolink");
+
+                            b1.WithOwner()
+                                .HasForeignKey("PartnerId")
+                                .HasConstraintName("fk_partner_api_credential_partner_partner_id");
+
+                            b1.HasData(
+                                new
+                                {
+                                    PartnerId = 1,
+                                    Id = 1,
+                                    Key = "7facc758283844b49cc4ffd26a75b1de",
+                                    Name = "default"
+                                });
+                        });
+
+                    b.Navigation("ApiCredentials");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Subscription", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Subscription", null)
+                        .WithMany()
+                        .HasForeignKey("AggregationForId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("fk_subscription_aggregation_for");
+
+                    b.HasOne("SW.Bitween.Domain.SubscriptionCategory", "Category")
+                        .WithMany()
+                        .HasForeignKey("CategoryId")
+                        .HasConstraintName("fk_subscription_subscription_category_category_id");
+
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_subscription_document_document_id");
+
+                    b.HasOne("SW.Bitween.Domain.Partner", null)
+                        .WithMany("Subscriptions")
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("fk_subscription_partner_partner_id");
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", null)
+                        .WithMany()
+                        .HasForeignKey("ResponseSubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("fk_subscription_response_subscriber");
+
+                    b.HasOne("SW.Bitween.Domain.RetryPolicy", "RetryPolicy")
+                        .WithMany()
+                        .HasForeignKey("RetryPolicyId")
+                        .OnDelete(DeleteBehavior.SetNull)
+                        .HasConstraintName("fk_subscription_retry_policy_retry_policy_id");
+
+                    b.HasOne("SW.Bitween.Domain.WorkGroup", "WorkGroup")
+                        .WithMany()
+                        .HasForeignKey("WorkGroupId")
+                        .HasConstraintName("fk_subscription_work_group_work_group_id");
+
+                    b.OwnsMany("SW.Bitween.Domain.Schedule", "Schedules", b1 =>
+                        {
+                            b1.Property<int>("SubscriptionId")
+                                .HasColumnType("integer")
+                                .HasColumnName("subscription_id");
+
+                            b1.Property<int>("Id")
+                                .ValueGeneratedOnAdd()
+                                .HasColumnType("integer")
+                                .HasColumnName("id");
+
+                            NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b1.Property<int>("Id"));
+
+                            b1.Property<bool>("Backwards")
+                                .HasColumnType("boolean")
+                                .HasColumnName("backwards");
+
+                            b1.Property<long>("On")
+                                .HasColumnType("bigint")
+                                .HasColumnName("on");
+
+                            b1.Property<byte>("Recurrence")
+                                .HasColumnType("smallint")
+                                .HasColumnName("recurrence");
+
+                            b1.HasKey("SubscriptionId", "Id")
+                                .HasName("pk_subscription_schedule");
+
+                            b1.ToTable("subscription_schedule", "infolink");
+
+                            b1.WithOwner()
+                                .HasForeignKey("SubscriptionId")
+                                .HasConstraintName("fk_subscription_schedule_subscription_subscription_id");
+                        });
+
+                    b.Navigation("Category");
+
+                    b.Navigation("RetryPolicy");
+
+                    b.Navigation("Schedules");
+
+                    b.Navigation("WorkGroup");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionTrail", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_subscription_trail_subscription_subscription_id");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Xchange", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_xchange_document_document_id");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeAggregation", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeAggregation", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_xchange_aggregation_xchange_id");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeDelivery", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeDelivery", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_xchange_delivery_xchange_id");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangePromotedProperties", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangePromotedProperties", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_xchange_promoted_properties_xchange_id");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeResult", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeResult", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_xchange_result_xchange_id");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzBlobTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("BlobTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_qrtz_blob_triggers_qrtz_triggers_sched_name_trigger_name_tr");
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCronTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("CronTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_qrtz_cron_triggers_qrtz_triggers_sched_name_trigger_name_tr");
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("SimplePropertyTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_qrtz_simprop_triggers_qrtz_triggers_sched_name_trigger_name");
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimpleTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("SimpleTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_qrtz_simple_triggers_qrtz_triggers_sched_name_trigger_name_");
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzJobDetail", "JobDetail")
+                        .WithMany("Triggers")
+                        .HasForeignKey("SchedulerName", "JobName", "JobGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_qrtz_triggers_qrtz_job_details_sched_name_job_name_job_group");
+
+                    b.Navigation("JobDetail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGateway", b =>
+                {
+                    b.Navigation("Partners");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.Navigation("Routes");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.Navigation("Subscriptions");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzJobDetail", b =>
+                {
+                    b.Navigation("Triggers");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.Navigation("BlobTriggers");
+
+                    b.Navigation("CronTriggers");
+
+                    b.Navigation("SimplePropertyTriggers");
+
+                    b.Navigation("SimpleTriggers");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/SW.Bitween.PgSql/Migrations/20260726105636_AddRolesAndPermissions.cs b/SW.Bitween.PgSql/Migrations/20260726105636_AddRolesAndPermissions.cs
new file mode 100644
index 00000000..dd4ea6fa
--- /dev/null
+++ b/SW.Bitween.PgSql/Migrations/20260726105636_AddRolesAndPermissions.cs
@@ -0,0 +1,114 @@
+using System;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
+
+#nullable disable
+
+#pragma warning disable CA1814 // Prefer jagged arrays over multidimensional
+
+namespace SW.Bitween.PgSql.Migrations
+{
+    /// <inheritdoc />
+    public partial class AddRolesAndPermissions : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.CreateTable(
+                name: "Roles",
+                schema: "infolink",
+                columns: table => new
+                {
+                    id = table.Column<int>(type: "integer", nullable: false)
+                        .Annotation("Npgsql:ValueGenerationStrategy", NpgsqlValueGenerationStrategy.IdentityByDefaultColumn),
+                    name = table.Column<string>(type: "character varying(100)", maxLength: 100, nullable: false),
+                    description = table.Column<string>(type: "character varying(500)", maxLength: 500, nullable: true),
+                    permissions = table.Column<string>(type: "text", nullable: true),
+                    is_system = table.Column<bool>(type: "boolean", nullable: false),
+                    created_on = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
+                    created_by = table.Column<string>(type: "text", nullable: true),
+                    modified_on = table.Column<DateTime>(type: "timestamp with time zone", nullable: true),
+                    modified_by = table.Column<string>(type: "text", nullable: true)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_roles", x => x.id);
+                });
+
+            migrationBuilder.CreateTable(
+                name: "AccountRoles",
+                schema: "infolink",
+                columns: table => new
+                {
+                    account_id = table.Column<int>(type: "integer", nullable: false),
+                    role_id = table.Column<int>(type: "integer", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_account_roles", x => new { x.account_id, x.role_id });
+                    table.ForeignKey(
+                        name: "fk_account_roles_accounts_account_id",
+                        column: x => x.account_id,
+                        principalSchema: "infolink",
+                        principalTable: "Accounts",
+                        principalColumn: "id",
+                        onDelete: ReferentialAction.Cascade);
+                    table.ForeignKey(
+                        name: "fk_account_roles_roles_role_id",
+                        column: x => x.role_id,
+                        principalSchema: "infolink",
+                        principalTable: "Roles",
+                        principalColumn: "id",
+                        onDelete: ReferentialAction.Cascade);
+                });
+
+            migrationBuilder.InsertData(
+                schema: "infolink",
+                table: "Roles",
+                columns: new[] { "id", "created_by", "created_on", "description", "is_system", "modified_by", "modified_on", "name", "permissions" },
+                values: new object[,]
+                {
+                    { 1, null, new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc), "Full access to everything, including members, roles and settings.", true, null, null, "Administrator", "[]" },
+                    { 2, null, new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc), "Runs and configures integrations. Can't manage members, roles or settings.", true, null, null, "Member", "[]" },
+                    { 3, null, new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc), "Read-only access to integrations, exchanges and configuration.", true, null, null, "Viewer", "[]" }
+                });
+
+            migrationBuilder.CreateIndex(
+                name: "ix_account_roles_role_id",
+                schema: "infolink",
+                table: "AccountRoles",
+                column: "role_id");
+
+            migrationBuilder.CreateIndex(
+                name: "ix_roles_name",
+                schema: "infolink",
+                table: "Roles",
+                column: "name",
+                unique: true);
+
+            // Every existing account keeps exactly the access it had: its coarse AccountRole
+            // (Admin=0, Viewer=10, Member=20) becomes the matching built-in role. Anything
+            // unrecognised lands on Viewer — least privilege. Idempotent, so re-running or
+            // ordering against the seeded admin account can't produce duplicates.
+            migrationBuilder.Sql("""
+                INSERT INTO infolink."AccountRoles" (account_id, role_id)
+                SELECT a.id, CASE a."role" WHEN 0 THEN 1 WHEN 20 THEN 2 ELSE 3 END
+                FROM infolink."Accounts" a
+                WHERE NOT EXISTS (
+                    SELECT 1 FROM infolink."AccountRoles" l WHERE l.account_id = a.id);
+                """);
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropTable(
+                name: "AccountRoles",
+                schema: "infolink");
+
+            migrationBuilder.DropTable(
+                name: "Roles",
+                schema: "infolink");
+        }
+    }
+}
diff --git a/SW.Bitween.PgSql/Migrations/20260726151523_DropAccountPhone.Designer.cs b/SW.Bitween.PgSql/Migrations/20260726151523_DropAccountPhone.Designer.cs
new file mode 100644
index 00000000..5c169d68
--- /dev/null
+++ b/SW.Bitween.PgSql/Migrations/20260726151523_DropAccountPhone.Designer.cs
@@ -0,0 +1,2284 @@
+// <auto-generated />
+using System;
+using System.Collections.Generic;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
+using SW.Bitween.Model;
+using SW.Bitween.PgSql;
+
+#nullable disable
+
+namespace SW.Bitween.PgSql.Migrations
+{
+    [DbContext(typeof(BitweenDbContext))]
+    [Migration("20260726151523_DropAccountPhone")]
+    partial class DropAccountPhone
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasDefaultSchema("infolink")
+                .HasAnnotation("ProductVersion", "8.0.23")
+                .HasAnnotation("Relational:MaxIdentifierLength", 63);
+
+            NpgsqlModelBuilderExtensions.UseIdentityByDefaultColumns(modelBuilder);
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.Account", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<bool>("Deleted")
+                        .HasColumnType("boolean")
+                        .HasColumnName("deleted");
+
+                    b.Property<bool>("Disabled")
+                        .HasColumnType("boolean")
+                        .HasColumnName("disabled");
+
+                    b.Property<string>("DisplayName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("display_name");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("email");
+
+                    b.Property<byte>("EmailProvider")
+                        .HasColumnType("smallint")
+                        .HasColumnName("email_provider");
+
+                    b.Property<byte>("LoginMethods")
+                        .HasColumnType("smallint")
+                        .HasColumnName("login_methods");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.Property<string>("Password")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("password");
+
+                    b.Property<int>("Role")
+                        .HasColumnType("integer")
+                        .HasColumnName("role");
+
+                    b.HasKey("Id")
+                        .HasName("pk_accounts");
+
+                    b.HasIndex("Email")
+                        .IsUnique()
+                        .HasDatabaseName("ix_accounts_email");
+
+                    b.ToTable("Accounts", "infolink");
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 9999,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Deleted = false,
+                            Disabled = false,
+                            DisplayName = "Admin",
+                            Email = "admin@Bitween.systems",
+                            EmailProvider = (byte)0,
+                            LoginMethods = (byte)2,
+                            Password = "$SWHASH$V1$10000$VQCi48eitH4Ml5juvBMOFZrMdQwBbhuIQVXe6RR7qJdDF2bJ",
+                            Role = 0
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.AccountRoleLink", b =>
+                {
+                    b.Property<int>("AccountId")
+                        .HasColumnType("integer")
+                        .HasColumnName("account_id");
+
+                    b.Property<int>("RoleId")
+                        .HasColumnType("integer")
+                        .HasColumnName("role_id");
+
+                    b.HasKey("AccountId", "RoleId")
+                        .HasName("pk_account_roles");
+
+                    b.HasIndex("RoleId")
+                        .HasDatabaseName("ix_account_roles_role_id");
+
+                    b.ToTable("AccountRoles", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<int>("AccountId")
+                        .HasColumnType("integer")
+                        .HasColumnName("account_id");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<byte>("LoginMethod")
+                        .HasColumnType("smallint")
+                        .HasColumnName("login_method");
+
+                    b.HasKey("Id")
+                        .HasName("pk_refresh_tokens");
+
+                    b.HasIndex("AccountId")
+                        .HasDatabaseName("ix_refresh_tokens_account_id");
+
+                    b.ToTable("RefreshTokens", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.Role", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("Description")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("description");
+
+                    b.Property<bool>("IsSystem")
+                        .HasColumnType("boolean")
+                        .HasColumnName("is_system");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("name");
+
+                    b.Property<string>("Permissions")
+                        .HasColumnType("text")
+                        .HasColumnName("permissions");
+
+                    b.HasKey("Id")
+                        .HasName("pk_roles");
+
+                    b.HasIndex("Name")
+                        .IsUnique()
+                        .HasDatabaseName("ix_roles_name");
+
+                    b.ToTable("Roles", "infolink");
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 1,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Full access to everything, including members, roles and settings.",
+                            IsSystem = true,
+                            Name = "Administrator",
+                            Permissions = "[]"
+                        },
+                        new
+                        {
+                            Id = 2,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Runs and configures integrations. Can't manage members, roles or settings.",
+                            IsSystem = true,
+                            Name = "Member",
+                            Permissions = "[]"
+                        },
+                        new
+                        {
+                            Id = 3,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Read-only access to integrations, exchanges and configuration.",
+                            IsSystem = true,
+                            Name = "Viewer",
+                            Permissions = "[]"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DelayedRetry", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<Dictionary<string, int>>("GroupAttemptCounts")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("group_attempt_counts");
+
+                    b.Property<DateTime>("On")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("on");
+
+                    b.HasKey("Id")
+                        .HasName("pk_delayed_retry");
+
+                    b.HasIndex("On")
+                        .HasDatabaseName("ix_delayed_retry_on");
+
+                    b.ToTable("delayed_retry", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Document", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("BusEnabled")
+                        .HasColumnType("boolean")
+                        .HasColumnName("bus_enabled");
+
+                    b.Property<string>("BusMessageTypeName")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("bus_message_type_name");
+
+                    b.Property<string>("Code")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("code");
+
+                    b.Property<bool?>("DisregardsUnfilteredMessages")
+                        .HasColumnType("boolean")
+                        .HasColumnName("disregards_unfiltered_messages");
+
+                    b.Property<int>("DocumentFormat")
+                        .HasColumnType("integer")
+                        .HasColumnName("document_format");
+
+                    b.Property<int>("DuplicateInterval")
+                        .HasColumnType("integer")
+                        .HasColumnName("duplicate_interval");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("name");
+
+                    b.Property<string>("PromotedProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("promoted_properties");
+
+                    b.HasKey("Id")
+                        .HasName("pk_document");
+
+                    b.HasIndex("BusMessageTypeName")
+                        .IsUnique()
+                        .HasDatabaseName("ix_document_bus_message_type_name");
+
+                    b.HasIndex("Code")
+                        .IsUnique()
+                        .HasDatabaseName("ix_document_code");
+
+                    b.HasIndex("Name")
+                        .IsUnique()
+                        .HasDatabaseName("ix_document_name");
+
+                    b.ToTable("document", "infolink");
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 10001,
+                            BusEnabled = false,
+                            DocumentFormat = 0,
+                            DuplicateInterval = 0,
+                            Name = "Aggregation Document",
+                            PromotedProperties = "{}"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DocumentTrail", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("text")
+                        .HasColumnName("id");
+
+                    b.Property<int>("Code")
+                        .HasColumnType("integer")
+                        .HasColumnName("code");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("integer")
+                        .HasColumnName("document_id");
+
+                    b.Property<string>("StateAfter")
+                        .HasColumnType("text")
+                        .HasColumnName("state_after");
+
+                    b.Property<string>("StateBefore")
+                        .HasColumnType("text")
+                        .HasColumnName("state_before");
+
+                    b.HasKey("Id")
+                        .HasName("pk_document_trail");
+
+                    b.HasIndex("CreatedOn")
+                        .HasDatabaseName("ix_document_trail_created_on");
+
+                    b.HasIndex("DocumentId")
+                        .HasDatabaseName("ix_document_trail_document_id");
+
+                    b.ToTable("document_trail", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGateway", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("name");
+
+                    b.Property<string>("UrlName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("url_name");
+
+                    b.HasKey("Id")
+                        .HasName("pk_api_gateway");
+
+                    b.HasIndex("UrlName")
+                        .IsUnique()
+                        .HasDatabaseName("ix_api_gateway_url_name");
+
+                    b.ToTable("api_gateway", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGatewayPartner", b =>
+                {
+                    b.Property<int>("ApiGatewayId")
+                        .HasColumnType("integer")
+                        .HasColumnName("api_gateway_id");
+
+                    b.Property<int>("PartnerId")
+                        .HasColumnType("integer")
+                        .HasColumnName("partner_id");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("subscription_id");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.HasKey("ApiGatewayId", "PartnerId", "SubscriptionId")
+                        .HasName("pk_api_gateway_partner");
+
+                    b.HasIndex("PartnerId")
+                        .HasDatabaseName("ix_api_gateway_partner_partner_id");
+
+                    b.HasIndex("SubscriptionId")
+                        .HasDatabaseName("ix_api_gateway_partner_subscription_id");
+
+                    b.ToTable("api_gateway_partner", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("integer")
+                        .HasColumnName("document_id");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("name");
+
+                    b.HasKey("Id")
+                        .HasName("pk_bus_gateway");
+
+                    b.HasIndex("DocumentId")
+                        .HasDatabaseName("ix_bus_gateway_document_id");
+
+                    b.ToTable("bus_gateway", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGatewayRoute", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("BusGatewayId")
+                        .HasColumnType("integer")
+                        .HasColumnName("bus_gateway_id");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("MatchExpression")
+                        .HasColumnType("text")
+                        .HasColumnName("match_expression");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("integer")
+                        .HasColumnName("partner_id");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("subscription_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_bus_gateway_route");
+
+                    b.HasIndex("BusGatewayId")
+                        .HasDatabaseName("ix_bus_gateway_route_bus_gateway_id");
+
+                    b.HasIndex("PartnerId")
+                        .HasDatabaseName("ix_bus_gateway_route_partner_id");
+
+                    b.HasIndex("SubscriptionId")
+                        .HasDatabaseName("ix_bus_gateway_route_subscription_id");
+
+                    b.ToTable("bus_gateway_route", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.GlobalAdapterValuesSet", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("text")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("text")
+                        .HasColumnName("name");
+
+                    b.Property<Dictionary<string, string>>("Values")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("values");
+
+                    b.HasKey("Id")
+                        .HasName("pk_global_adapter_values_set");
+
+                    b.ToTable("global_adapter_values_set", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Notifier", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("handler_id");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("text")
+                        .HasColumnName("handler_properties");
+
+                    b.Property<bool>("Inactive")
+                        .HasColumnType("boolean")
+                        .HasColumnName("inactive");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("name");
+
+                    b.Property<bool>("RunOnBadResult")
+                        .HasColumnType("boolean")
+                        .HasColumnName("run_on_bad_result");
+
+                    b.Property<bool>("RunOnFailedResult")
+                        .HasColumnType("boolean")
+                        .HasColumnName("run_on_failed_result");
+
+                    b.Property<int[]>("RunOnSubscriptions")
+                        .HasColumnType("integer[]")
+                        .HasColumnName("run_on_subscriptions");
+
+                    b.Property<bool>("RunOnSuccessfulResult")
+                        .HasColumnType("boolean")
+                        .HasColumnName("run_on_successful_result");
+
+                    b.HasKey("Id")
+                        .HasName("pk_notifier");
+
+                    b.ToTable("notifier", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.OnHoldXchange", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("BadData")
+                        .HasColumnType("boolean")
+                        .HasColumnName("bad_data");
+
+                    b.Property<string>("Data")
+                        .HasColumnType("text")
+                        .HasColumnName("data");
+
+                    b.Property<string>("FileName")
+                        .HasColumnType("text")
+                        .HasColumnName("file_name");
+
+                    b.Property<string[]>("References")
+                        .HasColumnType("text[]")
+                        .HasColumnName("references");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("subscription_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_on_hold_xchange");
+
+                    b.HasIndex("SubscriptionId")
+                        .HasDatabaseName("ix_on_hold_xchange_subscription_id");
+
+                    b.ToTable("on_hold_xchange", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<Dictionary<string, string>>("AdapterProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("adapter_properties");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("name");
+
+                    b.HasKey("Id")
+                        .HasName("pk_partner");
+
+                    b.ToTable("partner", "infolink");
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 1,
+                            Name = "SYSTEM"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.RetryPolicy", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("Groups")
+                        .HasColumnType("text")
+                        .HasColumnName("groups");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("name");
+
+                    b.HasKey("Id")
+                        .HasName("pk_retry_policy");
+
+                    b.ToTable("retry_policy", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Subscription", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("AggregateOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("aggregate_on");
+
+                    b.Property<int?>("AggregationForId")
+                        .HasColumnType("integer")
+                        .HasColumnName("aggregation_for_id");
+
+                    b.Property<byte>("AggregationTarget")
+                        .HasColumnType("smallint")
+                        .HasColumnName("aggregation_target");
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("integer")
+                        .HasColumnName("category_id");
+
+                    b.Property<int>("ConsecutiveFailures")
+                        .HasColumnType("integer")
+                        .HasColumnName("consecutive_failures");
+
+                    b.Property<string>("CustomRetryPolicy")
+                        .HasColumnType("text")
+                        .HasColumnName("custom_retry_policy");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("DocumentFilter")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("document_filter");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("integer")
+                        .HasColumnName("document_id");
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("handler_id");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("HandlerProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("handler_properties");
+
+                    b.Property<bool>("Inactive")
+                        .HasColumnType("boolean")
+                        .HasColumnName("inactive");
+
+                    b.Property<bool>("IsRunning")
+                        .HasColumnType("boolean")
+                        .HasColumnName("is_running");
+
+                    b.Property<string>("LastException")
+                        .HasColumnType("text")
+                        .HasColumnName("last_exception");
+
+                    b.Property<string>("MapperId")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("mapper_id");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("MapperProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("mapper_properties");
+
+                    b.Property<string>("MatchExpression")
+                        .HasColumnType("text")
+                        .HasColumnName("match_expression");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("name");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("integer")
+                        .HasColumnName("partner_id");
+
+                    b.Property<DateTime?>("PausedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("paused_on");
+
+                    b.Property<DateTime?>("ReceiveOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("receive_on");
+
+                    b.Property<string>("ReceiverId")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("receiver_id");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("ReceiverProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("receiver_properties");
+
+                    b.Property<string>("ResponseMessageTypeName")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("response_message_type_name");
+
+                    b.Property<int?>("ResponseSubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("response_subscription_id");
+
+                    b.Property<int?>("RetryPolicyId")
+                        .HasColumnType("integer")
+                        .HasColumnName("retry_policy_id");
+
+                    b.Property<bool>("Temporary")
+                        .HasColumnType("boolean")
+                        .HasColumnName("temporary");
+
+                    b.Property<byte>("Type")
+                        .HasColumnType("smallint")
+                        .HasColumnName("type");
+
+                    b.Property<string>("ValidatorId")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("validator_id");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("ValidatorProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("validator_properties");
+
+                    b.Property<int?>("WorkGroupId")
+                        .HasColumnType("integer")
+                        .HasColumnName("work_group_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_subscription");
+
+                    b.HasIndex("AggregationForId")
+                        .HasDatabaseName("ix_subscription_aggregation_for_id");
+
+                    b.HasIndex("CategoryId")
+                        .HasDatabaseName("ix_subscription_category_id");
+
+                    b.HasIndex("DocumentId")
+                        .HasDatabaseName("ix_subscription_document_id");
+
+                    b.HasIndex("PartnerId")
+                        .HasDatabaseName("ix_subscription_partner_id");
+
+                    b.HasIndex("ResponseSubscriptionId")
+                        .HasDatabaseName("ix_subscription_response_subscription_id");
+
+                    b.HasIndex("RetryPolicyId")
+                        .HasDatabaseName("ix_subscription_retry_policy_id");
+
+                    b.HasIndex("WorkGroupId")
+                        .HasDatabaseName("ix_subscription_work_group_id");
+
+                    b.ToTable("subscription", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionCategory", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Code")
+                        .HasColumnType("text")
+                        .HasColumnName("code");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("text")
+                        .HasColumnName("description");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.HasKey("Id")
+                        .HasName("pk_subscription_category");
+
+                    b.HasIndex("Code")
+                        .IsUnique()
+                        .HasDatabaseName("ix_subscription_category_code");
+
+                    b.ToTable("subscription_category", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionTrail", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<int>("Code")
+                        .HasColumnType("integer")
+                        .HasColumnName("code");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("StateAfter")
+                        .HasColumnType("text")
+                        .HasColumnName("state_after");
+
+                    b.Property<string>("StateBefore")
+                        .HasColumnType("text")
+                        .HasColumnName("state_before");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("subscription_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_subscription_trail");
+
+                    b.HasIndex("CreatedOn")
+                        .HasDatabaseName("ix_subscription_trail_created_on");
+
+                    b.HasIndex("SubscriptionId")
+                        .HasDatabaseName("ix_subscription_trail_subscription_id");
+
+                    b.ToTable("subscription_trail", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.WorkGroup", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BusMessageName")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("bus_message_name");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("text")
+                        .HasColumnName("name");
+
+                    b.Property<WorkGroupOptions>("Options")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("options");
+
+                    b.HasKey("Id")
+                        .HasName("pk_work_group");
+
+                    b.ToTable("work_group", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Xchange", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<string>("CorrelationId")
+                        .HasColumnType("text")
+                        .HasColumnName("correlation_id");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("integer")
+                        .HasColumnName("document_id");
+
+                    b.Property<IReadOnlyDictionary<string, int>>("GroupAttemptCounts")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("group_attempt_counts");
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("handler_id");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("HandlerProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("handler_properties");
+
+                    b.Property<string>("InputContentType")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("input_content_type");
+
+                    b.Property<string>("InputHash")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("input_hash");
+
+                    b.Property<string>("InputName")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("input_name");
+
+                    b.Property<int>("InputSize")
+                        .HasColumnType("integer")
+                        .HasColumnName("input_size");
+
+                    b.Property<string>("MapperId")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("mapper_id");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("MapperProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("mapper_properties");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("integer")
+                        .HasColumnName("partner_id");
+
+                    b.Property<string[]>("References")
+                        .HasColumnType("text[]")
+                        .HasColumnName("references");
+
+                    b.Property<string>("ResponseMessageTypeName")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("response_message_type_name");
+
+                    b.Property<int?>("ResponseSubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("response_subscription_id");
+
+                    b.Property<string>("RetryFor")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("retry_for");
+
+                    b.Property<DateTime>("StartedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("started_on");
+
+                    b.Property<int?>("SubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("subscription_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_xchange");
+
+                    b.HasIndex("DocumentId")
+                        .HasDatabaseName("ix_xchange_document_id");
+
+                    b.HasIndex("InputHash")
+                        .HasDatabaseName("ix_xchange_input_hash");
+
+                    b.HasIndex("RetryFor")
+                        .HasDatabaseName("ix_xchange_retry_for");
+
+                    b.HasIndex("StartedOn")
+                        .HasDatabaseName("ix_xchange_started_on");
+
+                    b.HasIndex("SubscriptionId")
+                        .HasDatabaseName("ix_xchange_subscription_id");
+
+                    b.ToTable("xchange", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeAggregation", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<DateTime>("AggregatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("aggregated_on");
+
+                    b.Property<string>("AggregationXchangeId")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("aggregation_xchange_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_xchange_aggregation");
+
+                    b.HasIndex("AggregationXchangeId")
+                        .HasDatabaseName("ix_xchange_aggregation_aggregation_xchange_id");
+
+                    b.ToTable("xchange_aggregation", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeDelivery", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<DateTime>("DeliveredOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("delivered_on");
+
+                    b.HasKey("Id")
+                        .HasName("pk_xchange_delivery");
+
+                    b.HasIndex("DeliveredOn")
+                        .HasDatabaseName("ix_xchange_delivery_delivered_on");
+
+                    b.ToTable("xchange_delivery", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeNotification", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Exception")
+                        .HasColumnType("text")
+                        .HasColumnName("exception");
+
+                    b.Property<DateTime>("FinishedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("finished_on");
+
+                    b.Property<int>("NotifierId")
+                        .HasColumnType("integer")
+                        .HasColumnName("notifier_id");
+
+                    b.Property<string>("NotifierName")
+                        .HasColumnType("text")
+                        .HasColumnName("notifier_name");
+
+                    b.Property<bool>("Success")
+                        .HasColumnType("boolean")
+                        .HasColumnName("success");
+
+                    b.Property<string>("XchangeId")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("xchange_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_xchange_notification");
+
+                    b.ToTable("xchange_notification", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangePromotedProperties", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<int[]>("Hits")
+                        .HasColumnType("integer[]")
+                        .HasColumnName("hits");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("Properties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("properties");
+
+                    b.Property<string>("PropertiesRaw")
+                        .HasColumnType("text")
+                        .HasColumnName("properties_raw");
+
+                    b.HasKey("Id")
+                        .HasName("pk_xchange_promoted_properties");
+
+                    b.HasIndex("PropertiesRaw")
+                        .HasDatabaseName("ix_xchange_promoted_properties_properties_raw");
+
+                    b.ToTable("xchange_promoted_properties", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeResult", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Exception")
+                        .HasColumnType("text")
+                        .HasColumnName("exception");
+
+                    b.Property<DateTime>("FinishedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("finished_on");
+
+                    b.Property<bool>("OutputBad")
+                        .HasColumnType("boolean")
+                        .HasColumnName("output_bad");
+
+                    b.Property<string>("OutputContentType")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("output_content_type");
+
+                    b.Property<string>("OutputHash")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("output_hash");
+
+                    b.Property<string>("OutputName")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("output_name");
+
+                    b.Property<int>("OutputSize")
+                        .HasColumnType("integer")
+                        .HasColumnName("output_size");
+
+                    b.Property<bool>("ResponseBad")
+                        .HasColumnType("boolean")
+                        .HasColumnName("response_bad");
+
+                    b.Property<string>("ResponseContentType")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("response_content_type");
+
+                    b.Property<string>("ResponseHash")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("response_hash");
+
+                    b.Property<string>("ResponseName")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("response_name");
+
+                    b.Property<int>("ResponseSize")
+                        .HasColumnType("integer")
+                        .HasColumnName("response_size");
+
+                    b.Property<string>("ResponseXchangeId")
+                        .HasColumnType("text")
+                        .HasColumnName("response_xchange_id");
+
+                    b.Property<bool>("Success")
+                        .HasColumnType("boolean")
+                        .HasColumnName("success");
+
+                    b.HasKey("Id")
+                        .HasName("pk_xchange_result");
+
+                    b.ToTable("xchange_result", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.RunFlagUpdater+RunningResult", b =>
+                {
+                    b.Property<bool>("IsRunning")
+                        .HasColumnType("boolean")
+                        .HasColumnName("is_running");
+
+                    b.ToTable("running_result", "infolink");
+
+                    b.ToView(null, (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.JobExecution", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("bigint")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<long>("Id"));
+
+                    b.Property<string>("Context")
+                        .HasColumnType("text")
+                        .HasColumnName("context");
+
+                    b.Property<long?>("DurationMs")
+                        .HasColumnType("bigint")
+                        .HasColumnName("duration_ms");
+
+                    b.Property<DateTime?>("EndTimeUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("end_time_utc");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<string>("FireInstanceId")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("fire_instance_id");
+
+                    b.Property<string>("JobGroup")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("job_name");
+
+                    b.Property<string>("JobTypeName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("job_type_name");
+
+                    b.Property<string>("Node")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("node");
+
+                    b.Property<DateTime>("StartTimeUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("start_time_utc");
+
+                    b.Property<bool?>("Success")
+                        .HasColumnType("boolean")
+                        .HasColumnName("success");
+
+                    b.HasKey("Id")
+                        .HasName("pk_job_executions");
+
+                    b.HasIndex("FireInstanceId")
+                        .IsUnique()
+                        .HasDatabaseName("idx_je_fire_instance_id");
+
+                    b.HasIndex("StartTimeUtc")
+                        .HasDatabaseName("idx_je_start_time");
+
+                    b.HasIndex("Success")
+                        .HasDatabaseName("idx_je_success");
+
+                    b.HasIndex("JobGroup", "JobName", "StartTimeUtc")
+                        .HasDatabaseName("idx_je_group_name_start");
+
+                    b.ToTable("job_executions", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzBlobTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<byte[]>("BlobData")
+                        .HasColumnType("bytea")
+                        .HasColumnName("blob_data");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasName("pk_qrtz_blob_triggers");
+
+                    b.ToTable("qrtz_blob_triggers", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCalendar", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("text")
+                        .HasColumnName("calendar_name");
+
+                    b.Property<byte[]>("Calendar")
+                        .IsRequired()
+                        .HasColumnType("bytea")
+                        .HasColumnName("calendar");
+
+                    b.HasKey("SchedulerName", "CalendarName")
+                        .HasName("pk_qrtz_calendars");
+
+                    b.ToTable("qrtz_calendars", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCronTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("CronExpression")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("cron_expression");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("text")
+                        .HasColumnName("time_zone_id");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasName("pk_qrtz_cron_triggers");
+
+                    b.ToTable("qrtz_cron_triggers", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzFiredTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("EntryId")
+                        .HasColumnType("text")
+                        .HasColumnName("entry_id");
+
+                    b.Property<long>("FiredTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("fired_time");
+
+                    b.Property<string>("InstanceName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("instance_name");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("bool")
+                        .HasColumnName("is_nonconcurrent");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("text")
+                        .HasColumnName("job_name");
+
+                    b.Property<int>("Priority")
+                        .HasColumnType("integer")
+                        .HasColumnName("priority");
+
+                    b.Property<bool?>("RequestsRecovery")
+                        .HasColumnType("bool")
+                        .HasColumnName("requests_recovery");
+
+                    b.Property<long>("ScheduledTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("sched_time");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("state");
+
+                    b.Property<string>("TriggerGroup")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("TriggerName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.HasKey("SchedulerName", "EntryId")
+                        .HasName("pk_qrtz_fired_triggers");
+
+                    b.HasIndex("InstanceName")
+                        .HasDatabaseName("idx_qrtz_ft_trig_inst_name");
+
+                    b.HasIndex("JobGroup")
+                        .HasDatabaseName("idx_qrtz_ft_job_group");
+
+                    b.HasIndex("JobName")
+                        .HasDatabaseName("idx_qrtz_ft_job_name");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("idx_qrtz_ft_job_req_recovery");
+
+                    b.HasIndex("TriggerGroup")
+                        .HasDatabaseName("idx_qrtz_ft_trig_group");
+
+                    b.HasIndex("TriggerName")
+                        .HasDatabaseName("idx_qrtz_ft_trig_name");
+
+                    b.HasIndex("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasDatabaseName("idx_qrtz_ft_trig_nm_gp");
+
+                    b.ToTable("qrtz_fired_triggers", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzJobDetail", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("text")
+                        .HasColumnName("job_name");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("text")
+                        .HasColumnName("description");
+
+                    b.Property<bool>("IsDurable")
+                        .HasColumnType("bool")
+                        .HasColumnName("is_durable");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("bool")
+                        .HasColumnName("is_nonconcurrent");
+
+                    b.Property<bool>("IsUpdateData")
+                        .HasColumnType("bool")
+                        .HasColumnName("is_update_data");
+
+                    b.Property<string>("JobClassName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("job_class_name");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("bytea")
+                        .HasColumnName("job_data");
+
+                    b.Property<bool>("RequestsRecovery")
+                        .HasColumnType("bool")
+                        .HasColumnName("requests_recovery");
+
+                    b.HasKey("SchedulerName", "JobName", "JobGroup")
+                        .HasName("pk_qrtz_job_details");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("idx_j_req_recovery");
+
+                    b.ToTable("qrtz_job_details", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzLock", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("LockName")
+                        .HasColumnType("text")
+                        .HasColumnName("lock_name");
+
+                    b.HasKey("SchedulerName", "LockName")
+                        .HasName("pk_qrtz_locks");
+
+                    b.ToTable("qrtz_locks", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzPausedTriggerGroup", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.HasKey("SchedulerName", "TriggerGroup")
+                        .HasName("pk_qrtz_paused_trigger_grps");
+
+                    b.ToTable("qrtz_paused_trigger_grps", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSchedulerState", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("InstanceName")
+                        .HasColumnType("text")
+                        .HasColumnName("instance_name");
+
+                    b.Property<long>("CheckInInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("checkin_interval");
+
+                    b.Property<long>("LastCheckInTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("last_checkin_time");
+
+                    b.HasKey("SchedulerName", "InstanceName")
+                        .HasName("pk_qrtz_scheduler_state");
+
+                    b.ToTable("qrtz_scheduler_state", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<bool?>("BooleanProperty1")
+                        .HasColumnType("bool")
+                        .HasColumnName("bool_prop_1");
+
+                    b.Property<bool?>("BooleanProperty2")
+                        .HasColumnType("bool")
+                        .HasColumnName("bool_prop_2");
+
+                    b.Property<decimal?>("DecimalProperty1")
+                        .HasColumnType("numeric")
+                        .HasColumnName("dec_prop_1");
+
+                    b.Property<decimal?>("DecimalProperty2")
+                        .HasColumnType("numeric")
+                        .HasColumnName("dec_prop_2");
+
+                    b.Property<int?>("IntegerProperty1")
+                        .HasColumnType("integer")
+                        .HasColumnName("int_prop_1");
+
+                    b.Property<int?>("IntegerProperty2")
+                        .HasColumnType("integer")
+                        .HasColumnName("int_prop_2");
+
+                    b.Property<long?>("LongProperty1")
+                        .HasColumnType("bigint")
+                        .HasColumnName("long_prop_1");
+
+                    b.Property<long?>("LongProperty2")
+                        .HasColumnType("bigint")
+                        .HasColumnName("long_prop_2");
+
+                    b.Property<string>("StringProperty1")
+                        .HasColumnType("text")
+                        .HasColumnName("str_prop_1");
+
+                    b.Property<string>("StringProperty2")
+                        .HasColumnType("text")
+                        .HasColumnName("str_prop_2");
+
+                    b.Property<string>("StringProperty3")
+                        .HasColumnType("text")
+                        .HasColumnName("str_prop_3");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("text")
+                        .HasColumnName("time_zone_id");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasName("pk_qrtz_simprop_triggers");
+
+                    b.ToTable("qrtz_simprop_triggers", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimpleTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<long>("RepeatCount")
+                        .HasColumnType("bigint")
+                        .HasColumnName("repeat_count");
+
+                    b.Property<long>("RepeatInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("repeat_interval");
+
+                    b.Property<long>("TimesTriggered")
+                        .HasColumnType("bigint")
+                        .HasColumnName("times_triggered");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasName("pk_qrtz_simple_triggers");
+
+                    b.ToTable("qrtz_simple_triggers", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("text")
+                        .HasColumnName("calendar_name");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("text")
+                        .HasColumnName("description");
+
+                    b.Property<long?>("EndTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("end_time");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("bytea")
+                        .HasColumnName("job_data");
+
+                    b.Property<string>("JobGroup")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("job_name");
+
+                    b.Property<int?>("MisfireInstruction")
+                        .HasColumnType("integer")
+                        .HasColumnName("misfire_instr");
+
+                    b.Property<long?>("NextFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("next_fire_time");
+
+                    b.Property<long?>("PreviousFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("prev_fire_time");
+
+                    b.Property<int?>("Priority")
+                        .HasColumnType("integer")
+                        .HasColumnName("priority");
+
+                    b.Property<long>("StartTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("start_time");
+
+                    b.Property<string>("TriggerState")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_state");
+
+                    b.Property<string>("TriggerType")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_type");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasName("pk_qrtz_triggers");
+
+                    b.HasIndex("NextFireTime")
+                        .HasDatabaseName("idx_t_next_fire_time");
+
+                    b.HasIndex("TriggerState")
+                        .HasDatabaseName("idx_t_state");
+
+                    b.HasIndex("NextFireTime", "TriggerState")
+                        .HasDatabaseName("idx_t_nft_st");
+
+                    b.HasIndex("SchedulerName", "JobName", "JobGroup")
+                        .HasDatabaseName("ix_qrtz_triggers_sched_name_job_name_job_group");
+
+                    b.ToTable("qrtz_triggers", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.AccountRoleLink", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Accounts.Account", null)
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_account_roles_accounts_account_id");
+
+                    b.HasOne("SW.Bitween.Domain.Accounts.Role", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_account_roles_roles_role_id");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Accounts.Account", null)
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_refresh_tokens_accounts_account_id");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DocumentTrail", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", "Document")
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_document_trail_document_document_id");
+
+                    b.Navigation("Document");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGatewayPartner", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Gateway.ApiGateway", "ApiGateway")
+                        .WithMany("Partners")
+                        .HasForeignKey("ApiGatewayId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_api_gateway_partner_api_gateway_api_gateway_id");
+
+                    b.HasOne("SW.Bitween.Domain.Partner", "Partner")
+                        .WithMany()
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_api_gateway_partner_partner_partner_id");
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_api_gateway_partner_subscription_subscription_id");
+
+                    b.Navigation("ApiGateway");
+
+                    b.Navigation("Partner");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_bus_gateway_document_document_id");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGatewayRoute", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Gateway.BusGateway", "BusGateway")
+                        .WithMany("Routes")
+                        .HasForeignKey("BusGatewayId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_bus_gateway_route_bus_gateway_bus_gateway_id");
+
+                    b.HasOne("SW.Bitween.Domain.Partner", "Partner")
+                        .WithMany()
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("fk_bus_gateway_route_partner_partner_id");
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_bus_gateway_route_subscription_subscription_id");
+
+                    b.Navigation("BusGateway");
+
+                    b.Navigation("Partner");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.OwnsMany("SW.Bitween.Domain.ApiCredential", "ApiCredentials", b1 =>
+                        {
+                            b1.Property<int>("PartnerId")
+                                .HasColumnType("integer")
+                                .HasColumnName("partner_id");
+
+                            b1.Property<int>("Id")
+                                .ValueGeneratedOnAdd()
+                                .HasColumnType("integer")
+                                .HasColumnName("id");
+
+                            NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b1.Property<int>("Id"));
+
+                            b1.Property<string>("Key")
+                                .IsRequired()
+                                .HasMaxLength(500)
+                                .HasColumnType("character varying(500)")
+                                .HasColumnName("key");
+
+                            b1.Property<string>("Name")
+                                .IsRequired()
+                                .HasMaxLength(500)
+                                .HasColumnType("character varying(500)")
+                                .HasColumnName("name");
+
+                            b1.HasKey("PartnerId", "Id")
+                                .HasName("pk_partner_api_credential");
+
+                            b1.HasIndex("Key")
+                                .IsUnique()
+                                .HasDatabaseName("ix_partner_api_credential_key");
+
+                            b1.ToTable("partner_api_credential", "infolink");
+
+                            b1.WithOwner()
+                                .HasForeignKey("PartnerId")
+                                .HasConstraintName("fk_partner_api_credential_partner_partner_id");
+
+                            b1.HasData(
+                                new
+                                {
+                                    PartnerId = 1,
+                                    Id = 1,
+                                    Key = "7facc758283844b49cc4ffd26a75b1de",
+                                    Name = "default"
+                                });
+                        });
+
+                    b.Navigation("ApiCredentials");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Subscription", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Subscription", null)
+                        .WithMany()
+                        .HasForeignKey("AggregationForId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("fk_subscription_aggregation_for");
+
+                    b.HasOne("SW.Bitween.Domain.SubscriptionCategory", "Category")
+                        .WithMany()
+                        .HasForeignKey("CategoryId")
+                        .HasConstraintName("fk_subscription_subscription_category_category_id");
+
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_subscription_document_document_id");
+
+                    b.HasOne("SW.Bitween.Domain.Partner", null)
+                        .WithMany("Subscriptions")
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("fk_subscription_partner_partner_id");
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", null)
+                        .WithMany()
+                        .HasForeignKey("ResponseSubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("fk_subscription_response_subscriber");
+
+                    b.HasOne("SW.Bitween.Domain.RetryPolicy", "RetryPolicy")
+                        .WithMany()
+                        .HasForeignKey("RetryPolicyId")
+                        .OnDelete(DeleteBehavior.SetNull)
+                        .HasConstraintName("fk_subscription_retry_policy_retry_policy_id");
+
+                    b.HasOne("SW.Bitween.Domain.WorkGroup", "WorkGroup")
+                        .WithMany()
+                        .HasForeignKey("WorkGroupId")
+                        .HasConstraintName("fk_subscription_work_group_work_group_id");
+
+                    b.OwnsMany("SW.Bitween.Domain.Schedule", "Schedules", b1 =>
+                        {
+                            b1.Property<int>("SubscriptionId")
+                                .HasColumnType("integer")
+                                .HasColumnName("subscription_id");
+
+                            b1.Property<int>("Id")
+                                .ValueGeneratedOnAdd()
+                                .HasColumnType("integer")
+                                .HasColumnName("id");
+
+                            NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b1.Property<int>("Id"));
+
+                            b1.Property<bool>("Backwards")
+                                .HasColumnType("boolean")
+                                .HasColumnName("backwards");
+
+                            b1.Property<long>("On")
+                                .HasColumnType("bigint")
+                                .HasColumnName("on");
+
+                            b1.Property<byte>("Recurrence")
+                                .HasColumnType("smallint")
+                                .HasColumnName("recurrence");
+
+                            b1.HasKey("SubscriptionId", "Id")
+                                .HasName("pk_subscription_schedule");
+
+                            b1.ToTable("subscription_schedule", "infolink");
+
+                            b1.WithOwner()
+                                .HasForeignKey("SubscriptionId")
+                                .HasConstraintName("fk_subscription_schedule_subscription_subscription_id");
+                        });
+
+                    b.Navigation("Category");
+
+                    b.Navigation("RetryPolicy");
+
+                    b.Navigation("Schedules");
+
+                    b.Navigation("WorkGroup");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionTrail", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_subscription_trail_subscription_subscription_id");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Xchange", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_xchange_document_document_id");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeAggregation", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeAggregation", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_xchange_aggregation_xchange_id");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeDelivery", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeDelivery", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_xchange_delivery_xchange_id");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangePromotedProperties", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangePromotedProperties", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_xchange_promoted_properties_xchange_id");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeResult", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeResult", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_xchange_result_xchange_id");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzBlobTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("BlobTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_qrtz_blob_triggers_qrtz_triggers_sched_name_trigger_name_tr");
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCronTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("CronTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_qrtz_cron_triggers_qrtz_triggers_sched_name_trigger_name_tr");
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("SimplePropertyTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_qrtz_simprop_triggers_qrtz_triggers_sched_name_trigger_name");
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimpleTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("SimpleTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_qrtz_simple_triggers_qrtz_triggers_sched_name_trigger_name_");
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzJobDetail", "JobDetail")
+                        .WithMany("Triggers")
+                        .HasForeignKey("SchedulerName", "JobName", "JobGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_qrtz_triggers_qrtz_job_details_sched_name_job_name_job_group");
+
+                    b.Navigation("JobDetail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGateway", b =>
+                {
+                    b.Navigation("Partners");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.Navigation("Routes");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.Navigation("Subscriptions");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzJobDetail", b =>
+                {
+                    b.Navigation("Triggers");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.Navigation("BlobTriggers");
+
+                    b.Navigation("CronTriggers");
+
+                    b.Navigation("SimplePropertyTriggers");
+
+                    b.Navigation("SimpleTriggers");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/SW.Bitween.PgSql/Migrations/20260726151523_DropAccountPhone.cs b/SW.Bitween.PgSql/Migrations/20260726151523_DropAccountPhone.cs
new file mode 100644
index 00000000..4955d9b5
--- /dev/null
+++ b/SW.Bitween.PgSql/Migrations/20260726151523_DropAccountPhone.cs
@@ -0,0 +1,40 @@
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace SW.Bitween.PgSql.Migrations
+{
+    /// <inheritdoc />
+    public partial class DropAccountPhone : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropColumn(
+                name: "phone",
+                schema: "infolink",
+                table: "Accounts");
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.AddColumn<string>(
+                name: "phone",
+                schema: "infolink",
+                table: "Accounts",
+                type: "character varying(20)",
+                unicode: false,
+                maxLength: 20,
+                nullable: true);
+
+            migrationBuilder.UpdateData(
+                schema: "infolink",
+                table: "Accounts",
+                keyColumn: "id",
+                keyValue: 9999,
+                column: "phone",
+                value: null);
+        }
+    }
+}
diff --git a/SW.Bitween.PgSql/Migrations/20260727133034_AddSettings.Designer.cs b/SW.Bitween.PgSql/Migrations/20260727133034_AddSettings.Designer.cs
new file mode 100644
index 00000000..fcc5674b
--- /dev/null
+++ b/SW.Bitween.PgSql/Migrations/20260727133034_AddSettings.Designer.cs
@@ -0,0 +1,2318 @@
+// <auto-generated />
+using System;
+using System.Collections.Generic;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
+using SW.Bitween.Model;
+using SW.Bitween.PgSql;
+
+#nullable disable
+
+namespace SW.Bitween.PgSql.Migrations
+{
+    [DbContext(typeof(BitweenDbContext))]
+    [Migration("20260727133034_AddSettings")]
+    partial class AddSettings
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasDefaultSchema("infolink")
+                .HasAnnotation("ProductVersion", "8.0.23")
+                .HasAnnotation("Relational:MaxIdentifierLength", 63);
+
+            NpgsqlModelBuilderExtensions.UseIdentityByDefaultColumns(modelBuilder);
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.Account", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<bool>("Deleted")
+                        .HasColumnType("boolean")
+                        .HasColumnName("deleted");
+
+                    b.Property<bool>("Disabled")
+                        .HasColumnType("boolean")
+                        .HasColumnName("disabled");
+
+                    b.Property<string>("DisplayName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("display_name");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("email");
+
+                    b.Property<byte>("EmailProvider")
+                        .HasColumnType("smallint")
+                        .HasColumnName("email_provider");
+
+                    b.Property<byte>("LoginMethods")
+                        .HasColumnType("smallint")
+                        .HasColumnName("login_methods");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.Property<string>("Password")
+                        .HasMaxLength(500)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("password");
+
+                    b.Property<int>("Role")
+                        .HasColumnType("integer")
+                        .HasColumnName("role");
+
+                    b.HasKey("Id")
+                        .HasName("pk_accounts");
+
+                    b.HasIndex("Email")
+                        .IsUnique()
+                        .HasDatabaseName("ix_accounts_email");
+
+                    b.ToTable("Accounts", "infolink");
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 9999,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Deleted = false,
+                            Disabled = false,
+                            DisplayName = "Admin",
+                            Email = "admin@Bitween.systems",
+                            EmailProvider = (byte)0,
+                            LoginMethods = (byte)2,
+                            Password = "$SWHASH$V1$10000$VQCi48eitH4Ml5juvBMOFZrMdQwBbhuIQVXe6RR7qJdDF2bJ",
+                            Role = 0
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.AccountRoleLink", b =>
+                {
+                    b.Property<int>("AccountId")
+                        .HasColumnType("integer")
+                        .HasColumnName("account_id");
+
+                    b.Property<int>("RoleId")
+                        .HasColumnType("integer")
+                        .HasColumnName("role_id");
+
+                    b.HasKey("AccountId", "RoleId")
+                        .HasName("pk_account_roles");
+
+                    b.HasIndex("RoleId")
+                        .HasDatabaseName("ix_account_roles_role_id");
+
+                    b.ToTable("AccountRoles", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<int>("AccountId")
+                        .HasColumnType("integer")
+                        .HasColumnName("account_id");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<byte>("LoginMethod")
+                        .HasColumnType("smallint")
+                        .HasColumnName("login_method");
+
+                    b.HasKey("Id")
+                        .HasName("pk_refresh_tokens");
+
+                    b.HasIndex("AccountId")
+                        .HasDatabaseName("ix_refresh_tokens_account_id");
+
+                    b.ToTable("RefreshTokens", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.Role", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("Description")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("description");
+
+                    b.Property<bool>("IsSystem")
+                        .HasColumnType("boolean")
+                        .HasColumnName("is_system");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("name");
+
+                    b.Property<string>("Permissions")
+                        .HasColumnType("text")
+                        .HasColumnName("permissions");
+
+                    b.HasKey("Id")
+                        .HasName("pk_roles");
+
+                    b.HasIndex("Name")
+                        .IsUnique()
+                        .HasDatabaseName("ix_roles_name");
+
+                    b.ToTable("Roles", "infolink");
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 1,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Full access to everything, including members, roles and settings.",
+                            IsSystem = true,
+                            Name = "Administrator",
+                            Permissions = "[]"
+                        },
+                        new
+                        {
+                            Id = 2,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Runs and configures integrations. Can't manage members, roles or settings.",
+                            IsSystem = true,
+                            Name = "Member",
+                            Permissions = "[]"
+                        },
+                        new
+                        {
+                            Id = 3,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Read-only access to integrations, exchanges and configuration.",
+                            IsSystem = true,
+                            Name = "Viewer",
+                            Permissions = "[]"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DelayedRetry", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<Dictionary<string, int>>("GroupAttemptCounts")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("group_attempt_counts");
+
+                    b.Property<DateTime>("On")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("on");
+
+                    b.HasKey("Id")
+                        .HasName("pk_delayed_retry");
+
+                    b.HasIndex("On")
+                        .HasDatabaseName("ix_delayed_retry_on");
+
+                    b.ToTable("delayed_retry", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Document", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("BusEnabled")
+                        .HasColumnType("boolean")
+                        .HasColumnName("bus_enabled");
+
+                    b.Property<string>("BusMessageTypeName")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("bus_message_type_name");
+
+                    b.Property<string>("Code")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("code");
+
+                    b.Property<bool?>("DisregardsUnfilteredMessages")
+                        .HasColumnType("boolean")
+                        .HasColumnName("disregards_unfiltered_messages");
+
+                    b.Property<int>("DocumentFormat")
+                        .HasColumnType("integer")
+                        .HasColumnName("document_format");
+
+                    b.Property<int>("DuplicateInterval")
+                        .HasColumnType("integer")
+                        .HasColumnName("duplicate_interval");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("name");
+
+                    b.Property<string>("PromotedProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("promoted_properties");
+
+                    b.HasKey("Id")
+                        .HasName("pk_document");
+
+                    b.HasIndex("BusMessageTypeName")
+                        .IsUnique()
+                        .HasDatabaseName("ix_document_bus_message_type_name");
+
+                    b.HasIndex("Code")
+                        .IsUnique()
+                        .HasDatabaseName("ix_document_code");
+
+                    b.HasIndex("Name")
+                        .IsUnique()
+                        .HasDatabaseName("ix_document_name");
+
+                    b.ToTable("document", "infolink");
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 10001,
+                            BusEnabled = false,
+                            DocumentFormat = 0,
+                            DuplicateInterval = 0,
+                            Name = "Aggregation Document",
+                            PromotedProperties = "{}"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DocumentTrail", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("text")
+                        .HasColumnName("id");
+
+                    b.Property<int>("Code")
+                        .HasColumnType("integer")
+                        .HasColumnName("code");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("integer")
+                        .HasColumnName("document_id");
+
+                    b.Property<string>("StateAfter")
+                        .HasColumnType("text")
+                        .HasColumnName("state_after");
+
+                    b.Property<string>("StateBefore")
+                        .HasColumnType("text")
+                        .HasColumnName("state_before");
+
+                    b.HasKey("Id")
+                        .HasName("pk_document_trail");
+
+                    b.HasIndex("CreatedOn")
+                        .HasDatabaseName("ix_document_trail_created_on");
+
+                    b.HasIndex("DocumentId")
+                        .HasDatabaseName("ix_document_trail_document_id");
+
+                    b.ToTable("document_trail", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGateway", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("name");
+
+                    b.Property<string>("UrlName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("url_name");
+
+                    b.HasKey("Id")
+                        .HasName("pk_api_gateway");
+
+                    b.HasIndex("UrlName")
+                        .IsUnique()
+                        .HasDatabaseName("ix_api_gateway_url_name");
+
+                    b.ToTable("api_gateway", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGatewayPartner", b =>
+                {
+                    b.Property<int>("ApiGatewayId")
+                        .HasColumnType("integer")
+                        .HasColumnName("api_gateway_id");
+
+                    b.Property<int>("PartnerId")
+                        .HasColumnType("integer")
+                        .HasColumnName("partner_id");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("subscription_id");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.HasKey("ApiGatewayId", "PartnerId", "SubscriptionId")
+                        .HasName("pk_api_gateway_partner");
+
+                    b.HasIndex("PartnerId")
+                        .HasDatabaseName("ix_api_gateway_partner_partner_id");
+
+                    b.HasIndex("SubscriptionId")
+                        .HasDatabaseName("ix_api_gateway_partner_subscription_id");
+
+                    b.ToTable("api_gateway_partner", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("integer")
+                        .HasColumnName("document_id");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("name");
+
+                    b.HasKey("Id")
+                        .HasName("pk_bus_gateway");
+
+                    b.HasIndex("DocumentId")
+                        .HasDatabaseName("ix_bus_gateway_document_id");
+
+                    b.ToTable("bus_gateway", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGatewayRoute", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<int>("BusGatewayId")
+                        .HasColumnType("integer")
+                        .HasColumnName("bus_gateway_id");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("MatchExpression")
+                        .HasColumnType("text")
+                        .HasColumnName("match_expression");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("integer")
+                        .HasColumnName("partner_id");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("subscription_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_bus_gateway_route");
+
+                    b.HasIndex("BusGatewayId")
+                        .HasDatabaseName("ix_bus_gateway_route_bus_gateway_id");
+
+                    b.HasIndex("PartnerId")
+                        .HasDatabaseName("ix_bus_gateway_route_partner_id");
+
+                    b.HasIndex("SubscriptionId")
+                        .HasDatabaseName("ix_bus_gateway_route_subscription_id");
+
+                    b.ToTable("bus_gateway_route", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.GlobalAdapterValuesSet", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasColumnType("text")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("text")
+                        .HasColumnName("name");
+
+                    b.Property<Dictionary<string, string>>("Values")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("values");
+
+                    b.HasKey("Id")
+                        .HasName("pk_global_adapter_values_set");
+
+                    b.ToTable("global_adapter_values_set", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Notifier", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("handler_id");
+
+                    b.Property<string>("HandlerProperties")
+                        .HasColumnType("text")
+                        .HasColumnName("handler_properties");
+
+                    b.Property<bool>("Inactive")
+                        .HasColumnType("boolean")
+                        .HasColumnName("inactive");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("name");
+
+                    b.Property<bool>("RunOnBadResult")
+                        .HasColumnType("boolean")
+                        .HasColumnName("run_on_bad_result");
+
+                    b.Property<bool>("RunOnFailedResult")
+                        .HasColumnType("boolean")
+                        .HasColumnName("run_on_failed_result");
+
+                    b.Property<int[]>("RunOnSubscriptions")
+                        .HasColumnType("integer[]")
+                        .HasColumnName("run_on_subscriptions");
+
+                    b.Property<bool>("RunOnSuccessfulResult")
+                        .HasColumnType("boolean")
+                        .HasColumnName("run_on_successful_result");
+
+                    b.HasKey("Id")
+                        .HasName("pk_notifier");
+
+                    b.ToTable("notifier", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.OnHoldXchange", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<bool>("BadData")
+                        .HasColumnType("boolean")
+                        .HasColumnName("bad_data");
+
+                    b.Property<string>("Data")
+                        .HasColumnType("text")
+                        .HasColumnName("data");
+
+                    b.Property<string>("FileName")
+                        .HasColumnType("text")
+                        .HasColumnName("file_name");
+
+                    b.Property<string[]>("References")
+                        .HasColumnType("text[]")
+                        .HasColumnName("references");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("subscription_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_on_hold_xchange");
+
+                    b.HasIndex("SubscriptionId")
+                        .HasDatabaseName("ix_on_hold_xchange_subscription_id");
+
+                    b.ToTable("on_hold_xchange", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<Dictionary<string, string>>("AdapterProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("adapter_properties");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("name");
+
+                    b.HasKey("Id")
+                        .HasName("pk_partner");
+
+                    b.ToTable("partner", "infolink");
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 1,
+                            Name = "SYSTEM"
+                        });
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.RetryPolicy", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("Groups")
+                        .HasColumnType("text")
+                        .HasColumnName("groups");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("name");
+
+                    b.HasKey("Id")
+                        .HasName("pk_retry_policy");
+
+                    b.ToTable("retry_policy", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Setting", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("id");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.Property<string>("Value")
+                        .HasColumnType("text")
+                        .HasColumnName("value");
+
+                    b.HasKey("Id")
+                        .HasName("pk_settings");
+
+                    b.ToTable("Settings", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Subscription", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<DateTime?>("AggregateOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("aggregate_on");
+
+                    b.Property<int?>("AggregationForId")
+                        .HasColumnType("integer")
+                        .HasColumnName("aggregation_for_id");
+
+                    b.Property<byte>("AggregationTarget")
+                        .HasColumnType("smallint")
+                        .HasColumnName("aggregation_target");
+
+                    b.Property<int?>("CategoryId")
+                        .HasColumnType("integer")
+                        .HasColumnName("category_id");
+
+                    b.Property<int>("ConsecutiveFailures")
+                        .HasColumnType("integer")
+                        .HasColumnName("consecutive_failures");
+
+                    b.Property<string>("CustomRetryPolicy")
+                        .HasColumnType("text")
+                        .HasColumnName("custom_retry_policy");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("DocumentFilter")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("document_filter");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("integer")
+                        .HasColumnName("document_id");
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("handler_id");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("HandlerProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("handler_properties");
+
+                    b.Property<bool>("Inactive")
+                        .HasColumnType("boolean")
+                        .HasColumnName("inactive");
+
+                    b.Property<bool>("IsRunning")
+                        .HasColumnType("boolean")
+                        .HasColumnName("is_running");
+
+                    b.Property<string>("LastException")
+                        .HasColumnType("text")
+                        .HasColumnName("last_exception");
+
+                    b.Property<string>("MapperId")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("mapper_id");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("MapperProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("mapper_properties");
+
+                    b.Property<string>("MatchExpression")
+                        .HasColumnType("text")
+                        .HasColumnName("match_expression");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("name");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("integer")
+                        .HasColumnName("partner_id");
+
+                    b.Property<DateTime?>("PausedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("paused_on");
+
+                    b.Property<DateTime?>("ReceiveOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("receive_on");
+
+                    b.Property<string>("ReceiverId")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("receiver_id");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("ReceiverProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("receiver_properties");
+
+                    b.Property<string>("ResponseMessageTypeName")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("response_message_type_name");
+
+                    b.Property<int?>("ResponseSubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("response_subscription_id");
+
+                    b.Property<int?>("RetryPolicyId")
+                        .HasColumnType("integer")
+                        .HasColumnName("retry_policy_id");
+
+                    b.Property<bool>("Temporary")
+                        .HasColumnType("boolean")
+                        .HasColumnName("temporary");
+
+                    b.Property<byte>("Type")
+                        .HasColumnType("smallint")
+                        .HasColumnName("type");
+
+                    b.Property<string>("ValidatorId")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("validator_id");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("ValidatorProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("validator_properties");
+
+                    b.Property<int?>("WorkGroupId")
+                        .HasColumnType("integer")
+                        .HasColumnName("work_group_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_subscription");
+
+                    b.HasIndex("AggregationForId")
+                        .HasDatabaseName("ix_subscription_aggregation_for_id");
+
+                    b.HasIndex("CategoryId")
+                        .HasDatabaseName("ix_subscription_category_id");
+
+                    b.HasIndex("DocumentId")
+                        .HasDatabaseName("ix_subscription_document_id");
+
+                    b.HasIndex("PartnerId")
+                        .HasDatabaseName("ix_subscription_partner_id");
+
+                    b.HasIndex("ResponseSubscriptionId")
+                        .HasDatabaseName("ix_subscription_response_subscription_id");
+
+                    b.HasIndex("RetryPolicyId")
+                        .HasDatabaseName("ix_subscription_retry_policy_id");
+
+                    b.HasIndex("WorkGroupId")
+                        .HasDatabaseName("ix_subscription_work_group_id");
+
+                    b.ToTable("subscription", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionCategory", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Code")
+                        .HasColumnType("text")
+                        .HasColumnName("code");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("text")
+                        .HasColumnName("description");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.HasKey("Id")
+                        .HasName("pk_subscription_category");
+
+                    b.HasIndex("Code")
+                        .IsUnique()
+                        .HasDatabaseName("ix_subscription_category_code");
+
+                    b.ToTable("subscription_category", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionTrail", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<int>("Code")
+                        .HasColumnType("integer")
+                        .HasColumnName("code");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("StateAfter")
+                        .HasColumnType("text")
+                        .HasColumnName("state_after");
+
+                    b.Property<string>("StateBefore")
+                        .HasColumnType("text")
+                        .HasColumnName("state_before");
+
+                    b.Property<int>("SubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("subscription_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_subscription_trail");
+
+                    b.HasIndex("CreatedOn")
+                        .HasDatabaseName("ix_subscription_trail_created_on");
+
+                    b.HasIndex("SubscriptionId")
+                        .HasDatabaseName("ix_subscription_trail_subscription_id");
+
+                    b.ToTable("subscription_trail", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.WorkGroup", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("BusMessageName")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("bus_message_name");
+
+                    b.Property<string>("Name")
+                        .HasColumnType("text")
+                        .HasColumnName("name");
+
+                    b.Property<WorkGroupOptions>("Options")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("options");
+
+                    b.HasKey("Id")
+                        .HasName("pk_work_group");
+
+                    b.ToTable("work_group", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Xchange", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<string>("CorrelationId")
+                        .HasColumnType("text")
+                        .HasColumnName("correlation_id");
+
+                    b.Property<int>("DocumentId")
+                        .HasColumnType("integer")
+                        .HasColumnName("document_id");
+
+                    b.Property<IReadOnlyDictionary<string, int>>("GroupAttemptCounts")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("group_attempt_counts");
+
+                    b.Property<string>("HandlerId")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("handler_id");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("HandlerProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("handler_properties");
+
+                    b.Property<string>("InputContentType")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("input_content_type");
+
+                    b.Property<string>("InputHash")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("input_hash");
+
+                    b.Property<string>("InputName")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("input_name");
+
+                    b.Property<int>("InputSize")
+                        .HasColumnType("integer")
+                        .HasColumnName("input_size");
+
+                    b.Property<string>("MapperId")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("mapper_id");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("MapperProperties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("mapper_properties");
+
+                    b.Property<int?>("PartnerId")
+                        .HasColumnType("integer")
+                        .HasColumnName("partner_id");
+
+                    b.Property<string[]>("References")
+                        .HasColumnType("text[]")
+                        .HasColumnName("references");
+
+                    b.Property<string>("ResponseMessageTypeName")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("response_message_type_name");
+
+                    b.Property<int?>("ResponseSubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("response_subscription_id");
+
+                    b.Property<string>("RetryFor")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("retry_for");
+
+                    b.Property<DateTime>("StartedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("started_on");
+
+                    b.Property<int?>("SubscriptionId")
+                        .HasColumnType("integer")
+                        .HasColumnName("subscription_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_xchange");
+
+                    b.HasIndex("DocumentId")
+                        .HasDatabaseName("ix_xchange_document_id");
+
+                    b.HasIndex("InputHash")
+                        .HasDatabaseName("ix_xchange_input_hash");
+
+                    b.HasIndex("RetryFor")
+                        .HasDatabaseName("ix_xchange_retry_for");
+
+                    b.HasIndex("StartedOn")
+                        .HasDatabaseName("ix_xchange_started_on");
+
+                    b.HasIndex("SubscriptionId")
+                        .HasDatabaseName("ix_xchange_subscription_id");
+
+                    b.ToTable("xchange", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeAggregation", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<DateTime>("AggregatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("aggregated_on");
+
+                    b.Property<string>("AggregationXchangeId")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("aggregation_xchange_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_xchange_aggregation");
+
+                    b.HasIndex("AggregationXchangeId")
+                        .HasDatabaseName("ix_xchange_aggregation_aggregation_xchange_id");
+
+                    b.ToTable("xchange_aggregation", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeDelivery", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<DateTime>("DeliveredOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("delivered_on");
+
+                    b.HasKey("Id")
+                        .HasName("pk_xchange_delivery");
+
+                    b.HasIndex("DeliveredOn")
+                        .HasDatabaseName("ix_xchange_delivery_delivered_on");
+
+                    b.ToTable("xchange_delivery", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeNotification", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("Exception")
+                        .HasColumnType("text")
+                        .HasColumnName("exception");
+
+                    b.Property<DateTime>("FinishedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("finished_on");
+
+                    b.Property<int>("NotifierId")
+                        .HasColumnType("integer")
+                        .HasColumnName("notifier_id");
+
+                    b.Property<string>("NotifierName")
+                        .HasColumnType("text")
+                        .HasColumnName("notifier_name");
+
+                    b.Property<bool>("Success")
+                        .HasColumnType("boolean")
+                        .HasColumnName("success");
+
+                    b.Property<string>("XchangeId")
+                        .HasMaxLength(50)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("xchange_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_xchange_notification");
+
+                    b.ToTable("xchange_notification", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangePromotedProperties", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<int[]>("Hits")
+                        .HasColumnType("integer[]")
+                        .HasColumnName("hits");
+
+                    b.Property<IReadOnlyDictionary<string, string>>("Properties")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("properties");
+
+                    b.Property<string>("PropertiesRaw")
+                        .HasColumnType("text")
+                        .HasColumnName("properties_raw");
+
+                    b.HasKey("Id")
+                        .HasName("pk_xchange_promoted_properties");
+
+                    b.HasIndex("PropertiesRaw")
+                        .HasDatabaseName("ix_xchange_promoted_properties_properties_raw");
+
+                    b.ToTable("xchange_promoted_properties", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeResult", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Exception")
+                        .HasColumnType("text")
+                        .HasColumnName("exception");
+
+                    b.Property<DateTime>("FinishedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("finished_on");
+
+                    b.Property<bool>("OutputBad")
+                        .HasColumnType("boolean")
+                        .HasColumnName("output_bad");
+
+                    b.Property<string>("OutputContentType")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("output_content_type");
+
+                    b.Property<string>("OutputHash")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("output_hash");
+
+                    b.Property<string>("OutputName")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("output_name");
+
+                    b.Property<int>("OutputSize")
+                        .HasColumnType("integer")
+                        .HasColumnName("output_size");
+
+                    b.Property<bool>("ResponseBad")
+                        .HasColumnType("boolean")
+                        .HasColumnName("response_bad");
+
+                    b.Property<string>("ResponseContentType")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("response_content_type");
+
+                    b.Property<string>("ResponseHash")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("response_hash");
+
+                    b.Property<string>("ResponseName")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("response_name");
+
+                    b.Property<int>("ResponseSize")
+                        .HasColumnType("integer")
+                        .HasColumnName("response_size");
+
+                    b.Property<string>("ResponseXchangeId")
+                        .HasColumnType("text")
+                        .HasColumnName("response_xchange_id");
+
+                    b.Property<bool>("Success")
+                        .HasColumnType("boolean")
+                        .HasColumnName("success");
+
+                    b.HasKey("Id")
+                        .HasName("pk_xchange_result");
+
+                    b.ToTable("xchange_result", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.RunFlagUpdater+RunningResult", b =>
+                {
+                    b.Property<bool>("IsRunning")
+                        .HasColumnType("boolean")
+                        .HasColumnName("is_running");
+
+                    b.ToTable("running_result", "infolink");
+
+                    b.ToView(null, (string)null);
+                });
+
+            modelBuilder.Entity("SW.Scheduler.JobExecution", b =>
+                {
+                    b.Property<long>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("bigint")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<long>("Id"));
+
+                    b.Property<string>("Context")
+                        .HasColumnType("text")
+                        .HasColumnName("context");
+
+                    b.Property<long?>("DurationMs")
+                        .HasColumnType("bigint")
+                        .HasColumnName("duration_ms");
+
+                    b.Property<DateTime?>("EndTimeUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("end_time_utc");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<string>("FireInstanceId")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("fire_instance_id");
+
+                    b.Property<string>("JobGroup")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("job_name");
+
+                    b.Property<string>("JobTypeName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("job_type_name");
+
+                    b.Property<string>("Node")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("node");
+
+                    b.Property<DateTime>("StartTimeUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("start_time_utc");
+
+                    b.Property<bool?>("Success")
+                        .HasColumnType("boolean")
+                        .HasColumnName("success");
+
+                    b.HasKey("Id")
+                        .HasName("pk_job_executions");
+
+                    b.HasIndex("FireInstanceId")
+                        .IsUnique()
+                        .HasDatabaseName("idx_je_fire_instance_id");
+
+                    b.HasIndex("StartTimeUtc")
+                        .HasDatabaseName("idx_je_start_time");
+
+                    b.HasIndex("Success")
+                        .HasDatabaseName("idx_je_success");
+
+                    b.HasIndex("JobGroup", "JobName", "StartTimeUtc")
+                        .HasDatabaseName("idx_je_group_name_start");
+
+                    b.ToTable("job_executions", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzBlobTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<byte[]>("BlobData")
+                        .HasColumnType("bytea")
+                        .HasColumnName("blob_data");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasName("pk_qrtz_blob_triggers");
+
+                    b.ToTable("qrtz_blob_triggers", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCalendar", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("text")
+                        .HasColumnName("calendar_name");
+
+                    b.Property<byte[]>("Calendar")
+                        .IsRequired()
+                        .HasColumnType("bytea")
+                        .HasColumnName("calendar");
+
+                    b.HasKey("SchedulerName", "CalendarName")
+                        .HasName("pk_qrtz_calendars");
+
+                    b.ToTable("qrtz_calendars", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCronTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("CronExpression")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("cron_expression");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("text")
+                        .HasColumnName("time_zone_id");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasName("pk_qrtz_cron_triggers");
+
+                    b.ToTable("qrtz_cron_triggers", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzFiredTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("EntryId")
+                        .HasColumnType("text")
+                        .HasColumnName("entry_id");
+
+                    b.Property<long>("FiredTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("fired_time");
+
+                    b.Property<string>("InstanceName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("instance_name");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("bool")
+                        .HasColumnName("is_nonconcurrent");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("text")
+                        .HasColumnName("job_name");
+
+                    b.Property<int>("Priority")
+                        .HasColumnType("integer")
+                        .HasColumnName("priority");
+
+                    b.Property<bool?>("RequestsRecovery")
+                        .HasColumnType("bool")
+                        .HasColumnName("requests_recovery");
+
+                    b.Property<long>("ScheduledTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("sched_time");
+
+                    b.Property<string>("State")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("state");
+
+                    b.Property<string>("TriggerGroup")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("TriggerName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.HasKey("SchedulerName", "EntryId")
+                        .HasName("pk_qrtz_fired_triggers");
+
+                    b.HasIndex("InstanceName")
+                        .HasDatabaseName("idx_qrtz_ft_trig_inst_name");
+
+                    b.HasIndex("JobGroup")
+                        .HasDatabaseName("idx_qrtz_ft_job_group");
+
+                    b.HasIndex("JobName")
+                        .HasDatabaseName("idx_qrtz_ft_job_name");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("idx_qrtz_ft_job_req_recovery");
+
+                    b.HasIndex("TriggerGroup")
+                        .HasDatabaseName("idx_qrtz_ft_trig_group");
+
+                    b.HasIndex("TriggerName")
+                        .HasDatabaseName("idx_qrtz_ft_trig_name");
+
+                    b.HasIndex("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasDatabaseName("idx_qrtz_ft_trig_nm_gp");
+
+                    b.ToTable("qrtz_fired_triggers", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzJobDetail", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("JobName")
+                        .HasColumnType("text")
+                        .HasColumnName("job_name");
+
+                    b.Property<string>("JobGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("text")
+                        .HasColumnName("description");
+
+                    b.Property<bool>("IsDurable")
+                        .HasColumnType("bool")
+                        .HasColumnName("is_durable");
+
+                    b.Property<bool>("IsNonConcurrent")
+                        .HasColumnType("bool")
+                        .HasColumnName("is_nonconcurrent");
+
+                    b.Property<bool>("IsUpdateData")
+                        .HasColumnType("bool")
+                        .HasColumnName("is_update_data");
+
+                    b.Property<string>("JobClassName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("job_class_name");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("bytea")
+                        .HasColumnName("job_data");
+
+                    b.Property<bool>("RequestsRecovery")
+                        .HasColumnType("bool")
+                        .HasColumnName("requests_recovery");
+
+                    b.HasKey("SchedulerName", "JobName", "JobGroup")
+                        .HasName("pk_qrtz_job_details");
+
+                    b.HasIndex("RequestsRecovery")
+                        .HasDatabaseName("idx_j_req_recovery");
+
+                    b.ToTable("qrtz_job_details", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzLock", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("LockName")
+                        .HasColumnType("text")
+                        .HasColumnName("lock_name");
+
+                    b.HasKey("SchedulerName", "LockName")
+                        .HasName("pk_qrtz_locks");
+
+                    b.ToTable("qrtz_locks", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzPausedTriggerGroup", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.HasKey("SchedulerName", "TriggerGroup")
+                        .HasName("pk_qrtz_paused_trigger_grps");
+
+                    b.ToTable("qrtz_paused_trigger_grps", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSchedulerState", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("InstanceName")
+                        .HasColumnType("text")
+                        .HasColumnName("instance_name");
+
+                    b.Property<long>("CheckInInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("checkin_interval");
+
+                    b.Property<long>("LastCheckInTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("last_checkin_time");
+
+                    b.HasKey("SchedulerName", "InstanceName")
+                        .HasName("pk_qrtz_scheduler_state");
+
+                    b.ToTable("qrtz_scheduler_state", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<bool?>("BooleanProperty1")
+                        .HasColumnType("bool")
+                        .HasColumnName("bool_prop_1");
+
+                    b.Property<bool?>("BooleanProperty2")
+                        .HasColumnType("bool")
+                        .HasColumnName("bool_prop_2");
+
+                    b.Property<decimal?>("DecimalProperty1")
+                        .HasColumnType("numeric")
+                        .HasColumnName("dec_prop_1");
+
+                    b.Property<decimal?>("DecimalProperty2")
+                        .HasColumnType("numeric")
+                        .HasColumnName("dec_prop_2");
+
+                    b.Property<int?>("IntegerProperty1")
+                        .HasColumnType("integer")
+                        .HasColumnName("int_prop_1");
+
+                    b.Property<int?>("IntegerProperty2")
+                        .HasColumnType("integer")
+                        .HasColumnName("int_prop_2");
+
+                    b.Property<long?>("LongProperty1")
+                        .HasColumnType("bigint")
+                        .HasColumnName("long_prop_1");
+
+                    b.Property<long?>("LongProperty2")
+                        .HasColumnType("bigint")
+                        .HasColumnName("long_prop_2");
+
+                    b.Property<string>("StringProperty1")
+                        .HasColumnType("text")
+                        .HasColumnName("str_prop_1");
+
+                    b.Property<string>("StringProperty2")
+                        .HasColumnType("text")
+                        .HasColumnName("str_prop_2");
+
+                    b.Property<string>("StringProperty3")
+                        .HasColumnType("text")
+                        .HasColumnName("str_prop_3");
+
+                    b.Property<string>("TimeZoneId")
+                        .HasColumnType("text")
+                        .HasColumnName("time_zone_id");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasName("pk_qrtz_simprop_triggers");
+
+                    b.ToTable("qrtz_simprop_triggers", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimpleTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<long>("RepeatCount")
+                        .HasColumnType("bigint")
+                        .HasColumnName("repeat_count");
+
+                    b.Property<long>("RepeatInterval")
+                        .HasColumnType("bigint")
+                        .HasColumnName("repeat_interval");
+
+                    b.Property<long>("TimesTriggered")
+                        .HasColumnType("bigint")
+                        .HasColumnName("times_triggered");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasName("pk_qrtz_simple_triggers");
+
+                    b.ToTable("qrtz_simple_triggers", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.Property<string>("SchedulerName")
+                        .HasColumnType("text")
+                        .HasColumnName("sched_name");
+
+                    b.Property<string>("TriggerName")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_name");
+
+                    b.Property<string>("TriggerGroup")
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_group");
+
+                    b.Property<string>("CalendarName")
+                        .HasColumnType("text")
+                        .HasColumnName("calendar_name");
+
+                    b.Property<string>("Description")
+                        .HasColumnType("text")
+                        .HasColumnName("description");
+
+                    b.Property<long?>("EndTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("end_time");
+
+                    b.Property<byte[]>("JobData")
+                        .HasColumnType("bytea")
+                        .HasColumnName("job_data");
+
+                    b.Property<string>("JobGroup")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("job_group");
+
+                    b.Property<string>("JobName")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("job_name");
+
+                    b.Property<int?>("MisfireInstruction")
+                        .HasColumnType("integer")
+                        .HasColumnName("misfire_instr");
+
+                    b.Property<long?>("NextFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("next_fire_time");
+
+                    b.Property<long?>("PreviousFireTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("prev_fire_time");
+
+                    b.Property<int?>("Priority")
+                        .HasColumnType("integer")
+                        .HasColumnName("priority");
+
+                    b.Property<long>("StartTime")
+                        .HasColumnType("bigint")
+                        .HasColumnName("start_time");
+
+                    b.Property<string>("TriggerState")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_state");
+
+                    b.Property<string>("TriggerType")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("trigger_type");
+
+                    b.HasKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .HasName("pk_qrtz_triggers");
+
+                    b.HasIndex("NextFireTime")
+                        .HasDatabaseName("idx_t_next_fire_time");
+
+                    b.HasIndex("TriggerState")
+                        .HasDatabaseName("idx_t_state");
+
+                    b.HasIndex("NextFireTime", "TriggerState")
+                        .HasDatabaseName("idx_t_nft_st");
+
+                    b.HasIndex("SchedulerName", "JobName", "JobGroup")
+                        .HasDatabaseName("ix_qrtz_triggers_sched_name_job_name_job_group");
+
+                    b.ToTable("qrtz_triggers", "infolink");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.AccountRoleLink", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Accounts.Account", null)
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_account_roles_accounts_account_id");
+
+                    b.HasOne("SW.Bitween.Domain.Accounts.Role", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_account_roles_roles_role_id");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Accounts.Account", null)
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_refresh_tokens_accounts_account_id");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.DocumentTrail", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", "Document")
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_document_trail_document_document_id");
+
+                    b.Navigation("Document");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGatewayPartner", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Gateway.ApiGateway", "ApiGateway")
+                        .WithMany("Partners")
+                        .HasForeignKey("ApiGatewayId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_api_gateway_partner_api_gateway_api_gateway_id");
+
+                    b.HasOne("SW.Bitween.Domain.Partner", "Partner")
+                        .WithMany()
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_api_gateway_partner_partner_partner_id");
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_api_gateway_partner_subscription_subscription_id");
+
+                    b.Navigation("ApiGateway");
+
+                    b.Navigation("Partner");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_bus_gateway_document_document_id");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGatewayRoute", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Gateway.BusGateway", "BusGateway")
+                        .WithMany("Routes")
+                        .HasForeignKey("BusGatewayId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_bus_gateway_route_bus_gateway_bus_gateway_id");
+
+                    b.HasOne("SW.Bitween.Domain.Partner", "Partner")
+                        .WithMany()
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("fk_bus_gateway_route_partner_partner_id");
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_bus_gateway_route_subscription_subscription_id");
+
+                    b.Navigation("BusGateway");
+
+                    b.Navigation("Partner");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.OwnsMany("SW.Bitween.Domain.ApiCredential", "ApiCredentials", b1 =>
+                        {
+                            b1.Property<int>("PartnerId")
+                                .HasColumnType("integer")
+                                .HasColumnName("partner_id");
+
+                            b1.Property<int>("Id")
+                                .ValueGeneratedOnAdd()
+                                .HasColumnType("integer")
+                                .HasColumnName("id");
+
+                            NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b1.Property<int>("Id"));
+
+                            b1.Property<string>("Key")
+                                .IsRequired()
+                                .HasMaxLength(500)
+                                .HasColumnType("character varying(500)")
+                                .HasColumnName("key");
+
+                            b1.Property<string>("Name")
+                                .IsRequired()
+                                .HasMaxLength(500)
+                                .HasColumnType("character varying(500)")
+                                .HasColumnName("name");
+
+                            b1.HasKey("PartnerId", "Id")
+                                .HasName("pk_partner_api_credential");
+
+                            b1.HasIndex("Key")
+                                .IsUnique()
+                                .HasDatabaseName("ix_partner_api_credential_key");
+
+                            b1.ToTable("partner_api_credential", "infolink");
+
+                            b1.WithOwner()
+                                .HasForeignKey("PartnerId")
+                                .HasConstraintName("fk_partner_api_credential_partner_partner_id");
+
+                            b1.HasData(
+                                new
+                                {
+                                    PartnerId = 1,
+                                    Id = 1,
+                                    Key = "7facc758283844b49cc4ffd26a75b1de",
+                                    Name = "default"
+                                });
+                        });
+
+                    b.Navigation("ApiCredentials");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Subscription", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Subscription", null)
+                        .WithMany()
+                        .HasForeignKey("AggregationForId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("fk_subscription_aggregation_for");
+
+                    b.HasOne("SW.Bitween.Domain.SubscriptionCategory", "Category")
+                        .WithMany()
+                        .HasForeignKey("CategoryId")
+                        .HasConstraintName("fk_subscription_subscription_category_category_id");
+
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_subscription_document_document_id");
+
+                    b.HasOne("SW.Bitween.Domain.Partner", null)
+                        .WithMany("Subscriptions")
+                        .HasForeignKey("PartnerId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("fk_subscription_partner_partner_id");
+
+                    b.HasOne("SW.Bitween.Domain.Subscription", null)
+                        .WithMany()
+                        .HasForeignKey("ResponseSubscriptionId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .HasConstraintName("fk_subscription_response_subscriber");
+
+                    b.HasOne("SW.Bitween.Domain.RetryPolicy", "RetryPolicy")
+                        .WithMany()
+                        .HasForeignKey("RetryPolicyId")
+                        .OnDelete(DeleteBehavior.SetNull)
+                        .HasConstraintName("fk_subscription_retry_policy_retry_policy_id");
+
+                    b.HasOne("SW.Bitween.Domain.WorkGroup", "WorkGroup")
+                        .WithMany()
+                        .HasForeignKey("WorkGroupId")
+                        .HasConstraintName("fk_subscription_work_group_work_group_id");
+
+                    b.OwnsMany("SW.Bitween.Domain.Schedule", "Schedules", b1 =>
+                        {
+                            b1.Property<int>("SubscriptionId")
+                                .HasColumnType("integer")
+                                .HasColumnName("subscription_id");
+
+                            b1.Property<int>("Id")
+                                .ValueGeneratedOnAdd()
+                                .HasColumnType("integer")
+                                .HasColumnName("id");
+
+                            NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b1.Property<int>("Id"));
+
+                            b1.Property<bool>("Backwards")
+                                .HasColumnType("boolean")
+                                .HasColumnName("backwards");
+
+                            b1.Property<long>("On")
+                                .HasColumnType("bigint")
+                                .HasColumnName("on");
+
+                            b1.Property<byte>("Recurrence")
+                                .HasColumnType("smallint")
+                                .HasColumnName("recurrence");
+
+                            b1.HasKey("SubscriptionId", "Id")
+                                .HasName("pk_subscription_schedule");
+
+                            b1.ToTable("subscription_schedule", "infolink");
+
+                            b1.WithOwner()
+                                .HasForeignKey("SubscriptionId")
+                                .HasConstraintName("fk_subscription_schedule_subscription_subscription_id");
+                        });
+
+                    b.Navigation("Category");
+
+                    b.Navigation("RetryPolicy");
+
+                    b.Navigation("Schedules");
+
+                    b.Navigation("WorkGroup");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.SubscriptionTrail", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Subscription", "Subscription")
+                        .WithMany()
+                        .HasForeignKey("SubscriptionId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_subscription_trail_subscription_subscription_id");
+
+                    b.Navigation("Subscription");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Xchange", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Document", null)
+                        .WithMany()
+                        .HasForeignKey("DocumentId")
+                        .OnDelete(DeleteBehavior.Restrict)
+                        .IsRequired()
+                        .HasConstraintName("fk_xchange_document_document_id");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeAggregation", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeAggregation", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_xchange_aggregation_xchange_id");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeDelivery", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeDelivery", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_xchange_delivery_xchange_id");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangePromotedProperties", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangePromotedProperties", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_xchange_promoted_properties_xchange_id");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.XchangeResult", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Xchange", null)
+                        .WithOne()
+                        .HasForeignKey("SW.Bitween.Domain.XchangeResult", "Id")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_xchange_result_xchange_id");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzBlobTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("BlobTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_qrtz_blob_triggers_qrtz_triggers_sched_name_trigger_name_tr");
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzCronTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("CronTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_qrtz_cron_triggers_qrtz_triggers_sched_name_trigger_name_tr");
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimplePropertyTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("SimplePropertyTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_qrtz_simprop_triggers_qrtz_triggers_sched_name_trigger_name");
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzSimpleTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzTrigger", "Trigger")
+                        .WithMany("SimpleTriggers")
+                        .HasForeignKey("SchedulerName", "TriggerName", "TriggerGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_qrtz_simple_triggers_qrtz_triggers_sched_name_trigger_name_");
+
+                    b.Navigation("Trigger");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.HasOne("SW.Scheduler.QuartzJobDetail", "JobDetail")
+                        .WithMany("Triggers")
+                        .HasForeignKey("SchedulerName", "JobName", "JobGroup")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_qrtz_triggers_qrtz_job_details_sched_name_job_name_job_group");
+
+                    b.Navigation("JobDetail");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.ApiGateway", b =>
+                {
+                    b.Navigation("Partners");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Gateway.BusGateway", b =>
+                {
+                    b.Navigation("Routes");
+                });
+
+            modelBuilder.Entity("SW.Bitween.Domain.Partner", b =>
+                {
+                    b.Navigation("Subscriptions");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzJobDetail", b =>
+                {
+                    b.Navigation("Triggers");
+                });
+
+            modelBuilder.Entity("SW.Scheduler.QuartzTrigger", b =>
+                {
+                    b.Navigation("BlobTriggers");
+
+                    b.Navigation("CronTriggers");
+
+                    b.Navigation("SimplePropertyTriggers");
+
+                    b.Navigation("SimpleTriggers");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/SW.Bitween.PgSql/Migrations/20260727133034_AddSettings.cs b/SW.Bitween.PgSql/Migrations/20260727133034_AddSettings.cs
new file mode 100644
index 00000000..332f5711
--- /dev/null
+++ b/SW.Bitween.PgSql/Migrations/20260727133034_AddSettings.cs
@@ -0,0 +1,40 @@
+using System;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace SW.Bitween.PgSql.Migrations
+{
+    /// <inheritdoc />
+    public partial class AddSettings : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.CreateTable(
+                name: "Settings",
+                schema: "infolink",
+                columns: table => new
+                {
+                    id = table.Column<string>(type: "character varying(200)", unicode: false, maxLength: 200, nullable: false),
+                    value = table.Column<string>(type: "text", nullable: true),
+                    created_on = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
+                    created_by = table.Column<string>(type: "text", nullable: true),
+                    modified_on = table.Column<DateTime>(type: "timestamp with time zone", nullable: true),
+                    modified_by = table.Column<string>(type: "text", nullable: true)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_settings", x => x.id);
+                });
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropTable(
+                name: "Settings",
+                schema: "infolink");
+        }
+    }
+}
diff --git a/SW.Bitween.PgSql/Migrations/BitweenDbContextModelSnapshot.cs b/SW.Bitween.PgSql/Migrations/BitweenDbContextModelSnapshot.cs
index 8cea92fe..70683aaf 100644
--- a/SW.Bitween.PgSql/Migrations/BitweenDbContextModelSnapshot.cs
+++ b/SW.Bitween.PgSql/Migrations/BitweenDbContextModelSnapshot.cs
@@ -84,12 +84,6 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                         .HasColumnType("character varying(500)")
                         .HasColumnName("password");
 
-                    b.Property<string>("Phone")
-                        .HasMaxLength(20)
-                        .IsUnicode(false)
-                        .HasColumnType("character varying(20)")
-                        .HasColumnName("phone");
-
                     b.Property<int>("Role")
                         .HasColumnType("integer")
                         .HasColumnName("role");
@@ -119,6 +113,25 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                         });
                 });
 
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.AccountRoleLink", b =>
+                {
+                    b.Property<int>("AccountId")
+                        .HasColumnType("integer")
+                        .HasColumnName("account_id");
+
+                    b.Property<int>("RoleId")
+                        .HasColumnType("integer")
+                        .HasColumnName("role_id");
+
+                    b.HasKey("AccountId", "RoleId")
+                        .HasName("pk_account_roles");
+
+                    b.HasIndex("RoleId")
+                        .HasDatabaseName("ix_account_roles_role_id");
+
+                    b.ToTable("AccountRoles", "infolink");
+                });
+
             modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
                 {
                     b.Property<string>("Id")
@@ -148,6 +161,89 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                     b.ToTable("RefreshTokens", "infolink");
                 });
 
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.Role", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasColumnName("id");
+
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("Description")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("description");
+
+                    b.Property<bool>("IsSystem")
+                        .HasColumnType("boolean")
+                        .HasColumnName("is_system");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("name");
+
+                    b.Property<string>("Permissions")
+                        .HasColumnType("text")
+                        .HasColumnName("permissions");
+
+                    b.HasKey("Id")
+                        .HasName("pk_roles");
+
+                    b.HasIndex("Name")
+                        .IsUnique()
+                        .HasDatabaseName("ix_roles_name");
+
+                    b.ToTable("Roles", "infolink");
+
+                    b.HasData(
+                        new
+                        {
+                            Id = 1,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Full access to everything, including members, roles and settings.",
+                            IsSystem = true,
+                            Name = "Administrator",
+                            Permissions = "[]"
+                        },
+                        new
+                        {
+                            Id = 2,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Runs and configures integrations. Can't manage members, roles or settings.",
+                            IsSystem = true,
+                            Name = "Member",
+                            Permissions = "[]"
+                        },
+                        new
+                        {
+                            Id = 3,
+                            CreatedOn = new DateTime(2021, 12, 31, 22, 0, 0, 0, DateTimeKind.Utc),
+                            Description = "Read-only access to integrations, exchanges and configuration.",
+                            IsSystem = true,
+                            Name = "Viewer",
+                            Permissions = "[]"
+                        });
+                });
+
             modelBuilder.Entity("SW.Bitween.Domain.DelayedRetry", b =>
                 {
                     b.Property<string>("Id")
@@ -175,9 +271,12 @@ protected override void BuildModel(ModelBuilder modelBuilder)
             modelBuilder.Entity("SW.Bitween.Domain.Document", b =>
                 {
                     b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
                         .HasColumnType("integer")
                         .HasColumnName("id");
 
+                    NpgsqlPropertyBuilderExtensions.UseIdentityByDefaultColumn(b.Property<int>("Id"));
+
                     b.Property<bool>("BusEnabled")
                         .HasColumnType("boolean")
                         .HasColumnName("bus_enabled");
@@ -187,6 +286,11 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                         .HasColumnType("character varying(500)")
                         .HasColumnName("bus_message_type_name");
 
+                    b.Property<string>("Code")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("code");
+
                     b.Property<bool?>("DisregardsUnfilteredMessages")
                         .HasColumnType("boolean")
                         .HasColumnName("disregards_unfiltered_messages");
@@ -216,6 +320,10 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                         .IsUnique()
                         .HasDatabaseName("ix_document_bus_message_type_name");
 
+                    b.HasIndex("Code")
+                        .IsUnique()
+                        .HasDatabaseName("ix_document_code");
+
                     b.HasIndex("Name")
                         .IsUnique()
                         .HasDatabaseName("ix_document_name");
@@ -647,6 +755,40 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                     b.ToTable("retry_policy", "infolink");
                 });
 
+            modelBuilder.Entity("SW.Bitween.Domain.Setting", b =>
+                {
+                    b.Property<string>("Id")
+                        .HasMaxLength(200)
+                        .IsUnicode(false)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("id");
+
+                    b.Property<string>("CreatedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("created_by");
+
+                    b.Property<DateTime>("CreatedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_on");
+
+                    b.Property<string>("ModifiedBy")
+                        .HasColumnType("text")
+                        .HasColumnName("modified_by");
+
+                    b.Property<DateTime?>("ModifiedOn")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("modified_on");
+
+                    b.Property<string>("Value")
+                        .HasColumnType("text")
+                        .HasColumnName("value");
+
+                    b.HasKey("Id")
+                        .HasName("pk_settings");
+
+                    b.ToTable("Settings", "infolink");
+                });
+
             modelBuilder.Entity("SW.Bitween.Domain.Subscription", b =>
                 {
                     b.Property<int>("Id")
@@ -941,7 +1083,7 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                         .HasColumnType("integer")
                         .HasColumnName("document_id");
 
-                    b.Property<Dictionary<string, int>>("GroupAttemptCounts")
+                    b.Property<IReadOnlyDictionary<string, int>>("GroupAttemptCounts")
                         .HasColumnType("jsonb")
                         .HasColumnName("group_attempt_counts");
 
@@ -1767,6 +1909,23 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                     b.ToTable("qrtz_triggers", "infolink");
                 });
 
+            modelBuilder.Entity("SW.Bitween.Domain.Accounts.AccountRoleLink", b =>
+                {
+                    b.HasOne("SW.Bitween.Domain.Accounts.Account", null)
+                        .WithMany()
+                        .HasForeignKey("AccountId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_account_roles_accounts_account_id");
+
+                    b.HasOne("SW.Bitween.Domain.Accounts.Role", null)
+                        .WithMany()
+                        .HasForeignKey("RoleId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_account_roles_roles_role_id");
+                });
+
             modelBuilder.Entity("SW.Bitween.Domain.Accounts.RefreshToken", b =>
                 {
                     b.HasOne("SW.Bitween.Domain.Accounts.Account", null)
diff --git a/SW.Bitween.Sdk/Model/Account.cs b/SW.Bitween.Sdk/Model/Account.cs
index c112c9d4..b98990bb 100644
--- a/SW.Bitween.Sdk/Model/Account.cs
+++ b/SW.Bitween.Sdk/Model/Account.cs
@@ -1,4 +1,5 @@
 using System;
+using System.Collections.Generic;
 
 namespace SW.Bitween.Model;
 
@@ -7,13 +8,26 @@ public class CreateAccountModel
     public string Name { get; set; }
     public string Email { get; set; }
     public string Password { get; set; }
-    public int Role { get; set; }
+
+    /// <summary>
+    /// Legacy coarse role. Nullable on purpose: when it was a plain int, a request that omitted it
+    /// sent 0 — which is Admin — so a member added with no roles came out an administrator.
+    /// </summary>
+    public int? Role { get; set; }
+
+    /// <summary>Roles to grant. Preferred over <see cref="Role"/>, which is legacy.</summary>
+    public List<int> RoleIds { get; set; } = [];
 }
 
 public class UpdateAccountModel
 {
     public string Name { get; set; }
-    public int Role { get; set; }
+
+    /// <summary>
+    /// Legacy coarse role. Nullable on purpose: when it was a plain int, a request that omitted it
+    /// sent 0 — which is Admin. Only supplied values are applied, and only with users.edit.
+    /// </summary>
+    public int? Role { get; set; }
 }
 
 public class RemoveAccountModel
@@ -27,14 +41,32 @@ public class SearchMembersModel
     public bool Lookup { get; set; }
 }
 
+public class AccountRoleSummary
+{
+    public int Id { get; set; }
+    public string Name { get; set; }
+}
+
 public class AccountModel
 {
     public string Name { get; set; }
     public int Id { get; set; }
     public string Email { get; set; }
 
+    /// <summary>
+    /// Legacy coarse role, kept for older clients. Authorization reads <see cref="Roles"/>.
+    /// </summary>
     public string Role { get; set; }
+
+    public bool Disabled { get; set; }
     public DateTime CreatedOn { get; set; }
+    public List<AccountRoleSummary> Roles { get; set; } = [];
+}
+
+/// <summary>The signed-in account, plus everything the UI needs to decide what to show.</summary>
+public class ProfileModel : AccountModel
+{
+    public List<string> Permissions { get; set; } = [];
 }
 
 public class ChangePasswordModel
@@ -42,4 +74,21 @@ public class ChangePasswordModel
     public string NewPassword { get; set; }
 
     public string OldPassword { get; set; }
-}
\ No newline at end of file
+}
+
+/// <summary>Replaces the whole set of roles a member holds.</summary>
+public class SetAccountRolesModel
+{
+    public List<int> RoleIds { get; set; } = [];
+}
+
+public class SetAccountDisabledModel
+{
+    public bool Disabled { get; set; }
+}
+
+/// <summary>An administrator setting someone else's password, standing in for a reset flow.</summary>
+public class SetAccountPasswordModel
+{
+    public string Password { get; set; }
+}
diff --git a/SW.Bitween.Sdk/Model/AutoRetry/RetryPolicyEvaluator.cs b/SW.Bitween.Sdk/Model/AutoRetry/RetryPolicyEvaluator.cs
index edc9fa86..0a62b0a4 100644
--- a/SW.Bitween.Sdk/Model/AutoRetry/RetryPolicyEvaluator.cs
+++ b/SW.Bitween.Sdk/Model/AutoRetry/RetryPolicyEvaluator.cs
@@ -108,6 +108,10 @@ public RetryDecision Evaluate(
                      .Where(g => g.Enabled && g.AppliesTo.Contains(resultType))
                      .OrderBy(g => g.Priority))
         {
+            // No conditions configured at all means "match every applicable failure".
+            if (group.Matchers.Count == 0)
+                return group;
+
             var compatibleMatchers = group.Matchers.Where(m => m.ResultType == resultType);
             if (compatibleMatchers.Any(m => m.IsMatch(content)))
                 return group;
diff --git a/SW.Bitween.Sdk/Model/DelayedRetryModel.cs b/SW.Bitween.Sdk/Model/DelayedRetryModel.cs
index cc712856..7bef1b0e 100644
--- a/SW.Bitween.Sdk/Model/DelayedRetryModel.cs
+++ b/SW.Bitween.Sdk/Model/DelayedRetryModel.cs
@@ -12,6 +12,16 @@ public class DelayedRetryRow
     public string DocumentName { get; set; }
     public string Exception { get; set; }
     public DateTime StartedOn { get; set; }
+
+    /// <summary>
+    /// The shared retry policy the subscription currently points at. Null when the
+    /// subscription carries an inline <c>CustomRetryPolicy</c> instead — a delayed retry
+    /// can only be scheduled by one or the other, so null means "look on the subscription".
+    /// Reflects the policy as it stands now, not necessarily the one that set <see cref="On"/>.
+    /// </summary>
+    public int? RetryPolicyId { get; set; }
+
+    public string RetryPolicyName { get; set; }
 }
 
 public class DelayedRetryRunNow
diff --git a/SW.Bitween.Sdk/Model/Document.cs b/SW.Bitween.Sdk/Model/Document.cs
index ed001b91..fc54bffe 100644
--- a/SW.Bitween.Sdk/Model/Document.cs
+++ b/SW.Bitween.Sdk/Model/Document.cs
@@ -14,9 +14,11 @@ public enum DocumentFormat
 
     public class DocumentCreate : IName
     {
-        public int Id { get; set; }
+        public string Code { get; set; }
         public DocumentFormat DocumentFormat { get; set; }
         public string Name { get; set; }
+        public bool BusEnabled { get; set; }
+        public string BusMessageTypeName { get; set; }
     }
 
     public class SearchDocumentTrailModel
@@ -33,8 +35,7 @@ public class DocumentTrailModel : TrailBaseModel
 
     public class DocumentUpdate : DocumentCreate
     {
-        public bool BusEnabled { get; set; }
-        public string BusMessageTypeName { get; set; }
+        public int Id { get; set; }
         public int DuplicateInterval { get; set; }
 
         public bool DisregardsUnfilteredMessages { get; set; }
diff --git a/SW.Bitween.Sdk/Model/Partner.cs b/SW.Bitween.Sdk/Model/Partner.cs
index fa977724..22bcb4c9 100644
--- a/SW.Bitween.Sdk/Model/Partner.cs
+++ b/SW.Bitween.Sdk/Model/Partner.cs
@@ -13,7 +13,12 @@ public class PartnerRow : PartnerUpdate
         public int Id { get; set; }
         public int? SubscriptionsCount { get; set; }
         public int? Keys { get; set; }
-        
+        /// <summary>
+        /// The names of the partner's adapter properties — never their values, which
+        /// can be secrets. Names alone are enough to count them in a list and to offer
+        /// them as {{partner.x}} reference tokens when configuring an adapter.
+        /// </summary>
+        public ICollection<string> PropertyKeys { get; set; }
     }
 
     public class PartnerUpdate : PartnerCreate
diff --git a/SW.Bitween.Sdk/Model/Permissions.cs b/SW.Bitween.Sdk/Model/Permissions.cs
new file mode 100644
index 00000000..d5e3cc32
--- /dev/null
+++ b/SW.Bitween.Sdk/Model/Permissions.cs
@@ -0,0 +1,269 @@
+using System.Collections.Generic;
+using System.Linq;
+
+namespace SW.Bitween.Model;
+
+/// <summary>
+/// Every privilege Bitween recognises, as "&lt;area&gt;.&lt;action&gt;" keys. This is the single
+/// source of truth: handlers guard on these constants, roles store the keys, and the
+/// management UI renders the catalog served by GET /permissions. A unit test asserts
+/// these constants and <see cref="PermissionCatalog"/> never drift apart.
+/// </summary>
+public static class Permissions
+{
+    public static class Exchanges
+    {
+        public const string View = "exchanges.view";
+        public const string Operate = "exchanges.operate";
+    }
+
+    public static class Monitoring
+    {
+        public const string View = "monitoring.view";
+    }
+
+    public static class Dashboard
+    {
+        public const string View = "dashboard.view";
+    }
+
+    public static class Subscriptions
+    {
+        public const string View = "subscriptions.view";
+        public const string Create = "subscriptions.create";
+        public const string Edit = "subscriptions.edit";
+        public const string Delete = "subscriptions.delete";
+        public const string Operate = "subscriptions.operate";
+    }
+
+    public static class Partners
+    {
+        public const string View = "partners.view";
+        public const string Create = "partners.create";
+        public const string Edit = "partners.edit";
+        public const string Delete = "partners.delete";
+    }
+
+    public static class Documents
+    {
+        public const string View = "documents.view";
+        public const string Create = "documents.create";
+        public const string Edit = "documents.edit";
+        public const string Delete = "documents.delete";
+    }
+
+    public static class GlobalValues
+    {
+        public const string View = "global-values.view";
+        public const string Create = "global-values.create";
+        public const string Edit = "global-values.edit";
+        public const string Delete = "global-values.delete";
+    }
+
+    /// <summary>No delete: notifiers have no delete endpoint, so there is nothing to guard.</summary>
+    public static class Notifiers
+    {
+        public const string View = "notifiers.view";
+        public const string Create = "notifiers.create";
+        public const string Edit = "notifiers.edit";
+    }
+
+    public static class ApiGateways
+    {
+        public const string View = "api-gateways.view";
+        public const string Create = "api-gateways.create";
+        public const string Edit = "api-gateways.edit";
+        public const string Delete = "api-gateways.delete";
+    }
+
+    public static class BusGateways
+    {
+        public const string View = "bus-gateways.view";
+        public const string Create = "bus-gateways.create";
+        public const string Edit = "bus-gateways.edit";
+        public const string Delete = "bus-gateways.delete";
+    }
+
+    public static class WorkGroups
+    {
+        public const string View = "workgroups.view";
+        public const string Create = "workgroups.create";
+        public const string Edit = "workgroups.edit";
+        public const string Delete = "workgroups.delete";
+    }
+
+    /// <summary>
+    /// No operate: running a scheduled retry now is gated on <see cref="Exchanges.Operate"/>,
+    /// because what's being retried is an exchange, not the policy that scheduled it.
+    /// </summary>
+    public static class RetryPolicies
+    {
+        public const string View = "retry-policies.view";
+        public const string Create = "retry-policies.create";
+        public const string Edit = "retry-policies.edit";
+        public const string Delete = "retry-policies.delete";
+    }
+
+    public static class Users
+    {
+        public const string View = "users.view";
+        public const string Create = "users.create";
+        public const string Edit = "users.edit";
+        public const string Delete = "users.delete";
+    }
+
+    public static class Roles
+    {
+        public const string View = "roles.view";
+        public const string Create = "roles.create";
+        public const string Edit = "roles.edit";
+        public const string Delete = "roles.delete";
+    }
+
+    public static class Settings
+    {
+        public const string View = "settings.view";
+        public const string Edit = "settings.edit";
+    }
+}
+
+public class PermissionActionModel
+{
+    public string Id { get; set; }
+
+    /// <summary>What this specific grant allows, in end-user words.</summary>
+    public string Description { get; set; }
+}
+
+public class PermissionAreaModel
+{
+    public string Id { get; set; }
+    public string Label { get; set; }
+
+    /// <summary>Mirrors the app's navigation groups, so a role's grants map onto what its members see.</summary>
+    public string Group { get; set; }
+
+    public string Description { get; set; }
+    public List<PermissionActionModel> Actions { get; set; } = [];
+}
+
+public static class PermissionCatalog
+{
+    public const string View = "view";
+    public const string Create = "create";
+    public const string Edit = "edit";
+    public const string Delete = "delete";
+    public const string Operate = "operate";
+
+    private static PermissionAreaModel Area(string id, string label, string group, string description,
+        params (string Id, string Description)[] actions) => new()
+    {
+        Id = id,
+        Label = label,
+        Group = group,
+        Description = description,
+        Actions = actions.Select(a => new PermissionActionModel { Id = a.Id, Description = a.Description }).ToList()
+    };
+
+    public static readonly List<PermissionAreaModel> Areas =
+    [
+        // ——— Operate ———
+        Area("exchanges", "Exchanges", "Operate", "Every message that flows through Bitween.",
+            (View, "Browse exchanges, payloads and traces."),
+            (Operate, "Retry or resubmit failed exchanges.")),
+
+        Area("monitoring", "Queue health", "Operate", "Live message-queue throughput and consumers.",
+            (View, "See queue health and rates.")),
+
+        Area("dashboard", "Dashboard", "Operate", "Traffic and health overview (reached from the logo).",
+            (View, "See the dashboard.")),
+
+        // ——— Integrations ———
+        Area("subscriptions", "Integrations", "Integrations", "The configured pipelines that process exchanges.",
+            (View, "Browse integrations and their configuration."),
+            (Create, "Create integrations."),
+            (Edit, "Change adapters, mappings and settings."),
+            (Delete, "Delete integrations."),
+            (Operate, "Pause, resume, receive now, aggregate now.")),
+
+        Area("partners", "Partners", "Integrations", "The external parties you exchange data with.",
+            (View, "Browse partners and their properties."),
+            (Create, "Create partners."),
+            (Edit, "Change partner details, properties and API keys."),
+            (Delete, "Delete partners.")),
+
+        Area("documents", "Information types", "Integrations",
+            "The kinds of business documents that flow between partners.",
+            (View, "Browse information types."),
+            (Create, "Create information types."),
+            (Edit, "Change information types, codes and promoted properties."),
+            (Delete, "Delete unused information types.")),
+
+        Area("global-values", "Global values", "Integrations", "Shared value sets adapters can reference.",
+            (View, "Browse global value sets."),
+            (Create, "Create value sets."),
+            (Edit, "Change value sets."),
+            (Delete, "Delete value sets.")),
+
+        Area("notifiers", "Notifiers", "Integrations", "Alerts sent when exchanges fail or succeed.",
+            (View, "Browse notifiers and their delivery history."),
+            (Create, "Create notifiers."),
+            (Edit, "Change notifiers.")),
+
+        Area("api-gateways", "API gateways", "Integrations", "HTTP entry points partners call into.",
+            (View, "Browse API gateways and attached partners."),
+            (Create, "Create new API gateways."),
+            (Edit, "Change gateways and partner attachments."),
+            (Delete, "Delete API gateways.")),
+
+        Area("bus-gateways", "Bus gateways", "Integrations", "Bus listeners that route documents to integrations.",
+            (View, "Browse bus gateways and routes."),
+            (Create, "Create new bus gateways."),
+            (Edit, "Change gateways and routes."),
+            (Delete, "Delete bus gateways.")),
+
+        // ——— Configuration ———
+        Area("workgroups", "Work groups", "Configuration", "Processing lanes that spread load across queues.",
+            (View, "See work groups and their throughput."),
+            (Create, "Create work groups."),
+            (Edit, "Change work group settings."),
+            (Delete, "Delete unused work groups.")),
+
+        Area("retry-policies", "Retry policies", "Configuration", "Rules for retrying failed exchanges.",
+            (View, "Browse retry policies and scheduled retries."),
+            (Create, "Create retry policies."),
+            (Edit, "Change retry policies."),
+            (Delete, "Delete retry policies.")),
+
+        // ——— Administration ———
+        Area("users", "Members", "Administration", "The people who can sign in to this Bitween instance.",
+            (View, "See the member list."),
+            (Create, "Invite new members."),
+            (Edit, "Change members' roles, disable accounts, reset passwords."),
+            (Delete, "Remove members.")),
+
+        Area("roles", "Roles", "Administration", "What each kind of member is allowed to do.",
+            (View, "See roles and their permissions."),
+            (Create, "Create roles."),
+            (Edit, "Change role permissions."),
+            (Delete, "Delete unassigned roles.")),
+
+        Area("settings", "Settings", "Administration", "Instance-wide configuration.",
+            (View, "See instance settings."),
+            (Edit, "Change instance settings."))
+    ];
+
+    /// <summary>Every valid permission key.</summary>
+    public static readonly HashSet<string> AllKeys =
+        Areas.SelectMany(a => a.Actions.Select(x => $"{a.Id}.{x.Id}")).ToHashSet();
+
+    /// <summary>Drops anything not in the catalog — stale keys left over from a removed area.</summary>
+    public static List<string> Sanitize(IEnumerable<string> keys) =>
+        (keys ?? []).Where(AllKeys.Contains).Distinct().ToList();
+
+    /// <summary>Every key in the given navigation groups, optionally view-only.</summary>
+    public static List<string> InGroups(bool viewOnly, params string[] groups) =>
+        Areas.Where(a => groups.Contains(a.Group))
+            .SelectMany(a => a.Actions.Where(x => !viewOnly || x.Id == View).Select(x => $"{a.Id}.{x.Id}"))
+            .ToList();
+}
diff --git a/SW.Bitween.Sdk/Model/Roles.cs b/SW.Bitween.Sdk/Model/Roles.cs
new file mode 100644
index 00000000..22b5f7f4
--- /dev/null
+++ b/SW.Bitween.Sdk/Model/Roles.cs
@@ -0,0 +1,28 @@
+using System;
+using System.Collections.Generic;
+
+namespace SW.Bitween.Model;
+
+public class RoleCreate
+{
+    public required string Name { get; set; }
+    public string Description { get; set; }
+    public List<string> Permissions { get; set; } = [];
+}
+
+public class RoleUpdate : RoleCreate;
+
+/// <summary>One shape for both the roles list and a single role — the UI shows the same fields.</summary>
+public class RoleRow
+{
+    public int Id { get; set; }
+    public string Name { get; set; }
+    public string Description { get; set; }
+
+    /// <summary>Built-in roles can be assigned, but not edited or deleted.</summary>
+    public bool IsSystem { get; set; }
+
+    public List<string> Permissions { get; set; } = [];
+    public int MemberCount { get; set; }
+    public DateTime CreatedOn { get; set; }
+}
diff --git a/SW.Bitween.Sdk/Model/Settings.cs b/SW.Bitween.Sdk/Model/Settings.cs
new file mode 100644
index 00000000..3e69c42a
--- /dev/null
+++ b/SW.Bitween.Sdk/Model/Settings.cs
@@ -0,0 +1,51 @@
+namespace SW.Bitween.Model;
+
+/// <summary>
+/// One setting as the settings page sees it: the catalog's definition plus whatever value is in
+/// effect. A secret's value never leaves the server — only <see cref="HasValue"/> reveals that
+/// one is set.
+/// </summary>
+public class SettingRow
+{
+    public string Key { get; set; }
+    public string Section { get; set; }
+    public string Label { get; set; }
+    public string Description { get; set; }
+
+    /// <summary>"string", "number", "boolean" or "color".</summary>
+    public string Kind { get; set; }
+
+    /// <summary>The product default — what a reset returns this setting to. Empty for secrets.</summary>
+    public string DefaultValue { get; set; }
+
+    /// <summary>The stored value. Always null for secrets, whose value never leaves the server.</summary>
+    public string Value { get; set; }
+
+    public bool Secret { get; set; }
+
+    /// <summary>True when the stored value differs from the product default, i.e. a reset would do something.</summary>
+    public bool Overridden { get; set; }
+
+    /// <summary>Whether the effective value is non-empty — lets the UI mask a secret that is set.</summary>
+    public bool HasValue { get; set; }
+
+    /// <summary>
+    /// Whether the UI may write this setting. False for every environment-owned setting, and for a
+    /// secret on an instance with no <c>Bitween:SettingsEncryptionKey</c> — there's nowhere safe to
+    /// store that, so it stays configuration-only.
+    /// </summary>
+    public bool Editable { get; set; }
+
+    /// <summary>
+    /// How to render the row: <c>"editable"</c> (stored, changeable), <c>"readonly"</c> (an
+    /// environment value, shown but not changeable) or <c>"presence"</c> (an environment value
+    /// reported only as set or not set).
+    /// </summary>
+    public string Access { get; set; }
+}
+
+public class SettingUpdate
+{
+    /// <summary>The new value as text; empty clears the setting. Reset-to-default is a DELETE instead.</summary>
+    public string Value { get; set; }
+}
diff --git a/SW.Bitween.Sdk/Model/Workgroups.cs b/SW.Bitween.Sdk/Model/Workgroups.cs
index 969a9935..5a37696a 100644
--- a/SW.Bitween.Sdk/Model/Workgroups.cs
+++ b/SW.Bitween.Sdk/Model/Workgroups.cs
@@ -26,6 +26,8 @@ public class WorkGroupModel
     public double? NotifierIncomingRate { get; set; }
     public long? NotifierProcessingCount { get; set; }
     public long? NotifierQueueCount { get; set; }
+    /// <summary>Live count of active RabbitMQ consumer instances for this group's queue.</summary>
+    public long? ProcessorNodeCount { get; set; }
 }
 
 public class CreateWorkGroupModel
diff --git a/SW.Bitween.UnitTests/PermissionCatalogTests.cs b/SW.Bitween.UnitTests/PermissionCatalogTests.cs
new file mode 100644
index 00000000..aa313cbc
--- /dev/null
+++ b/SW.Bitween.UnitTests/PermissionCatalogTests.cs
@@ -0,0 +1,107 @@
+using System.Collections.Generic;
+using System.Linq;
+using System.Reflection;
+using Microsoft.VisualStudio.TestTools.UnitTesting;
+using SW.Bitween.Domain.Accounts;
+using SW.Bitween.Model;
+
+namespace SW.Bitween.UnitTests;
+
+[TestClass]
+public class PermissionCatalogTests
+{
+    /// <summary>Every key declared as a constant on <see cref="Permissions"/>.</summary>
+    private static List<string> ConstantKeys() =>
+        typeof(Permissions).GetNestedTypes()
+            .SelectMany(area => area.GetFields(BindingFlags.Public | BindingFlags.Static))
+            .Where(f => f.IsLiteral && f.FieldType == typeof(string))
+            .Select(f => (string)f.GetRawConstantValue())
+            .ToList();
+
+    [TestMethod]
+    public void Constants_AndCatalog_DescribeTheSameKeys()
+    {
+        var constants = ConstantKeys();
+
+        // A constant with no catalog entry can never be granted, so the handler guarding on it
+        // would deny everyone. A catalog entry with no constant is a grant nothing enforces.
+        CollectionAssert.AreEquivalent(
+            PermissionCatalog.AllKeys.ToList(),
+            constants,
+            "Permissions constants and PermissionCatalog have drifted apart.");
+    }
+
+    [TestMethod]
+    public void EveryKey_IsAreaDotAction()
+    {
+        foreach (var key in PermissionCatalog.AllKeys)
+            Assert.AreEqual(2, key.Split('.').Length, $"'{key}' is not in <area>.<action> form.");
+    }
+
+    [TestMethod]
+    public void Constants_HaveNoDuplicates()
+    {
+        var constants = ConstantKeys();
+        CollectionAssert.AreEquivalent(constants.Distinct().ToList(), constants);
+    }
+
+    [TestMethod]
+    public void Administrator_GrantsEveryPermission()
+    {
+        // Derived from the catalog rather than stored, so a newly added permission reaches
+        // administrators without a migration. Guards that behaviour.
+        CollectionAssert.AreEquivalent(
+            PermissionCatalog.AllKeys.ToList(),
+            Role.SystemPermissions(Role.AdministratorId));
+    }
+
+    [TestMethod]
+    public void MemberAndViewer_CannotReachAdministration()
+    {
+        var administration = PermissionCatalog.Areas
+            .Where(a => a.Group == "Administration")
+            .SelectMany(a => a.Actions.Select(x => $"{a.Id}.{x.Id}"))
+            .ToList();
+
+        foreach (var roleId in new[] { Role.MemberId, Role.ViewerId })
+        {
+            var granted = Role.SystemPermissions(roleId);
+            Assert.IsFalse(granted.Intersect(administration).Any(),
+                $"Built-in role {roleId} must not grant members/roles/settings access.");
+            Assert.IsTrue(granted.Count > 0);
+        }
+    }
+
+    [TestMethod]
+    public void Viewer_GrantsViewOnly()
+    {
+        Assert.IsTrue(Role.SystemPermissions(Role.ViewerId).All(k => k.EndsWith(".view")));
+    }
+
+    [TestMethod]
+    public void Member_CanWriteIntegrationsButNotOnlyView()
+    {
+        var granted = Role.SystemPermissions(Role.MemberId);
+        Assert.IsTrue(granted.Contains(Permissions.Subscriptions.Edit));
+        Assert.IsTrue(granted.Contains(Permissions.Subscriptions.View));
+        Assert.IsFalse(granted.Contains(Permissions.Users.View));
+    }
+
+    [TestMethod]
+    public void Sanitize_DropsKeysOutsideTheCatalog()
+    {
+        var cleaned = PermissionCatalog.Sanitize([
+            Permissions.Partners.View, "partners.teleport", "", Permissions.Partners.View
+        ]);
+
+        CollectionAssert.AreEqual(new List<string> { Permissions.Partners.View }, cleaned);
+    }
+
+    [TestMethod]
+    public void CustomRole_GrantsExactlyWhatItStores()
+    {
+        var role = new Role("Support", "Reads exchanges", [Permissions.Exchanges.View, "nope.view"]);
+        CollectionAssert.AreEqual(new List<string> { Permissions.Exchanges.View },
+            role.GetEffectivePermissions());
+    }
+}
diff --git a/SW.Bitween.UnitTests/RetryPolicyEvaluatorTests.cs b/SW.Bitween.UnitTests/RetryPolicyEvaluatorTests.cs
index bb8a11a5..14214390 100644
--- a/SW.Bitween.UnitTests/RetryPolicyEvaluatorTests.cs
+++ b/SW.Bitween.UnitTests/RetryPolicyEvaluatorTests.cs
@@ -246,6 +246,31 @@ public void Evaluator_WrongResultType_GroupSkipped()
         Assert.IsFalse(decision.ShouldRetry);
     }
 
+    [TestMethod]
+    public void Evaluator_EmptyMatchers_MatchesEveryApplicableFailure()
+    {
+        var group = new RetryGroup
+        {
+            Name = "catch-all",
+            Priority = 10,
+            Enabled = true,
+            AppliesTo = [XchangeResultType.Error],
+            Action = RetryAction.Allow,
+            Matchers = [],
+            Budget = new RetryBudget
+            {
+                MaxAttemptsPerError = 5,
+                MaxAttemptsTotal = 100,
+                DelayStrategy = new FixedDelayStrategy { DelayMs = 1000 }
+            }
+        };
+        var policy = PolicyWith(group);
+        var ev = new RetryPolicyEvaluator(policy);
+        var decision = ev.Evaluate(XchangeResultType.Error, "anything at all", 0);
+        Assert.IsTrue(decision.ShouldRetry);
+        Assert.AreEqual("catch-all", decision.MatchedGroupName);
+    }
+
     // ─── Evaluator: priority ordering ───────────────────────────────────────────
 
     [TestMethod]
diff --git a/SW.Bitween.UnitTests/ScribanGeneratorParityTests.cs b/SW.Bitween.UnitTests/ScribanGeneratorParityTests.cs
index 6ced9280..2ce3363f 100644
--- a/SW.Bitween.UnitTests/ScribanGeneratorParityTests.cs
+++ b/SW.Bitween.UnitTests/ScribanGeneratorParityTests.cs
@@ -83,7 +83,7 @@ public void Parity_PartnerProperty_RendersCorrectly()
     {
         const string template = """
             {
-              "pkey": {{ __partner__?.apiKey | json }},
+              "pkey": {{ (__partner__ ?? {})["apiKey"] | json }},
             }
             """;
         const string inputJson = """{"__partner__": {"apiKey": "secret-123"}}""";
@@ -96,13 +96,31 @@ public void Parity_PartnerProperty_MissingPartner_ReturnsNull()
     {
         const string template = """
             {
-              "pkey": {{ __partner__?.apiKey | json }},
+              "pkey": {{ (__partner__ ?? {})["apiKey"] | json }},
             }
             """;
         var result = ScribanJsonTestHelper.RenderObject(template, "{}");
         Assert.AreEqual(JTokenType.Null, result["pkey"]?.Type);
     }
 
+    // ── Partner property with a key that isn't a valid bare identifier ─────────
+    // Config: { target: 'pkey', source: '', partnerPropKey: 'gw prop test' }
+    // Regression: the old `__partner__?.gw prop test` shape wasn't even legal Scriban for
+    // a key like this. String-indexing works for any key content.
+
+    [TestMethod]
+    public void Parity_PartnerProperty_KeyWithSpaces_RendersCorrectly()
+    {
+        const string template = """
+            {
+              "pkey": {{ (__partner__ ?? {})["gw prop test"] | json }},
+            }
+            """;
+        const string inputJson = """{"__partner__": {"gw prop test": "test val"}}""";
+        var result = ScribanJsonTestHelper.RenderObject(template, inputJson);
+        Assert.AreEqual("test val", result["pkey"]?.ToString());
+    }
+
     // ── Global set key ─────────────────────────────────────────────────────────
     // Config: { target: 'gval', source: '', globalSetId: 'mySet', globalKey: 'region' }
 
@@ -111,7 +129,7 @@ public void Parity_GlobalSetKey_RendersCorrectly()
     {
         const string template = """
             {
-              "gval": {{ __globals__?.mySet["region"] | json }},
+              "gval": {{ ((__globals__ ?? {})["mySet"] ?? {})["region"] | json }},
             }
             """;
         const string inputJson = """{"__globals__": {"mySet": {"region": "eu-west"}}}""";
@@ -119,6 +137,36 @@ public void Parity_GlobalSetKey_RendersCorrectly()
         Assert.AreEqual("eu-west", result["gval"]?.ToString());
     }
 
+    [TestMethod]
+    public void Parity_GlobalSetKey_MissingGlobals_ReturnsNull()
+    {
+        const string template = """
+            {
+              "gval": {{ ((__globals__ ?? {})["mySet"] ?? {})["region"] | json }},
+            }
+            """;
+        var result = ScribanJsonTestHelper.RenderObject(template, "{}");
+        Assert.AreEqual(JTokenType.Null, result["gval"]?.Type);
+    }
+
+    // ── Global set id with characters invalid in a bare identifier ─────────────
+    // Config: { target: 'gval', source: '', globalSetId: 'global-value-name', globalKey: 'baseUrl' }
+    // Regression: the old `__globals__?.global-value-name["baseUrl"]` shape tokenized the
+    // hyphens as subtraction and threw "Object `name` is null" — this is the exact bug report.
+
+    [TestMethod]
+    public void Parity_GlobalSetKey_HyphenatedSetId_RendersCorrectly()
+    {
+        const string template = """
+            {
+              "gval": {{ ((__globals__ ?? {})["global-value-name"] ?? {})["baseUrl"] | json }},
+            }
+            """;
+        const string inputJson = """{"__globals__": {"global-value-name": {"baseUrl": "https://example.test"}}}""";
+        var result = ScribanJsonTestHelper.RenderObject(template, inputJson);
+        Assert.AreEqual("https://example.test", result["gval"]?.ToString());
+    }
+
     // ── Lookup — null fallback ─────────────────────────────────────────────────
     // Config: { target: 'category', source: 'Cat', lookupDictionary: { entries:[{A→Alpha}], fallback:'null' } }
 
