Release v1.7.1 - Mejoras en SLA, Auditoria y Multi-tenant

✨ Características Nuevas:
- Cálculo automático de SLA en tickets basado en categoría
- Auto-asignación de tickets según configuración de categoría
- Auditoría completa en operaciones de categorías (create/update/delete)
- Visualización de estado SLA en listado y detalle de tickets

🐛 Correcciones:
- Fix actualización de status en tenants (manejo correcto de enum TenantStatus)
- Corrección de campos contact_phone y contact_email en tenants
- Corrección de modelo TicketResponse (agregar campos SLA y usar ConfigDict)
- Eliminación de archivo changelog duplicado

🔧 Mejoras de Infraestructura:
- Agregar montaje de backend en workers y beat para imports correctos
- Mejorar path handling en sla_tasks.py para Docker
- Scripts de testing integrados (test_frontend_integration, test_manual, test_tenant_update)
- Agregar database.py en workers/app/core para sesiones async

📝 Frontend:
- Actualizar UI de tenants con nuevos campos (email, teléfono, status enum)
- Agregar columna de SLA en listado de tickets
- Mostrar información detallada de SLA en vista de ticket individual
- Indicadores visuales de estado de SLA (vencido, cumplido, en plazo)

.github/copilot-context.md

@@ -0,0 +1,187 @@
+# Configuración Avanzada de GitHub Copilot para ServiceManagerWeb
+
+## Variables de Contexto Importantes
+
+### Configuración del Sistema
+```env
+# Variables críticas a considerar
+DATABASE_URL=postgresql+asyncpg://user:pass@localhost:5432/servicemanager
+REDIS_URL=redis://localhost:6379/0
+JWT_SECRET_KEY=your-secret-key
+TENANT_ISOLATION=strict
+CORS_ORIGINS=["http://localhost:3000", "http://localhost:3001"]
+```
+
+### Modelos de Datos Clave
+
+#### User Model Completo
+```python
+class User(Base):
+    __tablename__ = "users"
+    
+    id: Mapped[int] = mapped_column(primary_key=True)
+    tenant_id: Mapped[int] = mapped_column(ForeignKey("tenants.id"))
+    email: Mapped[str] = mapped_column(unique=True, index=True)
+    role: Mapped[UserRole] = mapped_column(default=UserRole.CLIENT_USER)
+    is_active: Mapped[bool] = mapped_column(default=True)
+    created_at: Mapped[datetime] = mapped_column(default=datetime.utcnow)
+```
+
+#### Ticket Workflow States
+```python
+class TicketStatus(str, Enum):
+    OPEN = "open"
+    IN_PROGRESS = "in_progress" 
+    PENDING_CLIENT = "pending_client"
+    RESOLVED = "resolved"
+    CLOSED = "closed"
+    CANCELLED = "cancelled"
+```
+
+## Reglas de Implementación Específicas
+
+### 1. Multi-Tenancy Estricto
+- NUNCA hacer queries sin filtrar por `tenant_id`
+- Middleware de tenant debe estar en toda request
+- Validar permisos a nivel de tenant antes de operaciones
+
+### 2. Audit Trail Obligatorio
+```python
+async def log_audit_event(
+    action: str,
+    resource_type: str,
+    resource_id: int,
+    user_id: int,
+    tenant_id: int,
+    details: dict = None
+):
+    # Implementar en todas las operaciones CRUD críticas
+```
+
+### 3. Error Handling Consistente
+```python
+# Backend
+raise HTTPException(
+    status_code=status.HTTP_403_FORBIDDEN,
+    detail="Insufficient permissions for tenant resource"
+)
+
+# Frontend  
+import { toast } from '$lib/stores/toast';
+toast.error("Error al procesar la solicitud");
+```
+
+### 4. Performance Patterns
+```python
+# Queries con paginación siempre
+async def get_tickets_paginated(
+    db: AsyncSession,
+    tenant_id: int,
+    skip: int = 0,
+    limit: int = 20
+) -> Tuple[List[Ticket], int]:
+    # Select con join optimizado + count total
+```
+
+## Componentes Frontend Reutilizables
+
+### Layout Structure
+```
++layout.svelte (global)
+├── Header.svelte (navigation)
+├── Sidebar.svelte (menu)  
+└── Toast.svelte (notifications)
+```
+
+### Form Patterns
+```typescript
+// Validation con Zod
+const createTicketSchema = z.object({
+  title: z.string().min(5).max(200),
+  description: z.string().min(10),
+  priority: z.nativeEnum(TicketPriority),
+  category_id: z.number().positive()
+});
+```
+
+## Debugging y Logging
+
+### Backend Logging
+```python
+import structlog
+logger = structlog.get_logger(__name__)
+
+# En cada endpoint
+logger.info(
+    "ticket_created",
+    ticket_id=ticket.id,
+    user_id=current_user.id,
+    tenant_id=current_user.tenant_id,
+    correlation_id=request.correlation_id
+)
+```
+
+### Frontend Error Boundary
+```svelte
+<!-- En +layout.svelte -->
+{#if $page.error}
+  <ErrorComponent error={$page.error} />
+{/if}
+```
+
+## Comandos de Desarrollo Específicos
+
+```bash
+# Backend development
+cd backend && uvicorn app.main:app --reload --port 8000
+
+# Frontend internal (admin panel)  
+cd frontend-internal && npm run dev -- --port 3001
+
+# Frontend client (customer portal)
+cd frontend-client && npm run dev -- --port 3000
+
+# Workers
+cd workers && celery -A app.celery worker --loglevel=info
+
+# Full stack con Docker
+docker-compose -f docker-compose.dev.yml up
+
+# Database operations
+docker-compose exec backend alembic revision --autogenerate -m "Description"
+docker-compose exec backend alembic upgrade head
+
+# Testing complete
+docker-compose exec backend pytest -v --cov=app
+```
+
+## Code Review Checklist
+
+- [ ] ✅ Multi-tenant isolation verificado
+- [ ] 🔒 Autenticación/autorización implementada  
+- [ ] 📊 Audit logging en operaciones críticas
+- [ ] 🚀 Performance considerado (índices, paginación)
+- [ ] 🧪 Tests unitarios/integración agregados
+- [ ] 📝 OpenAPI documentation actualizada
+- [ ] 🎨 UI/UX consistente con design system
+- [ ] 🐛 Error handling comprehensivo
+- [ ] 📱 Responsive design verificado
+- [ ] 🔍 Type safety con TypeScript/mypy
+
+## Herramientas de Calidad
+
+```bash
+# Python quality
+ruff check . --fix
+black .  
+mypy .
+bandit -r app/
+safety check
+
+# JavaScript/TypeScript quality
+npm run lint
+npm run type-check
+npm run format
+```
+
+Esta configuración te ayudará a mantener la calidad enterprise del sistema ServiceManagerWeb.

.github/copilot-instructions.md

@@ -98,4 +98,98 @@ black .
 mypy .
 ```
 
+## Configuración de IA Especializada
+
+### Prioridades de Asistencia
+1. **Seguridad primero**: Siempre implementar autenticación/autorización en nuevos endpoints
+2. **Multi-tenancy**: Verificar aislamiento de datos entre tenants en toda nueva funcionalidad
+3. **Performance**: Considerar impacto en bases de datos grandes (índices, paginación, caching)
+4. **Auditabilidad**: Registrar acciones sensibles en el sistema de audit
+5. **Escalabilidad**: Código preparado para crecimiento empresarial
+
+### Patrones Preferidos
+
+#### Backend (FastAPI)
+```python
+# Estructura de endpoint típica
+@router.post("/", response_model=schemas.TicketResponse)
+async def create_ticket(
+    ticket: schemas.TicketCreate,
+    current_user: models.User = Depends(get_current_user),
+    db: AsyncSession = Depends(get_db)
+):
+    # 1. Validar permisos multi-tenant
+    # 2. Procesar lógica de negocio
+    # 3. Audit log
+    # 4. Return response
+```
+
+#### Frontend (SvelteKit)
+```typescript
+// Store pattern con Zod validation
+import { z } from 'zod';
+import { writable } from 'svelte/store';
+
+const TicketSchema = z.object({
+  title: z.string().min(5),
+  priority: z.enum(['LOW', 'MEDIUM', 'HIGH', 'URGENT'])
+});
+```
+
+### Contexto de Archivos Clave
+
+#### Backend Core
+- `app/core/security.py`: JWT, permissions, rate limiting
+- `app/middleware/tenant.py`: Multi-tenant context
+- `app/models/`: SQLAlchemy models con relationships
+- `app/api/v1/endpoints/`: Endpoints REST por dominio
+
+#### Frontend Routing
+- `frontend-internal/`: Panel administrativo interno
+- `frontend-client/`: Portal de clientes
+- Ambos usan SvelteKit con layout compartido
+
+#### Workers/Tasks
+- `workers/app/tasks/`: Tareas Celery asíncronas
+- `email_tasks.py`: Notificaciones y plantillas
+- `sla_tasks.py`: Monitoreo de SLAs automático
+
+### Troubleshooting Común
+
+#### Database Issues
+```bash
+# Reset migrations
+docker-compose exec backend alembic downgrade base
+docker-compose exec backend alembic upgrade head
+```
+
+#### Multi-tenant Debug
+- Verificar `tenant_context` middleware
+- Headers: `X-Tenant-ID` en requests
+- Queries siempre filtrar por tenant_id
+
+#### Frontend Build Errors
+```bash
+cd frontend-internal && npm run build
+cd frontend-client && npm run build
+```
+
+### Convenciones de Desarrollo
+
+#### Naming
+- **Models**: PascalCase (User, Ticket, TenantOrganization)
+- **Endpoints**: kebab-case (/api/v1/user-management/)
+- **Components**: PascalCase.svelte (TicketCard.svelte)
+- **Stores**: camelCase (ticketStore.ts)
+
+#### Error Handling
+- Backend: HTTPException con status codes apropiados
+- Frontend: Toast notifications para UX
+- Logs: Structured logging con correlation IDs
+
+#### Testing Strategy
+- Unit: Lógica de negocio y validaciones
+- Integration: Endpoints completos con DB
+- E2E: Flujos críticos multi-tenant
+
 Cuando trabajes en este proyecto, siempre considera la naturaleza multi-tenant y empresarial del sistema.

README.md

@@ -129,6 +129,42 @@ cd ../frontend-internal
 npm test
 ```
 
+## Troubleshooting
+
+### Error 500 en Login / Proxy Error
+
+**Síntoma**: Error 500 al intentar hacer login, o error de proxy de Vite "connect ECONNREFUSED".
+
+**Causa**: Configuración incorrecta de la comunicación entre servicios de Docker.
+
+**Solución**:
+1. En desarrollo con Docker, los servicios usan nombres de servicio (no `localhost`)
+2. Verificar `vite.config.js`: el proxy debe apuntar a `http://backend:8000`
+3. Verificar `docker-compose.yml`: `PUBLIC_API_URL` debe ser `http://backend:8000`
+4. Después de cambios, reiniciar contenedor: `docker-compose restart frontend-internal`
+
+**Nota**: Para desarrollo local sin Docker, cambiar el proxy a `http://localhost:8000`.
+
+### Tenant Slug Incorrecto
+
+**Síntoma**: Error de autenticación incluso con credenciales correctas.
+
+**Causa**: El `tenant_slug` en el login no coincide con los tenants en la BD.
+
+**Solución**:
+1. Verificar tenants existentes: `docker exec servicemanager-backend python check_tenants.py`
+2. Actualizar el tenant_slug en el código de login
+3. Tenants por defecto: `aduanasoft-demo`, `test-tenant`
+
+### Credenciales de Prueba
+
+```
+Email: admin@aduanasoft.com
+Password: admin123
+Tenant: aduanasoft-demo
+Role: ADMIN
+```
+
 ## Contribución
 
 1. Fork del proyecto

backend/add_columns.py

@@ -1,22 +0,0 @@
-import asyncio
-from sqlalchemy import text
-from app.core.database import engine
-
-async def add_columns():
-    print("Starting schema update...")
-    async with engine.begin() as conn:
-        try:
-            await conn.execute(text("ALTER TABLE tickets ADD COLUMN system_id UUID REFERENCES systems(id)"))
-            print("Added system_id column")
-        except Exception as e:
-            print(f"Error adding system_id (might exist): {e}")
-            
-        try:
-            await conn.execute(text("ALTER TABLE tickets ADD COLUMN category_id UUID REFERENCES categories(id)"))
-            print("Added category_id column")
-        except Exception as e:
-            print(f"Error adding category_id (might exist): {e}")
-    print("Schema update finished.")
-
-if __name__ == "__main__":
-    asyncio.run(add_columns())

backend/alembic.ini

@@ -0,0 +1,84 @@
+# A generic, single database configuration for ServiceManagerWeb
+
+[alembic]
+# path to migration scripts
+script_location = migrations
+
+# template used to generate migration file names; The default value is %%(rev)s_%%(slug)s
+# Uncomment the line below if you want the files to be prepended with date and time
+# file_template = %%(year)d%%(month).2d%%(day).2d_%%(hour).2d%%(minute).2d-%%(rev)s_%%(slug)s
+
+# sys.path path, will be prepended to sys.path if present.
+# defaults to the current working directory.
+prepend_sys_path = .
+
+# timezone to use when rendering the date within the migration file
+# as well as the filename.
+# If specified, requires the python-dateutil library that can be
+# installed by adding `alembic[tz]` to the pip requirements
+# string value is passed to dateutil.tz.gettz()
+# leave blank for localtime
+# timezone =
+
+# max length of characters to apply to the
+# "slug" field
+# truncate_slug_length = 40
+
+# set to 'true' to run the environment during
+# the 'revision' command, regardless of autogenerate
+# revision_environment = false
+
+# set to 'true' to allow .pyc and .pyo files without
+# a source .py file to be detected as revisions in the
+# versions/ directory
+# sourceless = false
+
+# version path separator; As mentioned above, this is the character used to split
+# version_locations. The default within new alembic.ini files is "os", which uses
+# os.pathsep. If this key is omitted entirely, it falls back to the legacy
+# behavior of splitting on spaces and/or commas.
+# Valid values for version_path_separator are:
+#
+# version_path_separator = :
+# version_path_separator = ;
+# version_path_separator = space
+version_path_separator = os
+
+# the output encoding used when revision files
+# are written from script.py.mako
+# output_encoding = utf-8
+
+# Logging configuration
+[loggers]
+keys = root,sqlalchemy,alembic
+
+[handlers]
+keys = console
+
+[formatters]
+keys = generic
+
+[logger_root]
+level = WARN
+handlers = console
+qualname =
+
+[logger_sqlalchemy]
+level = WARN
+handlers =
+qualname = sqlalchemy.engine
+
+[logger_alembic]
+level = INFO
+handlers =
+qualname = alembic
+
+[handler_console]
+class = StreamHandler
+args = (sys.stderr,)
+level = NOTSET
+formatter = generic
+
+[formatter_generic]
+format = %(levelname)-5.5s [%(name)s] %(message)s
+datefmt = %H:%M:%S

backend/app/api/deps.py

@@ -9,6 +9,7 @@ from app.core.database import get_db
 from app.core.security import security
 from app.core.config import get_settings
 from app.models.user import User, UserRole
+from app.models.tenant import Tenant
 
 settings = get_settings()
 
@@ -55,3 +56,20 @@ async def get_current_active_superuser(
             status_code=403, detail="The user doesn't have enough privileges"
         )
     return current_user
+
+
+async def get_current_tenant(
+    current_user: User = Depends(get_current_user),
+    db: AsyncSession = Depends(get_db)
+) -> Tenant:
+    """Obtener el tenant del usuario actual."""
+    result = await db.execute(select(Tenant).where(Tenant.id == current_user.tenant_id))
+    tenant = result.scalar_one_or_none()
+    
+    if not tenant:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail="Tenant not found"
+        )
+    
+    return tenant

backend/app/api/schemas/__init__.py

@@ -0,0 +1,15 @@
+"""Schemas package initialization."""
+
+from .client_profile import (
+    ClientProfileCreate,
+    ClientProfileUpdate, 
+    ClientProfileResponse,
+    ClientProfileSummary
+)
+
+__all__ = [
+    "ClientProfileCreate",
+    "ClientProfileUpdate",
+    "ClientProfileResponse", 
+    "ClientProfileSummary"
+]

backend/app/api/schemas/attachment.py

@@ -0,0 +1,25 @@
+"""
+Attachment Schemas - ServiceManagerWeb
+"""
+from pydantic import BaseModel, ConfigDict, Field
+from datetime import datetime
+from typing import Optional
+import uuid
+
+
+class AttachmentResponse(BaseModel):
+    """Schema para respuesta de attachment"""
+    id: uuid.UUID
+    ticket_id: uuid.UUID
+    comment_id: Optional[uuid.UUID] = None
+    uploaded_by: uuid.UUID
+    filename: str
+    original_filename: str
+    mime_type: str
+    file_size: int
+    file_path: str
+    uploaded_by_name: Optional[str] = None
+    created_at: datetime
+    download_url: Optional[str] = None
+    
+    model_config = ConfigDict(from_attributes=True)

backend/app/api/schemas/audit.py

@@ -0,0 +1,191 @@
+"""
+Audit Schemas - ServiceManagerWeb
+
+Schemas Pydantic para endpoints de auditoría
+"""
+
+from pydantic import BaseModel, Field, UUID4
+from typing import Optional, Dict, Any
+from datetime import datetime
+
+
+class AuditLogBase(BaseModel):
+    """Schema base para audit logs."""
+    action: str = Field(..., description="Acci├│n realizada (ej: ticket.create)")
+    resource_type: str = Field(..., description="Tipo de recurso (ticket, user, etc.)")
+    resource_id: Optional[UUID4] = Field(None, description="ID del recurso afectado")
+    extra_metadata: Optional[Dict[str, Any]] = Field(None, description="Metadata adicional", alias="metadata")
+
+
+class AuditLogResponse(AuditLogBase):
+    """
+    Schema de respuesta para audit logs.
+    
+    Incluye toda la informaci├│n del log con datos del usuario.
+    """
+    id: UUID4
+    tenant_id: UUID4
+    user_id: Optional[UUID4]
+    
+    # Informaci├│n del usuario (si existe)
+    user_email: Optional[str] = None
+    user_name: Optional[str] = None
+    user_role: Optional[str] = None
+    
+    # Contexto de la acci├│n
+    ip_address: Optional[str]
+    user_agent: Optional[str]
+    correlation_id: Optional[UUID4]
+    
+    # Cambios realizados
+    old_values: Optional[Dict[str, Any]]
+    new_values: Optional[Dict[str, Any]]
+    
+    # Timestamp
+    created_at: datetime
+    
+    # Display friendly
+    action_display: str = Field(description="Acci├│n en formato amigable")
+    
+    class Config:
+        from_attributes = True
+
+
+# ===================================
+# SECURITY ANALYSIS SCHEMAS
+# ===================================
+
+class SecurityThreatPattern(BaseModel):
+    """Patrón de amenaza detectado."""
+    type: str = Field(description="Tipo de amenaza (brute_force, privilege_escalation, etc.)")
+    severity: str = Field(description="Severidad: low, medium, high, critical")
+    description: str = Field(description="Descripción de la amenaza")
+    occurrences: int = Field(description="Número de ocurrencias")
+    affected_ips: list[str] = Field(default=[], description="IPs involucradas")
+    affected_users: list[str] = Field(default=[], description="Usuarios afectados")
+    first_seen: datetime = Field(description="Primera ocurrencia")
+    last_seen: datetime = Field(description="Última ocurrencia")
+    recommendations: list[str] = Field(default=[], description="Recomendaciones de acción")
+
+
+class SecurityAnalysisResponse(BaseModel):
+    """Análisis completo de seguridad."""
+    overall_risk_level: str = Field(description="Nivel de riesgo general: safe, low, medium, high, critical")
+    total_threats_detected: int = Field(description="Total de amenazas detectadas")
+    threats: list[SecurityThreatPattern] = Field(description="Lista de amenazas detectadas")
+    analysis_period_hours: int = Field(description="Período de análisis en horas")
+    generated_at: datetime = Field(description="Timestamp del análisis")
+    
+    # Estadísticas de seguridad
+    failed_login_attempts: int = Field(description="Intentos fallidos de login")
+    suspicious_ips_count: int = Field(description="IPs sospechosas detectadas")
+    critical_actions_count: int = Field(description="Acciones críticas realizadas")
+    
+    # Opciones de acción
+    recommended_actions: list[str] = Field(default=[], description="Acciones recomendadas")
+
+
+class SecurityActionRequest(BaseModel):
+    """Solicitud de acción de seguridad."""
+    action_type: str = Field(description="Tipo de acción: block_ip, notify_admin, reset_password, etc.")
+    target: str = Field(description="Objetivo de la acción (IP, email, etc.)")
+    reason: str = Field(description="Razón de la acción")
+    duration_minutes: Optional[int] = Field(None, description="Duración del bloqueo en minutos")
+
+
+class SecurityActionResponse(BaseModel):
+    """Respuesta de acción de seguridad."""
+    success: bool = Field(description="Si la acción fue exitosa")
+    message: str = Field(description="Mensaje descriptivo")
+    action_id: Optional[UUID4] = Field(None, description="ID de la acción registrada")
+
+
+class SecurityIncidentResponse(BaseModel):
+    """Respuesta para incidentes de seguridad."""
+    id: str = Field(description="ID único del incidente")
+    title: str = Field(description="Título del incidente")
+    description: Optional[str] = Field(None, description="Descripción detallada")
+    severity: str = Field(description="Severidad: low, medium, high, critical")
+    status: str = Field(description="Estado: active, investigating, resolved")
+    incident_type: str = Field(description="Tipo de incidente")
+    affected_user: Optional[str] = Field(None, description="Usuario afectado")
+    source_ip: Optional[str] = Field(None, description="IP origen del incidente")
+    evidence: list[str] = Field(default=[], description="Evidencia del incidente")
+    metadata: Optional[Dict[str, Any]] = Field(None, description="Metadata adicional")
+    created_at: datetime = Field(description="Fecha de creación")
+    updated_at: Optional[datetime] = Field(None, description="Última actualización")
+    resolved_at: Optional[datetime] = Field(None, description="Fecha de resolución")
+
+    class Config:
+        from_attributes = True
+
+
+class SecurityIncidentListResponse(BaseModel):
+    """Respuesta paginada de incidentes de seguridad."""
+    incidents: list[SecurityIncidentResponse]
+    total: int = Field(description="Total de incidentes")
+    page: int = Field(description="Página actual")
+    per_page: int = Field(description="Incidentes por página")
+    total_pages: int = Field(description="Total de páginas")
+
+    class Config:
+        from_attributes = True
+
+
+class AuditLogFilters(BaseModel):
+    """
+    Filtros para consulta de audit logs.
+    
+    Permite filtrar por m├║ltiples criterios.
+    """
+    # Paginaci├│n
+    page: int = Field(default=1, ge=1, description="Número de página")
+    per_page: int = Field(default=50, ge=1, le=100, description="Elementos por página")
+    
+    # Filtros
+    user_id: Optional[UUID4] = Field(None, description="Filtrar por usuario")
+    action: Optional[str] = Field(None, description="Filtrar por acción específica")
+    resource_type: Optional[str] = Field(None, description="Filtrar por tipo de recurso")
+    resource_id: Optional[UUID4] = Field(None, description="Filtrar por ID de recurso")
+    
+    # Rango de fechas
+    date_from: Optional[datetime] = Field(None, description="Fecha inicio (ISO 8601)")
+    date_to: Optional[datetime] = Field(None, description="Fecha fin (ISO 8601)")
+    
+    # B├║squeda
+    search: Optional[str] = Field(None, description="B├║squeda en acciones o recursos")
+
+
+class AuditLogStats(BaseModel):
+    """
+    Estadísticas de auditoría.
+    
+    Resumen de actividad del sistema.
+    """
+    total_actions: int = Field(description="Total de acciones registradas")
+    actions_today: int = Field(description="Acciones en las ├║ltimas 24 horas")
+    actions_this_week: int = Field(description="Acciones en los últimos 7 días")
+    critical_actions_today: int = Field(description="Acciones críticas hoy (delete, cambios sensibles)")
+    
+    # Top acciones
+    top_actions: Dict[str, int] = Field(description="Acciones más frecuentes")
+    
+    # Top usuarios
+    top_users: Dict[str, int] = Field(description="Usuarios más activos")
+    
+    # Actividad por tipo de recurso
+    by_resource_type: Dict[str, int] = Field(description="Acciones por tipo de recurso")
+
+
+class AuditLogListResponse(BaseModel):
+    """
+    Respuesta paginada de audit logs.
+    """
+    logs: list[AuditLogResponse]
+    total: int = Field(description="Total de registros")
+    page: int = Field(description="Página actual")
+    per_page: int = Field(description="Registros por página")
+    total_pages: int = Field(description="Total de páginas")
+    
+    class Config:
+        from_attributes = True

backend/app/api/schemas/client_profile.py

@@ -0,0 +1,202 @@
+"""
+Client Profile Schemas - ServiceManagerWeb
+Esquemas de validación para el perfil empresarial de clientes
+"""
+
+from pydantic import BaseModel, Field, validator, EmailStr
+from typing import Optional
+from decimal import Decimal
+from datetime import datetime
+import uuid
+
+
+class ClientProfileBase(BaseModel):
+    """Schema base para ClientProfile."""
+    
+    # === INFORMACIÓN GENERAL ===
+    business_name: Optional[str] = Field(None, max_length=255, description="Razón social")
+    commercial_name: Optional[str] = Field(None, max_length=255, description="Nombre comercial")
+    client_code: Optional[str] = Field(None, max_length=50, description="Clave de cliente")
+    client_type: Optional[str] = Field(None, max_length=50, description="Tipo de cliente")
+    rfc: Optional[str] = Field(None, max_length=13, description="RFC (México)")
+    tax_id: Optional[str] = Field(None, max_length=50, description="ID fiscal general")
+    
+    # === UBICACIÓN ===
+    country: Optional[str] = Field(None, max_length=100, description="País")
+    state: Optional[str] = Field(None, max_length=100, description="Estado/Provincia")
+    city: Optional[str] = Field(None, max_length=100, description="Ciudad")
+    address: Optional[str] = Field(None, description="Dirección completa")
+    external_number: Optional[str] = Field(None, max_length=20, description="Número exterior")
+    internal_number: Optional[str] = Field(None, max_length=20, description="Número interior")
+    postal_code: Optional[str] = Field(None, max_length=10, description="Código postal")
+    neighborhood: Optional[str] = Field(None, max_length=100, description="Colonia")
+    
+    # === CONTACTO ===
+    main_phone: Optional[str] = Field(None, max_length=20, description="Teléfono principal")
+    secondary_phone: Optional[str] = Field(None, max_length=20, description="Teléfono secundario")
+    direct_phone: Optional[str] = Field(None, max_length=20, description="Teléfono directo")
+    phone_extension: Optional[str] = Field(None, max_length=10, description="Extensión")
+    fax: Optional[str] = Field(None, max_length=20, description="Fax")
+    
+    # === INFORMACIÓN ADICIONAL ===
+    business_hours: Optional[str] = Field(None, max_length=255, description="Horario de atención")
+    website: Optional[str] = Field(None, max_length=255, description="Página web")
+    main_email: Optional[EmailStr] = Field(None, description="Email principal")
+    billing_email: Optional[EmailStr] = Field(None, description="Email de facturación")
+    
+    # === MARKETING ===
+    advertising_medium: Optional[str] = Field(None, max_length=255, description="Medio de publicidad")
+    nationality: Optional[str] = Field(None, max_length=100, description="Nacionalidad")
+    
+    # === CONFIGURACIÓN EMPRESARIAL ===
+    logo_url: Optional[str] = Field(None, max_length=500, description="URL del logo")
+    company_representative: Optional[str] = Field(None, max_length=255, description="Representante de empresa")
+    legal_representative: Optional[str] = Field(None, max_length=255, description="Representante legal")
+    
+    # === FINANZAS/FACTURACIÓN ===
+    credit_limit: Optional[Decimal] = Field(None, description="Límite de crédito")
+    payment_terms: Optional[str] = Field(None, max_length=100, description="Términos de pago")
+    preferred_currency: str = Field("MXN", max_length=3, description="Moneda preferida")
+    
+    # === METADATOS ===
+    send_to_billing: bool = Field(False, description="Enviar a facturación")
+    is_active_client: bool = Field(True, description="Cliente activo")
+    is_prospect: bool = Field(False, description="Es prospecto")
+    notes: Optional[str] = Field(None, description="Notas adicionales")
+
+    @validator('rfc')
+    def validate_rfc(cls, v):
+        """Validar formato de RFC mexicano."""
+        if v is None:
+            return v
+        
+        v = v.strip().upper()
+        if len(v) < 10 or len(v) > 13:
+            raise ValueError('RFC debe tener entre 10 y 13 caracteres')
+        
+        # Validación básica de formato RFC
+        import re
+        rfc_pattern = r'^[A-ZÑ&]{3,4}[0-9]{6}[A-Z0-9]{3}$'
+        if not re.match(rfc_pattern, v):
+            raise ValueError('Formato de RFC inválido')
+        
+        return v
+
+    @validator('postal_code')
+    def validate_postal_code(cls, v):
+        """Validar código postal."""
+        if v is None:
+            return v
+        
+        v = v.strip()
+        if not v.isdigit() or len(v) != 5:
+            raise ValueError('Código postal debe tener 5 dígitos')
+        
+        return v
+
+    @validator('website')
+    def validate_website(cls, v):
+        """Validar formato de sitio web."""
+        if v is None:
+            return v
+        
+        v = v.strip()
+        if not v.startswith(('http://', 'https://')):
+            v = f"https://{v}"
+        
+        import re
+        url_pattern = r'^https?://.+\..+'
+        if not re.match(url_pattern, v):
+            raise ValueError('Formato de sitio web inválido')
+        
+        return v
+
+    @validator('preferred_currency')
+    def validate_currency(cls, v):
+        """Validar código de moneda."""
+        valid_currencies = ['MXN', 'USD', 'EUR', 'GBP', 'CAD']
+        if v not in valid_currencies:
+            raise ValueError(f'Moneda debe ser una de: {", ".join(valid_currencies)}')
+        return v
+
+
+class ClientProfileCreate(ClientProfileBase):
+    """Schema para crear un perfil de cliente."""
+    pass
+
+
+class ClientProfileUpdate(ClientProfileBase):
+    """Schema para actualizar un perfil de cliente."""
+    pass
+
+
+class ClientProfileResponse(ClientProfileBase):
+    """Schema de respuesta para ClientProfile."""
+    
+    id: uuid.UUID
+    tenant_id: uuid.UUID
+    created_at: datetime
+    updated_at: datetime
+
+    class Config:
+        from_attributes = True
+
+    @property
+    def full_address(self) -> str:
+        """Dirección completa formateada."""
+        address_parts = []
+        
+        if self.address:
+            address_parts.append(self.address)
+        
+        if self.external_number:
+            if self.internal_number:
+                address_parts.append(f"#{self.external_number}-{self.internal_number}")
+            else:
+                address_parts.append(f"#{self.external_number}")
+        
+        if self.neighborhood:
+            address_parts.append(f"Col. {self.neighborhood}")
+        
+        if self.city and self.state:
+            address_parts.append(f"{self.city}, {self.state}")
+        
+        if self.postal_code:
+            address_parts.append(f"C.P. {self.postal_code}")
+            
+        if self.country:
+            address_parts.append(self.country)
+            
+        return ", ".join(address_parts)
+
+    @property
+    def display_name(self) -> str:
+        """Nombre para mostrar."""
+        return self.commercial_name or self.business_name or "Sin nombre"
+
+
+class ClientProfileSummary(BaseModel):
+    """Schema resumido para listados."""
+    
+    id: uuid.UUID
+    tenant_id: uuid.UUID
+    business_name: Optional[str]
+    commercial_name: Optional[str]
+    rfc: Optional[str]
+    client_code: Optional[str]
+    city: Optional[str]
+    state: Optional[str]
+    main_phone: Optional[str]
+    main_email: Optional[str]
+    is_active_client: bool
+    is_prospect: bool
+    created_at: datetime
+    updated_at: datetime
+
+    class Config:
+        from_attributes = True
+
+    @property
+    def display_name(self) -> str:
+        """Nombre para mostrar."""
+        return self.commercial_name or self.business_name or "Sin nombre"

backend/app/api/schemas/sla.py

@@ -0,0 +1,253 @@
+"""
+SLA Schemas - ServiceManagerWeb
+
+Schemas para el sistema de gestión de SLAs
+"""
+
+from pydantic import BaseModel, ConfigDict
+from typing import Optional, List, Dict, Any
+from datetime import datetime
+from enum import Enum
+import uuid
+
+
+class SLATypeEnum(str, Enum):
+    """Tipos de SLA"""
+    RESPONSE = "response"
+    RESOLUTION = "resolution"
+
+
+class SLAStatusEnum(str, Enum):
+    """Estados de cumplimiento SLA"""
+    MET = "met"             # Cumplido
+    VIOLATED = "violated"   # Violado
+    AT_RISK = "at_risk"    # En riesgo (80%+ del tiempo)
+    PENDING = "pending"     # Pendiente (ticket aún abierto)
+
+
+# ===================================
+# DASHBOARD SCHEMAS
+# ===================================
+
+class SLAComplianceMetrics(BaseModel):
+    """Métricas de cumplimiento SLA"""
+    target_hours: int
+    met_count: int
+    violated_count: int
+    at_risk_count: int
+    total_count: int
+    compliance_percentage: float
+    avg_time_hours: Optional[float] = None
+
+
+class SLADashboardResponse(BaseModel):
+    """Response del dashboard principal de SLA"""
+    tenant_id: uuid.UUID
+    period_start: datetime
+    period_end: datetime
+    generated_at: datetime
+    
+    # Métricas generales
+    response_sla: SLAComplianceMetrics
+    resolution_sla: SLAComplianceMetrics
+    
+    # Contadores rápidos
+    active_violations: int
+    at_risk_tickets: int
+    total_tickets_period: int
+    
+    # Breakdown por categoría (top 5)
+    by_category: List[Dict[str, Any]]
+    
+    # Breakdown por prioridad
+    by_priority: Dict[str, Dict[str, float]]
+    
+    # Tendencias (comparación con período anterior)
+    trends: Dict[str, str]
+    
+    model_config = ConfigDict(from_attributes=True)
+
+
+# ===================================
+# VIOLATIONS SCHEMAS
+# ===================================
+
+class TicketBasicInfo(BaseModel):
+    """Información básica del ticket"""
+    id: uuid.UUID
+    ticket_number: str
+    subject: str
+    priority: str
+    status: str
+
+
+class UserBasicInfo(BaseModel):
+    """Información básica del usuario"""
+    id: uuid.UUID
+    first_name: str
+    last_name: str
+    email: str
+
+
+class CategoryBasicInfo(BaseModel):
+    """Información básica de categoría"""
+    id: uuid.UUID
+    name: str
+    sla_response_hours: int
+    sla_resolution_hours: int
+
+
+class SLAViolationResponse(BaseModel):
+    """Detalle de una violación SLA"""
+    ticket: TicketBasicInfo
+    category: Optional[CategoryBasicInfo] = None
+    created_by: UserBasicInfo
+    assigned_to: Optional[UserBasicInfo] = None
+    
+    sla_type: SLATypeEnum
+    sla_due_at: datetime
+    violated_at: datetime
+    hours_overdue: float
+    
+    # Contexto adicional
+    first_response_at: Optional[datetime] = None
+    resolved_at: Optional[datetime] = None
+    
+    model_config = ConfigDict(from_attributes=True)
+
+
+class SLAViolationsListResponse(BaseModel):
+    """Lista paginada de violaciones"""
+    violations: List[SLAViolationResponse]
+    total: int
+    page: int
+    per_page: int
+    total_pages: int
+
+
+# ===================================
+# TICKETS AT RISK
+# ===================================
+
+class SLATicketAtRisk(BaseModel):
+    """Ticket que está en riesgo de violar SLA"""
+    ticket: TicketBasicInfo
+    category: Optional[CategoryBasicInfo] = None
+    assigned_to: Optional[UserBasicInfo] = None
+    
+    sla_type: SLATypeEnum
+    sla_due_at: datetime
+    time_remaining_hours: float
+    risk_percentage: float  # 0-100, qué % del tiempo ha pasado
+    
+    model_config = ConfigDict(from_attributes=True)
+
+
+class SLAAtRiskListResponse(BaseModel):
+    """Lista de tickets en riesgo"""
+    tickets: List[SLATicketAtRisk]
+    total: int
+
+
+# ===================================
+# METRICS & REPORTS SCHEMAS
+# ===================================
+
+class SLAMetricsByCategory(BaseModel):
+    """Métricas SLA por categoría"""
+    category_id: uuid.UUID
+    category_name: str
+    response_sla_compliance: float
+    resolution_sla_compliance: float
+    total_tickets: int
+    response_violations: int
+    resolution_violations: int
+    avg_response_time_hours: Optional[float]
+    avg_resolution_time_hours: Optional[float]
+
+
+class SLAMetricsByAgent(BaseModel):
+    """Métricas SLA por agente"""
+    agent_id: uuid.UUID
+    agent_name: str
+    tickets_assigned: int
+    response_sla_met: int
+    resolution_sla_met: int
+    response_compliance: float
+    resolution_compliance: float
+    avg_response_time_hours: Optional[float]
+    avg_resolution_time_hours: Optional[float]
+
+
+class SLAMetricsByPriority(BaseModel):
+    """Métricas SLA por prioridad"""
+    priority: str
+    total_tickets: int
+    response_sla_compliance: float
+    resolution_sla_compliance: float
+    avg_response_time_hours: Optional[float]
+    avg_resolution_time_hours: Optional[float]
+
+
+class SLADetailedMetricsResponse(BaseModel):
+    """Response de métricas detalladas"""
+    tenant_id: uuid.UUID
+    date_from: datetime
+    date_to: datetime
+    group_by: str  # 'category', 'agent', 'priority'
+    
+    by_category: Optional[List[SLAMetricsByCategory]] = None
+    by_agent: Optional[List[SLAMetricsByAgent]] = None
+    by_priority: Optional[List[SLAMetricsByPriority]] = None
+    
+    generated_at: datetime
+    
+    model_config = ConfigDict(from_attributes=True)
+
+
+# ===================================
+# HISTORICAL TRENDS
+# ===================================
+
+class SLADailyTrend(BaseModel):
+    """Tendencia diaria de SLA"""
+    date: str  # YYYY-MM-DD
+    response_compliance: float
+    resolution_compliance: float
+    total_tickets: int
+    violations: int
+
+
+class SLATrendsResponse(BaseModel):
+    """Response de tendencias históricas"""
+    tenant_id: uuid.UUID
+    days: int
+    daily_trends: List[SLADailyTrend]
+    
+    # Promedios del período
+    avg_response_compliance: float
+    avg_resolution_compliance: float
+    total_tickets: int
+    total_violations: int
+    
+    model_config = ConfigDict(from_attributes=True)
+
+
+# ===================================
+# CONFIGURATION
+# ===================================
+
+class SLAConfigByCategoryResponse(BaseModel):
+    """Configuración SLA por categoría"""
+    category_id: uuid.UUID
+    category_name: str
+    sla_response_hours: int
+    sla_resolution_hours: int
+    warning_threshold_percentage: int  # % del tiempo para alertar
+    is_active: bool
+
+
+class SLAConfigListResponse(BaseModel):
+    """Lista de configuraciones SLA"""
+    tenant_id: uuid.UUID
+    categories: List[SLAConfigByCategoryResponse]

backend/app/api/v1/endpoints/auth.py

@@ -8,6 +8,7 @@ from fastapi import APIRouter, HTTPException, status, Depends
 from fastapi.security import OAuth2PasswordBearer, OAuth2PasswordRequestForm
 from sqlalchemy.ext.asyncio import AsyncSession
 from sqlalchemy import select
+from sqlalchemy.orm import selectinload
 from pydantic import BaseModel, EmailStr
 from typing import Optional
 import structlog
@@ -17,6 +18,7 @@ from app.core.security import security
 from app.core.config import get_settings
 from app.models.user import User
 from app.models.tenant import Tenant
+from app.services.audit_service import AuditService
 
 router = APIRouter()
 logger = structlog.get_logger(__name__)
@@ -98,6 +100,23 @@ async def login(
             "Login failed - invalid credentials",
             email=login_data.email
         )
+        
+        # Registrar intento fallido en auditoría (si el usuario existe)
+        if user:
+            try:
+                await AuditService.log(
+                    db=db,
+                    tenant_id=user.tenant_id,
+                    user_id=None,  # Login fallido = sin user_id
+                    action="user.login_failed",
+                    resource_type="user",
+                    resource_id=user.id,
+                    metadata={"email": login_data.email, "reason": "invalid_password"}
+                )
+                await db.commit()
+            except Exception as e:
+                logger.warning("Failed to log audit entry", error=str(e))
+        
         raise HTTPException(
             status_code=status.HTTP_401_UNAUTHORIZED,
             detail="Credenciales inválidas"
@@ -125,6 +144,21 @@ async def login(
     access_token = security.create_access_token(token_data)
     refresh_token = security.create_refresh_token(token_data)
     
+    # Registrar login exitoso en auditoría
+    try:
+        await AuditService.log(
+            db=db,
+            tenant_id=user.tenant_id,
+            user_id=user.id,
+            action="user.login",
+            resource_type="user",
+            resource_id=user.id,
+            metadata={"email": user.email, "success": True}
+        )
+        await db.commit()
+    except Exception as e:
+        logger.warning("Failed to log audit entry", error=str(e))
+    
     logger.info(
         "Login successful",
         email=login_data.email,
@@ -226,6 +260,25 @@ async def logout(
     
     # TODO: Revoke refresh token in database
     
+    # Registrar logout en auditoría
+    try:
+        import uuid
+        user_id = uuid.UUID(payload["sub"])
+        tenant_id = uuid.UUID(payload["tenant_id"])
+        
+        await AuditService.log(
+            db=db,
+            tenant_id=tenant_id,
+            user_id=user_id,
+            action="user.logout",
+            resource_type="user",
+            resource_id=user_id,
+            metadata={"email": payload.get("email")}
+        )
+        await db.commit()
+    except Exception as e:
+        logger.warning("Failed to log audit entry", error=str(e))
+    
     logger.info("Logout successful", user_id=payload["sub"])
     
     return {"message": "Successfully logged out"}
@@ -257,41 +310,49 @@ async def get_current_user(
             detail="Invalid token"
         )
     
-    # TODO: Fetch actual user from database
+    user_id = payload.get("sub")
+    if not user_id:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail="Invalid token payload"
+        )
+    
+    # Fetch actual user from database
+    query = select(User).where(User.id == user_id).options(
+        selectinload(User.tenant)
+    )
+    result = await db.execute(query)
+    user = result.scalar_one_or_none()
+    
+    if not user:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail="User not found"
+        )
+        
+    if not user.is_active:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail="User account is disabled"
+        )
     
     return {
-        "id": payload["sub"],
-        "email": payload["email"],
-        "role": payload["role"],
-        "tenant_id": payload["tenant_id"]
+        "id": str(user.id),
+        "email": user.email,
+        "first_name": user.first_name,
+        "last_name": user.last_name,
+        "role": user.role.value if hasattr(user.role, 'value') else user.role,
+        "tenant_id": str(user.tenant_id),
+        "tenant_name": user.tenant.name if user.tenant else None,
+        "is_active": user.is_active,
+        "is_two_factor_enabled": user.totp_secret is not None,
+        "last_login": user.last_login.isoformat() if user.last_login else None,
+        "created_at": user.created_at.isoformat()
     }
 
 
 # ===================================
 # DEPENDENCIES
 # ===================================
-
-async def get_current_active_user(token: str = Depends(oauth2_scheme)):
-    """
-    Dependency to get current active user from token.
-    
-    Args:
-        token: Access token
-        
-    Returns:
-        Current user data
-        
-    Raises:
-        HTTPException: If token is invalid or user is inactive
-    """
-    payload = security.verify_token(token)
-    if not payload:
-        raise HTTPException(
-            status_code=status.HTTP_401_UNAUTHORIZED,
-            detail="Invalid token",
-            headers={"WWW-Authenticate": "Bearer"},
-        )
-    
-    # TODO: Verify user exists and is active
-    
-    return payload
+# Dependencies are imported from app.api.deps to avoid duplication
+# Use get_current_user and get_current_active_superuser from deps.py

backend/app/api/v1/endpoints/categories.py

@@ -3,53 +3,267 @@ from sqlalchemy.ext.asyncio import AsyncSession
 from sqlalchemy import select
 from pydantic import BaseModel, ConfigDict
 from typing import List, Optional
+from datetime import datetime
 import uuid
 
 from app.core.database import get_db
 from app.models.category import Category
+from app.models.user import User
 from app.api import deps
+from app.services.audit_service import AuditService 
 
 router = APIRouter()
 
-class CategoryBase(BaseModel):
+# ===================================
+# PYDANTIC SCHEMAS
+# ===================================
+
+class CategoryCreate(BaseModel):
+    """Schema para crear categoría - NO incluye tenant_id (se asigna automáticamente)"""
     name: str
     description: Optional[str] = None
-    is_active: bool = True
-    tenant_id: Optional[uuid.UUID] = None
+    color: Optional[str] = None
+    sla_response_hours: int = 24
+    sla_resolution_hours: int = 72
+    auto_assign_to: Optional[uuid.UUID] = None
     
-class CategoryCreate(CategoryBase):
-    pass
-
-class CategoryUpdate(CategoryBase):
+class CategoryUpdate(BaseModel):
+    """Schema para actualizar categoría"""
     name: Optional[str] = None
     description: Optional[str] = None
+    color: Optional[str] = None
+    sla_response_hours: Optional[int] = None
+    sla_resolution_hours: Optional[int] = None
+    auto_assign_to: Optional[uuid.UUID] = None
     is_active: Optional[bool] = None
-    tenant_id: Optional[uuid.UUID] = None
 
-class CategoryResponse(CategoryBase):
+class CategoryResponse(BaseModel):
+    """Schema de respuesta - incluye todos los campos"""
     id: uuid.UUID
+    tenant_id: uuid.UUID  # ✅ AÑADIDO
+    name: str
+    description: Optional[str] = None
+    color: Optional[str] = None
+    sla_response_hours: int
+    sla_resolution_hours: int
+    auto_assign_to: Optional[uuid.UUID] = None
+    is_active: bool
+    created_at: datetime  # ✅ AÑADIDO
+    updated_at: datetime  # ✅ AÑADIDO
     
     model_config = ConfigDict(from_attributes=True)
 
+
+# ===================================
+# ENDPOINTS
+# ===================================
+
 @router.get("/", response_model=List[CategoryResponse])
 async def read_categories(
     skip: int = 0, 
     limit: int = 100, 
     db: AsyncSession = Depends(get_db),
-    current_user = Depends(deps.get_current_active_superuser)
+    current_user: User = Depends(deps.get_current_user)  # ✅ CORREGIDO: Type hint + no solo superuser
 ):
-    query = select(Category).offset(skip).limit(limit)
+    """
+    Listar categorías del tenant del usuario actual.
+    
+    ✅ Implementa multi-tenancy: solo muestra categorías del tenant del usuario.
+    """
+    # ✅ CORREGIDO: Filtrar por tenant_id
+    query = select(Category).where(
+        Category.tenant_id == current_user.tenant_id
+    ).offset(skip).limit(limit)
+    
     result = await db.execute(query)
     return result.scalars().all()
 
-@router.post("/", response_model=CategoryResponse)
+
+@router.post("/", response_model=CategoryResponse, status_code=status.HTTP_201_CREATED)
 async def create_category(
     category: CategoryCreate, 
     db: AsyncSession = Depends(get_db),
-    current_user = Depends(deps.get_current_active_superuser)
+    current_user: User = Depends(deps.get_current_user)  # ✅ CORREGIDO: Type hint
 ):
-    db_category = Category(**category.model_dump())
+    """
+    Crear nueva categoría en el tenant del usuario actual.
+    
+    ✅ Implementa multi-tenancy: asigna automáticamente tenant_id del usuario.
+    """
+    # ✅ CORREGIDO: Asignar tenant_id del usuario actual
+    db_category = Category(
+        **category.model_dump(),
+        tenant_id=current_user.tenant_id  # ✅ Multi-tenancy automático
+    )
+    
     db.add(db_category)
     await db.commit()
     await db.refresh(db_category)
+    
+    # Registrar creación en auditoría
+    try:
+        await AuditService.log(
+            db=db,
+            tenant_id=current_user.tenant_id,
+            user_id=current_user.id,
+            action="category.create",
+            resource_type="category",
+            resource_id=db_category.id,
+            new_values={
+                "name": db_category.name,
+                "sla_response_hours": db_category.sla_response_hours,
+                "sla_resolution_hours": db_category.sla_resolution_hours,
+                "is_active": db_category.is_active
+            }
+        )
+        await db.commit()
+    except Exception:
+        pass  # No fallar si falla el audit log
+    
     return db_category
+
+
+@router.get("/{category_id}", response_model=CategoryResponse)
+async def read_category(
+    category_id: uuid.UUID,
+    db: AsyncSession = Depends(get_db),
+    current_user: User = Depends(deps.get_current_user)
+):
+    """
+    Obtener una categoría específica del tenant.
+    
+    ✅ Implementa multi-tenancy: solo permite acceso a categorías del propio tenant.
+    """
+    query = select(Category).where(
+        Category.id == category_id,
+        Category.tenant_id == current_user.tenant_id  # ✅ Seguridad multi-tenant
+    )
+    result = await db.execute(query)
+    category = result.scalar_one_or_none()
+    
+    if not category:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail="Category not found"
+        )
+    
+    return category
+
+
+@router.put("/{category_id}", response_model=CategoryResponse)
+async def update_category(
+    category_id: uuid.UUID,
+    category_update: CategoryUpdate,
+    db: AsyncSession = Depends(get_db),
+    current_user: User = Depends(deps.get_current_user)
+):
+    """
+    Actualizar categoría del tenant.
+    
+    ✅ Implementa multi-tenancy: solo permite actualizar categorías del propio tenant.
+    """
+    query = select(Category).where(
+        Category.id == category_id,
+        Category.tenant_id == current_user.tenant_id
+    )
+    result = await db.execute(query)
+    db_category = result.scalar_one_or_none()
+    
+    if not db_category:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail="Category not found"
+        )
+    
+    # Guardar valores anteriores para auditoría
+    old_values = {
+        "name": db_category.name,
+        "sla_response_hours": db_category.sla_response_hours,
+        "sla_resolution_hours": db_category.sla_resolution_hours,
+        "is_active": db_category.is_active
+    }
+    
+    # Actualizar campos
+    update_data = category_update.model_dump(exclude_unset=True)
+    for field, value in update_data.items():
+        setattr(db_category, field, value)
+    
+    await db.commit()
+    await db.refresh(db_category)
+    
+    # Registrar actualización en auditoría
+    try:
+        new_values = {
+            "name": db_category.name,
+            "sla_response_hours": db_category.sla_response_hours,
+            "sla_resolution_hours": db_category.sla_resolution_hours,
+            "is_active": db_category.is_active
+        }
+        await AuditService.log(
+            db=db,
+            tenant_id=current_user.tenant_id,
+            user_id=current_user.id,
+            action="category.update",
+            resource_type="category",
+            resource_id=db_category.id,
+            old_values=old_values,
+            new_values=new_values
+        )
+        await db.commit()
+    except Exception:
+        pass  # No fallar si falla el audit log
+    
+    return db_category
+
+
+@router.delete("/{category_id}", status_code=status.HTTP_204_NO_CONTENT)
+async def delete_category(
+    category_id: uuid.UUID,
+    db: AsyncSession = Depends(get_db),
+    current_user: User = Depends(deps.get_current_user)
+):
+    """
+    Desactivar categoría del tenant (soft delete).
+    
+    ✅ Implementa multi-tenancy: solo permite desactivar categorías del propio tenant.
+    """
+    query = select(Category).where(
+        Category.id == category_id,
+        Category.tenant_id == current_user.tenant_id
+    )
+    result = await db.execute(query)
+    db_category = result.scalar_one_or_none()
+    
+    if not db_category:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail="Category not found"
+        )
+    
+    # Guardar valores para auditoría
+    old_values = {
+        "name": db_category.name,
+        "is_active": db_category.is_active
+    }
+    
+    # Soft delete
+    db_category.is_active = False
+    await db.commit()
+    
+    # Registrar eliminación en auditoría
+    try:
+        await AuditService.log(
+            db=db,
+            tenant_id=current_user.tenant_id,
+            user_id=current_user.id,
+            action="category.delete",
+            resource_type="category",
+            resource_id=db_category.id,
+            old_values=old_values,
+            new_values={"is_active": False}
+        )
+        await db.commit()
+    except Exception:
+        pass  # No fallar si falla el audit log
+    
+    return None

backend/app/api/v1/endpoints/client_profile.py

@@ -0,0 +1,299 @@
+"""
+Client Profile Endpoints - ServiceManagerWeb
+Endpoints para gestión del perfil empresarial de clientes
+"""
+
+from fastapi import APIRouter, Depends, HTTPException, status
+from sqlalchemy.ext.asyncio import AsyncSession
+from sqlalchemy import select, or_
+from typing import Optional
+
+from app.core.database import get_db
+from app.api.deps import get_current_user, get_current_tenant
+from app.api.schemas.client_profile import (
+    ClientProfileCreate,
+    ClientProfileUpdate,
+    ClientProfileResponse,
+    ClientProfileSummary
+)
+from app.models.user import User
+from app.models.tenant import Tenant
+from app.models.client_profile import ClientProfile
+import uuid
+
+
+router = APIRouter()
+
+
+@router.get("/", response_model=ClientProfileResponse)
+async def get_current_client_profile(
+    current_user: User = Depends(get_current_user),
+    current_tenant: Tenant = Depends(get_current_tenant),
+    db: AsyncSession = Depends(get_db)
+):
+    """
+    Obtener el perfil empresarial del tenant actual.
+    
+    **Permisos**: CLIENT_ADMIN, CLIENT_USER
+    """
+    # Solo clientes pueden acceder
+    if current_user.role not in ['CLIENT_ADMIN', 'CLIENT_USER']:
+        raise HTTPException(
+            status_code=status.HTTP_403_FORBIDDEN,
+            detail="Solo los clientes pueden acceder al perfil empresarial"
+        )
+    
+    # Buscar perfil existente
+    result = await db.execute(
+        select(ClientProfile).where(ClientProfile.tenant_id == current_tenant.id)
+    )
+    profile = result.scalar_one_or_none()
+    
+    if not profile:
+        # Si no existe, crear uno vacío
+        profile = ClientProfile(tenant_id=current_tenant.id)
+        db.add(profile)
+        await db.commit()
+        await db.refresh(profile)
+    
+    return profile
+
+
+@router.post("/", response_model=ClientProfileResponse)
+async def create_or_update_client_profile(
+    profile_data: ClientProfileCreate,
+    current_user: User = Depends(get_current_user),
+    current_tenant: Tenant = Depends(get_current_tenant),
+    db: AsyncSession = Depends(get_db)
+):
+    """
+    Crear o actualizar el perfil empresarial del tenant actual.
+    
+    **Permisos**: CLIENT_ADMIN
+    """
+    # Solo CLIENT_ADMIN puede modificar el perfil
+    if current_user.role != 'CLIENT_ADMIN':
+        raise HTTPException(
+            status_code=status.HTTP_403_FORBIDDEN,
+            detail="Solo los administradores de cliente pueden modificar el perfil empresarial"
+        )
+    
+    # Buscar perfil existente
+    result = await db.execute(
+        select(ClientProfile).where(ClientProfile.tenant_id == current_tenant.id)
+    )
+    existing_profile = result.scalar_one_or_none()
+    
+    if existing_profile:
+        # Actualizar perfil existente
+        update_data = profile_data.dict(exclude_unset=True)
+        for field, value in update_data.items():
+            setattr(existing_profile, field, value)
+        
+        profile = existing_profile
+    else:
+        # Crear nuevo perfil
+        profile = ClientProfile(
+            tenant_id=current_tenant.id,
+            **profile_data.dict()
+        )
+        db.add(profile)
+    
+    await db.commit()
+    await db.refresh(profile)
+    
+    return profile
+
+
+@router.patch("/", response_model=ClientProfileResponse)
+async def update_client_profile(
+    profile_data: ClientProfileUpdate,
+    current_user: User = Depends(get_current_user),
+    current_tenant: Tenant = Depends(get_current_tenant),
+    db: AsyncSession = Depends(get_db)
+):
+    """
+    Actualizar parcialmente el perfil empresarial del tenant actual.
+    
+    **Permisos**: CLIENT_ADMIN
+    """
+    # Solo CLIENT_ADMIN puede modificar el perfil
+    if current_user.role != 'CLIENT_ADMIN':
+        raise HTTPException(
+            status_code=status.HTTP_403_FORBIDDEN,
+            detail="Solo los administradores de cliente pueden modificar el perfil empresarial"
+        )
+    
+    # Buscar perfil existente
+    result = await db.execute(
+        select(ClientProfile).where(ClientProfile.tenant_id == current_tenant.id)
+    )
+    profile = result.scalar_one_or_none()
+    
+    if not profile:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail="Perfil empresarial no encontrado"
+        )
+    
+    # Actualizar solo campos proporcionados
+    update_data = profile_data.dict(exclude_unset=True)
+    for field, value in update_data.items():
+        setattr(profile, field, value)
+    
+    await db.commit()
+    await db.refresh(profile)
+    
+    return profile
+
+
+@router.delete("/")
+async def delete_client_profile(
+    current_user: User = Depends(get_current_user),
+    current_tenant: Tenant = Depends(get_current_tenant),
+    db: AsyncSession = Depends(get_db)
+):
+    """
+    Eliminar el perfil empresarial del tenant actual.
+    
+    **Permisos**: CLIENT_ADMIN
+    """
+    # Solo CLIENT_ADMIN puede eliminar el perfil
+    if current_user.role != 'CLIENT_ADMIN':
+        raise HTTPException(
+            status_code=status.HTTP_403_FORBIDDEN,
+            detail="Solo los administradores de cliente pueden eliminar el perfil empresarial"
+        )
+    
+    # Buscar perfil existente
+    result = await db.execute(
+        select(ClientProfile).where(ClientProfile.tenant_id == current_tenant.id)
+    )
+    profile = result.scalar_one_or_none()
+    
+    if not profile:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail="Perfil empresarial no encontrado"
+        )
+    
+    await db.delete(profile)
+    await db.commit()
+    
+    return {"message": "Perfil empresarial eliminado exitosamente"}
+
+
+# === ENDPOINTS ADMINISTRATIVOS (Solo para ADMIN y SUPPORT_MANAGER) ===
+
+@router.get("/admin/list", response_model=list[ClientProfileSummary])
+async def list_all_client_profiles(
+    skip: int = 0,
+    limit: int = 100,
+    search: Optional[str] = None,
+    current_user: User = Depends(get_current_user),
+    db: AsyncSession = Depends(get_db)
+):
+    """
+    Listar todos los perfiles empresariales (solo para administradores).
+    
+    **Permisos**: ADMIN, SUPPORT_MANAGER
+    """
+    # Solo personal interno puede ver todos los perfiles
+    if current_user.role not in ['ADMIN', 'SUPPORT_MANAGER']:
+        raise HTTPException(
+            status_code=status.HTTP_403_FORBIDDEN,
+            detail="Acceso denegado"
+        )
+    
+    query = select(ClientProfile)
+    
+    # Filtro de búsqueda
+    if search:
+        search_filter = or_(
+            ClientProfile.business_name.ilike(f"%{search}%"),
+            ClientProfile.commercial_name.ilike(f"%{search}%"),
+            ClientProfile.rfc.ilike(f"%{search}%"),
+            ClientProfile.client_code.ilike(f"%{search}%")
+        )
+        query = query.where(search_filter)
+    
+    # Paginación
+    query = query.offset(skip).limit(limit)
+    query = query.order_by(ClientProfile.created_at.desc())
+    
+    result = await db.execute(query)
+    profiles = result.scalars().all()
+    
+    return profiles
+
+
+@router.get("/admin/{tenant_id}", response_model=ClientProfileResponse)
+async def get_client_profile_by_tenant(
+    tenant_id: uuid.UUID,
+    current_user: User = Depends(get_current_user),
+    db: AsyncSession = Depends(get_db)
+):
+    """
+    Obtener perfil empresarial de un tenant específico (solo para administradores).
+    
+    **Permisos**: ADMIN, SUPPORT_MANAGER
+    """
+    # Solo personal interno puede ver perfiles de otros tenants
+    if current_user.role not in ['ADMIN', 'SUPPORT_MANAGER']:
+        raise HTTPException(
+            status_code=status.HTTP_403_FORBIDDEN,
+            detail="Acceso denegado"
+        )
+    
+    result = await db.execute(
+        select(ClientProfile).where(ClientProfile.tenant_id == tenant_id)
+    )
+    profile = result.scalar_one_or_none()
+    
+    if not profile:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail="Perfil empresarial no encontrado"
+        )
+    
+    return profile
+
+
+@router.patch("/admin/{tenant_id}", response_model=ClientProfileResponse)
+async def update_client_profile_by_admin(
+    tenant_id: uuid.UUID,
+    profile_data: ClientProfileUpdate,
+    current_user: User = Depends(get_current_user),
+    db: AsyncSession = Depends(get_db)
+):
+    """
+    Actualizar perfil empresarial de un tenant específico (solo para administradores).
+    
+    **Permisos**: ADMIN, SUPPORT_MANAGER
+    """
+    # Solo personal interno puede modificar perfiles de otros tenants
+    if current_user.role not in ['ADMIN', 'SUPPORT_MANAGER']:
+        raise HTTPException(
+            status_code=status.HTTP_403_FORBIDDEN,
+            detail="Acceso denegado"
+        )
+    
+    result = await db.execute(
+        select(ClientProfile).where(ClientProfile.tenant_id == tenant_id)
+    )
+    profile = result.scalar_one_or_none()
+    
+    if not profile:
+        # Crear perfil si no existe
+        profile = ClientProfile(tenant_id=tenant_id, **profile_data.dict(exclude_unset=True))
+        db.add(profile)
+    else:
+        # Actualizar perfil existente
+        update_data = profile_data.dict(exclude_unset=True)
+        for field, value in update_data.items():
+            setattr(profile, field, value)
+    
+    await db.commit()
+    await db.refresh(profile)
+    
+    return profile