diff --git a/SW.Bitween.UnitTests/SettingsProtectorTests.cs b/SW.Bitween.UnitTests/SettingsProtectorTests.cs
new file mode 100644
index 00000000..98a501ef
--- /dev/null
+++ b/SW.Bitween.UnitTests/SettingsProtectorTests.cs
@@ -0,0 +1,95 @@
+using System;
+using System.Security.Cryptography;
+using Microsoft.VisualStudio.TestTools.UnitTesting;
+using SW.Bitween.Services;
+
+namespace SW.Bitween.UnitTests;
+
+[TestClass]
+public class SettingsProtectorTests
+{
+    /// <summary>
+    /// Shaped like a Rebex license key — the longest secret the catalog holds — but deliberately
+    /// not one. Nothing here depends on the contents, only on the round trip.
+    /// </summary>
+    private const string Secret = "==NOT-A-REAL-KEY-0123456789abcdefghijklmnop==";
+
+    private static SettingsProtector With(string passphrase) =>
+        new(new BitweenOptions { SettingsEncryptionKey = passphrase });
+
+    [TestMethod]
+    public void Round_trips_a_secret()
+    {
+        var protector = With("a-passphrase");
+
+        Assert.AreEqual(Secret, protector.Unprotect(protector.Protect(Secret)));
+    }
+
+    [TestMethod]
+    public void Stored_form_never_contains_the_plaintext()
+    {
+        var stored = With("a-passphrase").Protect(Secret);
+
+        Assert.IsFalse(stored.Contains(Secret, StringComparison.Ordinal));
+        // The version marker is what tells a stored value apart from a hand-written plain one.
+        Assert.IsTrue(stored.StartsWith("enc.v1:", StringComparison.Ordinal));
+    }
+
+    /// <summary>
+    /// Fresh salt and nonce per value, so two instances holding the same license key don't reveal
+    /// that by having identical rows.
+    /// </summary>
+    [TestMethod]
+    public void Encrypting_the_same_value_twice_gives_different_ciphertext()
+    {
+        var protector = With("a-passphrase");
+
+        Assert.AreNotEqual(protector.Protect(Secret), protector.Protect(Secret));
+    }
+
+    // Both of these surface as AuthenticationTagMismatchException (a CryptographicException):
+    // GCM can't distinguish "wrong key" from "altered bytes", and either way it refuses to
+    // hand back a plaintext rather than returning garbage.
+    [TestMethod]
+    public void A_different_passphrase_cannot_read_it()
+    {
+        var stored = With("a-passphrase").Protect(Secret);
+
+        Assert.ThrowsException<AuthenticationTagMismatchException>(
+            () => With("another-passphrase").Unprotect(stored));
+    }
+
+    [TestMethod]
+    public void Tampering_is_detected_rather_than_decrypted()
+    {
+        var protector = With("a-passphrase");
+        var stored = protector.Protect(Secret);
+        // Flip the last ciphertext character — the authentication tag must reject it.
+        var tampered = stored[..^2] + (stored[^2] == 'A' ? 'B' : 'A') + stored[^1];
+
+        Assert.ThrowsException<AuthenticationTagMismatchException>(() => protector.Unprotect(tampered));
+    }
+
+    /// <summary>A value written before a passphrase existed, or edited by hand, still reads back.</summary>
+    [TestMethod]
+    public void Unmarked_values_pass_through_untouched()
+    {
+        Assert.AreEqual("plain-text-value", With("a-passphrase").Unprotect("plain-text-value"));
+        Assert.AreEqual("", With("a-passphrase").Unprotect(""));
+        Assert.IsNull(With("a-passphrase").Unprotect(null));
+    }
+
+    [TestMethod]
+    public void Empty_secrets_are_stored_as_empty_not_as_ciphertext()
+    {
+        Assert.AreEqual("", With("a-passphrase").Protect(""));
+    }
+
+    [TestMethod]
+    public void Without_a_passphrase_nothing_can_be_protected()
+    {
+        Assert.IsFalse(With(null).IsConfigured);
+        Assert.IsFalse(With("   ").IsConfigured);
+        Assert.ThrowsException<InvalidOperationException>(() => With(null).Protect(Secret));
+    }
+}
diff --git a/SW.Bitween.Web/ClientApp/.gitignore b/SW.Bitween.Web/ClientApp/.gitignore
new file mode 100644
index 00000000..7324fd27
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/.gitignore
@@ -0,0 +1,30 @@
+# Logs
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+pnpm-debug.log*
+lerna-debug.log*
+
+node_modules
+dist
+dist-ssr
+*.local
+
+# Playwright
+test-results
+playwright-report
+blob-report
+playwright/.cache
+
+# Editor directories and files
+.vscode/*
+!.vscode/extensions.json
+.idea
+.DS_Store
+*.suo
+*.ntvs*
+*.njsproj
+*.sln
+*.sw?
diff --git a/SW.Bitween.Web/ClientApp/.oxlintrc.json b/SW.Bitween.Web/ClientApp/.oxlintrc.json
new file mode 100644
index 00000000..6fa991da
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/.oxlintrc.json
@@ -0,0 +1,8 @@
+{
+  "$schema": "./node_modules/oxlint/configuration_schema.json",
+  "plugins": ["react", "typescript", "oxc"],
+  "rules": {
+    "react/rules-of-hooks": "error",
+    "react/only-export-components": ["warn", { "allowConstantExport": true }]
+  }
+}
diff --git a/SW.Bitween.Web/ClientApp/README.md b/SW.Bitween.Web/ClientApp/README.md
new file mode 100644
index 00000000..c9a64aea
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/README.md
@@ -0,0 +1,60 @@
+# Bitween UI — redesign prototype
+
+Clean-slate redesign of the Bitween admin UI, hosted by `SW.Bitween.Web`. **Runs entirely on
+mock data** — it never calls the API, even when served by it. Sub-phase 1 covers auth, dynamic
+RBAC, user profile, and team management; other areas exist as permission-gated placeholder
+pages so role gating can be demonstrated across the whole navigation.
+
+## Running it
+
+**UI-only (fastest loop):**
+
+```bash
+npm install
+npm run dev        # → http://localhost:5173/
+```
+
+**Backend-served (how it deploys):**
+
+```bash
+npm run build      # outputs into ../wwwroot with base /
+dotnet run --project .. --launch-profile SW.Bitween.Web.Local
+# → https://localhost:7155/
+```
+
+`dotnet publish` runs the npm build automatically (skip with `-p:SkipClientBuild=true`);
+the root `Dockerfile` builds the UI in its own node stage. The app lives under the host's
+`/bitween` path base — runtime URLs must use `import.meta.env.BASE_URL` (see the project
+instructions in `.github/instructions/`).
+
+Sign in with any prototype account listed on the login page (password `bitween`), or use the
+one-click persona buttons. The floating **Demo** pill (bottom right) switches the signed-in
+person at any time and resets the demo data.
+
+## Stack
+
+React 19 · TypeScript · Vite · Tailwind v4 · react-router v8 · TanStack Query · lucide-react.
+
+Brand carried over from the existing UI: the crimson ramp from `Bitween-UI/tailwind.config.js`
+(verbatim, as `--color-crimson-*`) and the logo (`public/brand/`). Neutrals (`--color-ink-*`)
+are derived from the logo's wordmark ink `#372f2e`. Tokens live in `src/index.css`.
+
+## Architecture — the parts that matter
+
+- **`src/api/` is the only data layer.** Components import `api` from `src/api/index.ts`,
+  which today points at `src/api/mock/mockClient.ts` (a localStorage-backed fake with
+  simulated latency). Implementing `ApiClient` (`src/api/client.ts`) over HTTP and changing
+  that one export swaps the whole app onto the real backend.
+- **`src/api/permissions.ts` is the permission catalog** — every gated area and action.
+  Roles are named sets of these keys; a user's permissions are the union of their roles'.
+- **`src/nav.ts` is the information architecture.** Sidebar, role-editor access preview and
+  post-login redirect all derive from it, each filtered by the session's permissions.
+- **Gating hides, never dims**: `<Can>` for actions, `<RequirePermission>` for routes
+  (`src/auth/guards.tsx`). Unauthorized pages get an explanatory access-denied screen.
+- **Everything is URL-addressable**: tabs are routes, the member drawer is a route, search
+  and filters are query params, dialogs are query params.
+- Deployment assumptions (to revisit): served at root path, single project, client-side
+  routing compatible with being backend-served later.
+
+Anything the prototype needed that the real backend can't do yet is logged in
+`Bitween-api/BACKEND_CAPABILITIES_NEEDED.md`.
diff --git a/SW.Bitween.Web/ClientApp/e2e/dashboard.spec.ts b/SW.Bitween.Web/ClientApp/e2e/dashboard.spec.ts
new file mode 100644
index 00000000..2cf8bfae
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/e2e/dashboard.spec.ts
@@ -0,0 +1,19 @@
+import { test, expect } from "@playwright/test";
+
+const ADMIN_EMAIL = "admin@Bitween.systems";
+const ADMIN_PASSWORD = "Mtm@dmin!2";
+
+test("dashboard loads with real aggregated data", async ({ page }) => {
+  await page.goto("login");
+  await page.fill("#login-email", ADMIN_EMAIL);
+  await page.fill("#login-password", ADMIN_PASSWORD);
+  await page.getByRole("button", { name: "Sign in" }).click();
+  await page.waitForURL((url) => !url.pathname.endsWith("/login"), { timeout: 15000 });
+
+  await page.goto("dashboard");
+  await expect(page.getByRole("heading", { name: "Dashboard" })).toBeVisible({ timeout: 15000 });
+  await expect(page.getByText("Exchanges today")).toBeVisible();
+  await expect(page.getByText("Success rate (7 days)")).toBeVisible();
+  await expect(page.getByText("undefined")).toHaveCount(0);
+  await expect(page.getByText("NaN")).toHaveCount(0);
+});
diff --git a/SW.Bitween.Web/ClientApp/e2e/exchanges.spec.ts b/SW.Bitween.Web/ClientApp/e2e/exchanges.spec.ts
new file mode 100644
index 00000000..7ba60137
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/e2e/exchanges.spec.ts
@@ -0,0 +1,73 @@
+import { test, expect } from "@playwright/test";
+
+const ADMIN_EMAIL = "admin@Bitween.systems";
+const ADMIN_PASSWORD = "Mtm@dmin!2";
+
+test.beforeEach(async ({ page }) => {
+  await page.goto("login");
+  await page.fill("#login-email", ADMIN_EMAIL);
+  await page.fill("#login-password", ADMIN_PASSWORD);
+  await page.getByRole("button", { name: "Sign in" }).click();
+  await page.waitForURL((url) => !url.pathname.endsWith("/login"), { timeout: 15000 });
+});
+
+test("exchanges list, filter, retry, bulk retry, create", async ({ page }) => {
+  test.setTimeout(45000);
+  await page.goto("exchanges");
+  await expect(page.getByRole("row", { name: /azureBlob test sub/ }).first()).toBeVisible({ timeout: 15000 });
+  await expect(page.getByText("undefined")).toHaveCount(0);
+  // Avoid the background refetch racing with row selection below.
+  await page.getByLabel("Refresh interval").selectOption("0");
+
+  // Filter down to failed exchanges only.
+  await page.getByRole("button", { name: "Failed" }).click();
+  const row = page.getByRole("row", { name: "36b3e2b1003048ff8dec1573b2f752c5" });
+  await expect(row).toBeVisible({ timeout: 10000 });
+
+  // Expand the row (click the chevron cell — other cells stop propagation)
+  // and retry it from the drawer.
+  await row.locator("td").last().click();
+  await page.getByRole("button", { name: "Retry…" }).click();
+  await page.getByRole("dialog").getByRole("button", { name: "Retry" }).click();
+  await expect(page.getByText(/Retry started/)).toBeVisible({ timeout: 10000 });
+
+  // Bulk retry a couple of specific rows (not the whole page — each retry does
+  // real file I/O against storage, so keep this fast and deterministic).
+  await page.getByRole("button", { name: "All" }).click();
+  await expect(page.getByRole("checkbox", { name: "Select 18dfd10c4b764b53aea339eedb98de18" })).toBeVisible({
+    timeout: 10000,
+  });
+  await page.getByRole("checkbox", { name: "Select 18dfd10c4b764b53aea339eedb98de18" }).check();
+  await page.getByRole("checkbox", { name: "Select a1b088fffe9e4993ac75736576a826cb" }).check();
+  await expect(page.getByText(/\d+ selected/)).toBeVisible();
+  await page.getByRole("button", { name: "Retry selected…" }).click();
+  await page.getByRole("dialog").getByRole("button", { name: "Retry" }).click();
+  await expect(page.getByRole("dialog")).toHaveCount(0, { timeout: 15000 });
+
+  // Manually create an exchange addressed at an integration.
+  await page.goto("exchanges/new");
+  await page.getByRole("combobox", { name: "Pick an integration…" }).click();
+  await page.getByRole("option", { name: "s3 test sub" }).click();
+  // Dismiss the dropdown panel via an outside click (it sits above the panel's
+  // anchor point, so it can't itself be covered) rather than Escape, which
+  // doesn't close this Headless UI combobox instance.
+  await page.getByRole("heading", { name: "New exchange" }).click();
+  await expect(page.getByRole("listbox")).toHaveCount(0);
+  await page.locator("textarea").fill('{"test": true}');
+  await page.getByRole("button", { name: "Create exchange" }).click();
+  await expect(page).toHaveURL(/\/exchanges\?ids=/);
+  await expect(page.getByRole("row")).toHaveCount(2, { timeout: 10000 }); // header + the one new row
+});
+
+test("scheduled retries page loads", async ({ page }) => {
+  await page.goto("scheduled-retries");
+  await expect(page.getByRole("heading", { name: "Scheduled retries" })).toBeVisible({ timeout: 15000 });
+  await expect(page.getByText("undefined")).toHaveCount(0);
+});
+
+test("queue health page loads with live consumer data", async ({ page }) => {
+  await page.goto("queue-health");
+  await expect(page.getByRole("heading", { name: "Queue health" })).toBeVisible({ timeout: 15000 });
+  await expect(page.getByText("v3.local.bitween").first()).toBeVisible({ timeout: 10000 });
+  await expect(page.getByText("undefined")).toHaveCount(0);
+});
diff --git a/SW.Bitween.Web/ClientApp/e2e/gateways.spec.ts b/SW.Bitween.Web/ClientApp/e2e/gateways.spec.ts
new file mode 100644
index 00000000..da8358d6
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/e2e/gateways.spec.ts
@@ -0,0 +1,150 @@
+import { test, expect } from "@playwright/test";
+
+const ADMIN_EMAIL = "admin@Bitween.systems";
+const ADMIN_PASSWORD = "Mtm@dmin!2";
+
+test.beforeEach(async ({ page }) => {
+  await page.goto("login");
+  await page.fill("#login-email", ADMIN_EMAIL);
+  await page.fill("#login-password", ADMIN_PASSWORD);
+  await page.getByRole("button", { name: "Sign in" }).click();
+  await page.waitForURL((url) => !url.pathname.endsWith("/login"), { timeout: 15000 });
+});
+
+test("API gateway: create, attach partner, create integration detour, edit attachment, detach, delete", async ({
+  page,
+}) => {
+  const name = `Playwright API GW ${Date.now()}`;
+
+  await page.goto("api-gateways/new");
+  await page.fill("#nag-name", name);
+  await page.getByRole("button", { name: "Create gateway" }).click();
+  await expect(page).toHaveURL(/\/api-gateways\/\d+$/);
+  await expect(page.getByRole("heading", { name })).toBeVisible();
+
+  // Attach a partner, detouring to create the required GatewayApiCall integration inline.
+  await page.getByRole("button", { name: "Attach partner" }).click();
+  await expect(page).toHaveURL(/\/api-gateways\/\d+\/attach$/);
+
+  await page.getByRole("button", { name: "acme" }).click();
+  await page.getByRole("button", { name: "Continue" }).click();
+
+  const integrationName = `Playwright GW Integration ${Date.now()}`;
+  await page.getByRole("link", { name: "New integration" }).click();
+  await expect(page).toHaveURL(/\/subscriptions\/new\?type=GatewayApiCall/);
+  await page.fill("#ni-name", integrationName);
+  await page.getByRole("button", { name: "test doc" }).click();
+  await page.getByLabel("handler adapter").click();
+  await page.getByRole("option", { name: "NativeHttpHandler" }).click();
+  await expect(page.getByRole("listbox")).toHaveCount(0, { timeout: 10000 });
+  await page.locator("#prop-Url").fill("https://example.com/sink");
+  await page.getByRole("button", { name: "Create integration" }).click();
+
+  // This page itself renders a ReturnBanner with a "Continue" button before
+  // the mutation resolves (inherited from the detour link) — wait for the
+  // create to actually land on the new integration's own page first, or the
+  // click races and hits that stale button instead.
+  await expect(page).toHaveURL(/\/subscriptions\/\d+\?/);
+  await page.getByRole("button", { name: "Continue" }).click();
+  await expect(page).toHaveURL(/\/api-gateways\/\d+\/attach$/);
+  await expect(page.getByText(integrationName)).toBeVisible();
+  await page.getByRole("button", { name: "Continue" }).click();
+  await page.getByRole("button", { name: "Attach partner" }).click();
+
+  await expect(page).toHaveURL(/\/api-gateways\/\d+$/);
+  await expect(page.getByText("acme").first()).toBeVisible();
+  await expect(page.getByText(integrationName)).toBeVisible();
+
+  // Edit the attachment — exercises the remove-then-add path (backend's
+  // updatepartner can't mutate a composite-key column in place).
+  await page.getByRole("button", { name: "Edit attachment for acme" }).click();
+  await expect(page).toHaveURL(/\/api-gateways\/\d+\/attachments\/\d+$/);
+  await page.getByRole("button", { name: "Save" }).click();
+  await expect(page).toHaveURL(/\/api-gateways\/\d+$/);
+  await expect(page.getByText(integrationName)).toBeVisible();
+
+  // Detach.
+  await page.getByRole("button", { name: "Detach acme" }).click();
+  await page
+    .getByRole("dialog", { name: "Detach this partner?" })
+    .getByRole("button", { name: "Detach partner" })
+    .click();
+  await expect(page.getByRole("dialog")).toHaveCount(0);
+  await expect(page.getByText("No partners attached")).toBeVisible();
+
+  // Delete (no attachments left — exercises the plain path; cascade-delete
+  // path is covered separately since seed data already has an attached gateway).
+  await page.getByRole("button", { name: "Delete" }).click();
+  await page
+    .getByRole("dialog", { name: "Delete this API gateway?" })
+    .getByRole("button", { name: "Delete gateway" })
+    .click();
+  // ApiGatewayPage navigates to /api-gateways, which the router redirects to
+  // the unified integrations list.
+  await expect(page).toHaveURL(/\/subscriptions\?types=api-gateways$/);
+});
+
+test("Bus gateway: create, add route with match expression, edit route, remove, delete", async ({ page }) => {
+  const name = `Playwright Bus GW ${Date.now()}`;
+
+  await page.goto("bus-gateways/new");
+  await page.fill("#nbg-name", name);
+  await page.getByRole("button", { name: "test-hh" }).click();
+  await page.getByRole("button", { name: "Create gateway" }).click();
+  await expect(page).toHaveURL(/\/bus-gateways\/\d+$/);
+  await expect(page.getByRole("heading", { name })).toBeVisible();
+
+  await page.getByRole("button", { name: "Add route" }).click();
+  await expect(page).toHaveURL(/\/bus-gateways\/\d+\/add-route$/);
+
+  // Filter step — leave the match expression empty (null = matches everything).
+  await page.getByRole("button", { name: "Continue" }).click();
+  // Partner step — no partner.
+  await page.getByRole("button", { name: "No partner" }).click();
+  await page.getByRole("button", { name: "Continue" }).click();
+
+  // Integration step — detour to create the required BusGateway integration.
+  const integrationName = `Playwright Bus Integration ${Date.now()}`;
+  await page.getByRole("link", { name: "New integration" }).click();
+  await expect(page).toHaveURL(/\/subscriptions\/new\?type=BusGateway/);
+  await page.fill("#ni-name", integrationName);
+  await page.getByLabel("handler adapter").click();
+  await page.getByRole("option", { name: "NativeHttpHandler" }).click();
+  await expect(page.getByRole("listbox")).toHaveCount(0, { timeout: 10000 });
+  await page.locator("#prop-Url").fill("https://example.com/sink");
+  await page.getByRole("button", { name: "Create integration" }).click();
+
+  // Wait for the create to actually land (see the comment in the API gateway
+  // test above) before clicking the ReturnBanner's "Continue".
+  await expect(page).toHaveURL(/\/subscriptions\/\d+\?/);
+  await page.getByRole("button", { name: "Continue" }).click();
+  await expect(page).toHaveURL(/\/bus-gateways\/\d+\/add-route$/);
+  await expect(page.getByText(integrationName)).toBeVisible();
+  await page.getByRole("button", { name: "Continue" }).click();
+  await page.getByRole("button", { name: "Add route" }).click();
+
+  await expect(page).toHaveURL(/\/bus-gateways\/\d+$/);
+  await expect(page.getByText(integrationName)).toBeVisible();
+
+  // Edit the route (no-op save exercises the round trip of a null match expression).
+  await page.getByRole("button", { name: /Edit route \d+/ }).click();
+  await expect(page).toHaveURL(/\/bus-gateways\/\d+\/routes\/\d+$/);
+  await page.getByRole("button", { name: "Save" }).click();
+  await expect(page).toHaveURL(/\/bus-gateways\/\d+$/);
+
+  // Remove the route.
+  await page.getByRole("button", { name: /Remove route \d+/ }).click();
+  await page
+    .getByRole("dialog", { name: "Remove this route?" })
+    .getByRole("button", { name: "Remove route" })
+    .click();
+  await expect(page.getByRole("dialog")).toHaveCount(0);
+  await expect(page.getByText("No routes")).toBeVisible();
+
+  await page.getByRole("button", { name: "Delete" }).click();
+  await page
+    .getByRole("dialog", { name: "Delete this bus gateway?" })
+    .getByRole("button", { name: "Delete gateway" })
+    .click();
+  await expect(page).toHaveURL(/\/subscriptions\?types=bus-gateways$/);
+});
diff --git a/SW.Bitween.Web/ClientApp/e2e/global-setup.ts b/SW.Bitween.Web/ClientApp/e2e/global-setup.ts
new file mode 100644
index 00000000..d89b59b5
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/e2e/global-setup.ts
@@ -0,0 +1,85 @@
+import { request } from "@playwright/test";
+
+/**
+ * Leaves the database in a known state before the suite runs.
+ *
+ * A test that fails part-way skips its own cleanup, and the leftovers aren't harmless: a stray
+ * account still holding Administrator is enough to make the last-administrator guard pass, which
+ * strips the seeded admin's role and fails everything after it. So rather than trusting each test
+ * to tidy up, every run starts by purging its own residue and putting the admin's role back.
+ */
+
+const API = "https://localhost:7155/api";
+const ADMIN_EMAIL = "admin@Bitween.systems";
+const ADMIN_PASSWORD = "Mtm@dmin!2";
+/** Configured break-glass credentials — the only way in when the admin has no roles left. */
+const BREAK_GLASS = { username: "1", password: "1" };
+const ADMINISTRATOR_ROLE_ID = 1;
+
+const TEST_EMAIL = /^pw-.*@example\.test$/;
+const TEST_ROLE = /^PW /;
+/** The only settings the suite writes to — see the reset below for why this is a list, not "all". */
+const TEST_SETTINGS = ["Theme.PrimaryColor", "Theme.TabTitle", "Theme.CompanyName"];
+
+interface Account {
+  id: number;
+  email: string;
+  roles: { id: number; name: string }[] | null;
+}
+
+export default async function purgeTestData() {
+  const api = await request.newContext({ ignoreHTTPSErrors: true });
+
+  // Prefer the real admin; fall back to break-glass, which works even with no roles at all.
+  const login = await api.post(`${API}/accounts/login`, {
+    data: { Username: ADMIN_EMAIL, Password: ADMIN_PASSWORD },
+  });
+  let token: string = login.ok() ? (await login.json()).jwt : "";
+
+  const auth = () => ({ Authorization: `Bearer ${token}` });
+  let accounts = await api.get(`${API}/accounts?limit=500`, { headers: auth() });
+
+  if (!accounts.ok()) {
+    const su = await api.post(`${API}/login`, { data: BREAK_GLASS });
+    if (!su.ok())
+      throw new Error(
+        "Can't reach the API as an administrator or via break-glass — is the local backend running?",
+      );
+    token = (await su.json()).jwt;
+    accounts = await api.get(`${API}/accounts?limit=500`, { headers: auth() });
+  }
+
+  const rows: Account[] = (await accounts.json()).result ?? [];
+
+  // The seeded admin must hold Administrator, or nothing downstream can manage anything.
+  const admin = rows.find((a) => a.email.toLowerCase() === ADMIN_EMAIL.toLowerCase());
+  if (admin && !(admin.roles ?? []).some((r) => r.id === ADMINISTRATOR_ROLE_ID)) {
+    await api.post(`${API}/accounts/${admin.id}/setRoles`, {
+      headers: auth(),
+      data: { roleIds: [ADMINISTRATOR_ROLE_ID] },
+    });
+    // Re-read as the repaired admin so the purge below runs with full permissions.
+    const relogin = await api.post(`${API}/accounts/login`, {
+      data: { Username: ADMIN_EMAIL, Password: ADMIN_PASSWORD },
+    });
+    if (relogin.ok()) token = (await relogin.json()).jwt;
+  }
+
+  for (const account of rows.filter((a) => TEST_EMAIL.test(a.email)))
+    await api.post(`${API}/accounts/${account.id}/remove`, { headers: auth(), data: {} });
+
+  const roles = await api.get(`${API}/roles?pageSize=500`, { headers: auth() });
+  for (const role of ((await roles.json()).result ?? []) as { id: number; name: string }[])
+    if (TEST_ROLE.test(role.name))
+      await api.delete(`${API}/roles/${role.id}`, { headers: auth() });
+
+  // Settings tests assert against product defaults, so a value left behind by a failed run would
+  // make them fail for the wrong reason. Only the keys the tests actually touch are reset: the
+  // Settings table is now the only home for values like the MSAL ids and the Rebex license key —
+  // configuration is read once at first boot and ignored after that — so a blanket reset here
+  // would destroy real configuration with no way to get it back.
+  for (const key of TEST_SETTINGS)
+    await api.delete(`${API}/settings/${encodeURIComponent(key)}`, { headers: auth() });
+
+  await api.dispose();
+}
diff --git a/SW.Bitween.Web/ClientApp/e2e/global-values.spec.ts b/SW.Bitween.Web/ClientApp/e2e/global-values.spec.ts
new file mode 100644
index 00000000..91137fc6
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/e2e/global-values.spec.ts
@@ -0,0 +1,47 @@
+import { test, expect } from "@playwright/test";
+
+const ADMIN_EMAIL = "admin@Bitween.systems";
+const ADMIN_PASSWORD = "Mtm@dmin!2";
+
+test.beforeEach(async ({ page }) => {
+  await page.goto("login");
+  await page.fill("#login-email", ADMIN_EMAIL);
+  await page.fill("#login-password", ADMIN_PASSWORD);
+  await page.getByRole("button", { name: "Sign in" }).click();
+  await page.waitForURL((url) => !url.pathname.endsWith("/login"), { timeout: 15000 });
+});
+
+test("global value set create, edit values, list, delete", async ({ page }) => {
+  const stamp = Date.now();
+  const name = `Playwright Values ${stamp}`;
+
+  await page.goto("global-values");
+  await page.getByRole("button", { name: "New value set" }).click();
+  await page.fill("#nvs-name", name);
+  await page.getByRole("button", { name: "Create value set" }).click();
+
+  await expect(page).toHaveURL(/\/global-values\/[a-z0-9-]+$/);
+  await expect(page.getByRole("heading", { name })).toBeVisible();
+
+  await page.getByRole("button", { name: "Add key" }).click();
+  await page.getByLabel("Key 1").fill("baseUrl");
+  await page.getByLabel("Value 1").fill("https://example.com");
+  await page.getByRole("button", { name: "Save changes" }).click();
+  await expect(page.getByRole("button", { name: "Save changes" })).toHaveCount(0);
+
+  // Reload forces a fresh GET — proves the write actually persisted server-side.
+  await page.reload();
+  await expect(page.getByLabel("Key 1")).toHaveValue("baseUrl");
+  await expect(page.getByLabel("Value 1")).toHaveValue("https://example.com");
+
+  await page.goto("global-values");
+  const row = page.getByRole("row", { name: new RegExp(name) });
+  await expect(row).toBeVisible();
+  await expect(row.locator("td").nth(2)).toHaveText("1"); // Values column
+
+  await row.click();
+  await page.getByRole("button", { name: "Delete" }).click();
+  await page.getByRole("button", { name: "Delete value set" }).click();
+  await expect(page).toHaveURL(/\/global-values$/);
+  await expect(page.getByText(name)).toHaveCount(0);
+});
diff --git a/SW.Bitween.Web/ClientApp/e2e/helpers.ts b/SW.Bitween.Web/ClientApp/e2e/helpers.ts
new file mode 100644
index 00000000..cc9bccfa
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/e2e/helpers.ts
@@ -0,0 +1,93 @@
+import type { Page } from "@playwright/test";
+
+/** Checkbox labels carry their description in the accessible name, so anchor at the start. */
+export const startsWith = (text: string) =>
+  new RegExp("^" + text.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"));
+
+export const ADMIN_EMAIL = "admin@Bitween.systems";
+export const ADMIN_PASSWORD = "Mtm@dmin!2";
+
+/** Passwords the members these tests create are given. Both clear the 8-character minimum. */
+export const FIRST_PASSWORD = "Pl4ywright!1";
+export const ROTATED_PASSWORD = "R0tated!Pass2";
+
+export async function signIn(page: Page, email: string, password: string) {
+  await page.goto("login");
+  await page.fill("#login-email", email);
+  await page.fill("#login-password", password);
+  await page.getByRole("button", { name: "Sign in" }).click();
+  await page.waitForURL((url) => !url.pathname.endsWith("/login"), { timeout: 15000 });
+}
+
+export const signInAsAdmin = (page: Page) => signIn(page, ADMIN_EMAIL, ADMIN_PASSWORD);
+
+export async function signOut(page: Page) {
+  // An open drawer lays a backdrop over the sidebar, which would swallow the click.
+  const drawer = page.getByRole("dialog", { name: "Member details" });
+  if (await drawer.count()) {
+    await page.keyboard.press("Escape");
+    await drawer.waitFor({ state: "detached" });
+  }
+  await page.getByRole("button", { name: "Account menu" }).click();
+  await page.getByRole("button", { name: "Sign out" }).click();
+  await page.waitForURL((url) => url.pathname.endsWith("/login"), { timeout: 15000 });
+}
+
+/**
+ * Adds a member through the UI and returns their email. Unique per run so the suite can be
+ * re-run against the same database without colliding on the unique email index.
+ */
+export async function addMember(
+  page: Page,
+  { name, roles, password = FIRST_PASSWORD }: { name: string; roles: string[]; password?: string },
+) {
+  const email = `pw-${name.toLowerCase().replace(/\W+/g, "-")}-${Date.now()}@example.test`;
+
+  await page.goto("team/members");
+  await page.getByRole("button", { name: "Add member" }).click();
+  await page.fill("#member-name", name);
+  await page.fill("#member-email", email);
+  await page.fill("#member-password", password);
+  for (const role of roles) await page.getByRole("checkbox", { name: startsWith(role) }).check();
+  await page.getByRole("button", { name: "Add member" }).last().click();
+
+  await page.waitForSelector(`text=${email}`, { timeout: 15000 });
+  return email;
+}
+
+/** Creates a role holding exactly the given permissions. Returns its name. */
+export async function createRole(
+  page: Page,
+  { name, permissions }: { name: string; permissions: { area: string; action: string }[] },
+) {
+  await page.goto("team/roles/new");
+  await page.fill("#role-name", name);
+  await page.fill("#role-desc", "Created by the Playwright suite.");
+  for (const { area, action } of permissions)
+    await page.getByRole("checkbox", { name: `${area}: ${action}`, exact: true }).check();
+  await page.getByRole("button", { name: "Create role" }).click();
+  await page.waitForURL(/\/team\/roles$/, { timeout: 15000 });
+  return name;
+}
+
+/** Opens a member's drawer from the members list. */
+export async function openMember(page: Page, email: string) {
+  await page.goto("team/members");
+  await page.getByRole("row", { name: new RegExp(email) }).click();
+  await page.getByRole("dialog", { name: "Member details" }).waitFor();
+}
+
+export async function removeMember(page: Page, email: string) {
+  await openMember(page, email);
+  await page.getByRole("button", { name: "Remove from team" }).click();
+  await page.getByRole("button", { name: "Remove member" }).click();
+  await page.getByRole("dialog", { name: "Member details" }).waitFor({ state: "detached" });
+}
+
+export async function deleteRole(page: Page, name: string) {
+  await page.goto("team/roles");
+  await page.getByRole("link", { name: new RegExp(name) }).click();
+  await page.getByRole("button", { name: "Delete role" }).click();
+  await page.getByRole("button", { name: "Delete role" }).last().click();
+  await page.waitForURL(/\/team\/roles$/, { timeout: 15000 });
+}
diff --git a/SW.Bitween.Web/ClientApp/e2e/information-types.spec.ts b/SW.Bitween.Web/ClientApp/e2e/information-types.spec.ts
new file mode 100644
index 00000000..25814e13
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/e2e/information-types.spec.ts
@@ -0,0 +1,46 @@
+import { test, expect } from "@playwright/test";
+
+const ADMIN_EMAIL = "admin@Bitween.systems";
+const ADMIN_PASSWORD = "Mtm@dmin!2";
+
+test.beforeEach(async ({ page }) => {
+  await page.goto("login");
+  await page.fill("#login-email", ADMIN_EMAIL);
+  await page.fill("#login-password", ADMIN_PASSWORD);
+  await page.getByRole("button", { name: "Sign in" }).click();
+  await page.waitForURL((url) => !url.pathname.endsWith("/login"), { timeout: 15000 });
+});
+
+test("information type Code is optional end to end", async ({ page }) => {
+  const name = `Playwright No Code ${Date.now()}`;
+
+  await page.goto("information-types/new");
+  await page.fill("#nit-name", name);
+
+  // Expand the collapsed code/format section and clear the auto-suggested code.
+  await page.getByRole("button", { name: /^Code/ }).click();
+  const codeInput = page.locator("#nit-code");
+  await expect(codeInput).not.toHaveAttribute("required", "");
+  await codeInput.fill("");
+
+  await page.getByRole("button", { name: "Create information type" }).click();
+
+  // Should navigate straight to the detail page — no validation block on empty code.
+  await expect(page).toHaveURL(/\/information-types\/\d+$/);
+  await expect(page.getByRole("heading", { name })).toBeVisible();
+  await expect(page.locator("#it-code")).toHaveValue("");
+  // The identity badge next to the heading falls back to the name when there's no code.
+  await expect(page.getByRole("heading", { name }).locator("code")).toHaveText(name);
+
+  // The list page's Code column falls back to the name too, not a blank/dash.
+  await page.goto("information-types");
+  const row = page.getByRole("row", { name: new RegExp(name) });
+  await expect(row.locator("code")).toHaveText(name);
+
+  // Cleanup.
+  await row.click();
+  await page.getByRole("button", { name: "Delete" }).click();
+  await page.getByRole("button", { name: "Delete information type" }).click();
+  await expect(page).toHaveURL(/\/information-types$/);
+  await expect(page.getByText(name)).toHaveCount(0);
+});
diff --git a/SW.Bitween.Web/ClientApp/e2e/integrations.spec.ts b/SW.Bitween.Web/ClientApp/e2e/integrations.spec.ts
new file mode 100644
index 00000000..d680e71a
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/e2e/integrations.spec.ts
@@ -0,0 +1,79 @@
+import { test, expect } from "@playwright/test";
+
+const ADMIN_EMAIL = "admin@Bitween.systems";
+const ADMIN_PASSWORD = "Mtm@dmin!2";
+
+test.beforeEach(async ({ page }) => {
+  await page.goto("login");
+  await page.fill("#login-email", ADMIN_EMAIL);
+  await page.fill("#login-password", ADMIN_PASSWORD);
+  await page.getByRole("button", { name: "Sign in" }).click();
+  await page.waitForURL((url) => !url.pathname.endsWith("/login"), { timeout: 15000 });
+});
+
+test("scheduled job create, adapters, pause/resume, receive now, list, delete", async ({ page }) => {
+  const name = `Playwright Job ${Date.now()}`;
+
+  await page.goto("scheduled-jobs/new");
+  await page.fill("#sjw-name", name);
+  await page.getByRole("button", { name: "order" }).click();
+  await page.getByRole("button", { name: "Continue" }).click();
+
+  // Source & schedule step — receiver adapter + its one required prop.
+  await page.getByLabel("receiver adapter").click();
+  await page.getByRole("option", { name: "NativeHttpReceiver" }).click();
+  await page.keyboard.press("Escape"); // close the combobox popover, it doesn't auto-dismiss
+  await expect(page.getByLabel("receiver adapter")).toHaveValue("NativeHttpReceiver");
+  await page.locator("#prop-Url").fill("https://example.com/feed");
+  await page.getByRole("button", { name: "Continue" }).click();
+
+  // Pipeline step — handler adapter + its required prop (mapper stays "None").
+  await page.getByLabel("handler adapter").click();
+  await page.getByRole("option", { name: "NativeHttpHandler" }).click();
+  await expect(page.getByLabel("handler adapter")).toHaveValue("NativeHttpHandler");
+  await expect(page.getByRole("listbox")).toHaveCount(0, { timeout: 10000 });
+  await page.locator("#prop-Url").fill("https://example.com/sink");
+  await page.getByRole("button", { name: "Continue" }).click();
+
+  // Review step — "Enable immediately" is checked by default.
+  await page.getByRole("button", { name: "Create scheduled job" }).click();
+
+  await expect(page).toHaveURL(/\/subscriptions\/\d+$/);
+  await expect(page.getByRole("heading", { name })).toBeVisible();
+  await expect(page.getByRole("button", { name: "Active" })).toBeVisible();
+
+  // Pause / resume.
+  await page.getByRole("button", { name: "Pause" }).click();
+  await page.getByRole("dialog", { name: "Pause this integration?" }).getByRole("button", { name: "Pause" }).click();
+  await expect(page.getByRole("dialog")).toHaveCount(0);
+  await expect(page.getByText("Paused", { exact: true }).first()).toBeVisible();
+
+  await page.getByRole("button", { name: "Resume" }).click();
+  await page.getByRole("dialog", { name: "Resume this integration?" }).getByRole("button", { name: "Resume" }).click();
+  await expect(page.getByRole("dialog")).toHaveCount(0);
+  await expect(page.getByText("Paused", { exact: true })).toHaveCount(0);
+
+  // Receive now.
+  await page.getByRole("button", { name: "Receive now" }).click();
+  await page.getByRole("dialog", { name: "Receive now?" }).getByRole("button", { name: "Receive now" }).click();
+  await expect(page.getByRole("dialog")).toHaveCount(0);
+  await expect(page.getByText("Next run")).toBeVisible();
+
+  // Reload to prove the adapter config truly persisted server-side.
+  await page.reload();
+  await expect(page.getByLabel("receiver adapter")).toHaveValue("NativeHttpReceiver");
+  await expect(page.locator("#prop-Url").first()).toHaveValue("https://example.com/feed");
+  await expect(page.getByLabel("handler adapter")).toHaveValue("NativeHttpHandler");
+
+  await page.goto("subscriptions?types=scheduled-jobs");
+  const row = page.getByRole("row", { name: new RegExp(name) });
+  await expect(row).toBeVisible({ timeout: 15000 });
+  await expect(row.getByText("undefined")).toHaveCount(0);
+
+  await row.getByRole("button", { name: `Open ${name}` }).click();
+  await expect(page).toHaveURL(/\/subscriptions\/\d+$/);
+  await page.getByRole("button", { name: "Delete" }).click();
+  await page.getByRole("button", { name: "Delete integration" }).click();
+  await expect(page).toHaveURL(/\/subscriptions$/);
+  await expect(page.getByText(name)).toHaveCount(0);
+});
diff --git a/SW.Bitween.Web/ClientApp/e2e/login.spec.ts b/SW.Bitween.Web/ClientApp/e2e/login.spec.ts
new file mode 100644
index 00000000..4ce0863a
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/e2e/login.spec.ts
@@ -0,0 +1,48 @@
+import { test, expect, type Page } from "@playwright/test";
+
+/**
+ * What the sign-in page offers is driven by the anonymous config endpoint. These tests rewrite
+ * that response rather than saving the real setting: `Bitween.DisableEmailPasswordLogin` lives in
+ * the database, and a test that flipped it on and then failed would leave this instance reachable
+ * only through Microsoft — which the local profile has no MSAL app for. That's a locked door with
+ * no key, so the flag is exercised at the boundary instead.
+ */
+async function withConfig(page: Page, overrides: Record<string, unknown>) {
+  await page.route("**/api/settings/config", async (route) => {
+    const real = await route.fetch();
+    const body = await real.json();
+    await route.fulfill({ json: { ...body, ...overrides } });
+  });
+}
+
+const passwordField = (page: Page) => page.locator("#login-password");
+const microsoftButton = (page: Page) => page.getByRole("button", { name: "Continue with Microsoft" });
+
+test("by default the sign-in page asks for an email and password", async ({ page }) => {
+  await page.goto("login");
+
+  await expect(passwordField(page)).toBeVisible();
+  await expect(page.getByRole("button", { name: "Sign in" })).toBeVisible();
+});
+
+test("Microsoft-only hides the password form instead of letting it fail", async ({ page }) => {
+  await withConfig(page, { disableEmailPasswordLogin: true, msalClientId: "00000000-0000-0000-0000-000000000000" });
+  await page.goto("login");
+
+  // The backend rejects email/password outright in this mode, so the form must not be offered.
+  await expect(microsoftButton(page)).toBeVisible();
+  await expect(passwordField(page)).toHaveCount(0);
+  await expect(page.getByRole("button", { name: "Sign in" })).toHaveCount(0);
+  // With nothing above it, the divider has nothing to divide.
+  await expect(page.getByText("or", { exact: true })).toHaveCount(0);
+});
+
+test("Microsoft-only with no Microsoft app configured explains itself", async ({ page }) => {
+  await withConfig(page, { disableEmailPasswordLogin: true, msalClientId: null });
+  await page.goto("login");
+
+  // Both doors are shut. Saying so beats an empty card that looks like a failed page load.
+  await expect(page.getByText(/Microsoft sign-in isn't configured/)).toBeVisible();
+  await expect(passwordField(page)).toHaveCount(0);
+  await expect(microsoftButton(page)).toHaveCount(0);
+});
diff --git a/SW.Bitween.Web/ClientApp/e2e/permissions-enforcement.spec.ts b/SW.Bitween.Web/ClientApp/e2e/permissions-enforcement.spec.ts
new file mode 100644
index 00000000..b2e29b85
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/e2e/permissions-enforcement.spec.ts
@@ -0,0 +1,186 @@
+import { test, expect, type Page } from "@playwright/test";
+import {
+  FIRST_PASSWORD,
+  addMember,
+  createRole,
+  deleteRole,
+  removeMember,
+  signIn,
+  signInAsAdmin,
+  signOut,
+} from "./helpers";
+
+/**
+ * What a role grants has to hold in three places at once: the pages offered in the sidebar, the
+ * page reached by typing its URL, and the API behind the button. A permission system that only
+ * hides UI isn't one, so every check here ends at the server.
+ */
+
+const sidebarLinks = (page: Page) =>
+  page.getByRole("navigation").getByRole("link").filter({ hasNotText: /^$/ });
+
+/** Calls the API directly with the signed-in member's own token — no UI in the way. */
+async function apiStatus(
+  page: Page,
+  method: "GET" | "POST",
+  path: string,
+  body?: unknown,
+): Promise<number> {
+  const token = await page.evaluate(() => localStorage.getItem("access_token"));
+  const res = await page.request.fetch(`https://localhost:7155/api${path}`, {
+    method,
+    headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
+    ...(body === undefined ? {} : { data: body }),
+  });
+  return res.status();
+}
+
+test("a custom role grants exactly what was ticked, in the nav, by URL, and at the API", async ({
+  page,
+}) => {
+  const roleName = `PW Exchange Watcher ${Date.now()}`;
+  await signInAsAdmin(page);
+  await createRole(page, {
+    name: roleName,
+    permissions: [{ area: "Exchanges", action: "View" }],
+  });
+  const email = await addMember(page, { name: "Watcher Only", roles: [roleName] });
+
+  await signOut(page);
+  await signIn(page, email, FIRST_PASSWORD);
+
+  // 1. The sidebar offers the one page they can see, and nothing else.
+  await expect(sidebarLinks(page).filter({ hasText: "Exchanges" })).toBeVisible();
+  for (const hidden of ["Partners", "Integrations", "Work groups", "Team", "Settings"])
+    await expect(sidebarLinks(page).filter({ hasText: hidden })).toHaveCount(0);
+
+  // 2. Typing the URL of a page they lack doesn't get them in.
+  await page.goto("partners");
+  await expect(page.getByText("You don't have access to this page")).toBeVisible();
+
+  await page.goto("team/members");
+  await expect(page.getByText("You don't have access to this page")).toBeVisible();
+
+  // 3. The page they do have loads, and offers no write actions.
+  await page.goto("exchanges");
+  await expect(page.getByText("You don't have access to this page")).toHaveCount(0);
+  await expect(page.getByRole("button", { name: /^Retry/ })).toHaveCount(0);
+
+  // 4. And the API refuses the same things, so a crafted request gains nothing.
+  expect(await apiStatus(page, "POST", "/partners", { name: "sneaky" })).toBe(401);
+  expect(await apiStatus(page, "GET", "/accounts?limit=5")).toBe(401);
+  expect(await apiStatus(page, "POST", "/roles", { name: "x", description: "", permissions: [] })).toBe(401);
+
+  await signOut(page);
+  await signInAsAdmin(page);
+  await removeMember(page, email);
+  await deleteRole(page, roleName);
+});
+
+test("Viewer can read but not write", async ({ page }) => {
+  await signInAsAdmin(page);
+  const email = await addMember(page, { name: "Read Only", roles: ["Viewer"] });
+
+  await signOut(page);
+  await signIn(page, email, FIRST_PASSWORD);
+
+  // Reading the configuration pages is fine.
+  await page.goto("partners");
+  await expect(page.getByText("You don't have access to this page")).toHaveCount(0);
+  await expect(page.getByRole("button", { name: "New partner" })).toHaveCount(0);
+
+  await page.goto("retry-policies");
+  await expect(page.getByText("You don't have access to this page")).toHaveCount(0);
+  await expect(page.getByRole("button", { name: /^New retry policy/ })).toHaveCount(0);
+
+  // Administration is out of reach entirely.
+  await expect(sidebarLinks(page).filter({ hasText: "Team" })).toHaveCount(0);
+  await page.goto("settings");
+  await expect(page.getByText("You don't have access to this page")).toBeVisible();
+
+  // Writes are refused at the source, not just hidden.
+  expect(await apiStatus(page, "POST", "/partners", { name: "nope" })).toBe(401);
+  expect(await apiStatus(page, "POST", "/retrypolicies", { name: "nope" })).toBe(401);
+  // Work groups had no guard of any kind until the handlers were given one.
+  expect(await apiStatus(page, "POST", "/workgroups", { name: "nope", busMessageName: "nope" })).toBe(401);
+
+  await signOut(page);
+  await signInAsAdmin(page);
+  await removeMember(page, email);
+});
+
+test("Member can configure integrations but not manage the team", async ({ page }) => {
+  await signInAsAdmin(page);
+  const email = await addMember(page, { name: "Regular Member", roles: ["Member"] });
+
+  await signOut(page);
+  await signIn(page, email, FIRST_PASSWORD);
+
+  await page.goto("partners");
+  await expect(page.getByRole("button", { name: "New partner" })).toBeVisible();
+
+  // The whole Administration group is absent for a Member.
+  await expect(sidebarLinks(page).filter({ hasText: "Team" })).toHaveCount(0);
+  await expect(sidebarLinks(page).filter({ hasText: "Settings" })).toHaveCount(0);
+
+  expect(await apiStatus(page, "GET", "/accounts?limit=5")).toBe(401);
+  expect(await apiStatus(page, "POST", "/roles", { name: "x", description: "", permissions: [] })).toBe(401);
+
+  await signOut(page);
+  await signInAsAdmin(page);
+  await removeMember(page, email);
+});
+
+test("editing a role changes what its members can do, without them signing in again", async ({
+  page,
+}) => {
+  const roleName = `PW Growing ${Date.now()}`;
+  await signInAsAdmin(page);
+  await createRole(page, { name: roleName, permissions: [{ area: "Exchanges", action: "View" }] });
+  const email = await addMember(page, { name: "Gains Access", roles: [roleName] });
+
+  await signOut(page);
+  await signIn(page, email, FIRST_PASSWORD);
+  await expect(sidebarLinks(page).filter({ hasText: "Partners" })).toHaveCount(0);
+
+  // Grant Partners while they're signed in. Permissions are resolved per request from the
+  // database rather than baked into the token, so this must take effect without a new login.
+  const admin = await page.context().browser()!.newContext({ ignoreHTTPSErrors: true });
+  const adminPage = await admin.newPage();
+  await signInAsAdmin(adminPage);
+  await adminPage.goto("team/roles");
+  await adminPage.getByRole("link", { name: new RegExp(roleName) }).click();
+  await adminPage.getByRole("checkbox", { name: "Partners: View", exact: true }).check();
+  await adminPage.getByRole("button", { name: "Save changes" }).click();
+  await adminPage.waitForURL(/\/team\/roles$/);
+
+  await page.reload();
+  await expect(sidebarLinks(page).filter({ hasText: "Partners" })).toBeVisible();
+  await page.goto("partners");
+  await expect(page.getByText("You don't have access to this page")).toHaveCount(0);
+
+  await admin.close();
+  await signOut(page);
+  await signInAsAdmin(page);
+  await removeMember(page, email);
+  await deleteRole(page, roleName);
+});
+
+test("a member with no roles at all sees nothing and can do nothing", async ({ page }) => {
+  await signInAsAdmin(page);
+  const email = await addMember(page, { name: "No Roles", roles: [] });
+
+  await signOut(page);
+  await signIn(page, email, FIRST_PASSWORD);
+
+  await expect(sidebarLinks(page)).toHaveCount(0);
+  for (const path of ["exchanges", "partners", "team/members", "settings"]) {
+    await page.goto(path);
+    await expect(page.getByText("You don't have access to this page")).toBeVisible();
+  }
+  expect(await apiStatus(page, "POST", "/partners", { name: "nope" })).toBe(401);
+
+  await signOut(page);
+  await signInAsAdmin(page);
+  await removeMember(page, email);
+});
diff --git a/SW.Bitween.Web/ClientApp/e2e/retry-policies.spec.ts b/SW.Bitween.Web/ClientApp/e2e/retry-policies.spec.ts
new file mode 100644
index 00000000..76bcf1d9
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/e2e/retry-policies.spec.ts
@@ -0,0 +1,68 @@
+import { test, expect } from "@playwright/test";
+
+const ADMIN_EMAIL = "admin@Bitween.systems";
+const ADMIN_PASSWORD = "Mtm@dmin!2";
+
+test.beforeEach(async ({ page }) => {
+  await page.goto("login");
+  await page.fill("#login-email", ADMIN_EMAIL);
+  await page.fill("#login-password", ADMIN_PASSWORD);
+  await page.getByRole("button", { name: "Sign in" }).click();
+  await page.waitForURL((url) => !url.pathname.endsWith("/login"), { timeout: 15000 });
+});
+
+test("retry policy create, add group with fixed delay, dry-run, list, delete", async ({ page }) => {
+  const name = `Playwright Policy ${Date.now()}`;
+  const groupName = "Timeouts";
+
+  await page.goto("retry-policies");
+  await page.getByRole("button", { name: "New retry policy" }).click();
+  await page.fill("#nrp-name", name);
+  await page.getByRole("button", { name: "Create policy" }).click();
+
+  await expect(page).toHaveURL(/\/retry-policies\/\d+$/);
+  await expect(page.getByRole("heading", { name })).toBeVisible();
+  await expect(page.getByText("No groups yet")).toBeVisible();
+
+  await page.getByRole("button", { name: "Add group" }).click();
+  const dialog = page.getByRole("dialog", { name: "New group" });
+  await dialog.locator("#rg-name").fill(groupName);
+  await dialog.getByRole("button", { name: "Add condition" }).click();
+  await dialog.getByLabel("Text to find").fill("timeout");
+  // Fixed delay in seconds — the backend stores this in milliseconds, so this
+  // exercises the ms <-> seconds conversion in both directions once reloaded.
+  await dialog.locator("#rg-delay").selectOption("fixed");
+  await dialog.locator("#rg-d1").fill("45");
+  await dialog.getByRole("button", { name: "Add group" }).click();
+
+  await expect(page.getByText(groupName)).toBeVisible();
+  await page.getByRole("button", { name: "Save changes" }).click();
+  await expect(page.getByRole("button", { name: "Save changes" })).toHaveCount(0);
+
+  // Reload forces a fresh GET — proves the group (incl. the delay unit
+  // conversion) actually round-tripped through the backend correctly.
+  await page.reload();
+  await expect(page.getByText(groupName)).toBeVisible();
+  await page.getByRole("button", { name: `Edit ${groupName}` }).click();
+  await expect(page.locator("#rg-delay")).toHaveValue("fixed");
+  await expect(page.locator("#rg-d1")).toHaveValue("45");
+  await page.getByRole("button", { name: "Cancel" }).click();
+
+  // Dry-run against the saved (now unsaved-clean) groups.
+  await page.fill("#tp-content", "System.Net.Http.HttpRequestException: timeout while connecting");
+  await page.getByRole("button", { name: "Run simulation" }).click();
+  const attempt = page.locator("ol li").first();
+  await expect(attempt).toContainText("Retries");
+  await expect(attempt).toContainText("Next try in 45s");
+
+  await page.goto("retry-policies");
+  const row = page.getByRole("row", { name: new RegExp(name) });
+  await expect(row).toBeVisible();
+  await expect(row.locator("td").nth(1)).toHaveText("1"); // Groups column
+
+  await row.click();
+  await page.getByRole("button", { name: "Delete" }).click();
+  await page.getByRole("button", { name: "Delete policy" }).click();
+  await expect(page).toHaveURL(/\/retry-policies$/);
+  await expect(page.getByText(name)).toHaveCount(0);
+});
diff --git a/SW.Bitween.Web/ClientApp/e2e/settings.spec.ts b/SW.Bitween.Web/ClientApp/e2e/settings.spec.ts
new file mode 100644
index 00000000..73b8461a
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/e2e/settings.spec.ts
@@ -0,0 +1,177 @@
+import { test, expect, type Page } from "@playwright/test";
+import { signInAsAdmin, signOut, startsWith } from "./helpers";
+
+const TEAL = "#0f766e";
+/** A second colour, so the sign-in test stands on its own if the one above left residue. */
+const INDIGO = "#4338ca";
+const DEFAULT_COLOR = "#e3311d";
+const DEFAULT_CRON = "0 * * * * ?";
+
+const brandColorVar = (page: Page) =>
+  page.evaluate(() => document.documentElement.style.getPropertyValue("--color-crimson-600").trim());
+
+/** The hex box beside the colour swatch; `exact` keeps it apart from the picker itself. */
+const hexInput = (page: Page) => page.getByRole("textbox", { name: "Primary color", exact: true });
+
+async function openBrandSection(page: Page) {
+  await page.goto("settings");
+  await page.getByRole("button", { name: "Brand & theme" }).click();
+}
+
+test.beforeEach(async ({ page }) => {
+  await signInAsAdmin(page);
+});
+
+test("sections come from the backend catalog, with no restart-required rows", async ({ page }) => {
+  await page.goto("settings");
+
+  for (const section of [
+    "Documents & storage",
+    "API behavior",
+    "Single sign-on (Microsoft)",
+    "Adapters",
+    "Reliability & jobs",
+    "Messaging",
+    "Database",
+    "Security",
+    "Brand & theme",
+  ])
+    await expect(page.getByRole("button", { name: section })).toBeVisible();
+
+  // Nothing carries a restart badge: a setting that couldn't take effect immediately is shown
+  // as an environment value instead of being offered as an edit that needs a restart to land.
+  await expect(page.getByText("Restart", { exact: true })).toHaveCount(0);
+});
+
+test("environment settings are shown but not offered as edits", async ({ page }) => {
+  await page.goto("settings");
+  await page.getByRole("button", { name: "Database" }).click();
+
+  // A read-only row renders its value as text — there's no control carrying its label…
+  await expect(page.getByText("Use Azure managed identity")).toBeVisible();
+  await expect(page.getByText("Off", { exact: true })).toBeVisible();
+  await expect(
+    page.getByRole("textbox", { name: "Use Azure managed identity", exact: true }),
+  ).toHaveCount(0);
+  await expect(page.getByRole("checkbox")).toHaveCount(0);
+
+  // …and a presence row reports only whether a value is set, never the value itself.
+  await expect(page.getByText("Not set", { exact: true })).toBeVisible();
+  await expect(
+    page.getByRole("textbox", { name: "Managed identity client ID", exact: true }),
+  ).toHaveCount(0);
+
+  // Neither kind can be reset, because neither is stored.
+  await expect(page.getByRole("button", { name: "Reset to default" })).toHaveCount(0);
+  await expect(page.getByText("Environment").first()).toBeVisible();
+});
+
+test("Microsoft-only sign-in is an editable setting, not an environment value", async ({ page }) => {
+  await page.goto("settings");
+  await page.getByRole("button", { name: "Single sign-on (Microsoft)" }).click();
+
+  // It applies per request — the Login handler and the config endpoint both read it live — so it
+  // belongs in the catalog as an edit rather than a read-only environment row.
+  const toggle = page.getByRole("checkbox", { name: startsWith("Off") });
+  await expect(toggle).toBeVisible();
+  await expect(toggle).not.toBeChecked();
+  await expect(page.getByText("Microsoft sign-in only")).toBeVisible();
+});
+
+test("the retry schedule is editable and rejects an invalid cron", async ({ page }) => {
+  await page.goto("settings");
+  await page.getByRole("button", { name: "Reliability & jobs" }).click();
+
+  const cron = page.getByRole("textbox", { name: "Retry poll schedule", exact: true });
+  await expect(cron).toHaveValue(DEFAULT_CRON);
+
+  // The backend validates the expression before storing it, because a bad one would break the
+  // startup job seeding — so a rejected save leaves the draft dirty rather than silently passing.
+  await cron.fill("not a cron");
+  await cron.blur();
+  await page.getByRole("button", { name: "Save changes" }).click();
+  await expect(page.getByText(/not a valid cron expression/)).toBeVisible();
+
+  await page.getByRole("button", { name: "Discard" }).click();
+  await expect(cron).toHaveValue(DEFAULT_CRON);
+});
+
+test("brand colour: staged draft previews app-wide, saves, and resets", async ({ page }) => {
+  await openBrandSection(page);
+  const hex = hexInput(page);
+  await expect(hex).toHaveValue(DEFAULT_COLOR);
+
+  await hex.fill(TEAL);
+  await hex.blur();
+  await expect(page.getByText("Unsaved", { exact: true })).toBeVisible();
+  // The draft previews immediately, before anything is saved.
+  expect(await brandColorVar(page)).toBe(TEAL);
+
+  // ...and keeps previewing on other pages, with the banner offering a way back. Navigating
+  // in-app (rather than a hard load) is what a user does, and what lets the banner name the
+  // section holding the change.
+  await page.getByRole("link", { name: "Exchanges" }).click();
+  await expect(page.getByText(/Previewing 1 unsaved setting change/)).toBeVisible();
+  expect(await brandColorVar(page)).toBe(TEAL);
+
+  await page.getByRole("button", { name: /Continue editing/ }).click();
+  await expect(page).toHaveURL(/section=Brand/);
+  await page.getByRole("button", { name: "Save changes" }).click();
+  await expect(page.getByText("Unsaved", { exact: true })).toHaveCount(0);
+
+  // A reload proves it persisted server-side rather than living in the draft.
+  await page.reload();
+  await expect(hexInput(page)).toHaveValue(TEAL);
+  expect(await brandColorVar(page)).toBe(TEAL);
+
+  await page.getByRole("button", { name: "Reset to default" }).click();
+  await page.getByRole("button", { name: "Save changes" }).click();
+  await page.reload();
+  await expect(hexInput(page)).toHaveValue(DEFAULT_COLOR);
+});
+
+test("a secret's value never reaches the browser", async ({ page }) => {
+  const payloads: string[] = [];
+  page.on("response", async (res) => {
+    if (res.url().endsWith("/api/settings")) payloads.push(await res.text());
+  });
+
+  await page.goto("settings");
+  await page.getByRole("button", { name: "Adapters" }).click();
+
+  // The local backend configures a Rebex key, so the row shows as set — masked, with the
+  // adapter-config "Replace" affordance rather than the value itself.
+  await expect(page.getByText("••••••••")).toBeVisible();
+  await expect(page.getByRole("button", { name: "Replace" })).toBeVisible();
+
+  expect(payloads.length).toBeGreaterThan(0);
+  const rebex = JSON.parse(payloads[0]).find(
+    (r: { key: string }) => r.key === "Bitween.RebexLicenseKey",
+  );
+  expect(rebex.secret).toBe(true);
+  expect(rebex.value).toBeNull();
+  expect(rebex.defaultValue).toBe("");
+  expect(rebex.hasValue).toBe(true);
+  // Editable because this instance has an encryption key configured; without one the row comes
+  // back read-only instead.
+  expect(rebex.editable).toBe(true);
+});
+
+test("the sign-in page brands itself before anyone has signed in", async ({ page }) => {
+  await openBrandSection(page);
+  await hexInput(page).fill(INDIGO);
+  await hexInput(page).blur();
+  await page.getByRole("button", { name: "Save changes" }).click();
+  await expect(page.getByText("Unsaved", { exact: true })).toHaveCount(0);
+
+  await signOut(page);
+  // No session here at all — the login page reads branding from the anonymous config endpoint.
+  await expect.poll(() => brandColorVar(page)).toBe(INDIGO);
+
+  await signInAsAdmin(page);
+  await openBrandSection(page);
+  await page.getByRole("button", { name: "Reset to default" }).click();
+  await page.getByRole("button", { name: "Save changes" }).click();
+  await page.reload();
+  await expect(hexInput(page)).toHaveValue(DEFAULT_COLOR);
+});
diff --git a/SW.Bitween.Web/ClientApp/e2e/team-members.spec.ts b/SW.Bitween.Web/ClientApp/e2e/team-members.spec.ts
new file mode 100644
index 00000000..c3d93435
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/e2e/team-members.spec.ts
@@ -0,0 +1,179 @@
+import { test, expect } from "@playwright/test";
+import {
+  ADMIN_EMAIL,
+  startsWith,
+  FIRST_PASSWORD,
+  ROTATED_PASSWORD,
+  addMember,
+  openMember,
+  removeMember,
+  signIn,
+  signInAsAdmin,
+  signOut,
+} from "./helpers";
+
+test.beforeEach(async ({ page }) => {
+  await signInAsAdmin(page);
+});
+
+test("add a member, they can sign in, then remove them", async ({ page }) => {
+  const email = await addMember(page, { name: "New Joiner", roles: ["Viewer"] });
+
+  const row = page.getByRole("row", { name: new RegExp(email) });
+  await expect(row).toBeVisible();
+  await expect(row).toContainText("Viewer");
+  await expect(row).toContainText("Active");
+
+  // The account is real from the first moment — no accept step in between.
+  await signOut(page);
+  await signIn(page, email, FIRST_PASSWORD);
+  await expect(page.getByRole("button", { name: "Account menu" })).toContainText("New Joiner");
+
+  await signOut(page);
+  await signInAsAdmin(page);
+  await removeMember(page, email);
+  await expect(page.getByText(email)).toHaveCount(0);
+});
+
+test("change which roles a member holds", async ({ page }) => {
+  const email = await addMember(page, { name: "Role Swap", roles: ["Viewer"] });
+
+  await openMember(page, email);
+  const drawer = page.getByRole("dialog", { name: "Member details" });
+  await drawer.getByRole("checkbox", { name: startsWith("Viewer") }).uncheck();
+  await drawer.getByRole("checkbox", { name: startsWith("Member") }).check();
+  await drawer.getByRole("button", { name: "Save roles" }).click();
+  await expect(drawer.getByRole("button", { name: "Save roles" })).toHaveCount(0);
+
+  // Reload rather than trust the optimistic UI — proves the write reached the database.
+  await page.reload();
+  const row = page.getByRole("row", { name: new RegExp(email) });
+  await expect(row).toContainText("Member");
+  await expect(row).not.toContainText("Viewer");
+
+  await removeMember(page, email);
+});
+
+test("an administrator resets a member's password", async ({ page }) => {
+  const email = await addMember(page, { name: "Forgot Pass", roles: ["Viewer"] });
+
+  await openMember(page, email);
+  const drawer = page.getByRole("dialog", { name: "Member details" });
+  await drawer.getByLabel("New password").fill(ROTATED_PASSWORD);
+  await drawer.getByRole("button", { name: "Set password" }).click();
+  await expect(drawer.getByLabel("New password")).toHaveValue("");
+
+  await signOut(page);
+  await signIn(page, email, ROTATED_PASSWORD);
+  await expect(page.getByRole("button", { name: "Account menu" })).toContainText("Forgot Pass");
+
+  await signOut(page);
+  await signInAsAdmin(page);
+  await removeMember(page, email);
+});
+
+test("the old password stops working after a reset", async ({ page }) => {
+  const email = await addMember(page, { name: "Stale Pass", roles: ["Viewer"] });
+
+  await openMember(page, email);
+  const drawer = page.getByRole("dialog", { name: "Member details" });
+  await drawer.getByLabel("New password").fill(ROTATED_PASSWORD);
+  await drawer.getByRole("button", { name: "Set password" }).click();
+  await expect(drawer.getByLabel("New password")).toHaveValue("");
+
+  await signOut(page);
+  await page.fill("#login-email", email);
+  await page.fill("#login-password", FIRST_PASSWORD);
+  await page.getByRole("button", { name: "Sign in" }).click();
+  await expect(page).toHaveURL(/\/login$/);
+
+  await signInAsAdmin(page);
+  await removeMember(page, email);
+});
+
+test("disable a member, then re-enable them", async ({ page }) => {
+  const email = await addMember(page, { name: "On Leave", roles: ["Viewer"] });
+
+  await openMember(page, email);
+  const drawer = page.getByRole("dialog", { name: "Member details" });
+  await drawer.getByRole("button", { name: "Disable account" }).click();
+  await expect(drawer.getByRole("button", { name: "Re-enable account" })).toBeVisible();
+
+  await page.reload();
+  await expect(page.getByRole("row", { name: new RegExp(email) })).toContainText("Disabled");
+
+  // A disabled account keeps its roles and history but must not be able to sign in.
+  await signOut(page);
+  await page.fill("#login-email", email);
+  await page.fill("#login-password", FIRST_PASSWORD);
+  await page.getByRole("button", { name: "Sign in" }).click();
+  await expect(page).toHaveURL(/\/login$/);
+
+  await signInAsAdmin(page);
+  await openMember(page, email);
+  await drawer.getByRole("button", { name: "Re-enable account" }).click();
+  await expect(drawer.getByRole("button", { name: "Disable account" })).toBeVisible();
+
+  await removeMember(page, email);
+});
+
+test("the last administrator can't be removed or disabled", async ({ page }) => {
+  // This test only means anything while the seeded admin is the *only* administrator, and it's
+  // the one test that could strip its own role if the guard didn't fire. So assert the
+  // precondition rather than assume it, and put the role back if the save somehow goes through.
+  await page.goto("team/members");
+  const admins = page.getByRole("row", { name: /Administrator/ });
+  await expect(
+    admins,
+    "another account holds Administrator — the guard under test can't fire",
+  ).toHaveCount(1);
+
+  await openMember(page, ADMIN_EMAIL);
+  const drawer = page.getByRole("dialog", { name: "Member details" });
+  const role = drawer.getByRole("checkbox", { name: startsWith("Administrator") });
+
+  // Nothing destructive is even offered on your own account.
+  await expect(drawer.getByRole("button", { name: "Remove from team" })).toHaveCount(0);
+  await expect(drawer.getByRole("button", { name: "Disable account" })).toHaveCount(0);
+
+  // Dropping the role is offered, but the server refuses it.
+  await role.uncheck();
+  await drawer.getByRole("button", { name: "Save roles" }).click();
+
+  try {
+    await expect(drawer.getByText(/only member with the Administrator role/i)).toBeVisible();
+    await page.reload();
+    await expect(page.getByRole("row", { name: new RegExp(ADMIN_EMAIL) })).toContainText(
+      "Administrator",
+    );
+  } finally {
+    // Belt and braces: if the guard let it through, put the role back before failing, so the
+    // rest of the suite doesn't run against an instance nobody can administer. Read the list
+    // fresh — the unchecked box in the drawer is a rejected draft, not what the server holds.
+    await page.goto("team/members");
+    const adminRow = page.getByRole("row", { name: new RegExp(ADMIN_EMAIL) });
+    if (!((await adminRow.textContent()) ?? "").includes("Administrator")) {
+      await adminRow.click();
+      await drawer.getByRole("checkbox", { name: startsWith("Administrator") }).check();
+      await drawer.getByRole("button", { name: "Save roles" }).click();
+      await expect(drawer.getByRole("button", { name: "Save roles" })).toHaveCount(0);
+    }
+  }
+});
+
+test("filter and search the member list", async ({ page }) => {
+  const email = await addMember(page, { name: "Findable Person", roles: ["Viewer"] });
+
+  await page.getByLabel("Search members").fill("Findable");
+  await expect(page.getByRole("row", { name: new RegExp(email) })).toBeVisible();
+  await expect(page.getByRole("row", { name: new RegExp(ADMIN_EMAIL) })).toHaveCount(0);
+
+  await page.getByLabel("Search members").fill("");
+  await page.getByRole("button", { name: "Disabled", exact: true }).click();
+  await expect(page.getByRole("row", { name: new RegExp(email) })).toHaveCount(0);
+
+  await page.getByRole("button", { name: "Active", exact: true }).click();
+  await expect(page.getByRole("row", { name: new RegExp(email) })).toBeVisible();
+
+  await removeMember(page, email);
+});
diff --git a/SW.Bitween.Web/ClientApp/e2e/team-roles.spec.ts b/SW.Bitween.Web/ClientApp/e2e/team-roles.spec.ts
new file mode 100644
index 00000000..75845a52
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/e2e/team-roles.spec.ts
@@ -0,0 +1,143 @@
+import { test, expect } from "@playwright/test";
+import { addMember, createRole, deleteRole, removeMember, signInAsAdmin } from "./helpers";
+
+test.beforeEach(async ({ page }) => {
+  await signInAsAdmin(page);
+});
+
+test("create a custom role, then delete it", async ({ page }) => {
+  const name = `PW Operator ${Date.now()}`;
+
+  await createRole(page, {
+    name,
+    permissions: [
+      { area: "Exchanges", action: "View" },
+      { area: "Exchanges", action: "Operate" },
+    ],
+  });
+
+  const row = page.getByRole("link", { name: new RegExp(name) });
+  await expect(row).toBeVisible();
+  await expect(row).toContainText("0 members");
+  await expect(row).toContainText("2/");
+
+  // Reopen it: the permissions must come back from the server exactly as ticked.
+  await row.click();
+  await expect(page.getByRole("checkbox", { name: "Exchanges: View", exact: true })).toBeChecked();
+  await expect(page.getByRole("checkbox", { name: "Exchanges: Operate", exact: true })).toBeChecked();
+  await expect(
+    page.getByRole("checkbox", { name: "Partners: View", exact: true }),
+  ).not.toBeChecked();
+
+  await page.goto("team/roles");
+  await deleteRole(page, name);
+  await expect(page.getByText(name)).toHaveCount(0);
+});
+
+test("granting an action implies View, and clearing View clears the row", async ({ page }) => {
+  await page.goto("team/roles/new");
+
+  // An action you can't view is an action you can't reach, so View comes along.
+  const view = page.getByRole("checkbox", { name: "Partners: View", exact: true });
+  const edit = page.getByRole("checkbox", { name: "Partners: Edit", exact: true });
+  const del = page.getByRole("checkbox", { name: "Partners: Delete", exact: true });
+
+  // Only the count granted is asserted, not the catalog size — that changes whenever a
+  // permission is added or dropped, and it isn't what this test is about.
+  const granted = (n: number) => new RegExp(`\\b${n}/\\d+ permissions granted`);
+
+  await edit.check();
+  await expect(view).toBeChecked();
+  await expect(page.getByText(granted(2))).toBeVisible();
+
+  await del.check();
+  await expect(page.getByText(granted(3))).toBeVisible();
+
+  // Removing View takes the whole area with it.
+  await view.uncheck();
+  await expect(edit).not.toBeChecked();
+  await expect(del).not.toBeChecked();
+  await expect(page.getByText(granted(0))).toBeVisible();
+});
+
+test("the access preview shows what the role would see", async ({ page }) => {
+  await page.goto("team/roles/new");
+
+  await expect(page.getByText("No pages yet — grant a View permission.")).toBeVisible();
+
+  await page.getByRole("checkbox", { name: "Partners: View", exact: true }).check();
+  const preview = page.locator("section, div").filter({ hasText: "What members with this role see" }).last();
+  await expect(preview.getByText("Partners")).toBeVisible();
+  await expect(preview.getByText("Exchanges")).toHaveCount(0);
+
+  await page.getByRole("checkbox", { name: "Exchanges: View", exact: true }).check();
+  await expect(preview.getByText("Exchanges")).toBeVisible();
+});
+
+test("built-in roles are read-only", async ({ page }) => {
+  await page.goto("team/roles");
+  await page.getByRole("link", { name: /Administrator/ }).click();
+
+  await expect(page.getByText("This role is built in")).toBeVisible();
+  await expect(page.getByRole("checkbox", { name: "Partners: View", exact: true })).toBeDisabled();
+  await expect(page.getByRole("button", { name: "Delete role" })).toHaveCount(0);
+  // Name and description aren't even rendered for a built-in.
+  await expect(page.locator("#role-name")).toHaveCount(0);
+});
+
+test("a role in use can't be deleted", async ({ page }) => {
+  const roleName = `PW InUse ${Date.now()}`;
+  await createRole(page, { name: roleName, permissions: [{ area: "Exchanges", action: "View" }] });
+  const email = await addMember(page, { name: "Role Holder", roles: [roleName] });
+
+  await page.goto("team/roles");
+  await expect(page.getByRole("link", { name: new RegExp(roleName) })).toContainText("1 member");
+
+  await page.getByRole("link", { name: new RegExp(roleName) }).click();
+  await page.getByRole("button", { name: "Delete role" }).click();
+  await page.getByRole("button", { name: "Delete role" }).last().click();
+  await expect(page.getByText(/is still assigned to 1 member/i)).toBeVisible();
+
+  // Free the role up, and the delete goes through.
+  await removeMember(page, email);
+  await deleteRole(page, roleName);
+  await expect(page.getByText(roleName)).toHaveCount(0);
+});
+
+test("two roles can't share a name", async ({ page }) => {
+  await page.goto("team/roles/new");
+  await page.fill("#role-name", "Administrator");
+  await page.fill("#role-desc", "Should be refused.");
+  await page.getByRole("checkbox", { name: "Exchanges: View", exact: true }).check();
+  await page.getByRole("button", { name: "Create role" }).click();
+
+  await expect(page.getByText(/already exists/i)).toBeVisible();
+  await expect(page).toHaveURL(/\/team\/roles\/new$/);
+});
+
+test("duplicate a role", async ({ page }) => {
+  const original = `PW Source ${Date.now()}`;
+  await createRole(page, {
+    name: original,
+    permissions: [
+      { area: "Partners", action: "View" },
+      { area: "Partners", action: "Edit" },
+    ],
+  });
+
+  await page.getByRole("link", { name: new RegExp(original) }).click();
+  await page.getByRole("button", { name: "Duplicate" }).click();
+
+  await expect(page.locator("#role-name")).toHaveValue(`Copy of ${original}`);
+  await expect(page.getByRole("checkbox", { name: "Partners: Edit", exact: true })).toBeChecked();
+
+  const copy = `PW Copy ${Date.now()}`;
+  await page.fill("#role-name", copy);
+  await page.getByRole("button", { name: "Create role" }).click();
+  await page.waitForURL(/\/team\/roles$/);
+
+  await expect(page.getByRole("link", { name: new RegExp(copy) })).toBeVisible();
+
+  await deleteRole(page, copy);
+  await deleteRole(page, original);
+});
diff --git a/SW.Bitween.Web/ClientApp/e2e/view-guards.spec.ts b/SW.Bitween.Web/ClientApp/e2e/view-guards.spec.ts
new file mode 100644
index 00000000..be9133a7
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/e2e/view-guards.spec.ts
@@ -0,0 +1,116 @@
+import { test, expect } from "@playwright/test";
+import {
+  FIRST_PASSWORD,
+  addMember,
+  createRole,
+  deleteRole,
+  removeMember,
+  signIn,
+  signInAsAdmin,
+  signOut,
+} from "./helpers";
+
+/**
+ * Reads are permission-guarded too, which is easy to get wrong in the other direction: a page can
+ * legitimately need data from an area the viewer has no business browsing. These cover both sides —
+ * what a narrow role can't read, and the pages it can still open in full.
+ */
+
+async function apiStatus(page: import("@playwright/test").Page, path: string): Promise<number> {
+  const token = await page.evaluate(() => localStorage.getItem("access_token"));
+  const res = await page.request.fetch(`https://localhost:7155/api${path}`, {
+    headers: { Authorization: `Bearer ${token}` },
+  });
+  return res.status();
+}
+
+test("a role with one view permission can't read any other area's list", async ({ page }) => {
+  const roleName = `PW Docs Reader ${Date.now()}`;
+  await signInAsAdmin(page);
+  await createRole(page, {
+    name: roleName,
+    permissions: [{ area: "Information types", action: "View" }],
+  });
+  const email = await addMember(page, { name: "Docs Reader", roles: [roleName] });
+
+  await signOut(page);
+  await signIn(page, email, FIRST_PASSWORD);
+
+  // The one area they hold is readable.
+  expect(await apiStatus(page, "/documents")).toBe(200);
+
+  // Every other list is refused, not merely hidden in the nav.
+  for (const path of [
+    "/partners",
+    "/xchanges",
+    "/subscriptions",
+    "/notifiers",
+    "/apigateways",
+    "/busgateways",
+    "/retrypolicies",
+    "/globaladaptervaluessets",
+    "/workgroups",
+    "/delayedretries",
+    "/ops/summary",
+  ])
+    expect(await apiStatus(page, path), `${path} should be refused`).toBe(401);
+
+  await signOut(page);
+  await signInAsAdmin(page);
+  await removeMember(page, email);
+  await deleteRole(page, roleName);
+});
+
+test("lookup mode stays readable, because pickers across the app depend on it", async ({ page }) => {
+  const roleName = `PW Lookup Only ${Date.now()}`;
+  await signInAsAdmin(page);
+  await createRole(page, {
+    name: roleName,
+    permissions: [{ area: "Information types", action: "View" }],
+  });
+  const email = await addMember(page, { name: "Lookup User", roles: [roleName] });
+
+  await signOut(page);
+  await signIn(page, email, FIRST_PASSWORD);
+
+  // id/name pairs only — what a picker needs, and not the data the guard protects.
+  for (const path of [
+    "/partners?lookup=true",
+    "/subscriptions?lookup=true",
+    "/retrypolicies?lookup=true",
+    "/accounts?lookup=true",
+  ])
+    expect([200, 206], `${path} should be allowed in lookup mode`).toContain(
+      await apiStatus(page, path),
+    );
+
+  await signOut(page);
+  await signInAsAdmin(page);
+  await removeMember(page, email);
+  await deleteRole(page, roleName);
+});
+
+test("a page still loads when the area behind its Used by count is refused", async ({ page }) => {
+  const roleName = `PW No Integrations ${Date.now()}`;
+  await signInAsAdmin(page);
+  await createRole(page, {
+    name: roleName,
+    permissions: [{ area: "Information types", action: "View" }],
+  });
+  const email = await addMember(page, { name: "No Integrations", roles: [roleName] });
+
+  await signOut(page);
+  await signIn(page, email, FIRST_PASSWORD);
+
+  // The information types list counts how many integrations use each type, which needs the
+  // integrations list this role can't read. The count is what's expendable, not the page.
+  await page.goto("information-types");
+  await expect(page.getByText("You don't have access to this page")).toHaveCount(0);
+  await expect(page.getByRole("table")).toBeVisible();
+  await expect(page.getByText(/failed|error/i)).toHaveCount(0);
+
+  await signOut(page);
+  await signInAsAdmin(page);
+  await removeMember(page, email);
+  await deleteRole(page, roleName);
+});
diff --git a/SW.Bitween.Web/ClientApp/e2e/work-groups.spec.ts b/SW.Bitween.Web/ClientApp/e2e/work-groups.spec.ts
new file mode 100644
index 00000000..793d714e
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/e2e/work-groups.spec.ts
@@ -0,0 +1,49 @@
+import { test, expect } from "@playwright/test";
+
+const ADMIN_EMAIL = "admin@Bitween.systems";
+const ADMIN_PASSWORD = "Mtm@dmin!2";
+
+test.beforeEach(async ({ page }) => {
+  await page.goto("login");
+  await page.fill("#login-email", ADMIN_EMAIL);
+  await page.fill("#login-password", ADMIN_PASSWORD);
+  await page.getByRole("button", { name: "Sign in" }).click();
+  await page.waitForURL((url) => !url.pathname.endsWith("/login"), { timeout: 15000 });
+});
+
+test("work group create, edit queue settings, list, delete", async ({ page }) => {
+  const name = `Playwright Workgroup ${Date.now()}`;
+
+  await page.goto("work-groups/new");
+  await page.fill("#nwg-name", name);
+  await page.getByRole("button", { name: "Create work group" }).click();
+
+  await expect(page).toHaveURL(/\/work-groups\/\d+$/);
+  await expect(page.getByRole("heading", { name })).toBeVisible();
+  // Defaults from the new-page form.
+  await expect(page.locator("#wg-prefetch")).toHaveValue("10");
+  await expect(page.locator("#wg-priority")).toHaveValue("5");
+
+  await page.fill("#wg-prefetch", "25");
+  await page.getByRole("button", { name: "Save changes" }).click();
+  await expect(page.getByRole("button", { name: "Save changes" })).toHaveCount(0);
+
+  // Reload forces a fresh GET — WorkGroups/Search.cs now reads the DB
+  // directly (not IInfolinkCache), so this reflects the update immediately.
+  await page.reload();
+  await expect(page.locator("#wg-prefetch")).toHaveValue("25");
+
+  await page.goto("work-groups");
+  const row = page.getByRole("row", { name: new RegExp(name) });
+  await expect(row).toBeVisible();
+  // A brand-new group has no consumers and nothing assigned to it, so both of
+  // those render as an em dash.
+  await expect(row.getByText("—")).toHaveCount(2);
+
+  await row.getByRole("button", { name: `Open ${name}` }).click();
+  await expect(page).toHaveURL(/\/work-groups\/\d+$/);
+  await page.getByRole("button", { name: "Delete" }).click();
+  await page.getByRole("button", { name: "Delete work group" }).click();
+  await expect(page).toHaveURL(/\/work-groups$/);
+  await expect(page.getByText(name)).toHaveCount(0);
+});
diff --git a/SW.Bitween.Web/ClientApp/index.html b/SW.Bitween.Web/ClientApp/index.html
new file mode 100644
index 00000000..fb83c6a2
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/index.html
@@ -0,0 +1,13 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <link rel="icon" type="image/svg+xml" href="/brand/BitweenIcon.svg" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>Bitween</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/main.tsx"></script>
+  </body>
+</html>
diff --git a/SW.Bitween.Web/ClientApp/package.json b/SW.Bitween.Web/ClientApp/package.json
new file mode 100644
index 00000000..9d82fbce
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/package.json
@@ -0,0 +1,40 @@
+{
+  "name": "bitween-ui-next",
+  "private": true,
+  "version": "0.0.0",
+  "type": "module",
+  "scripts": {
+    "dev": "vite",
+    "build": "tsc -b && vite build",
+    "lint": "oxlint",
+    "preview": "vite preview",
+    "test": "vitest run",
+    "test:e2e": "playwright test"
+  },
+  "dependencies": {
+    "@azure/msal-browser": "^4.0.1",
+    "@fontsource-variable/instrument-sans": "^5.2.8",
+    "@fontsource-variable/jetbrains-mono": "^5.2.8",
+    "@headlessui/react": "^2.2.10",
+    "@monaco-editor/react": "^4.7.0",
+    "@tailwindcss/vite": "^4.3.2",
+    "@tanstack/react-query": "^5.101.2",
+    "immer": "^11.1.8",
+    "lucide-react": "^1.24.0",
+    "react": "^19.2.7",
+    "react-dom": "^19.2.7",
+    "react-router": "^8.2.0",
+    "tailwindcss": "^4.3.2"
+  },
+  "devDependencies": {
+    "@playwright/test": "^1.61.1",
+    "@types/node": "^24.13.2",
+    "@types/react": "^19.2.17",
+    "@types/react-dom": "^19.2.3",
+    "@vitejs/plugin-react": "^6.0.3",
+    "oxlint": "^1.71.0",
+    "typescript": "~6.0.2",
+    "vite": "^8.1.1",
+    "vitest": "^4.1.7"
+  }
+}
diff --git a/SW.Bitween.Web/ClientApp/playwright.config.ts b/SW.Bitween.Web/ClientApp/playwright.config.ts
new file mode 100644
index 00000000..81c5ca1c
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/playwright.config.ts
@@ -0,0 +1,17 @@
+import { defineConfig } from "@playwright/test";
+
+// Points at the locally running backend (SW.Bitween.Web.Local), which serves
+// the built SPA at the site root — there is no separate dev server to boot.
+export default defineConfig({
+  testDir: "./e2e",
+  fullyParallel: false,
+  workers: 1,
+  reporter: "list",
+  // Tests run against a real database, so a failed run leaves data behind. This clears it and
+  // repairs the admin's roles before anything else, so one failure can't cascade into the next run.
+  globalSetup: "./e2e/global-setup.ts",
+  use: {
+    baseURL: "https://localhost:7155/",
+    ignoreHTTPSErrors: true,
+  },
+});
diff --git a/SW.Bitween.Web/ClientApp/public/brand/BitweenFull-light.svg b/SW.Bitween.Web/ClientApp/public/brand/BitweenFull-light.svg
new file mode 100644
index 00000000..7fc64cc9
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/public/brand/BitweenFull-light.svg
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1008.592 182.102">
+  <g>
+    <path d="m62.095,36.422h-27.968v28.081h27.968v-28.081Z" fill="#e3311d"/>
+    <path d="m71.101,36.601h-2.245v27.901h2.245c24,0,43.201,19.5,43.201,43.5,0,23.7-19.2,43.2-43.201,43.2s-43.2-19.5-43.2-43.2V0H0v108.001c0,39.3,31.8,71.101,71.101,71.101s71.101-31.801,71.101-71.101-31.8-71.401-71.101-71.401Z" fill="#f6f3f1"/>
+    <rect x="160.199" y="37.201" width="27.9" height="141.901" fill="#f6f3f1"/>
+    <path d="m234.599.6h-27.9v121.802c0,31.5,25.5,57,57,57h13.5v-27.9h-13.5c-16.2,0-29.1-12.899-29.1-29.1v-57.301h42.601v-27.9h-42.601V.6Z" fill="#f6f3f1"/>
+    <polygon points="460.2 142.801 429.299 36.601 397.5 36.601 366.899 142.801 325.499 36.601 295.798 36.601 351.299 179.702 385.2 179.702 413.4 81.901 441.9 179.702 475.8 179.702 531 36.601 501.3 36.601 460.2 142.801" fill="#f6f3f1"/>
+    <path d="m937.492,36.601c-39.3,0-71.101,32.1-71.101,71.401v71.101h27.9v-71.101c0-24,19.2-43.501,43.2-43.501s43.2,19.501,43.2,43.501v71.101h27.9v-71.101c0-39.301-31.8-71.401-71.101-71.401Z" fill="#f6f3f1"/>
+  </g>
+  <g>
+    <path d="m673.06,104.899c7.036,5.843,13.859,11.508,20.8,17.271,5.882-7.073,11.504-13.833,17.273-20.77-6.971-5.801-13.789-11.474-20.779-17.291-5.84,7.021-11.517,13.846-17.293,20.79Z" fill="#e3311d"/>
+    <path d="m587.778,169.801l-.02-.352c-.018-.26-.031-.521-.031-.785,0-.188.008-.373.021-.559.007-.261.022-.561.047-.86.427-6.119,3.654-11.393,8.407-14.608-14.747-3.941-26.59-15.022-31.6-29.336h84.647c2.676-2.899,5.253-5.835,7.753-8.724,1.801-2.082,3.597-4.169,5.443-6.313l2.2-2.554-.037-.031,14.818-17.814c-8.773-31.308-37.454-54.265-71.323-54.265-41.101,0-74.101,33.3-74.101,74.401,0,35.159,24.514,64.728,57.592,72.238-2.196-2.939-3.586-6.522-3.814-10.438Zm20.323-108.3c21.301,0,39.001,14.4,44.4,33.9h-89.101c5.4-19.5,23.4-33.9,44.7-33.9Z" fill="#f6f3f1"/>
+    <path d="m661.539,118.503c-7.58,8.76-15.316,17.341-24.504,24.52-8.859,6.923-18.636,11.436-29.927,12.262-.115.008-.225.025-.339.036-6.914.163-12.516,5.571-12.993,12.403-.016.208-.028.414-.031.621-.003.107-.016.211-.016.318,0,.198.021.39.03.586.004.053.004.105.008.158.388,7.03,6.195,12.615,13.322,12.615.077,0,.152-.01.229-.012,1.531.108,3.092.071,4.646-.065,13.175-1.148,25.049-5.738,35.947-13.14,11.577-7.863,21.336-17.669,30.491-28.136,4.007-4.581,7.934-9.231,11.969-13.933-7.089-5.911-13.853-11.552-20.905-17.432-2.741,3.181-5.328,6.194-7.926,9.196Z" fill="#f6f3f1"/>
+    <path d="m774.681,33.601c-.166,0-.327.019-.491.025-1.308-.07-2.651-.022-4.019.1-5.813.519-11.562,1.423-17.184,3.275-5.162,1.7-10.27,3.47-15.074,5.985-17.168,8.986-30.866,22.144-43.874,36.736,7.076,5.904,13.894,11.593,20.656,17.235.385-.191.649-.25.807-.413.927-.949,1.841-1.913,2.74-2.89,8.522-9.264,17.647-17.81,28.523-24.323,7.883-4.721,16.275-7.915,25.52-8.237.779-.027,1.544-.092,2.294-.192.035,0,.068.005.103.005,7.54,0,13.653-6.113,13.653-13.653s-6.113-13.653-13.653-13.653Z" fill="#f6f3f1"/>
+    <path d="m700.872,123.063c6.941,33.625,37.52,59.039,73.425,59.039,31.2,0,57.9-19.5,68.701-46.801h-31.501c-8.399,11.4-21.899,18.9-37.2,18.9-20.1,0-37.2-12.9-43.5-30.9h115.801c1.2-4.8,1.8-10.2,1.8-15.3,0-35.568-24.946-65.276-58.102-72.634,2.522,3.305,4.039,7.417,4.039,11.886,0,6.495-3.179,12.249-8.05,15.829,15.748,4.237,28.067,16.622,32.413,32.318h-93.892" fill="#f6f3f1"/>
+  </g>
+</svg>
\ No newline at end of file
diff --git a/SW.Bitween.Web/ClientApp/public/brand/BitweenFull.svg b/SW.Bitween.Web/ClientApp/public/brand/BitweenFull.svg
new file mode 100644
index 00000000..1546a5c1
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/public/brand/BitweenFull.svg
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1008.592 182.102">
+  <g>
+    <path d="m62.095,36.422h-27.968v28.081h27.968v-28.081Z" fill="#e3311d"/>
+    <path d="m71.101,36.601h-2.245v27.901h2.245c24,0,43.201,19.5,43.201,43.5,0,23.7-19.2,43.2-43.201,43.2s-43.2-19.5-43.2-43.2V0H0v108.001c0,39.3,31.8,71.101,71.101,71.101s71.101-31.801,71.101-71.101-31.8-71.401-71.101-71.401Z" fill="#372f2e"/>
+    <rect x="160.199" y="37.201" width="27.9" height="141.901" fill="#372f2e"/>
+    <path d="m234.599.6h-27.9v121.802c0,31.5,25.5,57,57,57h13.5v-27.9h-13.5c-16.2,0-29.1-12.899-29.1-29.1v-57.301h42.601v-27.9h-42.601V.6Z" fill="#372f2e"/>
+    <polygon points="460.2 142.801 429.299 36.601 397.5 36.601 366.899 142.801 325.499 36.601 295.798 36.601 351.299 179.702 385.2 179.702 413.4 81.901 441.9 179.702 475.8 179.702 531 36.601 501.3 36.601 460.2 142.801" fill="#372f2e"/>
+    <path d="m937.492,36.601c-39.3,0-71.101,32.1-71.101,71.401v71.101h27.9v-71.101c0-24,19.2-43.501,43.2-43.501s43.2,19.501,43.2,43.501v71.101h27.9v-71.101c0-39.301-31.8-71.401-71.101-71.401Z" fill="#372f2e"/>
+  </g>
+  <g>
+    <path d="m673.06,104.899c7.036,5.843,13.859,11.508,20.8,17.271,5.882-7.073,11.504-13.833,17.273-20.77-6.971-5.801-13.789-11.474-20.779-17.291-5.84,7.021-11.517,13.846-17.293,20.79Z" fill="#e3311d"/>
+    <path d="m587.778,169.801l-.02-.352c-.018-.26-.031-.521-.031-.785,0-.188.008-.373.021-.559.007-.261.022-.561.047-.86.427-6.119,3.654-11.393,8.407-14.608-14.747-3.941-26.59-15.022-31.6-29.336h84.647c2.676-2.899,5.253-5.835,7.753-8.724,1.801-2.082,3.597-4.169,5.443-6.313l2.2-2.554-.037-.031,14.818-17.814c-8.773-31.308-37.454-54.265-71.323-54.265-41.101,0-74.101,33.3-74.101,74.401,0,35.159,24.514,64.728,57.592,72.238-2.196-2.939-3.586-6.522-3.814-10.438Zm20.323-108.3c21.301,0,39.001,14.4,44.4,33.9h-89.101c5.4-19.5,23.4-33.9,44.7-33.9Z" fill="#372f2e"/>
+    <path d="m661.539,118.503c-7.58,8.76-15.316,17.341-24.504,24.52-8.859,6.923-18.636,11.436-29.927,12.262-.115.008-.225.025-.339.036-6.914.163-12.516,5.571-12.993,12.403-.016.208-.028.414-.031.621-.003.107-.016.211-.016.318,0,.198.021.39.03.586.004.053.004.105.008.158.388,7.03,6.195,12.615,13.322,12.615.077,0,.152-.01.229-.012,1.531.108,3.092.071,4.646-.065,13.175-1.148,25.049-5.738,35.947-13.14,11.577-7.863,21.336-17.669,30.491-28.136,4.007-4.581,7.934-9.231,11.969-13.933-7.089-5.911-13.853-11.552-20.905-17.432-2.741,3.181-5.328,6.194-7.926,9.196Z" fill="#372f2e"/>
+    <path d="m774.681,33.601c-.166,0-.327.019-.491.025-1.308-.07-2.651-.022-4.019.1-5.813.519-11.562,1.423-17.184,3.275-5.162,1.7-10.27,3.47-15.074,5.985-17.168,8.986-30.866,22.144-43.874,36.736,7.076,5.904,13.894,11.593,20.656,17.235.385-.191.649-.25.807-.413.927-.949,1.841-1.913,2.74-2.89,8.522-9.264,17.647-17.81,28.523-24.323,7.883-4.721,16.275-7.915,25.52-8.237.779-.027,1.544-.092,2.294-.192.035,0,.068.005.103.005,7.54,0,13.653-6.113,13.653-13.653s-6.113-13.653-13.653-13.653Z" fill="#372f2e"/>
+    <path d="m700.872,123.063c6.941,33.625,37.52,59.039,73.425,59.039,31.2,0,57.9-19.5,68.701-46.801h-31.501c-8.399,11.4-21.899,18.9-37.2,18.9-20.1,0-37.2-12.9-43.5-30.9h115.801c1.2-4.8,1.8-10.2,1.8-15.3,0-35.568-24.946-65.276-58.102-72.634,2.522,3.305,4.039,7.417,4.039,11.886,0,6.495-3.179,12.249-8.05,15.829,15.748,4.237,28.067,16.622,32.413,32.318h-93.892" fill="#372f2e"/>
+  </g>
+</svg>
\ No newline at end of file
diff --git a/SW.Bitween.Web/ClientApp/public/brand/BitweenIcon.png b/SW.Bitween.Web/ClientApp/public/brand/BitweenIcon.png
new file mode 100644
index 00000000..1f22ce3f
Binary files /dev/null and b/SW.Bitween.Web/ClientApp/public/brand/BitweenIcon.png differ
diff --git a/SW.Bitween.Web/ClientApp/public/brand/BitweenIcon.svg b/SW.Bitween.Web/ClientApp/public/brand/BitweenIcon.svg
new file mode 100644
index 00000000..b2e1faf3
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/public/brand/BitweenIcon.svg
@@ -0,0 +1,5 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 142.202 179.102">
+  <path d="m62.095,36.422h-27.968v28.081h27.968v-28.081Z" fill="#e3311d"/>
+  <path d="m71.101,36.601h-2.245v27.901h2.245c24,0,43.201,19.5,43.201,43.5,0,23.7-19.2,43.2-43.201,43.2s-43.2-19.5-43.2-43.2V0H0v108.001c0,39.3,31.8,71.101,71.101,71.101s71.101-31.801,71.101-71.101-31.8-71.401-71.101-71.401Z" fill="#372f2e"/>
+</svg>
\ No newline at end of file
diff --git a/SW.Bitween.Web/ClientApp/public/favicon.svg b/SW.Bitween.Web/ClientApp/public/favicon.svg
new file mode 100644
index 00000000..6893eb13
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/public/favicon.svg
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="48" height="46" fill="none" viewBox="0 0 48 46"><path fill="#863bff" d="M25.946 44.938c-.664.845-2.021.375-2.021-.698V33.937a2.26 2.26 0 0 0-2.262-2.262H10.287c-.92 0-1.456-1.04-.92-1.788l7.48-10.471c1.07-1.497 0-3.578-1.842-3.578H1.237c-.92 0-1.456-1.04-.92-1.788L10.013.474c.214-.297.556-.474.92-.474h28.894c.92 0 1.456 1.04.92 1.788l-7.48 10.471c-1.07 1.498 0 3.579 1.842 3.579h11.377c.943 0 1.473 1.088.89 1.83L25.947 44.94z" style="fill:#863bff;fill:color(display-p3 .5252 .23 1);fill-opacity:1"/><mask id="a" width="48" height="46" x="0" y="0" maskUnits="userSpaceOnUse" style="mask-type:alpha"><path fill="#000" d="M25.842 44.938c-.664.844-2.021.375-2.021-.698V33.937a2.26 2.26 0 0 0-2.262-2.262H10.183c-.92 0-1.456-1.04-.92-1.788l7.48-10.471c1.07-1.498 0-3.579-1.842-3.579H1.133c-.92 0-1.456-1.04-.92-1.787L9.91.473c.214-.297.556-.474.92-.474h28.894c.92 0 1.456 1.04.92 1.788l-7.48 10.471c-1.07 1.498 0 3.578 1.842 3.578h11.377c.943 0 1.473 1.088.89 1.832L25.843 44.94z" style="fill:#000;fill-opacity:1"/></mask><g mask="url(#a)"><g filter="url(#b)"><ellipse cx="5.508" cy="14.704" fill="#ede6ff" rx="5.508" ry="14.704" style="fill:#ede6ff;fill:color(display-p3 .9275 .9033 1);fill-opacity:1" transform="matrix(.00324 1 1 -.00324 -4.47 31.516)"/></g><g filter="url(#c)"><ellipse cx="10.399" cy="29.851" fill="#ede6ff" rx="10.399" ry="29.851" style="fill:#ede6ff;fill:color(display-p3 .9275 .9033 1);fill-opacity:1" transform="matrix(.00324 1 1 -.00324 -39.328 7.883)"/></g><g filter="url(#d)"><ellipse cx="5.508" cy="30.487" fill="#7e14ff" rx="5.508" ry="30.487" style="fill:#7e14ff;fill:color(display-p3 .4922 .0767 1);fill-opacity:1" transform="rotate(89.814 -25.913 -14.639)scale(1 -1)"/></g><g filter="url(#e)"><ellipse cx="5.508" cy="30.599" fill="#7e14ff" rx="5.508" ry="30.599" style="fill:#7e14ff;fill:color(display-p3 .4922 .0767 1);fill-opacity:1" transform="rotate(89.814 -32.644 -3.334)scale(1 -1)"/></g><g filter="url(#f)"><ellipse cx="5.508" cy="30.599" fill="#7e14ff" rx="5.508" ry="30.599" style="fill:#7e14ff;fill:color(display-p3 .4922 .0767 1);fill-opacity:1" transform="matrix(.00324 1 1 -.00324 -34.34 30.47)"/></g><g filter="url(#g)"><ellipse cx="14.072" cy="22.078" fill="#ede6ff" rx="14.072" ry="22.078" style="fill:#ede6ff;fill:color(display-p3 .9275 .9033 1);fill-opacity:1" transform="rotate(93.35 24.506 48.493)scale(-1 1)"/></g><g filter="url(#h)"><ellipse cx="3.47" cy="21.501" fill="#7e14ff" rx="3.47" ry="21.501" style="fill:#7e14ff;fill:color(display-p3 .4922 .0767 1);fill-opacity:1" transform="rotate(89.009 28.708 47.59)scale(-1 1)"/></g><g filter="url(#i)"><ellipse cx="3.47" cy="21.501" fill="#7e14ff" rx="3.47" ry="21.501" style="fill:#7e14ff;fill:color(display-p3 .4922 .0767 1);fill-opacity:1" transform="rotate(89.009 28.708 47.59)scale(-1 1)"/></g><g filter="url(#j)"><ellipse cx=".387" cy="8.972" fill="#7e14ff" rx="4.407" ry="29.108" style="fill:#7e14ff;fill:color(display-p3 .4922 .0767 1);fill-opacity:1" transform="rotate(39.51 .387 8.972)"/></g><g filter="url(#k)"><ellipse cx="47.523" cy="-6.092" fill="#7e14ff" rx="4.407" ry="29.108" style="fill:#7e14ff;fill:color(display-p3 .4922 .0767 1);fill-opacity:1" transform="rotate(37.892 47.523 -6.092)"/></g><g filter="url(#l)"><ellipse cx="41.412" cy="6.333" fill="#47bfff" rx="5.971" ry="9.665" style="fill:#47bfff;fill:color(display-p3 .2799 .748 1);fill-opacity:1" transform="rotate(37.892 41.412 6.333)"/></g><g filter="url(#m)"><ellipse cx="-1.879" cy="38.332" fill="#7e14ff" rx="4.407" ry="29.108" style="fill:#7e14ff;fill:color(display-p3 .4922 .0767 1);fill-opacity:1" transform="rotate(37.892 -1.88 38.332)"/></g><g filter="url(#n)"><ellipse cx="-1.879" cy="38.332" fill="#7e14ff" rx="4.407" ry="29.108" style="fill:#7e14ff;fill:color(display-p3 .4922 .0767 1);fill-opacity:1" transform="rotate(37.892 -1.88 38.332)"/></g><g filter="url(#o)"><ellipse cx="35.651" cy="29.907" fill="#7e14ff" rx="4.407" ry="29.108" style="fill:#7e14ff;fill:color(display-p3 .4922 .0767 1);fill-opacity:1" transform="rotate(37.892 35.651 29.907)"/></g><g filter="url(#p)"><ellipse cx="38.418" cy="32.4" fill="#47bfff" rx="5.971" ry="15.297" style="fill:#47bfff;fill:color(display-p3 .2799 .748 1);fill-opacity:1" transform="rotate(37.892 38.418 32.4)"/></g></g><defs><filter id="b" width="60.045" height="41.654" x="-19.77" y="16.149" color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse"><feFlood flood-opacity="0" result="BackgroundImageFix"/><feBlend in="SourceGraphic" in2="BackgroundImageFix" result="shape"/><feGaussianBlur result="effect1_foregroundBlur_2002_17158" stdDeviation="7.659"/></filter><filter id="c" width="90.34" height="51.437" x="-54.613" y="-7.533" color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse"><feFlood flood-opacity="0" result="BackgroundImageFix"/><feBlend in="SourceGraphic" in2="BackgroundImageFix" result="shape"/><feGaussianBlur result="effect1_foregroundBlur_2002_17158" stdDeviation="7.659"/></filter><filter id="d" width="79.355" height="29.4" x="-49.64" y="2.03" color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse"><feFlood flood-opacity="0" result="BackgroundImageFix"/><feBlend in="SourceGraphic" in2="BackgroundImageFix" result="shape"/><feGaussianBlur result="effect1_foregroundBlur_2002_17158" stdDeviation="4.596"/></filter><filter id="e" width="79.579" height="29.4" x="-45.045" y="20.029" color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse"><feFlood flood-opacity="0" result="BackgroundImageFix"/><feBlend in="SourceGraphic" in2="BackgroundImageFix" result="shape"/><feGaussianBlur result="effect1_foregroundBlur_2002_17158" stdDeviation="4.596"/></filter><filter id="f" width="79.579" height="29.4" x="-43.513" y="21.178" color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse"><feFlood flood-opacity="0" result="BackgroundImageFix"/><feBlend in="SourceGraphic" in2="BackgroundImageFix" result="shape"/><feGaussianBlur result="effect1_foregroundBlur_2002_17158" stdDeviation="4.596"/></filter><filter id="g" width="74.749" height="58.852" x="15.756" y="-17.901" color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse"><feFlood flood-opacity="0" result="BackgroundImageFix"/><feBlend in="SourceGraphic" in2="BackgroundImageFix" result="shape"/><feGaussianBlur result="effect1_foregroundBlur_2002_17158" stdDeviation="7.659"/></filter><filter id="h" width="61.377" height="25.362" x="23.548" y="2.284" color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse"><feFlood flood-opacity="0" result="BackgroundImageFix"/><feBlend in="SourceGraphic" in2="BackgroundImageFix" result="shape"/><feGaussianBlur result="effect1_foregroundBlur_2002_17158" stdDeviation="4.596"/></filter><filter id="i" width="61.377" height="25.362" x="23.548" y="2.284" color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse"><feFlood flood-opacity="0" result="BackgroundImageFix"/><feBlend in="SourceGraphic" in2="BackgroundImageFix" result="shape"/><feGaussianBlur result="effect1_foregroundBlur_2002_17158" stdDeviation="4.596"/></filter><filter id="j" width="56.045" height="63.649" x="-27.636" y="-22.853" color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse"><feFlood flood-opacity="0" result="BackgroundImageFix"/><feBlend in="SourceGraphic" in2="BackgroundImageFix" result="shape"/><feGaussianBlur result="effect1_foregroundBlur_2002_17158" stdDeviation="4.596"/></filter><filter id="k" width="54.814" height="64.646" x="20.116" y="-38.415" color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse"><feFlood flood-opacity="0" result="BackgroundImageFix"/><feBlend in="SourceGraphic" in2="BackgroundImageFix" result="shape"/><feGaussianBlur result="effect1_foregroundBlur_2002_17158" stdDeviation="4.596"/></filter><filter id="l" width="33.541" height="35.313" x="24.641" y="-11.323" color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse"><feFlood flood-opacity="0" result="BackgroundImageFix"/><feBlend in="SourceGraphic" in2="BackgroundImageFix" result="shape"/><feGaussianBlur result="effect1_foregroundBlur_2002_17158" stdDeviation="4.596"/></filter><filter id="m" width="54.814" height="64.646" x="-29.286" y="6.009" color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse"><feFlood flood-opacity="0" result="BackgroundImageFix"/><feBlend in="SourceGraphic" in2="BackgroundImageFix" result="shape"/><feGaussianBlur result="effect1_foregroundBlur_2002_17158" stdDeviation="4.596"/></filter><filter id="n" width="54.814" height="64.646" x="-29.286" y="6.009" color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse"><feFlood flood-opacity="0" result="BackgroundImageFix"/><feBlend in="SourceGraphic" in2="BackgroundImageFix" result="shape"/><feGaussianBlur result="effect1_foregroundBlur_2002_17158" stdDeviation="4.596"/></filter><filter id="o" width="54.814" height="64.646" x="8.244" y="-2.416" color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse"><feFlood flood-opacity="0" result="BackgroundImageFix"/><feBlend in="SourceGraphic" in2="BackgroundImageFix" result="shape"/><feGaussianBlur result="effect1_foregroundBlur_2002_17158" stdDeviation="4.596"/></filter><filter id="p" width="39.409" height="43.623" x="18.713" y="10.588" color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse"><feFlood flood-opacity="0" result="BackgroundImageFix"/><feBlend in="SourceGraphic" in2="BackgroundImageFix" result="shape"/><feGaussianBlur result="effect1_foregroundBlur_2002_17158" stdDeviation="4.596"/></filter></defs></svg>
\ No newline at end of file
diff --git a/SW.Bitween.Web/ClientApp/public/icons.svg b/SW.Bitween.Web/ClientApp/public/icons.svg
new file mode 100644
index 00000000..e9522193
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/public/icons.svg
@@ -0,0 +1,24 @@
+<svg xmlns="http://www.w3.org/2000/svg">
+  <symbol id="bluesky-icon" viewBox="0 0 16 17">
+    <g clip-path="url(#bluesky-clip)"><path fill="#08060d" d="M7.75 7.735c-.693-1.348-2.58-3.86-4.334-5.097-1.68-1.187-2.32-.981-2.74-.79C.188 2.065.1 2.812.1 3.251s.241 3.602.398 4.13c.52 1.744 2.367 2.333 4.07 2.145-2.495.37-4.71 1.278-1.805 4.512 3.196 3.309 4.38-.71 4.987-2.746.608 2.036 1.307 5.91 4.93 2.746 2.72-2.746.747-4.143-1.747-4.512 1.702.189 3.55-.4 4.07-2.145.156-.528.397-3.691.397-4.13s-.088-1.186-.575-1.406c-.42-.19-1.06-.395-2.741.79-1.755 1.24-3.64 3.752-4.334 5.099"/></g>
+    <defs><clipPath id="bluesky-clip"><path fill="#fff" d="M.1.85h15.3v15.3H.1z"/></clipPath></defs>
+  </symbol>
+  <symbol id="discord-icon" viewBox="0 0 20 19">
+    <path fill="#08060d" d="M16.224 3.768a14.5 14.5 0 0 0-3.67-1.153c-.158.286-.343.67-.47.976a13.5 13.5 0 0 0-4.067 0c-.128-.306-.317-.69-.476-.976A14.4 14.4 0 0 0 3.868 3.77C1.546 7.28.916 10.703 1.231 14.077a14.7 14.7 0 0 0 4.5 2.306q.545-.748.965-1.587a9.5 9.5 0 0 1-1.518-.74q.191-.14.372-.293c2.927 1.369 6.107 1.369 8.999 0q.183.152.372.294-.723.437-1.52.74.418.838.963 1.588a14.6 14.6 0 0 0 4.504-2.308c.37-3.911-.63-7.302-2.644-10.309m-9.13 8.234c-.878 0-1.599-.82-1.599-1.82 0-.998.705-1.82 1.6-1.82.894 0 1.614.82 1.599 1.82.001 1-.705 1.82-1.6 1.82m5.91 0c-.878 0-1.599-.82-1.599-1.82 0-.998.705-1.82 1.6-1.82.893 0 1.614.82 1.599 1.82 0 1-.706 1.82-1.6 1.82"/>
+  </symbol>
+  <symbol id="documentation-icon" viewBox="0 0 21 20">
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="m15.5 13.333 1.533 1.322c.645.555.967.833.967 1.178s-.322.623-.967 1.179L15.5 18.333m-3.333-5-1.534 1.322c-.644.555-.966.833-.966 1.178s.322.623.966 1.179l1.534 1.321"/>
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M17.167 10.836v-4.32c0-1.41 0-2.117-.224-2.68-.359-.906-1.118-1.621-2.08-1.96-.599-.21-1.349-.21-2.848-.21-2.623 0-3.935 0-4.983.369-1.684.591-3.013 1.842-3.641 3.428C3 6.449 3 7.684 3 10.154v2.122c0 2.558 0 3.838.706 4.726q.306.383.713.671c.76.536 1.79.64 3.581.66"/>
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M3 10a2.78 2.78 0 0 1 2.778-2.778c.555 0 1.209.097 1.748-.047.48-.129.854-.503.982-.982.145-.54.048-1.194.048-1.749a2.78 2.78 0 0 1 2.777-2.777"/>
+  </symbol>
+  <symbol id="github-icon" viewBox="0 0 19 19">
+    <path fill="#08060d" fill-rule="evenodd" d="M9.356 1.85C5.05 1.85 1.57 5.356 1.57 9.694a7.84 7.84 0 0 0 5.324 7.44c.387.079.528-.168.528-.376 0-.182-.013-.805-.013-1.454-2.165.467-2.616-.935-2.616-.935-.349-.91-.864-1.143-.864-1.143-.71-.48.051-.48.051-.48.787.051 1.2.805 1.2.805.695 1.194 1.817.857 2.268.649.064-.507.27-.857.49-1.052-1.728-.182-3.545-.857-3.545-3.87 0-.857.31-1.558.8-2.104-.078-.195-.349-1 .077-2.078 0 0 .657-.208 2.14.805a7.5 7.5 0 0 1 1.946-.26c.657 0 1.328.092 1.946.26 1.483-1.013 2.14-.805 2.14-.805.426 1.078.155 1.883.078 2.078.502.546.799 1.247.799 2.104 0 3.013-1.818 3.675-3.558 3.87.284.247.528.714.528 1.454 0 1.052-.012 1.896-.012 2.156 0 .208.142.455.528.377a7.84 7.84 0 0 0 5.324-7.441c.013-4.338-3.48-7.844-7.773-7.844" clip-rule="evenodd"/>
+  </symbol>
+  <symbol id="social-icon" viewBox="0 0 20 20">
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M12.5 6.667a4.167 4.167 0 1 0-8.334 0 4.167 4.167 0 0 0 8.334 0"/>
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M2.5 16.667a5.833 5.833 0 0 1 8.75-5.053m3.837.474.513 1.035c.07.144.257.282.414.309l.93.155c.596.1.736.536.307.965l-.723.73a.64.64 0 0 0-.152.531l.207.903c.164.715-.213.991-.84.618l-.872-.52a.63.63 0 0 0-.577 0l-.872.52c-.624.373-1.003.094-.84-.618l.207-.903a.64.64 0 0 0-.152-.532l-.723-.729c-.426-.43-.289-.864.306-.964l.93-.156a.64.64 0 0 0 .412-.31l.513-1.034c.28-.562.735-.562 1.012 0"/>
+  </symbol>
+  <symbol id="x-icon" viewBox="0 0 19 19">
+    <path fill="#08060d" fill-rule="evenodd" d="M1.893 1.98c.052.072 1.245 1.769 2.653 3.77l2.892 4.114c.183.261.333.48.333.486s-.068.089-.152.183l-.522.593-.765.867-3.597 4.087c-.375.426-.734.834-.798.905a1 1 0 0 0-.118.148c0 .01.236.017.664.017h.663l.729-.83c.4-.457.796-.906.879-.999a692 692 0 0 0 1.794-2.038c.034-.037.301-.34.594-.675l.551-.624.345-.392a7 7 0 0 1 .34-.374c.006 0 .93 1.306 2.052 2.903l2.084 2.965.045.063h2.275c1.87 0 2.273-.003 2.266-.021-.008-.02-1.098-1.572-3.894-5.547-2.013-2.862-2.28-3.246-2.273-3.266.008-.019.282-.332 2.085-2.38l2-2.274 1.567-1.782c.022-.028-.016-.03-.65-.03h-.674l-.3.342a871 871 0 0 1-1.782 2.025c-.067.075-.405.458-.75.852a100 100 0 0 1-.803.91c-.148.172-.299.344-.99 1.127-.304.343-.32.358-.345.327-.015-.019-.904-1.282-1.976-2.808L6.365 1.85H1.8zm1.782.91 8.078 11.294c.772 1.08 1.413 1.973 1.425 1.984.016.017.241.02 1.05.017l1.03-.004-2.694-3.766L7.796 5.75 5.722 2.852l-1.039-.004-1.039-.004z" clip-rule="evenodd"/>
+  </symbol>
+</svg>
diff --git a/SW.Bitween.Web/ClientApp/src/api/client.ts b/SW.Bitween.Web/ClientApp/src/api/client.ts
new file mode 100644
index 00000000..44c5a2ca
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/api/client.ts
@@ -0,0 +1,307 @@
+import type {
+  AdapterInfo,
+  AdapterKind,
+  ApiGateway,
+  ApiGatewayDetail,
+  ApiGatewayRow,
+  BusGateway,
+  BusGatewayDetail,
+  BusGatewayRow,
+  DashboardData,
+  ExchangeQuery,
+  ExchangeRow,
+  GlobalValuesSetDetail,
+  GlobalValuesSetRow,
+  InformationType,
+  InformationTypeDetail,
+  InformationTypeFormat,
+  InformationTypeRow,
+  Integration,
+  IntegrationDetail,
+  IntegrationInfo,
+  IntegrationRow,
+  IntegrationType,
+  MatchGroup,
+  Notifier,
+  NotifierDetail,
+  Paged,
+  Partner,
+  PartnerDetail,
+  PartnerRow,
+  PermissionArea,
+  PermissionKey,
+  QueueHealthSnapshot,
+  RetryGroup,
+  RetryPolicy,
+  RetryPolicyDetail,
+  RetryPolicyListRow,
+  RetryResultType,
+  RetryTestAttempt,
+  Role,
+  Schedule,
+  ScheduledRetryQuery,
+  ScheduledRetryRow,
+  Session,
+  SettingRow,
+  User,
+  WorkGroup,
+  WorkGroupDetail,
+  WorkGroupRow,
+} from "./types";
+
+/**
+ * The single data-access contract the UI is written against, implemented by
+ * ./http/httpClient. Components depend on this interface rather than on fetch,
+ * so an endpoint's shape can change in one place.
+ */
+export interface ApiClient {
+  // — session —
+  getSession(): Promise<Session | null>;
+  login(email: string, password: string): Promise<Session>;
+  loginWithMicrosoft(): Promise<Session>;
+  logout(): Promise<void>;
+
+  // — self service —
+  // No password-reset flow exists on the backend yet (BACKEND_WIRING_PLAN.md G3) — it needs
+  // outbound mail, which Bitween doesn't have. Hidden in the UI rather than faked.
+  updateProfile(changes: { displayName: string }): Promise<Session>;
+  changePassword(currentPassword: string, newPassword: string): Promise<void>;
+
+  // — members —
+  listUsers(): Promise<User[]>;
+  getUser(id: string): Promise<User>;
+  /**
+   * Creates a member outright, password and all. Bitween has no outbound mail, so there's no
+   * invite link — whoever adds the member passes the first password on themselves.
+   */
+  createUser(input: {
+    displayName: string;
+    email: string;
+    password: string;
+    roleIds: string[];
+  }): Promise<User>;
+  /** Stands in for a self-service reset, which would need mail Bitween doesn't have. */
+  setUserPassword(id: string, password: string): Promise<void>;
+  updateUserRoles(id: string, roleIds: string[]): Promise<User>;
+  setUserDisabled(id: string, disabled: boolean): Promise<User>;
+  deleteUser(id: string): Promise<void>;
+
+  // — roles —
+  /** The catalog the backend enforces, so the role matrix can never offer a grant it ignores. */
+  getPermissionCatalog(): Promise<PermissionArea[]>;
+  listRoles(): Promise<Role[]>;
+  getRole(id: string): Promise<Role>;
+  createRole(input: { name: string; description: string; permissions: PermissionKey[] }): Promise<Role>;
+  updateRole(
+    id: string,
+    input: { name: string; description: string; permissions: PermissionKey[] },
+  ): Promise<Role>;
+  deleteRole(id: string): Promise<void>;
+
+  // — partners —
+  listPartners(): Promise<PartnerRow[]>;
+  getPartner(id: number): Promise<PartnerDetail>;
+  /** Light fetch used by the mapper editor's test-partner selector. */
+  getPartnerAdapterProperties(id: number): Promise<Record<string, string>>;
+  createPartner(input: { name: string }): Promise<Partner>;
+  updatePartner(
+    id: number,
+    changes: { name?: string; adapterProperties?: Record<string, string> },
+  ): Promise<Partner>;
+  deletePartner(id: number): Promise<void>;
+  /** Returns the full key exactly once; afterwards only a prefix is ever shown. */
+  addPartnerCredential(id: number, name: string): Promise<{ key: string }>;
+  revokePartnerCredential(id: number, name: string): Promise<void>;
+
+  // — information types —
+  listInformationTypes(): Promise<InformationTypeRow[]>;
+  getInformationType(id: number): Promise<InformationTypeDetail>;
+  createInformationType(input: {
+    name: string;
+    code: string;
+    format: InformationTypeFormat;
+    busEnabled?: boolean;
+    busMessageTypeName?: string;
+  }): Promise<InformationType>;
+  updateInformationType(
+    id: number,
+    changes: Omit<InformationType, "id" | "createdOn">,
+  ): Promise<InformationType>;
+  deleteInformationType(id: number): Promise<void>;
+
+  // — global values —
+  listValueSets(): Promise<GlobalValuesSetRow[]>;
+  getValueSet(id: string): Promise<GlobalValuesSetDetail>;
+  createValueSet(input: {
+    id: string;
+    name: string;
+    values: Record<string, string>;
+  }): Promise<GlobalValuesSetRow>;
+  updateValueSet(
+    id: string,
+    changes: { name: string; values: Record<string, string> },
+  ): Promise<GlobalValuesSetRow>;
+  deleteValueSet(id: string): Promise<void>;
+
+  // — integrations (light summaries; cache aggressively) —
+  listIntegrations(): Promise<IntegrationInfo[]>;
+
+  // — integrations —
+  listIntegrationRows(): Promise<IntegrationRow[]>;
+  getIntegration(id: number): Promise<IntegrationDetail>;
+  /** Only Receiving / GatewayApiCall / BusGateway — always via the entry-point wizards. */
+  createIntegration(input: {
+    type: IntegrationType;
+    name: string;
+    informationTypeId: number;
+    receiverId?: string | null;
+    receiverProperties?: Record<string, string>;
+    validatorId?: string | null;
+    validatorProperties?: Record<string, string>;
+    mapperId?: string | null;
+    mapperProperties?: Record<string, string>;
+    handlerId?: string | null;
+    handlerProperties?: Record<string, string>;
+    schedules?: Schedule[];
+    retryPolicyId?: number | null;
+    enabled?: boolean;
+  }): Promise<Integration>;
+  updateIntegration(
+    id: number,
+    changes: Partial<
+      Pick<
+        Integration,
+        | "name"
+        | "enabled"
+        | "workGroupId"
+        | "retryPolicyId"
+        | "receiverId"
+        | "receiverProperties"
+        | "validatorId"
+        | "validatorProperties"
+        | "mapperId"
+        | "mapperProperties"
+        | "handlerId"
+        | "handlerProperties"
+        | "matchExpression"
+        | "schedules"
+        | "responseIntegrationId"
+        | "responseMessageTypeName"
+      >
+    >,
+  ): Promise<Integration>;
+  deleteIntegration(id: number): Promise<void>;
+  /** Toggles paused: paused integrations accept work but hold it. */
+  pauseIntegration(id: number): Promise<Integration>;
+  receiveNow(id: number): Promise<Integration>;
+  listAdapters(kind: AdapterKind): Promise<AdapterInfo[]>;
+
+  // — work groups —
+  listWorkGroups(): Promise<WorkGroupRow[]>;
+  getWorkGroup(id: number): Promise<WorkGroupDetail>;
+  createWorkGroup(input: {
+    name: string;
+    busMessageName: string;
+    prefetch: number;
+    priority: number;
+  }): Promise<WorkGroup>;
+  updateWorkGroup(
+    id: number,
+    changes: { name: string; busMessageName: string; prefetch: number; priority: number },
+  ): Promise<WorkGroup>;
+  deleteWorkGroup(id: number): Promise<void>;
+
+  // — API gateways —
+  listApiGateways(): Promise<ApiGatewayRow[]>;
+  getApiGateway(id: number): Promise<ApiGatewayDetail>;
+  createApiGateway(input: { name: string; urlName: string }): Promise<ApiGateway>;
+  updateApiGateway(id: number, changes: { name: string; urlName: string }): Promise<ApiGateway>;
+  deleteApiGateway(id: number): Promise<void>;
+  attachGatewayPartner(id: number, input: { partnerId: number; integrationId: number }): Promise<void>;
+  updateGatewayAttachment(id: number, input: { partnerId: number; integrationId: number }): Promise<void>;
+  removeGatewayAttachment(id: number, partnerId: number): Promise<void>;
+
+  // — bus gateways —
+  listBusGateways(): Promise<BusGatewayRow[]>;
+  getBusGateway(id: number): Promise<BusGatewayDetail>;
+  createBusGateway(input: { name: string; informationTypeId: number }): Promise<BusGateway>;
+  updateBusGateway(id: number, changes: { name: string }): Promise<BusGateway>;
+  deleteBusGateway(id: number): Promise<void>;
+  addBusRoute(
+    id: number,
+    input: { integrationId: number; partnerId: number | null; matchExpression: MatchGroup | null },
+  ): Promise<void>;
+  updateBusRoute(
+    id: number,
+    routeId: number,
+    input: { integrationId: number; partnerId: number | null; matchExpression: MatchGroup | null },
+  ): Promise<void>;
+  removeBusRoute(id: number, routeId: number): Promise<void>;
+
+  // — retry policies —
+  listRetryPolicies(): Promise<RetryPolicyListRow[]>;
+  getRetryPolicy(id: number): Promise<RetryPolicyDetail>;
+  createRetryPolicy(input: { name: string }): Promise<RetryPolicy>;
+  updateRetryPolicy(id: number, changes: { name: string; groups: RetryGroup[] }): Promise<RetryPolicy>;
+  deleteRetryPolicy(id: number): Promise<void>;
+  /** Dry-runs draft groups against a simulated failure over N attempts. */
+  testRetryPolicy(input: {
+    groups: RetryGroup[];
+    resultType: RetryResultType;
+    content: string;
+    attempts: number;
+  }): Promise<RetryTestAttempt[]>;
+
+  // — settings —
+  listSettings(): Promise<SettingRow[]>;
+  /** `value: null` resets the setting back to its default. */
+  updateSetting(key: string, value: string | null): Promise<void>;
+
+  // — notifiers —
+  // No backend delete/test-send endpoint exists yet (BACKEND_WIRING_PLAN.md G8) — hidden in the UI.
+  // Channel choices come from listAdapters("handler") — same catalog as any other handler slot.
+  listNotifiers(): Promise<Notifier[]>;
+  getNotifier(id: number): Promise<NotifierDetail>;
+  createNotifier(input: { name: string }): Promise<Notifier>;
+  updateNotifier(id: number, changes: Omit<Notifier, "id" | "createdOn">): Promise<Notifier>;
+
+  // — exchanges —
+  searchExchanges(query: ExchangeQuery): Promise<Paged<ExchangeRow>>;
+  /** Fetches a stage document's raw text content by its storage key (`ExchangeFileRef.key`). */
+  getExchangeDocument(key: string): Promise<string>;
+  /**
+   * Re-runs an exchange from its input file. `reset` re-resolves adapter
+   * properties from the integration's current configuration instead of the
+   * values captured when the exchange first ran. Fails with
+   * AUTO_RETRY_SCHEDULED when an auto-retry is already pending.
+   */
+  retryExchange(id: string, opts: { reset: boolean }): Promise<{ id: string }>;
+  /** Retries many; exchanges with a pending auto-retry are skipped, not failed. */
+  bulkRetryExchanges(ids: string[], opts: { reset: boolean }): Promise<{ retried: number; skipped: number }>;
+  /** Manually injects a payload, addressed at an integration or an information type. */
+  createExchange(input: {
+    target: "integration" | "informationType";
+    integrationId?: number;
+    informationTypeId?: number;
+    data: string;
+  }): Promise<{ id: string }>;
+
+  // — scheduled retries —
+  searchScheduledRetries(query: ScheduledRetryQuery): Promise<Paged<ScheduledRetryRow>>;
+  /** Executes a pending auto-retry immediately instead of waiting for its slot. */
+  runScheduledRetryNow(id: string): Promise<void>;
+
+  // — queue health —
+  getQueueHealth(): Promise<QueueHealthSnapshot>;
+
+  // — dashboard —
+  getDashboard(): Promise<DashboardData>;
+
+  // — mappers —
+  /** Executes a Scriban template against sample input, injecting the partner's adapter properties and global value sets exactly as the runtime mapper does. */
+  previewMapping(input: {
+    scribanTemplate: string;
+    inputJson: string;
+    partnerId?: number | null;
+  }): Promise<{ outputJson: string | null; error: string | null }>;
+}
diff --git a/SW.Bitween.Web/ClientApp/src/api/http/adapters.ts b/SW.Bitween.Web/ClientApp/src/api/http/adapters.ts
new file mode 100644
index 00000000..c6938a49
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/api/http/adapters.ts
@@ -0,0 +1,53 @@
+import type { ApiClient } from "../client";
+import type { AdapterInfo, AdapterKind, AdapterProp } from "../types";
+import { get } from "./request";
+
+interface RawVersionedAdapter {
+  key: string;
+  versions: string[] | null;
+}
+interface RawStartupValue {
+  optional: boolean;
+  default: string | null;
+  private: boolean;
+  description: string | null;
+}
+
+// The backend's Prefix param takes the plural, lowercase form.
+const KIND_PREFIX: Record<AdapterKind, string> = {
+  receiver: "receivers",
+  handler: "handlers",
+  mapper: "mappers",
+  validator: "validators",
+};
+
+async function fetchProps(id: string): Promise<AdapterProp[]> {
+  const values = await get<Record<string, RawStartupValue>>(`/adapters/${encodeURIComponent(id)}/GetStartupValues`);
+  return Object.entries(values ?? {}).map(([key, v]) => ({
+    key,
+    optional: v.optional,
+    default: v.default ?? undefined,
+    secret: v.private,
+    description: v.description ?? undefined,
+  }));
+}
+
+export const adapterMethods = {
+  async listAdapters(kind: AdapterKind): Promise<AdapterInfo[]> {
+    const rows = await get<RawVersionedAdapter[]>(`/adapters/Versioned?prefix=${KIND_PREFIX[kind]}`);
+    return Promise.all(
+      (rows ?? []).map(async (r) => ({
+        id: r.key,
+        kind,
+        // No backend source for a friendly display name — fall back to the raw id.
+        label: r.key,
+        native: r.key.toLowerCase().startsWith("native"),
+        versions: r.versions ?? [],
+        // Legacy (non-native) adapters can fail to report startup values (e.g. their
+        // serverless runtime isn't available locally) — don't let that blank out the
+        // whole catalog, including the native adapters that did resolve fine.
+        props: await fetchProps(r.key).catch(() => []),
+      })),
+    );
+  },
+} satisfies Partial<ApiClient>;
diff --git a/SW.Bitween.Web/ClientApp/src/api/http/appConfig.ts b/SW.Bitween.Web/ClientApp/src/api/http/appConfig.ts
new file mode 100644
index 00000000..65216886
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/api/http/appConfig.ts
@@ -0,0 +1,37 @@
+import { API_BASE } from "./request";
+
+/** The `[Unprotect]` GET /settings/config payload the login page needs pre-auth. */
+export interface AppConfig {
+  msalClientId?: string | null;
+  msalTenantId?: string | null;
+  msalRedirectUri?: string | null;
+  /** When true the backend rejects email/password sign-in outright, so don't offer the form. */
+  disableEmailPasswordLogin?: boolean;
+  isRabbitMqManagementConfigured?: boolean;
+  /** Effective brand values (any stored override already applied), keyed like `ThemeOptions`. */
+  theme?: Record<string, string | boolean | null>;
+  /** The same keys as configured, before any override — lets us tell "set" from "untouched". */
+  themeDefaults?: Record<string, string>;
+}
+
+let cached: Promise<AppConfig> | null = null;
+
+/**
+ * Bootstrap config served before authentication (MSAL parameters, feature
+ * flags, branding). Fetched once and memoised. Never throws to callers — an
+ * unreachable backend just yields an empty config, so the login page degrades
+ * gracefully.
+ */
+export function getAppConfig(): Promise<AppConfig> {
+  if (!cached) {
+    cached = fetch(`${API_BASE}/settings/config`, { credentials: "include" })
+      .then((res) => (res.ok ? (res.json() as Promise<AppConfig>) : {}))
+      .catch(() => ({}));
+  }
+  return cached;
+}
+
+/** Drops the memoised copy, so the next read picks up a brand setting that was just saved. */
+export function resetAppConfig(): void {
+  cached = null;
+}
diff --git a/SW.Bitween.Web/ClientApp/src/api/http/dashboard.ts b/SW.Bitween.Web/ClientApp/src/api/http/dashboard.ts
new file mode 100644
index 00000000..7a7279c1
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/api/http/dashboard.ts
@@ -0,0 +1,132 @@
+import type { ApiClient } from "../client";
+import type { DashboardData, ExchangeStatus } from "../types";
+import { integrationMethods } from "./integrations";
+import { get } from "./request";
+
+// ——— backend shapes (camelCase over the wire) ———
+interface SearchyResponse<T> {
+  result: T[];
+  totalCount: number;
+}
+interface RawXchangeForDashboard {
+  id: string;
+  subscriptionId: number | null;
+  documentName: string;
+  status: boolean | null;
+  responseBad: boolean | null;
+  exception: string | null;
+  startedOn: string;
+}
+interface RawAlert {
+  severity: "Info" | "Warning" | "Critical";
+}
+
+const isBad = (raw: Pick<RawXchangeForDashboard, "status" | "responseBad">) =>
+  raw.status === false || (raw.status === true && raw.responseBad === true);
+const isProcessing = (raw: Pick<RawXchangeForDashboard, "status">) => raw.status === null;
+const toStatus = (raw: Pick<RawXchangeForDashboard, "status" | "responseBad">): ExchangeStatus =>
+  raw.status === null ? "processing" : !raw.status ? "failed" : raw.responseBad ? "badResponse" : "success";
+
+export const dashboardMethods = {
+  async getDashboard(): Promise<DashboardData> {
+    const dayMs = 86_400_000;
+    const startOfTodayUtc = new Date(new Date().setUTCHours(0, 0, 0, 0)).getTime();
+    // 14 calendar days including today.
+    const windowStart = startOfTodayUtc - 13 * dayMs;
+
+    // One bulk fetch covers every stat that's derived from exchange rows
+    // (today/yesterday/successRate7d/trafficByDay/busiest/latestFailures) —
+    // far fewer round trips than counting each bucket with its own filtered
+    // request, and exact rather than approximated. Bounded to a generous page
+    // size for what's a modest-scale ops tool; a very high-volume deployment
+    // would need real pagination here.
+    const [xchangeRes, delayedRes, alertsRaw, integrationRows] = await Promise.all([
+      get<SearchyResponse<RawXchangeForDashboard>>(
+        `/xchanges?filter=${encodeURIComponent(`StartedOn:6:${new Date(windowStart).toISOString()}`)}&size=1000&sort=StartedOn:1`,
+      ),
+      get<SearchyResponse<unknown>>("/delayedretries?size=1"),
+      get<RawAlert[]>("/ops/alerts"),
+      integrationMethods.listIntegrationRows(),
+    ]);
+
+    const rows = xchangeRes.result;
+    const startedAt = (r: RawXchangeForDashboard) => Date.parse(r.startedOn);
+    const integrationNameById = new Map(integrationRows.map((i) => [i.id, i.name]));
+
+    const todayRows = rows.filter((r) => startedAt(r) >= startOfTodayUtc);
+    const yesterdayRows = rows.filter((r) => {
+      const t = startedAt(r);
+      return t >= startOfTodayUtc - dayMs && t < startOfTodayUtc;
+    });
+    // The last 7 calendar days including today — the same boundary as the
+    // final 7 entries of trafficByDay below.
+    const sevenDaysAgo = startOfTodayUtc - 6 * dayMs;
+    const week = rows.filter((r) => startedAt(r) >= sevenDaysAgo);
+    const finished7d = week.filter((r) => !isProcessing(r));
+    const successRate7d =
+      finished7d.length === 0
+        ? 100
+        : Math.round((finished7d.filter((r) => !isBad(r)).length / finished7d.length) * 100);
+
+    const trafficByDay = Array.from({ length: 14 }, (_, i) => {
+      const dayStart = windowStart + i * dayMs;
+      const dayRows = rows.filter((r) => {
+        const t = startedAt(r);
+        return t >= dayStart && t < dayStart + dayMs;
+      });
+      return {
+        date: new Date(dayStart).toISOString(),
+        success: dayRows.filter((r) => !isBad(r)).length,
+        failed: dayRows.filter(isBad).length,
+      };
+    });
+
+    const byIntegration = new Map<number, { count: number; failed: number }>();
+    for (const r of week) {
+      if (r.subscriptionId === null) continue;
+      const entry = byIntegration.get(r.subscriptionId) ?? { count: 0, failed: 0 };
+      entry.count++;
+      if (isBad(r)) entry.failed++;
+      byIntegration.set(r.subscriptionId, entry);
+    }
+    const busiest = [...byIntegration.entries()]
+      .map(([id, v]) => ({ id, name: integrationNameById.get(id) ?? `#${id}`, ...v }))
+      .sort((a, b) => b.count - a.count)
+      .slice(0, 5);
+
+    const latestFailures = rows
+      .filter(isBad)
+      .sort((a, b) => b.startedOn.localeCompare(a.startedOn))
+      .slice(0, 6)
+      .map((r) => ({
+        id: r.id,
+        status: toStatus(r),
+        integrationId: r.subscriptionId,
+        integrationName: r.subscriptionId !== null ? (integrationNameById.get(r.subscriptionId) ?? null) : null,
+        informationTypeCode: r.documentName,
+        on: r.startedOn,
+        exception: r.exception,
+      }));
+
+    return {
+      today: {
+        total: todayRows.length,
+        failed: todayRows.filter(isBad).length,
+        processing: todayRows.filter(isProcessing).length,
+      },
+      yesterdayTotal: yesterdayRows.length,
+      successRate7d,
+      pendingRetries: delayedRes.totalCount,
+      queueAlerts: alertsRaw.filter((a) => a.severity !== "Info").length,
+      trafficByDay,
+      busiest,
+      latestFailures,
+      attention: {
+        failingIntegrations: integrationRows
+          .filter((i) => i.consecutiveFailures > 0)
+          .map((i) => ({ id: i.id, name: i.name, consecutiveFailures: i.consecutiveFailures })),
+        pausedIntegrations: integrationRows.filter((i) => i.paused).map((i) => ({ id: i.id, name: i.name })),
+      },
+    };
+  },
+} satisfies Partial<ApiClient>;
diff --git a/SW.Bitween.Web/ClientApp/src/api/http/documents.ts b/SW.Bitween.Web/ClientApp/src/api/http/documents.ts
new file mode 100644
index 00000000..ad0095f9
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/api/http/documents.ts
@@ -0,0 +1,176 @@
+import type { ApiClient } from "../client";
+import type {
+  InformationType,
+  InformationTypeDetail,
+  InformationTypeFormat,
+  InformationTypeRow,
+  IntegrationType,
+  TrailEntry,
+} from "../types";
+import { exchangeMethods } from "./exchanges";
+import { gatewayMethods } from "./gateways";
+import { get, getEnrichment, post, request } from "./request";
+
+interface SearchyResponse<T> {
+  result: T[];
+  totalCount: number;
+}
+interface RawKeyAndValue {
+  key: string;
+  value: string;
+}
+interface RawDocument {
+  id: number;
+  code: string | null;
+  name: string;
+  documentFormat: InformationTypeFormat;
+  busEnabled: boolean;
+  busMessageTypeName: string | null;
+  duplicateInterval: number;
+  disregardsUnfilteredMessages: boolean;
+  promotedProperties: RawKeyAndValue[] | null;
+}
+interface RawSubscriptionRef {
+  id: number;
+  name: string;
+  type: number | string;
+}
+interface RawTrailEntry {
+  createdOn: string;
+  code: "Created" | "Updated";
+  createdBy: string;
+}
+
+const SUB_TYPE_BY_NUM: Record<number, IntegrationType> = {
+  1: "Internal",
+  2: "ApiCall",
+  4: "Receiving",
+  8: "Aggregation",
+  16: "GatewayApiCall",
+  32: "BusGateway",
+};
+const INTEGRATION_TYPES: IntegrationType[] = [
+  "Receiving",
+  "GatewayApiCall",
+  "BusGateway",
+  "Internal",
+  "ApiCall",
+  "Aggregation",
+];
+/** Enums may arrive as the numeric value or the name in any case. */
+const toIntegrationType = (t: number | string): IntegrationType => {
+  if (typeof t === "number") return SUB_TYPE_BY_NUM[t] ?? "Internal";
+  return INTEGRATION_TYPES.find((k) => k.toLowerCase() === t.toLowerCase()) ?? "Internal";
+};
+
+async function fetchSubscriptionsByDocument(documentId: number): Promise<RawSubscriptionRef[]> {
+  const res = await get<SearchyResponse<RawSubscriptionRef>>(
+    `/subscriptions?filter=${encodeURIComponent(`DocumentId:1:${documentId}`)}`,
+  );
+  return res.result ?? [];
+}
+
+async function fetchTrail(documentId: number): Promise<TrailEntry[]> {
+  const [trail, accountNames] = await Promise.all([
+    get<SearchyResponse<RawTrailEntry>>(`/documents/trail?documentId=${documentId}&limit=8`),
+    get<Record<string, string>>("/accounts?lookup=true"),
+  ]);
+  return (trail.result ?? []).map((t) => ({
+    on: t.createdOn,
+    action: t.code,
+    by: accountNames[t.createdBy] ?? "System",
+    byUserId: accountNames[t.createdBy] ? t.createdBy : undefined,
+  }));
+}
+
+const toInformationType = (d: RawDocument): InformationType => ({
+  id: d.id,
+  code: d.code ?? undefined,
+  name: d.name,
+  format: d.documentFormat,
+  busEnabled: d.busEnabled,
+  busMessageTypeName: d.busMessageTypeName ?? undefined,
+  duplicateIntervalMinutes: d.duplicateInterval,
+  disregardsUnfilteredMessages: d.disregardsUnfilteredMessages,
+  promotedProperties: (d.promotedProperties ?? []).map((p) => ({ key: p.key, path: p.value })),
+  createdOn: "",
+});
+
+async function fetchDetail(id: number): Promise<InformationTypeDetail> {
+  const [d, subs, busGateways, recentExchanges, trail] = await Promise.all([
+    get<RawDocument>(`/documents/${id}`),
+    fetchSubscriptionsByDocument(id),
+    gatewayMethods.listBusGateways(),
+    exchangeMethods.searchExchanges({ informationTypeId: id, offset: 0, limit: 8 }),
+    fetchTrail(id),
+  ]);
+  return {
+    ...toInformationType(d),
+    integrationSetups: subs.map((s) => ({ id: s.id, name: s.name, type: toIntegrationType(s.type) })),
+    busGateways: busGateways
+      .filter((g) => g.informationTypeId === id)
+      .map((g) => ({ gatewayId: g.id, gatewayName: g.name })),
+    trail,
+    recentExchanges: recentExchanges.result.map((x) => ({
+      id: x.id,
+      partnerName: x.partnerName ?? undefined,
+      informationTypeCode: x.informationTypeCode,
+      status: x.status,
+      on: x.startedOn,
+    })),
+  };
+}
+
+export const documentMethods = {
+  async listInformationTypes(): Promise<InformationTypeRow[]> {
+    const [res, subs] = await Promise.all([
+      get<SearchyResponse<RawDocument>>("/documents"),
+      getEnrichment<SearchyResponse<{ documentId: number }>>("/subscriptions", { result: [], totalCount: 0 }),
+    ]);
+    const countByDocument = new Map<number, number>();
+    for (const s of subs.result ?? [])
+      countByDocument.set(s.documentId, (countByDocument.get(s.documentId) ?? 0) + 1);
+    return (res.result ?? []).map((d) => ({ ...toInformationType(d), usedByCount: countByDocument.get(d.id) ?? 0 }));
+  },
+
+  getInformationType: fetchDetail,
+
+  async createInformationType(input: {
+    name: string;
+    code?: string;
+    format: InformationTypeFormat;
+    busEnabled?: boolean;
+    busMessageTypeName?: string;
+  }): Promise<InformationType> {
+    const id = await post<number>("/documents", {
+      code: input.code?.trim() || undefined,
+      name: input.name,
+      documentFormat: input.format,
+      busEnabled: input.busEnabled ?? false,
+      busMessageTypeName: input.busEnabled ? input.busMessageTypeName : undefined,
+    });
+    return fetchDetail(id);
+  },
+
+  async updateInformationType(
+    id: number,
+    changes: Omit<InformationType, "id" | "createdOn">,
+  ): Promise<InformationType> {
+    await post(`/documents/${id}`, {
+      id,
+      code: changes.code?.trim() || undefined,
+      name: changes.name,
+      documentFormat: changes.format,
+      busEnabled: changes.busEnabled,
+      busMessageTypeName: changes.busEnabled ? changes.busMessageTypeName : undefined,
+      duplicateInterval: changes.duplicateIntervalMinutes,
+      disregardsUnfilteredMessages: changes.disregardsUnfilteredMessages,
+      promotedProperties: changes.promotedProperties.map((p) => ({ key: p.key, value: p.path })),
+    });
+    return fetchDetail(id);
+  },
+
+  async deleteInformationType(id: number): Promise<void> {
+    await request(`/documents/${id}`, { method: "DELETE" });
+  },
+} satisfies Partial<ApiClient>;
diff --git a/SW.Bitween.Web/ClientApp/src/api/http/exchanges.ts b/SW.Bitween.Web/ClientApp/src/api/http/exchanges.ts
new file mode 100644
index 00000000..2b0d3c84
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/api/http/exchanges.ts
@@ -0,0 +1,233 @@
+import type { ApiClient } from "../client";
+import type {
+  ExchangeQuery,
+  ExchangeRow,
+  ExchangeStatus,
+  Paged,
+  ScheduledRetryQuery,
+  ScheduledRetryRow,
+} from "../types";
+import { partnerMethods } from "./partners";
+import { get, post } from "./request";
+
+// ——— backend shapes (camelCase over the wire) ———
+interface SearchyResponse<T> {
+  result: T[];
+  totalCount: number;
+}
+interface RawXchangeRow {
+  id: string;
+  subscriptionId: number | null;
+  subscriptionName: string | null;
+  documentId: number;
+  documentName: string;
+  mapperId: string | null;
+  status: boolean | null;
+  exception: string | null;
+  finishedOn: string | null;
+  startedOn: string;
+  inputFileName: string | null;
+  outputFileName: string | null;
+  responseFileName: string | null;
+  inputKey: string | null;
+  outputKey: string | null;
+  responseKey: string | null;
+  promotedProperties: Record<string, string> | null;
+  retryFor: string | null;
+  aggregationXchangeId: string | null;
+  responseBad: boolean | null;
+  correlationId: string | null;
+  partnerId: number | null;
+  scheduledRetryOn: string | null;
+}
+interface RawDelayedRetryRow {
+  id: string;
+  on: string;
+  subscriptionId: number | null;
+  subscriptionName: string | null;
+  documentId: number;
+  documentName: string;
+  exception: string | null;
+  startedOn: string;
+  retryPolicyId: number | null;
+  retryPolicyName: string | null;
+}
+
+/**
+ * The backend has no real ExchangeStatus enum — it's derived from two
+ * nullable booleans. `status == null` while still running; once set, a bad
+ * *response* (the handler delivered but the receiver answered with an error)
+ * is distinct from an outright failure.
+ */
+const deriveStatus = (raw: Pick<RawXchangeRow, "status" | "responseBad">): ExchangeStatus =>
+  raw.status === null ? "processing" : !raw.status ? "failed" : raw.responseBad ? "badResponse" : "success";
+
+const STATUS_FILTER: Record<ExchangeStatus, number> = {
+  processing: 0,
+  success: 1,
+  badResponse: 2,
+  failed: 3,
+};
+
+const toExchangeRow = (raw: RawXchangeRow, partnerNameById: Map<number, string>): ExchangeRow => ({
+  id: raw.id,
+  status: deriveStatus(raw),
+  integrationId: raw.subscriptionId,
+  integrationName: raw.subscriptionName,
+  informationTypeId: raw.documentId,
+  informationTypeCode: raw.documentName,
+  partnerId: raw.partnerId,
+  partnerName: raw.partnerId !== null ? (partnerNameById.get(raw.partnerId) ?? null) : null,
+  startedOn: raw.startedOn,
+  finishedOn: raw.finishedOn,
+  correlationId: raw.correlationId,
+  retryFor: raw.retryFor,
+  aggregationXchangeId: raw.aggregationXchangeId,
+  scheduledRetryOn: raw.scheduledRetryOn,
+  exception: raw.exception,
+  promotedProperties: raw.promotedProperties,
+  mapperSkipped: raw.mapperId === null,
+  // Search's projection never populates file sizes/hashes (always 0 at the
+  // source) — show the name, which is real, with a size of 0 rather than
+  // fabricating one. Existence is keyed off `*Key` (backend only emits one once
+  // the file actually has bytes), not the file name, since gateway/manually
+  // created exchanges have no name yet content still exists.
+  files: {
+    input: raw.inputKey ? { name: raw.inputFileName ?? "input", size: 0, key: raw.inputKey } : null,
+    mapped: raw.outputKey ? { name: raw.outputFileName ?? "mapped", size: 0, key: raw.outputKey } : null,
+    handled: raw.responseKey ? { name: raw.responseFileName ?? "handled", size: 0, key: raw.responseKey } : null,
+  },
+});
+
+const toScheduledRetryRow = (raw: RawDelayedRetryRow): ScheduledRetryRow => ({
+  id: raw.id,
+  on: raw.on,
+  integrationId: raw.subscriptionId,
+  integrationName: raw.subscriptionName,
+  informationTypeId: raw.documentId,
+  informationTypeCode: raw.documentName,
+  exception: raw.exception,
+  startedOn: raw.startedOn,
+  retryPolicyId: raw.retryPolicyId,
+  retryPolicyName: raw.retryPolicyName,
+});
+
+/**
+ * The backend's date-`Range` filter (rule 21) is unconditionally broken: its
+ * shared parser (`SearchyFilter.cs`, SW-PrimitiveTypes) does `DateTime.Parse`
+ * with no `DateTimeStyles`, which can only produce `Local` or `Unspecified`
+ * `Kind` — Npgsql then refuses to bind it to a `timestamptz` column and the
+ * whole search 500s, regardless of what the client sends. Two scalar
+ * comparisons (`GreaterThanOrEquals`/`LessThanOrEquals`, rules 6/8) go
+ * through a different code path and work correctly — use those instead.
+ */
+function buildExchangeQuery(query: ExchangeQuery): string {
+  const params = new URLSearchParams();
+  if (query.status) params.append("filter", `StatusFilter:1:${STATUS_FILTER[query.status]}`);
+  if (query.integrationId !== undefined) params.append("filter", `SubscriptionId:1:${query.integrationId}`);
+  if (query.partnerId !== undefined) params.append("filter", `PartnerId:1:${query.partnerId}`);
+  if (query.informationTypeId !== undefined) params.append("filter", `DocumentId:1:${query.informationTypeId}`);
+  if (query.ids?.trim()) {
+    const ids = query.ids.split(/[\s,|]+/).filter(Boolean);
+    params.append("filter", `Id:4:text|${ids.join("|")}`);
+  }
+  if (query.correlationId?.trim()) params.append("filter", `CorrelationId:1:${query.correlationId.trim()}`);
+  if (query.property?.trim()) params.append("filter", `PromotedPropertiesRaw:4:${query.property.trim()}`);
+  if (query.from) params.append("filter", `StartedOn:6:${query.from}`);
+  if (query.to) params.append("filter", `StartedOn:8:${query.to}`);
+  params.set("page", String(Math.floor(query.offset / query.limit)));
+  params.set("size", String(query.limit));
+  return params.toString();
+}
+
+function buildScheduledRetryQuery(query: ScheduledRetryQuery): string {
+  const params = new URLSearchParams();
+  if (query.integrationId !== undefined) params.append("filter", `SubscriptionId:1:${query.integrationId}`);
+  if (query.informationTypeId !== undefined) params.append("filter", `DocumentId:1:${query.informationTypeId}`);
+  if (query.exception?.trim()) params.append("filter", `Exception:4:${query.exception.trim()}`);
+  if (query.from) params.append("filter", `On:6:${query.from}`);
+  if (query.to) params.append("filter", `On:8:${query.to}`);
+  params.set("page", String(Math.floor(query.offset / query.limit)));
+  params.set("size", String(query.limit));
+  return params.toString();
+}
+
+async function partnerNameMap(): Promise<Map<number, string>> {
+  const partners = await partnerMethods.listPartners();
+  return new Map(partners.map((p) => [p.id, p.name]));
+}
+
+export const exchangeMethods = {
+  async getExchangeDocument(key: string): Promise<string> {
+    const res = await get<{ data: string; key: string }>(`/bitweendocs?documentKey=${encodeURIComponent(key)}`);
+    return res.data;
+  },
+
+  async searchExchanges(query: ExchangeQuery): Promise<Paged<ExchangeRow>> {
+    const [res, partnerNameById] = await Promise.all([
+      get<SearchyResponse<RawXchangeRow>>(`/xchanges?${buildExchangeQuery(query)}`),
+      partnerNameMap(),
+    ]);
+    return { result: res.result.map((r) => toExchangeRow(r, partnerNameById)), total: res.totalCount };
+  },
+
+  async retryExchange(id: string, { reset }: { reset: boolean }): Promise<{ id: string }> {
+    await post(`/xchanges/${id}/retry`, { reason: "Manual retry", reset });
+    // Retry.cs returns null — look up the retry it just created (the newest
+    // xchange with retryFor == id) for a real id to hand back to the caller.
+    const res = await get<SearchyResponse<RawXchangeRow>>(
+      `/xchanges?filter=${encodeURIComponent(`RetryFor:1:${id}`)}&sort=StartedOn:2&size=1`,
+    );
+    return { id: res.result[0]?.id ?? id };
+  },
+
+  async bulkRetryExchanges(ids: string[], { reset }: { reset: boolean }): Promise<{ retried: number; skipped: number }> {
+    // BulkRetry.cs silently skips ids that already have a scheduled auto-retry
+    // and returns null — mirror its exact skip rule ourselves beforehand so we
+    // can report real counts back to the caller.
+    const idFilter = `Id:4:text|${ids.join("|")}`;
+    const current = await get<SearchyResponse<RawXchangeRow>>(
+      `/xchanges?filter=${encodeURIComponent(idFilter)}&size=${ids.length}`,
+    );
+    // The Id filter also matches retryFor/aggregationXchangeId — narrow back
+    // down to exactly the requested ids.
+    const byId = new Map(current.result.filter((r) => ids.includes(r.id)).map((r) => [r.id, r]));
+    const skipped = ids.filter((id) => byId.get(id)?.scheduledRetryOn != null).length;
+    await post("/xchanges/bulkretry", { ids, reason: "Bulk retry", reset });
+    return { retried: ids.length - skipped, skipped };
+  },
+
+  async createExchange(input: {
+    target: "integration" | "informationType";
+    integrationId?: number;
+    informationTypeId?: number;
+    data: string;
+  }): Promise<{ id: string }> {
+    const filter =
+      input.target === "integration"
+        ? `SubscriptionId:1:${input.integrationId}`
+        : `DocumentId:1:${input.informationTypeId}`;
+    await post("/xchanges", {
+      option: input.target === "integration" ? "SubscriberId" : "DocumentId",
+      subscriberId: input.target === "integration" ? input.integrationId : null,
+      documentId: input.target === "informationType" ? input.informationTypeId : null,
+      data: input.data,
+    });
+    // Create.cs returns null too — look up the exchange it just created. When
+    // addressed at an information type, every matching integration gets its
+    // own exchange; we can only link to one, so take the newest.
+    const res = await get<SearchyResponse<RawXchangeRow>>(
+      `/xchanges?filter=${encodeURIComponent(filter)}&sort=StartedOn:2&size=1`,
+    );
+    return { id: res.result[0]?.id ?? "" };
+  },
+
+  async searchScheduledRetries(query: ScheduledRetryQuery): Promise<Paged<ScheduledRetryRow>> {
+    const res = await get<SearchyResponse<RawDelayedRetryRow>>(`/delayedretries?${buildScheduledRetryQuery(query)}`);
+    return { result: res.result.map(toScheduledRetryRow), total: res.totalCount };
+  },
+
+  async runScheduledRetryNow(id: string): Promise<void> {
+    await post(`/delayedretries/${id}/runnow`, {});
+  },
+} satisfies Partial<ApiClient>;
diff --git a/SW.Bitween.Web/ClientApp/src/api/http/gateways.ts b/SW.Bitween.Web/ClientApp/src/api/http/gateways.ts
new file mode 100644
index 00000000..0c5d25b7
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/api/http/gateways.ts
@@ -0,0 +1,211 @@
+import type { ApiClient } from "../client";
+import type {
+  ApiGateway,
+  ApiGatewayAttachment,
+  ApiGatewayDetail,
+  ApiGatewayRow,
+  BusGateway,
+  BusGatewayDetail,
+  BusGatewayRoute,
+  BusGatewayRow,
+  MatchGroup,
+} from "../types";
+import { toMatchGroup, toRawMatchExpression, type RawMatchSpec } from "./matchExpression";
+import { get, post, request } from "./request";
+
+// ——— backend shapes (camelCase over the wire) ———
+interface SearchyResponse<T> {
+  result: T[];
+  totalCount: number;
+}
+interface RawApiGatewayPartner {
+  partnerId: number;
+  subscriptionId: number;
+  partnerName: string;
+  subscriptionName: string;
+}
+interface RawApiGateway {
+  id: number;
+  name: string;
+  urlName: string;
+  partnersCount: number | null;
+  // Search's list projection includes this too (backend change made alongside
+  // this batch) — but keep it optional since Create's bare POST response has none.
+  partners: RawApiGatewayPartner[] | null;
+}
+interface RawBusGatewayRoute {
+  id: number;
+  subscriptionId: number;
+  subscriptionName: string | null;
+  partnerId: number | null;
+  partnerName: string | null;
+  matchExpression: RawMatchSpec | null;
+}
+interface RawBusGateway {
+  id: number;
+  name: string;
+  documentId: number;
+  documentName: string | null;
+  routesCount: number | null;
+  routes: RawBusGatewayRoute[] | null;
+}
+
+const toApiGatewayAttachment = (p: RawApiGatewayPartner): ApiGatewayAttachment => ({
+  partnerId: p.partnerId,
+  partnerName: p.partnerName,
+  integrationId: p.subscriptionId,
+  integrationName: p.subscriptionName,
+});
+
+const toApiGatewayRow = (raw: RawApiGateway): ApiGatewayRow => ({
+  id: raw.id,
+  name: raw.name,
+  urlName: raw.urlName,
+  createdOn: "",
+  partnerCount: raw.partnersCount ?? raw.partners?.length ?? 0,
+  attachments: (raw.partners ?? []).map(toApiGatewayAttachment),
+});
+
+const toApiGatewayDetail = (raw: RawApiGateway): ApiGatewayDetail => ({
+  id: raw.id,
+  name: raw.name,
+  urlName: raw.urlName,
+  createdOn: "",
+  attachments: (raw.partners ?? []).map(toApiGatewayAttachment),
+});
+
+const toBusGatewayRoute = (r: RawBusGatewayRoute): BusGatewayRoute => ({
+  id: r.id,
+  integrationId: r.subscriptionId,
+  integrationName: r.subscriptionName ?? "",
+  partnerId: r.partnerId,
+  partnerName: r.partnerName,
+  matchExpression: toMatchGroup(r.matchExpression),
+});
+
+const toBusGatewayRow = (raw: RawBusGateway): BusGatewayRow => ({
+  id: raw.id,
+  name: raw.name,
+  informationTypeId: raw.documentId,
+  createdOn: "",
+  informationTypeCode: raw.documentName ?? "UNKNOWN",
+  routeCount: raw.routesCount ?? raw.routes?.length ?? 0,
+  routes: (raw.routes ?? []).map(toBusGatewayRoute),
+});
+
+const toBusGatewayDetail = (raw: RawBusGateway): BusGatewayDetail => ({
+  id: raw.id,
+  name: raw.name,
+  informationTypeId: raw.documentId,
+  createdOn: "",
+  informationTypeCode: raw.documentName ?? "UNKNOWN",
+  informationTypeName: raw.documentName ?? "Unknown",
+  routes: (raw.routes ?? []).map(toBusGatewayRoute),
+});
+
+export const gatewayMethods = {
+  // ——— API gateways ———
+
+  async listApiGateways(): Promise<ApiGatewayRow[]> {
+    const res = await get<SearchyResponse<RawApiGateway>>("/apigateways");
+    return (res.result ?? []).map(toApiGatewayRow);
+  },
+
+  async getApiGateway(id: number): Promise<ApiGatewayDetail> {
+    return toApiGatewayDetail(await get<RawApiGateway>(`/apigateways/${id}`));
+  },
+
+  async createApiGateway({ name, urlName }: { name: string; urlName: string }): Promise<ApiGateway> {
+    const id = await post<number>("/apigateways", { name, urlName });
+    return { id, name, urlName, createdOn: "" };
+  },
+
+  async updateApiGateway(id: number, changes: { name: string; urlName: string }): Promise<ApiGateway> {
+    await post(`/apigateways/${id}`, { name: changes.name, urlName: changes.urlName });
+    return { id, name: changes.name, urlName: changes.urlName, createdOn: "" };
+  },
+
+  async deleteApiGateway(id: number): Promise<void> {
+    await request(`/apigateways/${id}`, { method: "DELETE" });
+  },
+
+  async attachGatewayPartner(id: number, input: { partnerId: number; integrationId: number }): Promise<void> {
+    await post(`/apigateways/${id}/addpartner`, { partnerId: input.partnerId, subscriptionId: input.integrationId });
+  },
+
+  async updateGatewayAttachment(id: number, input: { partnerId: number; integrationId: number }): Promise<void> {
+    // Not a plain POST to updatepartner: ApiGatewayPartner's PK is the composite
+    // (gatewayId, partnerId, subscriptionId), and the backend's UpdatePartner
+    // handler tries to mutate subscriptionId in place on a tracked entity — EF
+    // Core rejects changes to a key column. Remove-then-add sidesteps it.
+    await post(`/apigateways/${id}/removepartner`, { partnerId: input.partnerId });
+    await post(`/apigateways/${id}/addpartner`, { partnerId: input.partnerId, subscriptionId: input.integrationId });
+  },
+
+  async removeGatewayAttachment(id: number, partnerId: number): Promise<void> {
+    await post(`/apigateways/${id}/removepartner`, { partnerId });
+  },
+
+  // ——— bus gateways ———
+
+  async listBusGateways(): Promise<BusGatewayRow[]> {
+    const res = await get<SearchyResponse<RawBusGateway>>("/busgateways");
+    return (res.result ?? []).map(toBusGatewayRow);
+  },
+
+  async getBusGateway(id: number): Promise<BusGatewayDetail> {
+    return toBusGatewayDetail(await get<RawBusGateway>(`/busgateways/${id}`));
+  },
+
+  async createBusGateway({
+    name,
+    informationTypeId,
+  }: {
+    name: string;
+    informationTypeId: number;
+  }): Promise<BusGateway> {
+    const id = await post<number>("/busgateways", { name, documentId: informationTypeId });
+    return { id, name, informationTypeId, createdOn: "" };
+  },
+
+  async updateBusGateway(id: number, changes: { name: string }): Promise<BusGateway> {
+    // The bound information type is fixed at creation — Update.cs silently
+    // ignores documentId — but the request DTO still requires a value, so
+    // fetch the current one to round-trip it rather than sending a bogus 0.
+    const current = await get<RawBusGateway>(`/busgateways/${id}`);
+    await post(`/busgateways/${id}`, { name: changes.name, documentId: current.documentId });
+    return { id, name: changes.name, informationTypeId: current.documentId, createdOn: "" };
+  },
+
+  async deleteBusGateway(id: number): Promise<void> {
+    await request(`/busgateways/${id}`, { method: "DELETE" });
+  },
+
+  async addBusRoute(
+    id: number,
+    input: { integrationId: number; partnerId: number | null; matchExpression: MatchGroup | null },
+  ): Promise<void> {
+    await post(`/busgateways/${id}/addroute`, {
+      subscriptionId: input.integrationId,
+      partnerId: input.partnerId,
+      matchExpression: toRawMatchExpression(input.matchExpression),
+    });
+  },
+
+  async updateBusRoute(
+    id: number,
+    routeId: number,
+    input: { integrationId: number; partnerId: number | null; matchExpression: MatchGroup | null },
+  ): Promise<void> {
+    await post(`/busgateways/${id}/updateroute`, {
+      routeId,
+      subscriptionId: input.integrationId,
+      partnerId: input.partnerId,
+      matchExpression: toRawMatchExpression(input.matchExpression),
+    });
+  },
+
+  async removeBusRoute(id: number, routeId: number): Promise<void> {
+    await post(`/busgateways/${id}/removeroute`, { routeId });
+  },
+} satisfies Partial<ApiClient>;
diff --git a/SW.Bitween.Web/ClientApp/src/api/http/globalValues.ts b/SW.Bitween.Web/ClientApp/src/api/http/globalValues.ts
new file mode 100644
index 00000000..fec08f2a
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/api/http/globalValues.ts
@@ -0,0 +1,129 @@
+import type { ApiClient } from "../client";
+import type { GlobalValuesSet, GlobalValuesSetDetail, GlobalValuesSetRow, IntegrationType, ValueSetUsage } from "../types";
+import { get, getEnrichment, post } from "./request";
+
+interface SearchyResponse<T> {
+  result: T[];
+  totalCount: number;
+}
+interface RawValueSet {
+  id: string;
+  name: string;
+  values: Record<string, string> | null;
+}
+interface RawKeyAndValue {
+  key: string;
+  value: string;
+}
+interface RawSubscriptionForUsage {
+  id: number;
+  name: string;
+  type: number | string;
+  mapperProperties: RawKeyAndValue[] | null;
+  handlerProperties: RawKeyAndValue[] | null;
+  receiverProperties: RawKeyAndValue[] | null;
+  validatorProperties: RawKeyAndValue[] | null;
+}
+
+const SUB_TYPE_BY_NUM: Record<number, IntegrationType> = {
+  1: "Internal",
+  2: "ApiCall",
+  4: "Receiving",
+  8: "Aggregation",
+  16: "GatewayApiCall",
+  32: "BusGateway",
+};
+const INTEGRATION_TYPES: IntegrationType[] = [
+  "Receiving",
+  "GatewayApiCall",
+  "BusGateway",
+  "Internal",
+  "ApiCall",
+  "Aggregation",
+];
+/** Enums may arrive as the numeric value or the name in any case. */
+const toIntegrationType = (t: number | string): IntegrationType => {
+  if (typeof t === "number") return SUB_TYPE_BY_NUM[t] ?? "Internal";
+  return INTEGRATION_TYPES.find((k) => k.toLowerCase() === t.toLowerCase()) ?? "Internal";
+};
+
+// GlobalAdapterValuesSet has no CreatedOn column on the backend.
+const toRow = (r: RawValueSet): GlobalValuesSet => ({
+  id: r.id,
+  name: r.name,
+  values: r.values ?? {},
+  createdOn: "",
+});
+
+async function fetchAllSubscriptionsForUsage(): Promise<RawSubscriptionForUsage[]> {
+  const res = await getEnrichment<SearchyResponse<RawSubscriptionForUsage>>("/subscriptions", { result: [], totalCount: 0 });
+  return res.result ?? [];
+}
+
+/**
+ * Backend token resolution (StartupValuesFiller.Fill) splits on the first "."
+ * only and puts no character-class restriction on the set id or key, so match
+ * the same way here rather than a restrictive charset.
+ */
+const GLOBAL_TOKEN_RE = /\{\{globals\.([^.]+)\.([^}]+)\}\}/g;
+
+function globalKeysReferencedBy(sub: RawSubscriptionForUsage, setId: string): string[] {
+  const keys = new Set<string>();
+  const values = [
+    ...(sub.mapperProperties ?? []),
+    ...(sub.handlerProperties ?? []),
+    ...(sub.receiverProperties ?? []),
+    ...(sub.validatorProperties ?? []),
+  ];
+  for (const { value } of values) {
+    if (!value) continue;
+    for (const m of value.matchAll(GLOBAL_TOKEN_RE)) {
+      if (m[1] === setId) keys.add(m[2]);
+    }
+  }
+  return [...keys];
+}
+
+export const globalValuesMethods = {
+  async listValueSets(): Promise<GlobalValuesSetRow[]> {
+    const [res, subs] = await Promise.all([
+      get<SearchyResponse<RawValueSet>>("/globaladaptervaluessets"),
+      fetchAllSubscriptionsForUsage(),
+    ]);
+    return (res.result ?? []).map((r) => ({
+      ...toRow(r),
+      usedByCount: subs.filter((s) => globalKeysReferencedBy(s, r.id).length > 0).length,
+    }));
+  },
+
+  async getValueSet(id: string): Promise<GlobalValuesSetDetail> {
+    const [r, subs] = await Promise.all([
+      get<RawValueSet>(`/globaladaptervaluessets/${id}`),
+      fetchAllSubscriptionsForUsage(),
+    ]);
+    const usedBy: ValueSetUsage[] = subs
+      .map((s) => ({
+        integrationSetup: { id: s.id, name: s.name, type: toIntegrationType(s.type) },
+        keys: globalKeysReferencedBy(s, id),
+      }))
+      .filter((u) => u.keys.length > 0);
+    return { ...toRow(r), usedBy };
+  },
+
+  async createValueSet(input: { id: string; name: string; values: Record<string, string> }): Promise<GlobalValuesSetRow> {
+    await post("/globaladaptervaluessets", { id: input.id, name: input.name, values: input.values });
+    return { ...toRow(input), usedByCount: 0 };
+  },
+
+  async updateValueSet(
+    id: string,
+    changes: { name: string; values: Record<string, string> },
+  ): Promise<GlobalValuesSetRow> {
+    await post(`/globaladaptervaluessets/${id}`, { name: changes.name, values: changes.values });
+    return { ...toRow({ id, ...changes }), usedByCount: 0 };
+  },
+
+  async deleteValueSet(id: string): Promise<void> {
+    await post(`/globaladaptervaluessets/${id}/delete`, {});
+  },
+} satisfies Partial<ApiClient>;
diff --git a/SW.Bitween.Web/ClientApp/src/api/http/httpClient.ts b/SW.Bitween.Web/ClientApp/src/api/http/httpClient.ts
new file mode 100644
index 00000000..9b3dd3e7
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/api/http/httpClient.ts
@@ -0,0 +1,51 @@
+import type { ApiClient } from "../client";
+import { NotWiredError } from "../types";
+import { adapterMethods } from "./adapters";
+import { dashboardMethods } from "./dashboard";
+import { documentMethods } from "./documents";
+import { exchangeMethods } from "./exchanges";
+import { gatewayMethods } from "./gateways";
+import { globalValuesMethods } from "./globalValues";
+import { integrationMethods } from "./integrations";
+import { mapperMethods } from "./mappers";
+import { notifierMethods } from "./notifiers";
+import { partnerMethods } from "./partners";
+import { queueHealthMethods } from "./queueHealth";
+import { retryPolicyMethods } from "./retryPolicies";
+import { sessionMethods } from "./session";
+import { settingsMethods } from "./settings";
+import { teamMethods } from "./team";
+import { workGroupMethods } from "./workGroups";
+
+/**
+ * The single real client. Wired domains are merged in here; every other
+ * ApiClient method resolves to a rejected NotWiredError so its screen shows an
+ * honest "Not connected yet" state instead of fake data. Each batch adds its
+ * domain module to `wired` (see BACKEND_WIRING_PLAN §5–6).
+ */
+const wired: Partial<ApiClient> = {
+  ...sessionMethods,
+  ...partnerMethods,
+  ...documentMethods,
+  ...globalValuesMethods,
+  ...workGroupMethods,
+  ...retryPolicyMethods,
+  ...integrationMethods,
+  ...adapterMethods,
+  ...gatewayMethods,
+  ...exchangeMethods,
+  ...queueHealthMethods,
+  ...dashboardMethods,
+  ...mapperMethods,
+  ...notifierMethods,
+  ...teamMethods,
+  ...settingsMethods,
+};
+
+export const httpClient: ApiClient = new Proxy(wired, {
+  get(target, prop, receiver) {
+    if (typeof prop !== "string" || prop in target) return Reflect.get(target, prop, receiver);
+    // Anything not yet wired: a callable that rejects clearly, so `await api.x()` fails honestly.
+    return () => Promise.reject(new NotWiredError(prop));
+  },
+}) as ApiClient;
diff --git a/SW.Bitween.Web/ClientApp/src/api/http/integrations.ts b/SW.Bitween.Web/ClientApp/src/api/http/integrations.ts
new file mode 100644
index 00000000..3e8907c5
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/api/http/integrations.ts
@@ -0,0 +1,397 @@
+import type { ApiClient } from "../client";
+import {
+  ApiRequestError,
+  type Integration,
+  type IntegrationDetail,
+  type IntegrationInfo,
+  type IntegrationRow,
+  type IntegrationType,
+  type Schedule,
+} from "../types";
+import { schedulesSummary } from "../../lib/schedules";
+import { documentMethods } from "./documents";
+import { exchangeMethods } from "./exchanges";
+import { gatewayMethods } from "./gateways";
+import { partnerMethods } from "./partners";
+import { get, post, request } from "./request";
+import { toMatchGroup, toRawMatchExpression, type RawMatchSpec } from "./matchExpression";
+
+// ——— backend shapes (camelCase over the wire) ———
+interface SearchyResponse<T> {
+  result: T[];
+  totalCount: number;
+}
+interface RawKeyAndValue {
+  key: string;
+  value: string;
+}
+interface RawSchedule {
+  recurrence: Schedule["recurrence"];
+  days: number;
+  hours: number;
+  minutes: number;
+  backwards: boolean;
+}
+
+interface RawSubscription {
+  id?: number;
+  name: string;
+  documentId: number;
+  partnerId: number | null;
+  aggregationForId: number | null;
+  type: string;
+  handlerId: string | null;
+  mapperId: string | null;
+  receiverId: string | null;
+  validatorId: string | null;
+  inactive: boolean;
+  temporary: boolean;
+  categoryId: number | null;
+  handlerProperties: RawKeyAndValue[] | null;
+  mapperProperties: RawKeyAndValue[] | null;
+  receiverProperties: RawKeyAndValue[] | null;
+  validatorProperties: RawKeyAndValue[] | null;
+  documentFilter: RawKeyAndValue[] | null;
+  matchExpression: RawMatchSpec | null;
+  workGroupId: number | null;
+  retryPolicyId: number | null;
+  customRetryPolicy: unknown | null;
+  schedules: RawSchedule[] | null;
+  responseSubscriptionId: number | null;
+  responseMessageTypeName: string | null;
+  receiveOn: string | null;
+  aggregateOn: string | null;
+  pausedOn: string | null;
+  isRunning: boolean | null;
+  consecutiveFailures: number;
+  lastException: string | null;
+  aggregationTarget?: string;
+}
+
+const SUB_TYPE_BY_NUM: Record<number, IntegrationType> = {
+  1: "Internal",
+  2: "ApiCall",
+  4: "Receiving",
+  8: "Aggregation",
+  16: "GatewayApiCall",
+  32: "BusGateway",
+};
+const INTEGRATION_TYPES: IntegrationType[] = [
+  "Receiving",
+  "GatewayApiCall",
+  "BusGateway",
+  "Internal",
+  "ApiCall",
+  "Aggregation",
+];
+/** Enums serialize as their C# member name string, but guard the numeric case too. */
+const toIntegrationType = (t: number | string): IntegrationType =>
+  typeof t === "number"
+    ? (SUB_TYPE_BY_NUM[t] ?? "Internal")
+    : (INTEGRATION_TYPES.find((k) => k.toLowerCase() === t.toLowerCase()) ?? "Internal");
+
+// Empty-valued properties are dropped: an adapter property with no value means
+// "not set", and keeping it would make a freshly-cleared field compare unequal to
+// stored data that never had the key — leaving the Save bar up after an undo.
+const toRecord = (kvs: RawKeyAndValue[] | null): Record<string, string> =>
+  Object.fromEntries((kvs ?? []).filter((kv) => kv.value !== "").map((kv) => [kv.key, kv.value]));
+const toKvArray = (record: Record<string, string>): RawKeyAndValue[] =>
+  Object.entries(record).map(([key, value]) => ({ key, value }));
+
+const toSchedules = (raw: RawSchedule[] | null): Schedule[] =>
+  (raw ?? []).map((s) => ({
+    recurrence: s.recurrence,
+    days: s.days,
+    hours: s.hours,
+    minutes: s.minutes,
+    backwards: s.backwards,
+  }));
+const toRawSchedules = (schedules: Schedule[]): RawSchedule[] =>
+  schedules.map((s) => ({
+    recurrence: s.recurrence,
+    days: s.days,
+    hours: s.hours,
+    minutes: s.minutes,
+    backwards: s.backwards,
+  }));
+
+function toIntegration(raw: RawSubscription, idOverride?: number): Integration {
+  return {
+    id: raw.id ?? idOverride!,
+    name: raw.name,
+    type: toIntegrationType(raw.type),
+    informationTypeId: raw.documentId,
+    partnerId: raw.partnerId,
+    enabled: !raw.inactive,
+    pausedOn: raw.pausedOn ?? null,
+    workGroupId: raw.workGroupId ?? null,
+    retryPolicyId: raw.retryPolicyId ?? null,
+    receiverId: raw.receiverId ?? null,
+    receiverProperties: toRecord(raw.receiverProperties),
+    validatorId: raw.validatorId ?? null,
+    validatorProperties: toRecord(raw.validatorProperties),
+    mapperId: raw.mapperId ?? null,
+    mapperProperties: toRecord(raw.mapperProperties),
+    handlerId: raw.handlerId ?? null,
+    handlerProperties: toRecord(raw.handlerProperties),
+    matchExpression: toMatchGroup(raw.matchExpression),
+    schedules: toSchedules(raw.schedules),
+    responseIntegrationId: raw.responseSubscriptionId ?? null,
+    responseMessageTypeName: raw.responseMessageTypeName ?? null,
+    aggregationForId: raw.aggregationForId ?? null,
+    isRunning: raw.isRunning ?? false,
+    nextReceiveOn: raw.receiveOn ?? null,
+    consecutiveFailures: raw.consecutiveFailures ?? 0,
+    lastException: raw.lastException ?? null,
+    // Subscription has no CreatedOn column on the backend.
+    createdOn: "",
+  };
+}
+
+async function fetchRaw(id: number): Promise<RawSubscription> {
+  const raw = await get<RawSubscription | null>(`/subscriptions/${id}`);
+  if (!raw) throw new ApiRequestError("NOT_FOUND", "This integration no longer exists.");
+  return raw;
+}
+
+async function fetchAllRaw(): Promise<RawSubscription[]> {
+  const res = await get<SearchyResponse<RawSubscription>>("/subscriptions");
+  return res.result ?? [];
+}
+
+type UpdatableFields = Partial<
+  Pick<
+    Integration,
+    | "name"
+    | "enabled"
+    | "workGroupId"
+    | "retryPolicyId"
+    | "receiverId"
+    | "receiverProperties"
+    | "validatorId"
+    | "validatorProperties"
+    | "mapperId"
+    | "mapperProperties"
+    | "handlerId"
+    | "handlerProperties"
+    | "matchExpression"
+    | "schedules"
+    | "responseIntegrationId"
+    | "responseMessageTypeName"
+  >
+>;
+
+/**
+ * POST /subscriptions/{id} replaces the whole record, and Update.cs's model
+ * (SubscriptionUpdate) carries several fields this UI never shows (categoryId,
+ * aggregationTarget, temporary, …) — omitting them would silently reset them
+ * to their type default. So every write reads the current full record first
+ * and splices `changes` on top of it, mirroring writePartner()'s pattern.
+ *
+ * Secret adapter property values arrive masked as the literal string
+ * "__private__" (Get.cs's PrivateSentinel); passed straight through unedited,
+ * Update.cs's own merge logic restores the real stored value — this file
+ * never needs to know about the sentinel itself.
+ */
+async function applyChanges(id: number, current: RawSubscription, changes: UpdatableFields): Promise<void> {
+  await post(`/subscriptions/${id}`, {
+    name: changes.name ?? current.name,
+    documentId: current.documentId,
+    partnerId: current.partnerId,
+    aggregationForId: current.aggregationForId,
+    categoryId: current.categoryId,
+    inactive: changes.enabled !== undefined ? !changes.enabled : current.inactive,
+    workGroupId: changes.workGroupId !== undefined ? changes.workGroupId : current.workGroupId,
+    // This UI only ever assigns a named policy, never an inline one.
+    retryPolicyId: changes.retryPolicyId !== undefined ? changes.retryPolicyId : current.retryPolicyId,
+    customRetryPolicy: null,
+    receiverId: changes.receiverId !== undefined ? changes.receiverId : current.receiverId,
+    receiverProperties: toKvArray(changes.receiverProperties ?? toRecord(current.receiverProperties)),
+    validatorId: changes.validatorId !== undefined ? changes.validatorId : current.validatorId,
+    validatorProperties: toKvArray(changes.validatorProperties ?? toRecord(current.validatorProperties)),
+    mapperId: changes.mapperId !== undefined ? changes.mapperId : current.mapperId,
+    mapperProperties: toKvArray(changes.mapperProperties ?? toRecord(current.mapperProperties)),
+    handlerId: changes.handlerId !== undefined ? changes.handlerId : current.handlerId,
+    handlerProperties: toKvArray(changes.handlerProperties ?? toRecord(current.handlerProperties)),
+    documentFilter: current.documentFilter ?? [],
+    matchExpression:
+      changes.matchExpression !== undefined ? toRawMatchExpression(changes.matchExpression) : current.matchExpression,
+    schedules: changes.schedules !== undefined ? toRawSchedules(changes.schedules) : (current.schedules ?? []),
+    responseSubscriptionId:
+      changes.responseIntegrationId !== undefined ? changes.responseIntegrationId : current.responseSubscriptionId,
+    responseMessageTypeName:
+      changes.responseMessageTypeName !== undefined ? changes.responseMessageTypeName : current.responseMessageTypeName,
+    temporary: current.temporary,
+    aggregationTarget: current.aggregationTarget,
+    pausedOn: current.pausedOn,
+    receiveOn: current.receiveOn,
+    aggregateOn: current.aggregateOn,
+    consecutiveFailures: current.consecutiveFailures,
+    lastException: current.lastException,
+  });
+}
+
+export const integrationMethods = {
+  async listIntegrations(): Promise<IntegrationInfo[]> {
+    const rows = await fetchAllRaw();
+    return rows.map((raw) => ({
+      id: raw.id!,
+      name: raw.name,
+      type: toIntegrationType(raw.type),
+      partnerIds: raw.partnerId !== null ? [raw.partnerId] : [],
+      informationTypeId: raw.documentId,
+      workGroupId: raw.workGroupId ?? null,
+      retryPolicyId: raw.retryPolicyId ?? null,
+      // Requires scanning adapter properties for {{partner.KEY}}/{{globals…}}
+      // reference tokens — no backend endpoint for this; deferred.
+      partnerPropKeys: [],
+      globals: [],
+    }));
+  },
+
+  async listIntegrationRows(): Promise<IntegrationRow[]> {
+    const [rows, infoTypes, partners] = await Promise.all([
+      fetchAllRaw(),
+      documentMethods.listInformationTypes(),
+      partnerMethods.listPartners(),
+    ]);
+    const infoTypeById = new Map(infoTypes.map((t) => [t.id, t]));
+    const partnerById = new Map(partners.map((p) => [p.id, p]));
+
+    return rows.map((raw) => {
+      const type = toIntegrationType(raw.type);
+      const infoType = infoTypeById.get(raw.documentId);
+      const partner = raw.partnerId !== null ? partnerById.get(raw.partnerId) : undefined;
+      const schedules = toSchedules(raw.schedules);
+      return {
+        id: raw.id!,
+        name: raw.name,
+        type,
+        informationTypeId: raw.documentId,
+        informationTypeCode: infoType?.code ?? infoType?.name ?? "",
+        // Gateway-derived partners (GatewayApiCall/BusGateway) land in Batch 3.
+        partners: partner ? [{ id: partner.id, name: partner.name }] : [],
+        enabled: !raw.inactive,
+        paused: raw.pausedOn !== null,
+        isRunning: raw.isRunning ?? false,
+        consecutiveFailures: raw.consecutiveFailures ?? 0,
+        lastException: raw.lastException ?? null,
+        // Search.cs can't select Schedules in this joined query without
+        // breaking SQL translation (Postgres date_part type mismatch), so
+        // schedules is always empty here — showing "No schedule" would be
+        // actively wrong for a job that has one. Leave it unset instead.
+        scheduleSummary:
+          schedules.length > 0 && (type === "Receiving" || type === "Aggregation")
+            ? schedulesSummary(schedules)
+            : undefined,
+        nextReceiveOn: raw.receiveOn ?? null,
+        createdOn: "",
+      };
+    });
+  },
+
+  async getIntegration(id: number): Promise<IntegrationDetail> {
+    const [raw, apiGateways, busGateways, recentExchanges] = await Promise.all([
+      fetchRaw(id),
+      gatewayMethods.listApiGateways(),
+      gatewayMethods.listBusGateways(),
+      exchangeMethods.searchExchanges({ integrationId: id, offset: 0, limit: 8 }),
+    ]);
+    const infoType = await documentMethods.getInformationType(raw.documentId).catch(() => null);
+    return {
+      ...toIntegration(raw, id),
+      informationTypeCode: infoType?.code ?? infoType?.name ?? "",
+      informationTypeName: infoType?.name ?? "",
+      apiGatewayAttachments: apiGateways.flatMap((g) =>
+        g.attachments
+          .filter((a) => a.integrationId === id)
+          .map((a) => ({
+            gatewayId: g.id,
+            gatewayName: g.name,
+            urlName: g.urlName,
+            partnerId: a.partnerId,
+            partnerName: a.partnerName,
+          })),
+      ),
+      busGatewayRoutes: busGateways.flatMap((g) =>
+        g.routes
+          .filter((r) => r.integrationId === id)
+          .map((r) => ({ gatewayId: g.id, gatewayName: g.name, partnerId: r.partnerId, partnerName: r.partnerName })),
+      ),
+      recentExchanges: recentExchanges.result.map((x) => ({
+        id: x.id,
+        partnerName: x.partnerName ?? undefined,
+        informationTypeCode: x.informationTypeCode,
+        status: x.status,
+        on: x.startedOn,
+      })),
+      // Populated once notifiers and the trail (a distinct audit-log endpoint,
+      // deferred alongside the mapper editor/aggregation) are wired.
+      watchingNotifiers: [],
+      trail: [],
+    };
+  },
+
+  async createIntegration(input: {
+    type: IntegrationType;
+    name: string;
+    informationTypeId: number;
+    receiverId?: string | null;
+    receiverProperties?: Record<string, string>;
+    validatorId?: string | null;
+    validatorProperties?: Record<string, string>;
+    mapperId?: string | null;
+    mapperProperties?: Record<string, string>;
+    handlerId?: string | null;
+    handlerProperties?: Record<string, string>;
+    schedules?: Schedule[];
+    retryPolicyId?: number | null;
+    enabled?: boolean;
+  }): Promise<Integration> {
+    // Create has no field for adapters/schedules/retry policy/enabled at all —
+    // every subscription is born Inactive with empty pipelines — so those all
+    // need an immediate follow-up update.
+    const id = await post<number>("/subscriptions", {
+      name: input.name,
+      documentId: input.informationTypeId,
+      type: input.type,
+      partnerId: null,
+      aggregationForId: null,
+    });
+    const current = await fetchRaw(id);
+    await applyChanges(id, current, {
+      receiverId: input.receiverId ?? null,
+      receiverProperties: input.receiverProperties ?? {},
+      validatorId: input.validatorId ?? null,
+      validatorProperties: input.validatorProperties ?? {},
+      mapperId: input.mapperId ?? null,
+      mapperProperties: input.mapperProperties ?? {},
+      handlerId: input.handlerId ?? null,
+      handlerProperties: input.handlerProperties ?? {},
+      schedules: input.schedules ?? [],
+      retryPolicyId: input.retryPolicyId ?? null,
+      enabled: input.enabled ?? false,
+    });
+    return toIntegration(await fetchRaw(id), id);
+  },
+
+  async updateIntegration(id: number, changes: UpdatableFields): Promise<Integration> {
+    const current = await fetchRaw(id);
+    await applyChanges(id, current, changes);
+    return toIntegration(await fetchRaw(id), id);
+  },
+
+  async deleteIntegration(id: number): Promise<void> {
+    await request(`/subscriptions/${id}`, { method: "DELETE" });
+  },
+
+  async pauseIntegration(id: number): Promise<Integration> {
+    await post(`/subscriptions/${id}/pause`, {});
+    return toIntegration(await fetchRaw(id), id);
+  },
+
+  async receiveNow(id: number): Promise<Integration> {
+    await post(`/subscriptions/${id}/receivenow`, {});
+    return toIntegration(await fetchRaw(id), id);
+  },
+} satisfies Partial<ApiClient>;
diff --git a/SW.Bitween.Web/ClientApp/src/api/http/mappers.ts b/SW.Bitween.Web/ClientApp/src/api/http/mappers.ts
new file mode 100644
index 00000000..68ebcf02
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/api/http/mappers.ts
@@ -0,0 +1,18 @@
+import type { ApiClient } from "../client";
+import { post } from "./request";
+
+interface RawMapperPreviewResponse {
+  outputJson: string | null;
+  error: string | null;
+}
+
+export const mapperMethods = {
+  async previewMapping(input: {
+    scribanTemplate: string;
+    inputJson: string;
+    partnerId?: number | null;
+  }): Promise<{ outputJson: string | null; error: string | null }> {
+    const res = await post<RawMapperPreviewResponse>("/mappers", input);
+    return { outputJson: res.outputJson ?? null, error: res.error ?? null };
+  },
+} satisfies Partial<ApiClient>;
diff --git a/SW.Bitween.Web/ClientApp/src/api/http/matchExpression.ts b/SW.Bitween.Web/ClientApp/src/api/http/matchExpression.ts
new file mode 100644
index 00000000..b05102b9
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/api/http/matchExpression.ts
@@ -0,0 +1,57 @@
+import type { MatchGroup, MatchNode } from "../types";
+
+/**
+ * The backend's match tree is strictly binary (and/or each take exactly two
+ * operands) and uses snake_case type discriminators, unlike the frontend's
+ * n-ary MatchGroup. Shared by Subscriptions and BusGatewayRoute — both use the
+ * exact same backend type (`IPropertyMatchSpecification`).
+ */
+export type RawMatchSpec =
+  | { type: "one_of" | "not_one_of"; path: string; values: string[] | null }
+  | { type: "and" | "or"; left: RawMatchSpec; right: RawMatchSpec };
+
+/**
+ * Fold the backend's binary and/or tree into the frontend's n-ary MatchGroup,
+ * flattening runs of the same operator so a flat group round-trips back flat
+ * instead of as a deeply right-nested tree.
+ */
+function toMatchNode(spec: RawMatchSpec): MatchNode {
+  if (!("left" in spec)) {
+    return { op: spec.type === "one_of" ? "oneOf" : "notOneOf", path: spec.path, values: spec.values ?? [] };
+  }
+  const op = spec.type;
+  const children: MatchNode[] = [];
+  const collect = (s: RawMatchSpec) => {
+    if (s.type === op) {
+      collect(s.left);
+      collect(s.right);
+    } else {
+      children.push(toMatchNode(s));
+    }
+  };
+  collect(spec);
+  return { op, children };
+}
+
+export const toMatchGroup = (spec: RawMatchSpec | null): MatchGroup | null => {
+  if (!spec) return null;
+  const node = toMatchNode(spec);
+  // The backend can't represent a single-condition group (and/or always need
+  // two operands), so a lone condition arrives unwrapped and must be rewrapped
+  // here to satisfy the "root is always a group" contract.
+  return "children" in node ? node : { op: "and", children: [node] };
+};
+
+/** Unfold an n-ary MatchGroup into the backend's binary tree, right-associatively. */
+function toBackendNode(node: MatchNode): RawMatchSpec | null {
+  if ("path" in node) {
+    return { type: node.op === "oneOf" ? "one_of" : "not_one_of", path: node.path, values: node.values };
+  }
+  const parts = node.children.map(toBackendNode).filter((s): s is RawMatchSpec => s !== null);
+  if (parts.length === 0) return null; // empty group — matches everything, i.e. no constraint
+  if (parts.length === 1) return parts[0];
+  return parts.reduceRight((right, left) => ({ type: node.op, left, right }));
+}
+
+export const toRawMatchExpression = (group: MatchGroup | null): RawMatchSpec | null =>
+  group ? toBackendNode(group) : null;
diff --git a/SW.Bitween.Web/ClientApp/src/api/http/notifiers.ts b/SW.Bitween.Web/ClientApp/src/api/http/notifiers.ts
new file mode 100644
index 00000000..d26f242d
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/api/http/notifiers.ts
@@ -0,0 +1,107 @@
+import type { ApiClient } from "../client";
+import { ApiRequestError, type NotificationEntry, type Notifier, type NotifierDetail } from "../types";
+import { get, post } from "./request";
+
+interface SearchyResponse<T> {
+  result: T[];
+  totalCount: number;
+}
+interface RawKeyAndValue {
+  key: string;
+  value: string;
+}
+interface RawNotifier {
+  id: number;
+  name: string;
+  inactive: boolean;
+  handlerId: string | null;
+  handlerProperties: RawKeyAndValue[] | null;
+  runOnSuccessfulResult: boolean;
+  runOnBadResult: boolean;
+  runOnFailedResult: boolean;
+  runOnSubscriptions: { id: number; name: string | null }[] | null;
+}
+interface RawNotification {
+  xchangeId: string;
+  success: boolean;
+  exception: string | null;
+  finishedOn: string;
+}
+// Empty-valued properties are dropped: an adapter property with no value means
+// "not set", and keeping it would make a freshly-cleared field compare unequal to
+// stored data that never had the key — leaving the Save bar up after an undo.
+const toRecord = (kvs: RawKeyAndValue[] | null): Record<string, string> =>
+  Object.fromEntries((kvs ?? []).filter((kv) => kv.value !== "").map((kv) => [kv.key, kv.value]));
+const toKvArray = (record: Record<string, string>): RawKeyAndValue[] =>
+  Object.entries(record).map(([key, value]) => ({ key, value }));
+
+const toNotifier = (r: RawNotifier): Notifier => ({
+  id: r.id,
+  name: r.name,
+  enabled: !r.inactive,
+  onFailed: r.runOnFailedResult,
+  onBadResult: r.runOnBadResult,
+  onSuccess: r.runOnSuccessfulResult,
+  channelId: r.handlerId ?? "",
+  channelProperties: toRecord(r.handlerProperties),
+  integrationIds: (r.runOnSubscriptions ?? []).map((s) => s.id),
+  createdOn: "",
+});
+
+async function fetchRecentNotifications(notifierName: string): Promise<NotificationEntry[]> {
+  const res = await get<SearchyResponse<RawNotification>>(
+    `/notifications?filter=${encodeURIComponent(`NotifierName:1:${notifierName}`)}`,
+  );
+  return (res.result ?? []).map((n) => ({
+    xchangeId: n.xchangeId,
+    success: n.success,
+    exception: n.exception ?? undefined,
+    on: n.finishedOn,
+  }));
+}
+
+async function fetchDetail(id: number): Promise<NotifierDetail> {
+  const raw = await get<RawNotifier | null>(`/notifiers/${id}`);
+  if (!raw) throw new ApiRequestError("NOT_FOUND", "This notifier no longer exists.");
+  const notifier = toNotifier(raw);
+  return { ...notifier, recentNotifications: await fetchRecentNotifications(notifier.name) };
+}
+
+export const notifierMethods = {
+  async listNotifiers(): Promise<Notifier[]> {
+    const res = await get<SearchyResponse<{ id: number }>>("/notifiers");
+    return Promise.all((res.result ?? []).map((r) => fetchDetail(r.id)));
+  },
+
+  getNotifier: fetchDetail,
+
+  async createNotifier({ name }: { name: string }): Promise<Notifier> {
+    const id = await post<number>("/notifiers", { name });
+    return {
+      id,
+      name,
+      enabled: true,
+      onFailed: false,
+      onBadResult: false,
+      onSuccess: false,
+      channelId: "",
+      channelProperties: {},
+      integrationIds: [],
+      createdOn: "",
+    };
+  },
+
+  async updateNotifier(id: number, changes: Omit<Notifier, "id" | "createdOn">): Promise<Notifier> {
+    await post(`/notifiers/${id}`, {
+      name: changes.name,
+      runOnSuccessfulResult: changes.onSuccess,
+      runOnBadResult: changes.onBadResult,
+      runOnFailedResult: changes.onFailed,
+      handlerId: changes.channelId,
+      inactive: !changes.enabled,
+      handlerProperties: toKvArray(changes.channelProperties),
+      runOnSubscriptions: changes.integrationIds.map((subscriptionId) => ({ id: subscriptionId })),
+    });
+    return { id, createdOn: "", ...changes };
+  },
+} satisfies Partial<ApiClient>;
diff --git a/SW.Bitween.Web/ClientApp/src/api/http/partners.ts b/SW.Bitween.Web/ClientApp/src/api/http/partners.ts
new file mode 100644
index 00000000..ca4d82b4
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/api/http/partners.ts
@@ -0,0 +1,183 @@
+import type { ApiClient } from "../client";
+import { ApiRequestError, type IntegrationType, type Partner, type PartnerDetail, type PartnerRow } from "../types";
+import { exchangeMethods } from "./exchanges";
+import { gatewayMethods } from "./gateways";
+import { matchSummary } from "../../lib/match";
+import { get, post, request } from "./request";
+
+// The built-in SYSTEM partner (Partner.SystemId) can't be renamed or deleted.
+const SYSTEM_PARTNER_ID = 1;
+
+// ——— backend shapes (camelCase over the wire) ———
+interface SearchyResponse<T> {
+  result: T[];
+  totalCount: number;
+}
+interface RawPartnerRow {
+  id: number;
+  name: string;
+  subscriptionsCount: number;
+  keys: number;
+  propertyKeys: string[] | null;
+}
+interface RawKeyAndValue {
+  key: string;
+  value: string;
+}
+interface RawSubscriptionRef {
+  id: number;
+  name: string;
+  type: number | string;
+}
+interface RawPartnerDetail {
+  name: string;
+  apiCredentials: RawKeyAndValue[] | null;
+  subscriptions: RawSubscriptionRef[] | null;
+  adapterProperties: Record<string, string> | null;
+}
+
+// GET masks keys as `<first-5>...(hidden)`; recover the visible prefix.
+const MASK_SUFFIX = "...(hidden)";
+const keyPrefixOf = (masked: string): string =>
+  masked.endsWith(MASK_SUFFIX) ? masked.slice(0, -MASK_SUFFIX.length) : masked;
+
+const SUB_TYPE_BY_NUM: Record<number, IntegrationType> = {
+  1: "Internal",
+  2: "ApiCall",
+  4: "Receiving",
+  8: "Aggregation",
+  16: "GatewayApiCall",
+  32: "BusGateway",
+};
+const INTEGRATION_TYPES: IntegrationType[] = [
+  "Receiving",
+  "GatewayApiCall",
+  "BusGateway",
+  "Internal",
+  "ApiCall",
+  "Aggregation",
+];
+/** Enums may arrive as the numeric value or the name in any case. */
+const toIntegrationType = (t: number | string): IntegrationType => {
+  if (typeof t === "number") return SUB_TYPE_BY_NUM[t] ?? "Internal";
+  return INTEGRATION_TYPES.find((k) => k.toLowerCase() === t.toLowerCase()) ?? "Internal";
+};
+
+async function requireDetail(id: number): Promise<RawPartnerDetail> {
+  const d = await get<RawPartnerDetail | null>(`/partners/${id}`);
+  if (!d) throw new ApiRequestError("NOT_FOUND", "This partner no longer exists.");
+  return d;
+}
+
+/**
+ * `POST /partners/{id}` REPLACES the whole credential set, so every write must
+ * carry the full list. The backend matches credentials by name and keeps the
+ * stored secret, so re-sending the masked values is safe (verified against the
+ * live DB); omitting one revokes it. `mutate` produces the next list.
+ */
+async function writePartner(
+  id: number,
+  d: RawPartnerDetail,
+  patch: { name?: string; adapterProperties?: Record<string, string> },
+  mutate: (creds: RawKeyAndValue[]) => RawKeyAndValue[] = (c) => c,
+): Promise<Partner> {
+  const name = patch.name ?? d.name;
+  const adapterProperties = patch.adapterProperties ?? d.adapterProperties ?? {};
+  const apiCredentials = mutate((d.apiCredentials ?? []).map((c) => ({ key: c.key, value: c.value })));
+  await post(`/partners/${id}`, { name, adapterProperties, apiCredentials });
+  return { id, name, adapterProperties, isSystem: id === SYSTEM_PARTNER_ID, createdOn: "" };
+}
+
+export const partnerMethods = {
+  async listPartners(): Promise<PartnerRow[]> {
+    const res = await get<SearchyResponse<RawPartnerRow>>("/partners");
+    return (res.result ?? []).map((p) => ({
+      id: p.id,
+      name: p.name,
+      // The list endpoint sends property names, never their values — they can be
+      // secrets. Anything needing values must fetch the partner's detail.
+      adapterProperties: {},
+      propertyKeys: p.propertyKeys ?? [],
+      isSystem: p.id === SYSTEM_PARTNER_ID,
+      createdOn: "",
+      credentialCount: p.keys,
+      usedByCount: p.subscriptionsCount,
+    }));
+  },
+
+  /** Light single-field fetch for the mapper editor's test-partner selector — avoids getPartner's gateway/exchange lookups. */
+  async getPartnerAdapterProperties(id: number): Promise<Record<string, string>> {
+    const d = await requireDetail(id);
+    return d.adapterProperties ?? {};
+  },
+
+  async getPartner(id: number): Promise<PartnerDetail> {
+    const [d, apiGateways, busGateways, recentExchanges] = await Promise.all([
+      requireDetail(id),
+      gatewayMethods.listApiGateways(),
+      gatewayMethods.listBusGateways(),
+      exchangeMethods.searchExchanges({ partnerId: id, offset: 0, limit: 8 }),
+    ]);
+    return {
+      id,
+      name: d.name,
+      adapterProperties: d.adapterProperties ?? {},
+      isSystem: id === SYSTEM_PARTNER_ID,
+      createdOn: "",
+      apiCredentials: (d.apiCredentials ?? []).map((c) => ({
+        name: c.key,
+        keyPrefix: keyPrefixOf(c.value),
+        createdOn: "",
+      })),
+      integrationSetups: (d.subscriptions ?? []).map((s) => ({
+        id: s.id,
+        name: s.name,
+        type: toIntegrationType(s.type),
+      })),
+      apiGateways: apiGateways
+        .filter((g) => g.attachments.some((a) => a.partnerId === id))
+        .map((g) => ({ gatewayId: g.id, gatewayName: g.name, urlName: g.urlName })),
+      busGatewayRoutes: busGateways.flatMap((g) =>
+        g.routes
+          .filter((r) => r.partnerId === id)
+          .map((r) => ({ gatewayId: g.id, gatewayName: g.name, matchExpression: matchSummary(r.matchExpression) })),
+      ),
+      recentExchanges: recentExchanges.result.map((x) => ({
+        id: x.id,
+        informationTypeCode: x.informationTypeCode,
+        status: x.status,
+        on: x.startedOn,
+      })),
+    };
+  },
+
+  async createPartner({ name }: { name: string }): Promise<Partner> {
+    const id = await post<number>("/partners", { name });
+    return { id, name, adapterProperties: {}, isSystem: false, createdOn: "" };
+  },
+
+  async updatePartner(
+    id: number,
+    changes: { name?: string; adapterProperties?: Record<string, string> },
+  ): Promise<Partner> {
+    return writePartner(id, await requireDetail(id), changes);
+  },
+
+  async deletePartner(id: number): Promise<void> {
+    await request(`/partners/${id}`, { method: "DELETE" });
+  },
+
+  async addPartnerCredential(id: number, name: string): Promise<{ key: string }> {
+    const key = await get<string>("/partners/generatekey");
+    const d = await requireDetail(id);
+    if ((d.apiCredentials ?? []).some((c) => c.key.toLowerCase() === name.trim().toLowerCase()))
+      throw new ApiRequestError("NAME_TAKEN", "This partner already has a key with that name.");
+    await writePartner(id, d, {}, (creds) => [...creds, { key: name.trim(), value: key }]);
+    return { key };
+  },
+
+  async revokePartnerCredential(id: number, name: string): Promise<void> {
+    const d = await requireDetail(id);
+    await writePartner(id, d, {}, (creds) => creds.filter((c) => c.key !== name));
+  },
+} satisfies Partial<ApiClient>;
diff --git a/SW.Bitween.Web/ClientApp/src/api/http/queueHealth.ts b/SW.Bitween.Web/ClientApp/src/api/http/queueHealth.ts
new file mode 100644
index 00000000..4d04bf8c
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/api/http/queueHealth.ts
@@ -0,0 +1,138 @@
+import type { ApiClient } from "../client";
+import type { QueueHealthSnapshot, QueueSeverity } from "../types";
+import { workGroupMethods } from "./workGroups";
+import { get } from "./request";
+
+// ——— backend shapes (camelCase over the wire; severities are PascalCase strings) ———
+type RawSeverity = "Info" | "Warning" | "Critical";
+interface RawSummary {
+  totalConsumers: number;
+  unhealthyConsumers: number;
+  disconnectedConsumers: number;
+  totalQueueDepth: number;
+  totalRetryBacklog: number;
+  totalDeadLetterBacklog: number;
+  totalIncomingRate: number;
+  totalAckRate: number;
+  lastUpdatedUtc: string;
+}
+interface RawConsumer {
+  name: string;
+  messageName: string;
+  queueName: string;
+  totalNodes: number;
+  processingCount: number;
+  queueCount: number;
+  retryCount: number;
+  failedCount: number;
+  priority: number;
+  prefetch: number;
+  incomingRate: number;
+  ackRate: number;
+  isBackpressured: boolean;
+  healthStatus: RawSeverity;
+}
+interface RawRetryAnalysis {
+  consumerName: string;
+  queueName: string;
+  retryBacklog: number;
+  incomingRate: number;
+  ackRate: number;
+  severity: RawSeverity;
+}
+interface RawDeadLetter {
+  consumerName: string;
+  deadLetterQueueName: string;
+  deadLetterCount: number;
+  lastExceptionType: string | null;
+  lastExceptionMessage: string | null;
+  lastFailedAt: string | null;
+}
+interface RawAlert {
+  severity: RawSeverity;
+  title: string;
+  detail: string;
+  queueName: string;
+  timestampUtc: string;
+}
+
+const toSeverity = (s: RawSeverity): QueueSeverity => (s === "Critical" ? "critical" : s === "Warning" ? "warning" : "healthy");
+
+export const queueHealthMethods = {
+  async getQueueHealth(): Promise<QueueHealthSnapshot> {
+    const [summary, consumers, retries, deadLetters, alerts, workGroups] = await Promise.all([
+      get<RawSummary>("/ops/summary"),
+      get<RawConsumer[]>("/ops/consumers"),
+      get<RawRetryAnalysis[]>("/ops/retries"),
+      get<RawDeadLetter[]>("/ops/deadletters"),
+      get<RawAlert[]>("/ops/alerts"),
+      workGroupMethods.listWorkGroups(),
+    ]);
+
+    // The ops endpoints don't expose workGroupId directly — derive it from the
+    // consumer's messageName, which for a grouped consumer is always
+    // WorkGroup.GetBusMessageName() == `${id}${busMessageName}`.
+    const workGroupIdByMessageName = new Map(
+      workGroups.map((wg) => [`${wg.id}${wg.busMessageName}`.toLowerCase(), wg.id]),
+    );
+
+    return {
+      summary: {
+        totalConsumers: summary.totalConsumers,
+        unhealthyConsumers: summary.unhealthyConsumers,
+        disconnectedConsumers: summary.disconnectedConsumers,
+        totalQueueDepth: summary.totalQueueDepth,
+        totalRetryBacklog: summary.totalRetryBacklog,
+        totalDeadLetterBacklog: summary.totalDeadLetterBacklog,
+        totalIncomingRate: summary.totalIncomingRate,
+        totalAckRate: summary.totalAckRate,
+        lastUpdated: summary.lastUpdatedUtc,
+      },
+      consumers: consumers.map((c) => ({
+        name: c.name,
+        messageName: c.messageName,
+        queueName: c.queueName,
+        workGroupId: workGroupIdByMessageName.get(c.messageName.toLowerCase()) ?? null,
+        totalNodes: c.totalNodes,
+        processingCount: c.processingCount,
+        queueCount: c.queueCount,
+        retryCount: c.retryCount,
+        failedCount: c.failedCount,
+        priority: c.priority,
+        prefetch: c.prefetch,
+        incomingRate: c.incomingRate,
+        ackRate: c.ackRate,
+        isBackpressured: c.isBackpressured,
+        health: toSeverity(c.healthStatus),
+      })),
+      retryBacklog: retries.map((r) => ({
+        consumerName: r.consumerName,
+        queueName: r.queueName,
+        retryBacklog: r.retryBacklog,
+        incomingRate: r.incomingRate,
+        ackRate: r.ackRate,
+        severity: toSeverity(r.severity),
+      })),
+      deadLetters: deadLetters.map((d) => ({
+        consumerName: d.consumerName,
+        queueName: d.deadLetterQueueName,
+        count: d.deadLetterCount,
+        lastExceptionType: d.lastExceptionType,
+        lastExceptionMessage: d.lastExceptionMessage,
+        lastFailedAt: d.lastFailedAt,
+      })),
+      // The frontend's alert severity is narrower ("warning"|"critical") than
+      // the backend's ("Info"|"Warning"|"Critical") — informational alerts
+      // aren't alerts from the UI's point of view, so drop them.
+      alerts: alerts
+        .filter((a) => a.severity !== "Info")
+        .map((a) => ({
+          severity: a.severity === "Critical" ? ("critical" as const) : ("warning" as const),
+          title: a.title,
+          detail: a.detail,
+          queueName: a.queueName,
+          on: a.timestampUtc,
+        })),
+    };
+  },
+} satisfies Partial<ApiClient>;
diff --git a/SW.Bitween.Web/ClientApp/src/api/http/request.ts b/SW.Bitween.Web/ClientApp/src/api/http/request.ts
new file mode 100644
index 00000000..67214946
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/api/http/request.ts
@@ -0,0 +1,154 @@
+import { ApiRequestError } from "../types";
+
+/**
+ * All endpoints live under /api (UrlPrefix="api").
+ * The SPA is served from the same origin, so this stays relative and cookies flow.
+ */
+export const API_BASE = "/api";
+
+/** The Jwt is kept in localStorage; the refresh token is an HttpOnly cookie JS never sees. */
+const TOKEN_KEY = "access_token";
+
+export const getToken = (): string | null => localStorage.getItem(TOKEN_KEY);
+export const setToken = (jwt: string): void => localStorage.setItem(TOKEN_KEY, jwt);
+export const clearToken = (): void => localStorage.removeItem(TOKEN_KEY);
+
+/** Backend serializes camelCase; login returns `{ jwt }`. */
+const readJwt = (data: unknown): string | null =>
+  (data as { jwt?: string; Jwt?: string })?.jwt ?? (data as { Jwt?: string })?.Jwt ?? null;
+
+let refreshInFlight: Promise<string | null> | null = null;
+
+/**
+ * Silent refresh: POST /accounts/login with an empty body — the HttpOnly
+ * refresh_token cookie alone re-issues a Jwt. Returns the new token, or null
+ * when the cookie is missing/expired. Bypasses `request()` to avoid recursion,
+ * and dedupes concurrent callers behind one in-flight promise.
+ */
+export function silentRefresh(): Promise<string | null> {
+  if (!refreshInFlight) {
+    refreshInFlight = (async () => {
+      try {
+        const res = await fetch(`${API_BASE}/accounts/login`, {
+          method: "POST",
+          headers: { "Content-Type": "application/json" },
+          credentials: "include",
+          body: "{}",
+        });
+        if (!res.ok) return null;
+        const jwt = readJwt(await res.json().catch(() => null));
+        if (jwt) setToken(jwt);
+        else clearToken();
+        return jwt;
+      } catch {
+        return null;
+      }
+    })();
+    void refreshInFlight.finally(() => {
+      refreshInFlight = null;
+    });
+  }
+  return refreshInFlight;
+}
+
+/** Pull a human message + best-effort code out of a backend error response. */
+async function toApiError(res: Response): Promise<ApiRequestError> {
+  const text = await res.text().catch(() => "");
+  let body: unknown = text;
+  try {
+    body = text ? JSON.parse(text) : "";
+  } catch {
+    /* leave as text */
+  }
+
+  // 404 → the message is a bare JSON string.
+  if (typeof body === "string" && body)
+    return new ApiRequestError(res.status === 404 ? "NOT_FOUND" : "ERROR", body);
+
+  // Framework-level errors (415, unhandled 500, …) come as ASP.NET ProblemDetails:
+  // { type, title, status, traceId }. Prefer its human `title`.
+  if (body && typeof body === "object" && "title" in body && "status" in body) {
+    const pd = body as { title?: string; status?: number };
+    return new ApiRequestError(`HTTP_${pd.status ?? res.status}`, pd.title || `Request failed (${res.status}).`);
+  }
+
+  // 400 → ASP.NET SerializableError: { key: [msg, ...] } (key is the validation
+  // code for SWValidationException, or the exception type name otherwise).
+  if (body && typeof body === "object") {
+    const [code, value] = Object.entries(body as Record<string, unknown>)[0] ?? [];
+    const message = Array.isArray(value) ? String(value[0]) : String(value ?? "");
+    if (code) return new ApiRequestError(code, message || "Request failed.");
+  }
+
+  return new ApiRequestError("ERROR", `Request failed (${res.status}).`);
+}
+
+export interface RequestOptions {
+  method?: "GET" | "POST" | "DELETE";
+  body?: unknown;
+  /** Internal: prevents the 401 → refresh → retry loop from recursing. */
+  _retried?: boolean;
+}
+
+/**
+ * The one fetch helper every wired method goes through: prefixes the base,
+ * attaches `Authorization: Bearer <jwt>`, includes credentials so the refresh
+ * cookie rides along, and on 401 attempts a single silent refresh + retry.
+ */
+export async function request<T>(path: string, opts: RequestOptions = {}): Promise<T> {
+  const token = getToken();
+  const method = opts.method ?? "GET";
+  // Backend command handlers (POST) bind a JSON body, so they always need
+  // `Content-Type: application/json` — even a body-less command like logout.
+  // Without it the framework rejects the call with 415 before the handler runs;
+  // an empty `{}` satisfies it.
+  const sendJson = method === "POST";
+  const res = await fetch(`${API_BASE}${path}`, {
+    method,
+    credentials: "include",
+    headers: {
+      ...(sendJson ? { "Content-Type": "application/json" } : {}),
+      ...(token ? { Authorization: `Bearer ${token}` } : {}),
+    },
+    body: sendJson ? JSON.stringify(opts.body ?? {}) : undefined,
+  });
+
+  if (res.status === 401 && !opts._retried) {
+    const refreshed = await silentRefresh();
+    if (refreshed) return request<T>(path, { ...opts, _retried: true });
+    clearToken();
+    throw new ApiRequestError("UNAUTHENTICATED", "Your session has ended. Please sign in again.");
+  }
+
+  if (!res.ok) throw await toApiError(res);
+
+  if (res.status === 204) return undefined as T;
+  const text = await res.text();
+  if (!text) return undefined as T;
+  // Some endpoints return a bare string as text/plain (e.g. /partners/generatekey),
+  // which isn't valid JSON — only parse when the response actually is JSON.
+  const isJson = res.headers.get("content-type")?.includes("application/json") ?? false;
+  return (isJson ? JSON.parse(text) : text) as T;
+}
+
+export const get = <T>(path: string): Promise<T> => request<T>(path);
+export const post = <T>(path: string, body?: unknown): Promise<T> =>
+  request<T>(path, { method: "POST", body });
+
+/**
+ * For a secondary read that only enriches a page — the "used by" counts, which come from another
+ * area's list. Those are permission-guarded in their own right, so a role that can see this page
+ * but not that area would otherwise take the whole page down with it. The enrichment is worth
+ * losing; the page isn't. Only refusals are swallowed, so a real outage still surfaces.
+ */
+export async function getEnrichment<T>(path: string, fallback: T): Promise<T> {
+  try {
+    return await get<T>(path);
+  } catch (e) {
+    // A refusal for *this* read only. UNAUTHENTICATED deliberately isn't swallowed: that one means
+    // the session itself is gone, and the app needs to hear about it.
+    const code = e instanceof ApiRequestError ? e.code : "";
+    if (code === "HTTP_401" || code === "HTTP_403") return fallback;
+    throw e;
+  }
+}
diff --git a/SW.Bitween.Web/ClientApp/src/api/http/retryPolicies.ts b/SW.Bitween.Web/ClientApp/src/api/http/retryPolicies.ts
new file mode 100644
index 00000000..06b9c41a
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/api/http/retryPolicies.ts
@@ -0,0 +1,213 @@
+import type { ApiClient } from "../client";
+import {
+  ApiRequestError,
+  type IntegrationType,
+  type RetryDelay,
+  type RetryGroup,
+  type RetryPolicy,
+  type RetryPolicyDetail,
+  type RetryPolicyListRow,
+  type RetryResultType,
+  type RetryTestAttempt,
+} from "../types";
+import { get, getEnrichment, post, request } from "./request";
+
+interface SearchyResponse<T> {
+  result: T[];
+  totalCount: number;
+}
+interface RawRetryPolicyRow {
+  id: number;
+  name: string;
+  groupCount: number;
+}
+interface RawRetryPolicy {
+  name: string;
+  groups: RawRetryGroup[] | null;
+}
+interface RawSubscriptionRef {
+  id: number;
+  name: string;
+  type: number | string;
+}
+
+const SUB_TYPE_BY_NUM: Record<number, IntegrationType> = {
+  1: "Internal",
+  2: "ApiCall",
+  4: "Receiving",
+  8: "Aggregation",
+  16: "GatewayApiCall",
+  32: "BusGateway",
+};
+const INTEGRATION_TYPES: IntegrationType[] = [
+  "Receiving",
+  "GatewayApiCall",
+  "BusGateway",
+  "Internal",
+  "ApiCall",
+  "Aggregation",
+];
+/** Enums may arrive as the numeric value or the name in any case. */
+const toIntegrationType = (t: number | string): IntegrationType => {
+  if (typeof t === "number") return SUB_TYPE_BY_NUM[t] ?? "Internal";
+  return INTEGRATION_TYPES.find((k) => k.toLowerCase() === t.toLowerCase()) ?? "Internal";
+};
+
+async function fetchSubscriptionsByRetryPolicy(retryPolicyId: number): Promise<RawSubscriptionRef[]> {
+  const res = await get<SearchyResponse<RawSubscriptionRef>>(
+    `/subscriptions?filter=${encodeURIComponent(`RetryPolicyId:1:${retryPolicyId}`)}`,
+  );
+  return res.result ?? [];
+}
+
+// The backend's DelayStrategy keeps durations in milliseconds; the UI works in seconds.
+type RawDelayStrategy =
+  | { type: "fixed"; delayMs: number }
+  | { type: "linear"; initialDelayMs: number; incrementMs: number }
+  | { type: "exponential"; initialDelayMs: number; multiplier: number; maxDelayMs: number };
+interface RawRetryBudget {
+  maxAttemptsPerError: number;
+  maxAttemptsTotal: number;
+  delayStrategy: RawDelayStrategy;
+}
+interface RawRetryGroup extends Omit<RetryGroup, "budget"> {
+  budget?: RawRetryBudget | null;
+}
+interface RawTestAttempt {
+  attemptNumber: number;
+  matchedGroupName: string | null;
+  shouldRetry: boolean;
+  delaySeconds: number | null;
+  reason: string;
+}
+
+const toDelay = (d: RawDelayStrategy): RetryDelay => {
+  switch (d.type) {
+    case "fixed":
+      return { type: "fixed", delaySeconds: d.delayMs / 1000 };
+    case "linear":
+      return { type: "linear", initialSeconds: d.initialDelayMs / 1000, incrementSeconds: d.incrementMs / 1000 };
+    case "exponential":
+      return {
+        type: "exponential",
+        initialSeconds: d.initialDelayMs / 1000,
+        multiplier: d.multiplier,
+        maxSeconds: d.maxDelayMs / 1000,
+      };
+  }
+};
+
+const toRawDelay = (d: RetryDelay): RawDelayStrategy => {
+  switch (d.type) {
+    case "fixed":
+      return { type: "fixed", delayMs: Math.round(d.delaySeconds * 1000) };
+    case "linear":
+      return {
+        type: "linear",
+        initialDelayMs: Math.round(d.initialSeconds * 1000),
+        incrementMs: Math.round(d.incrementSeconds * 1000),
+      };
+    case "exponential":
+      return {
+        type: "exponential",
+        initialDelayMs: Math.round(d.initialSeconds * 1000),
+        multiplier: d.multiplier,
+        maxDelayMs: Math.round(d.maxSeconds * 1000),
+      };
+  }
+};
+
+const toGroup = (g: RawRetryGroup): RetryGroup => ({
+  ...g,
+  budget: g.budget
+    ? {
+        maxAttemptsPerError: g.budget.maxAttemptsPerError,
+        maxAttemptsTotal: g.budget.maxAttemptsTotal,
+        delay: toDelay(g.budget.delayStrategy),
+      }
+    : undefined,
+});
+
+const toRawGroup = (g: RetryGroup): RawRetryGroup => ({
+  ...g,
+  budget: g.budget
+    ? {
+        maxAttemptsPerError: g.budget.maxAttemptsPerError,
+        maxAttemptsTotal: g.budget.maxAttemptsTotal,
+        delayStrategy: toRawDelay(g.budget.delay),
+      }
+    : undefined,
+});
+
+async function fetchDetail(id: number): Promise<RetryPolicyDetail> {
+  const [r, subs] = await Promise.all([
+    get<RawRetryPolicy | null>(`/retrypolicies/${id}`),
+    fetchSubscriptionsByRetryPolicy(id),
+  ]);
+  if (!r) throw new ApiRequestError("NOT_FOUND", "This retry policy no longer exists.");
+  return {
+    id,
+    name: r.name,
+    groups: (r.groups ?? []).map(toGroup),
+    createdOn: "",
+    integrations: subs.map((s) => ({ id: s.id, name: s.name, type: toIntegrationType(s.type) })),
+  };
+}
+
+export const retryPolicyMethods = {
+  async listRetryPolicies(): Promise<RetryPolicyListRow[]> {
+    const [res, subs] = await Promise.all([
+      get<SearchyResponse<RawRetryPolicyRow>>("/retrypolicies"),
+      getEnrichment<SearchyResponse<{ retryPolicyId: number | null }>>("/subscriptions", { result: [], totalCount: 0 }),
+    ]);
+    const countByRetryPolicy = new Map<number, number>();
+    for (const s of subs.result ?? []) {
+      if (s.retryPolicyId == null) continue;
+      countByRetryPolicy.set(s.retryPolicyId, (countByRetryPolicy.get(s.retryPolicyId) ?? 0) + 1);
+    }
+    return (res.result ?? []).map((p) => ({
+      id: p.id,
+      name: p.name,
+      groupCount: p.groupCount,
+      createdOn: "",
+      usedByCount: countByRetryPolicy.get(p.id) ?? 0,
+    }));
+  },
+
+  getRetryPolicy: fetchDetail,
+
+  async createRetryPolicy({ name }: { name: string }): Promise<RetryPolicy> {
+    const id = await post<number>("/retrypolicies", { name, groups: [] });
+    return { id, name, groups: [], createdOn: "" };
+  },
+
+  async updateRetryPolicy(id: number, changes: { name: string; groups: RetryGroup[] }): Promise<RetryPolicy> {
+    await post(`/retrypolicies/${id}`, { name: changes.name, groups: changes.groups.map(toRawGroup) });
+    return { id, name: changes.name, groups: changes.groups, createdOn: "" };
+  },
+
+  async deleteRetryPolicy(id: number): Promise<void> {
+    await request(`/retrypolicies/${id}`, { method: "DELETE" });
+  },
+
+  async testRetryPolicy(input: {
+    groups: RetryGroup[];
+    resultType: RetryResultType;
+    content: string;
+    attempts: number;
+  }): Promise<RetryTestAttempt[]> {
+    const res = await post<{ attempts: RawTestAttempt[] }>("/retrypolicies/test", {
+      groups: input.groups.map(toRawGroup),
+      resultType: input.resultType,
+      content: input.content,
+      attemptsToSimulate: input.attempts,
+    });
+    return (res.attempts ?? []).map((a) => ({
+      attempt: a.attemptNumber,
+      shouldRetry: a.shouldRetry,
+      delaySeconds: a.delaySeconds ?? undefined,
+      matchedGroup: a.matchedGroupName ?? undefined,
+      reason: a.reason,
+    }));
+  },
+} satisfies Partial<ApiClient>;
diff --git a/SW.Bitween.Web/ClientApp/src/api/http/session.ts b/SW.Bitween.Web/ClientApp/src/api/http/session.ts
new file mode 100644
index 00000000..87e8df01
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/api/http/session.ts
@@ -0,0 +1,114 @@
+import { ApiRequestError, type Session, type User } from "../types";
+import { getAppConfig } from "./appConfig";
+import { clearToken, get, getToken, post, setToken } from "./request";
+
+/** GET /accounts/profile — camelCase ProfileModel. */
+interface Profile {
+  id: number;
+  email: string;
+  name: string;
+  /** Legacy coarse role, kept for older API clients. Authorization uses `permissions`. */
+  role: string;
+  disabled: boolean;
+  createdOn: string;
+  roles: { id: number; name: string }[] | null;
+  permissions: string[] | null;
+}
+
+/** POST /accounts/login → { jwt }. */
+interface LoginResult {
+  jwt: string;
+}
+
+const buildSession = (profile: Profile): Session => {
+  const user: User = {
+    id: String(profile.id),
+    displayName: profile.name,
+    email: profile.email,
+    roleIds: (profile.roles ?? []).map((r) => String(r.id)),
+    status: profile.disabled ? "disabled" : "active",
+    microsoftLinked: false,
+    createdOn: profile.createdOn,
+  };
+  return {
+    user,
+    roles: (profile.roles ?? []).map((r) => ({ id: String(r.id), name: r.name })),
+    // Resolved server-side from the user's roles, so a revoked role takes effect on next load.
+    permissions: profile.permissions ?? [],
+  };
+};
+
+const loadSession = async (): Promise<Session> => buildSession(await get<Profile>("/accounts/profile"));
+
+export const sessionMethods = {
+  async getSession(): Promise<Session | null> {
+    // No stored Jwt → anonymous; don't probe the backend (an expired token still
+    // gets refreshed via cookie inside request() on its 401). The token is only
+    // cleared on logout or an unrecoverable 401, so returning users keep it.
+    if (!getToken()) return null;
+    try {
+      return await loadSession();
+    } catch {
+      // Token invalid and no refresh cookie → signed out. Show login, don't fake it.
+      return null;
+    }
+  },
+
+  async login(email: string, password: string): Promise<Session> {
+    const { jwt } = await post<LoginResult>("/accounts/login", {
+      Username: email,
+      Password: password,
+    });
+    setToken(jwt);
+    return loadSession();
+  },
+
+  async loginWithMicrosoft(): Promise<Session> {
+    const cfg = await getAppConfig();
+    if (!cfg.msalClientId)
+      throw new ApiRequestError("MS_NOT_CONFIGURED", "Microsoft sign-in isn't configured.");
+
+    // Lazy so MSAL stays out of the initial bundle.
+    const { PublicClientApplication } = await import("@azure/msal-browser");
+    const msal = new PublicClientApplication({
+      auth: {
+        clientId: cfg.msalClientId,
+        ...(cfg.msalTenantId
+          ? { authority: `https://login.microsoftonline.com/${cfg.msalTenantId}` }
+          : {}),
+      },
+    });
+    await msal.initialize();
+    const result = await msal.loginPopup({
+      ...(cfg.msalRedirectUri ? { redirectUri: cfg.msalRedirectUri } : {}),
+      scopes: ["openid"],
+    });
+    if (!result.idToken)
+      throw new ApiRequestError("MS_LOGIN_FAILED", "Microsoft didn't return a sign-in token.");
+
+    const { jwt } = await post<LoginResult>("/accounts/login", { MsToken: result.idToken });
+    setToken(jwt);
+    return loadSession();
+  },
+
+  async logout(): Promise<void> {
+    try {
+      await post("/accounts/logout");
+    } finally {
+      clearToken();
+    }
+  },
+
+  async updateProfile(changes: { displayName: string }): Promise<Session> {
+    const current = await loadSession();
+    await post(`/accounts/${current.user.id}`, { name: changes.displayName });
+    return loadSession();
+  },
+
+  async changePassword(currentPassword: string, newPassword: string): Promise<void> {
+    await post("/accounts/changePassword", {
+      oldPassword: currentPassword,
+      newPassword,
+    });
+  },
+};
diff --git a/SW.Bitween.Web/ClientApp/src/api/http/settings.ts b/SW.Bitween.Web/ClientApp/src/api/http/settings.ts
new file mode 100644
index 00000000..b41d1817
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/api/http/settings.ts
@@ -0,0 +1,21 @@
+import type { ApiClient } from "../client";
+import type { SettingRow } from "../types";
+import { get, post, request } from "./request";
+
+export const settingsMethods = {
+  /**
+   * The backend owns the catalog (label, section, kind, default, secret), so rows arrive
+   * ready to render — including which section each belongs to and, for secrets, only
+   * whether a value is set.
+   */
+  listSettings(): Promise<SettingRow[]> {
+    return get<SettingRow[]>("/settings");
+  },
+
+  /** A null value resets the setting, which is a DELETE rather than a write. */
+  async updateSetting(key: string, value: string | null): Promise<void> {
+    const path = `/settings/${encodeURIComponent(key)}`;
+    if (value === null) await request<void>(path, { method: "DELETE" });
+    else await post(path, { value });
+  },
+} satisfies Partial<ApiClient>;
diff --git a/SW.Bitween.Web/ClientApp/src/api/http/team.ts b/SW.Bitween.Web/ClientApp/src/api/http/team.ts
new file mode 100644
index 00000000..45b4b5e9
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/api/http/team.ts
@@ -0,0 +1,157 @@
+import type { ApiClient } from "../client";
+import {
+  ApiRequestError,
+  type PermissionArea,
+  type PermissionKey,
+  type Role,
+  type User,
+} from "../types";
+import { get, post, request } from "./request";
+
+interface SearchyResponse<T> {
+  result: T[];
+  totalCount: number;
+}
+
+interface RawRoleSummary {
+  id: number;
+  name: string;
+}
+
+interface RawAccount {
+  id: number;
+  name: string;
+  email: string;
+  role: string;
+  disabled: boolean;
+  createdOn: string;
+  roles: RawRoleSummary[] | null;
+}
+
+interface RawRole {
+  id: number;
+  name: string;
+  description: string | null;
+  isSystem: boolean;
+  permissions: string[] | null;
+  memberCount: number;
+  createdOn: string;
+}
+
+const toUser = (r: RawAccount): User => ({
+  id: String(r.id),
+  displayName: r.name,
+  email: r.email,
+  roleIds: (r.roles ?? []).map((role) => String(role.id)),
+  status: r.disabled ? "disabled" : "active",
+  // Not tracked by the backend: no login-method projection, no last-seen column.
+  microsoftLinked: false,
+  createdOn: r.createdOn,
+});
+
+const toRole = (r: RawRole): Role => ({
+  id: String(r.id),
+  name: r.name,
+  description: r.description ?? "",
+  permissions: r.permissions ?? [],
+  isSystem: r.isSystem,
+  createdOn: r.createdOn,
+  memberCount: r.memberCount,
+});
+
+/** One page big enough for any realistic team — the backend defaults to 20. */
+const ALL_MEMBERS = 500;
+
+async function fetchUsers(): Promise<User[]> {
+  const res = await get<SearchyResponse<RawAccount>>(`/accounts?limit=${ALL_MEMBERS}`);
+  return (res.result ?? []).map(toUser);
+}
+
+async function fetchUser(id: string): Promise<User> {
+  // No GET /accounts/{id} exists, so read the member out of the list.
+  const user = (await fetchUsers()).find((u) => u.id === id);
+  if (!user) throw new ApiRequestError("NOT_FOUND", "This member no longer exists.");
+  return user;
+}
+
+export const teamMethods = {
+  // — permission catalog —
+  async getPermissionCatalog(): Promise<PermissionArea[]> {
+    return await get<PermissionArea[]>("/permissions");
+  },
+
+  // — members —
+  listUsers: fetchUsers,
+  getUser: fetchUser,
+
+  async createUser({
+    displayName,
+    email,
+    password,
+    roleIds,
+  }: {
+    displayName: string;
+    email: string;
+    password: string;
+    roleIds: string[];
+  }): Promise<User> {
+    const id = await post<number>("/accounts", {
+      name: displayName,
+      email,
+      password,
+      roleIds: roleIds.map(Number),
+    });
+    return fetchUser(String(id));
+  },
+
+  async setUserPassword(id: string, password: string): Promise<void> {
+    await post(`/accounts/${id}/setPassword`, { password });
+  },
+
+  async updateUserRoles(id: string, roleIds: string[]): Promise<User> {
+    await post(`/accounts/${id}/setRoles`, { roleIds: roleIds.map(Number) });
+    return fetchUser(id);
+  },
+
+  async setUserDisabled(id: string, disabled: boolean): Promise<User> {
+    await post(`/accounts/${id}/setDisabled`, { disabled });
+    return fetchUser(id);
+  },
+
+  async deleteUser(id: string): Promise<void> {
+    await post(`/accounts/${id}/remove`, {});
+  },
+
+  // — roles —
+  async listRoles(): Promise<Role[]> {
+    const res = await get<SearchyResponse<RawRole>>("/roles?pageSize=200");
+    return (res.result ?? []).map(toRole);
+  },
+
+  async getRole(id: string): Promise<Role> {
+    const raw = await get<RawRole | null>(`/roles/${id}`);
+    if (!raw) throw new ApiRequestError("NOT_FOUND", "This role no longer exists.");
+    return toRole(raw);
+  },
+
+  async createRole(input: {
+    name: string;
+    description: string;
+    permissions: PermissionKey[];
+  }): Promise<Role> {
+    const id = await post<number>("/roles", input);
+    return teamMethods.getRole(String(id));
+  },
+
+  async updateRole(
+    id: string,
+    input: { name: string; description: string; permissions: PermissionKey[] },
+  ): Promise<Role> {
+    await post(`/roles/${id}`, input);
+    return teamMethods.getRole(id);
+  },
+
+  async deleteRole(id: string): Promise<void> {
+    await request(`/roles/${id}`, { method: "DELETE" });
+  },
+} satisfies Partial<ApiClient>;
diff --git a/SW.Bitween.Web/ClientApp/src/api/http/workGroups.ts b/SW.Bitween.Web/ClientApp/src/api/http/workGroups.ts
new file mode 100644
index 00000000..76749ae4
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/api/http/workGroups.ts
@@ -0,0 +1,149 @@
+import type { ApiClient } from "../client";
+import {
+  ApiRequestError,
+  type IntegrationType,
+  type WorkGroup,
+  type WorkGroupDetail,
+  type WorkGroupRow,
+} from "../types";
+import { get, getEnrichment, post } from "./request";
+
+interface SearchyResponse<T> {
+  result: T[];
+  totalCount: number;
+}
+interface RawWorkGroup {
+  id: number;
+  name: string;
+  busMessageName: string;
+  options: { rabbitMqOptions: { prefetch: number | null; priority: number | null } | null } | null;
+  processorNodeCount: number | null;
+}
+interface RawSubscriptionRef {
+  id: number;
+  name: string;
+  type: number | string;
+}
+
+const SUB_TYPE_BY_NUM: Record<number, IntegrationType> = {
+  1: "Internal",
+  2: "ApiCall",
+  4: "Receiving",
+  8: "Aggregation",
+  16: "GatewayApiCall",
+  32: "BusGateway",
+};
+const INTEGRATION_TYPES: IntegrationType[] = [
+  "Receiving",
+  "GatewayApiCall",
+  "BusGateway",
+  "Internal",
+  "ApiCall",
+  "Aggregation",
+];
+/** Enums may arrive as the numeric value or the name in any case. */
+const toIntegrationType = (t: number | string): IntegrationType => {
+  if (typeof t === "number") return SUB_TYPE_BY_NUM[t] ?? "Internal";
+  return INTEGRATION_TYPES.find((k) => k.toLowerCase() === t.toLowerCase()) ?? "Internal";
+};
+
+async function fetchSubscriptionsByWorkGroup(workGroupId: number): Promise<RawSubscriptionRef[]> {
+  const res = await get<SearchyResponse<RawSubscriptionRef>>(
+    `/subscriptions?filter=${encodeURIComponent(`WorkGroupId:1:${workGroupId}`)}`,
+  );
+  return res.result ?? [];
+}
+
+// WorkGroup has no CreatedOn column on the backend.
+const toWorkGroup = (w: RawWorkGroup): WorkGroup => ({
+  id: w.id,
+  name: w.name,
+  busMessageName: w.busMessageName,
+  options: {
+    rabbitMqOptions: {
+      consumerSettings: {
+        prefetch: w.options?.rabbitMqOptions?.prefetch ?? 0,
+        priority: w.options?.rabbitMqOptions?.priority ?? 0,
+      },
+    },
+  },
+  createdOn: "",
+});
+
+async function fetchRows(): Promise<RawWorkGroup[]> {
+  const res = await get<SearchyResponse<RawWorkGroup>>("/workgroups");
+  return res.result ?? [];
+}
+
+export const workGroupMethods = {
+  async listWorkGroups(): Promise<WorkGroupRow[]> {
+    const [rows, subs] = await Promise.all([
+      fetchRows(),
+      getEnrichment<SearchyResponse<{ workGroupId: number | null }>>("/subscriptions", { result: [], totalCount: 0 }),
+    ]);
+    const countByWorkGroup = new Map<number, number>();
+    for (const s of subs.result ?? []) {
+      if (s.workGroupId == null) continue;
+      countByWorkGroup.set(s.workGroupId, (countByWorkGroup.get(s.workGroupId) ?? 0) + 1);
+    }
+    return rows.map((w) => ({
+      ...toWorkGroup(w),
+      usedByCount: countByWorkGroup.get(w.id) ?? 0,
+      consumerCount: w.processorNodeCount ?? 0,
+    }));
+  },
+
+  async getWorkGroup(id: number): Promise<WorkGroupDetail> {
+    const [rows, subs] = await Promise.all([fetchRows(), fetchSubscriptionsByWorkGroup(id)]);
+    const w = rows.find((x) => x.id === id);
+    if (!w) throw new ApiRequestError("NOT_FOUND", "This work group no longer exists.");
+    return {
+      ...toWorkGroup(w),
+      integrations: subs.map((s) => ({ id: s.id, name: s.name, type: toIntegrationType(s.type) })),
+    };
+  },
+
+  async createWorkGroup(input: {
+    name: string;
+    busMessageName: string;
+    prefetch: number;
+    priority: number;
+  }): Promise<WorkGroup> {
+    const created = await post<{ id: number }>("/workgroups", {
+      name: input.name,
+      busMessageName: input.busMessageName,
+      options: { rabbitMqOptions: { prefetch: input.prefetch, priority: input.priority } },
+    });
+    return {
+      id: created.id,
+      name: input.name,
+      busMessageName: input.busMessageName,
+      options: { rabbitMqOptions: { consumerSettings: { prefetch: input.prefetch, priority: input.priority } } },
+      createdOn: "",
+    };
+  },
+
+  async updateWorkGroup(
+    id: number,
+    changes: { name: string; busMessageName: string; prefetch: number; priority: number },
+  ): Promise<WorkGroup> {
+    await post(`/workgroups/${id}`, {
+      name: changes.name,
+      busMessageName: changes.busMessageName,
+      options: { rabbitMqOptions: { prefetch: changes.prefetch, priority: changes.priority } },
+    });
+    return {
+      id,
+      name: changes.name,
+      busMessageName: changes.busMessageName,
+      options: {
+        rabbitMqOptions: { consumerSettings: { prefetch: changes.prefetch, priority: changes.priority } },
+      },
+      createdOn: "",
+    };
+  },
+
+  async deleteWorkGroup(id: number): Promise<void> {
+    await post(`/workgroups/${id}/delete`, {});
+  },
+} satisfies Partial<ApiClient>;
diff --git a/SW.Bitween.Web/ClientApp/src/api/index.ts b/SW.Bitween.Web/ClientApp/src/api/index.ts
new file mode 100644
index 00000000..14fd7935
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/api/index.ts
@@ -0,0 +1,14 @@
+import type { ApiClient } from "./client";
+import { httpClient } from "./http/httpClient";
+
+/**
+ * The swap point. Everything in the UI imports `api` from here.
+ * This is the real HTTP client — no mock, no toggle. Domains not yet wired
+ * reject with NotWiredError so their screens read as honestly-not-connected
+ * (see BACKEND_WIRING_PLAN §2).
+ */
+export const api: ApiClient = httpClient;
+
+export { getAppConfig, resetAppConfig } from "./http/appConfig";
+export type { AppConfig } from "./http/appConfig";
+export * from "./types";
diff --git a/SW.Bitween.Web/ClientApp/src/api/permissions.ts b/SW.Bitween.Web/ClientApp/src/api/permissions.ts
new file mode 100644
index 00000000..a1cb5923
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/api/permissions.ts
@@ -0,0 +1,48 @@
+import { useQuery } from "@tanstack/react-query";
+import { api } from ".";
+import type { ActionId, PermissionArea, PermissionKey } from "./types";
+
+/**
+ * The permission catalog is defined and enforced in the backend (SW.Bitween.Sdk/Model/Permissions.cs)
+ * and served by GET /permissions. It deliberately does not live here as well: a second copy would
+ * silently drift, and the role matrix would start offering grants the API ignores.
+ *
+ * What stays here is presentation — how an action is worded and the order columns appear in.
+ */
+export const ACTION_LABELS: Record<ActionId, string> = {
+  view: "View",
+  create: "Create",
+  edit: "Edit",
+  delete: "Delete",
+  operate: "Operate",
+};
+
+/** All actions in the order matrix columns render. */
+export const ACTION_ORDER: ActionId[] = ["view", "create", "edit", "delete", "operate"];
+
+export const permissionKey = (areaId: string, actionId: ActionId): PermissionKey =>
+  `${areaId}.${actionId}`;
+
+/** Static per deployment, so it's fetched once and kept. */
+export function usePermissionCatalog() {
+  return useQuery({
+    queryKey: ["permission-catalog"],
+    queryFn: () => api.getPermissionCatalog(),
+    staleTime: Infinity,
+  });
+}
+
+export const allKeysIn = (areas: PermissionArea[]): PermissionKey[] =>
+  areas.flatMap((area) => area.actions.map((a) => permissionKey(area.id, a.id as ActionId)));
+
+/** Navigation groups, in the order the backend lists them. */
+export const groupsIn = (areas: PermissionArea[]): string[] => [
+  ...new Set(areas.map((area) => area.group)),
+];
+
+/** "Integrations · Edit" for a key, falling back to the raw key for anything unrecognised. */
+export const labelIn = (areas: PermissionArea[], key: PermissionKey): string => {
+  const [areaId, actionId] = key.split(".");
+  const area = areas.find((a) => a.id === areaId);
+  return area ? `${area.label} · ${ACTION_LABELS[actionId as ActionId] ?? actionId}` : key;
+};
diff --git a/SW.Bitween.Web/ClientApp/src/api/types.ts b/SW.Bitween.Web/ClientApp/src/api/types.ts
new file mode 100644
index 00000000..1f92efd1
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/api/types.ts
@@ -0,0 +1,761 @@
+/** Shared API shapes. These model the contract the real backend will need to satisfy. */
+
+export type ActionId = "view" | "create" | "edit" | "delete" | "operate";
+
+/** e.g. "subscriptions.edit" */
+export type PermissionKey = string;
+
+export interface PermissionAction {
+  id: ActionId;
+  /** What this specific grant allows, in end-user words. */
+  description: string;
+}
+
+export interface PermissionArea {
+  id: string;
+  label: string;
+  group: string;
+  description: string;
+  actions: PermissionAction[];
+}
+
+export interface Role {
+  id: string;
+  name: string;
+  description: string;
+  permissions: PermissionKey[];
+  /** Built-in roles (Administrator) can't be edited or deleted. */
+  isSystem: boolean;
+  createdOn: string;
+  memberCount: number;
+}
+
+export type UserStatus = "active" | "disabled";
+
+export interface User {
+  id: string;
+  displayName: string;
+  email: string;
+  roleIds: string[];
+  status: UserStatus;
+  /** Whether a Microsoft account is linked for SSO. */
+  microsoftLinked: boolean;
+  createdOn: string;
+  lastActiveOn?: string;
+}
+
+/** Just enough to name a role. Full definitions need the roles.view permission. */
+export interface RoleSummary {
+  id: string;
+  name: string;
+}
+
+export interface Session {
+  user: User;
+  roles: RoleSummary[];
+  /** The union of every permission the user's roles grant — resolved by the backend. */
+  permissions: PermissionKey[];
+}
+
+export interface ApiError {
+  code: string;
+  message: string;
+}
+
+export class ApiRequestError extends Error {
+  code: string;
+  constructor(code: string, message: string) {
+    super(message);
+    this.code = code;
+  }
+}
+
+/**
+ * Thrown by any ApiClient method whose domain hasn't been wired to the real
+ * backend yet. Screens surface this as an honest "Not connected yet" state —
+ * never fake data. Batches remove these as they land.
+ */
+export class NotWiredError extends Error {
+  code = "NOT_WIRED";
+  constructor(method: string) {
+    super(`"${method}" isn't connected to the backend yet.`);
+  }
+}
+
+// ——— Configuration entities (sub-phase 2) ———
+
+/** Lightweight references for "used by" panels. */
+export interface IntegrationSetupRef {
+  id: number;
+  name: string;
+  type: IntegrationType;
+}
+export interface ApiGatewayAttachmentRef {
+  gatewayId: number;
+  gatewayName: string;
+  urlName: string;
+}
+export interface BusGatewayRouteRef {
+  gatewayId: number;
+  gatewayName: string;
+  matchExpression: string;
+}
+/** The pipeline stages that can each produce a document for an exchange. */
+export type ExchangeDocStage = "Input" | "Mapped" | "Handled";
+export interface ExchangeDocument {
+  stage: ExchangeDocStage;
+  content: string;
+}
+export interface ExchangeRef {
+  id: string;
+  partnerName?: string;
+  informationTypeCode: string;
+  status: ExchangeStatus;
+  on: string;
+  /** Documents produced as the exchange moved through the pipeline, for drill-down previews. */
+  documents?: ExchangeDocument[];
+}
+
+/**
+ * Lightweight summary of every integration, cached client-side so pages
+ * can answer "who uses this property/value/policy?" without new requests.
+ * Derived server-side by scanning adapter property values for tokens.
+ */
+export interface IntegrationInfo {
+  id: number;
+  name: string;
+  type: IntegrationType;
+  /**
+   * Partners this integration runs for: its own partner (legacy types)
+   * plus partners linked through gateway attachments and bus routes.
+   */
+  partnerIds: number[];
+  informationTypeId: number;
+  workGroupId: number | null;
+  retryPolicyId: number | null;
+  /** Keys of partner properties referenced by its adapters ({{partner.KEY}}). */
+  partnerPropKeys: string[];
+  /** Global value references, per set. */
+  globals: { setId: string; keys: string[] }[];
+}
+export interface TrailEntry {
+  on: string;
+  action: "Created" | "Updated";
+  by: string;
+  /** Absent for system-attributed entries with no real team member behind them. */
+  byUserId?: string;
+}
+
+export interface ApiCredentialRef {
+  name: string;
+  /** Only the first characters — full keys are shown once, at creation. */
+  keyPrefix: string;
+  createdOn: string;
+}
+
+export interface Partner {
+  id: number;
+  name: string;
+  /** Referenced in adapter configs as {{partner.KEY}}. */
+  adapterProperties: Record<string, string>;
+  /** The built-in SYSTEM partner can't be renamed or deleted. */
+  isSystem: boolean;
+  createdOn: string;
+}
+export interface PartnerRow extends Partner {
+  credentialCount: number;
+  usedByCount: number;
+  /** Property names only — the list endpoint never sends values, which may be secrets. */
+  propertyKeys: string[];
+}
+export interface PartnerDetail extends Partner {
+  apiCredentials: ApiCredentialRef[];
+  integrationSetups: IntegrationSetupRef[];
+  apiGateways: ApiGatewayAttachmentRef[];
+  busGatewayRoutes: BusGatewayRouteRef[];
+  recentExchanges: ExchangeRef[];
+}
+
+export type InformationTypeFormat = "Json" | "Xml";
+
+export interface InformationType {
+  id: number;
+  /** Short unique identity shown across the system, e.g. PURCHASE_ORDER. Optional. */
+  code?: string;
+  name: string;
+  format: InformationTypeFormat;
+  busEnabled: boolean;
+  busMessageTypeName?: string;
+  /** How long an identical incoming payload counts as a duplicate. 0 = off. */
+  duplicateIntervalMinutes: number;
+  disregardsUnfilteredMessages: boolean;
+  /** Friendly name → JSONPath/XPath, matched by routes and filters. */
+  promotedProperties: { key: string; path: string }[];
+  createdOn: string;
+}
+export interface InformationTypeRow extends InformationType {
+  usedByCount: number;
+}
+export interface InformationTypeDetail extends InformationType {
+  integrationSetups: IntegrationSetupRef[];
+  busGateways: { gatewayId: number; gatewayName: string }[];
+  trail: TrailEntry[];
+  recentExchanges: ExchangeRef[];
+}
+
+export interface GlobalValuesSet {
+  /** Caller-chosen slug; referenced as {{globals.<id>.<key>}}. */
+  id: string;
+  name: string;
+  values: Record<string, string>;
+  createdOn: string;
+}
+export interface GlobalValuesSetRow extends GlobalValuesSet {
+  usedByCount: number;
+}
+export interface ValueSetUsage {
+  integrationSetup: IntegrationSetupRef;
+  keys: string[];
+}
+export interface GlobalValuesSetDetail extends GlobalValuesSet {
+  usedBy: ValueSetUsage[];
+}
+
+// ——— Retry policies ———
+
+export type RetryResultType = "Error" | "BadResult";
+
+export type RetryMatcher =
+  | { type: "contains"; value: string; caseSensitive: boolean }
+  | { type: "regex"; pattern: string; flags: string }
+  | { type: "exceptionType"; value: string; includeInner: boolean }
+  | { type: "jsonPath"; path: string; op: "Eq" | "Neq" | "Contains" | "Exists" | "NotExists"; value?: string };
+
+export type RetryDelay =
+  | { type: "fixed"; delaySeconds: number }
+  | { type: "linear"; initialSeconds: number; incrementSeconds: number }
+  | { type: "exponential"; initialSeconds: number; multiplier: number; maxSeconds: number };
+
+export interface RetryGroup {
+  id: string;
+  name: string;
+  /** Lower runs first; the first matching group decides. */
+  priority: number;
+  enabled: boolean;
+  appliesTo: RetryResultType[];
+  /** OR logic; empty = any failure of the applicable kind. */
+  matchers: RetryMatcher[];
+  action: "Allow" | "Block";
+  budget?: { maxAttemptsPerError: number; maxAttemptsTotal: number; delay: RetryDelay };
+  notes?: string;
+}
+
+export interface RetryPolicy {
+  id: number;
+  name: string;
+  groups: RetryGroup[];
+  createdOn: string;
+}
+export interface RetryPolicyListRow {
+  id: number;
+  name: string;
+  /** The list only counts groups; the full list is in the detail response. */
+  groupCount: number;
+  createdOn: string;
+  usedByCount: number;
+}
+export interface RetryPolicyDetail extends RetryPolicy {
+  integrations: IntegrationSetupRef[];
+}
+
+export interface RetryTestAttempt {
+  attempt: number;
+  shouldRetry: boolean;
+  delaySeconds?: number;
+  matchedGroup?: string;
+  reason: string;
+}
+
+// ——— Notifiers ———
+
+export interface Notifier {
+  id: number;
+  name: string;
+  /** Off pauses the notifier without losing its setup. */
+  enabled: boolean;
+  /** Which exchange outcomes trigger a notification. */
+  onFailed: boolean;
+  onBadResult: boolean;
+  onSuccess: boolean;
+  channelId: string;
+  channelProperties: Record<string, string>;
+  /** Integrations this notifier watches; empty = it never fires. */
+  integrationIds: number[];
+  createdOn: string;
+}
+
+/** One delivery attempt from the notification history. */
+export interface NotificationEntry {
+  xchangeId: string;
+  success: boolean;
+  exception?: string;
+  on: string;
+}
+
+export interface NotifierDetail extends Notifier {
+  recentNotifications: NotificationEntry[];
+}
+
+// ——— Integrations (subscriptions) ———
+
+/**
+ * Backend Subscription.Type. Aggregation exists in data but is deferred in
+ * this UI; Internal and ApiCall are legacy — shown and editable, never created.
+ */
+export type IntegrationType =
+  | "Receiving"
+  | "GatewayApiCall"
+  | "BusGateway"
+  | "Internal"
+  | "ApiCall"
+  | "Aggregation";
+
+export type AdapterKind = "receiver" | "handler" | "mapper" | "validator";
+
+/** One configurable property of an adapter, from its startup-value metadata. */
+export interface AdapterProp {
+  key: string;
+  optional: boolean;
+  default?: string;
+  /** Secret values are write-only: masked after save, replaced not edited. */
+  secret: boolean;
+  description?: string;
+}
+
+export interface AdapterInfo {
+  id: string;
+  kind: AdapterKind;
+  /** Friendly display name, e.g. "HTTP endpoint" for NativeHttpHandler. */
+  label: string;
+  /** Native adapters run in-process; others are deployed packages with versions. */
+  native: boolean;
+  versions: string[];
+  props: AdapterProp[];
+}
+
+/**
+ * Message filter over an information type's promoted properties.
+ * Groups are n-ary here (friendlier to edit); the backend's binary
+ * and/or tree converts losslessly both ways.
+ */
+export type MatchCondition = {
+  op: "oneOf" | "notOneOf";
+  path: string;
+  values: string[];
+};
+export type MatchGroup = {
+  op: "and" | "or";
+  children: MatchNode[];
+};
+export type MatchNode = MatchGroup | MatchCondition;
+
+export type Recurrence = "Hourly" | "Daily" | "Weekly" | "Monthly";
+
+export interface Schedule {
+  recurrence: Recurrence;
+  /** Weekly: weekday 0–6 (Sun–Sat); Monthly: day of month 1–27; otherwise 0. */
+  days: number;
+  hours: number;
+  minutes: number;
+  /** Count the offset from the end of the period instead of the start. */
+  backwards: boolean;
+}
+
+export interface Integration {
+  id: number;
+  name: string;
+  type: IntegrationType;
+  informationTypeId: number;
+  /** Direct partner — legacy Internal/ApiCall (and Aggregation) only. */
+  partnerId: number | null;
+  /** Inverse of backend Inactive. Disabled = not scheduled, not matched. */
+  enabled: boolean;
+  /** Paused still accepts work but holds it for later release. */
+  pausedOn: string | null;
+  workGroupId: number | null;
+  retryPolicyId: number | null;
+  receiverId: string | null;
+  receiverProperties: Record<string, string>;
+  validatorId: string | null;
+  validatorProperties: Record<string, string>;
+  mapperId: string | null;
+  mapperProperties: Record<string, string>;
+  handlerId: string | null;
+  handlerProperties: Record<string, string>;
+  /** Legacy Internal only: which documents this integration picks up. */
+  matchExpression: MatchGroup | null;
+  /** Receiving (and Aggregation) only. */
+  schedules: Schedule[];
+  /** Feed the handler's response into another integration. */
+  responseIntegrationId: number | null;
+  responseMessageTypeName: string | null;
+  aggregationForId: number | null;
+  // — health (read-only) —
+  isRunning: boolean;
+  /** Receiving (and Aggregation) only — when the schedule will next fire, not when it last did. */
+  nextReceiveOn: string | null;
+  consecutiveFailures: number;
+  lastException: string | null;
+  createdOn: string;
+}
+
+export interface IntegrationRow {
+  id: number;
+  name: string;
+  type: IntegrationType;
+  informationTypeId: number;
+  informationTypeCode: string;
+  partners: { id: number; name: string }[];
+  enabled: boolean;
+  paused: boolean;
+  isRunning: boolean;
+  consecutiveFailures: number;
+  lastException: string | null;
+  scheduleSummary?: string;
+  /** Receiving (and Aggregation) only — when the schedule will next fire, not when it last did. */
+  nextReceiveOn: string | null;
+  createdOn: string;
+}
+
+export interface IntegrationDetail extends Integration {
+  informationTypeCode: string;
+  informationTypeName: string;
+  /** Where this integration is plugged in (entry points). */
+  apiGatewayAttachments: { gatewayId: number; gatewayName: string; urlName: string; partnerId: number; partnerName: string }[];
+  busGatewayRoutes: { gatewayId: number; gatewayName: string; partnerId: number | null; partnerName: string | null }[];
+  watchingNotifiers: { id: number; name: string }[];
+  recentExchanges: ExchangeRef[];
+  trail: TrailEntry[];
+}
+
+export interface WorkGroupOptions {
+  rabbitMqOptions: {
+    consumerSettings: {
+      prefetch: number;
+      priority: number;
+    };
+  };
+}
+
+export interface WorkGroup {
+  id: number;
+  name: string;
+  /** Queue name suffix; combined with the id to form the real queue name. */
+  busMessageName: string;
+  options: WorkGroupOptions;
+  createdOn: string;
+}
+export interface WorkGroupRow extends WorkGroup {
+  usedByCount: number;
+  /** Best-effort live count from the RabbitMQ management API. */
+  consumerCount: number;
+}
+export interface WorkGroupDetail extends WorkGroup {
+  integrations: IntegrationSetupRef[];
+}
+
+// ——— API gateways ———
+
+export interface ApiGatewayAttachment {
+  partnerId: number;
+  partnerName: string;
+  integrationId: number;
+  integrationName: string;
+}
+export interface ApiGateway {
+  id: number;
+  name: string;
+  urlName: string;
+  createdOn: string;
+}
+export interface ApiGatewayRow extends ApiGateway {
+  partnerCount: number;
+  attachments: ApiGatewayAttachment[];
+}
+export interface ApiGatewayDetail extends ApiGateway {
+  attachments: ApiGatewayAttachment[];
+}
+
+// ——— Bus gateways ———
+
+export interface BusGatewayRoute {
+  id: number;
+  integrationId: number;
+  integrationName: string;
+  partnerId: number | null;
+  partnerName: string | null;
+  /** null = route matches every message of the gateway's type. */
+  matchExpression: MatchGroup | null;
+}
+export interface BusGateway {
+  id: number;
+  name: string;
+  informationTypeId: number;
+  createdOn: string;
+}
+export interface BusGatewayRow extends BusGateway {
+  informationTypeCode: string;
+  routeCount: number;
+  routes: BusGatewayRoute[];
+}
+export interface BusGatewayDetail extends BusGateway {
+  informationTypeCode: string;
+  informationTypeName: string;
+  routes: BusGatewayRoute[];
+}
+
+// ——— Settings ———
+
+export type SettingValueKind = "string" | "number" | "boolean" | "color";
+
+/**
+ * How a row behaves:
+ * - `editable` — stored in the database, changeable here, takes effect immediately.
+ * - `readonly` — an environment value, shown so you can see what this instance runs
+ *   on. Read once at startup, so there's nothing to change here.
+ * - `presence` — an environment value whose content stays on the server; only
+ *   whether it's set is reported.
+ */
+export type SettingAccess = "editable" | "readonly" | "presence";
+
+/**
+ * One setting on the settings page. Only settings that take effect immediately are
+ * editable, so there is no "restart required" state to represent — anything read
+ * once at startup appears as `readonly` or `presence` instead.
+ */
+export interface SettingRow {
+  /** Stable key; mirrors the config path (e.g. "Bitween.RebexLicenseKey"). */
+  key: string;
+  /** Grouping label owned by the backend catalog; the page derives its pills from these. */
+  section: string;
+  label: string;
+  description: string;
+  kind: SettingValueKind;
+  /** The product default a reset returns to. Stored as a string per `kind`; empty for secrets. */
+  defaultValue: string;
+  /** The stored value, or null for a secret — those never leave the server. */
+  value: string | null;
+  secret: boolean;
+  /** The stored value differs from the product default, so a reset would do something. */
+  overridden: boolean;
+  /** Whether the effective value is non-empty — the only way a secret reveals it is set. */
+  hasValue: boolean;
+  /**
+   * Whether this row can be written. False for every environment value, and for a secret on an
+   * instance with no encryption key configured — there's nowhere safe to store that one.
+   */
+  editable: boolean;
+  access: SettingAccess;
+}
+
+// ——— Exchanges ———
+
+/**
+ * The four observable outcomes of an exchange. "badResponse" = the handler
+ * delivered but the receiving system answered with a business-level error.
+ */
+export type ExchangeStatus = "processing" | "success" | "badResponse" | "failed";
+
+export interface ExchangeFileRef {
+  name: string;
+  /** Bytes. */
+  size: number;
+  /** Storage key to fetch this stage's content through `getExchangeDocument`; null if no file exists. */
+  key: string | null;
+}
+
+/** One exchange as the Exchanges page sees it — names pre-resolved for display. */
+export interface ExchangeRow {
+  id: string;
+  status: ExchangeStatus;
+  integrationId: number | null;
+  integrationName: string | null;
+  informationTypeId: number;
+  informationTypeCode: string;
+  partnerId: number | null;
+  partnerName: string | null;
+  startedOn: string;
+  /** null while still processing. */
+  finishedOn: string | null;
+  correlationId: string | null;
+  /** Set when this exchange is a retry of another one. */
+  retryFor: string | null;
+  /** Set when this exchange was rolled up into an aggregation exchange. */
+  aggregationXchangeId: string | null;
+  /** A pending auto-retry, when the retry policy scheduled one. */
+  scheduledRetryOn: string | null;
+  exception: string | null;
+  promotedProperties: Record<string, string> | null;
+  /** True when the integration has no mapper — the Mapped stage is skipped. */
+  mapperSkipped: boolean;
+  files: {
+    input: ExchangeFileRef | null;
+    mapped: ExchangeFileRef | null;
+    handled: ExchangeFileRef | null;
+  };
+}
+
+export interface ExchangeQuery {
+  status?: ExchangeStatus;
+  integrationId?: number;
+  partnerId?: number;
+  informationTypeId?: number;
+  /** Comma/pipe/newline separated; matches id, retryFor OR aggregationXchangeId. */
+  ids?: string;
+  correlationId?: string;
+  /** Substring match against promoted property keys and values. */
+  property?: string;
+  from?: string;
+  to?: string;
+  offset: number;
+  limit: number;
+}
+
+export interface Paged<T> {
+  result: T[];
+  total: number;
+}
+
+// ——— Scheduled retries ———
+
+/** A failed exchange whose retry policy scheduled an automatic retry. */
+export interface ScheduledRetryRow {
+  /** The exchange the retry will re-run. */
+  id: string;
+  /** When the retry job will pick it up. */
+  on: string;
+  integrationId: number | null;
+  integrationName: string | null;
+  informationTypeId: number;
+  informationTypeCode: string;
+  exception: string | null;
+  /** When the failed exchange originally started. */
+  startedOn: string;
+  /**
+   * The shared retry policy the integration currently points at. Null when the
+   * policy is defined inline on the integration instead, so the integration — not
+   * the Retry policies list — is where to go and look.
+   */
+  retryPolicyId: number | null;
+  retryPolicyName: string | null;
+}
+
+export interface ScheduledRetryQuery {
+  integrationId?: number;
+  informationTypeId?: number;
+  /** Substring match against the exception text. */
+  exception?: string;
+  from?: string;
+  to?: string;
+  offset: number;
+  limit: number;
+}
+
+// ——— Queue health (Ops) ———
+
+export type QueueSeverity = "healthy" | "warning" | "critical";
+
+export interface QueueHealthSummary {
+  totalConsumers: number;
+  unhealthyConsumers: number;
+  disconnectedConsumers: number;
+  totalQueueDepth: number;
+  totalRetryBacklog: number;
+  totalDeadLetterBacklog: number;
+  /** Messages per second, across all queues. */
+  totalIncomingRate: number;
+  totalAckRate: number;
+  lastUpdated: string;
+}
+
+export interface ConsumerHealth {
+  name: string;
+  messageName: string;
+  queueName: string;
+  /** Set when the consumer belongs to a work group, for drill-down. */
+  workGroupId: number | null;
+  totalNodes: number;
+  processingCount: number;
+  queueCount: number;
+  retryCount: number;
+  failedCount: number;
+  priority: number;
+  prefetch: number;
+  incomingRate: number;
+  ackRate: number;
+  isBackpressured: boolean;
+  health: QueueSeverity;
+}
+
+export interface RetryBacklogRow {
+  consumerName: string;
+  queueName: string;
+  retryBacklog: number;
+  incomingRate: number;
+  ackRate: number;
+  severity: QueueSeverity;
+}
+
+export interface DeadLetterRow {
+  consumerName: string;
+  queueName: string;
+  count: number;
+  lastExceptionType: string | null;
+  lastExceptionMessage: string | null;
+  lastFailedAt: string | null;
+}
+
+export interface QueueAlert {
+  severity: "warning" | "critical";
+  title: string;
+  detail: string;
+  queueName: string;
+  on: string;
+}
+
+/** One poll = one snapshot; everything the Queue health page shows. */
+export interface QueueHealthSnapshot {
+  summary: QueueHealthSummary;
+  consumers: ConsumerHealth[];
+  retryBacklog: RetryBacklogRow[];
+  deadLetters: DeadLetterRow[];
+  alerts: QueueAlert[];
+}
+
+// ——— Dashboard ———
+
+export interface DashboardData {
+  today: { total: number; failed: number; processing: number };
+  yesterdayTotal: number;
+  /** Percentage 0–100 across the last 7 days of finished exchanges. */
+  successRate7d: number;
+  pendingRetries: number;
+  queueAlerts: number;
+  /** Last 14 days, oldest first; today is the final entry. */
+  trafficByDay: { date: string; success: number; failed: number }[];
+  /** Top integrations by 7-day traffic, busiest first. */
+  busiest: { id: number; name: string; count: number; failed: number }[];
+  latestFailures: {
+    id: string;
+    status: ExchangeStatus;
+    integrationId: number | null;
+    integrationName: string | null;
+    informationTypeCode: string;
+    on: string;
+    exception: string | null;
+  }[];
+  attention: {
+    failingIntegrations: { id: number; name: string; consecutiveFailures: number }[];
+    pausedIntegrations: { id: number; name: string }[];
+  };
+}
diff --git a/SW.Bitween.Web/ClientApp/src/auth/SessionContext.tsx b/SW.Bitween.Web/ClientApp/src/auth/SessionContext.tsx
new file mode 100644
index 00000000..7c520dd7
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/auth/SessionContext.tsx
@@ -0,0 +1,96 @@
+import {
+  createContext,
+  useCallback,
+  useContext,
+  useEffect,
+  useMemo,
+  useState,
+  type ReactNode,
+} from "react";
+import { useQueryClient } from "@tanstack/react-query";
+import { api, type PermissionKey, type Session } from "../api";
+
+interface SessionContextValue {
+  session: Session | null;
+  /** True until the stored session has been checked once at startup. */
+  initializing: boolean;
+  can: (permission: PermissionKey) => boolean;
+  signIn: (email: string, password: string) => Promise<Session>;
+  signInWithMicrosoft: () => Promise<Session>;
+  /** Adopt a session produced elsewhere (invite acceptance, demo switch). */
+  adoptSession: (session: Session) => void;
+  /** Re-fetch the session after profile changes. */
+  refresh: () => Promise<void>;
+  signOut: () => Promise<void>;
+}
+
+const SessionContext = createContext<SessionContextValue | null>(null);
+
+export function SessionProvider({ children }: { children: ReactNode }) {
+  const [session, setSession] = useState<Session | null>(null);
+  const [initializing, setInitializing] = useState(true);
+  const queryClient = useQueryClient();
+
+  useEffect(() => {
+    api
+      .getSession()
+      .then(setSession)
+      .finally(() => setInitializing(false));
+  }, []);
+
+  const adoptSession = useCallback(
+    (next: Session) => {
+      // a different identity invalidates everything previously fetched
+      queryClient.clear();
+      setSession(next);
+    },
+    [queryClient],
+  );
+
+  const signIn = useCallback(
+    async (email: string, password: string) => {
+      const next = await api.login(email, password);
+      adoptSession(next);
+      return next;
+    },
+    [adoptSession],
+  );
+
+  const signInWithMicrosoft = useCallback(async () => {
+    const next = await api.loginWithMicrosoft();
+    adoptSession(next);
+    return next;
+  }, [adoptSession]);
+
+  const refresh = useCallback(async () => {
+    setSession(await api.getSession());
+  }, []);
+
+  const signOut = useCallback(async () => {
+    await api.logout();
+    queryClient.clear();
+    setSession(null);
+  }, [queryClient]);
+
+  const value = useMemo<SessionContextValue>(
+    () => ({
+      session,
+      initializing,
+      can: (permission) => session?.permissions.includes(permission) ?? false,
+      signIn,
+      signInWithMicrosoft,
+      adoptSession,
+      refresh,
+      signOut,
+    }),
+    [session, initializing, signIn, signInWithMicrosoft, adoptSession, refresh, signOut],
+  );
+
+  return <SessionContext.Provider value={value}>{children}</SessionContext.Provider>;
+}
+
+export function useSession(): SessionContextValue {
+  const ctx = useContext(SessionContext);
+  if (!ctx) throw new Error("useSession must be used inside <SessionProvider>");
+  return ctx;
+}
diff --git a/SW.Bitween.Web/ClientApp/src/auth/guards.tsx b/SW.Bitween.Web/ClientApp/src/auth/guards.tsx
new file mode 100644
index 00000000..d87db0e2
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/auth/guards.tsx
@@ -0,0 +1,68 @@
+import type { ReactNode } from "react";
+import { Navigate, Outlet, useLocation } from "react-router";
+import { Lock } from "lucide-react";
+import type { PermissionKey } from "../api";
+import { labelIn, usePermissionCatalog } from "../api/permissions";
+import { useSession } from "./SessionContext";
+
+/** Redirects to /login when signed out; shows a splash while checking. */
+export function RequireAuth() {
+  const { session, initializing } = useSession();
+  const location = useLocation();
+
+  if (initializing) {
+    return (
+      <div className="flex min-h-screen items-center justify-center bg-canvas">
+        <img src={import.meta.env.BASE_URL + "brand/BitweenIcon.svg"} alt="Bitween" className="size-10 animate-pulse" />
+      </div>
+    );
+  }
+  if (!session) {
+    return <Navigate to="/login" state={{ from: location.pathname + location.search }} replace />;
+  }
+  return <Outlet />;
+}
+
+/** Full-page stop for routes the session's roles don't unlock. */
+export function AccessDenied({ permission }: { permission: PermissionKey }) {
+  // Falls back to the raw key until the catalog lands — never blocks the message.
+  const label = labelIn(usePermissionCatalog().data ?? [], permission);
+  return (
+    <div className="flex flex-col items-center justify-center gap-3 px-6 py-24 text-center">
+      <span className="flex size-12 items-center justify-center rounded-full bg-ink-100 text-ink-400">
+        <Lock className="size-5" />
+      </span>
+      <h1 className="text-lg font-semibold text-ink-900">You don't have access to this page</h1>
+      <p className="max-w-md text-sm text-ink-500">
+        Seeing it needs the <strong className="font-medium text-ink-700">{label}</strong>{" "}
+        permission, which none of your roles grant. An administrator can change that under Team → Roles.
+      </p>
+    </div>
+  );
+}
+
+/** Route-level permission gate. */
+export function RequirePermission({
+  permission,
+  children,
+}: {
+  permission: PermissionKey;
+  children: ReactNode;
+}) {
+  const { can } = useSession();
+  if (!can(permission)) return <AccessDenied permission={permission} />;
+  return <>{children}</>;
+}
+
+/** Inline gate: unauthorized actions are hidden, never dimmed. */
+export function Can({ permission, children }: { permission: PermissionKey; children: ReactNode }) {
+  const { can } = useSession();
+  if (!can(permission)) return null;
+  return <>{children}</>;
+}
+
+/** Convenience hook for components that branch on a permission. */
+export function useSessionCan(permission: PermissionKey): boolean {
+  const { can } = useSession();
+  return can(permission);
+}
diff --git a/SW.Bitween.Web/ClientApp/src/components/config/AdapterConfig.tsx b/SW.Bitween.Web/ClientApp/src/components/config/AdapterConfig.tsx
new file mode 100644
index 00000000..37fa3299
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/config/AdapterConfig.tsx
@@ -0,0 +1,513 @@
+import { useEffect, useRef, useState } from "react";
+import { Link } from "react-router";
+import { useQuery } from "@tanstack/react-query";
+import { ArrowUpRight, Braces, ChevronDown, ChevronRight, Search } from "lucide-react";
+import { api, type AdapterInfo, type AdapterKind, type PartnerRow } from "../../api";
+import { Button } from "../ui/basics";
+import { Field } from "../ui/forms";
+import { SearchSelect } from "../ui/SearchSelect";
+import { SummaryDisclosure } from "../ui/SummaryDisclosure";
+
+export function useAdapterCatalog(kind: AdapterKind) {
+  return useQuery({
+    queryKey: ["adapters", kind],
+    queryFn: () => api.listAdapters(kind),
+    staleTime: Infinity,
+  });
+}
+
+interface ReferenceToken {
+  label: string;
+  token: string;
+  /** Globals resolve to one literal value; partner properties resolve per-exchange. */
+  value?: string;
+}
+
+/** All insertable reference tokens: every global key + every known partner property. */
+function useReferenceTokens() {
+  const sets = useQuery({ queryKey: ["value-sets"], queryFn: () => api.listValueSets(), staleTime: 60_000 });
+  const partners = useQuery({ queryKey: ["partners"], queryFn: () => api.listPartners(), staleTime: 60_000 });
+  const globals: ReferenceToken[] = (sets.data ?? []).flatMap((s) =>
+    Object.entries(s.values).map(([key, value]) => ({
+      label: `${s.id}.${key}`,
+      token: `{{globals.${s.id}.${key}}}`,
+      value,
+    })),
+  );
+  // propertyKeys, not adapterProperties: the list endpoint deliberately withholds
+  // property values (they can be secrets) and sends only their names, which is all
+  // a reference token needs.
+  const partnerKeys: ReferenceToken[] = [
+    ...new Set((partners.data ?? []).flatMap((p) => p.propertyKeys)),
+  ].map((key) => ({ label: `partner.${key}`, token: `{{partner.${key}}}` }));
+  return { globals, partnerKeys, partners: partners.data ?? [] };
+}
+
+/**
+ * One partner's value for a `{{partner.KEY}}` reference.
+ *
+ * Fetched per partner, and only once the row is expanded. The partners list
+ * deliberately carries property names without their values, so that something like
+ * an FTP password isn't sitting in the browser on every adapter screen; this pulls
+ * the value on demand, for the handful of partners actually being inspected.
+ */
+function PartnerPropValue({ partnerId, propKey }: { partnerId: number; propKey: string }) {
+  const props = useQuery({
+    queryKey: ["partner-adapter-properties", partnerId],
+    queryFn: () => api.getPartnerAdapterProperties(partnerId),
+    staleTime: 60_000,
+  });
+  if (props.isPending) return <span className="text-ink-300">loading…</span>;
+  const value = props.data?.[propKey];
+  return (
+    <code className="rounded bg-ink-100 px-1.5 py-0.5 font-mono text-[11px] break-all text-ink-700">
+      {value === undefined || value === "" ? "—" : value}
+    </code>
+  );
+}
+
+/**
+ * Searchable popover for inserting a `{{globals.…}}` / `{{partner.…}}`
+ * reference. Globals show their literal value; partner properties resolve
+ * per-exchange, so they show a note instead.
+ */
+function ReferenceMenu({
+  globals,
+  partnerKeys,
+  onPick,
+  label,
+}: {
+  globals: ReferenceToken[];
+  partnerKeys: ReferenceToken[];
+  onPick: (token: string) => void;
+  label: string;
+}) {
+  const [open, setOpen] = useState(false);
+  const [query, setQuery] = useState("");
+  const ref = useRef<HTMLDivElement>(null);
+
+  useEffect(() => {
+    if (!open) return;
+    const onDown = (e: MouseEvent) => {
+      if (!ref.current?.contains(e.target as Node)) setOpen(false);
+    };
+    const onKey = (e: KeyboardEvent) => e.key === "Escape" && setOpen(false);
+    document.addEventListener("mousedown", onDown);
+    document.addEventListener("keydown", onKey);
+    return () => {
+      document.removeEventListener("mousedown", onDown);
+      document.removeEventListener("keydown", onKey);
+    };
+  }, [open]);
+
+  const needle = query.trim().toLowerCase();
+  const matches = (t: ReferenceToken) =>
+    !needle || t.label.toLowerCase().includes(needle) || (t.value?.toLowerCase().includes(needle) ?? false);
+  const filteredGlobals = globals.filter(matches);
+  const filteredPartnerKeys = partnerKeys.filter(matches);
+  const noMatches = filteredGlobals.length === 0 && filteredPartnerKeys.length === 0;
+
+  const pick = (token: string) => {
+    onPick(token);
+    setOpen(false);
+    setQuery("");
+  };
+
+  return (
+    <div ref={ref} className="relative">
+      <button
+        type="button"
+        onClick={() => setOpen((o) => !o)}
+        title="Insert a reference"
+        aria-label={label}
+        className="mt-1 rounded-md p-1.5 text-ink-400 hover:bg-ink-100 hover:text-ink-700"
+      >
+        <Braces className="size-4" />
+      </button>
+      {open && (
+        <div className="absolute top-full right-0 z-40 mt-1.5 w-72 rounded-xl border border-ink-100 bg-white p-2 shadow-lg">
+          <div className="relative mb-1.5">
+            <Search className="pointer-events-none absolute top-1/2 left-2.5 size-3.5 -translate-y-1/2 text-ink-400" />
+            <input
+              autoFocus
+              value={query}
+              onChange={(e) => setQuery(e.target.value)}
+              placeholder="Search references"
+              aria-label="Search references"
+              className="h-8 w-full rounded-md border border-ink-200 bg-white pr-2 pl-8 text-[13px] placeholder:text-ink-400 focus:border-crimson-400 focus:ring-2 focus:ring-crimson-100 focus:outline-none"
+            />
+          </div>
+          <div className="max-h-64 space-y-1 overflow-y-auto">
+            {noMatches && <p className="px-2 py-2 text-[13px] text-ink-400">No matches.</p>}
+            {filteredGlobals.length > 0 && (
+              <div>
+                <p className="px-2 py-1 text-[11px] font-medium tracking-wide text-ink-400 uppercase">
+                  Global values
+                </p>
+                {filteredGlobals.map((t) => (
+                  <button
+                    key={t.token}
+                    type="button"
+                    onClick={() => pick(t.token)}
+                    className="flex w-full items-center justify-between gap-2 rounded-lg px-2 py-1.5 text-left hover:bg-ink-50"
+                  >
+                    <span className="min-w-0 truncate font-mono text-xs text-ink-800">{t.label}</span>
+                    <span className="max-w-24 shrink-0 truncate text-xs text-ink-400" title={t.value}>
+                      {t.value}
+                    </span>
+                  </button>
+                ))}
+              </div>
+            )}
+            {filteredPartnerKeys.length > 0 && (
+              <div>
+                <p className="px-2 py-1 text-[11px] font-medium tracking-wide text-ink-400 uppercase">
+                  Partner properties
+                </p>
+                {filteredPartnerKeys.map((t) => (
+                  <button
+                    key={t.token}
+                    type="button"
+                    onClick={() => pick(t.token)}
+                    className="flex w-full items-center justify-between gap-2 rounded-lg px-2 py-1.5 text-left hover:bg-ink-50"
+                  >
+                    <span className="min-w-0 truncate font-mono text-xs text-ink-800">{t.label}</span>
+                    <span className="shrink-0 text-xs text-ink-400">resolved per partner</span>
+                  </button>
+                ))}
+              </div>
+            )}
+          </div>
+        </div>
+      )}
+    </div>
+  );
+}
+
+/**
+ * What the references inside a field's value resolve to, shown right under
+ * it: globals show their literal value (linking to the set); partner
+ * properties show how many partners define them and drill down to every
+ * partner's value.
+ */
+function ReferenceHints({
+  value,
+  globals,
+  partners,
+}: {
+  value: string;
+  globals: ReferenceToken[];
+  partners: PartnerRow[];
+}) {
+  const [openKeys, setOpenKeys] = useState<Set<string>>(new Set());
+
+
+  // Set ids and keys are free-form (spaces included) on the backend — match on the
+  // `{{…}}` delimiters themselves, not a restrictive charset, or refs with a space
+  // in the id/key (e.g. "schedule source url") silently fail to match here.
+  const globalRefs = [...new Set([...value.matchAll(/\{\{globals\.[^}]+\}\}/g)].map((m) => m[0]))];
+  const partnerRefs = [...new Set([...value.matchAll(/\{\{partner\.([^}]+)\}\}/g)].map((m) => m[1]))];
+  if (globalRefs.length === 0 && partnerRefs.length === 0) return null;
+
+  const realPartners = partners.filter((p) => !p.isSystem);
+  const toggle = (key: string) =>
+    setOpenKeys((prev) => {
+      const next = new Set(prev);
+      if (next.has(key)) next.delete(key);
+      else next.add(key);
+      return next;
+    });
+
+  return (
+    <div className="mt-1.5 space-y-1">
+      {globalRefs.map((token) => {
+        const ref = globals.find((g) => g.token === token);
+        const setId = token.match(/\{\{globals\.([^.]+)\./)?.[1];
+        return (
+          <div key={token} className="flex flex-wrap items-center gap-1.5 text-xs">
+            <Link
+              to={`/global-values/${setId}`}
+              className="font-mono text-ink-500 hover:text-crimson-700 hover:underline"
+            >
+              {token}
+            </Link>
+            <span className="text-ink-300">→</span>
+            {ref ? (
+              <code className="rounded bg-ink-100 px-1.5 py-0.5 font-mono text-[11px] break-all text-ink-700">
+                {ref.value}
+              </code>
+            ) : (
+              <span className="font-medium text-danger-700">not found — check the set and key</span>
+            )}
+          </div>
+        );
+      })}
+
+      {partnerRefs.map((key) => {
+        const withValue = realPartners.filter((p) => p.propertyKeys.includes(key));
+        const without = realPartners.length - withValue.length;
+        const open = openKeys.has(key);
+        return (
+          <div key={key} className="text-xs">
+            <button
+              type="button"
+              onClick={() => toggle(key)}
+              aria-expanded={open}
+              className="flex items-center gap-1 text-ink-500 hover:text-ink-700"
+            >
+              {open ? <ChevronDown className="size-3" aria-hidden /> : <ChevronRight className="size-3" aria-hidden />}
+              <span className="font-mono">{`{{partner.${key}}}`}</span>
+              <span className="text-ink-300">→</span>
+              <span className={withValue.length === 0 ? "font-medium text-danger-700" : "font-medium text-ink-700"}>
+                {withValue.length === 0
+                  ? "no partner defines it"
+                  : `defined by ${withValue.length} of ${realPartners.length} partner${realPartners.length === 1 ? "" : "s"}`}
+              </span>
+            </button>
+            {open && (
+              <ul className="mt-1 ml-4 space-y-0.5 border-l border-ink-100 pl-2.5">
+                {withValue.map((p) => (
+                  <li key={p.id} className="flex flex-wrap items-center gap-1.5">
+                    <Link
+                      to={`/partners/${p.id}`}
+                      className="font-medium text-ink-700 hover:text-crimson-700 hover:underline"
+                    >
+                      {p.name}
+                    </Link>
+                    <span className="text-ink-300">→</span>
+                    <PartnerPropValue partnerId={p.id} propKey={key} />
+                  </li>
+                ))}
+                {without > 0 && (
+                  <li className="text-ink-400">
+                    {without} partner{without === 1 ? " doesn't" : "s don't"} set it — their exchanges resolve it
+                    empty.
+                  </li>
+                )}
+              </ul>
+            )}
+          </div>
+        );
+      })}
+    </div>
+  );
+}
+
+/** One adapter property: grows with content, can insert reference tokens. */
+function PropField({
+  prop,
+  value,
+  disabled,
+  onChange,
+}: {
+  prop: AdapterInfo["props"][number];
+  value: string;
+  disabled: boolean;
+  onChange: (value: string) => void;
+}) {
+  const { globals, partnerKeys, partners } = useReferenceTokens();
+  const textareaRef = useRef<HTMLTextAreaElement>(null);
+
+  // Whether the user is part-way through entering a value. Masking has to key off
+  // this rather than off whether the field currently holds text: the latter flipped
+  // to masked on the very first keystroke, so typing a secret hid what you'd typed.
+  const [entering, setEntering] = useState(false);
+  const lastEmitted = useRef<string | null>(null);
+
+  // The parent re-supplies values from the server after a save or a discard. When
+  // what arrives isn't what this field last emitted, the draft was reset from the
+  // outside, so a stored secret goes back to being masked.
+  useEffect(() => {
+    if (value !== lastEmitted.current) setEntering(false);
+  }, [value]);
+
+  const emit = (next: string) => {
+    lastEmitted.current = next;
+    setEntering(true);
+    onChange(next);
+  };
+
+  const masked = prop.secret && !!value && !entering;
+
+  // Insert at the cursor (or over the current selection) instead of always
+  // appending, so picking a second reference doesn't just tack it onto the end.
+  const insertToken = (token: string) => {
+    const el = textareaRef.current;
+    const start = el?.selectionStart ?? value.length;
+    const end = el?.selectionEnd ?? value.length;
+    emit(value.slice(0, start) + token + value.slice(end));
+    const caret = start + token.length;
+    requestAnimationFrame(() => {
+      el?.focus();
+      el?.setSelectionRange(caret, caret);
+    });
+  };
+
+  return (
+    <Field
+      label={prop.optional ? prop.key : `${prop.key} *`}
+      htmlFor={`prop-${prop.key}`}
+      hint={prop.description}
+    >
+      {masked ? (
+        <div className="flex h-9.5 items-center justify-between rounded-lg border border-ink-200 bg-ink-50 px-3">
+          <span className="font-mono text-sm tracking-widest text-ink-400">••••••••</span>
+          {!disabled && (
+            <Button size="sm" variant="ghost" onClick={() => emit("")}>
+              Replace
+            </Button>
+          )}
+        </div>
+      ) : (
+        <div className="flex items-start gap-1">
+          <div className="grid min-w-0 flex-1 grid-cols-[minmax(0,1fr)]">
+            <textarea
+              id={`prop-${prop.key}`}
+              ref={textareaRef}
+              rows={1}
+              value={value}
+              disabled={disabled}
+              placeholder={prop.default}
+              onChange={(e) => emit(e.target.value)}
+              className="[grid-area:1/1] w-full resize-none overflow-hidden rounded-lg border border-ink-200 bg-white px-3 py-2 text-sm leading-5 break-words whitespace-pre-wrap text-ink-900 placeholder:text-ink-400 focus:border-crimson-400 focus:ring-2 focus:ring-crimson-100 focus:outline-none disabled:bg-ink-50 disabled:text-ink-500"
+            />
+            <span aria-hidden className="[grid-area:1/1] invisible border px-3 py-2 text-sm leading-5 break-words whitespace-pre-wrap">
+              {value || prop.default || " "}{" "}
+            </span>
+          </div>
+          {!disabled && !prop.secret && (globals.length > 0 || partnerKeys.length > 0) && (
+            <ReferenceMenu
+              globals={globals}
+              partnerKeys={partnerKeys}
+              onPick={insertToken}
+              label={`Insert a reference into ${prop.key}`}
+            />
+          )}
+        </div>
+      )}
+      {!masked && <ReferenceHints value={value} globals={globals} partners={partners} />}
+    </Field>
+  );
+}
+
+/**
+ * One pipeline slot (receiver/validator/mapper/handler): pick an adapter,
+ * then configure it through fields generated from its startup metadata.
+ */
+export function AdapterConfig({
+  kind,
+  adapterId,
+  properties,
+  onChange,
+  disabled,
+  required = false,
+  noneLabel = "None",
+  mapperEditorHref,
+}: {
+  kind: AdapterKind;
+  adapterId: string | null;
+  properties: Record<string, string>;
+  onChange: (adapterId: string | null, properties: Record<string, string>) => void;
+  disabled: boolean;
+  required?: boolean;
+  /** What "no adapter" means here, e.g. "None — payload passes through unchanged". */
+  noneLabel?: string;
+  /** When the native JSON mapper is selected, where its visual editor lives. */
+  mapperEditorHref?: string;
+}) {
+  const catalog = useAdapterCatalog(kind);
+  const adapter = catalog.data?.find((a) => a.id === adapterId);
+
+  // Required fields stay visible; optional ones tuck behind an expander so
+  // the busiest forms (HTTP handler & friends) aren't a wall of inputs.
+  const requiredProps = adapter?.props.filter((p) => !p.optional) ?? [];
+  const optionalProps = adapter?.props.filter((p) => p.optional) ?? [];
+  const setOptionalCount = optionalProps.filter((p) => (properties[p.key] ?? "").trim() !== "").length;
+
+  const renderProp = (prop: AdapterInfo["props"][number]) => (
+    <PropField
+      key={prop.key}
+      prop={prop}
+      value={properties[prop.key] ?? ""}
+      disabled={disabled}
+      onChange={(v) => {
+        // An empty adapter property means "not set", so clearing a field has to
+        // remove the key rather than leave it as "". Keeping it made a cleared
+        // field compare unequal to saved data that never had the key, so the
+        // Save bar stayed up after a change had been undone.
+        const next = { ...properties };
+        if (v === "") delete next[prop.key];
+        else next[prop.key] = v;
+        onChange(adapterId, next);
+      }}
+    />
+  );
+
+  const pick = (id: string) => {
+    if (id === "") return onChange(null, {});
+    const next = catalog.data?.find((a) => a.id === id);
+    // prefill defaults so required fields with defaults start valid
+    const seeded = Object.fromEntries(
+      (next?.props ?? []).filter((p) => !p.optional && p.default).map((p) => [p.key, p.default!]),
+    );
+    onChange(id, seeded);
+  };
+
+  return (
+    <div className="space-y-4">
+      <div className="max-w-sm">
+        <SearchSelect
+          aria-label={`${kind} adapter`}
+          value={adapterId ?? ""}
+          disabled={disabled || catalog.isPending}
+          onChange={pick}
+          placeholder={`Pick a ${kind}…`}
+          clearLabel={required ? undefined : noneLabel}
+          options={(catalog.data ?? []).map((a) => ({
+            value: a.id,
+            label: a.label,
+            code: a.id,
+            hint: a.native ? "Native" : a.versions.length > 0 ? `v${a.versions.at(-1)}` : "Custom",
+          }))}
+        />
+      </div>
+      {adapter && adapter.props.length > 0 && (
+        <div className="space-y-4">
+          {requiredProps.length > 0 && (
+            <div className="grid gap-4 sm:grid-cols-2">{requiredProps.map(renderProp)}</div>
+          )}
+          {optionalProps.length > 0 && (
+            <SummaryDisclosure
+              key={adapterId}
+              defaultOpen={setOptionalCount > 0}
+              changeLabel="Show"
+              summary={
+                <>
+                  {optionalProps.length} optional field{optionalProps.length === 1 ? "" : "s"}
+                  {setOptionalCount > 0 ? ` · ${setOptionalCount} set` : ""}
+                </>
+              }
+            >
+              <div className="grid gap-4 sm:grid-cols-2">{optionalProps.map(renderProp)}</div>
+            </SummaryDisclosure>
+          )}
+        </div>
+      )}
+      {adapter && adapter.id === "NativeJSONMapper" && (
+        mapperEditorHref ? (
+          <Link
+            to={mapperEditorHref}
+            className="inline-flex items-center gap-1.5 rounded-lg border border-ink-200 bg-white px-3 py-2 text-[13px] font-medium text-crimson-700 hover:border-ink-300 hover:bg-ink-50"
+          >
+            Open the visual mapping editor
+            <ArrowUpRight className="size-3.5" aria-hidden />
+          </Link>
+        ) : (
+          <p className="rounded-lg bg-ink-50 px-3 py-2 text-[13px] text-ink-500">
+            This mapper is configured through the visual mapping editor.
+          </p>
+        )
+      )}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/components/config/MatchExpressionEditor.tsx b/SW.Bitween.Web/ClientApp/src/components/config/MatchExpressionEditor.tsx
new file mode 100644
index 00000000..54be33d6
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/config/MatchExpressionEditor.tsx
@@ -0,0 +1,215 @@
+import { Plus, Trash2 } from "lucide-react";
+import type { MatchCondition, MatchGroup, MatchNode } from "../../api";
+import { matchSummary } from "../../lib/match";
+import { Button } from "../ui/basics";
+import { Select } from "../ui/forms";
+
+const emptyCondition = (path: string): MatchCondition => ({ op: "oneOf", path, values: [] });
+
+function ConditionRow({
+  condition,
+  properties,
+  disabled,
+  onChange,
+  onRemove,
+}: {
+  condition: MatchCondition;
+  properties: { key: string; path: string }[];
+  disabled: boolean;
+  onChange: (c: MatchCondition) => void;
+  onRemove: () => void;
+}) {
+  return (
+    <div className="flex flex-wrap items-center gap-2">
+      <Select
+        aria-label="Property"
+        value={condition.path}
+        disabled={disabled}
+        onChange={(e) => onChange({ ...condition, path: e.target.value })}
+        options={properties.map((p) => ({ value: p.path, label: p.key }))}
+        className="!w-40"
+      />
+      <Select
+        aria-label="Operator"
+        value={condition.op}
+        disabled={disabled}
+        onChange={(e) => onChange({ ...condition, op: e.target.value as MatchCondition["op"] })}
+        options={[
+          { value: "oneOf", label: "is one of" },
+          { value: "notOneOf", label: "is none of" },
+        ]}
+        className="!w-32"
+      />
+      <input
+        aria-label="Values"
+        value={condition.values.join(", ")}
+        disabled={disabled}
+        placeholder="values, comma separated"
+        onChange={(e) =>
+          onChange({ ...condition, values: e.target.value.split(",").map((v) => v.trim()).filter(Boolean) })
+        }
+        className="h-9.5 min-w-40 flex-1 rounded-lg border border-ink-200 bg-white px-3 font-mono text-xs text-ink-900 placeholder:font-sans placeholder:text-sm placeholder:text-ink-400 focus:border-crimson-400 focus:ring-2 focus:ring-crimson-100 focus:outline-none disabled:bg-ink-50"
+      />
+      {!disabled && (
+        <button
+          onClick={onRemove}
+          aria-label="Remove condition"
+          className="rounded-md p-1.5 text-ink-400 hover:bg-danger-50 hover:text-danger-700"
+        >
+          <Trash2 className="size-3.5" />
+        </button>
+      )}
+    </div>
+  );
+}
+
+function GroupCard({
+  group,
+  properties,
+  disabled,
+  depth,
+  onChange,
+  onRemove,
+}: {
+  group: MatchGroup;
+  properties: { key: string; path: string }[];
+  disabled: boolean;
+  depth: number;
+  onChange: (g: MatchGroup) => void;
+  onRemove?: () => void;
+}) {
+  const setChild = (index: number, node: MatchNode) =>
+    onChange({ ...group, children: group.children.map((c, i) => (i === index ? node : c)) });
+  const removeChild = (index: number) =>
+    onChange({ ...group, children: group.children.filter((_, i) => i !== index) });
+
+  return (
+    <div className={`space-y-2.5 rounded-xl border border-ink-200 p-3 ${depth > 0 ? "bg-ink-50/50" : ""}`}>
+      <div className="flex items-center gap-2">
+        <span className="text-[13px] text-ink-500">Matches</span>
+        <Select
+          aria-label="Group operator"
+          value={group.op}
+          disabled={disabled}
+          onChange={(e) => onChange({ ...group, op: e.target.value as MatchGroup["op"] })}
+          options={[
+            { value: "and", label: "all of" },
+            { value: "or", label: "any of" },
+          ]}
+          className="!h-8 !w-24 text-[13px]"
+        />
+        {onRemove && !disabled && (
+          <button
+            onClick={onRemove}
+            aria-label="Remove group"
+            className="ml-auto rounded-md p-1.5 text-ink-400 hover:bg-danger-50 hover:text-danger-700"
+          >
+            <Trash2 className="size-3.5" />
+          </button>
+        )}
+      </div>
+
+      {group.children.length === 0 && (
+        <p className="text-[13px] text-ink-400">Empty group — matches every message.</p>
+      )}
+      {group.children.map((child, i) =>
+        "path" in child ? (
+          <ConditionRow
+            key={i}
+            condition={child}
+            properties={properties}
+            disabled={disabled}
+            onChange={(c) => setChild(i, c)}
+            onRemove={() => removeChild(i)}
+          />
+        ) : (
+          <GroupCard
+            key={i}
+            group={child}
+            properties={properties}
+            disabled={disabled}
+            depth={depth + 1}
+            onChange={(g) => setChild(i, g)}
+            onRemove={() => removeChild(i)}
+          />
+        ),
+      )}
+
+      {!disabled && (
+        <div className="flex gap-2">
+          <Button
+            size="sm"
+            disabled={properties.length === 0}
+            onClick={() => onChange({ ...group, children: [...group.children, emptyCondition(properties[0].path)] })}
+          >
+            <Plus className="size-3.5" /> Condition
+          </Button>
+          {depth < 2 && (
+            <Button
+              size="sm"
+              variant="ghost"
+              onClick={() => onChange({ ...group, children: [...group.children, { op: "or", children: [] }] })}
+            >
+              <Plus className="size-3.5" /> Nested group
+            </Button>
+          )}
+        </div>
+      )}
+    </div>
+  );
+}
+
+/**
+ * Message filter builder over an information type's promoted properties.
+ * null = no filter (every message matches).
+ */
+export function MatchExpressionEditor({
+  value,
+  onChange,
+  properties,
+  disabled,
+}: {
+  value: MatchGroup | null;
+  onChange: (value: MatchGroup | null) => void;
+  /** Promoted properties of the information type being filtered (friendly name + JSON path). */
+  properties: { key: string; path: string }[];
+  disabled: boolean;
+}) {
+  if (value === null) {
+    return (
+      <div className="space-y-2.5">
+        <p className="text-sm text-ink-600">
+          No filter — <strong className="font-medium">every message</strong> is picked up.
+        </p>
+        {!disabled && (
+          <Button
+            size="sm"
+            disabled={properties.length === 0}
+            onClick={() =>
+              onChange({ op: "and", children: properties.length ? [emptyCondition(properties[0].path)] : [] })
+            }
+          >
+            <Plus className="size-3.5" /> Add a filter
+          </Button>
+        )}
+        {properties.length === 0 && (
+          <p className="text-[13px] text-ink-400">
+            Filters match on promoted properties — this information type has none yet.
+          </p>
+        )}
+      </div>
+    );
+  }
+
+  return (
+    <div className="space-y-2.5">
+      <p className="rounded-lg bg-ink-50 px-3 py-2 font-mono text-xs text-ink-600">{matchSummary(value)}</p>
+      <GroupCard group={value} properties={properties} disabled={disabled} depth={0} onChange={onChange} />
+      {!disabled && (
+        <Button size="sm" variant="ghost" onClick={() => onChange(null)}>
+          Clear filter — match every message
+        </Button>
+      )}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/components/config/ScheduleEditor.tsx b/SW.Bitween.Web/ClientApp/src/components/config/ScheduleEditor.tsx
new file mode 100644
index 00000000..c3a69038
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/config/ScheduleEditor.tsx
@@ -0,0 +1,188 @@
+import { useState } from "react";
+import { CalendarClock, Pencil, Plus, Trash2 } from "lucide-react";
+import type { Recurrence, Schedule } from "../../api";
+import { WEEKDAYS, localTimePreview, scheduleSummary } from "../../lib/schedules";
+import { Button } from "../ui/basics";
+import { Checkbox, Field, Select, TextInput } from "../ui/forms";
+import { Dialog } from "../ui/overlays";
+
+const DEFAULT_SCHEDULE: Schedule = { recurrence: "Daily", days: 0, hours: 2, minutes: 0, backwards: false };
+
+function ScheduleDialog({
+  initial,
+  onSubmit,
+  onClose,
+}: {
+  initial?: Schedule;
+  onSubmit: (schedule: Schedule) => void;
+  onClose: () => void;
+}) {
+  const [draft, setDraft] = useState<Schedule>(initial ?? DEFAULT_SCHEDULE);
+  const set = <K extends keyof Schedule>(key: K, value: Schedule[K]) =>
+    setDraft((d) => ({ ...d, [key]: value }));
+
+  const setRecurrence = (recurrence: Recurrence) =>
+    setDraft((d) => ({
+      ...d,
+      recurrence,
+      // keep days meaningful per recurrence
+      days: recurrence === "Monthly" ? Math.min(Math.max(d.days, 1), 27) : recurrence === "Weekly" ? Math.min(d.days, 6) : 0,
+    }));
+
+  const submit = () => {
+    onSubmit(draft);
+    onClose();
+  };
+
+  return (
+    <Dialog title={initial ? "Edit schedule" : "Add schedule"} onClose={onClose}>
+      <div className="space-y-4">
+        <Field label="Runs" htmlFor="sc-rec">
+          <Select
+            id="sc-rec"
+            value={draft.recurrence}
+            onChange={(e) => setRecurrence(e.target.value as Recurrence)}
+            options={[
+              { value: "Hourly", label: "Every hour" },
+              { value: "Daily", label: "Every day" },
+              { value: "Weekly", label: "Every week" },
+              { value: "Monthly", label: "Every month" },
+            ]}
+          />
+        </Field>
+
+        <div className="grid gap-3 sm:grid-cols-2">
+          {draft.recurrence === "Weekly" && (
+            <Field label="On" htmlFor="sc-day">
+              <Select
+                id="sc-day"
+                value={String(draft.days)}
+                onChange={(e) => set("days", Number(e.target.value))}
+                options={WEEKDAYS.map((d, i) => ({ value: String(i), label: d }))}
+              />
+            </Field>
+          )}
+          {draft.recurrence === "Monthly" && (
+            <Field label="On day" htmlFor="sc-dom" hint="1–27, so it exists in every month.">
+              <TextInput
+                id="sc-dom"
+                type="number"
+                min={1}
+                max={27}
+                value={draft.days}
+                onChange={(e) => set("days", Math.min(Math.max(Number(e.target.value), 1), 27))}
+              />
+            </Field>
+          )}
+          {draft.recurrence !== "Hourly" && (
+            <Field label="At hour (UTC)" htmlFor="sc-h">
+              <TextInput
+                id="sc-h"
+                type="number"
+                min={0}
+                max={23}
+                value={draft.hours}
+                onChange={(e) => set("hours", Math.min(Math.max(Number(e.target.value), 0), 23))}
+              />
+            </Field>
+          )}
+          <Field label="At minute (UTC)" htmlFor="sc-m">
+            <TextInput
+              id="sc-m"
+              type="number"
+              min={0}
+              max={59}
+              value={draft.minutes}
+              onChange={(e) => set("minutes", Math.min(Math.max(Number(e.target.value), 0), 59))}
+            />
+          </Field>
+        </div>
+
+        <Checkbox
+          label="Count from the end of the period"
+          description='e.g. "2 hours before the end of the day" instead of "2 hours after it starts".'
+          checked={draft.backwards}
+          onChange={(e) => set("backwards", e.target.checked)}
+        />
+
+        <div className="rounded-lg bg-ink-50 px-3 py-2 text-[13px]">
+          <p className="text-ink-600">{scheduleSummary(draft)}</p>
+          <p className="text-ink-400">→ {localTimePreview(draft)} in your timezone</p>
+        </div>
+
+        <div className="flex justify-end gap-2">
+          <Button onClick={onClose}>Cancel</Button>
+          <Button variant="primary" onClick={submit}>
+            {initial ? "Update schedule" : "Add schedule"}
+          </Button>
+        </div>
+      </div>
+    </Dialog>
+  );
+}
+
+/** Controlled list of run schedules for receivers. */
+export function ScheduleEditor({
+  schedules,
+  onChange,
+  disabled,
+}: {
+  schedules: Schedule[];
+  onChange: (schedules: Schedule[]) => void;
+  disabled: boolean;
+}) {
+  const [editing, setEditing] = useState<number | "new" | null>(null);
+
+  return (
+    <div>
+      {schedules.length === 0 ? (
+        <p className="pb-2 text-sm text-ink-500">
+          No schedule yet — this receiver never runs on its own.
+        </p>
+      ) : (
+        <ul className="space-y-1.5">
+          {schedules.map((s, i) => (
+            <li key={i} className="flex items-center gap-2.5 text-sm">
+              <CalendarClock className="size-3.5 shrink-0 text-ink-300" aria-hidden />
+              <span className="min-w-0 flex-1 truncate text-ink-800">{scheduleSummary(s)}</span>
+              {!disabled && (
+                <span className="flex gap-1">
+                  <button
+                    onClick={() => setEditing(i)}
+                    aria-label={`Edit schedule ${i + 1}`}
+                    className="rounded-md p-1.5 text-ink-400 hover:bg-ink-100 hover:text-ink-700"
+                  >
+                    <Pencil className="size-3.5" />
+                  </button>
+                  <button
+                    onClick={() => onChange(schedules.filter((_, x) => x !== i))}
+                    aria-label={`Remove schedule ${i + 1}`}
+                    className="rounded-md p-1.5 text-ink-400 hover:bg-danger-50 hover:text-danger-700"
+                  >
+                    <Trash2 className="size-3.5" />
+                  </button>
+                </span>
+              )}
+            </li>
+          ))}
+        </ul>
+      )}
+      {!disabled && (
+        <Button size="sm" className="mt-2" onClick={() => setEditing("new")}>
+          <Plus className="size-3.5" /> Add schedule
+        </Button>
+      )}
+      {editing !== null && (
+        <ScheduleDialog
+          initial={editing === "new" ? undefined : schedules[editing]}
+          onSubmit={(schedule) =>
+            onChange(
+              editing === "new" ? [...schedules, schedule] : schedules.map((s, i) => (i === editing ? schedule : s)),
+            )
+          }
+          onClose={() => setEditing(null)}
+        />
+      )}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/components/config/pickers.tsx b/SW.Bitween.Web/ClientApp/src/components/config/pickers.tsx
new file mode 100644
index 00000000..567e07a2
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/config/pickers.tsx
@@ -0,0 +1,168 @@
+import { useQuery } from "@tanstack/react-query";
+import { api, type InformationTypeRow } from "../../api";
+import { withReturn, type ReturnContext } from "../../lib/returnTo";
+import { useSessionCan } from "../../auth/guards";
+import { LoadingBlock } from "../ui/basics";
+import { CodeBadge } from "../ui/Panel";
+import { useIntegrationsCache } from "./shared";
+import { CreateLinkCard, OptionCard } from "./wizard";
+
+/*
+ * Pick-one lists used inside flows. Creating (or opening) an entity is a
+ * routed detour: the "New …" card and the per-option edit icon navigate to
+ * the entity's own page carrying a return context; the flow's draft
+ * survives in sessionStorage and the pick comes back via `?picked=`.
+ */
+
+export function InfoTypePicker({
+  value,
+  onChange,
+  detourCtx,
+  filter,
+}: {
+  value: number | null;
+  onChange: (id: number) => void;
+  /** Where "New information type" / per-option edit detours return to. */
+  detourCtx?: ReturnContext;
+  /** Narrow the candidate list, e.g. bus-enabled types only. */
+  filter?: (t: InformationTypeRow) => boolean;
+}) {
+  const types = useQuery({ queryKey: ["information-types"], queryFn: () => api.listInformationTypes() });
+  const canCreate = useSessionCan("documents.create");
+
+  if (types.isPending) return <LoadingBlock label="Loading information types…" />;
+
+  const candidates = filter ? (types.data ?? []).filter(filter) : (types.data ?? []);
+
+  return (
+    <div className="space-y-2">
+      {candidates.map((t) => (
+        <OptionCard
+          key={t.id}
+          selected={value === t.id}
+          onSelect={() => onChange(t.id)}
+          title={t.name}
+          subtitle={t.format === "Json" ? "JSON" : "XML"}
+          right={<CodeBadge code={t.code} name={t.name} />}
+          editHref={detourCtx ? withReturn(`/information-types/${t.id}`, detourCtx) : undefined}
+        />
+      ))}
+      {detourCtx && canCreate && (
+        <CreateLinkCard
+          to={withReturn("/information-types/new", detourCtx)}
+          title="New information type"
+          subtitle="Create it on its own page — then continue right here."
+        />
+      )}
+    </div>
+  );
+}
+
+/**
+ * Pick-one list of GatewayApiCall/BusGateway integrations behind an entry
+ * point (an API gateway attachment or a bus gateway route). Same
+ * routed-detour pattern as the other pickers.
+ */
+export function IntegrationPicker({
+  type,
+  informationTypeId,
+  value,
+  onChange,
+  detourCtx,
+}: {
+  type: "GatewayApiCall" | "BusGateway";
+  /** Bus routes only run integrations carrying the gateway's own information type. */
+  informationTypeId?: number;
+  value: number | null;
+  onChange: (id: number) => void;
+  detourCtx: ReturnContext;
+}) {
+  const integrations = useIntegrationsCache();
+  const infoTypes = useQuery({ queryKey: ["information-types"], queryFn: () => api.listInformationTypes() });
+  const canCreate = useSessionCan("subscriptions.create");
+
+  const candidates = (integrations.data ?? []).filter(
+    (s) => s.type === type && (informationTypeId === undefined || s.informationTypeId === informationTypeId),
+  );
+
+  const createTo = `/subscriptions/new?type=${type}${
+    informationTypeId !== undefined ? `&informationTypeId=${informationTypeId}` : ""
+  }`;
+
+  return (
+    <div className="space-y-2">
+      {candidates.map((s) => (
+        <OptionCard
+          key={s.id}
+          selected={value === s.id}
+          onSelect={() => onChange(s.id)}
+          title={s.name}
+          subtitle={`Carries ${infoTypes.data?.find((t) => t.id === s.informationTypeId)?.code ?? "…"}`}
+          editHref={withReturn(`/subscriptions/${s.id}`, detourCtx)}
+        />
+      ))}
+      {canCreate && (
+        <CreateLinkCard
+          to={withReturn(createTo, detourCtx)}
+          title="New integration"
+          subtitle="Define its pipeline on its own page — then continue right here."
+        />
+      )}
+    </div>
+  );
+}
+
+export function PartnerPicker({
+  value,
+  onChange,
+  allowNone = false,
+  noneLabel = "No partner",
+  noneSubtitle,
+  excludeIds = [],
+  detourCtx,
+}: {
+  value: number | "none" | null;
+  onChange: (value: number | "none") => void;
+  allowNone?: boolean;
+  noneLabel?: string;
+  noneSubtitle?: string;
+  excludeIds?: number[];
+  detourCtx?: ReturnContext;
+}) {
+  const partners = useQuery({ queryKey: ["partners"], queryFn: () => api.listPartners() });
+  const canCreate = useSessionCan("partners.create");
+
+  if (partners.isPending) return <LoadingBlock label="Loading partners…" />;
+
+  const candidates = (partners.data ?? []).filter((p) => !p.isSystem && !excludeIds.includes(p.id));
+
+  return (
+    <div className="space-y-2">
+      {allowNone && (
+        <OptionCard
+          selected={value === "none"}
+          onSelect={() => onChange("none")}
+          title={noneLabel}
+          subtitle={noneSubtitle}
+        />
+      )}
+      {candidates.map((p) => (
+        <OptionCard
+          key={p.id}
+          selected={value === p.id}
+          onSelect={() => onChange(p.id)}
+          title={p.name}
+          subtitle={`${p.propertyKeys.length} propert${p.propertyKeys.length === 1 ? "y" : "ies"}`}
+          editHref={detourCtx ? withReturn(`/partners/${p.id}`, detourCtx) : undefined}
+        />
+      ))}
+      {detourCtx && canCreate && (
+        <CreateLinkCard
+          to={withReturn("/partners/new", detourCtx)}
+          title="New partner"
+          subtitle="Create it on its own page — then continue right here."
+        />
+      )}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/components/config/shared.tsx b/SW.Bitween.Web/ClientApp/src/components/config/shared.tsx
new file mode 100644
index 00000000..07d0f6be
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/config/shared.tsx
@@ -0,0 +1,232 @@
+import { Fragment, useState } from "react";
+import { Link } from "react-router";
+import { useQuery } from "@tanstack/react-query";
+import { ArrowLeftRight, ChevronDown, ChevronRight, Workflow } from "lucide-react";
+import {
+  api,
+  type ExchangeDocStage,
+  type ExchangeDocument,
+  type ExchangeRef,
+  type IntegrationInfo,
+  type IntegrationSetupRef,
+  type IntegrationType,
+} from "../../api";
+import { Badge } from "../ui/basics";
+import { timeAgo } from "../../lib/dates";
+
+/** Display names for integration types; Internal and ApiCall are legacy. */
+export const INTEGRATION_TYPE_LABELS: Record<IntegrationType, string> = {
+  Receiving: "Receiver",
+  GatewayApiCall: "API gateway",
+  BusGateway: "Bus gateway",
+  Internal: "Internal",
+  ApiCall: "API call",
+  Aggregation: "Aggregation",
+};
+
+export const isLegacyType = (type: IntegrationType) => type === "Internal" || type === "ApiCall";
+
+export function TypeBadge({ type }: { type: IntegrationType }) {
+  return (
+    <span className="inline-flex items-center gap-1">
+      <Badge>{INTEGRATION_TYPE_LABELS[type]}</Badge>
+      {isLegacyType(type) && <Badge tone="warn">Legacy</Badge>}
+    </span>
+  );
+}
+
+/** Enabled/paused pair — an integration can be both enabled and paused. */
+export function IntegrationStatusBadges({ enabled, paused }: { enabled: boolean; paused: boolean }) {
+  return (
+    <span className="inline-flex items-center gap-1">
+      {enabled ? <Badge tone="ok">Active</Badge> : <Badge>Disabled</Badge>}
+      {paused && <Badge tone="warn">Paused</Badge>}
+    </span>
+  );
+}
+
+export function HealthBadge({
+  isRunning,
+  consecutiveFailures,
+}: {
+  isRunning: boolean;
+  consecutiveFailures: number;
+}) {
+  if (consecutiveFailures > 0)
+    return (
+      <Badge tone="danger">
+        {consecutiveFailures} failure{consecutiveFailures === 1 ? "" : "s"}
+      </Badge>
+    );
+  if (isRunning) return <Badge tone="ok">Running</Badge>;
+  return <Badge>Idle</Badge>;
+}
+
+export function ExchangeStatusBadge({ status }: { status: ExchangeRef["status"] }) {
+  if (status === "success") return <Badge tone="ok">Success</Badge>;
+  if (status === "failed") return <Badge tone="danger">Failed</Badge>;
+  if (status === "badResponse") return <Badge tone="warn">Bad response</Badge>;
+  return <Badge tone="neutral">Processing</Badge>;
+}
+
+const DOC_STAGES: ExchangeDocStage[] = ["Input", "Mapped", "Handled"];
+
+/**
+ * The document trail of one exchange: a tab per pipeline stage. Stages
+ * that produced nothing (e.g. after a failure) stay visible but disabled,
+ * so the pipeline shape — and where it stopped — is always readable.
+ */
+function ExchangeDocsDrawer({ documents }: { documents: ExchangeDocument[] }) {
+  const [stage, setStage] = useState<ExchangeDocStage>(documents[0]?.stage ?? "Input");
+  const active = documents.find((d) => d.stage === stage);
+
+  return (
+    <div className="ml-6">
+      <div className="mb-1.5 flex items-center gap-1">
+        {DOC_STAGES.map((s) => {
+          const exists = documents.some((d) => d.stage === s);
+          return (
+            <button
+              key={s}
+              disabled={!exists}
+              aria-pressed={s === stage}
+              title={exists ? undefined : "This stage produced no document"}
+              onClick={() => setStage(s)}
+              className={`rounded-md px-2 py-0.5 text-xs font-medium ${
+                s === stage
+                  ? "bg-ink-800 text-ink-50"
+                  : exists
+                    ? "text-ink-600 hover:bg-ink-100"
+                    : "cursor-not-allowed text-ink-300"
+              }`}
+            >
+              {s}
+            </button>
+          );
+        })}
+      </div>
+      <pre className="max-h-48 overflow-auto rounded-lg bg-ink-950 px-3 py-2.5 font-mono text-[11px] leading-relaxed text-ink-100">
+        {active?.content}
+      </pre>
+    </div>
+  );
+}
+
+/**
+ * Compact recent-traffic list for hub pages. With `expandable`, each row
+ * opens a drawer showing the documents from each pipeline stage.
+ */
+export function ExchangesList({
+  items,
+  expandable = false,
+}: {
+  items: ExchangeRef[];
+  expandable?: boolean;
+}) {
+  const [open, setOpen] = useState<Set<string>>(new Set());
+
+  const toggle = (id: string) =>
+    setOpen((prev) => {
+      const next = new Set(prev);
+      if (next.has(id)) next.delete(id);
+      else next.add(id);
+      return next;
+    });
+
+  if (items.length === 0) return <p className="text-sm text-ink-500">No exchanges yet.</p>;
+
+  return (
+    <ul className="space-y-1.5">
+      {items.map((x) => {
+        const canExpand = expandable && (x.documents?.length ?? 0) > 0;
+        return (
+          <Fragment key={x.id}>
+            <li className="flex items-center gap-2 text-sm">
+              {canExpand ? (
+                <button
+                  onClick={() => toggle(x.id)}
+                  aria-expanded={open.has(x.id)}
+                  aria-label={`Documents for ${x.id}`}
+                  className="rounded-md p-0.5 text-ink-400 hover:bg-ink-100 hover:text-ink-700"
+                >
+                  {open.has(x.id) ? <ChevronDown className="size-3.5" /> : <ChevronRight className="size-3.5" />}
+                </button>
+              ) : (
+                <ArrowLeftRight className="size-3.5 shrink-0 text-ink-300" aria-hidden />
+              )}
+              <code className="min-w-0 flex-1 truncate font-mono text-xs text-ink-600">{x.id}</code>
+              <ExchangeStatusBadge status={x.status} />
+              <span className="w-16 shrink-0 text-right text-xs text-ink-400">{timeAgo(x.on)}</span>
+            </li>
+            {canExpand && open.has(x.id) && (
+              <li>
+                <ExchangeDocsDrawer documents={x.documents!} />
+              </li>
+            )}
+          </Fragment>
+        );
+      })}
+    </ul>
+  );
+}
+
+/** Integrations referencing this entity, each linking to its page. */
+export function SetupList({ items }: { items: IntegrationSetupRef[] }) {
+  if (items.length === 0)
+    return <p className="text-sm text-ink-500">Not used by any integration.</p>;
+  return (
+    <ul className="space-y-1.5">
+      {items.map((s) => (
+        <li key={s.id} className="flex items-center gap-2.5 text-sm">
+          <Workflow className="size-3.5 shrink-0 text-ink-300" aria-hidden />
+          <Link
+            to={`/subscriptions/${s.id}`}
+            className="min-w-0 flex-1 truncate font-medium text-ink-800 hover:text-crimson-700 hover:underline"
+          >
+            {s.name}
+          </Link>
+          <TypeBadge type={s.type} />
+        </li>
+      ))}
+    </ul>
+  );
+}
+
+/**
+ * All integrations, cached hard — pages use it to answer "who uses this
+ * property/value/policy?" without extra requests.
+ */
+export function useIntegrationsCache() {
+  return useQuery({
+    queryKey: ["integrations"],
+    queryFn: () => api.listIntegrations(),
+    staleTime: Infinity,
+  });
+}
+
+/** Tiny inline list for drill-down drawers. */
+export function IntegrationMiniList({
+  items,
+  emptyText,
+}: {
+  items: IntegrationInfo[];
+  emptyText: string;
+}) {
+  if (items.length === 0) return <p className="text-[13px] text-ink-500">{emptyText}</p>;
+  return (
+    <ul className="space-y-1">
+      {items.map((s) => (
+        <li key={s.id} className="flex items-center gap-2 text-[13px]">
+          <Workflow className="size-3 shrink-0 text-ink-400" aria-hidden />
+          <Link
+            to={`/subscriptions/${s.id}`}
+            className="min-w-0 flex-1 truncate font-medium text-ink-800 hover:text-crimson-700 hover:underline"
+          >
+            {s.name}
+          </Link>
+          <Badge>{INTEGRATION_TYPE_LABELS[s.type]}</Badge>
+        </li>
+      ))}
+    </ul>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/components/config/wizard.tsx b/SW.Bitween.Web/ClientApp/src/components/config/wizard.tsx
new file mode 100644
index 00000000..2e675fa6
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/config/wizard.tsx
@@ -0,0 +1,200 @@
+import { useState, type ReactNode } from "react";
+import { Link } from "react-router";
+import { ArrowLeft, Check, Plus, SquarePen } from "lucide-react";
+import { Button, FormError } from "../ui/basics";
+
+/**
+ * Draft state that survives the routed create/edit detours of the
+ * return-flow: persisted in sessionStorage, cleared on submit.
+ */
+export function usePersistentDraft<T>(key: string, initial: T) {
+  const [draft, setDraft] = useState<T>(() => {
+    try {
+      const raw = sessionStorage.getItem(key);
+      if (raw) return JSON.parse(raw) as T;
+    } catch {
+      // corrupted draft — start fresh
+    }
+    return initial;
+  });
+
+  const update = (patch: Partial<T>) =>
+    setDraft((d) => {
+      const next = { ...d, ...patch };
+      sessionStorage.setItem(key, JSON.stringify(next));
+      return next;
+    });
+
+  const clear = () => sessionStorage.removeItem(key);
+
+  return [draft, update, clear] as const;
+}
+
+/**
+ * Full-page guided flow. URL-routed (survives refresh as a page; step
+ * state is local). Steps render as numbered chips with the current one
+ * highlighted and finished ones checked.
+ */
+export function WizardShell({
+  title,
+  subtitle,
+  backTo,
+  backLabel,
+  steps,
+  current,
+  children,
+}: {
+  title: string;
+  subtitle?: string;
+  backTo: string;
+  backLabel: string;
+  steps: string[];
+  current: number;
+  children: ReactNode;
+}) {
+  return (
+    <div className="pb-10">
+      <Link
+        to={backTo}
+        className="mb-4 inline-flex items-center gap-1 text-[13px] font-medium text-ink-500 hover:text-ink-800"
+      >
+        <ArrowLeft className="size-3.5" /> {backLabel}
+      </Link>
+
+      <h1 className="text-[22px] font-semibold tracking-tight text-ink-900">{title}</h1>
+      {subtitle && <p className="mt-1 text-sm text-ink-500">{subtitle}</p>}
+
+      <ol className="mt-5 flex flex-wrap items-center gap-2">
+        {steps.map((label, i) => (
+          <li key={label} className="flex items-center gap-2">
+            {i > 0 && <span className="h-px w-5 bg-ink-200" aria-hidden />}
+            <span
+              className={`flex items-center gap-1.5 rounded-full px-3 py-1 text-[13px] font-medium ${
+                i === current
+                  ? "bg-ink-900 text-white"
+                  : i < current
+                    ? "bg-ok-100 text-ok-600"
+                    : "bg-ink-100 text-ink-500"
+              }`}
+            >
+              {i < current ? <Check className="size-3.5" /> : <span>{i + 1}.</span>}
+              {label}
+            </span>
+          </li>
+        ))}
+      </ol>
+
+      <div className="mt-6 max-w-3xl rounded-xl border border-ink-200 bg-white p-5">{children}</div>
+    </div>
+  );
+}
+
+/** Back/continue footer for a wizard step. */
+export function StepNav({
+  onBack,
+  onNext,
+  nextLabel = "Continue",
+  nextDisabled = false,
+  busy = false,
+  error,
+}: {
+  onBack?: () => void;
+  onNext: () => void;
+  nextLabel?: string;
+  nextDisabled?: boolean;
+  busy?: boolean;
+  error?: string;
+}) {
+  return (
+    <div className="mt-5 space-y-3 border-t border-ink-100 pt-4">
+      <FormError>{error}</FormError>
+      <div className="flex justify-between">
+        {onBack ? <Button onClick={onBack}>Back</Button> : <span />}
+        <Button variant="primary" disabled={nextDisabled} busy={busy} onClick={onNext}>
+          {nextLabel}
+        </Button>
+      </div>
+    </div>
+  );
+}
+
+/** A selectable row card — the wizard's pick-one pattern. */
+export function OptionCard({
+  selected,
+  onSelect,
+  title,
+  subtitle,
+  right,
+  editHref,
+}: {
+  selected: boolean;
+  onSelect: () => void;
+  title: string;
+  subtitle?: string;
+  right?: ReactNode;
+  /** Detour link to view/edit this option on its own page (return-flow). */
+  editHref?: string;
+}) {
+  return (
+    <div
+      role="button"
+      tabIndex={0}
+      onClick={onSelect}
+      onKeyDown={(e) => {
+        if (e.key === "Enter" || e.key === " ") {
+          e.preventDefault();
+          onSelect();
+        }
+      }}
+      aria-pressed={selected}
+      className={`flex w-full cursor-pointer items-center gap-3 rounded-xl border px-4 py-3 text-left transition-colors ${
+        selected
+          ? "border-crimson-400 bg-crimson-50/50 ring-2 ring-crimson-100"
+          : "border-ink-200 bg-white hover:border-ink-300 hover:bg-ink-50"
+      }`}
+    >
+      <span
+        aria-hidden
+        className={`flex size-4 shrink-0 items-center justify-center rounded-full border ${
+          selected ? "border-crimson-600 bg-crimson-600" : "border-ink-300 bg-white"
+        }`}
+      >
+        {selected && <span className="size-1.5 rounded-full bg-white" />}
+      </span>
+      <span className="min-w-0 flex-1">
+        <span className="block truncate text-sm font-medium text-ink-900">{title}</span>
+        {subtitle && <span className="block truncate text-[13px] text-ink-500">{subtitle}</span>}
+      </span>
+      {right}
+      {editHref && (
+        <Link
+          to={editHref}
+          onClick={(e) => e.stopPropagation()}
+          title="Open — you can come back and continue"
+          aria-label={`Open ${title}`}
+          className="rounded-md p-1.5 text-ink-400 hover:bg-ink-100 hover:text-ink-700"
+        >
+          <SquarePen className="size-3.5" />
+        </Link>
+      )}
+    </div>
+  );
+}
+
+/** "Add new …" — routes to the entity's create page (return-flow detour). */
+export function CreateLinkCard({ to, title, subtitle }: { to: string; title: string; subtitle?: string }) {
+  return (
+    <Link
+      to={to}
+      className="flex w-full items-center gap-3 rounded-xl border border-dashed border-ink-300 bg-white px-4 py-3 text-left transition-colors hover:border-crimson-400 hover:bg-crimson-50/40"
+    >
+      <span className="flex size-4 shrink-0 items-center justify-center text-ink-400" aria-hidden>
+        <Plus className="size-4" />
+      </span>
+      <span className="min-w-0 flex-1">
+        <span className="block truncate text-sm font-medium text-ink-900">{title}</span>
+        {subtitle && <span className="block truncate text-[13px] text-ink-500">{subtitle}</span>}
+      </span>
+    </Link>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/components/layout/AppShell.tsx b/SW.Bitween.Web/ClientApp/src/components/layout/AppShell.tsx
new file mode 100644
index 00000000..1f930fa3
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/layout/AppShell.tsx
@@ -0,0 +1,273 @@
+import { useState } from "react";
+import { Link, NavLink, Outlet, useLocation, useNavigate } from "react-router";
+import { useQueryClient } from "@tanstack/react-query";
+import { ArrowRight, ChevronDown, ChevronRight, LogOut, Menu as MenuIcon, UserRound, X } from "lucide-react";
+import type { SettingRow } from "../../api";
+import { useSession } from "../../auth/SessionContext";
+import { type Branding, useApplyBranding } from "../../lib/branding";
+import { settingsDraft, useSettingsDraft } from "../../lib/settingsDraft";
+import { visibleGroups } from "../../nav";
+import { Avatar } from "../ui/Avatar";
+import { Button } from "../ui/basics";
+import { Menu, MenuItem } from "../ui/overlays";
+
+/**
+ * Shown on every page while unsaved setting changes exist — the whole app
+ * renders with the draft applied, so this is the "you're previewing" strip
+ * that routes back to Settings to keep editing or save. Mirrors the
+ * ReturnBanner detour pattern.
+ */
+function SettingsPreviewBanner() {
+  const draft = useSettingsDraft();
+  const { pathname } = useLocation();
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const count = Object.keys(draft).length;
+  if (count === 0 || pathname.startsWith("/settings")) return null;
+
+  // Land back on the section holding the first pending change.
+  const rows = queryClient.getQueryData<SettingRow[]>(["settings"]);
+  const section = rows?.find((r) => r.key in draft)?.section;
+  const editUrl = section ? `/settings?section=${encodeURIComponent(section)}` : "/settings";
+
+  return (
+    <div className="mb-4 flex flex-wrap items-center justify-between gap-3 rounded-xl border border-crimson-200 bg-crimson-50/60 px-4 py-2.5">
+      <p className="min-w-0 text-sm text-ink-700">
+        Previewing <strong className="font-medium text-ink-900">{count} unsaved setting change{count === 1 ? "" : "s"}</strong>{" "}
+        — this is how the app will look once saved.
+      </p>
+      <span className="flex shrink-0 gap-2">
+        <Button size="sm" onClick={() => settingsDraft.discardAll()}>
+          Discard
+        </Button>
+        <Button size="sm" variant="primary" onClick={() => navigate(editUrl)}>
+          Continue editing <ArrowRight className="size-3.5" />
+        </Button>
+      </span>
+    </div>
+  );
+}
+
+function AppFooter({ branding }: { branding: Branding }) {
+  const { footer, companyName } = branding;
+  if (!branding.ready || !footer.show) return null;
+  const links = [
+    { label: "Website", href: footer.websiteUrl },
+    { label: "LinkedIn", href: footer.linkedinUrl },
+    { label: "GitHub", href: footer.githubUrl },
+  ].filter((l) => l.href);
+
+  return (
+    <footer className="mt-auto border-t border-ink-100 px-4 py-4 sm:px-8">
+      <div className="mx-auto flex max-w-350 flex-wrap items-center justify-between gap-2 text-xs text-ink-400">
+        <span>
+          {footer.copyrightIcon} {new Date().getFullYear()} {companyName}. {footer.copyrightText}
+        </span>
+        {links.length > 0 && (
+          <span className="flex gap-4">
+            {links.map((l) => (
+              <a
+                key={l.label}
+                href={l.href}
+                target="_blank"
+                rel="noreferrer"
+                className="font-medium text-ink-500 hover:text-crimson-700 hover:underline"
+              >
+                {l.label}
+              </a>
+            ))}
+          </span>
+        )}
+      </div>
+    </footer>
+  );
+}
+
+const COLLAPSED_KEY = "bitween-nav-collapsed";
+
+const loadCollapsed = (): string[] => {
+  try {
+    return JSON.parse(localStorage.getItem(COLLAPSED_KEY) ?? "[]") as string[];
+  } catch {
+    return [];
+  }
+};
+
+function SidebarContent({ onNavigate, logoUrl }: { onNavigate?: () => void; logoUrl: string | null }) {
+  const { session, signOut } = useSession();
+  const navigate = useNavigate();
+  const { pathname } = useLocation();
+  const [collapsed, setCollapsed] = useState<string[]>(loadCollapsed);
+  if (!session) return null;
+
+  const groups = visibleGroups(session.permissions);
+
+  const toggleGroup = (label: string) =>
+    setCollapsed((prev) => {
+      const next = prev.includes(label) ? prev.filter((l) => l !== label) : [...prev, label];
+      localStorage.setItem(COLLAPSED_KEY, JSON.stringify(next));
+      return next;
+    });
+
+  return (
+    <div className="flex h-full flex-col">
+      <div className="px-5 pt-6 pb-4">
+        <Link to="/dashboard">
+          <img
+            src={logoUrl ?? import.meta.env.BASE_URL + "brand/BitweenFull-light.svg"}
+            alt="Bitween"
+            className="h-6 w-fit"
+          />
+        </Link>
+      </div>
+
+      <nav className="flex-1 space-y-4 overflow-y-auto px-3 py-3">
+        {groups.map((group) => {
+          // never hide the page the user is on
+          const containsActive = group.items.some((item) => pathname.startsWith(item.path));
+          const isCollapsed = collapsed.includes(group.label) && !containsActive;
+          return (
+            <div key={group.label}>
+              <button
+                onClick={() => toggleGroup(group.label)}
+                aria-expanded={!isCollapsed}
+                className="flex w-full items-center justify-between rounded-md px-2.5 pb-1.5 text-left hover:text-ink-300"
+              >
+                <span className="text-[11px] font-semibold tracking-widest text-ink-500 uppercase">
+                  {group.label}
+                </span>
+                {isCollapsed ? (
+                  <ChevronRight className="size-3 text-ink-600" aria-hidden />
+                ) : (
+                  <ChevronDown className="size-3 text-ink-600" aria-hidden />
+                )}
+              </button>
+              {!isCollapsed && (
+                <ul className="space-y-0.5">
+                  {group.items.map((item) => (
+                    <li key={item.path}>
+                      <NavLink
+                        to={item.path}
+                        onClick={onNavigate}
+                        className={({ isActive }) =>
+                          `group relative flex items-center gap-2.5 rounded-lg px-2.5 py-1.5 text-sm transition-colors ${
+                            isActive
+                              ? "bg-ink-800 font-medium text-white"
+                              : "text-ink-300 hover:bg-ink-900 hover:text-ink-100"
+                          }`
+                        }
+                      >
+                        {({ isActive }) => (
+                          <>
+                            {isActive && (
+                              <span className="absolute inset-y-1 -left-3 w-1 rounded-r-full bg-crimson-500" />
+                            )}
+                            <item.icon className="size-4 shrink-0" aria-hidden />
+                            <span className="truncate">{item.label}</span>
+                          </>
+                        )}
+                      </NavLink>
+                    </li>
+                  ))}
+                </ul>
+              )}
+            </div>
+          );
+        })}
+      </nav>
+
+      <div className="border-t border-ink-900 p-3">
+        <Menu
+          align="left"
+          side="up"
+          trigger={
+            <button
+              aria-label="Account menu"
+              className="flex w-full items-center gap-2.5 rounded-lg px-2 py-1.5 text-left hover:bg-ink-900"
+            >
+              <Avatar name={session.user.displayName} size="sm" />
+              <span className="min-w-0 flex-1">
+                <span className="block truncate text-sm font-medium text-ink-100">
+                  {session.user.displayName}
+                </span>
+                <span className="block truncate text-[11px] text-ink-400">
+                  {session.roles.map((r) => r.name).join(", ") || "No roles"}
+                </span>
+              </span>
+            </button>
+          }
+        >
+          <MenuItem onSelect={() => navigate("/profile")}>
+            <UserRound className="size-4" /> Your profile
+          </MenuItem>
+          <MenuItem onSelect={() => void signOut()}>
+            <LogOut className="size-4" /> Sign out
+          </MenuItem>
+        </Menu>
+      </div>
+    </div>
+  );
+}
+
+export function AppShell() {
+  const [mobileOpen, setMobileOpen] = useState(false);
+  const branding = useApplyBranding();
+
+  return (
+    <div className="min-h-screen lg:grid lg:grid-cols-[248px_1fr]">
+      {/* mobile top bar */}
+      <header className="sticky top-0 z-30 flex items-center gap-3 border-b border-ink-100 bg-white px-4 py-2.5 lg:hidden">
+        <button
+          onClick={() => setMobileOpen(true)}
+          aria-label="Open navigation"
+          className="rounded-md p-1.5 text-ink-600 hover:bg-ink-100"
+        >
+          <MenuIcon className="size-5" />
+        </button>
+        <Link to="/dashboard">
+          <img
+            // "Mobile header icon" wins here when it's been set; otherwise this keeps
+            // falling back to the sidebar logo, so the default look is unchanged.
+            src={
+              branding.headerIconUrl ??
+              branding.sidebarLogoUrl ??
+              import.meta.env.BASE_URL + "brand/BitweenFull.svg"
+            }
+            alt="Bitween"
+            className="h-5"
+          />
+        </Link>
+      </header>
+
+      {/* mobile drawer */}
+      {mobileOpen && (
+        <div className="fixed inset-0 z-40 lg:hidden">
+          <div className="absolute inset-0 bg-ink-950/50" onClick={() => setMobileOpen(false)} />
+          <div className="absolute inset-y-0 left-0 w-72 bg-ink-950 shadow-xl">
+            <button
+              onClick={() => setMobileOpen(false)}
+              aria-label="Close navigation"
+              className="absolute top-4 right-3 rounded-md p-1 text-ink-400 hover:text-white"
+            >
+              <X className="size-5" />
+            </button>
+            <SidebarContent onNavigate={() => setMobileOpen(false)} logoUrl={branding.sidebarLogoUrl} />
+          </div>
+        </div>
+      )}
+
+      {/* desktop sidebar */}
+      <aside className="sticky top-0 hidden h-screen bg-ink-950 lg:block">
+        <SidebarContent logoUrl={branding.sidebarLogoUrl} />
+      </aside>
+
+      <main className="flex min-w-0 flex-col">
+        <div className="mx-auto w-full max-w-350 px-4 py-6 sm:px-8 sm:py-8">
+          <SettingsPreviewBanner />
+          <Outlet />
+        </div>
+        <AppFooter branding={branding} />
+      </main>
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/components/layout/PageHeader.tsx b/SW.Bitween.Web/ClientApp/src/components/layout/PageHeader.tsx
new file mode 100644
index 00000000..c327dd6f
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/layout/PageHeader.tsx
@@ -0,0 +1,62 @@
+import { useState, type ReactNode } from "react";
+import { CircleHelp, X } from "lucide-react";
+
+/**
+ * Every page opens with the same frame: what this page is, one line of
+ * plain-words help, and the page's primary actions — so clients can
+ * find their feet without a demo.
+ */
+export function PageHeader({
+  title,
+  description,
+  actions,
+  help,
+}: {
+  title: string;
+  description?: string;
+  actions?: ReactNode;
+  /** Optional expandable "how this works" explainer. */
+  help?: { title: string; body: ReactNode };
+}) {
+  const [helpOpen, setHelpOpen] = useState(false);
+
+  return (
+    <div className="mb-6">
+      <div className="flex flex-wrap items-start justify-between gap-3">
+        <div>
+          <h1 className="flex items-center gap-2 text-[22px] font-semibold tracking-tight text-ink-900">
+            {title}
+            {help && (
+              <button
+                onClick={() => setHelpOpen((o) => !o)}
+                aria-expanded={helpOpen}
+                aria-label={`How ${title.toLowerCase()} works`}
+                className="rounded-full p-0.5 text-ink-300 hover:text-crimson-600"
+              >
+                <CircleHelp className="size-4.5" />
+              </button>
+            )}
+          </h1>
+          {description && <p className="mt-1 max-w-2xl text-sm text-ink-500">{description}</p>}
+        </div>
+        {actions && <div className="flex shrink-0 items-center gap-2">{actions}</div>}
+      </div>
+
+      {help && helpOpen && (
+        <div className="relative mt-4 rounded-xl border border-crimson-100 bg-crimson-50/60 px-4 py-3.5">
+          <button
+            onClick={() => setHelpOpen(false)}
+            aria-label="Close help"
+            className="absolute top-2.5 right-2.5 rounded-md p-1 text-ink-400 hover:text-ink-700"
+          >
+            <X className="size-4" />
+          </button>
+          <h2 className="text-sm font-semibold text-ink-900">{help.title}</h2>
+          <div className="mt-1.5 max-w-3xl space-y-2 text-sm leading-relaxed text-ink-600">
+            {help.body}
+          </div>
+        </div>
+      )}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/components/mapper/ArrayMappingModal/ArrayMappingFieldRow.tsx b/SW.Bitween.Web/ClientApp/src/components/mapper/ArrayMappingModal/ArrayMappingFieldRow.tsx
new file mode 100644
index 00000000..4a7ebb6a
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/mapper/ArrayMappingModal/ArrayMappingFieldRow.tsx
@@ -0,0 +1,260 @@
+import type React from "react";
+import { Trash2 } from "lucide-react";
+import type { MappingMode } from "../../../lib/mapping/types";
+import { ModeToggleButtons } from "../ModeToggleButtons";
+import { GlobalSetSelector } from "../GlobalSetSelector";
+import { LookupDictionaryPanel } from "../LookupDictionaryPanel";
+import type { GlobalValuesSetRow } from "../../../api";
+import type { PendingMapping } from "./useArrayMappingModal";
+import { FixedStringInput } from "../FixedStringInput";
+
+// ─── Types ────────────────────────────────────────────────────────────────────
+
+export interface ArrayMappingFieldRowProps {
+  m: PendingMapping;
+  alias: string;
+  panel: 'transform' | 'lookup' | 'fixed' | null;
+  targetFieldType: 'string' | 'number' | 'boolean' | undefined;
+  targetItemProps: string[];
+  usedTargets: Set<string>;
+  sourceItemProps: string[];
+  inputScalarProps: string[];
+  partnerAdapterProperties: Record<string, string>;
+  allGlobalSets: GlobalValuesSetRow[];
+  onPatch: (patch: Partial<PendingMapping>) => void;
+  onRemove: () => void;
+  onOpenPanel: (panel: 'transform' | 'lookup' | 'fixed' | null) => void;
+}
+
+// ─── ArrayMappingFieldRow ─────────────────────────────────────────────────────
+// A single field mapping row inside ArrayMappingModal. Handles mode toggle,
+// value input, lookup/transform secondary panels.
+
+export const ArrayMappingFieldRow: React.FC<ArrayMappingFieldRowProps> = ({
+  m,
+  alias,
+  panel,
+  targetFieldType,
+  targetItemProps,
+  usedTargets,
+  sourceItemProps,
+  inputScalarProps,
+  partnerAdapterProperties,
+  allGlobalSets,
+  onPatch,
+  onRemove,
+  onOpenPanel,
+}) => {
+  const hasLookup = (m.lookupDictionary?.entries?.length ?? 0) > 0;
+  const hasTransform = Boolean(m.transform);
+  const isMapped = Boolean(m.source) || m.fixedValue !== undefined || Boolean(m.partnerPropKey) || Boolean(m.globalSetId && m.globalKey);
+
+  const rowMode: MappingMode =
+    m.partnerPropKey !== undefined ? 'partner' :
+    m.globalSetId !== undefined ? 'global' :
+    m.fixedValue !== undefined ? 'fixed' : 'source';
+
+  const handleModeChange = (next: MappingMode) => {
+    if (next === rowMode) return;
+    onOpenPanel(null);
+    if (next === 'source') onPatch({ fixedValue: undefined, partnerPropKey: undefined, globalSetId: undefined, globalKey: undefined, lookupDictionary: undefined });
+    else if (next === 'fixed') onPatch({ source: '', fixedValue: '', partnerPropKey: undefined, globalSetId: undefined, globalKey: undefined, lookupDictionary: undefined });
+    else if (next === 'partner') onPatch({ source: '', fixedValue: undefined, partnerPropKey: '', globalSetId: undefined, globalKey: undefined, lookupDictionary: undefined, transform: undefined });
+    else if (next === 'global') onPatch({ source: '', fixedValue: undefined, partnerPropKey: undefined, globalSetId: '', globalKey: '', lookupDictionary: undefined, transform: undefined });
+  };
+
+  const handleLookupToggle = () => {
+    const isOpen = panel === 'lookup';
+    if (!isOpen && hasTransform) onPatch({ transform: undefined });
+    else if (isOpen) {
+      const hasValid = (m.lookupDictionary?.entries ?? []).some((e) => e.from.trim() !== '' && e.to.trim() !== '');
+      if (!hasValid) onPatch({ lookupDictionary: undefined });
+    }
+    onOpenPanel(isOpen ? null : 'lookup');
+  };
+
+  const handleTransformToggle = () => {
+    if (hasLookup) onPatch({ lookupDictionary: undefined });
+    onOpenPanel(panel === 'transform' ? null : 'transform');
+  };
+
+  return (
+    <div className="rounded border border-ink-100 bg-white px-2 py-1.5 space-y-1">
+      {/* Main row */}
+      <div className="flex items-center gap-1">
+        <span className={`w-2 h-2 rounded-full flex-shrink-0 ${isMapped ? 'bg-ok-100' : 'bg-danger-300'}`} />
+
+        {/* Target field */}
+        {targetItemProps.length > 0 ? (
+          <select
+            className="font-mono text-xs text-ink-700 bg-transparent border-0 focus:outline-none min-w-0 max-w-[7rem] truncate"
+            value={m.target}
+            onChange={(e) => onPatch({ target: e.target.value })}
+          >
+            <option value="">— target —</option>
+            {[...new Set([...targetItemProps, m.target].filter(Boolean))]
+              .filter((prop) => !usedTargets.has(prop) || prop === m.target)
+              .map((prop) => <option key={prop} value={prop}>{prop}</option>)}
+          </select>
+        ) : (
+          <input
+            className="font-mono text-xs text-ink-700 bg-transparent border-0 focus:outline-none min-w-0 w-24"
+            placeholder="target"
+            value={m.target}
+            onChange={(e) => onPatch({ target: e.target.value })}
+          />
+        )}
+
+        <span className="text-ink-300 flex-shrink-0 text-xs select-none">←</span>
+
+        <div className={!m.target ? 'opacity-30 pointer-events-none' : ''}>
+          <ModeToggleButtons current={rowMode} onChange={handleModeChange} />
+        </div>
+
+        {/* Lookup button — source mode only */}
+        {rowMode === 'source' && (
+          <button
+            disabled={!m.source}
+            title={!m.source ? 'Select a source field first' : hasLookup ? `Lookup: ${m.lookupDictionary!.entries.length} entries` : 'Map source values to different output values'}
+            onClick={handleLookupToggle}
+            className={[
+              'flex-shrink-0 text-[10px] font-medium px-1.5 py-0.5 rounded border transition leading-none',
+              !m.source ? 'opacity-30 cursor-not-allowed bg-white border-ink-200 text-ink-400'
+                : hasLookup ? 'bg-crimson-100 border-crimson-300 text-crimson-700'
+                : 'bg-white border-ink-200 text-ink-400 hover:border-crimson-300 hover:text-crimson-500',
+            ].join(' ')}
+          >
+            Lookup
+          </button>
+        )}
+
+        {/* Value input area */}
+        {rowMode === 'fixed' ? (
+          targetFieldType === 'boolean' ? (
+            <select
+              className="flex-1 min-w-0 border-0 bg-transparent font-mono text-xs text-warn-700 focus:outline-none"
+              value={m.fixedValue ?? ''}
+              onChange={(e) => onPatch({ fixedValue: e.target.value, source: '' })}
+            >
+              <option value="">— pick —</option>
+              <option value="true">true</option>
+              <option value="false">false</option>
+            </select>
+          ) : targetFieldType === 'number' ? (
+            <input
+              className="flex-1 min-w-0 border-0 bg-transparent font-mono text-xs text-warn-700 focus:outline-none placeholder-warn-100"
+              placeholder="0"
+              type="number"
+              value={m.fixedValue ?? ''}
+              onChange={(e) => onPatch({ fixedValue: e.target.value, source: '' })}
+            />
+          ) : (
+            <FixedStringInput
+              value={m.fixedValue ?? ''}
+              sourcePaths={inputScalarProps}
+              onChange={(v) => onPatch({ fixedValue: v, source: '' })}
+            />
+          )
+        ) : rowMode === 'partner' ? (
+          <div className="flex-1 relative min-w-0">
+            <input
+              list={`partner-props-am-${m.id}`}
+              className="w-full border-0 bg-transparent font-mono text-xs focus:outline-none text-ok-600 placeholder-ok-100"
+              placeholder="property key…"
+              value={m.partnerPropKey ?? ''}
+              onChange={(e) => onPatch({ partnerPropKey: e.target.value })}
+            />
+            <datalist id={`partner-props-am-${m.id}`}>
+              {Object.keys(partnerAdapterProperties).map((k) => <option key={k} value={k} />)}
+            </datalist>
+          </div>
+        ) : rowMode === 'global' ? (
+          <GlobalSetSelector
+            setId={m.globalSetId ?? ''}
+            keyValue={m.globalKey ?? ''}
+            allGlobalSets={allGlobalSets}
+            onSetChange={(setId) => onPatch({ globalSetId: setId, globalKey: '' })}
+            onKeyChange={(key) => onPatch({ globalKey: key })}
+          />
+        ) : (
+          <select
+            disabled={!m.target}
+            className={`flex-1 min-w-0 border-0 bg-transparent font-mono text-xs focus:outline-none ${!m.target ? 'opacity-30 cursor-not-allowed text-ink-400' : 'text-ink-500'}`}
+            value={m.source}
+            onChange={(e) => {
+              const val = e.target.value;
+              const isRoot = inputScalarProps.includes(val) && !sourceItemProps.includes(val);
+              onPatch({ source: val, fixedValue: undefined, lookupDictionary: undefined, isRootSource: isRoot || undefined });
+            }}
+          >
+            <option value="">— unassigned —</option>
+            {sourceItemProps.length > 0 && (
+              <optgroup label={`${alias} fields`}>
+                {sourceItemProps.map((prop) => <option key={prop} value={prop}>{prop}</option>)}
+              </optgroup>
+            )}
+            {inputScalarProps.length > 0 && (
+              <optgroup label="root fields">
+                {inputScalarProps.map((prop) => <option key={prop} value={prop}>{prop}</option>)}
+              </optgroup>
+            )}
+          </select>
+        )}
+
+        {/* Transform toggle — source mode, has source, no lookup */}
+        {rowMode === 'source' && Boolean(m.source) && !hasLookup && (
+          <button
+            title={hasTransform ? `Transform: ${m.transform}` : 'Add a transform expression to modify the value'}
+            onClick={handleTransformToggle}
+            className={[
+              'flex-shrink-0 text-[10px] font-medium px-1.5 py-0.5 rounded border transition leading-none',
+              panel === 'transform' ? 'bg-crimson-100 border-crimson-300 text-crimson-700'
+                : hasTransform ? 'bg-crimson-50 border-crimson-200 text-crimson-500'
+                : 'bg-white border-ink-200 text-ink-400 hover:border-crimson-300 hover:text-crimson-500',
+            ].join(' ')}
+          >
+            Transform
+          </button>
+        )}
+
+        <button
+          className="flex-shrink-0 text-ink-300 hover:text-crimson-500 transition"
+          onClick={onRemove}
+        >
+          <Trash2 size={13} />
+        </button>
+      </div>
+
+      {/* Transform panel */}
+      {panel === 'transform' && (
+        <div className="space-y-0.5">
+          <span className="text-[10px] font-medium text-crimson-600 select-none">
+            Transform{' '}
+            <span className="font-normal text-ink-400">
+              (optional — modify the value before output. Use <code className="font-mono">value</code> to refer to the source field.)
+            </span>
+          </span>
+          <input
+            autoFocus
+            className="w-full border border-crimson-200 bg-white rounded px-2 py-1 text-xs font-mono focus:outline-none focus:border-crimson-400 placeholder-ink-300 text-crimson-700"
+            placeholder="e.g.  value * 1.1    or    value + ' USD'"
+            value={m.transform ?? ''}
+            onChange={(e) => onPatch({ transform: e.target.value || undefined })}
+          />
+        </div>
+      )}
+
+      {/* Lookup panel */}
+      {panel === 'lookup' && (
+        <div className="mt-0.5">
+          <LookupDictionaryPanel
+            dictionary={m.lookupDictionary}
+            targetFieldType={targetFieldType}
+            onChange={(next) => onPatch({ lookupDictionary: next })}
+            onClose={() => onOpenPanel(null)}
+          />
+        </div>
+      )}
+    </div>
+  );
+};
diff --git a/SW.Bitween.Web/ClientApp/src/components/mapper/ArrayMappingModal/ArrayMappingModal.tsx b/SW.Bitween.Web/ClientApp/src/components/mapper/ArrayMappingModal/ArrayMappingModal.tsx
new file mode 100644
index 00000000..10766f6d
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/mapper/ArrayMappingModal/ArrayMappingModal.tsx
@@ -0,0 +1,322 @@
+import type React from "react";
+import { PlusCircle, X } from "lucide-react";
+import { useMappingEditorState } from "../../../lib/mapping/MappingEditorContext";
+import type { FilterOperator } from "../../../lib/mapping/types";
+import { generateExample } from "../../../lib/mapping/arrayMappingHelpers";
+import { useArrayMappingModal } from "./useArrayMappingModal";
+import { ArrayMappingFieldRow } from "./ArrayMappingFieldRow";
+
+// ─── Operators ────────────────────────────────────────────────────────────────
+
+const OPERATORS: { label: string; value: FilterOperator }[] = [
+  { label: '==', value: '==' },
+  { label: '!=', value: '!=' },
+  { label: '>', value: '>' },
+  { label: '>=', value: '>=' },
+  { label: '<', value: '<' },
+  { label: '<=', value: '<=' },
+];
+
+// ─── ArrayMappingModal ────────────────────────────────────────────────────────
+
+const ArrayMappingModal: React.FC = () => {
+  const { editingArrayId } = useMappingEditorState();
+
+  const {
+    isCreating,
+    isNested,
+    isRootOutput,
+    parentAmTarget,
+    source,
+    target,
+    alias,
+    hasFilter,
+    filterField,
+    filterOp,
+    filterValue,
+    pendingMappings,
+    sourceArrayPaths,
+    sourceItemProps,
+    targetItemProps,
+    inputScalarProps,
+    outputTypeMap,
+    usedTargets,
+    childArrayMappings,
+    allGlobalSets,
+    partnerAdapterProperties,
+    setSource,
+    setAlias,
+    setHasFilter,
+    setFilterField,
+    setFilterOp,
+    setFilterValue,
+    setOpenPanels,
+    handleSave,
+    handleClose,
+    handleDelete,
+    addFieldRow,
+    removeFieldRow,
+    patchFieldRow,
+    getPanel,
+  } = useArrayMappingModal();
+
+  if (editingArrayId === null) return null;
+
+  const fullTargetBase = target;
+
+  return (
+    <div className="fixed inset-0 z-[60] bg-black/30 flex items-center justify-center p-4">
+      <div className="bg-white rounded-xl shadow-2xl border border-ink-200 w-full max-w-2xl flex flex-col max-h-[90vh] overflow-hidden">
+        {/* Header */}
+        <div className="flex items-center justify-between px-5 py-3 border-b border-ink-200 bg-ink-50 flex-shrink-0">
+          <div>
+            <h2 className="font-bold text-ink-800 text-sm">
+              {isCreating ? 'New Array Mapping' : 'Edit Array Mapping'}
+              {isNested && (
+                <span className="ml-2 text-[10px] font-normal bg-warn-100 text-warn-700 border border-warn-100 rounded px-1.5 py-0.5">
+                  nested inside {parentAmTarget}
+                </span>
+              )}
+            </h2>
+            <p className="text-xs text-ink-500 mt-0.5">Configure a loop over a source array with optional filters</p>
+          </div>
+          <button onClick={handleClose} className="text-ink-400 hover:text-ink-600 transition">
+            <X size={18} />
+          </button>
+        </div>
+
+        <div className="overflow-y-auto flex-1 px-5 py-4 space-y-5">
+          {/* Source / Target / Alias */}
+          <div className="grid grid-cols-3 gap-3">
+            <div>
+              <label className="block text-xs font-semibold text-ink-600 mb-1">Target Array Path</label>
+              {isRootOutput ? (
+                <div className="w-full border border-crimson-200 rounded px-2 py-1.5 text-xs font-mono bg-crimson-50 text-crimson-600 flex items-center gap-1.5">
+                  <span className="text-[10px] font-bold bg-crimson-100 border border-crimson-300 text-crimson-700 rounded px-1">root</span>
+                  <span className="text-crimson-500 italic">output is a root array</span>
+                </div>
+              ) : (
+                <input
+                  className="w-full border border-ink-200 rounded px-2 py-1.5 text-xs font-mono bg-ink-50 text-ink-500 cursor-not-allowed"
+                  value={target}
+                  readOnly
+                  disabled
+                  title="Target is determined by the array you clicked in the output tree"
+                />
+              )}
+            </div>
+            <div>
+              <label className="block text-xs font-semibold text-ink-600 mb-1">Source Array Path</label>
+              {sourceArrayPaths.length > 0 ? (
+                <select
+                  className="w-full border border-ink-200 rounded px-2 py-1.5 text-xs font-mono focus:outline-none focus:border-crimson-400 bg-white"
+                  value={source}
+                  onChange={(e) => { setSource(e.target.value); }}
+                >
+                  <option value="">— select array —</option>
+                  {sourceArrayPaths.map((p) => <option key={p} value={p}>{p}</option>)}
+                </select>
+              ) : (
+                <input
+                  className="w-full border border-ink-200 rounded px-2 py-1.5 text-xs font-mono focus:outline-none focus:border-crimson-400"
+                  placeholder="e.g. order.items"
+                  value={source}
+                  onChange={(e) => { setSource(e.target.value); }}
+                />
+              )}
+            </div>
+            <div>
+              <label className="block text-xs font-semibold text-ink-600 mb-1">Loop Alias</label>
+              <input
+                className="w-full border border-ink-200 rounded px-2 py-1.5 text-xs font-mono focus:outline-none focus:border-crimson-400"
+                placeholder="item"
+                value={alias}
+                onChange={(e) => setAlias(e.target.value)}
+              />
+            </div>
+          </div>
+
+          {/* Filter */}
+          <div className="bg-ink-50 rounded-lg border border-ink-200 p-3">
+            <div className="flex items-center gap-2 mb-3">
+              <label className="flex items-center gap-2 cursor-pointer select-none">
+                <input
+                  type="checkbox"
+                  checked={hasFilter}
+                  onChange={(e) => setHasFilter(e.target.checked)}
+                  className="rounded border-ink-300 text-crimson-600 focus:ring-crimson-500"
+                />
+                <span className="text-xs font-semibold text-ink-700">Apply filter on array items</span>
+              </label>
+              {hasFilter && (
+                <span className="text-xs text-ink-400">
+                  e.g. only include items where{' '}
+                  <code className="font-mono bg-white px-1 rounded border border-ink-200">
+                    {alias}.{filterField || 'field'} {filterOp} {filterValue || 'value'}
+                  </code>
+                </span>
+              )}
+            </div>
+            {hasFilter && (
+              <div className="grid grid-cols-3 gap-2">
+                <div>
+                  <label className="block text-xs text-ink-500 mb-1">Field</label>
+                  <input
+                    className="w-full border border-ink-200 rounded px-2 py-1 text-xs font-mono focus:outline-none focus:border-crimson-400 bg-white"
+                    placeholder="status"
+                    value={filterField}
+                    onChange={(e) => setFilterField(e.target.value)}
+                  />
+                </div>
+                <div>
+                  <label className="block text-xs text-ink-500 mb-1">Operator</label>
+                  <select
+                    className="w-full border border-ink-200 rounded px-2 py-1 text-xs font-mono focus:outline-none focus:border-crimson-400 bg-white"
+                    value={filterOp}
+                    onChange={(e) => setFilterOp(e.target.value as FilterOperator)}
+                  >
+                    {OPERATORS.map((op) => <option key={op.value} value={op.value}>{op.label}</option>)}
+                  </select>
+                </div>
+                <div>
+                  <label className="block text-xs text-ink-500 mb-1">Value</label>
+                  <input
+                    className="w-full border border-ink-200 rounded px-2 py-1 text-xs font-mono focus:outline-none focus:border-crimson-400 bg-white"
+                    placeholder="10"
+                    value={filterValue}
+                    onChange={(e) => setFilterValue(e.target.value)}
+                  />
+                </div>
+              </div>
+            )}
+          </div>
+
+          {/* Field Mappings */}
+          <div>
+            <div className="flex items-center gap-2 mb-2">
+              <span className="text-xs font-semibold text-ink-700">Field Mappings inside loop</span>
+              <span className="text-xs text-ink-400">
+                Use <code className="font-mono">{alias || 'item'}.fieldName</code> for source fields
+              </span>
+            </div>
+            {isCreating && (
+              <p className="text-xs text-crimson-500 mb-2">
+                Field mappings will be saved along with the array mapping.
+              </p>
+            )}
+            <div className="space-y-1.5 max-h-56 overflow-y-auto pr-0.5">
+              {pendingMappings.map((m) => {
+                const targetFieldType = m.target && fullTargetBase
+                  ? outputTypeMap[`${fullTargetBase}[*].${m.target}`]
+                  : undefined;
+
+                return (
+                  <ArrayMappingFieldRow
+                    key={m.id}
+                    m={m}
+                    alias={alias}
+                    panel={getPanel(m)}
+                    targetFieldType={targetFieldType}
+                    targetItemProps={targetItemProps}
+                    usedTargets={usedTargets}
+                    sourceItemProps={sourceItemProps}
+                    inputScalarProps={inputScalarProps}
+                    partnerAdapterProperties={partnerAdapterProperties}
+                    allGlobalSets={allGlobalSets}
+                    onPatch={(patch) => patchFieldRow(m.id, patch)}
+                    onRemove={() => removeFieldRow(m.id)}
+                    onOpenPanel={(panel) => setOpenPanels((prev) => ({ ...prev, [m.id]: panel }))}
+                  />
+                );
+              })}
+            </div>
+            <button
+              disabled={!source}
+              className="mt-2 flex items-center gap-1 text-xs text-crimson-500 hover:text-crimson-700 transition disabled:opacity-40 disabled:cursor-not-allowed disabled:pointer-events-none"
+              onClick={addFieldRow}
+            >
+              <PlusCircle size={13} /> Add field mapping
+            </button>
+          </div>
+
+          {/* Child Array Mappings — read-only */}
+          {!isCreating && childArrayMappings.length > 0 && (
+            <div>
+              <div className="flex items-center gap-2 mb-2">
+                <span className="text-xs font-semibold text-ink-700">Nested Array Mappings</span>
+                <span className="text-xs text-ink-400">configured via their own loop buttons</span>
+              </div>
+              <div className="space-y-1.5">
+                {childArrayMappings.map((child) => (
+                  <div key={child.id} className="rounded border border-warn-100 bg-warn-100 px-3 py-2">
+                    <div className="flex items-center gap-2 mb-1">
+                      <span className="text-[10px] font-bold bg-warn-100 text-warn-700 border border-warn-100 rounded px-1.5">loop</span>
+                      <span className="text-xs font-mono text-ink-700">
+                        {child.source} <span className="text-ink-400">{'→'}</span> {child.target}
+                        <span className="text-ink-400 ml-1">as {child.alias}</span>
+                      </span>
+                      {child.filter && (
+                        <span className="text-[10px] text-ink-500 font-mono border border-ink-200 rounded px-1 bg-white">
+                          if {child.alias}.{child.filter.field} {child.filter.operator} {child.filter.value}
+                        </span>
+                      )}
+                    </div>
+                    {child.mappings.length > 0 && (
+                      <div className="space-y-0.5 pl-2 border-l border-warn-100">
+                        {child.mappings.map((m) => (
+                          <div key={m.id} className="text-[10px] font-mono text-ink-500">
+                            {m.source || (m.fixedValue !== undefined ? `"${m.fixedValue}"` : '—')}
+                            {' '}<span className="text-ink-300">{'→'}</span>{' '}
+                            {m.target}
+                          </div>
+                        ))}
+                      </div>
+                    )}
+                  </div>
+                ))}
+              </div>
+            </div>
+          )}
+
+          {/* Example preview */}
+          {source && target && (
+            <div className="bg-ink-900 rounded-lg p-3 text-xs font-mono text-ink-300 overflow-x-auto">
+              <pre className="whitespace-pre leading-5">
+                {generateExample(source, target, alias, hasFilter, filterField, filterOp, filterValue)}
+              </pre>
+            </div>
+          )}
+        </div>
+
+        {/* Footer */}
+        <div className="flex items-center justify-between px-5 py-3 border-t border-ink-200 bg-ink-50 flex-shrink-0">
+          {!isCreating && (
+            <button className="text-xs text-danger-600 hover:text-danger-800 transition" onClick={handleDelete}>
+              Delete array mapping
+            </button>
+          )}
+          <div className="flex items-center gap-2 ml-auto">
+            <button onClick={handleClose} className="text-xs border border-ink-300 rounded px-3 py-1.5 hover:bg-ink-100 transition">
+              Cancel
+            </button>
+            <button
+              onClick={handleSave}
+              disabled={
+                (!target && !isRootOutput) ||
+                (hasFilter && !source) ||
+                pendingMappings.some(
+                  (m) => m.target && !m.source && m.fixedValue === undefined && !m.lookupDictionary && !m.partnerPropKey && !(m.globalSetId && m.globalKey)
+                )
+              }
+              className="text-xs bg-crimson-600 text-white rounded px-4 py-1.5 hover:bg-crimson-700 transition disabled:opacity-40 disabled:cursor-not-allowed"
+            >
+              {isCreating ? 'Create' : 'Save'}
+            </button>
+          </div>
+        </div>
+      </div>
+    </div>
+  );
+};
+
+export default ArrayMappingModal;
diff --git a/SW.Bitween.Web/ClientApp/src/components/mapper/ArrayMappingModal/useArrayMappingModal.ts b/SW.Bitween.Web/ClientApp/src/components/mapper/ArrayMappingModal/useArrayMappingModal.ts
new file mode 100644
index 00000000..68d0417f
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/mapper/ArrayMappingModal/useArrayMappingModal.ts
@@ -0,0 +1,365 @@
+import React, { useEffect, useState } from "react";
+import {
+  useMappingEditorDispatch,
+  useMappingEditorState,
+  addArrayMapping,
+  openArrayModal,
+  removeArrayMapping,
+  updateArrayMapping,
+} from "../../../lib/mapping/MappingEditorContext";
+import { type FilterOperator, type LookupDictionary } from "../../../lib/mapping/types";
+import { buildTypeMap } from "../../../lib/mapping/scribanGenerator";
+import {
+  getFullSourcePath,
+  getFullTargetBase,
+  getItemArrayPaths,
+  collectArrayPaths,
+  getItemProperties,
+} from "../../../lib/mapping/arrayMappingHelpers";
+import type { GlobalValuesSetRow } from "../../../api";
+import { useGlobalSets } from "../data";
+
+// ─── Pending mapping row type ─────────────────────────────────────────────────
+
+export interface PendingMapping {
+  id: string;
+  source: string;
+  target: string;
+  transform?: string;
+  fixedValue?: string;
+  lookupDictionary?: LookupDictionary;
+  isRootSource?: boolean;
+  partnerPropKey?: string;
+  globalSetId?: string;
+  globalKey?: string;
+}
+
+// ─── Return type ──────────────────────────────────────────────────────────────
+
+export interface UseArrayMappingModalResult {
+  // Derived state
+  isCreating: boolean;
+  isNested: boolean;
+  isRootOutput: boolean;
+  parentAmTarget: string;
+  // Form fields
+  source: string;
+  target: string;
+  alias: string;
+  hasFilter: boolean;
+  filterField: string;
+  filterOp: FilterOperator;
+  filterValue: string;
+  pendingMappings: PendingMapping[];
+  openPanels: Record<string, "transform" | "lookup" | "fixed" | null>;
+  // Derived data
+  sourceArrayPaths: string[];
+  sourceItemProps: string[];
+  targetItemProps: string[];
+  inputScalarProps: string[];
+  outputTypeMap: Record<string, "string" | "number" | "boolean">;
+  usedTargets: Set<string>;
+  childArrayMappings: ReturnType<typeof useMappingEditorState>["arrayMappings"];
+  allGlobalSets: GlobalValuesSetRow[];
+  partnerAdapterProperties: Record<string, string>;
+  // Setters
+  setSource: (v: string) => void;
+  setAlias: (v: string) => void;
+  setHasFilter: (v: boolean) => void;
+  setFilterField: (v: string) => void;
+  setFilterOp: (v: FilterOperator) => void;
+  setFilterValue: (v: string) => void;
+  setPendingMappings: React.Dispatch<React.SetStateAction<PendingMapping[]>>;
+  setOpenPanels: React.Dispatch<React.SetStateAction<Record<string, "transform" | "lookup" | "fixed" | null>>>;
+  // Actions
+  handleSave: () => void;
+  handleClose: () => void;
+  handleDelete: () => void;
+  addFieldRow: () => void;
+  removeFieldRow: (id: string) => void;
+  patchFieldRow: (id: string, patch: Partial<PendingMapping>) => void;
+  getPanel: (m: PendingMapping) => "transform" | "lookup" | "fixed" | null;
+}
+
+// ─── Hook ─────────────────────────────────────────────────────────────────────
+
+export function useArrayMappingModal(): UseArrayMappingModalResult {
+  const dispatch = useMappingEditorDispatch();
+  const {
+    editingArrayId,
+    arrayMappings,
+    fieldMappings,
+    inputJson,
+    outputJson,
+    newArrayPresetTarget,
+    newArrayParentId,
+    newArrayIsRootOutput,
+    partnerAdapterProperties,
+  } = useMappingEditorState();
+  const allGlobalSets = useGlobalSets();
+
+  const am = arrayMappings.find((m) => m.id === editingArrayId);
+  const parentAm = newArrayParentId ? arrayMappings.find((m) => m.id === newArrayParentId) : undefined;
+
+  const [source, setSource] = useState("");
+  // (legacy vestigial `const [target] = useState(...)` dropped — never read; the hook
+  //  exposes `currentTarget` instead. Removing it is a no-op under the host's noUnusedLocals.)
+  const [alias, setAlias] = useState("item");
+  const [hasFilter, setHasFilter] = useState(false);
+  const [filterField, setFilterField] = useState("");
+  const [filterOp, setFilterOp] = useState<FilterOperator>("!=");
+  const [filterValue, setFilterValue] = useState("");
+  const [pendingMappings, setPendingMappings] = useState<PendingMapping[]>([]);
+  const [openPanels, setOpenPanels] = useState<Record<string, "transform" | "lookup" | "fixed" | null>>({});
+
+  // ── Derived memos ──────────────────────────────────────────────────────────
+
+  const parentFullSource = React.useMemo(() => {
+    if (!parentAm) return "";
+    return getFullSourcePath(parentAm.id, arrayMappings);
+  }, [parentAm, arrayMappings]);
+
+  const sourceArrayPaths = React.useMemo(() => {
+    try {
+      const parsed = JSON.parse(inputJson);
+      if (Array.isArray(parsed)) {
+        if (!parentAm) return ["items"];
+        // Nested inside a root-array AM: find array-valued keys inside the first item
+        if (parsed.length > 0 && typeof parsed[0] === "object" && parsed[0] !== null) {
+          return Object.entries(parsed[0] as Record<string, unknown>)
+            .filter(([, v]) => Array.isArray(v))
+            .map(([k]) => k);
+        }
+        return [];
+      }
+      const obj = parsed as Record<string, unknown>;
+      return parentAm ? getItemArrayPaths(obj, parentFullSource) : collectArrayPaths(obj);
+    } catch { return []; }
+  }, [inputJson, parentAm, parentFullSource]);
+
+  const inputScalarProps = React.useMemo(() => {
+    try {
+      const parsed = JSON.parse(inputJson);
+      // Root array — expose scalar props from the first element, prefixed with 'item.'
+      const root: Record<string, unknown> = Array.isArray(parsed)
+        ? (parsed.length > 0 && typeof parsed[0] === "object" && parsed[0] !== null ? parsed[0] as Record<string, unknown> : {})
+        : parsed as Record<string, unknown>;
+      const collect = (obj: Record<string, unknown>, prefix: string): string[] => {
+        if (obj === null || typeof obj !== "object" || Array.isArray(obj)) return prefix ? [prefix] : [];
+        return Object.entries(obj).flatMap(([k, v]) => {
+          const path = prefix ? `${prefix}.${k}` : k;
+          if (Array.isArray(v)) return [];
+          if (v && typeof v === "object") return collect(v as Record<string, unknown>, path);
+          return [path];
+        });
+      };
+      return collect(root, "");
+    } catch { return []; }
+  }, [inputJson]);
+
+  const fullSourcePath = React.useMemo(() => {
+    if (!source) return "";
+    // 'items' is a virtual C# alias for root-array input — not a real JSON key.
+    // When nested inside a root-array AM, use source directly so path navigation works.
+    if (parentFullSource === "items") {
+      try { if (Array.isArray(JSON.parse(inputJson))) return source; } catch { /* ignore */ }
+    }
+    return parentFullSource ? `${parentFullSource}.${source}` : source;
+  }, [source, parentFullSource, inputJson]);
+
+  const sourceItemProps = React.useMemo(
+    () => getItemProperties(inputJson, fullSourcePath),
+    [inputJson, fullSourcePath],
+  );
+
+  const fullTargetBase = React.useMemo(() => {
+    const t = am?.target ?? newArrayPresetTarget ?? "";
+    // isRootOutput AMs have an empty target — keep as '' (sentinel for root array)
+    if (!t) return newArrayIsRootOutput || am?.isRootOutput ? "__root__" : "";
+    if (!newArrayParentId) return t;
+    const parentBase = getFullTargetBase(newArrayParentId, arrayMappings);
+    return parentBase ? `${parentBase}.${t}` : t;
+  }, [am, newArrayPresetTarget, newArrayParentId, newArrayIsRootOutput, arrayMappings]);
+
+  const targetItemProps = React.useMemo(() => {
+    if (!fullTargetBase) return [];
+    const results: string[] = [];
+    if (fullTargetBase === "__root__") {
+      // Root array output: get scalar/object item properties from the first element,
+      // excluding array-valued keys (those are handled as nested array mappings).
+      try {
+        const parsed = JSON.parse(outputJson);
+        if (Array.isArray(parsed) && parsed.length > 0 && typeof parsed[0] === "object" && parsed[0] !== null) {
+          const first = parsed[0] as Record<string, unknown>;
+          Object.entries(first)
+            .filter(([, v]) => !Array.isArray(v))
+            .forEach(([k]) => results.push(k));
+        }
+      } catch { /* ignore */ }
+    } else {
+      results.push(...getItemProperties(outputJson, fullTargetBase));
+    }
+    const arrayPrefix = fullTargetBase === "__root__" ? "[*]." : `${fullTargetBase}[*].`;
+    fieldMappings
+      .map((fm) => fm.target)
+      .filter((t) => t.startsWith(arrayPrefix))
+      .map((t) => t.slice(arrayPrefix.length))
+      .filter(Boolean)
+      .forEach((t) => results.push(t));
+    arrayMappings
+      .filter((a) => a.target.replace(/\[\*\]$/, "") === (am?.target ?? newArrayPresetTarget ?? "") && a.parentArrayId === (newArrayParentId ?? undefined))
+      .flatMap((a) => a.mappings.map((m) => m.target))
+      .filter(Boolean)
+      .forEach((t) => results.push(t));
+    return [...new Set(results)];
+  }, [outputJson, fullTargetBase, am, newArrayPresetTarget, newArrayParentId, fieldMappings, arrayMappings]);
+
+  const outputTypeMap = React.useMemo(() => {
+    try { return buildTypeMap(outputJson); } catch { return {}; }
+  }, [outputJson]);
+
+  const usedTargets = React.useMemo(
+    () => new Set(pendingMappings.map((m) => m.target).filter(Boolean)),
+    [pendingMappings],
+  );
+
+  const childArrayMappings = React.useMemo(
+    () => (am ? arrayMappings.filter((c) => c.parentArrayId === am.id) : []),
+    [am, arrayMappings],
+  );
+
+  // ── Sync effect ────────────────────────────────────────────────────────────
+
+  useEffect(() => {
+    if (am) {
+      setSource(am.source);
+      setAlias(am.alias);
+      setHasFilter(Boolean(am.filter));
+      setFilterField(am.filter?.field ?? "");
+      setFilterOp(am.filter?.operator ?? "!=");
+      setFilterValue(String(am.filter?.value ?? ""));
+      const scalarSet = new Set(inputScalarProps);
+      const fullSrcPath = parentFullSource ? `${parentFullSource}.${am.source}` : am.source;
+      const itemPropsSet = new Set(getItemProperties(inputJson, fullSrcPath));
+      setPendingMappings(am.mappings.map((m) => ({
+        ...m,
+        isRootSource: m.isRootSource ?? ((Boolean(m.source) && scalarSet.has(m.source) && !itemPropsSet.has(m.source)) || undefined),
+      })));
+    } else {
+      setSource("");
+      setAlias("item");
+      setHasFilter(false);
+      setFilterField("");
+      setFilterOp("!=");
+      setFilterValue("");
+      setPendingMappings([]);
+    }
+    setOpenPanels({});
+  }, [am, inputScalarProps, editingArrayId]);
+
+  // ── Actions ────────────────────────────────────────────────────────────────
+
+  const isCreating = !am || editingArrayId === "__new__";
+  const isNested = Boolean(newArrayParentId);
+  const currentTarget = am?.target ?? newArrayPresetTarget ?? "";
+
+  const getPanel = (m: PendingMapping): "transform" | "lookup" | "fixed" | null => {
+    if (m.id in openPanels) return openPanels[m.id];
+    if (m.fixedValue !== undefined) return "fixed";
+    if ((m.lookupDictionary?.entries?.length ?? 0) > 0) return "lookup";
+    if (m.transform) return "transform";
+    return null;
+  };
+
+  const patchFieldRow = (id: string, patch: Partial<PendingMapping>) => {
+    setPendingMappings((prev) => prev.map((p) => p.id === id ? { ...p, ...patch } : p));
+  };
+
+  const addFieldRow = () => {
+    setPendingMappings((prev) => [...prev, { id: `pending-${Date.now()}`, source: "", target: "" }]);
+  };
+
+  const removeFieldRow = (id: string) => {
+    setPendingMappings((prev) => prev.filter((p) => p.id !== id));
+    setOpenPanels((prev) => { const next = { ...prev }; delete next[id]; return next; });
+  };
+
+  const handleSave = () => {
+    const filter = hasFilter && filterField
+      ? { field: filterField, operator: filterOp, value: filterValue }
+      : undefined;
+    const cleanMappings = (maps: PendingMapping[]) => maps.map((m) => {
+      const hasValidEntries = (m.lookupDictionary?.entries ?? []).some((e) => e.from.trim() !== "" && e.to.trim() !== "");
+      return hasValidEntries ? { ...m } : { ...m, lookupDictionary: undefined };
+    });
+    if (isCreating) {
+      dispatch(addArrayMapping({
+        source,
+        target: currentTarget,
+        alias: alias || "item",
+        filter,
+        mappings: cleanMappings(pendingMappings),
+        parentArrayId: newArrayParentId ?? undefined,
+        isRootOutput: newArrayIsRootOutput || undefined,
+      }));
+    } else {
+      dispatch(updateArrayMapping({
+        id: am!.id,
+        source,
+        target: currentTarget,
+        alias: alias || "item",
+        filter,
+        mappings: cleanMappings(pendingMappings),
+        isRootOutput: am?.isRootOutput || newArrayIsRootOutput || undefined,
+      }));
+    }
+    dispatch(openArrayModal({ id: null }));
+  };
+
+  const handleClose = () => dispatch(openArrayModal({ id: null }));
+
+  const handleDelete = () => {
+    if (am) dispatch(removeArrayMapping(am.id));
+    handleClose();
+  };
+
+  return {
+    isCreating,
+    isNested,
+    isRootOutput: am?.isRootOutput ?? newArrayIsRootOutput,
+    parentAmTarget: parentAm?.target ?? "",
+    source,
+    target: currentTarget,
+    alias,
+    hasFilter,
+    filterField,
+    filterOp,
+    filterValue,
+    pendingMappings,
+    openPanels,
+    sourceArrayPaths,
+    sourceItemProps,
+    targetItemProps,
+    inputScalarProps,
+    outputTypeMap,
+    usedTargets,
+    childArrayMappings,
+    allGlobalSets,
+    partnerAdapterProperties,
+    setSource,
+    setAlias,
+    setHasFilter,
+    setFilterField,
+    setFilterOp,
+    setFilterValue,
+    setPendingMappings,
+    setOpenPanels,
+    handleSave,
+    handleClose,
+    handleDelete,
+    addFieldRow,
+    removeFieldRow,
+    patchFieldRow,
+    getPanel,
+  };
+}
diff --git a/SW.Bitween.Web/ClientApp/src/components/mapper/ConnectionCanvas.tsx b/SW.Bitween.Web/ClientApp/src/components/mapper/ConnectionCanvas.tsx
new file mode 100644
index 00000000..86336659
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/mapper/ConnectionCanvas.tsx
@@ -0,0 +1,247 @@
+import type React from "react";
+import { useEffect, useRef, useState, useCallback } from "react";
+import {
+  useMappingEditorDispatch,
+  useMappingEditorState,
+  removeFieldMapping,
+  selectMapping,
+} from "../../lib/mapping/MappingEditorContext";
+import type { ArrayMapping } from "../../lib/mapping/types";
+
+// ─── Path helpers (mirrors OutputTree / ArrayMappingModal) ────────────────────
+
+function getFullSourcePath(amId: string, allMappings: ArrayMapping[]): string {
+  const am = allMappings.find((m) => m.id === amId);
+  if (!am) return '';
+  if (!am.parentArrayId) return am.source;
+  return `${getFullSourcePath(am.parentArrayId, allMappings)}[*].${am.source}`;
+}
+
+function getFullTargetPrefix(amId: string, allMappings: ArrayMapping[]): string {
+  const am = allMappings.find((m) => m.id === amId);
+  if (!am) return '';
+  if (!am.parentArrayId) return am.target;
+  return `${getFullTargetPrefix(am.parentArrayId, allMappings)}[*].${am.target}`;
+}
+
+interface Props {
+  /** Map of path → DOM element for source leaves */
+  sourceRefs: Map<string, HTMLElement>;
+  /** Map of path → DOM element for target leaves */
+  targetRefs: Map<string, HTMLElement>;
+  /** The scrollable container for the source panel */
+  sourceScroll: HTMLElement | null;
+  /** The scrollable container for the target panel */
+  targetScroll: HTMLElement | null;
+  /** Width of the center canvas */
+  width: number;
+}
+
+interface ConnectionLine {
+  id: string;
+  x1: number;
+  y1: number;
+  x2: number;
+  y2: number;
+  isSelected: boolean;
+  isHovered: boolean;
+  isArrayConnection?: boolean;
+}
+
+const CONNECTION_COLORS = {
+  default: '#94a3b8',   // slate-400
+  selected: '#3b82f6',  // blue-500
+  hovered: '#10b981',   // emerald-500
+  array: '#8b5cf6',     // violet-500 — for array loop connections
+};
+
+const ConnectionCanvas: React.FC<Props> = ({
+  sourceRefs,
+  targetRefs,
+  sourceScroll,
+  targetScroll,
+}) => {
+  const dispatch = useMappingEditorDispatch();
+  const { fieldMappings, arrayMappings, selectedMappingId: selectedId, hoveredPath } = useMappingEditorState();
+  const [lines, setLines] = useState<ConnectionLine[]>([]);
+  const [hoveredLineId, setHoveredLineId] = useState<string | null>(null);
+  const svgRef = useRef<SVGSVGElement>(null);
+  const rafRef = useRef<number>(0);
+
+  const computeLines = useCallback(() => {
+    if (!svgRef.current) return;
+    const svgRect = svgRef.current.getBoundingClientRect();
+    const newLines: ConnectionLine[] = [];
+
+    const addLine = (
+      id: string,
+      srcEl: HTMLElement,
+      tgtEl: HTMLElement,
+      isSelected: boolean,
+      isHovered: boolean,
+      isArrayConnection = false
+    ) => {
+      const srcRect = srcEl.getBoundingClientRect();
+      const tgtRect = tgtEl.getBoundingClientRect();
+      if (
+        srcRect.bottom < svgRect.top - 20 ||
+        srcRect.top > svgRect.bottom + 20 ||
+        tgtRect.bottom < svgRect.top - 20 ||
+        tgtRect.top > svgRect.bottom + 20
+      ) return;
+      newLines.push({
+        id,
+        x1: srcRect.right - svgRect.left,
+        y1: srcRect.top + srcRect.height / 2 - svgRect.top,
+        x2: tgtRect.left - svgRect.left,
+        y2: tgtRect.top + tgtRect.height / 2 - svgRect.top,
+        isSelected,
+        isHovered,
+        isArrayConnection,
+      });
+    };
+
+    // ── Regular field mappings ──────────────────────────────────────────────────
+    for (const m of fieldMappings) {
+      if (!m.source || !m.target) continue;
+      const srcEl = sourceRefs.get(m.source);
+      const tgtEl = targetRefs.get(m.target);
+      if (!srcEl || !tgtEl) continue;
+      addLine(
+        m.id,
+        srcEl,
+        tgtEl,
+        selectedId === m.id,
+        hoveredPath === m.source || hoveredPath === m.target
+      );
+    }
+
+    // ── Array mapping inner-field connections (violet) ─────────────────────────
+    for (const am of arrayMappings) {
+      const fullSrc = getFullSourcePath(am.id, arrayMappings);
+      const fullTgt = getFullTargetPrefix(am.id, arrayMappings);
+      for (const m of am.mappings) {
+        if (!m.source || !m.target) continue;
+        const srcPath = `${fullSrc}[*].${m.source}`;
+        const tgtPath = `${fullTgt}[*].${m.target}`;
+        const srcEl = sourceRefs.get(srcPath);
+        const tgtEl = targetRefs.get(tgtPath);
+        if (!srcEl || !tgtEl) continue;
+        addLine(
+          `${am.id}-${m.id}`,
+          srcEl,
+          tgtEl,
+          false,
+          hoveredPath === srcPath || hoveredPath === tgtPath,
+          true
+        );
+      }
+    }
+
+    setLines(newLines);
+  }, [fieldMappings, arrayMappings, selectedId, hoveredPath, sourceRefs, targetRefs]);
+
+  // Recompute on scroll / resize
+  useEffect(() => {
+    const schedule = () => {
+      cancelAnimationFrame(rafRef.current);
+      rafRef.current = requestAnimationFrame(computeLines);
+    };
+
+    schedule();
+    sourceScroll?.addEventListener('scroll', schedule, { passive: true });
+    targetScroll?.addEventListener('scroll', schedule, { passive: true });
+    window.addEventListener('resize', schedule, { passive: true });
+
+    return () => {
+      cancelAnimationFrame(rafRef.current);
+      sourceScroll?.removeEventListener('scroll', schedule);
+      targetScroll?.removeEventListener('scroll', schedule);
+      window.removeEventListener('resize', schedule);
+    };
+  }, [computeLines, sourceScroll, targetScroll]);
+
+  const buildPath = (x1: number, y1: number, x2: number, y2: number): string => {
+    const cx = (x1 + x2) / 2;
+    return `M ${x1} ${y1} C ${cx} ${y1} ${cx} ${y2} ${x2} ${y2}`;
+  };
+
+  return (
+    <svg
+      ref={svgRef}
+      className="pointer-events-none absolute inset-0 w-full h-full overflow-visible z-10"
+      style={{ mixBlendMode: 'normal' }}
+    >
+      <defs>
+        <marker id="arrowhead" markerWidth="6" markerHeight="6" refX="6" refY="3" orient="auto">
+          <path d="M0,0 L0,6 L6,3 z" fill={CONNECTION_COLORS.default} />
+        </marker>
+        <marker id="arrowhead-selected" markerWidth="6" markerHeight="6" refX="6" refY="3" orient="auto">
+          <path d="M0,0 L0,6 L6,3 z" fill={CONNECTION_COLORS.selected} />
+        </marker>
+        <marker id="arrowhead-hovered" markerWidth="6" markerHeight="6" refX="6" refY="3" orient="auto">
+          <path d="M0,0 L0,6 L6,3 z" fill={CONNECTION_COLORS.hovered} />
+        </marker>
+        <marker id="arrowhead-array" markerWidth="6" markerHeight="6" refX="6" refY="3" orient="auto">
+          <path d="M0,0 L0,6 L6,3 z" fill={CONNECTION_COLORS.array} />
+        </marker>
+      </defs>
+      {lines.map((line) => {
+        const isHighlighted = line.isSelected || line.isHovered || hoveredLineId === line.id;
+        const color = line.isArrayConnection
+          ? CONNECTION_COLORS.array
+          : line.isSelected
+          ? CONNECTION_COLORS.selected
+          : line.isHovered || hoveredLineId === line.id
+          ? CONNECTION_COLORS.hovered
+          : CONNECTION_COLORS.default;
+        const markerId = line.isArrayConnection
+          ? 'arrowhead-array'
+          : line.isSelected
+          ? 'arrowhead-selected'
+          : line.isHovered || hoveredLineId === line.id
+          ? 'arrowhead-hovered'
+          : 'arrowhead';
+
+        return (
+          <g key={line.id}>
+            {/* Invisible wider hit area */}
+            <path
+              d={buildPath(line.x1, line.y1, line.x2, line.y2)}
+              fill="none"
+              stroke="transparent"
+              strokeWidth={12}
+              style={{ pointerEvents: 'stroke', cursor: 'pointer' }}
+              onMouseEnter={() => setHoveredLineId(line.id)}
+              onMouseLeave={() => setHoveredLineId(null)}
+              onClick={() => dispatch(selectMapping(line.id))}
+              onDoubleClick={() => dispatch(removeFieldMapping(line.id))}
+            />
+            {/* Visible path */}
+            <path
+              d={buildPath(line.x1, line.y1, line.x2, line.y2)}
+              fill="none"
+              stroke={color}
+              strokeWidth={isHighlighted ? 2 : 1.5}
+              strokeDasharray={line.isSelected ? undefined : undefined}
+              markerEnd={`url(#${markerId})`}
+              style={{ pointerEvents: 'none', transition: 'stroke 0.15s, stroke-width 0.15s' }}
+            />
+            {/* Dot at source end */}
+            <circle cx={line.x1} cy={line.y1} r={3} fill={color} style={{ pointerEvents: 'none' }} />
+            {/* Dot at target end */}
+            <circle cx={line.x2} cy={line.y2} r={3} fill={color} style={{ pointerEvents: 'none' }} />
+          </g>
+        );
+      })}
+      {/* Legend */}
+      {lines.length === 0 && (
+        <text x="50%" y="50%" textAnchor="middle" fill="#cbd5e1" fontSize="11" fontFamily="monospace">
+          Drag source fields onto target fields to create connections
+        </text>
+      )}
+    </svg>
+  );
+};
+
+export default ConnectionCanvas;
diff --git a/SW.Bitween.Web/ClientApp/src/components/mapper/FixedStringInput.tsx b/SW.Bitween.Web/ClientApp/src/components/mapper/FixedStringInput.tsx
new file mode 100644
index 00000000..bb9f9851
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/mapper/FixedStringInput.tsx
@@ -0,0 +1,119 @@
+import type React from "react";
+import { useEffect, useRef, useState } from "react";
+
+// ─── Types ────────────────────────────────────────────────────────────────────
+
+export interface FixedStringInputProps {
+  value: string;
+  /** Non-array source paths available for variable insertion. */
+  sourcePaths: string[];
+  onChange: (value: string) => void;
+}
+
+// ─── FixedStringInput ─────────────────────────────────────────────────────────
+// Fixed mode input for string targets. Lets the user type a literal string and
+// embed source field references via a { } picker button, e.g. "Hello {{ name }}".
+
+export const FixedStringInput: React.FC<FixedStringInputProps> = ({ value, sourcePaths, onChange }) => {
+  const [pickerRect, setPickerRect] = useState<DOMRect | null>(null);
+  const inputRef = useRef<HTMLInputElement>(null);
+  const buttonRef = useRef<HTMLButtonElement>(null);
+  const pickerRef = useRef<HTMLDivElement>(null);
+
+  const showPicker = pickerRect !== null;
+
+  const openPicker = () => {
+    if (pickerRect) {
+      setPickerRect(null);
+      return;
+    }
+    const rect = buttonRef.current?.getBoundingClientRect();
+    setPickerRect(rect ?? null);
+  };
+
+  const closePicker = () => setPickerRect(null);
+
+  const insertVar = (path: string) => {
+    const snippet = `{{ ${path} }}`;
+    const input = inputRef.current;
+    if (!input) {
+      onChange(value + snippet);
+      closePicker();
+      return;
+    }
+    const start = input.selectionStart ?? value.length;
+    const end = input.selectionEnd ?? value.length;
+    const newVal = value.slice(0, start) + snippet + value.slice(end);
+    onChange(newVal);
+    closePicker();
+    requestAnimationFrame(() => {
+      input.focus();
+      const pos = start + snippet.length;
+      input.setSelectionRange(pos, pos);
+    });
+  };
+
+  // Close picker on outside click
+  useEffect(() => {
+    if (!showPicker) return;
+    const handler = (e: MouseEvent) => {
+      if (
+        !pickerRef.current?.contains(e.target as Node) &&
+        !buttonRef.current?.contains(e.target as Node)
+      ) {
+        closePicker();
+      }
+    };
+    document.addEventListener('mousedown', handler);
+    return () => document.removeEventListener('mousedown', handler);
+  }, [showPicker]);
+
+  return (
+    <div
+      className="flex-1 relative flex items-center min-w-0"
+      onClick={(e) => e.stopPropagation()}
+    >
+      <input
+        ref={inputRef}
+        className="flex-1 border-0 bg-transparent font-mono text-xs focus:outline-none text-warn-700 min-w-0 placeholder-warn-100"
+        placeholder="fixed value… or {{ field }}"
+        value={value}
+        onChange={(e) => onChange(e.target.value)}
+      />
+      {sourcePaths.length > 0 && (
+        <button
+          ref={buttonRef}
+          type="button"
+          title="Insert source field variable"
+          className="flex-shrink-0 font-mono text-[10px] leading-none px-1 py-0.5 rounded text-warn-700 hover:text-warn-700 hover:bg-warn-100 transition-colors"
+          onClick={(e) => { e.stopPropagation(); openPicker(); }}
+        >
+          {'{ }'}
+        </button>
+      )}
+      {showPicker && pickerRect && (
+        <div
+          ref={pickerRef}
+          style={{
+            position: 'fixed',
+            top: pickerRect.bottom + 2,
+            right: window.innerWidth - pickerRect.right,
+          }}
+          className="z-[200] max-h-48 overflow-y-auto rounded border border-warn-100 bg-white shadow-lg min-w-[160px]"
+        >
+          {sourcePaths.map((p) => (
+            <button
+              key={p}
+              type="button"
+              className="block w-full text-left px-2 py-1 font-mono text-[10px] text-ink-700 hover:bg-warn-100 truncate"
+              onMouseDown={(e) => e.preventDefault()}
+              onClick={(e) => { e.stopPropagation(); insertVar(p); }}
+            >
+              {p}
+            </button>
+          ))}
+        </div>
+      )}
+    </div>
+  );
+};
diff --git a/SW.Bitween.Web/ClientApp/src/components/mapper/GlobalSetSelector.tsx b/SW.Bitween.Web/ClientApp/src/components/mapper/GlobalSetSelector.tsx
new file mode 100644
index 00000000..5df8bbed
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/mapper/GlobalSetSelector.tsx
@@ -0,0 +1,53 @@
+import type React from "react";
+import type { GlobalValuesSetRow } from "../../api";
+
+// ─── Types ────────────────────────────────────────────────────────────────────
+
+export interface GlobalSetSelectorProps {
+  setId: string;
+  keyValue: string;
+  allGlobalSets: GlobalValuesSetRow[];
+  onSetChange: (setId: string) => void;
+  onKeyChange: (key: string) => void;
+}
+
+// ─── GlobalSetSelector ────────────────────────────────────────────────────────
+
+export const GlobalSetSelector: React.FC<GlobalSetSelectorProps> = ({
+  setId,
+  keyValue,
+  allGlobalSets,
+  onSetChange,
+  onKeyChange,
+}) => {
+  const selectedSet = allGlobalSets.find((s) => s.id === setId);
+  const availableKeys = selectedSet ? Object.keys(selectedSet.values) : [];
+
+  return (
+    <div className="flex gap-1 flex-1 min-w-0" onClick={(e) => e.stopPropagation()}>
+      <select
+        className="border-0 bg-transparent font-mono text-xs focus:outline-none text-ok-600 flex-1 min-w-0"
+        value={setId}
+        onChange={(e) => onSetChange(e.target.value)}
+      >
+        <option value="">— pick set —</option>
+        {allGlobalSets.map((s) => (
+          <option key={s.id} value={s.id}>{s.name}</option>
+        ))}
+      </select>
+
+      {setId && (
+        <select
+          className="border-0 bg-transparent font-mono text-xs focus:outline-none text-ok-600 flex-1 min-w-0"
+          value={keyValue}
+          onChange={(e) => onKeyChange(e.target.value)}
+        >
+          <option value="">— pick key —</option>
+          {availableKeys.map((k) => (
+            <option key={k} value={k}>{k}</option>
+          ))}
+        </select>
+      )}
+    </div>
+  );
+};
diff --git a/SW.Bitween.Web/ClientApp/src/components/mapper/LeafValueInput.tsx b/SW.Bitween.Web/ClientApp/src/components/mapper/LeafValueInput.tsx
new file mode 100644
index 00000000..a2faf258
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/mapper/LeafValueInput.tsx
@@ -0,0 +1,147 @@
+import type React from "react";
+import type { GlobalValuesSetRow } from "../../api";
+import type { MappingMode } from "../../lib/mapping/types";
+import { GlobalSetSelector } from "./GlobalSetSelector";
+import { FixedStringInput } from "./FixedStringInput";
+
+// ─── Types ────────────────────────────────────────────────────────────────────
+
+export interface LeafValueInputProps {
+  mode: MappingMode;
+
+  // source mode
+  sourceValue: string;
+  sourcePaths: string[];
+  onSourceChange: (value: string) => void;
+
+  // fixed mode
+  fixedValue: string;
+  targetFieldType?: 'string' | 'number' | 'boolean';
+  onFixedChange: (value: string) => void;
+
+  // partner mode
+  partnerPropKey: string;
+  partnerAdapterProperties: Record<string, string>;
+  datalistId: string;
+  onPartnerChange: (value: string) => void;
+
+  // global mode
+  globalSetId: string;
+  globalKey: string;
+  allGlobalSets: GlobalValuesSetRow[];
+  onGlobalSetChange: (setId: string) => void;
+  onGlobalKeyChange: (key: string) => void;
+}
+
+// ─── LeafValueInput ───────────────────────────────────────────────────────────
+
+export const LeafValueInput: React.FC<LeafValueInputProps> = ({
+  mode,
+  sourceValue,
+  sourcePaths,
+  onSourceChange,
+  fixedValue,
+  targetFieldType,
+  onFixedChange,
+  partnerPropKey,
+  partnerAdapterProperties,
+  datalistId,
+  onPartnerChange,
+  globalSetId,
+  globalKey,
+  allGlobalSets,
+  onGlobalSetChange,
+  onGlobalKeyChange,
+}) => {
+  if (mode === 'fixed') {
+    if (targetFieldType === 'boolean') {
+      return (
+        <select
+          className="flex-1 border-0 bg-transparent font-mono text-xs focus:outline-none text-warn-700 min-w-0"
+          value={fixedValue}
+          onChange={(e) => onFixedChange(e.target.value)}
+          onClick={(e) => e.stopPropagation()}
+        >
+          <option value="">— pick —</option>
+          <option value="true">true</option>
+          <option value="false">false</option>
+        </select>
+      );
+    }
+
+    if (targetFieldType === 'number') {
+      return (
+        <input
+          className="flex-1 border-0 bg-transparent font-mono text-xs focus:outline-none text-warn-700 min-w-0 placeholder-warn-100"
+          placeholder="0"
+          type="number"
+          value={fixedValue}
+          onChange={(e) => onFixedChange(e.target.value)}
+          onClick={(e) => e.stopPropagation()}
+        />
+      );
+    }
+
+    // string (or unknown) target — allow embedding {{ field }} variables
+    return (
+      <FixedStringInput
+        value={fixedValue}
+        sourcePaths={sourcePaths.filter((p) => !p.includes('['))}
+        onChange={onFixedChange}
+      />
+    );
+  }
+
+  if (mode === 'partner') {
+    return (
+      <div className="flex-1 relative min-w-0" onClick={(e) => e.stopPropagation()}>
+        <input
+          list={datalistId}
+          className="w-full border-0 bg-transparent font-mono text-xs focus:outline-none text-ok-600 placeholder-ok-100"
+          placeholder="property key…"
+          value={partnerPropKey}
+          onChange={(e) => onPartnerChange(e.target.value)}
+        />
+        <datalist id={datalistId}>
+          {Object.keys(partnerAdapterProperties).map((k) => (
+            <option key={k} value={k} />
+          ))}
+        </datalist>
+      </div>
+    );
+  }
+
+  if (mode === 'global') {
+    return (
+      <GlobalSetSelector
+        setId={globalSetId}
+        keyValue={globalKey}
+        allGlobalSets={allGlobalSets}
+        onSetChange={onGlobalSetChange}
+        onKeyChange={onGlobalKeyChange}
+      />
+    );
+  }
+
+  // source mode
+  const isOrphanSource = sourceValue !== '' && !sourcePaths.includes(sourceValue);
+  return (
+    <select
+      className={[
+        'flex-1 border-0 bg-transparent font-mono text-xs focus:outline-none min-w-0',
+        isOrphanSource ? 'text-warn-700' : 'text-ink-500',
+      ].join(' ')}
+      value={sourceValue}
+      onChange={(e) => onSourceChange(e.target.value)}
+      onClick={(e) => e.stopPropagation()}
+    >
+      <option value="">— unassigned —</option>
+      {isOrphanSource && (
+        <option value={sourceValue}>⚠ {sourceValue} (not found in input)</option>
+      )}
+      {sourcePaths.map((p) => (
+        <option key={p} value={p}>{p}</option>
+      ))}
+    </select>
+  );
+};
diff --git a/SW.Bitween.Web/ClientApp/src/components/mapper/LivePreview.tsx b/SW.Bitween.Web/ClientApp/src/components/mapper/LivePreview.tsx
new file mode 100644
index 00000000..9a01cc97
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/mapper/LivePreview.tsx
@@ -0,0 +1,121 @@
+import type React from "react";
+import { useEffect, useRef, useState } from "react";
+import { useMutation } from "@tanstack/react-query";
+import { Copy } from "lucide-react";
+import { useMappingEditorState } from "../../lib/mapping/MappingEditorContext";
+import { generateScriban } from "../../lib/mapping/scribanGenerator";
+import { useValuesSetMap } from "./data";
+import { api } from "../../api";
+
+const DEBOUNCE_MS = 600;
+
+const LivePreview: React.FC = () => {
+  const { inputJson, outputJson: targetSchemaJson, fieldMappings, arrayMappings, manualTemplate, mode, validationErrors, partnerAdapterProperties, selectedPartnerId } = useMappingEditorState();
+
+  const valuesSetMap = useValuesSetMap();
+  const { mutateAsync: previewMapping, isPending: isPreviewing } = useMutation({ mutationFn: api.previewMapping });
+  const [outputJson, setOutputJson] = useState<string | null>(null);
+  const [previewError, setPreviewError] = useState<string | null>(null);
+
+  const debounceRef = useRef<ReturnType<typeof setTimeout> | null>(null);
+
+  useEffect(() => {
+    if (debounceRef.current) clearTimeout(debounceRef.current);
+
+    debounceRef.current = setTimeout(async () => {
+      const hasPartnerProps = Object.keys(partnerAdapterProperties).length > 0;
+      // If no source JSON but partner props exist, use {} as base so __partner__ can still be injected
+      const effectiveInputJson = !inputJson.trim() && hasPartnerProps ? '{}' : inputJson;
+
+      if (!effectiveInputJson.trim() && !selectedPartnerId) {
+        setOutputJson(null);
+        setPreviewError(null);
+        return;
+      }
+
+      // Use manual template if in manual mode, otherwise generate from state
+      const template =
+        mode === 'manual' && manualTemplate
+          ? manualTemplate
+          : generateScriban(fieldMappings, arrayMappings, valuesSetMap, targetSchemaJson || undefined, effectiveInputJson || undefined);
+
+      try {
+        const result = await previewMapping({
+          scribanTemplate: template,
+          inputJson: effectiveInputJson || '{}',
+          partnerId: selectedPartnerId,
+        });
+        setOutputJson(result.outputJson ?? null);
+        setPreviewError(result.error ?? null);
+      } catch {
+        setPreviewError('Failed to reach preview API');
+        setOutputJson(null);
+      }
+    }, DEBOUNCE_MS);
+
+    return () => {
+      if (debounceRef.current) clearTimeout(debounceRef.current);
+    };
+  }, [inputJson, fieldMappings, arrayMappings, manualTemplate, mode, valuesSetMap, partnerAdapterProperties, selectedPartnerId]);
+
+  const formatted = outputJson !== null ? outputJson : null;
+
+  return (
+    <div className="flex flex-col h-full bg-ink-50">
+      <div className="flex items-center gap-2 px-4 py-2 border-b border-ink-200 bg-white flex-shrink-0">
+        <span className="text-xs font-semibold text-ink-600 uppercase tracking-wide">
+          Live Preview
+        </span>
+        <span className="text-xs text-ink-400">— evaluated output based on current mappings</span>
+        {isPreviewing && (
+          <span className="text-[10px] text-ink-400 animate-pulse flex-shrink-0">Evaluating…</span>
+        )}
+        {formatted && (
+          <button
+            className="ml-auto flex items-center gap-1 text-xs text-ink-500 hover:text-ink-700 border border-ink-200 rounded px-2 py-0.5 transition"
+            onClick={() => navigator.clipboard.writeText(formatted)}
+            title="Copy to clipboard"
+          >
+            <Copy size={12} /> Copy
+          </button>
+        )}
+      </div>
+
+      {/* Preview error */}
+      {previewError && (
+        <div className="flex-shrink-0 px-4 py-2 bg-warn-100 border-b border-warn-100">
+          <p className="text-xs text-warn-700 font-mono">⚠ {previewError}</p>
+        </div>
+      )}
+
+      {/* Validation errors */}
+      {validationErrors.length > 0 && (
+        <div className="flex-shrink-0 px-4 py-2 bg-danger-50 border-b border-danger-100">
+          {validationErrors.map((e, i) => (
+            <p
+              key={i}
+              className={`text-xs font-mono ${e.type === 'error' ? 'text-danger-600' : 'text-warn-700'}`}
+            >
+              {e.type === 'error' ? '✗' : '⚠'} {e.message}
+            </p>
+          ))}
+        </div>
+      )}
+
+      {/* Output JSON */}
+      <div className="flex-1 overflow-auto">
+        {formatted === null ? (
+          <div className="flex items-center justify-center h-full text-center px-4">
+            <p className="text-xs text-ink-400">Provide source JSON and mappings to see the output</p>
+          </div>
+        ) : (
+          <pre className="px-4 py-3 text-xs font-mono text-ink-700 leading-5 whitespace-pre-wrap break-all">
+            {formatted}
+          </pre>
+        )}
+      </div>
+    </div>
+  );
+};
+
+export default LivePreview;
diff --git a/SW.Bitween.Web/ClientApp/src/components/mapper/LookupDictionaryPanel.tsx b/SW.Bitween.Web/ClientApp/src/components/mapper/LookupDictionaryPanel.tsx
new file mode 100644
index 00000000..e3225e54
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/mapper/LookupDictionaryPanel.tsx
@@ -0,0 +1,152 @@
+import type React from "react";
+import { PlusCircle, Trash2 } from "lucide-react";
+import type { LookupDictionary } from "../../lib/mapping/types";
+
+// ─── Types ────────────────────────────────────────────────────────────────────
+
+export interface LookupDictionaryPanelProps {
+  dictionary: LookupDictionary | undefined;
+  targetFieldType?: 'string' | 'number' | 'boolean';
+  onChange: (next: LookupDictionary | undefined) => void;
+  onClose: () => void;
+}
+
+// ─── LookupDictionaryPanel ────────────────────────────────────────────────────
+// Renders the crimson lookup panel: entry rows (from → to), fallback, remove.
+// Fully controlled — callers own the LookupDictionary value.
+
+export const LookupDictionaryPanel: React.FC<LookupDictionaryPanelProps> = ({
+  dictionary,
+  targetFieldType,
+  onChange,
+  onClose,
+}) => {
+  const entries = dictionary?.entries ?? [];
+
+  const patchEntry = (idx: number, patch: { from?: string; to?: string }) => {
+    const next = entries.map((e, i) => i === idx ? { ...e, ...patch } : e);
+    onChange({ fallback: 'null', ...dictionary, entries: next });
+  };
+
+  const removeEntry = (idx: number) => {
+    const next = entries.filter((_, i) => i !== idx);
+    onChange(next.length === 0 ? undefined : { fallback: 'null', ...dictionary, entries: next });
+  };
+
+  const addEntry = () => {
+    onChange({ fallback: 'null', ...dictionary, entries: [...entries, { from: '', to: '' }] });
+  };
+
+  const patchFallback = (fallback: LookupDictionary['fallback']) => {
+    onChange({ ...({ fallback: 'null', ...dictionary, entries } as LookupDictionary), fallback });
+  };
+
+  const patchFallbackValue = (fallbackValue: string) => {
+    onChange({ fallback: 'null', ...dictionary, entries, fallbackValue });
+  };
+
+  const removeLookup = () => {
+    onChange(undefined);
+    onClose();
+  };
+
+  return (
+    <div className="rounded-lg border border-crimson-200 bg-crimson-50 p-2 space-y-1.5">
+      {/* Entry rows */}
+      <div className="space-y-1 max-h-40 overflow-y-auto">
+        {entries.length === 0 && (
+          <p className="text-[10px] text-crimson-400 italic px-1">No entries yet.</p>
+        )}
+        {entries.map((entry, idx) => (
+          <div key={idx} className="flex items-center gap-1">
+            <input
+              autoFocus={idx === 0}
+              className="flex-1 min-w-0 border border-crimson-200 bg-white rounded px-2 py-0.5 text-xs font-mono focus:outline-none focus:border-crimson-400 placeholder-ink-300"
+              placeholder="source value"
+              value={entry.from}
+              onChange={(e) => patchEntry(idx, { from: e.target.value })}
+            />
+            <span className="text-ink-300 text-[10px] flex-shrink-0 select-none">→</span>
+            {targetFieldType === 'boolean' ? (
+              <select
+                className="flex-1 min-w-0 border border-crimson-200 bg-white rounded px-2 py-0.5 text-xs font-mono focus:outline-none focus:border-crimson-400 text-crimson-700"
+                value={entry.to}
+                onChange={(e) => patchEntry(idx, { to: e.target.value })}
+              >
+                <option value="">— pick —</option>
+                <option value="true">true</option>
+                <option value="false">false</option>
+              </select>
+            ) : (
+              <input
+                type={targetFieldType === 'number' ? 'number' : 'text'}
+                className="flex-1 min-w-0 border border-crimson-200 bg-white rounded px-2 py-0.5 text-xs font-mono focus:outline-none focus:border-crimson-400 placeholder-ink-300"
+                placeholder={targetFieldType === 'number' ? '0' : 'output value'}
+                value={entry.to}
+                onChange={(e) => patchEntry(idx, { to: e.target.value })}
+              />
+            )}
+            <button
+              className="flex-shrink-0 text-ink-300 hover:text-crimson-400 transition"
+              onClick={() => removeEntry(idx)}
+            >
+              <Trash2 size={11} />
+            </button>
+          </div>
+        ))}
+      </div>
+
+      {/* Add entry */}
+      <button
+        className="flex items-center gap-1 text-[10px] text-crimson-500 hover:text-crimson-700 transition font-medium"
+        onClick={addEntry}
+      >
+        <PlusCircle size={11} /> Add entry
+      </button>
+
+      {/* Fallback — only when at least one entry exists */}
+      {entries.length > 0 && (
+        <div className="flex items-center gap-2 pt-1 border-t border-crimson-200">
+          <span className="text-[10px] text-ink-500 flex-shrink-0 select-none">If not found:</span>
+          <select
+            className="text-xs border border-crimson-200 bg-white rounded px-1.5 py-0.5 font-mono focus:outline-none focus:border-crimson-400 text-crimson-700"
+            value={dictionary?.fallback ?? 'null'}
+            onChange={(e) => patchFallback(e.target.value as LookupDictionary['fallback'])}
+          >
+            <option value="null">output null</option>
+            <option value="custom">use custom fallback</option>
+          </select>
+          {dictionary?.fallback === 'custom' && (
+            targetFieldType === 'boolean' ? (
+              <select
+                className="flex-1 min-w-0 border border-crimson-200 bg-white rounded px-1.5 py-0.5 text-xs font-mono focus:outline-none focus:border-crimson-400 text-crimson-700"
+                value={dictionary.fallbackValue ?? ''}
+                onChange={(e) => patchFallbackValue(e.target.value)}
+              >
+                <option value="">— pick —</option>
+                <option value="true">true</option>
+                <option value="false">false</option>
+              </select>
+            ) : (
+              <input
+                type={targetFieldType === 'number' ? 'number' : 'text'}
+                className="flex-1 min-w-0 border border-crimson-200 bg-white rounded px-2 py-0.5 text-xs font-mono focus:outline-none focus:border-crimson-400 placeholder-ink-300 text-crimson-700"
+                placeholder={targetFieldType === 'number' ? '0' : 'fallback value'}
+                value={dictionary.fallbackValue ?? ''}
+                onChange={(e) => patchFallbackValue(e.target.value)}
+              />
+            )
+          )}
+        </div>
+      )}
+
+      {/* Remove lookup */}
+      <button
+        className="text-[10px] text-crimson-400 hover:text-crimson-600 transition"
+        onClick={removeLookup}
+      >
+        Remove lookup
+      </button>
+    </div>
+  );
+};
diff --git a/SW.Bitween.Web/ClientApp/src/components/mapper/ManualEditor.tsx b/SW.Bitween.Web/ClientApp/src/components/mapper/ManualEditor.tsx
new file mode 100644
index 00000000..c645818a
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/mapper/ManualEditor.tsx
@@ -0,0 +1,178 @@
+import React, { lazy, Suspense, useEffect, useRef } from "react";
+import {
+  useMappingEditorDispatch,
+  useMappingEditorState,
+  setArrayMappings,
+  setFieldMappings,
+  setManualTemplate,
+  syncManualTemplate,
+} from "../../lib/mapping/MappingEditorContext";
+import { generateScriban, parseScriban } from "../../lib/mapping/scribanGenerator";
+
+// Monaco is heavy — lazy-load it so it stays out of the main bundle.
+const MonacoEditor = lazy(() => import("@monaco-editor/react"));
+
+const SCRIBAN_HINT = `{{- # Scriban template — edit freely -}}
+{{- # Use {{ variable.path }} for values, for/end for loops, if/end for filters -}}
+`;
+
+const ManualEditor: React.FC = () => {
+  const dispatch = useMappingEditorDispatch();
+  const { fieldMappings, arrayMappings, manualTemplate, isManualDirty } = useMappingEditorState();
+  const editorRef = useRef<any>(null);
+  const [parseWarnings, setParseWarnings] = React.useState<string[]>([]);
+  const [parseSuccess, setParseSuccess] = React.useState(false);
+
+  // ManualEditor mounts each time the user switches to Manual mode.
+  // We rely on handleModeChange in index.tsx to call syncManualTemplate before
+  // changing the mode, so by the time this component mounts the template is
+  // already up-to-date. This effect is a safety fallback for initial page load
+  // where mode starts as 'visual' and has never been set via handleModeChange.
+  useEffect(() => {
+    if (!isManualDirty) {
+      dispatch(syncManualTemplate(generateScriban(fieldMappings, arrayMappings, undefined, undefined)));
+    }
+  }, []); // Only on mount — ongoing sync is handled by handleModeChange
+
+  const handleEditorChange = (value: string | undefined) => {
+    dispatch(setManualTemplate(value ?? ''));
+  };
+
+  const handleRegenerateFromVisual = () => {
+    const generated = generateScriban(fieldMappings, arrayMappings, undefined, undefined);
+    dispatch(syncManualTemplate(generated));
+    editorRef.current?.setValue(generated);
+    setParseWarnings([]);
+    setParseSuccess(false);
+  };
+
+  const handleParseBackToVisual = () => {
+    const result = parseScriban(manualTemplate);
+    setParseWarnings(result.warnings);
+
+    if (result.fieldMappings.length > 0 || result.arrayMappings.length > 0) {
+      // Replace both fieldMappings and arrayMappings entirely from the parsed template
+      dispatch(
+        setFieldMappings(
+          result.fieldMappings.map((m, i) => ({ id: `parsed-${i}-${Date.now()}`, ...m }))
+        )
+      );
+      dispatch(
+        setArrayMappings(
+          result.arrayMappings.map((am, i) => ({
+            id: `parsed-am-${i}-${Date.now()}`,
+            ...am,
+            mappings: am.mappings.map((m, j) => ({ id: `parsed-am-${i}-${j}-${Date.now()}`, ...m })),
+          }))
+        )
+      );
+      setParseSuccess(true);
+    } else {
+      setParseWarnings(['No parseable mappings found. Check your template syntax.']);
+    }
+  };
+
+  const templateToShow =
+    manualTemplate ||
+    (fieldMappings.length > 0 || arrayMappings.length > 0
+      ? generateScriban(fieldMappings, arrayMappings, undefined, undefined)
+      : SCRIBAN_HINT);
+
+  return (
+    <div className="flex flex-col h-full">
+      {/* Toolbar */}
+      <div className="flex items-center gap-2 px-4 py-2 border-b border-ink-200 bg-ink-50 flex-shrink-0">
+        <span className="text-xs font-semibold text-ink-600 uppercase tracking-wide">
+          Scriban Template
+        </span>
+        <span className="text-xs text-ink-400">— edit the template directly</span>
+        <div className="ml-auto flex items-center gap-2">
+          <button
+            onClick={handleRegenerateFromVisual}
+            className="text-xs border border-ink-300 rounded px-3 py-1 hover:bg-ink-100 transition"
+            title="Re-generate template from current visual mappings (will overwrite edits)"
+          >
+            ↺ Regenerate from Visual
+          </button>
+          <button
+            onClick={handleParseBackToVisual}
+            className="text-xs bg-crimson-600 text-white rounded px-3 py-1 hover:bg-crimson-700 transition"
+            title="Attempt to parse this template back into visual mappings"
+          >
+            → Apply to Visual Mode
+          </button>
+        </div>
+      </div>
+
+      {/* Validation messages */}
+      {parseWarnings.length > 0 && (
+        <div className="flex-shrink-0 px-4 py-2 bg-warn-100 border-b border-warn-100">
+          <p className="text-xs font-semibold text-warn-700 mb-1">Parse warnings:</p>
+          <ul className="space-y-0.5">
+            {parseWarnings.map((w, i) => (
+              <li key={i} className="text-xs text-warn-700 font-mono">
+                • {w}
+              </li>
+            ))}
+          </ul>
+        </div>
+      )}
+      {parseSuccess && (
+        <div className="flex-shrink-0 px-4 py-2 bg-ok-100 border-b border-ok-100">
+          <p className="text-xs text-ok-600">
+            ✓ Template parsed successfully — switched to Visual mode.
+          </p>
+        </div>
+      )}
+
+      {/* Monaco Editor */}
+      <div className="flex-1 min-h-0">
+        <Suspense fallback={<div className="flex h-full items-center justify-center text-sm text-ink-400">Loading editor…</div>}>
+          <MonacoEditor
+            language="handlebars"
+            theme="vs"
+            value={templateToShow}
+            onChange={handleEditorChange}
+            onMount={(ed) => {
+              editorRef.current = ed;
+            }}
+            options={{
+              minimap: { enabled: true },
+              fontSize: 13,
+              lineNumbers: 'on',
+              wordWrap: 'on',
+              scrollBeyondLastLine: false,
+              fontFamily: '"Fira Code", "JetBrains Mono", monospace',
+              automaticLayout: true,
+              formatOnPaste: true,
+              tabSize: 2,
+              suggest: { snippetsPreventQuickSuggestions: false },
+            }}
+          />
+        </Suspense>
+      </div>
+
+      {/* Scriban cheat sheet */}
+      <div className="flex-shrink-0 px-4 py-2 border-t border-ink-200 bg-ink-50">
+        <div className="flex items-start gap-4 text-xs text-ink-500 font-mono flex-wrap">
+          <span>
+            <span className="text-crimson-600">{'{{ var.path }}'}</span> value
+          </span>
+          <span>
+            <span className="text-crimson-600">{'{{- for item in arr -}}'}</span> …{' '}
+            <span className="text-crimson-600">{'{{- end -}}'}</span> loop
+          </span>
+          <span>
+            <span className="text-warn-700">{'{{- if expr -}}'}</span> …{' '}
+            <span className="text-warn-700">{'{{- end -}}'}</span> condition
+          </span>
+          <span>
+            <span className="text-ink-400">{'{{- # comment -}}'}</span>
+          </span>
+        </div>
+      </div>
+    </div>
+  );
+};
+
+export default ManualEditor;
diff --git a/SW.Bitween.Web/ClientApp/src/components/mapper/MappingEditor.tsx b/SW.Bitween.Web/ClientApp/src/components/mapper/MappingEditor.tsx
new file mode 100644
index 00000000..7acc381a
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/mapper/MappingEditor.tsx
@@ -0,0 +1,334 @@
+import type React from "react";
+import { useCallback, useMemo, useRef, useState } from "react";
+import { useParams } from "react-router";
+import { Search } from "lucide-react";
+import {
+  MappingEditorProvider,
+  useMappingEditorState,
+  useMappingEditorDispatch,
+  generateFromTargetJson,
+  setInputJson,
+  setOutputJson,
+  setSearchInput,
+  setSearchOutput,
+  togglePreview,
+} from "../../lib/mapping/MappingEditorContext";
+import {
+  buildTree,
+  flattenLeafPaths,
+  tryParseJson,
+} from "../../lib/mapping/mappingPreview";
+import type { TreeNode } from "../../lib/mapping/mappingPreview";
+import SourceTree from "./SourceTree";
+import OutputTree from "./OutputTree/OutputTree";
+import ConnectionCanvas from "./ConnectionCanvas";
+import ManualEditor from "./ManualEditor";
+import LivePreview from "./LivePreview";
+import ArrayMappingModal from "./ArrayMappingModal/ArrayMappingModal";
+import MappingEditorToolbar from "./MappingEditorToolbar";
+import { buildMappingTree, getFullTargetPrefix } from "../../lib/mapping/mappingTreeUtils";
+import { useMappingEditorLoader } from "./useMappingEditorLoader";
+import { useKeyboardShortcuts } from "./useKeyboardShortcuts";
+import { useSave } from "./useSave";
+
+// ─── MappingEditor (provider wrapper) ────────────────────────────────────────
+
+const MappingEditor: React.FC = () => (
+  <MappingEditorProvider>
+    <MappingEditorInner />
+  </MappingEditorProvider>
+);
+
+// ─── MappingEditorInner ───────────────────────────────────────────────────────
+
+const MappingEditorInner: React.FC = () => {
+  const dispatch = useMappingEditorDispatch();
+  const {
+    mode,
+    fieldMappings,
+    arrayMappings,
+    inputJson,
+    outputJson,
+    showPreview,
+    editingArrayId,
+    searchInput,
+    searchOutput,
+  } = useMappingEditorState();
+  const { id } = useParams<{ id: string }>();
+  const subscriptionId = Number(id);
+
+  // ── Hooks ───────────────────────────────────────────────────────────────────
+  useMappingEditorLoader(subscriptionId);
+  const { isSaving, saveSuccess, handleValidate, handleSave, handleModeChange } = useSave(subscriptionId);
+  useKeyboardShortcuts(() => void handleSave());
+
+  const [jsonAreaHeight, setJsonAreaHeight] = useState(96); // px — both panels share this
+  const srcTextareaRef = useRef<HTMLTextAreaElement>(null);
+  const tgtTextareaRef = useRef<HTMLTextAreaElement>(null);
+
+  const syncHeight = useCallback((from: 'src' | 'tgt') => {
+    const el = from === 'src' ? srcTextareaRef.current : tgtTextareaRef.current;
+    if (!el) return;
+    setJsonAreaHeight(el.offsetHeight);
+  }, []);
+
+  // ── Trees ───────────────────────────────────────────────────────────────────
+  const inputObj = useMemo(() => tryParseJson(inputJson), [inputJson]);
+  // outputObj is only used for "Generate from JSON" — the live tree is always driven by fieldMappings
+  const outputObj = useMemo(() => tryParseJson(outputJson), [outputJson]);
+  const sourceTree: TreeNode[] = useMemo(
+    () => (inputObj ? buildTree(inputObj) : []),
+    [inputObj]
+  );
+
+  const outputTree: TreeNode[] = useMemo(() => {
+    // Use target JSON as the base structure when available, then merge in any
+    // manually-added fields from fieldMappings that aren't already in the JSON.
+    const basePaths: string[] = outputObj
+      ? (Array.isArray(outputObj)
+          // Root-array output schema: always include the '[*]' container node.
+          // buildTree returns no children for primitive arrays (e.g. [1,2,3]),
+          // so the tree shows just `root []` with the + fixed button.
+          ? ['[*]', ...buildTree(outputObj).flatMap(flattenLeafPaths).map((p) => `[*].${p}`)]
+          : buildTree(outputObj).flatMap(flattenLeafPaths))
+      : fieldMappings.map((m) => m.target).filter(Boolean);
+
+    // Merge manually-added mapping targets that aren't already in the base set
+    if (outputObj) {
+      const pathSet = new Set(basePaths);
+      for (const m of fieldMappings) {
+        if (m.target && !pathSet.has(m.target)) {
+          basePaths.push(m.target);
+          pathSet.add(m.target);
+        }
+      }
+    }
+
+    const paths = basePaths;
+    for (const am of arrayMappings) {
+      if (am.isRootOutput) {
+        // Root-output AM has no named target — its container path is '[*]'
+        if (!paths.includes('[*]')) paths.push('[*]');
+        for (const m of am.mappings) {
+          if (m.target) paths.push(`[*].${m.target}`);
+        }
+        continue;
+      }
+      if (!am.target) continue;
+      const fullPrefix = getFullTargetPrefix(am.id, arrayMappings);
+      const containerPath = `${fullPrefix}[*]`;
+      if (!paths.includes(containerPath)) paths.push(containerPath);
+      for (const m of am.mappings) {
+        if (m.target) paths.push(`${fullPrefix}[*].${m.target}`);
+      }
+    }
+    return buildMappingTree(paths);
+  }, [outputObj, fieldMappings, arrayMappings]);
+
+  const sourcePaths = useMemo(
+    () => sourceTree.flatMap(flattenLeafPaths),
+    [sourceTree]
+  );
+
+  const assignedFieldCount = useMemo(
+    () =>
+      fieldMappings.filter(
+        (m) =>
+          m.target &&
+          (Boolean(m.source) ||
+            m.fixedValue !== undefined ||
+            Boolean(m.partnerPropKey) ||
+            Boolean(m.globalSetId && m.globalKey))
+      ).length,
+    [fieldMappings]
+  );
+
+  // ── Refs for connection canvas ──────────────────────────────────────────────
+  const sourceRefsMap = useRef<Map<string, HTMLElement>>(new Map());
+  const targetRefsMap = useRef<Map<string, HTMLElement>>(new Map());
+  const [, forceRedraw] = useState(0);
+  const sourcePanelRef = useRef<HTMLDivElement>(null);
+  const targetPanelRef = useRef<HTMLDivElement>(null);
+  const canvasContainerRef = useRef<HTMLDivElement>(null);
+
+  const handleSourceRef = useCallback((path: string, el: HTMLElement | null) => {
+    if (el) sourceRefsMap.current.set(path, el);
+    else sourceRefsMap.current.delete(path);
+    forceRedraw((n) => n + 1);
+  }, []);
+
+  const handleTargetRef = useCallback((path: string, el: HTMLElement | null) => {
+    if (el) targetRefsMap.current.set(path, el);
+    else targetRefsMap.current.delete(path);
+    forceRedraw((n) => n + 1);
+  }, []);
+
+  const isManualMode = mode === 'manual';
+
+  return (
+    <div className="fixed inset-0 z-[40] bg-white flex flex-col overflow-hidden">
+      <MappingEditorToolbar
+        subscriptionId={subscriptionId}
+        isSaving={isSaving}
+        saveSuccess={saveSuccess}
+        handleModeChange={handleModeChange}
+        handleValidate={handleValidate}
+        handleSave={() => void handleSave()}
+      />
+
+      {/* ── Main content ─────────────────────────────────────────────────────── */}
+      {isManualMode ? (
+        <div className="flex-1 overflow-hidden">
+          <ManualEditor />
+        </div>
+      ) : (
+        /* Visual mode: 3-panel layout */
+        <div className="flex flex-1 overflow-hidden">
+          {/* ── Left: Source JSON panel ─── */}
+          <div className="w-[30%] min-w-[240px] max-w-[380px] flex flex-col border-r border-ink-200 overflow-hidden">
+            <div className="px-3 py-2 border-b border-ink-100 bg-ink-50 flex-shrink-0">
+              <div className="flex items-center justify-between mb-1.5">
+                <span className="text-xs font-semibold text-ink-500 uppercase tracking-wide">
+                  Source JSON
+                </span>
+              </div>
+              <div className="relative">
+                <Search className="absolute left-2 top-1.5 text-ink-400" size={11} />
+                <input
+                  className="w-full border border-ink-200 rounded pl-6 pr-2 py-1 text-xs focus:outline-none focus:border-crimson-400 font-mono"
+                  placeholder="Search fields…"
+                  value={searchInput}
+                  onChange={(e) => dispatch(setSearchInput(e.target.value))}
+                />
+              </div>
+            </div>
+
+            {/* Source JSON input */}
+            <div className="px-3 py-2 border-b border-ink-100 flex-shrink-0">
+              <textarea
+                ref={srcTextareaRef}
+                className="w-full min-h-[60px] border border-ink-200 rounded px-2 py-1.5 text-[11px] font-mono resize-y focus:outline-none focus:border-crimson-400 bg-ink-50"
+                style={{ height: jsonAreaHeight }}
+                placeholder='{ "paste": "source JSON here" }'
+                value={inputJson}
+                onChange={(e) => dispatch(setInputJson(e.target.value))}
+                onMouseUp={() => syncHeight('src')}
+                onTouchEnd={() => syncHeight('src')}
+              />
+              {inputJson && !inputObj && (
+                <p className="text-[10px] text-danger-600 mt-0.5">Invalid JSON</p>
+              )}
+            </div>
+
+            {/* Source fields tree */}
+            <div ref={sourcePanelRef} className="flex-1 overflow-y-auto">
+              <SourceTree nodes={sourceTree} onLeafRef={handleSourceRef} />
+            </div>
+          </div>
+
+          {/* ── Center: Connection canvas ─── */}
+          <div
+            ref={canvasContainerRef}
+            className="w-[140px] flex-shrink-0 relative border-r border-ink-200 bg-ink-50 overflow-hidden"
+          >
+            <div className="absolute inset-0 flex items-center justify-center">
+              <span className="text-xs text-ink-300 rotate-90 select-none pointer-events-none whitespace-nowrap">
+                connections
+              </span>
+            </div>
+            <ConnectionCanvas
+              sourceRefs={sourceRefsMap.current}
+              targetRefs={targetRefsMap.current}
+              sourceScroll={sourcePanelRef.current}
+              targetScroll={targetPanelRef.current}
+              width={140}
+            />
+          </div>
+
+          {/* ── Right: Output tree ─── */}
+          <div className="flex-1 flex flex-col overflow-hidden">
+            {/* Header */}
+            <div className="px-3 py-2 border-b border-ink-100 bg-ink-50 flex-shrink-0">
+              <div className="flex items-center gap-2 mb-1.5">
+                <span className="text-xs font-semibold text-ink-500 uppercase tracking-wide">
+                  Output Structure
+                </span>
+                <span className="text-xs text-ink-400">
+                  {fieldMappings.filter((m) => m.target).length} fields ·{' '}
+                  {assignedFieldCount} assigned
+                </span>
+                <button
+                  onClick={() => dispatch(generateFromTargetJson())}
+                  disabled={!outputJson.trim()}
+                  className="ml-auto text-[10px] border border-ink-200 rounded px-2 py-0.5 hover:bg-ink-100 disabled:opacity-40 transition"
+                  title="Generate output structure from Target JSON"
+                >
+                  Generate from JSON
+                </button>
+              </div>
+              <div className="relative">
+                <Search className="absolute left-2 top-1.5 text-ink-400" size={11} />
+                <input
+                  className="w-full border border-ink-200 rounded pl-6 pr-2 py-1 text-xs focus:outline-none focus:border-crimson-400 font-mono"
+                  placeholder="Search fields…"
+                  value={searchOutput}
+                  onChange={(e) => dispatch(setSearchOutput(e.target.value))}
+                />
+              </div>
+            </div>
+
+            {/* Target JSON input (optional) */}
+            <div className="px-3 py-2 border-b border-ink-100 flex-shrink-0">
+              <textarea
+                ref={tgtTextareaRef}
+                className="w-full min-h-[40px] border border-ink-200 rounded px-2 py-1.5 text-[11px] font-mono resize-y focus:outline-none focus:border-crimson-400 bg-ink-50"
+                style={{ height: jsonAreaHeight }}
+                placeholder='{ "desired": "output shape" }  (optional — used to generate structure)'
+                value={outputJson}
+                onChange={(e) => dispatch(setOutputJson(e.target.value))}
+                onMouseUp={() => syncHeight('tgt')}
+                onTouchEnd={() => syncHeight('tgt')}
+              />
+            </div>
+
+            {/* Right panel split: output tree + optional preview */}
+            <div
+              className={`flex flex-1 overflow-hidden ${
+                showPreview ? 'flex-row divide-x divide-ink-200' : 'flex-col'
+              }`}
+            >
+              <div ref={targetPanelRef} className={`overflow-y-auto ${showPreview ? 'w-1/2' : 'flex-1'}`}>
+                <OutputTree nodes={outputTree} sourcePaths={sourcePaths} onLeafRef={handleTargetRef} />
+              </div>
+              {showPreview && (
+                <div className="w-1/2 overflow-hidden">
+                  <LivePreview />
+                </div>
+              )}
+            </div>
+
+            {/* Preview toggle */}
+            <div className="flex-shrink-0 border-t border-ink-200">
+              <button
+                onClick={() => dispatch(togglePreview())}
+                className="w-full flex items-center gap-2 px-4 py-2 text-xs font-medium text-ink-500 hover:bg-ink-50 transition"
+              >
+                {showPreview ? '▾ Hide Preview' : '▸ Show Live Preview'}
+                {!showPreview && fieldMappings.length > 0 && (
+                  <span className="ml-auto text-ink-400">
+                    {assignedFieldCount} mapped
+                  </span>
+                )}
+              </button>
+            </div>
+          </div>
+        </div>
+      )}
+
+      {/* Array mapping modal */}
+      {editingArrayId !== undefined && <ArrayMappingModal />}
+    </div>
+  );
+};
+
+export default MappingEditor;
diff --git a/SW.Bitween.Web/ClientApp/src/components/mapper/MappingEditorToolbar.tsx b/SW.Bitween.Web/ClientApp/src/components/mapper/MappingEditorToolbar.tsx
new file mode 100644
index 00000000..983d4d43
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/mapper/MappingEditorToolbar.tsx
@@ -0,0 +1,225 @@
+import React, { useMemo } from "react";
+import { useNavigate } from "react-router";
+import { useQuery } from "@tanstack/react-query";
+import { ArrowLeft, RefreshCw, Trash2, Undo2, Redo2 } from "lucide-react";
+import {
+  useMappingEditorState,
+  useMappingEditorDispatch,
+  autoMatch,
+  clearAll,
+  redo,
+  undo,
+  setSelectedPartner,
+} from "../../lib/mapping/MappingEditorContext";
+import { api } from "../../api";
+
+// ─── Mode toggle button ───────────────────────────────────────────────────────
+
+const ModeTab: React.FC<{
+  active: boolean;
+  onClick: () => void;
+  label: string;
+  icon?: React.ReactNode;
+}> = ({ active, onClick, label, icon }) => (
+  <button
+    onClick={onClick}
+    className={[
+      'flex items-center gap-1.5 px-3 py-1 rounded text-xs font-medium transition border',
+      active
+        ? 'bg-crimson-600 text-white border-crimson-600 shadow-sm'
+        : 'bg-white text-ink-600 border-ink-300 hover:border-crimson-400 hover:text-crimson-600',
+    ].join(' ')}
+  >
+    {icon}
+    {label}
+  </button>
+);
+
+// ─── MappingEditorToolbar ─────────────────────────────────────────────────────
+
+export interface MappingEditorToolbarProps {
+  subscriptionId: number;
+  isSaving: boolean;
+  saveSuccess: boolean;
+  handleModeChange: (mode: 'visual' | 'manual') => void;
+  handleValidate: () => void;
+  handleSave: () => void | Promise<void>;
+}
+
+const MappingEditorToolbar: React.FC<MappingEditorToolbarProps> = ({
+  subscriptionId,
+  isSaving,
+  saveSuccess,
+  handleModeChange,
+  handleValidate,
+  handleSave,
+}) => {
+  const navigate = useNavigate();
+  const dispatch = useMappingEditorDispatch();
+  const { mode, fieldMappings, arrayMappings, past, future, selectedPartnerId } = useMappingEditorState();
+
+  // Sync local dropdown state when selectedPartnerId changes (including reset to null)
+  const { data: partners } = useQuery({ queryKey: ["partners"], queryFn: () => api.listPartners() });
+  // listPartners() is a light row (no adapterProperties) — fetch the selected partner's
+  // properties separately so the "Partner" mode datalist actually has options to suggest.
+  const { data: adapterProperties, isFetching: isPartnerFetching } = useQuery({
+    queryKey: ["partner-adapter-properties", selectedPartnerId],
+    queryFn: () => api.getPartnerAdapterProperties(selectedPartnerId!),
+    enabled: selectedPartnerId != null,
+  });
+
+  const handlePartnerChange = (idStr: string) => {
+    const pid = idStr ? Number(idStr) : null;
+    if (pid == null) {
+      dispatch(setSelectedPartner(null, {}));
+    } else {
+      dispatch(setSelectedPartner(pid, {}));
+    }
+    // adapterProperties effect below handles dispatch when the fetch resolves
+  };
+
+  React.useEffect(() => {
+    if (selectedPartnerId == null) return;
+    if (isPartnerFetching) return;
+    dispatch(setSelectedPartner(selectedPartnerId, adapterProperties ?? {}));
+  }, [adapterProperties, selectedPartnerId, isPartnerFetching]);
+
+  const assignedFieldCount = useMemo(
+    () => fieldMappings.filter((m) => m.target && (Boolean(m.source) || m.fixedValue !== undefined)).length,
+    [fieldMappings]
+  );
+
+  const isVisualMode = mode === 'visual';
+  const isManualMode = mode === 'manual';
+
+  return (
+    <div className="flex items-center gap-3 px-4 py-2.5 border-b border-ink-200 bg-white flex-shrink-0 shadow-sm">
+      {/* Back */}
+      <button
+        onClick={() => navigate(`/subscriptions/${subscriptionId}`)}
+        className="flex items-center gap-1.5 text-xs text-ink-500 hover:text-ink-800 border border-ink-200 rounded px-2 py-1 transition mr-1"
+      >
+        <ArrowLeft size={13} /> Back
+      </button>
+
+      <div className="h-5 w-px bg-ink-200" />
+
+      {/* Title */}
+      <span className="font-bold text-ink-800 text-sm tracking-tight">
+        Mapping Editor
+      </span>
+      <span className="text-xs text-ink-400">
+        {assignedFieldCount} mappings ·{' '}
+        {arrayMappings.length} array loops
+      </span>
+
+      <div className="h-5 w-px bg-ink-200" />
+
+      {/* Mode toggle */}
+      <div className="flex items-center gap-1">
+        <ModeTab
+          active={isVisualMode}
+          onClick={() => handleModeChange('visual')}
+          label="Visual"
+          icon={<span className="text-[10px]">⛶</span>}
+        />
+        <ModeTab
+          active={isManualMode}
+          onClick={() => handleModeChange('manual')}
+          label="Manual"
+          icon={<span className="text-[10px]">{'{}'}</span>}
+        />
+      </div>
+
+      <div className="h-5 w-px bg-ink-200" />
+
+      {/* Undo / redo */}
+      <button
+        onClick={() => dispatch(undo())}
+        disabled={past.length === 0}
+        className="p-1.5 rounded hover:bg-ink-100 disabled:opacity-30 transition text-ink-600"
+        title="Undo (Ctrl+Z)"
+      >
+        <Undo2 size={16} />
+      </button>
+      <button
+        onClick={() => dispatch(redo())}
+        disabled={future.length === 0}
+        className="p-1.5 rounded hover:bg-ink-100 disabled:opacity-30 transition text-ink-600"
+        title="Redo (Ctrl+Y)"
+      >
+        <Redo2 size={16} />
+      </button>
+
+      <div className="h-5 w-px bg-ink-200" />
+
+      {/* Actions */}
+      {isVisualMode && (
+        <>
+          <button
+            onClick={() => dispatch(autoMatch())}
+            className="text-xs border border-ink-300 rounded px-2.5 py-1 hover:bg-ink-50 transition"
+            title="Auto-match fields by name similarity"
+          >
+            <RefreshCw className="inline mr-1" size={11} />
+            Auto-match
+          </button>
+          <button
+            onClick={() => dispatch(clearAll())}
+            className="text-xs border border-crimson-200 text-crimson-500 rounded px-2.5 py-1 hover:bg-crimson-50 transition"
+            title="Clear all mappings"
+          >
+            <Trash2 className="inline mr-1" size={11} />
+            Clear
+          </button>
+        </>
+      )}
+
+      <button
+        onClick={handleValidate}
+        className="text-xs border border-warn-100 text-warn-700 rounded px-2.5 py-1 hover:bg-warn-100 transition"
+      >
+        Validate
+      </button>
+
+      {/* Partner selector — visual mode only — for testing partner-scoped mappings */}
+      {isVisualMode && (
+        <div className="flex items-center gap-1.5">
+          <span className="text-[10px] text-ink-400 font-medium uppercase tracking-wide flex-shrink-0">Test partner</span>
+          <select
+            className="text-xs border border-ink-200 rounded px-2 py-1 focus:outline-none focus:border-crimson-400 bg-white text-ink-700 max-w-[160px]"
+            value={selectedPartnerId ?? ''}
+            onChange={(e) => handlePartnerChange(e.target.value)}
+          >
+            <option value="">— none —</option>
+            {(partners ?? []).map((p) => (
+              <option key={p.id} value={p.id}>{p.name}</option>
+            ))}
+          </select>
+          {selectedPartnerId && (
+            <span className="text-[10px] text-ok-600 font-medium flex-shrink-0">
+              {Object.keys(adapterProperties ?? {}).length} props
+            </span>
+          )}
+        </div>
+      )}
+
+      <div className="ml-auto flex items-center gap-2">
+        {saveSuccess && (
+          <span className="text-xs text-ok-600 font-medium animate-pulse">
+            ✓ Saved
+          </span>
+        )}
+        <button
+          onClick={() => void handleSave()}
+          disabled={isSaving}
+          className="text-xs bg-crimson-600 text-white rounded px-4 py-1.5 hover:bg-crimson-700 transition font-medium disabled:opacity-50"
+        >
+          {isSaving ? 'Saving…' : 'Save'}
+        </button>
+      </div>
+    </div>
+  );
+};
+
+export default MappingEditorToolbar;
diff --git a/SW.Bitween.Web/ClientApp/src/components/mapper/ModeToggleButtons.tsx b/SW.Bitween.Web/ClientApp/src/components/mapper/ModeToggleButtons.tsx
new file mode 100644
index 00000000..8fb8f41f
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/mapper/ModeToggleButtons.tsx
@@ -0,0 +1,57 @@
+import type React from "react";
+import type { MappingMode } from "../../lib/mapping/types";
+
+// ─── Types ────────────────────────────────────────────────────────────────────
+
+export interface ModeToggleButtonsProps {
+  current: MappingMode;
+  onChange: (mode: MappingMode) => void;
+}
+
+// ─── Config ───────────────────────────────────────────────────────────────────
+
+const MODE_CONFIG: { mode: MappingMode; label: string; activeCls: string; inactiveCls: string }[] = [
+  {
+    mode: 'source',
+    label: 'Source',
+    activeCls: 'bg-crimson-500 text-white',
+    inactiveCls: 'text-ink-400 hover:bg-ink-50',
+  },
+  {
+    mode: 'fixed',
+    label: 'Fixed',
+    activeCls: 'bg-warn-700 text-white border-l border-warn-100',
+    inactiveCls: 'text-ink-400 border-l border-ink-200 hover:bg-ink-50',
+  },
+  {
+    mode: 'partner',
+    label: 'Partner',
+    activeCls: 'bg-ok-600 text-white border-l border-ok-100',
+    inactiveCls: 'text-ink-400 border-l border-ink-200 hover:bg-ink-50',
+  },
+  {
+    mode: 'global',
+    label: 'Global',
+    activeCls: 'bg-ok-600 text-white border-l border-ok-100',
+    inactiveCls: 'text-ink-400 border-l border-ink-200 hover:bg-ink-50',
+  },
+];
+
+// ─── ModeToggleButtons ────────────────────────────────────────────────────────
+
+export const ModeToggleButtons: React.FC<ModeToggleButtonsProps> = ({ current, onChange }) => (
+  <div className="flex flex-shrink-0 rounded overflow-hidden border border-ink-200 text-[10px] font-medium">
+    {MODE_CONFIG.map(({ mode, label, activeCls, inactiveCls }) => (
+      <button
+        key={mode}
+        onClick={(e) => {
+          e.stopPropagation();
+          onChange(mode);
+        }}
+        className={`px-1.5 py-0.5 ${current === mode ? activeCls : inactiveCls}`}
+      >
+        {label}
+      </button>
+    ))}
+  </div>
+);
diff --git a/SW.Bitween.Web/ClientApp/src/components/mapper/OutputTree/ArrayInnerField.tsx b/SW.Bitween.Web/ClientApp/src/components/mapper/OutputTree/ArrayInnerField.tsx
new file mode 100644
index 00000000..2b45e791
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/mapper/OutputTree/ArrayInnerField.tsx
@@ -0,0 +1,68 @@
+import type React from "react";
+import { useCallback } from "react";
+import type { TreeNode } from "../../../lib/mapping/mappingPreview";
+import type { FieldMapping } from "../../../lib/mapping/types";
+
+// ─── Types ────────────────────────────────────────────────────────────────────
+
+export interface ArrayInnerFieldProps {
+  node: TreeNode;
+  innerMapping: FieldMapping | undefined;
+  isMapped: boolean;
+  onLeafRef?: (path: string, el: HTMLElement | null) => void;
+  isSearchMatch?: boolean;
+  onOpenArrayModal: () => void;
+}
+
+// ─── Helpers ──────────────────────────────────────────────────────────────────
+
+function resolveDisplaySource(m: FieldMapping | undefined): string | null {
+  if (!m) return null;
+  if (m.source) return m.source;
+  if (m.fixedValue !== undefined) return `"${m.fixedValue}"`;
+  if (m.partnerPropKey) return `__partner__.${m.partnerPropKey}`;
+  if (m.globalSetId && m.globalKey) return `__globals__.${m.globalSetId}["${m.globalKey}"]`;
+  return null;
+}
+
+// ─── ArrayInnerField ──────────────────────────────────────────────────────────
+// Read-only row for a field that lives inside an array loop.
+// All editing is done via the array loop modal — clicking opens it.
+
+export const ArrayInnerField: React.FC<ArrayInnerFieldProps> = ({
+  node,
+  innerMapping,
+  isMapped,
+  onLeafRef,
+  isSearchMatch,
+  onOpenArrayModal,
+}) => {
+  const ref = useCallback(
+    (el: HTMLElement | null) => onLeafRef?.(node.path, el),
+    [node.path, onLeafRef]
+  );
+
+  const displaySource = resolveDisplaySource(innerMapping);
+
+  return (
+    <div
+      ref={ref}
+      onClick={onOpenArrayModal}
+      title="Managed by array mapping — click to open loop editor"
+      className={[
+        'flex items-center gap-1.5 px-2 py-[3px] rounded border border-transparent text-xs cursor-pointer transition-all select-none hover:border-crimson-200 hover:bg-crimson-50',
+        isSearchMatch ? 'bg-warn-100 ring-1 ring-warn-100' : '',
+      ].filter(Boolean).join(' ')}
+    >
+      <span className={['w-2 h-2 rounded-full flex-shrink-0', isMapped ? 'bg-ok-100' : 'bg-danger-300'].join(' ')} />
+      <span className="font-mono text-ink-700 truncate">{node.key}</span>
+      <span className="text-ink-300 mx-0.5 flex-shrink-0">←</span>
+      <span className={['font-mono text-xs truncate flex-1', displaySource ? 'text-crimson-600' : 'text-ink-400'].join(' ')}>
+        {displaySource ?? '— unassigned —'}
+      </span>
+      <span className="text-[10px] text-crimson-400 border border-crimson-200 rounded px-1 flex-shrink-0 bg-crimson-50">
+        loop
+      </span>
+    </div>
+  );
+};
diff --git a/SW.Bitween.Web/ClientApp/src/components/mapper/OutputTree/FixedItemPanel.tsx b/SW.Bitween.Web/ClientApp/src/components/mapper/OutputTree/FixedItemPanel.tsx
new file mode 100644
index 00000000..a3e15866
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/mapper/OutputTree/FixedItemPanel.tsx
@@ -0,0 +1,273 @@
+import type React from "react";
+import { useState } from "react";
+import { SquarePen, Trash2 } from "lucide-react";
+import type { TreeNode } from "../../../lib/mapping/mappingPreview";
+import { useMappingEditorState } from "../../../lib/mapping/MappingEditorContext";
+import {
+  FIXED_ITEM_MAX_DEPTH,
+  initDraftFieldsFromNode,
+  draftFieldsToRecord,
+} from "../../../lib/mapping/fixedItemHelpers";
+import type { DraftField, DraftFieldMode } from "../../../lib/mapping/fixedItemHelpers";
+import { ModeToggleButtons } from "../ModeToggleButtons";
+import { LeafValueInput } from "../LeafValueInput";
+import { LookupDictionaryPanel } from "../LookupDictionaryPanel";
+import { useGlobalSets } from "../data";
+
+// ─── FixedItemFieldRows — recursive form for one fixed item's fields ──────────
+
+export interface FixedItemFieldRowsProps {
+  fields: DraftField[];
+  onFieldsChange: (fields: DraftField[]) => void;
+  parentNode: TreeNode;
+  depth: number;
+  inputScalarProps: string[];
+  idPrefix: string;
+  typeMap?: Record<string, 'string' | 'number' | 'boolean'>;
+}
+
+export const FixedItemFieldRows: React.FC<FixedItemFieldRowsProps> = ({
+  fields, onFieldsChange, parentNode, depth, inputScalarProps, idPrefix, typeMap,
+}) => {
+  const { partnerAdapterProperties } = useMappingEditorState();
+  const allGlobalSets = useGlobalSets();
+  const [lookupOpenIdx, setLookupOpenIdx] = useState<number | null>(null);
+
+  const hasFreeKey = parentNode.children.filter((c) => c.type === 'leaf').length === 0;
+  const childArrayNodes = parentNode.children.filter((c) => c.type === 'array');
+  const usedArrayKeys = new Set(fields.filter((f) => f.mode === 'array').map((f) => f.key));
+  const availableArrayNodes = depth < FIXED_ITEM_MAX_DEPTH
+    ? childArrayNodes.filter((c) => !usedArrayKeys.has(c.key))
+    : [];
+  const updateField = (i: number, patch: Partial<DraftField>) =>
+    onFieldsChange(fields.map((f, j) => (j === i ? { ...f, ...patch } : f)));
+
+  return (
+    <div className="space-y-1">
+      {fields.map((df, i) => {
+        if (df.mode === 'array') {
+          return (
+            <div key={`${df.key}-arr-${i}`} className="rounded border border-crimson-200 bg-crimson-50/40 p-1.5 space-y-1">
+              <div className="flex items-center justify-between">
+                <span className="text-[10px] font-semibold text-crimson-700 font-mono">{df.key}[]</span>
+                <button className="text-ink-300 hover:text-crimson-500 transition"
+                  onClick={() => onFieldsChange(fields.filter((_, j) => j !== i))}>
+                  <Trash2 size={11} />
+                </button>
+              </div>
+              {/* committed sub-items */}
+              {(df.nestedItems ?? []).map((itemFields, itemIdx) => (
+                <div key={itemIdx} className="rounded border border-crimson-200 bg-white">
+                  {df.editingSubIdx === itemIdx ? (
+                    /* ─ edit form for this sub-item ─ */
+                    <div className="px-2 py-1.5 space-y-1.5">
+                      <FixedItemFieldRows
+                        fields={df.nestedItems![itemIdx]}
+                        onFieldsChange={(updated) => {
+                          const items = [...df.nestedItems!];
+                          items[itemIdx] = updated;
+                          updateField(i, { nestedItems: items });
+                        }}
+                        parentNode={df.nestedChildNode!}
+                        depth={depth + 1}
+                        inputScalarProps={inputScalarProps}
+                        idPrefix={`${idPrefix}-${df.key}-edit-${itemIdx}`}
+                        typeMap={typeMap}
+                      />
+                      <div className="flex gap-1 pt-0.5">
+                        <button className="flex-1 text-[10px] bg-crimson-500 hover:bg-crimson-600 text-white rounded py-0.5 transition"
+                          onClick={() => updateField(i, { editingSubIdx: null })}>Done</button>
+                        <button className="flex-1 text-[10px] border border-ink-200 hover:bg-ink-50 text-ink-500 rounded py-0.5 transition"
+                          onClick={() => updateField(i, { editingSubIdx: null })}>Cancel</button>
+                      </div>
+                    </div>
+                  ) : (
+                    /* ─ compact summary card ─ */
+                    <div className="rounded border border-crimson-100 overflow-hidden">
+                      {/* header row: #N, ✏, 🗑 */}
+                      <div className="flex items-center justify-between px-1.5 py-0.5 bg-crimson-50">
+                        <span className="text-[9px] font-semibold text-crimson-600">item #{itemIdx + 1}</span>
+                        <div className="flex items-center gap-1">
+                          <button className="text-ink-300 hover:text-crimson-500 transition"
+                            onClick={() => updateField(i, { editingSubIdx: itemIdx })}>
+                            <SquarePen size={11} />
+                          </button>
+                          <button className="text-ink-300 hover:text-crimson-500 transition"
+                            onClick={() => updateField(i, { nestedItems: (df.nestedItems ?? []).filter((_, ii) => ii !== itemIdx) })}>
+                            <Trash2 size={11} />
+                          </button>
+                        </div>
+                      </div>
+                      {/* field-by-field content */}
+                      <div className="px-2 py-1 space-y-0.5">
+                        {itemFields.map((f, fi) => f.mode !== 'array' ? (
+                          <div key={fi} className="flex items-center gap-1 text-[9px] font-mono">
+                            <span className="text-crimson-700 flex-shrink-0">{f.key}:</span>
+                            <span className="text-ink-500 truncate">
+                              {f.mode === 'source' ? (f.transform ? `fx(${f.value})` : f.value)
+                                : f.mode === 'partner' ? `__partner__.${f.partnerPropKey ?? ''}`
+                                : f.mode === 'global' ? `__globals__.${f.globalSetId ?? ''}["${f.globalKey ?? ''}"]`
+                                : (f.value || '—')}
+                            </span>
+                          </div>
+                        ) : (
+                          <div key={fi} className="text-[9px] font-mono text-crimson-500">
+                            {f.key}[]: {(f.nestedItems ?? []).length} item{(f.nestedItems ?? []).length !== 1 ? 's' : ''}
+                          </div>
+                        ))}
+                      </div>
+                    </div>
+                  )}
+                </div>
+              ))}
+              {/* add sub-item */}
+              {df.addingItem != null ? (
+                <div className="bg-white rounded border border-crimson-100 p-1.5 space-y-1">
+                  <FixedItemFieldRows
+                    fields={df.addingItem!}
+                    onFieldsChange={(updated) => updateField(i, { addingItem: updated })}
+                    parentNode={df.nestedChildNode!}
+                    depth={depth + 1}
+                    inputScalarProps={inputScalarProps}
+                    idPrefix={`${idPrefix}-${df.key}`}
+                    typeMap={typeMap}
+                  />
+                  <div className="flex gap-1 pt-0.5">
+                    <button className="flex-1 text-[10px] bg-crimson-500 hover:bg-crimson-600 text-white rounded py-0.5 transition"
+                      onClick={() => {
+                        const rec = draftFieldsToRecord(df.addingItem!);
+                        if (Object.keys(rec).length > 0) {
+                          updateField(i, { nestedItems: [...(df.nestedItems ?? []), df.addingItem!], addingItem: null });
+                        }
+                      }}>Add</button>
+                    <button className="flex-1 text-[10px] border border-ink-200 hover:bg-ink-50 text-ink-500 rounded py-0.5 transition"
+                      onClick={() => updateField(i, { addingItem: null })}>Cancel</button>
+                  </div>
+                </div>
+              ) : (
+                <button className="text-[10px] text-crimson-600 hover:text-crimson-800 transition"
+                  onClick={() => updateField(i, { addingItem: initDraftFieldsFromNode(df.nestedChildNode!) })}>
+                  + item
+                </button>
+              )}
+            </div>
+          );
+        }
+        // leaf field (fixed / source / partner / global)
+        const hasLookup = (df.lookupDictionary?.entries?.length ?? 0) > 0;
+        const isLookupOpen = lookupOpenIdx === i;
+        const fieldTargetType = typeMap?.[`${parentNode.path}.${df.key}`];
+        return (
+          <div key={`${df.key}-leaf-${i}`} className="space-y-0.5">
+            <div className="flex items-center gap-1.5">
+              {hasFreeKey ? (
+                <input
+                  className="w-20 flex-shrink-0 border border-ink-200 bg-transparent rounded px-1.5 py-0.5 text-xs font-mono focus:outline-none focus:border-crimson-400"
+                  placeholder="key" value={df.key}
+                  onChange={(e) => updateField(i, { key: e.target.value })} />
+              ) : (
+                <span className="max-w-[10rem] flex-shrink-0 font-mono text-ink-700 text-xs truncate" title={df.key}>{df.key}</span>
+              )}
+              <span className="text-ink-300 flex-shrink-0">←</span>
+
+              <ModeToggleButtons
+                current={(df.mode as DraftFieldMode) === 'array' ? 'source' : df.mode}
+                onChange={(next) => {
+                  setLookupOpenIdx(null);
+                  if (next === 'source') updateField(i, { mode: 'source', partnerPropKey: undefined, globalSetId: undefined, globalKey: undefined });
+                  else if (next === 'fixed') updateField(i, { mode: 'fixed', value: '', partnerPropKey: undefined, globalSetId: undefined, globalKey: undefined, lookupDictionary: undefined });
+                  else if (next === 'partner') updateField(i, { mode: 'partner', value: '', transform: '', globalSetId: undefined, globalKey: undefined, lookupDictionary: undefined });
+                  else if (next === 'global') updateField(i, { mode: 'global', value: '', transform: '', partnerPropKey: undefined, lookupDictionary: undefined });
+                }}
+              />
+
+              {/* Lookup button — only in source mode, matches OutputLeaf styling */}
+              {df.mode === 'source' && (
+                <button
+                  onClick={() => {
+                    if (isLookupOpen && !hasLookup) {
+                      updateField(i, { lookupDictionary: undefined });
+                    }
+                    setLookupOpenIdx(isLookupOpen ? null : i);
+                  }}
+                  title={hasLookup ? `Lookup: ${df.lookupDictionary!.entries.length} entries` : 'Map source values to different output values'}
+                  className={[
+                    'flex-shrink-0 text-[10px] font-medium px-1.5 py-0.5 rounded border transition',
+                    hasLookup || isLookupOpen
+                      ? 'border-crimson-400 bg-crimson-50 text-crimson-600'
+                      : 'border-ink-200 text-ink-400 hover:border-crimson-300 hover:text-crimson-500',
+                  ].join(' ')}
+                >Lookup</button>
+              )}
+
+              {/* Value area */}
+              <LeafValueInput
+                mode={df.mode as 'source' | 'fixed' | 'partner' | 'global'}
+                sourceValue={df.value}
+                sourcePaths={inputScalarProps}
+                onSourceChange={(v) => updateField(i, { value: v })}
+                fixedValue={df.value}
+                targetFieldType={fieldTargetType}
+                onFixedChange={(v) => updateField(i, { value: v })}
+                partnerPropKey={df.partnerPropKey ?? ''}
+                partnerAdapterProperties={partnerAdapterProperties}
+                datalistId={`${idPrefix}-partner-${i}`}
+                onPartnerChange={(v) => updateField(i, { partnerPropKey: v })}
+                globalSetId={df.globalSetId ?? ''}
+                globalKey={df.globalKey ?? ''}
+                allGlobalSets={allGlobalSets}
+                onGlobalSetChange={(setId) => updateField(i, { globalSetId: setId, globalKey: undefined })}
+                onGlobalKeyChange={(key) => updateField(i, { globalKey: key })}
+              />
+
+              {/* Delete row — only for free-key fields */}
+              {hasFreeKey && (
+                <button
+                  className="flex-shrink-0 text-ink-300 hover:text-crimson-500 transition"
+                  onClick={() => { onFieldsChange(fields.filter((_, j) => j !== i)); if (lookupOpenIdx === i) setLookupOpenIdx(null); }}>
+                  <Trash2 size={12} />
+                </button>
+              )}
+            </div>
+
+            {/* Lookup dictionary panel */}
+            {df.mode === 'source' && isLookupOpen && (
+              <div className="px-2 pb-2 pt-0.5">
+                <LookupDictionaryPanel
+                  dictionary={df.lookupDictionary}
+                  targetFieldType={fieldTargetType}
+                  onChange={(next) => { updateField(i, { lookupDictionary: next }); if (!next) setLookupOpenIdx(null); }}
+                  onClose={() => setLookupOpenIdx(null)}
+                />
+              </div>
+            )}
+          </div>
+        );
+      })}
+      {/* Nested array dropdown — schema-only, depth-gated */}
+      {depth < FIXED_ITEM_MAX_DEPTH && availableArrayNodes.length > 0 && (
+        <select
+          className="w-full border border-crimson-200 bg-white rounded px-1.5 py-0.5 text-[10px] font-mono text-crimson-700 focus:outline-none focus:border-crimson-400"
+          value=""
+          onChange={(e) => {
+            const childNode = childArrayNodes.find((c) => c.key === e.target.value);
+            if (!childNode) return;
+            onFieldsChange([...fields, {
+              key: childNode.key, mode: 'array', value: '', transform: '', showTransform: false,
+              nestedChildNode: childNode, nestedItems: [], addingItem: null,
+            }]);
+          }}>
+          <option value="">＋ add nested array…</option>
+          {availableArrayNodes.map((c) => <option key={c.key} value={c.key}>{c.key}[]</option>)}
+        </select>
+      )}
+      {/* Free-key: add more rows */}
+      {hasFreeKey && (
+        <button className="text-[11px] text-ok-600 hover:text-ok-600 transition"
+          onClick={() => onFieldsChange([...fields, { key: '', mode: 'fixed', value: '', transform: '', showTransform: false }])}>
+          + field
+        </button>
+      )}
+    </div>
+  );
+};
diff --git a/SW.Bitween.Web/ClientApp/src/components/mapper/OutputTree/NormalLeaf.tsx b/SW.Bitween.Web/ClientApp/src/components/mapper/OutputTree/NormalLeaf.tsx
new file mode 100644
index 00000000..2299a2b7
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/mapper/OutputTree/NormalLeaf.tsx
@@ -0,0 +1,171 @@
+import type React from "react";
+import { Trash2 } from "lucide-react";
+import type { TreeNode } from "../../../lib/mapping/mappingPreview";
+import { ModeToggleButtons } from "../ModeToggleButtons";
+import { LeafValueInput } from "../LeafValueInput";
+import { useNormalLeaf } from "./useNormalLeaf";
+import { LookupDictionaryPanel } from "../LookupDictionaryPanel";
+
+// ─── Types ────────────────────────────────────────────────────────────────────
+
+export interface NormalLeafProps {
+  node: TreeNode;
+  sourcePaths: string[];
+  targetFieldType: 'string' | 'number' | 'boolean' | undefined;
+  onLeafRef?: (path: string, el: HTMLElement | null) => void;
+  isSearchMatch?: boolean;
+}
+
+// ─── NormalLeaf ───────────────────────────────────────────────────────────────
+// Standard (non-array) output field — supports source, fixed, partner, global
+// modes plus optional lookup dictionary and transform expression.
+
+export const NormalLeaf: React.FC<NormalLeafProps> = ({
+  node,
+  sourcePaths,
+  targetFieldType,
+  onLeafRef,
+  isSearchMatch,
+}) => {
+  const {
+    mapping,
+    isMapped,
+    isSelected,
+    currentMode,
+    hasLookup,
+    lookupOpen,
+    allGlobalSets,
+    partnerAdapterProperties,
+    ref,
+    handleDrop,
+    handleSelect,
+    switchMode,
+    handleLookupToggle,
+    onSourceChange,
+    onFixedChange,
+    onPartnerChange,
+    onGlobalSetChange,
+    onGlobalKeyChange,
+    removeMapping,
+    updateTransform,
+    patchLookup,
+    removeLookup,
+  } = useNormalLeaf(node, onLeafRef);
+
+  // ── Derived: source path exists in the known input paths ──────────────────
+  const isInvalidSource =
+    currentMode === 'source' && !!(mapping?.source) && !sourcePaths.includes(mapping.source);
+
+  // ── Render ─────────────────────────────────────────────────────────────────
+
+  return (
+    <div
+      ref={ref}
+      onDragOver={(e) => e.preventDefault()}
+      onDrop={handleDrop}
+      onClick={handleSelect}
+      className={[
+        'rounded border text-xs cursor-pointer transition-all select-none',
+        isSelected
+          ? 'border-crimson-400 bg-crimson-50 ring-1 ring-crimson-200'
+          : isSearchMatch
+          ? 'bg-warn-100 ring-1 ring-warn-100'
+          : 'border-transparent hover:border-ink-200 hover:bg-ink-50',
+      ].filter(Boolean).join(' ')}
+    >
+      {/* ── Main row ── */}
+      <div className="flex items-center gap-1.5 px-2 py-[3px]">
+        <span
+          className={[
+            'w-2 h-2 rounded-full flex-shrink-0',
+            isInvalidSource ? 'bg-warn-100' : isMapped ? 'bg-ok-100' : 'bg-danger-300',
+          ].join(' ')}
+          title={isInvalidSource ? `Source path not found in input: "${mapping!.source}"` : undefined}
+        />
+        <span className="font-mono text-ink-700 truncate">{node.key}</span>
+        <span className="text-ink-300 mx-0.5 flex-shrink-0">←</span>
+
+        <ModeToggleButtons current={currentMode} onChange={switchMode} />
+
+        {currentMode === 'source' && (
+          <button
+            onClick={handleLookupToggle}
+            title={hasLookup ? `Lookup: ${mapping!.lookupDictionary!.entries.length} entries` : 'Map source values to different output values'}
+            className={[
+              'flex-shrink-0 text-[10px] font-medium px-1.5 py-0.5 rounded border transition',
+              hasLookup || lookupOpen
+                ? 'border-crimson-400 bg-crimson-50 text-crimson-600'
+                : 'border-ink-200 text-ink-400 hover:border-crimson-300 hover:text-crimson-500',
+            ].join(' ')}
+          >Lookup</button>
+        )}
+
+        <LeafValueInput
+          mode={currentMode}
+          sourceValue={mapping?.source ?? ''}
+          sourcePaths={sourcePaths}
+          onSourceChange={onSourceChange}
+          fixedValue={mapping?.fixedValue ?? ''}
+          targetFieldType={targetFieldType}
+          onFixedChange={onFixedChange}
+          partnerPropKey={mapping?.partnerPropKey ?? ''}
+          partnerAdapterProperties={partnerAdapterProperties}
+          datalistId={`partner-props-${mapping?.id}`}
+          onPartnerChange={onPartnerChange}
+          globalSetId={mapping?.globalSetId ?? ''}
+          globalKey={mapping?.globalKey ?? ''}
+          allGlobalSets={allGlobalSets}
+          onGlobalSetChange={onGlobalSetChange}
+          onGlobalKeyChange={onGlobalKeyChange}
+        />
+
+        {/* Transform badge — shown when NOT selected but transform exists */}
+        {!isSelected && mapping?.transform && currentMode === 'source' && (
+          <span
+            title={`Transform: ${mapping.transform}`}
+            className="flex-shrink-0 text-[10px] font-medium text-crimson-600 border border-crimson-200 bg-crimson-50 rounded px-1 cursor-default"
+          >
+            transform
+          </span>
+        )}
+
+        {mapping && (
+          <button
+            className="flex-shrink-0 text-ink-300 hover:text-crimson-500 transition"
+            onClick={(e) => { e.stopPropagation(); removeMapping(); }}
+          >
+            <Trash2 size={12} />
+          </button>
+        )}
+      </div>
+
+      {/* ── Lookup dictionary panel ── */}
+      {lookupOpen && currentMode === 'source' && (
+        <div className="px-2 pb-2 pt-0.5" onClick={(e) => e.stopPropagation()}>
+          <LookupDictionaryPanel
+            dictionary={mapping?.lookupDictionary}
+            targetFieldType={targetFieldType}
+            onChange={patchLookup}
+            onClose={removeLookup}
+          />
+        </div>
+      )}
+
+      {/* ── Transform row — only when selected + source mode + source assigned + no lookup ── */}
+      {isSelected && currentMode === 'source' && mapping?.source && !hasLookup && (
+        <div className="px-2 pb-1.5 space-y-0.5" onClick={(e) => e.stopPropagation()}>
+          <span className="text-[10px] font-medium text-crimson-600 select-none">
+            Transform{' '}
+            <span className="font-normal text-ink-400">(optional — modify the source value before output)</span>
+          </span>
+          <input
+            className="w-full border border-crimson-200 bg-white rounded px-2 py-1 text-xs font-mono focus:outline-none focus:border-crimson-400 placeholder-ink-300 text-crimson-700"
+            placeholder="e.g.  value * 1.2    or    value + ' USD'    — use 'value' to refer to the source field"
+            value={mapping.transform ?? ''}
+            onChange={(e) => updateTransform(e.target.value)}
+          />
+        </div>
+      )}
+    </div>
+  );
+};
diff --git a/SW.Bitween.Web/ClientApp/src/components/mapper/OutputTree/OutputBranch.tsx b/SW.Bitween.Web/ClientApp/src/components/mapper/OutputTree/OutputBranch.tsx
new file mode 100644
index 00000000..b7c6b307
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/mapper/OutputTree/OutputBranch.tsx
@@ -0,0 +1,330 @@
+import React, { useState } from "react";
+import { SquarePen, Trash2 } from "lucide-react";
+import type { TreeNode } from "../../../lib/mapping/mappingPreview";
+import {
+  useMappingEditorDispatch,
+  useMappingEditorState,
+  addArrayMapping,
+  openArrayModal,
+  toggleNodeCollapsed,
+  updateArrayMapping,
+} from "../../../lib/mapping/MappingEditorContext";
+import { getFullTargetPrefix } from "../../../lib/mapping/mappingTreeUtils";
+import { OutputLeaf } from "./OutputLeaf";
+import {
+  initDraftFieldsFromNode,
+  draftFieldsToRecord,
+  recordToDraftFields,
+} from "../../../lib/mapping/fixedItemHelpers";
+import type { DraftField } from "../../../lib/mapping/fixedItemHelpers";
+import { FixedItemFieldRows } from "./FixedItemPanel";
+
+// ─── Types ────────────────────────────────────────────────────────────────────
+
+export interface OutputBranchProps {
+  node: TreeNode;
+  depth?: number;
+  sourcePaths: string[];
+  typeMap: Record<string, 'string' | 'number' | 'boolean'>;
+  onLeafRef?: (path: string, el: HTMLElement | null) => void;
+  search?: string;
+}
+
+// ─── OutputBranch ─────────────────────────────────────────────────────────────
+
+export const OutputBranch: React.FC<OutputBranchProps> = ({ node, depth = 0, sourcePaths, typeMap, onLeafRef, search }) => {
+  const dispatch = useMappingEditorDispatch();
+  const { collapsedNodes, arrayMappings, inputJson } = useMappingEditorState();
+  const collapsed = collapsedNodes.includes(`out:${node.path}`);
+  const isOpen = !collapsed;
+
+  // ── Fixed-item inline panel state ────────────────────────────────────────
+  const [fixedPanelOpen, setFixedPanelOpen] = useState(false);
+  const [draftFields, setDraftFields] = useState<DraftField[]>([]);
+  const [editingFixedIdx, setEditingFixedIdx] = useState<number | null>(null);
+  const [editDraftFields, setEditDraftFields] = useState<DraftField[]>([]);
+
+  // Is this node inside another array? (path like "lineOrders[*].lineItems")
+  const isNestedArrayNode = node.type === 'array' && node.path.includes('[*].');
+
+  // Is this the synthetic root-array node (output schema is [...])?
+  const isRootArrayNode = node.key === 'root' && node.path === '[*]';
+
+  // Find the parent AM for this node (when nested)
+  const parentContainerPath = isNestedArrayNode
+    ? node.path.substring(0, node.path.lastIndexOf('[*].') + 3) // e.g. "lineOrders[*]"
+    : null;
+  const parentAm = parentContainerPath
+    ? arrayMappings.find((am) => {
+        const fullPrefix = getFullTargetPrefix(am.id, arrayMappings);
+        return `${fullPrefix}[*]` === parentContainerPath;
+      })
+    : null;
+
+  // Relative target name for this node (last segment, no [*])
+  const relativeTarget = isNestedArrayNode
+    ? node.path.split('[*].').pop()?.replace('[*]', '') ?? node.key
+    : isRootArrayNode ? '' : node.key;
+
+  // Check if this node corresponds to an array mapping (top-level or nested)
+  const arrayMapping = arrayMappings.find((am) => {
+    const fullPrefix = getFullTargetPrefix(am.id, arrayMappings);
+    // node.path already includes [*] suffix (e.g. "orders[*]" or "orders[*].items[*]")
+    return `${fullPrefix}[*]` === node.path;
+  });
+
+  // Count nesting depth by number of [*] in the path — max 3 levels allowed
+  const nestingDepth = (node.path.match(/\[\*\]/g) ?? []).length;
+  const canConfigureLoop = nestingDepth <= 3;
+
+  // Scalar (non-array) leaf paths from the root input JSON — for source field suggestions
+  const inputScalarProps = React.useMemo(() => {
+    try {
+      const parsed = JSON.parse(inputJson);
+      // For root arrays, expose scalar props from the first element
+      const root: Record<string, unknown> = Array.isArray(parsed)
+        ? (parsed.length > 0 && typeof parsed[0] === 'object' && parsed[0] !== null ? parsed[0] as Record<string, unknown> : {})
+        : parsed as Record<string, unknown>;
+      const collect = (obj: Record<string, unknown>, prefix: string): string[] => {
+        if (obj === null || typeof obj !== 'object' || Array.isArray(obj)) {
+          return prefix ? [prefix] : [];
+        }
+        return Object.entries(obj).flatMap(([k, v]) => {
+          const path = prefix ? `${prefix}.${k}` : k;
+          if (Array.isArray(v)) return [];
+          if (v && typeof v === 'object') return collect(v as Record<string, unknown>, path);
+          return [path];
+        });
+      };
+      return collect(root, '');
+    } catch {
+      return [];
+    }
+  }, [inputJson]);
+
+  const handleLoopClick = () => {
+    dispatch(
+      openArrayModal({
+        id: arrayMapping?.id ?? '__new__',
+        presetTarget: relativeTarget,
+        parentArrayId: parentAm?.id ?? null,
+        isRootOutput: isRootArrayNode,
+      })
+    );
+  };
+
+  const openFixedPanel = () => {
+    setDraftFields(initDraftFieldsFromNode(node));
+    setFixedPanelOpen(true);
+  };
+
+  const handleAddFixedItem = () => {
+    const newItem = draftFieldsToRecord(draftFields);
+    if (Object.keys(newItem).length === 0) return;
+
+    const existing = arrayMapping?.fixedItems ?? [];
+    const updated = [...existing, newItem];
+
+    if (arrayMapping) {
+      dispatch(updateArrayMapping({ id: arrayMapping.id, fixedItems: updated }));
+    } else {
+      dispatch(
+        addArrayMapping({
+          source: '',
+          target: relativeTarget,
+          alias: 'item',
+          mappings: [],
+          fixedItems: updated,
+          parentArrayId: parentAm?.id ?? undefined,
+          isRootOutput: isRootArrayNode || undefined,
+        })
+      );
+    }
+    setDraftFields(initDraftFieldsFromNode(node));
+  };
+
+  const handleUpdateFixedItem = (idx: number) => {
+    const newItem = draftFieldsToRecord(editDraftFields);
+    if (Object.keys(newItem).length === 0) return;
+    const updated = [...arrayMapping!.fixedItems!];
+    updated[idx] = newItem;
+    dispatch(updateArrayMapping({ id: arrayMapping!.id, fixedItems: updated }));
+    setEditingFixedIdx(null);
+  };
+
+  return (
+    <div>
+      <div className="flex items-center gap-1 px-2 py-[3px] rounded hover:bg-ink-50 group">
+        <button
+          onClick={() => dispatch(toggleNodeCollapsed(`out:${node.path}`))}
+          className="flex items-center gap-1 flex-1 text-left"
+        >
+          <span className="text-ink-400 text-xs w-3 flex-shrink-0">{isOpen ? '▾' : '▸'}</span>
+          <span className="text-xs font-medium text-ink-700 font-mono truncate">
+            {isRootArrayNode ? <span className="text-crimson-500 italic">root array</span> : node.key}
+          </span>
+          {node.type === 'array' && (
+            <span className="text-xs text-crimson-500 font-mono ml-0.5">[]</span>
+          )}
+          {node.type === 'array' && (arrayMapping?.fixedItems?.length ?? 0) > 0 && (
+            <span
+              className="ml-1 inline-flex items-center gap-0.5 text-[9px] font-semibold px-1 py-px rounded-full bg-ok-100 text-ok-600 border border-ok-100 leading-none"
+              title={`${arrayMapping!.fixedItems!.length} fixed item${arrayMapping!.fixedItems!.length !== 1 ? 's' : ''}`}
+            >
+              <svg width="8" height="8" viewBox="0 0 16 16" fill="currentColor" className="flex-shrink-0">
+                <path d="M9.5 0a.5.5 0 0 1 .5.5V2h1a2 2 0 0 1 2 2v1.5h.5a.5.5 0 0 1 0 1H13V13a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V6.5h-.5a.5.5 0 0 1 0-1H3V4a2 2 0 0 1 2-2h1V.5a.5.5 0 0 1 .5-.5h1z"/>
+              </svg>
+              {arrayMapping!.fixedItems!.length}
+            </span>
+          )}
+          {node.type === 'object' && (
+            <span className="text-xs text-ink-400 font-mono ml-0.5">{'{}'}</span>
+          )}
+        </button>
+
+        {node.type === 'array' && canConfigureLoop && (
+          <button
+            className={`opacity-0 group-hover:opacity-100 text-xs border rounded px-1 transition ${
+              isNestedArrayNode && (!parentAm || !parentAm.source)
+                ? 'text-ink-300 border-ink-200 cursor-not-allowed'
+                : 'text-crimson-500 hover:text-crimson-700 border-crimson-200'
+            }`}
+            onClick={isNestedArrayNode && (!parentAm || !parentAm.source) ? undefined : handleLoopClick}
+            disabled={isNestedArrayNode && (!parentAm || !parentAm.source)}
+            title={isNestedArrayNode && (!parentAm || !parentAm.source) ? 'Map the parent array first' : 'Configure array mapping + filter'}
+          >
+            ⚙ map
+          </button>
+        )}
+        {node.type === 'array' && canConfigureLoop && (
+          <button
+            className={`opacity-0 group-hover:opacity-100 text-xs border rounded px-1 transition ${
+              isNestedArrayNode && (!parentAm || !parentAm.source)
+                ? 'text-ink-300 border-ink-200 cursor-not-allowed'
+                : fixedPanelOpen
+                  ? 'text-ok-600 border-ok-100 bg-ok-100'
+                  : 'text-ok-600 hover:text-ok-600 border-ok-100'
+            }`}
+            onClick={isNestedArrayNode && (!parentAm || !parentAm.source) ? undefined : () => fixedPanelOpen ? setFixedPanelOpen(false) : openFixedPanel()}
+            disabled={isNestedArrayNode && (!parentAm || !parentAm.source)}
+            title={isNestedArrayNode && (!parentAm || !parentAm.source) ? 'Map the parent array first' : 'Add fixed item to this array'}
+          >
+            ＋ fixed
+          </button>
+        )}
+      </div>
+
+      {/* ── Inline fixed-item panel ────────────────────────────────────────── */}
+      {node.type === 'array' && fixedPanelOpen && (
+        <div className="mx-2 mb-1 rounded-lg border border-ok-100 bg-ok-100 px-3 py-2 space-y-2 text-xs">
+          {/* Existing fixed items */}
+          {(arrayMapping?.fixedItems?.length ?? 0) > 0 && (
+            <div className="space-y-1">
+              <span className="text-[10px] font-semibold text-ok-600 uppercase tracking-wide">Existing fixed items</span>
+              {arrayMapping!.fixedItems!.map((item, idx) => (
+                <div key={idx} className="rounded border border-ok-100 bg-white">
+                  {editingFixedIdx === idx ? (
+                    /* ── Edit form ── */
+                    <div className="px-2 py-1.5 space-y-1.5">
+                      <FixedItemFieldRows
+                        fields={editDraftFields}
+                        onFieldsChange={setEditDraftFields}
+                        parentNode={node}
+                        depth={0}
+                        inputScalarProps={inputScalarProps}
+                        idPrefix={`edit-${node.path}-${idx}`}
+                        typeMap={typeMap}
+                      />
+                      <div className="flex gap-1 pt-0.5">
+                        <button
+                          className="flex-1 text-[11px] bg-ok-600 hover:bg-ok-600 text-white rounded py-0.5 transition"
+                          onClick={() => handleUpdateFixedItem(idx)}
+                        >Update</button>
+                        <button
+                          className="flex-1 text-[11px] border border-ink-200 hover:bg-ink-50 text-ink-500 rounded py-0.5 transition"
+                          onClick={() => setEditingFixedIdx(null)}
+                        >Cancel</button>
+                      </div>
+                    </div>
+                  ) : (
+                    /* ── Compact summary row ── */
+                    <div className="flex items-center justify-between px-2 py-1 font-mono text-[10px] text-ink-600">
+                      <span className="truncate">{JSON.stringify(item)}</span>
+                      <div className="flex items-center gap-1 ml-2 flex-shrink-0">
+                        <button
+                          className="text-ink-300 hover:text-crimson-500 transition"
+                          onClick={() => { setEditDraftFields(recordToDraftFields(item as Record<string, unknown>, node)); setEditingFixedIdx(idx); }}
+                        >
+                          <SquarePen size={12} />
+                        </button>
+                        <button
+                          className="text-ink-300 hover:text-crimson-500 transition"
+                          onClick={() =>
+                            dispatch(updateArrayMapping({
+                              id: arrayMapping!.id,
+                              fixedItems: arrayMapping!.fixedItems!.filter((_, i) => i !== idx),
+                            }))
+                          }
+                        >
+                          <Trash2 size={12} />
+                        </button>
+                      </div>
+                    </div>
+                  )}
+                </div>
+              ))}
+            </div>
+          )}
+
+          {/* New item form */}
+          <div className="space-y-1.5">
+            <span className="text-[10px] font-semibold text-ok-600 uppercase tracking-wide">New fixed item</span>
+            <FixedItemFieldRows
+              fields={draftFields}
+              onFieldsChange={setDraftFields}
+              parentNode={node}
+              depth={0}
+              inputScalarProps={inputScalarProps}
+              idPrefix={`new-${node.path}`}
+              typeMap={typeMap}
+            />
+
+            <button
+              className="mt-1 w-full text-[11px] bg-ok-600 hover:bg-ok-600 text-white rounded py-1 transition"
+              onClick={handleAddFixedItem}
+            >
+              Add fixed item
+            </button>
+          </div>
+        </div>
+      )}
+
+      {isOpen && (
+        <div className="pl-3 border-l border-ink-100 ml-3">
+          {node.children.map((child) =>
+            child.type === 'leaf' ? (
+              <OutputLeaf
+                key={child.path}
+                node={child}
+                sourcePaths={sourcePaths}
+                typeMap={typeMap}
+                onLeafRef={onLeafRef}
+                isSearchMatch={Boolean(search && child.key.toLowerCase().includes(search.toLowerCase()))}
+              />
+            ) : (
+              <OutputBranch
+                key={child.path}
+                node={child}
+                depth={depth + 1}
+                sourcePaths={sourcePaths}
+                typeMap={typeMap}
+                onLeafRef={onLeafRef}
+                search={search}
+              />
+            )
+          )}
+        </div>
+      )}
+    </div>
+  );
+};
diff --git a/SW.Bitween.Web/ClientApp/src/components/mapper/OutputTree/OutputLeaf.tsx b/SW.Bitween.Web/ClientApp/src/components/mapper/OutputTree/OutputLeaf.tsx
new file mode 100644
index 00000000..1a90bf4b
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/mapper/OutputTree/OutputLeaf.tsx
@@ -0,0 +1,111 @@
+import type React from "react";
+import { useMemo } from "react";
+import type { TreeNode } from "../../../lib/mapping/mappingPreview";
+import { useMappingEditorState } from "../../../lib/mapping/MappingEditorContext";
+import { getFullTargetPrefix, isFieldMappingPopulated } from "../../../lib/mapping/mappingTreeUtils";
+import { useGlobalSets } from "../data";
+import type { PrimitiveArrayItem } from "../../../lib/mapping/types";
+import { ArrayInnerField } from "./ArrayInnerField";
+import { PrimitiveArrayLeaf } from "./PrimitiveArrayLeaf";
+import { NormalLeaf } from "./NormalLeaf";
+
+// ─── Types ────────────────────────────────────────────────────────────────────
+
+export interface OutputLeafProps {
+  node: TreeNode;
+  sourcePaths: string[];
+  typeMap: Record<string, 'string' | 'number' | 'boolean'>;
+  onLeafRef?: (path: string, el: HTMLElement | null) => void;
+  isSearchMatch?: boolean;
+}
+
+// ─── OutputLeaf ───────────────────────────────────────────────────────────────
+// Thin router: determines which leaf variant to render based on the node type.
+
+export const OutputLeaf: React.FC<OutputLeafProps> = ({ node, sourcePaths, typeMap, onLeafRef, isSearchMatch }) => {
+  const { arrayMappings, outputJson, partnerAdapterProperties } = useMappingEditorState();
+  const allGlobalSets = useGlobalSets();
+
+  // ── Array inner field detection (derived — no hooks after this) ───────────
+  const isArrayField = node.path.includes('[*].');
+
+  // ── Primitive array detection — must run unconditionally (hooks rules) ────
+  const primitiveArrayValues = useMemo((): unknown[] | null => {
+    if (isArrayField) return null;
+    try {
+      const parsed = JSON.parse(outputJson);
+      // Root primitive array: node.path is '[*]' sentinel (no named key)
+      if (Array.isArray(parsed)) {
+        if (node.path === '[*]' && parsed.every((v) => v === null || typeof v !== 'object')) {
+          return parsed as unknown[];
+        }
+        return null;
+      }
+      const obj = parsed as Record<string, unknown>;
+      const cur = node.path.split('.').reduce<unknown>((o, k) => {
+        if (o == null || typeof o !== 'object') return undefined;
+        return (o as Record<string, unknown>)[k];
+      }, obj);
+      if (Array.isArray(cur) && cur.every((v) => v === null || typeof v !== 'object')) {
+        return cur as unknown[];
+      }
+      return null;
+    } catch {
+      return null;
+    }
+  }, [isArrayField, node.path, outputJson]);
+
+  // ── Array inner field ─────────────────────────────────────────────────────
+  if (isArrayField) {
+    const lastStarIdx = node.path.lastIndexOf('[*].');
+    const arrayParentTarget = node.path.substring(0, lastStarIdx);
+    const relativeKey = node.path.substring(lastStarIdx + 4);
+    const arrayOwner = arrayMappings.find(
+      (am) => getFullTargetPrefix(am.id, arrayMappings) === arrayParentTarget
+    );
+    const innerMapping = arrayOwner?.mappings.find((m) => m.target === relativeKey);
+
+    return (
+      <ArrayInnerField
+        node={node}
+        innerMapping={innerMapping}
+        isMapped={isFieldMappingPopulated(innerMapping)}
+        onLeafRef={onLeafRef}
+        isSearchMatch={isSearchMatch}
+        onOpenArrayModal={() => {/* managed by parent OutputBranch */}}
+      />
+    );
+  }
+
+  // ── Primitive array ───────────────────────────────────────────────────────
+  if (primitiveArrayValues !== null) {
+    const primAm = node.path === '[*]'
+      ? arrayMappings.find((am) => am.isRootOutput && !am.parentArrayId && am.primitiveItems)
+      : arrayMappings.find((am) => am.target === node.path && !am.parentArrayId && am.primitiveItems);
+    const currentItems: PrimitiveArrayItem[] = primAm?.primitiveItems ?? primitiveArrayValues.map(() => ({}));
+    return (
+      <PrimitiveArrayLeaf
+        node={node}
+        sourcePaths={sourcePaths}
+        primitiveArrayValues={primitiveArrayValues}
+        primAmId={primAm?.id}
+        currentItems={currentItems}
+        partnerAdapterProperties={partnerAdapterProperties}
+        allGlobalSets={allGlobalSets}
+        onLeafRef={onLeafRef}
+        isSearchMatch={isSearchMatch}
+      />
+    );
+  }
+
+  // ── Normal field leaf ─────────────────────────────────────────────────────
+  return (
+    <NormalLeaf
+      node={node}
+      sourcePaths={sourcePaths}
+      targetFieldType={typeMap[node.path]}
+      onLeafRef={onLeafRef}
+      isSearchMatch={isSearchMatch}
+    />
+  );
+};
diff --git a/SW.Bitween.Web/ClientApp/src/components/mapper/OutputTree/OutputTree.tsx b/SW.Bitween.Web/ClientApp/src/components/mapper/OutputTree/OutputTree.tsx
new file mode 100644
index 00000000..6997534e
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/mapper/OutputTree/OutputTree.tsx
@@ -0,0 +1,47 @@
+import React from "react";
+import type { TreeNode } from "../../../lib/mapping/mappingPreview";
+import { buildTypeMap } from "../../../lib/mapping/scribanGenerator";
+import { useMappingEditorState } from "../../../lib/mapping/MappingEditorContext";
+import { OutputLeaf } from "./OutputLeaf";
+import { OutputBranch } from "./OutputBranch";
+
+
+interface OutputTreeProps {
+  nodes: TreeNode[];
+  sourcePaths: string[];
+  onLeafRef?: (path: string, el: HTMLElement | null) => void;
+}
+
+const OutputTree: React.FC<OutputTreeProps> = ({ nodes, sourcePaths, onLeafRef }) => {
+  const { searchOutput: search, outputJson } = useMappingEditorState();
+  const typeMap = React.useMemo(() => { try { return buildTypeMap(outputJson); } catch { return {}; } }, [outputJson]);
+  if (nodes.length === 0) {
+    return (
+      <div className="flex flex-col items-center justify-center h-full text-center px-4 gap-3">
+        <div className="text-3xl mb-1 text-ink-300">{'{}'}</div>
+        <p className="text-xs text-ink-400">No output fields. Paste a target JSON sample above to populate the tree.</p>
+      </div>
+    );
+  }
+
+  return (
+    <div className="px-2 py-1 space-y-0.5">
+      {nodes.map((node) =>
+        node.type === 'leaf' ? (
+          <OutputLeaf
+            key={node.path}
+            node={node}
+            sourcePaths={sourcePaths}
+            typeMap={typeMap}
+            onLeafRef={onLeafRef}
+            isSearchMatch={Boolean(search && node.key.toLowerCase().includes(search.toLowerCase()))}
+          />
+        ) : (
+          <OutputBranch key={node.path} node={node} sourcePaths={sourcePaths} typeMap={typeMap} onLeafRef={onLeafRef} search={search} />
+        )
+      )}
+    </div>
+  );
+};
+
+export default OutputTree;
diff --git a/SW.Bitween.Web/ClientApp/src/components/mapper/OutputTree/PrimitiveArrayLeaf.tsx b/SW.Bitween.Web/ClientApp/src/components/mapper/OutputTree/PrimitiveArrayLeaf.tsx
new file mode 100644
index 00000000..df739f0e
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/mapper/OutputTree/PrimitiveArrayLeaf.tsx
@@ -0,0 +1,137 @@
+import type React from "react";
+import type { TreeNode } from "../../../lib/mapping/mappingPreview";
+import type { MappingMode, PrimitiveArrayItem } from "../../../lib/mapping/types";
+import { ModeToggleButtons } from "../ModeToggleButtons";
+import { LeafValueInput } from "../LeafValueInput";
+import type { GlobalValuesSetRow } from "../../../api";
+import { MODE_INITIAL_FIELDS } from "../../../lib/mapping/mappingModeDefaults";
+import { usePrimitiveArrayLeaf } from "./usePrimitiveArrayLeaf";
+
+// ─── Types ────────────────────────────────────────────────────────────────────
+
+export interface PrimitiveArrayLeafProps {
+  node: TreeNode;
+  sourcePaths: string[];
+  primitiveArrayValues: unknown[];
+  primAmId: string | undefined;
+  currentItems: PrimitiveArrayItem[];
+  partnerAdapterProperties: Record<string, string>;
+  allGlobalSets: GlobalValuesSetRow[];
+  onLeafRef?: (path: string, el: HTMLElement | null) => void;
+  isSearchMatch?: boolean;
+}
+
+// ─── PrimitiveArrayLeaf ───────────────────────────────────────────────────────
+// Handles a target field that is a primitive (string/number) array.
+// Each index is mapped individually.
+
+export const PrimitiveArrayLeaf: React.FC<PrimitiveArrayLeafProps> = ({
+  node,
+  sourcePaths,
+  primitiveArrayValues,
+  primAmId,
+  currentItems,
+  partnerAdapterProperties,
+  allGlobalSets,
+  onLeafRef,
+  isSearchMatch,
+}) => {
+  const { panelOpen, setPanelOpen, ref, mappedCount, saveItem, onMapEmptyArray, onClearEmptyArray } =
+    usePrimitiveArrayLeaf(node, primAmId, currentItems, onLeafRef);
+
+  const firstVal = primitiveArrayValues[0];
+  const itemType: 'string' | 'number' | 'boolean' | undefined =
+    typeof firstVal === 'number' ? 'number' :
+    typeof firstVal === 'boolean' ? 'boolean' :
+    typeof firstVal === 'string' ? 'string' : undefined;
+
+  return (
+    <div
+      ref={ref}
+      className={[
+        'rounded border text-xs select-none transition-all',
+        isSearchMatch ? 'bg-warn-100 ring-1 ring-warn-100' : 'border-transparent',
+      ].join(' ')}
+    >
+      {/* Header row */}
+      <div
+        className="flex items-center gap-1.5 px-2 py-[3px] cursor-pointer hover:bg-ink-50 rounded"
+        onClick={() => setPanelOpen((v) => !v)}
+      >
+        <span className={`w-2 h-2 rounded-full flex-shrink-0 ${mappedCount > 0 ? 'bg-ok-100' : 'bg-danger-300'}`} />
+        <span className="font-mono text-ink-700">{node.key}</span>
+        <span className="text-crimson-500 font-mono ml-0.5">[]</span>
+        <span className="ml-auto text-[10px] font-medium text-warn-700 border border-warn-100 bg-warn-100 rounded px-1.5 py-px">
+          {mappedCount}/{currentItems.length} mapped
+        </span>
+        <span className="text-ink-400 text-[10px]">{panelOpen ? '▾' : '▸'}</span>