backend/app/api/v1/endpoints/sla.py

@@ -0,0 +1,649 @@
+"""
+SLA Endpoints - ServiceManagerWeb
+
+Endpoints para gestión y monitoreo de SLAs
+Solo accesible por roles staff internos
+"""
+
+from fastapi import APIRouter, Depends, HTTPException, Query, status
+from sqlalchemy.ext.asyncio import AsyncSession
+from sqlalchemy import select, func, and_, or_, desc, case, cast
+from typing import Optional, List
+from datetime import datetime, timedelta, timezone
+import uuid
+import structlog
+
+from app.core.database import get_db
+from app.api.deps import get_current_user, get_current_tenant
+from app.models.user import User, UserRole
+from app.models.tenant import Tenant
+from app.models.ticket import Ticket, TicketStatus, TicketPriority
+from app.models.category import Category
+from app.api.schemas.sla import (
+    SLADashboardResponse,
+    SLAComplianceMetrics,
+    SLAViolationResponse,
+    SLAViolationsListResponse,
+    SLAAtRiskListResponse,
+    SLATicketAtRisk,
+    SLADetailedMetricsResponse,
+    SLAMetricsByCategory,
+    SLAMetricsByAgent,
+    SLAMetricsByPriority,
+    SLATrendsResponse,
+    SLADailyTrend,
+    SLAConfigListResponse,
+    SLAConfigByCategoryResponse,
+    SLATypeEnum,
+    TicketBasicInfo,
+    UserBasicInfo,
+    CategoryBasicInfo
+)
+
+router = APIRouter()
+logger = structlog.get_logger(__name__)
+
+
+def require_staff_role(current_user: User = Depends(get_current_user)) -> User:
+    """Requiere roles de staff interno (ADMIN, SUPPORT_MANAGER, AGENT)"""
+    allowed_roles = [UserRole.ADMIN, UserRole.SUPPORT_MANAGER, UserRole.AGENT, UserRole.AUDITOR]
+    if current_user.role not in allowed_roles:
+        raise HTTPException(
+            status_code=status.HTTP_403_FORBIDDEN,
+            detail="Solo staff interno puede acceder a métricas de SLA"
+        )
+    return current_user
+
+
+def require_manager_role(current_user: User = Depends(get_current_user)) -> User:
+    """Requiere roles de gestión (ADMIN, SUPPORT_MANAGER)"""
+    if current_user.role not in [UserRole.ADMIN, UserRole.SUPPORT_MANAGER]:
+        raise HTTPException(
+            status_code=status.HTTP_403_FORBIDDEN,
+            detail="Solo managers pueden acceder a esta funcionalidad"
+        )
+    return current_user
+
+
+# ===================================
+# DASHBOARD PRINCIPAL
+# ===================================
+
+@router.get("/dashboard", response_model=SLADashboardResponse)
+async def get_sla_dashboard(
+    days: int = Query(default=30, ge=1, le=365, description="Días hacia atrás para el período"),
+    current_user: User = Depends(require_staff_role),
+    current_tenant: Tenant = Depends(get_current_tenant),
+    db: AsyncSession = Depends(get_db)
+):
+    """
+    Dashboard principal de métricas SLA.
+    
+    **Permisos**: ADMIN, SUPPORT_MANAGER, AGENT, AUDITOR
+    
+    Retorna métricas agregadas de cumplimiento SLA para el período especificado.
+    """
+    logger.info(
+        "SLA dashboard requested",
+        user_id=str(current_user.id),
+        tenant_id=str(current_tenant.id),
+        days=days
+    )
+    
+    now = datetime.now(timezone.utc)
+    period_start = now - timedelta(days=days)
+    
+    # Usar func.now() para comparaciones en SQL (evita timezone issues)
+    db_now = func.now()
+    
+    # Query base para tickets del período
+    base_query = select(Ticket).where(
+        and_(
+            Ticket.tenant_id == current_tenant.id,
+            Ticket.created_at >= period_start
+        )
+    )
+    
+    # Calcular métricas de Response SLA
+    # Para "at risk": ticket pendiente que ha consumido >80% del tiempo disponible
+    # Calculamos: (now - created_at) > 0.8 * (sla_response_due - created_at)
+    response_query = select(
+        func.count().label('total'),
+        func.sum(case((Ticket.first_response_at <= Ticket.sla_response_due, 1), else_=0)).label('met'),
+        func.sum(case((and_(Ticket.first_response_at > Ticket.sla_response_due, Ticket.first_response_at != None), 1), else_=0)).label('violated'),
+        func.sum(case((and_(Ticket.first_response_at == None, Ticket.sla_response_due != None, db_now > Ticket.sla_response_due), 1), else_=0)).label('violated_pending'),
+        func.sum(case((
+            and_(
+                Ticket.first_response_at == None,
+                Ticket.sla_response_due != None,
+                db_now < Ticket.sla_response_due,
+                func.extract('epoch', db_now - Ticket.created_at) > (func.extract('epoch', Ticket.sla_response_due - Ticket.created_at) * 0.8)
+            ), 1), else_=0)
+        ).label('at_risk'),
+        func.avg(
+            func.extract('epoch', Ticket.first_response_at - Ticket.created_at) / 3600
+        ).label('avg_hours')
+    ).where(
+        and_(
+            Ticket.tenant_id == current_tenant.id,
+            Ticket.created_at >= period_start,
+            Ticket.sla_response_due != None
+        )
+    )
+    
+    response_result = await db.execute(response_query)
+    response_row = response_result.one()
+    
+    response_total = response_row.total or 0
+    response_met = (response_row.met or 0)
+    response_violated = (response_row.violated or 0) + (response_row.violated_pending or 0)
+    response_at_risk = response_row.at_risk or 0
+    response_avg = float(response_row.avg_hours) if response_row.avg_hours else 0.0
+    response_compliance = (response_met / response_total * 100) if response_total > 0 else 0.0
+    
+    # Calcular métricas de Resolution SLA
+    resolution_query = select(
+        func.count().label('total'),
+        func.sum(case((Ticket.resolved_at <= Ticket.sla_resolution_due, 1), else_=0)).label('met'),
+        func.sum(case((and_(Ticket.resolved_at > Ticket.sla_resolution_due, Ticket.resolved_at != None), 1), else_=0)).label('violated'),
+        func.sum(case((and_(Ticket.status.notin_([TicketStatus.RESOLVED, TicketStatus.CLOSED]), Ticket.sla_resolution_due != None, db_now > Ticket.sla_resolution_due), 1), else_=0)).label('violated_pending'),
+        func.sum(case((
+            and_(
+                Ticket.status.notin_([TicketStatus.RESOLVED, TicketStatus.CLOSED]),
+                Ticket.sla_resolution_due != None,
+                db_now < Ticket.sla_resolution_due,
+                func.extract('epoch', db_now - Ticket.created_at) > (func.extract('epoch', Ticket.sla_resolution_due - Ticket.created_at) * 0.8)
+            ), 1), else_=0)
+        ).label('at_risk'),
+        func.avg(
+            func.extract('epoch', Ticket.resolved_at - Ticket.created_at) / 3600
+        ).label('avg_hours')
+    ).where(
+        and_(
+            Ticket.tenant_id == current_tenant.id,
+            Ticket.created_at >= period_start,
+            Ticket.sla_resolution_due != None
+        )
+    )
+    
+    resolution_result = await db.execute(resolution_query)
+    resolution_row = resolution_result.one()
+    
+    resolution_total = resolution_row.total or 0
+    resolution_met = (resolution_row.met or 0)
+    resolution_violated = (resolution_row.violated or 0) + (resolution_row.violated_pending or 0)
+    resolution_at_risk = resolution_row.at_risk or 0
+    resolution_avg = float(resolution_row.avg_hours) if resolution_row.avg_hours else 0.0
+    resolution_compliance = (resolution_met / resolution_total * 100) if resolution_total > 0 else 0.0
+    
+    # Métricas por categoría (top 5)
+    category_query = select(
+        Category.id,
+        Category.name,
+        func.count(Ticket.id).label('ticket_count'),
+        func.avg(case((Ticket.first_response_at <= Ticket.sla_response_due, 100.0), else_=0.0)).label('response_compliance'),
+        func.avg(case((Ticket.resolved_at <= Ticket.sla_resolution_due, 100.0), else_=0.0)).label('resolution_compliance')
+    ).select_from(Ticket).join(
+        Category, Ticket.category_id == Category.id, isouter=True
+    ).where(
+        and_(
+            Ticket.tenant_id == current_tenant.id,
+            Ticket.created_at >= period_start
+        )
+    ).group_by(Category.id, Category.name).order_by(desc('ticket_count')).limit(5)
+    
+    category_result = await db.execute(category_query)
+    by_category = [
+        {
+            "category_id": str(row.id) if row.id else None,
+            "category_name": row.name or "Sin categoría",
+            "ticket_count": row.ticket_count,
+            "response_compliance": float(row.response_compliance or 0.0),
+            "resolution_compliance": float(row.resolution_compliance or 0.0)
+        }
+        for row in category_result.all()
+    ]
+    
+    # Métricas por prioridad
+    by_priority = {}
+    for priority in TicketPriority:
+        priority_query = select(
+            func.avg(case((Ticket.first_response_at <= Ticket.sla_response_due, 100.0), else_=0.0)).label('response'),
+            func.avg(case((Ticket.resolved_at <= Ticket.sla_resolution_due, 100.0), else_=0.0)).label('resolution')
+        ).where(
+            and_(
+                Ticket.tenant_id == current_tenant.id,
+                Ticket.created_at >= period_start,
+                Ticket.priority == priority
+            )
+        )
+        
+        priority_result = await db.execute(priority_query)
+        priority_row = priority_result.one()
+        
+        by_priority[priority.value] = {
+            "response_compliance": float(priority_row.response or 0.0),
+            "resolution_compliance": float(priority_row.resolution or 0.0)
+        }
+    
+    # Calcular tendencias (comparación con período anterior)
+    prev_period_start = period_start - timedelta(days=days)
+    prev_response_query = select(
+        func.count().label('total'),
+        func.sum(case((Ticket.first_response_at <= Ticket.sla_response_due, 1), else_=0)).label('met')
+    ).where(
+        and_(
+            Ticket.tenant_id == current_tenant.id,
+            Ticket.created_at >= prev_period_start,
+            Ticket.created_at < period_start,
+            Ticket.sla_response_due != None
+        )
+    )
+    
+    prev_response_result = await db.execute(prev_response_query)
+    prev_response_row = prev_response_result.one()
+    prev_response_compliance = ((prev_response_row.met or 0) / (prev_response_row.total or 1) * 100) if (prev_response_row.total or 0) > 0 else 0.0
+    
+    response_trend = response_compliance - prev_response_compliance
+    response_trend_str = f"+{response_trend:.1f}%" if response_trend >= 0 else f"{response_trend:.1f}%"
+    
+    prev_resolution_query = select(
+        func.count().label('total'),
+        func.sum(case((Ticket.resolved_at <= Ticket.sla_resolution_due, 1), else_=0)).label('met')
+    ).where(
+        and_(
+            Ticket.tenant_id == current_tenant.id,
+            Ticket.created_at >= prev_period_start,
+            Ticket.created_at < period_start,
+            Ticket.sla_resolution_due != None
+        )
+    )
+    
+    prev_resolution_result = await db.execute(prev_resolution_query)
+    prev_resolution_row = prev_resolution_result.one()
+    prev_resolution_compliance = ((prev_resolution_row.met or 0) / (prev_resolution_row.total or 1) * 100) if (prev_resolution_row.total or 0) > 0 else 0.0
+    
+    resolution_trend = resolution_compliance - prev_resolution_compliance
+    resolution_trend_str = f"+{resolution_trend:.1f}%" if resolution_trend >= 0 else f"{resolution_trend:.1f}%"
+    
+    # Contar violaciones activas
+    active_violations_query = select(func.count()).select_from(Ticket).where(
+        and_(
+            Ticket.tenant_id == current_tenant.id,
+            Ticket.status.notin_([TicketStatus.RESOLVED, TicketStatus.CLOSED]),
+            or_(
+                and_(Ticket.first_response_at == None, Ticket.sla_response_due != None, db_now > Ticket.sla_response_due),
+                and_(Ticket.resolved_at == None, Ticket.sla_resolution_due != None, db_now > Ticket.sla_resolution_due)
+            )
+        )
+    )
+    
+    active_violations_result = await db.execute(active_violations_query)
+    active_violations = active_violations_result.scalar() or 0
+    
+    # Contar total de tickets del período
+    total_tickets_query = select(func.count()).select_from(Ticket).where(
+        and_(
+            Ticket.tenant_id == current_tenant.id,
+            Ticket.created_at >= period_start
+        )
+    )
+    
+    total_tickets_result = await db.execute(total_tickets_query)
+    total_tickets_period = total_tickets_result.scalar() or 0
+    
+    return SLADashboardResponse(
+        tenant_id=current_tenant.id,
+        period_start=period_start,
+        period_end=now,
+        generated_at=now,
+        response_sla=SLAComplianceMetrics(
+            target_hours=2,  # Promedio, podría calcularse
+            met_count=response_met,
+            violated_count=response_violated,
+            at_risk_count=response_at_risk,
+            total_count=response_total,
+            compliance_percentage=response_compliance,
+            avg_time_hours=response_avg
+        ),
+        resolution_sla=SLAComplianceMetrics(
+            target_hours=24,  # Promedio, podría calcularse
+            met_count=resolution_met,
+            violated_count=resolution_violated,
+            at_risk_count=resolution_at_risk,
+            total_count=resolution_total,
+            compliance_percentage=resolution_compliance,
+            avg_time_hours=resolution_avg
+        ),
+        active_violations=active_violations,
+        at_risk_tickets=response_at_risk + resolution_at_risk,
+        total_tickets_period=total_tickets_period,
+        by_category=by_category,
+        by_priority=by_priority,
+        trends={
+            "response_sla": response_trend_str,
+            "resolution_sla": resolution_trend_str
+        }
+    )
+
+
+# ===================================
+# VIOLACIONES
+# ===================================
+
+@router.get("/violations", response_model=SLAViolationsListResponse)
+async def get_sla_violations(
+    skip: int = Query(default=0, ge=0),
+    limit: int = Query(default=50, ge=1, le=100),
+    sla_type: Optional[str] = Query(default=None, regex="^(response|resolution)$"),
+    category_id: Optional[uuid.UUID] = None,
+    priority: Optional[str] = None,
+    current_user: User = Depends(require_staff_role),
+    current_tenant: Tenant = Depends(get_current_tenant),
+    db: AsyncSession = Depends(get_db)
+):
+    """
+    Listar violaciones SLA activas.
+    
+    **Permisos**: ADMIN, SUPPORT_MANAGER, AGENT (solo sus tickets), AUDITOR
+    
+    Retorna tickets que han violado sus SLAs de respuesta o resolución.
+    """
+    logger.info(
+        "SLA violations requested",
+        user_id=str(current_user.id),
+        tenant_id=str(current_tenant.id),
+        sla_type=sla_type
+    )
+    
+    now = datetime.now(timezone.utc)
+    db_now = func.now()
+    
+    # Base query
+    query = select(Ticket).where(
+        and_(
+            Ticket.tenant_id == current_tenant.id,
+            Ticket.status.notin_([TicketStatus.RESOLVED, TicketStatus.CLOSED])
+        )
+    )
+    
+    # Filtrar por tipo de SLA
+    if sla_type == "response":
+        query = query.where(
+            and_(
+                Ticket.first_response_at == None,
+                Ticket.sla_response_due != None,
+                db_now > Ticket.sla_response_due
+            )
+        )
+    elif sla_type == "resolution":
+        query = query.where(
+            and_(
+                Ticket.sla_resolution_due != None,
+                db_now > Ticket.sla_resolution_due
+            )
+        )
+    else:
+        # Ambos tipos
+        query = query.where(
+            or_(
+                and_(Ticket.first_response_at == None, Ticket.sla_response_due != None, db_now > Ticket.sla_response_due),
+                and_(Ticket.sla_resolution_due != None, db_now > Ticket.sla_resolution_due)
+            )
+        )
+    
+    # Filtros adicionales
+    if category_id:
+        query = query.where(Ticket.category_id == category_id)
+    
+    if priority:
+        try:
+            priority_enum = TicketPriority(priority.upper())
+            query = query.where(Ticket.priority == priority_enum)
+        except ValueError:
+            pass
+    
+    # AGENTS solo ven sus tickets
+    if current_user.role == UserRole.AGENT:
+        query = query.where(Ticket.assigned_to == current_user.id)
+    
+    # Contar total
+    count_query = select(func.count()).select_from(query.subquery())
+    total_result = await db.execute(count_query)
+    total = total_result.scalar() or 0
+    
+    # Aplicar paginación
+    query = query.order_by(desc(Ticket.created_at)).offset(skip).limit(limit)
+    
+    result = await db.execute(query)
+    tickets = result.scalars().all()
+    
+    # Formatear response
+    violations = []
+    for ticket in tickets:
+        # Determinar tipo de violación
+        response_violated = ticket.first_response_at is None and ticket.sla_response_due and now > ticket.sla_response_due
+        resolution_violated = ticket.sla_resolution_due and now > ticket.sla_resolution_due
+        
+        # Priorizar resolution si ambos están violados
+        if resolution_violated:
+            violation_type = SLATypeEnum.RESOLUTION
+            due_at = ticket.sla_resolution_due
+        else:
+            violation_type = SLATypeEnum.RESPONSE
+            due_at = ticket.sla_response_due
+        
+        hours_overdue = (now - due_at).total_seconds() / 3600 if due_at else 0
+        
+        # Cargar relaciones
+        await db.refresh(ticket, ['created_by', 'assigned_to', 'category'])
+        
+        violations.append(SLAViolationResponse(
+            ticket=TicketBasicInfo(
+                id=ticket.id,
+                ticket_number=ticket.ticket_number,
+                subject=ticket.subject,
+                priority=ticket.priority.value,
+                status=ticket.status.value
+            ),
+            category=CategoryBasicInfo(
+                id=ticket.category.id,
+                name=ticket.category.name,
+                sla_response_hours=ticket.category.sla_response_hours,
+                sla_resolution_hours=ticket.category.sla_resolution_hours
+            ) if ticket.category else None,
+            created_by=UserBasicInfo(
+                id=ticket.created_by.id,
+                first_name=ticket.created_by.first_name,
+                last_name=ticket.created_by.last_name,
+                email=ticket.created_by.email
+            ),
+            assigned_to=UserBasicInfo(
+                id=ticket.assigned_to.id,
+                first_name=ticket.assigned_to.first_name,
+                last_name=ticket.assigned_to.last_name,
+                email=ticket.assigned_to.email
+            ) if ticket.assigned_to else None,
+            sla_type=violation_type,
+            sla_due_at=due_at,
+            violated_at=due_at,  # Se violó en el momento del due
+            hours_overdue=hours_overdue,
+            first_response_at=ticket.first_response_at,
+            resolved_at=ticket.resolved_at
+        ))
+    
+    total_pages = (total + limit - 1) // limit
+    
+    return SLAViolationsListResponse(
+        violations=violations,
+        total=total,
+        page=(skip // limit) + 1,
+        per_page=limit,
+        total_pages=total_pages
+    )
+
+
+# ===================================
+# TICKETS EN RIESGO
+# ===================================
+
+@router.get("/at-risk", response_model=SLAAtRiskListResponse)
+async def get_tickets_at_risk(
+    threshold: int = Query(default=80, ge=50, le=95, description="% de tiempo consumido para considerar en riesgo"),
+    current_user: User = Depends(require_staff_role),
+    current_tenant: Tenant = Depends(get_current_tenant),
+    db: AsyncSession = Depends(get_db)
+):
+    """
+    Listar tickets que están en riesgo de violar SLA.
+    
+    **Permisos**: ADMIN, SUPPORT_MANAGER, AGENT (solo sus tickets), AUDITOR
+    
+    Retorna tickets que están cerca de vencer su SLA (por defecto, 80% del tiempo consumido).
+    """
+    logger.info(
+        "SLA at-risk tickets requested",
+        user_id=str(current_user.id),
+        tenant_id=str(current_tenant.id),
+        threshold=threshold
+    )
+    
+    now = datetime.now(timezone.utc)
+    db_now = func.now()
+    threshold_decimal = threshold / 100.0
+    
+    # Query para tickets en riesgo
+    # Un ticket está en riesgo si: (now - created_at) / (due_at - created_at) >= threshold
+    query = select(Ticket).where(
+        and_(
+            Ticket.tenant_id == current_tenant.id,
+            Ticket.status.notin_([TicketStatus.RESOLVED, TicketStatus.CLOSED]),
+            or_(
+                # Response SLA en riesgo
+                and_(
+                    Ticket.first_response_at == None,
+                    Ticket.sla_response_due != None,
+                    db_now < Ticket.sla_response_due,
+                    # Calcular si está en zona de riesgo
+                    func.extract('epoch', db_now - Ticket.created_at) >= (func.extract('epoch', Ticket.sla_response_due - Ticket.created_at) * threshold_decimal)
+                ),
+                # Resolution SLA en riesgo
+                and_(
+                    Ticket.sla_resolution_due != None,
+                    db_now < Ticket.sla_resolution_due,
+                    func.extract('epoch', db_now - Ticket.created_at) >= (func.extract('epoch', Ticket.sla_resolution_due - Ticket.created_at) * threshold_decimal)
+                )
+            )
+        )
+    ).order_by(desc(Ticket.sla_response_due if Ticket.sla_response_due else Ticket.sla_resolution_due))
+    
+    # AGENTS solo ven sus tickets
+    if current_user.role == UserRole.AGENT:
+        query = query.where(Ticket.assigned_to == current_user.id)
+    
+    result = await db.execute(query)
+    tickets = result.scalars().all()
+    
+    # Formatear response
+    at_risk_tickets = []
+    for ticket in tickets:
+        # Determinar cuál SLA está en riesgo
+        response_at_risk = (
+            ticket.first_response_at is None and 
+            ticket.sla_response_due and 
+            now < ticket.sla_response_due
+        )
+        
+        resolution_at_risk = (
+            ticket.sla_resolution_due and 
+            now < ticket.sla_resolution_due
+        )
+        
+        # Priorizar response si ambos están en riesgo
+        if response_at_risk:
+            sla_type = SLATypeEnum.RESPONSE
+            due_at = ticket.sla_response_due
+        elif resolution_at_risk:
+            sla_type = SLATypeEnum.RESOLUTION
+            due_at = ticket.sla_resolution_due
+        else:
+            continue
+        
+        time_remaining = (due_at - now).total_seconds() / 3600
+        total_time = (due_at - ticket.created_at).total_seconds() / 3600
+        elapsed_time = total_time - time_remaining
+        risk_percentage = (elapsed_time / total_time * 100) if total_time > 0 else 0
+        
+        # Cargar relaciones
+        await db.refresh(ticket, ['assigned_to', 'category'])
+        
+        at_risk_tickets.append(SLATicketAtRisk(
+            ticket=TicketBasicInfo(
+                id=ticket.id,
+                ticket_number=ticket.ticket_number,
+                subject=ticket.subject,
+                priority=ticket.priority.value,
+                status=ticket.status.value
+            ),
+            category=CategoryBasicInfo(
+                id=ticket.category.id,
+                name=ticket.category.name,
+                sla_response_hours=ticket.category.sla_response_hours,
+                sla_resolution_hours=ticket.category.sla_resolution_hours
+            ) if ticket.category else None,
+            assigned_to=UserBasicInfo(
+                id=ticket.assigned_to.id,
+                first_name=ticket.assigned_to.first_name,
+                last_name=ticket.assigned_to.last_name,
+                email=ticket.assigned_to.email
+            ) if ticket.assigned_to else None,
+            sla_type=sla_type,
+            sla_due_at=due_at,
+            time_remaining_hours=time_remaining,
+            risk_percentage=risk_percentage
+        ))
+    
+    return SLAAtRiskListResponse(
+        tickets=at_risk_tickets,
+        total=len(at_risk_tickets)
+    )
+
+
+# ===================================
+# CONFIGURACIÓN
+# ===================================
+
+@router.get("/config", response_model=SLAConfigListResponse)
+async def get_sla_config(
+    current_user: User = Depends(require_manager_role),
+    current_tenant: Tenant = Depends(get_current_tenant),
+    db: AsyncSession = Depends(get_db)
+):
+    """
+    Obtener configuración de SLAs por categoría.
+    
+    **Permisos**: ADMIN, SUPPORT_MANAGER
+    
+    Retorna la configuración de tiempos SLA para todas las categorías del tenant.
+    """
+    query = select(Category).where(
+        Category.tenant_id == current_tenant.id
+    ).order_by(Category.name)
+    
+    result = await db.execute(query)
+    categories = result.scalars().all()
+    
+    return SLAConfigListResponse(
+        tenant_id=current_tenant.id,
+        categories=[
+            SLAConfigByCategoryResponse(
+                category_id=cat.id,
+                category_name=cat.name,
+                sla_response_hours=cat.sla_response_hours,
+                sla_resolution_hours=cat.sla_resolution_hours,
+                warning_threshold_percentage=80,  # Por ahora hardcoded
+                is_active=cat.is_active
+            )
+            for cat in categories
+        ]
+    )

backend/app/api/v1/endpoints/systems.py

@@ -3,51 +3,179 @@ from sqlalchemy.ext.asyncio import AsyncSession
 from sqlalchemy import select
 from pydantic import BaseModel, ConfigDict
 from typing import List, Optional
+from datetime import datetime
 import uuid
 
 from app.core.database import get_db
 from app.models.system import System
+from app.models.user import User
 from app.api import deps 
 
 router = APIRouter()
 
-class SystemBase(BaseModel):
+# ===================================
+# PYDANTIC SCHEMAS
+# ===================================
+
+class SystemCreate(BaseModel):
+    """Schema para crear sistema - NO incluye tenant_id (se asigna automáticamente)"""
     name: str
     description: Optional[str] = None
-    is_active: bool = True
     
-class SystemCreate(SystemBase):
-    pass
-
-class SystemUpdate(SystemBase):
+class SystemUpdate(BaseModel):
+    """Schema para actualizar sistema"""
     name: Optional[str] = None
     description: Optional[str] = None
     is_active: Optional[bool] = None
 
-class SystemResponse(SystemBase):
+class SystemResponse(BaseModel):
+    """Schema de respuesta - incluye todos los campos"""
     id: uuid.UUID
+    tenant_id: uuid.UUID  # ✅ AÑADIDO
+    name: str
+    description: Optional[str] = None
+    is_active: bool
+    created_at: datetime  # ✅ AÑADIDO
+    updated_at: datetime  # ✅ AÑADIDO
     
     model_config = ConfigDict(from_attributes=True)
 
+
+# ===================================
+# ENDPOINTS
+# ===================================
+
 @router.get("/", response_model=List[SystemResponse])
 async def read_systems(
     skip: int = 0, 
     limit: int = 100, 
     db: AsyncSession = Depends(get_db),
-    current_user = Depends(deps.get_current_active_superuser)
+    current_user: User = Depends(deps.get_current_user)  # ✅ CORREGIDO: Type hint + no solo superuser
 ):
-    query = select(System).offset(skip).limit(limit)
+    """
+    Listar sistemas del tenant del usuario actual.
+    
+    ✅ Implementa multi-tenancy: solo muestra sistemas del tenant del usuario.
+    """
+    # ✅ CORREGIDO: Filtrar por tenant_id
+    query = select(System).where(
+        System.tenant_id == current_user.tenant_id
+    ).offset(skip).limit(limit)
+    
     result = await db.execute(query)
     return result.scalars().all()
 
-@router.post("/", response_model=SystemResponse)
+
+@router.post("/", response_model=SystemResponse, status_code=status.HTTP_201_CREATED)
 async def create_system(
     system: SystemCreate, 
     db: AsyncSession = Depends(get_db),
-    current_user = Depends(deps.get_current_active_superuser)
+    current_user: User = Depends(deps.get_current_user)  # ✅ CORREGIDO: Type hint
 ):
-    db_system = System(**system.model_dump())
+    """
+    Crear nuevo sistema en el tenant del usuario actual.
+    
+    ✅ Implementa multi-tenancy: asigna automáticamente tenant_id del usuario.
+    """
+    # ✅ CORREGIDO: Asignar tenant_id del usuario actual
+    db_system = System(
+        **system.model_dump(),
+        tenant_id=current_user.tenant_id  # ✅ Multi-tenancy automático
+    )
+    
     db.add(db_system)
     await db.commit()
     await db.refresh(db_system)
     return db_system
+
+
+@router.get("/{system_id}", response_model=SystemResponse)
+async def read_system(
+    system_id: uuid.UUID,
+    db: AsyncSession = Depends(get_db),
+    current_user: User = Depends(deps.get_current_user)
+):
+    """
+    Obtener un sistema específico del tenant.
+    
+    ✅ Implementa multi-tenancy: solo permite acceso a sistemas del propio tenant.
+    """
+    query = select(System).where(
+        System.id == system_id,
+        System.tenant_id == current_user.tenant_id  # ✅ Seguridad multi-tenant
+    )
+    result = await db.execute(query)
+    system = result.scalar_one_or_none()
+    
+    if not system:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail="System not found"
+        )
+    
+    return system
+
+
+@router.put("/{system_id}", response_model=SystemResponse)
+async def update_system(
+    system_id: uuid.UUID,
+    system_update: SystemUpdate,
+    db: AsyncSession = Depends(get_db),
+    current_user: User = Depends(deps.get_current_user)
+):
+    """
+    Actualizar sistema del tenant.
+    
+    ✅ Implementa multi-tenancy: solo permite actualizar sistemas del propio tenant.
+    """
+    query = select(System).where(
+        System.id == system_id,
+        System.tenant_id == current_user.tenant_id
+    )
+    result = await db.execute(query)
+    db_system = result.scalar_one_or_none()
+    
+    if not db_system:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail="System not found"
+        )
+    
+    # Actualizar campos
+    update_data = system_update.model_dump(exclude_unset=True)
+    for field, value in update_data.items():
+        setattr(db_system, field, value)
+    
+    await db.commit()
+    await db.refresh(db_system)
+    return db_system
+
+
+@router.delete("/{system_id}", status_code=status.HTTP_204_NO_CONTENT)
+async def delete_system(
+    system_id: uuid.UUID,
+    db: AsyncSession = Depends(get_db),
+    current_user: User = Depends(deps.get_current_user)
+):
+    """
+    Desactivar sistema del tenant (soft delete).
+    
+    ✅ Implementa multi-tenancy: solo permite desactivar sistemas del propio tenant.
+    """
+    query = select(System).where(
+        System.id == system_id,
+        System.tenant_id == current_user.tenant_id
+    )
+    result = await db.execute(query)
+    db_system = result.scalar_one_or_none()
+    
+    if not db_system:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail="System not found"
+        )
+    
+    # Soft delete
+    db_system.is_active = False
+    await db.commit()
+    return None

backend/app/api/v1/endpoints/tenants.py

@@ -16,6 +16,7 @@ class TenantBase(BaseModel):
     slug: str
     domain: Optional[str] = None
     contact_email: Optional[EmailStr] = None
+    contact_phone: Optional[str] = None
     
 class TenantCreate(TenantBase):
     pass
@@ -25,6 +26,7 @@ class TenantUpdate(BaseModel):
     slug: Optional[str] = None
     domain: Optional[str] = None
     contact_email: Optional[EmailStr] = None
+    contact_phone: Optional[str] = None
     status: Optional[TenantStatus] = None
 
 class TenantResponse(TenantBase):
@@ -85,10 +87,32 @@ async def update_tenant(
         raise HTTPException(status_code=404, detail="Tenant not found")
         
     update_data = tenant_in.model_dump(exclude_unset=True)
+    if "status" in update_data:
+        # Convertir string a enum TenantStatus
+        status_value = update_data.pop("status")
+        if isinstance(status_value, str):
+            tenant.status = TenantStatus(status_value)
+        else:
+            tenant.status = status_value
+        
     for field, value in update_data.items():
         setattr(tenant, field, value)
     
-    db.add(tenant)
     await db.commit()
     await db.refresh(tenant)
     return tenant
+
+@router.delete("/{tenant_id}", status_code=status.HTTP_204_NO_CONTENT)
+async def delete_tenant(
+    tenant_id: uuid.UUID,
+    db: AsyncSession = Depends(get_db),
+    current_user = Depends(deps.get_current_active_superuser)
+):
+    """Eliminar un cliente (tenant) por ID."""
+    tenant = await db.get(Tenant, tenant_id)
+    if not tenant:
+        raise HTTPException(status_code=404, detail="Tenant not found")
+
+    await db.delete(tenant)
+    await db.commit()
+    return {"message": "Tenant deleted successfully"}

backend/app/api/v1/endpoints/tickets.py.backup

@@ -0,0 +1,451 @@
+"""
+Tickets endpoints - ServiceManagerWeb
+"""
+
+from fastapi import APIRouter, Depends, HTTPException, status, UploadFile, File
+from pydantic import BaseModel
+from sqlalchemy.ext.asyncio import AsyncSession
+from sqlalchemy import select, func
+from typing import List, Optional
+from datetime import datetime
+from app.core.database import get_db
+from app.api.deps import get_current_user
+from app.models.ticket import Ticket, TicketStatus, TicketPriority
+from app.models.user import User
+from app.models.category import Category  # ✅ CORREGIDO: Era TicketCategory
+from app.models.system import System
+import uuid
+
+router = APIRouter()
+
+# ===================================
+# SCHEMAS
+# ===================================
+
+class TicketCreate(BaseModel):
+    subject: str
+    description: str
+    category_id: Optional[str] = None
+    affected_system_id: Optional[str] = None  # ✅ CORREGIDO: Era system_id
+    priority: str = "MEDIUM"
+
+class TicketUpdate(BaseModel):
+    subject: Optional[str] = None
+    description: Optional[str] = None
+    status: Optional[str] = None
+    priority: Optional[str] = None
+    assigned_to: Optional[str] = None
+
+class TicketResponse(BaseModel):
+    id: str
+    ticket_number: str
+    subject: str
+    description: str
+    status: str
+    priority: str
+    category_id: Optional[str] = None
+    affected_system_id: Optional[str] = None  # ✅ CORREGIDO: Era system_id
+    created_by: str
+    assigned_to: Optional[str] = None
+    created_at: datetime
+    updated_at: datetime
+    
+    class Config:
+        from_attributes = True
+
+class TicketCloseRequest(BaseModel):
+    resolution: Optional[str] = None
+
+
+# ===================================
+# TICKET ENDPOINTS
+# ===================================
+
+@router.post("/", response_model=TicketResponse, status_code=status.HTTP_201_CREATED)
+async def create_ticket(
+    ticket: TicketCreate,
+    db: AsyncSession = Depends(get_db),
+    current_user: User = Depends(get_current_user)
+):
+    """
+    Crear un nuevo ticket
+    """
+    try:
+        # Generar número de ticket único
+        result = await db.execute(
+            select(func.count(Ticket.id)).where(Ticket.tenant_id == current_user.tenant_id)
+        )
+        count = result.scalar() or 0
+        ticket_number = f"TK-{count + 1:06d}"
+        
+        # Convertir IDs de string a UUID si son proporcionados
+        category_uuid = uuid.UUID(ticket.category_id) if ticket.category_id else None
+        system_uuid = uuid.UUID(ticket.affected_system_id) if ticket.affected_system_id else None  # ✅ CORREGIDO
+        
+        # ✅ CORREGIDO: Validar en la tabla correcta con el nombre correcto del modelo
+        if category_uuid:
+            category = await db.get(Category, category_uuid)  # ✅ Category, no TicketCategory
+            if not category:
+                raise HTTPException(
+                    status_code=status.HTTP_400_BAD_REQUEST,
+                    detail=f"La categoría con ID {ticket.category_id} no existe."
+                )
+
+        # Validar si el system_id existe en la tabla affected_systems
+        if system_uuid:
+            system = await db.get(System, system_uuid)
+            if not system:
+                raise HTTPException(
+                    status_code=status.HTTP_400_BAD_REQUEST,
+                    detail=f"El sistema con ID {ticket.affected_system_id} no existe."
+                )
+        
+        db_ticket = Ticket(
+            id=uuid.uuid4(),
+            tenant_id=current_user.tenant_id,
+            ticket_number=ticket_number,
+            subject=ticket.subject,
+            description=ticket.description,
+            category_id=category_uuid,
+            affected_system_id=system_uuid,  # ✅ CORREGIDO: Nombre correcto del campo
+            priority=TicketPriority[ticket.priority.upper()],
+            created_by=current_user.id,
+            status=TicketStatus.NEW,
+            created_at=datetime.utcnow(),
+            updated_at=datetime.utcnow()
+        )
+        
+        db.add(db_ticket)
+        await db.commit()
+        await db.refresh(db_ticket)
+        
+        # ✅ CORREGIDO: Usar affected_system_id en respuesta
+        return {
+            "id": str(db_ticket.id),
+            "ticket_number": db_ticket.ticket_number,
+            "subject": db_ticket.subject,
+            "description": db_ticket.description,
+            "status": db_ticket.status.value,
+            "priority": db_ticket.priority.value,
+            "category_id": str(db_ticket.category_id) if db_ticket.category_id else None,
+            "affected_system_id": str(db_ticket.affected_system_id) if db_ticket.affected_system_id else None,  # ✅ CORREGIDO
+            "created_by": str(db_ticket.created_by),
+            "assigned_to": str(db_ticket.assigned_to) if db_ticket.assigned_to else None,
+            "created_at": db_ticket.created_at,
+            "updated_at": db_ticket.updated_at
+        }
+        
+    except ValueError as e:
+        await db.rollback()
+        raise HTTPException(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            detail=f"Invalid UUID format: {str(e)}"
+        )
+    except Exception as e:
+        await db.rollback()
+        raise HTTPException(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            detail=f"Error creating ticket: {str(e)}"
+        )
+
+
+@router.get("/", response_model=List[TicketResponse])
+async def get_tickets(
+    skip: int = 0,
+    limit: int = 100,
+    status_filter: Optional[str] = None,
+    db: AsyncSession = Depends(get_db),
+    current_user: User = Depends(get_current_user)
+):
+    """
+    Obtener tickets del usuario actual
+    """
+    query = select(Ticket).where(
+        Ticket.tenant_id == current_user.tenant_id,
+        Ticket.created_by == current_user.id
+    )
+    
+    if status_filter:
+        try:
+            status_enum = TicketStatus[status_filter.upper()]
+            query = query.where(Ticket.status == status_enum)
+        except KeyError:
+            raise HTTPException(
+                status_code=status.HTTP_400_BAD_REQUEST,
+                detail=f"Invalid status: {status_filter}"
+            )
+    
+    query = query.order_by(Ticket.created_at.desc()).offset(skip).limit(limit)
+    
+    result = await db.execute(query)
+    tickets = result.scalars().all()
+    
+    # ✅ CORREGIDO: Usar affected_system_id
+    return [
+        {
+            "id": str(t.id),
+            "ticket_number": t.ticket_number,
+            "subject": t.subject,
+            "description": t.description,
+            "status": t.status.value,
+            "priority": t.priority.value,
+            "category_id": str(t.category_id) if t.category_id else None,
+            "affected_system_id": str(t.affected_system_id) if t.affected_system_id else None,  # ✅ CORREGIDO
+            "created_by": str(t.created_by),
+            "assigned_to": str(t.assigned_to) if t.assigned_to else None,
+            "created_at": t.created_at,
+            "updated_at": t.updated_at
+        }
+        for t in tickets
+    ]
+
+
+@router.get("/{ticket_id}", response_model=TicketResponse)
+async def get_ticket(
+    ticket_id: str,
+    db: AsyncSession = Depends(get_db),
+    current_user: User = Depends(get_current_user)
+):
+    """
+    Obtener un ticket específico
+    """
+    try:
+        ticket_uuid = uuid.UUID(ticket_id)
+    except ValueError:
+        raise HTTPException(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            detail="Invalid ticket ID format"
+        )
+    
+    query = select(Ticket).where(
+        Ticket.id == ticket_uuid,
+        Ticket.tenant_id == current_user.tenant_id,
+        Ticket.created_by == current_user.id
+    )
+    
+    result = await db.execute(query)
+    ticket = result.scalars().first()
+    
+    if not ticket:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail=f"Ticket {ticket_id} not found"
+        )
+    
+    # ✅ CORREGIDO: Usar affected_system_id
+    return {
+        "id": str(ticket.id),
+        "ticket_number": ticket.ticket_number,
+        "subject": ticket.subject,
+        "description": ticket.description,
+        "status": ticket.status.value,
+        "priority": ticket.priority.value,
+        "category_id": str(ticket.category_id) if ticket.category_id else None,
+        "affected_system_id": str(ticket.affected_system_id) if ticket.affected_system_id else None,  # ✅ CORREGIDO
+        "created_by": str(ticket.created_by),
+        "assigned_to": str(ticket.assigned_to) if ticket.assigned_to else None,
+        "created_at": ticket.created_at,
+        "updated_at": ticket.updated_at
+    }
+
+
+@router.patch("/{ticket_id}", response_model=TicketResponse)
+async def update_ticket(
+    ticket_id: str,
+    ticket_update: TicketUpdate,
+    db: AsyncSession = Depends(get_db),
+    current_user: User = Depends(get_current_user)
+):
+    """
+    Actualizar un ticket
+    """
+    try:
+        ticket_uuid = uuid.UUID(ticket_id)
+    except ValueError:
+        raise HTTPException(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            detail="Invalid ticket ID format"
+        )
+    
+    query = select(Ticket).where(
+        Ticket.id == ticket_uuid,
+        Ticket.tenant_id == current_user.tenant_id,
+        Ticket.created_by == current_user.id
+    )
+    
+    result = await db.execute(query)
+    db_ticket = result.scalars().first()
+    
+    if not db_ticket:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail=f"Ticket {ticket_id} not found"
+        )
+    
+    try:
+        update_data = ticket_update.dict(exclude_unset=True)
+        
+        for field, value in update_data.items():
+            if field == "status" and value:
+                setattr(db_ticket, field, TicketStatus[value.upper()])
+            elif field == "priority" and value:
+                setattr(db_ticket, field, TicketPriority[value.upper()])
+            elif field == "assigned_to" and value:
+                setattr(db_ticket, field, uuid.UUID(value))
+            else:
+                setattr(db_ticket, field, value)
+        
+        db_ticket.updated_at = datetime.utcnow()
+        
+        await db.commit()
+        await db.refresh(db_ticket)
+        
+        # ✅ CORREGIDO: Usar affected_system_id
+        return {
+            "id": str(db_ticket.id),
+            "ticket_number": db_ticket.ticket_number,
+            "subject": db_ticket.subject,
+            "description": db_ticket.description,
+            "status": db_ticket.status.value,
+            "priority": db_ticket.priority.value,
+            "category_id": str(db_ticket.category_id) if db_ticket.category_id else None,
+            "affected_system_id": str(db_ticket.affected_system_id) if db_ticket.affected_system_id else None,  # ✅ CORREGIDO
+            "created_by": str(db_ticket.created_by),
+            "assigned_to": str(db_ticket.assigned_to) if db_ticket.assigned_to else None,
+            "created_at": db_ticket.created_at,
+            "updated_at": db_ticket.updated_at
+        }
+        
+    except Exception as e:
+        await db.rollback()
+        raise HTTPException(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            detail=f"Error updating ticket: {str(e)}"
+        )
+
+
+@router.patch("/{ticket_id}/close", response_model=TicketResponse)
+async def close_ticket(
+    ticket_id: str,
+    close_request: TicketCloseRequest,
+    db: AsyncSession = Depends(get_db),
+    current_user: User = Depends(get_current_user)
+):
+    """
+    Cerrar un ticket
+    """
+    try:
+        ticket_uuid = uuid.UUID(ticket_id)
+    except ValueError:
+        raise HTTPException(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            detail="Invalid ticket ID format"
+        )
+    
+    query = select(Ticket).where(
+        Ticket.id == ticket_uuid,
+        Ticket.tenant_id == current_user.tenant_id,
+        Ticket.created_by == current_user.id
+    )
+    
+    result = await db.execute(query)
+    db_ticket = result.scalars().first()
+    
+    if not db_ticket:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail=f"Ticket {ticket_id} not found"
+        )
+    
+    try:
+        db_ticket.status = TicketStatus.CLOSED
+        db_ticket.updated_at = datetime.utcnow()
+        
+        await db.commit()
+        await db.refresh(db_ticket)
+        
+        # ✅ CORREGIDO: Usar affected_system_id
+        return {
+            "id": str(db_ticket.id),
+            "ticket_number": db_ticket.ticket_number,
+            "subject": db_ticket.subject,
+            "description": db_ticket.description,
+            "status": db_ticket.status.value,
+            "priority": db_ticket.priority.value,
+            "category_id": str(db_ticket.category_id) if db_ticket.category_id else None,
+            "affected_system_id": str(db_ticket.affected_system_id) if db_ticket.affected_system_id else None,  # ✅ CORREGIDO
+            "created_by": str(db_ticket.created_by),
+            "assigned_to": str(db_ticket.assigned_to) if db_ticket.assigned_to else None,
+            "created_at": db_ticket.created_at,
+            "updated_at": db_ticket.updated_at
+        }
+        
+    except Exception as e:
+        await db.rollback()
+        raise HTTPException(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            detail=f"Error closing ticket: {str(e)}"
+        )
+
+
+# ===================================
+# COMMENT ENDPOINTS (placeholder)
+# ===================================
+
+@router.get("/{ticket_id}/comments")
+async def get_ticket_comments(
+    ticket_id: str,
+    db: AsyncSession = Depends(get_db),
+    current_user: User = Depends(get_current_user)
+):
+    """
+    Obtener comentarios de un ticket
+    """
+    return []
+
+
+@router.post("/{ticket_id}/comments", status_code=status.HTTP_201_CREATED)
+async def create_comment(
+    ticket_id: str,
+    db: AsyncSession = Depends(get_db),
+    current_user: User = Depends(get_current_user)
+):
+    """
+    Agregar un comentario a un ticket
+    """
+    raise HTTPException(
+        status_code=status.HTTP_501_NOT_IMPLEMENTED,
+        detail="Comments not yet implemented"
+    )
+
+
+# ===================================
+# ATTACHMENT ENDPOINTS (placeholder)
+# ===================================
+
+@router.get("/{ticket_id}/attachments")
+async def get_ticket_attachments(
+    ticket_id: str,
+    db: AsyncSession = Depends(get_db),
+    current_user: User = Depends(get_current_user)
+):
+    """
+    Obtener adjuntos de un ticket
+    """
+    return []
+
+
+@router.post("/{ticket_id}/attachments", status_code=status.HTTP_201_CREATED)
+async def upload_attachment(
+    ticket_id: str,
+    file: UploadFile = File(...),
+    db: AsyncSession = Depends(get_db),
+    current_user: User = Depends(get_current_user)
+):
+    """
+    Subir un archivo adjunto a un ticket
+    """
+    raise HTTPException(
+        status_code=status.HTTP_501_NOT_IMPLEMENTED,
+        detail="File uploads not yet implemented"
+    )

backend/app/api/v1/endpoints/users.py

@@ -3,66 +3,425 @@ from sqlalchemy.ext.asyncio import AsyncSession
 from sqlalchemy import select
 from pydantic import BaseModel, ConfigDict, EmailStr
 from typing import List, Optional
+from datetime import datetime
 import uuid
 
 from app.core.database import get_db
 from app.core.security import security
 from app.models.user import User, UserRole
+from app.services.audit_service import AuditService
 from app.api import deps 
 
 router = APIRouter()
 