+      </div>
+
+      {/* Inline mapping panel */}
+      {panelOpen && (
+        <div className="mx-2 mb-1.5 rounded-lg border border-warn-100 bg-warn-100 px-2 py-2 space-y-1">
+          {currentItems.length === 0 && !primAmId && (
+            <div className="flex items-center gap-2 py-0.5">
+              <span className="text-[10px] text-ink-400 italic">Empty array — no elements to map.</span>
+              <button
+                className="ml-auto text-[10px] font-medium text-ok-600 border border-ok-100 bg-white rounded px-2 py-0.5 hover:bg-ok-100 transition"
+                onClick={onMapEmptyArray}
+              >
+                Map as empty array
+              </button>
+            </div>
+          )}
+
+          {currentItems.length === 0 && primAmId && (
+            <div className="flex items-center gap-2 py-0.5">
+              <span className="text-[10px] text-ok-600 font-medium">✓ Mapped as empty array</span>
+              <button
+                className="ml-auto text-[10px] text-crimson-400 hover:text-crimson-600 transition"
+                onClick={onClearEmptyArray}
+                title="Clear mapping"
+              >
+                Clear
+              </button>
+            </div>
+          )}
+
+          {currentItems.map((item, idx) => {
+            const mode: MappingMode =
+              item.partnerPropKey !== undefined ? 'partner' :
+              item.globalSetId !== undefined ? 'global' :
+              item.fixedValue !== undefined ? 'fixed' : 'source';
+
+            return (
+              <div key={idx} className="flex items-center gap-1">
+                <span className="font-mono text-[10px] text-ink-400 w-5 text-right flex-shrink-0">[{idx}]</span>
+                <span className="text-ink-300 flex-shrink-0 text-xs">←</span>
+                <ModeToggleButtons
+                  current={mode}
+                  onChange={(next) => saveItem(idx, { ...MODE_INITIAL_FIELDS[next], source: MODE_INITIAL_FIELDS[next].source ?? item.source ?? '' })}
+                />
+                <LeafValueInput
+                  mode={mode}
+                  sourceValue={item.source ?? ''}
+                  sourcePaths={sourcePaths}
+                  onSourceChange={(v) => saveItem(idx, { ...item, source: v })}
+                  fixedValue={item.fixedValue ?? ''}
+                  targetFieldType={itemType}
+                  onFixedChange={(v) => saveItem(idx, { ...item, fixedValue: v })}
+                  partnerPropKey={item.partnerPropKey ?? ''}
+                  partnerAdapterProperties={partnerAdapterProperties}
+                  datalistId={`prim-partner-${node.path}-${idx}`}
+                  onPartnerChange={(v) => saveItem(idx, { ...item, partnerPropKey: v })}
+                  globalSetId={item.globalSetId ?? ''}
+                  globalKey={item.globalKey ?? ''}
+                  allGlobalSets={allGlobalSets}
+                  onGlobalSetChange={(setId) => saveItem(idx, { ...item, globalSetId: setId, globalKey: '' })}
+                  onGlobalKeyChange={(key) => saveItem(idx, { ...item, globalKey: key })}
+                />
+              </div>
+            );
+          })}
+        </div>
+      )}
+    </div>
+  );
+};
diff --git a/SW.Bitween.Web/ClientApp/src/components/mapper/OutputTree/useNormalLeaf.ts b/SW.Bitween.Web/ClientApp/src/components/mapper/OutputTree/useNormalLeaf.ts
new file mode 100644
index 00000000..31437427
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/mapper/OutputTree/useNormalLeaf.ts
@@ -0,0 +1,216 @@
+import React, { useCallback, useState } from "react";
+import type { TreeNode } from "../../../lib/mapping/mappingPreview";
+import { getValueAtPath } from "../../../lib/mapping/mappingUtils";
+import type { FieldMapping, LookupDictionary, MappingMode } from "../../../lib/mapping/types";
+import {
+  useMappingEditorDispatch,
+  useMappingEditorState,
+  addFieldMapping,
+  removeFieldMapping,
+  selectMapping,
+  updateFieldMapping,
+} from "../../../lib/mapping/MappingEditorContext";
+import { isFieldMappingPopulated } from "../../../lib/mapping/mappingTreeUtils";
+import { MODE_INITIAL_FIELDS } from "../../../lib/mapping/mappingModeDefaults";
+import type { GlobalValuesSetRow } from "../../../api";
+import { useGlobalSets } from "../data";
+
+// ─── Return type ──────────────────────────────────────────────────────────────
+
+export interface UseNormalLeafResult {
+  // Derived state
+  mapping: FieldMapping | undefined;
+  isMapped: boolean;
+  isSelected: boolean;
+  currentMode: MappingMode;
+  hasLookup: boolean;
+  lookupOpen: boolean;
+  allGlobalSets: GlobalValuesSetRow[];
+  partnerAdapterProperties: Record<string, string>;
+  ref: React.RefCallback<HTMLElement>;
+  // Row handlers
+  handleDrop: (e: React.DragEvent) => void;
+  handleSelect: () => void;
+  switchMode: (next: MappingMode) => void;
+  handleLookupToggle: (e: React.MouseEvent) => void;
+  // LeafValueInput handlers
+  onSourceChange: (v: string) => void;
+  onFixedChange: (v: string) => void;
+  onPartnerChange: (v: string) => void;
+  onGlobalSetChange: (setId: string) => void;
+  onGlobalKeyChange: (key: string) => void;
+  // Row actions
+  removeMapping: () => void;
+  updateTransform: (val: string) => void;
+  // Lookup actions
+  patchLookup: (next: LookupDictionary | undefined) => void;
+  removeLookup: () => void;
+}
+
+// ─── Hook ─────────────────────────────────────────────────────────────────────
+
+export function useNormalLeaf(
+  node: TreeNode,
+  onLeafRef: ((path: string, el: HTMLElement | null) => void) | undefined,
+): UseNormalLeafResult {
+  const dispatch = useMappingEditorDispatch();
+  const {
+    fieldMappings,
+    selectedMappingId: selectedId,
+    outputJson,
+    partnerAdapterProperties,
+  } = useMappingEditorState();
+  const [lookupOpen, setLookupOpen] = useState(false);
+  const allGlobalSets = useGlobalSets();
+
+  const mapping = fieldMappings.find((m) => m.target === node.path);
+  const isMapped = isFieldMappingPopulated(mapping);
+  const isSelected = mapping ? selectedId === mapping.id : false;
+
+  const currentMode: MappingMode =
+    mapping?.partnerPropKey !== undefined ? "partner" :
+    mapping?.globalSetId !== undefined ? "global" :
+    mapping?.fixedValue !== undefined ? "fixed" :
+    "source";
+
+  const hasLookup = (mapping?.lookupDictionary?.entries?.length ?? 0) > 0;
+
+  const ref = useCallback(
+    (el: HTMLElement | null) => onLeafRef?.(node.path, el),
+    [node.path, onLeafRef],
+  );
+
+  // ── Lookup helpers ─────────────────────────────────────────────────────────
+
+  const patchLookup = (next: LookupDictionary | undefined) => {
+    if (!mapping) return;
+    dispatch(updateFieldMapping({ id: mapping.id, lookupDictionary: next }));
+  };
+
+  const removeLookup = () => {
+    if (!mapping) return;
+    dispatch(updateFieldMapping({ id: mapping.id, lookupDictionary: undefined }));
+    setLookupOpen(false);
+  };
+
+  // ── Event handlers ─────────────────────────────────────────────────────────
+
+  const handleDrop = (e: React.DragEvent) => {
+    e.preventDefault();
+    const sourcePath = e.dataTransfer.getData("text/plain");
+    if (!sourcePath) return;
+    if (mapping) {
+      dispatch(updateFieldMapping({ id: mapping.id, source: sourcePath, fixedValue: undefined, valuesSetId: undefined }));
+    } else {
+      dispatch(addFieldMapping({ source: sourcePath, target: node.path }));
+    }
+  };
+
+  const handleSelect = () => {
+    if (mapping) {
+      dispatch(selectMapping(isSelected ? null : mapping.id));
+    } else {
+      dispatch(addFieldMapping({ source: "", target: node.path }));
+    }
+  };
+
+  const switchMode = (next: MappingMode) => {
+    const fields: Partial<FieldMapping> = { ...MODE_INITIAL_FIELDS[next] };
+
+    if (next === "fixed") {
+      try {
+        const parsedOutput = JSON.parse(outputJson);
+        if (!Array.isArray(parsedOutput)) {
+          fields.fixedValue = getValueAtPath(parsedOutput, node.path);
+        }
+      } catch { /* ignore parse errors */ }
+    }
+
+    if (next !== "source") setLookupOpen(false);
+
+    if (!mapping) {
+      dispatch(addFieldMapping({ source: "", target: node.path, ...fields }));
+    } else {
+      dispatch(updateFieldMapping({ id: mapping.id, ...fields }));
+    }
+  };
+
+  const handleLookupToggle = (e: React.MouseEvent) => {
+    e.stopPropagation();
+    setLookupOpen((v) => {
+      if (v && mapping) {
+        const entries = mapping.lookupDictionary?.entries ?? [];
+        const hasValid = entries.some((entry) => entry.from.trim() !== "" && entry.to.trim() !== "");
+        if (!hasValid) {
+          dispatch(updateFieldMapping({ id: mapping.id, lookupDictionary: undefined }));
+        }
+      }
+      return !v;
+    });
+  };
+
+  // ── LeafValueInput handlers ────────────────────────────────────────────────
+
+  const onSourceChange = (v: string) => {
+    if (mapping) {
+      dispatch(updateFieldMapping({ id: mapping.id, source: v, fixedValue: undefined, partnerPropKey: undefined, valuesSetId: undefined, lookupDictionary: undefined }));
+    } else {
+      dispatch(addFieldMapping({ source: v, target: node.path }));
+    }
+  };
+
+  const onFixedChange = (v: string) => {
+    if (!mapping) return;
+    dispatch(updateFieldMapping({ id: mapping.id, fixedValue: v }));
+  };
+
+  const onPartnerChange = (v: string) => {
+    if (!mapping) return;
+    dispatch(updateFieldMapping({ id: mapping.id, partnerPropKey: v }));
+  };
+
+  const onGlobalSetChange = (setId: string) => {
+    if (!mapping) return;
+    dispatch(updateFieldMapping({ id: mapping.id, globalSetId: setId, globalKey: "" }));
+  };
+
+  const onGlobalKeyChange = (key: string) => {
+    if (!mapping) return;
+    dispatch(updateFieldMapping({ id: mapping.id, globalKey: key }));
+  };
+
+  const removeMapping = () => {
+    if (!mapping) return;
+    dispatch(removeFieldMapping(mapping.id));
+  };
+
+  const updateTransform = (val: string) => {
+    if (!mapping) return;
+    dispatch(updateFieldMapping({ id: mapping.id, transform: val || undefined }));
+  };
+
+  return {
+    mapping,
+    isMapped,
+    isSelected,
+    currentMode,
+    hasLookup,
+    lookupOpen,
+    allGlobalSets,
+    partnerAdapterProperties,
+    ref,
+    handleDrop,
+    handleSelect,
+    switchMode,
+    handleLookupToggle,
+    onSourceChange,
+    onFixedChange,
+    onPartnerChange,
+    onGlobalSetChange,
+    onGlobalKeyChange,
+    removeMapping,
+    updateTransform,
+    patchLookup,
+    removeLookup,
+  };
+}
diff --git a/SW.Bitween.Web/ClientApp/src/components/mapper/OutputTree/usePrimitiveArrayLeaf.ts b/SW.Bitween.Web/ClientApp/src/components/mapper/OutputTree/usePrimitiveArrayLeaf.ts
new file mode 100644
index 00000000..0555c31d
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/mapper/OutputTree/usePrimitiveArrayLeaf.ts
@@ -0,0 +1,71 @@
+import React, { useCallback, useState } from "react";
+import type { TreeNode } from "../../../lib/mapping/mappingPreview";
+import type { PrimitiveArrayItem } from "../../../lib/mapping/types";
+import {
+  useMappingEditorDispatch,
+  addArrayMapping,
+  removeArrayMapping,
+  updateArrayMapping,
+} from "../../../lib/mapping/MappingEditorContext";
+
+// ─── Return type ──────────────────────────────────────────────────────────────
+
+export interface UsePrimitiveArrayLeafResult {
+  panelOpen: boolean;
+  setPanelOpen: React.Dispatch<React.SetStateAction<boolean>>;
+  ref: React.RefCallback<HTMLElement>;
+  mappedCount: number;
+  saveItem: (idx: number, newItem: PrimitiveArrayItem) => void;
+  onMapEmptyArray: () => void;
+  onClearEmptyArray: () => void;
+}
+
+// ─── Hook ─────────────────────────────────────────────────────────────────────
+
+export function usePrimitiveArrayLeaf(
+  node: TreeNode,
+  primAmId: string | undefined,
+  currentItems: PrimitiveArrayItem[],
+  onLeafRef: ((path: string, el: HTMLElement | null) => void) | undefined,
+): UsePrimitiveArrayLeafResult {
+  const dispatch = useMappingEditorDispatch();
+  const [panelOpen, setPanelOpen] = useState(false);
+
+  const ref = useCallback(
+    (el: HTMLElement | null) => onLeafRef?.(node.path, el),
+    [node.path, onLeafRef],
+  );
+
+  const mappedCount = currentItems.filter(
+    (item) => item.source || item.fixedValue !== undefined || item.partnerPropKey || (item.globalSetId && item.globalKey),
+  ).length;
+
+  const isRootPrimArray = node.path === "[*]";
+
+  const saveItem = (idx: number, newItem: PrimitiveArrayItem) => {
+    const updated = currentItems.map((item, i) => (i === idx ? newItem : item));
+    if (primAmId) {
+      dispatch(updateArrayMapping({ id: primAmId, primitiveItems: updated }));
+    } else {
+      dispatch(addArrayMapping({ source: "", target: isRootPrimArray ? "" : node.path, alias: "item", mappings: [], primitiveItems: updated, isRootOutput: isRootPrimArray || undefined }));
+    }
+  };
+
+  const onMapEmptyArray = () => {
+    dispatch(addArrayMapping({ source: "", target: isRootPrimArray ? "" : node.path, alias: "item", mappings: [], primitiveItems: [], isRootOutput: isRootPrimArray || undefined }));
+  };
+
+  const onClearEmptyArray = () => {
+    if (primAmId) dispatch(removeArrayMapping(primAmId));
+  };
+
+  return {
+    panelOpen,
+    setPanelOpen,
+    ref,
+    mappedCount,
+    saveItem,
+    onMapEmptyArray,
+    onClearEmptyArray,
+  };
+}
diff --git a/SW.Bitween.Web/ClientApp/src/components/mapper/SourceTree.tsx b/SW.Bitween.Web/ClientApp/src/components/mapper/SourceTree.tsx
new file mode 100644
index 00000000..a4982829
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/mapper/SourceTree.tsx
@@ -0,0 +1,209 @@
+import type React from "react";
+import { useCallback } from "react";
+import { flattenLeafPaths } from "../../lib/mapping/mappingPreview";
+import type { TreeNode } from "../../lib/mapping/mappingPreview";
+import {
+  useMappingEditorDispatch,
+  useMappingEditorState,
+  addFieldMapping,
+  setHoveredPath,
+  toggleNodeCollapsed,
+} from "../../lib/mapping/MappingEditorContext";
+
+// ─── Types ────────────────────────────────────────────────────────────────────
+
+interface SourceTreeProps {
+  nodes: TreeNode[];
+  /** Called when a leaf is clicked or dragged onto an awaiting target */
+  onLeafRef?: (path: string, el: HTMLElement | null) => void;
+}
+
+interface LeafProps {
+  node: TreeNode;
+  isAssigned: boolean;
+  isHovered: boolean;
+  isSearchMatch: boolean;
+  onLeafRef?: (path: string, el: HTMLElement | null) => void;
+}
+
+interface BranchProps {
+  node: TreeNode;
+  depth?: number;
+  assignedPaths: Set<string>;
+  search: string;
+  onLeafRef?: (path: string, el: HTMLElement | null) => void;
+}
+
+// ─── SourceLeaf ───────────────────────────────────────────────────────────────
+
+const SourceLeaf: React.FC<LeafProps> = ({ node, isAssigned, isHovered, isSearchMatch, onLeafRef }) => {
+  const dispatch = useMappingEditorDispatch();
+  const { selectedMappingId: selectedId } = useMappingEditorState();
+
+  const ref = useCallback(
+    (el: HTMLElement | null) => {
+      onLeafRef?.(node.path, el);
+    },
+    [node.path, onLeafRef]
+  );
+
+  const handleDragStart = (e: React.DragEvent) => {
+    e.dataTransfer.setData('text/plain', node.path);
+    e.dataTransfer.effectAllowed = 'link';
+  };
+
+  const handleClick = (e: React.MouseEvent) => {
+    e.stopPropagation();
+    // If a target field is selected, assign this source to it
+    if (selectedId) {
+      dispatch(
+        addFieldMapping({
+          source: node.path,
+          target: '', // will be set by the output tree handler
+        })
+      );
+    }
+  };
+
+  return (
+    <div
+      ref={ref}
+      draggable
+      onDragStart={handleDragStart}
+      onMouseEnter={() => dispatch(setHoveredPath(node.path))}
+      onMouseLeave={() => dispatch(setHoveredPath(null))}
+      onClick={handleClick}
+      title={`${node.path}${node.value !== undefined ? ` = ${JSON.stringify(node.value)}` : ''}`}
+      className={[
+        'flex items-center gap-1.5 px-2 py-[3px] rounded text-xs font-mono cursor-grab select-none transition-colors',
+        isHovered ? 'bg-crimson-50 text-crimson-700' : '',
+        isAssigned ? 'text-ok-600' : 'text-ink-700',
+        isSearchMatch ? 'bg-warn-100 ring-1 ring-warn-100' : '',
+        'hover:bg-crimson-50',
+      ]
+        .filter(Boolean)
+        .join(' ')}
+    >
+      <span
+        className={[
+          'w-2 h-2 rounded-full flex-shrink-0',
+          isAssigned ? 'bg-ok-100' : 'bg-ink-300',
+        ].join(' ')}
+      />
+      <span className="truncate">{node.key}</span>
+      {node.value !== undefined && (
+        <span className="ml-auto text-ink-400 truncate max-w-[80px]">
+          {String(node.value).substring(0, 20)}
+        </span>
+      )}
+    </div>
+  );
+};
+
+// ─── SourceBranch ─────────────────────────────────────────────────────────────
+
+const SourceBranch: React.FC<BranchProps> = ({ node, depth = 0, assignedPaths, search, onLeafRef }) => {
+  const dispatch = useMappingEditorDispatch();
+  const { collapsedNodes } = useMappingEditorState();
+  const collapsed = collapsedNodes.includes(node.path);
+  const isOpen = !collapsed;
+
+  const leaves = flattenLeafPaths(node);
+  const assignedCount = leaves.filter((p) => assignedPaths.has(p)).length;
+
+  return (
+    <div>
+      <button
+        onClick={() => dispatch(toggleNodeCollapsed(node.path))}
+        className="flex items-center gap-1 w-full text-left px-2 py-[3px] rounded hover:bg-ink-100 transition-colors group"
+      >
+        <span className="text-ink-400 text-xs w-3 flex-shrink-0">{isOpen ? '▾' : '▸'}</span>
+        <span className="text-xs font-medium text-ink-700 font-mono truncate">{node.key}</span>
+        {node.type === 'array' && (
+          <span className="text-xs text-crimson-500 font-mono ml-0.5">[{node.itemCount ?? '*'}]</span>
+        )}
+        {node.type === 'object' && (
+          <span className="text-xs text-ink-400 font-mono ml-0.5">{'{}'}</span>
+        )}
+        <span
+          className={[
+            'ml-auto text-xs',
+            assignedCount === leaves.length && leaves.length > 0
+              ? 'text-ok-600'
+              : 'text-ink-400',
+          ].join(' ')}
+        >
+          {assignedCount}/{leaves.length}
+        </span>
+      </button>
+      {isOpen && (
+        <div className={`pl-3 border-l border-ink-100 ${depth > 0 ? 'ml-3' : 'ml-3'}`}>
+          {node.children.map((child) =>
+            child.type === 'leaf' ? (
+              <SourceLeaf
+                key={child.path}
+                node={child}
+                isAssigned={assignedPaths.has(child.path)}
+                isHovered={false}
+                isSearchMatch={Boolean(search && child.key.toLowerCase().includes(search.toLowerCase()))}
+                onLeafRef={onLeafRef}
+              />
+            ) : (
+              <SourceBranch
+                key={child.path}
+                node={child}
+                depth={depth + 1}
+                assignedPaths={assignedPaths}
+                search={search}
+                onLeafRef={onLeafRef}
+              />
+            )
+          )}
+        </div>
+      )}
+    </div>
+  );
+};
+
+// ─── SourceTree ───────────────────────────────────────────────────────────────
+
+const SourceTree: React.FC<SourceTreeProps> = ({ nodes, onLeafRef }) => {
+  const { searchInput: search, fieldMappings } = useMappingEditorState();
+  const assignedPaths = new Set(fieldMappings.map((m) => m.source).filter(Boolean));
+
+  if (nodes.length === 0) {
+    return (
+      <div className="flex flex-col items-center justify-center h-full text-center px-4">
+        <div className="text-3xl mb-2 text-ink-300">{'{ }'}</div>
+        <p className="text-xs text-ink-400">Paste source JSON above to see fields</p>
+      </div>
+    );
+  }
+
+  return (
+    <div className="px-2 py-1 space-y-0.5">
+      {nodes.map((node) =>
+        node.type === 'leaf' ? (
+          <SourceLeaf
+            key={node.path}
+            node={node}
+            isAssigned={assignedPaths.has(node.path)}
+            isHovered={false}
+            isSearchMatch={Boolean(search && node.key.toLowerCase().includes(search.toLowerCase()))}
+            onLeafRef={onLeafRef}
+          />
+        ) : (
+          <SourceBranch
+            key={node.path}
+            node={node}
+            assignedPaths={assignedPaths}
+            search={search}
+            onLeafRef={onLeafRef}
+          />
+        )
+      )}
+    </div>
+  );
+};
+
+export default SourceTree;
diff --git a/SW.Bitween.Web/ClientApp/src/components/mapper/data.ts b/SW.Bitween.Web/ClientApp/src/components/mapper/data.ts
new file mode 100644
index 00000000..83d98e86
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/mapper/data.ts
@@ -0,0 +1,35 @@
+import { useMemo } from "react";
+import { useQuery } from "@tanstack/react-query";
+import { api, type GlobalValuesSetRow } from "../../api";
+import type { KeyValuePair } from "../../lib/mapping/types";
+import type { ValuesSetMap } from "../../lib/mapping/scribanGenerator";
+
+/** Boundary adapters: the prototype persists mapperProperties as Record<string,string>,
+ *  while the verbatim mapping reducer/generator speak the legacy KeyValuePair[] shape. */
+export const recordToKvps = (rec: Record<string, string>): KeyValuePair[] =>
+  Object.entries(rec).map(([key, value]) => ({ key, value }));
+
+export const kvpsToRecord = (kvps: KeyValuePair[]): Record<string, string> =>
+  Object.fromEntries(kvps.map((p) => [p.key, p.value]));
+
+/**
+ * Prototype-native replacements for the legacy RTK data hooks the mapping editor
+ * used (`useGlobalAdapterValuesSetsQuery`, `useValuesSetMap`). The legacy
+ * `GlobalAdapterValuesSetModel` was `{ id, name, values }` — a structural subset
+ * of the prototype's `GlobalValuesSetRow`, so consumers are unchanged apart from
+ * the source of the data.
+ */
+export function useGlobalSets(): GlobalValuesSetRow[] {
+  const { data } = useQuery({ queryKey: ["value-sets"], queryFn: () => api.listValueSets() });
+  return data ?? [];
+}
+
+/** Flat lookup map consumed by the Scriban generator (template gen on save + preview). */
+export function useValuesSetMap(): ValuesSetMap {
+  const sets = useGlobalSets();
+  return useMemo(() => {
+    const map: ValuesSetMap = {};
+    for (const s of sets) map[s.id] = s.values;
+    return map;
+  }, [sets]);
+}
diff --git a/SW.Bitween.Web/ClientApp/src/components/mapper/useKeyboardShortcuts.ts b/SW.Bitween.Web/ClientApp/src/components/mapper/useKeyboardShortcuts.ts
new file mode 100644
index 00000000..04f583fe
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/mapper/useKeyboardShortcuts.ts
@@ -0,0 +1,28 @@
+import { useEffect } from "react";
+import { useMappingEditorDispatch, redo, undo } from "../../lib/mapping/MappingEditorContext";
+
+// Registers Ctrl/Cmd+Z (undo), Ctrl/Cmd+Y / Ctrl/Cmd+Shift+Z (redo),
+// and Ctrl/Cmd+S (save) global keyboard shortcuts.
+// Re-registers whenever onSave changes (i.e. when its deps like fieldMappings change).
+export function useKeyboardShortcuts(onSave: () => void): void {
+  const dispatch = useMappingEditorDispatch();
+
+  useEffect(() => {
+    const handler = (e: KeyboardEvent) => {
+      if ((e.ctrlKey || e.metaKey) && e.key === "z" && !e.shiftKey) {
+        e.preventDefault();
+        dispatch(undo());
+      }
+      if ((e.ctrlKey || e.metaKey) && (e.key === "y" || (e.key === "z" && e.shiftKey))) {
+        e.preventDefault();
+        dispatch(redo());
+      }
+      if ((e.ctrlKey || e.metaKey) && e.key === "s") {
+        e.preventDefault();
+        onSave();
+      }
+    };
+    window.addEventListener("keydown", handler);
+    return () => window.removeEventListener("keydown", handler);
+  }, [onSave]);
+}
diff --git a/SW.Bitween.Web/ClientApp/src/components/mapper/useMappingEditorLoader.ts b/SW.Bitween.Web/ClientApp/src/components/mapper/useMappingEditorLoader.ts
new file mode 100644
index 00000000..97ffaadb
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/mapper/useMappingEditorLoader.ts
@@ -0,0 +1,42 @@
+import { useEffect, useRef, useState } from "react";
+import { useQuery } from "@tanstack/react-query";
+import { api } from "../../api";
+import {
+  useMappingEditorDispatch,
+  loadEditorContext,
+} from "../../lib/mapping/MappingEditorContext";
+import { recordToKvps } from "./data";
+
+// Handles the two data-loading effects: clear-on-id-change and populate-on-data-arrive.
+// Fully self-contained — callers get no return value.
+export function useMappingEditorLoader(subscriptionId: number): void {
+  const dispatch = useMappingEditorDispatch();
+  const { data: subscriptionData } = useQuery({
+    queryKey: ["integration", subscriptionId],
+    queryFn: () => api.getIntegration(subscriptionId),
+    enabled: !!subscriptionId,
+  });
+  const [, setLoadedForId] = useState<number | null>(null);
+  const pendingIdRef = useRef<number | null>(null);
+
+  // Clear editor state immediately when subscription changes
+  useEffect(() => {
+    pendingIdRef.current = subscriptionId || null;
+    dispatch(loadEditorContext({ subscriptionId: subscriptionId || 0, mapperProperties: [] }));
+    setLoadedForId(null);
+  }, [subscriptionId]);
+
+  // Populate state once the correct data arrives
+  useEffect(() => {
+    if (!subscriptionData || !pendingIdRef.current) return;
+    if (pendingIdRef.current !== subscriptionId) return;
+    dispatch(
+      loadEditorContext({
+        subscriptionId,
+        mapperId: subscriptionData.mapperId,
+        mapperProperties: recordToKvps(subscriptionData.mapperProperties),
+      })
+    );
+    setLoadedForId(subscriptionId);
+  }, [subscriptionData]);
+}
diff --git a/SW.Bitween.Web/ClientApp/src/components/mapper/useSave.ts b/SW.Bitween.Web/ClientApp/src/components/mapper/useSave.ts
new file mode 100644
index 00000000..63117a16
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/mapper/useSave.ts
@@ -0,0 +1,160 @@
+import { useCallback, useState } from "react";
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { api } from "../../api";
+import {
+  useMappingEditorDispatch,
+  useMappingEditorState,
+  setArrayMappings,
+  setFieldMappings,
+  setMode,
+  setValidationErrors,
+  syncManualTemplate,
+} from "../../lib/mapping/MappingEditorContext";
+import { NATIVE_JSON_MAPPER_ID, type ValidationError, type KeyValuePair } from "../../lib/mapping/types";
+import { generateScriban, parseScriban, resolveParentArrayIds } from "../../lib/mapping/scribanGenerator";
+import { kvpsToRecord, useValuesSetMap } from "./data";
+
+// ─── Return type ──────────────────────────────────────────────────────────────
+
+export interface UseSaveResult {
+  isSaving: boolean;
+  saveSuccess: boolean;
+  handleValidate: () => void;
+  handleSave: () => Promise<void>;
+  handleModeChange: (newMode: "visual" | "manual") => void;
+}
+
+// ─── Hook ─────────────────────────────────────────────────────────────────────
+
+export function useSave(subscriptionId: number): UseSaveResult {
+  const dispatch = useMappingEditorDispatch();
+  const queryClient = useQueryClient();
+  const {
+    mode,
+    fieldMappings,
+    arrayMappings,
+    inputJson,
+    outputJson,
+    manualTemplate,
+    isManualDirty,
+    selectedPartnerId,
+  } = useMappingEditorState();
+  const saveMapper = useMutation({
+    mutationFn: (props: KeyValuePair[]) =>
+      api.updateIntegration(subscriptionId, {
+        mapperId: NATIVE_JSON_MAPPER_ID,
+        mapperProperties: kvpsToRecord(props),
+      }),
+    onSuccess: () => queryClient.invalidateQueries({ queryKey: ["integration", subscriptionId] }),
+  });
+  const isSaving = saveMapper.isPending;
+  const [saveSuccess, setSaveSuccess] = useState(false);
+  const valuesSetMap = useValuesSetMap();
+
+  // ── Validate ───────────────────────────────────────────────────────────────
+
+  const handleValidate = useCallback(() => {
+    const errors: ValidationError[] = [];
+    for (const m of fieldMappings) {
+      if (!m.target.trim()) {
+        errors.push({ type: "error", message: `Mapping has no target field`, path: m.id });
+      }
+      if (!m.source && m.fixedValue === undefined && !m.partnerPropKey && !(m.globalSetId && m.globalKey)) {
+        errors.push({
+          type: "warning",
+          message: `"${m.target}" has no assigned source, fixed value, partner property, or global variable`,
+          path: m.target,
+        });
+      }
+    }
+    for (const am of arrayMappings) {
+      if (!am.source && !am.fixedItems?.length && am.primitiveItems == null)
+        errors.push({ type: "error", message: `Array mapping missing source path` });
+      if (!am.target && !am.isRootOutput)
+        errors.push({ type: "error", message: `Array mapping missing target path` });
+      if (am.mappings.length === 0 && !am.fixedItems?.length && am.primitiveItems == null) {
+        const label = am.isRootOutput ? `root array (${am.source})` : `${am.source} → ${am.target}`;
+        errors.push({
+          type: "warning",
+          message: `Array mapping "${label}" has no field mappings`,
+        });
+      }
+    }
+    dispatch(setValidationErrors(errors));
+  }, [fieldMappings, arrayMappings, dispatch]);
+
+  // ── Persist ────────────────────────────────────────────────────────────────
+
+  const persistSave = useCallback(async () => {
+    const templateToSave =
+      mode === "manual" && manualTemplate
+        ? manualTemplate
+        : generateScriban(fieldMappings, arrayMappings, valuesSetMap, outputJson, inputJson);
+
+    const mapperProperties: KeyValuePair[] = [
+      { key: "ScribanTemplate", value: templateToSave },
+    ];
+    if (arrayMappings.length > 0) {
+      mapperProperties.push({ key: "ArrayRules", value: JSON.stringify(arrayMappings) });
+    }
+    if (inputJson.trim()) {
+      mapperProperties.push({ key: "SourceJson", value: inputJson });
+    }
+    if (outputJson.trim()) {
+      mapperProperties.push({ key: "TargetJson", value: outputJson });
+    }
+    if (selectedPartnerId != null) {
+      mapperProperties.push({ key: "PartnerId", value: String(selectedPartnerId) });
+    }
+
+    await saveMapper.mutateAsync(mapperProperties);
+    setSaveSuccess(true);
+    setTimeout(() => setSaveSuccess(false), 2000);
+  }, [
+    mode,
+    manualTemplate,
+    fieldMappings,
+    arrayMappings,
+    valuesSetMap,
+    outputJson,
+    inputJson,
+    selectedPartnerId,
+    saveMapper,
+  ]);
+
+  const handleSave = useCallback(async () => {
+    handleValidate();
+    await persistSave();
+  }, [handleValidate, persistSave]);
+
+  // ── Mode change (syncs Manual ↔ Visual template) ───────────────────────────
+
+  const handleModeChange = useCallback(
+    (newMode: "visual" | "manual") => {
+      if (mode === "manual" && newMode !== "manual" && isManualDirty && manualTemplate) {
+        const parsed = parseScriban(manualTemplate);
+        dispatch(
+          setFieldMappings(
+            parsed.fieldMappings.map((m, i) => ({ id: `parsed-${i}-${Date.now()}`, ...m }))
+          )
+        );
+        const now = Date.now();
+        const rawAMs = parsed.arrayMappings.map((am, i) => ({
+          id: `parsed-am-${i}-${now}`,
+          ...am,
+          mappings: am.mappings.map((m, j) => ({
+            id: `parsed-am-${i}-${j}-${now}`,
+            ...m,
+          })),
+        }));
+        dispatch(setArrayMappings(resolveParentArrayIds(rawAMs)));
+      } else if (newMode === "manual") {
+        dispatch(syncManualTemplate(generateScriban(fieldMappings, arrayMappings, valuesSetMap, outputJson)));
+      }
+      dispatch(setMode(newMode));
+    },
+    [mode, isManualDirty, manualTemplate, fieldMappings, arrayMappings, valuesSetMap, dispatch]
+  );
+
+  return { isSaving, saveSuccess, handleValidate, handleSave, handleModeChange };
+}
diff --git a/SW.Bitween.Web/ClientApp/src/components/ui/Avatar.tsx b/SW.Bitween.Web/ClientApp/src/components/ui/Avatar.tsx
new file mode 100644
index 00000000..6a818bc0
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/ui/Avatar.tsx
@@ -0,0 +1,45 @@
+const TONES = [
+  "bg-crimson-100 text-crimson-800",
+  "bg-ink-100 text-ink-700",
+  "bg-warn-100 text-warn-700",
+  "bg-ok-100 text-ok-600",
+  "bg-crimson-600 text-white",
+  "bg-ink-800 text-ink-100",
+];
+
+const initialsOf = (name: string) =>
+  name
+    .split(/[\s@._-]+/)
+    .filter(Boolean)
+    .slice(0, 2)
+    .map((part) => part[0]!.toUpperCase())
+    .join("");
+
+const toneOf = (key: string) => {
+  let hash = 0;
+  for (const ch of key) hash = (hash * 31 + ch.charCodeAt(0)) | 0;
+  return TONES[Math.abs(hash) % TONES.length];
+};
+
+export function Avatar({
+  name,
+  size = "md",
+  dimmed = false,
+}: {
+  name: string;
+  size?: "sm" | "md" | "lg";
+  dimmed?: boolean;
+}) {
+  const sizeClass =
+    size === "sm" ? "size-7 text-[11px]" : size === "lg" ? "size-14 text-lg" : "size-9 text-[13px]";
+  return (
+    <span
+      aria-hidden
+      className={`inline-flex shrink-0 items-center justify-center rounded-full font-semibold ${sizeClass} ${
+        dimmed ? "bg-ink-100 text-ink-400" : toneOf(name)
+      }`}
+    >
+      {initialsOf(name)}
+    </span>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/components/ui/CopyField.tsx b/SW.Bitween.Web/ClientApp/src/components/ui/CopyField.tsx
new file mode 100644
index 00000000..d5ef2b92
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/ui/CopyField.tsx
@@ -0,0 +1,29 @@
+import { useState } from "react";
+import { Check, Copy } from "lucide-react";
+
+/** A read-only mono value with a copy button — invite links, reset links. */
+export function CopyField({ value, label }: { value: string; label?: string }) {
+  const [copied, setCopied] = useState(false);
+
+  const copy = async () => {
+    await navigator.clipboard.writeText(value);
+    setCopied(true);
+    setTimeout(() => setCopied(false), 1600);
+  };
+
+  return (
+    <div>
+      {label && <p className="mb-1 text-[13px] font-medium text-ink-700">{label}</p>}
+      <div className="flex items-center gap-1.5 rounded-lg border border-ink-200 bg-ink-50 py-1.5 pr-1.5 pl-3">
+        <code className="min-w-0 flex-1 truncate font-mono text-xs text-ink-700">{value}</code>
+        <button
+          onClick={copy}
+          className="flex h-7 shrink-0 items-center gap-1 rounded-md bg-white px-2 text-xs font-medium text-ink-700 shadow-sm ring-1 ring-ink-200 hover:bg-ink-50"
+        >
+          {copied ? <Check className="size-3.5 text-ok-600" /> : <Copy className="size-3.5" />}
+          {copied ? "Copied" : "Copy"}
+        </button>
+      </div>
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/components/ui/KeyValueEditor.tsx b/SW.Bitween.Web/ClientApp/src/components/ui/KeyValueEditor.tsx
new file mode 100644
index 00000000..06a55b14
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/ui/KeyValueEditor.tsx
@@ -0,0 +1,249 @@
+import { Fragment, useState, type ReactNode } from "react";
+import { Check, ChevronDown, ChevronRight, Copy, Plus, Trash2 } from "lucide-react";
+import { Button } from "./basics";
+
+export interface KvRow {
+  key: string;
+  value: string;
+}
+
+const cellInput =
+  "h-8.5 w-full rounded-md border border-ink-200 bg-white px-2.5 text-sm text-ink-900 placeholder:text-ink-400 focus:border-crimson-400 focus:ring-2 focus:ring-crimson-100 focus:outline-none disabled:border-transparent disabled:bg-transparent disabled:px-0";
+
+/** Shared metrics so the textarea and its invisible sizing ghost stay identical. */
+const growBox = "border px-2.5 py-1.5 text-sm leading-5 break-words whitespace-pre-wrap";
+
+/**
+ * A value box that starts one line tall and grows with its content.
+ * An invisible ghost with the same text sits in the same grid cell,
+ * so the textarea auto-sizes without any JS measuring.
+ */
+function GrowingValueInput({
+  value,
+  disabled,
+  placeholder,
+  ariaLabel,
+  onChange,
+}: {
+  value: string;
+  disabled: boolean;
+  placeholder?: string;
+  ariaLabel: string;
+  onChange: (value: string) => void;
+}) {
+  return (
+    <div className="grid grid-cols-[minmax(0,1fr)]">
+      <textarea
+        rows={1}
+        value={value}
+        disabled={disabled}
+        placeholder={placeholder}
+        onChange={(e) => onChange(e.target.value)}
+        aria-label={ariaLabel}
+        className={`${growBox} [grid-area:1/1] w-full resize-none overflow-hidden rounded-md border-ink-200 bg-white text-ink-900 placeholder:text-ink-400 focus:border-crimson-400 focus:ring-2 focus:ring-crimson-100 focus:outline-none disabled:border-transparent disabled:bg-transparent disabled:px-0`}
+      />
+      <span aria-hidden className={`${growBox} [grid-area:1/1] invisible border-transparent ${disabled ? "px-0" : ""}`}>
+        {value || placeholder || " "}{" "}
+      </span>
+    </div>
+  );
+}
+
+/**
+ * The runtime reference token, click-to-copy. Wraps instead of truncating —
+ * a cut-off token is useless since it can't be pasted correctly.
+ */
+function ReferenceToken({ token }: { token: string }) {
+  const [copied, setCopied] = useState(false);
+
+  const copy = async () => {
+    await navigator.clipboard.writeText(token);
+    setCopied(true);
+    setTimeout(() => setCopied(false), 1400);
+  };
+
+  return (
+    <button
+      type="button"
+      onClick={copy}
+      title="Copy reference"
+      className="group flex w-full items-start gap-1.5 rounded-md py-1 pr-1 text-left hover:bg-ink-100"
+    >
+      <code className="min-w-0 flex-1 font-mono text-xs break-all text-ink-500 group-hover:text-ink-700">
+        {token}
+      </code>
+      {copied ? (
+        <Check className="mt-0.5 size-3 shrink-0 text-ok-600" aria-hidden />
+      ) : (
+        <Copy className="mt-0.5 size-3 shrink-0 text-ink-300 group-hover:text-ink-500" aria-hidden />
+      )}
+    </button>
+  );
+}
+
+/**
+ * Inline key-value table used for partner properties, value sets and
+ * promoted properties. Fully controlled: the parent owns the draft rows
+ * and decides when to save. `token` renders the runtime reference for a
+ * row (e.g. {{partner.KEY}}); `rowDetails` adds a collapsible drawer per
+ * row (e.g. "where is this used?").
+ */
+export function KeyValueEditor({
+  rows,
+  onChange,
+  keyLabel,
+  valueLabel,
+  keyPlaceholder,
+  valuePlaceholder,
+  editable,
+  token,
+  emptyText,
+  keyWidthClass = "w-40 sm:w-48 lg:w-56",
+  valueWidthClass = "w-56 sm:w-72 lg:w-96",
+  rowDetails,
+}: {
+  rows: KvRow[];
+  onChange: (rows: KvRow[]) => void;
+  keyLabel: string;
+  valueLabel: string;
+  keyPlaceholder?: string;
+  valuePlaceholder?: string;
+  editable: boolean;
+  token?: (row: KvRow) => string;
+  emptyText: string;
+  /** Fixed (not percentage) column widths — comfortable at rest, shrinks at narrower breakpoints. */
+  keyWidthClass?: string;
+  valueWidthClass?: string;
+  rowDetails?: (row: KvRow) => ReactNode | null;
+}) {
+  const [focusLast, setFocusLast] = useState(false);
+  const [expanded, setExpanded] = useState<Set<number>>(new Set());
+
+  const update = (index: number, patch: Partial<KvRow>) =>
+    onChange(rows.map((r, i) => (i === index ? { ...r, ...patch } : r)));
+
+  const add = () => {
+    onChange([...rows, { key: "", value: "" }]);
+    setFocusLast(true);
+  };
+
+  const toggleExpanded = (index: number) =>
+    setExpanded((prev) => {
+      const next = new Set(prev);
+      if (next.has(index)) next.delete(index);
+      else next.add(index);
+      return next;
+    });
+
+  const remove = (index: number) => {
+    onChange(rows.filter((_, x) => x !== index));
+    setExpanded(new Set());
+  };
+
+  if (rows.length === 0 && !editable) {
+    return <p className="text-sm text-ink-500">{emptyText}</p>;
+  }
+
+  const columns = 2 + (rowDetails ? 1 : 0) + (token ? 1 : 0) + (editable ? 1 : 0);
+
+  return (
+    <div>
+      {rows.length > 0 && (
+        <table className="table-fixed text-sm">
+          <thead>
+            <tr className="text-left text-xs text-ink-500">
+              {rowDetails && <th className="w-7 pb-1.5" />}
+              <th className={`${keyWidthClass} pb-1.5 pr-3 font-medium`}>{keyLabel}</th>
+              <th className={`${valueWidthClass} pb-1.5 pr-3 font-medium`}>{valueLabel}</th>
+              {token && <th className="hidden w-56 pb-1.5 pr-3 font-medium xl:table-cell">Reference</th>}
+              {editable && <th className="w-8 pb-1.5" />}
+            </tr>
+          </thead>
+          <tbody>
+            {rows.map((row, i) => (
+              <Fragment key={i}>
+                <tr className="align-top">
+                  {rowDetails && (
+                    <td className="pt-2 pb-1 pr-1">
+                      {rowDetails(row) !== null && (
+                        <button
+                          onClick={() => toggleExpanded(i)}
+                          aria-expanded={expanded.has(i)}
+                          aria-label={`Details for ${row.key || "row"}`}
+                          className="rounded-md p-1 text-ink-400 hover:bg-ink-100 hover:text-ink-700"
+                        >
+                          {expanded.has(i) ? (
+                            <ChevronDown className="size-3.5" />
+                          ) : (
+                            <ChevronRight className="size-3.5" />
+                          )}
+                        </button>
+                      )}
+                    </td>
+                  )}
+                  <td className="py-1 pr-3">
+                    <input
+                      value={row.key}
+                      disabled={!editable}
+                      placeholder={keyPlaceholder}
+                      autoFocus={focusLast && i === rows.length - 1}
+                      onChange={(e) => update(i, { key: e.target.value })}
+                      aria-label={`${keyLabel} ${i + 1}`}
+                      className={`${cellInput} font-medium`}
+                    />
+                  </td>
+                  <td className="py-1 pr-3">
+                    <GrowingValueInput
+                      value={row.value}
+                      disabled={!editable}
+                      placeholder={valuePlaceholder}
+                      onChange={(value) => update(i, { value })}
+                      ariaLabel={`${valueLabel} ${i + 1}`}
+                    />
+                  </td>
+                  {token && (
+                    <td className="hidden pt-1.5 pb-1 pr-3 xl:table-cell">
+                      {row.key.trim() && <ReferenceToken token={token(row)} />}
+                    </td>
+                  )}
+                  {editable && (
+                    <td className="pt-1.5 pb-1">
+                      <button
+                        onClick={() => remove(i)}
+                        aria-label={`Remove ${row.key || "row"}`}
+                        className="rounded-md p-1.5 text-ink-400 hover:bg-danger-50 hover:text-danger-700"
+                      >
+                        <Trash2 className="size-3.5" />
+                      </button>
+                    </td>
+                  )}
+                </tr>
+                {rowDetails && expanded.has(i) && (
+                  <tr>
+                    <td />
+                    <td colSpan={columns - 1} className="pt-0.5 pb-2">
+                      <div className="rounded-lg bg-ink-50 px-3 py-2.5">{rowDetails(row)}</div>
+                    </td>
+                  </tr>
+                )}
+              </Fragment>
+            ))}
+          </tbody>
+        </table>
+      )}
+      {rows.length === 0 && <p className="pb-2 text-sm text-ink-500">{emptyText}</p>}
+      {editable && (
+        <Button size="sm" onClick={add} className="mt-1.5">
+          <Plus className="size-3.5" /> Add {keyLabel.toLowerCase()}
+        </Button>
+      )}
+    </div>
+  );
+}
+
+/** Record<string,string> ⇄ ordered rows helpers. */
+export const toRows = (record: Record<string, string>): KvRow[] =>
+  Object.entries(record).map(([key, value]) => ({ key, value }));
+
+export const toRecord = (rows: KvRow[]): Record<string, string> =>
+  Object.fromEntries(rows.filter((r) => r.key.trim()).map((r) => [r.key.trim(), r.value]));
diff --git a/SW.Bitween.Web/ClientApp/src/components/ui/Panel.tsx b/SW.Bitween.Web/ClientApp/src/components/ui/Panel.tsx
new file mode 100644
index 00000000..23b42dfe
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/ui/Panel.tsx
@@ -0,0 +1,111 @@
+import type { ReactNode } from "react";
+import { Button, FormError } from "./basics";
+
+/** A titled card section on a hub page, with optional header action. */
+export function Panel({
+  title,
+  description,
+  action,
+  children,
+  className = "",
+}: {
+  title: string;
+  description?: string;
+  action?: ReactNode;
+  children: ReactNode;
+  className?: string;
+}) {
+  return (
+    <section className={`rounded-xl border border-ink-200 bg-white ${className}`}>
+      <div className="flex items-start justify-between gap-3 px-5 pt-4 pb-3">
+        <div>
+          <h2 className="text-[15px] font-semibold text-ink-900">{title}</h2>
+          {description && <p className="mt-0.5 text-[13px] text-ink-500">{description}</p>}
+        </div>
+        {action}
+      </div>
+      <div className="px-5 pb-5">{children}</div>
+    </section>
+  );
+}
+
+/**
+ * A page-title name, editable in place. Looks like plain heading text at
+ * rest; hovering reveals it's a field, focusing turns it into one. Used
+ * instead of a "Details" panel that would otherwise hold nothing but a
+ * Name input, padded out to a full-width card for no reason.
+ */
+export function EditableTitle({
+  value,
+  onChange,
+  disabled,
+  placeholder,
+}: {
+  value: string;
+  onChange: (value: string) => void;
+  disabled?: boolean;
+  placeholder?: string;
+}) {
+  if (disabled) return <span>{value}</span>;
+  return (
+    <input
+      value={value}
+      onChange={(e) => onChange(e.target.value)}
+      placeholder={placeholder}
+      aria-label="Name"
+      className="-mx-1.5 w-72 max-w-full rounded-md border border-transparent bg-transparent px-1.5 py-0.5 text-[22px] font-semibold tracking-tight text-ink-900 placeholder:text-ink-300 hover:border-ink-200 hover:bg-ink-50 focus:border-crimson-400 focus:bg-white focus:ring-2 focus:ring-crimson-100 focus:outline-none"
+    />
+  );
+}
+
+/** UPPER_SNAKE identity chip, e.g. PURCHASE_ORDER. Code is optional — falls back to `name` when unset. */
+export function CodeBadge({
+  code,
+  name,
+  className = "",
+}: {
+  code?: string;
+  name?: string;
+  className?: string;
+}) {
+  const text = code || name;
+  if (!text) return null;
+  return (
+    <code
+      className={`inline-block rounded-md bg-ink-800 px-1.5 py-0.5 font-mono text-[11px] font-medium text-ink-100 ${className}`}
+    >
+      {text}
+    </code>
+  );
+}
+
+/** Sticky bottom bar shown while a detail page has unsaved edits. */
+export function UnsavedBar({
+  error,
+  busy,
+  onSave,
+  onDiscard,
+}: {
+  error?: string;
+  busy: boolean;
+  onSave: () => void;
+  onDiscard: () => void;
+}) {
+  return (
+    <div className="fixed inset-x-0 bottom-0 z-30 border-t border-ink-200 bg-white/95 backdrop-blur lg:left-62">
+      {/* right padding keeps the fixed demo pill clear of the save button */}
+      <div className="mx-auto flex max-w-350 items-center justify-between gap-3 py-3 pr-40 pl-4 sm:pl-8">
+        <div className="min-w-0">
+          <p className="truncate text-sm font-medium text-ink-800">Unsaved changes</p>
+          <FormError>{error}</FormError>
+        </div>
+        <div className="flex shrink-0 gap-2">
+          <Button onClick={onDiscard}>Discard</Button>
+          <Button variant="primary" busy={busy} onClick={onSave}>
+            Save changes
+          </Button>
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/components/ui/ReturnBanner.tsx b/SW.Bitween.Web/ClientApp/src/components/ui/ReturnBanner.tsx
new file mode 100644
index 00000000..08f00665
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/ui/ReturnBanner.tsx
@@ -0,0 +1,28 @@
+import { useNavigate, useSearchParams } from "react-router";
+import { ArrowRight } from "lucide-react";
+import { continueUrl, useReturnContext } from "../../lib/returnTo";
+import { Button } from "./basics";
+
+/**
+ * Shown at the top of entity pages reached as a detour from a flow
+ * (creating or editing a dependency). Continuing returns to the flow,
+ * reporting what was just created via the `picked` param.
+ */
+export function ReturnBanner() {
+  const ctx = useReturnContext();
+  const navigate = useNavigate();
+  const [params] = useSearchParams();
+  if (!ctx) return null;
+  const picked = params.get("picked") ?? undefined;
+
+  return (
+    <div className="mb-4 flex flex-wrap items-center justify-between gap-3 rounded-xl border border-crimson-200 bg-crimson-50/60 px-4 py-2.5">
+      <p className="min-w-0 text-sm text-ink-700">
+        In progress: <strong className="font-medium text-ink-900">{ctx.label}</strong>
+      </p>
+      <Button size="sm" variant="primary" onClick={() => navigate(continueUrl(ctx, picked))}>
+        Continue <ArrowRight className="size-3.5" />
+      </Button>
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/components/ui/SearchSelect.tsx b/SW.Bitween.Web/ClientApp/src/components/ui/SearchSelect.tsx
new file mode 100644
index 00000000..4e44968c
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/ui/SearchSelect.tsx
@@ -0,0 +1,117 @@
+import { useMemo, useState, type ReactNode } from "react";
+import { Combobox, ComboboxButton, ComboboxInput, ComboboxOption, ComboboxOptions } from "@headlessui/react";
+import { Check, ChevronsUpDown } from "lucide-react";
+
+export interface SearchSelectOption {
+  value: string;
+  label: string;
+  /** Extra text search also matches (an information-type code, an id…). */
+  code?: string;
+  /** Muted right-aligned text on the option row. */
+  hint?: string;
+  /** Fully custom option row; label/code/hint rendering is skipped. */
+  render?: ReactNode;
+}
+
+/**
+ * A searchable dropdown (Headless UI combobox) for entity pickers —
+ * anything whose option list grows with data. Typing filters in memory
+ * across label + code; rows can carry hints or fully custom rendering.
+ * Small fixed enums should keep using the native `Select`.
+ */
+export function SearchSelect({
+  value,
+  onChange,
+  options,
+  placeholder = "Pick…",
+  clearLabel,
+  disabled = false,
+  size = "md",
+  id,
+  "aria-label": ariaLabel,
+}: {
+  /** "" = nothing selected. */
+  value: string;
+  onChange: (value: string) => void;
+  options: SearchSelectOption[];
+  placeholder?: string;
+  /** When set, an empty choice with this label is offered (e.g. "Any partner"). */
+  clearLabel?: string;
+  disabled?: boolean;
+  size?: "sm" | "md";
+  id?: string;
+  "aria-label"?: string;
+}) {
+  const [query, setQuery] = useState("");
+
+  const all = useMemo(
+    () => (clearLabel ? [{ value: "", label: clearLabel }, ...options] : options),
+    [clearLabel, options],
+  );
+
+  const filtered = useMemo(() => {
+    const needle = query.trim().toLowerCase();
+    if (!needle) return all;
+    return all.filter(
+      (o) => o.label.toLowerCase().includes(needle) || o.code?.toLowerCase().includes(needle),
+    );
+  }, [all, query]);
+
+  const selected = all.find((o) => o.value === value);
+
+  return (
+    <Combobox
+      immediate
+      value={value}
+      disabled={disabled}
+      onChange={(v: string | null) => onChange(v ?? "")}
+      onClose={() => setQuery("")}
+    >
+      <div className="relative">
+        <ComboboxInput
+          id={id}
+          aria-label={ariaLabel}
+          placeholder={selected && selected.value !== "" ? undefined : (clearLabel ?? placeholder)}
+          displayValue={(v: string) => (v === "" ? "" : (all.find((o) => o.value === v)?.label ?? ""))}
+          onChange={(e) => setQuery(e.target.value)}
+          className={`${size === "sm" ? "h-8 text-[13px]" : "h-9.5 text-sm"} w-full rounded-lg border border-ink-200 bg-white pr-8 pl-3 text-ink-900 placeholder:text-ink-400 focus:border-crimson-400 focus:ring-2 focus:ring-crimson-100 focus:outline-none disabled:bg-ink-50 disabled:text-ink-500`}
+        />
+        <ComboboxButton className="absolute inset-y-0 right-0 flex w-8 cursor-pointer items-center justify-center text-ink-400 hover:text-ink-600">
+          <ChevronsUpDown className="size-3.5" aria-hidden />
+        </ComboboxButton>
+      </div>
+      <ComboboxOptions
+        anchor={{ to: "bottom start", gap: 4 }}
+        className="z-50 max-h-64 w-(--input-width) overflow-auto rounded-lg border border-ink-200 bg-white py-1 shadow-lg empty:hidden"
+      >
+        {filtered.map((o) => (
+          <ComboboxOption
+            key={o.value || "∅"}
+            value={o.value}
+            className="group flex cursor-pointer items-center gap-2 px-3 py-1.5 data-focus:bg-ink-50"
+          >
+            {o.render ?? (
+              <>
+                <span
+                  className={`min-w-0 flex-1 truncate text-sm ${o.value === "" ? "text-ink-500 italic" : "text-ink-800"}`}
+                >
+                  {o.label}
+                </span>
+                {o.code && (
+                  <code className="shrink-0 rounded bg-ink-100 px-1.5 py-0.5 font-mono text-[11px] text-ink-600">
+                    {o.code}
+                  </code>
+                )}
+                {o.hint && <span className="shrink-0 text-xs text-ink-400">{o.hint}</span>}
+                <Check className="size-3.5 shrink-0 text-crimson-600 opacity-0 group-data-selected:opacity-100" aria-hidden />
+              </>
+            )}
+          </ComboboxOption>
+        ))}
+        {filtered.length === 0 && (
+          <div className="px-3 py-2 text-sm text-ink-400">Nothing matches “{query}”.</div>
+        )}
+      </ComboboxOptions>
+    </Combobox>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/components/ui/SummaryDisclosure.tsx b/SW.Bitween.Web/ClientApp/src/components/ui/SummaryDisclosure.tsx
new file mode 100644
index 00000000..71dbf46d
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/ui/SummaryDisclosure.tsx
@@ -0,0 +1,56 @@
+import { useState, type ReactNode } from "react";
+import { ChevronDown, ChevronRight } from "lucide-react";
+
+/**
+ * Progressive disclosure: a subdued one-line summary that expands to its
+ * full controls. Keeps rarely-touched or auto-derived fields visible but
+ * out of the way (the "don't confuse the user" pattern). Uncontrolled by
+ * default; pass `open`/`onOpenChange` to drive it (e.g. to force it open on
+ * a failed submit).
+ */
+export function SummaryDisclosure({
+  summary,
+  changeLabel = "Change",
+  defaultOpen = false,
+  open: openProp,
+  onOpenChange,
+  children,
+}: {
+  /** The collapsed one-liner, shown after the chevron. */
+  summary: ReactNode;
+  /** Right-aligned affordance shown while collapsed. */
+  changeLabel?: string;
+  defaultOpen?: boolean;
+  open?: boolean;
+  onOpenChange?: (open: boolean) => void;
+  /** The controls revealed when expanded. */
+  children: ReactNode;
+}) {
+  const [internal, setInternal] = useState(defaultOpen);
+  const open = openProp ?? internal;
+  const toggle = () => {
+    const next = !open;
+    if (onOpenChange) onOpenChange(next);
+    else setInternal(next);
+  };
+
+  return (
+    <div className="rounded-lg bg-ink-50 px-3 py-2.5">
+      <button
+        type="button"
+        onClick={toggle}
+        aria-expanded={open}
+        className="flex w-full items-center gap-1.5 text-[13px] text-ink-500 hover:text-ink-700"
+      >
+        {open ? (
+          <ChevronDown className="size-3.5 shrink-0" aria-hidden />
+        ) : (
+          <ChevronRight className="size-3.5 shrink-0" aria-hidden />
+        )}
+        <span className="min-w-0 truncate text-left">{summary}</span>
+        {!open && <span className="ml-auto shrink-0 font-medium text-crimson-700">{changeLabel}</span>}
+      </button>
+      {open && <div className="mt-3 space-y-4">{children}</div>}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/components/ui/basics.tsx b/SW.Bitween.Web/ClientApp/src/components/ui/basics.tsx
new file mode 100644
index 00000000..fa0cdb47
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/ui/basics.tsx
@@ -0,0 +1,115 @@
+import type { ButtonHTMLAttributes, ReactNode } from "react";
+import { Loader2 } from "lucide-react";
+
+type ButtonVariant = "primary" | "secondary" | "ghost" | "danger";
+
+const buttonStyles: Record<ButtonVariant, string> = {
+  primary:
+    "bg-crimson-600 text-white hover:bg-crimson-700 active:bg-crimson-800 disabled:bg-ink-200 disabled:text-ink-400",
+  secondary:
+    "bg-white text-ink-800 border border-ink-200 hover:border-ink-300 hover:bg-ink-50 disabled:text-ink-300",
+  ghost: "text-ink-700 hover:bg-ink-100 disabled:text-ink-300",
+  danger:
+    "bg-white text-danger-700 border border-danger-200 hover:bg-danger-50 hover:border-danger-300 disabled:text-ink-300 disabled:border-ink-200",
+};
+
+export function Button({
+  variant = "secondary",
+  size = "md",
+  busy = false,
+  className = "",
+  children,
+  disabled,
+  ...rest
+}: ButtonHTMLAttributes<HTMLButtonElement> & {
+  variant?: ButtonVariant;
+  size?: "sm" | "md";
+  busy?: boolean;
+}) {
+  return (
+    <button
+      type="button"
+      disabled={disabled || busy}
+      className={`inline-flex items-center justify-center gap-1.5 rounded-lg font-medium transition-colors cursor-pointer disabled:cursor-not-allowed ${
+        size === "sm" ? "h-8 px-3 text-[13px]" : "h-9.5 px-4 text-sm"
+      } ${buttonStyles[variant]} ${className}`}
+      {...rest}
+    >
+      {busy && <Loader2 className="size-4 animate-spin" aria-hidden />}
+      {children}
+    </button>
+  );
+}
+
+/**
+ * `crimson` is brand emphasis ("You", "Unsaved") and follows the theme color.
+ * `danger` means something is wrong and stays red — see the danger ramp in index.css.
+ */
+type BadgeTone = "neutral" | "crimson" | "danger" | "ok" | "warn" | "ink";
+
+const badgeStyles: Record<BadgeTone, string> = {
+  neutral: "bg-ink-100 text-ink-700",
+  crimson: "bg-crimson-100 text-crimson-800",
+  danger: "bg-danger-100 text-danger-800",
+  ok: "bg-ok-100 text-ok-600",
+  warn: "bg-warn-100 text-warn-700",
+  ink: "bg-ink-800 text-ink-100",
+};
+
+export function Badge({
+  tone = "neutral",
+  className = "",
+  children,
+}: {
+  tone?: BadgeTone;
+  className?: string;
+  children: ReactNode;
+}) {
+  return (
+    <span
+      className={`inline-flex items-center gap-1 rounded-md px-2 py-0.5 text-xs font-medium whitespace-nowrap ${badgeStyles[tone]} ${className}`}
+    >
+      {children}
+    </span>
+  );
+}
+
+export function LoadingBlock({ label = "Loading…" }: { label?: string }) {
+  return (
+    <div className="flex items-center justify-center gap-2 py-16 text-ink-500">
+      <Loader2 className="size-4 animate-spin" aria-hidden />
+      <span className="text-sm">{label}</span>
+    </div>
+  );
+}
+
+export function EmptyState({
+  icon,
+  title,
+  children,
+  action,
+}: {
+  icon?: ReactNode;
+  title: string;
+  children?: ReactNode;
+  action?: ReactNode;
+}) {
+  return (
+    <div className="flex flex-col items-center justify-center gap-2 rounded-xl border border-dashed border-ink-200 bg-white px-6 py-14 text-center">
+      {icon && <div className="mb-1 text-ink-300 [&>svg]:size-8">{icon}</div>}
+      <h3 className="text-sm font-semibold text-ink-800">{title}</h3>
+      {children && <p className="max-w-sm text-sm text-ink-500">{children}</p>}
+      {action && <div className="mt-3">{action}</div>}
+    </div>
+  );
+}
+
+/** Inline error strip for failed form submissions. */
+export function FormError({ children }: { children: ReactNode }) {
+  if (!children) return null;
+  return (
+    <p role="alert" className="rounded-lg bg-danger-50 px-3 py-2 text-sm text-danger-800">
+      {children}
+    </p>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/components/ui/forms.tsx b/SW.Bitween.Web/ClientApp/src/components/ui/forms.tsx
new file mode 100644
index 00000000..4b10fa7c
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/ui/forms.tsx
@@ -0,0 +1,102 @@
+import { useId, useState, type InputHTMLAttributes, type ReactNode, type SelectHTMLAttributes } from "react";
+import { Eye, EyeOff } from "lucide-react";
+
+const inputClass =
+  "h-9.5 w-full rounded-lg border border-ink-200 bg-white px-3 text-sm text-ink-900 placeholder:text-ink-400 focus:border-crimson-400 focus:outline-none focus:ring-2 focus:ring-crimson-100 disabled:bg-ink-50 disabled:text-ink-500";
+
+export function Field({
+  label,
+  hint,
+  error,
+  children,
+  htmlFor,
+}: {
+  label: string;
+  hint?: ReactNode;
+  error?: string;
+  children: ReactNode;
+  htmlFor?: string;
+}) {
+  return (
+    <div className="space-y-1.5">
+      <label htmlFor={htmlFor} className="block text-[13px] font-medium text-ink-700">
+        {label}
+      </label>
+      {children}
+      {error ? (
+        <p role="alert" className="text-[13px] text-danger-700">
+          {error}
+        </p>
+      ) : (
+        hint && <p className="text-[13px] text-ink-500">{hint}</p>
+      )}
+    </div>
+  );
+}
+
+export function TextInput(props: InputHTMLAttributes<HTMLInputElement>) {
+  return <input {...props} className={`${inputClass} ${props.className ?? ""}`} />;
+}
+
+export function PasswordInput(props: InputHTMLAttributes<HTMLInputElement>) {
+  const [visible, setVisible] = useState(false);
+  return (
+    <div className="relative">
+      <input
+        {...props}
+        type={visible ? "text" : "password"}
+        className={`${inputClass} pr-10 ${props.className ?? ""}`}
+      />
+      <button
+        type="button"
+        onClick={() => setVisible((v) => !v)}
+        aria-label={visible ? "Hide password" : "Show password"}
+        className="absolute inset-y-0 right-0 flex w-10 items-center justify-center text-ink-400 hover:text-ink-600"
+      >
+        {visible ? <EyeOff className="size-4" /> : <Eye className="size-4" />}
+      </button>
+    </div>
+  );
+}
+
+export function Checkbox({
+  label,
+  description,
+  ...props
+}: InputHTMLAttributes<HTMLInputElement> & { label: ReactNode; description?: ReactNode }) {
+  const id = useId();
+  return (
+    <label htmlFor={id} className="flex cursor-pointer items-start gap-2.5">
+      <input
+        id={id}
+        type="checkbox"
+        {...props}
+        className="mt-0.5 size-4 shrink-0 cursor-pointer rounded accent-crimson-600"
+      />
+      <span className="min-w-0">
+        <span className="block text-sm font-medium text-ink-800">{label}</span>
+        {description && <span className="block text-[13px] text-ink-500">{description}</span>}
+      </span>
+    </label>
+  );
+}
+
+export function Select({
+  options,
+  ...props
+}: SelectHTMLAttributes<HTMLSelectElement> & {
+  options: { value: string; label: string }[];
+}) {
+  return (
+    <select
+      {...props}
+      className={`h-9.5 w-full cursor-pointer rounded-lg border border-ink-200 bg-white px-2.5 text-sm text-ink-900 focus:border-crimson-400 focus:ring-2 focus:ring-crimson-100 focus:outline-none disabled:bg-ink-50 disabled:text-ink-500 ${props.className ?? ""}`}
+    >
+      {options.map((o) => (
+        <option key={o.value} value={o.value}>
+          {o.label}
+        </option>
+      ))}
+    </select>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/components/ui/overlays.tsx b/SW.Bitween.Web/ClientApp/src/components/ui/overlays.tsx
new file mode 100644
index 00000000..d9c74724
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/components/ui/overlays.tsx
@@ -0,0 +1,164 @@
+import { useEffect, useRef, useState, type ReactNode } from "react";
+import { X } from "lucide-react";
+import { Button, FormError } from "./basics";
+
+/** Centered modal. Closes on Escape and backdrop click. */
+export function Dialog({
+  title,
+  onClose,
+  children,
+  wide = false,
+}: {
+  title: string;
+  onClose: () => void;
+  children: ReactNode;
+  wide?: boolean;
+}) {
+  useEffect(() => {
+    const onKey = (e: KeyboardEvent) => e.key === "Escape" && onClose();
+    document.addEventListener("keydown", onKey);
+    return () => document.removeEventListener("keydown", onKey);
+  }, [onClose]);
+
+  return (
+    <div
+      className="fixed inset-0 z-50 flex items-start justify-center overflow-y-auto bg-ink-950/40 p-4 pt-[10vh]"
+      onMouseDown={(e) => e.target === e.currentTarget && onClose()}
+    >
+      <div
+        role="dialog"
+        aria-modal="true"
+        aria-label={title}
+        className={`w-full ${wide ? "max-w-2xl" : "max-w-md"} rounded-2xl bg-white shadow-xl`}
+      >
+        <div className="flex items-center justify-between border-b border-ink-100 px-5 py-3.5">
+          <h2 className="text-[15px] font-semibold text-ink-900">{title}</h2>
+          <button
+            onClick={onClose}
+            aria-label="Close"
+            className="rounded-md p-1 text-ink-400 hover:bg-ink-100 hover:text-ink-700"
+          >
+            <X className="size-4.5" />
+          </button>
+        </div>
+        <div className="px-5 py-4">{children}</div>
+      </div>
+    </div>
+  );
+}
+
+/**
+ * Confirmation for destructive actions. The action runs here so the
+ * dialog can surface its error instead of silently closing.
+ */
+export function ConfirmDialog({
+  title,
+  body,
+  confirmLabel,
+  onConfirm,
+  onClose,
+}: {
+  title: string;
+  body: ReactNode;
+  confirmLabel: string;
+  onConfirm: () => Promise<void>;
+  onClose: () => void;
+}) {
+  const [busy, setBusy] = useState(false);
+  const [error, setError] = useState("");
+
+  const run = async () => {
+    setBusy(true);
+    setError("");
+    try {
+      await onConfirm();
+      onClose();
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Something went wrong.");
+    } finally {
+      setBusy(false);
+    }
+  };
+
+  return (
+    <Dialog title={title} onClose={onClose}>
+      <div className="space-y-4">
+        <div className="text-sm text-ink-600">{body}</div>
+        <FormError>{error}</FormError>
+        <div className="flex justify-end gap-2">
+          <Button onClick={onClose}>Cancel</Button>
+          <Button variant="danger" busy={busy} onClick={run}>
+            {confirmLabel}
+          </Button>
+        </div>
+      </div>
+    </Dialog>
+  );
+}
+
+/** Minimal dropdown anchored to its trigger. Use side="up" for triggers near the bottom of the viewport. */
+export function Menu({
+  trigger,
+  children,
+  align = "right",
+  side = "down",
+}: {
+  trigger: ReactNode;
+  children: ReactNode;
+  align?: "left" | "right";
+  side?: "down" | "up";
+}) {
+  const [open, setOpen] = useState(false);
+  const ref = useRef<HTMLDivElement>(null);
+
+  useEffect(() => {
+    if (!open) return;
+    const onDown = (e: MouseEvent) => {
+      if (!ref.current?.contains(e.target as Node)) setOpen(false);
+    };
+    const onKey = (e: KeyboardEvent) => e.key === "Escape" && setOpen(false);
+    document.addEventListener("mousedown", onDown);
+    document.addEventListener("keydown", onKey);
+    return () => {
+      document.removeEventListener("mousedown", onDown);
+      document.removeEventListener("keydown", onKey);
+    };
+  }, [open]);
+
+  return (
+    <div ref={ref} className="relative">
+      <div onClick={() => setOpen((o) => !o)}>{trigger}</div>
+      {open && (
+        <div
+          onClick={() => setOpen(false)}
+          className={`absolute ${align === "right" ? "right-0" : "left-0"} ${
+            side === "up" ? "bottom-full mb-1.5" : "top-full mt-1.5"
+          } z-40 min-w-44 rounded-xl border border-ink-100 bg-white p-1 shadow-lg`}
+        >
+          {children}
+        </div>
+      )}
+    </div>
+  );
+}
+
+export function MenuItem({
+  onSelect,
+  danger = false,
+  children,
+}: {
+  onSelect: () => void;
+  danger?: boolean;
+  children: ReactNode;
+}) {
+  return (
+    <button
+      onClick={onSelect}
+      className={`flex w-full items-center gap-2 rounded-lg px-2.5 py-1.5 text-left text-sm ${
+        danger ? "text-danger-700 hover:bg-danger-50" : "text-ink-700 hover:bg-ink-50"
+      }`}
+    >
+      {children}
+    </button>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/index.css b/SW.Bitween.Web/ClientApp/src/index.css
new file mode 100644
index 00000000..bf421473
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/index.css
@@ -0,0 +1,89 @@
+@import "@fontsource-variable/instrument-sans";
+@import "@fontsource-variable/jetbrains-mono";
+@import "tailwindcss";
+
+/*
+  Bitween design tokens.
+
+  Brand: the crimson ramp is carried over verbatim from the existing
+  Bitween-UI tailwind.config.js — the only thing preserved from the old UI.
+  Neutrals ("ink") are derived from the logo's own wordmark color #372f2e,
+  so chrome and brand always harmonize.
+*/
+@theme {
+  --font-sans: "Instrument Sans Variable", ui-sans-serif, system-ui, sans-serif;
+  --font-mono: "JetBrains Mono Variable", ui-monospace, "SF Mono", monospace;
+
+  --color-crimson-50: #fef3f2;
+  --color-crimson-100: #ffe4e1;
+  --color-crimson-200: #ffcec8;
+  --color-crimson-300: #ffaba2;
+  --color-crimson-400: #fd7b6c;
+  --color-crimson-500: #f6503d;
+  --color-crimson-600: #e3311d;
+  --color-crimson-700: #bf2716;
+  --color-crimson-800: #9e2416;
+  --color-crimson-900: #832419;
+
+  --color-ink-50: #f6f3f1;
+  --color-ink-100: #ece7e4;
+  --color-ink-200: #d9d1cd;
+  --color-ink-300: #beb3af;
+  --color-ink-400: #9c8f8b;
+  --color-ink-500: #7f726e;
+  --color-ink-600: #665a57;
+  --color-ink-700: #4d4341;
+  --color-ink-800: #372f2e; /* logo wordmark ink */
+  --color-ink-900: #2a2423;
+  --color-ink-950: #201b1a;
+
+  --color-canvas: #faf8f7;
+
+  --color-ok-600: #1a7f4e;
+  --color-ok-100: #d9f2e5;
+  --color-warn-700: #92600a;
+  --color-warn-100: #fbeed0;
+
+  /*
+    Status red, deliberately NOT the crimson ramp. Brand color is customer-settable
+    (Theme.PrimaryColor rewrites every --color-crimson-* at runtime), so anything
+    that means "this failed" or "this destroys data" has to live outside it —
+    otherwise a yellow-branded tenant gets yellow error badges. Reads as the
+    ok/warn pair's missing third: green good, amber degraded, red bad.
+
+    Values are the shipped crimson ramp verbatim, so a tenant on the default brand
+    color sees no change at all; only re-themed tenants diverge, which is the point.
+  */
+  --color-danger-50: #fef3f2;
+  --color-danger-100: #ffe4e1;
+  --color-danger-200: #ffcec8;
+  --color-danger-300: #ffaba2;
+  --color-danger-600: #e3311d;
+  --color-danger-700: #bf2716;
+  --color-danger-800: #9e2416;
+}
+
+@layer base {
+  html {
+    @apply bg-canvas text-ink-900 antialiased;
+    font-size: 15px;
+  }
+  body {
+    font-family: var(--font-sans);
+  }
+  ::selection {
+    @apply bg-crimson-100 text-crimson-900;
+  }
+  :focus-visible {
+    outline: 2px solid var(--color-crimson-500);
+    outline-offset: 2px;
+  }
+  @media (prefers-reduced-motion: reduce) {
+    *,
+    *::before,
+    *::after {
+      animation-duration: 0.01ms !important;
+      transition-duration: 0.01ms !important;
+    }
+  }
+}
diff --git a/SW.Bitween.Web/ClientApp/src/lib/branding.ts b/SW.Bitween.Web/ClientApp/src/lib/branding.ts
new file mode 100644
index 00000000..ff4a61f0
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/lib/branding.ts
@@ -0,0 +1,116 @@
+import { useEffect, useMemo } from "react";
+import { useQuery } from "@tanstack/react-query";
+import { getAppConfig } from "../api";
+import { applyColorScale } from "./colorScale";
+import { useSettingsDraft } from "./settingsDraft";
+
+/**
+ * The Brand & theme settings, resolved through the unsaved draft so edits
+ * preview live everywhere before they're saved. Image-ish values only count
+ * once someone has actually changed them (`customized`); left at the default,
+ * each component picks its own shipped asset — which is how the sign-in page
+ * gets the light-on-dark logo variant rather than the one-size default.
+ */
+export interface Branding {
+  ready: boolean;
+  primaryColor?: string;
+  tabTitle?: string;
+  companyName?: string;
+  /** Override only — null means "use the shipped copy". */
+  loginBlurb: string | null;
+  /** Overrides only — null means "use the shipped asset". */
+  faviconUrl: string | null;
+  loginLogoUrl: string | null;
+  sidebarLogoUrl: string | null;
+  /** Mobile top-bar mark. Falls back to the sidebar logo when left at the default. */
+  headerIconUrl: string | null;
+  footer: {
+    show: boolean;
+    copyrightIcon?: string;
+    copyrightText?: string;
+    websiteUrl?: string;
+    linkedinUrl?: string;
+    githubUrl?: string;
+  };
+}
+
+/** `loginLogo` ⇄ `Theme.LoginLogo` — the draft is keyed by catalog key. */
+const catalogKey = (prop: string) => `Theme.${prop[0].toUpperCase()}${prop.slice(1)}`;
+
+export function useBranding(): Branding {
+  // Read through the anonymous config endpoint rather than the settings list: the sign-in page
+  // has to brand itself with no session, and this way both sides of the door share one path.
+  const { data } = useQuery({ queryKey: ["appConfig"], queryFn: getAppConfig });
+  const draft = useSettingsDraft();
+
+  return useMemo(() => {
+    const theme = data?.theme ?? {};
+    const defaults = data?.themeDefaults ?? {};
+
+    const get = (prop: string): string | undefined => {
+      const key = catalogKey(prop);
+      if (key in draft) return draft[key] ?? defaults[prop] ?? "";
+      const value = theme[prop];
+      return value == null ? undefined : String(value);
+    };
+    /** Only meaningful when someone actually changed it away from the default. */
+    const customized = (prop: string): string | null => {
+      const value = get(prop);
+      return value?.trim() && value !== defaults[prop] ? value : null;
+    };
+
+    return {
+      ready: data !== undefined,
+      primaryColor: get("primaryColor"),
+      tabTitle: get("tabTitle"),
+      companyName: get("companyName"),
+      loginBlurb: customized("bitweenText"),
+      faviconUrl: customized("tabIcon"),
+      loginLogoUrl: customized("loginLogo"),
+      sidebarLogoUrl: customized("bitweenLogo"),
+      headerIconUrl: customized("bitweenHeaderIcon"),
+      footer: {
+        show: get("showFooter") !== "false",
+        copyrightIcon: get("copyRightsIcon"),
+        copyrightText: get("allRightsReserved"),
+        websiteUrl: get("websiteLink")?.trim(),
+        linkedinUrl: get("linkedinLink")?.trim(),
+        githubUrl: get("githubLink")?.trim(),
+      },
+    };
+  }, [data, draft]);
+}
+
+/** Side-effect half: keeps the accent color, tab title and favicon in sync. */
+export function useApplyBranding(): Branding {
+  const branding = useBranding();
+
+  useEffect(() => {
+    if (branding.primaryColor) applyColorScale(branding.primaryColor);
+  }, [branding.primaryColor]);
+
+  useEffect(() => {
+    if (branding.tabTitle) document.title = branding.tabTitle;
+  }, [branding.tabTitle]);
+
+  useEffect(() => {
+    const existing = document.querySelector<HTMLLinkElement>('link[rel="icon"]');
+    const defaultHref = existing?.dataset.defaultHref || existing?.href;
+    const href = branding.faviconUrl ?? defaultHref;
+    if (!href) return;
+
+    // Replace the element rather than reassigning href. Two reasons: browsers
+    // routinely don't re-fetch a favicon when only the href changes, and the
+    // markup ships type="image/svg+xml" — left in place that hint misdescribes a
+    // .png or .ico override, and the browser drops the icon on the floor. The new
+    // element declares no type, so the response's content type decides.
+    const link = document.createElement("link");
+    link.rel = "icon";
+    link.href = href;
+    if (defaultHref) link.dataset.defaultHref = defaultHref;
+    existing?.remove();
+    document.head.appendChild(link);
+  }, [branding.faviconUrl]);
+
+  return branding;
+}
diff --git a/SW.Bitween.Web/ClientApp/src/lib/colorScale.ts b/SW.Bitween.Web/ClientApp/src/lib/colorScale.ts
new file mode 100644
index 00000000..4dada75c
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/lib/colorScale.ts
@@ -0,0 +1,106 @@
+/**
+ * Derives the full crimson-50..900 CSS-variable ramp from a single picked
+ * color (treated as the "600" shade, which is what buttons/links/active nav
+ * are built from). Lightness and saturation targets below were measured off
+ * the shipped ramp in index.css so a default-color round trip reproduces it.
+ */
+export const COLOR_SCALE_STEPS = ["50", "100", "200", "300", "400", "500", "600", "700", "800", "900"] as const;
+export type ColorScaleStep = (typeof COLOR_SCALE_STEPS)[number];
+
+const L_TARGETS: Record<ColorScaleStep, number> = {
+  "50": 97,
+  "100": 94,
+  "200": 89,
+  "300": 82,
+  "400": 71,
+  "500": 60,
+  "600": 50,
+  "700": 42,
+  "800": 35,
+  "900": 31,
+};
+const S_TARGETS: Record<ColorScaleStep, number> = {
+  "50": 86,
+  "100": 100,
+  "200": 100,
+  "300": 100,
+  "400": 97,
+  "500": 91,
+  "600": 78,
+  "700": 79,
+  "800": 76,
+  "900": 68,
+};
+
+const clamp = (n: number, min: number, max: number) => Math.min(max, Math.max(min, n));
+
+export function hexToHsl(hex: string): [h: number, s: number, l: number] {
+  const r = parseInt(hex.slice(1, 3), 16) / 255;
+  const g = parseInt(hex.slice(3, 5), 16) / 255;
+  const b = parseInt(hex.slice(5, 7), 16) / 255;
+  const max = Math.max(r, g, b);
+  const min = Math.min(r, g, b);
+  let h = 0;
+  let s = 0;
+  const l = (max + min) / 2;
+  const d = max - min;
+  if (d !== 0) {
+    s = l > 0.5 ? d / (2 - max - min) : d / (max + min);
+    switch (max) {
+      case r:
+        h = (g - b) / d + (g < b ? 6 : 0);
+        break;
+      case g:
+        h = (b - r) / d + 2;
+        break;
+      default:
+        h = (r - g) / d + 4;
+    }
+    h /= 6;
+  }
+  return [Math.round(h * 360), Math.round(s * 100), Math.round(l * 100)];
+}
+
+export function hslToHex(h: number, s: number, l: number): string {
+  const sN = s / 100;
+  const lN = l / 100;
+  const k = (n: number) => (n + h / 30) % 12;
+  const a = sN * Math.min(lN, 1 - lN);
+  const f = (n: number) => lN - a * Math.max(-1, Math.min(k(n) - 3, Math.min(9 - k(n), 1)));
+  const toHex = (n: number) =>
+    Math.round(f(n) * 255)
+      .toString(16)
+      .padStart(2, "0");
+  return `#${toHex(0)}${toHex(8)}${toHex(4)}`;
+}
+
+/** `hex` is treated as the 600 shade; other steps are derived around it. */
+export function buildColorScale(hex: string): Record<ColorScaleStep, string> {
+  const [h, s] = hexToHsl(hex);
+  const satScale = s / S_TARGETS["600"];
+  const result = {} as Record<ColorScaleStep, string>;
+  for (const step of COLOR_SCALE_STEPS) {
+    if (step === "600") {
+      result[step] = hex;
+      continue;
+    }
+    const sat = clamp(Math.round(S_TARGETS[step] * satScale), 0, 100);
+    result[step] = hslToHex(h, sat, L_TARGETS[step]);
+  }
+  return result;
+}
+
+export function applyColorScale(hex: string) {
+  const scale = buildColorScale(hex);
+  const root = document.documentElement.style;
+  for (const step of COLOR_SCALE_STEPS) {
+    root.setProperty(`--color-crimson-${step}`, scale[step]);
+  }
+}
+
+export function resetColorScale() {
+  const root = document.documentElement.style;
+  for (const step of COLOR_SCALE_STEPS) {
+    root.removeProperty(`--color-crimson-${step}`);
+  }
+}
diff --git a/SW.Bitween.Web/ClientApp/src/lib/dates.ts b/SW.Bitween.Web/ClientApp/src/lib/dates.ts
new file mode 100644
index 00000000..b93f0e4b
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/lib/dates.ts
@@ -0,0 +1,57 @@
+const formatter = new Intl.DateTimeFormat("en", { day: "numeric", month: "short", year: "numeric" });
+
+/** Missing/invalid dates (e.g. fields the backend doesn't return) render as a dash. */
+const asDate = (iso: string): Date | null => {
+  const d = new Date(iso);
+  return Number.isNaN(d.getTime()) ? null : d;
+};
+
+export const formatDate = (iso: string) => {
+  const d = asDate(iso);
+  return d ? formatter.format(d) : "—";
+};
+
+export const timeAgo = (iso: string): string => {
+  const seconds = Math.max(0, (Date.now() - new Date(iso).getTime()) / 1000);
+  if (seconds < 90) return "just now";
+  const minutes = seconds / 60;
+  if (minutes < 60) return `${Math.round(minutes)}m ago`;
+  const hours = minutes / 60;
+  if (hours < 24) return `${Math.round(hours)}h ago`;
+  const days = hours / 24;
+  if (days < 30) return `${Math.round(days)}d ago`;
+  return formatDate(iso);
+};
+
+/** "in 34m", "in 2h" — for things scheduled in the future. */
+export const timeUntil = (iso: string): string => {
+  const seconds = (new Date(iso).getTime() - Date.now()) / 1000;
+  if (seconds <= 0) return "any moment";
+  if (seconds < 90) return "in under a minute";
+  const minutes = seconds / 60;
+  if (minutes < 60) return `in ${Math.round(minutes)}m`;
+  const hours = minutes / 60;
+  if (hours < 24) return `in ${Math.round(hours)}h`;
+  return `in ${Math.round(hours / 24)}d`;
+};
+
+const timeFormatter = new Intl.DateTimeFormat("en", {
+  day: "numeric",
+  month: "short",
+  hour: "2-digit",
+  minute: "2-digit",
+});
+
+export const formatDateTime = (iso: string) => {
+  const d = asDate(iso);
+  return d ? timeFormatter.format(d) : "—";
+};
+
+/** "12s", "1m 42s" — elapsed time between two instants. */
+export const duration = (fromIso: string, toIso: string): string => {
+  const seconds = Math.max(0, Math.round((new Date(toIso).getTime() - new Date(fromIso).getTime()) / 1000));
+  if (seconds < 60) return `${seconds}s`;
+  const minutes = Math.floor(seconds / 60);
+  if (minutes < 60) return `${minutes}m ${seconds % 60}s`;
+  return `${Math.floor(minutes / 60)}h ${minutes % 60}m`;
+};
diff --git a/SW.Bitween.Web/ClientApp/src/lib/identifiers.ts b/SW.Bitween.Web/ClientApp/src/lib/identifiers.ts
new file mode 100644
index 00000000..736ea424
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/lib/identifiers.ts
@@ -0,0 +1,18 @@
+/** "Purchase Order" → "PURCHASE_ORDER" */
+export const suggestCode = (name: string) =>
+  name
+    .trim()
+    .replace(/[^a-zA-Z0-9]+/g, "_")
+    .replace(/^_+|_+$/g, "")
+    .replace(/^(\d)/, "T$1")
+    .toUpperCase()
+    .slice(0, 50);
+
+/** "SAP Production" → "sap-production" */
+export const suggestSlug = (name: string) =>
+  name
+    .trim()
+    .toLowerCase()
+    .replace(/[^a-z0-9]+/g, "-")
+    .replace(/^-+|-+$/g, "")
+    .slice(0, 50);
diff --git a/SW.Bitween.Web/ClientApp/src/lib/mapping/MappingEditorContext.tsx b/SW.Bitween.Web/ClientApp/src/lib/mapping/MappingEditorContext.tsx
new file mode 100644
index 00000000..cbfd2372
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/lib/mapping/MappingEditorContext.tsx
@@ -0,0 +1,35 @@
+import React, { createContext, useContext, useReducer } from 'react';
+import { MappingEditorAction, MappingEditorState } from './mappingEditorActions';
+import { initialMappingEditorState, mappingEditorReducer } from './mappingEditorReducer';
+
+export * from './mappingEditorActions';
+export * from './mappingEditorReducer';
+
+
+// ─── Context ──────────────────────────────────────────────────────────────────
+
+const MappingEditorStateContext = createContext<MappingEditorState | null>(null);
+const MappingEditorDispatchContext = createContext<React.Dispatch<MappingEditorAction> | null>(null);
+
+export const MappingEditorProvider: React.FC<{ children: React.ReactNode }> = ({ children }) => {
+  const [state, dispatch] = useReducer(mappingEditorReducer, initialMappingEditorState);
+  return (
+    <MappingEditorStateContext.Provider value={state}>
+      <MappingEditorDispatchContext.Provider value={dispatch}>
+        {children}
+      </MappingEditorDispatchContext.Provider>
+    </MappingEditorStateContext.Provider>
+  );
+};
+
+export function useMappingEditorState(): MappingEditorState {
+  const ctx = useContext(MappingEditorStateContext);
+  if (!ctx) throw new Error('useMappingEditorState must be used inside MappingEditorProvider');
+  return ctx;
+}
+
+export function useMappingEditorDispatch(): React.Dispatch<MappingEditorAction> {
+  const ctx = useContext(MappingEditorDispatchContext);
+  if (!ctx) throw new Error('useMappingEditorDispatch must be used inside MappingEditorProvider');
+  return ctx;
+}
diff --git a/SW.Bitween.Web/ClientApp/src/lib/mapping/__tests__/scribanGeneratorOutput.test.ts b/SW.Bitween.Web/ClientApp/src/lib/mapping/__tests__/scribanGeneratorOutput.test.ts
new file mode 100644
index 00000000..7dbfeb37
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/lib/mapping/__tests__/scribanGeneratorOutput.test.ts
@@ -0,0 +1,256 @@
+/**
+ * Generator output snapshot tests.
+ * These freeze exactly what template string generateScriban produces for each
+ * mapping config. Snapshots are stored in __snapshots__/. A failure here means
+ * the generator changed its output — check whether the C# parity tests also
+ * need updating (ScribanGeneratorParityTests.cs).
+ */
+import { describe, it, expect } from 'vitest';
+import { generateScriban } from '../scribanGenerator';
+import { FieldMapping, ArrayMapping } from '../types';
+
+let _id = 0;
+function id() { return `t-${++_id}`; }
+function field(o: Partial<FieldMapping> & { target: string; source: string }): FieldMapping {
+  return { id: id(), ...o };
+}
+
+describe('generator output snapshots', () => {
+  it('source field rename', () => {
+    const t = generateScriban([field({ target: 'orderId', source: 'Order.Id' })], []);
+    expect(t).toMatchInlineSnapshot(`
+      "{
+        "orderId": {{ Order.Id | json }},
+      }"
+    `);
+  });
+
+  it('fixed string value', () => {
+    const t = generateScriban([field({ target: 'status', source: '', fixedValue: 'active' })], []);
+    expect(t).toMatchInlineSnapshot(`
+      "{
+        "status": "active",
+      }"
+    `);
+  });
+
+  it('fixed number value', () => {
+    const t = generateScriban([field({ target: 'count', source: '', fixedValue: '42' })], []);
+    expect(t).toMatchInlineSnapshot(`
+      "{
+        "count": 42,
+      }"
+    `);
+  });
+
+  it('fixed boolean value', () => {
+    const t = generateScriban([field({ target: 'flag', source: '', fixedValue: 'true' })], []);
+    expect(t).toMatchInlineSnapshot(`
+      "{
+        "flag": true,
+      }"
+    `);
+  });
+
+  it('partner property', () => {
+    const t = generateScriban([field({ target: 'pkey', source: '', partnerPropKey: 'apiKey' })], []);
+    expect(t).toMatchInlineSnapshot(`
+      "{
+        "pkey": {{ (__partner__ ?? {})["apiKey"] | json }},
+      }"
+    `);
+  });
+
+  it('global set key', () => {
+    const t = generateScriban([field({ target: 'gval', source: '', globalSetId: 'mySet', globalKey: 'region' })], []);
+    expect(t).toMatchInlineSnapshot(`
+      "{
+        "gval": {{ ((__globals__ ?? {})["mySet"] ?? {})["region"] | json }},
+      }"
+    `);
+  });
+
+  it('lookup null fallback', () => {
+    const t = generateScriban([field({
+      target: 'category', source: 'Cat',
+      lookupDictionary: { entries: [{ from: 'A', to: 'Alpha' }], fallback: 'null' },
+    })], []);
+    expect(t).toMatchInlineSnapshot(`
+      "{
+        "category": {{ $__e = { "A": "Alpha" }; $__e[Cat] | json }},
+      }"
+    `);
+  });
+
+  it('lookup custom fallback', () => {
+    const t = generateScriban([field({
+      target: 'category', source: 'Cat',
+      lookupDictionary: { entries: [{ from: 'A', to: 'Alpha' }], fallback: 'custom', fallbackValue: 'Unknown' },
+    })], []);
+    expect(t).toMatchInlineSnapshot(`
+      "{
+        "category": {{ $__e = { "A": "Alpha" }; ($__e[Cat] ?? "Unknown") | json }},
+      }"
+    `);
+  });
+
+  it('transform', () => {
+    const t = generateScriban([field({ target: 'doubled', source: 'amount', transform: 'value * 2' })], []);
+    expect(t).toMatchInlineSnapshot(`
+      "{
+        "doubled": {{ amount * 2 | json }},
+      }"
+    `);
+  });
+
+  it('object array mapping', () => {
+    const am: ArrayMapping[] = [{
+      id: id(), source: 'Items', target: 'lines', alias: 'item',
+      mappings: [
+        { id: id(), target: 'sku', source: 'Sku' },
+        { id: id(), target: 'qty', source: 'Quantity' },
+      ],
+    }];
+    expect(generateScriban([], am)).toMatchInlineSnapshot(`
+      "{
+        "lines": [
+        {{- for item in Items -}}
+        {
+          "sku": {{ item.Sku | json }},
+          "qty": {{ item.Quantity | json }},
+        },
+        {{- end -}}
+        ],
+      }"
+    `);
+  });
+
+  it('array with filter', () => {
+    const am: ArrayMapping[] = [{
+      id: id(), source: 'Items', target: 'active', alias: 'item',
+      filter: { field: 'Status', operator: '==', value: 'active' },
+      mappings: [{ id: id(), target: 'name', source: 'Name' }],
+    }];
+    expect(generateScriban([], am)).toMatchInlineSnapshot(`
+      "{
+        "active": [
+        {{- for item in Items -}}
+        {{- if item.Status == "active" -}}
+        {
+          "name": {{ item.Name | json }},
+        },
+        {{- end -}}
+        {{- end -}}
+        ],
+      }"
+    `);
+  });
+
+  // ── Type-cast rules (requires outputJson + inputJson so generator knows types) ──
+
+  it('type rule: bool source → string target', () => {
+    const t = generateScriban(
+      [field({ target: 'result', source: 'flag' })], [],
+      undefined, '{"result": ""}', '{"flag": true}',
+    );
+    expect(t).toMatchInlineSnapshot(`
+      "{
+        "result": {{ (flag == null ? null : (flag ? "true" : "false")) | json }},
+      }"
+    `);
+  });
+
+  it('type rule: number source → string target', () => {
+    const t = generateScriban(
+      [field({ target: 'result', source: 'count' })], [],
+      undefined, '{"result": ""}', '{"count": 42}',
+    );
+    expect(t).toMatchInlineSnapshot(`
+      "{
+        "result": {{ ("" + count) | json }},
+      }"
+    `);
+  });
+
+  it('type rule: string source → number target (to_float)', () => {
+    const t = generateScriban(
+      [field({ target: 'result', source: 'price' })], [],
+      undefined, '{"result": 0}', '{"price": "9.99"}',
+    );
+    expect(t).toMatchInlineSnapshot(`
+      "{
+        "result": {{ (price | to_float) | json }},
+      }"
+    `);
+  });
+
+  it('type rule: bool source → number target', () => {
+    const t = generateScriban(
+      [field({ target: 'result', source: 'flag' })], [],
+      undefined, '{"result": 0}', '{"flag": true}',
+    );
+    expect(t).toMatchInlineSnapshot(`
+      "{
+        "result": {{ (flag == null ? null : (flag ? 1 : 0)) | json }},
+      }"
+    `);
+  });
+
+  it('type rule: number source → bool target', () => {
+    const t = generateScriban(
+      [field({ target: 'result', source: 'amount' })], [],
+      undefined, '{"result": false}', '{"amount": 1}',
+    );
+    expect(t).toMatchInlineSnapshot(`
+      "{
+        "result": {{ (amount == 0 ? false : (amount == 1 ? true : null)) | json }},
+      }"
+    `);
+  });
+
+  it('transform with string target type', () => {
+    const t = generateScriban(
+      [field({ target: 'result', source: 'price', transform: 'value * 2' })], [],
+      undefined, '{"result": ""}', '{"price": 5}',
+    );
+    expect(t).toMatchInlineSnapshot(`
+      "{
+        "result": {{ $__t = (price * 2); ($__t == null ? null : ((($__t | object.typeof) == "object" || ($__t | object.typeof) == "array") ? null : (($__t | object.typeof) == "boolean" ? ($__t ? "true" : "false") : ("" + $__t)))) | json }},
+      }"
+    `);
+  });
+
+  it('transform with number target type', () => {
+    const t = generateScriban(
+      [field({ target: 'result', source: 'amount', transform: 'value > 100' })], [],
+      undefined, '{"result": 0}', '{"amount": 200}',
+    );
+    expect(t).toMatchInlineSnapshot(`
+      "{
+        "result": {{ $__t = (amount > 100); ($__t == null ? null : (($__t | object.typeof) == "boolean" ? ($__t ? 1 : 0) : ((($__t | object.typeof) == "object" || ($__t | object.typeof) == "array") ? null : ($__t | to_float)))) | json }},
+      }"
+    `);
+  });
+
+  it('isRootSource: field inside array loop reads from root object', () => {
+    const am: ArrayMapping[] = [{
+      id: id(), source: 'Items', target: 'lines', alias: 'item',
+      mappings: [
+        { id: id(), target: 'sku', source: 'Sku' },
+        { id: id(), target: 'orderId', source: 'OrderId', isRootSource: true },
+      ],
+    }];
+    expect(generateScriban([], am)).toMatchInlineSnapshot(`
+      "{
+        "lines": [
+        {{- for item in Items -}}
+        {
+          "sku": {{ item.Sku | json }},
+          "orderId": {{ OrderId | json }},
+        },
+        {{- end -}}
+        ],
+      }"
+    `);
+  });
+});
diff --git a/SW.Bitween.Web/ClientApp/src/lib/mapping/__tests__/scribanRootArray.test.ts b/SW.Bitween.Web/ClientApp/src/lib/mapping/__tests__/scribanRootArray.test.ts
new file mode 100644
index 00000000..4385ac4d
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/lib/mapping/__tests__/scribanRootArray.test.ts
@@ -0,0 +1,396 @@
+/**
+ * Root-array mapping tests.
+ * Covers:
+ *  A) Generator output — verify generated Scriban template strings
+ *  B) Parser round-trip — generate → parse → re-generate produces equivalent output
+ *  C) All 4 modes (source / fixed / partner / global) + lookup + transform
+ *  D) Primitive root arrays
+ *  E) Filter support
+ *  F) Nested arrays inside root-array items
+ */
+import { generateScriban } from '../scribanGenerator';
+import { parseScriban, resolveParentArrayIds } from '../scribanParser';
+import { FieldMapping, ArrayMapping } from '../types';
+
+// ─── Helpers ─────────────────────────────────────────────────────────────────
+
+let _id = 0;
+function id() { return `t-${++_id}`; }
+
+function am(overrides: Partial<ArrayMapping> & { source: string; alias: string }): ArrayMapping {
+  return {
+    id: id(),
+    target: '',
+    mappings: [],
+    isRootOutput: true,
+    ...overrides,
+  };
+}
+
+function field(o: Partial<FieldMapping> & { target: string; source: string }): FieldMapping {
+  return { id: id(), ...o };
+}
+
+function roundTrip(arrayMappings: ArrayMapping[]) {
+  const template = generateScriban([], arrayMappings);
+  const parsed = parseScriban(template);
+  const withIds = parsed.arrayMappings.map((a) => ({ ...a, id: id() }));
+  const resolved = resolveParentArrayIds(withIds);
+  return { template, parsed, arrayMappings: resolved };
+}
+
+// ─── A. Generator output ─────────────────────────────────────────────────────
+
+describe('generator: root-array output', () => {
+  it('emits root [ ] when isRootOutput=true', () => {
+    const t = generateScriban([], [am({
+      source: 'items', alias: 'item',
+      mappings: [field({ target: 'id', source: 'Id' })],
+    })]);
+
+    expect(t.trim()).toMatch(/^\[/);
+    expect(t.trim()).toMatch(/\]$/);
+    expect(t).toContain('for item in items');
+    expect(t).toContain('"id": {{ item.Id | json }}');
+  });
+
+  it('does NOT emit wrapping { } object', () => {
+    const t = generateScriban([], [am({
+      source: 'items', alias: 'item',
+      mappings: [field({ target: 'id', source: 'Id' })],
+    })]);
+
+    expect(t.trim()).not.toMatch(/^\{/);
+  });
+
+  it('fieldMappings are ignored when isRootOutput AM is present', () => {
+    const t = generateScriban(
+      [field({ target: 'shouldBeIgnored', source: 'x' })],
+      [am({ source: 'items', alias: 'item', mappings: [] })],
+    );
+
+    expect(t).not.toContain('shouldBeIgnored');
+  });
+
+  it('source mode: item field reference', () => {
+    const t = generateScriban([], [am({
+      source: 'orders', alias: 'order',
+      mappings: [field({ target: 'orderId', source: 'OrderId' })],
+    })]);
+
+    expect(t).toContain('"orderId": {{ order.OrderId | json }}');
+  });
+
+  it('fixed mode: string value', () => {
+    const t = generateScriban([], [am({
+      source: 'items', alias: 'item',
+      mappings: [field({ target: 'type', source: '', fixedValue: 'order' })],
+    })]);
+
+    expect(t).toContain('"type": "order"');
+  });
+
+  it('fixed mode: numeric value', () => {
+    const t = generateScriban([], [am({
+      source: 'items', alias: 'item',
+      mappings: [field({ target: 'version', source: '', fixedValue: '42' })],
+    })]);
+
+    expect(t).toContain('"version": 42');
+  });
+
+  it('partner mode', () => {
+    const t = generateScriban([], [am({
+      source: 'items', alias: 'item',
+      mappings: [field({ target: 'env', source: '', partnerPropKey: 'environment' })],
+    })]);
+
+    expect(t).toContain('"env": {{ (__partner__ ?? {})["environment"] | json }}');
+  });
+
+  it('global mode', () => {
+    const t = generateScriban([], [am({
+      source: 'items', alias: 'item',
+      mappings: [field({ target: 'region', source: '', globalSetId: 'mySet', globalKey: 'region' })],
+    })]);
+
+    expect(t).toContain('"region": {{ ((__globals__ ?? {})["mySet"] ?? {})["region"] | json }}');
+  });
+
+  it('lookup — null fallback', () => {
+    const t = generateScriban([], [am({
+      source: 'items', alias: 'item',
+      mappings: [field({
+        target: 'label', source: 'Status',
+        lookupDictionary: { entries: [{ from: 'A', to: 'Active' }], fallback: 'null' },
+      })],
+    })]);
+
+    expect(t).toContain('$__e = { "A": "Active" }');
+    expect(t).toContain('$__e[item.Status]');
+  });
+
+  it('lookup — custom fallback', () => {
+    const t = generateScriban([], [am({
+      source: 'items', alias: 'item',
+      mappings: [field({
+        target: 'label', source: 'Code',
+        lookupDictionary: { entries: [{ from: 'A', to: 'Alpha' }], fallback: 'custom', fallbackValue: 'Unknown' },
+      })],
+    })]);
+
+    expect(t).toContain('"Unknown"');
+    expect(t).toContain('??');
+  });
+
+  it('filter — emits if block inside loop', () => {
+    const t = generateScriban([], [am({
+      source: 'orders', alias: 'order',
+      filter: { field: 'Active', operator: '==', value: 'true' },
+      mappings: [field({ target: 'id', source: 'Id' })],
+    })]);
+
+    expect(t).toContain('if order.Active == "true"');
+  });
+
+  it('primitive root array via source loop', () => {
+    const t = generateScriban([], [{
+      id: id(),
+      target: '',
+      source: 'tags',
+      alias: 'tag',
+      isRootOutput: true,
+      mappings: [],
+      primitiveItems: [{ source: 'tags' }],
+    }]);
+
+    expect(t.trim()).toMatch(/^\[/);
+    // primitive items are emitted as raw {{ path | json }} lines
+    expect(t).toContain('{{ tags | json }}');
+  });
+});
+
+// ─── B. Parser round-trip ────────────────────────────────────────────────────
+
+describe('parser: root-array template round-trip', () => {
+  it('detects isRootOutput=true when template starts with [', () => {
+    const template = `[
+{{- for item in items -}}
+{
+  "id": {{ item.Id | json }},
+},
+{{- end -}}
+]`;
+    const { arrayMappings } = parseScriban(template);
+
+    expect(arrayMappings).toHaveLength(1);
+    expect(arrayMappings[0].isRootOutput).toBe(true);
+    expect(arrayMappings[0].source).toBe('items');
+    expect(arrayMappings[0].alias).toBe('item');
+    expect(arrayMappings[0].target).toBe('');
+  });
+
+  it('parses field mappings inside the root loop', () => {
+    const template = `[
+{{- for order in orders -}}
+{
+  "orderId": {{ order.OrderId | json }},
+  "status": "ACTIVE",
+},
+{{- end -}}
+]`;
+    const { arrayMappings } = parseScriban(template);
+
+    expect(arrayMappings[0].mappings).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ target: 'orderId', source: 'OrderId' }),
+        expect.objectContaining({ target: 'status', fixedValue: 'ACTIVE' }),
+      ])
+    );
+  });
+
+  it('round-trips source mapping through generate → parse', () => {
+    const original: ArrayMapping[] = [am({
+      source: 'orders', alias: 'order',
+      mappings: [
+        field({ target: 'id', source: 'OrderId' }),
+        field({ target: 'status', source: '', fixedValue: 'pending' }),
+      ],
+    })];
+
+    const { arrayMappings } = roundTrip(original);
+
+    expect(arrayMappings).toHaveLength(1);
+    expect(arrayMappings[0].isRootOutput).toBe(true);
+    expect(arrayMappings[0].source).toBe('orders');
+    expect(arrayMappings[0].mappings).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ target: 'id', source: 'OrderId' }),
+        expect.objectContaining({ target: 'status', fixedValue: 'pending' }),
+      ])
+    );
+  });
+
+  it('round-trips partner mapping', () => {
+    const original: ArrayMapping[] = [am({
+      source: 'items', alias: 'item',
+      mappings: [field({ target: 'env', source: '', partnerPropKey: 'environment' })],
+    })];
+
+    const { arrayMappings } = roundTrip(original);
+
+    expect(arrayMappings[0].mappings[0]).toMatchObject({ target: 'env', partnerPropKey: 'environment' });
+  });
+
+  it('round-trips global mapping', () => {
+    const original: ArrayMapping[] = [am({
+      source: 'items', alias: 'item',
+      mappings: [field({ target: 'region', source: '', globalSetId: 'mySet', globalKey: 'region' })],
+    })];
+
+    const { arrayMappings } = roundTrip(original);
+
+    expect(arrayMappings[0].mappings[0]).toMatchObject({ globalSetId: 'mySet', globalKey: 'region' });
+  });
+
+  it('round-trips lookup with null fallback', () => {
+    const original: ArrayMapping[] = [am({
+      source: 'items', alias: 'item',
+      mappings: [field({
+        target: 'label', source: 'Code',
+        lookupDictionary: { entries: [{ from: 'A', to: 'Alpha' }, { from: 'B', to: 'Beta' }], fallback: 'null' },
+      })],
+    })];
+
+    const { arrayMappings } = roundTrip(original);
+    const m = arrayMappings[0].mappings[0];
+
+    expect(m.lookupDictionary?.fallback).toBe('null');
+    expect(m.lookupDictionary?.entries).toEqual([
+      { from: 'A', to: 'Alpha' },
+      { from: 'B', to: 'Beta' },
+    ]);
+  });
+
+  it('round-trips lookup with custom fallback', () => {
+    const original: ArrayMapping[] = [am({
+      source: 'items', alias: 'item',
+      mappings: [field({
+        target: 'label', source: 'Code',
+        lookupDictionary: { entries: [{ from: 'A', to: 'Alpha' }], fallback: 'custom', fallbackValue: 'Unknown' },
+      })],
+    })];
+
+    const { arrayMappings } = roundTrip(original);
+    const m = arrayMappings[0].mappings[0];
+
+    expect(m.lookupDictionary?.fallback).toBe('custom');
+    expect(m.lookupDictionary?.fallbackValue).toBe('Unknown');
+  });
+
+  it('does NOT return fieldMappings for a root-array template', () => {
+    const template = `[
+{{- for item in items -}}
+{
+  "id": {{ item.Id | json }},
+},
+{{- end -}}
+]`;
+    const { fieldMappings } = parseScriban(template);
+
+    expect(fieldMappings).toHaveLength(0);
+  });
+
+  it('normal (non-root-array) template is unaffected', () => {
+    const template = `{
+  "orderId": {{ orderId | json }},
+}`;
+    const { fieldMappings, arrayMappings } = parseScriban(template);
+
+    expect(fieldMappings).toHaveLength(1);
+    expect(fieldMappings[0]).toMatchObject({ target: 'orderId', source: 'orderId' });
+    expect(arrayMappings).toHaveLength(0);
+  });
+
+  it('generates template that starts with [ when isRootOutput=true and re-parsed produces same AM count', () => {
+    const original: ArrayMapping[] = [am({
+      source: 'items', alias: 'item',
+      mappings: [field({ target: 'x', source: 'X' })],
+    })];
+    const t1 = generateScriban([], original);
+    const { arrayMappings: parsed1 } = parseScriban(t1);
+    const withIds = parsed1.map((a) => ({ ...a, id: id() }));
+    const t2 = generateScriban([], withIds.map((a) => ({ ...a, mappings: a.mappings.map((m) => ({ ...m, id: id() })) })));
+
+    // Both templates should start with [
+    expect(t1.trim()[0]).toBe('[');
+    expect(t2.trim()[0]).toBe('[');
+    // Both should contain the same field reference
+    expect(t1).toContain('item.X');
+    expect(t2).toContain('item.X');
+  });
+});
+
+// ─── G. Type casting with root-array output ──────────────────────────────────
+
+describe('type casting: root-array output', () => {
+  it('string source → number target applies to_float', () => {
+    const inputJson = JSON.stringify({ items: [{ price: '19.99' }] });
+    const outputJson = JSON.stringify([{ total: 0.0 }]);
+
+    const t = generateScriban([], [am({
+      source: 'items', alias: 'item',
+      mappings: [field({ target: 'total', source: 'price' })],
+    })], undefined, outputJson, inputJson);
+
+    expect(t).toContain('to_float');
+  });
+
+  it('number source → string target applies "" + cast', () => {
+    const inputJson = JSON.stringify({ items: [{ qty: 5 }] });
+    const outputJson = JSON.stringify([{ qty: '' }]);
+
+    const t = generateScriban([], [am({
+      source: 'items', alias: 'item',
+      mappings: [field({ target: 'qty', source: 'qty' })],
+    })], undefined, outputJson, inputJson);
+
+    expect(t).toMatch(/"qty":.*"" \+/);
+  });
+
+  it('same type (number → number) emits no cast', () => {
+    const inputJson = JSON.stringify({ items: [{ id: 1 }] });
+    const outputJson = JSON.stringify([{ id: 0 }]);
+
+    const t = generateScriban([], [am({
+      source: 'items', alias: 'item',
+      mappings: [field({ target: 'id', source: 'id' })],
+    })], undefined, outputJson, inputJson);
+
+    expect(t).toContain('"id": {{ item.id | json }}');
+    expect(t).not.toContain('to_float');
+  });
+
+  it('nested array: number source → string target applies "" + cast', () => {
+    const inputJson = JSON.stringify([{ OrderId: 1, LineItems: [{ SKU: 'ABC', Qty: 2 }] }]);
+    const outputJson = JSON.stringify([{ orderId: 0, lines: [{ sku: '', qty: '0' }] }]);
+
+    const rootAm: ArrayMapping = {
+      id: 'root', isRootOutput: true, source: 'items', alias: 'item', target: '',
+      mappings: [field({ target: 'orderId', source: 'OrderId' })],
+    };
+    const linesAm: ArrayMapping = {
+      id: 'lines', parentArrayId: 'root', source: 'LineItems', alias: 'line', target: 'lines',
+      mappings: [
+        field({ target: 'sku', source: 'SKU' }),
+        field({ target: 'qty', source: 'Qty' }),
+      ],
+    };
+
+    const t = generateScriban([], [rootAm, linesAm], undefined, outputJson, inputJson);
+
+    // qty target is string, Qty source is number → must cast
+    // qty target is string, Qty source is number → must cast with "" +
+    expect(t).toMatch(/"qty":[\s\S]*"" \+[\s\S]*Qty/);
+  });
+});
diff --git a/SW.Bitween.Web/ClientApp/src/lib/mapping/__tests__/scribanRoundTrip.test.ts b/SW.Bitween.Web/ClientApp/src/lib/mapping/__tests__/scribanRoundTrip.test.ts
new file mode 100644
index 00000000..a822ab1a
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/lib/mapping/__tests__/scribanRoundTrip.test.ts
@@ -0,0 +1,215 @@
+import { describe, it, expect } from 'vitest';
+import { generateScriban } from '../scribanGenerator';
+import { parseScriban, resolveParentArrayIds } from '../scribanParser';
+import { FieldMapping, ArrayMapping } from '../types';
+
+// ─── Helpers ─────────────────────────────────────────────────────────────────
+
+let _id = 0;
+function id(): string { return `test-${++_id}`; }
+
+function field(overrides: Partial<FieldMapping> & { target: string; source: string }): FieldMapping {
+  return { id: id(), fixedValue: undefined, ...overrides };
+}
+
+function roundTrip(
+  fieldMappings: FieldMapping[],
+  arrayMappings: ArrayMapping[] = []
+) {
+  const template = generateScriban(fieldMappings, arrayMappings);
+  const parsed = parseScriban(template);
+  // Assign IDs so parentArrayId resolution works
+  const withIds = parsed.arrayMappings.map((am) => ({ ...am, id: id() }));
+  const resolvedAMs = resolveParentArrayIds(withIds) as Array<
+    Omit<(typeof withIds)[number], 'parentTarget'> & { parentArrayId?: string }
+  >;
+  return {
+    fieldMappings: parsed.fieldMappings,
+    arrayMappings: resolvedAMs,
+  };
+}
+
+// Strip id before comparing — parsed output never has one
+function stripId(m: FieldMapping): Omit<FieldMapping, 'id'> {
+  const { id: _id, ...rest } = m;
+  return rest;
+}
+
+// ─── Source mappings ──────────────────────────────────────────────────────────
+
+describe('round-trip: source mappings', () => {
+  it('renames a flat field', () => {
+    const fm = [field({ target: 'orderId', source: 'Order.Id' })];
+    const { fieldMappings } = roundTrip(fm);
+    expect(fieldMappings).toHaveLength(1);
+    expect(fieldMappings[0].target).toBe('orderId');
+    expect(fieldMappings[0].source).toBe('Order.Id');
+  });
+
+  it('round-trips multiple flat fields', () => {
+    const fm = [
+      field({ target: 'a', source: 'x' }),
+      field({ target: 'b', source: 'y' }),
+    ];
+    const { fieldMappings } = roundTrip(fm);
+    expect(fieldMappings.map((m) => stripId(m as FieldMapping))).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ target: 'a', source: 'x' }),
+        expect.objectContaining({ target: 'b', source: 'y' }),
+      ])
+    );
+  });
+});
+
+// ─── Fixed value mappings ─────────────────────────────────────────────────────
+
+describe('round-trip: fixed value mappings', () => {
+  it('string fixed value', () => {
+    const fm = [field({ target: 'status', source: '', fixedValue: 'active' })];
+    const { fieldMappings } = roundTrip(fm);
+    expect(fieldMappings[0]).toMatchObject({ target: 'status', fixedValue: 'active' });
+  });
+
+  it('numeric fixed value', () => {
+    const fm = [field({ target: 'count', source: '', fixedValue: '42' })];
+    const { fieldMappings } = roundTrip(fm);
+    expect(fieldMappings[0]).toMatchObject({ target: 'count', fixedValue: '42' });
+  });
+
+  it('boolean fixed value true', () => {
+    const fm = [field({ target: 'flag', source: '', fixedValue: 'true' })];
+    const { fieldMappings } = roundTrip(fm);
+    expect(fieldMappings[0]).toMatchObject({ target: 'flag', fixedValue: 'true' });
+  });
+});
+
+// ─── Partner / global mappings ────────────────────────────────────────────────
+
+describe('round-trip: partner and global mappings', () => {
+  it('partner prop key', () => {
+    const fm = [field({ target: 'pkey', source: '', partnerPropKey: 'apiKey' })];
+    const { fieldMappings } = roundTrip(fm);
+    expect(fieldMappings[0]).toMatchObject({ target: 'pkey', partnerPropKey: 'apiKey' });
+  });
+
+  it('global set key', () => {
+    const fm = [field({ target: 'gval', source: '', globalSetId: 'mySet', globalKey: 'region' })];
+    const { fieldMappings } = roundTrip(fm);
+    expect(fieldMappings[0]).toMatchObject({ target: 'gval', globalSetId: 'mySet', globalKey: 'region' });
+  });
+});
+
+// ─── Lookup dictionary mappings ───────────────────────────────────────────────
+
+describe('round-trip: lookup dictionary', () => {
+  it('null fallback', () => {
+    const fm = [field({
+      target: 'category',
+      source: 'Cat',
+      lookupDictionary: {
+        entries: [{ from: 'A', to: 'Alpha' }, { from: 'B', to: 'Beta' }],
+        fallback: 'null',
+      },
+    })];
+    const { fieldMappings } = roundTrip(fm);
+    expect(fieldMappings[0].lookupDictionary?.fallback).toBe('null');
+    expect(fieldMappings[0].lookupDictionary?.entries).toEqual([
+      { from: 'A', to: 'Alpha' },
+      { from: 'B', to: 'Beta' },
+    ]);
+  });
+
+  it('custom fallback', () => {
+    const fm = [field({
+      target: 'category',
+      source: 'Cat',
+      lookupDictionary: {
+        entries: [{ from: 'A', to: 'Alpha' }],
+        fallback: 'custom',
+        fallbackValue: 'Unknown',
+      },
+    })];
+    const { fieldMappings } = roundTrip(fm);
+    expect(fieldMappings[0].lookupDictionary?.fallback).toBe('custom');
+    expect(fieldMappings[0].lookupDictionary?.fallbackValue).toBe('Unknown');
+  });
+});
+
+// ─── Transform mappings ───────────────────────────────────────────────────────
+
+describe('round-trip: transform', () => {
+  it('arithmetic transform', () => {
+    const fm = [field({ target: 'doubled', source: 'amount', transform: 'value * 2' })];
+    const { fieldMappings } = roundTrip(fm);
+    expect(fieldMappings[0]).toMatchObject({ target: 'doubled', source: 'amount' });
+    // transform is present (exact expression may differ — just verify it round-trips without null)
+    expect(fieldMappings[0].transform).toBeTruthy();
+  });
+});
+
+// ─── Array mappings ───────────────────────────────────────────────────────────
+
+describe('round-trip: array mappings', () => {
+  it('simple object array', () => {
+    const am: ArrayMapping[] = [{
+      id: id(),
+      source: 'Items',
+      target: 'lines',
+      alias: 'item',
+      mappings: [
+        { id: id(), target: 'sku', source: 'Sku' },
+        { id: id(), target: 'qty', source: 'Quantity' },
+      ],
+    }];
+    const { arrayMappings } = roundTrip([], am);
+    expect(arrayMappings).toHaveLength(1);
+    expect(arrayMappings[0]).toMatchObject({ source: 'Items', target: 'lines' });
+    expect(arrayMappings[0].mappings).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({ target: 'sku', source: 'Sku' }),
+        expect.objectContaining({ target: 'qty', source: 'Quantity' }),
+      ])
+    );
+  });
+
+  it('array with filter', () => {
+    const am: ArrayMapping[] = [{
+      id: id(),
+      source: 'Items',
+      target: 'active',
+      alias: 'item',
+      filter: { field: 'Status', operator: '==', value: 'active' },
+      mappings: [{ id: id(), target: 'name', source: 'Name' }],
+    }];
+    const { arrayMappings } = roundTrip([], am);
+    expect(arrayMappings[0].filter).toMatchObject({ field: 'Status', operator: '==', value: 'active' });
+  });
+
+  it('nested array (two levels)', () => {
+    const parentId = id();
+    const am: ArrayMapping[] = [
+      {
+        id: parentId,
+        source: 'Orders',
+        target: 'orders',
+        alias: 'ord',
+        mappings: [{ id: id(), target: 'ref', source: 'Ref' }],
+      },
+      {
+        id: id(),
+        parentArrayId: parentId,
+        source: 'Lines',
+        target: 'lines',
+        alias: 'ln',
+        mappings: [{ id: id(), target: 'sku', source: 'Sku' }],
+      },
+    ];
+    const { arrayMappings } = roundTrip([], am);
+    expect(arrayMappings).toHaveLength(2);
+    const parent = arrayMappings.find((a) => a.target === 'orders');
+    const child = arrayMappings.find((a) => a.target === 'lines');
+    expect(parent).toBeDefined();
+    expect(child).toBeDefined();
+    expect(child?.parentArrayId).toBe(parent?.id);
+  });
+});
diff --git a/SW.Bitween.Web/ClientApp/src/lib/mapping/arrayMappingHelpers.ts b/SW.Bitween.Web/ClientApp/src/lib/mapping/arrayMappingHelpers.ts
new file mode 100644
index 00000000..dd2eca18
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/lib/mapping/arrayMappingHelpers.ts
@@ -0,0 +1,140 @@
+import { ArrayMapping } from './types';
+
+/** Recursively build the absolute source path for an ArrayMapping by traversing parentArrayId links. */
+export function getFullSourcePath(amId: string, allMappings: ArrayMapping[]): string {
+  const am = allMappings.find((m) => m.id === amId);
+  if (!am) return '';
+  if (!am.parentArrayId) return am.source;
+  return `${getFullSourcePath(am.parentArrayId, allMappings)}.${am.source}`;
+}
+
+/** Recursively build the absolute target base path (dot-notation, no [*]) for an ArrayMapping. */
+export function getFullTargetBase(amId: string, allMappings: ArrayMapping[]): string {
+  const am = allMappings.find((m) => m.id === amId);
+  if (!am) return '';
+  if (!am.parentArrayId) return am.target;
+  return `${getFullTargetBase(am.parentArrayId, allMappings)}.${am.target}`;
+}
+
+/** Return the relative sub-array keys available inside the first item of a parent array path. */
+export function getItemArrayPaths(obj: any, parentFullSourcePath: string): string[] {
+  if (!parentFullSourcePath) return [];
+  const arr = navigateThroughArrays(obj, parentFullSourcePath);
+  if (!Array.isArray(arr) || arr.length === 0) return [];
+  const item = arr[0];
+  if (!item || typeof item !== 'object' || Array.isArray(item)) return [];
+  return Object.entries(item)
+    .filter(([, v]) => Array.isArray(v) && (v as any[]).length > 0 && typeof (v as any[])[0] === 'object' && (v as any[])[0] !== null)
+    .map(([k]) => k);
+}
+
+export function collectArrayPaths(obj: any, prefix = ''): string[] {
+  if (!obj || typeof obj !== 'object') return [];
+  if (Array.isArray(obj)) {
+    return prefix ? [prefix] : [];
+  }
+  return Object.entries(obj).flatMap(([k, v]) => {
+    const path = prefix ? `${prefix}.${k}` : k;
+    return collectArrayPaths(v, path);
+  });
+}
+
+/** Navigate a dot-separated path in an object, returning the value at that path. */
+export function navigatePath(obj: any, path: string): any {
+  if (!path) return obj;
+  return path.split('.').reduce((cur, key) => (cur != null && typeof cur === 'object' ? cur[key] : undefined), obj);
+}
+
+/**
+ * Like navigatePath but transparently traverses arrays by using the first element.
+ * e.g. navigateThroughArrays({orders: [{items: [...]}]}, 'orders.items') → items array
+ */
+export function navigateThroughArrays(obj: any, path: string): any {
+  if (!path) return obj;
+  return path.split('.').reduce((cur, key) => {
+    if (cur == null) return undefined;
+    const node = Array.isArray(cur) ? cur[0] : cur;
+    if (node == null || typeof node !== 'object') return undefined;
+    return node[key];
+  }, obj);
+}
+
+/** Get the flat leaf-property names of items inside an array at `arrayPath`. */
+export function getItemProperties(jsonStr: string, arrayPath: string): string[] {
+  try {
+    const root = JSON.parse(jsonStr);
+    // First try: direct navigation to the path
+    const arr = navigatePath(root, arrayPath);
+    if (Array.isArray(arr) && arr.length > 0) {
+      const first = arr[0];
+      if (first && typeof first === 'object' && !Array.isArray(first)) {
+        return flattenObjectKeys(first);
+      }
+    }
+    // Second try: scan ALL leaf paths in the JSON and filter to those under arrayPath
+    // This handles cases where the path traversal goes through intermediate arrays
+    const allPaths = getAllLeafPaths(root);
+    const prefix = `${arrayPath}.`;
+    const nested = allPaths
+      .filter((p) => p.startsWith(prefix))
+      .map((p) => p.slice(prefix.length))
+      .filter((p) => p.length > 0 && !p.includes('.'));
+    return [...new Set(nested)];
+  } catch {
+    return [];
+  }
+}
+
+/**
+ * Collect all leaf paths in an object, traversing through arrays by using the first element.
+ * E.g. {a: {b: [{c: 1}]}} → ['a.b.c']
+ */
+export function getAllLeafPaths(obj: any, prefix = ''): string[] {
+  if (!obj || typeof obj !== 'object') return prefix ? [prefix] : [];
+  if (Array.isArray(obj)) {
+    if (obj.length === 0) return [];
+    return getAllLeafPaths(obj[0], prefix);
+  }
+  return Object.entries(obj).flatMap(([k, v]) => {
+    const path = prefix ? `${prefix}.${k}` : k;
+    return getAllLeafPaths(v, path);
+  });
+}
+
+/** Recursively flatten object keys using dot notation. Only leaf (scalar) paths are
+ * returned — intermediate object keys are excluded. Array-valued keys are also excluded
+ * to prevent mistakenly mapping an array field to a scalar target field. */
+export function flattenObjectKeys(obj: any, prefix = ''): string[] {
+  if (!obj || typeof obj !== 'object' || Array.isArray(obj)) return prefix ? [prefix] : [];
+  return Object.entries(obj).flatMap(([k, v]) => {
+    const path = prefix ? `${prefix}.${k}` : k;
+    if (Array.isArray(v)) return []; // exclude array-valued keys
+    if (v && typeof v === 'object') {
+      return flattenObjectKeys(v, path); // recurse without emitting the intermediate key
+    }
+    return [path];
+  });
+}
+
+export function generateExample(
+  source: string,
+  target: string,
+  alias: string,
+  hasFilter: boolean,
+  filterField: string,
+  filterOp: string,
+  filterValue: string
+): string {
+  const lines = [`"${target}": [`];
+  lines.push(`  {{- for ${alias} in ${source} -}}`);
+  if (hasFilter && filterField) {
+    lines.push(`  {{- if ${alias}.${filterField} ${filterOp} ${filterValue} -}}`);
+  }
+  lines.push('  {');
+  lines.push('    // ... field mappings ...');
+  lines.push('  },');
+  if (hasFilter && filterField) lines.push('  {{- end -}}');
+  lines.push('  {{- end -}}');
+  lines.push(']');
+  return lines.join('\n');
+}
diff --git a/SW.Bitween.Web/ClientApp/src/lib/mapping/fixedItemHelpers.ts b/SW.Bitween.Web/ClientApp/src/lib/mapping/fixedItemHelpers.ts
new file mode 100644
index 00000000..8e86d3ad
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/lib/mapping/fixedItemHelpers.ts
@@ -0,0 +1,183 @@
+import { TreeNode } from './mappingPreview';
+import { LookupDictionary, LookupEntry } from './types';
+
+// ─── Fixed-item inline panel types ───────────────────────────────────────────
+
+export type DraftFieldMode = 'source' | 'fixed' | 'array' | 'partner' | 'global';
+
+export interface DraftField {
+  key: string;
+  mode: DraftFieldMode;
+  value: string;
+  transform: string;
+  showTransform: boolean;
+  // partner mode:
+  partnerPropKey?: string;
+  // global mode:
+  globalSetId?: string;
+  globalKey?: string;
+  // source lookup dictionary:
+  lookupDictionary?: LookupDictionary;
+  // array mode only:
+  nestedChildNode?: TreeNode;
+  nestedItems?: DraftField[][];
+  addingItem?: DraftField[] | null;
+  editingSubIdx?: number | null;
+}
+
+export const FIXED_ITEM_MAX_DEPTH = 2; // 0-based: depths 0,1,2 → 3 nesting levels
+
+/** Recursively collect leaf keys from tree children, using dot-notation for nested objects. */
+function collectLeafKeysFromChildren(children: TreeNode[], prefix = ''): string[] {
+  return children.flatMap((c) => {
+    const path = prefix ? `${prefix}.${c.key}` : c.key;
+    if (c.type === 'leaf') return [path];
+    if (c.type === 'object') return collectLeafKeysFromChildren(c.children, path);
+    return []; // skip arrays — handled separately
+  });
+}
+
+export function initDraftFieldsFromNode(node: TreeNode | undefined): DraftField[] {
+  if (!node) return [{ key: '', mode: 'fixed' as DraftFieldMode, value: '', transform: '', showTransform: false }];
+  const leafKeys = collectLeafKeysFromChildren(node.children);
+  if (leafKeys.length > 0) {
+    return leafKeys.map((key) => ({ key, mode: 'fixed' as DraftFieldMode, value: '', transform: '', showTransform: false }));
+  }
+  return [{ key: '', mode: 'fixed' as DraftFieldMode, value: '', transform: '', showTransform: false }];
+}
+
+function parseLookupEntries(dictStr: string): LookupEntry[] {
+  const entries: LookupEntry[] = [];
+  const re = /"([^"]+)": "([^"]*)"/g;
+  let m;
+  while ((m = re.exec(dictStr)) !== null) entries.push({ from: m[1], to: m[2] });
+  return entries;
+}
+
+/** Set a value at a dotted path inside a record, creating intermediate objects as needed. */
+function setRecordByPath(obj: Record<string, unknown>, path: string, value: unknown): void {
+  const parts = path.split('.');
+  let cur: Record<string, unknown> = obj;
+  for (let i = 0; i < parts.length - 1; i++) {
+    if (typeof cur[parts[i]] !== 'object' || cur[parts[i]] === null || Array.isArray(cur[parts[i]])) {
+      cur[parts[i]] = {};
+    }
+    cur = cur[parts[i]] as Record<string, unknown>;
+  }
+  cur[parts[parts.length - 1]] = value;
+}
+
+export function draftFieldsToRecord(fields: DraftField[]): Record<string, unknown> {
+  const result: Record<string, unknown> = {};
+  for (const df of fields) {
+    const k = df.key.trim();
+    if (!k) continue;
+    if (df.mode === 'array') {
+      setRecordByPath(result, k, (df.nestedItems ?? []).map((itemFields) => draftFieldsToRecord(itemFields)));
+    } else if (df.mode === 'partner') {
+      if (!df.partnerPropKey?.trim()) continue;
+      setRecordByPath(result, k, `{{__partner__?.${df.partnerPropKey.trim()}}}`);
+    } else if (df.mode === 'global') {
+      if (!df.globalSetId?.trim() || !df.globalKey?.trim()) continue;
+      setRecordByPath(result, k, `{{__globals__?.${df.globalSetId.trim()}["${df.globalKey.trim()}"]}}`);
+    } else if (df.mode === 'source') {
+      if (!df.value.trim()) continue;
+      const src = df.value.trim();
+      const lkp = df.lookupDictionary;
+      if (lkp?.entries?.length) {
+        const valid = lkp.entries.filter(({ from, to }) => from.trim() !== '' && to.trim() !== '');
+        if (valid.length > 0) {
+          const entriesStr = valid.map(({ from, to }) => `"${from}": "${to}"`).join(', ');
+          if (lkp.fallback === 'null') {
+            setRecordByPath(result, k, `{{$__e = { ${entriesStr} }; $__e[${src}]}}`);
+          } else {
+            const fb = lkp.fallback === 'custom' ? `"${lkp.fallbackValue ?? ''}"` : src;
+            setRecordByPath(result, k, `{{$__e = { ${entriesStr} }; ($__e[${src}] ?? ${fb})}}`);
+          }
+          continue;
+        }
+      }
+      const expr = df.transform.trim()
+        ? df.transform.trim().replace(/\bvalue\b/g, src)
+        : src;
+      setRecordByPath(result, k, `{{${expr}}}`);
+    } else {
+      if (df.value.trim() === '') continue;
+      const raw = df.value.trim();
+      const n = Number(raw);
+      if (raw !== '' && !isNaN(n)) setRecordByPath(result, k, n);
+      else if (raw === 'true') setRecordByPath(result, k, true);
+      else if (raw === 'false') setRecordByPath(result, k, false);
+      else setRecordByPath(result, k, raw);
+    }
+  }
+  return result;
+}
+
+/** Flatten a nested record to dotted-path keys, keeping arrays as single entries. */
+function flattenRecordKeys(obj: Record<string, unknown>, prefix = ''): string[] {
+  return Object.entries(obj).flatMap(([k, v]) => {
+    const path = prefix ? `${prefix}.${k}` : k;
+    if (Array.isArray(v)) return [path]; // arrays kept as-is
+    if (v && typeof v === 'object') return flattenRecordKeys(v as Record<string, unknown>, path);
+    return [path];
+  });
+}
+
+/** Get a value at a dotted path from a nested record. */
+function getRecordByPath(obj: Record<string, unknown>, path: string): unknown {
+  return path.split('.').reduce((cur: Record<string, unknown> | undefined, k) => (
+    cur != null && typeof cur === 'object' ? cur[k] as Record<string, unknown> | undefined : undefined
+  ), obj as Record<string, unknown> | undefined);
+}
+
+export function recordToDraftFields(item: Record<string, unknown>, node: TreeNode): DraftField[] {
+  const nodeLeafKeys = collectLeafKeysFromChildren(node.children);
+  const arrayChildren = node.children.filter((c) => c.type === 'array');
+  const itemKeys = flattenRecordKeys(item);
+  const allKeys = [...new Set([...nodeLeafKeys, ...itemKeys])];
+  return allKeys.map((key): DraftField => {
+    const v = getRecordByPath(item, key);
+    if (Array.isArray(v)) {
+      const childNode = arrayChildren.find((c) => c.key === key);
+      return {
+        key, mode: 'array', value: '', transform: '', showTransform: false,
+        nestedChildNode: childNode,
+        nestedItems: v.map((subItem) =>
+          childNode
+            ? recordToDraftFields(subItem as Record<string, unknown>, childNode)
+            : Object.entries(subItem as Record<string, unknown>).map(([k, sv]) => ({
+                key: k, mode: 'fixed' as DraftFieldMode, value: String(sv ?? ''), transform: '', showTransform: false,
+              }))
+        ),
+        addingItem: null,
+      };
+    }
+    if (typeof v === 'string') {
+      const m = v.match(/^\{\{(.+)\}\}$/);
+      if (m) {
+        const expr = m[1].trim();
+        // Partner: {{__partner__?.propkey}}
+        const partnerMatch = expr.match(/^__partner__\??\.([\w]+)$/);
+        if (partnerMatch) return { key, mode: 'partner', value: '', transform: '', showTransform: false, partnerPropKey: partnerMatch[1] };
+        // Global: {{__globals__?.setid["key"]}}
+        const globalMatch = expr.match(/^__globals__\??\.([\w]+)\["([^"]+)"\]$/);
+        if (globalMatch) return { key, mode: 'global', value: '', transform: '', showTransform: false, globalSetId: globalMatch[1], globalKey: globalMatch[2] };
+        // Lookup (null fallback): $__e = { ... }; $__e[path]
+        const lkpNull = expr.match(/^\$__e = \{ (.+) \}; \$__e\[(.+)\]$/);
+        if (lkpNull) return { key, mode: 'source', value: lkpNull[2], transform: '', showTransform: false, lookupDictionary: { entries: parseLookupEntries(lkpNull[1]), fallback: 'null' } };
+        // Lookup (custom fallback): $__e = { ... }; ($__e[path] ?? FB)
+        const lkpFb = expr.match(/^\$__e = \{ (.+) \}; \(\$__e\[(.+)\] \?\? (.+)\)$/);
+        if (lkpFb) {
+          return { key, mode: 'source', value: lkpFb[2], transform: '', showTransform: false, lookupDictionary: {
+            entries: parseLookupEntries(lkpFb[1]),
+            fallback: 'custom',
+            fallbackValue: lkpFb[3].replace(/^"(.*)"$/, '$1'),
+          }};
+        }
+        return { key, mode: 'source', value: expr, transform: '', showTransform: false };
+      }
+    }
+    return { key, mode: 'fixed', value: v !== undefined ? String(v) : '', transform: '', showTransform: false };
+  });
+}
diff --git a/SW.Bitween.Web/ClientApp/src/lib/mapping/mappingEditorActions.ts b/SW.Bitween.Web/ClientApp/src/lib/mapping/mappingEditorActions.ts
new file mode 100644
index 00000000..cff2ea79
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/lib/mapping/mappingEditorActions.ts
@@ -0,0 +1,102 @@
+import { KeyValuePair } from './types';
+import { ArrayMapping, EditorMode, FieldMapping, ValidationError } from './types';
+
+// ─── State ────────────────────────────────────────────────────────────────────
+
+export interface CoreState {
+  fieldMappings: FieldMapping[];
+  arrayMappings: ArrayMapping[];
+}
+
+export interface MappingEditorState extends CoreState {
+  inputJson: string;
+  outputJson: string;
+  mode: EditorMode;
+  manualTemplate: string;
+  isManualDirty: boolean;
+  selectedMappingId: string | null;
+  hoveredPath: string | null;
+  searchInput: string;
+  searchOutput: string;
+  collapsedNodes: string[];
+  editingArrayId: string | null;
+  newArrayPresetTarget: string;
+  newArrayParentId: string | null;
+  newArrayIsRootOutput: boolean;
+  past: CoreState[];
+  future: CoreState[];
+  validationErrors: ValidationError[];
+  showValidation: boolean;
+  showPreview: boolean;
+  subscriptionId: number | null;
+  mapperId: string | null;
+  selectedPartnerId: number | null;
+  partnerAdapterProperties: Record<string, string>;
+}
+
+// ─── Action type union ────────────────────────────────────────────────────────
+
+export type MappingEditorAction =
+  | { type: 'LOAD_CONTEXT'; payload: { subscriptionId: number; mapperId?: string | null; mapperProperties?: KeyValuePair[] } }
+  | { type: 'SET_INPUT_JSON'; payload: string }
+  | { type: 'SET_OUTPUT_JSON'; payload: string }
+  | { type: 'SET_MODE'; payload: EditorMode }
+  | { type: 'SET_MANUAL_TEMPLATE'; payload: string }
+  | { type: 'SYNC_MANUAL_TEMPLATE'; payload: string }
+  | { type: 'CLEAR_MANUAL_DIRTY' }
+  | { type: 'ADD_FIELD_MAPPING'; payload: Omit<FieldMapping, 'id'> }
+  | { type: 'REMOVE_FIELD_MAPPING'; payload: string }
+  | { type: 'UPDATE_FIELD_MAPPING'; payload: Partial<FieldMapping> & { id: string } }
+  | { type: 'SET_FIELD_MAPPINGS'; payload: FieldMapping[] }
+  | { type: 'SET_ARRAY_MAPPINGS'; payload: ArrayMapping[] }
+  | { type: 'ADD_ARRAY_MAPPING'; payload: Omit<ArrayMapping, 'id'> }
+  | { type: 'REMOVE_ARRAY_MAPPING'; payload: string }
+  | { type: 'UPDATE_ARRAY_MAPPING'; payload: Partial<ArrayMapping> & { id: string } }
+  | { type: 'SELECT_MAPPING'; payload: string | null }
+  | { type: 'SET_HOVERED_PATH'; payload: string | null }
+  | { type: 'SET_SEARCH_INPUT'; payload: string }
+  | { type: 'SET_SEARCH_OUTPUT'; payload: string }
+  | { type: 'TOGGLE_NODE_COLLAPSED'; payload: string }
+  | { type: 'OPEN_ARRAY_MODAL'; payload: { id: string | null; presetTarget?: string; parentArrayId?: string | null; isRootOutput?: boolean } }
+  | { type: 'TOGGLE_PREVIEW' }
+  | { type: 'SET_VALIDATION_ERRORS'; payload: ValidationError[] }
+  | { type: 'TOGGLE_VALIDATION' }
+  | { type: 'UNDO' }
+  | { type: 'REDO' }
+  | { type: 'CLEAR_ALL' }
+  | { type: 'AUTO_MATCH' }
+  | { type: 'GENERATE_FROM_TARGET_JSON' }
+  | { type: 'SET_SELECTED_PARTNER'; payload: { partnerId: number | null; adapterProperties: Record<string, string> } };
+
+// ─── Action creators ──────────────────────────────────────────────────────────
+
+export const loadEditorContext = (p: { subscriptionId: number; mapperId?: string | null; mapperProperties?: KeyValuePair[] }): MappingEditorAction => ({ type: 'LOAD_CONTEXT', payload: p });
+export const setInputJson = (p: string): MappingEditorAction => ({ type: 'SET_INPUT_JSON', payload: p });
+export const setOutputJson = (p: string): MappingEditorAction => ({ type: 'SET_OUTPUT_JSON', payload: p });
+export const setMode = (p: EditorMode): MappingEditorAction => ({ type: 'SET_MODE', payload: p });
+export const setManualTemplate = (p: string): MappingEditorAction => ({ type: 'SET_MANUAL_TEMPLATE', payload: p });
+export const syncManualTemplate = (p: string): MappingEditorAction => ({ type: 'SYNC_MANUAL_TEMPLATE', payload: p });
+export const clearManualDirty = (): MappingEditorAction => ({ type: 'CLEAR_MANUAL_DIRTY' });
+export const addFieldMapping = (p: Omit<FieldMapping, 'id'>): MappingEditorAction => ({ type: 'ADD_FIELD_MAPPING', payload: p });
+export const removeFieldMapping = (p: string): MappingEditorAction => ({ type: 'REMOVE_FIELD_MAPPING', payload: p });
+export const updateFieldMapping = (p: Partial<FieldMapping> & { id: string }): MappingEditorAction => ({ type: 'UPDATE_FIELD_MAPPING', payload: p });
+export const setFieldMappings = (p: FieldMapping[]): MappingEditorAction => ({ type: 'SET_FIELD_MAPPINGS', payload: p });
+export const setArrayMappings = (p: ArrayMapping[]): MappingEditorAction => ({ type: 'SET_ARRAY_MAPPINGS', payload: p });
+export const setSelectedPartner = (partnerId: number | null, adapterProperties: Record<string, string>): MappingEditorAction => ({ type: 'SET_SELECTED_PARTNER', payload: { partnerId, adapterProperties } });
+export const addArrayMapping = (p: Omit<ArrayMapping, 'id'>): MappingEditorAction => ({ type: 'ADD_ARRAY_MAPPING', payload: p });
+export const removeArrayMapping = (p: string): MappingEditorAction => ({ type: 'REMOVE_ARRAY_MAPPING', payload: p });
+export const updateArrayMapping = (p: Partial<ArrayMapping> & { id: string }): MappingEditorAction => ({ type: 'UPDATE_ARRAY_MAPPING', payload: p });
+export const selectMapping = (p: string | null): MappingEditorAction => ({ type: 'SELECT_MAPPING', payload: p });
+export const setHoveredPath = (p: string | null): MappingEditorAction => ({ type: 'SET_HOVERED_PATH', payload: p });
+export const setSearchInput = (p: string): MappingEditorAction => ({ type: 'SET_SEARCH_INPUT', payload: p });
+export const setSearchOutput = (p: string): MappingEditorAction => ({ type: 'SET_SEARCH_OUTPUT', payload: p });
+export const toggleNodeCollapsed = (p: string): MappingEditorAction => ({ type: 'TOGGLE_NODE_COLLAPSED', payload: p });
+export const openArrayModal = (p: { id: string | null; presetTarget?: string; parentArrayId?: string | null; isRootOutput?: boolean }): MappingEditorAction => ({ type: 'OPEN_ARRAY_MODAL', payload: p });
+export const togglePreview = (): MappingEditorAction => ({ type: 'TOGGLE_PREVIEW' });
+export const setValidationErrors = (p: ValidationError[]): MappingEditorAction => ({ type: 'SET_VALIDATION_ERRORS', payload: p });
+export const toggleValidation = (): MappingEditorAction => ({ type: 'TOGGLE_VALIDATION' });
+export const undo = (): MappingEditorAction => ({ type: 'UNDO' });
+export const redo = (): MappingEditorAction => ({ type: 'REDO' });
+export const clearAll = (): MappingEditorAction => ({ type: 'CLEAR_ALL' });
+export const autoMatch = (): MappingEditorAction => ({ type: 'AUTO_MATCH' });
+export const generateFromTargetJson = (): MappingEditorAction => ({ type: 'GENERATE_FROM_TARGET_JSON' });
diff --git a/SW.Bitween.Web/ClientApp/src/lib/mapping/mappingEditorReducer.ts b/SW.Bitween.Web/ClientApp/src/lib/mapping/mappingEditorReducer.ts
new file mode 100644
index 00000000..36a6bb46
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/lib/mapping/mappingEditorReducer.ts
@@ -0,0 +1,369 @@
+import { produce } from 'immer';
+import { KeyValuePair } from './types';
+import { parseScriban, resolveParentArrayIds } from './scribanGenerator';
+import { ArrayMapping, FieldMapping, ValidationError, genId } from './types';
+import { CoreState, MappingEditorAction, MappingEditorState } from './mappingEditorActions';
+
+// ─── Helpers ──────────────────────────────────────────────────────────────────
+
+export function snapshot(state: MappingEditorState): CoreState {
+  return {
+    fieldMappings: state.fieldMappings.map((m) => ({ ...m })),
+    arrayMappings: state.arrayMappings.map((am) => ({
+      ...am,
+      mappings: am.mappings.map((m) => ({ ...m })),
+      fixedItems: am.fixedItems ? am.fixedItems.map((fi) => ({ ...fi })) : undefined,
+      primitiveItems: am.primitiveItems ? am.primitiveItems.map((pi) => ({ ...pi })) : undefined,
+    })),
+  };
+}
+
+export function flatPathsFromObj(obj: any, prefix = ''): string[] {
+  if (typeof obj !== 'object' || obj === null) return prefix ? [prefix] : [];
+  if (Array.isArray(obj)) {
+    if (obj.length === 0 || typeof obj[0] !== 'object' || obj[0] === null) return prefix ? [prefix] : [];
+    return flatPathsFromObj(obj[0], `${prefix}[*]`);
+  }
+  return Object.entries(obj).flatMap(([k, v]) => {
+    const path = prefix ? `${prefix}.${k}` : k;
+    return flatPathsFromObj(v, path);
+  });
+}
+
+export function loadFromProps(props: KeyValuePair[]): CoreState {
+  const rulesEntry = props.find((p) => p.key === 'Rules');
+  const scribanEntry = props.find((p) => p.key === 'ScribanTemplate');
+  const arrayEntry = props.find((p) => p.key === 'ArrayRules');
+  const fieldMappings: FieldMapping[] = [];
+  const arrayMappings: ArrayMapping[] = [];
+
+  if (rulesEntry?.value) {
+    try {
+      const parsed = JSON.parse(rulesEntry.value);
+      if (Array.isArray(parsed)) {
+        parsed.forEach((r: any, i: number) => {
+          fieldMappings.push({
+            id: `loaded-${i}`,
+            source: r.sourcePath ?? r.SourcePath ?? '',
+            target: r.outputField ?? r.OutputField ?? '',
+            transform: r.transform ?? r.Transform ?? undefined,
+            fixedValue: r.fixedValue ?? r.FixedValue ?? undefined,
+            valuesSetId: r.valuesSetId ?? r.ValuesSetId ?? undefined,
+          });
+        });
+      }
+    } catch {}
+  } else if (scribanEntry?.value && scribanEntry.value !== '{}') {
+    try {
+      const parsed = parseScriban(scribanEntry.value);
+      parsed.fieldMappings.forEach((m, i) => {
+        fieldMappings.push({ id: `loaded-${i}`, ...m });
+      });
+      if (!arrayEntry?.value) {
+        const rawAMs = parsed.arrayMappings.map((am, i) => ({
+          id: `arr-loaded-${i}`,
+          ...am,
+          mappings: am.mappings.map((m, j) => ({ id: `arr-loaded-${i}-${j}`, ...m })),
+        }));
+        resolveParentArrayIds(rawAMs).forEach((am) => arrayMappings.push(am as ArrayMapping));
+      }
+    } catch {}
+  }
+
+  if (arrayEntry?.value) {
+    try {
+      const parsed = JSON.parse(arrayEntry.value);
+      if (Array.isArray(parsed)) {
+        parsed.forEach((am: any, i: number) => {
+          arrayMappings.push({
+            id: am.id ?? `arr-loaded-${i}`,
+            source: am.source ?? '',
+            target: am.target ?? '',
+            alias: am.alias ?? 'item',
+            filter: am.filter,
+            parentArrayId: am.parentArrayId ?? undefined,
+            isRootOutput: am.isRootOutput ?? undefined,
+            mappings: (am.mappings ?? []).map((m: any, j: number) => ({
+              id: `arr-loaded-${i}-${j}`,
+              source: m.source ?? '',
+              target: m.target ?? '',
+              transform: m.transform,
+              fixedValue: m.fixedValue,
+              valuesSetId: m.valuesSetId ?? undefined,
+              isRootSource: m.isRootSource ?? undefined,
+              lookupDictionary: m.lookupDictionary ?? undefined,
+              partnerPropKey: m.partnerPropKey ?? undefined,
+              globalSetId: m.globalSetId ?? undefined,
+              globalKey: m.globalKey ?? undefined,
+            })),
+            fixedItems: Array.isArray(am.fixedItems) ? am.fixedItems : undefined,
+            primitiveItems: Array.isArray(am.primitiveItems) ? am.primitiveItems : undefined,
+          });
+        });
+      }
+    } catch {}
+  }
+
+  return { fieldMappings, arrayMappings };
+}
+
+// ─── Initial state ────────────────────────────────────────────────────────────
+
+export const initialMappingEditorState: MappingEditorState = {
+  inputJson: '',
+  outputJson: '',
+  fieldMappings: [],
+  arrayMappings: [],
+  mode: 'visual',
+  manualTemplate: '',
+  isManualDirty: false,
+  selectedMappingId: null,
+  hoveredPath: null,
+  searchInput: '',
+  searchOutput: '',
+  collapsedNodes: [],
+  editingArrayId: null,
+  newArrayPresetTarget: '',
+  newArrayParentId: null,
+  newArrayIsRootOutput: false,
+  past: [],
+  future: [],
+  validationErrors: [],
+  showValidation: false,
+  showPreview: false,
+  subscriptionId: null,
+  mapperId: null,
+  selectedPartnerId: null,
+  partnerAdapterProperties: {},
+};
+
+// ─── Reducer ──────────────────────────────────────────────────────────────────
+
+export function mappingEditorReducer(
+  state: MappingEditorState,
+  action: MappingEditorAction
+): MappingEditorState {
+  return produce(state, (draft) => {
+    switch (action.type) {
+      case 'LOAD_CONTEXT': {
+        const { subscriptionId, mapperId, mapperProperties } = action.payload;
+        draft.subscriptionId = subscriptionId;
+        draft.mapperId = mapperId ?? null;
+        draft.fieldMappings = [];
+        draft.arrayMappings = [];
+        draft.inputJson = '';
+        draft.outputJson = '';
+        if (mapperProperties && mapperProperties.length > 0) {
+          const core = loadFromProps(mapperProperties);
+          draft.fieldMappings = core.fieldMappings;
+          draft.arrayMappings = core.arrayMappings;
+          const sjEntry = mapperProperties.find((p) => p.key === 'SourceJson');
+          const tjEntry = mapperProperties.find((p) => p.key === 'TargetJson');
+          if (sjEntry?.value) draft.inputJson = sjEntry.value;
+          if (tjEntry?.value) draft.outputJson = tjEntry.value;
+          const pidEntry = mapperProperties.find((p) => p.key === 'PartnerId');
+          if (pidEntry?.value) draft.selectedPartnerId = Number(pidEntry.value);
+        }
+        draft.past = [];
+        draft.future = [];
+        draft.selectedMappingId = null;
+        draft.mode = 'visual';
+        draft.isManualDirty = false;
+        if (!draft.selectedPartnerId) draft.selectedPartnerId = null;
+        draft.partnerAdapterProperties = {};
+        break;
+      }
+      case 'SET_INPUT_JSON':
+        draft.inputJson = action.payload;
+        break;
+      case 'SET_OUTPUT_JSON':
+        draft.outputJson = action.payload;
+        break;
+      case 'SET_MODE':
+        draft.mode = action.payload;
+        break;
+      case 'SET_MANUAL_TEMPLATE':
+        draft.manualTemplate = action.payload;
+        draft.isManualDirty = true;
+        break;
+      case 'SYNC_MANUAL_TEMPLATE':
+        draft.manualTemplate = action.payload;
+        draft.isManualDirty = false;
+        break;
+      case 'CLEAR_MANUAL_DIRTY':
+        draft.isManualDirty = false;
+        break;
+      case 'ADD_FIELD_MAPPING':
+        draft.past = [...draft.past.slice(-49), snapshot(state)];
+        draft.future = [];
+        draft.fieldMappings.push({ id: genId(), ...action.payload });
+        break;
+      case 'REMOVE_FIELD_MAPPING':
+        draft.past = [...draft.past.slice(-49), snapshot(state)];
+        draft.future = [];
+        draft.fieldMappings = draft.fieldMappings.filter((m) => m.id !== action.payload);
+        if (draft.selectedMappingId === action.payload) draft.selectedMappingId = null;
+        break;
+      case 'UPDATE_FIELD_MAPPING': {
+        draft.past = [...draft.past.slice(-49), snapshot(state)];
+        draft.future = [];
+        const idx = draft.fieldMappings.findIndex((m) => m.id === action.payload.id);
+        if (idx !== -1) draft.fieldMappings[idx] = { ...draft.fieldMappings[idx], ...action.payload };
+        break;
+      }
+      case 'SET_FIELD_MAPPINGS':
+        draft.past = [...draft.past.slice(-49), snapshot(state)];
+        draft.future = [];
+        draft.fieldMappings = action.payload;
+        break;
+      case 'SET_ARRAY_MAPPINGS':
+        draft.past = [...draft.past.slice(-49), snapshot(state)];
+        draft.future = [];
+        draft.arrayMappings = action.payload;
+        break;
+      case 'ADD_ARRAY_MAPPING':
+        draft.past = [...draft.past.slice(-49), snapshot(state)];
+        draft.future = [];
+        draft.arrayMappings.push({ id: genId(), ...action.payload });
+        break;
+      case 'REMOVE_ARRAY_MAPPING':
+        draft.past = [...draft.past.slice(-49), snapshot(state)];
+        draft.future = [];
+        draft.arrayMappings = draft.arrayMappings.filter((m) => m.id !== action.payload);
+        break;
+      case 'UPDATE_ARRAY_MAPPING': {
+        draft.past = [...draft.past.slice(-49), snapshot(state)];
+        draft.future = [];
+        const idx = draft.arrayMappings.findIndex((m) => m.id === action.payload.id);
+        if (idx !== -1) draft.arrayMappings[idx] = { ...draft.arrayMappings[idx], ...action.payload };
+        break;
+      }
+      case 'SELECT_MAPPING':
+        draft.selectedMappingId = action.payload;
+        break;
+      case 'SET_HOVERED_PATH':
+        draft.hoveredPath = action.payload;
+        break;
+      case 'SET_SEARCH_INPUT':
+        draft.searchInput = action.payload;
+        break;
+      case 'SET_SEARCH_OUTPUT':
+        draft.searchOutput = action.payload;
+        break;
+      case 'TOGGLE_NODE_COLLAPSED': {
+        const idx = draft.collapsedNodes.indexOf(action.payload);
+        if (idx === -1) draft.collapsedNodes.push(action.payload);
+        else draft.collapsedNodes.splice(idx, 1);
+        break;
+      }
+      case 'OPEN_ARRAY_MODAL':
+        draft.editingArrayId = action.payload.id;
+        draft.newArrayPresetTarget = action.payload.presetTarget ?? '';
+        draft.newArrayParentId = action.payload.parentArrayId ?? null;
+        draft.newArrayIsRootOutput = action.payload.isRootOutput ?? false;
+        break;
+      case 'TOGGLE_PREVIEW':
+        draft.showPreview = !draft.showPreview;
+        break;
+      case 'SET_VALIDATION_ERRORS':
+        draft.validationErrors = action.payload;
+        draft.showValidation = action.payload.length > 0;
+        break;
+      case 'TOGGLE_VALIDATION':
+        draft.showValidation = !draft.showValidation;
+        break;
+      case 'SET_SELECTED_PARTNER': {
+        draft.selectedPartnerId = action.payload.partnerId;
+        draft.partnerAdapterProperties = action.payload.adapterProperties;
+        // Do not clear any partnerPropKey mappings — user manages their own mappings.
+        break;
+      }
+      case 'UNDO': {
+        if (state.past.length === 0) break;
+        const prev = state.past[state.past.length - 1];
+        draft.future = [snapshot(state), ...state.future.slice(0, 49)];
+        draft.past = state.past.slice(0, -1);
+        draft.fieldMappings = prev.fieldMappings;
+        draft.arrayMappings = prev.arrayMappings;
+        break;
+      }
+      case 'REDO': {
+        if (state.future.length === 0) break;
+        const next = state.future[0];
+        draft.past = [...state.past.slice(-49), snapshot(state)];
+        draft.future = state.future.slice(1);
+        draft.fieldMappings = next.fieldMappings;
+        draft.arrayMappings = next.arrayMappings;
+        break;
+      }
+      case 'CLEAR_ALL':
+        draft.past = [...draft.past.slice(-49), snapshot(state)];
+        draft.future = [];
+        draft.fieldMappings = [];
+        draft.arrayMappings = [];
+        break;
+      case 'AUTO_MATCH': {
+        draft.past = [...draft.past.slice(-49), snapshot(state)];
+        draft.future = [];
+        const norm = (s: string) =>
+          (s.split('.').pop() ?? s).toLowerCase().replace(/[_\-\[\]\*]/g, '');
+        let inputPaths: string[] = [];
+        let outputPaths: string[] = [];
+        try { inputPaths = flatPathsFromObj(JSON.parse(state.inputJson)); } catch {}
+        try { outputPaths = flatPathsFromObj(JSON.parse(state.outputJson)); } catch {}
+
+        const arrayTargets = new Set(state.arrayMappings.map((am) => am.target));
+        const targetsToProcess = outputPaths.length > 0
+          ? outputPaths.filter((p) => {
+              if (p.includes('[*]')) return false;
+              const parts = p.split('.');
+              return !parts.some((_, i) => arrayTargets.has(parts.slice(0, i + 1).join('.')));
+            })
+          : state.fieldMappings.map((m) => m.target);
+
+        const existingByTarget = new Map(state.fieldMappings.map((m) => [m.target, m]));
+        const result: FieldMapping[] = [];
+
+        for (const target of targetsToProcess) {
+          const existing = existingByTarget.get(target);
+          if (existing?.source || existing?.fixedValue !== undefined || existing?.valuesSetId) {
+            result.push(existing);
+            continue;
+          }
+          const match = inputPaths.find((p) => norm(p) === norm(target));
+          if (existing) {
+            result.push(
+              match
+                ? { ...existing, source: match, fixedValue: undefined, valuesSetId: undefined, transform: undefined }
+                : existing
+            );
+          } else if (match) {
+            result.push({ id: genId(), source: match, target });
+          }
+        }
+
+        for (const m of state.fieldMappings) {
+          if (!result.find((r) => r.target === m.target)) result.push(m);
+        }
+
+        draft.fieldMappings = result;
+        break;
+      }
+      case 'GENERATE_FROM_TARGET_JSON': {
+        draft.past = [...draft.past.slice(-49), snapshot(state)];
+        draft.future = [];
+        try {
+          const target = JSON.parse(state.outputJson);
+          const paths = flatPathsFromObj(target);
+          draft.fieldMappings = paths.map((p, i) => ({
+            id: `gen-${i}-${Date.now()}`,
+            target: p,
+            source: '',
+            isNullValue: true,
+          }));
+        } catch {}
+        break;
+      }
+    }
+  });
+}
diff --git a/SW.Bitween.Web/ClientApp/src/lib/mapping/mappingModeDefaults.ts b/SW.Bitween.Web/ClientApp/src/lib/mapping/mappingModeDefaults.ts
new file mode 100644
index 00000000..1b235435
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/lib/mapping/mappingModeDefaults.ts
@@ -0,0 +1,10 @@
+import { FieldMapping, MappingMode } from './types';
+
+// Default field values to apply when switching a leaf to a given mode.
+// For 'fixed', fixedValue is overridden at runtime with a sample from outputJson.
+export const MODE_INITIAL_FIELDS: Record<MappingMode, Partial<FieldMapping>> = {
+  fixed:   { source: '', fixedValue: '', partnerPropKey: undefined, globalSetId: undefined, globalKey: undefined, valuesSetId: undefined, lookupDictionary: undefined, transform: undefined },
+  partner: { source: '', fixedValue: undefined, partnerPropKey: '', globalSetId: undefined, globalKey: undefined, valuesSetId: undefined, lookupDictionary: undefined, transform: undefined },
+  global:  { source: '', fixedValue: undefined, partnerPropKey: undefined, globalSetId: '', globalKey: '', valuesSetId: undefined, lookupDictionary: undefined, transform: undefined },
+  source:  { fixedValue: undefined, partnerPropKey: undefined, globalSetId: undefined, globalKey: undefined, valuesSetId: undefined },
+};
diff --git a/SW.Bitween.Web/ClientApp/src/lib/mapping/mappingPreview.ts b/SW.Bitween.Web/ClientApp/src/lib/mapping/mappingPreview.ts
new file mode 100644
index 00000000..529d2371
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/lib/mapping/mappingPreview.ts
@@ -0,0 +1,57 @@
+// ─── Tree building for left/right panels ─────────────────────────────────────
+
+export type TreeNodeType = 'leaf' | 'object' | 'array';
+
+export interface TreeNode {
+  key: string;
+  path: string;
+  type: TreeNodeType;
+  value?: any;
+  itemCount?: number;
+  children: TreeNode[];
+}
+
+export function buildTree(obj: any, keyName = '', prefix = ''): TreeNode[] {
+  if (obj === null || obj === undefined) {
+    return keyName ? [{ key: keyName, path: prefix, type: 'leaf', value: null, children: [] }] : [];
+  }
+  if (Array.isArray(obj)) {
+    if (obj.length === 0 || typeof obj[0] !== 'object' || obj[0] === null) {
+      return keyName ? [{ key: keyName, path: prefix, type: 'leaf', value: obj, children: [] }] : [];
+    }
+    const itemPrefix = prefix ? `${prefix}[*]` : '[*]';
+    const children = Object.entries(obj[0] as object).flatMap(([k, v]) =>
+      // When the array is the root (no parent prefix), children are directly
+      // accessible via hoisting — use plain `k` so source paths are e.g. "OrderId"
+      // instead of "[*].OrderId" (which produces invalid Scriban "{{ .OrderId }}").
+      buildTree(v, k, prefix ? `${itemPrefix}.${k}` : k)
+    );
+    if (keyName) {
+      return [{ key: keyName, path: prefix, type: 'array', itemCount: obj.length, children }];
+    }
+    // Root-level array (no keyName): return a synthetic root array node so the
+    // output tree can show a "Configure Loop" button at the root.
+    return [{ key: 'root', path: '[*]', type: 'array', itemCount: obj.length, children }];
+  }
+  if (typeof obj === 'object') {
+    const entries = Object.entries(obj as object).flatMap(([k, v]) =>
+      buildTree(v, k, prefix ? `${prefix}.${k}` : k)
+    );
+    if (!keyName) return entries;
+    return [{ key: keyName, path: prefix, type: 'object', children: entries }];
+  }
+  return keyName ? [{ key: keyName, path: prefix, type: 'leaf', value: obj, children: [] }] : [];
+}
+
+export function flattenLeafPaths(node: TreeNode): string[] {
+  if (node.type === 'leaf') return [node.path];
+  return node.children.flatMap(flattenLeafPaths);
+}
+
+export function tryParseJson(s: string): any | null {
+  try {
+    return JSON.parse(s);
+  } catch {
+    return null;
+  }
+}
diff --git a/SW.Bitween.Web/ClientApp/src/lib/mapping/mappingTreeUtils.ts b/SW.Bitween.Web/ClientApp/src/lib/mapping/mappingTreeUtils.ts
new file mode 100644
index 00000000..847d582a
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/lib/mapping/mappingTreeUtils.ts
@@ -0,0 +1,70 @@
+import { ArrayMapping, FieldMapping } from './types';
+import { TreeNode } from './mappingPreview';
+
+// ─── Helper: check if a field mapping has any value assigned ────────────────────
+
+export function isFieldMappingPopulated(m: FieldMapping | undefined): boolean {
+  if (!m) return false;
+  return !!(
+    m.source ||
+    m.fixedValue !== undefined ||
+    m.partnerPropKey !== undefined ||
+    (m.globalSetId && m.globalKey) ||
+    (m.lookupDictionary?.entries?.length ?? 0) > 0 ||
+    m.valuesSetId
+  );
+}
+
+// ─── Helper: resolve full target prefix for a nested ArrayMapping ─────────────
+
+export function getFullTargetPrefix(amId: string, allMappings: ArrayMapping[]): string {
+  const am = allMappings.find((m) => m.id === amId);
+  if (!am) return '';
+  if (!am.parentArrayId) return am.target;
+  return `${getFullTargetPrefix(am.parentArrayId, allMappings)}[*].${am.target}`;
+}
+
+// ─── Helper: build tree from flat target paths ────────────────────────────────
+
+export function buildMappingTree(targetPaths: string[]): TreeNode[] {
+  const root: TreeNode[] = [];
+
+  for (const path of targetPaths) {
+    const parts = path.split('.');
+    insertNode(root, parts, 0, '');
+  }
+
+  return root;
+}
+
+export function insertNode(
+  nodes: TreeNode[],
+  parts: string[],
+  depth: number,
+  parentPath: string
+): void {
+  if (parts.length === 0) return;
+  const rawPart = parts[0];
+  const isArray = rawPart.includes('[*]') || rawPart.includes('[]');
+  // When rawPart is purely '[*]' (root array), key would be empty — use 'root' to match
+  // the synthetic node created by buildTree() so isRootArrayNode detection works correctly.
+  const key = rawPart.replace(/\[\*\]|\[\]/g, '') || 'root';
+  const currentPath = parentPath ? `${parentPath}.${rawPart}` : rawPart;
+
+  let existing = nodes.find((n) => n.key === key);
+  if (parts.length === 1) {
+    if (!existing) {
+      nodes.push({ key, path: currentPath, type: 'leaf', children: [] });
+    }
+    return;
+  }
+
+  if (!existing) {
+    existing = { key, path: currentPath, type: isArray ? 'array' : 'object', children: [] };
+    nodes.push(existing);
+  } else if (existing.type === 'leaf') {
+    // Upgrade leaf to container when it gains children
+    existing.type = isArray ? 'array' : 'object';
+  }
+  insertNode(existing.children, parts.slice(1), depth + 1, currentPath);
+}
diff --git a/SW.Bitween.Web/ClientApp/src/lib/mapping/mappingUtils.ts b/SW.Bitween.Web/ClientApp/src/lib/mapping/mappingUtils.ts
new file mode 100644
index 00000000..159fc0b2
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/lib/mapping/mappingUtils.ts
@@ -0,0 +1,18 @@
+// ─── Mapping Utilities ────────────────────────────────────────────────────────
+
+/**
+ * Resolves a dot-separated path against a parsed JSON object.
+ * Returns the string representation of the primitive value at that path,
+ * or an empty string if the path does not exist or resolves to an object/array.
+ */
+export function getValueAtPath(obj: unknown, path: string): string {
+  const parts = path.split('.');
+  let current: unknown = obj;
+  for (const part of parts) {
+    if (current == null || typeof current !== 'object') return '';
+    current = (current as Record<string, unknown>)[part];
+  }
+  if (current === null || current === undefined) return '';
+  if (typeof current === 'object') return '';
+  return String(current);
+}
diff --git a/SW.Bitween.Web/ClientApp/src/lib/mapping/scribanGenerator.ts b/SW.Bitween.Web/ClientApp/src/lib/mapping/scribanGenerator.ts
new file mode 100644
index 00000000..de0b62e1
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/lib/mapping/scribanGenerator.ts
@@ -0,0 +1,762 @@
+import { ArrayMapping, FieldMapping, FilterOperator, LookupDictionary, LookupEntry } from './types';
+
+/** Map of valuesSetId → (key → value) for enum lookups */
+export type ValuesSetMap = Record<string, Record<string, string>>;
+
+/** Map of dot-path → primitive type inferred from a JSON sample */
+export type TypeMap = Record<string, 'string' | 'number' | 'boolean'>;
+
+/**
+ * Build a TypeMap by walking every leaf in a JSON sample.
+ * Array items are represented with [*] in the path, e.g. "orders[*].price".
+ */
+export function buildTypeMap(json: string): TypeMap {
+  try {
+    return walkTypeMap(JSON.parse(json), '');
+  } catch {
+    return {};
+  }
+}
+
+function walkTypeMap(node: any, prefix: string): TypeMap {
+  if (node === null || node === undefined) return {};
+  if (Array.isArray(node)) {
+    if (node.length === 0) return {};
+    const first = node[0];
+    if (typeof first !== 'object') {
+      // primitive array — record the element type at this prefix.
+      // Named arrays are called with prefix already containing "[*]" (e.g. "prices[*]").
+      // Root primitive arrays are called with prefix="" → use "[*]" as key so the
+      // generator's `itemPrefix` ("[*]") resolves the type correctly.
+      const t = typeof first;
+      if (t === 'string' || t === 'number' || t === 'boolean') {
+        const key = prefix || '[*]';
+        return { [key]: t };
+      }
+      return {};
+    }
+    return walkTypeMap(first, prefix); // use first element as representative
+  }
+  if (typeof node === 'object') {
+    const result: TypeMap = {};
+    for (const [k, v] of Object.entries(node)) {
+      const path = prefix ? `${prefix}.${k}` : k;
+      if (Array.isArray(v)) {
+        // descend into array items using [*] notation
+        const inner = walkTypeMap(v, `${path}[*]`);
+        Object.assign(result, inner);
+      } else if (v !== null && typeof v === 'object') {
+        Object.assign(result, walkTypeMap(v, path));
+      } else if (typeof v === 'string') {
+        result[path] = 'string';
+      } else if (typeof v === 'number') {
+        result[path] = 'number';
+      } else if (typeof v === 'boolean') {
+        result[path] = 'boolean';
+      }
+    }
+    return result;
+  }
+  return {};
+}
+
+/**
+ * Return a Scriban-safe inline cast expression when source and target types differ.
+ * to_float is registered as a custom function in ScribanJsonHelper.cs.
+ */
+function castExpr(path: string, targetType: 'string' | 'number' | 'boolean', sourceType?: 'string' | 'number' | 'boolean'): string {
+  if (targetType === 'number') {
+    if (sourceType === 'boolean') return `(${path} == null ? null : (${path} ? 1 : 0))`;
+    return `(${path} | to_float)`;  // string → number
+  }
+  if (targetType === 'boolean') {
+    if (sourceType === 'string') return 'null'; // string → bool: always null
+    if (sourceType === 'number') return `(${path} == 0 ? false : (${path} == 1 ? true : null))`;
+    // generic / unknown source type
+    return `(${path} != null && ${path} != '' && ${path} != 'false' && ${path} != '0')`;
+  }
+  // string target
+  if (sourceType === 'boolean') return `(${path} == null ? null : (${path} ? "true" : "false"))`;
+  return `("" + ${path})`;  // number → string, generic
+}
+
+// ─── Scriban template generator ───────────────────────────────────────────────
+
+const OPERATOR_MAP: Record<FilterOperator, string> = {
+  '==': '==',
+  '!=': '!=',
+  '>': '>',
+  '>=': '>=',
+  '<': '<',
+  '<=': '<=',
+};
+
+function renderFilter(alias: string, filter: ArrayMapping['filter']): string {
+  if (!filter) return '';
+  const op = OPERATOR_MAP[filter.operator] ?? filter.operator;
+  const val = typeof filter.value === 'number' ? filter.value : `"${filter.value}"`;
+  return `${alias}.${filter.field} ${op} ${val}`;
+}
+
+/**
+ * Partner property keys and global value-set ids/keys are free-form user text (spaces,
+ * hyphens, leading digits, ...). Splicing them in as bare Scriban identifiers after `?.`
+ * breaks: Scriban tokenizes hyphens as subtraction, and a leading digit is a hard parse
+ * error. Index by string instead — that works for any content — and use `?? {}` at each
+ * hop so a missing partner/set doesn't throw (Scriban's `?.` only guards ONE hop, not a
+ * chained `[...]` after it).
+ */
+function partnerRef(key: string): string {
+  return `(__partner__ ?? {})[${JSON.stringify(key)}]`;
+}
+function globalRef(setId: string, key: string): string {
+  return `((__globals__ ?? {})[${JSON.stringify(setId)}] ?? {})[${JSON.stringify(key)}]`;
+}
+
+function renderFieldValue(
+  mapping: FieldMapping,
+  alias?: string,
+  valuesSetMap?: ValuesSetMap,
+  targetType?: 'string' | 'number' | 'boolean',
+  sourceType?: 'string' | 'number' | 'boolean'
+): string {
+  if (mapping.partnerPropKey) {
+    if (targetType === 'number' || targetType === 'boolean') return 'null';
+    return `{{ ${partnerRef(mapping.partnerPropKey)} | json }}`;
+  }
+  if (mapping.globalSetId && mapping.globalKey) {
+    if (targetType === 'number' || targetType === 'boolean') return 'null';
+    return `{{ ${globalRef(mapping.globalSetId, mapping.globalKey)} | json }}`;
+  }
+  if (mapping.fixedValue !== undefined) {
+    const num = Number(mapping.fixedValue);
+    if (!isNaN(num) && mapping.fixedValue.trim() !== '') return String(num);
+    if (mapping.fixedValue === 'true' || mapping.fixedValue === 'false') return mapping.fixedValue;
+    return `"${mapping.fixedValue}"`;
+  }
+  const src = mapping.source;
+  if (!src) return 'null';
+
+  // inline dictionary lookup — user-defined key→value map (takes precedence over valuesSetId)
+  if (mapping.lookupDictionary?.entries && mapping.lookupDictionary.entries.length > 0) {
+    const path = alias ? `${alias}.${src}` : src.replace(/\[?\*\]?/g, '');
+
+    // Format a single output value with the correct type for the Scriban dict literal
+    const fmtVal = (v: string): string => {
+      if (targetType === 'number') {
+        const n = Number(v);
+        return isNaN(n) ? `"${v}"` : String(n);
+      }
+      if (targetType === 'boolean') {
+        return v === 'true' || v === '1' ? 'true' : 'false';
+      }
+      return `"${v}"`; // string (default)
+    };
+
+    const entries = mapping.lookupDictionary.entries
+      .filter(({ from, to }) => from.trim() !== '' && to.trim() !== '')
+      .map(({ from, to }) => `"${from}": ${fmtVal(to)}`)
+      .join(', ');
+    if (!entries) return `{{ ${path} | json }}`;
+    const lkp = mapping.lookupDictionary;
+    if (lkp.fallback === 'null') {
+      return `{{ $__e = { ${entries} }; $__e[${path}] | json }}`;
+    }
+    const fb = fmtVal(lkp.fallbackValue ?? '');
+    return `{{ $__e = { ${entries} }; ($__e[${path}] ?? ${fb}) | json }}`;
+  }
+
+  // enum / values-set lookup — bake the dictionary inline
+  if (mapping.valuesSetId) {
+    const path = alias
+      ? `${alias}.${src}`
+      : src.replace(/\[?\*\]?/g, '');
+    const dict = valuesSetMap?.[mapping.valuesSetId];
+    if (dict && Object.keys(dict).length > 0) {
+      const entries = Object.entries(dict)
+        .map(([k, v]) => `"${k}": "${v}"`)
+        .join(', ');
+      return `{{ $__e = { ${entries} }; ($__e[${path}] ?? ${path}) | json }}{{# enum:${mapping.valuesSetId} #}}`;
+    }
+    return `{{ ${path} | json }}{{# enum:${mapping.valuesSetId} #}}`;
+  }
+
+  // transform expression — replace "value" with the actual path
+  if (mapping.transform) {
+    const path = alias ? `${alias}.${src.split('.').pop()}` : src.replace(/\./g, '.');
+    const transformedExpr = mapping.transform.replace(/\bvalue\b/g, path);
+    if (targetType === 'number') {
+      // null → null, bool → 0/1, object/array → null, string/number → to_float
+      return `{{ $__t = (${transformedExpr}); ($__t == null ? null : (($__t | object.typeof) == "boolean" ? ($__t ? 1 : 0) : ((($__t | object.typeof) == "object" || ($__t | object.typeof) == "array") ? null : ($__t | to_float)))) | json }}`;
+    }
+    if (targetType === 'string') {
+      // null → null, object/array → null, bool → "true"/"false", number → string
+      return `{{ $__t = (${transformedExpr}); ($__t == null ? null : ((($__t | object.typeof) == "object" || ($__t | object.typeof) == "array") ? null : (($__t | object.typeof) == "boolean" ? ($__t ? "true" : "false") : ("" + $__t)))) | json }}`;
+    }
+    return `{{ ${transformedExpr} | json }}`;
+  }
+
+  // plain path — apply type cast when target type is known
+  const path = alias
+    ? `${alias}.${src}`
+    : src.replace(/\[?\*\]?/g, '').replace(/^\.+/, ''); // strip [*] and any leading dot
+
+  if (targetType) {
+    // same type — no cast needed
+    if (sourceType === targetType) return `{{ ${path} | json }}`;
+    return `{{ ${castExpr(path, targetType, sourceType)} | json }}`;
+  }
+  return `{{ ${path} | json }}`;
+}
+
+function indent(lines: string, spaces: number): string {
+  const pad = ' '.repeat(spaces);
+  return lines
+    .split('\n')
+    .map((l) => pad + l)
+    .join('\n');
+}
+
+/**
+ * Generate a Scriban template from field + array mappings.
+ * Pass valuesSetMap to bake enum dictionaries inline; omit for degraded passthrough.
+ * Pass outputJson to enable automatic type-cast filters when source/target types differ.
+ */
+export function generateScriban(
+  fieldMappings: FieldMapping[],
+  arrayMappings: ArrayMapping[],
+  valuesSetMap?: ValuesSetMap,
+  outputJson?: string,
+  inputJson?: string
+): string {
+  const typeMap: TypeMap = outputJson ? buildTypeMap(outputJson) : {};
+  const sourceTypeMap: TypeMap = inputJson ? buildTypeMap(inputJson) : {};
+
+  // ── Root-array output: single top-level AM with isRootOutput=true ──────────
+  // When present, the whole template is just `[ ... ]` with no wrapping object.
+  // Field mappings are ignored in this mode (root output is an array, not an object).
+  const rootOutputAm = arrayMappings.find((am) => am.isRootOutput && !am.parentArrayId);
+  if (rootOutputAm) {
+    return renderRootArrayMapping(rootOutputAm, arrayMappings, valuesSetMap, typeMap, inputJson, sourceTypeMap);
+  }
+
+  const rootLines: string[] = ['{'];
+
+  // ── Simple field mappings ──────────────────────────────────────────────────
+  const validFields = fieldMappings.filter(
+    (m) => m.target.trim() && (m.source.trim() || m.fixedValue !== undefined || m.partnerPropKey || (m.globalSetId && m.globalKey))
+  );
+
+  const topLevelArrayMappings = arrayMappings.filter((am) => !am.parentArrayId && am.target);
+
+  // Determine top-level key order from outputJson so fields and arrays are
+  // interleaved in the same order they appear in the output template.
+  const getTopKey = (target: string) => target.split('.')[0];
+  let keyOrder: string[] = [];
+  if (outputJson) {
+    try {
+      const parsed = JSON.parse(outputJson);
+      if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {
+        keyOrder = Object.keys(parsed);
+      }
+    } catch { /* ignore */ }
+  }
+
+  const emittedFields = new Set<string>();
+  const emittedArrayIds = new Set<string>();
+
+  const emitField = (m: FieldMapping) => {
+    const targetType = typeMap[m.target];
+    const sourceType = m.source ? sourceTypeMap[m.source] : undefined;
+    rootLines.push(`  "${m.target}": ${renderFieldValue(m, undefined, valuesSetMap, targetType, sourceType)},`);
+    emittedFields.add(m.target);
+  };
+
+  const emitArray = (am: ArrayMapping) => {
+    rootLines.push(...renderArrayMapping(am, arrayMappings, undefined, 0, valuesSetMap, typeMap, inputJson, sourceTypeMap));
+    emittedArrayIds.add(am.id);
+  };
+
+  if (keyOrder.length > 0) {
+    // Emit in outputJson key order, grouping by top-level key
+    for (const key of keyOrder) {
+      for (const m of validFields) {
+        if (!emittedFields.has(m.target) && getTopKey(m.target) === key) emitField(m);
+      }
+      for (const am of topLevelArrayMappings) {
+        if (!emittedArrayIds.has(am.id) && getTopKey(am.target) === key) emitArray(am);
+      }
+    }
+    // Emit any remaining items not covered by keyOrder
+    for (const m of validFields) { if (!emittedFields.has(m.target)) emitField(m); }
+    for (const am of topLevelArrayMappings) { if (!emittedArrayIds.has(am.id)) emitArray(am); }
+  } else {
+    // No outputJson available — original order: fields first, then arrays
+    for (const m of validFields) emitField(m);
+    for (const am of topLevelArrayMappings) emitArray(am);
+  }
+
+  rootLines.push('}');
+  return rootLines.join('\n');
+}
+
+/** Recursively embed child AMs' fixedItems — skip keys already present inline. */
+function enrichFixedItem(
+  item: Record<string, unknown>,
+  am: ArrayMapping,
+  allAMs: ArrayMapping[]
+): Record<string, unknown> {
+  const children = allAMs.filter((c) => c.parentArrayId === am.id && c.fixedItems?.length && c.target);
+  if (children.length === 0) return item;
+  const enriched: Record<string, unknown> = { ...item };
+  for (const child of children) {
+    if (!(child.target in enriched)) {
+      enriched[child.target] = child.fixedItems!.map((fi) =>
+        enrichFixedItem(fi as Record<string, unknown>, child, allAMs)
+      );
+    }
+  }
+  return enriched;
+}
+
+/** Recursively check whether any value in a tree contains a {{dynamic}} reference. */
+function hasDynamicDeep(v: unknown): boolean {
+  if (typeof v === 'string') return /^\{\{.+\}\}$/.test(v);
+  if (Array.isArray(v)) return v.some(hasDynamicDeep);
+  if (v && typeof v === 'object') return Object.values(v as object).some(hasDynamicDeep);
+  return false;
+}
+
+/** Coerce a fixed value to the target type for JSON emission. */
+function coerceFixedValue(v: unknown, targetType: 'string' | 'number' | 'boolean' | undefined): unknown {
+  if (targetType === 'number') {
+    if (typeof v === 'boolean') return v ? 1 : 0;  // bool → num: true→1, false→0
+    const n = Number(v);
+    return isNaN(n) ? v : n;
+  }
+  if (targetType === 'boolean') {
+    if (typeof v === 'boolean') return v;
+    if (typeof v === 'number') return v === 0 ? false : v === 1 ? true : null; // num → bool: 0→false, 1→true, else null
+    return null; // string → bool: always null
+  }
+  if (targetType === 'string') {
+    if (typeof v === 'boolean') return v ? 'true' : 'false'; // bool → string
+    return String(v);
+  }
+  return v; // unknown target type — keep as-is
+}
+
+/** Recursively emit a fixed-item value as Scriban-safe line(s), expanding {{expr}} references. */
+function emitFixedValueLines(v: unknown, pad: string, typeMap?: TypeMap, fieldPath?: string, sourceTypeMap?: TypeMap, sourceItemPrefix?: string): string[] {
+  if (Array.isArray(v)) {
+    if (!v.some(hasDynamicDeep)) return [JSON.stringify(v)];
+    const subPad = pad + '  ';
+    const result: string[] = ['['];
+    for (const item of v) {
+      if (item && typeof item === 'object' && !Array.isArray(item)) {
+        result.push(`${subPad}{`);
+        const kPad = subPad + '  ';
+        for (const [k, sv] of Object.entries(item as Record<string, unknown>)) {
+          const childPath = fieldPath ? `${fieldPath}.${k}` : k;
+          const vLines = emitFixedValueLines(sv, kPad, typeMap, childPath, sourceTypeMap, sourceItemPrefix);
+          result.push(`${kPad}"${k}": ${vLines[0]}${vLines.length === 1 ? ',' : ''}`);
+          for (let li = 1; li < vLines.length - 1; li++) result.push(vLines[li]);
+          if (vLines.length > 1) result.push(`${vLines[vLines.length - 1]},`);
+        }
+        result.push(`${subPad}},`);
+      } else {
+        const vLines = emitFixedValueLines(item, subPad, typeMap, fieldPath, sourceTypeMap, sourceItemPrefix);
+        result.push(`${subPad}${vLines.join('\n')},`);
+      }
+    }
+    result.push(`${pad}]`);
+    return result;
+  }
+  if (typeof v === 'string') {
+    const m = v.match(/^\{\{(.+)\}\}$/);
+    if (m) {
+      const expr = m[1].trim();
+      const targetType = fieldPath ? typeMap?.[fieldPath] : undefined;
+      // Resolve source type by looking up the full expression as a dot-path first
+      // (fixed-item source values are always root-level paths like "customer.city"),
+      // then fall back to alias-stripped last-segment lookup for item-relative paths.
+      let exprSourceType: 'string' | 'number' | 'boolean' | undefined;
+      if (sourceTypeMap) {
+        // 1. Direct root path lookup — covers "customer.city", "order.status", etc.
+        exprSourceType = sourceTypeMap[expr];
+        // 2. Alias-relative: strip the leading "alias." if present, look up under item prefix
+        if (!exprSourceType && sourceItemPrefix) {
+          const fieldNameMatch = expr.match(/\.(\w+)$/) ?? expr.match(/^(\w+)$/);
+          const fieldName = fieldNameMatch?.[1];
+          if (fieldName) {
+            exprSourceType = sourceTypeMap[`${sourceItemPrefix}.${fieldName}`] ?? sourceTypeMap[fieldName];
+          }
+        }
+      }
+      // Lookup dict expressions ($__e = ...) must not be wrapped with castExpr —
+      // the assignment+semicolon syntax is invalid inside a parenthesised cast expression.
+      const isLookup = expr.includes('$__e =');
+      return targetType && !isLookup
+        ? [`{{ ${castExpr(expr, targetType, exprSourceType)} | json }}`]
+        : [`{{ ${expr} | json }}`];
+    }
+    const targetType = fieldPath ? typeMap?.[fieldPath] : undefined;
+    return [JSON.stringify(coerceFixedValue(v, targetType))];
+  }
+  // Non-string primitives (number, boolean) — apply target type coercion if known
+  const primitiveTargetType = fieldPath ? typeMap?.[fieldPath] : undefined;
+  if (primitiveTargetType !== undefined) return [JSON.stringify(coerceFixedValue(v, primitiveTargetType))];
+  return [JSON.stringify(v)];
+}
+
+/**
+ * Renders a root-array template: the entire output is `[ ... ]` with no wrapping object.
+ * Used when ArrayMapping.isRootOutput = true.
+ * The loop body and field rendering are identical to renderArrayMapping; only the outer
+ * container changes from `"target": [ ... ]` to just `[ ... ]`.
+ */
+function renderRootArrayMapping(
+  am: ArrayMapping,
+  allAMs: ArrayMapping[],
+  valuesSetMap?: ValuesSetMap,
+  typeMap?: TypeMap,
+  inputJson?: string,
+  sourceTypeMap?: TypeMap
+): string {
+  const alias = am.alias || 'item';
+  const source = am.source;
+
+  // Build the item type-map prefix — for root output we use the source path directly
+  // (e.g. "items[*]" when source is "items", or just "[*]" when input is a root array)
+  const itemPrefix = source ? `${source}[*]` : '[*]';
+
+  const filterExpr = am.filter
+    ? `${alias}.${am.filter.field} ${OPERATOR_MAP[am.filter.operator] ?? am.filter.operator} ${
+        typeof am.filter.value === 'number' ? am.filter.value : `"${am.filter.value}"`
+      }`
+    : '';
+
+  const lines: string[] = ['['];
+
+  // ── Primitive root array (no loop variable needed in the item body) ────────
+  if (am.primitiveItems != null) {
+    for (const item of am.primitiveItems) {
+      const elemType = typeMap?.[itemPrefix];
+      if (item.partnerPropKey) {
+        lines.push(elemType === 'number' || elemType === 'boolean'
+          ? '  null,'
+          : `  {{ ${partnerRef(item.partnerPropKey)} | json }},`);
+      } else if (item.globalSetId && item.globalKey) {
+        lines.push(elemType === 'number' || elemType === 'boolean'
+          ? '  null,'
+          : `  {{ ${globalRef(item.globalSetId, item.globalKey)} | json }},`);
+      } else if (item.source?.trim()) {
+        const path = item.source.trim();
+        if (item.transform?.trim()) {
+          const expr = item.transform.trim().replace(/\bvalue\b/g, path);
+          lines.push(`  {{ ${expr} | json }},`);
+        } else {
+          lines.push(`  {{ ${path} | json }},`);
+        }
+      } else if (item.fixedValue !== undefined) {
+        lines.push(`  ${JSON.stringify(coerceFixedValue(item.fixedValue, typeMap?.[itemPrefix]))},`);
+      } else {
+        lines.push('  null,');
+      }
+    }
+    lines.push(']');
+    return lines.join('\n');
+  }
+
+  // ── Fixed items before the dynamic loop ───────────────────────────────────
+  if (am.fixedItems?.length) {
+    for (const rawItem of am.fixedItems) {
+      const enriched = enrichFixedItem(rawItem as Record<string, unknown>, am, allAMs);
+      if (!hasDynamicDeep(enriched)) {
+        lines.push(`  ${JSON.stringify(enriched)},`);
+      } else {
+        lines.push('  {');
+        for (const [k, v] of Object.entries(enriched)) {
+          const fp = `${itemPrefix}.${k}`;
+          const vLines = emitFixedValueLines(v, '    ', typeMap, fp, sourceTypeMap, source ? `${source}[*]` : '');
+          lines.push(`    "${k}": ${vLines[0]}${vLines.length === 1 ? ',' : ''}`);
+          for (let li = 1; li < vLines.length - 1; li++) lines.push(vLines[li]);
+          if (vLines.length > 1) lines.push(`${vLines[vLines.length - 1]},`);
+        }
+        lines.push('  },');
+      }
+    }
+  }
+
+  if (!source) {
+    lines.push(']');
+    return lines.join('\n');
+  }
+
+  lines.push(`{{- for ${alias} in ${source} -}}`);
+  if (am.filter) lines.push(`{{- if ${filterExpr} -}}`);
+  lines.push('{');
+  for (const m of am.mappings) {
+    if (!m.target.trim()) continue;
+    // typeMap is built from the root-array output JSON, whose keys are bare field
+    // names (no prefix), so look up by m.target directly.
+    const targetType = typeMap?.[m.target];
+    const sourceType = m.source ? sourceTypeMap?.[`${itemPrefix}.${m.source}`] : undefined;
+    lines.push(`  "${m.target}": ${renderFieldValue(m, alias, valuesSetMap, targetType, sourceType)},`);
+  }
+  // Render child AMs recursively inside this loop body
+  const children = allAMs.filter((c) => c.parentArrayId === am.id && c.source && c.target);
+  for (const child of children) {
+    lines.push(...renderArrayMapping(child, allAMs, alias, 1, valuesSetMap, typeMap, inputJson, sourceTypeMap));
+  }
+  lines.push('},');
+  if (am.filter) lines.push('{{- end -}}');
+  lines.push('{{- end -}}');
+  lines.push(']');
+  return lines.join('\n');
+}
+
+/**
+ * Recursively render a single ArrayMapping block (and its children) at a given nesting depth.
+ * depth=0 → 2-space indent (root-level); depth=1 → 4-space indent (inside a loop), etc.
+ */
+function renderArrayMapping(
+  am: ArrayMapping,
+  allAMs: ArrayMapping[],
+  outerAlias: string | undefined,
+  depth: number,
+  valuesSetMap?: ValuesSetMap,
+  typeMap?: TypeMap,
+  inputJson?: string,
+  sourceTypeMap?: TypeMap
+): string[] {
+  const pad = ' '.repeat(2 * (depth + 1));
+  const fieldPad = ' '.repeat(2 * (depth + 2));
+  const alias = am.alias || 'item';
+  const source = outerAlias ? `${outerAlias}.${am.source}` : am.source;
+  const filterExpr = renderFilter(alias, am.filter ?? undefined);
+
+  // Build the full item prefix for typeMap lookups, e.g. "labels[*]" or "orders[*].items[*]".
+  // Root-output AMs have target='' and no parent — they contribute no prefix segment so that
+  // their children resolve to "lines[*]" rather than "[*].lines[*]".
+  function resolvePrefix(id: string): string {
+    const m = allAMs.find((a) => a.id === id);
+    if (!m) return '';
+    if (!m.parentArrayId) return m.target ? `${m.target}[*]` : '';
+    const parentPrefix = resolvePrefix(m.parentArrayId);
+    return parentPrefix ? `${parentPrefix}.${m.target}[*]` : `${m.target}[*]`;
+  }
+  const itemPrefix = resolvePrefix(am.id);
+
+  // Builds the full dot-path to this AM's source array (e.g. "orders" or "orders.items")
+  const buildFullSrcPath = (id: string): string => {
+    const a = allAMs.find((x) => x.id === id);
+    if (!a) return '';
+    if (!a.parentArrayId) return a.source;
+    return `${buildFullSrcPath(a.parentArrayId)}.${a.source}`;
+  };
+  // Source item prefix for sourceTypeMap lookups (e.g. "order.products[*]" or "orders[*].items[*]").
+  // Walk the actual inputJson to only insert [*] at segments that are genuinely arrays,
+  // not blindly after every dot — "order.products" should become "order.products[*]",
+  // not "order[*].products[*]".
+  const srcDotPath = buildFullSrcPath(am.id);
+  let sourceArrayItemPrefix = '';
+  if (srcDotPath) {
+    let walked = false;
+    if (inputJson) {
+      try {
+        const root = JSON.parse(inputJson);
+        const segments = srcDotPath.split('.');
+        let node: any = root;
+        const prefixParts: string[] = [];
+        for (const seg of segments) {
+          if (node == null) break;
+          if (Array.isArray(node)) node = node[0]; // step into first item of enclosing array
+          if (typeof node !== 'object' || node == null) break;
+          const val = node[seg];
+          if (Array.isArray(val)) {
+            prefixParts.push(`${seg}[*]`);
+            node = val;
+          } else {
+            prefixParts.push(seg);
+            node = val;
+          }
+        }
+        if (prefixParts.length === segments.length) {
+          sourceArrayItemPrefix = prefixParts.join('.');
+          walked = true;
+        }
+      } catch { /* ignore */ }
+    }
+    // Fallback when inputJson is absent or the walk couldn't complete
+    if (!walked) {
+      sourceArrayItemPrefix = srcDotPath.split('.').join('[*].') + '[*]';
+    }
+  }
+
+  // Build a set of ALL dot-paths that exist within an array item — used as fallback
+  // for old mappings that predate the isRootSource flag.
+  const itemPathSet = new Set<string>();
+  if (inputJson && am.source) {
+    try {
+      const root = JSON.parse(inputJson);
+      let node: any = root;
+      for (const part of buildFullSrcPath(am.id).split('.')) {
+        if (node == null) break;
+        if (Array.isArray(node)) node = node[0];
+        if (typeof node !== 'object' || node == null) break;
+        node = node[part];
+      }
+      if (Array.isArray(node) && node.length > 0 && node[0] && typeof node[0] === 'object') {
+        const collectPaths = (obj: any, prefix: string) => {
+          if (!obj || typeof obj !== 'object' || Array.isArray(obj)) { if (prefix) itemPathSet.add(prefix); return; }
+          for (const [k, v] of Object.entries(obj)) {
+            const p = prefix ? `${prefix}.${k}` : k;
+            itemPathSet.add(p);
+            collectPaths(v, p);
+          }
+        };
+        collectPaths(node[0], '');
+      }
+    } catch { /* ignore */ }
+  }
+
+  const lines: string[] = [];
+  lines.push(`${pad}"${am.target}": [`);
+
+  // ── Primitive array (each element mapped individually — no loop) ────────────
+  if (am.primitiveItems != null) {
+    for (const item of am.primitiveItems) {
+      const elemType = typeMap?.[itemPrefix];
+      if (item.partnerPropKey) {
+        // Partner values are always strings — incompatible with number/boolean targets
+        if (elemType === 'number' || elemType === 'boolean') {
+          lines.push(`${fieldPad}null,`);
+        } else {
+          lines.push(`${fieldPad}{{ ${partnerRef(item.partnerPropKey)} | json }},`);
+        }
+      } else if (item.globalSetId && item.globalKey) {
+        // Global set values are always strings — incompatible with number/boolean targets
+        if (elemType === 'number' || elemType === 'boolean') {
+          lines.push(`${fieldPad}null,`);
+        } else {
+          lines.push(`${fieldPad}{{ ${globalRef(item.globalSetId, item.globalKey)} | json }},`);
+        }
+      } else if (item.source?.trim()) {
+        const path = item.source.trim();
+        // If the source path resolves to an array in the input JSON, unroll it with a for-loop
+        // instead of embedding {{ path | json }} directly (which would produce [[...]])
+        const sourceIsArray = (() => {
+          if (!inputJson) return false;
+          try {
+            let node: unknown = JSON.parse(inputJson);
+            for (const part of path.split('.')) {
+              if (node == null || typeof node !== 'object') return false;
+              node = (node as Record<string, unknown>)[part];
+            }
+            return Array.isArray(node);
+          } catch { return false; }
+        })();
+        if (sourceIsArray) {
+          const loopAlias = am.alias || 'item';
+          lines.push(`${pad}{{- for ${loopAlias} in ${path} -}}`);
+          if (item.transform?.trim()) {
+            const expr = item.transform.trim().replace(/\bvalue\b/g, loopAlias);
+            lines.push(`${fieldPad}{{ ${expr} | json }},`);
+          } else {
+            lines.push(`${fieldPad}{{ ${loopAlias} | json }},`);
+          }
+          lines.push(`${pad}{{- end -}}`);
+        } else if (item.transform?.trim()) {
+          const expr = item.transform.trim().replace(/\bvalue\b/g, path);
+          lines.push(`${fieldPad}{{ ${expr} | json }},`);
+        } else {
+          lines.push(`${fieldPad}{{ ${path} | json }},`);
+        }
+      } else if (item.fixedValue !== undefined) {
+        const coerced = coerceFixedValue(item.fixedValue, elemType);
+        lines.push(`${fieldPad}${JSON.stringify(coerced)},`);
+      } else {
+        lines.push(`${fieldPad}null,`);
+      }
+    }
+    lines.push(`${pad}],`);
+    return lines;
+  }
+
+  if (am.fixedItems?.length) {
+    for (const rawItem of am.fixedItems) {
+      const enriched = enrichFixedItem(rawItem as Record<string, unknown>, am, allAMs);
+      if (!hasDynamicDeep(enriched)) {
+        // Coerce each top-level field to the correct target type
+        const coerced: Record<string, unknown> = {};
+        for (const [k, v] of Object.entries(enriched)) {
+          const targetType = typeMap?.[`${itemPrefix}.${k}`];
+          coerced[k] = targetType !== undefined ? coerceFixedValue(v, targetType) : v;
+        }
+        lines.push(`${pad}${JSON.stringify(coerced)},`);
+      } else {
+        lines.push(`${pad}{`);
+        for (const [k, v] of Object.entries(enriched)) {
+          const fieldPath = `${itemPrefix}.${k}`;
+          const vLines = emitFixedValueLines(v, fieldPad, typeMap, fieldPath, sourceTypeMap, sourceArrayItemPrefix);
+          lines.push(`${fieldPad}"${k}": ${vLines[0]}${vLines.length === 1 ? ',' : ''}`);
+          for (let li = 1; li < vLines.length - 1; li++) lines.push(vLines[li]);
+          if (vLines.length > 1) lines.push(`${vLines[vLines.length - 1]},`);
+        }
+        lines.push(`${pad}},`);
+      }
+    }
+  }
+  if (!am.source) {
+    // Fixed-items-only array — no loop needed
+    lines.push(`${pad}],`);
+    return lines;
+  }
+  lines.push(`${pad}{{- for ${alias} in ${source} -}}`);
+  if (am.filter) {
+    lines.push(`${pad}{{- if ${filterExpr} -}}`);
+  }
+  lines.push(`${pad}{`);
+  for (const m of am.mappings) {
+    if (!m.target.trim()) continue;
+    const targetType = typeMap?.[`${itemPrefix}.${m.target}`];
+    // isRootSource is set explicitly by the modal when user picks from root fields group.
+    // For old mappings without the flag, fall back to checking itemPathSet from inputJson:
+    // if the source is not a known item path, it must be a root field.
+    const isRoot = m.isRootSource === true ||
+      (m.isRootSource === undefined && itemPathSet.size > 0 && Boolean(m.source) && !itemPathSet.has(m.source));
+    const sourceType = m.source
+      ? isRoot
+        ? sourceTypeMap?.[m.source]
+        : sourceTypeMap?.[sourceArrayItemPrefix ? `${sourceArrayItemPrefix}.${m.source}` : m.source]
+      : undefined;
+    lines.push(`${fieldPad}"${m.target}": ${renderFieldValue(m, isRoot ? undefined : alias, valuesSetMap, targetType, sourceType)},`);
+  }
+  // Render child AMs recursively inside this loop body
+  const children = allAMs.filter((c) => c.parentArrayId === am.id && c.source && c.target);
+  for (const child of children) {
+    lines.push(...renderArrayMapping(child, allAMs, alias, depth + 1, valuesSetMap, typeMap, inputJson, sourceTypeMap));
+  }
+  lines.push(`${pad}},`);
+  if (am.filter) {
+    lines.push(`${pad}{{- end -}}`);
+  }
+  lines.push(`${pad}{{- end -}}`);
+  lines.push(`${pad}],`);
+  return lines;
+}
+
+// ─── Re-exported from scribanParser.ts ───────────────────────────────────────
+
+export type { ParsedFieldMapping, ParsedArrayMapping, ParsedMappings } from './scribanParser';
+export { resolveParentArrayIds, parseScriban } from './scribanParser';
+
+
+
+
+
+
+
+
+
diff --git a/SW.Bitween.Web/ClientApp/src/lib/mapping/scribanParser.ts b/SW.Bitween.Web/ClientApp/src/lib/mapping/scribanParser.ts
new file mode 100644
index 00000000..49b93368
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/lib/mapping/scribanParser.ts
@@ -0,0 +1,338 @@
+import { ArrayMapping, FieldMapping, FilterOperator, LookupDictionary, LookupEntry } from './types';
+
+export type ParsedFieldMapping = Omit<FieldMapping, 'id'>;
+export type ParsedArrayMapping = {
+  source: string;
+  target: string;
+  alias: string;
+  filter?: ArrayMapping['filter'];
+  mappings: ParsedFieldMapping[];
+  /** When true, this AM owns the root `[...]` output — no wrapping object. */
+  isRootOutput?: boolean;
+  /** Target of the parent AM — used to resolve parentArrayId after IDs are assigned. */
+  parentTarget?: string;
+};
+
+export interface ParsedMappings {
+  fieldMappings: ParsedFieldMapping[];
+  arrayMappings: ParsedArrayMapping[];
+  warnings: string[];
+}
+
+/**
+ * Second-pass helper: resolve `parentTarget` string links to real `parentArrayId` references.
+ * Call after assigning IDs to the first-pass array so parent lookup works correctly.
+ */
+export function resolveParentArrayIds<T extends { id: string; target: string; parentTarget?: string }>(
+  rawAMs: T[]
+): Omit<T, 'parentTarget'>[] {
+  return rawAMs.map((am) => {
+    const { parentTarget, ...rest } = am;
+    if (!parentTarget) return rest as Omit<T, 'parentTarget'>;
+    const parent = rawAMs.find((p) => p.target === parentTarget);
+    return { ...rest, parentArrayId: parent?.id } as Omit<T, 'parentTarget'>;
+  });
+}
+
+/** Strip `| json` suffix from a Scriban expression */
+function stripJsonPipe(expr: string): string {
+  return expr.replace(/\s*\|\s*json\s*$/, '').trim();
+}
+
+/** Parse a Scriban expression body into source/transform/valuesSetId/isRootSource/lookupDictionary */
+function parseExpr(
+  raw: string,
+  valuesSetId: string | undefined,
+  alias?: string,
+): Pick<ParsedFieldMapping, 'source' | 'transform' | 'valuesSetId' | 'isRootSource' | 'lookupDictionary' | 'partnerPropKey' | 'globalSetId' | 'globalKey'> {
+  const expr = stripJsonPipe(raw.trim());
+
+  // Partner adapter property — {{ (__partner__ ?? {})["propkey"] | json }}. Prop keys are
+  // free-form user text (spaces, hyphens, ...), so they're indexed by string, not by a bare
+  // identifier after the dot (see scribanGenerator.ts's partnerRef for why).
+  const partnerMatchNew = expr.match(/^\(__partner__ \?\? \{\}\)\["([^"]*)"\]$/);
+  if (partnerMatchNew) {
+    return { source: '', partnerPropKey: partnerMatchNew[1] };
+  }
+  // Old shape, kept so already-saved templates still round-trip — {{ __partner__.propkey | json }}
+  // or {{ __partner__?.propkey | json }} (only valid for identifier-shaped keys).
+  const partnerMatch = expr.match(/^__partner__\??\.(\w+)$/);
+  if (partnerMatch) {
+    return { source: '', partnerPropKey: partnerMatch[1] };
+  }
+
+  // Global adapter values set — {{ ((__globals__ ?? {})["SETID"] ?? {})["KEY"] | json }}.
+  // Same string-indexing rationale as partnerRef, plus a `?? {}` at each hop.
+  const globalMatchNew = expr.match(/^\(\(__globals__ \?\? \{\}\)\["([^"]*)"\] \?\? \{\}\)\["([^"]*)"\]$/);
+  if (globalMatchNew) {
+    return { source: '', globalSetId: globalMatchNew[1], globalKey: globalMatchNew[2] };
+  }
+  // Old shape, kept so already-saved templates still round-trip — {{ __globals__?.SETID["KEY"] | json }}
+  // or {{ __globals__?.SETID?["KEY"] | json }} (only valid for identifier-shaped set ids).
+  const globalMatch = expr.match(/^__globals__\??\.([\w]+)\??(?:\.(\w+)|\["([^"]+)"\])$/);
+  if (globalMatch) {
+    return { source: '', globalSetId: globalMatch[1], globalKey: globalMatch[2] ?? globalMatch[3] };
+  }
+
+  // Dictionary lookup — $__e = { ... }; ...
+  if (valuesSetId || expr.startsWith('$__e')) {
+    if (!valuesSetId) {
+      // New inline dictionary — parse entries and fallback from the expression
+      const entriesBlockMatch = expr.match(/\$__e\s*=\s*\{([^}]*)\}/);
+      const pathMatch = expr.match(/\$__e\[([\w.]+)\]/);
+      if (entriesBlockMatch && pathMatch) {
+        const entries: LookupEntry[] = [];
+        const entryRx = /"([^"]+)":\s*(?:"([^"]*)"|(\btrue\b|\bfalse\b|-?[\d.]+))/g;
+        let em: RegExpExecArray | null;
+        while ((em = entryRx.exec(entriesBlockMatch[1])) !== null) {
+          entries.push({ from: em[1], to: em[2] !== undefined ? em[2] : em[3] });
+        }
+        const rawPath = pathMatch[1];
+        const isRoot = Boolean(alias && !rawPath.startsWith(`${alias}.`));
+        const source = alias && rawPath.startsWith(`${alias}.`)
+          ? rawPath.slice(alias.length + 1)
+          : rawPath;
+        // Detect fallback: look for ?? clause at end
+        const fallbackMatch = expr.match(/\?\?\s*(.+?)\s*\)\s*(?:\|.*)?$/);
+        let fallback: LookupDictionary['fallback'] = 'null';
+        let fallbackValue: string | undefined;
+        if (fallbackMatch) {
+          const fb = fallbackMatch[1].trim();
+          if (/^["'].*["']$/.test(fb)) {
+            fallback = 'custom';
+            fallbackValue = fb.slice(1, -1);
+          }
+        }
+        const lookupDictionary: LookupDictionary = {
+          entries,
+          fallback,
+          ...(fallbackValue !== undefined ? { fallbackValue } : {}),
+        };
+        return { source, lookupDictionary, ...(isRoot ? { isRootSource: true } : {}) };
+      }
+    }
+    // Old valuesSetId path — backward compat
+    const fallback = expr.match(/\?\?\s*([\w.]+)\s*\)/);
+    const src = fallback ? fallback[1] : expr;
+    const isRoot = Boolean(alias && !src.startsWith(`${alias}.`));
+    const source = isRoot ? src : (alias ? src.slice(alias.length + 1) : src);
+    return { source, valuesSetId, ...(isRoot ? { isRootSource: true } : {}) };
+  }
+
+  // Helper: strip alias prefix and detect root field
+  const stripAlias = (src: string): { source: string; isRootSource?: true } => {
+    if (alias && src.startsWith(`${alias}.`)) return { source: src.slice(alias.length + 1) };
+    if (alias && src !== alias) return { source: src, isRootSource: true };
+    return { source: src };
+  };
+
+  // castExpr patterns — strip back to plain source so round-trip doesn't produce transforms
+  const stringCast = expr.match(/^\(""\s*\+\s*([\w.]+)\)$/);
+  if (stringCast) return stripAlias(stringCast[1]);
+
+  const numberCast = expr.match(/^\(([\w.]+)\s*\|\s*to_float\)$/);
+  if (numberCast) return stripAlias(numberCast[1]);
+
+  const boolCast = expr.match(/^\(([\w.]+)\s*!=\s*null/);
+  if (boolCast) return stripAlias(boolCast[1]);
+
+  if (/^[\w.]+$/.test(expr)) return stripAlias(expr);
+
+  const transformExpr = alias
+    ? expr.replace(new RegExp(`\\b${alias}\\.(\\w+)`, 'g'), 'value')
+    : expr;
+  const srcMatch = expr.match(/^([\w.]+)\s*[^\w.]/);
+  const rawSrc = srcMatch ? srcMatch[1] : '';
+  const { source, isRootSource } = stripAlias(rawSrc);
+  return { source, transform: transformExpr, ...(isRootSource ? { isRootSource } : {}) };
+}
+
+/** Parse the body of a for-loop block recursively, collecting field mappings and any nested array blocks. */
+function parseForBody(
+  lines: string[],
+  startI: number,
+  alias: string,
+  outerTarget: string,
+  allArrayMappings: ParsedArrayMapping[]
+): { result: { filter?: ArrayMapping['filter']; mappings: ParsedFieldMapping[] }; endI: number } {
+  const mappings: ParsedFieldMapping[] = [];
+  let filter: ArrayMapping['filter'] | undefined;
+  let i = startI;
+
+  while (i < lines.length) {
+    const line = lines[i].trim();
+
+    if (line.match(/\{\{-?\s*end\s*-?\}\}/)) { i++; break; }
+
+    const nestedArrOpen = line.match(/"([\w.]+)"\s*:\s*\[/);
+    if (nestedArrOpen) {
+      const childTarget = nestedArrOpen[1];
+      const nextLine = lines[i + 1]?.trim();
+      const childForMatch = nextLine?.match(/\{\{-?\s*for\s+(\w+)\s+in\s+([\w.[\]*]+)\s*-?\}\}/);
+      if (childForMatch) {
+        const childAlias = childForMatch[1];
+        const childFullSource = childForMatch[2];
+        const childSource = childFullSource.startsWith(`${alias}.`)
+          ? childFullSource.slice(alias.length + 1)
+          : childFullSource;
+        i += 2;
+        const { result: childResult, endI } = parseForBody(lines, i, childAlias, childTarget, allArrayMappings);
+        i = endI;
+        while (i < lines.length && !/^],?$/.test(lines[i].trim())) i++;
+        if (i < lines.length) i++;
+        allArrayMappings.push({
+          source: childSource,
+          target: childTarget,
+          alias: childAlias,
+          filter: childResult.filter,
+          mappings: childResult.mappings,
+          parentTarget: outerTarget,
+        });
+        continue;
+      }
+    }
+
+    const ifMatch = line.match(/\{\{-?\s*if\s+(\w+)\.([\w.]+)\s*([!=<>]+)\s*(.+?)\s*-?\}\}/);
+    if (ifMatch) {
+      filter = {
+        field: ifMatch[2],
+        operator: ifMatch[3].trim() as FilterOperator,
+        value: ifMatch[4].trim().replace(/^"|"$/g, ''),
+      };
+      i++; continue;
+    }
+
+    const fieldMatch = line.match(/"([\w.]+)"\s*:\s*(.*),?$/);
+    if (fieldMatch) {
+      const tgt = fieldMatch[1];
+      const rawVal = fieldMatch[2].replace(/,$/, '').trim();
+      const enumAnn = rawVal.match(/\{\{#\s*enum:([\w-]+)\s*#\}\}/);
+      const vsId = enumAnn ? enumAnn[1] : undefined;
+      const cleanVal = rawVal.replace(/\{\{#\s*enum:[\w-]+\s*#\}\}/, '').trim();
+      const exprMatch = cleanVal.match(/\{\{-?\s*([\s\S]+?)\s*-?\}\}/);
+      if (exprMatch) {
+        // @ts-expect-error verbatim from legacy Bitween-UI: `source: ''` is an intentional
+        // default that the parseExpr spread overwrites; the host tsconfig flags this (TS2783).
+        mappings.push({ target: tgt, source: '', ...parseExpr(exprMatch[1], vsId, alias) });
+      } else if (!cleanVal.includes('{{') && cleanVal !== 'null' && cleanVal !== '[') {
+        mappings.push({ source: '', target: tgt, fixedValue: cleanVal.replace(/^"|"$/g, '') });
+      }
+    }
+
+    i++;
+  }
+
+  return { result: { filter, mappings }, endI: i };
+}
+
+export function parseScriban(template: string): ParsedMappings {
+  const warnings: string[] = [];
+  const fieldMappings: ParsedFieldMapping[] = [];
+  const arrayMappings: ParsedArrayMapping[] = [];
+
+  const lines = template.split('\n');
+  let i = 0;
+
+  // ── Root-array template detection ────────────────────────────────────────
+  // A root-array template starts with `[` (ignoring whitespace) and contains
+  // a single top-level `for` loop whose body produces array items.
+  // We detect this upfront and parse it as a single AM with isRootOutput=true.
+  const firstContentLine = lines.find((l) => l.trim() !== '');
+  if (firstContentLine?.trim() === '[') {
+    // Find the for-loop line
+    const forLineIdx = lines.findIndex((l) => /\{\{-?\s*for\s+/.test(l));
+    if (forLineIdx !== -1) {
+      const forMatch = lines[forLineIdx].trim().match(/\{\{-?\s*for\s+(\w+)\s+in\s+([\w.[\]*]+)\s*-?\}\}/);
+      if (forMatch) {
+        const alias = forMatch[1];
+        const source = forMatch[2];
+        const { result, endI } = parseForBody(lines, forLineIdx + 1, alias, '', arrayMappings);
+        // Consume any filter line that may appear before the body
+        arrayMappings.push({
+          source,
+          target: '',
+          alias,
+          isRootOutput: true,
+          filter: result.filter,
+          mappings: result.mappings,
+        });
+        // Any lines after {{- end -}} ] are ignored (should be just `]`)
+        void endI;
+        return { fieldMappings, arrayMappings, warnings };
+      }
+    }
+    // If no for loop found, return empty (fixed-only root array — not yet supported in visual editor)
+    warnings.push('Root-array template has no for-loop — cannot parse back to visual mappings');
+    return { fieldMappings, arrayMappings, warnings };
+  }
+
+  // Track nesting depth so we only create fieldMappings for lines directly
+  // inside the root object (depth === 1).  Lines inside fixed-item literals
+  // (e.g. `"lineOrders": [ { "ref": ... } ]`) sit at depth >= 3 and must not
+  // be mistaken for top-level field mappings.
+  let depth = 0;
+
+  while (i < lines.length) {
+    const line = lines[i].trim();
+
+    // Update depth for this line, ignoring brackets inside {{ }} expressions.
+    const lineForDepth = line.replace(/\{\{[\s\S]*?\}\}/g, '');
+    for (const ch of lineForDepth) {
+      if (ch === '{' || ch === '[') depth++;
+      else if (ch === '}' || ch === ']') depth--;
+    }
+
+    const forMatch = line.match(/\{\{-?\s*for\s+(\w+)\s+in\s+([\w.[\]*]+)\s*-?\}\}/);
+    if (forMatch) {
+      const alias = forMatch[1];
+      const source = forMatch[2];
+      let target = '';
+
+      for (let bi = i - 1; bi >= Math.max(0, i - 30); bi--) {
+        const prevLine = lines[bi].trim();
+        const tMatch = prevLine.match(/"([\w.]+)"\s*:\s*\[/);
+        if (tMatch) { target = tMatch[1]; break; }
+        if (prevLine.startsWith('"') && prevLine.includes(':') && !prevLine.startsWith('{')) break;
+      }
+
+      i++;
+      const { result, endI } = parseForBody(lines, i, alias, target, arrayMappings);
+      i = endI;
+
+      if (source && target) {
+        arrayMappings.push({ source, target, alias, filter: result.filter, mappings: result.mappings });
+      } else {
+        warnings.push(`Could not determine target array for "for ${alias} in ${source}"`);
+      }
+      continue;
+    }
+
+    // Only parse as a top-level field mapping when directly inside the root object.
+    // depth === 1 means we've seen exactly one opening `{` (the root) with no unclosed `[`.
+    const simpleMatch = line.match(/"([\w.]+)"\s*:\s*(.*),?$/);
+    if (simpleMatch && depth === 1 && !line.includes('{{- for') && !line.startsWith('[') && !line.startsWith(']') && !line.startsWith('{')) {
+      const target = simpleMatch[1];
+      const valueRaw = simpleMatch[2].replace(/,$/, '').trim();
+
+      const enumAnnotation = valueRaw.match(/\{\{#\s*enum:([\w-]+)\s*#\}\}/);
+      const valuesSetId = enumAnnotation ? enumAnnotation[1] : undefined;
+      const valueClean = valueRaw.replace(/\{\{#\s*enum:[\w-]+\s*#\}\}/, '').trim();
+
+      const exprMatch = valueClean.match(/\{\{-?\s*([\s\S]+?)\s*-?\}\}/);
+      if (exprMatch) {
+        const parsed = parseExpr(exprMatch[1], valuesSetId);
+        // @ts-expect-error verbatim from legacy Bitween-UI: `source: ''` is an intentional
+        // default that the parsed spread overwrites; the host tsconfig flags this (TS2783).
+        fieldMappings.push({ target, source: '', ...parsed });
+      } else if (!valueClean.includes('{{') && valueClean !== 'null' && !valueClean.startsWith('[')) {
+        fieldMappings.push({ source: '', target, fixedValue: valueClean.replace(/^"|"$/g, '') });
+      } else if (valueClean.includes('{{')) {
+        warnings.push(`Could not parse: ${line}`);
+      }
+    }
+
+    i++;
+  }
+
+  return { fieldMappings, arrayMappings, warnings };
+}
diff --git a/SW.Bitween.Web/ClientApp/src/lib/mapping/types.ts b/SW.Bitween.Web/ClientApp/src/lib/mapping/types.ts
new file mode 100644
index 00000000..c355ad5b
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/lib/mapping/types.ts
@@ -0,0 +1,96 @@
+// ─── Mapping domain types ──────────────────────────────────────────────────────
+
+/** Legacy adapter-property shape. The prototype uses Record<string,string> and
+ *  adapts to/from this only at the persistence boundary (see loadFromProps / useSave). */
+export interface KeyValuePair {
+  key: string;
+  value: string;
+}
+
+export type FilterOperator = '==' | '!=' | '>' | '>=' | '<' | '<=';
+
+export interface FilterCondition {
+  field: string;
+  operator: FilterOperator;
+  value: string | number;
+}
+
+export interface LookupEntry {
+  from: string;
+  to: string;
+}
+
+export interface LookupDictionary {
+  entries: LookupEntry[];
+  /** What to output when the source value isn't in the dictionary.
+   *  null = output null | custom = use fallbackValue */
+  fallback: 'null' | 'custom';
+  fallbackValue?: string;
+}
+
+export interface FieldMapping {
+  id: string;
+  source: string;
+  target: string;
+  transform?: string;
+  fixedValue?: string;
+  /** Legacy global values-set reference — still rendered for backward compat. */
+  valuesSetId?: string;
+  /** Inline dictionary lookup — takes precedence over valuesSetId. */
+  lookupDictionary?: LookupDictionary;
+  /** True when source points to a root-level field (not an item field of the loop array). */
+  isRootSource?: boolean;
+  /** Partner adapter property key — mutually exclusive with source and fixedValue.
+   *  Generates {{ __partner__.<key> | json }} in the Scriban template. */
+  partnerPropKey?: string;
+  /** Global adapter values set reference — mutually exclusive with other modes.
+   *  Generates {{ __globals__?.SETID?.KEY | json }} in the Scriban template. */
+  globalSetId?: string;
+  globalKey?: string;
+}
+
+/** One element in a primitive array mapping (string/number target array). */
+export interface PrimitiveArrayItem {
+  source?: string;
+  fixedValue?: string;
+  transform?: string;
+  partnerPropKey?: string;
+  globalSetId?: string;
+  globalKey?: string;
+}
+
+export interface ArrayMapping {
+  id: string;
+  source: string;
+  target: string;
+  alias: string;
+  filter?: FilterCondition;
+  mappings: FieldMapping[];
+  fixedItems?: Record<string, unknown>[];
+  /** Primitive (string/number) array: each index mapped to a source field or fixed value. */
+  primitiveItems?: PrimitiveArrayItem[];
+  /** ID of the parent ArrayMapping. undefined/null means top-level. */
+  parentArrayId?: string;
+  /**
+   * When true this ArrayMapping owns the root `[...]` output instead of a
+   * named field.  Only valid on top-level AMs (no parentArrayId).
+   * Generator emits `[ for … ]` instead of `"target": [ for … ]`.
+   */
+  isRootOutput?: boolean;
+}
+
+export type ValidationError = {
+  type: 'error' | 'warning';
+  message: string;
+  path?: string;
+};
+
+export type EditorMode = 'visual' | 'canvas' | 'manual';
+
+/** The active value-source mode for a single field mapping row. */
+export type MappingMode = 'source' | 'fixed' | 'partner' | 'global';
+
+export const NATIVE_JSON_MAPPER_ID = 'NativeJSONMapper';
+
+let _id = 0;
+export const genId = () => `m-${++_id}-${Date.now()}`;
diff --git a/SW.Bitween.Web/ClientApp/src/lib/match.ts b/SW.Bitween.Web/ClientApp/src/lib/match.ts
new file mode 100644
index 00000000..24362ea9
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/lib/match.ts
@@ -0,0 +1,24 @@
+import type { MatchGroup, MatchNode } from "../api";
+
+/**
+ * Human-readable summary of a message filter, e.g.
+ * `Store is CR-114 and Status is one of SHIPPED, DELIVERED`.
+ * null (or an empty group) means the filter matches everything.
+ */
+export const matchSummary = (expr: MatchGroup | null): string => {
+  if (!expr || expr.children.length === 0) return "All messages";
+  return nodeSummary(expr, true);
+};
+
+const nodeSummary = (node: MatchNode, topLevel = false): string => {
+  if ("path" in node) {
+    const verb =
+      node.values.length > 1 ? (node.op === "oneOf" ? "is one of" : "is none of") : node.op === "oneOf" ? "is" : "is not";
+    return `${node.path} ${verb} ${node.values.join(", ")}`;
+  }
+  const joined = node.children.map((c) => nodeSummary(c)).join(node.op === "and" ? " and " : " or ");
+  return topLevel || node.children.length < 2 ? joined : `(${joined})`;
+};
+
+/** An empty starting group for filter editors. */
+export const emptyMatchGroup = (): MatchGroup => ({ op: "and", children: [] });
diff --git a/SW.Bitween.Web/ClientApp/src/lib/returnTo.ts b/SW.Bitween.Web/ClientApp/src/lib/returnTo.ts
new file mode 100644
index 00000000..67f644f1
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/lib/returnTo.ts
@@ -0,0 +1,60 @@
+import { useLocation, useSearchParams } from "react-router";
+
+/**
+ * The "detour" protocol: flows that need another entity (a wizard needing a
+ * new partner, a create page needing a new information type) ROUTE to that
+ * entity's own create/edit page, carrying where to come back to. The entity
+ * page shows a "Continue …" banner; continuing returns — with the created
+ * entity's id in a `picked` param so the origin can auto-select it.
+ * Everything stays URL-based; origin drafts survive in sessionStorage.
+ */
+export interface ReturnContext {
+  /** URL to go back to (path + search, `picked` stripped). */
+  to: string;
+  /** What the user was doing, e.g. "Attaching a partner to Orders inbound". */
+  label: string;
+}
+
+/** Append a return context to a target path. */
+export const withReturn = (path: string, ctx: ReturnContext): string => {
+  const sep = path.includes("?") ? "&" : "?";
+  return `${path}${sep}return=${encodeURIComponent(ctx.to)}&returnLabel=${encodeURIComponent(ctx.label)}`;
+};
+
+/** Read the inbound return context from the current URL, if any. */
+export const useReturnContext = (): ReturnContext | null => {
+  const [params] = useSearchParams();
+  const to = params.get("return");
+  if (!to) return null;
+  return { to, label: params.get("returnLabel") ?? "where you were" };
+};
+
+/** This page's own URL, usable as a return target (drops any picked param). */
+export const useHereAsReturnTarget = (): string => {
+  const { pathname, search } = useLocation();
+  const params = new URLSearchParams(search);
+  params.delete("picked");
+  const query = params.toString();
+  return query ? `${pathname}?${query}` : pathname;
+};
+
+/** Where "Continue" goes: back to the origin, optionally reporting a pick. */
+export const continueUrl = (ctx: ReturnContext, picked?: string): string => {
+  if (!picked) return ctx.to;
+  const sep = ctx.to.includes("?") ? "&" : "?";
+  return `${ctx.to}${sep}picked=${encodeURIComponent(picked)}`;
+};
+
+/**
+ * Read-and-consume a `picked=kind:id` param on the origin page. Returns the
+ * id when the kind matches; the caller applies it to its draft.
+ */
+export const takePicked = (
+  params: URLSearchParams,
+  kind: string,
+): number | null => {
+  const raw = params.get("picked");
+  if (!raw) return null;
+  const [k, id] = raw.split(":");
+  return k === kind && id ? Number(id) : null;
+};
diff --git a/SW.Bitween.Web/ClientApp/src/lib/schedules.ts b/SW.Bitween.Web/ClientApp/src/lib/schedules.ts
new file mode 100644
index 00000000..f29cad5a
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/lib/schedules.ts
@@ -0,0 +1,57 @@
+import type { Schedule } from "../api";
+
+export const WEEKDAYS = ["Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday"];
+
+const pad = (n: number) => String(n).padStart(2, "0");
+
+/** "Daily at 02:00 UTC", "Hourly at :15", "Weekly on Monday at 08:30 UTC"… — hour/minute are always UTC. */
+export const scheduleSummary = (s: Schedule): string => {
+  const time = `${pad(s.hours)}:${pad(s.minutes)} UTC`;
+  const tail = s.backwards ? " (counted from the end)" : "";
+  switch (s.recurrence) {
+    case "Hourly":
+      return `Hourly at :${pad(s.minutes)}${tail}`;
+    case "Daily":
+      return `Daily at ${time}${tail}`;
+    case "Weekly":
+      return `Weekly on ${WEEKDAYS[s.days] ?? `day ${s.days}`} at ${time}${tail}`;
+    case "Monthly":
+      return `Monthly on day ${s.days} at ${time}${tail}`;
+  }
+};
+
+export const schedulesSummary = (list: Schedule[]): string =>
+  list.length === 0
+    ? "No schedule"
+    : list.length === 1
+      ? scheduleSummary(list[0])
+      : `${scheduleSummary(list[0])} · +${list.length - 1} more`;
+
+/**
+ * Translates a schedule's UTC hour/minute (and, for Weekly/Monthly, day) into the
+ * viewer's own browser timezone, so editors don't have to do the mental conversion.
+ * Uses fixed reference dates purely as a vehicle for the time-of-day/day-of-week math —
+ * Dec 31 2023 was a Sunday, so WEEKDAYS[0] lines up with s.days=0 after the UTC->local shift.
+ */
+export const localTimePreview = (s: Schedule): string => {
+  const refHour = s.recurrence === "Hourly" ? 12 : s.hours;
+  const utcDate =
+    s.recurrence === "Weekly"
+      ? new Date(Date.UTC(2023, 11, 31 + s.days, refHour, s.minutes))
+      : s.recurrence === "Monthly"
+        ? new Date(Date.UTC(2024, 0, s.days, refHour, s.minutes))
+        : new Date(Date.UTC(2024, 0, 1, refHour, s.minutes));
+
+  const time = utcDate.toLocaleTimeString([], { hour: "numeric", minute: "2-digit", timeZoneName: "short" });
+
+  switch (s.recurrence) {
+    case "Hourly":
+      return `:${pad(utcDate.getMinutes())} your local time`;
+    case "Weekly":
+      return `${WEEKDAYS[utcDate.getDay()]} ${time}`;
+    case "Monthly":
+      return `day ${utcDate.getDate()}, ${time}`;
+    default:
+      return time;
+  }
+};
diff --git a/SW.Bitween.Web/ClientApp/src/lib/settingsDraft.ts b/SW.Bitween.Web/ClientApp/src/lib/settingsDraft.ts
new file mode 100644
index 00000000..8c7c4613
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/lib/settingsDraft.ts
@@ -0,0 +1,62 @@
+import { useSyncExternalStore } from "react";
+import type { SettingRow } from "../api";
+
+/**
+ * Pending (unsaved) setting changes: key → new value, or null for a pending
+ * "reset to default". Lives in sessionStorage so the draft survives leaving
+ * the Settings page — the whole app renders with the draft applied, letting
+ * you walk around and preview a change (the brand color, the footer links…)
+ * before committing it. Saving writes every entry through the API; discarding
+ * clears the draft and the preview reverts instantly.
+ */
+export type SettingsDraft = Record<string, string | null>;
+
+const KEY = "bitween-settings-draft";
+
+const load = (): SettingsDraft => {
+  try {
+    return JSON.parse(sessionStorage.getItem(KEY) ?? "{}") as SettingsDraft;
+  } catch {
+    return {};
+  }
+};
+
+let cache: SettingsDraft = load();
+const listeners = new Set<() => void>();
+
+const persist = () => {
+  sessionStorage.setItem(KEY, JSON.stringify(cache));
+  listeners.forEach((l) => l());
+};
+
+export const settingsDraft = {
+  get: (): SettingsDraft => cache,
+
+  /** Stage a change; passing the row's current saved value removes the stage. */
+  stage(row: SettingRow, value: string | null) {
+    const unchanged = value === row.value || (value !== null && !row.overridden && value === row.defaultValue);
+    if (unchanged) {
+      if (!(row.key in cache)) return;
+      const { [row.key]: _dropped, ...rest } = cache;
+      cache = rest;
+    } else {
+      cache = { ...cache, [row.key]: value };
+    }
+    persist();
+  },
+
+  discardAll() {
+    cache = {};
+    persist();
+  },
+};
+
+const subscribe = (listener: () => void) => {
+  listeners.add(listener);
+  return () => listeners.delete(listener);
+};
+
+/** Reactive view of the draft — updates any component when it changes. */
+export function useSettingsDraft(): SettingsDraft {
+  return useSyncExternalStore(subscribe, () => cache);
+}
diff --git a/SW.Bitween.Web/ClientApp/src/main.tsx b/SW.Bitween.Web/ClientApp/src/main.tsx
new file mode 100644
index 00000000..1d62ad11
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/main.tsx
@@ -0,0 +1,39 @@
+import { StrictMode } from "react";
+import { createRoot } from "react-dom/client";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import { RouterProvider } from "react-router";
+import { NotWiredError } from "./api/types";
+import { SessionProvider } from "./auth/SessionContext";
+import { router } from "./router";
+import "./index.css";
+
+// Reaching the app outside its base path can't be routed — bounce to the base
+// instead of a blank page. Inert while the app is served from the root, but
+// keeps working if it is ever mounted under a prefix again.
+const base = import.meta.env.BASE_URL;
+if (base !== "/" && !window.location.pathname.startsWith(base.replace(/\/$/, ""))) {
+  window.location.replace(base);
+}
+
+const queryClient = new QueryClient({
+  defaultOptions: {
+    queries: {
+      staleTime: 10_000,
+      refetchOnWindowFocus: false,
+      // NotWiredError is permanent (the method will reject every time, with no
+      // network round-trip) — retrying it just stalls "Loading…" states for the
+      // default ~7s of exponential backoff for nothing.
+      retry: (failureCount, error) => !(error instanceof NotWiredError) && failureCount < 3,
+    },
+  },
+});
+
+createRoot(document.getElementById("root")!).render(
+  <StrictMode>
+    <QueryClientProvider client={queryClient}>
+      <SessionProvider>
+        <RouterProvider router={router} />
+      </SessionProvider>
+    </QueryClientProvider>
+  </StrictMode>,
+);
diff --git a/SW.Bitween.Web/ClientApp/src/nav.ts b/SW.Bitween.Web/ClientApp/src/nav.ts
new file mode 100644
index 00000000..ff0ad77c
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/nav.ts
@@ -0,0 +1,90 @@
+import {
+  Activity,
+  ArrowLeftRight,
+  BellRing,
+  FileText,
+  Handshake,
+  Layers,
+  RefreshCw,
+  RotateCcw,
+  Settings,
+  SlidersHorizontal,
+  Users,
+  Workflow,
+  type LucideIcon,
+} from "lucide-react";
+import type { PermissionKey, Session } from "./api";
+
+export interface NavItem {
+  label: string;
+  path: string;
+  icon: LucideIcon;
+  /** Visible when the session holds ANY of these. */
+  permissions: PermissionKey[];
+  /** True for areas that belong to a later phase of the redesign. */
+  planned?: boolean;
+}
+
+export interface NavGroup {
+  label: string;
+  items: NavItem[];
+}
+
+/**
+ * The whole information architecture in one place. The sidebar, the
+ * role editor's live access preview, and the post-login redirect all
+ * derive from this registry, so they can never drift apart.
+ */
+export const NAV_GROUPS: NavGroup[] = [
+  {
+    label: "Operate",
+    items: [
+      { label: "Exchanges", path: "/exchanges", icon: ArrowLeftRight, permissions: ["exchanges.view"] },
+      {
+        label: "Scheduled retries",
+        path: "/scheduled-retries",
+        icon: RefreshCw,
+        permissions: ["exchanges.view"],
+      },
+      { label: "Queue health", path: "/queue-health", icon: Activity, permissions: ["monitoring.view"] },
+    ],
+  },
+  {
+    label: "Integrations",
+    items: [
+      { label: "Integrations", path: "/subscriptions", icon: Workflow, permissions: ["subscriptions.view"] },
+      { label: "Partners", path: "/partners", icon: Handshake, permissions: ["partners.view"] },
+      { label: "Information types", path: "/information-types", icon: FileText, permissions: ["documents.view"] },
+      { label: "Global values", path: "/global-values", icon: SlidersHorizontal, permissions: ["global-values.view"] },
+      { label: "Notifiers", path: "/notifiers", icon: BellRing, permissions: ["notifiers.view"] },
+    ],
+  },
+  {
+    label: "Configuration",
+    items: [
+      { label: "Work groups", path: "/work-groups", icon: Layers, permissions: ["workgroups.view"] },
+      { label: "Retry policies", path: "/retry-policies", icon: RotateCcw, permissions: ["retry-policies.view"] },
+    ],
+  },
+  {
+    label: "Administration",
+    items: [
+      { label: "Team", path: "/team", icon: Users, permissions: ["users.view", "roles.view"] },
+      { label: "Settings", path: "/settings", icon: Settings, permissions: ["settings.view"] },
+    ],
+  },
+];
+
+export const navItemVisible = (item: NavItem, permissions: PermissionKey[]) =>
+  item.permissions.some((p) => permissions.includes(p));
+
+export const visibleGroups = (permissions: PermissionKey[]): NavGroup[] =>
+  NAV_GROUPS.map((g) => ({ ...g, items: g.items.filter((i) => navItemVisible(i, permissions)) })).filter(
+    (g) => g.items.length > 0,
+  );
+
+/** Where to land after signing in: the first page this session can see. */
+export const homePath = (session: Session): string => {
+  const groups = visibleGroups(session.permissions);
+  return groups[0]?.items[0]?.path ?? "/profile";
+};
diff --git a/SW.Bitween.Web/ClientApp/src/pages/PlaceholderPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/PlaceholderPage.tsx
new file mode 100644
index 00000000..55dd4a0a
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/PlaceholderPage.tsx
@@ -0,0 +1,41 @@
+import { Link } from "react-router";
+import type { NavItem } from "../nav";
+import { RequirePermission } from "../auth/guards";
+
+/**
+ * Stands in for the areas that belong to later phases of the redesign.
+ * They're real routes with real permissions so role gating can be
+ * demonstrated across the whole navigation today.
+ */
+export function PlaceholderPage({ item }: { item: NavItem }) {
+  return (
+    <RequirePermission permission={item.permissions[0]}>
+      <div className="flex flex-col items-center justify-center gap-3 px-6 py-24 text-center">
+        <span className="flex size-12 items-center justify-center rounded-2xl bg-crimson-50 text-crimson-600">
+          <item.icon className="size-5" />
+        </span>
+        <h1 className="text-lg font-semibold tracking-tight text-ink-900">{item.label}</h1>
+        <p className="max-w-md text-sm leading-relaxed text-ink-500">
+          This area is planned for a later phase of the redesign. It's already wired into roles and
+          navigation, so you can control who will see it from{" "}
+          <Link to="/team/roles" className="font-medium text-crimson-700 hover:underline">
+            Team → Roles
+          </Link>
+          .
+        </p>
+      </div>
+    </RequirePermission>
+  );
+}
+
+export function NotFoundPage() {
+  return (
+    <div className="flex flex-col items-center justify-center gap-3 px-6 py-24 text-center">
+      <p className="font-mono text-sm text-ink-400">404</p>
+      <h1 className="text-lg font-semibold tracking-tight text-ink-900">This page doesn't exist</h1>
+      <Link to="/" className="text-[13px] font-medium text-crimson-700 hover:underline">
+        Go to your home page
+      </Link>
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/ProfilePage.tsx b/SW.Bitween.Web/ClientApp/src/pages/ProfilePage.tsx
new file mode 100644
index 00000000..beab9fbb
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/ProfilePage.tsx
@@ -0,0 +1,199 @@
+import { useState, type FormEvent, type ReactNode } from "react";
+import { Link } from "react-router";
+import { useMutation } from "@tanstack/react-query";
+import { Check, ShieldCheck } from "lucide-react";
+import { api } from "../api";
+import { allKeysIn, usePermissionCatalog } from "../api/permissions";
+import { useSession } from "../auth/SessionContext";
+import { PageHeader } from "../components/layout/PageHeader";
+import { Avatar } from "../components/ui/Avatar";
+import { Badge, Button, FormError } from "../components/ui/basics";
+import { Field, PasswordInput, TextInput } from "../components/ui/forms";
+
+function Card({ title, children }: { title: string; children: ReactNode }) {
+  return (
+    <section className="rounded-xl border border-ink-200 bg-white p-5">
+      <h2 className="mb-4 text-[15px] font-semibold text-ink-900">{title}</h2>
+      {children}
+    </section>
+  );
+}
+
+function SavedFlash({ show }: { show: boolean }) {
+  if (!show) return null;
+  return (
+    <span className="inline-flex items-center gap-1 text-[13px] font-medium text-ok-600">
+      <Check className="size-3.5" /> Saved
+    </span>
+  );
+}
+
+export function ProfilePage() {
+  const { session, refresh, can } = useSession();
+  const totalPermissions = allKeysIn(usePermissionCatalog().data ?? []).length;
+
+  const [displayName, setDisplayName] = useState(session?.user.displayName ?? "");
+  const [identitySaved, setIdentitySaved] = useState(false);
+
+  const [currentPassword, setCurrentPassword] = useState("");
+  const [newPassword, setNewPassword] = useState("");
+  const [confirmPassword, setConfirmPassword] = useState("");
+  const [passwordError, setPasswordError] = useState("");
+  const [passwordSaved, setPasswordSaved] = useState(false);
+
+  const identity = useMutation({
+    mutationFn: () => api.updateProfile({ displayName }),
+    onSuccess: async () => {
+      await refresh();
+      setIdentitySaved(true);
+      setTimeout(() => setIdentitySaved(false), 2500);
+    },
+  });
+
+  const password = useMutation({
+    mutationFn: () => api.changePassword(currentPassword, newPassword),
+    onSuccess: () => {
+      setCurrentPassword("");
+      setNewPassword("");
+      setConfirmPassword("");
+      setPasswordSaved(true);
+      setTimeout(() => setPasswordSaved(false), 2500);
+    },
+  });
+
+  if (!session) return null;
+  const { user, roles, permissions } = session;
+
+  const identityDirty = displayName !== user.displayName;
+
+  const submitIdentity = (e: FormEvent) => {
+    e.preventDefault();
+    identity.mutate();
+  };
+
+  const submitPassword = (e: FormEvent) => {
+    e.preventDefault();
+    setPasswordError("");
+    if (newPassword !== confirmPassword) {
+      setPasswordError("The new passwords don't match.");
+      return;
+    }
+    password.mutate();
+  };
+
+  return (
+    <div>
+      <PageHeader title="Your profile" description="How you appear to teammates, and how you sign in." />
+
+      <div className="grid max-w-4xl gap-5 lg:grid-cols-2">
+        <div className="space-y-5">
+          <Card title="Identity">
+            <div className="mb-5 flex items-center gap-4">
+              <Avatar name={user.displayName} size="lg" />
+              <div className="min-w-0">
+                <p className="truncate font-semibold text-ink-900">{user.displayName}</p>
+                <p className="truncate font-mono text-[13px] text-ink-500">{user.email}</p>
+              </div>
+            </div>
+            <form onSubmit={submitIdentity} className="space-y-4">
+              <Field label="Display name" htmlFor="pf-name">
+                <TextInput id="pf-name" value={displayName} onChange={(e) => setDisplayName(e.target.value)} />
+              </Field>
+              <Field label="Email" htmlFor="pf-email" hint="Your sign-in identity. Ask an administrator to change it.">
+                <TextInput id="pf-email" value={user.email} disabled />
+              </Field>
+              <FormError>{identity.error?.message}</FormError>
+              <div className="flex items-center gap-3">
+                <Button type="submit" variant="primary" busy={identity.isPending} disabled={!identityDirty}>
+                  Save changes
+                </Button>
+                <SavedFlash show={identitySaved} />
+              </div>
+            </form>
+          </Card>
+
+          <Card title="Your access">
+            <ul className="space-y-2.5">
+              {roles.map((role) => (
+                <li key={role.id} className="flex items-start gap-2.5">
+                  <ShieldCheck className="mt-0.5 size-4 shrink-0 text-crimson-600" />
+                  <div className="min-w-0">
+                    <p className="text-sm font-medium text-ink-800">{role.name}</p>
+                  </div>
+                </li>
+              ))}
+            </ul>
+            <p className="mt-4 font-mono text-xs text-ink-500">
+              {permissions.length}/{totalPermissions} permissions via {roles.length} role
+              {roles.length === 1 ? "" : "s"}
+            </p>
+            {can("roles.view") && (
+              <p className="mt-2 text-[13px] text-ink-500">
+                See what each role unlocks under{" "}
+                <Link to="/team/roles" className="font-medium text-crimson-700 hover:underline">
+                  Team → Roles
+                </Link>
+                .
+              </p>
+            )}
+          </Card>
+        </div>
+
+        <div className="space-y-5">
+          <Card title="Password">
+            <form onSubmit={submitPassword} className="space-y-4">
+              <Field label="Current password" htmlFor="pf-current">
+                <PasswordInput
+                  id="pf-current"
+                  autoComplete="current-password"
+                  required
+                  value={currentPassword}
+                  onChange={(e) => setCurrentPassword(e.target.value)}
+                />
+              </Field>
+              <Field label="New password" htmlFor="pf-new" hint="At least 8 characters.">
+                <PasswordInput
+                  id="pf-new"
+                  autoComplete="new-password"
+                  required
+                  value={newPassword}
+                  onChange={(e) => setNewPassword(e.target.value)}
+                />
+              </Field>
+              <Field label="Confirm new password" htmlFor="pf-confirm">
+                <PasswordInput
+                  id="pf-confirm"
+                  autoComplete="new-password"
+                  required
+                  value={confirmPassword}
+                  onChange={(e) => setConfirmPassword(e.target.value)}
+                />
+              </Field>
+              <FormError>{passwordError || password.error?.message}</FormError>
+              <div className="flex items-center gap-3">
+                <Button type="submit" variant="primary" busy={password.isPending}>
+                  Change password
+                </Button>
+                <SavedFlash show={passwordSaved} />
+              </div>
+            </form>
+          </Card>
+
+          <Card title="Connected sign-in">
+            <div className="flex items-start justify-between gap-3">
+              <div>
+                <p className="text-sm font-medium text-ink-800">Microsoft account</p>
+                <p className="text-[13px] text-ink-500">
+                  {user.microsoftLinked
+                    ? "Linked — you can sign in with Microsoft."
+                    : "Not linked. Signing in with a Microsoft account that matches your email links it automatically."}
+                </p>
+              </div>
+              {user.microsoftLinked ? <Badge tone="ok">Linked</Badge> : <Badge>Not linked</Badge>}
+            </div>
+          </Card>
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/api-gateways/ApiGatewayNewPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/api-gateways/ApiGatewayNewPage.tsx
new file mode 100644
index 00000000..2435ceeb
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/api-gateways/ApiGatewayNewPage.tsx
@@ -0,0 +1,90 @@
+import { useState, type FormEvent } from "react";
+import { Link, useNavigate } from "react-router";
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { ArrowLeft } from "lucide-react";
+import { api } from "../../api";
+import { Button, FormError } from "../../components/ui/basics";
+import { Field, TextInput } from "../../components/ui/forms";
+import { ReturnBanner } from "../../components/ui/ReturnBanner";
+import { useReturnContext, withReturn } from "../../lib/returnTo";
+import { suggestSlug } from "../../lib/identifiers";
+
+export function ApiGatewayNewPage() {
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const ctx = useReturnContext();
+  const [name, setName] = useState("");
+  const [urlName, setUrlName] = useState("");
+  const [urlTouched, setUrlTouched] = useState(false);
+
+  const create = useMutation({
+    mutationFn: () => api.createApiGateway({ name, urlName }),
+    onSuccess: (gateway) => {
+      void queryClient.invalidateQueries({ queryKey: ["api-gateways"] });
+      const base = `/api-gateways/${gateway.id}`;
+      navigate(ctx ? `${withReturn(base, ctx)}&picked=api-gateway:${gateway.id}` : base);
+    },
+  });
+
+  const submit = (e: FormEvent) => {
+    e.preventDefault();
+    create.mutate();
+  };
+
+  return (
+    <div>
+      <Link
+        to={ctx?.to ?? "/subscriptions?types=api-gateways"}
+        className="mb-4 inline-flex items-center gap-1 text-[13px] font-medium text-ink-500 hover:text-ink-800"
+      >
+        <ArrowLeft className="size-3.5" /> {ctx ? "Back without creating" : "Integrations"}
+      </Link>
+
+      <ReturnBanner />
+
+      <h1 className="text-[22px] font-semibold tracking-tight text-ink-900">New API gateway</h1>
+      <p className="mt-1 text-sm text-ink-500">
+        Partners call its URL with their API key. Attach partners afterwards on its page.
+      </p>
+
+      <form onSubmit={submit} className="mt-6 max-w-lg space-y-4 rounded-xl border border-ink-200 bg-white p-5">
+        <Field label="Name" htmlFor="nag-name">
+          <TextInput
+            id="nag-name"
+            required
+            autoFocus
+            value={name}
+            onChange={(e) => {
+              setName(e.target.value);
+              if (!urlTouched) setUrlName(suggestSlug(e.target.value));
+            }}
+            placeholder="e.g. Orders inbound"
+          />
+        </Field>
+        <Field
+          label="URL name"
+          htmlFor="nag-url"
+          hint={`Partners will call /api/Gateway/${urlName || "…"}/sync or /async.`}
+        >
+          <TextInput
+            id="nag-url"
+            required
+            value={urlName}
+            className="font-mono"
+            onChange={(e) => {
+              setUrlTouched(true);
+              setUrlName(e.target.value.toLowerCase());
+            }}
+            placeholder="orders"
+          />
+        </Field>
+        <FormError>{create.error?.message}</FormError>
+        <div className="flex justify-end">
+          <Button type="submit" variant="primary" busy={create.isPending}>
+            Create gateway
+          </Button>
+        </div>
+      </form>
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/api-gateways/ApiGatewayPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/api-gateways/ApiGatewayPage.tsx
new file mode 100644
index 00000000..40640872
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/api-gateways/ApiGatewayPage.tsx
@@ -0,0 +1,225 @@
+import { useEffect, useMemo, useState } from "react";
+import { Link, useNavigate, useParams } from "react-router";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { ArrowLeft, Handshake, Pencil, Plus, Trash2 } from "lucide-react";
+import { api } from "../../api";
+import { Can, useSessionCan } from "../../auth/guards";
+import { Button, EmptyState, LoadingBlock } from "../../components/ui/basics";
+import { Field, TextInput } from "../../components/ui/forms";
+import { ConfirmDialog } from "../../components/ui/overlays";
+import { CopyField } from "../../components/ui/CopyField";
+import { EditableTitle, Panel, UnsavedBar } from "../../components/ui/Panel";
+import { formatDate } from "../../lib/dates";
+
+export function ApiGatewayPage() {
+  const { id = "" } = useParams();
+  const gatewayId = Number(id);
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const canEdit = useSessionCan("api-gateways.edit");
+
+  const gateway = useQuery({
+    queryKey: ["api-gateway", gatewayId],
+    queryFn: () => api.getApiGateway(gatewayId),
+    retry: false,
+  });
+
+  const [name, setName] = useState("");
+  const [urlName, setUrlName] = useState("");
+  const [removing, setRemoving] = useState<{ partnerId: number; partnerName: string } | null>(null);
+  const [deleting, setDeleting] = useState(false);
+  const [loaded, setLoaded] = useState(false);
+
+  useEffect(() => {
+    if (!loaded && gateway.data) {
+      setName(gateway.data.name);
+      setUrlName(gateway.data.urlName);
+      setLoaded(true);
+    }
+  }, [gateway.data, loaded]);
+
+  const dirty = useMemo(
+    () => !!gateway.data && (name !== gateway.data.name || urlName !== gateway.data.urlName),
+    [gateway.data, name, urlName],
+  );
+
+  const save = useMutation({
+    mutationFn: () => api.updateApiGateway(gatewayId, { name, urlName }),
+    onSuccess: async () => {
+      // Await the detail refetch before re-syncing the draft (avoids stale-data race).
+      await queryClient.invalidateQueries({ queryKey: ["api-gateway", gatewayId] });
+      void queryClient.invalidateQueries({ queryKey: ["api-gateways"] });
+      setLoaded(false);
+    },
+  });
+
+  if (gateway.isPending) return <LoadingBlock label="Loading API gateway…" />;
+  if (gateway.isError)
+    return (
+      <EmptyState title="This API gateway no longer exists">
+        <Link to="/api-gateways" className="font-medium text-crimson-700 hover:underline">
+          Back to API gateways
+        </Link>
+      </EmptyState>
+    );
+
+  const g = gateway.data;
+
+  return (
+    <div className="pb-24">
+      <Link
+        to="/api-gateways"
+        className="mb-4 inline-flex items-center gap-1 text-[13px] font-medium text-ink-500 hover:text-ink-800"
+      >
+        <ArrowLeft className="size-3.5" /> API gateways
+      </Link>
+
+      <div className="mb-6 flex flex-wrap items-start justify-between gap-3">
+        <div>
+          <h1 className="text-[22px] font-semibold tracking-tight text-ink-900">
+            <EditableTitle value={name} onChange={setName} disabled={!canEdit} placeholder="Gateway name" />
+          </h1>
+          <p className="mt-1 text-sm text-ink-500">Created {formatDate(g.createdOn)}.</p>
+        </div>
+        <Can permission="api-gateways.delete">
+          <Button variant="danger" onClick={() => setDeleting(true)}>
+            <Trash2 className="size-4" /> Delete
+          </Button>
+        </Can>
+      </div>
+
+      <div className="grid gap-5 lg:grid-cols-[minmax(0,1fr)_360px]">
+        <div className="min-w-0 space-y-5">
+          <Panel
+            title="Partners"
+            description="Each attached partner calls this gateway with its API key and runs its own integration."
+            action={
+              <Can permission="api-gateways.edit">
+                <Button size="sm" variant="primary" onClick={() => navigate(`/api-gateways/${gatewayId}/attach`)}>
+                  <Plus className="size-3.5" /> Attach partner
+                </Button>
+              </Can>
+            }
+          >
+            {g.attachments.length === 0 ? (
+              <p className="text-sm text-ink-500">
+                No partners attached — the gateway answers 401 to everyone. Attach a partner to
+                bring it to life.
+              </p>
+            ) : (
+              <ul className="divide-y divide-ink-100">
+                {g.attachments.map((a) => (
+                  <li key={a.partnerId} className="flex items-center gap-3 py-2.5 first:pt-0 last:pb-0">
+                    <Handshake className="size-3.5 shrink-0 text-ink-300" aria-hidden />
+                    <span className="min-w-0 flex-1">
+                      <Link
+                        to={`/partners/${a.partnerId}`}
+                        className="block truncate text-sm font-medium text-ink-800 hover:text-crimson-700 hover:underline"
+                      >
+                        {a.partnerName}
+                      </Link>
+                      <span className="block truncate text-[13px] text-ink-500">
+                        runs{" "}
+                        <Link
+                          to={`/subscriptions/${a.integrationId}`}
+                          className="font-medium text-ink-700 hover:text-crimson-700 hover:underline"
+                        >
+                          {a.integrationName}
+                        </Link>
+                      </span>
+                    </span>
+                    <Can permission="api-gateways.edit">
+                      <span className="flex gap-1">
+                        <button
+                          onClick={() => navigate(`/api-gateways/${gatewayId}/attachments/${a.partnerId}`)}
+                          aria-label={`Edit attachment for ${a.partnerName}`}
+                          className="rounded-md p-1.5 text-ink-400 hover:bg-ink-100 hover:text-ink-700"
+                        >
+                          <Pencil className="size-3.5" />
+                        </button>
+                        <button
+                          onClick={() => setRemoving({ partnerId: a.partnerId, partnerName: a.partnerName })}
+                          aria-label={`Detach ${a.partnerName}`}
+                          className="rounded-md p-1.5 text-ink-400 hover:bg-danger-50 hover:text-danger-700"
+                        >
+                          <Trash2 className="size-3.5" />
+                        </button>
+                      </span>
+                    </Can>
+                  </li>
+                ))}
+              </ul>
+            )}
+          </Panel>
+        </div>
+
+        <div className="min-w-0 space-y-5">
+          <Panel title="Endpoint" description="Partners authenticate with their API key.">
+            <div className="space-y-4">
+              <Field label="URL name" htmlFor="ag-url">
+                <TextInput
+                  id="ag-url"
+                  value={urlName}
+                  disabled={!canEdit}
+                  className="font-mono"
+                  onChange={(e) => setUrlName(e.target.value.toLowerCase())}
+                />
+              </Field>
+              <CopyField value={`/api/Gateway/${urlName}/sync`} label="Synchronous — waits for the result" />
+              <CopyField value={`/api/Gateway/${urlName}/async`} label="Asynchronous — returns the exchange id" />
+            </div>
+          </Panel>
+        </div>
+      </div>
+
+      {canEdit && dirty && (
+        <UnsavedBar
+          busy={save.isPending}
+          error={save.error?.message}
+          onSave={() => save.mutate()}
+          onDiscard={() => setLoaded(false)}
+        />
+      )}
+
+      {removing && (
+        <ConfirmDialog
+          title="Detach this partner?"
+          body={
+            <>
+              <strong className="font-medium text-ink-800">{removing.partnerName}</strong> will get
+              401s from this gateway immediately. The integration itself is kept.
+            </>
+          }
+          confirmLabel="Detach partner"
+          onConfirm={async () => {
+            await api.removeGatewayAttachment(gatewayId, removing.partnerId);
+            void queryClient.invalidateQueries({ queryKey: ["api-gateway", gatewayId] });
+            void queryClient.invalidateQueries({ queryKey: ["integrations"] });
+          }}
+          onClose={() => setRemoving(null)}
+        />
+      )}
+
+      {deleting && (
+        <ConfirmDialog
+          title="Delete this API gateway?"
+          body={
+            <>
+              <strong className="font-medium text-ink-800">{g.name}</strong> and its partner
+              attachments will be gone; partners calling it start getting 404s. The integrations
+              behind it are kept.
+            </>
+          }
+          confirmLabel="Delete gateway"
+          onConfirm={async () => {
+            await api.deleteApiGateway(gatewayId);
+            void queryClient.invalidateQueries({ queryKey: ["api-gateways"] });
+            void queryClient.invalidateQueries({ queryKey: ["integrations"] });
+            navigate("/api-gateways");
+          }}
+          onClose={() => setDeleting(false)}
+        />
+      )}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/api-gateways/AttachPartnerWizard.tsx b/SW.Bitween.Web/ClientApp/src/pages/api-gateways/AttachPartnerWizard.tsx
new file mode 100644
index 00000000..8c744e07
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/api-gateways/AttachPartnerWizard.tsx
@@ -0,0 +1,162 @@
+import { useEffect } from "react";
+import { Link, useNavigate, useParams, useSearchParams } from "react-router";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { api } from "../../api";
+import { EmptyState, LoadingBlock } from "../../components/ui/basics";
+import { IntegrationPicker, PartnerPicker } from "../../components/config/pickers";
+import { StepNav, WizardShell, usePersistentDraft } from "../../components/config/wizard";
+import { useIntegrationsCache } from "../../components/config/shared";
+import { takePicked, useHereAsReturnTarget } from "../../lib/returnTo";
+
+type Stage = "partner" | "integration" | "review";
+const STEPS = ["Partner", "Integration", "Review"];
+
+interface Draft {
+  stage: Stage;
+  partnerId: number | null;
+  integrationId: number | null;
+}
+
+export function AttachPartnerWizard() {
+  const { id = "" } = useParams();
+  const gatewayId = Number(id);
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const here = useHereAsReturnTarget();
+  const [params, setParams] = useSearchParams();
+
+  const gateway = useQuery({
+    queryKey: ["api-gateway", gatewayId],
+    queryFn: () => api.getApiGateway(gatewayId),
+    retry: false,
+  });
+  const integrations = useIntegrationsCache();
+  const infoTypes = useQuery({ queryKey: ["information-types"], queryFn: () => api.listInformationTypes() });
+  const partners = useQuery({ queryKey: ["partners"], queryFn: () => api.listPartners() });
+
+  const [draft, update, clear] = usePersistentDraft<Draft>(`bitween-draft-attach-${gatewayId}`, {
+    stage: "partner",
+    partnerId: null,
+    integrationId: null,
+  });
+
+  // returning from a create detour: apply the pick and consume the param
+  useEffect(() => {
+    const partner = takePicked(params, "partner");
+    const integration = takePicked(params, "integration");
+    if (partner !== null) update({ partnerId: partner });
+    if (integration !== null) update({ integrationId: integration });
+    if (partner !== null || integration !== null) {
+      setParams(
+        (prev) => {
+          const next = new URLSearchParams(prev);
+          next.delete("picked");
+          return next;
+        },
+        { replace: true },
+      );
+    }
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, []);
+
+  const create = useMutation({
+    mutationFn: () =>
+      api.attachGatewayPartner(gatewayId, { partnerId: draft.partnerId!, integrationId: draft.integrationId! }),
+    onSuccess: () => {
+      clear();
+      void queryClient.invalidateQueries();
+      navigate(`/api-gateways/${gatewayId}`);
+    },
+  });
+
+  if (gateway.isPending) return <LoadingBlock label="Loading gateway…" />;
+  if (gateway.isError)
+    return (
+      <EmptyState title="This API gateway no longer exists">
+        <Link to="/subscriptions?types=api-gateways" className="font-medium text-crimson-700 hover:underline">
+          Back to integrations
+        </Link>
+      </EmptyState>
+    );
+
+  const g = gateway.data;
+  const detourCtx = { to: here, label: `Attaching a partner to ${g.name}` };
+  const gatewayIntegrations = (integrations.data ?? []).filter((s) => s.type === "GatewayApiCall");
+  const current = STEPS.indexOf(draft.stage === "partner" ? "Partner" : draft.stage === "integration" ? "Integration" : "Review");
+
+  const partnerName = partners.data?.find((p) => p.id === draft.partnerId)?.name ?? "…";
+  const integrationName = gatewayIntegrations.find((s) => s.id === draft.integrationId)?.name ?? "…";
+  const infoTypeCode =
+    infoTypes.data?.find(
+      (t) => t.id === gatewayIntegrations.find((s) => s.id === draft.integrationId)?.informationTypeId,
+    )?.code ?? "…";
+
+  return (
+    <WizardShell
+      title={`Attach a partner to ${g.name}`}
+      subtitle="Pick who calls and what runs — anything missing is created on its own page and you continue here."
+      backTo={`/api-gateways/${gatewayId}`}
+      backLabel={g.name}
+      steps={STEPS}
+      current={current}
+    >
+      {draft.stage === "partner" && (
+        <>
+          <h2 className="mb-3 text-[15px] font-semibold text-ink-900">Who is calling this gateway?</h2>
+          <PartnerPicker
+            value={draft.partnerId}
+            onChange={(v) => update({ partnerId: v === "none" ? null : v })}
+            excludeIds={g.attachments.map((a) => a.partnerId)}
+            detourCtx={detourCtx}
+          />
+          <StepNav onNext={() => update({ stage: "integration" })} nextDisabled={draft.partnerId === null} />
+        </>
+      )}
+
+      {draft.stage === "integration" && (
+        <>
+          <h2 className="mb-3 text-[15px] font-semibold text-ink-900">What should run when they call?</h2>
+          <IntegrationPicker
+            type="GatewayApiCall"
+            value={draft.integrationId}
+            onChange={(integrationId) => update({ integrationId })}
+            detourCtx={detourCtx}
+          />
+          <StepNav
+            onBack={() => update({ stage: "partner" })}
+            onNext={() => update({ stage: "review" })}
+            nextDisabled={draft.integrationId === null}
+          />
+        </>
+      )}
+
+      {draft.stage === "review" && (
+        <>
+          <h2 className="mb-3 text-[15px] font-semibold text-ink-900">Review</h2>
+          <dl className="space-y-2.5 text-sm">
+            <ReviewRow label="Gateway" value={`${g.name} — /api/Gateway/${g.urlName}`} />
+            <ReviewRow label="Partner" value={partnerName} />
+            <ReviewRow label="Integration" value={integrationName} />
+            <ReviewRow label="Carries" value={infoTypeCode} />
+          </dl>
+          <StepNav
+            onBack={() => update({ stage: "integration" })}
+            onNext={() => create.mutate()}
+            nextLabel="Attach partner"
+            busy={create.isPending}
+            error={create.error?.message}
+          />
+        </>
+      )}
+    </WizardShell>
+  );
+}
+
+export function ReviewRow({ label, value }: { label: string; value: string }) {
+  return (
+    <div className="flex items-start gap-3">
+      <dt className="w-28 shrink-0 text-ink-500">{label}</dt>
+      <dd className="min-w-0 flex-1 font-medium wrap-break-word text-ink-800">{value}</dd>
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/api-gateways/EditAttachmentPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/api-gateways/EditAttachmentPage.tsx
new file mode 100644
index 00000000..64e75b7c
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/api-gateways/EditAttachmentPage.tsx
@@ -0,0 +1,127 @@
+import { useEffect } from "react";
+import { Link, useNavigate, useParams, useSearchParams } from "react-router";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { ArrowLeft } from "lucide-react";
+import { api } from "../../api";
+import { Button, EmptyState, FormError, LoadingBlock } from "../../components/ui/basics";
+import { IntegrationPicker } from "../../components/config/pickers";
+import { usePersistentDraft } from "../../components/config/wizard";
+import { ReturnBanner } from "../../components/ui/ReturnBanner";
+import { takePicked, useHereAsReturnTarget, useReturnContext } from "../../lib/returnTo";
+
+interface Draft {
+  integrationId: number | null;
+}
+
+/** Routed edit page for one gateway attachment — reached from the gateway's own page. */
+export function EditAttachmentPage() {
+  const { id = "", partnerId = "" } = useParams();
+  const gatewayId = Number(id);
+  const pid = Number(partnerId);
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const ctx = useReturnContext();
+  const here = useHereAsReturnTarget();
+  const [params, setParams] = useSearchParams();
+
+  const gateway = useQuery({
+    queryKey: ["api-gateway", gatewayId],
+    queryFn: () => api.getApiGateway(gatewayId),
+    retry: false,
+  });
+  const attachment = gateway.data?.attachments.find((a) => a.partnerId === pid);
+
+  const [draft, update, clear] = usePersistentDraft<Draft>(
+    `bitween-draft-edit-attach-${gatewayId}-${pid}`,
+    { integrationId: null },
+  );
+
+  // seed from the current attachment once it loads (skipped if a detour already picked something)
+  useEffect(() => {
+    if (draft.integrationId === null && attachment) {
+      update({ integrationId: attachment.integrationId });
+    }
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [attachment]);
+
+  // returning from a "New integration" detour
+  useEffect(() => {
+    const picked = takePicked(params, "integration");
+    if (picked !== null) {
+      update({ integrationId: picked });
+      setParams(
+        (prev) => {
+          const next = new URLSearchParams(prev);
+          next.delete("picked");
+          return next;
+        },
+        { replace: true },
+      );
+    }
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, []);
+
+  const save = useMutation({
+    mutationFn: () => api.updateGatewayAttachment(gatewayId, { partnerId: pid, integrationId: draft.integrationId! }),
+    onSuccess: () => {
+      clear();
+      void queryClient.invalidateQueries({ queryKey: ["api-gateway", gatewayId] });
+      void queryClient.invalidateQueries({ queryKey: ["integrations"] });
+      navigate(`/api-gateways/${gatewayId}`);
+    },
+  });
+
+  if (gateway.isPending) return <LoadingBlock label="Loading gateway…" />;
+  if (gateway.isError || !attachment)
+    return (
+      <EmptyState title="This attachment no longer exists">
+        <Link to={`/api-gateways/${gatewayId}`} className="font-medium text-crimson-700 hover:underline">
+          Back to the gateway
+        </Link>
+      </EmptyState>
+    );
+
+  const g = gateway.data;
+  const detourCtx = { to: here, label: `Editing ${attachment.partnerName}'s integration on ${g.name}` };
+
+  return (
+    <div className="pb-10">
+      <Link
+        to={ctx?.to ?? `/api-gateways/${gatewayId}`}
+        className="mb-4 inline-flex items-center gap-1 text-[13px] font-medium text-ink-500 hover:text-ink-800"
+      >
+        <ArrowLeft className="size-3.5" /> {ctx ? "Back without saving" : g.name}
+      </Link>
+
+      <ReturnBanner />
+
+      <h1 className="text-[22px] font-semibold tracking-tight text-ink-900">
+        Integration for {attachment.partnerName}
+      </h1>
+      <p className="mt-1 text-sm text-ink-500">
+        What runs when {attachment.partnerName} calls {g.name}.
+      </p>
+
+      <div className="mt-6 max-w-2xl space-y-4 rounded-xl border border-ink-200 bg-white p-5">
+        <IntegrationPicker
+          type="GatewayApiCall"
+          value={draft.integrationId}
+          onChange={(integrationId) => update({ integrationId })}
+          detourCtx={detourCtx}
+        />
+        <FormError>{save.error?.message}</FormError>
+        <div className="flex justify-end gap-2 border-t border-ink-100 pt-4">
+          <Button onClick={() => navigate(`/api-gateways/${gatewayId}`)}>Cancel</Button>
+          <Button
+            variant="primary"
+            busy={save.isPending}
+            disabled={draft.integrationId === null}
+            onClick={() => save.mutate()}
+          >
+            Save
+          </Button>
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/auth/AuthLayout.tsx b/SW.Bitween.Web/ClientApp/src/pages/auth/AuthLayout.tsx
new file mode 100644
index 00000000..58dba171
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/auth/AuthLayout.tsx
@@ -0,0 +1,63 @@
+import type { ReactNode } from "react";
+import { useApplyBranding } from "../../lib/branding";
+
+/** The connection motif: systems as nodes, Bitween as the path between them. */
+function FlowLines() {
+  return (
+    <svg
+      viewBox="0 0 480 480"
+      aria-hidden
+      className="pointer-events-none absolute inset-x-0 bottom-0 w-full opacity-60"
+    >
+      <g fill="none" strokeWidth="1.25">
+        <path d="M-20 380 C 120 340, 180 440, 300 400 S 480 320, 520 360" stroke="#4d4341" />
+        <path d="M-20 300 C 100 280, 220 360, 340 320 S 460 260, 520 290" stroke="#372f2e" />
+        <path d="M-20 440 C 140 420, 240 470, 380 440 S 480 410, 520 430" stroke="#372f2e" />
+      </g>
+      <g>
+        <circle cx="120" cy="349" r="4" fill="#665a57" />
+        <circle cx="300" cy="400" r="5" fill="#e3311d" />
+        <circle cx="340" cy="320" r="4" fill="#665a57" />
+        <circle cx="204" cy="443" r="3" fill="#4d4341" />
+      </g>
+    </svg>
+  );
+}
+
+export function AuthLayout({ children }: { children: ReactNode }) {
+  // Brand carriers: the sign-in logo and blurb are Settings-driven ("Brand & theme"), so a
+  // rebrand shows up here too — colour, tab title and favicon included, before any sign-in.
+  const branding = useApplyBranding();
+
+  return (
+    <div className="grid min-h-screen lg:grid-cols-[minmax(360px,44%)_1fr]">
+      <aside className="relative hidden flex-col justify-between overflow-hidden bg-ink-950 p-10 lg:flex">
+        <img
+          src={branding.loginLogoUrl ?? import.meta.env.BASE_URL + "brand/BitweenFull-light.svg"}
+          alt="Bitween"
+          className="h-8 w-fit"
+        />
+        <div className="relative z-10 max-w-sm pb-24">
+          <p className="text-2xl font-semibold leading-snug tracking-tight text-ink-50">
+            The quiet middleman for everything your systems exchange.
+          </p>
+          <p className="mt-3 text-sm leading-relaxed text-ink-400">
+            {branding.loginBlurb ??
+              "Receive, transform and deliver documents between you and your partners — with every exchange traced."}
+          </p>
+        </div>
+        <FlowLines />
+      </aside>
+      <main className="flex items-center justify-center px-4 py-10">
+        <div className="w-full max-w-sm">
+          <img
+            src={branding.loginLogoUrl ?? import.meta.env.BASE_URL + "brand/BitweenFull.svg"}
+            alt="Bitween"
+            className="mb-8 h-7 w-fit lg:hidden"
+          />
+          {children}
+        </div>
+      </main>
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/auth/Login.tsx b/SW.Bitween.Web/ClientApp/src/pages/auth/Login.tsx
new file mode 100644
index 00000000..1ae6acee
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/auth/Login.tsx
@@ -0,0 +1,135 @@
+import { useEffect, useState, type FormEvent } from "react";
+import { useLocation, useNavigate } from "react-router";
+import { useQuery } from "@tanstack/react-query";
+import { getAppConfig, type Session } from "../../api";
+import { useSession } from "../../auth/SessionContext";
+import { homePath } from "../../nav";
+import { Button, FormError } from "../../components/ui/basics";
+import { Field, PasswordInput, TextInput } from "../../components/ui/forms";
+import { AuthLayout } from "./AuthLayout";
+
+function MicrosoftMark() {
+  return (
+    <svg viewBox="0 0 21 21" className="size-4" aria-hidden>
+      <rect x="1" y="1" width="9" height="9" fill="#f25022" />
+      <rect x="11" y="1" width="9" height="9" fill="#7fba00" />
+      <rect x="1" y="11" width="9" height="9" fill="#00a4ef" />
+      <rect x="11" y="11" width="9" height="9" fill="#ffb900" />
+    </svg>
+  );
+}
+
+export function LoginPage() {
+  const { session, signIn, signInWithMicrosoft } = useSession();
+  const navigate = useNavigate();
+  const location = useLocation();
+  const from = (location.state as { from?: string } | null)?.from;
+
+  const [email, setEmail] = useState("");
+  const [password, setPassword] = useState("");
+  const [error, setError] = useState("");
+  const [busy, setBusy] = useState(false);
+
+  // Microsoft sign-in only shows when the backend has MSAL configured.
+  const appConfig = useQuery({ queryKey: ["app-config"], queryFn: getAppConfig });
+  const microsoftEnabled = Boolean(appConfig.data?.msalClientId);
+  // The Login handler rejects email/password outright when this instance is Microsoft-only, so
+  // offering the form would only ever produce a failed sign-in.
+  const passwordEnabled = !appConfig.data?.disableEmailPasswordLogin;
+
+  // already signed in (e.g. back-button to /login)
+  useEffect(() => {
+    if (session) navigate(from ?? homePath(session), { replace: true });
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, []);
+
+  const finish = (next: Session) => navigate(from ?? homePath(next), { replace: true });
+
+  const attempt = async (fn: () => Promise<Session>) => {
+    setBusy(true);
+    setError("");
+    try {
+      finish(await fn());
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Sign-in failed.");
+    } finally {
+      setBusy(false);
+    }
+  };
+
+  const submit = (e: FormEvent) => {
+    e.preventDefault();
+    void attempt(() => signIn(email, password));
+  };
+
+  return (
+    <AuthLayout>
+      <h1 className="text-xl font-semibold tracking-tight text-ink-900">Sign in</h1>
+      <p className="mt-1 mb-6 text-sm text-ink-500">Welcome back to Bitween.</p>
+
+      {passwordEnabled && (
+        <form onSubmit={submit} className="space-y-4">
+          <Field label="Email" htmlFor="login-email">
+            <TextInput
+              id="login-email"
+              type="email"
+              autoComplete="email"
+              required
+              value={email}
+              onChange={(e) => setEmail(e.target.value)}
+              placeholder="you@company.com"
+            />
+          </Field>
+          <Field label="Password" htmlFor="login-password">
+            <PasswordInput
+              id="login-password"
+              autoComplete="current-password"
+              required
+              value={password}
+              onChange={(e) => setPassword(e.target.value)}
+            />
+          </Field>
+          <FormError>{error}</FormError>
+          <Button type="submit" variant="primary" busy={busy} className="w-full">
+            Sign in
+          </Button>
+        </form>
+      )}
+
+      {microsoftEnabled && (
+        <>
+          {passwordEnabled ? (
+            <div className="my-6 flex items-center gap-3 text-xs text-ink-400">
+              <span className="h-px flex-1 bg-ink-200" />
+              or
+              <span className="h-px flex-1 bg-ink-200" />
+            </div>
+          ) : (
+            <div className="mb-4">
+              <FormError>{error}</FormError>
+            </div>
+          )}
+
+          <Button
+            className="w-full"
+            variant={passwordEnabled ? undefined : "primary"}
+            disabled={busy}
+            onClick={() => void attempt(signInWithMicrosoft)}
+          >
+            <MicrosoftMark />
+            Continue with Microsoft
+          </Button>
+        </>
+      )}
+
+      {/* Microsoft-only with no MSAL configured locks everyone out — say so rather than
+          rendering an empty card. */}
+      {!passwordEnabled && !microsoftEnabled && (
+        <FormError>
+          This instance is set to Microsoft sign-in only, but Microsoft sign-in isn&apos;t configured. An
+          administrator needs to add the Azure AD client ID, tenant ID and redirect URI.
+        </FormError>
+      )}
+    </AuthLayout>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/bus-gateways/AddRouteWizard.tsx b/SW.Bitween.Web/ClientApp/src/pages/bus-gateways/AddRouteWizard.tsx
new file mode 100644
index 00000000..e7880d19
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/bus-gateways/AddRouteWizard.tsx
@@ -0,0 +1,191 @@
+import { useEffect } from "react";
+import { Link, useNavigate, useParams, useSearchParams } from "react-router";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { api, type MatchGroup } from "../../api";
+import { EmptyState, LoadingBlock } from "../../components/ui/basics";
+import { MatchExpressionEditor } from "../../components/config/MatchExpressionEditor";
+import { IntegrationPicker, PartnerPicker } from "../../components/config/pickers";
+import { StepNav, WizardShell, usePersistentDraft } from "../../components/config/wizard";
+import { useIntegrationsCache } from "../../components/config/shared";
+import { takePicked, useHereAsReturnTarget } from "../../lib/returnTo";
+import { ReviewRow } from "../api-gateways/AttachPartnerWizard";
+import { matchSummary } from "../../lib/match";
+
+type Stage = "filter" | "partner" | "integration" | "review";
+const STEPS = ["Filter", "Partner", "Integration", "Review"];
+
+interface Draft {
+  stage: Stage;
+  matchExpression: MatchGroup | null;
+  /** null = not chosen yet; "none" = explicitly no partner. */
+  partner: number | "none" | null;
+  integrationId: number | null;
+}
+
+export function AddRouteWizard() {
+  const { id = "" } = useParams();
+  const gatewayId = Number(id);
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const here = useHereAsReturnTarget();
+  const [params, setParams] = useSearchParams();
+
+  const gateway = useQuery({
+    queryKey: ["bus-gateway", gatewayId],
+    queryFn: () => api.getBusGateway(gatewayId),
+    retry: false,
+  });
+  const infoType = useQuery({
+    queryKey: ["information-type", gateway.data?.informationTypeId],
+    queryFn: () => api.getInformationType(gateway.data!.informationTypeId),
+    enabled: !!gateway.data,
+  });
+  const integrations = useIntegrationsCache();
+  const partners = useQuery({ queryKey: ["partners"], queryFn: () => api.listPartners() });
+
+  const [draft, update, clear] = usePersistentDraft<Draft>(`bitween-draft-route-${gatewayId}`, {
+    stage: "filter",
+    matchExpression: null,
+    partner: null,
+    integrationId: null,
+  });
+
+  useEffect(() => {
+    const partner = takePicked(params, "partner");
+    const integration = takePicked(params, "integration");
+    if (partner !== null) update({ partner });
+    if (integration !== null) update({ integrationId: integration });
+    if (partner !== null || integration !== null) {
+      setParams(
+        (prev) => {
+          const next = new URLSearchParams(prev);
+          next.delete("picked");
+          return next;
+        },
+        { replace: true },
+      );
+    }
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, []);
+
+  const create = useMutation({
+    mutationFn: () =>
+      api.addBusRoute(gatewayId, {
+        integrationId: draft.integrationId!,
+        partnerId: draft.partner === "none" ? null : draft.partner,
+        matchExpression: draft.matchExpression,
+      }),
+    onSuccess: () => {
+      clear();
+      void queryClient.invalidateQueries();
+      navigate(`/bus-gateways/${gatewayId}`);
+    },
+  });
+
+  if (gateway.isPending) return <LoadingBlock label="Loading gateway…" />;
+  if (gateway.isError)
+    return (
+      <EmptyState title="This bus gateway no longer exists">
+        <Link to="/subscriptions?types=bus-gateways" className="font-medium text-crimson-700 hover:underline">
+          Back to integrations
+        </Link>
+      </EmptyState>
+    );
+
+  const g = gateway.data;
+  const detourCtx = { to: here, label: `Adding a route to ${g.name}` };
+  const candidates = (integrations.data ?? []).filter(
+    (s) => s.type === "BusGateway" && s.informationTypeId === g.informationTypeId,
+  );
+  const current = STEPS.indexOf(
+    draft.stage === "filter" ? "Filter" : draft.stage === "partner" ? "Partner" : draft.stage === "integration" ? "Integration" : "Review",
+  );
+
+  const partnerLabel =
+    draft.partner === "none"
+      ? "No partner"
+      : (partners.data?.find((p) => p.id === draft.partner)?.name ?? "…");
+
+  return (
+    <WizardShell
+      title={`Add a route to ${g.name}`}
+      subtitle={`Every ${g.informationTypeCode} message on the bus is checked against this route.`}
+      backTo={`/bus-gateways/${gatewayId}`}
+      backLabel={g.name}
+      steps={STEPS}
+      current={current}
+    >
+      {draft.stage === "filter" && (
+        <>
+          <h2 className="mb-3 text-[15px] font-semibold text-ink-900">Which messages should this route pick up?</h2>
+          <MatchExpressionEditor
+            value={draft.matchExpression}
+            onChange={(matchExpression) => update({ matchExpression })}
+            properties={infoType.data?.promotedProperties ?? []}
+            disabled={false}
+          />
+          <StepNav onNext={() => update({ stage: "partner" })} />
+        </>
+      )}
+
+      {draft.stage === "partner" && (
+        <>
+          <h2 className="mb-3 text-[15px] font-semibold text-ink-900">Does this route run for a partner?</h2>
+          <PartnerPicker
+            value={draft.partner}
+            onChange={(partner) => update({ partner })}
+            allowNone
+            noneLabel="No partner"
+            noneSubtitle="The integration runs without {{partner.…}} values."
+            detourCtx={detourCtx}
+          />
+          <StepNav
+            onBack={() => update({ stage: "filter" })}
+            onNext={() => update({ stage: "integration" })}
+            nextDisabled={draft.partner === null}
+          />
+        </>
+      )}
+
+      {draft.stage === "integration" && (
+        <>
+          <h2 className="mb-3 text-[15px] font-semibold text-ink-900">What should run for matched messages?</h2>
+          <IntegrationPicker
+            type="BusGateway"
+            informationTypeId={g.informationTypeId}
+            value={draft.integrationId}
+            onChange={(integrationId) => update({ integrationId })}
+            detourCtx={detourCtx}
+          />
+          <StepNav
+            onBack={() => update({ stage: "partner" })}
+            onNext={() => update({ stage: "review" })}
+            nextDisabled={draft.integrationId === null}
+          />
+        </>
+      )}
+
+      {draft.stage === "review" && (
+        <>
+          <h2 className="mb-3 text-[15px] font-semibold text-ink-900">Review</h2>
+          <dl className="space-y-2.5 text-sm">
+            <ReviewRow label="Gateway" value={`${g.name} — listens for ${g.informationTypeCode}`} />
+            <ReviewRow label="Filter" value={matchSummary(draft.matchExpression)} />
+            <ReviewRow label="Partner" value={partnerLabel} />
+            <ReviewRow
+              label="Integration"
+              value={candidates.find((s) => s.id === draft.integrationId)?.name ?? "…"}
+            />
+          </dl>
+          <StepNav
+            onBack={() => update({ stage: "integration" })}
+            onNext={() => create.mutate()}
+            nextLabel="Add route"
+            busy={create.isPending}
+            error={create.error?.message}
+          />
+        </>
+      )}
+    </WizardShell>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/bus-gateways/BusGatewayNewPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/bus-gateways/BusGatewayNewPage.tsx
new file mode 100644
index 00000000..3ef6f4be
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/bus-gateways/BusGatewayNewPage.tsx
@@ -0,0 +1,117 @@
+import { useEffect, type FormEvent } from "react";
+import { Link, useNavigate, useSearchParams } from "react-router";
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { ArrowLeft } from "lucide-react";
+import { api, type InformationTypeRow } from "../../api";
+import { Button, FormError } from "../../components/ui/basics";
+import { Field, TextInput } from "../../components/ui/forms";
+import { ReturnBanner } from "../../components/ui/ReturnBanner";
+import { InfoTypePicker } from "../../components/config/pickers";
+import { usePersistentDraft } from "../../components/config/wizard";
+import { takePicked, useHereAsReturnTarget, useReturnContext, withReturn } from "../../lib/returnTo";
+
+interface Draft {
+  name: string;
+  informationTypeId: number | null;
+}
+
+const EMPTY: Draft = { name: "", informationTypeId: null };
+const busEnabled = (t: InformationTypeRow) => t.busEnabled;
+
+export function BusGatewayNewPage() {
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const ctx = useReturnContext();
+  const here = useHereAsReturnTarget();
+  const [params, setParams] = useSearchParams();
+
+  const [draft, update, clear] = usePersistentDraft<Draft>("bitween-draft-new-bus-gateway", EMPTY);
+
+  // returning from a "New information type" detour
+  useEffect(() => {
+    const picked = takePicked(params, "infotype");
+    if (picked !== null) {
+      update({ informationTypeId: picked });
+      setParams(
+        (prev) => {
+          const next = new URLSearchParams(prev);
+          next.delete("picked");
+          return next;
+        },
+        { replace: true },
+      );
+    }
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, []);
+
+  const create = useMutation({
+    mutationFn: () => api.createBusGateway({ name: draft.name, informationTypeId: draft.informationTypeId! }),
+    onSuccess: (gateway) => {
+      clear();
+      void queryClient.invalidateQueries({ queryKey: ["bus-gateways"] });
+      const base = `/bus-gateways/${gateway.id}`;
+      navigate(ctx ? `${withReturn(base, ctx)}&picked=bus-gateway:${gateway.id}` : base);
+    },
+  });
+
+  const submit = (e: FormEvent) => {
+    e.preventDefault();
+    create.mutate();
+  };
+
+  return (
+    <div>
+      <Link
+        to={ctx?.to ?? "/subscriptions?types=bus-gateways"}
+        className="mb-4 inline-flex items-center gap-1 text-[13px] font-medium text-ink-500 hover:text-ink-800"
+      >
+        <ArrowLeft className="size-3.5" /> {ctx ? "Back without creating" : "Integrations"}
+      </Link>
+
+      <ReturnBanner />
+
+      <h1 className="text-[22px] font-semibold tracking-tight text-ink-900">New bus gateway</h1>
+      <p className="mt-1 text-sm text-ink-500">
+        Listens for one information type on the message bus. Add routes afterwards on its page.
+      </p>
+
+      <form onSubmit={submit} className="mt-6 max-w-lg space-y-5 rounded-xl border border-ink-200 bg-white p-5">
+        <Field label="Name" htmlFor="nbg-name">
+          <TextInput
+            id="nbg-name"
+            required
+            autoFocus
+            value={draft.name}
+            onChange={(e) => update({ name: e.target.value })}
+            placeholder="e.g. ERP events"
+          />
+        </Field>
+
+        <section>
+          <h2 className="mb-1 text-[13px] font-medium text-ink-700">Listens for</h2>
+          <p className="mb-3 text-[13px] text-ink-500">
+            Only bus-enabled information types can be listened for. The choice is permanent.
+          </p>
+          <InfoTypePicker
+            value={draft.informationTypeId}
+            onChange={(id) => update({ informationTypeId: id })}
+            filter={busEnabled}
+            detourCtx={{ to: here, label: "Creating a new bus gateway" }}
+          />
+        </section>
+
+        <FormError>{create.error?.message}</FormError>
+        <div className="flex justify-end">
+          <Button
+            type="submit"
+            variant="primary"
+            busy={create.isPending}
+            disabled={!draft.name.trim() || draft.informationTypeId === null}
+          >
+            Create gateway
+          </Button>
+        </div>
+      </form>
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/bus-gateways/BusGatewayPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/bus-gateways/BusGatewayPage.tsx
new file mode 100644
index 00000000..1001c5db
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/bus-gateways/BusGatewayPage.tsx
@@ -0,0 +1,215 @@
+import { useEffect, useMemo, useState } from "react";
+import { Link, useNavigate, useParams } from "react-router";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { ArrowLeft, Pencil, Plus, Trash2, Workflow } from "lucide-react";
+import { api, type BusGatewayRoute } from "../../api";
+import { Can, useSessionCan } from "../../auth/guards";
+import { Button, EmptyState, LoadingBlock } from "../../components/ui/basics";
+import { ConfirmDialog } from "../../components/ui/overlays";
+import { CodeBadge, EditableTitle, Panel, UnsavedBar } from "../../components/ui/Panel";
+import { matchSummary } from "../../lib/match";
+import { formatDate } from "../../lib/dates";
+
+export function BusGatewayPage() {
+  const { id = "" } = useParams();
+  const gatewayId = Number(id);
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const canEdit = useSessionCan("bus-gateways.edit");
+
+  const gateway = useQuery({
+    queryKey: ["bus-gateway", gatewayId],
+    queryFn: () => api.getBusGateway(gatewayId),
+    retry: false,
+  });
+
+  const [name, setName] = useState("");
+  const [removingRoute, setRemovingRoute] = useState<BusGatewayRoute | null>(null);
+  const [deleting, setDeleting] = useState(false);
+  const [loaded, setLoaded] = useState(false);
+
+  useEffect(() => {
+    if (!loaded && gateway.data) {
+      setName(gateway.data.name);
+      setLoaded(true);
+    }
+  }, [gateway.data, loaded]);
+
+  const dirty = useMemo(() => !!gateway.data && name !== gateway.data.name, [gateway.data, name]);
+
+  const save = useMutation({
+    mutationFn: () => api.updateBusGateway(gatewayId, { name }),
+    onSuccess: async () => {
+      // Await the detail refetch before re-syncing the draft (avoids stale-data race).
+      await queryClient.invalidateQueries({ queryKey: ["bus-gateway", gatewayId] });
+      void queryClient.invalidateQueries({ queryKey: ["bus-gateways"] });
+      setLoaded(false);
+    },
+  });
+
+  if (gateway.isPending) return <LoadingBlock label="Loading bus gateway…" />;
+  if (gateway.isError)
+    return (
+      <EmptyState title="This bus gateway no longer exists">
+        <Link to="/bus-gateways" className="font-medium text-crimson-700 hover:underline">
+          Back to bus gateways
+        </Link>
+      </EmptyState>
+    );
+
+  const g = gateway.data;
+
+  return (
+    <div className="pb-24">
+      <Link
+        to="/bus-gateways"
+        className="mb-4 inline-flex items-center gap-1 text-[13px] font-medium text-ink-500 hover:text-ink-800"
+      >
+        <ArrowLeft className="size-3.5" /> Bus gateways
+      </Link>
+
+      <div className="mb-6 flex flex-wrap items-start justify-between gap-3">
+        <div>
+          <h1 className="flex items-center gap-2.5 text-[22px] font-semibold tracking-tight text-ink-900">
+            <EditableTitle value={name} onChange={setName} disabled={!canEdit} placeholder="Gateway name" />
+          </h1>
+          <p className="mt-1 text-sm text-ink-500">
+            Listens for{" "}
+            <Link to={`/information-types/${g.informationTypeId}`} className="hover:underline">
+              <CodeBadge code={g.informationTypeCode} name={g.informationTypeName} className="align-middle" />
+            </Link>{" "}
+            on the message bus · created {formatDate(g.createdOn)}.
+          </p>
+        </div>
+        <Can permission="bus-gateways.delete">
+          <Button variant="danger" onClick={() => setDeleting(true)}>
+            <Trash2 className="size-4" /> Delete
+          </Button>
+        </Can>
+      </div>
+
+      <div className="max-w-4xl">
+        <Panel
+          title="Routes"
+          description="Checked against every message — each matching route runs its integration."
+          action={
+            <Can permission="bus-gateways.edit">
+              <Button size="sm" variant="primary" onClick={() => navigate(`/bus-gateways/${gatewayId}/add-route`)}>
+                <Plus className="size-3.5" /> Add route
+              </Button>
+            </Can>
+          }
+        >
+          {g.routes.length === 0 ? (
+            <p className="text-sm text-ink-500">
+              No routes — every {g.informationTypeCode} message on the bus is ignored by this
+              gateway.
+            </p>
+          ) : (
+            <ul className="space-y-2">
+              {g.routes.map((r) => (
+                <li key={r.id} className="rounded-xl border border-ink-200 p-3.5">
+                  <div className="flex flex-wrap items-center gap-2">
+                    <code className="min-w-0 flex-1 font-mono text-xs text-ink-600">
+                      {matchSummary(r.matchExpression)}
+                    </code>
+                    <Can permission="bus-gateways.edit">
+                      <span className="flex gap-1">
+                        <button
+                          onClick={() => navigate(`/bus-gateways/${gatewayId}/routes/${r.id}`)}
+                          aria-label={`Edit route ${r.id}`}
+                          className="rounded-md p-1.5 text-ink-400 hover:bg-ink-100 hover:text-ink-700"
+                        >
+                          <Pencil className="size-3.5" />
+                        </button>
+                        <button
+                          onClick={() => setRemovingRoute(r)}
+                          aria-label={`Remove route ${r.id}`}
+                          className="rounded-md p-1.5 text-ink-400 hover:bg-danger-50 hover:text-danger-700"
+                        >
+                          <Trash2 className="size-3.5" />
+                        </button>
+                      </span>
+                    </Can>
+                  </div>
+                  <p className="mt-1.5 flex items-center gap-2 text-[13px] text-ink-600">
+                    <Workflow className="size-3.5 shrink-0 text-ink-300" aria-hidden />
+                    runs{" "}
+                    <Link
+                      to={`/subscriptions/${r.integrationId}`}
+                      className="font-medium text-ink-800 hover:text-crimson-700 hover:underline"
+                    >
+                      {r.integrationName}
+                    </Link>
+                    {r.partnerName && (
+                      <>
+                        for{" "}
+                        <Link
+                          to={`/partners/${r.partnerId}`}
+                          className="font-medium text-ink-800 hover:text-crimson-700 hover:underline"
+                        >
+                          {r.partnerName}
+                        </Link>
+                      </>
+                    )}
+                  </p>
+                </li>
+              ))}
+            </ul>
+          )}
+        </Panel>
+      </div>
+
+      {canEdit && dirty && (
+        <UnsavedBar
+          busy={save.isPending}
+          error={save.error?.message}
+          onSave={() => save.mutate()}
+          onDiscard={() => setLoaded(false)}
+        />
+      )}
+
+      {removingRoute && (
+        <ConfirmDialog
+          title="Remove this route?"
+          body={
+            <>
+              Messages matching{" "}
+              <code className="font-mono text-xs">{matchSummary(removingRoute.matchExpression)}</code>{" "}
+              will stop reaching{" "}
+              <strong className="font-medium text-ink-800">{removingRoute.integrationName}</strong>.
+              The integration itself is kept.
+            </>
+          }
+          confirmLabel="Remove route"
+          onConfirm={async () => {
+            await api.removeBusRoute(gatewayId, removingRoute.id);
+            void queryClient.invalidateQueries({ queryKey: ["bus-gateway", gatewayId] });
+            void queryClient.invalidateQueries({ queryKey: ["integrations"] });
+          }}
+          onClose={() => setRemovingRoute(null)}
+        />
+      )}
+
+      {deleting && (
+        <ConfirmDialog
+          title="Delete this bus gateway?"
+          body={
+            <>
+              <strong className="font-medium text-ink-800">{g.name}</strong> stops listening and
+              all its routes are removed. The integrations behind them are kept.
+            </>
+          }
+          confirmLabel="Delete gateway"
+          onConfirm={async () => {
+            await api.deleteBusGateway(gatewayId);
+            void queryClient.invalidateQueries({ queryKey: ["bus-gateways"] });
+            void queryClient.invalidateQueries({ queryKey: ["integrations"] });
+            navigate("/bus-gateways");
+          }}
+          onClose={() => setDeleting(false)}
+        />
+      )}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/bus-gateways/EditRoutePage.tsx b/SW.Bitween.Web/ClientApp/src/pages/bus-gateways/EditRoutePage.tsx
new file mode 100644
index 00000000..66a266e4
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/bus-gateways/EditRoutePage.tsx
@@ -0,0 +1,173 @@
+import { useEffect } from "react";
+import { Link, useNavigate, useParams, useSearchParams } from "react-router";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { ArrowLeft } from "lucide-react";
+import { api, type MatchGroup } from "../../api";
+import { Button, EmptyState, FormError, LoadingBlock } from "../../components/ui/basics";
+import { MatchExpressionEditor } from "../../components/config/MatchExpressionEditor";
+import { IntegrationPicker, PartnerPicker } from "../../components/config/pickers";
+import { usePersistentDraft } from "../../components/config/wizard";
+import { ReturnBanner } from "../../components/ui/ReturnBanner";
+import { takePicked, useHereAsReturnTarget, useReturnContext } from "../../lib/returnTo";
+
+interface Draft {
+  matchExpression: MatchGroup | null;
+  integrationId: number | null;
+  /** null = not seeded yet; "none" = explicitly no partner. */
+  partner: number | "none" | null;
+}
+
+/** Routed edit page for one bus route — reached from the gateway's own page. */
+export function EditRoutePage() {
+  const { id = "", routeId = "" } = useParams();
+  const gatewayId = Number(id);
+  const rid = Number(routeId);
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const ctx = useReturnContext();
+  const here = useHereAsReturnTarget();
+  const [params, setParams] = useSearchParams();
+
+  const gateway = useQuery({
+    queryKey: ["bus-gateway", gatewayId],
+    queryFn: () => api.getBusGateway(gatewayId),
+    retry: false,
+  });
+  const infoType = useQuery({
+    queryKey: ["information-type", gateway.data?.informationTypeId],
+    queryFn: () => api.getInformationType(gateway.data!.informationTypeId),
+    enabled: !!gateway.data,
+  });
+  const route = gateway.data?.routes.find((r) => r.id === rid);
+
+  const [draft, update, clear] = usePersistentDraft<Draft>(
+    `bitween-draft-edit-route-${gatewayId}-${rid}`,
+    { matchExpression: null, integrationId: null, partner: null },
+  );
+
+  // seed from the current route once it loads (skipped if a detour already picked something)
+  useEffect(() => {
+    if (draft.integrationId === null && draft.partner === null && route) {
+      update({
+        matchExpression: structuredClone(route.matchExpression),
+        integrationId: route.integrationId,
+        partner: route.partnerId ?? "none",
+      });
+    }
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [route]);
+
+  // returning from a "New partner" / "New integration" detour
+  useEffect(() => {
+    const partner = takePicked(params, "partner");
+    const integration = takePicked(params, "integration");
+    if (partner !== null) update({ partner });
+    if (integration !== null) update({ integrationId: integration });
+    if (partner !== null || integration !== null) {
+      setParams(
+        (prev) => {
+          const next = new URLSearchParams(prev);
+          next.delete("picked");
+          return next;
+        },
+        { replace: true },
+      );
+    }
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, []);
+
+  const save = useMutation({
+    mutationFn: () =>
+      api.updateBusRoute(gatewayId, rid, {
+        integrationId: draft.integrationId!,
+        partnerId: draft.partner === "none" ? null : draft.partner,
+        matchExpression: draft.matchExpression,
+      }),
+    onSuccess: () => {
+      clear();
+      void queryClient.invalidateQueries({ queryKey: ["bus-gateway", gatewayId] });
+      void queryClient.invalidateQueries({ queryKey: ["integrations"] });
+      navigate(`/bus-gateways/${gatewayId}`);
+    },
+  });
+
+  if (gateway.isPending) return <LoadingBlock label="Loading gateway…" />;
+  if (gateway.isError || !route)
+    return (
+      <EmptyState title="This route no longer exists">
+        <Link to={`/bus-gateways/${gatewayId}`} className="font-medium text-crimson-700 hover:underline">
+          Back to the gateway
+        </Link>
+      </EmptyState>
+    );
+
+  const g = gateway.data;
+  const detourCtx = { to: here, label: `Editing a route on ${g.name}` };
+
+  return (
+    <div className="pb-10">
+      <Link
+        to={ctx?.to ?? `/bus-gateways/${gatewayId}`}
+        className="mb-4 inline-flex items-center gap-1 text-[13px] font-medium text-ink-500 hover:text-ink-800"
+      >
+        <ArrowLeft className="size-3.5" /> {ctx ? "Back without saving" : g.name}
+      </Link>
+
+      <ReturnBanner />
+
+      <h1 className="text-[22px] font-semibold tracking-tight text-ink-900">Edit route</h1>
+      <p className="mt-1 text-sm text-ink-500">Runs against every {g.informationTypeCode} message on the bus.</p>
+
+      <div className="mt-6 max-w-2xl space-y-6 rounded-xl border border-ink-200 bg-white p-5">
+        <div>
+          <h2 className="mb-2 text-[13px] font-medium text-ink-700">When a message matches</h2>
+          <MatchExpressionEditor
+            value={draft.matchExpression}
+            onChange={(matchExpression) => update({ matchExpression })}
+            properties={infoType.data?.promotedProperties ?? []}
+            disabled={false}
+          />
+        </div>
+
+        <section>
+          <h2 className="mb-2 text-[13px] font-medium text-ink-700">Run the integration</h2>
+          <IntegrationPicker
+            type="BusGateway"
+            informationTypeId={g.informationTypeId}
+            value={draft.integrationId}
+            onChange={(integrationId) => update({ integrationId })}
+            detourCtx={detourCtx}
+          />
+        </section>
+
+        <section>
+          <h2 className="mb-2 text-[13px] font-medium text-ink-700">On behalf of partner</h2>
+          <p className="mb-3 text-[13px] text-ink-500">
+            {"Supplies {{partner.…}} values to the adapters."}
+          </p>
+          <PartnerPicker
+            value={draft.partner}
+            onChange={(partner) => update({ partner })}
+            allowNone
+            noneLabel="No partner"
+            noneSubtitle="The integration runs without {{partner.…}} values."
+            detourCtx={detourCtx}
+          />
+        </section>
+
+        <FormError>{save.error?.message}</FormError>
+        <div className="flex justify-end gap-2 border-t border-ink-100 pt-4">
+          <Button onClick={() => navigate(`/bus-gateways/${gatewayId}`)}>Cancel</Button>
+          <Button
+            variant="primary"
+            busy={save.isPending}
+            disabled={draft.integrationId === null}
+            onClick={() => save.mutate()}
+          >
+            Save route
+          </Button>
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/dashboard/DashboardPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/dashboard/DashboardPage.tsx
new file mode 100644
index 00000000..ea249d21
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/dashboard/DashboardPage.tsx
@@ -0,0 +1,311 @@
+import type { ReactNode } from "react";
+import { Link } from "react-router";
+import { keepPreviousData, useQuery } from "@tanstack/react-query";
+import { api } from "../../api";
+import { PageHeader } from "../../components/layout/PageHeader";
+import { Badge, EmptyState, LoadingBlock } from "../../components/ui/basics";
+import { Panel } from "../../components/ui/Panel";
+import { timeAgo } from "../../lib/dates";
+import { StatusBadge, XchangeId } from "../exchanges/shared";
+
+const CHART_HEIGHT = 140;
+
+const dayLabel = new Intl.DateTimeFormat("en", { day: "numeric", month: "short" });
+
+function StatTile({
+  label,
+  value,
+  sub,
+  to,
+  accent,
+}: {
+  label: string;
+  value: ReactNode;
+  sub?: ReactNode;
+  to: string;
+  accent?: "danger" | "warn";
+}) {
+  return (
+    <Link
+      to={to}
+      className={`rounded-xl border bg-white px-4 py-3 transition-colors hover:bg-ink-50 ${
+        accent === "danger" ? "border-danger-200" : accent === "warn" ? "border-warn-100" : "border-ink-200"
+      }`}
+    >
+      <p className="text-[13px] text-ink-500">{label}</p>
+      <p
+        className={`mt-0.5 text-2xl font-semibold ${
+          accent === "danger" ? "text-danger-700" : accent === "warn" ? "text-warn-700" : "text-ink-900"
+        }`}
+      >
+        {value}
+      </p>
+      {sub && <p className="mt-0.5 text-xs text-ink-500">{sub}</p>}
+    </Link>
+  );
+}
+
+/**
+ * The operational front page: today at a glance, two weeks of traffic, and
+ * what needs a human — everything links into the page that can act on it.
+ */
+export function DashboardPage() {
+  const { data, isLoading } = useQuery({
+    queryKey: ["dashboard"],
+    queryFn: () => api.getDashboard(),
+    refetchInterval: 60_000,
+    placeholderData: keepPreviousData,
+  });
+
+  if (isLoading || !data) return <LoadingBlock label="Putting the picture together…" />;
+
+  const delta = data.today.total - data.yesterdayTotal;
+  const maxDay = Math.max(1, ...data.trafficByDay.map((d) => d.success + d.failed));
+  const needsAttention =
+    data.attention.failingIntegrations.length + data.attention.pausedIntegrations.length;
+
+  return (
+    <div>
+      <PageHeader
+        title="Dashboard"
+        description="Traffic and health at a glance — every number links to the page where you can act on it."
+      />
+
+      {/* — KPI row — */}
+      <div className="mb-4 grid grid-cols-2 gap-2.5 sm:grid-cols-3 xl:grid-cols-5">
+        <StatTile
+          label="Exchanges today"
+          value={data.today.total}
+          sub={
+            <>
+              {delta >= 0 ? "+" : ""}
+              {delta} vs yesterday
+              {data.today.processing > 0 && <> · {data.today.processing} in flight</>}
+            </>
+          }
+          to="/exchanges"
+        />
+        <StatTile
+          label="Success rate (7 days)"
+          value={`${data.successRate7d}%`}
+          sub="of finished exchanges"
+          to="/exchanges?status=success"
+        />
+        <StatTile
+          label="Failed today"
+          value={data.today.failed}
+          sub={data.today.failed > 0 ? "open the failures" : "nothing failed yet"}
+          to="/exchanges?status=failed"
+          accent={data.today.failed > 0 ? "danger" : undefined}
+        />
+        <StatTile
+          label="Pending auto-retries"
+          value={data.pendingRetries}
+          sub={data.pendingRetries > 0 ? "waiting for their slot" : "queue is clear"}
+          to="/scheduled-retries"
+          accent={data.pendingRetries > 0 ? "warn" : undefined}
+        />
+        <StatTile
+          label="Queue alerts"
+          value={data.queueAlerts}
+          sub="live consumer health"
+          to="/queue-health"
+          accent={data.queueAlerts > 0 ? "warn" : undefined}
+        />
+      </div>
+
+      {/* — 14-day traffic — */}
+      <Panel
+        title="Traffic, last 14 days"
+        description="Exchanges per day."
+        className="mb-4"
+        action={
+          <span className="flex items-center gap-3 text-xs text-ink-500">
+            <span className="flex items-center gap-1.5">
+              <span className="size-2.5 rounded-[3px] bg-ok-600" aria-hidden /> Succeeded
+            </span>
+            <span className="flex items-center gap-1.5">
+              <span className="size-2.5 rounded-[3px] bg-danger-600" aria-hidden /> Failed or rejected
+            </span>
+          </span>
+        }
+      >
+        <div className="relative" style={{ height: CHART_HEIGHT + 24 }}>
+          {/* gridlines at max and half */}
+          {[1, 0.5].map((f) => (
+            <div
+              key={f}
+              className="absolute right-0 left-8 border-t border-ink-100"
+              style={{ top: CHART_HEIGHT * (1 - f) }}
+            >
+              <span className="absolute -top-2 -left-8 w-6 text-right font-mono text-[10px] text-ink-400 tabular-nums">
+                {Math.round(maxDay * f)}
+              </span>
+            </div>
+          ))}
+          <div className="absolute inset-x-0 bottom-0 left-8 flex items-end gap-1" style={{ height: CHART_HEIGHT + 24 }}>
+            {data.trafficByDay.map((d, i) => {
+              const okH = Math.round((d.success / maxDay) * CHART_HEIGHT);
+              const badH = Math.round((d.failed / maxDay) * CHART_HEIGHT);
+              return (
+                <div key={d.date} className="group relative flex h-full flex-1 flex-col items-center justify-end">
+                  {/* hover tooltip */}
+                  <div className="pointer-events-none absolute bottom-full z-10 mb-1 hidden w-max rounded-md bg-ink-950 px-2 py-1 text-[11px] text-ink-100 group-hover:block">
+                    <span className="font-medium">{dayLabel.format(new Date(d.date))}</span> — {d.success} ok
+                    {d.failed > 0 && <span> · {d.failed} failed</span>}
+                  </div>
+                  <div className="flex w-full max-w-6 flex-col items-stretch gap-0.5">
+                    {d.failed > 0 && (
+                      <div className="rounded-t-[4px] bg-danger-600" style={{ height: Math.max(badH, 3) }} />
+                    )}
+                    {d.success > 0 && (
+                      <div
+                        className={`bg-ok-600 ${d.failed === 0 ? "rounded-t-[4px]" : ""}`}
+                        style={{ height: Math.max(okH, 3) }}
+                      />
+                    )}
+                    {d.success === 0 && d.failed === 0 && <div className="h-px bg-ink-100" />}
+                  </div>
+                  <span className="mt-1 h-4 text-[10px] whitespace-nowrap text-ink-400">
+                    {i % 2 === 1 ? dayLabel.format(new Date(d.date)) : ""}
+                  </span>
+                </div>
+              );
+            })}
+          </div>
+        </div>
+        <details className="mt-2">
+          <summary className="cursor-pointer text-xs font-medium text-ink-500 hover:text-ink-700">
+            View as table
+          </summary>
+          <table className="mt-2 text-[13px]">
+            <thead>
+              <tr className="text-left text-[11px] font-medium tracking-wide text-ink-400 uppercase">
+                <th className="py-1 pr-6">Day</th>
+                <th className="py-1 pr-6 text-right">Succeeded</th>
+                <th className="py-1 text-right">Failed or rejected</th>
+              </tr>
+            </thead>
+            <tbody className="tabular-nums">
+              {data.trafficByDay.map((d) => (
+                <tr key={d.date}>
+                  <td className="py-0.5 pr-6 text-ink-600">{dayLabel.format(new Date(d.date))}</td>
+                  <td className="py-0.5 pr-6 text-right text-ink-800">{d.success}</td>
+                  <td className="py-0.5 text-right text-ink-800">{d.failed}</td>
+                </tr>
+              ))}
+            </tbody>
+          </table>
+        </details>
+      </Panel>
+
+      <div className="mb-4 grid gap-4 lg:grid-cols-2">
+        {/* — latest failures — */}
+        <Panel title="Latest failures" description="The most recent exchanges that need a look.">
+          {data.latestFailures.length === 0 ? (
+            <EmptyState title="Nothing has failed">When an exchange fails, it shows up here first.</EmptyState>
+          ) : (
+            <ul className="space-y-2.5">
+              {data.latestFailures.map((f) => (
+                <li key={f.id} className="text-sm">
+                  <div className="flex flex-wrap items-center gap-1.5">
+                    <XchangeId id={f.id} />
+                    <StatusBadge status={f.status} />
+                    {f.integrationName && (
+                      <Link
+                        to={`/subscriptions/${f.integrationId}`}
+                        className="font-medium text-ink-800 hover:text-crimson-700 hover:underline"
+                      >
+                        {f.integrationName}
+                      </Link>
+                    )}
+                    <span className="ml-auto text-xs text-ink-400">{timeAgo(f.on)}</span>
+                  </div>
+                  {f.exception && (
+                    <p className="mt-0.5 truncate font-mono text-[11px] text-ink-500" title={f.exception}>
+                      {f.exception.split("\n")[0]}
+                    </p>
+                  )}
+                </li>
+              ))}
+            </ul>
+          )}
+          <Link
+            to="/exchanges?status=failed"
+            className="mt-3 inline-block text-[13px] font-medium text-crimson-700 hover:underline"
+          >
+            All failed exchanges →
+          </Link>
+        </Panel>
+
+        {/* — integration health — */}
+        <Panel title="Integration health" description="Integrations that aren't running clean.">
+          {needsAttention === 0 ? (
+            <EmptyState title="All integrations healthy">No failures piling up, nothing paused.</EmptyState>
+          ) : (
+            <ul className="space-y-2">
+              {data.attention.failingIntegrations.map((s) => (
+                <li key={`f-${s.id}`} className="flex items-center gap-2.5 text-sm">
+                  <Link
+                    to={`/subscriptions/${s.id}`}
+                    className="min-w-0 flex-1 truncate font-medium text-ink-800 hover:text-crimson-700 hover:underline"
+                  >
+                    {s.name}
+                  </Link>
+                  <Badge tone="danger">
+                    {s.consecutiveFailures} consecutive failure{s.consecutiveFailures === 1 ? "" : "s"}
+                  </Badge>
+                </li>
+              ))}
+              {data.attention.pausedIntegrations.map((s) => (
+                <li key={`p-${s.id}`} className="flex items-center gap-2.5 text-sm">
+                  <Link
+                    to={`/subscriptions/${s.id}`}
+                    className="min-w-0 flex-1 truncate font-medium text-ink-800 hover:text-crimson-700 hover:underline"
+                  >
+                    {s.name}
+                  </Link>
+                  <Badge tone="warn">Paused</Badge>
+                </li>
+              ))}
+            </ul>
+          )}
+        </Panel>
+      </div>
+
+      {/* — busiest integrations — */}
+      <Panel title="Busiest integrations" description="Traffic share over the last 7 days.">
+        {data.busiest.length === 0 ? (
+          <EmptyState title="No traffic yet">Once exchanges flow, the busiest pipelines rank here.</EmptyState>
+        ) : (
+          <ul className="space-y-2.5">
+            {data.busiest.map((b) => {
+              const max = data.busiest[0].count;
+              const okPct = ((b.count - b.failed) / max) * 100;
+              const badPct = (b.failed / max) * 100;
+              return (
+                <li key={b.id} className="flex items-center gap-3 text-sm">
+                  <Link
+                    to={`/subscriptions/${b.id}`}
+                    className="w-44 truncate font-medium text-ink-800 hover:text-crimson-700 hover:underline"
+                    title={b.name}
+                  >
+                    {b.name}
+                  </Link>
+                  <span className="flex h-2.5 flex-1 items-stretch gap-0.5">
+                    <span className="rounded-l-[4px] bg-ok-600" style={{ width: `${okPct}%` }} />
+                    {b.failed > 0 && <span className="rounded-r-[4px] bg-danger-600" style={{ width: `${badPct}%` }} />}
+                  </span>
+                  <span className="w-16 text-right text-xs text-ink-500 tabular-nums">
+                    {b.count}
+                    {b.failed > 0 && <span className="text-danger-700"> · {b.failed} ✕</span>}
+                  </span>
+                </li>
+              );
+            })}
+          </ul>
+        )}
+      </Panel>
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/exchanges/ExchangeDrawer.tsx b/SW.Bitween.Web/ClientApp/src/pages/exchanges/ExchangeDrawer.tsx
new file mode 100644
index 00000000..474716d9
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/exchanges/ExchangeDrawer.tsx
@@ -0,0 +1,290 @@
+import { useState, type ReactNode } from "react";
+import { Link } from "react-router";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { ArrowRight, Check, Copy, FileText, Play, RotateCcw } from "lucide-react";
+import { api, ApiRequestError, type ExchangeDocStage, type ExchangeRow } from "../../api";
+import { useSessionCan } from "../../auth/guards";
+import { Badge, Button } from "../../components/ui/basics";
+import { ConfirmDialog } from "../../components/ui/overlays";
+import { formatDateTime, duration, timeUntil } from "../../lib/dates";
+import { RetryDialog, journeyStages, type JourneyStage } from "./shared";
+
+const STAGE_TONES: Record<JourneyStage["state"], { ring: string; badge: ReactNode }> = {
+  done: { ring: "border-ok-100", badge: <Badge tone="ok">Done</Badge> },
+  bad: { ring: "border-warn-100", badge: <Badge tone="warn">Bad response</Badge> },
+  failed: { ring: "border-danger-200", badge: <Badge tone="danger">Failed</Badge> },
+  skipped: { ring: "border-ink-100 border-dashed", badge: <Badge>Skipped</Badge> },
+  running: { ring: "border-ink-200", badge: <Badge tone="ink">Running</Badge> },
+  notReached: { ring: "border-ink-100", badge: <Badge>Not reached</Badge> },
+};
+
+const kb = (bytes: number) => (bytes < 1024 ? `${bytes} B` : `${(bytes / 1024).toFixed(1)} KB`);
+
+function CopyButton({ value, label }: { value: string; label: string }) {
+  const [copied, setCopied] = useState(false);
+  return (
+    <button
+      onClick={async () => {
+        await navigator.clipboard.writeText(value);
+        setCopied(true);
+        setTimeout(() => setCopied(false), 1400);
+      }}
+      title={`Copy ${label}`}
+      className="rounded-md p-1 text-ink-400 hover:bg-ink-100 hover:text-ink-700"
+    >
+      {copied ? <Check className="size-3.5 text-ok-600" /> : <Copy className="size-3.5" />}
+    </button>
+  );
+}
+
+function MetaItem({ label, children }: { label: string; children: ReactNode }) {
+  return (
+    <div className="min-w-0">
+      <dt className="text-[11px] font-medium tracking-wide text-ink-400 uppercase">{label}</dt>
+      <dd className="mt-0.5 text-[13px] text-ink-800">{children}</dd>
+    </div>
+  );
+}
+
+const STAGE_ORDER: ExchangeDocStage[] = ["Input", "Mapped", "Handled"];
+
+/**
+ * The expanded exchange row: the pipeline journey with per-stage documents,
+ * the failure (when there is one), full metadata and the retry actions.
+ */
+export function ExchangeDrawer({ x }: { x: ExchangeRow }) {
+  const stages = journeyStages(x);
+  const canOperate = useSessionCan("exchanges.operate");
+  const queryClient = useQueryClient();
+
+  const files: Record<ExchangeDocStage, ExchangeRow["files"]["input"]> = {
+    Input: x.files.input,
+    Mapped: x.files.mapped,
+    Handled: x.files.handled,
+  };
+
+  // Default to the furthest stage that produced a document.
+  const [stage, setStage] = useState<ExchangeDocStage>(
+    [...STAGE_ORDER].reverse().find((s) => files[s]?.key) ?? "Input",
+  );
+  const activeKey = files[stage]?.key ?? null;
+  const {
+    data: activeContent,
+    isLoading: activeLoading,
+    isError: activeErrored,
+  } = useQuery({
+    queryKey: ["exchange-document", activeKey],
+    queryFn: () => api.getExchangeDocument(activeKey!),
+    enabled: activeKey !== null,
+  });
+
+  const [confirming, setConfirming] = useState(false);
+  const [actionError, setActionError] = useState<string | null>(null);
+  const [startedId, setStartedId] = useState<string | null>(null);
+
+  const invalidate = () => void queryClient.invalidateQueries({ queryKey: ["exchanges"] });
+
+  const retry = useMutation({
+    mutationFn: (reset: boolean) => api.retryExchange(x.id, { reset }),
+    onSuccess: ({ id }) => {
+      setConfirming(false);
+      setStartedId(id);
+      invalidate();
+    },
+    onError: (e) => {
+      setConfirming(false);
+      setActionError(e instanceof ApiRequestError ? e.message : "The retry could not be started.");
+    },
+  });
+
+  const [confirmingRunNow, setConfirmingRunNow] = useState(false);
+  const runNow = useMutation({
+    mutationFn: () => api.runScheduledRetryNow(x.id),
+    onSuccess: () => {
+      setStartedId("scheduled");
+      invalidate();
+      void queryClient.invalidateQueries({ queryKey: ["scheduled-retries"] });
+    },
+  });
+
+  return (
+    <div className="space-y-4 border-l-2 border-ink-100 py-1 pl-4">
+      {/* — journey — */}
+      <div className="flex flex-wrap items-stretch gap-1.5">
+        {stages.map((s, i) => {
+          const tone = STAGE_TONES[s.state];
+          const file = files[s.key];
+          const active = !!file?.key && s.key === stage;
+          return (
+            <div key={s.key} className="flex items-stretch gap-1.5">
+              {i > 0 && <ArrowRight className="size-3.5 self-center text-ink-300" aria-hidden />}
+              <button
+                disabled={!file?.key}
+                onClick={() => file?.key && setStage(s.key)}
+                title={file?.key ? `Show the ${s.key} document` : (s.note ?? "No document")}
+                className={`w-44 rounded-xl border bg-white px-3 py-2 text-left transition-colors ${tone.ring} ${
+                  file?.key ? "cursor-pointer hover:bg-ink-50" : "cursor-default opacity-80"
+                } ${active ? "ring-2 ring-crimson-100" : ""}`}
+              >
+                <div className="flex items-center justify-between gap-2">
+                  <span className="text-[13px] font-semibold text-ink-800">{s.label}</span>
+                  {tone.badge}
+                </div>
+                <div className="mt-1 flex items-center gap-1 text-[11px] text-ink-500">
+                  {file ? (
+                    <>
+                      <FileText className="size-3 shrink-0 text-ink-300" aria-hidden />
+                      <span className="truncate font-mono">{file.name}</span>
+                      <span className="shrink-0 text-ink-400">· {kb(file.size)}</span>
+                    </>
+                  ) : (
+                    <span className="text-ink-400">{s.note ?? "No document"}</span>
+                  )}
+                </div>
+              </button>
+            </div>
+          );
+        })}
+      </div>
+
+      {/* — active stage document — */}
+      {activeKey && (
+        <pre className="max-h-56 overflow-auto rounded-lg bg-ink-950 px-3 py-2.5 font-mono text-[11px] leading-relaxed text-ink-100">
+          {activeLoading ? "Loading…" : activeErrored ? "Failed to load this document." : activeContent}
+        </pre>
+      )}
+
+      {/* — failure — */}
+      {x.exception && (
+        <div className="rounded-lg bg-danger-50 px-3 py-2.5">
+          <div className="mb-1 flex items-center justify-between">
+            <p className="text-[11px] font-medium tracking-wide text-danger-700 uppercase">Exception</p>
+            <CopyButton value={x.exception} label="exception" />
+          </div>
+          <pre className="max-h-40 overflow-auto font-mono text-[11px] leading-relaxed whitespace-pre-wrap text-danger-800">
+            {x.exception}
+          </pre>
+        </div>
+      )}
+
+      {/* — metadata — */}
+      <dl className="grid grid-cols-2 gap-x-6 gap-y-3 sm:grid-cols-3 lg:grid-cols-4">
+        <MetaItem label="Started">{formatDateTime(x.startedOn)}</MetaItem>
+        <MetaItem label="Finished">
+          {x.finishedOn ? (
+            <>
+              {formatDateTime(x.finishedOn)}
+              <span className="text-ink-400"> · {duration(x.startedOn, x.finishedOn)}</span>
+            </>
+          ) : (
+            "Still processing"
+          )}
+        </MetaItem>
+        <MetaItem label="Correlation id">
+          {x.correlationId ? (
+            <span className="inline-flex items-center gap-0.5">
+              <Link
+                to={`/exchanges?correlationId=${encodeURIComponent(x.correlationId)}`}
+                title="Show every exchange with this correlation id"
+                className="font-mono text-xs break-all text-ink-700 hover:text-crimson-700 hover:underline"
+              >
+                {x.correlationId}
+              </Link>
+              <CopyButton value={x.correlationId} label="correlation id" />
+            </span>
+          ) : (
+            <span className="text-ink-400">—</span>
+          )}
+        </MetaItem>
+        <MetaItem label="Related">
+          <Link
+            to={`/exchanges?ids=${encodeURIComponent(x.id)}`}
+            className="text-[13px] font-medium text-ink-700 hover:text-crimson-700 hover:underline"
+          >
+            Retries &amp; aggregation family
+          </Link>
+        </MetaItem>
+        {x.retryFor && (
+          <MetaItem label="Retry of">
+            <Link
+              to={`/exchanges?ids=${encodeURIComponent(x.retryFor)}`}
+              className="font-mono text-xs text-ink-700 hover:text-crimson-700 hover:underline"
+            >
+              {x.retryFor}
+            </Link>
+          </MetaItem>
+        )}
+        {x.aggregationXchangeId && (
+          <MetaItem label="Aggregated into">
+            <Link
+              to={`/exchanges?ids=${encodeURIComponent(x.aggregationXchangeId)}`}
+              className="font-mono text-xs text-ink-700 hover:text-crimson-700 hover:underline"
+            >
+              {x.aggregationXchangeId}
+            </Link>
+          </MetaItem>
+        )}
+        {x.promotedProperties && Object.keys(x.promotedProperties).length > 0 && (
+          <MetaItem label="Promoted properties">
+            <span className="flex flex-wrap gap-1">
+              {Object.entries(x.promotedProperties).map(([k, v]) => (
+                <code key={k} className="rounded bg-ink-100 px-1.5 py-0.5 font-mono text-[11px] text-ink-700">
+                  {k}={v}
+                </code>
+              ))}
+            </span>
+          </MetaItem>
+        )}
+      </dl>
+
+      {/* — actions — */}
+      {canOperate && (
+        <div className="flex flex-wrap items-center gap-2 border-t border-ink-100 pt-3">
+          {startedId ? (
+            <p className="text-[13px] text-ok-600">
+              ✓ Retry started{startedId !== "scheduled" && <> — new exchange is at the top of the list</>}
+            </p>
+          ) : x.scheduledRetryOn ? (
+            <>
+              <Badge tone="warn">Auto-retry {timeUntil(x.scheduledRetryOn)}</Badge>
+              <span className="text-[13px] text-ink-500">
+                scheduled for {formatDateTime(x.scheduledRetryOn)}
+              </span>
+              <Button size="sm" onClick={() => setConfirmingRunNow(true)}>
+                <Play className="size-3.5" aria-hidden />
+                Run now
+              </Button>
+            </>
+          ) : (
+            (x.status === "failed" || x.status === "badResponse") && (
+              <Button size="sm" onClick={() => setConfirming(true)}>
+                <RotateCcw className="size-3.5" aria-hidden />
+                Retry…
+              </Button>
+            )
+          )}
+          {actionError && <p className="text-[13px] text-danger-700">{actionError}</p>}
+        </div>
+      )}
+
+      {confirming && (
+        <RetryDialog
+          count={1}
+          busy={retry.isPending}
+          onConfirm={(reset) => retry.mutate(reset)}
+          onClose={() => setConfirming(false)}
+        />
+      )}
+
+      {confirmingRunNow && (
+        <ConfirmDialog
+          title="Run this retry now?"
+          body={`The scheduled auto-retry for ${x.id} runs immediately instead of waiting for its slot.`}
+          confirmLabel="Run now"
+          onConfirm={() => runNow.mutateAsync()}
+          onClose={() => setConfirmingRunNow(false)}
+        />
+      )}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/exchanges/ExchangeNewPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/exchanges/ExchangeNewPage.tsx
new file mode 100644
index 00000000..145926e7
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/exchanges/ExchangeNewPage.tsx
@@ -0,0 +1,136 @@
+import { useState } from "react";
+import { useNavigate, useSearchParams } from "react-router";
+import { useMutation, useQuery } from "@tanstack/react-query";
+import { api, ApiRequestError } from "../../api";
+import { PageHeader } from "../../components/layout/PageHeader";
+import { Button, FormError } from "../../components/ui/basics";
+import { Field } from "../../components/ui/forms";
+import { SearchSelect } from "../../components/ui/SearchSelect";
+import { useIntegrationsCache } from "../../components/config/shared";
+
+/**
+ * Manually inject a payload — useful for testing a pipeline without waiting
+ * for real traffic. Addressed either at one integration, or at an
+ * information type (every matching integration picks it up).
+ */
+export function ExchangeNewPage() {
+  const navigate = useNavigate();
+  const [searchParams, setSearchParams] = useSearchParams();
+  const target = searchParams.get("target") === "informationType" ? "informationType" : "integration";
+  const setTarget = (t: "integration" | "informationType") => {
+    const next = new URLSearchParams(searchParams);
+    next.set("target", t);
+    setSearchParams(next, { replace: true });
+  };
+  const [integrationId, setIntegrationId] = useState("");
+  const [informationTypeId, setInformationTypeId] = useState("");
+  const [data, setData] = useState("");
+  const [error, setError] = useState<string | null>(null);
+
+  const integrations = useIntegrationsCache().data ?? [];
+  const infoTypes =
+    useQuery({ queryKey: ["information-types"], queryFn: () => api.listInformationTypes() }).data ?? [];
+
+  const create = useMutation({
+    mutationFn: () =>
+      api.createExchange({
+        target,
+        integrationId: integrationId ? Number(integrationId) : undefined,
+        informationTypeId: informationTypeId ? Number(informationTypeId) : undefined,
+        data,
+      }),
+    onSuccess: ({ id }) => navigate(`/exchanges?ids=${encodeURIComponent(id)}`),
+    onError: (e) =>
+      setError(e instanceof ApiRequestError ? e.message : "The exchange could not be created."),
+  });
+
+  const submit = () => {
+    setError(null);
+    if (target === "integration" && !integrationId) return setError("Pick the integration to run.");
+    if (target === "informationType" && !informationTypeId)
+      return setError("Pick the information type to send.");
+    if (!data.trim()) return setError("Paste the payload the exchange should carry.");
+    create.mutate();
+  };
+
+  return (
+    <div className="mx-auto max-w-2xl">
+      <PageHeader
+        title="New exchange"
+        description="Inject a payload by hand — it runs through the pipeline exactly like real traffic."
+      />
+
+      <div className="space-y-5 rounded-xl border border-ink-200 bg-white p-5">
+        <div className="flex gap-2">
+          {(
+            [
+              { id: "integration", label: "Send to an integration" },
+              { id: "informationType", label: "Send as an information type" },
+            ] as const
+          ).map((t) => (
+            <button
+              key={t.id}
+              onClick={() => setTarget(t.id)}
+              aria-pressed={target === t.id}
+              className={`rounded-full px-3 py-1.5 text-[13px] font-medium transition-colors ${
+                target === t.id
+                  ? "bg-ink-900 text-white"
+                  : "border border-ink-200 bg-white text-ink-600 hover:border-ink-300 hover:bg-ink-50"
+              }`}
+            >
+              {t.label}
+            </button>
+          ))}
+        </div>
+
+        {target === "integration" ? (
+          <Field
+            label="Integration"
+            hint="The pipeline that will process this payload."
+          >
+            <SearchSelect
+              value={integrationId}
+              onChange={setIntegrationId}
+              placeholder="Pick an integration…"
+              options={integrations.map((i) => ({ value: String(i.id), label: i.name }))}
+            />
+          </Field>
+        ) : (
+          <Field
+            label="Information type"
+            hint="Every integration listening for this type picks the payload up."
+          >
+            <SearchSelect
+              value={informationTypeId}
+              onChange={setInformationTypeId}
+              placeholder="Pick an information type…"
+              options={infoTypes.map((t) => ({ value: String(t.id), label: t.name, code: t.code }))}
+            />
+          </Field>
+        )}
+
+        <Field label="Payload" hint="JSON or XML — whatever the pipeline expects as its input document.">
+          <textarea
+            value={data}
+            onChange={(e) => setData(e.target.value)}
+            rows={10}
+            spellCheck={false}
+            placeholder='{"order": { … }}'
+            className="w-full resize-y rounded-lg border border-ink-200 bg-white px-3 py-2 font-mono text-xs text-ink-900 placeholder:text-ink-400 focus:border-crimson-400 focus:ring-2 focus:ring-crimson-100 focus:outline-none"
+          />
+        </Field>
+
+        <FormError>{error}</FormError>
+
+        <div className="flex justify-end gap-2">
+          <Button variant="ghost" onClick={() => navigate("/exchanges")}>
+            Cancel
+          </Button>
+          <Button variant="primary" busy={create.isPending} onClick={submit}>
+            Create exchange
+          </Button>
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/exchanges/ExchangesPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/exchanges/ExchangesPage.tsx
new file mode 100644
index 00000000..fe366c11
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/exchanges/ExchangesPage.tsx
@@ -0,0 +1,446 @@
+import { Fragment, useMemo, useState } from "react";
+import { Link, useSearchParams } from "react-router";
+import { keepPreviousData, useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { ChevronDown, ChevronRight, Plus, RotateCcw, X } from "lucide-react";
+import { api, type ExchangeQuery, type ExchangeStatus } from "../../api";
+import { Can } from "../../auth/guards";
+import { PageHeader } from "../../components/layout/PageHeader";
+import { Badge, Button, EmptyState, LoadingBlock } from "../../components/ui/basics";
+import { Select, TextInput } from "../../components/ui/forms";
+import { SearchSelect } from "../../components/ui/SearchSelect";
+import { useIntegrationsCache } from "../../components/config/shared";
+import { timeAgo, timeUntil, duration } from "../../lib/dates";
+import { ExchangeDrawer } from "./ExchangeDrawer";
+import { JourneyStrip, RetryDialog, STATUS_LABELS, StatusBadge, XchangeId } from "./shared";
+
+const PAGE_SIZE = 25;
+const STATUSES: ExchangeStatus[] = ["processing", "success", "badResponse", "failed"];
+
+const REFRESH_OPTIONS = [
+  { value: "0", label: "Refresh: off" },
+  { value: "5000", label: "Refresh: 5s" },
+  { value: "15000", label: "Refresh: 15s" },
+  { value: "60000", label: "Refresh: 1m" },
+];
+
+/** Everything except paging counts as "a filter" for the Clear affordance. */
+const FILTER_KEYS = ["status", "integrationId", "partnerId", "informationTypeId", "ids", "correlationId", "property", "from", "to"] as const;
+
+const readQuery = (sp: URLSearchParams): ExchangeQuery => ({
+  status: (sp.get("status") as ExchangeStatus | null) ?? undefined,
+  integrationId: sp.get("integrationId") ? Number(sp.get("integrationId")) : undefined,
+  partnerId: sp.get("partnerId") ? Number(sp.get("partnerId")) : undefined,
+  informationTypeId: sp.get("informationTypeId") ? Number(sp.get("informationTypeId")) : undefined,
+  ids: sp.get("ids") ?? undefined,
+  correlationId: sp.get("correlationId") ?? undefined,
+  property: sp.get("property") ?? undefined,
+  from: sp.get("from") ? new Date(sp.get("from")! + "T00:00:00").toISOString() : undefined,
+  to: sp.get("to") ? new Date(sp.get("to")! + "T23:59:59").toISOString() : undefined,
+  offset: sp.get("offset") ? Number(sp.get("offset")) : 0,
+  limit: PAGE_SIZE,
+});
+
+export function ExchangesPage() {
+  const [searchParams, setSearchParams] = useSearchParams();
+  const query = useMemo(() => readQuery(searchParams), [searchParams]);
+  const [refreshMs, setRefreshMs] = useState(15_000);
+  const [open, setOpen] = useState<Set<string>>(new Set());
+  const [selected, setSelected] = useState<Set<string>>(new Set());
+  const [bulkConfirm, setBulkConfirm] = useState(false);
+  const [bulkResult, setBulkResult] = useState<string | null>(null);
+  const queryClient = useQueryClient();
+
+  const { data, isLoading, dataUpdatedAt } = useQuery({
+    queryKey: ["exchanges", searchParams.toString()],
+    queryFn: () => api.searchExchanges(query),
+    refetchInterval: refreshMs || false,
+    placeholderData: keepPreviousData,
+  });
+
+  const integrations = useIntegrationsCache().data ?? [];
+  const partners = useQuery({ queryKey: ["partners"], queryFn: () => api.listPartners() }).data ?? [];
+  const infoTypes =
+    useQuery({ queryKey: ["information-types"], queryFn: () => api.listInformationTypes() }).data ?? [];
+
+  /** Set (or drop) one URL param; changing any filter resets paging. */
+  const setParam = (key: string, value: string | null, resetOffset = true) => {
+    const next = new URLSearchParams(searchParams);
+    if (value === null || value === "") next.delete(key);
+    else next.set(key, value);
+    if (resetOffset) next.delete("offset");
+    setSearchParams(next, { replace: true });
+  };
+
+  const activeFilterCount = FILTER_KEYS.filter((k) => searchParams.has(k)).length;
+
+  const toggleOpen = (id: string) =>
+    setOpen((prev) => {
+      const next = new Set(prev);
+      if (next.has(id)) next.delete(id);
+      else next.add(id);
+      return next;
+    });
+
+  const toggleSelected = (id: string) =>
+    setSelected((prev) => {
+      const next = new Set(prev);
+      if (next.has(id)) next.delete(id);
+      else next.add(id);
+      return next;
+    });
+
+  const rows = data?.result ?? [];
+  const total = data?.total ?? 0;
+  const allOnPageSelected = rows.length > 0 && rows.every((r) => selected.has(r.id));
+
+  const bulkRetry = useMutation({
+    mutationFn: (reset: boolean) => api.bulkRetryExchanges([...selected], { reset }),
+    onSuccess: ({ retried, skipped }) => {
+      setBulkConfirm(false);
+      setSelected(new Set());
+      setBulkResult(
+        `${retried} retr${retried === 1 ? "y" : "ies"} started${skipped > 0 ? `, ${skipped} skipped (auto-retry already scheduled)` : ""}.`,
+      );
+      void queryClient.invalidateQueries({ queryKey: ["exchanges"] });
+    },
+  });
+
+  return (
+    <div>
+      <PageHeader
+        title="Exchanges"
+        description="Every message that flows through Bitween — expand a row to follow its journey through the pipeline."
+        actions={
+          <Can permission="exchanges.operate">
+            <Link to="/exchanges/new">
+              <Button variant="primary">
+                <Plus className="size-4" aria-hidden />
+                New exchange
+              </Button>
+            </Link>
+          </Can>
+        }
+      />
+
+      {/* — status pills + live refresh — */}
+      <div className="mb-3 flex flex-wrap items-center gap-2">
+        <button
+          onClick={() => setParam("status", null)}
+          aria-pressed={!query.status}
+          className={`rounded-full px-3 py-1.5 text-[13px] font-medium transition-colors ${
+            !query.status
+              ? "bg-ink-900 text-white"
+              : "border border-ink-200 bg-white text-ink-600 hover:border-ink-300 hover:bg-ink-50"
+          }`}
+        >
+          All
+        </button>
+        {STATUSES.map((s) => {
+          const active = query.status === s;
+          return (
+            <button
+              key={s}
+              onClick={() => setParam("status", active ? null : s)}
+              aria-pressed={active}
+              className={`rounded-full px-3 py-1.5 text-[13px] font-medium transition-colors ${
+                active
+                  ? "bg-ink-900 text-white"
+                  : "border border-ink-200 bg-white text-ink-600 hover:border-ink-300 hover:bg-ink-50"
+              }`}
+            >
+              {STATUS_LABELS[s]}
+            </button>
+          );
+        })}
+        <span className="ml-auto flex items-center gap-2">
+          {refreshMs > 0 && (
+            <span
+              className="inline-block size-1.5 animate-pulse rounded-full bg-ok-600"
+              title={`Live — refreshed ${timeAgo(new Date(dataUpdatedAt).toISOString())}`}
+            />
+          )}
+          <Select
+            aria-label="Refresh interval"
+            className="!h-8 !w-auto text-[13px]"
+            value={String(refreshMs)}
+            onChange={(e) => setRefreshMs(Number(e.target.value))}
+            options={REFRESH_OPTIONS}
+          />
+        </span>
+      </div>
+
+      {/* — filters — */}
+      <div className="mb-4 grid grid-cols-2 gap-2 md:grid-cols-3 xl:grid-cols-6">
+        <SearchSelect
+          aria-label="Filter by integration"
+          size="sm"
+          clearLabel="Any integration"
+          value={query.integrationId?.toString() ?? ""}
+          onChange={(v) => setParam("integrationId", v || null)}
+          options={integrations.map((i) => ({ value: String(i.id), label: i.name }))}
+        />
+        <SearchSelect
+          aria-label="Filter by partner"
+          size="sm"
+          clearLabel="Any partner"
+          value={query.partnerId?.toString() ?? ""}
+          onChange={(v) => setParam("partnerId", v || null)}
+          options={partners.map((p) => ({ value: String(p.id), label: p.name }))}
+        />
+        <SearchSelect
+          aria-label="Filter by information type"
+          size="sm"
+          clearLabel="Any information type"
+          value={query.informationTypeId?.toString() ?? ""}
+          onChange={(v) => setParam("informationTypeId", v || null)}
+          options={infoTypes.map((t) => ({ value: String(t.id), label: t.name, code: t.code }))}
+        />
+        <TextInput
+          aria-label="Filter by exchange ids"
+          className="!h-8 text-[13px]"
+          placeholder="Ids (comma separated)"
+          defaultValue={query.ids ?? ""}
+          key={`ids-${query.ids ?? ""}`}
+          onBlur={(e) => e.target.value !== (query.ids ?? "") && setParam("ids", e.target.value || null)}
+          onKeyDown={(e) => e.key === "Enter" && setParam("ids", e.currentTarget.value || null)}
+        />
+        <TextInput
+          aria-label="Filter by correlation id"
+          className="!h-8 text-[13px]"
+          placeholder="Correlation id"
+          defaultValue={query.correlationId ?? ""}
+          key={`cid-${query.correlationId ?? ""}`}
+          onBlur={(e) =>
+            e.target.value !== (query.correlationId ?? "") && setParam("correlationId", e.target.value || null)
+          }
+          onKeyDown={(e) => e.key === "Enter" && setParam("correlationId", e.currentTarget.value || null)}
+        />
+        <TextInput
+          aria-label="Filter by promoted property"
+          className="!h-8 text-[13px]"
+          placeholder="Property (key or value)"
+          defaultValue={query.property ?? ""}
+          key={`prop-${query.property ?? ""}`}
+          onBlur={(e) => e.target.value !== (query.property ?? "") && setParam("property", e.target.value || null)}
+          onKeyDown={(e) => e.key === "Enter" && setParam("property", e.currentTarget.value || null)}
+        />
+        <label className="flex items-center gap-1.5 text-[13px] text-ink-500">
+          From
+          <TextInput
+            type="date"
+            aria-label="Started after"
+            className="!h-8 text-[13px]"
+            value={searchParams.get("from") ?? ""}
+            onChange={(e) => setParam("from", e.target.value || null)}
+          />
+        </label>
+        <label className="flex items-center gap-1.5 text-[13px] text-ink-500">
+          To
+          <TextInput
+            type="date"
+            aria-label="Started before"
+            className="!h-8 text-[13px]"
+            value={searchParams.get("to") ?? ""}
+            onChange={(e) => setParam("to", e.target.value || null)}
+          />
+        </label>
+        {activeFilterCount > 0 && (
+          <button
+            onClick={() => {
+              const next = new URLSearchParams();
+              setSearchParams(next, { replace: true });
+            }}
+            className="inline-flex h-8 items-center gap-1 justify-self-start rounded-lg px-2 text-[13px] font-medium text-crimson-700 hover:bg-crimson-50"
+          >
+            <X className="size-3.5" aria-hidden />
+            Clear filters ({activeFilterCount})
+          </button>
+        )}
+      </div>
+
+      {bulkResult && (
+        <p className="mb-3 rounded-lg bg-ok-100 px-3 py-2 text-sm text-ok-600">{bulkResult}</p>
+      )}
+
+      {/* — list — */}
+      {isLoading ? (
+        <LoadingBlock />
+      ) : rows.length === 0 ? (
+        <EmptyState title="No exchanges match">
+          {activeFilterCount > 0
+            ? "Try removing some filters — or widen the date range."
+            : "Traffic will show up here as soon as an integration processes something."}
+        </EmptyState>
+      ) : (
+        <div className="overflow-x-auto rounded-xl border border-ink-200 bg-white">
+          <table className="w-full text-left text-sm">
+            <thead>
+              <tr className="border-b border-ink-100 text-[11px] font-medium tracking-wide text-ink-400 uppercase">
+                <th className="w-10 py-2.5 pl-4">
+                  <Can permission="exchanges.operate">
+                    <input
+                      type="checkbox"
+                      aria-label="Select all on this page"
+                      className="size-3.5 cursor-pointer accent-crimson-600"
+                      checked={allOnPageSelected}
+                      onChange={() =>
+                        setSelected((prev) => {
+                          const next = new Set(prev);
+                          if (allOnPageSelected) rows.forEach((r) => next.delete(r.id));
+                          else rows.forEach((r) => next.add(r.id));
+                          return next;
+                        })
+                      }
+                    />
+                  </Can>
+                </th>
+                <th className="py-2.5 pr-3">Exchange</th>
+                <th className="px-3 py-2.5">Status</th>
+                <th className="px-3 py-2.5">Journey</th>
+                <th className="px-3 py-2.5">Flow</th>
+                <th className="px-3 py-2.5">Started</th>
+                <th className="w-8 px-2 py-2.5" />
+              </tr>
+            </thead>
+            <tbody>
+              {rows.map((x) => (
+                <Fragment key={x.id}>
+                  <tr
+                    onClick={() => toggleOpen(x.id)}
+                    className="cursor-pointer border-b border-ink-50 transition-colors last:border-0 hover:bg-ink-50/60"
+                  >
+                    <td className="py-2.5 pl-4" onClick={(e) => e.stopPropagation()}>
+                      <Can permission="exchanges.operate">
+                        <input
+                          type="checkbox"
+                          aria-label={`Select ${x.id}`}
+                          className="size-3.5 cursor-pointer accent-crimson-600"
+                          checked={selected.has(x.id)}
+                          onChange={() => toggleSelected(x.id)}
+                        />
+                      </Can>
+                    </td>
+                    <td className="py-2.5 pr-3">
+                      <div className="flex flex-wrap items-center gap-1.5">
+                        <XchangeId id={x.id} />
+                        {x.retryFor && <Badge tone="neutral">Retry</Badge>}
+                        {x.scheduledRetryOn && (
+                          <Badge tone="warn">Auto-retry {timeUntil(x.scheduledRetryOn)}</Badge>
+                        )}
+                        {x.aggregationXchangeId && <Badge tone="neutral">Aggregated</Badge>}
+                      </div>
+                    </td>
+                    <td className="px-3 py-2.5">
+                      <StatusBadge status={x.status} />
+                    </td>
+                    <td className="px-3 py-2.5">
+                      <JourneyStrip x={x} />
+                    </td>
+                    <td className="px-3 py-2.5" onClick={(e) => e.stopPropagation()}>
+                      <span className="flex flex-wrap items-center gap-1 text-[13px]">
+                        <Link
+                          to={`/information-types/${x.informationTypeId}`}
+                          className="font-mono text-xs text-ink-600 hover:text-crimson-700 hover:underline"
+                        >
+                          {x.informationTypeCode}
+                        </Link>
+                        {x.partnerName && (
+                          <>
+                            <span className="text-ink-300">·</span>
+                            <Link
+                              to={`/partners/${x.partnerId}`}
+                              className="text-ink-700 hover:text-crimson-700 hover:underline"
+                            >
+                              {x.partnerName}
+                            </Link>
+                          </>
+                        )}
+                        {x.integrationName && (
+                          <>
+                            <span className="text-ink-300">→</span>
+                            <Link
+                              to={`/subscriptions/${x.integrationId}`}
+                              className="font-medium text-ink-800 hover:text-crimson-700 hover:underline"
+                            >
+                              {x.integrationName}
+                            </Link>
+                          </>
+                        )}
+                      </span>
+                    </td>
+                    <td className="px-3 py-2.5 whitespace-nowrap text-ink-500">
+                      {timeAgo(x.startedOn)}
+                      {x.finishedOn && (
+                        <span className="text-xs text-ink-400"> · {duration(x.startedOn, x.finishedOn)}</span>
+                      )}
+                    </td>
+                    <td className="px-2 py-2.5 text-ink-400">
+                      {open.has(x.id) ? <ChevronDown className="size-4" /> : <ChevronRight className="size-4" />}
+                    </td>
+                  </tr>
+                  {open.has(x.id) && (
+                    <tr className="border-b border-ink-50 last:border-0">
+                      <td colSpan={7} className="bg-ink-50/40 px-4 py-3">
+                        <ExchangeDrawer x={x} />
+                      </td>
+                    </tr>
+                  )}
+                </Fragment>
+              ))}
+            </tbody>
+          </table>
+
+          {/* — paging — */}
+          <div className="flex items-center justify-between border-t border-ink-100 px-4 py-2.5 text-[13px] text-ink-500">
+            <span>
+              Showing {query.offset + 1}–{Math.min(query.offset + PAGE_SIZE, total)} of {total}
+            </span>
+            <span className="flex gap-1.5">
+              <Button
+                size="sm"
+                disabled={query.offset === 0}
+                onClick={() => setParam("offset", String(Math.max(0, query.offset - PAGE_SIZE)), false)}
+              >
+                Previous
+              </Button>
+              <Button
+                size="sm"
+                disabled={query.offset + PAGE_SIZE >= total}
+                onClick={() => setParam("offset", String(query.offset + PAGE_SIZE), false)}
+              >
+                Next
+              </Button>
+            </span>
+          </div>
+        </div>
+      )}
+
+      {/* — bulk action bar — */}
+      {selected.size > 0 && (
+        <div className="sticky bottom-4 mt-4 flex items-center justify-between rounded-xl border border-ink-200 bg-white px-4 py-2.5 shadow-lg">
+          <span className="text-sm text-ink-700">
+            <strong className="font-semibold">{selected.size}</strong> selected
+          </span>
+          <span className="flex gap-2">
+            <Button size="sm" variant="ghost" onClick={() => setSelected(new Set())}>
+              Clear
+            </Button>
+            <Button size="sm" variant="primary" onClick={() => setBulkConfirm(true)}>
+              <RotateCcw className="size-3.5" aria-hidden />
+              Retry selected…
+            </Button>
+          </span>
+        </div>
+      )}
+
+      {bulkConfirm && (
+        <RetryDialog
+          count={selected.size}
+          busy={bulkRetry.isPending}
+          onConfirm={(reset) => bulkRetry.mutate(reset)}
+          onClose={() => setBulkConfirm(false)}
+        />
+      )}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/exchanges/shared.tsx b/SW.Bitween.Web/ClientApp/src/pages/exchanges/shared.tsx
new file mode 100644
index 00000000..7ee96214
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/exchanges/shared.tsx
@@ -0,0 +1,158 @@
+import { useState } from "react";
+import { Check, Copy } from "lucide-react";
+import type { ExchangeRow, ExchangeStatus } from "../../api";
+import { Badge, Button } from "../../components/ui/basics";
+import { Checkbox } from "../../components/ui/forms";
+import { Dialog } from "../../components/ui/overlays";
+
+export const STATUS_LABELS: Record<ExchangeStatus, string> = {
+  processing: "Processing",
+  success: "Success",
+  badResponse: "Bad response",
+  failed: "Failed",
+};
+
+export function StatusBadge({ status }: { status: ExchangeStatus }) {
+  const tone =
+    status === "success"
+      ? ("ok" as const)
+      : status === "failed"
+        ? ("danger" as const)
+        : status === "badResponse"
+          ? ("warn" as const)
+          : ("neutral" as const);
+  return <Badge tone={tone}>{STATUS_LABELS[status]}</Badge>;
+}
+
+// ——— The pipeline journey ———
+
+export type StageState = "done" | "bad" | "failed" | "skipped" | "running" | "notReached";
+
+export interface JourneyStage {
+  key: "Input" | "Mapped" | "Handled";
+  label: string;
+  state: StageState;
+  note?: string;
+}
+
+/** Derives what happened at each pipeline stage from the row's fields. */
+export function journeyStages(x: ExchangeRow): JourneyStage[] {
+  const mapped: JourneyStage = x.mapperSkipped
+    ? { key: "Mapped", label: "Mapped", state: "skipped", note: "No mapper configured" }
+    : x.files.mapped
+      ? { key: "Mapped", label: "Mapped", state: "done" }
+      : x.status === "processing"
+        ? { key: "Mapped", label: "Mapped", state: "running" }
+        : x.status === "failed"
+          ? { key: "Mapped", label: "Mapped", state: "failed", note: "Failed while mapping" }
+          : { key: "Mapped", label: "Mapped", state: "notReached" };
+
+  const handlerReached = !(mapped.state === "failed");
+  const handled: JourneyStage = !handlerReached
+    ? { key: "Handled", label: "Handled", state: "notReached", note: "Never reached" }
+    : x.status === "success"
+      ? { key: "Handled", label: "Handled", state: "done" }
+      : x.status === "badResponse"
+        ? { key: "Handled", label: "Handled", state: "bad", note: "Delivered, but the response reports an error" }
+        : x.status === "failed"
+          ? { key: "Handled", label: "Handled", state: "failed", note: "Failed while handling" }
+          : { key: "Handled", label: "Handled", state: "running" };
+
+  return [{ key: "Input", label: "Received", state: "done" }, mapped, handled];
+}
+
+const STRIP_COLORS: Record<StageState, string> = {
+  done: "bg-ok-600",
+  bad: "bg-warn-700",
+  failed: "bg-danger-600",
+  skipped: "bg-ink-200",
+  running: "bg-ink-400 animate-pulse",
+  notReached: "bg-ink-100",
+};
+
+/** Compact three-segment pipeline indicator for list rows. */
+export function JourneyStrip({ x }: { x: ExchangeRow }) {
+  const stages = journeyStages(x);
+  return (
+    <span className="inline-flex w-24 items-center gap-0.5" aria-hidden>
+      {stages.map((s) => (
+        <span
+          key={s.key}
+          title={`${s.label}: ${s.note ?? s.state}`}
+          className={`h-1.5 flex-1 first:rounded-l-full last:rounded-r-full ${STRIP_COLORS[s.state]}`}
+        />
+      ))}
+    </span>
+  );
+}
+
+/** A full exchange id — mono, never truncated, click to copy. */
+export function XchangeId({ id, className = "" }: { id: string; className?: string }) {
+  const [copied, setCopied] = useState(false);
+  const copy = async (e: React.MouseEvent) => {
+    e.stopPropagation();
+    await navigator.clipboard.writeText(id);
+    setCopied(true);
+    setTimeout(() => setCopied(false), 1400);
+  };
+  return (
+    <button
+      onClick={copy}
+      title="Copy exchange id"
+      className={`group inline-flex items-center gap-1 font-mono text-xs text-ink-700 hover:text-ink-900 ${className}`}
+    >
+      {id}
+      {copied ? (
+        <Check className="size-3 text-ok-600" aria-hidden />
+      ) : (
+        <Copy className="size-3 text-ink-300 opacity-0 transition-opacity group-hover:opacity-100" aria-hidden />
+      )}
+    </button>
+  );
+}
+
+/**
+ * Shared confirm for single and bulk retries — carries the "reset adapter
+ * properties" choice that decides whether the retry re-resolves config.
+ */
+export function RetryDialog({
+  count,
+  busy,
+  onConfirm,
+  onClose,
+}: {
+  count: number;
+  busy: boolean;
+  onConfirm: (reset: boolean) => void;
+  onClose: () => void;
+}) {
+  const [reset, setReset] = useState(false);
+  return (
+    <Dialog
+      title={count === 1 ? "Retry this exchange?" : `Retry ${count} exchanges?`}
+      onClose={onClose}
+    >
+      <div className="space-y-4">
+        <p className="text-sm text-ink-600">
+          The original input document{count === 1 ? "" : "s"} will run through the pipeline again as{" "}
+          {count === 1 ? "a new exchange" : "new exchanges"}.
+          {count > 1 && " Exchanges that already have a pending auto-retry are skipped."}
+        </p>
+        <Checkbox
+          label="Re-resolve adapter properties"
+          description="Use the integration's current configuration instead of the values captured when the exchange first ran."
+          checked={reset}
+          onChange={(e) => setReset(e.target.checked)}
+        />
+        <div className="flex justify-end gap-2">
+          <Button variant="ghost" onClick={onClose}>
+            Cancel
+          </Button>
+          <Button variant="primary" busy={busy} onClick={() => onConfirm(reset)}>
+            Retry
+          </Button>
+        </div>
+      </div>
+    </Dialog>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/global-values/GlobalValueSetPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/global-values/GlobalValueSetPage.tsx
new file mode 100644
index 00000000..40695e9b
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/global-values/GlobalValueSetPage.tsx
@@ -0,0 +1,186 @@
+import { useEffect, useMemo, useState } from "react";
+import { Link, useNavigate, useParams } from "react-router";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { ArrowLeft, Trash2, Workflow } from "lucide-react";
+import { api } from "../../api";
+import { Can, useSessionCan } from "../../auth/guards";
+import { Badge, Button, EmptyState, LoadingBlock } from "../../components/ui/basics";
+import { ConfirmDialog } from "../../components/ui/overlays";
+import { KeyValueEditor, toRecord, toRows, type KvRow } from "../../components/ui/KeyValueEditor";
+import { EditableTitle, Panel, UnsavedBar } from "../../components/ui/Panel";
+import { IntegrationMiniList, useIntegrationsCache } from "../../components/config/shared";
+import { formatDate } from "../../lib/dates";
+
+export function GlobalValueSetPage() {
+  const { id = "" } = useParams();
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const canEdit = useSessionCan("global-values.edit");
+
+  const set = useQuery({
+    queryKey: ["value-set", id],
+    queryFn: () => api.getValueSet(id),
+    retry: false,
+  });
+  const integrations = useIntegrationsCache();
+
+  const [name, setName] = useState("");
+  const [rows, setRows] = useState<KvRow[] | null>(null);
+  const [deleting, setDeleting] = useState(false);
+  const [loaded, setLoaded] = useState(false);
+
+  useEffect(() => {
+    if (!loaded && set.data) {
+      setName(set.data.name);
+      setRows(toRows(set.data.values));
+      setLoaded(true);
+    }
+  }, [set.data, loaded]);
+
+  const dirty = useMemo(() => {
+    if (!set.data || rows === null) return false;
+    return name !== set.data.name || JSON.stringify(toRecord(rows)) !== JSON.stringify(set.data.values);
+  }, [set.data, name, rows]);
+
+  const save = useMutation({
+    mutationFn: () => api.updateValueSet(id, { name, values: toRecord(rows ?? []) }),
+    onSuccess: async () => {
+      // Await the detail refetch before re-syncing the draft (avoids stale-data race).
+      await queryClient.invalidateQueries({ queryKey: ["value-set", id] });
+      void queryClient.invalidateQueries({ queryKey: ["value-sets"] });
+      setLoaded(false);
+    },
+  });
+
+  if (set.isPending) return <LoadingBlock label="Loading value set…" />;
+  if (set.isError)
+    return (
+      <EmptyState title="This value set no longer exists">
+        <Link to="/global-values" className="font-medium text-crimson-700 hover:underline">
+          Back to global values
+        </Link>
+      </EmptyState>
+    );
+
+  const s = set.data;
+
+  return (
+    <div className="pb-24">
+      <Link
+        to="/global-values"
+        className="mb-4 inline-flex items-center gap-1 text-[13px] font-medium text-ink-500 hover:text-ink-800"
+      >
+        <ArrowLeft className="size-3.5" /> Global values
+      </Link>
+
+      <div className="mb-6 flex flex-wrap items-start justify-between gap-3">
+        <div>
+          <h1 className="flex items-center gap-2.5 text-[22px] font-semibold tracking-tight text-ink-900">
+            <EditableTitle value={name} onChange={setName} disabled={!canEdit} placeholder="Value set name" />
+            <code className="shrink-0 rounded-md bg-ink-100 px-1.5 py-0.5 font-mono text-xs text-ink-700">
+              {s.id}
+            </code>
+          </h1>
+          <p className="mt-1 text-sm text-ink-500">Created {formatDate(s.createdOn)}.</p>
+        </div>
+        <Can permission="global-values.delete">
+          <Button variant="danger" onClick={() => setDeleting(true)}>
+            <Trash2 className="size-4" /> Delete
+          </Button>
+        </Can>
+      </div>
+
+      <div className="grid gap-5 lg:grid-cols-[minmax(0,1fr)_360px]">
+        <div className="min-w-0 space-y-5">
+          <Panel
+            title="Values"
+            description="Paste a reference into any adapter field to use a value."
+          >
+            <KeyValueEditor
+              rows={rows ?? []}
+              onChange={setRows}
+              keyLabel="Key"
+              valueLabel="Value"
+              keyPlaceholder="baseUrl"
+              valuePlaceholder="https://…"
+              editable={canEdit}
+              token={(row) => `{{globals.${s.id}.${row.key.trim()}}}`}
+              emptyText="No values yet."
+              rowDetails={(row) => {
+                if (!row.key.trim()) return null;
+                const users = (integrations.data ?? []).filter((setup) =>
+                  setup.globals.some((g) => g.setId === id && g.keys.includes(row.key.trim())),
+                );
+                return (
+                  <IntegrationMiniList
+                    items={users}
+                    emptyText="Not referenced by any integration — safe to change or remove."
+                  />
+                );
+              }}
+            />
+          </Panel>
+        </div>
+
+        <div className="min-w-0">
+          <Panel
+            title="Used by"
+            description="Integrations whose adapters reference this set."
+          >
+            {s.usedBy.length === 0 ? (
+              <p className="text-sm text-ink-500">Not referenced anywhere yet — safe to delete.</p>
+            ) : (
+              <ul className="space-y-2.5">
+                {s.usedBy.map((u) => (
+                  <li key={u.integrationSetup.id} className="text-sm">
+                    <div className="flex items-center gap-2.5">
+                      <Workflow className="size-3.5 shrink-0 text-ink-300" aria-hidden />
+                      <Link
+                        to={`/subscriptions/${u.integrationSetup.id}`}
+                        className="min-w-0 flex-1 truncate font-medium text-ink-800 hover:text-crimson-700 hover:underline"
+                      >
+                        {u.integrationSetup.name}
+                      </Link>
+                      <Badge>{u.integrationSetup.type}</Badge>
+                    </div>
+                    <p className="mt-0.5 pl-6 font-mono text-xs text-ink-500">
+                      {u.keys.map((k) => `${s.id}.${k}`).join("  ·  ")}
+                    </p>
+                  </li>
+                ))}
+              </ul>
+            )}
+          </Panel>
+        </div>
+      </div>
+
+      {canEdit && dirty && (
+        <UnsavedBar
+          busy={save.isPending}
+          error={save.error?.message}
+          onSave={() => save.mutate()}
+          onDiscard={() => setLoaded(false)}
+        />
+      )}
+
+      {deleting && (
+        <ConfirmDialog
+          title="Delete this value set?"
+          body={
+            <>
+              <strong className="font-medium text-ink-800">{s.name}</strong> and all its values will
+              be gone for good. Sets still referenced by integrations can't be deleted.
+            </>
+          }
+          confirmLabel="Delete value set"
+          onConfirm={async () => {
+            await api.deleteValueSet(id);
+            void queryClient.invalidateQueries({ queryKey: ["value-sets"] });
+            navigate("/global-values");
+          }}
+          onClose={() => setDeleting(false)}
+        />
+      )}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/global-values/GlobalValueSetsPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/global-values/GlobalValueSetsPage.tsx
new file mode 100644
index 00000000..ba196f0b
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/global-values/GlobalValueSetsPage.tsx
@@ -0,0 +1,176 @@
+import { useMemo, useState, type FormEvent } from "react";
+import { useNavigate, useSearchParams } from "react-router";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { Plus, Search, SlidersHorizontal } from "lucide-react";
+import { api } from "../../api";
+import { Can } from "../../auth/guards";
+import { PageHeader } from "../../components/layout/PageHeader";
+import { Button, EmptyState, FormError, LoadingBlock } from "../../components/ui/basics";
+import { Field, TextInput } from "../../components/ui/forms";
+import { Dialog } from "../../components/ui/overlays";
+import { suggestSlug } from "../../lib/identifiers";
+
+function CreateValueSetDialog({ onClose }: { onClose: () => void }) {
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const [name, setName] = useState("");
+  const [slug, setSlug] = useState("");
+  const [slugTouched, setSlugTouched] = useState(false);
+
+  const create = useMutation({
+    mutationFn: () => api.createValueSet({ id: slug, name, values: {} }),
+    onSuccess: (set) => {
+      void queryClient.invalidateQueries({ queryKey: ["value-sets"] });
+      navigate(`/global-values/${set.id}`);
+    },
+  });
+
+  const submit = (e: FormEvent) => {
+    e.preventDefault();
+    create.mutate();
+  };
+
+  return (
+    <Dialog title="New value set" onClose={onClose}>
+      <form onSubmit={submit} className="space-y-4">
+        <Field label="Name" htmlFor="nvs-name">
+          <TextInput
+            id="nvs-name"
+            required
+            autoFocus
+            value={name}
+            onChange={(e) => {
+              setName(e.target.value);
+              if (!slugTouched) setSlug(suggestSlug(e.target.value));
+            }}
+            placeholder="e.g. SAP production"
+          />
+        </Field>
+        <Field
+          label="ID"
+          htmlFor="nvs-id"
+          hint="Used inside adapter references: {{globals.<id>.<value>}}. Lowercase letters, digits and dashes; can't change later."
+        >
+          <TextInput
+            id="nvs-id"
+            required
+            value={slug}
+            onChange={(e) => {
+              setSlugTouched(true);
+              setSlug(e.target.value.toLowerCase());
+            }}
+            placeholder="sap-prod"
+            className="font-mono"
+          />
+        </Field>
+        <FormError>{create.error?.message}</FormError>
+        <div className="flex justify-end gap-2">
+          <Button onClick={onClose}>Cancel</Button>
+          <Button type="submit" variant="primary" busy={create.isPending}>
+            Create value set
+          </Button>
+        </div>
+      </form>
+    </Dialog>
+  );
+}
+
+export function GlobalValueSetsPage() {
+  const [searchParams, setSearchParams] = useSearchParams();
+  const navigate = useNavigate();
+  const q = searchParams.get("q") ?? "";
+  const creating = searchParams.get("new") === "1";
+
+  const sets = useQuery({ queryKey: ["value-sets"], queryFn: () => api.listValueSets() });
+
+  const setParam = (key: string, value: string | null) =>
+    setSearchParams(
+      (prev) => {
+        const next = new URLSearchParams(prev);
+        if (value) next.set(key, value);
+        else next.delete(key);
+        return next;
+      },
+      { replace: key === "q" },
+    );
+
+  const filtered = useMemo(() => {
+    const needle = q.trim().toLowerCase();
+    return (sets.data ?? []).filter(
+      (s) => !needle || s.name.toLowerCase().includes(needle) || s.id.includes(needle),
+    );
+  }, [sets.data, q]);
+
+  return (
+    <div>
+      <PageHeader
+        title="Global values"
+        description="Shared value sets any adapter can reference — change an endpoint here once instead of in every integration."
+        actions={
+          <Can permission="global-values.create">
+            <Button variant="primary" onClick={() => setParam("new", "1")}>
+              <Plus className="size-4" /> New value set
+            </Button>
+          </Can>
+        }
+      />
+
+      <div className="relative mb-4 max-w-xs">
+        <Search className="pointer-events-none absolute top-1/2 left-3 size-4 -translate-y-1/2 text-ink-400" />
+        <input
+          type="search"
+          value={q}
+          onChange={(e) => setParam("q", e.target.value || null)}
+          placeholder="Search value sets"
+          aria-label="Search value sets"
+          className="h-9 w-full rounded-lg border border-ink-200 bg-white pr-3 pl-9 text-sm placeholder:text-ink-400 focus:border-crimson-400 focus:ring-2 focus:ring-crimson-100 focus:outline-none"
+        />
+      </div>
+
+      {sets.isPending ? (
+        <LoadingBlock label="Loading value sets…" />
+      ) : filtered.length === 0 ? (
+        <EmptyState icon={<SlidersHorizontal />} title={q ? "No value sets match" : "No value sets yet"}>
+          {q ? "Try a different search." : "Create a set of shared values your adapters can reference."}
+        </EmptyState>
+      ) : (
+        <div className="overflow-x-auto rounded-xl border border-ink-200 bg-white">
+          <table className="w-full min-w-120 text-sm">
+            <thead>
+              <tr className="border-b border-ink-100 text-left text-xs text-ink-500">
+                <th className="px-4 py-2.5 font-medium">ID</th>
+                <th className="px-4 py-2.5 font-medium">Name</th>
+                <th className="px-4 py-2.5 font-medium">Values</th>
+                <th className="px-4 py-2.5 font-medium">Used by</th>
+              </tr>
+            </thead>
+            <tbody>
+              {filtered.map((s) => (
+                <tr
+                  key={s.id}
+                  onClick={() => navigate(`/global-values/${s.id}`)}
+                  className="cursor-pointer border-b border-ink-100 last:border-b-0 hover:bg-ink-50"
+                >
+                  <td className="px-4 py-3">
+                    <code className="font-mono text-xs text-ink-700">{s.id}</code>
+                  </td>
+                  <td className="px-4 py-3 font-medium text-ink-900">{s.name}</td>
+                  <td className="px-4 py-3 text-ink-600">{Object.keys(s.values).length}</td>
+                  <td className="px-4 py-3 text-ink-600">
+                    {s.usedByCount > 0 ? (
+                      `${s.usedByCount} integration${s.usedByCount === 1 ? "" : "s"}`
+                    ) : (
+                      <span className="text-ink-400">—</span>
+                    )}
+                  </td>
+                </tr>
+              ))}
+            </tbody>
+          </table>
+        </div>
+      )}
+
+      {creating && <CreateValueSetDialog onClose={() => setParam("new", null)} />}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/information-types/InformationTypeNewPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/information-types/InformationTypeNewPage.tsx
new file mode 100644
index 00000000..15f9735a
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/information-types/InformationTypeNewPage.tsx
@@ -0,0 +1,169 @@
+import { useState, type FormEvent } from "react";
+import { Link, useNavigate } from "react-router";
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { ArrowLeft, ChevronDown, ChevronRight } from "lucide-react";
+import { api, type InformationTypeFormat } from "../../api";
+import { Button, FormError } from "../../components/ui/basics";
+import { Checkbox, Field, Select, TextInput } from "../../components/ui/forms";
+import { ReturnBanner } from "../../components/ui/ReturnBanner";
+import { suggestCode } from "../../lib/identifiers";
+import { useReturnContext, withReturn } from "../../lib/returnTo";
+
+export function InformationTypeNewPage() {
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const ctx = useReturnContext();
+  const [name, setName] = useState("");
+  const [code, setCode] = useState("");
+  const [codeTouched, setCodeTouched] = useState(false);
+  const [format, setFormat] = useState<InformationTypeFormat>("Json");
+  const [busEnabled, setBusEnabled] = useState(false);
+  const [busMessageTypeName, setBusMessageTypeName] = useState("");
+  // Code and format are auto-derived — tucked away unless someone wants them.
+  const [detailsOpen, setDetailsOpen] = useState(false);
+
+  const create = useMutation({
+    mutationFn: () =>
+      api.createInformationType({
+        name,
+        code,
+        format,
+        busEnabled,
+        busMessageTypeName: busEnabled ? busMessageTypeName : undefined,
+      }),
+    onSuccess: (type) => {
+      void queryClient.invalidateQueries({ queryKey: ["information-types"] });
+      const base = `/information-types/${type.id}`;
+      navigate(ctx ? `${withReturn(base, ctx)}&picked=infotype:${type.id}` : base);
+    },
+  });
+
+  const submit = (e: FormEvent) => {
+    e.preventDefault();
+    create.mutate();
+  };
+
+  return (
+    <div>
+      <Link
+        to={ctx?.to ?? "/information-types"}
+        className="mb-4 inline-flex items-center gap-1 text-[13px] font-medium text-ink-500 hover:text-ink-800"
+      >
+        <ArrowLeft className="size-3.5" /> {ctx ? "Back without creating" : "Information types"}
+      </Link>
+
+      <ReturnBanner />
+
+      <h1 className="text-[22px] font-semibold tracking-tight text-ink-900">New information type</h1>
+      <p className="mt-1 text-sm text-ink-500">
+        Bus settings and promoted properties are configured afterwards on its page.
+      </p>
+
+      <form onSubmit={submit} className="mt-6 max-w-lg space-y-4 rounded-xl border border-ink-200 bg-white p-5">
+        <Field label="Name" htmlFor="nit-name">
+          <TextInput
+            id="nit-name"
+            required
+            autoFocus
+            value={name}
+            onChange={(e) => {
+              setName(e.target.value);
+              if (!codeTouched) setCode(suggestCode(e.target.value));
+            }}
+            placeholder="e.g. Purchase order"
+          />
+        </Field>
+        {/* Auto-derived identity: visible, but out of the way unless changed. */}
+        <div className="rounded-lg bg-ink-50 px-3 py-2.5">
+          <button
+            type="button"
+            onClick={() => setDetailsOpen((o) => !o)}
+            aria-expanded={detailsOpen}
+            className="flex w-full items-center gap-1.5 text-[13px] text-ink-500 hover:text-ink-700"
+          >
+            {detailsOpen ? (
+              <ChevronDown className="size-3.5 shrink-0" aria-hidden />
+            ) : (
+              <ChevronRight className="size-3.5 shrink-0" aria-hidden />
+            )}
+            <span className="min-w-0 truncate text-left">
+              Code{" "}
+              {code ? (
+                <code className="rounded bg-white px-1.5 py-0.5 font-mono text-[11px] text-ink-700 ring-1 ring-ink-200">
+                  {code}
+                </code>
+              ) : (
+                <span className="italic">optional, none set</span>
+              )}{" "}
+              · stored as {format === "Json" ? "JSON" : "XML"}
+            </span>
+            {!detailsOpen && <span className="ml-auto shrink-0 font-medium text-crimson-700">Change</span>}
+          </button>
+          {detailsOpen && (
+            <div className="mt-3 space-y-4">
+              <Field
+                label="Code"
+                htmlFor="nit-code"
+                hint="Optional short identity shown across the system. Uppercase letters, digits and underscores."
+              >
+                <TextInput
+                  id="nit-code"
+                  value={code}
+                  onChange={(e) => {
+                    setCodeTouched(true);
+                    setCode(e.target.value.toUpperCase());
+                  }}
+                  placeholder="PURCHASE_ORDER"
+                  className="font-mono"
+                />
+              </Field>
+              <Field label="Format" htmlFor="nit-format">
+                <Select
+                  id="nit-format"
+                  value={format}
+                  onChange={(e) => setFormat(e.target.value as InformationTypeFormat)}
+                  options={[
+                    { value: "Json", label: "JSON" },
+                    { value: "Xml", label: "XML" },
+                  ]}
+                />
+              </Field>
+            </div>
+          )}
+        </div>
+        <div className="space-y-3">
+          <Checkbox
+            label="Available on the message bus"
+            description="Lets bus gateways listen for this type."
+            checked={busEnabled}
+            onChange={(e) => setBusEnabled(e.target.checked)}
+          />
+          {busEnabled && (
+            <div className="max-w-sm pl-6">
+              <Field
+                label="Bus message type name"
+                htmlFor="nit-bus"
+                hint="Must be unique across information types. No spaces."
+              >
+                <TextInput
+                  id="nit-bus"
+                  required
+                  value={busMessageTypeName}
+                  onChange={(e) => setBusMessageTypeName(e.target.value.replace(/\s+/g, ""))}
+                  className="font-mono"
+                  placeholder="purchase-order"
+                />
+              </Field>
+            </div>
+          )}
+        </div>
+        <FormError>{create.error?.message}</FormError>
+        <div className="flex justify-end">
+          <Button type="submit" variant="primary" busy={create.isPending}>
+            Create information type
+          </Button>
+        </div>
+      </form>
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/information-types/InformationTypePage.tsx b/SW.Bitween.Web/ClientApp/src/pages/information-types/InformationTypePage.tsx
new file mode 100644
index 00000000..632c7462
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/information-types/InformationTypePage.tsx
@@ -0,0 +1,317 @@
+import { useEffect, useMemo, useState } from "react";
+import { Link, useNavigate, useParams } from "react-router";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { ArrowLeft, Cable, History, Trash2 } from "lucide-react";
+import { api, type InformationType, type InformationTypeFormat } from "../../api";
+import { Can, useSessionCan } from "../../auth/guards";
+import { Badge, Button, EmptyState, LoadingBlock } from "../../components/ui/basics";
+import { Checkbox, Field, Select, TextInput } from "../../components/ui/forms";
+import { ConfirmDialog } from "../../components/ui/overlays";
+import { KeyValueEditor, type KvRow } from "../../components/ui/KeyValueEditor";
+import { CodeBadge, Panel, UnsavedBar } from "../../components/ui/Panel";
+import { ExchangesList, SetupList } from "../../components/config/shared";
+import { ReturnBanner } from "../../components/ui/ReturnBanner";
+import { formatDate } from "../../lib/dates";
+
+type Draft = Omit<InformationType, "id" | "createdOn" | "promotedProperties">;
+
+export function InformationTypePage() {
+  const { id = "" } = useParams();
+  const typeId = Number(id);
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const canEdit = useSessionCan("documents.edit");
+
+  const type = useQuery({
+    queryKey: ["information-type", typeId],
+    queryFn: () => api.getInformationType(typeId),
+    retry: false,
+  });
+
+  const [draft, setDraft] = useState<Draft | null>(null);
+  const [propRows, setPropRows] = useState<KvRow[]>([]);
+  const [deleting, setDeleting] = useState(false);
+  const [loaded, setLoaded] = useState(false);
+
+  useEffect(() => {
+    if (!loaded && type.data) {
+      const { id: _id, createdOn: _c, promotedProperties, ...rest } = type.data;
+      setDraft({
+        name: rest.name,
+        code: rest.code,
+        format: rest.format,
+        busEnabled: rest.busEnabled,
+        busMessageTypeName: rest.busMessageTypeName,
+        duplicateIntervalMinutes: rest.duplicateIntervalMinutes,
+        disregardsUnfilteredMessages: rest.disregardsUnfilteredMessages,
+      });
+      setPropRows(promotedProperties.map((p) => ({ key: p.key, value: p.path })));
+      setLoaded(true);
+    }
+  }, [type.data, loaded]);
+
+  const dirty = useMemo(() => {
+    if (!type.data || !draft) return false;
+    const t = type.data;
+    return (
+      draft.name !== t.name ||
+      draft.code !== t.code ||
+      draft.format !== t.format ||
+      draft.busEnabled !== t.busEnabled ||
+      (draft.busMessageTypeName ?? "") !== (t.busMessageTypeName ?? "") ||
+      draft.duplicateIntervalMinutes !== t.duplicateIntervalMinutes ||
+      draft.disregardsUnfilteredMessages !== t.disregardsUnfilteredMessages ||
+      JSON.stringify(propRows) !==
+        JSON.stringify(t.promotedProperties.map((p) => ({ key: p.key, value: p.path })))
+    );
+  }, [type.data, draft, propRows]);
+
+  const save = useMutation({
+    mutationFn: () =>
+      api.updateInformationType(typeId, {
+        ...draft!,
+        promotedProperties: propRows
+          .filter((r) => r.key.trim() || r.value.trim())
+          .map((r) => ({ key: r.key, path: r.value })),
+      }),
+    onSuccess: async () => {
+      // Await the detail refetch before re-syncing the draft (avoids stale-data race).
+      await queryClient.invalidateQueries({ queryKey: ["information-type", typeId] });
+      void queryClient.invalidateQueries({ queryKey: ["information-types"] });
+      setLoaded(false);
+    },
+  });
+
+  if (type.isPending) return <LoadingBlock label="Loading information type…" />;
+  if (type.isError)
+    return (
+      <EmptyState title="This information type no longer exists">
+        <Link to="/information-types" className="font-medium text-crimson-700 hover:underline">
+          Back to information types
+        </Link>
+      </EmptyState>
+    );
+
+  const t = type.data;
+  const set = <K extends keyof Draft>(key: K, value: Draft[K]) =>
+    setDraft((d) => (d ? { ...d, [key]: value } : d));
+
+  return (
+    <div className="pb-24">
+      <Link
+        to="/information-types"
+        className="mb-4 inline-flex items-center gap-1 text-[13px] font-medium text-ink-500 hover:text-ink-800"
+      >
+        <ArrowLeft className="size-3.5" /> Information types
+      </Link>
+
+      <ReturnBanner />
+
+      <div className="mb-6 flex flex-wrap items-start justify-between gap-3">
+        <div>
+          <h1 className="flex items-center gap-2.5 text-[22px] font-semibold tracking-tight text-ink-900">
+            {t.name}
+            <CodeBadge code={t.code} name={t.name} />
+          </h1>
+          <p className="mt-1 text-sm text-ink-500">Defined {formatDate(t.createdOn)}.</p>
+        </div>
+        <Can permission="documents.delete">
+          <Button variant="danger" onClick={() => setDeleting(true)}>
+            <Trash2 className="size-4" /> Delete
+          </Button>
+        </Can>
+      </div>
+
+      <div className="grid gap-5 lg:grid-cols-[minmax(0,1fr)_360px]">
+        <div className="min-w-0 space-y-5">
+          <Panel title="Definition">
+            {draft && (
+              <div className="grid gap-4 sm:grid-cols-2">
+                <Field label="Name" htmlFor="it-name">
+                  <TextInput
+                    id="it-name"
+                    value={draft.name}
+                    disabled={!canEdit}
+                    onChange={(e) => set("name", e.target.value)}
+                  />
+                </Field>
+                <Field
+                  label="Code"
+                  htmlFor="it-code"
+                  hint="Optional. Renaming it changes how it appears everywhere; existing integrations keep working."
+                >
+                  <TextInput
+                    id="it-code"
+                    value={draft.code ?? ""}
+                    disabled={!canEdit}
+                    onChange={(e) => set("code", e.target.value.toUpperCase() || undefined)}
+                    className="font-mono"
+                    placeholder="None set"
+                  />
+                </Field>
+                <Field label="Payload format" htmlFor="it-format">
+                  <Select
+                    id="it-format"
+                    value={draft.format}
+                    disabled={!canEdit}
+                    onChange={(e) => set("format", e.target.value as InformationTypeFormat)}
+                    options={[
+                      { value: "Json", label: "JSON" },
+                      { value: "Xml", label: "XML" },
+                    ]}
+                  />
+                </Field>
+                <Field
+                  label="Duplicate window (minutes)"
+                  htmlFor="it-dup"
+                  hint="Identical payloads arriving within this window are treated as duplicates. 0 turns it off."
+                >
+                  <TextInput
+                    id="it-dup"
+                    type="number"
+                    min={0}
+                    value={draft.duplicateIntervalMinutes}
+                    disabled={!canEdit}
+                    onChange={(e) => set("duplicateIntervalMinutes", Math.max(0, Number(e.target.value)))}
+                  />
+                </Field>
+                <div className="space-y-3 sm:col-span-2">
+                  <Checkbox
+                    label="Available on the message bus"
+                    description="Lets bus gateways listen for this type."
+                    checked={draft.busEnabled}
+                    disabled={!canEdit}
+                    onChange={(e) => set("busEnabled", e.target.checked)}
+                  />
+                  {draft.busEnabled && (
+                    <div className="max-w-sm pl-6">
+                      <Field
+                        label="Bus message type name"
+                        htmlFor="it-bus"
+                        hint="Must be unique across information types. No spaces."
+                      >
+                        <TextInput
+                          id="it-bus"
+                          value={draft.busMessageTypeName ?? ""}
+                          disabled={!canEdit}
+                          onChange={(e) => set("busMessageTypeName", e.target.value.replace(/\s+/g, ""))}
+                          className="font-mono"
+                          placeholder="purchase-order"
+                        />
+                      </Field>
+                    </div>
+                  )}
+                  <Checkbox
+                    label="Disregard unfiltered messages"
+                    description="Drop bus messages of this type that no route matches, instead of failing them."
+                    checked={draft.disregardsUnfilteredMessages}
+                    disabled={!canEdit}
+                    onChange={(e) => set("disregardsUnfilteredMessages", e.target.checked)}
+                  />
+                </div>
+              </div>
+            )}
+          </Panel>
+
+          <Panel
+            title="Promoted properties"
+            description={`Values pulled out of each payload by ${t.format === "Json" ? "JSON path" : "XML path"} — routes and filters match on them.`}
+          >
+            <KeyValueEditor
+              rows={propRows}
+              onChange={setPropRows}
+              keyLabel="Friendly name"
+              valueLabel={draft?.format === "Xml" ? "XML path" : "JSON path"}
+              keyPlaceholder="OrderNumber"
+              valuePlaceholder={draft?.format === "Xml" ? "//Order/Number" : "$.order.id"}
+              editable={canEdit}
+              emptyText="No promoted properties — routes can only match on the whole payload."
+            />
+          </Panel>
+        </div>
+
+        <div className="min-w-0 space-y-5">
+          <Panel title="Used by" description="Everything that carries or routes this type.">
+            <div className="space-y-4">
+              <SetupList items={t.integrationSetups} />
+              {t.busGateways.length > 0 && (
+                <ul className="space-y-1.5 border-t border-ink-100 pt-3">
+                  {t.busGateways.map((g) => (
+                    <li key={g.gatewayId} className="flex items-center gap-2.5 text-sm">
+                      <Cable className="size-3.5 shrink-0 text-ink-300" aria-hidden />
+                      <Link
+                        to={`/bus-gateways/${g.gatewayId}`}
+                        className="min-w-0 flex-1 truncate font-medium text-ink-800 hover:text-crimson-700 hover:underline"
+                      >
+                        {g.gatewayName}
+                      </Link>
+                      <Badge>Bus gateway</Badge>
+                    </li>
+                  ))}
+                </ul>
+              )}
+            </div>
+          </Panel>
+
+          <Can permission="exchanges.view">
+            <Panel
+              title="Recent exchanges"
+              description="Expand a row to see its input, mapped and handled documents."
+            >
+              <ExchangesList items={t.recentExchanges} expandable />
+            </Panel>
+          </Can>
+
+          <Panel title="History">
+            <ul className="space-y-2">
+              {[...t.trail].reverse().map((entry, i) => (
+                <li key={i} className="flex items-center gap-2.5 text-sm">
+                  <History className="size-3.5 shrink-0 text-ink-300" aria-hidden />
+                  <span className="min-w-0 flex-1 truncate text-ink-600">
+                    <span className="font-medium text-ink-800">{entry.action}</span> by{" "}
+                    {entry.byUserId ? (
+                      <Link to={`/team/members/${entry.byUserId}`} className="hover:text-crimson-700 hover:underline">
+                        {entry.by}
+                      </Link>
+                    ) : (
+                      entry.by
+                    )}
+                  </span>
+                  <span className="shrink-0 text-xs text-ink-400">{formatDate(entry.on)}</span>
+                </li>
+              ))}
+            </ul>
+          </Panel>
+        </div>
+      </div>
+
+      {canEdit && dirty && (
+        <UnsavedBar
+          busy={save.isPending}
+          error={save.error?.message}
+          onSave={() => save.mutate()}
+          onDiscard={() => setLoaded(false)}
+        />
+      )}
+
+      {deleting && (
+        <ConfirmDialog
+          title="Delete this information type?"
+          body={
+            <>
+              <strong className="font-medium text-ink-800">{t.code ?? t.name}</strong> and its promoted
+              properties will be gone for good. Types still used by integrations can't be deleted.
+            </>
+          }
+          confirmLabel="Delete information type"
+          onConfirm={async () => {
+            await api.deleteInformationType(typeId);
+            void queryClient.invalidateQueries({ queryKey: ["information-types"] });
+            navigate("/information-types");
+          }}
+          onClose={() => setDeleting(false)}
+        />
+      )}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/information-types/InformationTypesPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/information-types/InformationTypesPage.tsx
new file mode 100644
index 00000000..661b74a9
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/information-types/InformationTypesPage.tsx
@@ -0,0 +1,137 @@
+import { useMemo } from "react";
+import { useNavigate, useSearchParams } from "react-router";
+import { useQuery } from "@tanstack/react-query";
+import { FileText, Plus, Search } from "lucide-react";
+import { api } from "../../api";
+import { Can } from "../../auth/guards";
+import { PageHeader } from "../../components/layout/PageHeader";
+import { Badge, Button, EmptyState, LoadingBlock } from "../../components/ui/basics";
+import { CodeBadge } from "../../components/ui/Panel";
+
+export function InformationTypesPage() {
+  const [searchParams, setSearchParams] = useSearchParams();
+  const navigate = useNavigate();
+  const q = searchParams.get("q") ?? "";
+
+  const types = useQuery({ queryKey: ["information-types"], queryFn: () => api.listInformationTypes() });
+
+  const setParam = (key: string, value: string | null) =>
+    setSearchParams(
+      (prev) => {
+        const next = new URLSearchParams(prev);
+        if (value) next.set(key, value);
+        else next.delete(key);
+        return next;
+      },
+      { replace: key === "q" },
+    );
+
+  const filtered = useMemo(() => {
+    const needle = q.trim().toLowerCase();
+    return (types.data ?? []).filter(
+      (t) =>
+        !needle || t.name.toLowerCase().includes(needle) || (t.code ?? "").toLowerCase().includes(needle),
+    );
+  }, [types.data, q]);
+
+  return (
+    <div>
+      <PageHeader
+        title="Information types"
+        description="The kinds of business documents flowing between you and your partners — each with a short code used across the system."
+        help={{
+          title: "How information types work",
+          body: (
+            <>
+              <p>
+                Every exchange carries exactly one information type (a purchase order, a shipment
+                update…). The <strong>code</strong> is its short identity everywhere in Bitween;
+                the name is the friendly label.
+              </p>
+              <p>
+                <strong>Promoted properties</strong> pull values out of the payload (by JSON path
+                or XML path) so routes and filters can match on them — for example routing orders
+                by store number.
+              </p>
+            </>
+          ),
+        }}
+        actions={
+          <Can permission="documents.create">
+            <Button variant="primary" onClick={() => navigate("/information-types/new")}>
+              <Plus className="size-4" /> New information type
+            </Button>
+          </Can>
+        }
+      />
+
+      <div className="relative mb-4 max-w-xs">
+        <Search className="pointer-events-none absolute top-1/2 left-3 size-4 -translate-y-1/2 text-ink-400" />
+        <input
+          type="search"
+          value={q}
+          onChange={(e) => setParam("q", e.target.value || null)}
+          placeholder="Search by name or code"
+          aria-label="Search information types"
+          className="h-9 w-full rounded-lg border border-ink-200 bg-white pr-3 pl-9 text-sm placeholder:text-ink-400 focus:border-crimson-400 focus:ring-2 focus:ring-crimson-100 focus:outline-none"
+        />
+      </div>
+
+      {types.isPending ? (
+        <LoadingBlock label="Loading information types…" />
+      ) : filtered.length === 0 ? (
+        <EmptyState icon={<FileText />} title={q ? "No information types match" : "No information types yet"}>
+          {q ? "Try a different search." : "Define the first kind of document your integrations will carry."}
+        </EmptyState>
+      ) : (
+        <div className="overflow-x-auto rounded-xl border border-ink-200 bg-white">
+          <table className="w-full min-w-150 text-sm">
+            <thead>
+              <tr className="border-b border-ink-100 text-left text-xs text-ink-500">
+                <th className="px-4 py-2.5 font-medium">Code</th>
+                <th className="px-4 py-2.5 font-medium">Name</th>
+                <th className="px-4 py-2.5 font-medium">Format</th>
+                <th className="px-4 py-2.5 font-medium">Bus</th>
+                <th className="px-4 py-2.5 font-medium">Promoted</th>
+                <th className="px-4 py-2.5 font-medium">Used by</th>
+              </tr>
+            </thead>
+            <tbody>
+              {filtered.map((t) => (
+                <tr
+                  key={t.id}
+                  onClick={() => navigate(`/information-types/${t.id}`)}
+                  className="cursor-pointer border-b border-ink-100 last:border-b-0 hover:bg-ink-50"
+                >
+                  <td className="px-4 py-3">
+                    <CodeBadge code={t.code} name={t.name} />
+                  </td>
+                  <td className="px-4 py-3 font-medium text-ink-900">{t.name}</td>
+                  <td className="px-4 py-3">
+                    <Badge>{t.format.toUpperCase()}</Badge>
+                  </td>
+                  <td className="px-4 py-3">
+                    {t.busEnabled ? (
+                      <code className="font-mono text-xs text-ink-600">{t.busMessageTypeName}</code>
+                    ) : (
+                      <span className="text-ink-400">—</span>
+                    )}
+                  </td>
+                  <td className="px-4 py-3 text-ink-600">{t.promotedProperties.length}</td>
+                  <td className="px-4 py-3 text-ink-600">
+                    {t.usedByCount > 0 ? (
+                      `${t.usedByCount} place${t.usedByCount === 1 ? "" : "s"}`
+                    ) : (
+                      <span className="text-ink-400">—</span>
+                    )}
+                  </td>
+                </tr>
+              ))}
+            </tbody>
+          </table>
+        </div>
+      )}
+
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/integrations/IntegrationNewPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/integrations/IntegrationNewPage.tsx
new file mode 100644
index 00000000..c421b296
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/integrations/IntegrationNewPage.tsx
@@ -0,0 +1,211 @@
+import { useEffect } from "react";
+import { Link, Navigate, useNavigate, useSearchParams } from "react-router";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { ArrowLeft } from "lucide-react";
+import { api } from "../../api";
+import { Button, FormError } from "../../components/ui/basics";
+import { Checkbox, Field, TextInput } from "../../components/ui/forms";
+import { CodeBadge } from "../../components/ui/Panel";
+import { ReturnBanner } from "../../components/ui/ReturnBanner";
+import { AdapterConfig } from "../../components/config/AdapterConfig";
+import { InfoTypePicker } from "../../components/config/pickers";
+import { usePersistentDraft } from "../../components/config/wizard";
+import { takePicked, useHereAsReturnTarget, useReturnContext, withReturn } from "../../lib/returnTo";
+
+interface Draft {
+  name: string;
+  informationTypeId: number | null;
+  validatorId: string | null;
+  validatorProperties: Record<string, string>;
+  mapperId: string | null;
+  mapperProperties: Record<string, string>;
+  handlerId: string | null;
+  handlerProperties: Record<string, string>;
+  enable: boolean;
+}
+
+const EMPTY: Draft = {
+  name: "",
+  informationTypeId: null,
+  validatorId: null,
+  validatorProperties: {},
+  mapperId: null,
+  mapperProperties: {},
+  handlerId: null,
+  handlerProperties: {},
+  enable: true,
+};
+
+/**
+ * Routed create page for gateway-backed integrations. Always reached as a
+ * detour from an entry-point flow (attach partner / add route) — `type` and
+ * optionally `informationTypeId` arrive as query params.
+ */
+export function IntegrationNewPage() {
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const ctx = useReturnContext();
+  const here = useHereAsReturnTarget();
+  const [params, setParams] = useSearchParams();
+
+  const type = params.get("type");
+  const fixedInfoTypeId = params.get("informationTypeId") ? Number(params.get("informationTypeId")) : null;
+  const infoTypes = useQuery({ queryKey: ["information-types"], queryFn: () => api.listInformationTypes() });
+
+  const [draft, update, clear] = usePersistentDraft<Draft>("bitween-draft-new-integration", EMPTY);
+
+  // a detour to /information-types/new just came back with the new type
+  useEffect(() => {
+    const picked = takePicked(params, "infotype");
+    if (picked !== null) {
+      update({ informationTypeId: picked });
+      setParams(
+        (prev) => {
+          const next = new URLSearchParams(prev);
+          next.delete("picked");
+          return next;
+        },
+        { replace: true },
+      );
+    }
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, []);
+
+  const create = useMutation({
+    mutationFn: () =>
+      api.createIntegration({
+        type: type as "GatewayApiCall" | "BusGateway",
+        name: draft.name,
+        informationTypeId: fixedInfoTypeId ?? draft.informationTypeId!,
+        validatorId: draft.validatorId,
+        validatorProperties: draft.validatorProperties,
+        mapperId: draft.mapperId,
+        mapperProperties: draft.mapperProperties,
+        handlerId: draft.handlerId,
+        handlerProperties: draft.handlerProperties,
+        enabled: draft.enable,
+      }),
+    onSuccess: (created) => {
+      clear();
+      void queryClient.invalidateQueries();
+      const base = `/subscriptions/${created.id}`;
+      navigate(ctx ? `${withReturn(base, ctx)}&picked=integration:${created.id}` : base);
+    },
+  });
+
+  if (type !== "GatewayApiCall" && type !== "BusGateway") return <Navigate to="/subscriptions" replace />;
+
+  const fixedInfoType = fixedInfoTypeId ? infoTypes.data?.find((t) => t.id === fixedInfoTypeId) : undefined;
+  const valid =
+    draft.name.trim().length >= 2 &&
+    (fixedInfoTypeId !== null || draft.informationTypeId !== null) &&
+    draft.handlerId !== null;
+
+  return (
+    <div className="pb-10">
+      <Link
+        to={ctx?.to ?? "/subscriptions"}
+        className="mb-4 inline-flex items-center gap-1 text-[13px] font-medium text-ink-500 hover:text-ink-800"
+      >
+        <ArrowLeft className="size-3.5" /> {ctx ? "Back without creating" : "Integrations"}
+      </Link>
+
+      <ReturnBanner />
+
+      <h1 className="text-[22px] font-semibold tracking-tight text-ink-900">New integration</h1>
+      <p className="mt-1 text-sm text-ink-500">
+        {type === "GatewayApiCall"
+          ? "Runs when a partner calls an API gateway."
+          : "Runs when a bus gateway route matches a message."}
+      </p>
+
+      <div className="mt-6 max-w-3xl space-y-6 rounded-xl border border-ink-200 bg-white p-5">
+        <div className="max-w-sm">
+          <Field label="Integration name" htmlFor="ni-name">
+            <TextInput
+              id="ni-name"
+              value={draft.name}
+              autoFocus
+              placeholder="e.g. Coral orders intake"
+              onChange={(e) => update({ name: e.target.value })}
+            />
+          </Field>
+        </div>
+
+        <section>
+          <h2 className="text-[15px] font-semibold text-ink-900">Carries</h2>
+          {fixedInfoTypeId !== null ? (
+            <p className="mt-2 flex items-center gap-2 text-sm text-ink-600">
+              {fixedInfoType ? <CodeBadge code={fixedInfoType.code} name={fixedInfoType.name} /> : "…"} — fixed by the bus
+              gateway this integration will route from.
+            </p>
+          ) : (
+            <>
+              <p className="mb-3 text-[13px] text-ink-500">The information type this integration processes.</p>
+              <InfoTypePicker
+                value={draft.informationTypeId}
+                onChange={(id) => update({ informationTypeId: id })}
+                detourCtx={{ to: here, label: "Creating a new integration" }}
+              />
+            </>
+          )}
+        </section>
+
+        <section>
+          <h2 className="text-[15px] font-semibold text-ink-900">Validation</h2>
+          <p className="mb-3 text-[13px] text-ink-500">Rejects bad documents at the door. Optional.</p>
+          <AdapterConfig
+            kind="validator"
+            adapterId={draft.validatorId}
+            properties={draft.validatorProperties}
+            onChange={(validatorId, validatorProperties) => update({ validatorId, validatorProperties })}
+            disabled={false}
+            noneLabel="None — accept every document"
+          />
+        </section>
+
+        <section>
+          <h2 className="text-[15px] font-semibold text-ink-900">Transformation</h2>
+          <p className="mb-3 text-[13px] text-ink-500">Reshapes the document before delivery. Optional.</p>
+          <AdapterConfig
+            kind="mapper"
+            adapterId={draft.mapperId}
+            properties={draft.mapperProperties}
+            onChange={(mapperId, mapperProperties) => update({ mapperId, mapperProperties })}
+            disabled={false}
+            noneLabel="None — the document passes through unchanged"
+          />
+        </section>
+
+        <section>
+          <h2 className="text-[15px] font-semibold text-ink-900">Delivery</h2>
+          <p className="mb-3 text-[13px] text-ink-500">Where the document ends up.</p>
+          <AdapterConfig
+            kind="handler"
+            adapterId={draft.handlerId}
+            properties={draft.handlerProperties}
+            onChange={(handlerId, handlerProperties) => update({ handlerId, handlerProperties })}
+            disabled={false}
+            required
+          />
+        </section>
+
+        <Checkbox
+          label="Enable immediately"
+          description="Unchecked, the integration is created disabled and can be enabled from its page."
+          checked={draft.enable}
+          onChange={(e) => update({ enable: e.target.checked })}
+        />
+
+        <div className="space-y-3 border-t border-ink-100 pt-4">
+          <FormError>{create.error?.message}</FormError>
+          <div className="flex justify-end">
+            <Button variant="primary" disabled={!valid} busy={create.isPending} onClick={() => create.mutate()}>
+              Create integration
+            </Button>
+          </div>
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/integrations/IntegrationPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/integrations/IntegrationPage.tsx
new file mode 100644
index 00000000..f61bcd90
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/integrations/IntegrationPage.tsx
@@ -0,0 +1,637 @@
+import { useEffect, useMemo, useState } from "react";
+import { Link, useNavigate, useParams, useSearchParams } from "react-router";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { ArrowLeft, BellRing, Cable, DownloadCloud, History, Pause, Play, Trash2, Webhook } from "lucide-react";
+import { api, type Integration, type IntegrationDetail } from "../../api";
+import { Can, useSessionCan } from "../../auth/guards";
+import { Badge, Button, EmptyState, FormError, LoadingBlock } from "../../components/ui/basics";
+import { Field, TextInput } from "../../components/ui/forms";
+import { SearchSelect } from "../../components/ui/SearchSelect";
+import { SummaryDisclosure } from "../../components/ui/SummaryDisclosure";
+import { ConfirmDialog } from "../../components/ui/overlays";
+import { CodeBadge, EditableTitle, Panel, UnsavedBar } from "../../components/ui/Panel";
+import { AdapterConfig } from "../../components/config/AdapterConfig";
+import { MatchExpressionEditor } from "../../components/config/MatchExpressionEditor";
+import { ScheduleEditor } from "../../components/config/ScheduleEditor";
+import {
+  ExchangesList,
+  HealthBadge,
+  TypeBadge,
+  isLegacyType,
+  useIntegrationsCache,
+} from "../../components/config/shared";
+import { ReturnBanner } from "../../components/ui/ReturnBanner";
+import { takePicked, useHereAsReturnTarget, withReturn } from "../../lib/returnTo";
+import { formatDate, timeUntil } from "../../lib/dates";
+
+type Draft = Pick<
+  Integration,
+  | "name"
+  | "enabled"
+  | "workGroupId"
+  | "retryPolicyId"
+  | "receiverId"
+  | "receiverProperties"
+  | "validatorId"
+  | "validatorProperties"
+  | "mapperId"
+  | "mapperProperties"
+  | "handlerId"
+  | "handlerProperties"
+  | "matchExpression"
+  | "schedules"
+  | "responseIntegrationId"
+  | "responseMessageTypeName"
+>;
+
+const draftOf = (d: IntegrationDetail): Draft => ({
+  name: d.name,
+  enabled: d.enabled,
+  workGroupId: d.workGroupId,
+  retryPolicyId: d.retryPolicyId,
+  receiverId: d.receiverId,
+  receiverProperties: structuredClone(d.receiverProperties),
+  validatorId: d.validatorId,
+  validatorProperties: structuredClone(d.validatorProperties),
+  mapperId: d.mapperId,
+  mapperProperties: structuredClone(d.mapperProperties),
+  handlerId: d.handlerId,
+  handlerProperties: structuredClone(d.handlerProperties),
+  matchExpression: structuredClone(d.matchExpression),
+  schedules: structuredClone(d.schedules),
+  responseIntegrationId: d.responseIntegrationId,
+  responseMessageTypeName: d.responseMessageTypeName,
+});
+
+export function IntegrationPage() {
+  const { id = "" } = useParams();
+  const integrationId = Number(id);
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const canEdit = useSessionCan("subscriptions.edit");
+  const canOperate = useSessionCan("subscriptions.operate");
+  const canCreateWorkGroup = useSessionCan("workgroups.create");
+  const here = useHereAsReturnTarget();
+  const [params, setParams] = useSearchParams();
+
+  const integration = useQuery({
+    queryKey: ["integration", integrationId],
+    queryFn: () => api.getIntegration(integrationId),
+    retry: false,
+  });
+  const workGroups = useQuery({ queryKey: ["work-groups"], queryFn: () => api.listWorkGroups(), staleTime: Infinity });
+  const retryPolicies = useQuery({ queryKey: ["retry-policies"], queryFn: () => api.listRetryPolicies() });
+  const allIntegrations = useIntegrationsCache();
+  // promoted properties power the legacy message filter
+  const infoType = useQuery({
+    queryKey: ["information-type", integration.data?.informationTypeId],
+    queryFn: () => api.getInformationType(integration.data!.informationTypeId),
+    enabled: integration.data?.type === "Internal",
+  });
+
+  const [draft, setDraft] = useState<Draft | null>(null);
+  const [deleting, setDeleting] = useState(false);
+  const [confirmingPause, setConfirmingPause] = useState(false);
+  const [confirmingReceive, setConfirmingReceive] = useState(false);
+  const [loaded, setLoaded] = useState(false);
+
+  useEffect(() => {
+    if (!loaded && integration.data) {
+      const seeded = draftOf(integration.data);
+      // returning from a "New work group" detour
+      const picked = takePicked(params, "workgroup");
+      if (picked !== null) {
+        seeded.workGroupId = picked;
+        setParams(
+          (prev) => {
+            const next = new URLSearchParams(prev);
+            next.delete("picked");
+            return next;
+          },
+          { replace: true },
+        );
+      }
+      setDraft(seeded);
+      setLoaded(true);
+    }
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [integration.data, loaded]);
+
+  const dirty = useMemo(() => {
+    if (!integration.data || !draft) return false;
+    return JSON.stringify(draft) !== JSON.stringify(draftOf(integration.data));
+  }, [integration.data, draft]);
+
+  const invalidate = () => {
+    const detail = queryClient.invalidateQueries({ queryKey: ["integration", integrationId] });
+    void queryClient.invalidateQueries({ queryKey: ["integration-rows"] });
+    void queryClient.invalidateQueries({ queryKey: ["integrations"] });
+    return detail;
+  };
+
+  const save = useMutation({
+    mutationFn: () => api.updateIntegration(integrationId, draft!),
+    onSuccess: async () => {
+      // Await the detail refetch before re-syncing the draft (avoids stale-data race).
+      await invalidate();
+      setLoaded(false);
+    },
+  });
+
+  const pause = useMutation({
+    mutationFn: () => api.pauseIntegration(integrationId),
+    onSuccess: invalidate,
+  });
+
+  const receive = useMutation({
+    mutationFn: () => api.receiveNow(integrationId),
+    onSuccess: invalidate,
+  });
+
+  if (integration.isPending) return <LoadingBlock label="Loading integration…" />;
+  if (integration.isError)
+    return (
+      <EmptyState title="This integration no longer exists">
+        <Link to="/subscriptions" className="font-medium text-crimson-700 hover:underline">
+          Back to integrations
+        </Link>
+      </EmptyState>
+    );
+
+  const s = integration.data;
+  const set = <K extends keyof Draft>(key: K, value: Draft[K]) =>
+    setDraft((d) => (d ? { ...d, [key]: value } : d));
+
+  const isReceiver = s.type === "Receiving";
+  const hasValidator = s.type === "GatewayApiCall" || s.type === "BusGateway" || s.type === "ApiCall";
+  const isInternal = s.type === "Internal";
+  const isAggregation = s.type === "Aggregation";
+  const paused = s.pausedOn !== null;
+
+  return (
+    <div className="pb-24">
+      <Link
+        to="/subscriptions"
+        className="mb-4 inline-flex items-center gap-1 text-[13px] font-medium text-ink-500 hover:text-ink-800"
+      >
+        <ArrowLeft className="size-3.5" /> Integrations
+      </Link>
+
+      <ReturnBanner />
+
+      <div className="mb-6 flex flex-wrap items-start justify-between gap-3">
+        <div className="min-w-0">
+          <h1 className="flex flex-wrap items-center gap-2.5 text-[22px] font-semibold tracking-tight text-ink-900">
+            <EditableTitle
+              value={draft?.name ?? s.name}
+              onChange={(v) => set("name", v)}
+              disabled={!canEdit}
+              placeholder="Integration name"
+            />
+            <TypeBadge type={s.type} />
+            {draft && (
+              <button
+                type="button"
+                disabled={!canEdit}
+                onClick={() => set("enabled", !draft.enabled)}
+                title="Disabled integrations are never scheduled or matched."
+                className={`shrink-0 rounded-md px-2 py-0.5 text-xs font-medium disabled:cursor-not-allowed ${
+                  draft.enabled ? "bg-ok-100 text-ok-600 hover:bg-ok-200/70" : "bg-ink-100 text-ink-700 hover:bg-ink-200"
+                }`}
+              >
+                {draft.enabled ? "Active" : "Disabled"}
+              </button>
+            )}
+            {paused && <Badge tone="warn">Paused</Badge>}
+          </h1>
+          <p className="mt-1 text-sm text-ink-500">
+            Carries{" "}
+            <Link to={`/information-types/${s.informationTypeId}`} className="hover:underline">
+              <CodeBadge code={s.informationTypeCode} name={s.informationTypeName} className="align-middle" />
+            </Link>{" "}
+            · created {formatDate(s.createdOn)}.
+          </p>
+        </div>
+        <div className="flex shrink-0 gap-2">
+          {canOperate && (
+            <Button
+              onClick={() => setConfirmingPause(true)}
+              title={paused ? "Release held work and resume." : "Keep accepting work but hold it for later release."}
+            >
+              {paused ? <Play className="size-4" /> : <Pause className="size-4" />}
+              {paused ? "Resume" : "Pause"}
+            </Button>
+          )}
+          <Can permission="subscriptions.delete">
+            <Button variant="danger" onClick={() => setDeleting(true)}>
+              <Trash2 className="size-4" /> Delete
+            </Button>
+          </Can>
+        </div>
+      </div>
+
+      <div className="grid gap-5 lg:grid-cols-[minmax(0,1fr)_360px]">
+        <div className="min-w-0 space-y-5">
+          {isAggregation && (
+            <Panel title="Aggregation">
+              <p className="text-sm text-ink-500">
+                Aggregation settings aren't editable in the new UI yet — they arrive in a later
+                phase. Everything else on this page works as usual.
+              </p>
+            </Panel>
+          )}
+
+          {isReceiver && draft && (
+            <>
+              <Panel title="Source" description="Where documents are pulled from.">
+                <AdapterConfig
+                  kind="receiver"
+                  adapterId={draft.receiverId}
+                  properties={draft.receiverProperties}
+                  onChange={(adapterId, properties) =>
+                    setDraft((d) => (d ? { ...d, receiverId: adapterId, receiverProperties: properties } : d))
+                  }
+                  disabled={!canEdit}
+                  required
+                />
+              </Panel>
+              <Panel
+                title="Schedule"
+                description="When the source is checked for new documents."
+                action={
+                  canOperate ? (
+                    <Button size="sm" onClick={() => setConfirmingReceive(true)}>
+                      <DownloadCloud className="size-3.5" /> Receive now
+                    </Button>
+                  ) : undefined
+                }
+              >
+                <ScheduleEditor
+                  schedules={draft.schedules}
+                  onChange={(schedules) => set("schedules", schedules)}
+                  disabled={!canEdit}
+                />
+                <FormError>{receive.error?.message}</FormError>
+              </Panel>
+            </>
+          )}
+
+          {isInternal && draft && (
+            <Panel
+              title="Message filter"
+              description="Which documents of this type the integration picks up."
+            >
+              <MatchExpressionEditor
+                value={draft.matchExpression}
+                onChange={(matchExpression) => set("matchExpression", matchExpression)}
+                properties={infoType.data?.promotedProperties ?? []}
+                disabled={!canEdit}
+              />
+            </Panel>
+          )}
+
+          {hasValidator && draft && (
+            <Panel title="Validation" description="Rejects bad documents before they enter the pipeline.">
+              <AdapterConfig
+                kind="validator"
+                adapterId={draft.validatorId}
+                properties={draft.validatorProperties}
+                onChange={(adapterId, properties) =>
+                  setDraft((d) => (d ? { ...d, validatorId: adapterId, validatorProperties: properties } : d))
+                }
+                disabled={!canEdit}
+                noneLabel="None — accept every document"
+              />
+            </Panel>
+          )}
+
+          {draft && !isAggregation && (
+            <Panel title="Transformation" description="Reshapes the document before delivery.">
+              <AdapterConfig
+                kind="mapper"
+                adapterId={draft.mapperId}
+                properties={draft.mapperProperties}
+                onChange={(adapterId, properties) =>
+                  setDraft((d) => (d ? { ...d, mapperId: adapterId, mapperProperties: properties } : d))
+                }
+                disabled={!canEdit}
+                noneLabel="None — the document passes through unchanged"
+                mapperEditorHref={`/subscriptions/${s.id}/mapper`}
+              />
+            </Panel>
+          )}
+
+          {draft && (
+            <Panel title="Delivery" description="Where the document ends up.">
+              <AdapterConfig
+                kind="handler"
+                adapterId={draft.handlerId}
+                properties={draft.handlerProperties}
+                onChange={(adapterId, properties) =>
+                  setDraft((d) => (d ? { ...d, handlerId: adapterId, handlerProperties: properties } : d))
+                }
+                disabled={!canEdit}
+                noneLabel="None — the document stops here"
+              />
+              {draft.handlerId && (
+                <div className="mt-4 border-t border-ink-100 pt-4">
+                  <SummaryDisclosure
+                    defaultOpen={draft.responseIntegrationId !== null || !!draft.responseMessageTypeName}
+                    summary={
+                      <>
+                        Response handling ·{" "}
+                        {draft.responseIntegrationId !== null || draft.responseMessageTypeName
+                          ? [
+                              draft.responseIntegrationId !== null &&
+                                `fed into ${allIntegrations.data?.find((x) => x.id === draft.responseIntegrationId)?.name ?? "another integration"}`,
+                              draft.responseMessageTypeName && `published as ${draft.responseMessageTypeName}`,
+                            ]
+                              .filter(Boolean)
+                              .join(" · ")
+                          : "responses are only recorded"}
+                      </>
+                    }
+                  >
+                    <div className="grid gap-4 sm:grid-cols-2">
+                      <Field
+                        label="Feed the response into"
+                        htmlFor="in-resp"
+                        hint="Chains the delivery response into another integration."
+                      >
+                        <SearchSelect
+                          id="in-resp"
+                          value={draft.responseIntegrationId === null ? "" : String(draft.responseIntegrationId)}
+                          disabled={!canEdit}
+                          onChange={(v) => set("responseIntegrationId", v === "" ? null : Number(v))}
+                          clearLabel="Nothing — responses are only recorded"
+                          options={(allIntegrations.data ?? [])
+                            .filter((x) => x.id !== integrationId)
+                            .map((x) => ({ value: String(x.id), label: x.name }))}
+                        />
+                      </Field>
+                      <Field
+                        label="Publish the response on the bus as"
+                        htmlFor="in-respbus"
+                        hint="Leave empty to keep responses off the bus."
+                      >
+                        <TextInput
+                          id="in-respbus"
+                          value={draft.responseMessageTypeName ?? ""}
+                          disabled={!canEdit}
+                          placeholder="e.g. order-confirmation"
+                          className="font-mono"
+                          onChange={(e) => set("responseMessageTypeName", e.target.value || null)}
+                        />
+                      </Field>
+                    </div>
+                  </SummaryDisclosure>
+                </div>
+              )}
+            </Panel>
+          )}
+        </div>
+
+        <div className="min-w-0 space-y-5">
+          <Panel title="Status">
+            <div className="space-y-2.5 text-sm">
+              <div className="flex items-center justify-between">
+                <span className="text-ink-500">Health</span>
+                <HealthBadge isRunning={s.isRunning} consecutiveFailures={s.consecutiveFailures} />
+              </div>
+              {isReceiver && (
+                <div className="flex items-center justify-between">
+                  <span className="text-ink-500">Next run</span>
+                  <span className="text-ink-800">{s.nextReceiveOn ? timeUntil(s.nextReceiveOn) : "—"}</span>
+                </div>
+              )}
+              {paused && (
+                <p className="rounded-lg bg-warn-100 px-3 py-2 text-[13px] text-warn-700">
+                  Paused since {formatDate(s.pausedOn!)} — incoming work is being held and will be
+                  released on resume.
+                </p>
+              )}
+              {s.lastException && (
+                <pre className="max-h-32 overflow-auto rounded-lg bg-danger-50 px-3 py-2 font-mono text-[11px] leading-relaxed whitespace-pre-wrap text-danger-800">
+                  {s.lastException}
+                </pre>
+              )}
+            </div>
+          </Panel>
+
+          {draft && (
+            <Panel title="Settings">
+              <div className="space-y-4">
+                <Field label="Work group" htmlFor="in-wg" hint="Groups get their own queue, priority and prefetch.">
+                  <SearchSelect
+                    id="in-wg"
+                    value={draft.workGroupId === null ? "" : String(draft.workGroupId)}
+                    disabled={!canEdit}
+                    onChange={(v) => set("workGroupId", v === "" ? null : Number(v))}
+                    clearLabel="Ungrouped (default lane)"
+                    options={(workGroups.data ?? []).map((w) => ({ value: String(w.id), label: w.name }))}
+                  />
+                  <div className="mt-1 flex items-center gap-3">
+                    {draft.workGroupId !== null && (
+                      <Link
+                        to={`/work-groups/${draft.workGroupId}`}
+                        className="text-[13px] font-medium text-crimson-700 hover:underline"
+                      >
+                        View group
+                      </Link>
+                    )}
+                    {canCreateWorkGroup && (
+                      <Link
+                        to={withReturn("/work-groups/new", { to: here, label: `Assigning ${s.name} to a work group` })}
+                        className="text-[13px] font-medium text-crimson-700 hover:underline"
+                      >
+                        + New work group
+                      </Link>
+                    )}
+                  </div>
+                </Field>
+                <Field label="Retry policy" htmlFor="in-rp">
+                  <SearchSelect
+                    id="in-rp"
+                    value={draft.retryPolicyId === null ? "" : String(draft.retryPolicyId)}
+                    disabled={!canEdit}
+                    onChange={(v) => set("retryPolicyId", v === "" ? null : Number(v))}
+                    clearLabel="None — failures are not retried"
+                    options={(retryPolicies.data ?? []).map((p) => ({ value: String(p.id), label: p.name }))}
+                  />
+                  {draft.retryPolicyId !== null && (
+                    <Link
+                      to={`/retry-policies/${draft.retryPolicyId}`}
+                      className="mt-1 inline-block text-[13px] font-medium text-crimson-700 hover:underline"
+                    >
+                      View policy
+                    </Link>
+                  )}
+                </Field>
+              </div>
+            </Panel>
+          )}
+
+          <Panel title="Connected through" description="The entry points that feed this integration.">
+            {s.apiGatewayAttachments.length === 0 && s.busGatewayRoutes.length === 0 ? (
+              <p className="text-sm text-ink-500">
+                {isReceiver
+                  ? "Runs on its own schedule — no gateway needed."
+                  : isLegacyType(s.type)
+                    ? "Invoked directly by id (legacy)."
+                    : "Not wired into any gateway yet — it never runs."}
+              </p>
+            ) : (
+              <ul className="space-y-1.5">
+                {s.apiGatewayAttachments.map((a) => (
+                  <li key={`${a.gatewayId}-${a.partnerId}`} className="flex items-center gap-2.5 text-sm">
+                    <Webhook className="size-3.5 shrink-0 text-ink-300" aria-hidden />
+                    <Link
+                      to={`/api-gateways/${a.gatewayId}`}
+                      className="min-w-0 flex-1 truncate font-medium text-ink-800 hover:text-crimson-700 hover:underline"
+                    >
+                      {a.gatewayName}
+                    </Link>
+                    <Link
+                      to={`/partners/${a.partnerId}`}
+                      className="truncate text-xs text-ink-500 hover:text-crimson-700 hover:underline"
+                    >
+                      {a.partnerName}
+                    </Link>
+                    <code className="font-mono text-xs text-ink-400">/{a.urlName}</code>
+                  </li>
+                ))}
+                {s.busGatewayRoutes.map((r, i) => (
+                  <li key={`${r.gatewayId}-${i}`} className="flex items-center gap-2.5 text-sm">
+                    <Cable className="size-3.5 shrink-0 text-ink-300" aria-hidden />
+                    <Link
+                      to={`/bus-gateways/${r.gatewayId}`}
+                      className="min-w-0 flex-1 truncate font-medium text-ink-800 hover:text-crimson-700 hover:underline"
+                    >
+                      {r.gatewayName}
+                    </Link>
+                    {r.partnerName && (
+                      <Link
+                        to={`/partners/${r.partnerId}`}
+                        className="truncate text-xs text-ink-500 hover:text-crimson-700 hover:underline"
+                      >
+                        {r.partnerName}
+                      </Link>
+                    )}
+                    <Badge>Route</Badge>
+                  </li>
+                ))}
+              </ul>
+            )}
+          </Panel>
+
+          {s.watchingNotifiers.length > 0 && (
+            <Panel title="Watched by" description="Notifiers alerting on this integration's outcomes.">
+              <ul className="space-y-1.5">
+                {s.watchingNotifiers.map((n) => (
+                  <li key={n.id} className="flex items-center gap-2.5 text-sm">
+                    <BellRing className="size-3.5 shrink-0 text-ink-300" aria-hidden />
+                    <Link
+                      to={`/notifiers/${n.id}`}
+                      className="min-w-0 flex-1 truncate font-medium text-ink-800 hover:text-crimson-700 hover:underline"
+                    >
+                      {n.name}
+                    </Link>
+                  </li>
+                ))}
+              </ul>
+            </Panel>
+          )}
+
+          <Can permission="exchanges.view">
+            <Panel title="Recent exchanges" description="Expand a row to see its documents.">
+              <ExchangesList items={s.recentExchanges} expandable />
+            </Panel>
+          </Can>
+
+          {s.trail.length > 0 && (
+            <Panel title="History">
+              <ul className="space-y-2">
+                {[...s.trail].reverse().map((entry, i) => (
+                  <li key={i} className="flex items-center gap-2.5 text-sm">
+                    <History className="size-3.5 shrink-0 text-ink-300" aria-hidden />
+                    <span className="min-w-0 flex-1 truncate text-ink-600">
+                      <span className="font-medium text-ink-800">{entry.action}</span> by{" "}
+                      {entry.byUserId ? (
+                        <Link
+                          to={`/team/members/${entry.byUserId}`}
+                          className="hover:text-crimson-700 hover:underline"
+                        >
+                          {entry.by}
+                        </Link>
+                      ) : (
+                        entry.by
+                      )}
+                    </span>
+                    <span className="shrink-0 text-xs text-ink-400">{formatDate(entry.on)}</span>
+                  </li>
+                ))}
+              </ul>
+            </Panel>
+          )}
+        </div>
+      </div>
+
+      {canEdit && dirty && (
+        <UnsavedBar
+          busy={save.isPending}
+          error={save.error?.message}
+          onSave={() => save.mutate()}
+          onDiscard={() => setLoaded(false)}
+        />
+      )}
+
+      {confirmingPause && (
+        <ConfirmDialog
+          title={paused ? "Resume this integration?" : "Pause this integration?"}
+          body={
+            paused
+              ? `${s.name} releases its held exchanges and starts processing again.`
+              : `${s.name} keeps accepting work but holds every exchange until you resume it.`
+          }
+          confirmLabel={paused ? "Resume" : "Pause"}
+          onConfirm={async () => {
+            await pause.mutateAsync();
+          }}
+          onClose={() => setConfirmingPause(false)}
+        />
+      )}
+
+      {confirmingReceive && (
+        <ConfirmDialog
+          title="Receive now?"
+          body={`${s.name} checks its source immediately — anything found becomes new exchanges, outside the regular schedule.`}
+          confirmLabel="Receive now"
+          onConfirm={async () => {
+            await receive.mutateAsync();
+          }}
+          onClose={() => setConfirmingReceive(false)}
+        />
+      )}
+
+      {deleting && (
+        <ConfirmDialog
+          title="Delete this integration?"
+          body={
+            <>
+              <strong className="font-medium text-ink-800">{s.name}</strong> and its configuration
+              will be gone for good. Integrations still wired into a gateway can't be deleted.
+            </>
+          }
+          confirmLabel="Delete integration"
+          onConfirm={async () => {
+            await api.deleteIntegration(integrationId);
+            void queryClient.invalidateQueries({ queryKey: ["integration-rows"] });
+            void queryClient.invalidateQueries({ queryKey: ["integrations"] });
+            navigate("/subscriptions");
+          }}
+          onClose={() => setDeleting(false)}
+        />
+      )}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/integrations/IntegrationsPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/integrations/IntegrationsPage.tsx
new file mode 100644
index 00000000..6807db18
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/integrations/IntegrationsPage.tsx
@@ -0,0 +1,521 @@
+import { Fragment, useMemo, useState, type ReactNode } from "react";
+import { Link, useNavigate, useSearchParams } from "react-router";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import {
+  ArrowUpRight,
+  Cable,
+  CalendarClock,
+  ChevronDown,
+  ChevronRight,
+  DownloadCloud,
+  Plus,
+  Search,
+  Send,
+  Workflow,
+  Webhook,
+  type LucideIcon,
+} from "lucide-react";
+import { api, type ApiGatewayRow, type BusGatewayRow, type IntegrationRow } from "../../api";
+import { useSession } from "../../auth/SessionContext";
+import { useSessionCan } from "../../auth/guards";
+import { PageHeader } from "../../components/layout/PageHeader";
+import { Badge, Button, EmptyState, LoadingBlock } from "../../components/ui/basics";
+import { ConfirmDialog, Menu, MenuItem } from "../../components/ui/overlays";
+import { HealthBadge, IntegrationStatusBadges } from "../../components/config/shared";
+import { matchSummary } from "../../lib/match";
+import { timeUntil } from "../../lib/dates";
+
+type KindId = "api-gateways" | "bus-gateways" | "scheduled-jobs" | "internal" | "api-calls";
+
+const KIND_META: Record<KindId, { label: string; icon: LucideIcon; legacy?: boolean }> = {
+  "api-gateways": { label: "API gateways", icon: Webhook },
+  "bus-gateways": { label: "Bus gateways", icon: Cable },
+  "scheduled-jobs": { label: "Scheduled jobs", icon: CalendarClock },
+  internal: { label: "Internal", icon: Workflow, legacy: true },
+  "api-calls": { label: "API calls", icon: Send, legacy: true },
+};
+
+interface ExplorerRow {
+  key: string;
+  kind: KindId;
+  name: string;
+  details: string;
+  status: ReactNode;
+  createdOn: string;
+  href: string;
+  drawer: ReactNode;
+}
+
+function DrawerLine({ children }: { children: ReactNode }) {
+  return <div className="flex flex-wrap items-center gap-2 text-[13px] text-ink-600">{children}</div>;
+}
+
+function ApiGatewayDrawer({ g }: { g: ApiGatewayRow }) {
+  return (
+    <div className="space-y-1.5">
+      <DrawerLine>
+        <code className="font-mono text-xs text-ink-500">/api/Gateway/{g.urlName}/sync</code>
+        <span className="text-ink-300">·</span>
+        <code className="font-mono text-xs text-ink-500">/async</code>
+      </DrawerLine>
+      {g.attachments.length === 0 ? (
+        <DrawerLine>No partners attached — the gateway answers 401 to everyone.</DrawerLine>
+      ) : (
+        g.attachments.map((a) => (
+          <DrawerLine key={a.partnerId}>
+            <Link to={`/partners/${a.partnerId}`} className="font-medium text-ink-800 hover:text-crimson-700 hover:underline">
+              {a.partnerName}
+            </Link>
+            runs
+            <Link
+              to={`/subscriptions/${a.integrationId}`}
+              className="font-medium text-ink-800 hover:text-crimson-700 hover:underline"
+            >
+              {a.integrationName}
+            </Link>
+          </DrawerLine>
+        ))
+      )}
+    </div>
+  );
+}
+
+function BusGatewayDrawer({ g }: { g: BusGatewayRow }) {
+  return (
+    <div className="space-y-1.5">
+      {g.routes.length === 0 ? (
+        <DrawerLine>No routes — every {g.informationTypeCode} message is ignored by this gateway.</DrawerLine>
+      ) : (
+        g.routes.map((r) => (
+          <DrawerLine key={r.id}>
+            <code className="font-mono text-xs text-ink-500">{matchSummary(r.matchExpression)}</code>
+            <span className="text-ink-300">→</span>
+            <Link
+              to={`/subscriptions/${r.integrationId}`}
+              className="font-medium text-ink-800 hover:text-crimson-700 hover:underline"
+            >
+              {r.integrationName}
+            </Link>
+            {r.partnerName && (
+              <span className="text-ink-500">
+                for{" "}
+                <Link to={`/partners/${r.partnerId}`} className="font-medium text-ink-800 hover:text-crimson-700 hover:underline">
+                  {r.partnerName}
+                </Link>
+              </span>
+            )}
+          </DrawerLine>
+        ))
+      )}
+    </div>
+  );
+}
+
+function JobDrawer({ r }: { r: IntegrationRow }) {
+  const queryClient = useQueryClient();
+  const canOperate = useSessionCan("subscriptions.operate");
+  const [confirming, setConfirming] = useState(false);
+  const receive = useMutation({
+    mutationFn: () => api.receiveNow(r.id),
+    onSuccess: () => void queryClient.invalidateQueries({ queryKey: ["integration-rows"] }),
+  });
+
+  return (
+    <div className="space-y-1.5">
+      <DrawerLine>
+        {r.scheduleSummary}
+        <span className="text-ink-300">·</span>
+        next run {r.nextReceiveOn ? timeUntil(r.nextReceiveOn) : "—"}
+      </DrawerLine>
+      {r.lastException && (
+        <pre className="max-h-24 overflow-auto rounded-md bg-danger-50 px-2.5 py-1.5 font-mono text-[11px] leading-relaxed whitespace-pre-wrap text-danger-800">
+          {r.lastException}
+        </pre>
+      )}
+      {canOperate && (
+        <Button
+          size="sm"
+          disabled={!r.enabled}
+          title={r.enabled ? "Check the source right now." : "Enable the job first."}
+          onClick={() => setConfirming(true)}
+        >
+          <DownloadCloud className="size-3.5" /> Receive now
+        </Button>
+      )}
+      {confirming && (
+        <ConfirmDialog
+          title="Receive now?"
+          body={`${r.name} checks its source immediately — anything found becomes new exchanges, outside the regular schedule.`}
+          confirmLabel="Receive now"
+          onConfirm={async () => {
+            await receive.mutateAsync();
+          }}
+          onClose={() => setConfirming(false)}
+        />
+      )}
+    </div>
+  );
+}
+
+function LegacyDrawer({ r }: { r: IntegrationRow }) {
+  return (
+    <div className="space-y-1.5">
+      <DrawerLine>
+        Carries{" "}
+        <Link to={`/information-types/${r.informationTypeId}`} className="hover:underline">
+          <code className="font-mono text-xs text-ink-500">{r.informationTypeCode}</code>
+        </Link>
+        {r.partners.length > 0 && (
+          <>
+            <span className="text-ink-300">·</span> for{" "}
+            {r.partners.map((p, i) => (
+              <span key={p.id}>
+                {i > 0 && ", "}
+                <Link to={`/partners/${p.id}`} className="text-ink-800 hover:text-crimson-700 hover:underline">
+                  {p.name}
+                </Link>
+              </span>
+            ))}
+          </>
+        )}
+      </DrawerLine>
+      {r.lastException && (
+        <pre className="max-h-24 overflow-auto rounded-md bg-danger-50 px-2.5 py-1.5 font-mono text-[11px] leading-relaxed whitespace-pre-wrap text-danger-800">
+          {r.lastException}
+        </pre>
+      )}
+      <DrawerLine>Legacy type — editable, but new ones can't be created.</DrawerLine>
+    </div>
+  );
+}
+
+export function IntegrationsPage() {
+  const [searchParams, setSearchParams] = useSearchParams();
+  const navigate = useNavigate();
+  const { session } = useSession();
+  const q = searchParams.get("q") ?? "";
+  const selected = useMemo(
+    () => (searchParams.get("types")?.split(",").filter(Boolean) ?? []) as KindId[],
+    [searchParams],
+  );
+  const [open, setOpen] = useState<Set<string>>(new Set());
+
+  const permissions = session?.permissions ?? [];
+  const canSeeApiGateways = permissions.includes("api-gateways.view");
+  const canSeeBusGateways = permissions.includes("bus-gateways.view");
+
+  const gateways = useQuery({
+    queryKey: ["api-gateways"],
+    queryFn: () => api.listApiGateways(),
+    enabled: canSeeApiGateways,
+  });
+  const busGateways = useQuery({
+    queryKey: ["bus-gateways"],
+    queryFn: () => api.listBusGateways(),
+    enabled: canSeeBusGateways,
+  });
+  const rows = useQuery({ queryKey: ["integration-rows"], queryFn: () => api.listIntegrationRows() });
+
+  const setParam = (key: string, value: string | null) =>
+    setSearchParams(
+      (prev) => {
+        const next = new URLSearchParams(prev);
+        if (value) next.set(key, value);
+        else next.delete(key);
+        return next;
+      },
+      { replace: key === "q" },
+    );
+
+  // single-select: choosing a kind replaces any other selection; "All" is the only way to clear it
+  const selectKind = (kind: KindId) => setParam("types", selected.includes(kind) ? null : kind);
+
+  // legacy filter buttons only appear when such integrations exist
+  const hasInternal = (rows.data ?? []).some((r) => r.type === "Internal");
+  const hasApiCalls = (rows.data ?? []).some((r) => r.type === "ApiCall");
+  const visibleKinds = (Object.keys(KIND_META) as KindId[]).filter((k) =>
+    k === "internal" ? hasInternal : k === "api-calls" ? hasApiCalls : true,
+  );
+
+  const allRows = useMemo<ExplorerRow[]>(() => {
+    const out: ExplorerRow[] = [];
+    for (const g of gateways.data ?? []) {
+      out.push({
+        key: `ag-${g.id}`,
+        kind: "api-gateways",
+        name: g.name,
+        details: `/api/Gateway/${g.urlName}`,
+        status:
+          g.partnerCount > 0 ? (
+            <Badge>{g.partnerCount} partner{g.partnerCount === 1 ? "" : "s"}</Badge>
+          ) : (
+            <Badge tone="warn">No partners</Badge>
+          ),
+        createdOn: g.createdOn,
+        href: `/api-gateways/${g.id}`,
+        drawer: <ApiGatewayDrawer g={g} />,
+      });
+    }
+    for (const g of busGateways.data ?? []) {
+      out.push({
+        key: `bg-${g.id}`,
+        kind: "bus-gateways",
+        name: g.name,
+        details: `Listens for ${g.informationTypeCode}`,
+        status:
+          g.routeCount > 0 ? (
+            <Badge>{g.routeCount} route{g.routeCount === 1 ? "" : "s"}</Badge>
+          ) : (
+            <Badge tone="warn">No routes</Badge>
+          ),
+        createdOn: g.createdOn,
+        href: `/bus-gateways/${g.id}`,
+        drawer: <BusGatewayDrawer g={g} />,
+      });
+    }
+    for (const r of rows.data ?? []) {
+      if (r.type === "Receiving") {
+        out.push({
+          key: `in-${r.id}`,
+          kind: "scheduled-jobs",
+          name: r.name,
+          details: [r.scheduleSummary, `pulls in ${r.informationTypeCode}`].filter(Boolean).join(" · "),
+          status: (
+            <span className="inline-flex items-center gap-1">
+              <IntegrationStatusBadges enabled={r.enabled} paused={r.paused} />
+              <HealthBadge isRunning={r.isRunning} consecutiveFailures={r.consecutiveFailures} />
+            </span>
+          ),
+          createdOn: r.createdOn,
+          href: `/subscriptions/${r.id}`,
+          drawer: <JobDrawer r={r} />,
+        });
+      } else if (r.type === "Internal" || r.type === "ApiCall") {
+        out.push({
+          key: `in-${r.id}`,
+          kind: r.type === "Internal" ? "internal" : "api-calls",
+          name: r.name,
+          details: `Carries ${r.informationTypeCode}${r.partners.length ? ` · ${r.partners.map((p) => p.name).join(", ")}` : ""}`,
+          status: (
+            <span className="inline-flex items-center gap-1">
+              <IntegrationStatusBadges enabled={r.enabled} paused={r.paused} />
+              <HealthBadge isRunning={r.isRunning} consecutiveFailures={r.consecutiveFailures} />
+            </span>
+          ),
+          createdOn: r.createdOn,
+          href: `/subscriptions/${r.id}`,
+          drawer: <LegacyDrawer r={r} />,
+        });
+      }
+      // GatewayApiCall / BusGateway pipelines surface through their gateways;
+      // Aggregation is not supported yet.
+    }
+    return out.sort((a, b) => a.name.localeCompare(b.name));
+  }, [gateways.data, busGateways.data, rows.data]);
+
+  const filtered = useMemo(() => {
+    const needle = q.trim().toLowerCase();
+    return allRows.filter(
+      (r) =>
+        (selected.length === 0 || selected.includes(r.kind)) &&
+        (!needle || r.name.toLowerCase().includes(needle) || r.details.toLowerCase().includes(needle)),
+    );
+  }, [allRows, selected, q]);
+
+  const toggleOpen = (key: string) =>
+    setOpen((prev) => {
+      const next = new Set(prev);
+      if (next.has(key)) next.delete(key);
+      else next.add(key);
+      return next;
+    });
+
+  // create action follows the active filter
+  const createables = [
+    { kind: "api-gateways" as const, label: "New API gateway", permission: "api-gateways.create", run: () => navigate("/api-gateways/new") },
+    { kind: "bus-gateways" as const, label: "New bus gateway", permission: "bus-gateways.create", run: () => navigate("/bus-gateways/new") },
+    { kind: "scheduled-jobs" as const, label: "New scheduled job", permission: "subscriptions.create", run: () => navigate("/scheduled-jobs/new") },
+  ].filter((c) => permissions.includes(c.permission));
+  const activeCreatables =
+    selected.length === 0 ? createables : createables.filter((c) => selected.includes(c.kind));
+  const createAction =
+    activeCreatables.length === 1 ? (
+      <Button variant="primary" onClick={activeCreatables[0].run}>
+        <Plus className="size-4" /> {activeCreatables[0].label}
+      </Button>
+    ) : activeCreatables.length > 1 ? (
+      <Menu
+        align="right"
+        trigger={
+          <Button variant="primary">
+            <Plus className="size-4" /> New… <ChevronDown className="size-3.5" />
+          </Button>
+        }
+      >
+        {activeCreatables.map((c) => (
+          <MenuItem key={c.kind} onSelect={c.run}>
+            {c.label}
+          </MenuItem>
+        ))}
+      </Menu>
+    ) : undefined;
+
+  const loading = rows.isPending || (canSeeApiGateways && gateways.isPending) || (canSeeBusGateways && busGateways.isPending);
+
+  return (
+    <div>
+      <PageHeader
+        title="Integrations"
+        description="Every way documents flow — gateways partners call, bus listeners, and scheduled jobs."
+        help={{
+          title: "What's on this page?",
+          body: (
+            <>
+              <p>
+                The three entry points live here side by side: <strong>API gateways</strong>{" "}
+                (partners push documents in), <strong>bus gateways</strong> (messages are picked
+                off the bus) and <strong>scheduled jobs</strong> (documents are pulled in on a
+                schedule). Expand a row for its details; open it for the full page.
+              </p>
+              <p>
+                The pipelines behind a gateway are reached through the gateway itself. Legacy
+                Internal/API-call integrations appear only when they exist.
+              </p>
+            </>
+          ),
+        }}
+        actions={createAction}
+      />
+
+      <div className="mb-4 flex flex-wrap items-center gap-2">
+        <button
+          onClick={() => setParam("types", null)}
+          aria-pressed={selected.length === 0}
+          className={`rounded-full px-3 py-1.5 text-[13px] font-medium transition-colors ${
+            selected.length === 0 ? "bg-ink-900 text-white" : "border border-ink-200 bg-white text-ink-600 hover:border-ink-300 hover:bg-ink-50"
+          }`}
+        >
+          All
+        </button>
+        {visibleKinds.map((kind) => {
+          const meta = KIND_META[kind];
+          const active = selected.includes(kind);
+          return (
+            <button
+              key={kind}
+              onClick={() => selectKind(kind)}
+              aria-pressed={active}
+              className={`inline-flex items-center gap-1.5 rounded-full px-3 py-1.5 text-[13px] font-medium transition-colors ${
+                active ? "bg-ink-900 text-white" : "border border-ink-200 bg-white text-ink-600 hover:border-ink-300 hover:bg-ink-50"
+              }`}
+            >
+              <meta.icon className="size-3.5" aria-hidden />
+              {meta.label}
+              {meta.legacy && <Badge tone="warn">Legacy</Badge>}
+            </button>
+          );
+        })}
+        <div className="relative ml-auto w-full max-w-55 sm:w-auto">
+          <Search className="pointer-events-none absolute top-1/2 left-3 size-4 -translate-y-1/2 text-ink-400" />
+          <input
+            type="search"
+            value={q}
+            onChange={(e) => setParam("q", e.target.value || null)}
+            placeholder="Search"
+            aria-label="Search integrations"
+            className="h-9 w-full rounded-lg border border-ink-200 bg-white pr-3 pl-9 text-sm placeholder:text-ink-400 focus:border-crimson-400 focus:ring-2 focus:ring-crimson-100 focus:outline-none"
+          />
+        </div>
+      </div>
+
+      {loading ? (
+        <LoadingBlock label="Loading integrations…" />
+      ) : filtered.length === 0 ? (
+        <EmptyState icon={<Workflow />} title={q || selected.length ? "Nothing matches" : "Nothing here yet"}>
+          {q || selected.length
+            ? "Try a different search or filter."
+            : "Create an API gateway, bus gateway or scheduled job to start moving documents."}
+        </EmptyState>
+      ) : (
+        <div className="overflow-x-auto rounded-xl border border-ink-200 bg-white">
+          <table className="w-full min-w-180 text-sm">
+            <thead>
+              <tr className="border-b border-ink-100 text-left text-xs text-ink-500">
+                <th className="w-10 px-3 py-2.5" />
+                <th className="px-3 py-2.5 font-medium">Type</th>
+                <th className="px-3 py-2.5 font-medium">Name</th>
+                <th className="px-3 py-2.5 font-medium">Details</th>
+                <th className="px-3 py-2.5 font-medium">Status</th>
+                <th className="w-10 px-3 py-2.5" />
+              </tr>
+            </thead>
+            <tbody>
+              {filtered.map((r) => {
+                const meta = KIND_META[r.kind];
+                const expanded = open.has(r.key);
+                return (
+                  <Fragment key={r.key}>
+                    <tr
+                      onClick={() => toggleOpen(r.key)}
+                      className="cursor-pointer border-b border-ink-100 last:border-b-0 hover:bg-ink-50"
+                    >
+                      <td className="px-3 py-3">
+                        <button
+                          onClick={(e) => {
+                            e.stopPropagation();
+                            toggleOpen(r.key);
+                          }}
+                          aria-expanded={expanded}
+                          aria-label={`Details for ${r.name}`}
+                          className="rounded-md p-1 text-ink-400 hover:bg-ink-100 hover:text-ink-700"
+                        >
+                          {expanded ? <ChevronDown className="size-3.5" /> : <ChevronRight className="size-3.5" />}
+                        </button>
+                      </td>
+                      <td className="px-3 py-3">
+                        <span className="inline-flex items-center gap-2">
+                          <span className="flex size-7 shrink-0 items-center justify-center rounded-lg bg-ink-100 text-ink-700" aria-hidden>
+                            <meta.icon className="size-4" />
+                          </span>
+                          <span className="text-[13px] text-ink-600">
+                            {meta.label.replace(/s$/, "")}
+                          </span>
+                        </span>
+                      </td>
+                      <td className="px-3 py-3 font-medium text-ink-900">{r.name}</td>
+                      <td className="max-w-90 truncate px-3 py-3 text-ink-600" title={r.details}>
+                        {r.details}
+                      </td>
+                      <td className="px-3 py-3">{r.status}</td>
+                      <td className="px-3 py-3">
+                        <button
+                          onClick={(e) => {
+                            e.stopPropagation();
+                            navigate(r.href);
+                          }}
+                          aria-label={`Open ${r.name}`}
+                          title="Open"
+                          className="rounded-md p-1.5 text-ink-400 hover:bg-ink-100 hover:text-ink-700"
+                        >
+                          <ArrowUpRight className="size-4" />
+                        </button>
+                      </td>
+                    </tr>
+                    {expanded && (
+                      <tr className="border-b border-ink-100 last:border-b-0">
+                        <td />
+                        <td colSpan={5} className="px-3 pt-0.5 pb-3">
+                          <div className="rounded-lg bg-ink-50 px-3.5 py-3">{r.drawer}</div>
+                        </td>
+                      </tr>
+                    )}
+                  </Fragment>
+                );
+              })}
+            </tbody>
+          </table>
+        </div>
+      )}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/notifiers/NotifierPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/notifiers/NotifierPage.tsx
new file mode 100644
index 00000000..8fa96757
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/notifiers/NotifierPage.tsx
@@ -0,0 +1,344 @@
+import { Fragment, useEffect, useMemo, useState } from "react";
+import { Link, useParams } from "react-router";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { ArrowLeft, ArrowUpRight, BellRing, ChevronDown, ChevronRight, Search } from "lucide-react";
+import { api, type NotificationEntry, type Notifier } from "../../api";
+import { useSessionCan } from "../../auth/guards";
+import { Badge, EmptyState, LoadingBlock } from "../../components/ui/basics";
+import { Checkbox, Field, TextInput } from "../../components/ui/forms";
+import { EditableTitle, Panel, UnsavedBar } from "../../components/ui/Panel";
+import { SearchSelect } from "../../components/ui/SearchSelect";
+import { useAdapterCatalog } from "../../components/config/AdapterConfig";
+import { useIntegrationsCache } from "../../components/config/shared";
+import { formatDate, timeAgo } from "../../lib/dates";
+
+type Draft = Omit<Notifier, "id" | "createdOn">;
+
+/** Delivery history; failed attempts expand to show why. */
+function NotificationsList({ items }: { items: NotificationEntry[] }) {
+  const [open, setOpen] = useState<Set<string>>(new Set());
+
+  const toggle = (key: string) =>
+    setOpen((prev) => {
+      const next = new Set(prev);
+      if (next.has(key)) next.delete(key);
+      else next.add(key);
+      return next;
+    });
+
+  if (items.length === 0) return <p className="text-sm text-ink-500">Nothing sent yet.</p>;
+
+  return (
+    <ul className="space-y-1.5">
+      {items.map((n) => {
+        const key = `${n.xchangeId}-${n.on}`;
+        const canExpand = !!n.exception;
+        return (
+          <Fragment key={key}>
+            <li className="flex items-center gap-2 text-sm">
+              {canExpand ? (
+                <button
+                  onClick={() => toggle(key)}
+                  aria-expanded={open.has(key)}
+                  aria-label={`Failure details for ${n.xchangeId}`}
+                  className="rounded-md p-0.5 text-ink-400 hover:bg-ink-100 hover:text-ink-700"
+                >
+                  {open.has(key) ? <ChevronDown className="size-3.5" /> : <ChevronRight className="size-3.5" />}
+                </button>
+              ) : (
+                <BellRing className="size-3.5 shrink-0 text-ink-300" aria-hidden />
+              )}
+              <code className="min-w-0 flex-1 truncate font-mono text-xs text-ink-600">{n.xchangeId}</code>
+              {n.success ? <Badge tone="ok">Sent</Badge> : <Badge tone="danger">Failed</Badge>}
+              <span className="w-16 shrink-0 text-right text-xs text-ink-400">{timeAgo(n.on)}</span>
+            </li>
+            {canExpand && open.has(key) && (
+              <li>
+                <p className="ml-6 rounded-lg bg-danger-50 px-3 py-2 font-mono text-[11px] leading-relaxed text-danger-800">
+                  {n.exception}
+                </p>
+              </li>
+            )}
+          </Fragment>
+        );
+      })}
+    </ul>
+  );
+}
+
+export function NotifierPage() {
+  const { id = "" } = useParams();
+  const notifierId = Number(id);
+  const queryClient = useQueryClient();
+  const canEdit = useSessionCan("notifiers.edit");
+
+  const notifier = useQuery({
+    queryKey: ["notifier", notifierId],
+    queryFn: () => api.getNotifier(notifierId),
+    retry: false,
+  });
+  const channels = useAdapterCatalog("handler");
+  const integrations = useIntegrationsCache();
+
+  const [draft, setDraft] = useState<Draft | null>(null);
+  const [loaded, setLoaded] = useState(false);
+  const [watchSearch, setWatchSearch] = useState("");
+
+  useEffect(() => {
+    if (!loaded && notifier.data) {
+      const { id: _id, createdOn: _c, recentNotifications: _r, ...rest } = notifier.data;
+      setDraft(structuredClone(rest));
+      setLoaded(true);
+    }
+  }, [notifier.data, loaded]);
+
+  const dirty = useMemo(() => {
+    if (!notifier.data || !draft) return false;
+    const { id: _id, createdOn: _c, recentNotifications: _r, ...saved } = notifier.data;
+    return JSON.stringify(draft) !== JSON.stringify(saved);
+  }, [notifier.data, draft]);
+
+  const save = useMutation({
+    mutationFn: () => api.updateNotifier(notifierId, draft!),
+    onSuccess: async () => {
+      // Await the detail refetch before re-syncing the draft (avoids stale-data race).
+      await queryClient.invalidateQueries({ queryKey: ["notifier", notifierId] });
+      void queryClient.invalidateQueries({ queryKey: ["notifiers"] });
+      setLoaded(false);
+    },
+  });
+
+  if (notifier.isPending) return <LoadingBlock label="Loading notifier…" />;
+  if (notifier.isError)
+    return (
+      <EmptyState title="This notifier no longer exists">
+        <Link to="/notifiers" className="font-medium text-crimson-700 hover:underline">
+          Back to notifiers
+        </Link>
+      </EmptyState>
+    );
+
+  const n = notifier.data;
+  const set = <K extends keyof Draft>(key: K, value: Draft[K]) =>
+    setDraft((d) => (d ? { ...d, [key]: value } : d));
+
+  const channel = channels.data?.find((c) => c.id === draft?.channelId);
+  const watchesNothing = draft !== null && draft.integrationIds.length === 0;
+
+  const needle = watchSearch.trim().toLowerCase();
+  const filteredIntegrations = (integrations.data ?? []).filter(
+    (s) => !needle || s.name.toLowerCase().includes(needle),
+  );
+
+  const toggleIntegration = (setupId: number, include: boolean) =>
+    setDraft((d) =>
+      d
+        ? {
+            ...d,
+            integrationIds: include
+              ? [...d.integrationIds, setupId]
+              : d.integrationIds.filter((x) => x !== setupId),
+          }
+        : d,
+    );
+
+  return (
+    <div className="pb-24">
+      <Link
+        to="/notifiers"
+        className="mb-4 inline-flex items-center gap-1 text-[13px] font-medium text-ink-500 hover:text-ink-800"
+      >
+        <ArrowLeft className="size-3.5" /> Notifiers
+      </Link>
+
+      <div className="mb-6 flex flex-wrap items-start justify-between gap-3">
+        <div>
+          <h1 className="flex items-center gap-2.5 text-[22px] font-semibold tracking-tight text-ink-900">
+            <EditableTitle
+              value={draft?.name ?? n.name}
+              onChange={(value) => set("name", value)}
+              disabled={!canEdit}
+              placeholder="Notifier name"
+            />
+            {draft && (
+              <button
+                type="button"
+                disabled={!canEdit}
+                onClick={() => set("enabled", !draft.enabled)}
+                title="Turn off to pause this notifier without losing its setup."
+                className={`shrink-0 rounded-md px-2 py-0.5 text-xs font-medium disabled:cursor-not-allowed ${
+                  draft.enabled ? "bg-ok-100 text-ok-600 hover:bg-ok-200/70" : "bg-ink-100 text-ink-700 hover:bg-ink-200"
+                }`}
+              >
+                {draft.enabled ? "Active" : "Off"}
+              </button>
+            )}
+          </h1>
+          <p className="mt-1 text-sm text-ink-500">Created {formatDate(n.createdOn)}.</p>
+        </div>
+      </div>
+
+      <div className="grid gap-5 lg:grid-cols-[minmax(0,1fr)_360px]">
+        <div className="min-w-0 space-y-5">
+          <Panel title="Send when" description="Which exchange outcomes trigger a notification.">
+            {draft && (
+              <div className="space-y-3">
+                <Checkbox
+                  label="An exchange fails"
+                  description="The pipeline errored and the exchange didn't complete."
+                  checked={draft.onFailed}
+                  disabled={!canEdit}
+                  onChange={(e) => set("onFailed", e.target.checked)}
+                />
+                <Checkbox
+                  label="A result comes back bad"
+                  description="The exchange completed, but the reply reported a failure."
+                  checked={draft.onBadResult}
+                  disabled={!canEdit}
+                  onChange={(e) => set("onBadResult", e.target.checked)}
+                />
+                <Checkbox
+                  label="An exchange succeeds"
+                  description="For confirmations on critical flows."
+                  checked={draft.onSuccess}
+                  disabled={!canEdit}
+                  onChange={(e) => set("onSuccess", e.target.checked)}
+                />
+                {!draft.onFailed && !draft.onBadResult && !draft.onSuccess && (
+                  <p className="rounded-lg bg-warn-100 px-3 py-2 text-[13px] text-warn-700">
+                    No outcomes selected — this notifier never sends anything.
+                  </p>
+                )}
+              </div>
+            )}
+          </Panel>
+
+          <Panel title="Channel" description="How notifications are delivered.">
+            {draft && (
+              <div className="space-y-4">
+                <div className="max-w-sm">
+                  <Field label="Deliver via" htmlFor="nf-channel">
+                    <SearchSelect
+                      id="nf-channel"
+                      aria-label="Deliver via"
+                      value={draft.channelId}
+                      disabled={!canEdit || channels.isPending}
+                      onChange={(v) => set("channelId", v)}
+                      placeholder="Pick a handler…"
+                      options={(channels.data ?? []).map((a) => ({
+                        value: a.id,
+                        label: a.label,
+                        code: a.id,
+                        hint: a.native ? "Native" : a.versions.length > 0 ? `v${a.versions.at(-1)}` : "Custom",
+                      }))}
+                    />
+                  </Field>
+                </div>
+                {channel && channel.props.length > 0 && (
+                  <div className="grid gap-4 sm:grid-cols-2">
+                    {channel.props.map((prop) => (
+                      <Field
+                        key={prop.key}
+                        label={prop.optional ? prop.key : `${prop.key} *`}
+                        htmlFor={`nf-prop-${prop.key}`}
+                        hint={prop.description}
+                      >
+                        <TextInput
+                          id={`nf-prop-${prop.key}`}
+                          type={prop.secret ? "password" : "text"}
+                          value={draft.channelProperties[prop.key] ?? ""}
+                          disabled={!canEdit}
+                          placeholder={prop.default}
+                          onChange={(e) =>
+                            set("channelProperties", {
+                              ...draft.channelProperties,
+                              [prop.key]: e.target.value,
+                            })
+                          }
+                        />
+                      </Field>
+                    ))}
+                  </div>
+                )}
+              </div>
+            )}
+          </Panel>
+        </div>
+
+        <div className="min-w-0 space-y-5">
+          <Panel title="Watches" description="The integrations this notifier fires for.">
+            {integrations.isPending || !draft ? (
+              <LoadingBlock label="Loading integrations…" />
+            ) : (
+              <div className="space-y-3">
+                {watchesNothing && (
+                  <p className="rounded-lg bg-warn-100 px-3 py-2 text-[13px] text-warn-700">
+                    This notifier watches nothing, so it never sends anything. Pick at least one
+                    integration.
+                  </p>
+                )}
+                <div className="relative">
+                  <Search className="pointer-events-none absolute top-1/2 left-3 size-4 -translate-y-1/2 text-ink-400" />
+                  <input
+                    type="search"
+                    value={watchSearch}
+                    onChange={(e) => setWatchSearch(e.target.value)}
+                    placeholder="Search integrations"
+                    aria-label="Search integrations"
+                    className="h-9 w-full rounded-lg border border-ink-200 bg-white pr-3 pl-9 text-sm placeholder:text-ink-400 focus:border-crimson-400 focus:ring-2 focus:ring-crimson-100 focus:outline-none"
+                  />
+                </div>
+                <ul className="max-h-80 space-y-1.5 overflow-y-auto pr-1">
+                  {filteredIntegrations.map((s) => (
+                    <li key={s.id} className="flex items-center gap-1">
+                      <label className="flex min-w-0 flex-1 cursor-pointer items-center gap-2.5 text-sm">
+                        <input
+                          type="checkbox"
+                          checked={draft.integrationIds.includes(s.id)}
+                          disabled={!canEdit}
+                          onChange={(e) => toggleIntegration(s.id, e.target.checked)}
+                          className="size-4 shrink-0 cursor-pointer rounded accent-crimson-600"
+                        />
+                        <span className="min-w-0 flex-1 truncate font-medium text-ink-800">
+                          {s.name}
+                        </span>
+                        <Badge>{s.type}</Badge>
+                      </label>
+                      <Link
+                        to={`/subscriptions/${s.id}`}
+                        aria-label={`Open ${s.name}`}
+                        title="Open"
+                        className="shrink-0 rounded-md p-1 text-ink-400 hover:bg-ink-100 hover:text-ink-700"
+                      >
+                        <ArrowUpRight className="size-3.5" />
+                      </Link>
+                    </li>
+                  ))}
+                  {filteredIntegrations.length === 0 && (
+                    <li className="px-1 py-2 text-sm text-ink-400">No integrations match.</li>
+                  )}
+                </ul>
+              </div>
+            )}
+          </Panel>
+
+          <Panel
+            title="Recent notifications"
+            description="Every delivery attempt — expand a failed one to see why."
+          >
+            <NotificationsList items={n.recentNotifications} />
+          </Panel>
+        </div>
+      </div>
+
+      {canEdit && dirty && (
+        <UnsavedBar
+          busy={save.isPending}
+          error={save.error?.message}
+          onSave={() => save.mutate()}
+          onDiscard={() => setLoaded(false)}
+        />
+      )}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/notifiers/NotifiersPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/notifiers/NotifiersPage.tsx
new file mode 100644
index 00000000..d3eabae9
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/notifiers/NotifiersPage.tsx
@@ -0,0 +1,186 @@
+import { useMemo, useState, type FormEvent } from "react";
+import { useNavigate, useSearchParams } from "react-router";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { BellRing, Plus, Search } from "lucide-react";
+import { api } from "../../api";
+import { Can } from "../../auth/guards";
+import { useAdapterCatalog } from "../../components/config/AdapterConfig";
+import { PageHeader } from "../../components/layout/PageHeader";
+import { Badge, Button, EmptyState, FormError, LoadingBlock } from "../../components/ui/basics";
+import { Field, TextInput } from "../../components/ui/forms";
+import { Dialog } from "../../components/ui/overlays";
+
+function CreateNotifierDialog({ onClose }: { onClose: () => void }) {
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const [name, setName] = useState("");
+
+  const create = useMutation({
+    mutationFn: () => api.createNotifier({ name }),
+    onSuccess: (notifier) => {
+      void queryClient.invalidateQueries({ queryKey: ["notifiers"] });
+      navigate(`/notifiers/${notifier.id}`);
+    },
+  });
+
+  const submit = (e: FormEvent) => {
+    e.preventDefault();
+    create.mutate();
+  };
+
+  return (
+    <Dialog title="New notifier" onClose={onClose}>
+      <form onSubmit={submit} className="space-y-4">
+        <Field
+          label="Name"
+          htmlFor="nn-name"
+          hint="Triggers, channel and watched integrations are set on the notifier's page."
+        >
+          <TextInput
+            id="nn-name"
+            required
+            autoFocus
+            value={name}
+            onChange={(e) => setName(e.target.value)}
+            placeholder="e.g. Ops email on failures"
+          />
+        </Field>
+        <FormError>{create.error?.message}</FormError>
+        <div className="flex justify-end gap-2">
+          <Button onClick={onClose}>Cancel</Button>
+          <Button type="submit" variant="primary" busy={create.isPending}>
+            Create notifier
+          </Button>
+        </div>
+      </form>
+    </Dialog>
+  );
+}
+
+export function NotifiersPage() {
+  const [searchParams, setSearchParams] = useSearchParams();
+  const navigate = useNavigate();
+  const q = searchParams.get("q") ?? "";
+  const creating = searchParams.get("new") === "1";
+
+  const notifiers = useQuery({ queryKey: ["notifiers"], queryFn: () => api.listNotifiers() });
+  const channels = useAdapterCatalog("handler");
+
+  const setParam = (key: string, value: string | null) =>
+    setSearchParams(
+      (prev) => {
+        const next = new URLSearchParams(prev);
+        if (value) next.set(key, value);
+        else next.delete(key);
+        return next;
+      },
+      { replace: key === "q" },
+    );
+
+  const filtered = useMemo(() => {
+    const needle = q.trim().toLowerCase();
+    return (notifiers.data ?? []).filter((n) => !needle || n.name.toLowerCase().includes(needle));
+  }, [notifiers.data, q]);
+
+  const channelLabel = (id: string) => channels.data?.find((c) => c.id === id)?.label ?? id;
+
+  return (
+    <div>
+      <PageHeader
+        title="Notifiers"
+        description="Alerts sent to your team when watched integrations fail — or succeed."
+        help={{
+          title: "How notifiers work",
+          body: (
+            <>
+              <p>
+                A notifier <strong>watches</strong> a set of integrations. Whenever one of them
+                finishes an exchange with an outcome the notifier cares about — failed, bad result
+                or success — a notification goes out through its channel (email, Teams, …).
+              </p>
+              <p>
+                A notifier that watches no integrations never sends anything. Every delivery
+                attempt is recorded on the notifier's page.
+              </p>
+            </>
+          ),
+        }}
+        actions={
+          <Can permission="notifiers.create">
+            <Button variant="primary" onClick={() => setParam("new", "1")}>
+              <Plus className="size-4" /> New notifier
+            </Button>
+          </Can>
+        }
+      />
+
+      <div className="relative mb-4 max-w-xs">
+        <Search className="pointer-events-none absolute top-1/2 left-3 size-4 -translate-y-1/2 text-ink-400" />
+        <input
+          type="search"
+          value={q}
+          onChange={(e) => setParam("q", e.target.value || null)}
+          placeholder="Search notifiers"
+          aria-label="Search notifiers"
+          className="h-9 w-full rounded-lg border border-ink-200 bg-white pr-3 pl-9 text-sm placeholder:text-ink-400 focus:border-crimson-400 focus:ring-2 focus:ring-crimson-100 focus:outline-none"
+        />
+      </div>
+
+      {notifiers.isPending ? (
+        <LoadingBlock label="Loading notifiers…" />
+      ) : filtered.length === 0 ? (
+        <EmptyState icon={<BellRing />} title={q ? "No notifiers match" : "No notifiers yet"}>
+          {q ? "Try a different search." : "Create a notifier to get alerted when integrations fail."}
+        </EmptyState>
+      ) : (
+        <div className="overflow-x-auto rounded-xl border border-ink-200 bg-white">
+          <table className="w-full min-w-160 text-sm">
+            <thead>
+              <tr className="border-b border-ink-100 text-left text-xs text-ink-500">
+                <th className="px-4 py-2.5 font-medium">Notifier</th>
+                <th className="px-4 py-2.5 font-medium">Sends when</th>
+                <th className="px-4 py-2.5 font-medium">Channel</th>
+                <th className="px-4 py-2.5 font-medium">Watches</th>
+                <th className="px-4 py-2.5 font-medium">Status</th>
+              </tr>
+            </thead>
+            <tbody>
+              {filtered.map((n) => (
+                <tr
+                  key={n.id}
+                  onClick={() => navigate(`/notifiers/${n.id}`)}
+                  className="cursor-pointer border-b border-ink-100 last:border-b-0 hover:bg-ink-50"
+                >
+                  <td className="px-4 py-3 font-medium text-ink-900">{n.name}</td>
+                  <td className="px-4 py-3">
+                    <span className="flex flex-wrap gap-1">
+                      {n.onFailed && <Badge tone="danger">Failed</Badge>}
+                      {n.onBadResult && <Badge tone="warn">Bad result</Badge>}
+                      {n.onSuccess && <Badge tone="ok">Success</Badge>}
+                      {!n.onFailed && !n.onBadResult && !n.onSuccess && (
+                        <span className="text-ink-400">Never</span>
+                      )}
+                    </span>
+                  </td>
+                  <td className="px-4 py-3 text-ink-600">{channelLabel(n.channelId)}</td>
+                  <td className="px-4 py-3 text-ink-600">
+                    {n.integrationIds.length > 0 ? (
+                      `${n.integrationIds.length} integration${n.integrationIds.length === 1 ? "" : "s"}`
+                    ) : (
+                      <span className="text-warn-700">Nothing — never fires</span>
+                    )}
+                  </td>
+                  <td className="px-4 py-3">
+                    {n.enabled ? <Badge tone="ok">Active</Badge> : <Badge>Off</Badge>}
+                  </td>
+                </tr>
+              ))}
+            </tbody>
+          </table>
+        </div>
+      )}
+
+      {creating && <CreateNotifierDialog onClose={() => setParam("new", null)} />}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/partners/PartnerNewPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/partners/PartnerNewPage.tsx
new file mode 100644
index 00000000..18e67ee5
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/partners/PartnerNewPage.tsx
@@ -0,0 +1,67 @@
+import { useState, type FormEvent } from "react";
+import { Link, useNavigate } from "react-router";
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { ArrowLeft } from "lucide-react";
+import { api } from "../../api";
+import { Button, FormError } from "../../components/ui/basics";
+import { Field, TextInput } from "../../components/ui/forms";
+import { ReturnBanner } from "../../components/ui/ReturnBanner";
+import { useReturnContext, withReturn } from "../../lib/returnTo";
+
+export function PartnerNewPage() {
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const ctx = useReturnContext();
+  const [name, setName] = useState("");
+
+  const create = useMutation({
+    mutationFn: () => api.createPartner({ name }),
+    onSuccess: (partner) => {
+      void queryClient.invalidateQueries({ queryKey: ["partners"] });
+      const base = `/partners/${partner.id}`;
+      navigate(ctx ? `${withReturn(base, ctx)}&picked=partner:${partner.id}` : base);
+    },
+  });
+
+  const submit = (e: FormEvent) => {
+    e.preventDefault();
+    create.mutate();
+  };
+
+  return (
+    <div>
+      <Link
+        to={ctx?.to ?? "/partners"}
+        className="mb-4 inline-flex items-center gap-1 text-[13px] font-medium text-ink-500 hover:text-ink-800"
+      >
+        <ArrowLeft className="size-3.5" /> {ctx ? "Back without creating" : "Partners"}
+      </Link>
+
+      <ReturnBanner />
+
+      <h1 className="text-[22px] font-semibold tracking-tight text-ink-900">New partner</h1>
+      <p className="mt-1 text-sm text-ink-500">
+        Just a name to start — properties and API keys are added on the partner's page.
+      </p>
+
+      <form onSubmit={submit} className="mt-6 max-w-lg space-y-4 rounded-xl border border-ink-200 bg-white p-5">
+        <Field label="Partner name" htmlFor="np-name">
+          <TextInput
+            id="np-name"
+            required
+            autoFocus
+            value={name}
+            onChange={(e) => setName(e.target.value)}
+            placeholder="e.g. Meridian Logistics"
+          />
+        </Field>
+        <FormError>{create.error?.message}</FormError>
+        <div className="flex justify-end">
+          <Button type="submit" variant="primary" busy={create.isPending}>
+            Create partner
+          </Button>
+        </div>
+      </form>
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/partners/PartnerPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/partners/PartnerPage.tsx
new file mode 100644
index 00000000..8b5073ea
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/partners/PartnerPage.tsx
@@ -0,0 +1,357 @@
+import { useEffect, useMemo, useState, type FormEvent } from "react";
+import { Link, useNavigate, useParams } from "react-router";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { ArrowLeft, KeyRound, Plus, Trash2, Webhook } from "lucide-react";
+import { api } from "../../api";
+import { Can, useSessionCan } from "../../auth/guards";
+import { Badge, Button, EmptyState, FormError, LoadingBlock } from "../../components/ui/basics";
+import { Field, TextInput } from "../../components/ui/forms";
+import { ConfirmDialog, Dialog } from "../../components/ui/overlays";
+import { CopyField } from "../../components/ui/CopyField";
+import { KeyValueEditor, toRecord, toRows, type KvRow } from "../../components/ui/KeyValueEditor";
+import { EditableTitle, Panel, UnsavedBar } from "../../components/ui/Panel";
+import {
+  ExchangesList,
+  IntegrationMiniList,
+  SetupList,
+  useIntegrationsCache,
+} from "../../components/config/shared";
+import { ReturnBanner } from "../../components/ui/ReturnBanner";
+import { formatDate } from "../../lib/dates";
+
+function AddKeyDialog({ partnerId, onClose }: { partnerId: number; onClose: () => void }) {
+  const queryClient = useQueryClient();
+  const [name, setName] = useState("");
+  const [issuedKey, setIssuedKey] = useState("");
+
+  const add = useMutation({
+    mutationFn: () => api.addPartnerCredential(partnerId, name),
+    onSuccess: ({ key }) => {
+      setIssuedKey(key);
+      void queryClient.invalidateQueries({ queryKey: ["partner", partnerId] });
+      void queryClient.invalidateQueries({ queryKey: ["partners"] });
+    },
+  });
+
+  const submit = (e: FormEvent) => {
+    e.preventDefault();
+    add.mutate();
+  };
+
+  if (issuedKey) {
+    return (
+      <Dialog title="API key created" onClose={onClose}>
+        <div className="space-y-4">
+          <CopyField value={issuedKey} label={`Key "${name}"`} />
+          <p className="text-[13px] text-ink-500">
+            Copy it now and share it with the partner — for security, the full key is never shown
+            again.
+          </p>
+          <div className="flex justify-end">
+            <Button variant="primary" onClick={onClose}>
+              Done
+            </Button>
+          </div>
+        </div>
+      </Dialog>
+    );
+  }
+
+  return (
+    <Dialog title="New API key" onClose={onClose}>
+      <form onSubmit={submit} className="space-y-4">
+        <Field label="Key name" htmlFor="ak-name" hint="What this key is for — the partner may hold several.">
+          <TextInput
+            id="ak-name"
+            required
+            autoFocus
+            value={name}
+            onChange={(e) => setName(e.target.value)}
+            placeholder="e.g. Production"
+          />
+        </Field>
+        <FormError>{add.error?.message}</FormError>
+        <div className="flex justify-end gap-2">
+          <Button onClick={onClose}>Cancel</Button>
+          <Button type="submit" variant="primary" busy={add.isPending}>
+            Generate key
+          </Button>
+        </div>
+      </form>
+    </Dialog>
+  );
+}
+
+export function PartnerPage() {
+  const { id = "" } = useParams();
+  const partnerId = Number(id);
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const canEdit = useSessionCan("partners.edit");
+
+  const partner = useQuery({
+    queryKey: ["partner", partnerId],
+    queryFn: () => api.getPartner(partnerId),
+    retry: false,
+  });
+  const integrations = useIntegrationsCache();
+
+  const [name, setName] = useState("");
+  const [propRows, setPropRows] = useState<KvRow[] | null>(null);
+  const [addingKey, setAddingKey] = useState(false);
+  const [revoking, setRevoking] = useState<string | null>(null);
+  const [deleting, setDeleting] = useState(false);
+  const [loaded, setLoaded] = useState(false);
+
+  useEffect(() => {
+    if (!loaded && partner.data) {
+      setName(partner.data.name);
+      setPropRows(toRows(partner.data.adapterProperties));
+      setLoaded(true);
+    }
+  }, [partner.data, loaded]);
+
+  const dirty = useMemo(() => {
+    if (!partner.data || propRows === null) return false;
+    return (
+      name !== partner.data.name ||
+      JSON.stringify(toRecord(propRows)) !== JSON.stringify(partner.data.adapterProperties)
+    );
+  }, [partner.data, name, propRows]);
+
+  const save = useMutation({
+    mutationFn: () =>
+      api.updatePartner(partnerId, {
+        name: name !== partner.data?.name ? name : undefined,
+        adapterProperties: toRecord(propRows ?? []),
+      }),
+    onSuccess: async () => {
+      // Await the detail refetch BEFORE re-syncing the draft, so the re-sync
+      // effect reads the freshly-saved server data (not the stale cache).
+      await queryClient.invalidateQueries({ queryKey: ["partner", partnerId] });
+      void queryClient.invalidateQueries({ queryKey: ["partners"] });
+      setLoaded(false);
+    },
+  });
+
+  const revoke = useMutation({
+    mutationFn: (keyName: string) => api.revokePartnerCredential(partnerId, keyName),
+    onSuccess: () => {
+      void queryClient.invalidateQueries({ queryKey: ["partner", partnerId] });
+      void queryClient.invalidateQueries({ queryKey: ["partners"] });
+    },
+  });
+
+  if (partner.isPending) return <LoadingBlock label="Loading partner…" />;
+  if (partner.isError)
+    return (
+      <EmptyState title="This partner no longer exists">
+        <Link to="/partners" className="font-medium text-crimson-700 hover:underline">
+          Back to partners
+        </Link>
+      </EmptyState>
+    );
+
+  const p = partner.data;
+
+  return (
+    <div className="pb-24">
+      <Link
+        to="/partners"
+        className="mb-4 inline-flex items-center gap-1 text-[13px] font-medium text-ink-500 hover:text-ink-800"
+      >
+        <ArrowLeft className="size-3.5" /> Partners
+      </Link>
+
+      <ReturnBanner />
+
+      <div className="mb-6 flex flex-wrap items-start justify-between gap-3">
+        <div>
+          <h1 className="flex items-center gap-2.5 text-[22px] font-semibold tracking-tight text-ink-900">
+            <EditableTitle
+              value={name}
+              onChange={setName}
+              disabled={!canEdit || p.isSystem}
+              placeholder="Partner name"
+            />
+            {p.isSystem && <Badge tone="ink">Built-in</Badge>}
+          </h1>
+          <p className="mt-1 text-sm text-ink-500">