-class UserBase(BaseModel):
+# ===================================
+# PYDANTIC SCHEMAS
+# ===================================
+
+class UserCreate(BaseModel):
+    """Schema para crear usuario - NO incluye tenant_id (se asigna automáticamente)"""
     email: EmailStr
     first_name: str
     last_name: str
     role: UserRole
-    is_active: bool = True
-    tenant_id: Optional[uuid.UUID] = None
-
-class UserCreate(UserBase):
     password: str
+    language: str = "es"
+    timezone: str = "UTC"
+    notifications_email: bool = True
     
 class UserUpdate(BaseModel):
+    """Schema para actualizar usuario"""
     email: Optional[EmailStr] = None
     first_name: Optional[str] = None
     last_name: Optional[str] = None
     role: Optional[UserRole] = None
     is_active: Optional[bool] = None
-    password: Optional[str] = None # Optional password update
+    password: Optional[str] = None
+    language: Optional[str] = None
+    timezone: Optional[str] = None
+    notifications_email: Optional[bool] = None
 
-class UserResponse(UserBase):
+class UserResponse(BaseModel):
+    """Schema de respuesta - incluye todos los campos públicos"""
     id: uuid.UUID
+    tenant_id: uuid.UUID
+    email: EmailStr
+    first_name: str
+    last_name: str
+    avatar_url: Optional[str] = None
+    role: UserRole
+    is_active: bool
+    email_verified: bool
+    last_login: Optional[datetime] = None
+    language: str
+    timezone: str
+    notifications_email: bool
+    totp_enabled: bool
+    created_at: datetime
+    updated_at: datetime
     
     model_config = ConfigDict(from_attributes=True)
 
+
+# ===================================
+# ENDPOINTS
+# ===================================
+
 @router.get("/", response_model=List[UserResponse])
 async def read_users(
     skip: int = 0, 
     limit: int = 100,
+    role: Optional[UserRole] = None,
+    is_active: Optional[bool] = None,
     db: AsyncSession = Depends(get_db),
-    current_user = Depends(deps.get_current_active_superuser)
+    current_user: User = Depends(deps.get_current_user)
 ):
-    query = select(User).offset(skip).limit(limit)
+    """
+    Listar usuarios del tenant del usuario actual.
+    
+    ✅ Implementa multi-tenancy: solo muestra usuarios del tenant del usuario.
+    
+    Filtros opcionales:
+    - role: filtrar por rol
+    - is_active: filtrar por estado activo
+    """
+    # ✅ CORREGIDO: Filtrar por tenant_id
+    query = select(User).where(User.tenant_id == current_user.tenant_id)
+    
+    # Aplicar filtros opcionales
+    if role:
+        query = query.where(User.role == role)
+    if is_active is not None:
+        query = query.where(User.is_active == is_active)
+    
+    query = query.offset(skip).limit(limit).order_by(User.created_at.desc())
+    
     result = await db.execute(query)
     return result.scalars().all()
 
-@router.post("/", response_model=UserResponse)
+
+@router.post("/", response_model=UserResponse, status_code=status.HTTP_201_CREATED)
 async def create_user(
     user: UserCreate, 
     db: AsyncSession = Depends(get_db),
-    current_user = Depends(deps.get_current_active_superuser)
+    current_user: User = Depends(deps.get_current_user)
 ):
-    query = select(User).where(User.email == user.email)
+    """
+    Crear nuevo usuario en el tenant del usuario actual.
+    
+    ✅ Implementa multi-tenancy: asigna automáticamente tenant_id del usuario.
+    
+    Restricciones:
+    - Solo ADMIN, SUPPORT_MANAGER y CLIENT_ADMIN pueden crear usuarios
+    - El email debe ser único dentro del tenant
+    """
+    # Verificar permisos
+    if not current_user.can_manage_users:
+        raise HTTPException(
+            status_code=status.HTTP_403_FORBIDDEN,
+            detail="You don't have permission to create users"
+        )
+    
+    # Verificar si el email ya existe en el tenant
+    query = select(User).where(
+        User.email == user.email,
+        User.tenant_id == current_user.tenant_id
+    )
     result = await db.execute(query)
     if result.scalar_one_or_none():
-        raise HTTPException(status_code=400, detail="Email already registered")
+        raise HTTPException(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            detail="Email already registered in this tenant"
+        )
     
+    # Preparar datos del usuario
     user_data = user.model_dump(exclude={"password"})
-    password_hash = security.get_password_hash(user.password)
+    password_hash = security.hash_password(user.password)
+    
+    # ✅ CORREGIDO: Asignar tenant_id del usuario actual
+    db_user = User(
+        **user_data,
+        password_hash=password_hash,
+        tenant_id=current_user.tenant_id  # ✅ Multi-tenancy automático
+    )
     
-    db_user = User(**user_data, password_hash=password_hash)
     db.add(db_user)
     await db.commit()
     await db.refresh(db_user)
+    
+    # Registrar creación en auditoría
+    try:
+        await AuditService.log(
+            db=db,
+            tenant_id=current_user.tenant_id,
+            user_id=current_user.id,
+            action="user.create",
+            resource_type="user",
+            resource_id=db_user.id,
+            new_values=AuditService.sanitize_values({
+                "email": db_user.email,
+                "first_name": db_user.first_name,
+                "last_name": db_user.last_name,
+                "role": db_user.role.value
+            })
+        )
+        await db.commit()
+    except Exception as e:
+        # No fallar si falla el audit log
+        pass
+    
+    return db_user
+
+
+@router.get("/{user_id}", response_model=UserResponse)
+async def read_user(
+    user_id: uuid.UUID,
+    db: AsyncSession = Depends(get_db),
+    current_user: User = Depends(deps.get_current_user)
+):
+    """
+    Obtener un usuario específico del tenant.
+    
+    ✅ Implementa multi-tenancy: solo permite acceso a usuarios del propio tenant.
+    """
+    query = select(User).where(
+        User.id == user_id,
+        User.tenant_id == current_user.tenant_id  # ✅ Seguridad multi-tenant
+    )
+    result = await db.execute(query)
+    user = result.scalar_one_or_none()
+    
+    if not user:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail="User not found"
+        )
+    
+    return user
+
+
+@router.put("/{user_id}", response_model=UserResponse)
+async def update_user(
+    user_id: uuid.UUID,
+    user_update: UserUpdate,
+    db: AsyncSession = Depends(get_db),
+    current_user: User = Depends(deps.get_current_user)
+):
+    """
+    Actualizar usuario del tenant.
+    
+    ✅ Implementa multi-tenancy: solo permite actualizar usuarios del propio tenant.
+    
+    Restricciones:
+    - Solo ADMIN, SUPPORT_MANAGER y CLIENT_ADMIN pueden actualizar usuarios
+    - No se puede cambiar el tenant_id
+    """
+    # Verificar permisos
+    if not current_user.can_manage_users:
+        raise HTTPException(
+            status_code=status.HTTP_403_FORBIDDEN,
+            detail="You don't have permission to update users"
+        )
+    
+    # Buscar usuario
+    query = select(User).where(
+        User.id == user_id,
+        User.tenant_id == current_user.tenant_id
+    )
+    result = await db.execute(query)
+    db_user = result.scalar_one_or_none()
+    
+    if not db_user:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail="User not found"
+        )
+    
+    # Guardar valores anteriores para audit
+    old_values = {
+        "email": db_user.email,
+        "first_name": db_user.first_name,
+        "last_name": db_user.last_name,
+        "role": db_user.role.value,
+        "is_active": db_user.is_active
+    }
+    
+    # Verificar email único si se está cambiando
+    update_data = user_update.model_dump(exclude_unset=True)
+    if "email" in update_data and update_data["email"] != db_user.email:
+        email_query = select(User).where(
+            User.email == update_data["email"],
+            User.tenant_id == current_user.tenant_id,
+            User.id != user_id
+        )
+        email_result = await db.execute(email_query)
+        if email_result.scalar_one_or_none():
+            raise HTTPException(
+                status_code=status.HTTP_400_BAD_REQUEST,
+                detail="Email already in use by another user"
+            )
+    
+    # Actualizar campos
+    for field, value in update_data.items():
+        if field == "password":
+            # Hash the new password
+            db_user.password_hash = security.hash_password(value)
+        else:
+            setattr(db_user, field, value)
+    
+    await db.commit()
+    await db.refresh(db_user)
+    
+    # Registrar actualización en auditoría
+    try:
+        new_values = {
+            "email": db_user.email,
+            "first_name": db_user.first_name,
+            "last_name": db_user.last_name,
+            "role": db_user.role.value,
+            "is_active": db_user.is_active
+        }
+        
+        await AuditService.log(
+            db=db,
+            tenant_id=current_user.tenant_id,
+            user_id=current_user.id,
+            action="user.update",
+            resource_type="user",
+            resource_id=db_user.id,
+            old_values=AuditService.sanitize_values(old_values),
+            new_values=AuditService.sanitize_values(new_values)
+        )
+        await db.commit()
+    except Exception as e:
+        # No fallar si falla el audit log
+        pass
+    
+    return db_user
+
+
+@router.delete("/{user_id}", status_code=status.HTTP_204_NO_CONTENT)
+async def delete_user(
+    user_id: uuid.UUID,
+    db: AsyncSession = Depends(get_db),
+    current_user: User = Depends(deps.get_current_user)
+):
+    """
+    Desactivar usuario del tenant (soft delete).
+    
+    ✅ Implementa multi-tenancy: solo permite desactivar usuarios del propio tenant.
+    
+    Restricciones:
+    - Solo ADMIN puede eliminar usuarios
+    - No se puede eliminar a sí mismo
+    - No se puede eliminar el último ADMIN del tenant
+    """
+    # Verificar permisos - solo ADMIN puede eliminar
+    if current_user.role != UserRole.ADMIN:
+        raise HTTPException(
+            status_code=status.HTTP_403_FORBIDDEN,
+            detail="Only admins can delete users"
+        )
+    
+    # No se puede eliminar a sí mismo
+    if user_id == current_user.id:
+        raise HTTPException(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            detail="You cannot delete yourself"
+        )
+    
+    # Buscar usuario
+    query = select(User).where(
+        User.id == user_id,
+        User.tenant_id == current_user.tenant_id
+    )
+    result = await db.execute(query)
+    db_user = result.scalar_one_or_none()
+    
+    if not db_user:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail="User not found"
+        )
+    
+    # Verificar que no sea el último admin del tenant
+    if db_user.role == UserRole.ADMIN:
+        admin_query = select(User).where(
+            User.tenant_id == current_user.tenant_id,
+            User.role == UserRole.ADMIN,
+            User.is_active == True,
+            User.id != user_id
+        )
+        admin_result = await db.execute(admin_query)
+        active_admins = admin_result.scalars().all()
+        
+        if len(active_admins) == 0:
+            raise HTTPException(
+                status_code=status.HTTP_400_BAD_REQUEST,
+                detail="Cannot delete the last active admin of the tenant"
+            )
+    
+    # Soft delete
+    db_user.is_active = False
+    await db.commit()
+    
+    # Registrar eliminación en auditoría
+    try:
+        await AuditService.log(
+            db=db,
+            tenant_id=current_user.tenant_id,
+            user_id=current_user.id,
+            action="user.delete",
+            resource_type="user",
+            resource_id=db_user.id,
+            old_values={
+                "email": db_user.email,
+                "role": db_user.role.value,
+                "was_active": True
+            },
+            metadata={"action_type": "soft_delete"}
+        )
+        await db.commit()
+    except Exception as e:
+        # No fallar si falla el audit log
+        pass
+    
+    return None
+
+
+@router.patch("/{user_id}/activate", response_model=UserResponse)
+async def activate_user(
+    user_id: uuid.UUID,
+    db: AsyncSession = Depends(get_db),
+    current_user: User = Depends(deps.get_current_user)
+):
+    """
+    Reactivar usuario desactivado.
+    
+    ✅ Implementa multi-tenancy: solo permite reactivar usuarios del propio tenant.
+    """
+    # Verificar permisos
+    if not current_user.can_manage_users:
+        raise HTTPException(
+            status_code=status.HTTP_403_FORBIDDEN,
+            detail="You don't have permission to activate users"
+        )
+    
+    # Buscar usuario
+    query = select(User).where(
+        User.id == user_id,
+        User.tenant_id == current_user.tenant_id
+    )
+    result = await db.execute(query)
+    db_user = result.scalar_one_or_none()
+    
+    if not db_user:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail="User not found"
+        )
+    
+    db_user.is_active = True
+    await db.commit()
+    await db.refresh(db_user)
     return db_user

backend/app/api/v1/router.py

@@ -5,7 +5,8 @@ Router principal para la API v1
 """
 
 from fastapi import APIRouter
-from app.api.v1.endpoints import auth, health, tenants, users, systems, categories
+
+from app.api.v1.endpoints import auth, health, tenants, users, systems, categories, tickets, client_profile, audit, sla
 
 api_router = APIRouter()
 
@@ -45,3 +46,31 @@ api_router.include_router(
     prefix="/categories",
     tags=["categories"]
 )
+
+# Tickets routes
+api_router.include_router(
+    tickets.router,
+    prefix="/tickets",
+    tags=["tickets"]
+)
+
+# Client Profile routes
+api_router.include_router(
+    client_profile.router,
+    prefix="/client-profile",
+    tags=["client-profile"]
+)
+
+# Audit routes
+api_router.include_router(
+    audit.router,
+    prefix="/audit",
+    tags=["audit"]
+)
+
+# SLA routes
+api_router.include_router(
+    sla.router,
+    prefix="/sla",
+    tags=["sla"]
+)

backend/app/core/config.py

@@ -23,101 +23,99 @@ class Settings(BaseSettings):
     # ===================================
     # GENERAL
     # ===================================
-    ENVIRONMENT: str = Field(default="development", env="ENVIRONMENT")
-    DEBUG: bool = Field(default=False, env="DEBUG")
-    SECRET_KEY: str = Field(..., env="SECRET_KEY")
-    API_VERSION: str = Field(default="v1", env="API_VERSION")
+    ENVIRONMENT: str = Field(default="development")
+    DEBUG: bool = Field(default=False)
+    SECRET_KEY: str = Field(...)
+    API_VERSION: str = Field(default="v1")
+    APP_VERSION: str = Field(default="1.6.0")
     
     # ===================================
     # DATABASE
     # ===================================
-    DATABASE_URL: str = Field(..., env="DATABASE_URL")
+    DATABASE_URL: str = Field(...)
     
     # ===================================
     # REDIS
     # ===================================
-    REDIS_URL: str = Field(..., env="REDIS_URL")
+    REDIS_URL: str = Field(...)
     
     # ===================================
     # JWT AUTHENTICATION
     # ===================================
-    JWT_SECRET_KEY: str = Field(..., env="JWT_SECRET_KEY")
-    JWT_ALGORITHM: str = Field(default="HS256", env="JWT_ALGORITHM")
-    ACCESS_TOKEN_EXPIRE_MINUTES: int = Field(default=60, env="ACCESS_TOKEN_EXPIRE_MINUTES")
-    REFRESH_TOKEN_EXPIRE_DAYS: int = Field(default=7, env="REFRESH_TOKEN_EXPIRE_DAYS")
+    JWT_SECRET_KEY: str = Field(...)
+    JWT_ALGORITHM: str = Field(default="HS256")
+    ACCESS_TOKEN_EXPIRE_MINUTES: int = Field(default=60)
+    REFRESH_TOKEN_EXPIRE_DAYS: int = Field(default=7)
     
     # ===================================
     # CORS
     # ===================================
     CORS_ORIGINS: str = Field(
-        default="http://localhost:3000,http://localhost:3001",
-        env="CORS_ORIGINS"
+        default="http://localhost:3000,http://localhost:3001"
     )
     
     # ===================================
     # EMAIL
     # ===================================
-    SMTP_HOST: str = Field(default="localhost", env="SMTP_HOST")
-    SMTP_PORT: int = Field(default=587, env="SMTP_PORT")
-    SMTP_USER: Optional[str] = Field(default=None, env="SMTP_USER")
-    SMTP_PASSWORD: Optional[str] = Field(default=None, env="SMTP_PASSWORD")
-    SMTP_USE_TLS: bool = Field(default=True, env="SMTP_USE_TLS")
-    SMTP_USE_SSL: bool = Field(default=False, env="SMTP_USE_SSL")
+    SMTP_HOST: str = Field(default="localhost")
+    SMTP_PORT: int = Field(default=587)
+    SMTP_USER: Optional[str] = Field(default=None)
+    SMTP_PASSWORD: Optional[str] = Field(default=None)
+    SMTP_USE_TLS: bool = Field(default=True)
+    SMTP_USE_SSL: bool = Field(default=False)
     
-    DEFAULT_FROM_EMAIL: str = Field(default="noreply@servicemanager.local", env="DEFAULT_FROM_EMAIL")
-    DEFAULT_FROM_NAME: str = Field(default="ServiceManager", env="DEFAULT_FROM_NAME")
+    DEFAULT_FROM_EMAIL: str = Field(default="noreply@servicemanager.local")
+    DEFAULT_FROM_NAME: str = Field(default="ServiceManager")
     
     # ===================================
     # FILE UPLOADS
     # ===================================
-    MAX_UPLOAD_SIZE_MB: int = Field(default=10, env="MAX_UPLOAD_SIZE_MB")
-    ALLOWED_FILE_EXTENSIONS: List[str] = Field(
-        default=["pdf", "jpg", "jpeg", "png", "doc", "docx", "xls", "xlsx", "txt"],
-        env="ALLOWED_FILE_EXTENSIONS"
+    MAX_UPLOAD_SIZE_MB: int = Field(default=10)
+    ALLOWED_FILE_EXTENSIONS_STR: str = Field(
+        default="pdf,jpg,jpeg,png,doc,docx,xls,xlsx,txt",
+        alias="ALLOWED_FILE_EXTENSIONS"
     )
-    UPLOAD_PATH: str = Field(default="/app/uploads", env="UPLOAD_PATH")
+    UPLOAD_PATH: str = Field(default="/app/uploads")
     
-    @field_validator("ALLOWED_FILE_EXTENSIONS", mode='before')
-    @classmethod
-    def validate_file_extensions(cls, v):
-        if isinstance(v, str):
-            return [ext.strip().lower() for ext in v.split(",")]
-        return [ext.lower() for ext in v]
+    @property
+    def ALLOWED_FILE_EXTENSIONS(self) -> List[str]:
+        """Parse the comma-separated file extensions."""
+        return [ext.strip().lower() for ext in self.ALLOWED_FILE_EXTENSIONS_STR.split(",")]
     
     # ===================================
     # SECURITY
     # ===================================
-    RATE_LIMIT_ENABLED: bool = Field(default=True, env="RATE_LIMIT_ENABLED")
-    PASSWORD_MIN_LENGTH: int = Field(default=8, env="PASSWORD_MIN_LENGTH")
+    RATE_LIMIT_ENABLED: bool = Field(default=True)
+    PASSWORD_MIN_LENGTH: int = Field(default=8)
     
     # Argon2 settings
-    ARGON2_TIME_COST: int = Field(default=3, env="ARGON2_TIME_COST")
-    ARGON2_MEMORY_COST: int = Field(default=65536, env="ARGON2_MEMORY_COST")
-    ARGON2_PARALLELISM: int = Field(default=4, env="ARGON2_PARALLELISM")
+    ARGON2_TIME_COST: int = Field(default=3)
+    ARGON2_MEMORY_COST: int = Field(default=65536)
+    ARGON2_PARALLELISM: int = Field(default=4)
     
     # ===================================
     # LOGGING
     # ===================================
-    LOG_LEVEL: str = Field(default="INFO", env="LOG_LEVEL")
-    LOG_FORMAT: str = Field(default="json", env="LOG_FORMAT")
-    LOG_FILE: Optional[str] = Field(default=None, env="LOG_FILE")
+    LOG_LEVEL: str = Field(default="INFO")
+    LOG_FORMAT: str = Field(default="json")
+    LOG_FILE: Optional[str] = Field(default=None)
     
     # ===================================
     # FRONTEND URLS
     # ===================================
-    CLIENT_FRONTEND_URL: str = Field(default="http://localhost:3000", env="CLIENT_FRONTEND_URL")
-    INTERNAL_FRONTEND_URL: str = Field(default="http://localhost:3001", env="INTERNAL_FRONTEND_URL")
+    CLIENT_FRONTEND_URL: str = Field(default="http://localhost:3000")
+    INTERNAL_FRONTEND_URL: str = Field(default="http://localhost:3001")
     
     # ===================================
     # HEALTH CHECKS
     # ===================================
-    HEALTH_CHECK_TIMEOUT: int = Field(default=30, env="HEALTH_CHECK_TIMEOUT")
+    HEALTH_CHECK_TIMEOUT: int = Field(default=30)
     
     # ===================================
     # CELERY
     # ===================================
-    CELERY_BROKER_URL: str = Field(..., env="CELERY_BROKER_URL")
-    CELERY_RESULT_BACKEND: str = Field(..., env="CELERY_RESULT_BACKEND")
+    CELERY_BROKER_URL: str = Field(...)
+    CELERY_RESULT_BACKEND: str = Field(...)
     
     def is_production(self) -> bool:
         """Check if environment is production."""

backend/app/core/file_handler.py

@@ -0,0 +1,101 @@
+"""
+File Handler - ServiceManagerWeb  
+Gestión simple de archivos adjuntos
+"""
+import os
+import uuid
+import hashlib
+from pathlib import Path
+from typing import Tuple
+from fastapi import UploadFile, HTTPException, status
+
+from app.core.config import get_settings
+
+settings = get_settings()
+
+
+class FileHandler:
+    """Handler simple para archivos adjuntos"""
+    
+    def __init__(self):
+        self.upload_path = Path(settings.UPLOAD_PATH)
+        self.max_size_bytes = settings.MAX_UPLOAD_SIZE_MB * 1024 * 1024
+        self.allowed_extensions = settings.ALLOWED_FILE_EXTENSIONS
+        # Crear directorio si no existe
+        self.upload_path.mkdir(parents=True, exist_ok=True)
+    
+    def _validate_file(self, filename: str, file_size: int) -> None:
+        """Validar archivo"""
+        extension = Path(filename).suffix.lower().lstrip('.')
+        
+        if extension not in self.allowed_extensions:
+            raise HTTPException(
+                status_code=status.HTTP_400_BAD_REQUEST,
+                detail=f"Extensión no permitida: {extension}"
+            )
+        
+        if file_size > self.max_size_bytes:
+            raise HTTPException(
+                status_code=status.HTTP_413_REQUEST_ENTITY_TOO_LARGE,
+                detail=f"Archivo muy grande. Máximo: {settings.MAX_UPLOAD_SIZE_MB}MB"
+            )
+    
+    def _calculate_checksums(self, content: bytes) -> Tuple[str, str]:
+        """Calcular MD5 y SHA256"""
+        return hashlib.md5(content).hexdigest(), hashlib.sha256(content).hexdigest()
+    
+    async def save_upload(self, file: UploadFile, tenant_id: uuid.UUID, ticket_id: uuid.UUID) -> dict:
+        """Guardar archivo y retornar metadata"""
+        if not file.filename:
+            raise HTTPException(status_code=400, detail="Filename requerido")
+        
+        content = await file.read()
+        file_size = len(content)
+        
+        self._validate_file(file.filename, file_size)
+        
+        md5_hash, sha256_hash = self._calculate_checksums(content)
+        
+        # Nombre único
+        extension = Path(file.filename).suffix.lower()
+        safe_filename = f"{uuid.uuid4().hex}{extension}"
+        
+        # Estructura: uploads/tenant_id/tickets/ticket_id/
+        file_directory = self.upload_path / str(tenant_id) / "tickets" / str(ticket_id)
+        file_directory.mkdir(parents=True, exist_ok=True)
+        
+        file_path = file_directory / safe_filename
+        relative_path = str(file_path.relative_to(self.upload_path))
+        
+        # Guardar archivo
+        with open(file_path, "wb") as f:
+            f.write(content)
+        
+        import mimetypes
+        mime_type = mimetypes.guess_type(file.filename)[0] or "application/octet-stream"
+        
+        return {
+            "filename": safe_filename,
+            "original_filename": file.filename,
+            "file_path": relative_path,
+            "file_size": file_size,
+            "mime_type": mime_type,
+            "md5_hash": md5_hash,
+            "sha256_hash": sha256_hash
+        }
+    
+    def get_file_path(self, relative_path: str) -> Path:
+        """Obtener path absoluto del archivo"""
+        file_path = (self.upload_path / relative_path).resolve()
+        
+        # Verificar que no escape del directorio de uploads
+        if not str(file_path).startswith(str(self.upload_path.resolve())):
+            raise HTTPException(status_code=403, detail="Acceso denegado")
+        
+        if not file_path.exists():
+            raise HTTPException(status_code=404, detail="Archivo no encontrado")
+        
+        return file_path
+
+
+file_handler = FileHandler()

backend/app/main.py

@@ -21,6 +21,10 @@ from app.models.system import System
 from app.models.category import Category
 from app.models.user import User
 from app.models.ticket import Ticket
+from app.models.comment import TicketComment
+from app.models.attachment import TicketAttachment
+from app.models.audit import AuditLog
+from app.models.refresh_token import RefreshToken
 
 from app.core.logging import setup_logging
 from app.api.v1.router import api_router
@@ -52,7 +56,7 @@ async def lifespan(app: FastAPI):
 app = FastAPI(
     title="ServiceManagerWeb API",
     description="Mesa de Ayuda B2B multi-tenant para Aduanasoft",
-    version=settings.API_VERSION,
+    version=settings.APP_VERSION,
     lifespan=lifespan,
     docs_url=f"/{settings.API_VERSION}/docs" if settings.ENVIRONMENT == "development" else None,
     redoc_url=f"/{settings.API_VERSION}/redoc" if settings.ENVIRONMENT == "development" else None,
@@ -159,7 +163,8 @@ async def health_check():
     return {
         "status": "healthy",
         "service": "ServiceManagerWeb API",
-        "version": settings.API_VERSION,
+        "version": settings.APP_VERSION,
+        "api_version": settings.API_VERSION,
         "environment": settings.ENVIRONMENT
     }
 
@@ -170,7 +175,8 @@ async def root():
     """Endpoint raíz con información básica."""
     return {
         "service": "ServiceManagerWeb API",
-        "version": settings.API_VERSION,
+        "version": settings.APP_VERSION,
+        "api_version": settings.API_VERSION,
         "docs": f"/{settings.API_VERSION}/docs",
         "environment": settings.ENVIRONMENT
     }

backend/app/middleware/tenant.py

@@ -24,10 +24,17 @@ class TenantMiddleware(BaseHTTPMiddleware):
     EXCLUDED_PATHS = {
         "/health",
         "/",
+        "/api/v1/auth/login",
         "/v1/auth/login",
         "/docs",
+        "/api/v1/docs",
+        "/v1/docs",
         "/openapi.json",
-        "/redoc"
+        "/api/v1/openapi.json",
+        "/v1/openapi.json",
+        "/redoc",
+        "/api/v1/redoc",
+        "/v1/redoc"
     }
     
     async def dispatch(self, request: Request, call_next) -> Response:

backend/app/models/__init__.py

@@ -0,0 +1,25 @@
+"""Models package initialization."""
+
+from .user import User
+from .tenant import Tenant
+from .ticket import Ticket
+from .comment import TicketComment
+from .system import System
+from .category import Category
+from .client_profile import ClientProfile
+from .attachment import TicketAttachment
+from .audit import AuditLog
+from .refresh_token import RefreshToken
+
+__all__ = [
+    "User",
+    "Tenant", 
+    "Ticket",
+    "TicketComment",
+    "System",
+    "Category",
+    "ClientProfile",
+    "TicketAttachment",
+    "AuditLog",
+    "RefreshToken"
+]

backend/app/models/attachment.py

@@ -0,0 +1,62 @@
+"""
+Attachment Model - ServiceManagerWeb
+"""
+from sqlalchemy import String, ForeignKey, Integer, DateTime, func
+from sqlalchemy.orm import Mapped, mapped_column, relationship
+from sqlalchemy.dialects.postgresql import UUID
+from typing import Optional, TYPE_CHECKING
+from datetime import datetime
+import uuid
+
+from app.core.database import Base
+
+if TYPE_CHECKING:
+    from app.models.ticket import Ticket
+    from app.models.comment import TicketComment
+    from app.models.user import User
+
+
+class TicketAttachment(Base):
+    """Modelo de archivos adjuntos en tickets"""
+    __tablename__ = "ticket_attachments"
+    
+    # Sobrescribir campos heredados de Base para que coincidan con la tabla real
+    id: Mapped[uuid.UUID] = mapped_column(UUID(as_uuid=True), primary_key=True, default=uuid.uuid4)
+    created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), server_default=func.now())
+    # Esta tabla NO tiene updated_at, así que lo excluimos del mapping
+    
+    ticket_id: Mapped[uuid.UUID] = mapped_column(
+        UUID(as_uuid=True),
+        ForeignKey("tickets.id", ondelete="CASCADE"),
+        nullable=False
+    )
+    
+    comment_id: Mapped[Optional[uuid.UUID]] = mapped_column(
+        UUID(as_uuid=True),
+        ForeignKey("ticket_comments.id", ondelete="CASCADE"),
+        nullable=True
+    )
+    
+    uploaded_by: Mapped[uuid.UUID] = mapped_column(
+        UUID(as_uuid=True),
+        ForeignKey("users.id"),
+        nullable=False
+    )
+    
+    filename: Mapped[str] = mapped_column(String(255), nullable=False)
+    original_filename: Mapped[str] = mapped_column(String(255), nullable=False)
+    mime_type: Mapped[str] = mapped_column(String(100), nullable=False)
+    file_size: Mapped[int] = mapped_column(Integer, nullable=False)
+    file_path: Mapped[str] = mapped_column(String(500), nullable=False)
+    
+    md5_hash: Mapped[Optional[str]] = mapped_column(String(32), nullable=True)
+    sha256_hash: Mapped[Optional[str]] = mapped_column(String(64), nullable=True)
+    
+    ticket: Mapped["Ticket"] = relationship("Ticket", back_populates="attachments")
+    comment: Mapped[Optional["TicketComment"]] = relationship("TicketComment", back_populates="attachments")
+    uploaded_by_user: Mapped["User"] = relationship("User")
+    
+    # Excluir updated_at del mapping ya que la tabla no lo tiene
+    __mapper_args__ = {
+        "exclude_properties": ["updated_at"]
+    }

backend/app/models/audit.py

@@ -0,0 +1,148 @@
+"""
+Audit Log Model - ServiceManagerWeb
+
+Modelo para bitácora de auditoría y compliance.
+Registra todas las acciones importantes del sistema.
+"""
+
+from sqlalchemy import String, Text, DateTime, ForeignKey, Index
+from sqlalchemy.orm import Mapped, mapped_column, relationship
+from sqlalchemy.dialects.postgresql import UUID, INET, JSONB
+from typing import Optional, Dict, Any, TYPE_CHECKING
+import uuid
+from datetime import datetime
+
+from app.core.database import Base
+
+if TYPE_CHECKING:
+    from app.models.tenant import Tenant
+    from app.models.user import User
+
+
+class AuditLog(Base):
+    """
+    Bitácora de auditoría para tracking completo de acciones.
+    
+    Registra:
+    - Qui├®n hizo la acci├│n (user_id)
+    - Qu├® hizo (action)
+    - Sobre qu├® recurso (resource_type + resource_id)
+    - Cuándo lo hizo (created_at)
+    - Desde d├│nde (ip_address, user_agent)
+    - Qu├® cambi├│ (old_values, new_values)
+    """
+    
+    __tablename__ = "audit_logs"
+    
+    # Multi-tenancy
+    tenant_id: Mapped[uuid.UUID] = mapped_column(
+        UUID(as_uuid=True),
+        ForeignKey("tenants.id", ondelete="CASCADE"),
+        nullable=False,
+        index=True
+    )
+    
+    # Usuario que ejecut├│ la acci├│n (NULL = acci├│n del sistema)
+    user_id: Mapped[Optional[uuid.UUID]] = mapped_column(
+        UUID(as_uuid=True),
+        ForeignKey("users.id", ondelete="SET NULL"),
+        nullable=True,
+        index=True
+    )
+    
+    # Acci├│n realizada (ej: "user.login", "ticket.create", "ticket.assign")
+    action: Mapped[str] = mapped_column(
+        String(100),
+        nullable=False,
+        index=True
+    )
+    
+    # Tipo de recurso afectado (user, ticket, comment, category, etc.)
+    resource_type: Mapped[str] = mapped_column(
+        String(50),
+        nullable=False,
+        index=True
+    )
+    
+    # ID del recurso afectado
+    resource_id: Mapped[Optional[uuid.UUID]] = mapped_column(
+        UUID(as_uuid=True),
+        nullable=True
+    )
+    
+    # Contexto de la request
+    ip_address: Mapped[Optional[str]] = mapped_column(INET, nullable=True)
+    user_agent: Mapped[Optional[str]] = mapped_column(Text, nullable=True)
+    
+    # Correlation ID para rastrear requests relacionadas
+    correlation_id: Mapped[Optional[uuid.UUID]] = mapped_column(
+        UUID(as_uuid=True),
+        nullable=True,
+        index=True
+    )
+    
+    # Valores antes del cambio (JSON)
+    old_values: Mapped[Optional[Dict[str, Any]]] = mapped_column(
+        JSONB,
+        nullable=True
+    )
+    
+    # Valores despu├®s del cambio (JSON)
+    new_values: Mapped[Optional[Dict[str, Any]]] = mapped_column(
+        JSONB,
+        nullable=True
+    )
+    
+    # Metadata adicional (cualquier info relevante)
+    # Nota: 'metadata' está reservado en SQLAlchemy, usamos 'extra_metadata'
+    extra_metadata: Mapped[Optional[Dict[str, Any]]] = mapped_column(
+        'metadata',  # Nombre real de la columna en BD
+        JSONB,
+        nullable=True
+    )
+    
+    # Timestamp
+    created_at: Mapped[datetime] = mapped_column(
+        DateTime(timezone=True),
+        default=datetime.utcnow,
+        nullable=False,
+        index=True
+    )
+    
+    # Relaciones
+    tenant: Mapped["Tenant"] = relationship("Tenant", foreign_keys=[tenant_id])
+    user: Mapped[Optional["User"]] = relationship("User", foreign_keys=[user_id])
+    
+    # Índices compuestos para queries comunes
+    __table_args__ = (
+        Index('idx_audit_logs_tenant_action', 'tenant_id', 'action'),
+        Index('idx_audit_logs_resource', 'resource_type', 'resource_id'),
+        Index('idx_audit_logs_user_created', 'user_id', 'created_at'),
+    )
+    
+    # Configuraci├│n del mapper: excluir updated_at porque audit logs son inmutables
+    __mapper_args__ = {
+        "exclude_properties": ["updated_at"]
+    }
+    
+    def __repr__(self) -> str:
+        return f"<AuditLog(action='{self.action}', resource='{self.resource_type}:{self.resource_id}')>"
+    
+    @property
+    def action_display(self) -> str:
+        """Formato amigable de la acci├│n."""
+        parts = self.action.split('.')
+        if len(parts) == 2:
+            resource, verb = parts
+            verb_map = {
+                'create': 'cre├│',
+                'update': 'actualiz├│',
+                'delete': 'elimin├│',
+                'login': 'inici├│ sesi├│n',
+                'logout': 'cerr├│ sesi├│n',
+                'assign': 'asign├│',
+                'close': 'cerr├│',
+                'reopen': 'reabri├│'
+            }
+            return f"{verb_map.get(verb, verb)} {resource}"
+        return self.action

backend/app/models/category.py

@@ -1,8 +1,8 @@
-
 """
 Category Model - ServiceManagerWeb
+Categorías de tickets por tenant
 """
-from sqlalchemy import String, Text, Boolean, ForeignKey
+from sqlalchemy import String, Text, Boolean, Integer, ForeignKey, UniqueConstraint
 from sqlalchemy.orm import Mapped, mapped_column, relationship
 from sqlalchemy.dialects.postgresql import UUID
 from typing import List, Optional
@@ -11,18 +11,40 @@ import uuid
 from app.core.database import Base
 
 class Category(Base):
-    __tablename__ = "categories"
+    """Modelo de categorías de tickets (ticket_categories en BD)"""
+    __tablename__ = "ticket_categories"  # ✅ CORREGIDO: nombre correcto de tabla
     