+            Partner since {formatDate(p.createdOn)}.
+            {p.isSystem && " The built-in partner Bitween uses internally."}
+          </p>
+        </div>
+        {!p.isSystem && (
+          <Can permission="partners.delete">
+            <Button variant="danger" onClick={() => setDeleting(true)}>
+              <Trash2 className="size-4" /> Delete partner
+            </Button>
+          </Can>
+        )}
+      </div>
+
+      <div className="grid gap-5 lg:grid-cols-[minmax(0,1fr)_360px]">
+        <div className="min-w-0 space-y-5">
+          <Panel
+            title="Properties"
+            description="Key-value settings adapters can reference — use the reference token inside any adapter field."
+          >
+            <KeyValueEditor
+              rows={propRows ?? []}
+              onChange={setPropRows}
+              keyLabel="Property"
+              valueLabel="Value"
+              keyPlaceholder="storeId"
+              valuePlaceholder="CR-114"
+              editable={canEdit}
+              token={(row) => `{{partner.${row.key.trim()}}}`}
+              emptyText="No properties yet."
+              rowDetails={(row) => {
+                if (!row.key.trim()) return null;
+                const users = (integrations.data ?? []).filter(
+                  (s) => s.partnerIds.includes(partnerId) && s.partnerPropKeys.includes(row.key.trim()),
+                );
+                return (
+                  <IntegrationMiniList
+                    items={users}
+                    emptyText="Not referenced by any integration — safe to change or remove."
+                  />
+                );
+              }}
+            />
+          </Panel>
+
+          <Panel
+            title="API keys"
+            description="Credentials partners use to call Bitween's gateways."
+            action={
+              <Can permission="partners.edit">
+                <Button size="sm" onClick={() => setAddingKey(true)}>
+                  <Plus className="size-3.5" /> New key
+                </Button>
+              </Can>
+            }
+          >
+            {p.apiCredentials.length === 0 ? (
+              <p className="text-sm text-ink-500">No API keys yet.</p>
+            ) : (
+              <ul className="divide-y divide-ink-100">
+                {p.apiCredentials.map((c) => (
+                  <li key={c.name} className="flex items-center gap-3 py-2 first:pt-0 last:pb-0">
+                    <KeyRound className="size-3.5 shrink-0 text-ink-300" aria-hidden />
+                    <span className="min-w-0 flex-1 truncate text-sm font-medium text-ink-800">
+                      {c.name}
+                    </span>
+                    <code className="font-mono text-xs text-ink-500">{c.keyPrefix}…</code>
+                    <span className="hidden text-xs text-ink-400 sm:block">{formatDate(c.createdOn)}</span>
+                    <Can permission="partners.edit">
+                      <Button size="sm" variant="danger" onClick={() => setRevoking(c.name)}>
+                        Revoke
+                      </Button>
+                    </Can>
+                  </li>
+                ))}
+              </ul>
+            )}
+            <FormError>{revoke.error?.message}</FormError>
+          </Panel>
+        </div>
+
+        <div className="min-w-0 space-y-5">
+          <Panel title="Used by" description="Everything that references this partner.">
+            <div className="space-y-4">
+              <SetupList items={p.integrationSetups} />
+              {p.apiGateways.length > 0 && (
+                <ul className="space-y-1.5 border-t border-ink-100 pt-3">
+                  {p.apiGateways.map((g) => (
+                    <li key={g.urlName} className="flex items-center gap-2.5 text-sm">
+                      <Webhook className="size-3.5 shrink-0 text-ink-300" aria-hidden />
+                      <Link
+                        to={`/api-gateways/${g.gatewayId}`}
+                        className="min-w-0 flex-1 truncate font-medium text-ink-800 hover:text-crimson-700 hover:underline"
+                      >
+                        {g.gatewayName}
+                      </Link>
+                      <code className="font-mono text-xs text-ink-500">/{g.urlName}</code>
+                      <Badge>API gateway</Badge>
+                    </li>
+                  ))}
+                </ul>
+              )}
+              {p.busGatewayRoutes.length > 0 && (
+                <ul className="space-y-1.5 border-t border-ink-100 pt-3">
+                  {p.busGatewayRoutes.map((r, i) => (
+                    <li key={i} className="flex items-center gap-2.5 text-sm">
+                      <Link
+                        to={`/bus-gateways/${r.gatewayId}`}
+                        className="min-w-0 flex-1 truncate font-medium text-ink-800 hover:text-crimson-700 hover:underline"
+                      >
+                        {r.gatewayName}
+                      </Link>
+                      <code className="truncate font-mono text-xs text-ink-500">{r.matchExpression}</code>
+                      <Badge>Bus route</Badge>
+                    </li>
+                  ))}
+                </ul>
+              )}
+            </div>
+          </Panel>
+
+          <Can permission="exchanges.view">
+            <Panel title="Recent exchanges" description="Latest traffic involving this partner.">
+              <ExchangesList items={p.recentExchanges} />
+            </Panel>
+          </Can>
+        </div>
+      </div>
+
+      {canEdit && dirty && (
+        <UnsavedBar
+          busy={save.isPending}
+          error={save.error?.message}
+          onSave={() => save.mutate()}
+          onDiscard={() => setLoaded(false)}
+        />
+      )}
+
+      {addingKey && <AddKeyDialog partnerId={partnerId} onClose={() => setAddingKey(false)} />}
+
+      {revoking && (
+        <ConfirmDialog
+          title="Revoke this API key?"
+          body={
+            <>
+              Anything the partner calls with the key{" "}
+              <strong className="font-medium text-ink-800">{revoking}</strong> will stop
+              authenticating immediately.
+            </>
+          }
+          confirmLabel="Revoke key"
+          onConfirm={async () => {
+            await revoke.mutateAsync(revoking);
+          }}
+          onClose={() => setRevoking(null)}
+        />
+      )}
+
+      {deleting && (
+        <ConfirmDialog
+          title="Delete this partner?"
+          body={
+            <>
+              <strong className="font-medium text-ink-800">{p.name}</strong>, its properties and its
+              API keys will be gone for good.
+            </>
+          }
+          confirmLabel="Delete partner"
+          onConfirm={async () => {
+            await api.deletePartner(partnerId);
+            void queryClient.invalidateQueries({ queryKey: ["partners"] });
+            navigate("/partners");
+          }}
+          onClose={() => setDeleting(false)}
+        />
+      )}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/partners/PartnersPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/partners/PartnersPage.tsx
new file mode 100644
index 00000000..6dfa1980
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/partners/PartnersPage.tsx
@@ -0,0 +1,107 @@
+import { useMemo } from "react";
+import { useNavigate, useSearchParams } from "react-router";
+import { useQuery } from "@tanstack/react-query";
+import { Handshake, Plus, Search } from "lucide-react";
+import { api } from "../../api";
+import { Can } from "../../auth/guards";
+import { PageHeader } from "../../components/layout/PageHeader";
+import { Badge, Button, EmptyState, LoadingBlock } from "../../components/ui/basics";
+
+export function PartnersPage() {
+  const [searchParams, setSearchParams] = useSearchParams();
+  const navigate = useNavigate();
+  const q = searchParams.get("q") ?? "";
+
+  const partners = useQuery({ queryKey: ["partners"], queryFn: () => api.listPartners() });
+
+  const setParam = (key: string, value: string | null) =>
+    setSearchParams(
+      (prev) => {
+        const next = new URLSearchParams(prev);
+        if (value) next.set(key, value);
+        else next.delete(key);
+        return next;
+      },
+      { replace: key === "q" },
+    );
+
+  const filtered = useMemo(() => {
+    const needle = q.trim().toLowerCase();
+    return (partners.data ?? []).filter((p) => !needle || p.name.toLowerCase().includes(needle));
+  }, [partners.data, q]);
+
+  return (
+    <div>
+      <PageHeader
+        title="Partners"
+        description="The external parties you exchange data with — their connection properties and API keys."
+        actions={
+          <Can permission="partners.create">
+            <Button variant="primary" onClick={() => navigate("/partners/new")}>
+              <Plus className="size-4" /> New partner
+            </Button>
+          </Can>
+        }
+      />
+
+      <div className="relative mb-4 max-w-xs">
+        <Search className="pointer-events-none absolute top-1/2 left-3 size-4 -translate-y-1/2 text-ink-400" />
+        <input
+          type="search"
+          value={q}
+          onChange={(e) => setParam("q", e.target.value || null)}
+          placeholder="Search partners"
+          aria-label="Search partners"
+          className="h-9 w-full rounded-lg border border-ink-200 bg-white pr-3 pl-9 text-sm placeholder:text-ink-400 focus:border-crimson-400 focus:ring-2 focus:ring-crimson-100 focus:outline-none"
+        />
+      </div>
+
+      {partners.isPending ? (
+        <LoadingBlock label="Loading partners…" />
+      ) : filtered.length === 0 ? (
+        <EmptyState icon={<Handshake />} title={q ? "No partners match" : "No partners yet"}>
+          {q ? "Try a different search." : "Create the first partner you exchange data with."}
+        </EmptyState>
+      ) : (
+        <div className="overflow-x-auto rounded-xl border border-ink-200 bg-white">
+          <table className="w-full min-w-140 text-sm">
+            <thead>
+              <tr className="border-b border-ink-100 text-left text-xs text-ink-500">
+                <th className="px-4 py-2.5 font-medium">Partner</th>
+                <th className="px-4 py-2.5 font-medium">Properties</th>
+                <th className="px-4 py-2.5 font-medium">API keys</th>
+                <th className="px-4 py-2.5 font-medium">Used by</th>
+              </tr>
+            </thead>
+            <tbody>
+              {filtered.map((p) => (
+                <tr
+                  key={p.id}
+                  onClick={() => navigate(`/partners/${p.id}`)}
+                  className="cursor-pointer border-b border-ink-100 last:border-b-0 hover:bg-ink-50"
+                >
+                  <td className="px-4 py-3">
+                    <span className="flex items-center gap-2 font-medium text-ink-900">
+                      {p.name}
+                      {p.isSystem && <Badge tone="ink">Built-in</Badge>}
+                    </span>
+                  </td>
+                  <td className="px-4 py-3 text-ink-600">{p.propertyKeys.length}</td>
+                  <td className="px-4 py-3 text-ink-600">{p.credentialCount}</td>
+                  <td className="px-4 py-3 text-ink-600">
+                    {p.usedByCount > 0 ? (
+                      `${p.usedByCount} place${p.usedByCount === 1 ? "" : "s"}`
+                    ) : (
+                      <span className="text-ink-400">—</span>
+                    )}
+                  </td>
+                </tr>
+              ))}
+            </tbody>
+          </table>
+        </div>
+      )}
+
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/queue-health/QueueHealthPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/queue-health/QueueHealthPage.tsx
new file mode 100644
index 00000000..6ed706f8
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/queue-health/QueueHealthPage.tsx
@@ -0,0 +1,237 @@
+import type { ReactNode } from "react";
+import { Link } from "react-router";
+import { keepPreviousData, useQuery } from "@tanstack/react-query";
+import { AlertTriangle, OctagonAlert } from "lucide-react";
+import { api, type QueueSeverity } from "../../api";
+import { PageHeader } from "../../components/layout/PageHeader";
+import { Badge, EmptyState, LoadingBlock } from "../../components/ui/basics";
+import { Panel } from "../../components/ui/Panel";
+import { timeAgo } from "../../lib/dates";
+
+const POLL_MS = 5_000;
+
+function HealthBadge({ health }: { health: QueueSeverity }) {
+  if (health === "critical") return <Badge tone="danger">Critical</Badge>;
+  if (health === "warning") return <Badge tone="warn">Warning</Badge>;
+  return <Badge tone="ok">Healthy</Badge>;
+}
+
+function StatTile({ label, value, sub }: { label: string; value: ReactNode; sub?: ReactNode }) {
+  return (
+    <div className="rounded-xl border border-ink-200 bg-white px-4 py-3">
+      <p className="text-[13px] text-ink-500">{label}</p>
+      <p className="mt-0.5 text-2xl font-semibold text-ink-900">{value}</p>
+      {sub && <p className="mt-0.5 text-xs text-ink-500">{sub}</p>}
+    </div>
+  );
+}
+
+/**
+ * Live RabbitMQ picture: summary, active alerts, per-consumer health, and the
+ * retry / dead-letter backlogs. Polls every few seconds; the previous snapshot
+ * stays on screen while the next one loads, so nothing flashes.
+ */
+export function QueueHealthPage() {
+  const { data, isLoading, dataUpdatedAt } = useQuery({
+    queryKey: ["queue-health"],
+    queryFn: () => api.getQueueHealth(),
+    refetchInterval: POLL_MS,
+    placeholderData: keepPreviousData,
+  });
+
+  if (isLoading || !data) return <LoadingBlock label="Reading queue statistics…" />;
+
+  const { summary, consumers, retryBacklog, deadLetters, alerts } = data;
+
+  return (
+    <div>
+      <PageHeader
+        title="Queue health"
+        description="Live message-queue throughput, consumer health and backlogs."
+        actions={
+          <span className="flex items-center gap-1.5 text-[13px] text-ink-500">
+            <span className="inline-block size-1.5 animate-pulse rounded-full bg-ok-600" aria-hidden />
+            Live · updated {timeAgo(new Date(dataUpdatedAt).toISOString())}
+          </span>
+        }
+      />
+
+      {/* — summary — */}
+      <div className="mb-4 grid grid-cols-2 gap-2.5 sm:grid-cols-3 xl:grid-cols-6">
+        <StatTile
+          label="Consumers"
+          value={summary.totalConsumers}
+          sub={
+            summary.unhealthyConsumers > 0 ? (
+              <span className="font-medium text-warn-700">{summary.unhealthyConsumers} unhealthy</span>
+            ) : (
+              "all healthy"
+            )
+          }
+        />
+        <StatTile label="Queue depth" value={summary.totalQueueDepth} sub="messages waiting" />
+        <StatTile
+          label="Retry backlog"
+          value={summary.totalRetryBacklog}
+          sub={summary.totalRetryBacklog > 0 ? <span className="font-medium text-warn-700">waiting to retry</span> : "empty"}
+        />
+        <StatTile
+          label="Dead letters"
+          value={summary.totalDeadLetterBacklog}
+          sub={
+            summary.totalDeadLetterBacklog > 0 ? (
+              <span className="font-medium text-danger-700">need attention</span>
+            ) : (
+              "empty"
+            )
+          }
+        />
+        <StatTile label="Incoming" value={`${summary.totalIncomingRate}/s`} sub="across all queues" />
+        <StatTile label="Acknowledged" value={`${summary.totalAckRate}/s`} sub="across all queues" />
+      </div>
+
+      {/* — active alerts — */}
+      {alerts.length > 0 && (
+        <div className="mb-4 space-y-1.5">
+          {alerts.map((a) => (
+            <div
+              key={a.queueName + a.title}
+              className={`flex items-start gap-2.5 rounded-xl border px-3.5 py-2.5 ${
+                a.severity === "critical" ? "border-danger-200 bg-danger-50" : "border-warn-100 bg-warn-100/40"
+              }`}
+            >
+              {a.severity === "critical" ? (
+                <OctagonAlert className="mt-0.5 size-4 shrink-0 text-danger-700" aria-hidden />
+              ) : (
+                <AlertTriangle className="mt-0.5 size-4 shrink-0 text-warn-700" aria-hidden />
+              )}
+              <div className="min-w-0">
+                <p className="text-sm font-medium text-ink-900">{a.title}</p>
+                <p className="text-[13px] text-ink-600">{a.detail}</p>
+                <code className="font-mono text-[11px] text-ink-400">{a.queueName}</code>
+              </div>
+            </div>
+          ))}
+        </div>
+      )}
+
+      {/* — consumers — */}
+      <Panel
+        title="Consumers"
+        description="One row per consumer; work-group consumers link to their group."
+        className="mb-4"
+      >
+        <div className="overflow-x-auto">
+          <table className="w-full text-left text-sm">
+            <thead>
+              <tr className="border-b border-ink-100 text-[11px] font-medium tracking-wide text-ink-400 uppercase">
+                <th className="py-2 pr-3">Consumer</th>
+                <th className="px-3 py-2">Queue</th>
+                <th className="px-3 py-2 text-right">Nodes</th>
+                <th className="px-3 py-2 text-right">In flight</th>
+                <th className="px-3 py-2 text-right">Queued</th>
+                <th className="px-3 py-2 text-right">Retrying</th>
+                <th className="px-3 py-2 text-right">Dead</th>
+                <th className="px-3 py-2 text-right">Prefetch</th>
+                <th className="px-3 py-2 text-right">In/s</th>
+                <th className="px-3 py-2 text-right">Ack/s</th>
+                <th className="px-3 py-2">Health</th>
+              </tr>
+            </thead>
+            <tbody className="tabular-nums">
+              {consumers.map((c) => (
+                <tr key={c.name} className="border-b border-ink-50 last:border-0">
+                  <td className="py-2 pr-3">
+                    {c.workGroupId !== null ? (
+                      <Link
+                        to={`/work-groups/${c.workGroupId}`}
+                        className="font-medium text-ink-800 hover:text-crimson-700 hover:underline"
+                      >
+                        {c.name}
+                      </Link>
+                    ) : (
+                      <span className="font-medium text-ink-800">{c.name}</span>
+                    )}
+                    <span className="block text-xs text-ink-400">{c.messageName}</span>
+                  </td>
+                  <td className="px-3 py-2">
+                    <code className="font-mono text-xs text-ink-500">{c.queueName}</code>
+                  </td>
+                  <td className="px-3 py-2 text-right text-ink-700">{c.totalNodes}</td>
+                  <td className="px-3 py-2 text-right text-ink-700">{c.processingCount}</td>
+                  <td className="px-3 py-2 text-right text-ink-700">{c.queueCount}</td>
+                  <td className={`px-3 py-2 text-right ${c.retryCount > 0 ? "font-medium text-warn-700" : "text-ink-700"}`}>
+                    {c.retryCount}
+                  </td>
+                  <td className={`px-3 py-2 text-right ${c.failedCount > 0 ? "font-medium text-danger-700" : "text-ink-700"}`}>
+                    {c.failedCount}
+                  </td>
+                  <td className="px-3 py-2 text-right text-ink-500">{c.prefetch}</td>
+                  <td className="px-3 py-2 text-right text-ink-700">{c.incomingRate}</td>
+                  <td className="px-3 py-2 text-right text-ink-700">{c.ackRate}</td>
+                  <td className="px-3 py-2">
+                    <span className="inline-flex items-center gap-1">
+                      <HealthBadge health={c.health} />
+                      {c.isBackpressured && <Badge tone="warn">Backpressure</Badge>}
+                    </span>
+                  </td>
+                </tr>
+              ))}
+            </tbody>
+          </table>
+        </div>
+      </Panel>
+
+      {/* — backlogs — */}
+      <div className="grid gap-4 lg:grid-cols-2">
+        <Panel title="Retry backlog" description="Messages queued for another attempt.">
+          {retryBacklog.length === 0 ? (
+            <EmptyState title="No retries pending">Every consumer is keeping up.</EmptyState>
+          ) : (
+            <ul className="space-y-2">
+              {retryBacklog.map((r) => (
+                <li key={r.queueName} className="flex items-center gap-2.5 text-sm">
+                  <span className="min-w-0 flex-1">
+                    <span className="font-medium text-ink-800">{r.consumerName}</span>
+                    <code className="block truncate font-mono text-[11px] text-ink-400">{r.queueName}</code>
+                  </span>
+                  <span className="text-xs text-ink-500">
+                    in {r.incomingRate}/s · ack {r.ackRate}/s
+                  </span>
+                  <Badge tone={r.severity === "critical" ? "danger" : "warn"}>{r.retryBacklog} waiting</Badge>
+                </li>
+              ))}
+            </ul>
+          )}
+        </Panel>
+
+        <Panel title="Dead letters" description="Messages that exhausted their retries.">
+          {deadLetters.length === 0 ? (
+            <EmptyState title="No dead letters">Nothing has been abandoned.</EmptyState>
+          ) : (
+            <ul className="space-y-3">
+              {deadLetters.map((d) => (
+                <li key={d.queueName} className="text-sm">
+                  <div className="flex items-center gap-2.5">
+                    <span className="min-w-0 flex-1">
+                      <span className="font-medium text-ink-800">{d.consumerName}</span>
+                      <code className="block truncate font-mono text-[11px] text-ink-400">{d.queueName}</code>
+                    </span>
+                    {d.lastFailedAt && <span className="text-xs text-ink-400">{timeAgo(d.lastFailedAt)}</span>}
+                    <Badge tone="danger">{d.count} dead</Badge>
+                  </div>
+                  {d.lastExceptionMessage && (
+                    <p className="mt-1 rounded-md bg-danger-50 px-2.5 py-1.5 font-mono text-[11px] leading-relaxed text-danger-800">
+                      {d.lastExceptionType && <span className="font-semibold">{d.lastExceptionType}: </span>}
+                      {d.lastExceptionMessage}
+                    </p>
+                  )}
+                </li>
+              ))}
+            </ul>
+          )}
+        </Panel>
+      </div>
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/retry-policies/GroupDialog.tsx b/SW.Bitween.Web/ClientApp/src/pages/retry-policies/GroupDialog.tsx
new file mode 100644
index 00000000..b574f602
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/retry-policies/GroupDialog.tsx
@@ -0,0 +1,349 @@
+import { useState, type FormEvent } from "react";
+import { Plus, Trash2 } from "lucide-react";
+import type { RetryDelay, RetryGroup, RetryMatcher, RetryResultType } from "../../api";
+import { Button, FormError } from "../../components/ui/basics";
+import { Checkbox, Field, Select, TextInput } from "../../components/ui/forms";
+import { Dialog } from "../../components/ui/overlays";
+
+const DEFAULT_MATCHER: RetryMatcher = { type: "contains", value: "", caseSensitive: false };
+
+const defaultMatcherFor = (type: RetryMatcher["type"]): RetryMatcher => {
+  switch (type) {
+    case "contains":
+      return { type, value: "", caseSensitive: false };
+    case "regex":
+      return { type, pattern: "", flags: "i" };
+    case "exceptionType":
+      return { type, value: "", includeInner: true };
+    case "jsonPath":
+      return { type, path: "$.", op: "Eq", value: "" };
+  }
+};
+
+const defaultDelayFor = (type: RetryDelay["type"]): RetryDelay => {
+  switch (type) {
+    case "fixed":
+      return { type, delaySeconds: 60 };
+    case "linear":
+      return { type, initialSeconds: 60, incrementSeconds: 60 };
+    case "exponential":
+      return { type, initialSeconds: 30, multiplier: 2, maxSeconds: 900 };
+  }
+};
+
+function MatcherRow({
+  matcher,
+  onChange,
+  onRemove,
+}: {
+  matcher: RetryMatcher;
+  onChange: (m: RetryMatcher) => void;
+  onRemove: () => void;
+}) {
+  const num = "flex-1 min-w-24";
+  return (
+    <div className="flex flex-wrap items-center gap-2 rounded-lg border border-ink-200 p-2.5">
+      <Select
+        aria-label="Condition type"
+        value={matcher.type}
+        onChange={(e) => onChange(defaultMatcherFor(e.target.value as RetryMatcher["type"]))}
+        className="!w-40"
+        options={[
+          { value: "contains", label: "Error contains" },
+          { value: "regex", label: "Error matches regex" },
+          { value: "exceptionType", label: "Exception type" },
+          { value: "jsonPath", label: "Result JSON path" },
+        ]}
+      />
+      {matcher.type === "contains" && (
+        <>
+          <TextInput
+            aria-label="Text to find"
+            className={num}
+            value={matcher.value}
+            onChange={(e) => onChange({ ...matcher, value: e.target.value })}
+            placeholder="timeout"
+          />
+          <Checkbox
+            label="Case sensitive"
+            checked={matcher.caseSensitive}
+            onChange={(e) => onChange({ ...matcher, caseSensitive: e.target.checked })}
+          />
+        </>
+      )}
+      {matcher.type === "regex" && (
+        <>
+          <TextInput
+            aria-label="Pattern"
+            className={num}
+            value={matcher.pattern}
+            onChange={(e) => onChange({ ...matcher, pattern: e.target.value })}
+            placeholder="5\\d\\d"
+          />
+          <TextInput
+            aria-label="Flags"
+            className="!w-16"
+            value={matcher.flags}
+            onChange={(e) => onChange({ ...matcher, flags: e.target.value })}
+            placeholder="i"
+          />
+        </>
+      )}
+      {matcher.type === "exceptionType" && (
+        <>
+          <TextInput
+            aria-label="Exception type name"
+            className={num}
+            value={matcher.value}
+            onChange={(e) => onChange({ ...matcher, value: e.target.value })}
+            placeholder="HttpRequestException"
+          />
+          <Checkbox
+            label="Include inner"
+            checked={matcher.includeInner}
+            onChange={(e) => onChange({ ...matcher, includeInner: e.target.checked })}
+          />
+        </>
+      )}
+      {matcher.type === "jsonPath" && (
+        <>
+          <TextInput
+            aria-label="JSON path"
+            className="!w-36 font-mono"
+            value={matcher.path}
+            onChange={(e) => onChange({ ...matcher, path: e.target.value })}
+            placeholder="$.status"
+          />
+          <Select
+            aria-label="Operator"
+            value={matcher.op}
+            onChange={(e) => onChange({ ...matcher, op: e.target.value as typeof matcher.op })}
+            className="!w-32"
+            options={[
+              { value: "Eq", label: "equals" },
+              { value: "Neq", label: "not equals" },
+              { value: "Contains", label: "contains" },
+              { value: "Exists", label: "exists" },
+              { value: "NotExists", label: "doesn't exist" },
+            ]}
+          />
+          {matcher.op !== "Exists" && matcher.op !== "NotExists" && (
+            <TextInput
+              aria-label="Comparison value"
+              className={num}
+              value={matcher.value ?? ""}
+              onChange={(e) => onChange({ ...matcher, value: e.target.value })}
+              placeholder="REJECTED"
+            />
+          )}
+        </>
+      )}
+      <button
+        onClick={onRemove}
+        aria-label="Remove condition"
+        className="ml-auto rounded-md p-1.5 text-ink-400 hover:bg-danger-50 hover:text-danger-700"
+      >
+        <Trash2 className="size-3.5" />
+      </button>
+    </div>
+  );
+}
+
+export function GroupDialog({
+  initial,
+  onSubmit,
+  onClose,
+}: {
+  initial?: RetryGroup;
+  onSubmit: (group: RetryGroup) => void;
+  onClose: () => void;
+}) {
+  const [name, setName] = useState(initial?.name ?? "");
+  const [priority, setPriority] = useState(initial?.priority ?? 10);
+  const [enabled, setEnabled] = useState(initial?.enabled ?? true);
+  const [appliesTo, setAppliesTo] = useState<RetryResultType[]>(initial?.appliesTo ?? ["Error"]);
+  const [action, setAction] = useState<RetryGroup["action"]>(initial?.action ?? "Allow");
+  const [matchers, setMatchers] = useState<RetryMatcher[]>(initial?.matchers ?? []);
+  const [budget, setBudget] = useState(
+    initial?.budget ?? { maxAttemptsPerError: 3, maxAttemptsTotal: 10, delay: defaultDelayFor("exponential") },
+  );
+  const [notes, setNotes] = useState(initial?.notes ?? "");
+  const [error, setError] = useState("");
+
+  const toggleAppliesTo = (t: RetryResultType) =>
+    setAppliesTo((prev) => (prev.includes(t) ? prev.filter((x) => x !== t) : [...prev, t]));
+
+  const setDelay = (patch: Partial<RetryDelay> | { type: RetryDelay["type"] }) => {
+    setBudget((b) => ({
+      ...b,
+      delay: "type" in patch && patch.type !== b.delay.type
+        ? defaultDelayFor(patch.type as RetryDelay["type"])
+        : ({ ...b.delay, ...patch } as RetryDelay),
+    }));
+  };
+
+  const submit = (e: FormEvent) => {
+    e.preventDefault();
+    if (!name.trim()) return setError("Give the group a name.");
+    if (appliesTo.length === 0) return setError("Pick at least one failure kind it applies to.");
+    onSubmit({
+      id: initial?.id ?? crypto.randomUUID(),
+      name: name.trim(),
+      priority,
+      enabled,
+      appliesTo,
+      matchers,
+      action,
+      budget: action === "Allow" ? budget : undefined,
+      notes: notes.trim() || undefined,
+    });
+    onClose();
+  };
+
+  const delay = budget.delay;
+
+  return (
+    <Dialog title={initial ? "Edit group" : "New group"} onClose={onClose} wide>
+      <form onSubmit={submit} className="space-y-4">
+        <div className="grid gap-4 sm:grid-cols-[1fr_8rem]">
+          <Field label="Name" htmlFor="rg-name">
+            <TextInput id="rg-name" autoFocus value={name} onChange={(e) => setName(e.target.value)} placeholder="e.g. Timeouts" />
+          </Field>
+          <Field label="Priority" htmlFor="rg-priority" hint="Lower runs first.">
+            <TextInput
+              id="rg-priority"
+              type="number"
+              value={priority}
+              onChange={(e) => setPriority(Number(e.target.value))}
+            />
+          </Field>
+        </div>
+
+        <div className="flex flex-wrap items-center gap-x-6 gap-y-2">
+          <Checkbox label="Enabled" checked={enabled} onChange={(e) => setEnabled(e.target.checked)} />
+          <Checkbox
+            label="Applies to errors"
+            checked={appliesTo.includes("Error")}
+            onChange={() => toggleAppliesTo("Error")}
+          />
+          <Checkbox
+            label="Applies to bad results"
+            description="Delivered, but the reply says it failed."
+            checked={appliesTo.includes("BadResult")}
+            onChange={() => toggleAppliesTo("BadResult")}
+          />
+        </div>
+
+        <fieldset>
+          <legend className="mb-1.5 block text-[13px] font-medium text-ink-700">
+            Conditions <span className="font-normal text-ink-500">— any may match; none means every failure</span>
+          </legend>
+          <div className="space-y-2">
+            {matchers.map((m, i) => (
+              <MatcherRow
+                key={i}
+                matcher={m}
+                onChange={(next) => setMatchers(matchers.map((x, xi) => (xi === i ? next : x)))}
+                onRemove={() => setMatchers(matchers.filter((_, xi) => xi !== i))}
+              />
+            ))}
+            <Button size="sm" onClick={() => setMatchers([...matchers, DEFAULT_MATCHER])}>
+              <Plus className="size-3.5" /> Add condition
+            </Button>
+          </div>
+        </fieldset>
+
+        <Field label="Then" htmlFor="rg-action">
+          <Select
+            id="rg-action"
+            value={action}
+            onChange={(e) => setAction(e.target.value as RetryGroup["action"])}
+            options={[
+              { value: "Allow", label: "Retry within a budget" },
+              { value: "Block", label: "Don't retry (stop immediately)" },
+            ]}
+          />
+        </Field>
+
+        {action === "Allow" && (
+          <div className="space-y-3 rounded-xl bg-ink-50 p-4">
+            <div className="grid gap-3 sm:grid-cols-2">
+              <Field label="Max attempts per error" htmlFor="rg-per">
+                <TextInput
+                  id="rg-per"
+                  type="number"
+                  min={1}
+                  value={budget.maxAttemptsPerError}
+                  onChange={(e) => setBudget({ ...budget, maxAttemptsPerError: Number(e.target.value) })}
+                />
+              </Field>
+              <Field label="Max attempts total" htmlFor="rg-total">
+                <TextInput
+                  id="rg-total"
+                  type="number"
+                  min={1}
+                  value={budget.maxAttemptsTotal}
+                  onChange={(e) => setBudget({ ...budget, maxAttemptsTotal: Number(e.target.value) })}
+                />
+              </Field>
+            </div>
+            <Field label="Delay between attempts" htmlFor="rg-delay">
+              <Select
+                id="rg-delay"
+                value={delay.type}
+                onChange={(e) => setDelay({ type: e.target.value as RetryDelay["type"] })}
+                options={[
+                  { value: "fixed", label: "Fixed" },
+                  { value: "linear", label: "Growing (linear)" },
+                  { value: "exponential", label: "Doubling (exponential)" },
+                ]}
+              />
+            </Field>
+            <div className="grid gap-3 sm:grid-cols-3">
+              {delay.type === "fixed" && (
+                <Field label="Delay (seconds)" htmlFor="rg-d1">
+                  <TextInput id="rg-d1" type="number" min={0} value={delay.delaySeconds} onChange={(e) => setDelay({ delaySeconds: Number(e.target.value) })} />
+                </Field>
+              )}
+              {delay.type === "linear" && (
+                <>
+                  <Field label="First delay (seconds)" htmlFor="rg-d1">
+                    <TextInput id="rg-d1" type="number" min={0} value={delay.initialSeconds} onChange={(e) => setDelay({ initialSeconds: Number(e.target.value) })} />
+                  </Field>
+                  <Field label="Adds each attempt (seconds)" htmlFor="rg-d2">
+                    <TextInput id="rg-d2" type="number" min={0} value={delay.incrementSeconds} onChange={(e) => setDelay({ incrementSeconds: Number(e.target.value) })} />
+                  </Field>
+                </>
+              )}
+              {delay.type === "exponential" && (
+                <>
+                  <Field label="First delay (seconds)" htmlFor="rg-d1">
+                    <TextInput id="rg-d1" type="number" min={0} value={delay.initialSeconds} onChange={(e) => setDelay({ initialSeconds: Number(e.target.value) })} />
+                  </Field>
+                  <Field label="Multiplier" htmlFor="rg-d2">
+                    <TextInput id="rg-d2" type="number" min={1} step="0.1" value={delay.multiplier} onChange={(e) => setDelay({ multiplier: Number(e.target.value) })} />
+                  </Field>
+                  <Field label="Max delay (seconds)" htmlFor="rg-d3">
+                    <TextInput id="rg-d3" type="number" min={0} value={delay.maxSeconds} onChange={(e) => setDelay({ maxSeconds: Number(e.target.value) })} />
+                  </Field>
+                </>
+              )}
+            </div>
+          </div>
+        )}
+
+        <Field label="Notes" htmlFor="rg-notes" hint="Optional — why this group exists.">
+          <TextInput id="rg-notes" value={notes} onChange={(e) => setNotes(e.target.value)} />
+        </Field>
+
+        <FormError>{error}</FormError>
+        <div className="flex justify-end gap-2">
+          <Button onClick={onClose}>Cancel</Button>
+          <Button type="submit" variant="primary">
+            {initial ? "Update group" : "Add group"}
+          </Button>
+        </div>
+      </form>
+    </Dialog>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/retry-policies/RetryPoliciesPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/retry-policies/RetryPoliciesPage.tsx
new file mode 100644
index 00000000..7be0e7a5
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/retry-policies/RetryPoliciesPage.tsx
@@ -0,0 +1,163 @@
+import { useMemo, useState, type FormEvent } from "react";
+import { useNavigate, useSearchParams } from "react-router";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { Plus, RotateCcw, Search } from "lucide-react";
+import { api } from "../../api";
+import { Can } from "../../auth/guards";
+import { PageHeader } from "../../components/layout/PageHeader";
+import { Button, EmptyState, FormError, LoadingBlock } from "../../components/ui/basics";
+import { Field, TextInput } from "../../components/ui/forms";
+import { Dialog } from "../../components/ui/overlays";
+
+function CreateRetryPolicyDialog({ onClose }: { onClose: () => void }) {
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const [name, setName] = useState("");
+
+  const create = useMutation({
+    mutationFn: () => api.createRetryPolicy({ name }),
+    onSuccess: (policy) => {
+      void queryClient.invalidateQueries({ queryKey: ["retry-policies"] });
+      navigate(`/retry-policies/${policy.id}`);
+    },
+  });
+
+  const submit = (e: FormEvent) => {
+    e.preventDefault();
+    create.mutate();
+  };
+
+  return (
+    <Dialog title="New retry policy" onClose={onClose}>
+      <form onSubmit={submit} className="space-y-4">
+        <Field label="Name" htmlFor="nrp-name" hint="Groups and budgets are added on the policy's page.">
+          <TextInput
+            id="nrp-name"
+            required
+            autoFocus
+            value={name}
+            onChange={(e) => setName(e.target.value)}
+            placeholder="e.g. Transient failures"
+          />
+        </Field>
+        <FormError>{create.error?.message}</FormError>
+        <div className="flex justify-end gap-2">
+          <Button onClick={onClose}>Cancel</Button>
+          <Button type="submit" variant="primary" busy={create.isPending}>
+            Create policy
+          </Button>
+        </div>
+      </form>
+    </Dialog>
+  );
+}
+
+export function RetryPoliciesPage() {
+  const [searchParams, setSearchParams] = useSearchParams();
+  const navigate = useNavigate();
+  const q = searchParams.get("q") ?? "";
+  const creating = searchParams.get("new") === "1";
+
+  const policies = useQuery({ queryKey: ["retry-policies"], queryFn: () => api.listRetryPolicies() });
+
+  const setParam = (key: string, value: string | null) =>
+    setSearchParams(
+      (prev) => {
+        const next = new URLSearchParams(prev);
+        if (value) next.set(key, value);
+        else next.delete(key);
+        return next;
+      },
+      { replace: key === "q" },
+    );
+
+  const filtered = useMemo(() => {
+    const needle = q.trim().toLowerCase();
+    return (policies.data ?? []).filter((p) => !needle || p.name.toLowerCase().includes(needle));
+  }, [policies.data, q]);
+
+  return (
+    <div>
+      <PageHeader
+        title="Retry policies"
+        description="Rules for what happens after an exchange fails — retry with a delay, or stop and alert."
+        help={{
+          title: "How retry policies work",
+          body: (
+            <>
+              <p>
+                A policy is a list of <strong>groups</strong>, checked in priority order (lowest
+                first). The first group whose conditions match the failure decides: retry within a
+                budget, or block retries entirely. If nothing matches, the exchange isn't retried.
+              </p>
+              <p>
+                Assign a policy to an integration to activate it. You can dry-run any policy against
+                a sample error right on its page.
+              </p>
+            </>
+          ),
+        }}
+        actions={
+          <Can permission="retry-policies.create">
+            <Button variant="primary" onClick={() => setParam("new", "1")}>
+              <Plus className="size-4" /> New retry policy
+            </Button>
+          </Can>
+        }
+      />
+
+      <div className="relative mb-4 max-w-xs">
+        <Search className="pointer-events-none absolute top-1/2 left-3 size-4 -translate-y-1/2 text-ink-400" />
+        <input
+          type="search"
+          value={q}
+          onChange={(e) => setParam("q", e.target.value || null)}
+          placeholder="Search retry policies"
+          aria-label="Search retry policies"
+          className="h-9 w-full rounded-lg border border-ink-200 bg-white pr-3 pl-9 text-sm placeholder:text-ink-400 focus:border-crimson-400 focus:ring-2 focus:ring-crimson-100 focus:outline-none"
+        />
+      </div>
+
+      {policies.isPending ? (
+        <LoadingBlock label="Loading retry policies…" />
+      ) : filtered.length === 0 ? (
+        <EmptyState icon={<RotateCcw />} title={q ? "No policies match" : "No retry policies yet"}>
+          {q ? "Try a different search." : "Create a policy to control what happens after failures."}
+        </EmptyState>
+      ) : (
+        <div className="overflow-x-auto rounded-xl border border-ink-200 bg-white">
+          <table className="w-full min-w-130 text-sm">
+            <thead>
+              <tr className="border-b border-ink-100 text-left text-xs text-ink-500">
+                <th className="px-4 py-2.5 font-medium">Policy</th>
+                <th className="px-4 py-2.5 font-medium">Groups</th>
+                <th className="px-4 py-2.5 font-medium">Used by</th>
+              </tr>
+            </thead>
+            <tbody>
+              {filtered.map((p) => (
+                <tr
+                  key={p.id}
+                  onClick={() => navigate(`/retry-policies/${p.id}`)}
+                  className="cursor-pointer border-b border-ink-100 last:border-b-0 hover:bg-ink-50"
+                >
+                  <td className="px-4 py-3 font-medium text-ink-900">{p.name}</td>
+                  <td className="px-4 py-3 text-ink-600">{p.groupCount}</td>
+                  <td className="px-4 py-3 text-ink-600">
+                    {p.usedByCount > 0 ? (
+                      `${p.usedByCount} integration${p.usedByCount === 1 ? "" : "s"}`
+                    ) : (
+                      <span className="text-ink-400">—</span>
+                    )}
+                  </td>
+                </tr>
+              ))}
+            </tbody>
+          </table>
+        </div>
+      )}
+
+      {creating && <CreateRetryPolicyDialog onClose={() => setParam("new", null)} />}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/retry-policies/RetryPolicyPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/retry-policies/RetryPolicyPage.tsx
new file mode 100644
index 00000000..4c69e631
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/retry-policies/RetryPolicyPage.tsx
@@ -0,0 +1,316 @@
+import { useEffect, useMemo, useState, type FormEvent } from "react";
+import { Link, useNavigate, useParams } from "react-router";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { ArrowLeft, FlaskConical, Pencil, Plus, Trash2 } from "lucide-react";
+import { api, type RetryGroup, type RetryMatcher, type RetryResultType } from "../../api";
+import { Can, useSessionCan } from "../../auth/guards";
+import { Badge, Button, EmptyState, FormError, LoadingBlock } from "../../components/ui/basics";
+import { Field, Select, TextInput } from "../../components/ui/forms";
+import { ConfirmDialog } from "../../components/ui/overlays";
+import { EditableTitle, Panel, UnsavedBar } from "../../components/ui/Panel";
+import { SetupList } from "../../components/config/shared";
+import { GroupDialog } from "./GroupDialog";
+
+const matcherSummary = (m: RetryMatcher): string => {
+  switch (m.type) {
+    case "contains":
+      return `contains "${m.value}"`;
+    case "regex":
+      return `matches /${m.pattern}/${m.flags}`;
+    case "exceptionType":
+      return `exception ${m.value}`;
+    case "jsonPath":
+      return `${m.path} ${m.op.toLowerCase()}${m.value ? ` "${m.value}"` : ""}`;
+  }
+};
+
+/** Dry-run the draft groups against a sample failure, right on the page. */
+function TestPanel({ groups }: { groups: RetryGroup[] }) {
+  const [resultType, setResultType] = useState<RetryResultType>("Error");
+  const [attempts, setAttempts] = useState(5);
+  const [content, setContent] = useState("");
+
+  const test = useMutation({
+    mutationFn: () => api.testRetryPolicy({ groups, resultType, content, attempts }),
+  });
+
+  const submit = (e: FormEvent) => {
+    e.preventDefault();
+    test.mutate();
+  };
+
+  return (
+    <Panel
+      title="Try it out"
+      description="Simulate a failure against the groups as configured above — including unsaved changes."
+    >
+      <form onSubmit={submit} className="space-y-3">
+        <div className="grid gap-3 sm:grid-cols-2">
+          <Field label="Failure kind" htmlFor="tp-kind">
+            <Select
+              id="tp-kind"
+              value={resultType}
+              onChange={(e) => setResultType(e.target.value as RetryResultType)}
+              options={[
+                { value: "Error", label: "Error (exception)" },
+                { value: "BadResult", label: "Bad result (reply says failed)" },
+              ]}
+            />
+          </Field>
+          <Field label="Attempts to simulate" htmlFor="tp-attempts">
+            <TextInput
+              id="tp-attempts"
+              type="number"
+              min={1}
+              max={20}
+              value={attempts}
+              onChange={(e) => setAttempts(Number(e.target.value))}
+            />
+          </Field>
+        </div>
+        <Field
+          label={resultType === "Error" ? "Error text" : "Result body (JSON)"}
+          htmlFor="tp-content"
+        >
+          <textarea
+            id="tp-content"
+            rows={3}
+            value={content}
+            onChange={(e) => setContent(e.target.value)}
+            placeholder={
+              resultType === "Error"
+                ? "e.g. HttpRequestException: The request timed out"
+                : 'e.g. { "status": "REJECTED", "reason": "…" }'
+            }
+            className="w-full rounded-lg border border-ink-200 bg-white px-3 py-2 font-mono text-xs text-ink-900 placeholder:text-ink-400 focus:border-crimson-400 focus:ring-2 focus:ring-crimson-100 focus:outline-none"
+          />
+        </Field>
+        <FormError>{test.error?.message}</FormError>
+        <Button type="submit" variant="primary" size="sm" busy={test.isPending}>
+          <FlaskConical className="size-3.5" /> Run simulation
+        </Button>
+      </form>
+
+      {test.data && (
+        <ol className="mt-4 space-y-1.5 border-t border-ink-100 pt-3">
+          {test.data.map((a) => (
+            <li key={a.attempt} className="flex items-start gap-2.5 text-[13px]">
+              <span className="mt-0.5 w-14 shrink-0 font-mono text-xs text-ink-400">#{a.attempt}</span>
+              {a.shouldRetry ? <Badge tone="ok">Retries</Badge> : <Badge tone="danger">Stops</Badge>}
+              <span className="min-w-0 flex-1 text-ink-600">
+                {a.matchedGroup && <strong className="font-medium text-ink-800">{a.matchedGroup}: </strong>}
+                {a.reason}
+                {a.delaySeconds !== undefined && ` Next try in ${a.delaySeconds}s.`}
+              </span>
+            </li>
+          ))}
+        </ol>
+      )}
+    </Panel>
+  );
+}
+
+export function RetryPolicyPage() {
+  const { id = "" } = useParams();
+  const policyId = Number(id);
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const canEdit = useSessionCan("retry-policies.edit");
+
+  const policy = useQuery({
+    queryKey: ["retry-policy", policyId],
+    queryFn: () => api.getRetryPolicy(policyId),
+    retry: false,
+  });
+
+  const [name, setName] = useState("");
+  const [groups, setGroups] = useState<RetryGroup[] | null>(null);
+  const [editingGroup, setEditingGroup] = useState<RetryGroup | "new" | null>(null);
+  const [deleting, setDeleting] = useState(false);
+  const [loaded, setLoaded] = useState(false);
+
+  useEffect(() => {
+    if (!loaded && policy.data) {
+      setName(policy.data.name);
+      setGroups(structuredClone(policy.data.groups));
+      setLoaded(true);
+    }
+  }, [policy.data, loaded]);
+
+  const dirty = useMemo(() => {
+    if (!policy.data || groups === null) return false;
+    return name !== policy.data.name || JSON.stringify(groups) !== JSON.stringify(policy.data.groups);
+  }, [policy.data, name, groups]);
+
+  const save = useMutation({
+    mutationFn: () => api.updateRetryPolicy(policyId, { name, groups: groups ?? [] }),
+    onSuccess: async () => {
+      // Await the detail refetch before re-syncing the draft (avoids stale-data race).
+      await queryClient.invalidateQueries({ queryKey: ["retry-policy", policyId] });
+      void queryClient.invalidateQueries({ queryKey: ["retry-policies"] });
+      setLoaded(false);
+    },
+  });
+
+  if (policy.isPending) return <LoadingBlock label="Loading retry policy…" />;
+  if (policy.isError)
+    return (
+      <EmptyState title="This retry policy no longer exists">
+        <Link to="/retry-policies" className="font-medium text-crimson-700 hover:underline">
+          Back to retry policies
+        </Link>
+      </EmptyState>
+    );
+
+  const p = policy.data;
+  const sortedGroups = [...(groups ?? [])].sort((a, b) => a.priority - b.priority);
+
+  const upsertGroup = (group: RetryGroup) =>
+    setGroups((prev) => {
+      const list = prev ?? [];
+      return list.some((g) => g.id === group.id)
+        ? list.map((g) => (g.id === group.id ? group : g))
+        : [...list, group];
+    });
+
+  return (
+    <div className="pb-24">
+      <Link
+        to="/retry-policies"
+        className="mb-4 inline-flex items-center gap-1 text-[13px] font-medium text-ink-500 hover:text-ink-800"
+      >
+        <ArrowLeft className="size-3.5" /> Retry policies
+      </Link>
+
+      <div className="mb-6 flex flex-wrap items-start justify-between gap-3">
+        <div>
+          <h1 className="text-[22px] font-semibold tracking-tight text-ink-900">
+            <EditableTitle value={name} onChange={setName} disabled={!canEdit} placeholder="Policy name" />
+          </h1>
+          <p className="mt-1 text-sm text-ink-500">
+            Groups are checked top to bottom — the first match decides.
+          </p>
+        </div>
+        <Can permission="retry-policies.delete">
+          <Button variant="danger" onClick={() => setDeleting(true)}>
+            <Trash2 className="size-4" /> Delete
+          </Button>
+        </Can>
+      </div>
+
+      <div className="grid gap-5 lg:grid-cols-[minmax(0,1fr)_360px]">
+        <div className="min-w-0 space-y-5">
+          <Panel
+            title="Groups"
+            action={
+              canEdit ? (
+                <Button size="sm" onClick={() => setEditingGroup("new")}>
+                  <Plus className="size-3.5" /> Add group
+                </Button>
+              ) : undefined
+            }
+          >
+            {sortedGroups.length === 0 ? (
+              <p className="text-sm text-ink-500">
+                No groups yet — failures under this policy are never retried.
+              </p>
+            ) : (
+              <ul className="space-y-2">
+                {sortedGroups.map((g) => (
+                  <li key={g.id} className={`rounded-xl border border-ink-200 p-3.5 ${g.enabled ? "" : "opacity-60"}`}>
+                    <div className="flex flex-wrap items-center gap-2">
+                      <span className="font-mono text-xs text-ink-400">#{g.priority}</span>
+                      <span className="font-medium text-ink-900">{g.name}</span>
+                      {g.action === "Allow" ? <Badge tone="ok">Retries</Badge> : <Badge tone="danger">Blocks</Badge>}
+                      {!g.enabled && <Badge>Disabled</Badge>}
+                      <span className="ml-auto flex gap-1">
+                        {canEdit && (
+                          <>
+                            <button
+                              onClick={() => setEditingGroup(g)}
+                              aria-label={`Edit ${g.name}`}
+                              className="rounded-md p-1.5 text-ink-400 hover:bg-ink-100 hover:text-ink-700"
+                            >
+                              <Pencil className="size-3.5" />
+                            </button>
+                            <button
+                              onClick={() => setGroups((prev) => (prev ?? []).filter((x) => x.id !== g.id))}
+                              aria-label={`Remove ${g.name}`}
+                              className="rounded-md p-1.5 text-ink-400 hover:bg-danger-50 hover:text-danger-700"
+                            >
+                              <Trash2 className="size-3.5" />
+                            </button>
+                          </>
+                        )}
+                      </span>
+                    </div>
+                    <p className="mt-1.5 text-[13px] text-ink-600">
+                      On {g.appliesTo.map((t) => (t === "Error" ? "errors" : "bad results")).join(" and ")}
+                      {g.matchers.length === 0 ? (
+                        " — any failure"
+                      ) : (
+                        <> matching {g.matchers.map((m) => matcherSummary(m)).join(" or ")}</>
+                      )}
+                      {g.action === "Allow" && g.budget && (
+                        <>
+                          {" "}
+                          → up to {g.budget.maxAttemptsPerError} tries ({g.budget.maxAttemptsTotal} total),{" "}
+                          {g.budget.delay.type} delay
+                        </>
+                      )}
+                    </p>
+                    {g.notes && <p className="mt-1 text-xs text-ink-400 italic">{g.notes}</p>}
+                  </li>
+                ))}
+              </ul>
+            )}
+          </Panel>
+
+          <TestPanel groups={groups ?? []} />
+        </div>
+
+        <div className="min-w-0 space-y-5">
+          <Panel title="Used by" description="Integrations that follow this policy after failures.">
+            <SetupList items={p.integrations} />
+          </Panel>
+        </div>
+      </div>
+
+      {canEdit && dirty && (
+        <UnsavedBar
+          busy={save.isPending}
+          error={save.error?.message}
+          onSave={() => save.mutate()}
+          onDiscard={() => setLoaded(false)}
+        />
+      )}
+
+      {editingGroup && (
+        <GroupDialog
+          initial={editingGroup === "new" ? undefined : editingGroup}
+          onSubmit={upsertGroup}
+          onClose={() => setEditingGroup(null)}
+        />
+      )}
+
+      {deleting && (
+        <ConfirmDialog
+          title="Delete this retry policy?"
+          body={
+            <>
+              <strong className="font-medium text-ink-800">{p.name}</strong> will be gone for good.
+              Policies still assigned to integrations can't be deleted.
+            </>
+          }
+          confirmLabel="Delete policy"
+          onConfirm={async () => {
+            await api.deleteRetryPolicy(policyId);
+            void queryClient.invalidateQueries({ queryKey: ["retry-policies"] });
+            navigate("/retry-policies");
+          }}
+          onClose={() => setDeleting(false)}
+        />
+      )}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/scheduled-jobs/NewScheduledJobWizard.tsx b/SW.Bitween.Web/ClientApp/src/pages/scheduled-jobs/NewScheduledJobWizard.tsx
new file mode 100644
index 00000000..48092027
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/scheduled-jobs/NewScheduledJobWizard.tsx
@@ -0,0 +1,233 @@
+import { useEffect } from "react";
+import { useNavigate, useSearchParams } from "react-router";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { api, type Schedule } from "../../api";
+import { Checkbox, Field, TextInput } from "../../components/ui/forms";
+import { AdapterConfig, useAdapterCatalog } from "../../components/config/AdapterConfig";
+import { ScheduleEditor } from "../../components/config/ScheduleEditor";
+import { InfoTypePicker } from "../../components/config/pickers";
+import { StepNav, WizardShell, usePersistentDraft } from "../../components/config/wizard";
+import { ReviewRow } from "../api-gateways/AttachPartnerWizard";
+import { takePicked, useHereAsReturnTarget } from "../../lib/returnTo";
+import { schedulesSummary } from "../../lib/schedules";
+
+type Stage = "basics" | "source" | "pipeline" | "review";
+const STEPS = ["Basics", "Source & schedule", "Pipeline", "Review"];
+
+interface Draft {
+  stage: Stage;
+  name: string;
+  informationTypeId: number | null;
+  receiverId: string | null;
+  receiverProperties: Record<string, string>;
+  schedules: Schedule[];
+  mapperId: string | null;
+  mapperProperties: Record<string, string>;
+  handlerId: string | null;
+  handlerProperties: Record<string, string>;
+  enable: boolean;
+}
+
+const EMPTY: Draft = {
+  stage: "basics",
+  name: "",
+  informationTypeId: null,
+  receiverId: null,
+  receiverProperties: {},
+  // Start with a sensible default so the step is valid on arrival — shown as
+  // a one-line summary, edited through the full recurrence editor on demand.
+  schedules: [{ recurrence: "Daily", days: 0, hours: 0, minutes: 0, backwards: false }],
+  mapperId: null,
+  mapperProperties: {},
+  handlerId: null,
+  handlerProperties: {},
+  enable: true,
+};
+
+export function NewScheduledJobWizard() {
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const here = useHereAsReturnTarget();
+  const [params, setParams] = useSearchParams();
+  const receivers = useAdapterCatalog("receiver");
+  const handlers = useAdapterCatalog("handler");
+  const infoTypes = useQuery({ queryKey: ["information-types"], queryFn: () => api.listInformationTypes() });
+
+  const [draft, update, clear] = usePersistentDraft<Draft>("bitween-draft-new-job", EMPTY);
+
+  useEffect(() => {
+    const picked = takePicked(params, "infotype");
+    if (picked !== null) {
+      update({ informationTypeId: picked });
+      setParams(
+        (prev) => {
+          const next = new URLSearchParams(prev);
+          next.delete("picked");
+          return next;
+        },
+        { replace: true },
+      );
+    }
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, []);
+
+  const create = useMutation({
+    mutationFn: () =>
+      api.createIntegration({
+        type: "Receiving",
+        name: draft.name,
+        informationTypeId: draft.informationTypeId!,
+        receiverId: draft.receiverId,
+        receiverProperties: draft.receiverProperties,
+        mapperId: draft.mapperId,
+        mapperProperties: draft.mapperProperties,
+        handlerId: draft.handlerId,
+        handlerProperties: draft.handlerProperties,
+        schedules: draft.schedules,
+        enabled: draft.enable,
+      }),
+    onSuccess: (created) => {
+      clear();
+      void queryClient.invalidateQueries();
+      navigate(`/subscriptions/${created.id}`);
+    },
+  });
+
+  const current = STEPS.indexOf(
+    draft.stage === "basics" ? "Basics" : draft.stage === "source" ? "Source & schedule" : draft.stage === "pipeline" ? "Pipeline" : "Review",
+  );
+
+  const infoTypeLabel = infoTypes.data?.find((t) => t.id === draft.informationTypeId)?.code ?? "—";
+
+  return (
+    <WizardShell
+      title="New scheduled job"
+      subtitle="A receiver that pulls documents in on a schedule and pushes them through a pipeline."
+      backTo="/subscriptions?types=scheduled-jobs"
+      backLabel="Integrations"
+      steps={STEPS}
+      current={current}
+    >
+      {draft.stage === "basics" && (
+        <>
+          <div className="mb-4 max-w-sm">
+            <Field label="Job name" htmlFor="sjw-name">
+              <TextInput
+                id="sjw-name"
+                value={draft.name}
+                autoFocus
+                placeholder="e.g. Coral orders receiver"
+                onChange={(e) => update({ name: e.target.value })}
+              />
+            </Field>
+          </div>
+          <p className="mb-2 text-[13px] font-medium text-ink-700">Which information type does it pull in?</p>
+          <InfoTypePicker
+            value={draft.informationTypeId}
+            onChange={(id) => update({ informationTypeId: id })}
+            detourCtx={{ to: here, label: "Creating a scheduled job" }}
+          />
+          <StepNav
+            onNext={() => update({ stage: "source" })}
+            nextDisabled={draft.name.trim().length < 2 || draft.informationTypeId === null}
+          />
+        </>
+      )}
+
+      {draft.stage === "source" && (
+        <>
+          <section>
+            <h2 className="text-[15px] font-semibold text-ink-900">Source</h2>
+            <p className="mb-3 text-[13px] text-ink-500">Where documents are pulled from.</p>
+            <AdapterConfig
+              kind="receiver"
+              adapterId={draft.receiverId}
+              properties={draft.receiverProperties}
+              onChange={(receiverId, receiverProperties) => update({ receiverId, receiverProperties })}
+              disabled={false}
+              required
+            />
+          </section>
+          <section className="mt-6">
+            <h2 className="text-[15px] font-semibold text-ink-900">Schedule</h2>
+            <p className="mb-3 text-[13px] text-ink-500">When the source is checked.</p>
+            <ScheduleEditor
+              schedules={draft.schedules}
+              onChange={(schedules) => update({ schedules })}
+              disabled={false}
+            />
+          </section>
+          <StepNav
+            onBack={() => update({ stage: "basics" })}
+            onNext={() => update({ stage: "pipeline" })}
+            nextDisabled={draft.receiverId === null || draft.schedules.length === 0}
+          />
+        </>
+      )}
+
+      {draft.stage === "pipeline" && (
+        <>
+          <div className="space-y-6">
+            <section>
+              <h2 className="text-[15px] font-semibold text-ink-900">Transformation</h2>
+              <p className="mb-3 text-[13px] text-ink-500">Reshapes each document before delivery. Optional.</p>
+              <AdapterConfig
+                kind="mapper"
+                adapterId={draft.mapperId}
+                properties={draft.mapperProperties}
+                onChange={(mapperId, mapperProperties) => update({ mapperId, mapperProperties })}
+                disabled={false}
+                noneLabel="None — documents pass through unchanged"
+              />
+            </section>
+            <section>
+              <h2 className="text-[15px] font-semibold text-ink-900">Delivery</h2>
+              <p className="mb-3 text-[13px] text-ink-500">Where each document ends up.</p>
+              <AdapterConfig
+                kind="handler"
+                adapterId={draft.handlerId}
+                properties={draft.handlerProperties}
+                onChange={(handlerId, handlerProperties) => update({ handlerId, handlerProperties })}
+                disabled={false}
+                required
+              />
+            </section>
+          </div>
+          <StepNav
+            onBack={() => update({ stage: "source" })}
+            onNext={() => update({ stage: "review" })}
+            nextDisabled={draft.handlerId === null}
+          />
+        </>
+      )}
+
+      {draft.stage === "review" && (
+        <>
+          <h2 className="mb-3 text-[15px] font-semibold text-ink-900">Review</h2>
+          <dl className="space-y-2.5 text-sm">
+            <ReviewRow label="Job" value={draft.name} />
+            <ReviewRow label="Pulls in" value={infoTypeLabel} />
+            <ReviewRow label="Source" value={receivers.data?.find((a) => a.id === draft.receiverId)?.label ?? "—"} />
+            <ReviewRow label="Schedule" value={schedulesSummary(draft.schedules)} />
+            <ReviewRow label="Delivery" value={handlers.data?.find((a) => a.id === draft.handlerId)?.label ?? "—"} />
+          </dl>
+          <div className="mt-4">
+            <Checkbox
+              label="Enable immediately"
+              description="Unchecked, the job is created disabled and never runs until enabled."
+              checked={draft.enable}
+              onChange={(e) => update({ enable: e.target.checked })}
+            />
+          </div>
+          <StepNav
+            onBack={() => update({ stage: "pipeline" })}
+            onNext={() => create.mutate()}
+            nextLabel="Create scheduled job"
+            busy={create.isPending}
+            error={create.error?.message}
+          />
+        </>
+      )}
+    </WizardShell>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/scheduled-retries/ScheduledRetriesPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/scheduled-retries/ScheduledRetriesPage.tsx
new file mode 100644
index 00000000..33fc4c20
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/scheduled-retries/ScheduledRetriesPage.tsx
@@ -0,0 +1,316 @@
+import { Fragment, useMemo, useState } from "react";
+import { Link, useSearchParams } from "react-router";
+import { keepPreviousData, useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { ChevronDown, ChevronRight, Play, X } from "lucide-react";
+import { api, type ScheduledRetryQuery } from "../../api";
+import { Can } from "../../auth/guards";
+import { useSession } from "../../auth/SessionContext";
+import { PageHeader } from "../../components/layout/PageHeader";
+import { Button, EmptyState, LoadingBlock } from "../../components/ui/basics";
+import { TextInput } from "../../components/ui/forms";
+import { SearchSelect } from "../../components/ui/SearchSelect";
+import { ConfirmDialog } from "../../components/ui/overlays";
+import { useIntegrationsCache } from "../../components/config/shared";
+import { formatDateTime, timeAgo, timeUntil } from "../../lib/dates";
+import { XchangeId } from "../exchanges/shared";
+
+const PAGE_SIZE = 25;
+
+const readQuery = (sp: URLSearchParams): ScheduledRetryQuery => ({
+  integrationId: sp.get("integrationId") ? Number(sp.get("integrationId")) : undefined,
+  informationTypeId: sp.get("informationTypeId") ? Number(sp.get("informationTypeId")) : undefined,
+  exception: sp.get("exception") ?? undefined,
+  offset: sp.get("offset") ? Number(sp.get("offset")) : 0,
+  limit: PAGE_SIZE,
+});
+
+/**
+ * Failed exchanges whose retry policy queued an automatic re-run. Rows are
+ * ordered soonest-first; "Run now" jumps the queue.
+ */
+export function ScheduledRetriesPage() {
+  const [searchParams, setSearchParams] = useSearchParams();
+  const query = useMemo(() => readQuery(searchParams), [searchParams]);
+  const [open, setOpen] = useState<Set<string>>(new Set());
+  const [runNowId, setRunNowId] = useState<string | null>(null);
+  const queryClient = useQueryClient();
+  const { can } = useSession();
+
+  const { data, isLoading } = useQuery({
+    queryKey: ["scheduled-retries", searchParams.toString()],
+    queryFn: () => api.searchScheduledRetries(query),
+    refetchInterval: 30_000,
+    placeholderData: keepPreviousData,
+  });
+
+  const integrations = useIntegrationsCache().data ?? [];
+  const infoTypes =
+    useQuery({ queryKey: ["information-types"], queryFn: () => api.listInformationTypes() }).data ?? [];
+
+  const setParam = (key: string, value: string | null, resetOffset = true) => {
+    const next = new URLSearchParams(searchParams);
+    if (value === null || value === "") next.delete(key);
+    else next.set(key, value);
+    if (resetOffset) next.delete("offset");
+    setSearchParams(next, { replace: true });
+  };
+
+  const activeFilterCount = ["integrationId", "informationTypeId", "exception"].filter((k) =>
+    searchParams.has(k),
+  ).length;
+
+  const runNow = useMutation({
+    mutationFn: (id: string) => api.runScheduledRetryNow(id),
+    onSuccess: () => {
+      void queryClient.invalidateQueries({ queryKey: ["scheduled-retries"] });
+      void queryClient.invalidateQueries({ queryKey: ["exchanges"] });
+    },
+  });
+
+  const rows = data?.result ?? [];
+  const total = data?.total ?? 0;
+
+  const toggleOpen = (id: string) =>
+    setOpen((prev) => {
+      const next = new Set(prev);
+      if (next.has(id)) next.delete(id);
+      else next.add(id);
+      return next;
+    });
+
+  return (
+    <div>
+      <PageHeader
+        title="Scheduled retries"
+        description="Failed exchanges the retry policies will automatically re-run — soonest first."
+        help={{
+          title: "How scheduled retries work",
+          body: (
+            <>
+              When an exchange fails, its integration's{" "}
+              <Link to="/retry-policies" className="font-medium text-crimson-700 hover:underline">
+                retry policy
+              </Link>{" "}
+              decides whether — and when — to try again. The retry job re-runs each entry at its
+              scheduled time; "Run now" executes one immediately instead of waiting.
+            </>
+          ),
+        }}
+      />
+
+      {/* — filters — */}
+      <div className="mb-4 grid grid-cols-2 gap-2 md:grid-cols-4">
+        <SearchSelect
+          aria-label="Filter by integration"
+          size="sm"
+          clearLabel="Any integration"
+          value={query.integrationId?.toString() ?? ""}
+          onChange={(v) => setParam("integrationId", v || null)}
+          options={integrations.map((i) => ({ value: String(i.id), label: i.name }))}
+        />
+        <SearchSelect
+          aria-label="Filter by information type"
+          size="sm"
+          clearLabel="Any information type"
+          value={query.informationTypeId?.toString() ?? ""}
+          onChange={(v) => setParam("informationTypeId", v || null)}
+          options={infoTypes.map((t) => ({ value: String(t.id), label: t.name, code: t.code }))}
+        />
+        <TextInput
+          aria-label="Filter by exception text"
+          className="!h-8 text-[13px]"
+          placeholder="Exception contains…"
+          defaultValue={query.exception ?? ""}
+          key={`exc-${query.exception ?? ""}`}
+          onBlur={(e) => e.target.value !== (query.exception ?? "") && setParam("exception", e.target.value || null)}
+          onKeyDown={(e) => e.key === "Enter" && setParam("exception", e.currentTarget.value || null)}
+        />
+        {activeFilterCount > 0 && (
+          <button
+            onClick={() => setSearchParams(new URLSearchParams(), { replace: true })}
+            className="inline-flex h-8 items-center gap-1 justify-self-start rounded-lg px-2 text-[13px] font-medium text-crimson-700 hover:bg-crimson-50"
+          >
+            <X className="size-3.5" aria-hidden />
+            Clear filters
+          </button>
+        )}
+      </div>
+
+      {isLoading ? (
+        <LoadingBlock />
+      ) : rows.length === 0 ? (
+        <EmptyState title="Nothing waiting to retry">
+          {activeFilterCount > 0
+            ? "No pending auto-retries match these filters."
+            : "When a retry policy schedules an automatic re-run for a failed exchange, it appears here."}
+        </EmptyState>
+      ) : (
+        <div className="overflow-x-auto rounded-xl border border-ink-200 bg-white">
+          <table className="w-full text-left text-sm">
+            <thead>
+              <tr className="border-b border-ink-100 text-[11px] font-medium tracking-wide text-ink-400 uppercase">
+                <th className="py-2.5 pl-4">Runs</th>
+                <th className="px-3 py-2.5">Exchange</th>
+                <th className="px-3 py-2.5">Flow</th>
+                <th className="px-3 py-2.5">Failed</th>
+                <th className="px-3 py-2.5 text-right">
+                  <span className="sr-only">Actions</span>
+                </th>
+                <th className="w-8 px-2 py-2.5" />
+              </tr>
+            </thead>
+            <tbody>
+              {rows.map((r) => (
+                <Fragment key={r.id}>
+                  <tr
+                    onClick={() => toggleOpen(r.id)}
+                    className="cursor-pointer border-b border-ink-50 transition-colors last:border-0 hover:bg-ink-50/60"
+                  >
+                    <td className="py-2.5 pl-4 whitespace-nowrap">
+                      <span className="font-medium text-ink-800">{timeUntil(r.on)}</span>
+                      <span className="block text-xs text-ink-400">{formatDateTime(r.on)}</span>
+                    </td>
+                    {/* Only the links and the button swallow the click, not the cells
+                        around them — a whole cell opting out left most of a
+                        cursor-pointer row doing nothing when clicked. */}
+                    <td className="px-3 py-2.5">
+                      <span className="flex items-center gap-1.5">
+                        <XchangeId id={r.id} />
+                        <Link
+                          to={`/exchanges?ids=${encodeURIComponent(r.id)}`}
+                          title="Open in Exchanges"
+                          onClick={(e) => e.stopPropagation()}
+                          className="text-xs font-medium text-ink-500 hover:text-crimson-700 hover:underline"
+                        >
+                          view
+                        </Link>
+                      </span>
+                    </td>
+                    <td className="px-3 py-2.5">
+                      <span className="flex flex-wrap items-center gap-1 text-[13px]">
+                        <Link
+                          to={`/information-types/${r.informationTypeId}`}
+                          onClick={(e) => e.stopPropagation()}
+                          className="font-mono text-xs text-ink-600 hover:text-crimson-700 hover:underline"
+                        >
+                          {r.informationTypeCode}
+                        </Link>
+                        {r.integrationName && (
+                          <>
+                            <span className="text-ink-300">→</span>
+                            <Link
+                              to={`/subscriptions/${r.integrationId}`}
+                              onClick={(e) => e.stopPropagation()}
+                              className="font-medium text-ink-800 hover:text-crimson-700 hover:underline"
+                            >
+                              {r.integrationName}
+                            </Link>
+                          </>
+                        )}
+                      </span>
+                    </td>
+                    <td className="px-3 py-2.5 whitespace-nowrap text-ink-500">{timeAgo(r.startedOn)}</td>
+                    <td className="px-3 py-2.5 text-right">
+                      {/* Matches what runNow itself enforces: the retry operates on an exchange. */}
+                      <Can permission="exchanges.operate">
+                        <Button
+                          size="sm"
+                          onClick={(e) => {
+                            e.stopPropagation();
+                            setRunNowId(r.id);
+                          }}
+                        >
+                          <Play className="size-3.5" aria-hidden />
+                          Run now
+                        </Button>
+                      </Can>
+                    </td>
+                    <td className="px-2 py-2.5 text-ink-400">
+                      {open.has(r.id) ? <ChevronDown className="size-4" /> : <ChevronRight className="size-4" />}
+                    </td>
+                  </tr>
+                  {open.has(r.id) && (
+                    <tr className="border-b border-ink-50 last:border-0">
+                      <td colSpan={6} className="bg-ink-50/40 px-4 py-3">
+                        {/* The policy is what decided the "Runs" time, so it's the one thing
+                            the exception alone can't explain. Note this is the integration's
+                            policy as it stands now — editing a policy doesn't reschedule
+                            retries it already queued. */}
+                        <p className="mb-2 text-[13px] text-ink-500">
+                          Scheduled by{" "}
+                          {r.retryPolicyId !== null ? (
+                            can("retry-policies.view") ? (
+                              <Link
+                                to={`/retry-policies/${r.retryPolicyId}`}
+                                className="font-medium text-crimson-700 hover:underline"
+                              >
+                                {r.retryPolicyName}
+                              </Link>
+                            ) : (
+                              <span className="font-medium text-ink-700">{r.retryPolicyName}</span>
+                            )
+                          ) : r.integrationId !== null ? (
+                            <>
+                              the retry policy set on{" "}
+                              <Link
+                                to={`/subscriptions/${r.integrationId}`}
+                                className="font-medium text-crimson-700 hover:underline"
+                              >
+                                {r.integrationName ?? "its integration"}
+                              </Link>
+                            </>
+                          ) : (
+                            "a retry policy that has since been removed"
+                          )}
+                        </p>
+                        {r.exception ? (
+                          <pre className="max-h-40 overflow-auto rounded-lg bg-danger-50 px-3 py-2.5 font-mono text-[11px] leading-relaxed whitespace-pre-wrap text-danger-800">
+                            {r.exception}
+                          </pre>
+                        ) : (
+                          <p className="text-sm text-ink-500">No exception was recorded.</p>
+                        )}
+                      </td>
+                    </tr>
+                  )}
+                </Fragment>
+              ))}
+            </tbody>
+          </table>
+
+          <div className="flex items-center justify-between border-t border-ink-100 px-4 py-2.5 text-[13px] text-ink-500">
+            <span>
+              Showing {query.offset + 1}–{Math.min(query.offset + PAGE_SIZE, total)} of {total}
+            </span>
+            <span className="flex gap-1.5">
+              <Button
+                size="sm"
+                disabled={query.offset === 0}
+                onClick={() => setParam("offset", String(Math.max(0, query.offset - PAGE_SIZE)), false)}
+              >
+                Previous
+              </Button>
+              <Button
+                size="sm"
+                disabled={query.offset + PAGE_SIZE >= total}
+                onClick={() => setParam("offset", String(query.offset + PAGE_SIZE), false)}
+              >
+                Next
+              </Button>
+            </span>
+          </div>
+        </div>
+      )}
+
+      {runNowId && (
+        <ConfirmDialog
+          title="Run this retry now?"
+          body={`The scheduled auto-retry for ${runNowId} runs immediately instead of waiting for its slot.`}
+          confirmLabel="Run now"
+          onConfirm={() => runNow.mutateAsync(runNowId)}
+          onClose={() => setRunNowId(null)}
+        />
+      )}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/settings/SettingsPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/settings/SettingsPage.tsx
new file mode 100644
index 00000000..d37cc91a
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/settings/SettingsPage.tsx
@@ -0,0 +1,305 @@
+import { useEffect, useState } from "react";
+import { useSearchParams } from "react-router";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { api, resetAppConfig, type SettingRow } from "../../api";
+import { useSessionCan } from "../../auth/guards";
+import { PageHeader } from "../../components/layout/PageHeader";
+import { Badge, LoadingBlock } from "../../components/ui/basics";
+import { Checkbox, TextInput } from "../../components/ui/forms";
+import { UnsavedBar } from "../../components/ui/Panel";
+import { settingsDraft, useSettingsDraft } from "../../lib/settingsDraft";
+
+/** Sections, in the order the backend catalog lists them. */
+const sectionsOf = (rows: SettingRow[]): string[] => [...new Set(rows.map((r) => r.section))];
+
+const formatDefault = (row: SettingRow): string => {
+  if (row.kind === "boolean") return row.defaultValue === "true" ? "On" : "Off";
+  return row.defaultValue.trim() ? row.defaultValue : "(empty)";
+};
+
+const formatValue = (row: SettingRow, value: string): string => {
+  if (!value.trim()) return "Not set";
+  return row.kind === "boolean" ? (value === "true" ? "On" : "Off") : value;
+};
+
+/**
+ * A setting this instance was started with. Read once at startup, so there's nothing to change
+ * here — the row exists so an administrator can see what the instance is actually running on
+ * without shelling into it. A `presence` row's value never leaves the server.
+ */
+function EnvironmentSettingRow({ row }: { row: SettingRow }) {
+  return (
+    <div className="grid grid-cols-1 gap-x-5 gap-y-1.5 py-3 first:pt-0 last:pb-0 sm:grid-cols-[17rem_1fr_auto] sm:items-start">
+      <div className="min-w-0">
+        <div className="flex flex-wrap items-center gap-1.5">
+          <span className="text-sm font-medium text-ink-800">{row.label}</span>
+          <Badge>Environment</Badge>
+        </div>
+        <p className="mt-0.5 text-[13px] text-ink-500">{row.description}</p>
+      </div>
+
+      <div className="min-w-0 sm:pt-0.5">
+        {row.access === "presence" ? (
+          <Badge tone={row.hasValue ? "ok" : "neutral"}>{row.hasValue ? "Set" : "Not set"}</Badge>
+        ) : (
+          <span
+            className={`font-mono text-sm break-all ${row.value?.trim() ? "text-ink-700" : "text-ink-400"}`}
+          >
+            {formatValue(row, row.value ?? "")}
+          </span>
+        )}
+      </div>
+
+      <div />
+    </div>
+  );
+}
+
+function SettingRowEditor({
+  row,
+  staged,
+  canEdit,
+}: {
+  row: SettingRow;
+  /** undefined = untouched; null = reset-to-default pending; string = new value pending. */
+  staged: string | null | undefined;
+  canEdit: boolean;
+}) {
+  const effective = staged !== undefined ? (staged ?? row.defaultValue) : (row.value ?? row.defaultValue);
+  const [draft, setDraft] = useState(effective);
+  const [replacing, setReplacing] = useState(false);
+  const [focused, setFocused] = useState(false);
+
+  useEffect(() => {
+    if (!focused) {
+      setDraft(effective);
+      if (staged === undefined) setReplacing(false);
+    }
+  }, [effective, focused, staged]);
+
+  const stage = (value: string | null) => settingsDraft.stage(row, value);
+
+  const commitIfChanged = (value: string) => {
+    setFocused(false);
+    if (value !== effective) stage(value);
+  };
+
+  // Shows as overridden: a pending value, or (untouched and) a stored value that isn't the default.
+  const showsOverridden = staged !== undefined ? staged !== null : row.overridden;
+  // A secret's value never reaches the browser, so "there is one" is all we can show.
+  const masked = row.secret && row.hasValue && staged === undefined && !replacing;
+  // `editable: false` means a secret with no encryption key configured on this instance.
+  const disabled = !canEdit || !row.editable;
+
+  return (
+    <div className="grid grid-cols-1 gap-x-5 gap-y-1.5 py-3 first:pt-0 last:pb-0 sm:grid-cols-[17rem_1fr_auto] sm:items-start">
+      <div className="min-w-0">
+        <div className="flex flex-wrap items-center gap-1.5">
+          <span className="text-sm font-medium text-ink-800">{row.label}</span>
+          {row.secret && <Badge>Secret</Badge>}
+          {staged !== undefined && <Badge tone="crimson">Unsaved</Badge>}
+        </div>
+        <p className="mt-0.5 text-[13px] text-ink-500">{row.description}</p>
+      </div>
+
+      <div className="min-w-0">
+        {row.kind === "boolean" ? (
+          <Checkbox
+            label={effective === "true" ? "On" : "Off"}
+            checked={effective === "true"}
+            disabled={disabled}
+            onChange={(e) => stage(e.target.checked ? "true" : "false")}
+          />
+        ) : row.kind === "color" ? (
+          <div className="flex items-center gap-2">
+            <input
+              type="color"
+              aria-label={`${row.label} picker`}
+              value={/^#[0-9a-fA-F]{6}$/.test(draft) ? draft : effective}
+              disabled={disabled}
+              onChange={(e) => {
+                setDraft(e.target.value);
+                stage(e.target.value);
+              }}
+              className="h-9.5 w-12 shrink-0 cursor-pointer rounded-lg border border-ink-200 bg-white p-1 disabled:cursor-not-allowed"
+            />
+            <TextInput
+              type="text"
+              aria-label={row.label}
+              value={draft}
+              disabled={disabled}
+              onFocus={() => setFocused(true)}
+              onChange={(e) => setDraft(e.target.value)}
+              onBlur={(e) => {
+                if (/^#[0-9a-fA-F]{6}$/.test(e.target.value)) {
+                  commitIfChanged(e.target.value);
+                } else {
+                  setFocused(false);
+                  setDraft(effective);
+                }
+              }}
+              className="max-w-40 font-mono uppercase"
+            />
+          </div>
+        ) : masked ? (
+          <div className="flex h-9.5 items-center justify-between rounded-lg border border-ink-200 bg-ink-50 px-3">
+            <span className="font-mono text-sm tracking-widest text-ink-400">••••••••</span>
+            {!disabled && (
+              <button
+                type="button"
+                onClick={() => {
+                  setReplacing(true);
+                  setDraft("");
+                }}
+                className="text-[13px] font-medium text-crimson-700 hover:underline"
+              >
+                Replace
+              </button>
+            )}
+          </div>
+        ) : (
+          <TextInput
+            aria-label={row.label}
+            value={draft}
+            disabled={disabled}
+            placeholder={row.defaultValue}
+            type={row.kind === "number" ? "number" : "text"}
+            onFocus={() => setFocused(true)}
+            onChange={(e) => setDraft(e.target.value)}
+            onBlur={(e) => {
+              if (row.kind === "number" && e.target.value.trim() !== "" && Number.isNaN(Number(e.target.value))) {
+                setFocused(false);
+                setDraft(effective);
+                return;
+              }
+              commitIfChanged(e.target.value.trim());
+            }}
+          />
+        )}
+
+        {!row.editable ? (
+          <p className="mt-1 text-xs text-warn-700">
+            Stored secrets need <span className="font-mono">Bitween:SettingsEncryptionKey</span> configured on this
+            instance. Until then this value comes from configuration and can't be changed here.
+          </p>
+        ) : (
+          !row.secret &&
+          !showsOverridden && (
+            <p className="mt-1 text-xs text-ink-400">
+              Default: <span className="font-mono">{formatDefault(row)}</span>
+            </p>
+          )
+        )}
+      </div>
+
+      <div className="sm:pt-1.5">
+        {showsOverridden && canEdit && row.editable && (
+          <button
+            type="button"
+            onClick={() => stage(null)}
+            className="text-[13px] font-medium whitespace-nowrap text-crimson-700 hover:underline"
+          >
+            Reset to default
+          </button>
+        )}
+      </div>
+    </div>
+  );
+}
+
+/**
+ * Edits stage into a draft (never saved on the spot). The draft previews
+ * live across the whole app — leave this page and look around; the shell's
+ * banner brings you back. Save writes everything; Discard reverts it all.
+ */
+export function SettingsPage() {
+  const canEdit = useSessionCan("settings.edit");
+  const queryClient = useQueryClient();
+  const { data: rows, isLoading } = useQuery({ queryKey: ["settings"], queryFn: () => api.listSettings() });
+  const draft = useSettingsDraft();
+
+  const [searchParams, setSearchParams] = useSearchParams();
+  const sections = sectionsOf(rows ?? []);
+  const fromUrl = searchParams.get("section");
+  const section = fromUrl && sections.includes(fromUrl) ? fromUrl : sections[0];
+  const setSection = (s: string) => {
+    const next = new URLSearchParams(searchParams);
+    next.set("section", s);
+    setSearchParams(next, { replace: true });
+  };
+
+  const saveAll = useMutation({
+    mutationFn: async () => {
+      for (const [key, value] of Object.entries(settingsDraft.get())) {
+        await api.updateSetting(key, value);
+      }
+    },
+    onSuccess: () => {
+      settingsDraft.discardAll();
+      void queryClient.invalidateQueries({ queryKey: ["settings"] });
+      // Branding everywhere reads the memoised config payload, so it has to be re-fetched
+      // for a saved brand change to stick once the draft preview is dropped.
+      resetAppConfig();
+      void queryClient.invalidateQueries({ queryKey: ["appConfig"] });
+    },
+  });
+
+  if (isLoading) return <LoadingBlock label="Loading settings…" />;
+  if (!rows) return null;
+
+  const dirtyCount = Object.keys(draft).length;
+  const sectionRows = rows.filter((r) => r.section === section);
+
+  return (
+    <div className={dirtyCount > 0 ? "pb-20" : ""}>
+      <PageHeader
+        title="Settings"
+        description="Instance-wide configuration. Changes preview live across the app — walk around and look, then save (or discard) here. Rows marked Environment are fixed by how this instance was started."
+      />
+
+      <div className="mb-4 flex flex-wrap gap-2">
+        {sections.map((s) => {
+          const active = s === section;
+          const hasUnsaved = rows.some((r) => r.section === s && r.key in draft);
+          return (
+            <button
+              key={s}
+              type="button"
+              onClick={() => setSection(s)}
+              aria-pressed={active}
+              className={`inline-flex items-center gap-1.5 rounded-full px-3 py-1.5 text-[13px] font-medium transition-colors ${
+                active
+                  ? "bg-ink-900 text-white"
+                  : "border border-ink-200 bg-white text-ink-600 hover:border-ink-300 hover:bg-ink-50"
+              }`}
+            >
+              {s}
+              {hasUnsaved && <span className="size-1.5 rounded-full bg-crimson-600" title="Unsaved changes" aria-hidden />}
+            </button>
+          );
+        })}
+      </div>
+
+      <div className="max-w-3xl rounded-xl border border-ink-200 bg-white p-5">
+        <div className="divide-y divide-ink-100">
+          {sectionRows.map((row) =>
+            row.access === "editable" ? (
+              <SettingRowEditor key={row.key} row={row} staged={draft[row.key]} canEdit={canEdit} />
+            ) : (
+              <EnvironmentSettingRow key={row.key} row={row} />
+            ),
+          )}
+        </div>
+      </div>
+
+      {dirtyCount > 0 && (
+        <UnsavedBar
+          busy={saveAll.isPending}
+          error={saveAll.error?.message}
+          onSave={() => saveAll.mutate()}
+          onDiscard={() => settingsDraft.discardAll()}
+        />
+      )}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/team/AddMemberDialog.tsx b/SW.Bitween.Web/ClientApp/src/pages/team/AddMemberDialog.tsx
new file mode 100644
index 00000000..3d464e05
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/team/AddMemberDialog.tsx
@@ -0,0 +1,102 @@
+import { useState, type FormEvent } from "react";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { api, ApiRequestError } from "../../api";
+import { Button, FormError } from "../../components/ui/basics";
+import { Checkbox, Field, PasswordInput, TextInput } from "../../components/ui/forms";
+import { Dialog } from "../../components/ui/overlays";
+
+export function AddMemberDialog({ onClose }: { onClose: () => void }) {
+  const queryClient = useQueryClient();
+  const roles = useQuery({ queryKey: ["roles"], queryFn: () => api.listRoles() });
+
+  const [displayName, setDisplayName] = useState("");
+  const [email, setEmail] = useState("");
+  const [password, setPassword] = useState("");
+  const [roleIds, setRoleIds] = useState<string[]>([]);
+
+  const create = useMutation({
+    mutationFn: () => api.createUser({ displayName, email, password, roleIds }),
+    onSuccess: () => {
+      void queryClient.invalidateQueries({ queryKey: ["users"] });
+      void queryClient.invalidateQueries({ queryKey: ["roles"] });
+      onClose();
+    },
+  });
+
+  const toggleRole = (id: string) =>
+    setRoleIds((prev) => (prev.includes(id) ? prev.filter((r) => r !== id) : [...prev, id]));
+
+  const submit = (e: FormEvent) => {
+    e.preventDefault();
+    create.mutate();
+  };
+
+  return (
+    <Dialog title="Add a member" onClose={onClose}>
+      <form onSubmit={submit} className="space-y-4">
+        <Field label="Name" htmlFor="member-name">
+          <TextInput
+            id="member-name"
+            required
+            autoFocus
+            value={displayName}
+            onChange={(e) => setDisplayName(e.target.value)}
+            placeholder="Jane Cooper"
+          />
+        </Field>
+
+        <Field label="Email" htmlFor="member-email">
+          <TextInput
+            id="member-email"
+            type="email"
+            required
+            value={email}
+            onChange={(e) => setEmail(e.target.value)}
+            placeholder="colleague@company.com"
+          />
+        </Field>
+
+        <Field
+          label="Password"
+          htmlFor="member-password"
+          hint="Pass this on to them yourself — Bitween doesn't send mail. They can change it from their profile."
+        >
+          <PasswordInput
+            id="member-password"
+            required
+            minLength={8}
+            value={password}
+            onChange={(e) => setPassword(e.target.value)}
+            placeholder="At least 8 characters"
+          />
+        </Field>
+
+        <fieldset>
+          <legend className="mb-2 block text-[13px] font-medium text-ink-700">Roles</legend>
+          <div className="max-h-56 space-y-2.5 overflow-y-auto rounded-lg border border-ink-200 p-3">
+            {(roles.data ?? []).map((role) => (
+              <Checkbox
+                key={role.id}
+                label={role.name}
+                description={role.description}
+                checked={roleIds.includes(role.id)}
+                onChange={() => toggleRole(role.id)}
+              />
+            ))}
+          </div>
+        </fieldset>
+
+        <FormError>
+          {create.error instanceof ApiRequestError ? create.error.message : create.error?.message}
+        </FormError>
+
+        <div className="flex justify-end gap-2">
+          <Button onClick={onClose}>Cancel</Button>
+          <Button type="submit" variant="primary" busy={create.isPending}>
+            Add member
+          </Button>
+        </div>
+      </form>
+    </Dialog>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/team/MemberDrawer.tsx b/SW.Bitween.Web/ClientApp/src/pages/team/MemberDrawer.tsx
new file mode 100644
index 00000000..47805ea8
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/team/MemberDrawer.tsx
@@ -0,0 +1,272 @@
+import { useEffect, useState, type ReactNode } from "react";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { Check, KeyRound, Trash2, UserRoundCheck, UserRoundX, X } from "lucide-react";
+import { api } from "../../api";
+import { Can } from "../../auth/guards";
+import { useSession } from "../../auth/SessionContext";
+import { Avatar } from "../../components/ui/Avatar";
+import { CopyField } from "../../components/ui/CopyField";
+import { Badge, Button, FormError, LoadingBlock } from "../../components/ui/basics";
+import { Checkbox, PasswordInput } from "../../components/ui/forms";
+import { ConfirmDialog } from "../../components/ui/overlays";
+import { formatDate, timeAgo } from "../../lib/dates";
+import { statusBadge } from "./MembersTab";
+
+function Section({ title, children }: { title: string; children: ReactNode }) {
+  return (
+    <section className="border-t border-ink-100 px-5 py-4">
+      <h3 className="mb-3 text-xs font-semibold tracking-wide text-ink-500 uppercase">{title}</h3>
+      {children}
+    </section>
+  );
+}
+
+export function MemberDrawer({ userId, onClose }: { userId: string; onClose: () => void }) {
+  const { session, can } = useSession();
+  const queryClient = useQueryClient();
+
+  const user = useQuery({ queryKey: ["user", userId], queryFn: () => api.getUser(userId), retry: false });
+  const roles = useQuery({ queryKey: ["roles"], queryFn: () => api.listRoles() });
+  const [draftRoleIds, setDraftRoleIds] = useState<string[] | null>(null);
+  const [confirming, setConfirming] = useState<"remove" | null>(null);
+  const [newPassword, setNewPassword] = useState("");
+  // The password that was just set, kept on screen deliberately. Bitween sends no
+  // mail, so the admin has to pass it on themselves — clearing the field on success
+  // threw away the one thing they still needed, with nothing to say it had worked.
+  const [issuedPassword, setIssuedPassword] = useState<string | null>(null);
+
+  useEffect(() => {
+    const onKey = (e: KeyboardEvent) => e.key === "Escape" && onClose();
+    document.addEventListener("keydown", onKey);
+    return () => document.removeEventListener("keydown", onKey);
+  }, [onClose]);
+
+  const invalidate = () => {
+    void queryClient.invalidateQueries({ queryKey: ["users"] });
+    void queryClient.invalidateQueries({ queryKey: ["user", userId] });
+    void queryClient.invalidateQueries({ queryKey: ["roles"] });
+  };
+
+  const saveRoles = useMutation({
+    mutationFn: (roleIds: string[]) => api.updateUserRoles(userId, roleIds),
+    onSuccess: () => {
+      setDraftRoleIds(null);
+      invalidate();
+    },
+  });
+  const setDisabled = useMutation({
+    mutationFn: (disabled: boolean) => api.setUserDisabled(userId, disabled),
+    onSuccess: invalidate,
+  });
+  const setPassword = useMutation({
+    mutationFn: (password: string) => api.setUserPassword(userId, password),
+    onSuccess: (_result, password) => {
+      setIssuedPassword(password);
+      setNewPassword("");
+    },
+  });
+
+  const isSelf = session?.user.id === userId;
+  const editable = can("users.edit");
+
+  const body = () => {
+    if (user.isPending) return <LoadingBlock label="Loading member…" />;
+    if (user.isError)
+      return <p className="px-5 py-8 text-sm text-ink-500">This member no longer exists.</p>;
+    const u = user.data;
+    const currentRoles = draftRoleIds ?? u.roleIds;
+    const rolesDirty =
+      draftRoleIds !== null &&
+      (draftRoleIds.length !== u.roleIds.length || draftRoleIds.some((r) => !u.roleIds.includes(r)));
+
+    return (
+      <>
+        <div className="flex items-start gap-4 px-5 pt-5 pb-4">
+          <Avatar name={u.displayName} size="lg" dimmed={u.status === "disabled"} />
+          <div className="min-w-0 flex-1">
+            <div className="flex flex-wrap items-center gap-2">
+              <h2 className="truncate text-lg font-semibold tracking-tight text-ink-900">
+                {u.displayName}
+              </h2>
+              {isSelf && <Badge tone="crimson">You</Badge>}
+            </div>
+            <p className="truncate font-mono text-[13px] text-ink-500">{u.email}</p>
+            <div className="mt-1.5">{statusBadge(u.status)}</div>
+          </div>
+        </div>
+
+        <Section title="Roles">
+          {editable ? (
+            <div className="space-y-2.5">
+              {(roles.data ?? []).map((role) => (
+                <Checkbox
+                  key={role.id}
+                  label={role.name}
+                  description={role.description}
+                  checked={currentRoles.includes(role.id)}
+                  onChange={() =>
+                    setDraftRoleIds(
+                      currentRoles.includes(role.id)
+                        ? currentRoles.filter((r) => r !== role.id)
+                        : [...currentRoles, role.id],
+                    )
+                  }
+                />
+              ))}
+              <FormError>{saveRoles.error?.message}</FormError>
+              {rolesDirty && (
+                <div className="flex gap-2 pt-1">
+                  <Button size="sm" variant="primary" busy={saveRoles.isPending} onClick={() => saveRoles.mutate(draftRoleIds!)}>
+                    Save roles
+                  </Button>
+                  <Button size="sm" onClick={() => setDraftRoleIds(null)}>
+                    Discard
+                  </Button>
+                </div>
+              )}
+            </div>
+          ) : (
+            <div className="flex flex-wrap gap-1.5">
+              {u.roleIds.map((rid) => (
+                <Badge key={rid}>{roles.data?.find((r) => r.id === rid)?.name ?? "…"}</Badge>
+              ))}
+            </div>
+          )}
+        </Section>
+
+        <Section title="Details">
+          <dl className="space-y-2 text-sm">
+            <div className="flex justify-between gap-4">
+              <dt className="text-ink-500">Member since</dt>
+              <dd className="text-ink-800">{formatDate(u.createdOn)}</dd>
+            </div>
+            <div className="flex justify-between gap-4">
+              <dt className="text-ink-500">Last active</dt>
+              <dd className="text-ink-800">{u.lastActiveOn ? timeAgo(u.lastActiveOn) : "Never"}</dd>
+            </div>
+          </dl>
+        </Section>
+
+        {(editable || can("users.delete")) && !isSelf && (
+          <Section title="Account actions">
+            <div className="space-y-3">
+              {editable && issuedPassword && (
+                <div className="space-y-2 rounded-lg border border-ok-200 bg-ok-50 p-3">
+                  <p className="flex items-center gap-1.5 text-[13px] font-medium text-ok-800">
+                    <Check className="size-4 shrink-0" aria-hidden />
+                    Password set for {u.displayName}
+                  </p>
+                  <CopyField value={issuedPassword} label="New password" />
+                  <p className="text-[13px] text-ink-600">
+                    They can sign in with it now. Bitween sends no email, so copy it and pass it on
+                    yourself — it won't be shown again once you dismiss this.
+                  </p>
+                  <div className="flex justify-end">
+                    <Button size="sm" onClick={() => setIssuedPassword(null)}>
+                      Done
+                    </Button>
+                  </div>
+                </div>
+              )}
+              {editable && !issuedPassword && (
+                <form
+                  className="space-y-2"
+                  onSubmit={(e) => {
+                    e.preventDefault();
+                    setPassword.mutate(newPassword);
+                  }}
+                >
+                  <div className="flex gap-2">
+                    <PasswordInput
+                      required
+                      minLength={8}
+                      value={newPassword}
+                      onChange={(e) => setNewPassword(e.target.value)}
+                      placeholder="New password"
+                      aria-label="New password"
+                    />
+                    <Button size="sm" type="submit" busy={setPassword.isPending}>
+                      <KeyRound className="size-3.5" /> Set password
+                    </Button>
+                  </div>
+                  <p className="text-[13px] text-ink-500">
+                    There's no reset email, so set it here and pass it on yourself.
+                  </p>
+                  <FormError>{setPassword.error?.message}</FormError>
+                </form>
+              )}
+              {editable && (
+                <div>
+                  <Button
+                    size="sm"
+                    busy={setDisabled.isPending}
+                    onClick={() => setDisabled.mutate(u.status === "active")}
+                  >
+                    {u.status === "active" ? (
+                      <>
+                        <UserRoundX className="size-3.5" /> Disable account
+                      </>
+                    ) : (
+                      <>
+                        <UserRoundCheck className="size-3.5" /> Re-enable account
+                      </>
+                    )}
+                  </Button>
+                  <p className="mt-1 text-[13px] text-ink-500">
+                    Disabled members can't sign in, but keep their history and roles.
+                  </p>
+                </div>
+              )}
+              <FormError>{setDisabled.error?.message}</FormError>
+              <Can permission="users.delete">
+                <Button size="sm" variant="danger" onClick={() => setConfirming("remove")}>
+                  <Trash2 className="size-3.5" /> Remove from team
+                </Button>
+              </Can>
+            </div>
+          </Section>
+        )}
+      </>
+    );
+  };
+
+  return (
+    <div className="fixed inset-0 z-50">
+      <div className="absolute inset-0 bg-ink-950/40" onClick={onClose} />
+      <aside
+        role="dialog"
+        aria-modal="true"
+        aria-label="Member details"
+        className="absolute inset-y-0 right-0 flex w-full max-w-md flex-col overflow-y-auto bg-white shadow-2xl"
+      >
+        <button
+          onClick={onClose}
+          aria-label="Close"
+          className="absolute top-4 right-4 rounded-md p-1 text-ink-400 hover:bg-ink-100 hover:text-ink-700"
+        >
+          <X className="size-5" />
+        </button>
+        {body()}
+      </aside>
+
+      {confirming === "remove" && user.data && (
+        <ConfirmDialog
+          title="Remove this member?"
+          body={
+            <>
+              <strong className="font-medium text-ink-800">{user.data.displayName}</strong> will lose
+              access immediately. This can't be undone.
+            </>
+          }
+          confirmLabel="Remove member"
+          onConfirm={async () => {
+            await api.deleteUser(userId);
+            invalidate();
+            onClose();
+          }}
+          onClose={() => setConfirming(null)}
+        />
+      )}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/team/MembersTab.tsx b/SW.Bitween.Web/ClientApp/src/pages/team/MembersTab.tsx
new file mode 100644
index 00000000..0bfd0ef4
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/team/MembersTab.tsx
@@ -0,0 +1,184 @@
+import { useMemo } from "react";
+import { useNavigate, useParams, useSearchParams } from "react-router";
+import { useQuery } from "@tanstack/react-query";
+import { Search, UserPlus, UsersRound } from "lucide-react";
+import { api, type User, type UserStatus } from "../../api";
+import { Can } from "../../auth/guards";
+import { Avatar } from "../../components/ui/Avatar";
+import { Badge, Button, EmptyState, LoadingBlock } from "../../components/ui/basics";
+import { timeAgo } from "../../lib/dates";
+import { AddMemberDialog } from "./AddMemberDialog";
+import { MemberDrawer } from "./MemberDrawer";
+
+const STATUS_FILTERS: { value: string; label: string }[] = [
+  { value: "all", label: "All" },
+  { value: "active", label: "Active" },
+  { value: "disabled", label: "Disabled" },
+];
+
+export function statusBadge(status: UserStatus) {
+  if (status === "active") return <Badge tone="ok">Active</Badge>;
+  return <Badge tone="neutral">Disabled</Badge>;
+}
+
+export function MembersTab() {
+  const [searchParams, setSearchParams] = useSearchParams();
+  const navigate = useNavigate();
+  const { id: openMemberId } = useParams();
+
+  const q = searchParams.get("q") ?? "";
+  const status = searchParams.get("status") ?? "all";
+  const addOpen = searchParams.get("add") === "1";
+
+  const users = useQuery({ queryKey: ["users"], queryFn: () => api.listUsers() });
+  const roles = useQuery({ queryKey: ["roles"], queryFn: () => api.listRoles() });
+
+  const setParam = (key: string, value: string | null) => {
+    setSearchParams(
+      (prev) => {
+        const next = new URLSearchParams(prev);
+        if (value) next.set(key, value);
+        else next.delete(key);
+        return next;
+      },
+      { replace: key === "q" },
+    );
+  };
+
+  const roleName = (id: string) => roles.data?.find((r) => r.id === id)?.name ?? "…";
+
+  const filtered = useMemo(() => {
+    const needle = q.trim().toLowerCase();
+    return (users.data ?? []).filter((u) => {
+      if (status !== "all" && u.status !== status) return false;
+      if (!needle) return true;
+      return (
+        u.displayName.toLowerCase().includes(needle) || u.email.toLowerCase().includes(needle)
+      );
+    });
+  }, [users.data, q, status]);
+
+  const openMember = (user: User) =>
+    navigate(`/team/members/${user.id}?${searchParams.toString()}`);
+
+  return (
+    <div>
+      <div className="mb-4 flex flex-wrap items-center gap-3">
+        <div className="relative min-w-56 flex-1 sm:max-w-xs">
+          <Search className="pointer-events-none absolute top-1/2 left-3 size-4 -translate-y-1/2 text-ink-400" />
+          <input
+            type="search"
+            value={q}
+            onChange={(e) => setParam("q", e.target.value || null)}
+            placeholder="Search by name or email"
+            aria-label="Search members"
+            className="h-9 w-full rounded-lg border border-ink-200 bg-white pr-3 pl-9 text-sm placeholder:text-ink-400 focus:border-crimson-400 focus:ring-2 focus:ring-crimson-100 focus:outline-none"
+          />
+        </div>
+
+        <div className="flex rounded-lg border border-ink-200 bg-white p-0.5">
+          {STATUS_FILTERS.map((f) => (
+            <button
+              key={f.value}
+              onClick={() => setParam("status", f.value === "all" ? null : f.value)}
+              className={`rounded-md px-2.5 py-1 text-[13px] font-medium transition-colors ${
+                status === f.value ? "bg-ink-800 text-white" : "text-ink-500 hover:text-ink-800"
+              }`}
+            >
+              {f.label}
+            </button>
+          ))}
+        </div>
+
+        <div className="ml-auto">
+          <Can permission="users.create">
+            <Button variant="primary" onClick={() => setParam("add", "1")}>
+              <UserPlus className="size-4" /> Add member
+            </Button>
+          </Can>
+        </div>
+      </div>
+
+      {users.isPending ? (
+        <LoadingBlock label="Loading members…" />
+      ) : filtered.length === 0 ? (
+        <EmptyState
+          icon={<UsersRound />}
+          title={q || status !== "all" ? "No members match" : "No members yet"}
+          action={
+            q || status !== "all" ? (
+              <Button onClick={() => setSearchParams({})}>Clear filters</Button>
+            ) : (
+              <Can permission="users.create">
+                <Button variant="primary" onClick={() => setParam("add", "1")}>
+                  <UserPlus className="size-4" /> Add member
+                </Button>
+              </Can>
+            )
+          }
+        >
+          {q || status !== "all"
+            ? "Try a different search or filter."
+            : "Add the first person to your team."}
+        </EmptyState>
+      ) : (
+        <div className="overflow-x-auto rounded-xl border border-ink-200 bg-white">
+          <table className="w-full min-w-160 text-sm">
+            <thead>
+              <tr className="border-b border-ink-100 text-left text-xs text-ink-500">
+                <th className="px-4 py-2.5 font-medium">Member</th>
+                <th className="px-4 py-2.5 font-medium">Roles</th>
+                <th className="px-4 py-2.5 font-medium">Status</th>
+                <th className="px-4 py-2.5 font-medium">Last active</th>
+              </tr>
+            </thead>
+            <tbody>
+              {filtered.map((user) => (
+                <tr
+                  key={user.id}
+                  onClick={() => openMember(user)}
+                  className="cursor-pointer border-b border-ink-100 last:border-b-0 hover:bg-ink-50"
+                >
+                  <td className="px-4 py-2.5">
+                    <div className="flex items-center gap-3">
+                      <Avatar name={user.displayName} dimmed={user.status === "disabled"} />
+                      <div className="min-w-0">
+                        <p className={`truncate font-medium ${user.status === "disabled" ? "text-ink-400" : "text-ink-900"}`}>
+                          {user.displayName}
+                        </p>
+                        <p className="truncate font-mono text-xs text-ink-500">{user.email}</p>
+                      </div>
+                    </div>
+                  </td>
+                  <td className="px-4 py-2.5">
+                    <div className="flex flex-wrap gap-1">
+                      {user.roleIds.map((rid) => (
+                        <Badge key={rid}>{roleName(rid)}</Badge>
+                      ))}
+                    </div>
+                  </td>
+                  <td className="px-4 py-2.5">{statusBadge(user.status)}</td>
+                  <td className="px-4 py-2.5 text-ink-500">
+                    {user.lastActiveOn ? timeAgo(user.lastActiveOn) : "—"}
+                  </td>
+                </tr>
+              ))}
+            </tbody>
+          </table>
+        </div>
+      )}
+
+      {addOpen && <AddMemberDialog onClose={() => setParam("add", null)} />}
+      {openMemberId && (
+        <MemberDrawer
+          // Keyed so switching straight from one member to another remounts the
+          // drawer. Without it, per-member state (staged role edits, a password
+          // just set) carries over and is shown under the next member's name.
+          key={openMemberId}
+          userId={openMemberId}
+          onClose={() => navigate(`/team/members?${searchParams.toString()}`)}
+        />
+      )}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/team/RoleEditor.tsx b/SW.Bitween.Web/ClientApp/src/pages/team/RoleEditor.tsx
new file mode 100644
index 00000000..0fdeb781
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/team/RoleEditor.tsx
@@ -0,0 +1,370 @@
+import { useEffect, useMemo, useState } from "react";
+import { Link, useNavigate, useParams, useSearchParams } from "react-router";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { ArrowLeft, Copy, EyeOff, ShieldCheck, Trash2 } from "lucide-react";
+import { api, type ActionId, type PermissionKey } from "../../api";
+import {
+  ACTION_LABELS,
+  ACTION_ORDER,
+  allKeysIn,
+  groupsIn,
+  permissionKey,
+  usePermissionCatalog,
+} from "../../api/permissions";
+import { useSession } from "../../auth/SessionContext";
+import { visibleGroups } from "../../nav";
+import { Badge, Button, FormError, LoadingBlock } from "../../components/ui/basics";
+import { Field, TextInput } from "../../components/ui/forms";
+import { ConfirmDialog } from "../../components/ui/overlays";
+
+/** Live answer to "what would someone with this role actually see?" */
+function AccessPreview({ permissions, total }: { permissions: Set<PermissionKey>; total: number }) {
+  const groups = visibleGroups([...permissions]);
+  return (
+    <div className="rounded-xl border border-ink-200 bg-white p-4">
+      <h3 className="text-xs font-semibold tracking-wide text-ink-500 uppercase">
+        What members with this role see
+      </h3>
+      <p className="mt-1 mb-3 text-[13px] text-ink-500">
+        The navigation below updates as you change permissions.
+      </p>
+      {groups.length === 0 ? (
+        <div className="flex items-center gap-2 rounded-lg bg-ink-50 px-3 py-2.5 text-[13px] text-ink-500">
+          <EyeOff className="size-4 shrink-0" />
+          No pages yet — grant a View permission.
+        </div>
+      ) : (
+        <div className="space-y-3 rounded-lg bg-ink-950 p-3">
+          {groups.map((group) => (
+            <div key={group.label}>
+              <p className="px-1 pb-1 text-[10px] font-semibold tracking-widest text-ink-500 uppercase">
+                {group.label}
+              </p>
+              <ul className="space-y-0.5">
+                {group.items.map((item) => (
+                  <li key={item.path} className="flex items-center gap-2 rounded-md px-1.5 py-1 text-[13px] text-ink-200">
+                    <item.icon className="size-3.5 shrink-0 text-ink-400" />
+                    {item.label}
+                  </li>
+                ))}
+              </ul>
+            </div>
+          ))}
+        </div>
+      )}
+      <p className="mt-3 font-mono text-xs text-ink-500">
+        {permissions.size}/{total} permissions granted
+      </p>
+    </div>
+  );
+}
+
+export function RoleEditor() {
+  const { id } = useParams();
+  const [searchParams] = useSearchParams();
+  const isNew = id === undefined;
+  const sourceId = isNew ? searchParams.get("from") : id;
+
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const { can } = useSession();
+  const catalog = usePermissionCatalog();
+  const areas = catalog.data ?? [];
+
+  const source = useQuery({
+    queryKey: ["role", sourceId],
+    queryFn: () => api.getRole(sourceId!),
+    enabled: sourceId !== null,
+    retry: false,
+  });
+
+  const [name, setName] = useState("");
+  const [description, setDescription] = useState("");
+  const [granted, setGranted] = useState<Set<PermissionKey> | null>(null);
+  const [confirmingDelete, setConfirmingDelete] = useState(false);
+  // Which role this form is currently filled from. React Router reuses this component when the
+  // route changes between /new and /:id, so tracking identity — not a plain "have we loaded"
+  // flag — is what makes Duplicate refill instead of keeping the role it came from.
+  const identity = isNew ? `new:${sourceId ?? ""}` : `edit:${id}`;
+  const [loadedFor, setLoadedFor] = useState<string | null>(null);
+  const loaded = loadedFor === identity;
+
+  // prefill once the source role arrives (edit, or duplicate via ?from=)
+  useEffect(() => {
+    if (loaded) return;
+    if (sourceId === null) {
+      setName("");
+      setDescription("");
+      setGranted(new Set());
+      setLoadedFor(identity);
+    } else if (source.data) {
+      setName(isNew ? `Copy of ${source.data.name}` : source.data.name);
+      setDescription(source.data.description);
+      setGranted(new Set(source.data.permissions));
+      setLoadedFor(identity);
+    }
+  }, [source.data, sourceId, isNew, loaded, identity]);
+
+  const isSystem = !isNew && (source.data?.isSystem ?? false);
+  const editable = !isSystem && (isNew ? can("roles.create") : can("roles.edit"));
+
+  const dirty = useMemo(() => {
+    if (!granted) return false;
+    if (isNew) return true;
+    if (!source.data) return false;
+    return (
+      name !== source.data.name ||
+      description !== source.data.description ||
+      granted.size !== source.data.permissions.length ||
+      source.data.permissions.some((p) => !granted.has(p))
+    );
+  }, [granted, name, description, isNew, source.data]);
+
+  const save = useMutation({
+    mutationFn: () => {
+      const input = { name, description, permissions: [...granted!] };
+      return isNew ? api.createRole(input) : api.updateRole(id!, input);
+    },
+    onSuccess: () => {
+      void queryClient.invalidateQueries({ queryKey: ["roles"] });
+      void queryClient.invalidateQueries({ queryKey: ["role", id] });
+      navigate("/team/roles");
+    },
+  });
+
+  if (catalog.isPending) return <LoadingBlock label="Loading permissions…" />;
+  if (!loaded && source.isPending) return <LoadingBlock label="Loading role…" />;
+  if (!isNew && source.isError)
+    return (
+      <div className="py-16 text-center text-sm text-ink-500">
+        This role no longer exists.{" "}
+        <Link to="/team/roles" className="font-medium text-crimson-700 hover:underline">
+          Back to roles
+        </Link>
+      </div>
+    );
+  if (!granted) return <LoadingBlock label="Loading role…" />;
+
+  const toggle = (areaId: string, actionId: ActionId) => {
+    if (!editable) return;
+    const key = permissionKey(areaId, actionId);
+    const next = new Set(granted);
+    if (next.has(key)) {
+      next.delete(key);
+      // an area you can't view is an area you can't use at all
+      if (actionId === "view") {
+        for (const action of ACTION_ORDER) next.delete(permissionKey(areaId, action));
+      }
+    } else {
+      next.add(key);
+      if (actionId !== "view") next.add(permissionKey(areaId, "view"));
+    }
+    setGranted(next);
+  };
+
+  const toggleArea = (areaId: string, actionIds: ActionId[], allOn: boolean) => {
+    if (!editable) return;
+    const next = new Set(granted);
+    for (const action of actionIds) {
+      const key = permissionKey(areaId, action);
+      if (allOn) next.delete(key);
+      else next.add(key);
+    }
+    setGranted(next);
+  };
+
+  return (
+    <div className="pb-24">
+      <Link
+        to="/team/roles"
+        className="mb-4 inline-flex items-center gap-1 text-[13px] font-medium text-ink-500 hover:text-ink-800"
+      >
+        <ArrowLeft className="size-3.5" /> Roles
+      </Link>
+
+      <div className="mb-6 flex flex-wrap items-start justify-between gap-3">
+        <div>
+          <h1 className="flex items-center gap-2.5 text-[22px] font-semibold tracking-tight text-ink-900">
+            {isNew ? "New role" : source.data?.name}
+            {isSystem && (
+              <Badge tone="ink">
+                <ShieldCheck className="size-3" /> Built-in
+              </Badge>
+            )}
+          </h1>
+          {!isNew && source.data && (
+            <p className="mt-1 text-sm text-ink-500">
+              {source.data.memberCount} member{source.data.memberCount === 1 ? "" : "s"} hold this role.
+            </p>
+          )}
+        </div>
+        {!isNew && can("roles.create") && (
+          <Button onClick={() => navigate(`/team/roles/new?from=${id}`)}>
+            <Copy className="size-4" /> Duplicate
+          </Button>
+        )}
+      </div>
+
+      {isSystem && (
+        <div className="mb-6 rounded-xl border border-ink-200 bg-ink-50 px-4 py-3 text-sm text-ink-600">
+          This role is built in: it always holds every permission, so there's always someone who can
+          manage the instance. It can't be edited or deleted.
+        </div>
+      )}
+
+      <div className="grid gap-6 lg:grid-cols-[1fr_300px]">
+        <div className="min-w-0 space-y-6">
+          {!isSystem && (
+            <div className="grid gap-4 rounded-xl border border-ink-200 bg-white p-5 sm:grid-cols-2">
+              <Field label="Name" htmlFor="role-name">
+                <TextInput
+                  id="role-name"
+                  value={name}
+                  disabled={!editable}
+                  onChange={(e) => setName(e.target.value)}
+                  placeholder="e.g. Night-shift operator"
+                />
+              </Field>
+              <Field label="Description" htmlFor="role-desc" hint="Shown wherever the role is picked.">
+                <TextInput
+                  id="role-desc"
+                  value={description}
+                  disabled={!editable}
+                  onChange={(e) => setDescription(e.target.value)}
+                  placeholder="What is this role for?"
+                />
+              </Field>
+            </div>
+          )}
+
+          {groupsIn(areas).map((group) => {
+            const groupAreas = areas.filter((a) => a.group === group);
+            return (
+              <section key={group} className="overflow-x-auto rounded-xl border border-ink-200 bg-white">
+                <table className="w-full min-w-130 text-sm">
+                  <thead>
+                    <tr className="border-b border-ink-100">
+                      <th className="px-5 py-3 text-left text-xs font-semibold tracking-wide text-ink-500 uppercase">
+                        {group}
+                      </th>
+                      {ACTION_ORDER.map((action) => (
+                        <th key={action} className="w-18 px-2 py-3 text-center text-xs font-medium text-ink-500">
+                          {ACTION_LABELS[action]}
+                        </th>
+                      ))}
+                      <th className="w-14 px-3 py-3 text-center text-xs font-medium text-ink-500">All</th>
+                    </tr>
+                  </thead>
+                  <tbody>
+                    {groupAreas.map((area) => {
+                      const actionIds = area.actions.map((a) => a.id);
+                      const allOn = actionIds.every((a) => granted.has(permissionKey(area.id, a)));
+                      return (
+                        <tr key={area.id} className="border-b border-ink-100 last:border-b-0">
+                          <td className="px-5 py-3">
+                            <p className="font-medium text-ink-800">{area.label}</p>
+                            <p className="text-[13px] text-ink-500">{area.description}</p>
+                          </td>
+                          {ACTION_ORDER.map((action) => {
+                            const def = area.actions.find((a) => a.id === action);
+                            if (!def)
+                              return (
+                                <td key={action} className="px-2 py-3 text-center text-ink-200">
+                                  —
+                                </td>
+                              );
+                            const key = permissionKey(area.id, action);
+                            return (
+                              <td key={action} className="px-2 py-3 text-center">
+                                <input
+                                  type="checkbox"
+                                  aria-label={`${area.label}: ${ACTION_LABELS[action]}`}
+                                  title={`${key} — ${def.description}`}
+                                  checked={granted.has(key)}
+                                  disabled={!editable}
+                                  onChange={() => toggle(area.id, action)}
+                                  className="size-4 cursor-pointer rounded accent-crimson-600 disabled:cursor-default"
+                                />
+                              </td>
+                            );
+                          })}
+                          <td className="px-3 py-3 text-center">
+                            <input
+                              type="checkbox"
+                              aria-label={`${area.label}: everything`}
+                              checked={allOn}
+                              disabled={!editable}
+                              onChange={() => toggleArea(area.id, actionIds, allOn)}
+                              className="size-4 cursor-pointer rounded accent-ink-700 disabled:cursor-default"
+                            />
+                          </td>
+                        </tr>
+                      );
+                    })}
+                  </tbody>
+                </table>
+              </section>
+            );
+          })}
+        </div>
+
+        <div className="space-y-4 lg:sticky lg:top-8 lg:self-start">
+          <AccessPreview permissions={granted} total={allKeysIn(areas).length} />
+
+          {!isNew && !isSystem && can("roles.delete") && (
+            <div className="rounded-xl border border-danger-200 bg-white p-4">
+              <h3 className="text-xs font-semibold tracking-wide text-danger-800 uppercase">
+                Danger zone
+              </h3>
+              <p className="mt-1 mb-3 text-[13px] text-ink-500">
+                Roles can only be deleted once no member holds them.
+              </p>
+              <Button variant="danger" size="sm" onClick={() => setConfirmingDelete(true)}>
+                <Trash2 className="size-3.5" /> Delete role
+              </Button>
+            </div>
+          )}
+        </div>
+      </div>
+
+      {editable && dirty && (
+        <div className="fixed inset-x-0 bottom-0 z-30 border-t border-ink-200 bg-white/95 backdrop-blur lg:left-62">
+          {/* right padding keeps the fixed demo pill clear of the save button */}
+          <div className="mx-auto flex max-w-350 items-center justify-between gap-3 py-3 pl-4 pr-40 sm:pl-8">
+            <div className="min-w-0">
+              <p className="truncate text-sm font-medium text-ink-800">
+                {isNew ? "New role" : "Unsaved changes"}
+              </p>
+              <FormError>{save.error?.message}</FormError>
+            </div>
+            <div className="flex shrink-0 gap-2">
+              <Button onClick={() => navigate("/team/roles")}>Cancel</Button>
+              <Button variant="primary" busy={save.isPending} onClick={() => save.mutate()}>
+                {isNew ? "Create role" : "Save changes"}
+              </Button>
+            </div>
+          </div>
+        </div>
+      )}
+
+      {confirmingDelete && (
+        <ConfirmDialog
+          title="Delete this role?"
+          body={
+            <>
+              <strong className="font-medium text-ink-800">{source.data?.name}</strong> will be gone
+              for good. Members holding it must be moved to another role first.
+            </>
+          }
+          confirmLabel="Delete role"
+          onConfirm={async () => {
+            await api.deleteRole(id!);
+            void queryClient.invalidateQueries({ queryKey: ["roles"] });
+            navigate("/team/roles");
+          }}
+          onClose={() => setConfirmingDelete(false)}
+        />
+      )}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/team/RolesTab.tsx b/SW.Bitween.Web/ClientApp/src/pages/team/RolesTab.tsx
new file mode 100644
index 00000000..a5ca1552
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/team/RolesTab.tsx
@@ -0,0 +1,69 @@
+import { Link, useNavigate } from "react-router";
+import { useQuery } from "@tanstack/react-query";
+import { ChevronRight, Plus, ShieldCheck } from "lucide-react";
+import { api } from "../../api";
+import { allKeysIn, usePermissionCatalog } from "../../api/permissions";
+import { Can } from "../../auth/guards";
+import { Badge, Button, EmptyState, LoadingBlock } from "../../components/ui/basics";
+
+export function RolesTab() {
+  const navigate = useNavigate();
+  const roles = useQuery({ queryKey: ["roles"], queryFn: () => api.listRoles() });
+  const totalPermissions = allKeysIn(usePermissionCatalog().data ?? []).length;
+
+  if (roles.isPending) return <LoadingBlock label="Loading roles…" />;
+
+  return (
+    <div>
+      <div className="mb-4 flex items-center justify-between gap-3">
+        <p className="text-sm text-ink-500">
+          A role is a reusable set of permissions. Open one to see — and shape — exactly what its
+          members can do.
+        </p>
+        <Can permission="roles.create">
+          <Button variant="primary" onClick={() => navigate("/team/roles/new")}>
+            <Plus className="size-4" /> New role
+          </Button>
+        </Can>
+      </div>
+
+      {(roles.data ?? []).length === 0 ? (
+        <EmptyState icon={<ShieldCheck />} title="No roles yet">
+          Create a role to define what members can see and do.
+        </EmptyState>
+      ) : (
+        <ul className="space-y-2">
+          {(roles.data ?? []).map((role) => (
+            <li key={role.id}>
+              <Link
+                to={`/team/roles/${role.id}`}
+                className="flex items-center gap-4 rounded-xl border border-ink-200 bg-white px-5 py-4 transition-colors hover:border-ink-300 hover:bg-ink-50/50"
+              >
+                <div className="min-w-0 flex-1">
+                  <div className="flex flex-wrap items-center gap-2">
+                    <h3 className="font-semibold text-ink-900">{role.name}</h3>
+                    {role.isSystem && (
+                      <Badge tone="ink">
+                        <ShieldCheck className="size-3" /> Built-in
+                      </Badge>
+                    )}
+                  </div>
+                  <p className="mt-0.5 line-clamp-2 text-sm text-ink-500">{role.description}</p>
+                </div>
+                <div className="hidden shrink-0 text-right text-sm sm:block">
+                  <p className="font-medium text-ink-800">
+                    {role.memberCount} member{role.memberCount === 1 ? "" : "s"}
+                  </p>
+                  <p className="font-mono text-xs text-ink-500">
+                    {role.permissions.length}/{totalPermissions} permissions
+                  </p>
+                </div>
+                <ChevronRight className="size-4 shrink-0 text-ink-300" />
+              </Link>
+            </li>
+          ))}
+        </ul>
+      )}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/team/TeamPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/team/TeamPage.tsx
new file mode 100644
index 00000000..46a6b722
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/team/TeamPage.tsx
@@ -0,0 +1,72 @@
+import { Navigate, NavLink, Outlet } from "react-router";
+import { useSession } from "../../auth/SessionContext";
+import { AccessDenied } from "../../auth/guards";
+import { PageHeader } from "../../components/layout/PageHeader";
+
+/**
+ * One place for everything people-related: who can sign in (Members)
+ * and what they're allowed to do (Roles). Tabs are URL paths so every
+ * view is linkable.
+ */
+export function TeamPage() {
+  const { can } = useSession();
+  const canMembers = can("users.view");
+  const canRoles = can("roles.view");
+
+  if (!canMembers && !canRoles) return <AccessDenied permission="users.view" />;
+
+  const tabs = [
+    ...(canMembers ? [{ to: "/team/members", label: "Members" }] : []),
+    ...(canRoles ? [{ to: "/team/roles", label: "Roles" }] : []),
+  ];
+
+  return (
+    <div>
+      <PageHeader
+        title="Team"
+        description="The people who can sign in to this Bitween instance, and what each of them is allowed to do."
+        help={{
+          title: "How access works",
+          body: (
+            <>
+              <p>
+                Every member holds one or more <strong>roles</strong>, and every role is a list of{" "}
+                <strong>permissions</strong> — page by page, action by action. A member can do
+                something if any of their roles allows it; everything else is hidden from them.
+              </p>
+              <p>
+                To bring someone in: create or pick a role on the Roles tab, then add them from the
+                Members tab. You set their first password and pass it on — Bitween doesn't send mail.
+              </p>
+            </>
+          ),
+        }}
+      />
+
+      <div className="mb-6 flex gap-1 border-b border-ink-200">
+        {tabs.map((tab) => (
+          <NavLink
+            key={tab.to}
+            to={tab.to}
+            className={({ isActive }) =>
+              `-mb-px border-b-2 px-3.5 py-2 text-sm font-medium transition-colors ${
+                isActive
+                  ? "border-crimson-600 text-crimson-700"
+                  : "border-transparent text-ink-500 hover:border-ink-300 hover:text-ink-800"
+              }`
+            }
+          >
+            {tab.label}
+          </NavLink>
+        ))}
+      </div>
+
+      <Outlet />
+    </div>
+  );
+}
+
+export function TeamIndexRedirect() {
+  const { can } = useSession();
+  return <Navigate to={can("users.view") ? "/team/members" : "/team/roles"} replace />;
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/work-groups/LiveQueueStats.tsx b/SW.Bitween.Web/ClientApp/src/pages/work-groups/LiveQueueStats.tsx
new file mode 100644
index 00000000..3b806c5f
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/work-groups/LiveQueueStats.tsx
@@ -0,0 +1,68 @@
+import type { ReactNode } from "react";
+import { keepPreviousData, useQuery } from "@tanstack/react-query";
+import { api } from "../../api";
+import { Badge } from "../../components/ui/basics";
+
+function LiveStat({ label, value, tone }: { label: string; value: ReactNode; tone?: "warn" | "danger" }) {
+  return (
+    <div className="min-w-0">
+      <dt className="text-[11px] leading-tight font-medium tracking-wide text-ink-400 uppercase">{label}</dt>
+      <dd
+        className={`mt-0.5 text-sm font-semibold tabular-nums ${
+          tone === "danger" ? "text-danger-700" : tone === "warn" ? "text-warn-700" : "text-ink-800"
+        }`}
+      >
+        {value}
+      </dd>
+    </div>
+  );
+}
+
+/**
+ * One work group's slice of the live RabbitMQ picture — the same numbers
+ * the Queue health page shows. Used on the group's hub page and inside the
+ * list page's row drill-down (it only polls while mounted).
+ */
+export function LiveQueueStats({ groupId }: { groupId: number }) {
+  const { data } = useQuery({
+    queryKey: ["queue-health"],
+    queryFn: () => api.getQueueHealth(),
+    refetchInterval: 5_000,
+    placeholderData: keepPreviousData,
+  });
+  const consumer = data?.consumers.find((c) => c.workGroupId === groupId);
+
+  if (!consumer)
+    return <p className="text-sm text-ink-500">No live consumer data for this group right now.</p>;
+
+  return (
+    <div className="@container space-y-3">
+      <div className="flex flex-wrap items-center gap-1.5">
+        {consumer.health === "critical" ? (
+          <Badge tone="danger">Critical</Badge>
+        ) : consumer.health === "warning" ? (
+          <Badge tone="warn">Warning</Badge>
+        ) : (
+          <Badge tone="ok">Healthy</Badge>
+        )}
+        {consumer.isBackpressured && <Badge tone="warn">Backpressure</Badge>}
+        <code className="font-mono text-[11px] text-ink-400">{consumer.queueName}</code>
+      </div>
+      <dl className="grid grid-cols-3 gap-x-4 gap-y-3 @sm:grid-cols-5 @2xl:grid-cols-9">
+        <LiveStat label="Nodes" value={consumer.totalNodes} />
+        <LiveStat label="In flight" value={consumer.processingCount} />
+        <LiveStat label="Queued" value={consumer.queueCount} />
+        <LiveStat label="Retrying" value={consumer.retryCount} tone={consumer.retryCount > 0 ? "warn" : undefined} />
+        <LiveStat
+          label="Dead letters"
+          value={consumer.failedCount}
+          tone={consumer.failedCount > 0 ? "danger" : undefined}
+        />
+        <LiveStat label="Prefetch" value={consumer.prefetch} />
+        <LiveStat label="Priority" value={consumer.priority} />
+        <LiveStat label="Incoming" value={`${consumer.incomingRate}/s`} />
+        <LiveStat label="Acked" value={`${consumer.ackRate}/s`} />
+      </dl>
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/work-groups/WorkGroupNewPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/work-groups/WorkGroupNewPage.tsx
new file mode 100644
index 00000000..7fff0dae
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/work-groups/WorkGroupNewPage.tsx
@@ -0,0 +1,138 @@
+import { useState, type FormEvent } from "react";
+import { Link, useNavigate } from "react-router";
+import { useMutation, useQueryClient } from "@tanstack/react-query";
+import { ArrowLeft } from "lucide-react";
+import { api } from "../../api";
+import { Button, FormError } from "../../components/ui/basics";
+import { Field, TextInput } from "../../components/ui/forms";
+import { ReturnBanner } from "../../components/ui/ReturnBanner";
+import { SummaryDisclosure } from "../../components/ui/SummaryDisclosure";
+import { useReturnContext, withReturn } from "../../lib/returnTo";
+import { suggestSlug } from "../../lib/identifiers";
+
+export function WorkGroupNewPage() {
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const ctx = useReturnContext();
+  const [name, setName] = useState("");
+  const [busMessageName, setBusMessageName] = useState("");
+  const [busNameTouched, setBusNameTouched] = useState(false);
+  const [prefetch, setPrefetch] = useState(10);
+  const [priority, setPriority] = useState(5);
+  const [busOpen, setBusOpen] = useState(false);
+
+  const create = useMutation({
+    mutationFn: () => api.createWorkGroup({ name, busMessageName, prefetch, priority }),
+    onSuccess: (group) => {
+      void queryClient.invalidateQueries({ queryKey: ["work-groups"] });
+      const base = `/work-groups/${group.id}`;
+      navigate(ctx ? `${withReturn(base, ctx)}&picked=workgroup:${group.id}` : base);
+    },
+  });
+
+  const submit = (e: FormEvent) => {
+    e.preventDefault();
+    // Bus name is auto-derived and hidden — surface it if it ended up empty.
+    if (!busMessageName.trim()) {
+      setBusOpen(true);
+      return;
+    }
+    create.mutate();
+  };
+
+  return (
+    <div>
+      <Link
+        to={ctx?.to ?? "/work-groups"}
+        className="mb-4 inline-flex items-center gap-1 text-[13px] font-medium text-ink-500 hover:text-ink-800"
+      >
+        <ArrowLeft className="size-3.5" /> {ctx ? "Back without creating" : "Work groups"}
+      </Link>
+
+      <ReturnBanner />
+
+      <h1 className="text-[22px] font-semibold tracking-tight text-ink-900">New work group</h1>
+      <p className="mt-1 text-sm text-ink-500">
+        Gives its own queue, priority and prefetch to whatever integrations you assign to it.
+      </p>
+
+      <form onSubmit={submit} className="mt-6 max-w-lg space-y-4 rounded-xl border border-ink-200 bg-white p-5">
+        <Field label="Name" htmlFor="nwg-name">
+          <TextInput
+            id="nwg-name"
+            required
+            autoFocus
+            value={name}
+            onChange={(e) => {
+              setName(e.target.value);
+              if (!busNameTouched) setBusMessageName(suggestSlug(e.target.value));
+            }}
+            placeholder="e.g. Priority lane"
+          />
+        </Field>
+        <SummaryDisclosure
+          open={busOpen}
+          onOpenChange={setBusOpen}
+          summary={
+            <>
+              Bus message name{" "}
+              {busMessageName ? (
+                <code className="rounded bg-white px-1.5 py-0.5 font-mono text-[11px] text-ink-700 ring-1 ring-ink-200">
+                  {busMessageName}
+                </code>
+              ) : (
+                <span className="italic">derived from the name</span>
+              )}
+            </>
+          }
+        >
+          <Field
+            label="Bus message name"
+            htmlFor="nwg-busname"
+            hint="Combined with the group's id to form its queue name. No spaces."
+          >
+            <TextInput
+              id="nwg-busname"
+              required
+              value={busMessageName}
+              className="font-mono"
+              onChange={(e) => {
+                setBusNameTouched(true);
+                setBusMessageName(e.target.value.toLowerCase().replace(/\s+/g, ""));
+              }}
+              placeholder="priority-lane"
+            />
+          </Field>
+        </SummaryDisclosure>
+        <SummaryDisclosure summary={`Queue tuning · prefetch ${prefetch} · priority ${priority}`}>
+          <div className="grid grid-cols-2 gap-4">
+            <Field label="Prefetch" htmlFor="nwg-prefetch" hint="Messages pulled per consumer at once.">
+              <TextInput
+                id="nwg-prefetch"
+                type="number"
+                min={1}
+                value={prefetch}
+                onChange={(e) => setPrefetch(Math.max(1, Number(e.target.value)))}
+              />
+            </Field>
+            <Field label="Priority" htmlFor="nwg-priority" hint="Higher runs before lower.">
+              <TextInput
+                id="nwg-priority"
+                type="number"
+                min={0}
+                value={priority}
+                onChange={(e) => setPriority(Math.max(0, Number(e.target.value)))}
+              />
+            </Field>
+          </div>
+        </SummaryDisclosure>
+        <FormError>{create.error?.message}</FormError>
+        <div className="flex justify-end">
+          <Button type="submit" variant="primary" busy={create.isPending}>
+            Create work group
+          </Button>
+        </div>
+      </form>
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/work-groups/WorkGroupPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/work-groups/WorkGroupPage.tsx
new file mode 100644
index 00000000..4328283d
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/work-groups/WorkGroupPage.tsx
@@ -0,0 +1,217 @@
+import { useEffect, useMemo, useState } from "react";
+import { Link, useNavigate, useParams } from "react-router";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { ArrowLeft, ArrowUpRight, Trash2 } from "lucide-react";
+import { api } from "../../api";
+import { Can, useSessionCan } from "../../auth/guards";
+import { Button, EmptyState, LoadingBlock } from "../../components/ui/basics";
+import { Field, TextInput } from "../../components/ui/forms";
+import { ConfirmDialog } from "../../components/ui/overlays";
+import { EditableTitle, Panel, UnsavedBar } from "../../components/ui/Panel";
+import { SetupList } from "../../components/config/shared";
+import { ReturnBanner } from "../../components/ui/ReturnBanner";
+import { formatDate } from "../../lib/dates";
+import { LiveQueueStats } from "./LiveQueueStats";
+
+interface Draft {
+  name: string;
+  busMessageName: string;
+  prefetch: number;
+  priority: number;
+}
+
+const draftOf = (g: { name: string; busMessageName: string; options: { rabbitMqOptions: { consumerSettings: { prefetch: number; priority: number } } } }): Draft => ({
+  name: g.name,
+  busMessageName: g.busMessageName,
+  prefetch: g.options.rabbitMqOptions.consumerSettings.prefetch,
+  priority: g.options.rabbitMqOptions.consumerSettings.priority,
+});
+
+/**
+ * This group's slice of the live RabbitMQ picture — the same numbers the
+ * Queue health page shows, brought to where the group is configured.
+ */
+function LiveQueuePanel({ groupId }: { groupId: number }) {
+  return (
+    <Panel
+      title="Live queue"
+      description="This group's consumer, right now."
+      action={
+        <Link
+          to="/queue-health"
+          className="inline-flex items-center gap-1 text-[13px] font-medium text-crimson-700 hover:underline"
+        >
+          Queue health <ArrowUpRight className="size-3.5" aria-hidden />
+        </Link>
+      }
+    >
+      <LiveQueueStats groupId={groupId} />
+    </Panel>
+  );
+}
+
+export function WorkGroupPage() {
+  const { id = "" } = useParams();
+  const groupId = Number(id);
+  const navigate = useNavigate();
+  const queryClient = useQueryClient();
+  const canEdit = useSessionCan("workgroups.edit");
+
+  const group = useQuery({
+    queryKey: ["work-group", groupId],
+    queryFn: () => api.getWorkGroup(groupId),
+    retry: false,
+  });
+
+  const [draft, setDraft] = useState<Draft | null>(null);
+  const [deleting, setDeleting] = useState(false);
+  const [loaded, setLoaded] = useState(false);
+
+  useEffect(() => {
+    if (!loaded && group.data) {
+      setDraft(draftOf(group.data));
+      setLoaded(true);
+    }
+  }, [group.data, loaded]);
+
+  const dirty = useMemo(() => {
+    if (!group.data || !draft) return false;
+    return JSON.stringify(draft) !== JSON.stringify(draftOf(group.data));
+  }, [group.data, draft]);
+
+  const save = useMutation({
+    mutationFn: () => api.updateWorkGroup(groupId, draft!),
+    onSuccess: async () => {
+      // Await the detail refetch before re-syncing the draft (avoids stale-data race).
+      await queryClient.invalidateQueries({ queryKey: ["work-group", groupId] });
+      void queryClient.invalidateQueries({ queryKey: ["work-groups"] });
+      setLoaded(false);
+    },
+  });
+
+  if (group.isPending) return <LoadingBlock label="Loading work group…" />;
+  if (group.isError)
+    return (
+      <EmptyState title="This work group no longer exists">
+        <Link to="/work-groups" className="font-medium text-crimson-700 hover:underline">
+          Back to work groups
+        </Link>
+      </EmptyState>
+    );
+
+  const g = group.data;
+  const set = <K extends keyof Draft>(key: K, value: Draft[K]) =>
+    setDraft((d) => (d ? { ...d, [key]: value } : d));
+
+  return (
+    <div className="pb-24">
+      <Link
+        to="/work-groups"
+        className="mb-4 inline-flex items-center gap-1 text-[13px] font-medium text-ink-500 hover:text-ink-800"
+      >
+        <ArrowLeft className="size-3.5" /> Work groups
+      </Link>
+
+      <ReturnBanner />
+
+      <div className="mb-6 flex flex-wrap items-start justify-between gap-3">
+        <div>
+          <h1 className="text-[22px] font-semibold tracking-tight text-ink-900">
+            <EditableTitle value={draft?.name ?? g.name} onChange={(v) => set("name", v)} disabled={!canEdit} placeholder="Work group name" />
+          </h1>
+          <p className="mt-1 text-sm text-ink-500">Created {formatDate(g.createdOn)}.</p>
+        </div>
+        <Can permission="workgroups.delete">
+          <Button variant="danger" onClick={() => setDeleting(true)}>
+            <Trash2 className="size-4" /> Delete
+          </Button>
+        </Can>
+      </div>
+
+      <div className="grid gap-5 lg:grid-cols-[minmax(0,1fr)_360px]">
+        <div className="min-w-0 space-y-5">
+          <Panel title="Queue settings" description="Groups get their own queue, priority and prefetch.">
+            {draft && (
+              <div className="space-y-4">
+                <div className="max-w-sm">
+                  <Field
+                    label="Bus message name"
+                    htmlFor="wg-busname"
+                    hint="Combined with the group's id to form its queue name. No spaces."
+                  >
+                    <TextInput
+                      id="wg-busname"
+                      value={draft.busMessageName}
+                      disabled={!canEdit}
+                      className="font-mono"
+                      onChange={(e) => set("busMessageName", e.target.value.toLowerCase().replace(/\s+/g, ""))}
+                    />
+                  </Field>
+                </div>
+                <div className="grid gap-4 sm:grid-cols-2">
+                  <Field label="Prefetch" htmlFor="wg-prefetch" hint="Messages pulled per consumer at once.">
+                    <TextInput
+                      id="wg-prefetch"
+                      type="number"
+                      min={1}
+                      value={draft.prefetch}
+                      disabled={!canEdit}
+                      onChange={(e) => set("prefetch", Math.max(1, Number(e.target.value)))}
+                    />
+                  </Field>
+                  <Field label="Priority" htmlFor="wg-priority" hint="Higher runs before lower.">
+                    <TextInput
+                      id="wg-priority"
+                      type="number"
+                      min={0}
+                      value={draft.priority}
+                      disabled={!canEdit}
+                      onChange={(e) => set("priority", Math.max(0, Number(e.target.value)))}
+                    />
+                  </Field>
+                </div>
+              </div>
+            )}
+          </Panel>
+        </div>
+
+        <div className="min-w-0 space-y-5">
+          <Can permission="monitoring.view">
+            <LiveQueuePanel groupId={groupId} />
+          </Can>
+          <Panel title="Used by" description="Integrations assigned to this work group.">
+            <SetupList items={g.integrations} />
+          </Panel>
+        </div>
+      </div>
+
+      {canEdit && dirty && (
+        <UnsavedBar
+          busy={save.isPending}
+          error={save.error?.message}
+          onSave={() => save.mutate()}
+          onDiscard={() => setLoaded(false)}
+        />
+      )}
+
+      {deleting && (
+        <ConfirmDialog
+          title="Delete this work group?"
+          body={
+            <>
+              <strong className="font-medium text-ink-800">{g.name}</strong> will be gone for good.
+              Groups still assigned to integrations can't be deleted.
+            </>
+          }
+          confirmLabel="Delete work group"
+          onConfirm={async () => {
+            await api.deleteWorkGroup(groupId);
+            void queryClient.invalidateQueries({ queryKey: ["work-groups"] });
+            navigate("/work-groups");
+          }}
+          onClose={() => setDeleting(false)}
+        />
+      )}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/pages/work-groups/WorkGroupsPage.tsx b/SW.Bitween.Web/ClientApp/src/pages/work-groups/WorkGroupsPage.tsx
new file mode 100644
index 00000000..8dbcefcb
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/pages/work-groups/WorkGroupsPage.tsx
@@ -0,0 +1,183 @@
+import { Fragment, useMemo, useState } from "react";
+import { useNavigate, useSearchParams } from "react-router";
+import { useQuery } from "@tanstack/react-query";
+import { ArrowUpRight, ChevronDown, ChevronRight, Layers, Plus, Search } from "lucide-react";
+import { api } from "../../api";
+import { Can } from "../../auth/guards";
+import { PageHeader } from "../../components/layout/PageHeader";
+import { Badge, Button, EmptyState, LoadingBlock } from "../../components/ui/basics";
+import { IntegrationMiniList, useIntegrationsCache } from "../../components/config/shared";
+import { LiveQueueStats } from "./LiveQueueStats";
+
+export function WorkGroupsPage() {
+  const [searchParams, setSearchParams] = useSearchParams();
+  const navigate = useNavigate();
+  const q = searchParams.get("q") ?? "";
+  const [open, setOpen] = useState<Set<number>>(new Set());
+
+  const groups = useQuery({ queryKey: ["work-groups"], queryFn: () => api.listWorkGroups() });
+  const integrations = useIntegrationsCache();
+
+  const setParam = (key: string, value: string | null) =>
+    setSearchParams(
+      (prev) => {
+        const next = new URLSearchParams(prev);
+        if (value) next.set(key, value);
+        else next.delete(key);
+        return next;
+      },
+      { replace: true },
+    );
+
+  const filtered = useMemo(() => {
+    const needle = q.trim().toLowerCase();
+    return (groups.data ?? []).filter(
+      (g) => !needle || g.name.toLowerCase().includes(needle) || g.busMessageName.toLowerCase().includes(needle),
+    );
+  }, [groups.data, q]);
+
+  const toggleOpen = (id: number) =>
+    setOpen((prev) => {
+      const next = new Set(prev);
+      if (next.has(id)) next.delete(id);
+      else next.add(id);
+      return next;
+    });
+
+  return (
+    <div>
+      <PageHeader
+        title="Work groups"
+        description="Give a set of integrations their own queue, priority and prefetch, separate from the default lane."
+        help={{
+          title: "How work groups work",
+          body: (
+            <>
+              <p>
+                Every integration runs in the default (ungrouped) lane unless assigned to a work
+                group. Groups get their own RabbitMQ queue — <strong>prefetch</strong> controls how
+                many messages a consumer pulls at once, <strong>priority</strong> decides which
+                group's queue is drained first when several are busy.
+              </p>
+              <p>Changes to a group's settings apply live — no restart needed.</p>
+            </>
+          ),
+        }}
+        actions={
+          <Can permission="workgroups.create">
+            <Button variant="primary" onClick={() => navigate("/work-groups/new")}>
+              <Plus className="size-4" /> New work group
+            </Button>
+          </Can>
+        }
+      />
+
+      <div className="relative mb-4 max-w-xs">
+        <Search className="pointer-events-none absolute top-1/2 left-3 size-4 -translate-y-1/2 text-ink-400" />
+        <input
+          type="search"
+          value={q}
+          onChange={(e) => setParam("q", e.target.value || null)}
+          placeholder="Search work groups"
+          aria-label="Search work groups"
+          className="h-9 w-full rounded-lg border border-ink-200 bg-white pr-3 pl-9 text-sm placeholder:text-ink-400 focus:border-crimson-400 focus:ring-2 focus:ring-crimson-100 focus:outline-none"
+        />
+      </div>
+
+      {groups.isPending ? (
+        <LoadingBlock label="Loading work groups…" />
+      ) : filtered.length === 0 ? (
+        <EmptyState icon={<Layers />} title={q ? "No work groups match" : "No work groups yet"}>
+          {q ? "Try a different search." : "Create one to give a set of integrations their own queue."}
+        </EmptyState>
+      ) : (
+        <div className="overflow-x-auto rounded-xl border border-ink-200 bg-white">
+          <table className="w-full min-w-150 text-sm">
+            <thead>
+              <tr className="border-b border-ink-100 text-left text-xs text-ink-500">
+                <th className="w-10 px-3 py-2.5" />
+                <th className="px-3 py-2.5 font-medium">Name</th>
+                <th className="px-3 py-2.5 font-medium">Bus message name</th>
+                <th className="px-3 py-2.5 font-medium">Consumers</th>
+                <th className="px-3 py-2.5 font-medium">Used by</th>
+                <th className="w-10 px-3 py-2.5" />
+              </tr>
+            </thead>
+            <tbody>
+              {filtered.map((g) => {
+                const expanded = open.has(g.id);
+                const assigned = (integrations.data ?? []).filter((s) => s.workGroupId === g.id);
+                return (
+                  <Fragment key={g.id}>
+                    <tr
+                      onClick={() => toggleOpen(g.id)}
+                      className="cursor-pointer border-b border-ink-100 last:border-b-0 hover:bg-ink-50"
+                    >
+                      <td className="px-3 py-3">
+                        <button
+                          onClick={(e) => {
+                            e.stopPropagation();
+                            toggleOpen(g.id);
+                          }}
+                          aria-expanded={expanded}
+                          aria-label={`Details for ${g.name}`}
+                          className="rounded-md p-1 text-ink-400 hover:bg-ink-100 hover:text-ink-700"
+                        >
+                          {expanded ? <ChevronDown className="size-3.5" /> : <ChevronRight className="size-3.5" />}
+                        </button>
+                      </td>
+                      <td className="px-3 py-3 font-medium text-ink-900">{g.name}</td>
+                      <td className="px-3 py-3">
+                        <code className="font-mono text-xs text-ink-600">{g.busMessageName}</code>
+                      </td>
+                      <td className="px-3 py-3">
+                        {g.consumerCount > 0 ? (
+                          <Badge tone="ok">{g.consumerCount}</Badge>
+                        ) : (
+                          <span className="text-ink-400">—</span>
+                        )}
+                      </td>
+                      <td className="px-3 py-3 text-ink-600">
+                        {g.usedByCount > 0 ? (
+                          `${g.usedByCount} integration${g.usedByCount === 1 ? "" : "s"}`
+                        ) : (
+                          <span className="text-ink-400">—</span>
+                        )}
+                      </td>
+                      <td className="px-3 py-3">
+                        <button
+                          onClick={(e) => {
+                            e.stopPropagation();
+                            navigate(`/work-groups/${g.id}`);
+                          }}
+                          aria-label={`Open ${g.name}`}
+                          title="Open"
+                          className="rounded-md p-1.5 text-ink-400 hover:bg-ink-100 hover:text-ink-700"
+                        >
+                          <ArrowUpRight className="size-4" />
+                        </button>
+                      </td>
+                    </tr>
+                    {expanded && (
+                      <tr className="border-b border-ink-100 last:border-b-0">
+                        <td />
+                        <td colSpan={5} className="px-3 pt-0.5 pb-3">
+                          <div className="space-y-3 rounded-lg bg-ink-50 px-3.5 py-3">
+                            <Can permission="monitoring.view">
+                              <LiveQueueStats groupId={g.id} />
+                            </Can>
+                            <IntegrationMiniList items={assigned} emptyText="No integrations assigned yet." />
+                          </div>
+                        </td>
+                      </tr>
+                    )}
+                  </Fragment>
+                );
+              })}
+            </tbody>
+          </table>
+        </div>
+      )}
+    </div>
+  );
+}
diff --git a/SW.Bitween.Web/ClientApp/src/router.tsx b/SW.Bitween.Web/ClientApp/src/router.tsx
new file mode 100644
index 00000000..f19dce89
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/src/router.tsx
@@ -0,0 +1,405 @@
+import { Navigate, createBrowserRouter } from "react-router";
+import { RequireAuth, RequirePermission } from "./auth/guards";
+import { useSession } from "./auth/SessionContext";
+import { AppShell } from "./components/layout/AppShell";
+import { NAV_GROUPS, homePath } from "./nav";
+import { LoginPage } from "./pages/auth/Login";
+import { NotFoundPage, PlaceholderPage } from "./pages/PlaceholderPage";
+import { ProfilePage } from "./pages/ProfilePage";
+import { SettingsPage } from "./pages/settings/SettingsPage";
+import MappingEditor from "./components/mapper/MappingEditor";
+import { DashboardPage } from "./pages/dashboard/DashboardPage";
+import { ExchangeNewPage } from "./pages/exchanges/ExchangeNewPage";
+import { ExchangesPage } from "./pages/exchanges/ExchangesPage";
+import { QueueHealthPage } from "./pages/queue-health/QueueHealthPage";
+import { ScheduledRetriesPage } from "./pages/scheduled-retries/ScheduledRetriesPage";
+import { ApiGatewayNewPage } from "./pages/api-gateways/ApiGatewayNewPage";
+import { ApiGatewayPage } from "./pages/api-gateways/ApiGatewayPage";
+import { AttachPartnerWizard } from "./pages/api-gateways/AttachPartnerWizard";
+import { EditAttachmentPage } from "./pages/api-gateways/EditAttachmentPage";
+import { AddRouteWizard } from "./pages/bus-gateways/AddRouteWizard";
+import { BusGatewayNewPage } from "./pages/bus-gateways/BusGatewayNewPage";
+import { BusGatewayPage } from "./pages/bus-gateways/BusGatewayPage";
+import { EditRoutePage } from "./pages/bus-gateways/EditRoutePage";
+import { GlobalValueSetPage } from "./pages/global-values/GlobalValueSetPage";
+import { GlobalValueSetsPage } from "./pages/global-values/GlobalValueSetsPage";
+import { InformationTypeNewPage } from "./pages/information-types/InformationTypeNewPage";
+import { InformationTypePage } from "./pages/information-types/InformationTypePage";
+import { InformationTypesPage } from "./pages/information-types/InformationTypesPage";
+import { IntegrationNewPage } from "./pages/integrations/IntegrationNewPage";
+import { IntegrationPage } from "./pages/integrations/IntegrationPage";
+import { IntegrationsPage } from "./pages/integrations/IntegrationsPage";
+import { NotifierPage } from "./pages/notifiers/NotifierPage";
+import { NotifiersPage } from "./pages/notifiers/NotifiersPage";
+import { PartnerNewPage } from "./pages/partners/PartnerNewPage";
+import { PartnerPage } from "./pages/partners/PartnerPage";
+import { PartnersPage } from "./pages/partners/PartnersPage";
+import { NewScheduledJobWizard } from "./pages/scheduled-jobs/NewScheduledJobWizard";
+import { RetryPoliciesPage } from "./pages/retry-policies/RetryPoliciesPage";
+import { RetryPolicyPage } from "./pages/retry-policies/RetryPolicyPage";
+import { MembersTab } from "./pages/team/MembersTab";
+import { RoleEditor } from "./pages/team/RoleEditor";
+import { RolesTab } from "./pages/team/RolesTab";
+import { TeamIndexRedirect, TeamPage } from "./pages/team/TeamPage";
+import { WorkGroupNewPage } from "./pages/work-groups/WorkGroupNewPage";
+import { WorkGroupPage } from "./pages/work-groups/WorkGroupPage";
+import { WorkGroupsPage } from "./pages/work-groups/WorkGroupsPage";
+
+/** "/" lands on the first page this session is allowed to see. */
+function HomeRedirect() {
+  const { session } = useSession();
+  if (!session) return null; // RequireAuth already handled this
+  return <Navigate to={homePath(session)} replace />;
+}
+
+const placeholderRoutes = NAV_GROUPS.flatMap((group) => group.items)
+  .filter((item) => item.planned)
+  .map((item) => ({
+    path: item.path.slice(1),
+    element: <PlaceholderPage item={item} />,
+  }));
+
+/** "/" → undefined (no basename); "/prefix/" → "/prefix" if ever remounted. */
+const basename = import.meta.env.BASE_URL.replace(/\/+$/, "") || undefined;
+
+export const router = createBrowserRouter([
+  { path: "/login", element: <LoginPage /> },
+  {
+    element: <RequireAuth />,
+    children: [
+      {
+        element: <AppShell />,
+        children: [
+          { index: true, element: <HomeRedirect /> },
+          {
+            // No sidebar entry — the logo links here instead.
+            path: "dashboard",
+            element: (
+              <RequirePermission permission="dashboard.view">
+                <DashboardPage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "exchanges",
+            element: (
+              <RequirePermission permission="exchanges.view">
+                <ExchangesPage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "exchanges/new",
+            element: (
+              <RequirePermission permission="exchanges.operate">
+                <ExchangeNewPage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "scheduled-retries",
+            element: (
+              <RequirePermission permission="exchanges.view">
+                <ScheduledRetriesPage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "queue-health",
+            element: (
+              <RequirePermission permission="monitoring.view">
+                <QueueHealthPage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "team",
+            element: <TeamPage />,
+            children: [
+              { index: true, element: <TeamIndexRedirect /> },
+              {
+                path: "members",
+                element: (
+                  <RequirePermission permission="users.view">
+                    <MembersTab />
+                  </RequirePermission>
+                ),
+              },
+              {
+                path: "members/:id",
+                element: (
+                  <RequirePermission permission="users.view">
+                    <MembersTab />
+                  </RequirePermission>
+                ),
+              },
+              {
+                path: "roles",
+                element: (
+                  <RequirePermission permission="roles.view">
+                    <RolesTab />
+                  </RequirePermission>
+                ),
+              },
+            ],
+          },
+          {
+            path: "team/roles/new",
+            element: (
+              <RequirePermission permission="roles.create">
+                <RoleEditor />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "team/roles/:id",
+            element: (
+              <RequirePermission permission="roles.view">
+                <RoleEditor />
+              </RequirePermission>
+            ),
+          },
+          { path: "profile", element: <ProfilePage /> },
+          {
+            path: "subscriptions",
+            element: (
+              <RequirePermission permission="subscriptions.view">
+                <IntegrationsPage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "subscriptions/new",
+            element: (
+              <RequirePermission permission="subscriptions.create">
+                <IntegrationNewPage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "subscriptions/:id",
+            element: (
+              <RequirePermission permission="subscriptions.view">
+                <IntegrationPage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "subscriptions/:id/mapper",
+            element: (
+              <RequirePermission permission="subscriptions.edit">
+                <MappingEditor />
+              </RequirePermission>
+            ),
+          },
+          // the gateway/job list pages live inside /subscriptions now
+          { path: "api-gateways", element: <Navigate to="/subscriptions?types=api-gateways" replace /> },
+          { path: "bus-gateways", element: <Navigate to="/subscriptions?types=bus-gateways" replace /> },
+          { path: "scheduled-jobs", element: <Navigate to="/subscriptions?types=scheduled-jobs" replace /> },
+          {
+            path: "api-gateways/new",
+            element: (
+              <RequirePermission permission="api-gateways.create">
+                <ApiGatewayNewPage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "api-gateways/:id",
+            element: (
+              <RequirePermission permission="api-gateways.view">
+                <ApiGatewayPage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "api-gateways/:id/attach",
+            element: (
+              <RequirePermission permission="api-gateways.edit">
+                <AttachPartnerWizard />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "api-gateways/:id/attachments/:partnerId",
+            element: (
+              <RequirePermission permission="api-gateways.edit">
+                <EditAttachmentPage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "bus-gateways/new",
+            element: (
+              <RequirePermission permission="bus-gateways.create">
+                <BusGatewayNewPage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "bus-gateways/:id",
+            element: (
+              <RequirePermission permission="bus-gateways.view">
+                <BusGatewayPage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "bus-gateways/:id/add-route",
+            element: (
+              <RequirePermission permission="bus-gateways.edit">
+                <AddRouteWizard />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "bus-gateways/:id/routes/:routeId",
+            element: (
+              <RequirePermission permission="bus-gateways.edit">
+                <EditRoutePage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "scheduled-jobs/new",
+            element: (
+              <RequirePermission permission="subscriptions.create">
+                <NewScheduledJobWizard />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "partners",
+            element: (
+              <RequirePermission permission="partners.view">
+                <PartnersPage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "partners/new",
+            element: (
+              <RequirePermission permission="partners.create">
+                <PartnerNewPage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "partners/:id",
+            element: (
+              <RequirePermission permission="partners.view">
+                <PartnerPage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "information-types",
+            element: (
+              <RequirePermission permission="documents.view">
+                <InformationTypesPage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "information-types/new",
+            element: (
+              <RequirePermission permission="documents.create">
+                <InformationTypeNewPage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "information-types/:id",
+            element: (
+              <RequirePermission permission="documents.view">
+                <InformationTypePage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "global-values",
+            element: (
+              <RequirePermission permission="global-values.view">
+                <GlobalValueSetsPage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "global-values/:id",
+            element: (
+              <RequirePermission permission="global-values.view">
+                <GlobalValueSetPage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "notifiers",
+            element: (
+              <RequirePermission permission="notifiers.view">
+                <NotifiersPage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "notifiers/:id",
+            element: (
+              <RequirePermission permission="notifiers.view">
+                <NotifierPage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "retry-policies",
+            element: (
+              <RequirePermission permission="retry-policies.view">
+                <RetryPoliciesPage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "retry-policies/:id",
+            element: (
+              <RequirePermission permission="retry-policies.view">
+                <RetryPolicyPage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "work-groups",
+            element: (
+              <RequirePermission permission="workgroups.view">
+                <WorkGroupsPage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "work-groups/new",
+            element: (
+              <RequirePermission permission="workgroups.create">
+                <WorkGroupNewPage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "work-groups/:id",
+            element: (
+              <RequirePermission permission="workgroups.view">
+                <WorkGroupPage />
+              </RequirePermission>
+            ),
+          },
+          {
+            path: "settings",
+            element: (
+              <RequirePermission permission="settings.view">
+                <SettingsPage />
+              </RequirePermission>
+            ),
+          },
+          ...placeholderRoutes,
+          { path: "*", element: <NotFoundPage /> },
+        ],
+      },
+    ],
+  },
+], { basename });
diff --git a/SW.Bitween.Web/ClientApp/tsconfig.app.json b/SW.Bitween.Web/ClientApp/tsconfig.app.json
new file mode 100644
index 00000000..189ce0ef
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/tsconfig.app.json
@@ -0,0 +1,28 @@
+{
+  "compilerOptions": {
+    "tsBuildInfoFile": "./node_modules/.tmp/tsconfig.app.tsbuildinfo",
+    "target": "es2023",
+    "lib": ["ES2023", "DOM"],
+    "module": "esnext",
+    "types": ["vite/client"],
+    "allowArbitraryExtensions": true,
+    "skipLibCheck": true,
+
+    /* Bundler mode */
+    "moduleResolution": "bundler",
+    "allowImportingTsExtensions": true,
+    "verbatimModuleSyntax": true,
+    "moduleDetection": "force",
+    "noEmit": true,
+    "jsx": "react-jsx",
+
+    /* Linting */
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "erasableSyntaxOnly": true,
+    "noFallthroughCasesInSwitch": true
+  },
+  "include": ["src"],
+  "exclude": ["src/**/__tests__/**", "src/lib/mapping"],
+  "references": [{ "path": "./tsconfig.mapping.json" }]
+}
diff --git a/SW.Bitween.Web/ClientApp/tsconfig.json b/SW.Bitween.Web/ClientApp/tsconfig.json
new file mode 100644
index 00000000..fb1048e9
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/tsconfig.json
@@ -0,0 +1,8 @@
+{
+  "files": [],
+  "references": [
+    { "path": "./tsconfig.app.json" },
+    { "path": "./tsconfig.node.json" },
+    { "path": "./tsconfig.mapping.json" }
+  ]
+}
diff --git a/SW.Bitween.Web/ClientApp/tsconfig.mapping.json b/SW.Bitween.Web/ClientApp/tsconfig.mapping.json
new file mode 100644
index 00000000..5a4badc0
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/tsconfig.mapping.json
@@ -0,0 +1,32 @@
+{
+  "compilerOptions": {
+    "composite": true,
+    "tsBuildInfoFile": "./node_modules/.tmp/tsconfig.mapping.tsbuildinfo",
+    "outDir": "./node_modules/.tmp/mapping-decl",
+    "declaration": true,
+    "emitDeclarationOnly": true,
+    "target": "es2023",
+    "lib": ["ES2023", "DOM"],
+    "module": "esnext",
+    "types": ["vite/client"],
+    "allowArbitraryExtensions": true,
+    "skipLibCheck": true,
+
+    /* Bundler mode */
+    "moduleResolution": "bundler",
+    "allowImportingTsExtensions": true,
+    "moduleDetection": "force",
+    "jsx": "react-jsx",
+
+    /* The mapping lib is copied verbatim from the legacy Bitween-UI repo
+       (see BITWEEN_UI_REDESIGN_BRIEF.md §9 chunk F). It is held to the legacy
+       repo's laxer rules on purpose so the files stay byte-identical — the port's
+       whole guarantee is that the mapping logic is untouched. The stricter
+       app-wide flags (verbatimModuleSyntax / noUnusedLocals / noUnusedParameters)
+       are intentionally NOT applied here. */
+    "verbatimModuleSyntax": false,
+    "noFallthroughCasesInSwitch": true
+  },
+  "include": ["src/lib/mapping"],
+  "exclude": ["src/lib/mapping/__tests__/**"]
+}
diff --git a/SW.Bitween.Web/ClientApp/tsconfig.node.json b/SW.Bitween.Web/ClientApp/tsconfig.node.json
new file mode 100644
index 00000000..8455dcbc
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/tsconfig.node.json
@@ -0,0 +1,23 @@
+{
+  "compilerOptions": {
+    "tsBuildInfoFile": "./node_modules/.tmp/tsconfig.node.tsbuildinfo",
+    "target": "es2023",
+    "lib": ["ES2023"],
+    "types": ["node"],
+    "skipLibCheck": true,
+
+    /* Bundler mode */
+    "module": "nodenext",
+    "allowImportingTsExtensions": true,
+    "verbatimModuleSyntax": true,
+    "moduleDetection": "force",
+    "noEmit": true,
+
+    /* Linting */
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "erasableSyntaxOnly": true,
+    "noFallthroughCasesInSwitch": true
+  },
+  "include": ["vite.config.ts"]
+}
diff --git a/SW.Bitween.Web/ClientApp/vite.config.ts b/SW.Bitween.Web/ClientApp/vite.config.ts
new file mode 100644
index 00000000..c8b58f62
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/vite.config.ts
@@ -0,0 +1,18 @@
+import { defineConfig } from "vite";
+import react from "@vitejs/plugin-react";
+import tailwindcss from "@tailwindcss/vite";
+
+// https://vite.dev/config/
+export default defineConfig({
+  // Served by SW.Bitween.Web at the site root. router.tsx derives the router's
+  // basename from this, so this is the only place the base path is declared.
+  base: "/",
+  plugins: [react(), tailwindcss()],
+  build: {
+    // Build straight into the backend's webroot so `dotnet run` serves it.
+    // emptyOutDir stays off because wwwroot has pre-existing legacy content;
+    // the SPA owns index.html, assets/ and brand/ in there (gitignored).
+    outDir: "../wwwroot",
+    emptyOutDir: false,
+  },
+});
diff --git a/SW.Bitween.Web/ClientApp/vitest.config.ts b/SW.Bitween.Web/ClientApp/vitest.config.ts
new file mode 100644
index 00000000..847ad8aa
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/vitest.config.ts
@@ -0,0 +1,12 @@
+import { defineConfig } from "vitest/config";
+
+// Standalone test config so the build config (vite.config.ts) stays untouched.
+// `globals: true` matches the legacy Bitween-UI setup the mapping suites were
+// copied from verbatim, so those files run unmodified — which is the proof the
+// mapping logic wasn't touched during the port.
+export default defineConfig({
+  test: {
+    globals: true,
+    include: ["src/lib/mapping/__tests__/**/*.test.ts"],
+  },
+});
diff --git a/SW.Bitween.Web/ClientApp/yarn.lock b/SW.Bitween.Web/ClientApp/yarn.lock
new file mode 100644
index 00000000..b89e15cc
--- /dev/null
+++ b/SW.Bitween.Web/ClientApp/yarn.lock
@@ -0,0 +1,1113 @@
+# THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
+# yarn lockfile v1
+
+
+"@azure/msal-browser@^4.0.1":
+  version "4.30.0"
+  resolved "https://registry.yarnpkg.com/@azure/msal-browser/-/msal-browser-4.30.0.tgz#30fbaf7ae26d9ab7671aabca3d41f9c52d2a3937"
+  integrity sha512-HBBKfbZkMVzzF5bofvS1cXuNHFVc+gt4/HOnCmG/0hsHuZRJvJvDg/+7nTwIpoqvJc8BQp5o23rBUfisOLxR+w==
+  dependencies:
+    "@azure/msal-common" "15.17.0"
+
+"@azure/msal-common@15.17.0":
+  version "15.17.0"
+  resolved "https://registry.yarnpkg.com/@azure/msal-common/-/msal-common-15.17.0.tgz#ae3c03378c852642b1c9a303380e945c2b897f02"
+  integrity sha512-VQ5/gTLFADkwue+FohVuCqlzFPUq4xSrX8jeZe+iwZuY6moliNC8xt86qPVNYdtbQfELDf2Nu6LI+demFPHGgw==
+
+"@emnapi/core@1.11.1":
+  version "1.11.1"
+  resolved "https://registry.yarnpkg.com/@emnapi/core/-/core-1.11.1.tgz#b9e1064f3a6b1631e241e638eb48d736bfd372a6"
+  integrity sha512-RSvbQmHzdKzNsLYa/wHrbc3KN4sYLKAdPZxqiM2HATqv/SBk2/ENSHpvXGaLOMcsAyz0poEGqkmmKYG3OWiJEQ==
+  dependencies:
+    "@emnapi/wasi-threads" "1.2.2"
+    tslib "^2.4.0"
+
+"@emnapi/core@^1.11.1":
+  version "1.11.2"
+  resolved "https://registry.yarnpkg.com/@emnapi/core/-/core-1.11.2.tgz#fab0a0f3c492d11f5a9ac9065d0d73955ee1c1c9"
+  integrity sha512-TC8MkTuZUtcTSiFeuC0ksCh9QIJ5+F21MvZ4Wn4ORfYaFJ/0dsiudv5tVkejgwZlwQ39jL9WWDe2lz8x0WglOA==
+  dependencies:
+    "@emnapi/wasi-threads" "1.2.2"
+    tslib "^2.4.0"
+
+"@emnapi/runtime@1.11.1":
+  version "1.11.1"
+  resolved "https://registry.yarnpkg.com/@emnapi/runtime/-/runtime-1.11.1.tgz#58f1f3d5d81a9b12f793ab688c96371901027c24"
+  integrity sha512-vgj7R3y3Wgx24IQaGPA/R6YFXLHVMOZ0uVEyIQPaWs+rd1AzfEMXlAC22FYwO1XkKR6NPsq7mUandH8oIRdZFw==
+  dependencies:
+    tslib "^2.4.0"
+
+"@emnapi/runtime@^1.11.1":
+  version "1.11.2"
+  resolved "https://registry.yarnpkg.com/@emnapi/runtime/-/runtime-1.11.2.tgz#eb22f04d76febfdf4f87fdaff54c8a53f6bf0dbd"
+  integrity sha512-kyOl3X0DuTiT1h2ft8r2fYO8JYtU9a9Xis/zBSiGArNaagCOWx90N1k2wxp18czFDH+OgcWGb5ZP/XMt3dcyPA==
+  dependencies:
+    tslib "^2.4.0"
+
+"@emnapi/wasi-threads@1.2.2", "@emnapi/wasi-threads@^1.2.2":
+  version "1.2.2"
+  resolved "https://registry.yarnpkg.com/@emnapi/wasi-threads/-/wasi-threads-1.2.2.tgz#4c93becf5bfa3b13d1bbdcc06aee38321ad8139a"
+  integrity sha512-c95qOXkHdydNKhscBTebqEC1CVAZpyqOfVfBzQ1qgzyl3gfeldUjIggDbIZgDKsHLgnsM+igH7TJ/eAasaVuMA==
+  dependencies:
+    tslib "^2.4.0"
+
+"@floating-ui/core@^1.8.0":
+  version "1.8.0"
+  resolved "https://registry.yarnpkg.com/@floating-ui/core/-/core-1.8.0.tgz#d01c0bbea02e4a57f6fd7d5de6fc2c5c7dca40e1"
+  integrity sha512-0CIZ5itps/8x7BG8dEIhs53BvCUH2PCoogtakwRTut+Arm58sJooJ0AuZhLw2HJYIR5cMLNPBSS728sPho2khQ==
+  dependencies:
+    "@floating-ui/utils" "^0.2.12"
+
+"@floating-ui/dom@^1.8.0":
+  version "1.8.0"
+  resolved "https://registry.yarnpkg.com/@floating-ui/dom/-/dom-1.8.0.tgz#8a20e6facbe2456afdbeb6c8b968a72df689cf63"
+  integrity sha512-yXSrzeHZBTZadLOlfyhCkJHNeLJnHRnRInwdZ40L7ZiaAtrBwoYlsDrX3v5zB1Utk7CLfzcOVnVVWoXEky7Ceg==
+  dependencies:
+    "@floating-ui/core" "^1.8.0"
+    "@floating-ui/utils" "^0.2.12"
+
+"@floating-ui/react-dom@^2.1.2":
+  version "2.1.9"
+  resolved "https://registry.yarnpkg.com/@floating-ui/react-dom/-/react-dom-2.1.9.tgz#f42a5f469ea56d6f2e2751efa1cf936243a87355"
+  integrity sha512-JDjEFGCpImxDCA7JJKviA0M9+RtmJdj0m/NVU5IMgBK+AmZouAQQ7/+2GLH0GXXY0YMw9oXPB8hKdbPYg5QLYg==
+  dependencies:
+    "@floating-ui/dom" "^1.8.0"
+
+"@floating-ui/react@^0.26.16":
+  version "0.26.28"
+  resolved "https://registry.yarnpkg.com/@floating-ui/react/-/react-0.26.28.tgz#93f44ebaeb02409312e9df9507e83aab4a8c0dc7"
+  integrity sha512-yORQuuAtVpiRjpMhdc0wJj06b9JFjrYF4qp96j++v2NBpbi6SEGF7donUJ3TMieerQ6qVkAv1tgr7L4r5roTqw==
+  dependencies:
+    "@floating-ui/react-dom" "^2.1.2"
+    "@floating-ui/utils" "^0.2.8"
+    tabbable "^6.0.0"
+
+"@floating-ui/utils@^0.2.12", "@floating-ui/utils@^0.2.8":
+  version "0.2.12"
+  resolved "https://registry.yarnpkg.com/@floating-ui/utils/-/utils-0.2.12.tgz#afefe785949f16ac4cdd1e695935a321572dd56a"
+  integrity sha512-HpCo8tmWzLVad5s2d19EhAz5zqrrQ6s69qd6moPMQvkOuSwDT1YgRfWSVuc4ennqrgv3OHppiOGMQ7oC13yIww==
+
+"@fontsource-variable/instrument-sans@^5.2.8":
+  version "5.2.8"
+  resolved "https://registry.yarnpkg.com/@fontsource-variable/instrument-sans/-/instrument-sans-5.2.8.tgz#357753c4cb92380130bff79e58ac9b89e6a97bbb"
+  integrity sha512-mTCaukbdIjjoipj2E3Q5XoZM3ZxJWdzyHevf/LG/0PHlfF9Q85pxOM7B7A9MerFyxmRzz5kVlumgIvgDSG4CPg==
+
+"@fontsource-variable/jetbrains-mono@^5.2.8":
+  version "5.2.8"
+  resolved "https://registry.yarnpkg.com/@fontsource-variable/jetbrains-mono/-/jetbrains-mono-5.2.8.tgz#73031a6973a09b0590e8877ad13a0312ef711681"
+  integrity sha512-WBA9elru6Jdp5df2mES55wuOO0WIrn3kpXnI4+W2ek5u3ZgLS9XS4gmIlcQhiZOWEKl95meYdvK7xI+ETLCq/Q==
+
+"@headlessui/react@^2.2.10":
+  version "2.2.10"
+  resolved "https://registry.yarnpkg.com/@headlessui/react/-/react-2.2.10.tgz#ad69258abcb9efea27a4b37e06e8c9cafd39ca63"
+  integrity sha512-5pVLNK9wlpxTUTy9GpgbX/SdcRh+HBnPktjM2wbiLTH4p+2EPHBO1aoSryUCuKUIItdDWO9ITlhUL8UnUN/oIA==
+  dependencies:
+    "@floating-ui/react" "^0.26.16"
+    "@react-aria/focus" "^3.20.2"
+    "@react-aria/interactions" "^3.25.0"
+    "@tanstack/react-virtual" "^3.13.9"
+    use-sync-external-store "^1.5.0"
+
+"@internationalized/date@^3.12.2":
+  version "3.12.2"
+  resolved "https://registry.yarnpkg.com/@internationalized/date/-/date-3.12.2.tgz#08a65edd2a29775e22c168ddc029fb54bf9b8a85"
+  integrity sha512-FY1Y+H64NDs+HAF6omlnWxm3mEpfgaCSWtL5l551ZZfImA+kGjPFgrnJrGjH6lfmLL0g8Z/mBu1R3kufeCp6Jw==
+  dependencies:
+    "@swc/helpers" "^0.5.0"
+
+"@internationalized/number@^3.6.7":
+  version "3.6.7"
+  resolved "https://registry.yarnpkg.com/@internationalized/number/-/number-3.6.7.tgz#5a0a8fa413b5f8679a59dcf37e2a74dc508b8371"
+  integrity sha512-3ji1fcrT+FPAK86UqEhB/psHixYo6niWPJtt7+qRaYFynt/BaJG8GhAPimtWUpEiVSTq8ZM8L5psMxGquiB/Vg==
+  dependencies:
+    "@swc/helpers" "^0.5.0"
+
+"@internationalized/string@^3.2.9":
+  version "3.2.9"
+  resolved "https://registry.yarnpkg.com/@internationalized/string/-/string-3.2.9.tgz#0e50385c411eac1275d91cdeb56dd7fbc234997f"
+  integrity sha512-kzP/M/mbQxODlmOt4bIQZ2SBVUWUSqMLXooXixnX7noche8WHaQcA+nwFN1K2KCF/cp+LDUhcJsCicwkvhD1pg==
+  dependencies:
+    "@swc/helpers" "^0.5.0"
+
+"@jridgewell/gen-mapping@^0.3.5":
+  version "0.3.13"
+  resolved "https://registry.yarnpkg.com/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz#6342a19f44347518c93e43b1ac69deb3c4656a1f"
+  integrity sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==
+  dependencies:
+    "@jridgewell/sourcemap-codec" "^1.5.0"
+    "@jridgewell/trace-mapping" "^0.3.24"
+
+"@jridgewell/remapping@^2.3.5":
+  version "2.3.5"
+  resolved "https://registry.yarnpkg.com/@jridgewell/remapping/-/remapping-2.3.5.tgz#375c476d1972947851ba1e15ae8f123047445aa1"
+  integrity sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ==
+  dependencies:
+    "@jridgewell/gen-mapping" "^0.3.5"
+    "@jridgewell/trace-mapping" "^0.3.24"
+
+"@jridgewell/resolve-uri@^3.1.0":
+  version "3.1.2"
+  resolved "https://registry.yarnpkg.com/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz#7a0ee601f60f99a20c7c7c5ff0c80388c1189bd6"
+  integrity sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==
+
+"@jridgewell/sourcemap-codec@^1.4.14", "@jridgewell/sourcemap-codec@^1.5.0", "@jridgewell/sourcemap-codec@^1.5.5":
+  version "1.5.5"
+  resolved "https://registry.yarnpkg.com/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz#6912b00d2c631c0d15ce1a7ab57cd657f2a8f8ba"
+  integrity sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==
+
+"@jridgewell/trace-mapping@^0.3.24":
+  version "0.3.31"
+  resolved "https://registry.yarnpkg.com/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz#db15d6781c931f3a251a3dac39501c98a6082fd0"
+  integrity sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==
+  dependencies:
+    "@jridgewell/resolve-uri" "^3.1.0"
+    "@jridgewell/sourcemap-codec" "^1.4.14"
+
+"@monaco-editor/loader@^1.5.0":
+  version "1.7.0"
+  resolved "https://registry.yarnpkg.com/@monaco-editor/loader/-/loader-1.7.0.tgz#967aaa4601b19e913627688dfe8159d57549e793"
+  integrity sha512-gIwR1HrJrrx+vfyOhYmCZ0/JcWqG5kbfG7+d3f/C1LXk2EvzAbHSg3MQ5lO2sMlo9izoAZ04shohfKLVT6crVA==
+  dependencies:
+    state-local "^1.0.6"
+
+"@monaco-editor/react@^4.7.0":
+  version "4.7.0"
+  resolved "https://registry.yarnpkg.com/@monaco-editor/react/-/react-4.7.0.tgz#35a1ec01bfe729f38bfc025df7b7bac145602a60"
+  integrity sha512-cyzXQCtO47ydzxpQtCGSQGOC8Gk3ZUeBXFAxD+CWXYFo5OqZyZUonFl0DwUlTyAfRHntBfw2p3w4s9R6oe1eCA==
+  dependencies:
+    "@monaco-editor/loader" "^1.5.0"
+
+"@napi-rs/wasm-runtime@^1.1.4", "@napi-rs/wasm-runtime@^1.1.6":
+  version "1.1.6"
+  resolved "https://registry.yarnpkg.com/@napi-rs/wasm-runtime/-/wasm-runtime-1.1.6.tgz#ed33806d0f9be98dc76d0c3d4fd872fda701b5d5"
+  integrity sha512-ZLv/JdUfkvOy9eCnnBaGfiO+XimbjebAeO+MRQqD/B+FR1tnRN0tpKSJHRbE8sFfS6aqsXZ67TQjfwfsxULVbg==
+  dependencies:
+    "@tybys/wasm-util" "^0.10.3"
+
+"@oxc-project/types@=0.139.0":
+  version "0.139.0"
+  resolved "https://registry.yarnpkg.com/@oxc-project/types/-/types-0.139.0.tgz#38d76b9dbf934c2a02be174fb32ceebf182fe742"
+  integrity sha512-r9gHphtCs+1M7J0pw6Sn/hh/Wpa/iQrOOkrNAlVLF/gHq+/CJmHIWKKUUhdWjcD6CIa8idarspCsASiXCXvFUw==
+
+"@oxlint/binding-android-arm-eabi@1.74.0":
+  version "1.74.0"
+  resolved "https://registry.yarnpkg.com/@oxlint/binding-android-arm-eabi/-/binding-android-arm-eabi-1.74.0.tgz#994edbb0a457a0311ef0cc678bdb659c0b0050e9"
+  integrity sha512-+gHd12muVI9ZLBaWLPkHt3Fj7jihFjgQ1MGtBaRL8vWrWrI0P7dLUty/cHrHS0oqPYIRgQUJsPu2CExQuMcwNw==
+
+"@oxlint/binding-android-arm64@1.74.0":
+  version "1.74.0"
+  resolved "https://registry.yarnpkg.com/@oxlint/binding-android-arm64/-/binding-android-arm64-1.74.0.tgz#d1d99acb90b2b59d5c1e9897024960769a1f9055"
+  integrity sha512-xjKdoMB+H+RCOByv/7l7nfIGW9mlOisqYdcyC75UqYuQecLpReAeEYUf2CNeDEI3KtmUgxpRw/+c63y4AeF/Bw==
+
+"@oxlint/binding-darwin-arm64@1.74.0":
+  version "1.74.0"
+  resolved "https://registry.yarnpkg.com/@oxlint/binding-darwin-arm64/-/binding-darwin-arm64-1.74.0.tgz#d1553475634eba1b69935e1d5eba009f6273df05"
+  integrity sha512-iUK7wvc6sejMKsC+Pt67mntoF5weFcyEunhZfLJceU6gL419mexz5wBkSx/EnkFBExMLNtOi9fnDSc5xfK0IzQ==
+
+"@oxlint/binding-darwin-x64@1.74.0":
+  version "1.74.0"
+  resolved "https://registry.yarnpkg.com/@oxlint/binding-darwin-x64/-/binding-darwin-x64-1.74.0.tgz#4d666398406b66d31af5117e72187dcb11828606"
+  integrity sha512-ggKc/tn5SJ1u2yG2izC6VKODfYKV8MQ2AicJlNzOjuyrC29udvOef6/JzK2r32xqCnBDLFouR1VCkjzEI0/N9Q==
+
+"@oxlint/binding-freebsd-x64@1.74.0":
+  version "1.74.0"
+  resolved "https://registry.yarnpkg.com/@oxlint/binding-freebsd-x64/-/binding-freebsd-x64-1.74.0.tgz#2884cb55c1134fec7f32e92c191412c5b136de5f"
+  integrity sha512-u++dH/43jy9hTLbneaWlS0gla/Bp1JdwJ2zgevCl8nDFUh6qRCGMxcL0f0lb7By3A9p/LfFr+7cG4HU1hG856g==
+
+"@oxlint/binding-linux-arm-gnueabihf@1.74.0":
+  version "1.74.0"
+  resolved "https://registry.yarnpkg.com/@oxlint/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.74.0.tgz#9b4d2a448530ba0c135d741fe409a8fbf4cb69dc"
+  integrity sha512-Sj1zmtFDVTPeIbIz4ZfcXAbFHqCmKCXdCUlAJzvTF7I20NTH1RDpoF2PhkqNODutJzVhJYmm3oz0GwgY+tvE2g==
+
+"@oxlint/binding-linux-arm-musleabihf@1.74.0":
+  version "1.74.0"
+  resolved "https://registry.yarnpkg.com/@oxlint/binding-linux-arm-musleabihf/-/binding-linux-arm-musleabihf-1.74.0.tgz#f757ff57227688090919ebfa70f9759228746d2d"
+  integrity sha512-//PKyQb/tQXcHArx2f7z+oVI/eMS2Jpv+edNuAtOrgIhWdGcpHxogveAxzmF2rpH1AIHp4Hq04RF/rgJdiICnQ==
+
+"@oxlint/binding-linux-arm64-gnu@1.74.0":
+  version "1.74.0"
+  resolved "https://registry.yarnpkg.com/@oxlint/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.74.0.tgz#26c715d6a96e1d2a3483b510a36e354c5b24ef1f"
+  integrity sha512-/k1Me+aX2tjuH10K62mLS0y8cLkJBHX6Ce0xPK+eWeel4bSdEGZ8dv4+hYMzg0GrSmjwy4yAYsDPeEeKBft/2w==
+
+"@oxlint/binding-linux-arm64-musl@1.74.0":
+  version "1.74.0"
+  resolved "https://registry.yarnpkg.com/@oxlint/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.74.0.tgz#9aea8604b9db2123470b1e63bb6a950f03eb8cac"
+  integrity sha512-3tFSjBxc5D8/zvjEuLvOqcA8ZXKD0+6NuaVO/edeamNc49MoAsbfaC9s1UiwODwgF6slGaF8yJA2TPkukd77tg==
+
+"@oxlint/binding-linux-ppc64-gnu@1.74.0":
+  version "1.74.0"
+  resolved "https://registry.yarnpkg.com/@oxlint/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.74.0.tgz#e0a9270fdb3b8da8d7959ca1fb888585a603130d"
+  integrity sha512-9QggtPkSPXOCTu8Szis7auOK/sC7KdQaN+/TujP7YVVhzCAOhgdRfgv8uEz0r2tk5xdgus5rLYUrCDoZNtiRUw==
+
+"@oxlint/binding-linux-riscv64-gnu@1.74.0":
+  version "1.74.0"
+  resolved "https://registry.yarnpkg.com/@oxlint/binding-linux-riscv64-gnu/-/binding-linux-riscv64-gnu-1.74.0.tgz#6ffa5b16fb09011aeddf36b03710c300c1a2a937"
+  integrity sha512-VM5VPUJ4DJIWiK+AZn8FScUqMr6OFrCAYybMYjEEi7W13ParI64MByiXTkKMqZpBmvQ9zxl9Ebq2VUOiZRJYUg==
+
+"@oxlint/binding-linux-riscv64-musl@1.74.0":
+  version "1.74.0"
+  resolved "https://registry.yarnpkg.com/@oxlint/binding-linux-riscv64-musl/-/binding-linux-riscv64-musl-1.74.0.tgz#a5820666ed566cbe8edeacc46f82a9e87eb0abaa"
+  integrity sha512-SaDY1gh9rOA592J54g+gu5hkOFFQBZsMmIYHs+NRHG+Uq0OxtuuCXMWQ3vu1830Eugv5uMXyjG+bv2Z9y4IXjw==
+
+"@oxlint/binding-linux-s390x-gnu@1.74.0":
+  version "1.74.0"
+  resolved "https://registry.yarnpkg.com/@oxlint/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.74.0.tgz#51b7ef319f61762adc4869d1dedb935eb99c5e52"
+  integrity sha512-ZATQeHZCyr6MbDveg0obD5sxLHFOghtOdC5jwVwYlvFWqtFOxctgFEG6Ef/64hYvZrWyhyCckB10AelqLopeDA==
+
+"@oxlint/binding-linux-x64-gnu@1.74.0":
+  version "1.74.0"
+  resolved "https://registry.yarnpkg.com/@oxlint/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.74.0.tgz#e8622c2fc11b9890cf5f69a3020a6f7bec054ba2"
+  integrity sha512-+aIvJyrdeD7LwCQ2WYLMUWNmnbeDRSPb40aBYtPjD9+PTqUwgJnk+HK5yLfSMeqXrMrDhE9uTmtt2y50tvjhHw==
+
+"@oxlint/binding-linux-x64-musl@1.74.0":
+  version "1.74.0"
+  resolved "https://registry.yarnpkg.com/@oxlint/binding-linux-x64-musl/-/binding-linux-x64-musl-1.74.0.tgz#d696782ff76ddb99bae8e22d1ddf2ce83d03ef05"
+  integrity sha512-XyktaR8lhK2qWiCK0Tk8oYD+/cgn+oHA6ddRnxSSXUKkkojkV78CmShZUxQF+yrBFs0SuW+JBOPG6hecyc/iZg==
+
+"@oxlint/binding-openharmony-arm64@1.74.0":
+  version "1.74.0"
+  resolved "https://registry.yarnpkg.com/@oxlint/binding-openharmony-arm64/-/binding-openharmony-arm64-1.74.0.tgz#24d9f9c013f3954973eea8632d5f2ce6082c5fd2"
+  integrity sha512-mzbjrPl4neaVUiJ1fUiEUxTGaSZBoiKtaoB6jmIpz9S+VOA2vDYmJpihQ82w6178V5jxziclTg8Cgj5yF6tTDg==
+
+"@oxlint/binding-win32-arm64-msvc@1.74.0":
+  version "1.74.0"
+  resolved "https://registry.yarnpkg.com/@oxlint/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.74.0.tgz#deebc14f0e6261de3488945ef64b21bb2e4338ba"
+  integrity sha512-vUAe9okpS2Oa5+lX67lqHMuNUvfkleRKwrUDJ/WJBsgmddvZ1mrsh2HVmuFDRzqFELhaJhFaCNOuR6a7L3rtIA==
+
+"@oxlint/binding-win32-ia32-msvc@1.74.0":
+  version "1.74.0"
+  resolved "https://registry.yarnpkg.com/@oxlint/binding-win32-ia32-msvc/-/binding-win32-ia32-msvc-1.74.0.tgz#ef3abbea80c30242991896d2754ed0eb3ea6cc59"
+  integrity sha512-yyXXJyYYSXL4I8K8jAWjJs+J3fa9gH2JmEbo4f5adm+1tNC9itseicBNuwK7BDHvqQ5J534s+yDULu89vYL2ZQ==
+
+"@oxlint/binding-win32-x64-msvc@1.74.0":
+  version "1.74.0"
+  resolved "https://registry.yarnpkg.com/@oxlint/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.74.0.tgz#bfd70b708910cd3f6f897063efcc3f088e22a81e"
+  integrity sha512-VTC9IYTIMrVUk/i6Ms1ohzzDKZFkWn0KU2OBbPBzgmVZ2V30165T/zK4LztTr0Xgp9fZ1qQZ1rsZAu/rEmySlA==
+
+"@playwright/test@^1.61.1":
+  version "1.61.1"
+  resolved "https://registry.yarnpkg.com/@playwright/test/-/test-1.61.1.tgz#48568dc22af7819e55fa5e8e3bc79b7e6a3e6675"
+  integrity sha512-8nKv6+0RJSL9FE4jYOEGXnPeM/Hg12qZpmqzZjRh3qM0Y7c3z1mrOTfFLids72RDQYVh9WpLEfR5WdpNX4fkig==
+  dependencies:
+    playwright "1.61.1"
+
+"@react-aria/focus@^3.20.2":
+  version "3.22.1"
+  resolved "https://registry.yarnpkg.com/@react-aria/focus/-/focus-3.22.1.tgz#7e7ba6a2250135728eb68ffa21e422ec25a16800"
+  integrity sha512-CPxtkyrBi/HYY5P3lE/57sQ6qfa0lN8E55TOm89H0kNGv0lKt+/0zP7lWERzBjRr5IxBVrQX4gFEowBN52LPaA==
+  dependencies:
+    "@swc/helpers" "^0.5.0"
+    react-aria "^3.48.0"
+
+"@react-aria/interactions@^3.25.0":
+  version "3.28.1"
+  resolved "https://registry.yarnpkg.com/@react-aria/interactions/-/interactions-3.28.1.tgz#852294ae63f6a7d8aeeba3a1e7343daa8cd8507c"
+  integrity sha512-Bqb+HrD5I5MHS2SKBhISYqo2SW8Y2dfzgF/Y1lIJq7xqLxheo9vzxPGEHhz+XzkgGfoqEJx8A6a3C7uiqS3HWA==
+  dependencies:
+    "@react-types/shared" "^3.34.0"
+    "@swc/helpers" "^0.5.0"
+    react-aria "^3.48.0"
+
+"@react-types/shared@^3.34.0", "@react-types/shared@^3.36.0":
+  version "3.36.0"
+  resolved "https://registry.yarnpkg.com/@react-types/shared/-/shared-3.36.0.tgz#52e713c6bae8e117967bf1d19d89db3a56219037"
+  integrity sha512-DkP/H0C2YjjS7gZWKNqOmU8a16qHPjQNdzMwmTq9SzplM6Iw0kVMTZ0OIoe6FOgGqa+FwMsE2QbPjh/n3g/jXQ==
+
+"@rolldown/binding-android-arm64@1.1.5":
+  version "1.1.5"
+  resolved "https://registry.yarnpkg.com/@rolldown/binding-android-arm64/-/binding-android-arm64-1.1.5.tgz#f58cb9a0a8128ed0582282720528547fc5c035f3"
+  integrity sha512-lZg8fqIv2v7FF237bwMgzGZEJvGL79/s5knJ/i6FmsGF4XXlzccZ4jb+TrFIxtSSxFtIpdsgrPZeMk1I9AFcyQ==
+
+"@rolldown/binding-darwin-arm64@1.1.5":
+  version "1.1.5"
+  resolved "https://registry.yarnpkg.com/@rolldown/binding-darwin-arm64/-/binding-darwin-arm64-1.1.5.tgz#441144c05a4a831aa75269abc3a4a324374ea707"
+  integrity sha512-51Bnx9pNiMRKSUNtBfySkNJ9vMU9Hh3I1ozDd6gyPPYzaXCfnptUcEZxXGYFn+ul2dtcMUiqGR1Yai2K10uoTw==
+
+"@rolldown/binding-darwin-x64@1.1.5":
+  version "1.1.5"
+  resolved "https://registry.yarnpkg.com/@rolldown/binding-darwin-x64/-/binding-darwin-x64-1.1.5.tgz#c82e30652cef52c4af925d5c66c8955a40319816"
+  integrity sha512-Tm+gbfC0aHu1tBA/JvKQh32S0K6YgCHkiAF4/W6xX0K0RmNuc94VeK419dJoE65R5aRxmo+noZQSWrAMF6yb6g==
+
+"@rolldown/binding-freebsd-x64@1.1.5":
+  version "1.1.5"
+  resolved "https://registry.yarnpkg.com/@rolldown/binding-freebsd-x64/-/binding-freebsd-x64-1.1.5.tgz#c32e9ce7fa1c0fb2b80913a2a3a05c3e907d06b0"
+  integrity sha512-JMzDKCCXq93YccG5gz3hvOs1oXRKAf0XYpfOS88e+wZrC8Iugj6j68867vrYZkvpDDpKn/KoKORThmchMpF6TA==
+
+"@rolldown/binding-linux-arm-gnueabihf@1.1.5":
+  version "1.1.5"
+  resolved "https://registry.yarnpkg.com/@rolldown/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.1.5.tgz#ce90b5e22316adeb502ea010582f498cd0604f27"
+  integrity sha512-uML21j2K5TfPGutKxub+M+nLjZIrWjXQ5Grx4lCe/nimTj9B4L63zHpjXLl4y0L3mcm2htEQIb06oCG/szerNw==
+
+"@rolldown/binding-linux-arm64-gnu@1.1.5":
+  version "1.1.5"
+  resolved "https://registry.yarnpkg.com/@rolldown/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.1.5.tgz#91947110c4ddaa4eefb004e52688070977085201"
+  integrity sha512-navSiuTMogvnQoZoM/v+l3ZWo50/NTwSHSzheABx/RCnmUPaKwq9qSo4Br2OYRs21+Fz8uFqITZM3H4opOB0/Q==
+
+"@rolldown/binding-linux-arm64-musl@1.1.5":
+  version "1.1.5"
+  resolved "https://registry.yarnpkg.com/@rolldown/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.1.5.tgz#eb32b2d4108c1c702b91e8cde8a043eae5caa94d"
+  integrity sha512-lAryqH7IteztmCXQXk0etKj4wBQ7Gx5S6LjKhsgp9zb8I5bsuvU/2llH1hDQcjsFeqIsovMVN339/8pUDDBXxA==
+
+"@rolldown/binding-linux-ppc64-gnu@1.1.5":
+  version "1.1.5"
+  resolved "https://registry.yarnpkg.com/@rolldown/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.1.5.tgz#ccb943c11e5a72655cbb02fc1163541ceb640782"
+  integrity sha512-fsK/sNBnxzBlL4O1JNrZakVQxPspqpED5dLtNsZS9oOKmtSpdNIzxH2kkol5HYTWJN47sE20ztMJPxfZ89qGOg==
+
+"@rolldown/binding-linux-s390x-gnu@1.1.5":
+  version "1.1.5"
+  resolved "https://registry.yarnpkg.com/@rolldown/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.1.5.tgz#a33731ee567e90b75fac6e5e55307e8a2b3038f0"
+  integrity sha512-gLYb4BIadlfTOYT5gO503n8zQjXflgzpD0FcyKh0Mzx3rqCZKnHoJWV9xe1KXUJ5lx2JfcSHr/mhzS0PC/McAA==
+
+"@rolldown/binding-linux-x64-gnu@1.1.5":
+  version "1.1.5"
+  resolved "https://registry.yarnpkg.com/@rolldown/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.1.5.tgz#a74c01aaacedfc11c39b6feba33a5fa0c654949f"
+  integrity sha512-FjcpEKUyJygHgs1o50VYNvkt5+7Le/VEdYt0AkRpkL33MnyQfwr8l5mXwMmfmTbyMPr5vJLC+8/Gd9gXnwU1QQ==
+
+"@rolldown/binding-linux-x64-musl@1.1.5":
+  version "1.1.5"
+  resolved "https://registry.yarnpkg.com/@rolldown/binding-linux-x64-musl/-/binding-linux-x64-musl-1.1.5.tgz#28cd178494fa1e65dba412229b5ce55c4dd5cbd1"
+  integrity sha512-Me+PfPI2TMeOQk0gYWfLQZtTktrmzbr8cDboqX83XKc7UrgAi55gF+2dUkWdxd19n55Essp2yeca+O9N5rBxHg==
+
+"@rolldown/binding-openharmony-arm64@1.1.5":
+  version "1.1.5"
+  resolved "https://registry.yarnpkg.com/@rolldown/binding-openharmony-arm64/-/binding-openharmony-arm64-1.1.5.tgz#f7c75fa913fc20884d26a7d488d4f5c597cd71c0"
+  integrity sha512-yc5WrLzXks6zCQfn9Oxr8pORKyl/pF+QjHmW/Qx3qu0oyrrNC+y2JLTU1E2rcWYAmzlnqngWXHQjy51VzW70Vw==
+
+"@rolldown/binding-wasm32-wasi@1.1.5":
+  version "1.1.5"
+  resolved "https://registry.yarnpkg.com/@rolldown/binding-wasm32-wasi/-/binding-wasm32-wasi-1.1.5.tgz#c379581947787081df363ea106140fcd5fec252d"
+  integrity sha512-VbQGPX2b4r48TAMIM2cjgluIM1HYutm4pcTEJsle7iEP7sB1dFqtPLBVbdLAZCxy1txCcPxf4QFf4v8uvltPqA==
+  dependencies:
+    "@emnapi/core" "1.11.1"
+    "@emnapi/runtime" "1.11.1"
+    "@napi-rs/wasm-runtime" "^1.1.6"
+
+"@rolldown/binding-win32-arm64-msvc@1.1.5":
+  version "1.1.5"
+  resolved "https://registry.yarnpkg.com/@rolldown/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.1.5.tgz#f23c88694f7a729a12f395024aee38df80a16ba3"
+  integrity sha512-gHv82k63z4qpV5+Q1y/12KrK0ltWBukVDI8nZcbT7Tt/ZlOIVwppazneq0F93oDxTo3IgAMEDIoQh3E2n6mVsw==
+
+"@rolldown/binding-win32-x64-msvc@1.1.5":
+  version "1.1.5"
+  resolved "https://registry.yarnpkg.com/@rolldown/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.1.5.tgz#3377c8de0e56a8857f11217561147090e874cb46"
+  integrity sha512-tTZuDBPw85tEN5PQi1pnEBzDy0Z49HtScLAbD5t6hyeU92A95pRWaSMw1GZZi/RwgSgUIl0xrSlXIT/9QzvYSA==
+
+"@rolldown/pluginutils@^1.0.0", "@rolldown/pluginutils@^1.0.1":
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/@rolldown/pluginutils/-/pluginutils-1.0.1.tgz#e3fcee093fbb5ce765e1ad088ff4de2889f6f9be"
+  integrity sha512-2j9bGt5Jh8hj+vPtgzPtl72j0yRxHAyumoo6TNfAjsLB04UtpSvPbPcDcBMxz7n+9CYB0c1GxQFxYRg2jimqGw==
+
+"@standard-schema/spec@^1.1.0":
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/@standard-schema/spec/-/spec-1.1.0.tgz#a79b55dbaf8604812f52d140b2c9ab41bc150bb8"
+  integrity sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==
+
+"@swc/helpers@^0.5.0":
+  version "0.5.23"
+  resolved "https://registry.yarnpkg.com/@swc/helpers/-/helpers-0.5.23.tgz#19287d0d86d962b111376039a50c792902c9a86a"
+  integrity sha512-5lSsMOTXURePglDfvuAQUqkGek9Hg2kksOYay2m0+XR++b2NWYL/4sWyuvVBIs8oKnJaxkdi9whaL/sqN13afw==
+  dependencies:
+    tslib "^2.8.0"
+
+"@tailwindcss/node@4.3.2":
+  version "4.3.2"
+  resolved "https://registry.yarnpkg.com/@tailwindcss/node/-/node-4.3.2.tgz#2ba563b05ff662b9172c9645d78a5edd59f96eb3"
+  integrity sha512-yWP/sqEcBLaD8JuA6zNwxoYKr75qxTioYwlRwekj5Jr/I5GXnoJfjetH/psLUIv74cYTH2lBUEzBkinthoYcBg==
+  dependencies:
+    "@jridgewell/remapping" "^2.3.5"
+    enhanced-resolve "5.21.6"
+    jiti "^2.7.0"
+    lightningcss "1.32.0"
+    magic-string "^0.30.21"
+    source-map-js "^1.2.1"
+    tailwindcss "4.3.2"
+
+"@tailwindcss/oxide-android-arm64@4.3.2":
+  version "4.3.2"
+  resolved "https://registry.yarnpkg.com/@tailwindcss/oxide-android-arm64/-/oxide-android-arm64-4.3.2.tgz#add4f8eba265b20b14634a22717621a3350cd6d4"
+  integrity sha512-WHxqIuHpvZ5VtdX6GTl1Ik/Vp2YuN42Et+0CdeaVd/frQ9jAvGmvR8vLT+jk3e8/Q3x8kECB9+R17pgpp2BulA==
+
+"@tailwindcss/oxide-darwin-arm64@4.3.2":
+  version "4.3.2"
+  resolved "https://registry.yarnpkg.com/@tailwindcss/oxide-darwin-arm64/-/oxide-darwin-arm64-4.3.2.tgz#2439b7c991679c006d16ed00264c60d540567554"
+  integrity sha512-GZypeUY/IDJW3877KeM+O67vbXr3MBnbtEL4aYhNErv/JWZhye2vGSWWG9tB6iiqR2MqRNkY8IOUy4NdSZV26w==
+
+"@tailwindcss/oxide-darwin-x64@4.3.2":
+  version "4.3.2"
+  resolved "https://registry.yarnpkg.com/@tailwindcss/oxide-darwin-x64/-/oxide-darwin-x64-4.3.2.tgz#016ffbb375bb5feabab0fd42c744b3cf21647968"
+  integrity sha512-UIIzmefR6KO1sDU7MzRqAxC8iBpft/VhkGjTjnhoS6k7Z3rQ9wEgA1ODSiyH/tcSYssulNm4Ci3hOeK1jH7ccQ==
+
+"@tailwindcss/oxide-freebsd-x64@4.3.2":
+  version "4.3.2"
+  resolved "https://registry.yarnpkg.com/@tailwindcss/oxide-freebsd-x64/-/oxide-freebsd-x64-4.3.2.tgz#6fe112b103ff659671483293c61c853651635ee0"
+  integrity sha512-GN+uAmcI6DNspnCDwtOAZrTz6oukJnp337qZvxqCGLd3BHBzJpO0ZbTLRvJNdztOeAmTzewewGIMPb0tk2R4WA==
+
+"@tailwindcss/oxide-linux-arm-gnueabihf@4.3.2":
+  version "4.3.2"
+  resolved "https://registry.yarnpkg.com/@tailwindcss/oxide-linux-arm-gnueabihf/-/oxide-linux-arm-gnueabihf-4.3.2.tgz#30fffb495ac59ea01046ee48c2bfa247ca6eda5e"
+  integrity sha512-4ABn7qSbdHRwTiDiuWNegCyb5+2FJ4vKIKc3DmKrvAFw7MU1Lm11dIkTPwUaFdTzc7IsOpDbqBrlh0x6y36U/w==
+
+"@tailwindcss/oxide-linux-arm64-gnu@4.3.2":
+  version "4.3.2"
+  resolved "https://registry.yarnpkg.com/@tailwindcss/oxide-linux-arm64-gnu/-/oxide-linux-arm64-gnu-4.3.2.tgz#910f4754e9aa8f8b04c018bebab627a52bd568b9"
+  integrity sha512-wDgEIGwoM8w8pufh9LVt1PahDgNdKXrLC2qfAnV3vAmococ9RWbxeAw4pxPttd/TsJfwjyLf90Dg1y9y8I6Emw==
+
+"@tailwindcss/oxide-linux-arm64-musl@4.3.2":
+  version "4.3.2"
+  resolved "https://registry.yarnpkg.com/@tailwindcss/oxide-linux-arm64-musl/-/oxide-linux-arm64-musl-4.3.2.tgz#bdb9861bb5064209ec5ff101afff6d046fb15ecd"
+  integrity sha512-J5Nuk0uZQIiMTJj3LEx4sAA9tMFUoXQZFv1J6An+QGYe53HKRJuFDi0rpq/tuouCZeAbOBY3kQ6g8qeD4TUjtA==
+
+"@tailwindcss/oxide-linux-x64-gnu@4.3.2":
+  version "4.3.2"
+  resolved "https://registry.yarnpkg.com/@tailwindcss/oxide-linux-x64-gnu/-/oxide-linux-x64-gnu-4.3.2.tgz#424276287610607303a35f52f2a172b95af4898a"
+  integrity sha512-kqCZpSKOBEJO4mz7OqWoofBZeXTAwaVGPj0ErAj7CojmhKpWVWVOnrt9dE8odoIraZq4oj3ausM37kXi+Tow8w==
+
+"@tailwindcss/oxide-linux-x64-musl@4.3.2":
+  version "4.3.2"
+  resolved "https://registry.yarnpkg.com/@tailwindcss/oxide-linux-x64-musl/-/oxide-linux-x64-musl-4.3.2.tgz#606d5dc2fd7d2e8cdd7d1f1c4a1f4d5639056e05"
+  integrity sha512-cixpqbh2toJDmkuCRI68nXA8ZxNmdK9Y+9v5h3MC3ZQKy/0BO8AWzlkWyRM7JAFSGBlfig4YVTPsK6MVgqz1uw==
+
+"@tailwindcss/oxide-wasm32-wasi@4.3.2":
+  version "4.3.2"
+  resolved "https://registry.yarnpkg.com/@tailwindcss/oxide-wasm32-wasi/-/oxide-wasm32-wasi-4.3.2.tgz#f5d4ed2bcd12507217cc1a92e4fc507fdac6dd8c"
+  integrity sha512-4ec2Z/LOmRsAgU23CS4xeJfcJlmRg94A/XrbGRCF1gyU/zdDfRLYDVsS+ynSZCmGNxQ1jQriQOKMQeQxBA3Isw==
+  dependencies:
+    "@emnapi/core" "^1.11.1"
+    "@emnapi/runtime" "^1.11.1"
+    "@emnapi/wasi-threads" "^1.2.2"
+    "@napi-rs/wasm-runtime" "^1.1.4"
+    "@tybys/wasm-util" "^0.10.2"
+    tslib "^2.8.1"
+
+"@tailwindcss/oxide-win32-arm64-msvc@4.3.2":
+  version "4.3.2"
+  resolved "https://registry.yarnpkg.com/@tailwindcss/oxide-win32-arm64-msvc/-/oxide-win32-arm64-msvc-4.3.2.tgz#a4ec761083fef55c530e204fad43edba629ea1bf"
+  integrity sha512-Zyr/M0+XcYZu3bZrUytc7TXvrk0ftWfl8gN2MwekNDzhqhKRUucMPSeOzM0o0wH5AWOU49BsKRrfKxI2atCPMQ==
+
+"@tailwindcss/oxide-win32-x64-msvc@4.3.2":
+  version "4.3.2"
+  resolved "https://registry.yarnpkg.com/@tailwindcss/oxide-win32-x64-msvc/-/oxide-win32-x64-msvc-4.3.2.tgz#38bf0e3878d17afedb0260758b661973b2d9de70"
+  integrity sha512-QI9BO7KlNZsp2GuO0jwAAj5jCDABOKXRkCk2XuKTSaNEFSdfzqswYVTtCHBNKHLsqyjFyFkqlDiwkNbTYSssMQ==
+
+"@tailwindcss/oxide@4.3.2":
+  version "4.3.2"
+  resolved "https://registry.yarnpkg.com/@tailwindcss/oxide/-/oxide-4.3.2.tgz#82157fb0d5bebf1188234855c5b7dc754da54065"
+  integrity sha512-z8ZgnzX8gdNoWLBLqBPoh/sjnxkwvf9ZuWjnO0l0yIzbLa5/9S+eC5QxGZKRobVHIC3/1BoMWjHblqWjcgFgag==
+  optionalDependencies:
+    "@tailwindcss/oxide-android-arm64" "4.3.2"
+    "@tailwindcss/oxide-darwin-arm64" "4.3.2"
+    "@tailwindcss/oxide-darwin-x64" "4.3.2"
+    "@tailwindcss/oxide-freebsd-x64" "4.3.2"
+    "@tailwindcss/oxide-linux-arm-gnueabihf" "4.3.2"
+    "@tailwindcss/oxide-linux-arm64-gnu" "4.3.2"
+    "@tailwindcss/oxide-linux-arm64-musl" "4.3.2"
+    "@tailwindcss/oxide-linux-x64-gnu" "4.3.2"
+    "@tailwindcss/oxide-linux-x64-musl" "4.3.2"
+    "@tailwindcss/oxide-wasm32-wasi" "4.3.2"
+    "@tailwindcss/oxide-win32-arm64-msvc" "4.3.2"
+    "@tailwindcss/oxide-win32-x64-msvc" "4.3.2"
+
+"@tailwindcss/vite@^4.3.2":
+  version "4.3.2"
+  resolved "https://registry.yarnpkg.com/@tailwindcss/vite/-/vite-4.3.2.tgz#35787e4d450a6b2430693245483441cfd78bf612"
+  integrity sha512-eHpMeX4JXfVNJDEcsouTeCBubJBTcTLigeaw/NTUW6PB5ATKKXdyonnXgTBX2VuRbjz1hjfz6C5XAhr52ImQXA==
+  dependencies:
+    "@tailwindcss/node" "4.3.2"
+    "@tailwindcss/oxide" "4.3.2"
+    tailwindcss "4.3.2"
+
+"@tanstack/query-core@5.101.2":
+  version "5.101.2"
+  resolved "https://registry.yarnpkg.com/@tanstack/query-core/-/query-core-5.101.2.tgz#c901fb76b68169ff5e1e44017404e7e2e90ce1af"
+  integrity sha512-hH5MLoJhF7KaIGd7q3xTXGXvslI+GYlM1Z/35aSHHWaCJWB7XvTSHYuV3eM7tw+aE0mT/xMro4M4Q9rCGHT0lw==
+
+"@tanstack/react-query@^5.101.2":
+  version "5.101.2"
+  resolved "https://registry.yarnpkg.com/@tanstack/react-query/-/react-query-5.101.2.tgz#d886331bcd29df84bc04c45d93192b8207d17c7f"
+  integrity sha512-seDkr6kzGzX1okaaTtZPtgA688CDPlXUz1C6xSg0ESqn04Vuc8tlrYms1s3de+znBqhPVxFRfpAfUf+6XvfPWg==
+  dependencies:
+    "@tanstack/query-core" "5.101.2"
+
+"@tanstack/react-virtual@^3.13.9":
+  version "3.14.6"
+  resolved "https://registry.yarnpkg.com/@tanstack/react-virtual/-/react-virtual-3.14.6.tgz#b0295ef1d858e366e51d836b4cc4ab88c19b7bc0"
+  integrity sha512-4+Uq8m0/gzO4kMCHUEpTtGX1RnONK0C+g88b2ltwPMWUBiaVarBuWKoPJaz7gj1cKCVRAdyu+U8GcKhwCc2beA==
+  dependencies:
+    "@tanstack/virtual-core" "3.17.4"
+
+"@tanstack/virtual-core@3.17.4":
+  version "3.17.4"
+  resolved "https://registry.yarnpkg.com/@tanstack/virtual-core/-/virtual-core-3.17.4.tgz#26d1307f6e544e8428e2c022616cdabda59ef77e"
+  integrity sha512-nGm5KteqxasUdThLc2izl6dHUqLv0LQj7Nuyo5gYalTPf/U8a9ermvsl7reT+6ioBW1l8WfpP/mcU338nLXpqw==
+
+"@tybys/wasm-util@^0.10.2", "@tybys/wasm-util@^0.10.3":
+  version "0.10.3"
+  resolved "https://registry.yarnpkg.com/@tybys/wasm-util/-/wasm-util-0.10.3.tgz#015cba9e9dd47ce14d03d2a8c5d547bfb169665d"
+  integrity sha512-F3fo1MYrRJYL3zER0OUOmkutjr1Vp23m7OsSgp7nq4SP6OqX6C/56XFIPAl5bt3zaBRjmW7SGz3u/6LwFpYcOg==
+  dependencies:
+    tslib "^2.4.0"
+
+"@types/chai@^5.2.2":
+  version "5.2.3"
+  resolved "https://registry.yarnpkg.com/@types/chai/-/chai-5.2.3.tgz#8e9cd9e1c3581fa6b341a5aed5588eb285be0b4a"
+  integrity sha512-Mw558oeA9fFbv65/y4mHtXDs9bPnFMZAL/jxdPFUpOHHIXX91mcgEHbS5Lahr+pwZFR8A7GQleRWeI6cGFC2UA==
+  dependencies:
+    "@types/deep-eql" "*"
+    assertion-error "^2.0.1"
+
+"@types/deep-eql@*":
+  version "4.0.2"
+  resolved "https://registry.yarnpkg.com/@types/deep-eql/-/deep-eql-4.0.2.tgz#334311971d3a07121e7eb91b684a605e7eea9cbd"
+  integrity sha512-c9h9dVVMigMPc4bwTvC5dxqtqJZwQPePsWjPlpSOnojbor6pGqdk541lfA7AqFQr5pB1BRdq0juY9db81BwyFw==
+
+"@types/estree@^1.0.0":
+  version "1.0.9"
+  resolved "https://registry.yarnpkg.com/@types/estree/-/estree-1.0.9.tgz#cf3f0e876d7bee15a93ab925b82bf570a3904a24"
+  integrity sha512-GhdPgy1el4/ImP05X05Uw4cw2/M93BCUmnEvWZNStlCzEKME4Fkk+YpoA5OiHNQmoS7Cafb8Xa3Pya8m1Qrzeg==
+
+"@types/node@^24.13.2":
+  version "24.13.3"
+  resolved "https://registry.yarnpkg.com/@types/node/-/node-24.13.3.tgz#49f18bd3c647866dcda51a0756c145e14590ce16"
+  integrity sha512-Dh8vAsV36ig5wa9OX4pXvMc9D3Veibfw2wix0CUwYODLD8nkj9UsLjASr49nPg+2eKzxhBV+v7L8pXvT4e639Q==
+  dependencies:
+    undici-types "~7.18.0"
+
+"@types/react-dom@^19.2.3":
+  version "19.2.3"
+  resolved "https://registry.yarnpkg.com/@types/react-dom/-/react-dom-19.2.3.tgz#c1e305d15a52a3e508d54dca770d202cb63abf2c"
+  integrity sha512-jp2L/eY6fn+KgVVQAOqYItbF0VY/YApe5Mz2F0aykSO8gx31bYCZyvSeYxCHKvzHG5eZjc+zyaS5BrBWya2+kQ==
+
+"@types/react@^19.2.17":
+  version "19.2.17"
+  resolved "https://registry.yarnpkg.com/@types/react/-/react-19.2.17.tgz#dccac365baa0f1734ec270ff4b51c89465e8dc7f"
+  integrity sha512-MXfmqaVPEVgkBT/aY0aGCkRWWtByiYQXo3xdQ8r5RzuFrPiRn8Gar2tQdXSUQ2GKV3bkXckek89V8wQBY2Q/Aw==
+  dependencies:
+    csstype "^3.2.2"
+
+"@vitejs/plugin-react@^6.0.3":
+  version "6.0.3"
+  resolved "https://registry.yarnpkg.com/@vitejs/plugin-react/-/plugin-react-6.0.3.tgz#55f1d7f558534d10aef03c007dc208b7c3771ce4"
+  integrity sha512-vmFvco5/QuC2f9Oj+wTk0+9XeDFkHxSamwZKYc7MxYwKICfvUvlMhqKI0VuICPltGqh1neqBKDvO4kes1ya8vg==
+  dependencies:
+    "@rolldown/pluginutils" "^1.0.1"
+
+"@vitest/expect@4.1.10":
+  version "4.1.10"
+  resolved "https://registry.yarnpkg.com/@vitest/expect/-/expect-4.1.10.tgz#799c06fc44bb0cf7e2784137b627c5cc173285d4"
+  integrity sha512-YsCn+qAk1GWjQOWFEsEcL2gNQ0zmVmQu3T03qP6UyjhtmdtwtbuI+DASn/7iQB3HGTXkdBwGddzxPlmiql5vlA==
+  dependencies:
+    "@standard-schema/spec" "^1.1.0"
+    "@types/chai" "^5.2.2"
+    "@vitest/spy" "4.1.10"
+    "@vitest/utils" "4.1.10"
+    chai "^6.2.2"
+    tinyrainbow "^3.1.0"
+
+"@vitest/mocker@4.1.10":
+  version "4.1.10"
+  resolved "https://registry.yarnpkg.com/@vitest/mocker/-/mocker-4.1.10.tgz#2413987ab4cd7fa1c2b614b404c407bf6ad1ead1"
+  integrity sha512-v0xaezt+DKEmKfaxg133ldzADrwLGd7Ze1MfQQTYfvs8OqZIwbxyxaYURivwV7sWy5fqn3rH5uOrSp07bp44Ow==
+  dependencies:
+    "@vitest/spy" "4.1.10"
+    estree-walker "^3.0.3"
+    magic-string "^0.30.21"
+
+"@vitest/pretty-format@4.1.10":
+  version "4.1.10"
+  resolved "https://registry.yarnpkg.com/@vitest/pretty-format/-/pretty-format-4.1.10.tgz#75542e7273a08cc10fd4d8dad4e3eb1f16cd958c"
+  integrity sha512-W1HsjSH4MXQ9YfmmhLAoIYf1HRfekQCGngeIgcei6MP5QQGWUe0gkopdZQaVCFO+JDJMrAJGwa5pRpNpvy4P8Q==
+  dependencies:
+    tinyrainbow "^3.1.0"
+
+"@vitest/runner@4.1.10":
+  version "4.1.10"
+  resolved "https://registry.yarnpkg.com/@vitest/runner/-/runner-4.1.10.tgz#febf0a21a9168421422d1955370e606feab60355"
+  integrity sha512-IKI6kpIH+LmpROplyLwBBaCfMgOZOMsygVa6BARD6ahA04VRuJSa6OaVG7kRvSEMD870Vd91rSSw0eegtWyLGg==
+  dependencies:
+    "@vitest/utils" "4.1.10"
+    pathe "^2.0.3"
+
+"@vitest/snapshot@4.1.10":
+  version "4.1.10"
+  resolved "https://registry.yarnpkg.com/@vitest/snapshot/-/snapshot-4.1.10.tgz#7e3e9fec7d4d47232e493cfdcbd2170de4371c04"
+  integrity sha512-xRkfOT1qpTAi/Ti4Y1LtfRc3kEuqxGw59eN2jN9pRWMtS/XDevekhcFSqvQqjUNGksfjMJu3Y+oJ+4Ypn2OaJw==
+  dependencies:
+    "@vitest/pretty-format" "4.1.10"
+    "@vitest/utils" "4.1.10"
+    magic-string "^0.30.21"
+    pathe "^2.0.3"
+
+"@vitest/spy@4.1.10":
+  version "4.1.10"
+  resolved "https://registry.yarnpkg.com/@vitest/spy/-/spy-4.1.10.tgz#5c0bfa97b56bba9e37403c976db776ff6ab56f65"
+  integrity sha512-PLf/Ugvoq5wO/b4rwYCR1h2PSIdXz7wnkQFMiUpLdtM7l6pqVFcQIBEHyT1+l+cj7mNwAfZHzqXqDyjvOuwbDw==
+
+"@vitest/utils@4.1.10":
+  version "4.1.10"
+  resolved "https://registry.yarnpkg.com/@vitest/utils/-/utils-4.1.10.tgz#ffc71055f18bfccb1fd0586365ebc2824892e403"
+  integrity sha512-fy9am/HWxbaGt/Sawrp90vt6Y6jQwf1RX77cz3uwoJwJVMli/e1IEwRPnMNJ7vKfPTwo0diXifkpPvwH9v7nGA==
+  dependencies:
+    "@vitest/pretty-format" "4.1.10"
+    convert-source-map "^2.0.0"
+    tinyrainbow "^3.1.0"
+
+aria-hidden@^1.2.3:
+  version "1.2.6"
+  resolved "https://registry.yarnpkg.com/aria-hidden/-/aria-hidden-1.2.6.tgz#73051c9b088114c795b1ea414e9c0fff874ffc1a"
+  integrity sha512-ik3ZgC9dY/lYVVM++OISsaYDeg1tb0VtP5uL3ouh1koGOaUMDPpbFIei4JkFimWUFPn90sbMNMXQAIVOlnYKJA==
+  dependencies:
+    tslib "^2.0.0"
+
+assertion-error@^2.0.1:
+  version "2.0.1"
+  resolved "https://registry.yarnpkg.com/assertion-error/-/assertion-error-2.0.1.tgz#f641a196b335690b1070bf00b6e7593fec190bf7"
+  integrity sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==
+
+chai@^6.2.2:
+  version "6.2.2"
+  resolved "https://registry.yarnpkg.com/chai/-/chai-6.2.2.tgz#ae41b52c9aca87734505362717f3255facda360e"
+  integrity sha512-NUPRluOfOiTKBKvWPtSD4PhFvWCqOi0BGStNWs57X9js7XGTprSmFoz5F0tWhR4WPjNeR9jXqdC7/UpSJTnlRg==
+
+clsx@^2.0.0:
+  version "2.1.1"
+  resolved "https://registry.yarnpkg.com/clsx/-/clsx-2.1.1.tgz#eed397c9fd8bd882bfb18deab7102049a2f32999"
+  integrity sha512-eYm0QWBtUrBWZWG0d386OGAw16Z995PiOVo2B7bjWSbHedGl5e0ZWaq65kOGgUSNesEIDkB9ISbTg/JK9dhCZA==
+
+convert-source-map@^2.0.0:
+  version "2.0.0"
+  resolved "https://registry.yarnpkg.com/convert-source-map/-/convert-source-map-2.0.0.tgz#4b560f649fc4e918dd0ab75cf4961e8bc882d82a"
+  integrity sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==
+
+cookie-es@^3.1.1:
+  version "3.1.1"
+  resolved "https://registry.yarnpkg.com/cookie-es/-/cookie-es-3.1.1.tgz#c4a8a16cf88cb5a185b23f4a61d6e9a85eb53287"
+  integrity sha512-UaXxwISYJPTr9hwQxMFYZ7kNhSXboMXP+Z3TRX6f1/NyaGPfuNUZOWP1pUEb75B2HjfklIYLVRfWiFZJyC6Npg==
+
+csstype@^3.2.2:
+  version "3.2.3"
+  resolved "https://registry.yarnpkg.com/csstype/-/csstype-3.2.3.tgz#ec48c0f3e993e50648c86da559e2610995cf989a"
+  integrity sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==
+
+detect-libc@^2.0.3:
+  version "2.1.2"
+  resolved "https://registry.yarnpkg.com/detect-libc/-/detect-libc-2.1.2.tgz#689c5dcdc1900ef5583a4cb9f6d7b473742074ad"
+  integrity sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==
+
+enhanced-resolve@5.21.6:
+  version "5.21.6"
+  resolved "https://registry.yarnpkg.com/enhanced-resolve/-/enhanced-resolve-5.21.6.tgz#aa207b43cf658e6ab3ba06896edc00c13c3127c6"
+  integrity sha512-aNnGCvbJ/RIyWo1IuhNdVjnNF+EjH9wpzpNHt+ci/m9He9LJvUN8wrCcXjp9cWsGNAuvSpVFTx/vraAFQ8qGjQ==
+  dependencies:
+    graceful-fs "^4.2.4"
+    tapable "^2.3.3"
+
+es-module-lexer@^2.0.0:
+  version "2.3.1"
+  resolved "https://registry.yarnpkg.com/es-module-lexer/-/es-module-lexer-2.3.1.tgz#5bf2df06999dbbe5f006a5f46a11fb9f5b7b391b"
+  integrity sha512-shc1dbU90Yl/xq1QrC7QRtfcwURZuVRfPhZbDoldJ1cn1gzDvBaBWlv0eFolj5+0znnPJz5TXLxsN77X/12KTA==
+
+estree-walker@^3.0.3:
+  version "3.0.3"
+  resolved "https://registry.yarnpkg.com/estree-walker/-/estree-walker-3.0.3.tgz#67c3e549ec402a487b4fc193d1953a524752340d"
+  integrity sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g==
+  dependencies:
+    "@types/estree" "^1.0.0"
+
+expect-type@^1.3.0:
+  version "1.4.0"
+  resolved "https://registry.yarnpkg.com/expect-type/-/expect-type-1.4.0.tgz#24edf7f0cc69a44d008567ba4594ab96f3c3a3d6"
+  integrity sha512-KfYbmpRm0VbLjEvVa9yGwCi9GI34xvi7A/HXYWQO65CSD2u3MczUJSuwXKFIxlGsgBQizV9q5J9NHj4VG0n+pA==
+
+fdir@^6.5.0:
+  version "6.5.0"
+  resolved "https://registry.yarnpkg.com/fdir/-/fdir-6.5.0.tgz#ed2ab967a331ade62f18d077dae192684d50d350"
+  integrity sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==
+
+fsevents@2.3.2:
+  version "2.3.2"
+  resolved "https://registry.yarnpkg.com/fsevents/-/fsevents-2.3.2.tgz#8a526f78b8fdf4623b709e0b975c52c24c02fd1a"
+  integrity sha512-xiqMQR4xAeHTuB9uWm+fFRcIOgKBMiOBP+eXiyT7jsgVCq1bkVygt00oASowB7EdtpOHaaPgKt812P9ab+DDKA==
+
+fsevents@~2.3.3:
+  version "2.3.3"
+  resolved "https://registry.yarnpkg.com/fsevents/-/fsevents-2.3.3.tgz#cac6407785d03675a2a5e1a5305c697b347d90d6"
+  integrity sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==
+
+graceful-fs@^4.2.4:
+  version "4.2.11"
+  resolved "https://registry.yarnpkg.com/graceful-fs/-/graceful-fs-4.2.11.tgz#4183e4e8bf08bb6e05bbb2f7d2e0c8f712ca40e3"
+  integrity sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==
+
+immer@^11.1.8:
+  version "11.1.11"
+  resolved "https://registry.yarnpkg.com/immer/-/immer-11.1.11.tgz#bbf825a333ae1b16fd450d8da5f61d54de6a553d"
+  integrity sha512-qzXuyXAkPySAGYkfsAwodDPWT8Zm7/Uo5BNt4BjhMhG5WlWyZZ4wQqnWwdS8kjlQ1Cwu6gjw3A6+0gTQwlyYtw==
+
+jiti@^2.7.0:
+  version "2.7.0"
+  resolved "https://registry.yarnpkg.com/jiti/-/jiti-2.7.0.tgz#974228f2f4ca2bc21885a1797b45fea68e950c64"
+  integrity sha512-AC/7JofJvZGrrneWNaEnJeOLUx+JlGt7tNa0wZiRPT4MY1wmfKjt2+6O2p2uz2+skll8OZZmJMNqeke7kKbNgQ==
+
+lightningcss-android-arm64@1.32.0:
+  version "1.32.0"
+  resolved "https://registry.yarnpkg.com/lightningcss-android-arm64/-/lightningcss-android-arm64-1.32.0.tgz#f033885116dfefd9c6f54787523e3514b61e1968"
+  integrity sha512-YK7/ClTt4kAK0vo6w3X+Pnm0D2cf2vPHbhOXdoNti1Ga0al1P4TBZhwjATvjNwLEBCnKvjJc2jQgHXH0NEwlAg==
+
+lightningcss-darwin-arm64@1.32.0:
+  version "1.32.0"
+  resolved "https://registry.yarnpkg.com/lightningcss-darwin-arm64/-/lightningcss-darwin-arm64-1.32.0.tgz#50b71871b01c8199584b649e292547faea7af9b5"
+  integrity sha512-RzeG9Ju5bag2Bv1/lwlVJvBE3q6TtXskdZLLCyfg5pt+HLz9BqlICO7LZM7VHNTTn/5PRhHFBSjk5lc4cmscPQ==
+
+lightningcss-darwin-x64@1.32.0:
+  version "1.32.0"
+  resolved "https://registry.yarnpkg.com/lightningcss-darwin-x64/-/lightningcss-darwin-x64-1.32.0.tgz#35f3e97332d130b9ca181e11b568ded6aebc6d5e"
+  integrity sha512-U+QsBp2m/s2wqpUYT/6wnlagdZbtZdndSmut/NJqlCcMLTWp5muCrID+K5UJ6jqD2BFshejCYXniPDbNh73V8w==
+
+lightningcss-freebsd-x64@1.32.0:
+  version "1.32.0"
+  resolved "https://registry.yarnpkg.com/lightningcss-freebsd-x64/-/lightningcss-freebsd-x64-1.32.0.tgz#9777a76472b64ed6ff94342ad64c7bafd794a575"
+  integrity sha512-JCTigedEksZk3tHTTthnMdVfGf61Fky8Ji2E4YjUTEQX14xiy/lTzXnu1vwiZe3bYe0q+SpsSH/CTeDXK6WHig==
+
+lightningcss-linux-arm-gnueabihf@1.32.0:
+  version "1.32.0"
+  resolved "https://registry.yarnpkg.com/lightningcss-linux-arm-gnueabihf/-/lightningcss-linux-arm-gnueabihf-1.32.0.tgz#13ae652e1ab73b9135d7b7da172f666c410ad53d"
+  integrity sha512-x6rnnpRa2GL0zQOkt6rts3YDPzduLpWvwAF6EMhXFVZXD4tPrBkEFqzGowzCsIWsPjqSK+tyNEODUBXeeVHSkw==
+
+lightningcss-linux-arm64-gnu@1.32.0:
+  version "1.32.0"
+  resolved "https://registry.yarnpkg.com/lightningcss-linux-arm64-gnu/-/lightningcss-linux-arm64-gnu-1.32.0.tgz#417858795a94592f680123a1b1f9da8a0e1ef335"
+  integrity sha512-0nnMyoyOLRJXfbMOilaSRcLH3Jw5z9HDNGfT/gwCPgaDjnx0i8w7vBzFLFR1f6CMLKF8gVbebmkUN3fa/kQJpQ==
+
+lightningcss-linux-arm64-musl@1.32.0:
+  version "1.32.0"
+  resolved "https://registry.yarnpkg.com/lightningcss-linux-arm64-musl/-/lightningcss-linux-arm64-musl-1.32.0.tgz#6be36692e810b718040802fd809623cffe732133"
+  integrity sha512-UpQkoenr4UJEzgVIYpI80lDFvRmPVg6oqboNHfoH4CQIfNA+HOrZ7Mo7KZP02dC6LjghPQJeBsvXhJod/wnIBg==
+
+lightningcss-linux-x64-gnu@1.32.0:
+  version "1.32.0"
+  resolved "https://registry.yarnpkg.com/lightningcss-linux-x64-gnu/-/lightningcss-linux-x64-gnu-1.32.0.tgz#0b7803af4eb21cfd38dd39fe2abbb53c7dd091f6"
+  integrity sha512-V7Qr52IhZmdKPVr+Vtw8o+WLsQJYCTd8loIfpDaMRWGUZfBOYEJeyJIkqGIDMZPwPx24pUMfwSxxI8phr/MbOA==
+
+lightningcss-linux-x64-musl@1.32.0:
+  version "1.32.0"
+  resolved "https://registry.yarnpkg.com/lightningcss-linux-x64-musl/-/lightningcss-linux-x64-musl-1.32.0.tgz#88dc8ba865ddddb1ac5ef04b0f161804418c163b"
+  integrity sha512-bYcLp+Vb0awsiXg/80uCRezCYHNg1/l3mt0gzHnWV9XP1W5sKa5/TCdGWaR/zBM2PeF/HbsQv/j2URNOiVuxWg==
+
+lightningcss-win32-arm64-msvc@1.32.0:
+  version "1.32.0"
+  resolved "https://registry.yarnpkg.com/lightningcss-win32-arm64-msvc/-/lightningcss-win32-arm64-msvc-1.32.0.tgz#4f30ba3fa5e925f5b79f945e8cc0d176c3b1ab38"
+  integrity sha512-8SbC8BR40pS6baCM8sbtYDSwEVQd4JlFTOlaD3gWGHfThTcABnNDBda6eTZeqbofalIJhFx0qKzgHJmcPTnGdw==
+
+lightningcss-win32-x64-msvc@1.32.0:
+  version "1.32.0"
+  resolved "https://registry.yarnpkg.com/lightningcss-win32-x64-msvc/-/lightningcss-win32-x64-msvc-1.32.0.tgz#141aa5605645064928902bb4af045fa7d9f4220a"
+  integrity sha512-Amq9B/SoZYdDi1kFrojnoqPLxYhQ4Wo5XiL8EVJrVsB8ARoC1PWW6VGtT0WKCemjy8aC+louJnjS7U18x3b06Q==
+
+lightningcss@1.32.0, lightningcss@^1.32.0:
+  version "1.32.0"
+  resolved "https://registry.yarnpkg.com/lightningcss/-/lightningcss-1.32.0.tgz#b85aae96486dcb1bf49a7c8571221273f4f1e4a9"
+  integrity sha512-NXYBzinNrblfraPGyrbPoD19C1h9lfI/1mzgWYvXUTe414Gz/X1FD2XBZSZM7rRTrMA8JL3OtAaGifrIKhQ5yQ==
+  dependencies:
+    detect-libc "^2.0.3"
+  optionalDependencies:
+    lightningcss-android-arm64 "1.32.0"
+    lightningcss-darwin-arm64 "1.32.0"
+    lightningcss-darwin-x64 "1.32.0"
+    lightningcss-freebsd-x64 "1.32.0"
+    lightningcss-linux-arm-gnueabihf "1.32.0"
+    lightningcss-linux-arm64-gnu "1.32.0"
+    lightningcss-linux-arm64-musl "1.32.0"
+    lightningcss-linux-x64-gnu "1.32.0"
+    lightningcss-linux-x64-musl "1.32.0"
+    lightningcss-win32-arm64-msvc "1.32.0"
+    lightningcss-win32-x64-msvc "1.32.0"
+
+lucide-react@^1.24.0:
+  version "1.24.0"
+  resolved "https://registry.yarnpkg.com/lucide-react/-/lucide-react-1.24.0.tgz#5f6da7f37d9107d192e54b7654a99b3468a212c6"
+  integrity sha512-YT6mBD8lGKkg4nM39enlm94/sfJIiW0YKUT60fBy4YK8tai31ylg1VhGNWxkpSKHo9UagfnZqwIff3HTDQwXeA==
+
+magic-string@^0.30.21:
+  version "0.30.21"
+  resolved "https://registry.yarnpkg.com/magic-string/-/magic-string-0.30.21.tgz#56763ec09a0fa8091df27879fd94d19078c00d91"
+  integrity sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==
+  dependencies:
+    "@jridgewell/sourcemap-codec" "^1.5.5"
+
+nanoid@^3.3.12:
+  version "3.3.16"
+  resolved "https://registry.yarnpkg.com/nanoid/-/nanoid-3.3.16.tgz#a04d8ec4b1f10009d2d533947aefe4293737816c"
+  integrity sha512-bzlKTyNJ7+LdGIIwy8ijFpIqEQIvafahV7eYykJ8Cvh42EdJeODoJ6gUJXpQJvej1BddH8OqTXZNE/KfbWAu8Q==
+
+obug@^2.1.1:
+  version "2.1.3"
+  resolved "https://registry.yarnpkg.com/obug/-/obug-2.1.3.tgz#c02c60f95abd603409330e767db7f2823193331e"
+  integrity sha512-9miFgM2OFba7hB+pRgvtV84pYTBaoTHohvmIgiRt6dRIzbwEOIaNaP+dIlGs2fNFoB0SeISs0Jz5WFVRid6Xyg==
+
+oxlint@^1.71.0:
+  version "1.74.0"
+  resolved "https://registry.yarnpkg.com/oxlint/-/oxlint-1.74.0.tgz#c84d5fd55417f4b8fa10cec10d3354ca06a0ec6e"
+  integrity sha512-odGl2s2x5IOJoj3A0v1k0PGBXVFBZeZ2+AK/+K2MJur7Ghi3bkyX5NuLUWHKqa4js1wjep3hJeuTQJOlr+4+dA==
+  optionalDependencies:
+    "@oxlint/binding-android-arm-eabi" "1.74.0"
+    "@oxlint/binding-android-arm64" "1.74.0"
+    "@oxlint/binding-darwin-arm64" "1.74.0"
+    "@oxlint/binding-darwin-x64" "1.74.0"
+    "@oxlint/binding-freebsd-x64" "1.74.0"
+    "@oxlint/binding-linux-arm-gnueabihf" "1.74.0"
+    "@oxlint/binding-linux-arm-musleabihf" "1.74.0"
+    "@oxlint/binding-linux-arm64-gnu" "1.74.0"
+    "@oxlint/binding-linux-arm64-musl" "1.74.0"
+    "@oxlint/binding-linux-ppc64-gnu" "1.74.0"
+    "@oxlint/binding-linux-riscv64-gnu" "1.74.0"
+    "@oxlint/binding-linux-riscv64-musl" "1.74.0"
+    "@oxlint/binding-linux-s390x-gnu" "1.74.0"
+    "@oxlint/binding-linux-x64-gnu" "1.74.0"
+    "@oxlint/binding-linux-x64-musl" "1.74.0"
+    "@oxlint/binding-openharmony-arm64" "1.74.0"
+    "@oxlint/binding-win32-arm64-msvc" "1.74.0"
+    "@oxlint/binding-win32-ia32-msvc" "1.74.0"
+    "@oxlint/binding-win32-x64-msvc" "1.74.0"
+
+pathe@^2.0.3:
+  version "2.0.3"
+  resolved "https://registry.yarnpkg.com/pathe/-/pathe-2.0.3.tgz#3ecbec55421685b70a9da872b2cff3e1cbed1716"
+  integrity sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==
+
+picocolors@^1.1.1:
+  version "1.1.1"
+  resolved "https://registry.yarnpkg.com/picocolors/-/picocolors-1.1.1.tgz#3d321af3eab939b083c8f929a1d12cda81c26b6b"
+  integrity sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==
+
+picomatch@^4.0.3, picomatch@^4.0.4, picomatch@^4.0.5:
+  version "4.0.5"
+  resolved "https://registry.yarnpkg.com/picomatch/-/picomatch-4.0.5.tgz#51ea57a17d86f605f81039595fbc40ed06a55fab"
+  integrity sha512-RvwwcruNjI1ncT5xRakeyS9Lf8lcItv34KD+aif+VH9kduAyfYBipGh12274xtenIPZ119/R9BdTBa8gAwSh0A==
+
+playwright-core@1.61.1:
+  version "1.61.1"
+  resolved "https://registry.yarnpkg.com/playwright-core/-/playwright-core-1.61.1.tgz#3c99841307efbbabc9d724c41a88c914705d15fc"
+  integrity sha512-h7Qlt6m4REp25qvIdvbDtVmD4LqVXfpRxhORv9L0jzETM05p4fuPJ3dKyuSXQxDSbXnmS79HAgi9589lGSpLkg==
+
+playwright@1.61.1:
+  version "1.61.1"
+  resolved "https://registry.yarnpkg.com/playwright/-/playwright-1.61.1.tgz#d8c0c06eb93c28981afc747bace453bdbd5018bc"
+  integrity sha512-DWnY5o3YbLWK4GovuAVwpqL+1VwGNdUGrRr++8j8PtQQzvAVZUIMjKQ90fY689sEJZJBbZVw1rXaOKSTitkzPQ==
+  dependencies:
+    playwright-core "1.61.1"
+  optionalDependencies:
+    fsevents "2.3.2"
+
+postcss@^8.5.16:
+  version "8.5.19"
+  resolved "https://registry.yarnpkg.com/postcss/-/postcss-8.5.19.tgz#45ad5cfde499408e20147348237551381a922037"
+  integrity sha512-Mz8SaolMd8nB+G13WkORcxQKHZ/NE4xXevtkJHVuG+guo9/wYKlIMTKAqGdEmYOXR2ijPjTYNHssizdaVSUNdQ==
+  dependencies:
+    nanoid "^3.3.12"
+    picocolors "^1.1.1"
+    source-map-js "^1.2.1"
+
+react-aria@^3.48.0:
+  version "3.50.0"
+  resolved "https://registry.yarnpkg.com/react-aria/-/react-aria-3.50.0.tgz#75cb002c8ff94be3bc1afb6f717b37c6d0548119"
+  integrity sha512-S0Os6QZk33fzUAKu1QLT9afoUaCBt1ZNdoiq0n2YMVgKIdNIQS8zxiZ8O9hYE6QyDkHKjD6q39LQZ+qaSAIgjw==
+  dependencies:
+    "@internationalized/date" "^3.12.2"
+    "@internationalized/number" "^3.6.7"
+    "@internationalized/string" "^3.2.9"
+    "@react-types/shared" "^3.36.0"
+    "@swc/helpers" "^0.5.0"
+    aria-hidden "^1.2.3"
+    clsx "^2.0.0"
+    react-stately "3.48.0"
+    use-sync-external-store "^1.6.0"
+
+react-dom@^19.2.7:
+  version "19.2.7"
+  resolved "https://registry.yarnpkg.com/react-dom/-/react-dom-19.2.7.tgz#0450dc9ae9ddbff76ef196401cd8b8c7fb466ccc"
+  integrity sha512-t0BRVXvbiE/o20Hfw669rLbMCDWtYZLvmJigy2f0MxsXF+71pxhR3xOkspmsO8h3ZlNzyibAmtCa3l4lYKk6gQ==
+  dependencies:
+    scheduler "^0.27.0"
+
+react-router@^8.2.0:
+  version "8.2.0"
+  resolved "https://registry.yarnpkg.com/react-router/-/react-router-8.2.0.tgz#194809cb06a1b9ed83654882fd549b7fd47a20fd"
+  integrity sha512-uP1LgGNHyilL1u+ZkecQk74DJOKOb6q4NLNYLRJcD/fjoogftNb5/Rj/07o/QBFsY/5MbAKPm1peTCQuVPv9cQ==
+  dependencies:
+    cookie-es "^3.1.1"
+
+react-stately@3.48.0:
+  version "3.48.0"
+  resolved "https://registry.yarnpkg.com/react-stately/-/react-stately-3.48.0.tgz#80b658d91a20b35f9803102302268a477ba819e4"
+  integrity sha512-ImicSAG+lTotAe5izcs1fz49Zk48w7pDusqYg04WaPhCoej8BJ24soMu3iLXIrsi273s4P1gZrYGrqReMfgEEA==
+  dependencies:
+    "@internationalized/date" "^3.12.2"
+    "@internationalized/number" "^3.6.7"
+    "@internationalized/string" "^3.2.9"
+    "@react-types/shared" "^3.36.0"
+    "@swc/helpers" "^0.5.0"
+    use-sync-external-store "^1.6.0"
+
+react@^19.2.7:
+  version "19.2.7"
+  resolved "https://registry.yarnpkg.com/react/-/react-19.2.7.tgz#1f47a1bfc06f8ec885752c6f4af14369a9f8260b"
+  integrity sha512-HNe9WslTbXmFK8o8cmwgAeJFSBvt1bPdHCVKtaaV+WlAN36mpT4hcRpwbf3fY56ar2oIXzsBpOAiIRHAdY0OlQ==
+
+rolldown@~1.1.4:
+  version "1.1.5"
+  resolved "https://registry.yarnpkg.com/rolldown/-/rolldown-1.1.5.tgz#339aae250844351fc55b74e2652d3ebd6fba389d"
+  integrity sha512-t9z29cJjXf/vxQ8dyhCSpt6H6aSwHTk8cT5I3iy6SMXuFpk5mB6PL6XfC8PCwrPTx93udwKUm9HRteAlTGBLiA==
+  dependencies:
+    "@oxc-project/types" "=0.139.0"
+    "@rolldown/pluginutils" "^1.0.0"
+  optionalDependencies:
+    "@rolldown/binding-android-arm64" "1.1.5"
+    "@rolldown/binding-darwin-arm64" "1.1.5"
+    "@rolldown/binding-darwin-x64" "1.1.5"
+    "@rolldown/binding-freebsd-x64" "1.1.5"
+    "@rolldown/binding-linux-arm-gnueabihf" "1.1.5"
+    "@rolldown/binding-linux-arm64-gnu" "1.1.5"
+    "@rolldown/binding-linux-arm64-musl" "1.1.5"
+    "@rolldown/binding-linux-ppc64-gnu" "1.1.5"
+    "@rolldown/binding-linux-s390x-gnu" "1.1.5"
+    "@rolldown/binding-linux-x64-gnu" "1.1.5"
+    "@rolldown/binding-linux-x64-musl" "1.1.5"
+    "@rolldown/binding-openharmony-arm64" "1.1.5"
+    "@rolldown/binding-wasm32-wasi" "1.1.5"
+    "@rolldown/binding-win32-arm64-msvc" "1.1.5"
+    "@rolldown/binding-win32-x64-msvc" "1.1.5"
+
+scheduler@^0.27.0:
+  version "0.27.0"
+  resolved "https://registry.yarnpkg.com/scheduler/-/scheduler-0.27.0.tgz#0c4ef82d67d1e5c1e359e8fc76d3a87f045fe5bd"
+  integrity sha512-eNv+WrVbKu1f3vbYJT/xtiF5syA5HPIMtf9IgY/nKg0sWqzAUEvqY/xm7OcZc/qafLx/iO9FgOmeSAp4v5ti/Q==
+
+siginfo@^2.0.0:
+  version "2.0.0"
+  resolved "https://registry.yarnpkg.com/siginfo/-/siginfo-2.0.0.tgz#32e76c70b79724e3bb567cb9d543eb858ccfaf30"
+  integrity sha512-ybx0WO1/8bSBLEWXZvEd7gMW3Sn3JFlW3TvX1nREbDLRNQNaeNN8WK0meBwPdAaOI7TtRRRJn/Es1zhrrCHu7g==
+
+source-map-js@^1.2.1:
+  version "1.2.1"
+  resolved "https://registry.yarnpkg.com/source-map-js/-/source-map-js-1.2.1.tgz#1ce5650fddd87abc099eda37dcff024c2667ae46"
+  integrity sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==
+
+stackback@0.0.2:
+  version "0.0.2"
+  resolved "https://registry.yarnpkg.com/stackback/-/stackback-0.0.2.tgz#1ac8a0d9483848d1695e418b6d031a3c3ce68e3b"
+  integrity sha512-1XMJE5fQo1jGH6Y/7ebnwPOBEkIEnT4QF32d5R1+VXdXveM0IBMJt8zfaxX1P3QhVwrYe+576+jkANtSS2mBbw==
+
+state-local@^1.0.6:
+  version "1.0.7"
+  resolved "https://registry.yarnpkg.com/state-local/-/state-local-1.0.7.tgz#da50211d07f05748d53009bee46307a37db386d5"
+  integrity sha512-HTEHMNieakEnoe33shBYcZ7NX83ACUjCu8c40iOGEZsngj9zRnkqS9j1pqQPXwobB0ZcVTk27REb7COQ0UR59w==
+
+std-env@^4.0.0-rc.1:
+  version "4.2.0"
+  resolved "https://registry.yarnpkg.com/std-env/-/std-env-4.2.0.tgz#8ebe0ec60485668ab47227b312f4254cdf80c9d3"
+  integrity sha512-oCUKSupKTHX53EyjDtuZQ64pjLJ6yYCtpmEw0goYxtjG9KpbRe8KAsl2tBUGU9DyMcJ0RwJ8GqJAFzMXcXW1Rw==
+
+tabbable@^6.0.0:
+  version "6.5.0"
+  resolved "https://registry.yarnpkg.com/tabbable/-/tabbable-6.5.0.tgz#a65101385a4fd6cbd580b7546da0170f307b535d"
+  integrity sha512-wieBHXygIm7OyQOu5hQlkk62/WyCFYGlWg7L6/ZCUZwx0o398Zkn4pVmMyfYhfMG8kGrj/Krt8eIk6UKC6VzwA==
+
+tailwindcss@4.3.2, tailwindcss@^4.3.2:
+  version "4.3.2"
+  resolved "https://registry.yarnpkg.com/tailwindcss/-/tailwindcss-4.3.2.tgz#408ee67d767a0fef7b174674bb9c5ce136a5ace1"
+  integrity sha512-WtctNNSH8A9jlMIqxzuYumOHU5uGZyRv0Q5svQl+oEPy5w84YpBxdb7MdqyiSPQge5jTJ6zFQLq0PFygdccSBA==
+
+tapable@^2.3.3:
+  version "2.3.3"
+  resolved "https://registry.yarnpkg.com/tapable/-/tapable-2.3.3.tgz#5da7c9992c46038221267985ab28421a8879f160"
+  integrity sha512-uxc/zpqFg6x7C8vOE7lh6Lbda8eEL9zmVm/PLeTPBRhh1xCgdWaQ+J1CUieGpIfm2HdtsUpRv+HshiasBMcc6A==
+
+tinybench@^2.9.0:
+  version "2.9.0"
+  resolved "https://registry.yarnpkg.com/tinybench/-/tinybench-2.9.0.tgz#103c9f8ba6d7237a47ab6dd1dcff77251863426b"
+  integrity sha512-0+DUvqWMValLmha6lr4kD8iAMK1HzV0/aKnCtWb9v9641TnP/MFb7Pc2bxoxQjTXAErryXVgUOfv2YqNllqGeg==
+
+tinyexec@^1.0.2:
+  version "1.2.4"
+  resolved "https://registry.yarnpkg.com/tinyexec/-/tinyexec-1.2.4.tgz#ae45bb2edebda94c70f4ea897e0f1243e470db71"
+  integrity sha512-SHf/r48b7vOrjve9PxJo3MN5v5yuyjHvdUcrQffT3WXMUfnGmHDVbC4k3sHJaJTgZCwpUplIaAo5ANtMyp3YHg==
+
+tinyglobby@^0.2.15, tinyglobby@^0.2.17:
+  version "0.2.17"
+  resolved "https://registry.yarnpkg.com/tinyglobby/-/tinyglobby-0.2.17.tgz#562a9a6c9eb2b3b123d39719f9af5bb44fcd7631"
+  integrity sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g==
+  dependencies:
+    fdir "^6.5.0"
+    picomatch "^4.0.4"
+
+tinyrainbow@^3.1.0:
+  version "3.1.0"
+  resolved "https://registry.yarnpkg.com/tinyrainbow/-/tinyrainbow-3.1.0.tgz#1d8a623893f95cf0a2ddb9e5d11150e191409421"
+  integrity sha512-Bf+ILmBgretUrdJxzXM0SgXLZ3XfiaUuOj/IKQHuTXip+05Xn+uyEYdVg0kYDipTBcLrCVyUzAPz7QmArb0mmw==
+
+tslib@^2.0.0, tslib@^2.4.0, tslib@^2.8.0, tslib@^2.8.1:
+  version "2.8.1"
+  resolved "https://registry.yarnpkg.com/tslib/-/tslib-2.8.1.tgz#612efe4ed235d567e8aba5f2a5fab70280ade83f"
+  integrity sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==
+
+typescript@~6.0.2:
+  version "6.0.3"
+  resolved "https://registry.yarnpkg.com/typescript/-/typescript-6.0.3.tgz#90251dc007916e972786cb94d74d15b185577d21"
+  integrity sha512-y2TvuxSZPDyQakkFRPZHKFm+KKVqIisdg9/CZwm9ftvKXLP8NRWj38/ODjNbr43SsoXqNuAisEf1GdCxqWcdBw==
+
+undici-types@~7.18.0:
+  version "7.18.2"
+  resolved "https://registry.yarnpkg.com/undici-types/-/undici-types-7.18.2.tgz#29357a89e7b7ca4aef3bf0fd3fd0cd73884229e9"
+  integrity sha512-AsuCzffGHJybSaRrmr5eHr81mwJU3kjw6M+uprWvCXiNeN9SOGwQ3Jn8jb8m3Z6izVgknn1R0FTCEAP2QrLY/w==
+
+use-sync-external-store@^1.5.0, use-sync-external-store@^1.6.0:
+  version "1.6.0"
+  resolved "https://registry.yarnpkg.com/use-sync-external-store/-/use-sync-external-store-1.6.0.tgz#b174bfa65cb2b526732d9f2ac0a408027876f32d"
+  integrity sha512-Pp6GSwGP/NrPIrxVFAIkOQeyw8lFenOHijQWkUTrDvrF4ALqylP2C/KCkeS9dpUM3KvYRQhna5vt7IL95+ZQ9w==
+
+"vite@^6.0.0 || ^7.0.0 || ^8.0.0", vite@^8.1.1:
+  version "8.1.4"
+  resolved "https://registry.yarnpkg.com/vite/-/vite-8.1.4.tgz#3cd711f31de805e5154ab47948349e693314d581"
+  integrity sha512-bTT9PsdWO+MQMNG9ZXIP/qM9wGh37DFxTV/sPq9cFpHr3w4jkgef032PkAL9jAqhk3Nz8NQw3O8n6/xFkqO4QQ==
+  dependencies:
+    lightningcss "^1.32.0"
+    picomatch "^4.0.5"
+    postcss "^8.5.16"
+    rolldown "~1.1.4"
+    tinyglobby "^0.2.17"
+  optionalDependencies:
+    fsevents "~2.3.3"
+
+vitest@^4.1.7:
+  version "4.1.10"
+  resolved "https://registry.yarnpkg.com/vitest/-/vitest-4.1.10.tgz#7e9285efe264b1167050b7a3a7ff34788e1b7afc"
+  integrity sha512-R9jUTe5S4Qb0HCd4TNqpC7oGcrMssMRGXLW80ubjWsW9VH5GF8y1Y0SFLY9AbqSk6nt0PnOx4H4WNJYZ13GUPw==
+  dependencies:
+    "@vitest/expect" "4.1.10"
+    "@vitest/mocker" "4.1.10"
+    "@vitest/pretty-format" "4.1.10"
+    "@vitest/runner" "4.1.10"
+    "@vitest/snapshot" "4.1.10"
+    "@vitest/spy" "4.1.10"
+    "@vitest/utils" "4.1.10"
+    es-module-lexer "^2.0.0"
+    expect-type "^1.3.0"
+    magic-string "^0.30.21"
+    obug "^2.1.1"
+    pathe "^2.0.3"
+    picomatch "^4.0.3"
+    std-env "^4.0.0-rc.1"
+    tinybench "^2.9.0"
+    tinyexec "^1.0.2"
+    tinyglobby "^0.2.15"
+    tinyrainbow "^3.1.0"
+    vite "^6.0.0 || ^7.0.0 || ^8.0.0"
+    why-is-node-running "^2.3.0"
+
+why-is-node-running@^2.3.0:
+  version "2.3.0"
+  resolved "https://registry.yarnpkg.com/why-is-node-running/-/why-is-node-running-2.3.0.tgz#a3f69a97107f494b3cdc3bdddd883a7d65cebf04"
+  integrity sha512-hUrmaWBdVDcxvYqnyh09zunKzROWjbZTiNy8dBEjkS7ehEDQibXJ7XvlmtbwuTclUiIyN+CyXQD4Vmko8fNm8w==
+  dependencies:
+    siginfo "^2.0.0"
+    stackback "0.0.2"
diff --git a/SW.Bitween.Web/Program.cs b/SW.Bitween.Web/Program.cs
index 7b52e971..cbec078c 100644
--- a/SW.Bitween.Web/Program.cs
+++ b/SW.Bitween.Web/Program.cs
@@ -5,6 +5,7 @@
 using System.Threading.Tasks;
 using Microsoft.AspNetCore.Hosting;
 using Microsoft.Extensions.Hosting;
+using SW.Bitween.Services;
 using SW.EfCoreExtensions;
 using SW.Logger;
 using SW.Logger.ElasticSerach;
@@ -16,7 +17,10 @@ public class Program
         public static void Main(string[] args)
         {
             //var id = (long)(DateTime.UtcNow.Subtract(new DateTime(2010, 1, 1)).TotalMilliseconds * 1000); 
-            CreateHostBuilder(args).UseSwElasticSearchLogger().Build().MigrateDatabase<BitweenDbContext>().Run();
+            CreateHostBuilder(args).UseSwElasticSearchLogger().Build()
+                .MigrateDatabase<BitweenDbContext>()
+                .ApplyStoredSettings()
+                .Run();
         }
 