+    # Campos básicos
     name: Mapped[str] = mapped_column(String(100), nullable=False)
-    description: Mapped[Optional[str]] = mapped_column(Text)
-    is_active: Mapped[bool] = mapped_column(Boolean, default=True)
+    description: Mapped[Optional[str]] = mapped_column(Text, nullable=True)
+    is_active: Mapped[bool] = mapped_column(Boolean, default=True, nullable=False)
     
-    # Optional: Tenant specific categories?
-    tenant_id: Mapped[Optional[uuid.UUID]] = mapped_column(UUID(as_uuid=True), ForeignKey("tenants.id", ondelete="CASCADE"), nullable=True)
+    # ✅ CORREGIDO: tenant_id es obligatorio para multi-tenancy
+    tenant_id: Mapped[uuid.UUID] = mapped_column(
+        UUID(as_uuid=True), 
+        ForeignKey("tenants.id", ondelete="CASCADE"), 
+        nullable=False  # ✅ Obligatorio
+    )
+    
+    # ✅ AÑADIDOS: Campos de SLA según schema.sql
+    color: Mapped[Optional[str]] = mapped_column(String(7), nullable=True)
+    sla_response_hours: Mapped[int] = mapped_column(Integer, default=24, nullable=False)
+    sla_resolution_hours: Mapped[int] = mapped_column(Integer, default=72, nullable=False)
+    auto_assign_to: Mapped[Optional[uuid.UUID]] = mapped_column(
+        UUID(as_uuid=True), 
+        ForeignKey("users.id"),
+        nullable=True
+    )
     
     # Relationships
     tickets: Mapped[List["Ticket"]] = relationship("Ticket", back_populates="category")
-    tenant: Mapped["Tenant"] = relationship("Tenant") # Assuming Tenant model is imported
+    tenant: Mapped["Tenant"] = relationship("Tenant")
+    auto_assign_user: Mapped[Optional["User"]] = relationship("User", foreign_keys=[auto_assign_to])
+    
+    # ✅ AÑADIDO: Constraint único por tenant (no puede haber categorías duplicadas en el mismo tenant)
+    __table_args__ = (
+        UniqueConstraint('tenant_id', 'name', name='uq_ticket_categories_tenant_name'),
+    )
 
     def __repr__(self) -> str:
-        return f"<Category(id={self.id}, name='{self.name}')>"
+        return f"<Category(id={self.id}, name='{self.name}', tenant_id={self.tenant_id})>"

backend/app/models/client_profile.py

@@ -0,0 +1,123 @@
+"""
+Client Profile Model - ServiceManagerWeb
+
+Modelo para perfil empresarial de clientes
+Almacena información detallada de la empresa cliente
+"""
+
+from sqlalchemy import String, Boolean, DateTime, ForeignKey, Text, Numeric
+from sqlalchemy.orm import Mapped, mapped_column, relationship
+from sqlalchemy.dialects.postgresql import UUID
+from typing import Optional, TYPE_CHECKING
+import uuid
+from datetime import datetime
+
+from app.core.database import Base
+
+if TYPE_CHECKING:
+    from app.models.tenant import Tenant
+
+
+class ClientProfile(Base):
+    """Modelo de Perfil de Cliente Empresarial."""
+    
+    __tablename__ = "client_profiles"
+    
+    # Relación con tenant (uno a uno)
+    tenant_id: Mapped[uuid.UUID] = mapped_column(
+        UUID(as_uuid=True),
+        ForeignKey("tenants.id", ondelete="CASCADE"),
+        unique=True,
+        nullable=False,
+        index=True
+    )
+    
+    # === INFORMACIÓN GENERAL ===
+    business_name: Mapped[Optional[str]] = mapped_column(String(255))  # Razón social
+    commercial_name: Mapped[Optional[str]] = mapped_column(String(255))  # Nombre comercial
+    client_code: Mapped[Optional[str]] = mapped_column(String(50))  # Clave de cliente
+    client_type: Mapped[Optional[str]] = mapped_column(String(50))  # Tipo de cliente
+    rfc: Mapped[Optional[str]] = mapped_column(String(13))  # RFC México
+    tax_id: Mapped[Optional[str]] = mapped_column(String(50))  # ID fiscal general
+    
+    # === UBICACIÓN ===
+    country: Mapped[Optional[str]] = mapped_column(String(100))
+    state: Mapped[Optional[str]] = mapped_column(String(100))
+    city: Mapped[Optional[str]] = mapped_column(String(100))
+    address: Mapped[Optional[str]] = mapped_column(Text)
+    external_number: Mapped[Optional[str]] = mapped_column(String(20))
+    internal_number: Mapped[Optional[str]] = mapped_column(String(20))
+    postal_code: Mapped[Optional[str]] = mapped_column(String(10))
+    neighborhood: Mapped[Optional[str]] = mapped_column(String(100))
+    
+    # === CONTACTO ===
+    main_phone: Mapped[Optional[str]] = mapped_column(String(20))
+    secondary_phone: Mapped[Optional[str]] = mapped_column(String(20))
+    direct_phone: Mapped[Optional[str]] = mapped_column(String(20))
+    phone_extension: Mapped[Optional[str]] = mapped_column(String(10))
+    fax: Mapped[Optional[str]] = mapped_column(String(20))
+    
+    # === INFORMACIÓN ADICIONAL ===
+    business_hours: Mapped[Optional[str]] = mapped_column(String(255))
+    website: Mapped[Optional[str]] = mapped_column(String(255))
+    main_email: Mapped[Optional[str]] = mapped_column(String(320))
+    billing_email: Mapped[Optional[str]] = mapped_column(String(320))
+    
+    # === MARKETING ===
+    advertising_medium: Mapped[Optional[str]] = mapped_column(String(255))
+    nationality: Mapped[Optional[str]] = mapped_column(String(100))
+    
+    # === CONFIGURACIÓN EMPRESARIAL ===
+    logo_url: Mapped[Optional[str]] = mapped_column(String(500))
+    company_representative: Mapped[Optional[str]] = mapped_column(String(255))  # Encargado/Representante
+    legal_representative: Mapped[Optional[str]] = mapped_column(String(255))
+    
+    # === FINANZAS/FACTURACIÓN ===
+    credit_limit: Mapped[Optional[float]] = mapped_column(Numeric(15, 2))
+    payment_terms: Mapped[Optional[str]] = mapped_column(String(100))
+    preferred_currency: Mapped[str] = mapped_column(String(3), default="MXN")
+    
+    # === METADATOS ===
+    send_to_billing: Mapped[bool] = mapped_column(Boolean, default=False)
+    is_active_client: Mapped[bool] = mapped_column(Boolean, default=True)
+    is_prospect: Mapped[bool] = mapped_column(Boolean, default=False)
+    notes: Mapped[Optional[str]] = mapped_column(Text)
+    
+    # === RELACIONES ===
+    tenant: Mapped["Tenant"] = relationship("Tenant", back_populates="client_profile")
+    
+    def __repr__(self) -> str:
+        return f"<ClientProfile(tenant_id={self.tenant_id}, business_name='{self.business_name}')>"
+
+    @property
+    def full_address(self) -> str:
+        """Dirección completa formateada."""
+        address_parts = []
+        
+        if self.address:
+            address_parts.append(self.address)
+        
+        if self.external_number:
+            if self.internal_number:
+                address_parts.append(f"#{self.external_number}-{self.internal_number}")
+            else:
+                address_parts.append(f"#{self.external_number}")
+        
+        if self.neighborhood:
+            address_parts.append(f"Col. {self.neighborhood}")
+        
+        if self.city and self.state:
+            address_parts.append(f"{self.city}, {self.state}")
+        
+        if self.postal_code:
+            address_parts.append(f"C.P. {self.postal_code}")
+            
+        if self.country:
+            address_parts.append(self.country)
+            
+        return ", ".join(address_parts)
+
+    @property
+    def display_name(self) -> str:
+        """Nombre para mostrar (comercial o razón social)."""
+        return self.commercial_name or self.business_name or "Sin nombre"

backend/app/models/comment.py

@@ -0,0 +1,74 @@
+"""
+Comment Model - ServiceManagerWeb
+
+Modelo para comentarios en tickets
+"""
+
+from sqlalchemy import Column, String, Text, Boolean, ForeignKey, DateTime
+from sqlalchemy.dialects.postgresql import UUID
+from sqlalchemy.orm import Mapped, mapped_column, relationship
+from datetime import datetime
+import uuid
+
+from app.core.database import Base
+
+
+class TicketComment(Base):
+    """Comentarios en tickets."""
+    
+    __tablename__ = "ticket_comments"
+    
+    # Columnas
+    id: Mapped[uuid.UUID] = mapped_column(
+        UUID(as_uuid=True),
+        primary_key=True,
+        default=uuid.uuid4
+    )
+    
+    ticket_id: Mapped[uuid.UUID] = mapped_column(
+        UUID(as_uuid=True),
+        ForeignKey("tickets.id", ondelete="CASCADE"),
+        nullable=False,
+        index=True
+    )
+    
+    author_id: Mapped[uuid.UUID] = mapped_column(
+        UUID(as_uuid=True),
+        ForeignKey("users.id"),
+        nullable=False,
+        index=True
+    )
+    
+    content: Mapped[str] = mapped_column(Text, nullable=False)
+    
+    is_internal: Mapped[bool] = mapped_column(
+        Boolean,
+        default=False,
+        nullable=False
+    )
+    
+    created_at: Mapped[datetime] = mapped_column(
+        DateTime(timezone=True),
+        default=datetime.utcnow,
+        nullable=False,
+        index=True
+    )
+    
+    updated_at: Mapped[datetime] = mapped_column(
+        DateTime(timezone=True),
+        default=datetime.utcnow,
+        onupdate=datetime.utcnow,
+        nullable=False
+    )
+    
+    # Relationships
+    ticket: Mapped["Ticket"] = relationship("Ticket", back_populates="comments")
+    author: Mapped["User"] = relationship("User")
+    attachments: Mapped[list["TicketAttachment"]] = relationship(
+        "TicketAttachment",
+        back_populates="comment",
+        cascade="all, delete-orphan"
+    )
+    
+    def __repr__(self) -> str:
+        return f"<TicketComment {self.id} by {self.author_id}>"

backend/app/models/refresh_token.py

@@ -0,0 +1,171 @@
+"""
+Refresh Token Model - ServiceManagerWeb
+
+Modelo para persistencia de refresh tokens con revocaci├│n y tracking.
+"""
+
+from sqlalchemy import String, Boolean, DateTime, ForeignKey, Index, Integer
+from sqlalchemy.orm import Mapped, mapped_column, relationship
+from sqlalchemy.dialects.postgresql import UUID
+from typing import Optional, TYPE_CHECKING
+import uuid
+from datetime import datetime
+
+from app.core.database import Base
+
+if TYPE_CHECKING:
+    from app.models.user import User
+
+
+class RefreshToken(Base):
+    """
+    Refresh Token persistente para gesti├│n de sesiones.
+    
+    Almacena refresh tokens con informaci├│n de dispositivo y permite
+    revocaci├│n para mejorar la seguridad.
+    
+    Características:
+    - Token hasheado (no se guarda en texto plano)
+    - Device fingerprinting
+    - Revocaci├│n individual con tracking
+    - Auto-expiraci├│n
+    - Tracking de IP y uso
+    """
+    
+    __tablename__ = "refresh_tokens"
+    
+    # User relationship
+    user_id: Mapped[uuid.UUID] = mapped_column(
+        UUID(as_uuid=True),
+        ForeignKey("users.id", ondelete="CASCADE"),
+        nullable=False,
+        index=True
+    )
+    
+    # Token JWT (almacenado directamente - firmado y verificable)
+    # VARCHAR(500) para acomodar JWTs con payload extenso
+    token: Mapped[str] = mapped_column(
+        String(500),
+        nullable=False,
+        unique=True
+    )
+    
+    # Device information
+    device_id: Mapped[Optional[str]] = mapped_column(
+        String(100),
+        nullable=True
+    )
+    
+    device_name: Mapped[Optional[str]] = mapped_column(
+        String(200),
+        nullable=True
+    )
+    
+    user_agent: Mapped[Optional[str]] = mapped_column(
+        String(500),
+        nullable=True
+    )
+    
+    # IP address del cliente (varchar(45) para IPv6)
+    ip_address: Mapped[Optional[str]] = mapped_column(
+        String(45),
+        nullable=True
+    )
+    
+    # Expiraci├│n del token
+    expires_at: Mapped[datetime] = mapped_column(
+        DateTime(timezone=True),
+        nullable=False,
+        index=True
+    )
+    
+    # Estado de revocaci├│n
+    revoked: Mapped[bool] = mapped_column(
+        Boolean,
+        default=False,
+        nullable=False
+    )
+    
+    revoked_at: Mapped[Optional[datetime]] = mapped_column(
+        DateTime(timezone=True),
+        nullable=True
+    )
+    
+    revoked_by: Mapped[Optional[uuid.UUID]] = mapped_column(
+        UUID(as_uuid=True),
+        ForeignKey("users.id", ondelete="SET NULL"),
+        nullable=True
+    )
+    
+    # Tracking de uso
+    last_used_at: Mapped[Optional[datetime]] = mapped_column(
+        DateTime(timezone=True),
+        nullable=True
+    )
+    
+    usage_count: Mapped[int] = mapped_column(
+        Integer,
+        default=0,
+        nullable=False
+    )
+    
+    # Timestamps
+    created_at: Mapped[datetime] = mapped_column(
+        DateTime(timezone=True),
+        default=datetime.utcnow,
+        nullable=False,
+        server_default="NOW()"
+    )
+    
+    updated_at: Mapped[datetime] = mapped_column(
+        DateTime(timezone=True),
+        default=datetime.utcnow,
+        onupdate=datetime.utcnow,
+        nullable=False,
+        server_default="NOW()"
+    )
+    
+    # Relaci├│n con usuario
+    user: Mapped["User"] = relationship("User", foreign_keys=[user_id], back_populates="refresh_tokens")
+    revoker: Mapped[Optional["User"]] = relationship("User", foreign_keys=[revoked_by])
+    
+    # Índices compuestos
+    __table_args__ = (
+        Index('idx_refresh_tokens_user_expires', 'user_id', 'expires_at'),
+    )
+    
+    def __repr__(self) -> str:
+        return f"<RefreshToken(user_id='{self.user_id}', revoked={self.revoked}, expires={self.expires_at})>"
+    
+    @property
+    def is_valid(self) -> bool:
+        """
+        Verificar si el token es válido.
+        
+        Un token es válido si:
+        - No está revocado
+        - No ha expirado
+        """
+        return not self.revoked and self.expires_at > datetime.utcnow()
+    
+    @property
+    def is_expired(self) -> bool:
+        """Verificar si el token ha expirado."""
+        return datetime.utcnow() >= self.expires_at
+    
+    def revoke(self, revoked_by: Optional[uuid.UUID] = None) -> None:
+        """
+        Marcar el token como revocado.
+        
+        Args:
+            revoked_by: ID del usuario que revoc├│ el token
+        """
+        self.revoked = True
+        self.revoked_at = datetime.utcnow()
+        if revoked_by:
+            self.revoked_by = revoked_by
+    
+    def track_usage(self) -> None:
+        """Registrar uso del token."""
+        self.last_used_at = datetime.utcnow()
+        self.usage_count += 1

backend/app/models/system.py

@@ -1,25 +1,43 @@
-
 """
 System Model - ServiceManagerWeb
+Sistemas afectados por tenant
 """
-from sqlalchemy import String, Text, Boolean
+from sqlalchemy import String, Text, Boolean, ForeignKey, UniqueConstraint
 from sqlalchemy.orm import Mapped, mapped_column, relationship
+from sqlalchemy.dialects.postgresql import UUID
 from typing import List, Optional
 import uuid
 
 from app.core.database import Base
 
 class System(Base):
-    __tablename__ = "systems"
+    """Modelo de sistemas afectados (affected_systems en BD)"""
+    __tablename__ = "affected_systems"  # ✅ CORREGIDO: nombre correcto de tabla
     
+    # Campos básicos
     name: Mapped[str] = mapped_column(String(100), nullable=False)
-    description: Mapped[Optional[str]] = mapped_column(Text)
-    is_active: Mapped[bool] = mapped_column(Boolean, default=True)
+    description: Mapped[Optional[str]] = mapped_column(Text, nullable=True)
+    is_active: Mapped[bool] = mapped_column(Boolean, default=True, nullable=False)
+    
+    # ✅ AÑADIDO: tenant_id obligatorio para multi-tenancy (faltaba completamente)
+    tenant_id: Mapped[uuid.UUID] = mapped_column(
+        UUID(as_uuid=True), 
+        ForeignKey("tenants.id", ondelete="CASCADE"), 
+        nullable=False
+    )
     
     # Relationships
-    # If we want tickets to link to systems, we will add relationship in Ticket later or now.
-    # We will assume Ticket links to System.
-    tickets: Mapped[List["Ticket"]] = relationship("Ticket", back_populates="system")
+    # ✅ ACTUALIZADO: nombre de relación a affected_system
+    tickets: Mapped[List["Ticket"]] = relationship(
+        "Ticket", 
+        back_populates="affected_system"  # ✅ Nombre actualizado
+    )
+    tenant: Mapped["Tenant"] = relationship("Tenant")
+    
+    # ✅ AÑADIDO: Constraint único por tenant (no puede haber sistemas duplicados en el mismo tenant)
+    __table_args__ = (
+        UniqueConstraint('tenant_id', 'name', name='uq_affected_systems_tenant_name'),
+    )
 
     def __repr__(self) -> str:
-        return f"<System(id={self.id}, name='{self.name}')>"
+        return f"<System(id={self.id}, name='{self.name}', tenant_id={self.tenant_id})>"

backend/app/models/tenant.py

@@ -1,9 +1,7 @@
 """
 Tenant Model - ServiceManagerWeb
-
 Modelo para organizaciones cliente (multi-tenancy)
 """
-
 from sqlalchemy import String, Integer, Text, Boolean, ARRAY
 from sqlalchemy.orm import Mapped, mapped_column, relationship
 from sqlalchemy.dialects.postgresql import UUID, ENUM
@@ -13,17 +11,14 @@ import uuid
 
 from app.core.database import Base
 
-
 class TenantStatus(str, enum.Enum):
     """Estados de un tenant."""
     ACTIVE = "active"
     SUSPENDED = "suspended"
     INACTIVE = "inactive"
 
-
 class Tenant(Base):
     """Modelo de Tenant (Organización cliente)."""
-    
     __tablename__ = "tenants"
     
     # Información básica
@@ -58,11 +53,8 @@ class Tenant(Base):
     # Relaciones
     users: Mapped[List["User"]] = relationship("User", back_populates="tenant")
     tickets: Mapped[List["Ticket"]] = relationship("Ticket", back_populates="tenant")
+    categories: Mapped[List["Category"]] = relationship("Category", back_populates="tenant")  # ✅ CORREGIDO: Era "TicketCategory"
+    client_profile: Mapped[Optional["ClientProfile"]] = relationship("ClientProfile", back_populates="tenant", uselist=False)
     
     def __repr__(self) -> str:
         return f"<Tenant(id={self.id}, name='{self.name}', slug='{self.slug}')>"
-    
-    @property
-    def is_active(self) -> bool:
-        """Check if tenant is active."""
-        return self.status == TenantStatus.ACTIVE

backend/app/models/ticket.py

@@ -1,56 +1,112 @@
 """
 Ticket Model - ServiceManagerWeb
+Tickets de soporte - Core del negocio
 """
-from sqlalchemy import String, ForeignKey, Text
+from sqlalchemy import String, ForeignKey, Text, Integer, CheckConstraint, UniqueConstraint
 from sqlalchemy.orm import Mapped, mapped_column, relationship
 from sqlalchemy.dialects.postgresql import UUID, ENUM
 from typing import Optional
+from datetime import datetime
 import enum
 import uuid
 
 from app.core.database import Base
 
 class TicketStatus(str, enum.Enum):
+    """Estados posibles de un ticket"""
     NEW = "NEW"
     TRIAGE = "TRIAGE"
     IN_PROGRESS = "IN_PROGRESS"
-    WAITING_FOR_CLIENT = "WAITING_FOR_CLIENT"
+    WAITING_CUSTOMER = "WAITING_CUSTOMER"  # ✅ CORREGIDO: nombre según schema.sql
     RESOLVED = "RESOLVED"
     CLOSED = "CLOSED"
     REOPENED = "REOPENED"
 
 class TicketPriority(str, enum.Enum):
+    """Prioridades posibles de un ticket"""
     LOW = "LOW"
     MEDIUM = "MEDIUM"
     HIGH = "HIGH"
     URGENT = "URGENT"
 
 class Ticket(Base):
+    """Modelo de tickets de soporte"""
     __tablename__ = "tickets"
     
-    # Note: id, created_at, updated_at are inherited from Base
-    
-    tenant_id: Mapped[uuid.UUID] = mapped_column(UUID(as_uuid=True), ForeignKey("tenants.id", ondelete="CASCADE"), nullable=False)
+    # Multi-tenancy
+    tenant_id: Mapped[uuid.UUID] = mapped_column(
+        UUID(as_uuid=True), 
+        ForeignKey("tenants.id", ondelete="CASCADE"), 
+        nullable=False
+    )
     
+    # Campos básicos
     ticket_number: Mapped[str] = mapped_column(String(20), nullable=False)
     subject: Mapped[str] = mapped_column(String(255), nullable=False)
     description: Mapped[str] = mapped_column(Text, nullable=False)
     
-    status: Mapped[TicketStatus] = mapped_column(ENUM(TicketStatus, name="ticket_status_enum", create_type=False), default=TicketStatus.NEW)
-    priority: Mapped[TicketPriority] = mapped_column(ENUM(TicketPriority, name="ticket_priority_enum", create_type=False), default=TicketPriority.MEDIUM)
+    # Estado y Prioridad
+    status: Mapped[TicketStatus] = mapped_column(
+        ENUM(TicketStatus, name="ticket_status_enum", create_type=False), 
+        default=TicketStatus.NEW,
+        nullable=False
+    )
+    priority: Mapped[TicketPriority] = mapped_column(
+        ENUM(TicketPriority, name="ticket_priority_enum", create_type=False), 
+        default=TicketPriority.MEDIUM,
+        nullable=False
+    )
     
-    # Foreign Keys
-    created_by: Mapped[uuid.UUID] = mapped_column(UUID(as_uuid=True), ForeignKey("users.id"), nullable=False)
-    assigned_to: Mapped[Optional[uuid.UUID]] = mapped_column(UUID(as_uuid=True), ForeignKey("users.id"), nullable=True)
+    # ✅ CORREGIDO: Foreign Keys apuntan a tablas correctas
+    created_by: Mapped[uuid.UUID] = mapped_column(
+        UUID(as_uuid=True), 
+        ForeignKey("users.id"), 
+        nullable=False
+    )
+    assigned_to: Mapped[Optional[uuid.UUID]] = mapped_column(
+        UUID(as_uuid=True), 
+        ForeignKey("users.id"), 
+        nullable=True
+    )
     
-    system_id: Mapped[Optional[uuid.UUID]] = mapped_column(UUID(as_uuid=True), ForeignKey("systems.id"), nullable=True)
-    category_id: Mapped[Optional[uuid.UUID]] = mapped_column(UUID(as_uuid=True), ForeignKey("categories.id"), nullable=True)
+    # ✅ CORREGIDO: Renombrado de system_id a affected_system_id
+    affected_system_id: Mapped[Optional[uuid.UUID]] = mapped_column(
+        UUID(as_uuid=True), 
+        ForeignKey("affected_systems.id"),  # ✅ Tabla correcta
+        nullable=True
+    )
+    
+    # ✅ CORREGIDO: Foreign key a tabla correcta
+    category_id: Mapped[Optional[uuid.UUID]] = mapped_column(
+        UUID(as_uuid=True), 
+        ForeignKey("ticket_categories.id"),  # ✅ Tabla correcta
+        nullable=True
+    )
+    
+    # ✅ AÑADIDOS: Campos de SLA según schema.sql
+    sla_response_due: Mapped[Optional[datetime]] = mapped_column(nullable=True)
+    sla_resolution_due: Mapped[Optional[datetime]] = mapped_column(nullable=True)
+    first_response_at: Mapped[Optional[datetime]] = mapped_column(nullable=True)
+    resolved_at: Mapped[Optional[datetime]] = mapped_column(nullable=True)
+    
+    # ✅ AÑADIDOS: Campos de CSAT (Customer Satisfaction) según schema.sql
+    rating: Mapped[Optional[int]] = mapped_column(Integer, nullable=True)
+    rating_comment: Mapped[Optional[str]] = mapped_column(Text, nullable=True)
+    rated_at: Mapped[Optional[datetime]] = mapped_column(nullable=True)
 
     # Relationships
     tenant: Mapped["Tenant"] = relationship("Tenant", back_populates="tickets")
     
-    system: Mapped["System"] = relationship("System", back_populates="tickets")
-    category: Mapped["Category"] = relationship("Category", back_populates="tickets")
+    # ✅ ACTUALIZADO: Nombre de relación y optional
+    affected_system: Mapped[Optional["System"]] = relationship(
+        "System", 
+        back_populates="tickets"
+    )
+    
+    category: Mapped[Optional["Category"]] = relationship(
+        "Category", 
+        back_populates="tickets"
+    )
     
     created_by_user: Mapped["User"] = relationship(
         "User", 
@@ -63,3 +119,24 @@ class Ticket(Base):
         foreign_keys=[assigned_to], 
         back_populates="assigned_tickets"
     )
+
+    comments: Mapped[list["TicketComment"]] = relationship(
+        "TicketComment",
+        back_populates="ticket",
+        cascade="all, delete-orphan"
+    )
+    
+    attachments: Mapped[list["TicketAttachment"]] = relationship(
+        "TicketAttachment",
+        back_populates="ticket",
+        cascade="all, delete-orphan"
+    )
+    
+    # ✅ AÑADIDOS: Constraints según schema.sql
+    __table_args__ = (
+        UniqueConstraint('tenant_id', 'ticket_number', name='uq_tickets_tenant_number'),
+        CheckConstraint('rating >= 1 AND rating <= 5', name='check_rating_range'),
+    )
+
+    def __repr__(self) -> str:
+        return f"<Ticket(id={self.id}, number='{self.ticket_number}', status={self.status})>"

backend/app/models/user.py

@@ -48,7 +48,7 @@ class User(Base):
     
     # Autenticación
     password_hash: Mapped[str] = mapped_column(String(255), nullable=False)
-    role: Mapped[UserRole] = mapped_column(ENUM(UserRole), nullable=False)
+    role: Mapped[UserRole] = mapped_column(ENUM(UserRole, name="user_role_enum"), nullable=False)
     
     # 2FA (opcional para staff interno)
     totp_secret: Mapped[Optional[str]] = mapped_column(String(32))
@@ -78,6 +78,12 @@ class User(Base):
         back_populates="assigned_to_user", 
         foreign_keys="Ticket.assigned_to"
     )
+    refresh_tokens: Mapped[List["RefreshToken"]] = relationship(
+        "RefreshToken",
+        back_populates="user",
+        foreign_keys="RefreshToken.user_id",
+        cascade="all, delete-orphan"
+    )
     
     # Unique constraint por tenant
     __table_args__ = (

backend/app/services/audit_service.py

@@ -0,0 +1,311 @@
+"""
+Audit Service - ServiceManagerWeb
+
+Funciones helper para facilitar el registro de auditoría.
+Simplifica el proceso de logging en toda la aplicaci├│n.
+"""
+
+from typing import Optional, Dict, Any
+from sqlalchemy.ext.asyncio import AsyncSession
+from fastapi import Request
+import uuid
+import structlog
+
+from app.models.audit import AuditLog
+from app.models.user import User
+
+logger = structlog.get_logger(__name__)
+
+
+class AuditService:
+    """
+    Servicio centralizado para registro de auditoría.
+    
+    Uso básico:
+        await AuditService.log(
+            db=db,
+            tenant_id=tenant.id,
+            user_id=current_user.id,
+            action="ticket.create",
+            resource_type="ticket",
+            resource_id=new_ticket.id,
+            new_values={"subject": "...", "status": "NEW"}
+        )
+    """
+    
+    @staticmethod
+    async def log(
+        db: AsyncSession,
+        tenant_id: uuid.UUID,
+        action: str,
+        resource_type: str,
+        resource_id: Optional[uuid.UUID] = None,
+        user_id: Optional[uuid.UUID] = None,
+        old_values: Optional[Dict[str, Any]] = None,
+        new_values: Optional[Dict[str, Any]] = None,
+        metadata: Optional[Dict[str, Any]] = None,
+        request: Optional[Request] = None
+    ) -> AuditLog:
+        """
+        Registra una acción en la bitácora de auditoría.
+        
+        Args:
+            db: Sesi├│n de base de datos
+            tenant_id: ID del tenant
+            action: Acci├│n realizada (formato: "recurso.verbo")
+                   Ejemplos: "user.login", "ticket.create", "ticket.assign"
+            resource_type: Tipo de recurso ("user", "ticket", "comment", etc.)
+            resource_id: ID del recurso afectado (opcional)
+            user_id: ID del usuario que ejecut├│ la acci├│n (opcional = sistema)
+            old_values: Valores antes del cambio (opcional)
+            new_values: Valores despu├®s del cambio (opcional)
+            metadata: Informaci├│n adicional (opcional)
+            request: Request de FastAPI para extraer IP y user agent (opcional)
+            
+        Returns:
+            AuditLog creado
+        """
+        # Extraer información del request si está disponible
+        ip_address = None
+        user_agent = None
+        correlation_id = None
+        
+        if request:
+            # IP del cliente
+            if request.client:
+                ip_address = request.client.host
+            
+            # User agent
+            user_agent = request.headers.get("user-agent")
+            
+            # Correlation ID (si existe en el request state)
+            correlation_id = getattr(request.state, "correlation_id", None)
+        
+        # Crear registro de auditoría
+        audit_log = AuditLog(
+            tenant_id=tenant_id,
+            user_id=user_id,
+            action=action,
+            resource_type=resource_type,
+            resource_id=resource_id,
+            ip_address=ip_address,
+            user_agent=user_agent,
+            correlation_id=correlation_id,
+            old_values=old_values,
+            new_values=new_values,
+            extra_metadata=metadata  # Mapeo metadata -> extra_metadata
+        )
+        
+        db.add(audit_log)
+        await db.flush()  # No commit, se hará con la transacción principal
+        
+        # Log estructurado para debugging
+        logger.info(
+            "Audit log created",
+            action=action,
+            resource_type=resource_type,
+            resource_id=str(resource_id) if resource_id else None,
+            user_id=str(user_id) if user_id else "system",
+            tenant_id=str(tenant_id)
+        )
+        
+        return audit_log
+    
+    @staticmethod
+    async def log_login(
+        db: AsyncSession,
+        user: User,
+        request: Request,
+        success: bool = True
+    ) -> AuditLog:
+        """
+        Registra un intento de login.
+        
+        Args:
+            db: Sesi├│n de base de datos
+            user: Usuario que intent├│ loguearse
+            request: Request de FastAPI
+            success: Si el login fue exitoso
+            
+        Returns:
+            AuditLog creado
+        """
+        return await AuditService.log(
+            db=db,
+            tenant_id=user.tenant_id,
+            user_id=user.id if success else None,
+            action="user.login" if success else "user.login_failed",
+            resource_type="user",
+            resource_id=user.id,
+            metadata={
+                "success": success,
+                "email": user.email
+            },
+            request=request
+        )
+    
+    @staticmethod
+    async def log_logout(
+        db: AsyncSession,
+        user: User,
+        request: Request
+    ) -> AuditLog:
+        """
+        Registra un logout.
+        
+        Args:
+            db: Sesi├│n de base de datos
+            user: Usuario que cerr├│ sesi├│n
+            request: Request de FastAPI
+            
+        Returns:
+            AuditLog creado
+        """
+        return await AuditService.log(
+            db=db,
+            tenant_id=user.tenant_id,
+            user_id=user.id,
+            action="user.logout",
+            resource_type="user",
+            resource_id=user.id,
+            request=request
+        )
+    
+    @staticmethod
+    async def log_create(
+        db: AsyncSession,
+        tenant_id: uuid.UUID,
+        user_id: uuid.UUID,
+        resource_type: str,
+        resource_id: uuid.UUID,
+        new_values: Dict[str, Any],
+        request: Optional[Request] = None
+    ) -> AuditLog:
+        """
+        Registra la creaci├│n de un recurso.
+        
+        Args:
+            db: Sesi├│n de base de datos
+            tenant_id: ID del tenant
+            user_id: ID del usuario que cre├│ el recurso
+            resource_type: Tipo de recurso ("ticket", "user", etc.)
+            resource_id: ID del recurso creado
+            new_values: Valores del nuevo recurso
+            request: Request de FastAPI (opcional)
+            
+        Returns:
+            AuditLog creado
+        """
+        return await AuditService.log(
+            db=db,
+            tenant_id=tenant_id,
+            user_id=user_id,
+            action=f"{resource_type}.create",
+            resource_type=resource_type,
+            resource_id=resource_id,
+            new_values=new_values,
+            request=request
+        )
+    
+    @staticmethod
+    async def log_update(
+        db: AsyncSession,
+        tenant_id: uuid.UUID,
+        user_id: uuid.UUID,
+        resource_type: str,
+        resource_id: uuid.UUID,
+        old_values: Dict[str, Any],
+        new_values: Dict[str, Any],
+        request: Optional[Request] = None
+    ) -> AuditLog:
+        """
+        Registra la actualizaci├│n de un recurso.
+        
+        Args:
+            db: Sesi├│n de base de datos
+            tenant_id: ID del tenant
+            user_id: ID del usuario que actualiz├│
+            resource_type: Tipo de recurso
+            resource_id: ID del recurso
+            old_values: Valores anteriores
+            new_values: Valores nuevos
+            request: Request de FastAPI (opcional)
+            
+        Returns:
+            AuditLog creado
+        """
+        return await AuditService.log(
+            db=db,
+            tenant_id=tenant_id,
+            user_id=user_id,
+            action=f"{resource_type}.update",
+            resource_type=resource_type,
+            resource_id=resource_id,
+            old_values=old_values,
+            new_values=new_values,
+            request=request
+        )
+    
+    @staticmethod
+    async def log_delete(
+        db: AsyncSession,
+        tenant_id: uuid.UUID,
+        user_id: uuid.UUID,
+        resource_type: str,
+        resource_id: uuid.UUID,
+        old_values: Dict[str, Any],
+        request: Optional[Request] = None
+    ) -> AuditLog:
+        """
+        Registra la eliminaci├│n de un recurso.
+        
+        Args:
+            db: Sesi├│n de base de datos
+            tenant_id: ID del tenant
+            user_id: ID del usuario que elimin├│
+            resource_type: Tipo de recurso
+            resource_id: ID del recurso eliminado
+            old_values: Valores del recurso antes de eliminar
+            request: Request de FastAPI (opcional)
+            
+        Returns:
+            AuditLog creado
+        """
+        return await AuditService.log(
+            db=db,
+            tenant_id=tenant_id,
+            user_id=user_id,
+            action=f"{resource_type}.delete",
+            resource_type=resource_type,
+            resource_id=resource_id,
+            old_values=old_values,
+            request=request
+        )
+    
+    @staticmethod
+    def sanitize_values(values: Dict[str, Any]) -> Dict[str, Any]:
+        """
+        Sanitiza valores sensibles antes de guardarlos en audit log.
+        
+        Remueve campos como passwords, tokens, etc.
+        
+        Args:
+            values: Diccionario de valores
+            
+        Returns:
+            Diccionario sanitizado
+        """
+        sensitive_fields = {
+            'password',
+            'password_hash',
+            'totp_secret',
+            'backup_codes',
+            'token',
+            'access_token',
+            'refresh_token'
+        }
+        
+        return {
+            key: '***REDACTED***' if key in sensitive_fields else value
+            for key, value in values.items()
+        }

backend/app/services/token_service.py

@@ -0,0 +1,270 @@
+"""
+Token Service - ServiceManagerWeb
+
+Servicio para gesti├│n de refresh tokens persistentes.
+"""
+
+from sqlalchemy.ext.asyncio import AsyncSession
+from sqlalchemy import select, delete
+from datetime import datetime, timedelta
+from typing import Optional
+import uuid
+import structlog
+
+from app.models.refresh_token import RefreshToken
+from app.models.user import User
+from app.core.config import get_settings
+
+logger = structlog.get_logger(__name__)
+settings = get_settings()
+
+
+class TokenService:
+    """
+    Servicio para gesti├│n de refresh tokens.
+    
+    Proporciona m├®todos para crear, validar, revocar y limpiar
+    refresh tokens persistentes.
+    
+    NOTA: Los tokens se almacenan directamente en BD (no hash)
+    ya que los JWTs son firmados y verificables.
+    """
+    
+    @staticmethod
+    async def create_refresh_token(
+        db: AsyncSession,
+        user: User,
+        refresh_token: str,
+        device_id: Optional[str] = None,
+        device_name: Optional[str] = None,
+        user_agent: Optional[str] = None,
+        ip_address: Optional[str] = None
+    ) -> RefreshToken:
+        """
+        Crear y persistir un refresh token.
+        
+        Args:
+            db: Sesi├│n de base de datos
+            user: Usuario propietario del token
+            refresh_token: Token JWT generado (se almacena directamente)
+            device_id: ID ├║nico del dispositivo (UUID generado por cliente)
+            device_name: Nombre del dispositivo (ej: "Chrome en Windows")
+            user_agent: User agent completo del navegador
+            ip_address: IP del cliente
+            
+        Returns:
+            RefreshToken creado
+        """
+        # Calcular expiraci├│n
+        expires_at = datetime.utcnow() + timedelta(
+            days=settings.REFRESH_TOKEN_EXPIRE_DAYS
+        )
+        
+        # Crear registro - almacena JWT directamente (columna UNIQUE)
+        db_token = RefreshToken(
+            user_id=user.id,
+            token=refresh_token,  # JWT almacenado directamente
+            device_id=device_id,
+            device_name=device_name,
+            user_agent=user_agent,
+            ip_address=ip_address,
+            expires_at=expires_at,
+            revoked=False,
+            usage_count=0
+        )
+        
+        db.add(db_token)
+        await db.flush()
+        
+        logger.info(
+            "Refresh token created",
+            user_id=str(user.id),
+            token_id=str(db_token.id),
+            device_name=device_name,
+            expires_at=expires_at.isoformat()
+        )
+        
+        return db_token
+    
+    @staticmethod
+    async def verify_refresh_token(
+        db: AsyncSession,
+        refresh_token: str
+    ) -> Optional[RefreshToken]:
+        """
+        Verificar que el refresh token exista y sea válido.
+        
+        Busca el JWT directamente en la BD y verifica su estado.
+        
+        Args:
+            db: Sesi├│n de base de datos
+            refresh_token: Token JWT a verificar
+            
+        Returns:
+            RefreshToken si es válido, None si no existe o está revocado/expirado
+        """
+        # Buscar token directamente en BD (sin hash)
+        query = select(RefreshToken).where(
+            RefreshToken.token == refresh_token
+        )
+        result = await db.execute(query)
+        db_token = result.scalar_one_or_none()
+        
+        if not db_token:
+            logger.warning("Refresh token not found in database")
+            return None
+        
+        # Verificar si es válido (usa property is_valid del modelo)
+        if not db_token.is_valid:
+            logger.warning(
+                "Invalid refresh token",
+                token_id=str(db_token.id),
+                revoked=db_token.revoked,
+                expired=db_token.is_expired
+            )
+            return None
+        
+        # Actualizar estadísticas de uso
+        db_token.track_usage()
+        await db.flush()
+        
+        logger.info(
+            "Refresh token verified and usage tracked",
+            token_id=str(db_token.id),
+            usage_count=db_token.usage_count
+        )
+        return db_token
+    
+    @staticmethod
+    async def revoke_token(
+        db: AsyncSession,
+        refresh_token: str,
+        revoked_by_user_id: Optional[uuid.UUID] = None
+    ) -> bool:
+        """
+        Revocar un refresh token específico.
+        
+        Args:
+            db: Sesi├│n de base de datos
+            refresh_token: Token JWT a revocar
+            revoked_by_user_id: ID del usuario que revoca (para auditoría)
+            
+        Returns:
+            True si se revoc├│, False si no se encontr├│
+        """
+        # Buscar token directamente (sin hash)
+        query = select(RefreshToken).where(
+            RefreshToken.token == refresh_token
+        )
+        result = await db.execute(query)
+        db_token = result.scalar_one_or_none()
+        
+        if not db_token:
+            logger.warning("Refresh token not found for revocation")
+            return False
+        
+        # Revocar usando m├®todo del modelo
+        db_token.revoke(revoked_by=revoked_by_user_id)
+        await db.flush()
+        
+        logger.info(
+            "Refresh token revoked",
+            token_id=str(db_token.id),
+            revoked_by=str(revoked_by_user_id) if revoked_by_user_id else None
+        )
+        return True
+    
+    @staticmethod
+    async def revoke_all_user_tokens(
+        db: AsyncSession,
+        user_id: uuid.UUID,
+        revoked_by_user_id: Optional[uuid.UUID] = None
+    ) -> int:
+        """
+        Revocar todos los tokens activos de un usuario.
+        
+        Útil para logout en todos los dispositivos.
+        
+        Args:
+            db: Sesi├│n de base de datos
+            user_id: ID del usuario
+            revoked_by_user_id: ID del usuario que ejecuta la revocación (para auditoría)
+            
+        Returns:
+            N├║mero de tokens revocados
+        """
+        # Buscar todos los tokens activos del usuario
+        query = select(RefreshToken).where(
+            RefreshToken.user_id == user_id,
+            RefreshToken.revoked == False
+        )
+        result = await db.execute(query)
+        tokens = result.scalars().all()
+        
+        count = 0
+        for token in tokens:
+            token.revoke(revoked_by=revoked_by_user_id)
+            count += 1
+        
+        await db.flush()
+        
+        logger.info(
+            "All user tokens revoked",
+            user_id=str(user_id),
+            count=count,
+            revoked_by=str(revoked_by_user_id) if revoked_by_user_id else None
+        )
+        return count
+    
+    @staticmethod
+    async def cleanup_expired_tokens(
+        db: AsyncSession
+    ) -> int:
+        """
+        Eliminar tokens expirados de la base de datos.
+        
+        Tarea de mantenimiento para limpiar tokens antiguos.
+        
+        Args:
+            db: Sesi├│n de base de datos
+            
+        Returns:
+            N├║mero de tokens eliminados
+        """
+        # Eliminar tokens expirados hace más de 7 días
+        cutoff_date = datetime.utcnow() - timedelta(days=7)
+        
+        query = delete(RefreshToken).where(
+            RefreshToken.expires_at < cutoff_date
+        )
+        result = await db.execute(query)
+        await db.flush()
+        
+        deleted_count = result.rowcount
+        
+        logger.info("Expired tokens cleaned up", count=deleted_count)
+        return deleted_count
+    
+    @staticmethod
+    async def get_user_tokens(
+        db: AsyncSession,
+        user_id: uuid.UUID
+    ) -> list[RefreshToken]:
+        """
+        Obtener todos los tokens activos de un usuario.
+        
+        Args:
+            db: Sesi├│n de base de datos
+            user_id: ID del usuario
+            
+        Returns:
+            Lista de RefreshTokens activos
+        """
+        query = select(RefreshToken).where(
+            RefreshToken.user_id == user_id,
+            RefreshToken.revoked == False,
+            RefreshToken.expires_at > datetime.utcnow()
+        ).order_by(RefreshToken.created_at.desc())
+        
+        result = await db.execute(query)
+        return list(result.scalars().all())

backend/check_tenants.py

@@ -0,0 +1,35 @@
+"""
+Utility script to list all tenants in the database
+"""
+import asyncio
+from sqlalchemy import select
+from app.core.database import AsyncSessionLocal
+from app.models.tenant import Tenant
+
+async def list_tenants():
+    """List all tenants with their details."""
+    async with AsyncSessionLocal() as db:
+        result = await db.execute(select(Tenant))
+        tenants = result.scalars().all()
+        
+        print("\n" + "="*60)
+        print("📋 TENANTS EN LA BASE DE DATOS")
+        print("="*60 + "\n")
+        
+        if not tenants:
+            print("⚠️  No hay tenants en la base de datos\n")
+            print("💡 Ejecuta las migraciones o crea un tenant manualmente")
+            return
+        
+        for tenant in tenants:
+            print(f"Slug:   {tenant.slug}")
+            print(f"Nombre: {tenant.name}")
+            print(f"Status: {tenant.status}")
+            print(f"Email:  {tenant.contact_email or 'N/A'}")
+            print(f"ID:     {tenant.id}")
+            print("-" * 60)
+        
+        print(f"\nTotal: {len(tenants)} tenant(s)\n")
+
+if __name__ == "__main__":
+    asyncio.run(list_tenants())

backend/create_test_user.py

@@ -0,0 +1,67 @@
+"""
+Script para crear/actualizar usuario de prueba con contraseña conocida
+"""
+import asyncio
+from sqlalchemy import select, update
+from app.core.database import AsyncSessionLocal
+from app.core.security import security
+from app.models.user import User, UserRole
+from app.models.tenant import Tenant
+import uuid
+
+async def create_test_user():
+    async with AsyncSessionLocal() as db:
+        # Buscar tenant
+        tenant_query = select(Tenant).where(Tenant.slug.like('%aduanasoft%')).limit(1)
+        result = await db.execute(tenant_query)
+        tenant = result.scalar_one_or_none()
+        
+        if not tenant:
+            print("❌ No se encontró tenant")
+            return
+        
+        print(f"✅ Tenant encontrado: {tenant.name} ({tenant.slug})")
+        
+        # Buscar o crear usuario admin
+        user_query = select(User).where(
+            User.email == "admin@aduanasoft.com",
+            User.tenant_id == tenant.id
+        )
+        result = await db.execute(user_query)
+        user = result.scalar_one_or_none()
+        
+        # Hash de la contraseña "admin123"
+        password_hash = security.hash_password("admin123")
+        
+        if user:
+            # Actualizar contraseña
+            user.password_hash = password_hash
+            user.is_active = True
+            user.email_verified = True
+            await db.commit()
+            print(f"✅ Usuario actualizado: {user.email}")
+        else:
+            # Crear usuario nuevo
+            user = User(
+                id=uuid.uuid4(),
+                tenant_id=tenant.id,
+                email="admin@aduanasoft.com",
+                first_name="Admin",
+                last_name="Sistema",
+                password_hash=password_hash,
+                role=UserRole.ADMIN,
+                is_active=True,
+                email_verified=True
+            )
+            db.add(user)
+            await db.commit()
+            print(f"✅ Usuario creado: {user.email}")
+        
+        print(f"\n📋 Credenciales de prueba:")
+        print(f"   Email: admin@aduanasoft.com")
+        print(f"   Password: admin123")
+        print(f"   Tenant: {tenant.slug}")
+        print(f"   Role: ADMIN")
+
+if __name__ == "__main__":
+    asyncio.run(create_test_user())

backend/fix_password_script.py

@@ -1,41 +0,0 @@
-
-import asyncio
-import sys
-import os
-
-# Add parent directory to path so we can import 'app'
-sys.path.append(os.path.dirname(os.path.abspath(__file__)))
-
-from sqlalchemy import select
-from app.core.database import AsyncSessionLocal
-from app.models.tenant import Tenant  # Import Tenant to register it
-from app.models.ticket import Ticket  # Import Ticket to register it
-from app.models.user import User
-from app.core.security import SecurityUtils
-
-async def fix_password():
-    async with AsyncSessionLocal() as session:
-        # Find the admin user
-        email = "admin@aduanasoft.com"
-        result = await session.execute(select(User).where(User.email == email))
-        user = result.scalar_one_or_none()
-        
-        if user:
-            print(f"User {email} found.")
-            # Reset password to 'admin123'
-            new_password = "admin123"
-            hashed = SecurityUtils.hash_password(new_password)
-            user.password_hash = hashed
-            
-            try:
-                await session.commit()
-                print(f"Password for {email} updated successfully!")
-                print(f"New password is: {new_password}")
-            except Exception as e:
-                await session.rollback()
-                print(f"Error updating password: {e}")
-        else:
-            print(f"User {email} not found!")
-
-if __name__ == "__main__":
-    asyncio.run(fix_password())

backend/migrations/env.py

@@ -0,0 +1,68 @@
+from logging.config import fileConfig
+import os
+from sqlalchemy import create_engine, pool
+from sqlalchemy.engine import engine_from_config
+from alembic import context
+
+# Import Base and all models
+from app.core.database import Base
+from app.models import tenant  # Import all models explicitly
+
+# Alembic Config object
+config = context.config
+
+# Logging configuration
+if config.config_file_name:
+    fileConfig(config.config_file_name)
+
+# Get DATABASE_URL and convert to synchronous
+DATABASE_URL = os.getenv("DATABASE_URL")
+if not DATABASE_URL:
+    raise RuntimeError("DATABASE_URL environment variable is not set")
+
+SYNC_DATABASE_URL = DATABASE_URL.replace("+asyncpg", "")
+
+# Metadata for autogenerate
+target_metadata = Base.metadata
+
+
+def run_migrations_offline():
+    """
+    Run migrations in 'offline' mode.
+    """
+    context.configure(
+        url=SYNC_DATABASE_URL,
+        target_metadata=target_metadata,
+        literal_binds=True,
+        dialect_opts={"paramstyle": "named"},
+    )
+
+    with context.begin_transaction():
+        context.run_migrations()
+
+
+def run_migrations_online():
+    """
+    Run migrations in 'online' mode.
+    """
+    # Fetch the URL from Alembic configuration
+    alembic_config = config.get_section(config.config_ini_section)
+    alembic_config["sqlalchemy.url"] = SYNC_DATABASE_URL
+
+    connectable = engine_from_config(
+        alembic_config,
+        prefix="sqlalchemy.",
+        poolclass=pool.NullPool,
+    )
+
+    with connectable.connect() as connection:
+        context.configure(connection=connection, target_metadata=target_metadata)
+
+        with context.begin_transaction():
+            context.run_migrations()
+
+
+if context.is_offline_mode():
+    run_migrations_offline()
+else:
+    run_migrations_online()

backend/migrations/script.py.mako

@@ -0,0 +1,24 @@
+"""${message}
+
+Revision ID: ${up_revision}
+Revises: ${down_revision | comma,n}
+Create Date: ${create_date}
+
+"""
+from alembic import op
+import sqlalchemy as sa
+${imports if imports else ""}
+
+# revision identifiers, used by Alembic.
+revision = ${repr(up_revision)}
+down_revision = ${repr(down_revision)}
+branch_labels = ${repr(branch_labels)}
+depends_on = ${repr(depends_on)}
+
+
+def upgrade() -> None:
+    ${upgrades if upgrades else "pass"}
+
+
+def downgrade() -> None:
+    ${downgrades if downgrades else "pass"}

backend/migrations/versions/13362e8c493a_add_client_profiles_table.py

@@ -0,0 +1,102 @@
+"""Add client_profiles table
+
+Revision ID: 13362e8c493a
+Revises: 48c43e9204c3
+Create Date: 2026-02-05 20:11:52.534918
+
+"""
+from alembic import op
+import sqlalchemy as sa
+from sqlalchemy.dialects import postgresql
+
+
+# revision identifiers, used by Alembic.
+revision = '13362e8c493a'
+down_revision = '48c43e9204c3'
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    # Create client_profiles table
+    op.create_table('client_profiles',
+        sa.Column('id', postgresql.UUID(as_uuid=True), nullable=False, default=sa.text('gen_random_uuid()')),
+        sa.Column('tenant_id', postgresql.UUID(as_uuid=True), nullable=False),
+        
+        # === INFORMACIÓN GENERAL ===
+        sa.Column('business_name', sa.String(length=255), nullable=True),
+        sa.Column('commercial_name', sa.String(length=255), nullable=True),
+        sa.Column('client_code', sa.String(length=50), nullable=True),
+        sa.Column('client_type', sa.String(length=50), nullable=True),
+        sa.Column('rfc', sa.String(length=13), nullable=True),
+        sa.Column('tax_id', sa.String(length=50), nullable=True),
+        
+        # === UBICACIÓN ===
+        sa.Column('country', sa.String(length=100), nullable=True),
+        sa.Column('state', sa.String(length=100), nullable=True),
+        sa.Column('city', sa.String(length=100), nullable=True),
+        sa.Column('address', sa.Text(), nullable=True),
+        sa.Column('external_number', sa.String(length=20), nullable=True),
+        sa.Column('internal_number', sa.String(length=20), nullable=True),
+        sa.Column('postal_code', sa.String(length=10), nullable=True),
+        sa.Column('neighborhood', sa.String(length=100), nullable=True),
+        
+        # === CONTACTO ===
+        sa.Column('main_phone', sa.String(length=20), nullable=True),
+        sa.Column('secondary_phone', sa.String(length=20), nullable=True),
+        sa.Column('direct_phone', sa.String(length=20), nullable=True),
+        sa.Column('phone_extension', sa.String(length=10), nullable=True),
+        sa.Column('fax', sa.String(length=20), nullable=True),
+        
+        # === INFORMACIÓN ADICIONAL ===
+        sa.Column('business_hours', sa.String(length=255), nullable=True),
+        sa.Column('website', sa.String(length=255), nullable=True),
+        sa.Column('main_email', sa.String(length=320), nullable=True),
+        sa.Column('billing_email', sa.String(length=320), nullable=True),
+        
+        # === MARKETING ===
+        sa.Column('advertising_medium', sa.String(length=255), nullable=True),
+        sa.Column('nationality', sa.String(length=100), nullable=True),
+        
+        # === CONFIGURACIÓN EMPRESARIAL ===
+        sa.Column('logo_url', sa.String(length=500), nullable=True),
+        sa.Column('company_representative', sa.String(length=255), nullable=True),
+        sa.Column('legal_representative', sa.String(length=255), nullable=True),
+        
+        # === FINANZAS/FACTURACIÓN ===
+        sa.Column('credit_limit', sa.Numeric(precision=15, scale=2), nullable=True),
+        sa.Column('payment_terms', sa.String(length=100), nullable=True),
+        sa.Column('preferred_currency', sa.String(length=3), nullable=False, default='MXN'),
+        
+        # === METADATOS ===
+        sa.Column('send_to_billing', sa.Boolean(), nullable=False, default=False),
+        sa.Column('is_active_client', sa.Boolean(), nullable=False, default=True),
+        sa.Column('is_prospect', sa.Boolean(), nullable=False, default=False),
+        sa.Column('notes', sa.Text(), nullable=True),
+        
+        # === TIMESTAMPS ===
+        sa.Column('created_at', sa.DateTime(timezone=True), nullable=False, default=sa.func.now()),
+        sa.Column('updated_at', sa.DateTime(timezone=True), nullable=False, default=sa.func.now(), onupdate=sa.func.now()),
+        
+        # Constraints
+        sa.PrimaryKeyConstraint('id'),
+        sa.ForeignKeyConstraint(['tenant_id'], ['tenants.id'], ondelete='CASCADE'),
+        sa.UniqueConstraint('tenant_id')  # Relación uno a uno con tenant
+    )
+    
+    # Crear índices para optimizar consultas
+    op.create_index('idx_client_profiles_tenant_id', 'client_profiles', ['tenant_id'])
+    op.create_index('idx_client_profiles_rfc', 'client_profiles', ['rfc'])
+    op.create_index('idx_client_profiles_business_name', 'client_profiles', ['business_name'])
+    op.create_index('idx_client_profiles_client_code', 'client_profiles', ['client_code'])
+
+
+def downgrade() -> None:
+    # Drop índices
+    op.drop_index('idx_client_profiles_client_code', table_name='client_profiles')
+    op.drop_index('idx_client_profiles_business_name', table_name='client_profiles')
+    op.drop_index('idx_client_profiles_rfc', table_name='client_profiles')
+    op.drop_index('idx_client_profiles_tenant_id', table_name='client_profiles')
+    
+    # Drop tabla
+    op.drop_table('client_profiles')