         public static IHostBuilder CreateHostBuilder(string[] args) =>
diff --git a/SW.Bitween.Web/SW.Bitween.Web.csproj b/SW.Bitween.Web/SW.Bitween.Web.csproj
index 77326a05..d0543c25 100644
--- a/SW.Bitween.Web/SW.Bitween.Web.csproj
+++ b/SW.Bitween.Web/SW.Bitween.Web.csproj
@@ -4,8 +4,31 @@
     <TargetFramework>net8.0</TargetFramework>
     <AssemblyVersion>1.0.0.0</AssemblyVersion>
     <RootNamespace>SW.Bitween.Web</RootNamespace>
+    <SpaRoot>ClientApp\</SpaRoot>
   </PropertyGroup>
 
+  <ItemGroup>
+    <!-- The SPA is built by yarn, not MSBuild; keep its sources out of the .NET build. -->
+    <Content Remove="$(SpaRoot)**" />
+    <None Remove="$(SpaRoot)**" />
+    <None Include="$(SpaRoot)**" Exclude="$(SpaRoot)node_modules\**;$(SpaRoot)dist\**" />
+  </ItemGroup>
+
+  <!-- Build the SPA into wwwroot on publish. The Dockerfile builds it in its
+       own node stage instead and passes -p:SkipClientBuild=true here. -->
+  <Target Name="BuildClientApp" AfterTargets="ComputeFilesToPublish" Condition="'$(SkipClientBuild)' != 'true'">
+    <Exec WorkingDirectory="$(SpaRoot)" Command="yarn install --frozen-lockfile" />
+    <Exec WorkingDirectory="$(SpaRoot)" Command="yarn build" />
+    <ItemGroup>
+      <ClientAppFiles Include="wwwroot\**" />
+      <ResolvedFileToPublish Include="@(ClientAppFiles->'%(FullPath)')" Exclude="@(ResolvedFileToPublish)">
+        <RelativePath>%(ClientAppFiles.Identity)</RelativePath>
+        <CopyToPublishDirectory>PreserveNewest</CopyToPublishDirectory>
+        <ExcludeFromSingleFile>true</ExcludeFromSingleFile>
+      </ResolvedFileToPublish>
+    </ItemGroup>
+  </Target>
+
   <ItemGroup>
     <PackageReference Include="EFCore.NamingConventions" Version="8.0.3" />
     <PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="8.0.12">
diff --git a/SW.Bitween.Web/Startup.cs b/SW.Bitween.Web/Startup.cs
index cfa8a114..95176e51 100644
--- a/SW.Bitween.Web/Startup.cs
+++ b/SW.Bitween.Web/Startup.cs
@@ -61,6 +61,11 @@ public void ConfigureServices(IServiceCollection services)
             Configuration.GetSection(ThemeOptions.ConfigurationSection).Bind(themeOptions);
             services.AddSingleton(themeOptions);
             services.AddSingleton(bitweenOptions);
+            // Keeps both option objects in sync with the Settings table, which owns every editable
+            // setting; Program hands configuration over to it at boot. The protector encrypts
+            // secret settings before they're stored.
+            services.AddSingleton<SettingsProtector>();
+            services.AddSingleton<SettingsService>();
             services.AddMemoryCache();
             services.AddSingleton<IInfolinkCache, InMemoryBitweenCache>();
             services.AddSingleton<FilterService>();
@@ -136,6 +141,7 @@ public void ConfigureServices(IServiceCollection services)
             services.AddServerless(configure =>
             {
                 configure.CommandTimeout = bitweenOptions.ServerlessCommandTimeout;
+                configure.AdapterRemotePath = bitweenOptions.AdapterPath;
             });
             services.AddScoped<RequestContext>();
 