backend/migrations/versions/35742cfbb850_create_all_tables.py

@@ -0,0 +1,464 @@
+"""Create all tables
+
+Revision ID: 35742cfbb850
+Revises: 
+Create Date: 2026-02-05 19:37:58.771067
+
+"""
+from alembic import op
+import sqlalchemy as sa
+from sqlalchemy.dialects import postgresql
+
+# revision identifiers, used by Alembic.
+revision = '35742cfbb850'
+down_revision = None
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    # ### commands auto generated by Alembic - please adjust! ###
+    op.drop_index('idx_audit_logs_action', table_name='audit_logs')
+    op.drop_index('idx_audit_logs_correlation_id', table_name='audit_logs')
+    op.drop_index('idx_audit_logs_created_at', table_name='audit_logs')
+    op.drop_index('idx_audit_logs_resource', table_name='audit_logs')
+    op.drop_index('idx_audit_logs_tenant_id', table_name='audit_logs')
+    op.drop_index('idx_audit_logs_user_id', table_name='audit_logs')
+    op.drop_table('audit_logs')
+    op.drop_index('idx_tickets_assigned_to', table_name='tickets')
+    op.drop_index('idx_tickets_category', table_name='tickets')
+    op.drop_index('idx_tickets_created_at', table_name='tickets')
+    op.drop_index('idx_tickets_created_by', table_name='tickets')
+    op.drop_index('idx_tickets_number', table_name='tickets')
+    op.drop_index('idx_tickets_priority', table_name='tickets')
+    op.drop_index('idx_tickets_sla_resolution', table_name='tickets')
+    op.drop_index('idx_tickets_sla_response', table_name='tickets')
+    op.drop_index('idx_tickets_status', table_name='tickets')
+    op.drop_index('idx_tickets_tenant_id', table_name='tickets')
+    op.drop_table('tickets')
+    op.drop_index('idx_refresh_tokens_expires', table_name='refresh_tokens')
+    op.drop_index('idx_refresh_tokens_hash', table_name='refresh_tokens')
+    op.drop_index('idx_refresh_tokens_user_id', table_name='refresh_tokens')
+    op.drop_table('refresh_tokens')
+    op.drop_index('idx_notification_logs_created_at', table_name='notification_logs')
+    op.drop_index('idx_notification_logs_recipient', table_name='notification_logs')
+    op.drop_index('idx_notification_logs_status', table_name='notification_logs')
+    op.drop_index('idx_notification_logs_tenant_id', table_name='notification_logs')
+    op.drop_index('idx_notification_logs_ticket_id', table_name='notification_logs')
+    op.drop_table('notification_logs')
+    op.drop_table('affected_systems')
+    op.drop_index('idx_ticket_comments_author_id', table_name='ticket_comments')
+    op.drop_index('idx_ticket_comments_created_at', table_name='ticket_comments')
+    op.drop_index('idx_ticket_comments_ticket_id', table_name='ticket_comments')
+    op.drop_table('ticket_comments')
+    op.drop_index('idx_clients_name', table_name='clients')
+    op.drop_index('idx_clients_properties', table_name='clients', postgresql_using='gin')
+    op.drop_index('idx_clients_tax_id', table_name='clients')
+    op.drop_index('idx_clients_tenant_id', table_name='clients')
+    op.drop_table('clients')
+    op.drop_table('categories')
+    op.drop_index('idx_users_active', table_name='users')
+    op.drop_index('idx_users_email', table_name='users')
+    op.drop_index('idx_users_role', table_name='users')
+    op.drop_index('idx_users_tenant_email', table_name='users')
+    op.drop_index('idx_users_tenant_id', table_name='users')
+    op.drop_table('users')
+    op.drop_table('systems')
+    op.drop_table('ticket_categories')
+    op.drop_index('idx_ticket_status_history_changed_by', table_name='ticket_status_history')
+    op.drop_index('idx_ticket_status_history_created_at', table_name='ticket_status_history')
+    op.drop_index('idx_ticket_status_history_ticket_id', table_name='ticket_status_history')
+    op.drop_table('ticket_status_history')
+    op.drop_index('idx_ticket_attachments_comment_id', table_name='ticket_attachments')
+    op.drop_index('idx_ticket_attachments_ticket_id', table_name='ticket_attachments')
+    op.drop_index('idx_ticket_attachments_uploaded_by', table_name='ticket_attachments')
+    op.drop_table('ticket_attachments')
+    op.drop_index('idx_email_templates_tenant_id', table_name='email_templates')
+    op.drop_index('idx_email_templates_type', table_name='email_templates')
+    op.drop_table('email_templates')
+    op.alter_column('tenants', 'timezone',
+               existing_type=sa.VARCHAR(length=50),
+               nullable=False,
+               existing_server_default=sa.text("'UTC'::character varying"))
+    op.alter_column('tenants', 'locale',
+               existing_type=sa.VARCHAR(length=10),
+               nullable=False,
+               existing_server_default=sa.text("'es-ES'::character varying"))
+    op.alter_column('tenants', 'max_users',
+               existing_type=sa.INTEGER(),
+               nullable=False,
+               existing_server_default=sa.text('50'))
+    op.alter_column('tenants', 'max_storage_mb',
+               existing_type=sa.INTEGER(),
+               nullable=False,
+               existing_server_default=sa.text('1024'))
+    op.alter_column('tenants', 'allowed_file_types',
+               existing_type=postgresql.ARRAY(sa.TEXT()),
+               type_=sa.ARRAY(sa.String()),
+               nullable=False,
+               existing_server_default=sa.text("ARRAY['pdf'::text, 'jpg'::text, 'jpeg'::text, 'png'::text, 'doc'::text, 'docx'::text, 'xls'::text, 'xlsx'::text, 'txt'::text]"))
+    op.alter_column('tenants', 'status',
+               existing_type=sa.VARCHAR(length=20),
+               nullable=False,
+               existing_server_default=sa.text("'active'::character varying"))
+    op.alter_column('tenants', 'created_at',
+               existing_type=postgresql.TIMESTAMP(timezone=True),
+               nullable=False,
+               existing_server_default=sa.text('now()'))
+    op.alter_column('tenants', 'updated_at',
+               existing_type=postgresql.TIMESTAMP(timezone=True),
+               nullable=False,
+               existing_server_default=sa.text('now()'))
+    op.drop_index('idx_tenants_domain', table_name='tenants')
+    op.drop_index('idx_tenants_slug', table_name='tenants')
+    op.drop_index('idx_tenants_status', table_name='tenants')
+    op.drop_table_comment(
+        'tenants',
+        existing_comment='Organizaciones cliente en el sistema multi-tenant',
+        schema=None
+    )
+    # ### end Alembic commands ###
+
+
+def downgrade() -> None:
+    # ### commands auto generated by Alembic - please adjust! ###
+    op.create_table_comment(
+        'tenants',
+        'Organizaciones cliente en el sistema multi-tenant',
+        existing_comment=None,
+        schema=None
+    )
+    op.create_index('idx_tenants_status', 'tenants', ['status'], unique=False)
+    op.create_index('idx_tenants_slug', 'tenants', ['slug'], unique=False)
+    op.create_index('idx_tenants_domain', 'tenants', ['domain'], unique=False)
+    op.alter_column('tenants', 'updated_at',
+               existing_type=postgresql.TIMESTAMP(timezone=True),
+               nullable=True,
+               existing_server_default=sa.text('now()'))
+    op.alter_column('tenants', 'created_at',
+               existing_type=postgresql.TIMESTAMP(timezone=True),
+               nullable=True,
+               existing_server_default=sa.text('now()'))
+    op.alter_column('tenants', 'status',
+               existing_type=sa.VARCHAR(length=20),
+               nullable=True,
+               existing_server_default=sa.text("'active'::character varying"))
+    op.alter_column('tenants', 'allowed_file_types',
+               existing_type=sa.ARRAY(sa.String()),
+               type_=postgresql.ARRAY(sa.TEXT()),
+               nullable=True,
+               existing_server_default=sa.text("ARRAY['pdf'::text, 'jpg'::text, 'jpeg'::text, 'png'::text, 'doc'::text, 'docx'::text, 'xls'::text, 'xlsx'::text, 'txt'::text]"))
+    op.alter_column('tenants', 'max_storage_mb',
+               existing_type=sa.INTEGER(),
+               nullable=True,
+               existing_server_default=sa.text('1024'))
+    op.alter_column('tenants', 'max_users',
+               existing_type=sa.INTEGER(),
+               nullable=True,
+               existing_server_default=sa.text('50'))
+    op.alter_column('tenants', 'locale',
+               existing_type=sa.VARCHAR(length=10),
+               nullable=True,
+               existing_server_default=sa.text("'es-ES'::character varying"))
+    op.alter_column('tenants', 'timezone',
+               existing_type=sa.VARCHAR(length=50),
+               nullable=True,
+               existing_server_default=sa.text("'UTC'::character varying"))
+    op.create_table('email_templates',
+    sa.Column('id', sa.UUID(), server_default=sa.text('gen_random_uuid()'), autoincrement=False, nullable=False),
+    sa.Column('tenant_id', sa.UUID(), autoincrement=False, nullable=True),
+    sa.Column('name', sa.VARCHAR(length=100), autoincrement=False, nullable=False),
+    sa.Column('subject_template', sa.TEXT(), autoincrement=False, nullable=False),
+    sa.Column('body_template', sa.TEXT(), autoincrement=False, nullable=False),
+    sa.Column('template_type', sa.VARCHAR(length=50), autoincrement=False, nullable=False),
+    sa.Column('available_variables', postgresql.JSONB(astext_type=sa.Text()), autoincrement=False, nullable=True),
+    sa.Column('is_active', sa.BOOLEAN(), server_default=sa.text('true'), autoincrement=False, nullable=True),
+    sa.Column('created_at', postgresql.TIMESTAMP(timezone=True), server_default=sa.text('now()'), autoincrement=False, nullable=True),
+    sa.Column('updated_at', postgresql.TIMESTAMP(timezone=True), server_default=sa.text('now()'), autoincrement=False, nullable=True),
+    sa.ForeignKeyConstraint(['tenant_id'], ['tenants.id'], name='email_templates_tenant_id_fkey'),
+    sa.PrimaryKeyConstraint('id', name='email_templates_pkey')
+    )
+    op.create_index('idx_email_templates_type', 'email_templates', ['template_type'], unique=False)
+    op.create_index('idx_email_templates_tenant_id', 'email_templates', ['tenant_id'], unique=False)
+    op.create_table('ticket_attachments',
+    sa.Column('id', sa.UUID(), server_default=sa.text('gen_random_uuid()'), autoincrement=False, nullable=False),
+    sa.Column('ticket_id', sa.UUID(), autoincrement=False, nullable=False),
+    sa.Column('comment_id', sa.UUID(), autoincrement=False, nullable=True),
+    sa.Column('uploaded_by', sa.UUID(), autoincrement=False, nullable=False),
+    sa.Column('filename', sa.VARCHAR(length=255), autoincrement=False, nullable=False),
+    sa.Column('original_filename', sa.VARCHAR(length=255), autoincrement=False, nullable=False),
+    sa.Column('mime_type', sa.VARCHAR(length=100), autoincrement=False, nullable=False),
+    sa.Column('file_size', sa.INTEGER(), autoincrement=False, nullable=False),
+    sa.Column('file_path', sa.VARCHAR(length=500), autoincrement=False, nullable=False),
+    sa.Column('md5_hash', sa.VARCHAR(length=32), autoincrement=False, nullable=True),
+    sa.Column('sha256_hash', sa.VARCHAR(length=64), autoincrement=False, nullable=True),
+    sa.Column('created_at', postgresql.TIMESTAMP(timezone=True), server_default=sa.text('now()'), autoincrement=False, nullable=True),
+    sa.ForeignKeyConstraint(['comment_id'], ['ticket_comments.id'], name='ticket_attachments_comment_id_fkey', ondelete='CASCADE'),
+    sa.ForeignKeyConstraint(['ticket_id'], ['tickets.id'], name='ticket_attachments_ticket_id_fkey', ondelete='CASCADE'),
+    sa.ForeignKeyConstraint(['uploaded_by'], ['users.id'], name='ticket_attachments_uploaded_by_fkey'),
+    sa.PrimaryKeyConstraint('id', name='ticket_attachments_pkey'),
+    comment='Archivos adjuntos en tickets'
+    )
+    op.create_index('idx_ticket_attachments_uploaded_by', 'ticket_attachments', ['uploaded_by'], unique=False)
+    op.create_index('idx_ticket_attachments_ticket_id', 'ticket_attachments', ['ticket_id'], unique=False)
+    op.create_index('idx_ticket_attachments_comment_id', 'ticket_attachments', ['comment_id'], unique=False)
+    op.create_table('ticket_status_history',
+    sa.Column('id', sa.UUID(), server_default=sa.text('gen_random_uuid()'), autoincrement=False, nullable=False),
+    sa.Column('ticket_id', sa.UUID(), autoincrement=False, nullable=False),
+    sa.Column('changed_by', sa.UUID(), autoincrement=False, nullable=False),
+    sa.Column('old_status', postgresql.ENUM('NEW', 'TRIAGE', 'IN_PROGRESS', 'WAITING_CUSTOMER', 'RESOLVED', 'CLOSED', 'REOPENED', name='ticket_status_enum'), autoincrement=False, nullable=True),
+    sa.Column('new_status', postgresql.ENUM('NEW', 'TRIAGE', 'IN_PROGRESS', 'WAITING_CUSTOMER', 'RESOLVED', 'CLOSED', 'REOPENED', name='ticket_status_enum'), autoincrement=False, nullable=False),
+    sa.Column('old_assigned_to', sa.UUID(), autoincrement=False, nullable=True),
+    sa.Column('new_assigned_to', sa.UUID(), autoincrement=False, nullable=True),
+    sa.Column('comment', sa.TEXT(), autoincrement=False, nullable=True),
+    sa.Column('created_at', postgresql.TIMESTAMP(timezone=True), server_default=sa.text('now()'), autoincrement=False, nullable=True),
+    sa.ForeignKeyConstraint(['changed_by'], ['users.id'], name='ticket_status_history_changed_by_fkey'),
+    sa.ForeignKeyConstraint(['new_assigned_to'], ['users.id'], name='ticket_status_history_new_assigned_to_fkey'),
+    sa.ForeignKeyConstraint(['old_assigned_to'], ['users.id'], name='ticket_status_history_old_assigned_to_fkey'),
+    sa.ForeignKeyConstraint(['ticket_id'], ['tickets.id'], name='ticket_status_history_ticket_id_fkey', ondelete='CASCADE'),
+    sa.PrimaryKeyConstraint('id', name='ticket_status_history_pkey')
+    )
+    op.create_index('idx_ticket_status_history_ticket_id', 'ticket_status_history', ['ticket_id'], unique=False)
+    op.create_index('idx_ticket_status_history_created_at', 'ticket_status_history', ['created_at'], unique=False)
+    op.create_index('idx_ticket_status_history_changed_by', 'ticket_status_history', ['changed_by'], unique=False)
+    op.create_table('ticket_categories',
+    sa.Column('id', sa.UUID(), server_default=sa.text('gen_random_uuid()'), autoincrement=False, nullable=False),
+    sa.Column('tenant_id', sa.UUID(), autoincrement=False, nullable=False),
+    sa.Column('name', sa.VARCHAR(length=100), autoincrement=False, nullable=False),
+    sa.Column('description', sa.TEXT(), autoincrement=False, nullable=True),
+    sa.Column('color', sa.VARCHAR(length=7), autoincrement=False, nullable=True),
+    sa.Column('sla_response_hours', sa.INTEGER(), server_default=sa.text('24'), autoincrement=False, nullable=True),
+    sa.Column('sla_resolution_hours', sa.INTEGER(), server_default=sa.text('72'), autoincrement=False, nullable=True),
+    sa.Column('auto_assign_to', sa.UUID(), autoincrement=False, nullable=True),
+    sa.Column('is_active', sa.BOOLEAN(), server_default=sa.text('true'), autoincrement=False, nullable=True),
+    sa.Column('created_at', postgresql.TIMESTAMP(timezone=True), server_default=sa.text('now()'), autoincrement=False, nullable=True),
+    sa.Column('updated_at', postgresql.TIMESTAMP(timezone=True), server_default=sa.text('now()'), autoincrement=False, nullable=True),
+    sa.ForeignKeyConstraint(['auto_assign_to'], ['users.id'], name='ticket_categories_auto_assign_to_fkey'),
+    sa.ForeignKeyConstraint(['tenant_id'], ['tenants.id'], name='ticket_categories_tenant_id_fkey', ondelete='CASCADE'),
+    sa.PrimaryKeyConstraint('id', name='ticket_categories_pkey'),
+    sa.UniqueConstraint('tenant_id', 'name', name='ticket_categories_tenant_id_name_key'),
+    postgresql_ignore_search_path=False
+    )
+    op.create_table('systems',
+    sa.Column('name', sa.VARCHAR(length=100), autoincrement=False, nullable=False),
+    sa.Column('description', sa.TEXT(), autoincrement=False, nullable=True),
+    sa.Column('is_active', sa.BOOLEAN(), autoincrement=False, nullable=False),
+    sa.Column('id', sa.UUID(), autoincrement=False, nullable=False),
+    sa.Column('created_at', postgresql.TIMESTAMP(timezone=True), server_default=sa.text('now()'), autoincrement=False, nullable=False),
+    sa.Column('updated_at', postgresql.TIMESTAMP(timezone=True), server_default=sa.text('now()'), autoincrement=False, nullable=False),
+    sa.PrimaryKeyConstraint('id', name='systems_pkey')
+    )
+    op.create_table('users',
+    sa.Column('id', sa.UUID(), server_default=sa.text('gen_random_uuid()'), autoincrement=False, nullable=False),
+    sa.Column('tenant_id', sa.UUID(), autoincrement=False, nullable=False),
+    sa.Column('email', sa.VARCHAR(length=320), autoincrement=False, nullable=False),
+    sa.Column('first_name', sa.VARCHAR(length=100), autoincrement=False, nullable=False),
+    sa.Column('last_name', sa.VARCHAR(length=100), autoincrement=False, nullable=False),
+    sa.Column('avatar_url', sa.VARCHAR(length=500), autoincrement=False, nullable=True),
+    sa.Column('password_hash', sa.VARCHAR(length=255), autoincrement=False, nullable=False),
+    sa.Column('role', postgresql.ENUM('ADMIN', 'SUPPORT_MANAGER', 'AGENT', 'AUDITOR', 'CLIENT_ADMIN', 'CLIENT_USER', name='user_role_enum'), autoincrement=False, nullable=False),
+    sa.Column('totp_secret', sa.VARCHAR(length=32), autoincrement=False, nullable=True),
+    sa.Column('totp_enabled', sa.BOOLEAN(), server_default=sa.text('false'), autoincrement=False, nullable=True),
+    sa.Column('backup_codes', postgresql.ARRAY(sa.TEXT()), autoincrement=False, nullable=True),
+    sa.Column('is_active', sa.BOOLEAN(), server_default=sa.text('true'), autoincrement=False, nullable=True),
+    sa.Column('email_verified', sa.BOOLEAN(), server_default=sa.text('false'), autoincrement=False, nullable=True),
+    sa.Column('last_login', postgresql.TIMESTAMP(timezone=True), autoincrement=False, nullable=True),
+    sa.Column('last_activity', postgresql.TIMESTAMP(timezone=True), autoincrement=False, nullable=True),
+    sa.Column('language', sa.VARCHAR(length=10), server_default=sa.text("'es'::character varying"), autoincrement=False, nullable=True),
+    sa.Column('timezone', sa.VARCHAR(length=50), server_default=sa.text("'UTC'::character varying"), autoincrement=False, nullable=True),
+    sa.Column('notifications_email', sa.BOOLEAN(), server_default=sa.text('true'), autoincrement=False, nullable=True),
+    sa.Column('created_at', postgresql.TIMESTAMP(timezone=True), server_default=sa.text('now()'), autoincrement=False, nullable=True),
+    sa.Column('updated_at', postgresql.TIMESTAMP(timezone=True), server_default=sa.text('now()'), autoincrement=False, nullable=True),
+    sa.ForeignKeyConstraint(['tenant_id'], ['tenants.id'], name='users_tenant_id_fkey', ondelete='CASCADE'),
+    sa.PrimaryKeyConstraint('id', name='users_pkey'),
+    sa.UniqueConstraint('tenant_id', 'email', name='users_tenant_id_email_key'),
+    comment='Usuarios del sistema (internos y clientes)',
+    postgresql_ignore_search_path=False
+    )
+    op.create_index('idx_users_tenant_id', 'users', ['tenant_id'], unique=False)
+    op.create_index('idx_users_tenant_email', 'users', ['tenant_id', 'email'], unique=False)
+    op.create_index('idx_users_role', 'users', ['role'], unique=False)
+    op.create_index('idx_users_email', 'users', ['email'], unique=False)
+    op.create_index('idx_users_active', 'users', ['is_active'], unique=False)
+    op.create_table('categories',
+    sa.Column('name', sa.VARCHAR(length=100), autoincrement=False, nullable=False),
+    sa.Column('description', sa.TEXT(), autoincrement=False, nullable=True),
+    sa.Column('is_active', sa.BOOLEAN(), autoincrement=False, nullable=False),
+    sa.Column('tenant_id', sa.UUID(), autoincrement=False, nullable=True),
+    sa.Column('id', sa.UUID(), autoincrement=False, nullable=False),
+    sa.Column('created_at', postgresql.TIMESTAMP(timezone=True), server_default=sa.text('now()'), autoincrement=False, nullable=False),
+    sa.Column('updated_at', postgresql.TIMESTAMP(timezone=True), server_default=sa.text('now()'), autoincrement=False, nullable=False),
+    sa.ForeignKeyConstraint(['tenant_id'], ['tenants.id'], name='categories_tenant_id_fkey', ondelete='CASCADE'),
+    sa.PrimaryKeyConstraint('id', name='categories_pkey')
+    )
+    op.create_table('clients',
+    sa.Column('id', sa.UUID(), server_default=sa.text('gen_random_uuid()'), autoincrement=False, nullable=False),
+    sa.Column('tenant_id', sa.UUID(), autoincrement=False, nullable=False),
+    sa.Column('code', sa.VARCHAR(length=50), autoincrement=False, nullable=True),
+    sa.Column('name', sa.VARCHAR(length=200), autoincrement=False, nullable=False),
+    sa.Column('tax_id', sa.VARCHAR(length=20), autoincrement=False, nullable=True),
+    sa.Column('client_type', sa.VARCHAR(length=50), autoincrement=False, nullable=True),
+    sa.Column('account_manager', sa.VARCHAR(length=100), autoincrement=False, nullable=True),
+    sa.Column('address_street', sa.TEXT(), autoincrement=False, nullable=True),
+    sa.Column('address_ext_num', sa.VARCHAR(length=20), autoincrement=False, nullable=True),
+    sa.Column('neighborhood', sa.VARCHAR(length=100), autoincrement=False, nullable=True),
+    sa.Column('zip_code', sa.VARCHAR(length=10), autoincrement=False, nullable=True),
+    sa.Column('city', sa.VARCHAR(length=100), autoincrement=False, nullable=True),
+    sa.Column('state', sa.VARCHAR(length=100), autoincrement=False, nullable=True),
+    sa.Column('country', sa.VARCHAR(length=100), server_default=sa.text("'Mexico'::character varying"), autoincrement=False, nullable=True),
+    sa.Column('phone_primary', sa.VARCHAR(length=20), autoincrement=False, nullable=True),
+    sa.Column('phone_secondary', sa.VARCHAR(length=20), autoincrement=False, nullable=True),
+    sa.Column('fax', sa.VARCHAR(length=20), autoincrement=False, nullable=True),
+    sa.Column('email', sa.VARCHAR(length=320), autoincrement=False, nullable=True),
+    sa.Column('website', sa.VARCHAR(length=255), autoincrement=False, nullable=True),
+    sa.Column('status', postgresql.ENUM('prospect', 'active', 'suspended', 'cancelled', name='client_status_enum'), server_default=sa.text("'prospect'::client_status_enum"), autoincrement=False, nullable=True),
+    sa.Column('logo_url', sa.VARCHAR(length=500), autoincrement=False, nullable=True),
+    sa.Column('properties', postgresql.JSONB(astext_type=sa.Text()), server_default=sa.text("'{}'::jsonb"), autoincrement=False, nullable=True),
+    sa.Column('is_active', sa.BOOLEAN(), server_default=sa.text('true'), autoincrement=False, nullable=True),
+    sa.Column('created_at', postgresql.TIMESTAMP(timezone=True), server_default=sa.text('now()'), autoincrement=False, nullable=True),
+    sa.Column('updated_at', postgresql.TIMESTAMP(timezone=True), server_default=sa.text('now()'), autoincrement=False, nullable=True),
+    sa.ForeignKeyConstraint(['tenant_id'], ['tenants.id'], name='clients_tenant_id_fkey', ondelete='CASCADE'),
+    sa.PrimaryKeyConstraint('id', name='clients_pkey'),
+    sa.UniqueConstraint('tenant_id', 'code', name='clients_tenant_id_code_key'),
+    sa.UniqueConstraint('tenant_id', 'tax_id', name='clients_tenant_id_tax_id_key')
+    )
+    op.create_index('idx_clients_tenant_id', 'clients', ['tenant_id'], unique=False)
+    op.create_index('idx_clients_tax_id', 'clients', ['tax_id'], unique=False)
+    op.create_index('idx_clients_properties', 'clients', ['properties'], unique=False, postgresql_using='gin')
+    op.create_index('idx_clients_name', 'clients', ['name'], unique=False)
+    op.create_table('ticket_comments',
+    sa.Column('id', sa.UUID(), server_default=sa.text('gen_random_uuid()'), autoincrement=False, nullable=False),
+    sa.Column('ticket_id', sa.UUID(), autoincrement=False, nullable=False),
+    sa.Column('author_id', sa.UUID(), autoincrement=False, nullable=False),
+    sa.Column('content', sa.TEXT(), autoincrement=False, nullable=False),
+    sa.Column('is_internal', sa.BOOLEAN(), server_default=sa.text('false'), autoincrement=False, nullable=True),
+    sa.Column('created_at', postgresql.TIMESTAMP(timezone=True), server_default=sa.text('now()'), autoincrement=False, nullable=True),
+    sa.Column('updated_at', postgresql.TIMESTAMP(timezone=True), server_default=sa.text('now()'), autoincrement=False, nullable=True),
+    sa.ForeignKeyConstraint(['author_id'], ['users.id'], name='ticket_comments_author_id_fkey'),
+    sa.ForeignKeyConstraint(['ticket_id'], ['tickets.id'], name='ticket_comments_ticket_id_fkey', ondelete='CASCADE'),
+    sa.PrimaryKeyConstraint('id', name='ticket_comments_pkey'),
+    comment='Comentarios en tickets'
+    )
+    op.create_index('idx_ticket_comments_ticket_id', 'ticket_comments', ['ticket_id'], unique=False)
+    op.create_index('idx_ticket_comments_created_at', 'ticket_comments', ['created_at'], unique=False)
+    op.create_index('idx_ticket_comments_author_id', 'ticket_comments', ['author_id'], unique=False)
+    op.create_table('affected_systems',
+    sa.Column('id', sa.UUID(), server_default=sa.text('gen_random_uuid()'), autoincrement=False, nullable=False),
+    sa.Column('tenant_id', sa.UUID(), autoincrement=False, nullable=False),
+    sa.Column('name', sa.VARCHAR(length=100), autoincrement=False, nullable=False),
+    sa.Column('description', sa.TEXT(), autoincrement=False, nullable=True),
+    sa.Column('is_active', sa.BOOLEAN(), server_default=sa.text('true'), autoincrement=False, nullable=True),
+    sa.Column('created_at', postgresql.TIMESTAMP(timezone=True), server_default=sa.text('now()'), autoincrement=False, nullable=True),
+    sa.Column('updated_at', postgresql.TIMESTAMP(timezone=True), server_default=sa.text('now()'), autoincrement=False, nullable=True),
+    sa.ForeignKeyConstraint(['tenant_id'], ['tenants.id'], name='affected_systems_tenant_id_fkey', ondelete='CASCADE'),
+    sa.PrimaryKeyConstraint('id', name='affected_systems_pkey'),
+    sa.UniqueConstraint('tenant_id', 'name', name='affected_systems_tenant_id_name_key'),
+    postgresql_ignore_search_path=False
+    )
+    op.create_table('notification_logs',
+    sa.Column('id', sa.UUID(), server_default=sa.text('gen_random_uuid()'), autoincrement=False, nullable=False),
+    sa.Column('tenant_id', sa.UUID(), autoincrement=False, nullable=False),
+    sa.Column('recipient_email', sa.VARCHAR(length=320), autoincrement=False, nullable=False),
+    sa.Column('subject', sa.VARCHAR(length=500), autoincrement=False, nullable=False),
+    sa.Column('template_type', sa.VARCHAR(length=50), autoincrement=False, nullable=True),
+    sa.Column('ticket_id', sa.UUID(), autoincrement=False, nullable=True),
+    sa.Column('user_id', sa.UUID(), autoincrement=False, nullable=True),
+    sa.Column('status', sa.VARCHAR(length=20), server_default=sa.text("'pending'::character varying"), autoincrement=False, nullable=True),
+    sa.Column('error_message', sa.TEXT(), autoincrement=False, nullable=True),
+    sa.Column('provider', sa.VARCHAR(length=50), autoincrement=False, nullable=True),
+    sa.Column('external_id', sa.VARCHAR(length=255), autoincrement=False, nullable=True),
+    sa.Column('sent_at', postgresql.TIMESTAMP(timezone=True), autoincrement=False, nullable=True),
+    sa.Column('created_at', postgresql.TIMESTAMP(timezone=True), server_default=sa.text('now()'), autoincrement=False, nullable=True),
+    sa.CheckConstraint("status::text = ANY (ARRAY['pending'::character varying, 'sent'::character varying, 'failed'::character varying, 'bounced'::character varying]::text[])", name='notification_logs_status_check'),
+    sa.ForeignKeyConstraint(['tenant_id'], ['tenants.id'], name='notification_logs_tenant_id_fkey'),
+    sa.ForeignKeyConstraint(['ticket_id'], ['tickets.id'], name='notification_logs_ticket_id_fkey'),
+    sa.ForeignKeyConstraint(['user_id'], ['users.id'], name='notification_logs_user_id_fkey'),
+    sa.PrimaryKeyConstraint('id', name='notification_logs_pkey')
+    )
+    op.create_index('idx_notification_logs_ticket_id', 'notification_logs', ['ticket_id'], unique=False)
+    op.create_index('idx_notification_logs_tenant_id', 'notification_logs', ['tenant_id'], unique=False)
+    op.create_index('idx_notification_logs_status', 'notification_logs', ['status'], unique=False)
+    op.create_index('idx_notification_logs_recipient', 'notification_logs', ['recipient_email'], unique=False)
+    op.create_index('idx_notification_logs_created_at', 'notification_logs', ['created_at'], unique=False)
+    op.create_table('refresh_tokens',
+    sa.Column('id', sa.UUID(), server_default=sa.text('gen_random_uuid()'), autoincrement=False, nullable=False),
+    sa.Column('user_id', sa.UUID(), autoincrement=False, nullable=False),
+    sa.Column('token_hash', sa.VARCHAR(length=255), autoincrement=False, nullable=False),
+    sa.Column('device_info', sa.VARCHAR(length=500), autoincrement=False, nullable=True),
+    sa.Column('ip_address', postgresql.INET(), autoincrement=False, nullable=True),
+    sa.Column('expires_at', postgresql.TIMESTAMP(timezone=True), autoincrement=False, nullable=False),
+    sa.Column('revoked', sa.BOOLEAN(), server_default=sa.text('false'), autoincrement=False, nullable=True),
+    sa.Column('created_at', postgresql.TIMESTAMP(timezone=True), server_default=sa.text('now()'), autoincrement=False, nullable=True),
+    sa.ForeignKeyConstraint(['user_id'], ['users.id'], name='refresh_tokens_user_id_fkey', ondelete='CASCADE'),
+    sa.PrimaryKeyConstraint('id', name='refresh_tokens_pkey')
+    )
+    op.create_index('idx_refresh_tokens_user_id', 'refresh_tokens', ['user_id'], unique=False)
+    op.create_index('idx_refresh_tokens_hash', 'refresh_tokens', ['token_hash'], unique=False)
+    op.create_index('idx_refresh_tokens_expires', 'refresh_tokens', ['expires_at'], unique=False)
+    op.create_table('tickets',
+    sa.Column('id', sa.UUID(), server_default=sa.text('gen_random_uuid()'), autoincrement=False, nullable=False),
+    sa.Column('tenant_id', sa.UUID(), autoincrement=False, nullable=False),
+    sa.Column('ticket_number', sa.VARCHAR(length=20), autoincrement=False, nullable=False),
+    sa.Column('subject', sa.VARCHAR(length=255), autoincrement=False, nullable=False),
+    sa.Column('description', sa.TEXT(), autoincrement=False, nullable=False),
+    sa.Column('category_id', sa.UUID(), autoincrement=False, nullable=True),
+    sa.Column('priority', postgresql.ENUM('LOW', 'MEDIUM', 'HIGH', 'URGENT', name='ticket_priority_enum'), server_default=sa.text("'MEDIUM'::ticket_priority_enum"), autoincrement=False, nullable=True),
+    sa.Column('affected_system_id', sa.UUID(), autoincrement=False, nullable=True),
+    sa.Column('created_by', sa.UUID(), autoincrement=False, nullable=False),
+    sa.Column('assigned_to', sa.UUID(), autoincrement=False, nullable=True),
+    sa.Column('status', postgresql.ENUM('NEW', 'TRIAGE', 'IN_PROGRESS', 'WAITING_CUSTOMER', 'RESOLVED', 'CLOSED', 'REOPENED', name='ticket_status_enum'), server_default=sa.text("'NEW'::ticket_status_enum"), autoincrement=False, nullable=True),
+    sa.Column('sla_response_due', postgresql.TIMESTAMP(timezone=True), autoincrement=False, nullable=True),
+    sa.Column('sla_resolution_due', postgresql.TIMESTAMP(timezone=True), autoincrement=False, nullable=True),
+    sa.Column('first_response_at', postgresql.TIMESTAMP(timezone=True), autoincrement=False, nullable=True),
+    sa.Column('resolved_at', postgresql.TIMESTAMP(timezone=True), autoincrement=False, nullable=True),
+    sa.Column('rating', sa.INTEGER(), autoincrement=False, nullable=True),
+    sa.Column('rating_comment', sa.TEXT(), autoincrement=False, nullable=True),
+    sa.Column('rated_at', postgresql.TIMESTAMP(timezone=True), autoincrement=False, nullable=True),
+    sa.Column('created_at', postgresql.TIMESTAMP(timezone=True), server_default=sa.text('now()'), autoincrement=False, nullable=True),
+    sa.Column('updated_at', postgresql.TIMESTAMP(timezone=True), server_default=sa.text('now()'), autoincrement=False, nullable=True),
+    sa.CheckConstraint('rating >= 1 AND rating <= 5', name='tickets_rating_check'),
+    sa.ForeignKeyConstraint(['affected_system_id'], ['affected_systems.id'], name='tickets_affected_system_id_fkey'),
+    sa.ForeignKeyConstraint(['assigned_to'], ['users.id'], name='tickets_assigned_to_fkey'),
+    sa.ForeignKeyConstraint(['category_id'], ['ticket_categories.id'], name='tickets_category_id_fkey'),
+    sa.ForeignKeyConstraint(['created_by'], ['users.id'], name='tickets_created_by_fkey'),
+    sa.ForeignKeyConstraint(['tenant_id'], ['tenants.id'], name='tickets_tenant_id_fkey', ondelete='CASCADE'),
+    sa.PrimaryKeyConstraint('id', name='tickets_pkey'),
+    sa.UniqueConstraint('tenant_id', 'ticket_number', name='tickets_tenant_id_ticket_number_key'),
+    comment='Tickets de soporte - core del negocio'
+    )
+    op.create_index('idx_tickets_tenant_id', 'tickets', ['tenant_id'], unique=False)
+    op.create_index('idx_tickets_status', 'tickets', ['status'], unique=False)
+    op.create_index('idx_tickets_sla_response', 'tickets', ['sla_response_due'], unique=False)
+    op.create_index('idx_tickets_sla_resolution', 'tickets', ['sla_resolution_due'], unique=False)
+    op.create_index('idx_tickets_priority', 'tickets', ['priority'], unique=False)
+    op.create_index('idx_tickets_number', 'tickets', ['ticket_number'], unique=False)
+    op.create_index('idx_tickets_created_by', 'tickets', ['created_by'], unique=False)
+    op.create_index('idx_tickets_created_at', 'tickets', ['created_at'], unique=False)
+    op.create_index('idx_tickets_category', 'tickets', ['category_id'], unique=False)
+    op.create_index('idx_tickets_assigned_to', 'tickets', ['assigned_to'], unique=False)
+    op.create_table('audit_logs',
+    sa.Column('id', sa.UUID(), server_default=sa.text('gen_random_uuid()'), autoincrement=False, nullable=False),
+    sa.Column('tenant_id', sa.UUID(), autoincrement=False, nullable=False),
+    sa.Column('user_id', sa.UUID(), autoincrement=False, nullable=True),
+    sa.Column('action', sa.VARCHAR(length=100), autoincrement=False, nullable=False),
+    sa.Column('resource_type', sa.VARCHAR(length=50), autoincrement=False, nullable=False),
+    sa.Column('resource_id', sa.UUID(), autoincrement=False, nullable=True),
+    sa.Column('ip_address', postgresql.INET(), autoincrement=False, nullable=True),
+    sa.Column('user_agent', sa.TEXT(), autoincrement=False, nullable=True),
+    sa.Column('correlation_id', sa.UUID(), autoincrement=False, nullable=True),
+    sa.Column('old_values', postgresql.JSONB(astext_type=sa.Text()), autoincrement=False, nullable=True),
+    sa.Column('new_values', postgresql.JSONB(astext_type=sa.Text()), autoincrement=False, nullable=True),
+    sa.Column('metadata', postgresql.JSONB(astext_type=sa.Text()), autoincrement=False, nullable=True),
+    sa.Column('created_at', postgresql.TIMESTAMP(timezone=True), server_default=sa.text('now()'), autoincrement=False, nullable=True),
+    sa.ForeignKeyConstraint(['tenant_id'], ['tenants.id'], name='audit_logs_tenant_id_fkey'),
+    sa.ForeignKeyConstraint(['user_id'], ['users.id'], name='audit_logs_user_id_fkey'),
+    sa.PrimaryKeyConstraint('id', name='audit_logs_pkey'),
+    comment='Bitácora de acciones para auditoría y compliance'
+    )
+    op.create_index('idx_audit_logs_user_id', 'audit_logs', ['user_id'], unique=False)
+    op.create_index('idx_audit_logs_tenant_id', 'audit_logs', ['tenant_id'], unique=False)
+    op.create_index('idx_audit_logs_resource', 'audit_logs', ['resource_type', 'resource_id'], unique=False)
+    op.create_index('idx_audit_logs_created_at', 'audit_logs', ['created_at'], unique=False)
+    op.create_index('idx_audit_logs_correlation_id', 'audit_logs', ['correlation_id'], unique=False)
+    op.create_index('idx_audit_logs_action', 'audit_logs', ['action'], unique=False)
+    # ### end Alembic commands ###

backend/migrations/versions/48c43e9204c3_test_migration_setup.py

@@ -0,0 +1,24 @@
+"""Test migration setup
+
+Revision ID: 48c43e9204c3
+Revises: 35742cfbb850
+Create Date: 2026-02-05 19:39:07.431453
+
+"""
+from alembic import op
+import sqlalchemy as sa
+
+
+# revision identifiers, used by Alembic.
+revision = '48c43e9204c3'
+down_revision = '35742cfbb850'
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    pass
+
+
+def downgrade() -> None:
+    pass

backend/migrations/versions/a1b2c3d4e5f6_add_audit_logs_table.py

@@ -0,0 +1,81 @@
+"""add_audit_logs_table
+
+Revision ID: a1b2c3d4e5f6
+Revises: 13362e8c493a
+Create Date: 2026-02-12 10:00:00.000000
+
+Registra el modelo AuditLog en Alembic.
+La tabla audit_logs ya existe en schema.sql, esta migraci├│n solo
+la registra en el control de versiones de Alembic.
+"""
+from alembic import op
+import sqlalchemy as sa
+from sqlalchemy.dialects import postgresql
+
+# revision identifiers, used by Alembic.
+revision = 'a1b2c3d4e5f6'
+down_revision = '13362e8c493a'
+branch_labels = None
+depends_on = None
+
+
+def upgrade():
+    """
+    Verificar que audit_logs existe y registrarla en Alembic.
+    
+    La tabla fue creada por schema.sql, esta migraci├│n solo verifica
+    que exista y está disponible para usar.
+    """
+    from sqlalchemy import inspect
+    
+    bind = op.get_bind()
+    inspector = inspect(bind)
+    tables = inspector.get_table_names()
+    
+    if 'audit_logs' in tables:
+        print(" Tabla audit_logs encontrada (creada por schema.sql)")
+        print(" Modelo AuditLog registrado en Alembic")
+        
+        # Verificar que tenga los índices necesarios
+        existing_indexes = [idx['name'] for idx in inspector.get_indexes('audit_logs')]
+        missing_indexes = []
+        
+        required_indexes = [
+            'idx_audit_logs_tenant_id',
+            'idx_audit_logs_user_id',
+            'idx_audit_logs_action',
+            'idx_audit_logs_correlation_id',
+            'idx_audit_logs_created_at'
+        ]
+        
+        for idx in required_indexes:
+            if idx not in existing_indexes:
+                missing_indexes.append(idx)
+        
+        if missing_indexes:
+            print(f"ÔÜá´©Å  ├ìndices faltantes: {', '.join(missing_indexes)}")
+            print("   (Esto es normal si usaste schema.sql completo)")
+        else:
+            print("Ô£à Todos los ├¡ndices necesarios est├ín presentes")
+        
+    else:
+        print("ÔÜá´©Å  La tabla audit_logs NO existe")
+        print("   Ejecuta: docker-compose exec -T postgres psql -U postgres -d servicemanager < db/schema.sql")
+        print("   O crea la tabla manualmente desde schema.sql")
+        
+        # No crear la tabla aquí - debe venir de schema.sql para mantener consistencia
+        raise Exception(
+            "La tabla audit_logs no existe. "
+            "Por favor ejecuta el schema.sql completo primero."
+        )
+
+
+def downgrade():
+    """
+    No eliminar la tabla - fue creada por schema.sql.
+    
+    Solo des-registrar de Alembic.
+    """
+    print("Ôä╣´©Å  Tabla audit_logs NO ser├í eliminada (creada por schema.sql)")
+    print(" Modelo AuditLog des-registrado de Alembic")
+

backend/pyproject.toml

@@ -6,7 +6,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "servicemanager-backend"
-version = "0.1.0"
+version = "1.6.0"
 description = "ServiceManagerWeb Backend - Mesa de Ayuda B2B"
 authors = [
     {name = "Aduanasoft", email = "dev@aduanasoft.com"}

backend/pytest.ini

@@ -0,0 +1,22 @@
+[tool:pytest]
+testpaths = tests
+python_files = test_*.py
+python_functions = test_*
+python_classes = Test*
+asyncio_mode = auto
+addopts = 
+    -v
+    --tb=short
+    --strict-markers
+    --disable-warnings
+    --color=yes
+    --durations=10
+markers =
+    slow: marks tests as slow (deselect with '-m "not slow"')
+    integration: marks tests as integration tests
+    unit: marks tests as unit tests
+    auth: marks tests related to authentication
+    db: marks tests that require database
+filterwarnings =
+    ignore::DeprecationWarning
+    ignore::PendingDeprecationWarning

backend/requirements.txt

@@ -69,6 +69,7 @@ prometheus-client==0.19.0
 pytest==7.4.3
 pytest-asyncio==0.21.1
 pytest-cov==4.1.0
+aiosqlite==0.19.0
 httpx==0.25.2            # For testing
 faker==20.1.0            # Test data generation
 

backend/tests/conftest.py

@@ -0,0 +1,28 @@
+"""
+Test Configuration - ServiceManagerWeb
+
+Configuración básica para testing con pytest
+"""
+
+import pytest
+
+
+@pytest.fixture 
+def test_user_data():
+    """Sample user data for testing."""
+    return {
+        "email": "test@example.com",
+        "first_name": "Test",
+        "last_name": "User", 
+        "password": "TestPassword123!"
+    }
+
+
+@pytest.fixture 
+def test_tenant_data():
+    """Sample tenant data for testing."""
+    return {
+        "name": "Test Tenant",
+        "slug": "test-tenant",
+        "description": "Test tenant for testing"
+    }

backend/tests/test.env

@@ -0,0 +1,7 @@
+# Test Environment Variables
+ENVIRONMENT=test
+DEBUG=true
+SECRET_KEY=test-secret-key-for-testing-123456789
+JWT_SECRET_KEY=test-jwt-secret-key-for-testing-987654321
+DATABASE_URL=postgresql+asyncpg://servicemanager:servicemanager123@postgres:5432/servicemanager
+REDIS_URL=redis://redis:6379/0

backend/tests/test_basic.py

@@ -0,0 +1,58 @@
+"""
+Very basic tests - ServiceManagerWeb
+
+Tests simplísimos para verificar que pytest funciona
+"""
+
+import pytest
+
+
+def test_basic_math():
+    """Test basic functionality."""
+    assert 1 + 1 == 2
+    assert 2 * 3 == 6
+    assert 10 // 3 == 3
+
+
+def test_string_operations():
+    """Test string operations."""
+    text = "ServiceManager"
+    assert text.lower() == "servicemanager"
+    assert len(text) == 14
+    assert "Manager" in text
+
+
+@pytest.mark.asyncio
+async def test_async_operation():
+    """Test async functionality works."""
+    import asyncio
+    await asyncio.sleep(0.001)  # Very short sleep
+    assert True
+
+
+def test_list_operations():
+    """Test list operations."""
+    items = ["tickets", "users", "tenants"]
+    assert len(items) == 3
+    assert "tickets" in items
+    assert items[0] == "tickets"
+
+
+def test_dict_operations():
+    """Test dictionary operations."""
+    data = {
+        "name": "Test User",
+        "email": "test@example.com",
+        "active": True
+    }
+    assert data["name"] == "Test User"
+    assert data.get("email") is not None
+    assert data["active"] is True
+
+
+# Mark for later when configuration is fixed
+@pytest.mark.skip(reason="Configuration issue with ALLOWED_FILE_EXTENSIONS")
+def test_security_imports():
+    """Test security imports - skip for now due to config issue."""
+    from app.core.security import security
+    assert security is not None

backend/tests/test_health.py

@@ -0,0 +1,50 @@
+"""
+Tests for Health Check endpoints - ServiceManagerWeb
+
+Tests básicos para verificar que la configuración de testing funciona
+"""
+
+import pytest
+import asyncio
+
+
+@pytest.mark.asyncio
+async def test_health_check_async():
+    """Test that async operations work in testing."""
+    # Simple async test to verify setup
+    await asyncio.sleep(0.01)
+    assert True
+
+
+def test_basic_math():
+    """Test basic functionality."""
+    assert 1 + 1 == 2
+
+
+# Test básico de importación de módulos principales
+def test_imports():
+    """Test that core modules can be imported without errors."""
+    try:
+        from app.core.config import get_settings
+        from app.core.security import security
+        
+        # Test que las funciones básicas existen
+        assert get_settings is not None
+        assert security is not None
+        assert hasattr(security, 'hash_password')
+        assert hasattr(security, 'verify_password')
+        
+    except ImportError as e:
+        pytest.fail(f"Failed to import core modules: {e}")
+
+
+def test_security_functions():
+    """Test basic security functions."""
+    from app.core.security import security
+    
+    password = "TestPassword123!"
+    hashed = security.hash_password(password)
+    
+    assert hashed != password  # Should be hashed
+    assert security.verify_password(password, hashed)  # Should verify
+    assert not security.verify_password("wrong", hashed)  # Should not verify wrong password

db/schema.sql

@@ -369,10 +369,14 @@ CREATE TABLE audit_logs (
 CREATE INDEX idx_audit_logs_tenant_id ON audit_logs(tenant_id);
 CREATE INDEX idx_audit_logs_user_id ON audit_logs(user_id);
 CREATE INDEX idx_audit_logs_action ON audit_logs(action);
-CREATE INDEX idx_audit_logs_resource ON audit_logs(resource_type, resource_id);
 CREATE INDEX idx_audit_logs_correlation_id ON audit_logs(correlation_id);
 CREATE INDEX idx_audit_logs_created_at ON audit_logs(created_at);
 