@@ -346,7 +352,8 @@ public void ConfigureServices(IServiceCollection services)
                     });
             });
 
-            services.AddNativeAdapters(bitweenOptions.RebexLicenseKey);
+            // Resolved per adapter instance so a license key saved in Settings applies without a restart.
+            services.AddNativeAdapters(sp => sp.GetRequiredService<BitweenOptions>().RebexLicenseKey);
 
             // services.AddScoped<INativeInfolinkHandler, NativeUpdatePartnerPropsHandler>();
             // services.AddScoped<INativeAdapter, NativeUpdatePartnerPropsHandler>();
@@ -364,7 +371,7 @@ public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
             }
 
             app.UseCors();
-            app.UsePathBase("/bitween");
+            app.UseDefaultFiles();
             app.UseStaticFiles();
             app.UseRouting();
             app.UseAuthentication();
@@ -380,6 +387,9 @@ public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
                 endpoints.MapControllers();
                 endpoints.MapHealthChecks("/health");
 
+                // SPA fallback: unmatched, non-file routes get the UI's index.html
+                // so client-side routes (e.g. /team/members) survive refresh.
+                endpoints.MapFallbackToFile("index.html");
             });
         }
     }
diff --git a/SW.Bitween.Web/appsettings.json b/SW.Bitween.Web/appsettings.json
index a2822b84..0d49694f 100644
--- a/SW.Bitween.Web/appsettings.json
+++ b/SW.Bitween.Web/appsettings.json
@@ -1,22 +1,6 @@
 {
-  "ASPNETCORE_ENVIRONMENT":"Development",
   "AllowedHosts": "*",
-  "Theme": {
-    "LoginLogo": "/Graphics/s9.png",
-    "BitweenLogo": "/Graphics/BitweenFull.svg",
-    "BitweenText": "is all-in-one solution to solving integration with third parties, automating workflows\n                                with exchanges coming from all forms of requests, ranging from internal messages to\n                                files dumped on a server.",
-    "LinkedinLink": "https://www.linkedin.com/company/simplify9",
-    "GithubLink": "https://github.com/simplify9",
-    "BitweenIcon": "/Graphics/BitweenIcon.png",
-    "BitweenHeaderIcon": "/Graphics/BitweenIcon.svg",
-    "WebsiteLink": "https://www.simplify9.com/",
-    "CompanyName": "Simplify9",
-    "AllRightsReserved": "All Rights Reserved.",
-    "CopyRightsIcon": "©",
-    "TabTitle": "Bitween",
-    "TabIcon": "/favicon.ico"
-  },
   "SWLogger": {
     "LoggingLevel": 2
   }
-}
\ No newline at end of file
+}
diff --git a/charts/default/templates/deployment.yaml b/charts/default/templates/deployment.yaml
index 361c0fc1..9cea0161 100644
--- a/charts/default/templates/deployment.yaml
+++ b/charts/default/templates/deployment.yaml
@@ -81,6 +81,8 @@ spec:
             - name: Bitween__StorageProvider
               value: {{ .Values.storageProvider }}
 
+            # Seeds the Settings table on the first boot only — after that the app reads the table
+            # and ignores this value. Change it under Settings → Documents & storage instead.
             - name: Bitween__AreXChangeFilesPrivate
               value: "{{ .Values.areXChangeFilesPrivate }}"
 
@@ -131,12 +133,15 @@ spec:
                   name: {{ template "project.fullname" . }}
                   key: db
 
+            # As with Bitween__AreXChangeFilesPrivate above, these three seed the Settings table on
+            # the first boot only. Editing them later has no effect — change Microsoft sign-on
+            # under Settings → Single sign-on (Microsoft).
             - name: Bitween__MsalClientId
               value: {{ .Values.msalClientId }}
 
             - name: Bitween__MsalRedirectUri
               value: {{ .Values.msalRedirectUri }}
-              
+
             - name: Bitween__MsalTenantId
               value: {{ .Values.msalTenantId }}
               
diff --git a/charts/default/values.yaml b/charts/default/values.yaml
index 511a0e30..c3d56ad1 100644
--- a/charts/default/values.yaml
+++ b/charts/default/values.yaml
@@ -72,7 +72,13 @@ environmentVariables:
   Bitween__RabbitMqManagementPassword: ""
   Bitween__RabbitMqManagementUsername: ""
   
+# Each key here becomes both an entry in the release Secret and an env var of the same name.
+#
+# Bitween__SettingsEncryptionKey encrypts secret settings (e.g. the Rebex license key) before
+# they're stored in the Settings table. Without it those settings stay configuration-only and
+# show read-only in the UI. Rotating it makes anything already stored unreadable.
 secrets:
+  # Bitween__SettingsEncryptionKey: "<32+ random characters>"
 
 resources: {}
   # We usually recommend not to specify default resources and to leave this as a conscious