+-- Índices compuestos para queries comunes de auditoría
+CREATE INDEX idx_audit_logs_tenant_action ON audit_logs(tenant_id, action);
+CREATE INDEX idx_audit_logs_resource ON audit_logs(resource_type, resource_id);
+CREATE INDEX idx_audit_logs_user_created ON audit_logs(user_id, created_at);
+
 -- ===================================
 -- FUNCIONES Y TRIGGERS
 -- ===================================

docker-compose.yml

@@ -110,6 +110,7 @@ services:
       - DEFAULT_FROM_EMAIL=${DEFAULT_FROM_EMAIL}
     volumes:
       - ./workers:/app
+      - ./backend:/backend:ro
       - uploads_data:/app/uploads
       - logs_data:/app/logs
     depends_on:
@@ -140,6 +141,7 @@ services:
       - CELERY_RESULT_BACKEND=${CELERY_RESULT_BACKEND}
     volumes:
       - ./workers:/app
+      - ./backend:/backend:ro
     depends_on:
       postgres:
         condition: service_healthy
@@ -161,7 +163,7 @@ services:
     restart: unless-stopped
     environment:
       - NODE_ENV=${ENVIRONMENT:-development}
-      - PUBLIC_API_URL=${API_BASE_URL:-http://localhost:8000}
+      - PUBLIC_API_URL=http://backend:8000
       - PUBLIC_APP_NAME=ServiceManager Cliente
     volumes:
       - ./frontend-client:/app
@@ -186,7 +188,7 @@ services:
     restart: unless-stopped
     environment:
       - NODE_ENV=${ENVIRONMENT:-development}
-      - PUBLIC_API_URL=${API_BASE_URL:-http://localhost:8000}
+      - PUBLIC_API_URL=http://backend:8000
       - PUBLIC_APP_NAME=ServiceManager Admin
     volumes:
       - ./frontend-internal:/app

frontend-client/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@servicemanager/client-frontend",
-  "version": "0.1.0",
+  "version": "1.6.0",
   "private": true,
   "type": "module",
   "scripts": {

frontend-client/src/lib/components/Header.svelte

@@ -1,5 +1,6 @@
 <script lang="ts">
   import { onMount } from 'svelte';
+  import { goto } from '$app/navigation';
   import { auth } from '$lib/stores/auth.js';
   import Icon from './Icon.svelte';
 
@@ -17,8 +18,8 @@
   }
 
   function handleLogout() {
-    auth.logout();
     isMenuOpen = false;
+    auth.logout(); // El store maneja la redirección automática
   }
 </script>
 
@@ -43,10 +44,16 @@
       <!-- Navigation -->
       {#if showNavigation && $auth.isAuthenticated}
         <nav class="hidden md:flex space-x-8">
-          <a href="/tickets" class="text-gray-700 hover:text-primary-600 px-3 py-2 text-sm font-medium">
+          <a
+            href="/tickets"
+            class="text-gray-700 hover:text-primary-600 px-3 py-2 text-sm font-medium"
+          >
             Mis Tickets
           </a>
-          <a href="/tickets/new" class="text-gray-700 hover:text-primary-600 px-3 py-2 text-sm font-medium">
+          <a
+            href="/tickets/new"
+            class="text-gray-700 hover:text-primary-600 px-3 py-2 text-sm font-medium"
+          >
             Crear Ticket
           </a>
         </nav>
@@ -59,6 +66,8 @@
             <button
               on:click={toggleMenu}
               class="flex items-center space-x-2 text-gray-700 hover:text-primary-600 focus:outline-none focus:ring-2 focus:ring-primary-500 focus:ring-offset-2 rounded-md p-2"
+              tabindex="0"
+              on:keydown={e => e.key === 'Enter' && toggleMenu()}
             >
               <div class="w-8 h-8 bg-primary-100 rounded-full flex items-center justify-center">
                 <span class="text-primary-600 text-sm font-medium">
@@ -66,13 +75,16 @@
                 </span>
               </div>
               <span class="hidden sm:block text-sm">
-                {$auth.user?.first_name} {$auth.user?.last_name}
+                {$auth.user?.first_name}
+                {$auth.user?.last_name}
               </span>
               <Icon name="chevronDown" size="w-4 h-4" />
             </button>
 
             {#if isMenuOpen}
-              <div class="absolute right-0 mt-2 w-48 bg-white rounded-md shadow-lg border border-gray-200 z-50">
+              <div
+                class="absolute right-0 mt-2 w-48 bg-white rounded-md shadow-lg border border-gray-200 z-50"
+              >
                 <div class="py-1">
                   <div class="px-4 py-2 text-xs text-gray-500 border-b border-gray-200">
                     {$auth.user?.email}
@@ -80,13 +92,16 @@
                   <a
                     href="/profile"
                     class="block px-4 py-2 text-sm text-gray-700 hover:bg-gray-100"
-                    on:click={() => isMenuOpen = false}
+                    on:click={() => (isMenuOpen = false)}
                   >
                     Mi Perfil
                   </a>
                   <button
                     on:click={handleLogout}
                     class="block w-full text-left px-4 py-2 text-sm text-gray-700 hover:bg-gray-100"
+                    role="button"
+                    tabindex="0"
+                    on:keydown={e => e.key === 'Enter' && handleLogout()}
                   >
                     Cerrar Sesión
                   </button>
@@ -95,10 +110,7 @@
             {/if}
           </div>
         {:else}
-          <a
-            href="/login"
-            class="text-gray-700 hover:text-primary-600 text-sm font-medium"
-          >
+          <a href="/login" class="text-gray-700 hover:text-primary-600 text-sm font-medium">
             Iniciar Sesión
           </a>
         {/if}
@@ -109,10 +121,16 @@
     {#if showNavigation && $auth.isAuthenticated}
       <div class="md:hidden border-t border-gray-200 py-2">
         <nav class="flex space-x-4">
-          <a href="/tickets" class="text-gray-700 hover:text-primary-600 px-3 py-2 text-sm font-medium">
+          <a
+            href="/tickets"
+            class="text-gray-700 hover:text-primary-600 px-3 py-2 text-sm font-medium"
+          >
             Mis Tickets
           </a>
-          <a href="/tickets/new" class="text-gray-700 hover:text-primary-600 px-3 py-2 text-sm font-medium">
+          <a
+            href="/tickets/new"
+            class="text-gray-700 hover:text-primary-600 px-3 py-2 text-sm font-medium"
+          >
             Crear Ticket
           </a>
         </nav>
@@ -123,8 +141,5 @@
 
 <!-- Backdrop for mobile menu -->
 {#if isMenuOpen}
-  <div 
-    class="fixed inset-0 z-40 md:hidden" 
-    on:click={() => isMenuOpen = false}
-  ></div>
+  <div class="fixed inset-0 z-40 md:hidden" on:click={() => (isMenuOpen = false)} />
 {/if}

frontend-client/src/lib/stores/auth.ts

@@ -1,5 +1,5 @@
-import { writable } from 'svelte/store';
 import type { Writable } from 'svelte/store';
+import { writable } from 'svelte/store';
 
 // Types
 export interface User {
@@ -117,6 +117,8 @@ function createAuthStore() {
       if (typeof window !== 'undefined') {
         localStorage.removeItem('auth_token');
         localStorage.removeItem('auth_user');
+        // Immediate redirect after cleanup
+        window.location.href = '/login';
       }
       set(initialState);
     },

frontend-client/src/lib/stores/tickets.ts

@@ -1,9 +1,14 @@
-import { writable } from 'svelte/store';
-import { auth } from './auth.js';
-import { get } from 'svelte/store';
 import type { Writable } from 'svelte/store';
+import { get, writable } from 'svelte/store';
+import { auth } from './auth';
 
 // Types
+interface FastAPIValidationError {
+  loc: (string | number)[];
+  msg: string;
+  type: string;
+}
+
 export interface Ticket {
   id: string;
   title: string;
@@ -24,12 +29,13 @@ export interface Ticket {
 export interface TicketComment {
   id: string;
   ticket_id: string;
-  user_id: string;
-  user_name: string;
-  user_role: string;
+  author_id: string;
+  author_name: string;
+  author_role: string;
   content: string;
   is_internal: boolean;
   created_at: string;
+  updated_at: string;
 }
 
 export interface TicketAttachment {
@@ -74,18 +80,44 @@ const initialState: TicketsState = {
 async function apiCall(endpoint: string, options: RequestInit = {}) {
   const authState = get(auth);
 
+  if (!authState.token || !authState.user) {
+    throw new Error('Not authenticated');
+  }
+
   const response = await fetch(`/api/v1${endpoint}`, {
     ...options,
     headers: {
       'Content-Type': 'application/json',
       'Authorization': `Bearer ${authState.token}`,
+      'X-Tenant-ID': authState.user.tenant_id,
       ...options.headers
     }
   });
 
   if (!response.ok) {
-    const error = await response.json();
-    throw new Error(error.detail || 'Request failed');
+    let errorMessage = 'Request failed';
+    try {
+      const error = await response.json();
+      console.error('❌ API Error Response:', error);
+
+      // Manejar diferentes formatos de error de FastAPI
+      if (error.detail) {
+        if (Array.isArray(error.detail)) {
+          // Errores de validación de FastAPI
+          errorMessage = error.detail.map((e: FastAPIValidationError) => `${e.loc.join('.')}: ${e.msg}`).join(', ');
+        } else if (typeof error.detail === 'string') {
+          errorMessage = error.detail;
+        } else {
+          errorMessage = JSON.stringify(error.detail);
+        }
+      } else {
+        errorMessage = JSON.stringify(error);
+      }
+    } catch (e) {
+      errorMessage = `HTTP ${response.status}: ${response.statusText}`;
+    }
+
+    throw new Error(errorMessage);
   }
 
   return response.json();
@@ -100,13 +132,13 @@ function createTicketsStore() {
 
     // Load user's tickets
     loadTickets: async () => {
-      update(state => ({ ...state, isLoading: true, error: null }));
+      update((state: TicketsState) => ({ ...state, isLoading: true, error: null }));
 
       try {
         const tickets = await apiCall('/tickets/');
-        update(state => ({ ...state, tickets, isLoading: false }));
+        update((state: TicketsState) => ({ ...state, tickets, isLoading: false }));
       } catch (error) {
-        update(state => ({ 
+        update((state: TicketsState) => ({
           ...state,
           isLoading: false,
           error: error instanceof Error ? error.message : 'Failed to load tickets'
@@ -116,7 +148,7 @@ function createTicketsStore() {
 
     // Load specific ticket with details
     loadTicket: async (ticketId: string) => {
-      update(state => ({ ...state, isLoading: true, error: null }));
+      update((state: TicketsState) => ({ ...state, isLoading: true, error: null }));
 
       try {
         const [ticket, comments, attachments] = await Promise.all([
@@ -125,7 +157,7 @@ function createTicketsStore() {
           apiCall(`/tickets/${ticketId}/attachments`)
         ]);
 
-        update(state => ({ 
+        update((state: TicketsState) => ({
           ...state,
           currentTicket: ticket,
           comments,
@@ -133,25 +165,48 @@ function createTicketsStore() {
           isLoading: false
         }));
       } catch (error) {
-        update(state => ({ 
+        update((state: TicketsState) => ({
           ...state,
           isLoading: false,
           error: error instanceof Error ? error.message : 'Failed to load ticket'
         }));
       }
     },
+    // Reload only comments silently (for polling)
+    reloadComments: async (ticketId: string) => {
+      try {
+        const comments = await apiCall(`/tickets/${ticketId}/comments`);
+        update((state: TicketsState) => ({ ...state, comments }));
+      } catch (error) {
+        // Silent fail - no mostrar error en polling
+        console.error('Error reloading comments:', error);
+      }
+    },
+
 
     // Create new ticket
     createTicket: async (ticket: CreateTicketRequest) => {
-      update(state => ({ ...state, isLoading: true, error: null }));
+      update((state: TicketsState) => ({ ...state, isLoading: true, error: null }));
 
       try {
+        // Mapear campos del frontend al formato del backend
+        const ticketData = {
+          subject: ticket.title,           // ← Backend espera "subject" no "title"
+          description: ticket.description,
+          category_id: ticket.category_id,
+          priority: ticket.priority,
+          system_id: null                  // ← Opcional
+        };
+
+
+        console.log('Sending ticket data:', ticketData);
+
         const newTicket = await apiCall('/tickets/', {
           method: 'POST',
-          body: JSON.stringify(ticket)
+          body: JSON.stringify(ticketData)
         });
 
-        update(state => ({ 
+        update((state: TicketsState) => ({
           ...state,
           tickets: [newTicket, ...state.tickets],
           isLoading: false
@@ -159,7 +214,8 @@ function createTicketsStore() {
 
         return newTicket;
       } catch (error) {
-        update(state => ({ 
+        console.error('Create ticket error:', error);
+        update((state: TicketsState) => ({
           ...state,
           isLoading: false,
           error: error instanceof Error ? error.message : 'Failed to create ticket'
@@ -176,14 +232,14 @@ function createTicketsStore() {
           body: JSON.stringify({ content })
         });
 
-        update(state => ({ 
+        update((state: TicketsState) => ({
           ...state,
           comments: [...state.comments, comment]
         }));
 
         return comment;
       } catch (error) {
-        update(state => ({ 
+        update((state: TicketsState) => ({
           ...state,
           error: error instanceof Error ? error.message : 'Failed to add comment'
         }));
@@ -198,10 +254,16 @@ function createTicketsStore() {
         formData.append('file', file);
 
         const authState = get(auth);
+
+        if (!authState.token || !authState.user) {
+          throw new Error('Not authenticated');
+        }
+
         const response = await fetch(`/api/v1/tickets/${ticketId}/attachments`, {
           method: 'POST',
           headers: {
-            'Authorization': `Bearer ${authState.token}`
+            'Authorization': `Bearer ${authState.token}`,
+            'X-Tenant-ID': authState.user.tenant_id
           },
           body: formData
         });
@@ -211,16 +273,17 @@ function createTicketsStore() {
           throw new Error(error.detail || 'Upload failed');
         }
 
-        const attachment = await response.json();
+        const result = await response.json();
+        const attachment = result.data || result;
 
-        update(state => ({ 
+        update((state: TicketsState) => ({
           ...state,
           attachments: [...state.attachments, attachment]
         }));
 
         return attachment;
       } catch (error) {
-        update(state => ({ 
+        update((state: TicketsState) => ({
           ...state,
           error: error instanceof Error ? error.message : 'Failed to upload attachment'
         }));
@@ -236,15 +299,15 @@ function createTicketsStore() {
           body: JSON.stringify({ resolution })
         });
 
-        update(state => ({
+        update((state: TicketsState) => ({
           ...state,
           currentTicket: state.currentTicket?.id === ticketId ? updatedTicket : state.currentTicket,
-          tickets: state.tickets.map(t => t.id === ticketId ? updatedTicket : t)
+          tickets: state.tickets.map((t: Ticket) => t.id === ticketId ? updatedTicket : t)
         }));
 
         return updatedTicket;
       } catch (error) {
-        update(state => ({ 
+        update((state: TicketsState) => ({
           ...state,
           error: error instanceof Error ? error.message : 'Failed to close ticket'
         }));
@@ -254,17 +317,50 @@ function createTicketsStore() {
 
     // Clear error
     clearError: () => {
-      update(state => ({ ...state, error: null }));
+      update((state: TicketsState) => ({ ...state, error: null }));
     },
 
     // Clear current ticket
     clearCurrentTicket: () => {
-      update(state => ({ 
+      update((state: TicketsState) => ({
         ...state,
         currentTicket: null,
         comments: [],
         attachments: []
       }));
+    },
+
+    // Download attachment
+    downloadAttachment: async (ticketId: string, attachmentId: string, filename: string) => {
+      const authState = get(auth);
+
+      if (!authState.token || !authState.user) {
+        throw new Error('Not authenticated');
+      }
+
+      const response = await fetch(`/api/v1/tickets/${ticketId}/attachments/${attachmentId}/download`, {
+        method: 'GET',
+        headers: {
+          'Authorization': `Bearer ${authState.token}`,
+          'X-Tenant-ID': authState.user.tenant_id
+        }
+      });
+
+      if (!response.ok) {
+        const error = await response.json().catch(() => ({ detail: 'Download failed' }));
+        throw new Error(error.detail || 'Download failed');
+      }
+
+      // Crear blob y descargar
+      const blob = await response.blob();
+      const url = window.URL.createObjectURL(blob);
+      const a = document.createElement('a');
+      a.href = url;
+      a.download = filename;
+      document.body.appendChild(a);
+      a.click();
+      document.body.removeChild(a);
+      window.URL.revokeObjectURL(url);
     }
   };
 }

frontend-client/src/routes/+layout.svelte

@@ -23,6 +23,11 @@
     <slot />
   </main>
   
+  <!-- Footer with version -->
+  <footer class="py-4 text-center border-t border-gray-200 bg-white">
+    <p class="text-xs text-gray-400">ServiceManagerWeb v1.6.0 · © 2026 Aduanasoft</p>
+  </footer>
+  
   <!-- Toast notifications -->
   {#each $toast.toasts as toastMessage (toastMessage.id)}
     <Toast

frontend-client/src/routes/+page.svelte

@@ -26,59 +26,51 @@
   <div class="bg-gradient-to-r from-primary-500 to-primary-600 rounded-lg p-8 text-white mb-8">
     <div class="max-w-3xl">
       <h1 class="text-3xl font-bold mb-2">
-        Bienvenido, {$auth.user?.first_name} {$auth.user?.last_name}
+        Bienvenido, {$auth.user?.first_name}
+        {$auth.user?.last_name}
       </h1>
       <p class="text-primary-100 text-lg">
-        Gestiona tus tickets de soporte de manera eficiente. Crea nuevos tickets, 
-        da seguimiento a los existentes y mantente actualizado con el estado de tus solicitudes.
+        Gestiona tus tickets de soporte de manera eficiente. Crea nuevos tickets, da seguimiento a
+        los existentes y mantente actualizado con el estado de tus solicitudes.
       </p>
     </div>
   </div>
 
   <!-- Quick Actions -->
   <div class="grid grid-cols-1 md:grid-cols-3 gap-6 mb-8">
-    <a 
-      href="/tickets/new" 
-      class="card hover:shadow-lg transition-shadow group cursor-pointer"
-    >
+    <a href="/tickets/new" class="card hover:shadow-lg transition-shadow group cursor-pointer">
       <div class="card-content text-center">
-        <div class="w-12 h-12 bg-primary-100 rounded-lg flex items-center justify-center mx-auto mb-4 group-hover:bg-primary-200 transition-colors">
+        <div
+          class="w-12 h-12 bg-primary-100 rounded-lg flex items-center justify-center mx-auto mb-4 group-hover:bg-primary-200 transition-colors"
+        >
           <Icon name="plus" size="w-6 h-6" className="text-primary-600" />
         </div>
         <h3 class="text-lg font-medium text-gray-900 mb-2">Crear Ticket</h3>
-        <p class="text-gray-600 text-sm">
-          Reporta un problema o solicita soporte técnico
-        </p>
+        <p class="text-gray-600 text-sm">Reporta un problema o solicita soporte técnico</p>
       </div>
     </a>
 
-    <a 
-      href="/tickets" 
-      class="card hover:shadow-lg transition-shadow group cursor-pointer"
-    >
+    <a href="/tickets" class="card hover:shadow-lg transition-shadow group cursor-pointer">
       <div class="card-content text-center">
-        <div class="w-12 h-12 bg-blue-100 rounded-lg flex items-center justify-center mx-auto mb-4 group-hover:bg-blue-200 transition-colors">
+        <div
+          class="w-12 h-12 bg-blue-100 rounded-lg flex items-center justify-center mx-auto mb-4 group-hover:bg-blue-200 transition-colors"
+        >
           <Icon name="ticket" size="w-6 h-6" className="text-blue-600" />
         </div>
         <h3 class="text-lg font-medium text-gray-900 mb-2">Mis Tickets</h3>
-        <p class="text-gray-600 text-sm">
-          Consulta el estado de todos tus tickets
-        </p>
+        <p class="text-gray-600 text-sm">Consulta el estado de todos tus tickets</p>
       </div>
     </a>
 
-    <a 
-      href="/profile" 
-      class="card hover:shadow-lg transition-shadow group cursor-pointer"
-    >
+    <a href="/profile" class="card hover:shadow-lg transition-shadow group cursor-pointer">
       <div class="card-content text-center">
-        <div class="w-12 h-12 bg-green-100 rounded-lg flex items-center justify-center mx-auto mb-4 group-hover:bg-green-200 transition-colors">
+        <div
+          class="w-12 h-12 bg-green-100 rounded-lg flex items-center justify-center mx-auto mb-4 group-hover:bg-green-200 transition-colors"
+        >
           <Icon name="user" size="w-6 h-6" className="text-green-600" />
         </div>
         <h3 class="text-lg font-medium text-gray-900 mb-2">Mi Perfil</h3>
-        <p class="text-gray-600 text-sm">
-          Actualiza tu información personal
-        </p>
+        <p class="text-gray-600 text-sm">Actualiza tu información personal</p>
       </div>
     </a>
   </div>
@@ -93,35 +85,49 @@
     <div class="card-content">
       {#if $tickets.isLoading}
         <div class="text-center py-8">
-          <div class="spinner w-8 h-8 mx-auto mb-4"></div>
+          <div class="spinner w-8 h-8 mx-auto mb-4" />
           <p class="text-gray-600">Cargando tickets...</p>
         </div>
       {:else if $tickets.error}
         <div class="text-center py-8">
-          <div class="w-12 h-12 bg-red-100 rounded-lg flex items-center justify-center mx-auto mb-4">
+          <div
+            class="w-12 h-12 bg-red-100 rounded-lg flex items-center justify-center mx-auto mb-4"
+          >
             <svg class="w-6 h-6 text-red-600" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 8v4m0 4h.01M21 12a9 9 0 11-18 0 9 9 0 0118 0z" />
+              <path
+                stroke-linecap="round"
+                stroke-linejoin="round"
+                stroke-width="2"
+                d="M12 8v4m0 4h.01M21 12a9 9 0 11-18 0 9 9 0 0118 0z"
+              />
             </svg>
           </div>
           <p class="text-gray-600 mb-4">Error al cargar los tickets</p>
-          <button 
-            on:click={() => tickets.loadTickets()}
-            class="btn-primary px-4 py-2"
-          >
+          <button on:click={() => tickets.loadTickets()} class="btn-primary px-4 py-2">
             Reintentar
           </button>
         </div>
       {:else if $tickets.tickets.length === 0}
         <div class="text-center py-8">
-          <div class="w-12 h-12 bg-gray-100 rounded-lg flex items-center justify-center mx-auto mb-4">
-            <svg class="w-6 h-6 text-gray-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 5H7a2 2 0 00-2 2v10a2 2 0 002 2h8a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2" />
+          <div
+            class="w-12 h-12 bg-gray-100 rounded-lg flex items-center justify-center mx-auto mb-4"
+          >
+            <svg
+              class="w-6 h-6 text-gray-400"
+              fill="none"
+              stroke="currentColor"
+              viewBox="0 0 24 24"
+            >
+              <path
+                stroke-linecap="round"
+                stroke-linejoin="round"
+                stroke-width="2"
+                d="M9 5H7a2 2 0 00-2 2v10a2 2 0 002 2h8a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2"
+              />
             </svg>
           </div>
           <p class="text-gray-600 mb-4">No tienes tickets creados</p>
-          <a href="/tickets/new" class="btn-primary px-4 py-2">
-            Crear tu primer ticket
-          </a>
+          <a href="/tickets/new" class="btn-primary px-4 py-2"> Crear tu primer ticket </a>
         </div>
       {:else}
         <div class="space-y-4">
@@ -144,11 +150,17 @@
                 </div>
                 <div class="ml-4">
                   <span class="badge-{ticket.status.toLowerCase().replace('_', '-')}">
-                    {ticket.status === 'NEW' ? 'Nuevo' : 
-                     ticket.status === 'IN_PROGRESS' ? 'En Progreso' :
-                     ticket.status === 'WAITING_FOR_CLIENT' ? 'Esperando Cliente' :
-                     ticket.status === 'RESOLVED' ? 'Resuelto' :
-                     ticket.status === 'CLOSED' ? 'Cerrado' : 'Reabierto'}
+                    {ticket.status === 'NEW'
+                      ? 'Nuevo'
+                      : ticket.status === 'IN_PROGRESS'
+                      ? 'En Progreso'
+                      : ticket.status === 'WAITING_FOR_CLIENT'
+                      ? 'Esperando Cliente'
+                      : ticket.status === 'RESOLVED'
+                      ? 'Resuelto'
+                      : ticket.status === 'CLOSED'
+                      ? 'Cerrado'
+                      : 'Reabierto'}
                   </span>
                 </div>
               </div>
@@ -174,5 +186,6 @@
     -webkit-line-clamp: 2;
     -webkit-box-orient: vertical;
     overflow: hidden;
+    line-clamp: 2; /* Propiedad estándar para compatibilidad */
   }
 </style>

frontend-client/src/routes/login/+page.svelte

@@ -62,183 +62,213 @@
   }
 </script>
 
-
 <div class="min-h-screen flex font-sans bg-white overflow-hidden">
-  
   <!-- Left Side: Hero Image & Overlay (55% width) -->
   <div class="hidden lg:flex w-[55%] relative bg-gray-900">
     <!-- Background Image -->
     <div
-        class="absolute inset-0 bg-cover bg-center z-0" 
-        style="background-image: url('/images/SOPORTE.webp'); opacity: 1;"
-    ></div>
+      class="absolute inset-0 bg-cover bg-center z-0"
+      style="background-image: url('/images/SOPORTE.webp'); opacity: 1;"
+    />
 
     <!-- Gradient Overlay -->
-    <div class="absolute inset-0 bg-gradient-to-br from-[#1e3a8a]/75 to-[#172554]/75 z-10"></div>
-    <div class="absolute inset-0 bg-gradient-to-t from-black/50 via-transparent to-transparent z-10"></div>
+    <div class="absolute inset-0 bg-gradient-to-br from-[#1e3a8a]/75 to-[#172554]/75 z-10" />
+    <div
+      class="absolute inset-0 bg-gradient-to-t from-black/50 via-transparent to-transparent z-10"
+    />
 
     <!-- Content -->
     <div class="relative z-20 w-full h-full flex flex-col justify-between p-16 text-white">
-        <!-- Top Logo (Left) -->
-        <div class="flex flex-col">
-            <img src="/images/Logo%20AS%20blanco(1).png" alt="AduanaSoft" class="h-32 w-auto object-contain self-start drop-shadow-lg" />
-        </div>
+      <!-- Top Logo (Left) -->
+      <div class="flex flex-col">
+        <img
+          src="/images/Logo%20AS%20blanco(1).png"
+          alt="AduanaSoft"
+          class="h-32 w-auto object-contain self-start drop-shadow-lg"
+        />
+      </div>
 
-        <!-- Main Hero Text -->
-        <div class="space-y-4 mb-12">
-            <h2 class="text-5xl font-extrabold tracking-tight drop-shadow-xl leading-tight">
-                Control Total <br/>
-                de Servicios de TI
-            </h2>
-            <p class="text-lg text-blue-100/90 font-light max-w-lg leading-relaxed drop-shadow-md">
-                Portal de atención a clientes. Genere tickets de soporte técnico para nuestros sistemas y reciba asistencia especializada para garantizar la continuidad de su operación.
-            </p>
-        </div>
+      <!-- Main Hero Text -->
+      <div class="space-y-4 mb-12">
+        <h2 class="text-5xl font-extrabold tracking-tight drop-shadow-xl leading-tight">
+          Control Total <br />
+          de Servicios de TI
+        </h2>
+        <p class="text-lg text-blue-100/90 font-light max-w-lg leading-relaxed drop-shadow-md">
+          Portal de atención a clientes. Genere tickets de soporte técnico para nuestros sistemas y
+          reciba asistencia especializada para garantizar la continuidad de su operación.
+        </p>
+      </div>
 
-        <!-- Bottom Footer -->
-        <div class="text-xs font-bold tracking-[0.2em] text-blue-200/60 uppercase">
-            ServiceManager Enterprise Platform
-        </div>
+      <!-- Bottom Footer -->
+      <div class="text-xs font-bold tracking-[0.2em] text-blue-200/60 uppercase">
+        ServiceManager Enterprise Platform
+      </div>
     </div>
   </div>
 
   <!-- Right Side: Login Form (45% width) -->
-  <div class="w-full lg:w-[45%] flex flex-col justify-center items-center p-8 lg:p-16 bg-white relative">
-    
+  <div
+    class="w-full lg:w-[45%] flex flex-col justify-center items-center p-8 lg:p-16 bg-white relative"
+  >
     <div class="w-full max-w-md space-y-8">
-        <!-- Logo & Header -->
-        <div class="text-center space-y-2">
-            <h2 class="text-3xl font-bold text-gray-900">Bienvenido</h2>
-            <p class="text-gray-500 text-sm">Ingrese a su cuenta corporativa</p>
+      <!-- Logo & Header -->
+      <div class="text-center space-y-2">
+        <h2 class="text-3xl font-bold text-gray-900">Bienvenido</h2>
+        <p class="text-gray-500 text-sm">Ingrese a su cuenta corporativa</p>
+      </div>
+
+      <!-- Form -->
+      <form on:submit|preventDefault={handleLogin} class="space-y-6 mt-8">
+        {#if errorMessage}
+          <div
+            class="p-3 rounded-md bg-red-50 border border-red-100 flex items-center gap-3 animate-fade-in text-sm text-red-600"
+          >
+            <Icon name="alert-circle" class="w-4 h-4 flex-shrink-0" />
+            {errorMessage}
+          </div>
+        {/if}
+
+        {#if !showTwoFactor}
+          <div class="space-y-5">
+            <!-- Email Input -->
+            <div class="space-y-1.5">
+              <label for="email" class="block text-sm font-semibold text-gray-700"
+                >Correo Electrónico</label
+              >
+              <div class="relative group">
+                <div class="absolute inset-y-0 left-0 pl-3 flex items-center pointer-events-none">
+                  <Icon
+                    name="mail"
+                    class="w-5 h-5 text-gray-400 group-focus-within:text-blue-600 transition-colors"
+                  />
+                </div>
+                <input
+                  id="email"
+                  type="email"
+                  bind:value={email}
+                  on:keydown={handleKeyDown}
+                  class="block w-full pl-10 pr-3 py-3 bg-[#fff9c4]/0 hover:bg-gray-50 focus:bg-white border text-gray-900 border-gray-300 rounded-lg focus:ring-2 focus:ring-blue-600 focus:border-transparent transition-all duration-200 sm:text-sm"
+                  placeholder="admin@aduanasoft.com"
+                  required
+                  disabled={isLoading}
+                />
+              </div>
+            </div>
+
+            <!-- Password Input -->
+            <div class="space-y-1.5">
+              <label for="password" class="block text-sm font-semibold text-gray-700"
+                >Contraseña</label
+              >
+              <div class="relative group">
+                <div class="absolute inset-y-0 left-0 pl-3 flex items-center pointer-events-none">
+                  <Icon
+                    name="lock"
+                    class="w-5 h-5 text-gray-400 group-focus-within:text-blue-600 transition-colors"
+                  />
+                </div>
+                {#if showPassword}
+                  <input
+                    id="password"
+                    type="text"
+                    bind:value={password}
+                    on:keydown={handleKeyDown}
+                    class="block w-full pl-10 pr-10 py-3 bg-[#fff9c4]/0 hover:bg-gray-50 focus:bg-white border text-gray-900 border-gray-300 rounded-lg focus:ring-2 focus:ring-blue-600 focus:border-transparent transition-all duration-200 sm:text-sm"
+                    placeholder="••••••••"
+                    required
+                    disabled={isLoading}
+                  />
+                {:else}
+                  <input
+                    id="password"
+                    type="password"
+                    bind:value={password}
+                    on:keydown={handleKeyDown}
+                    class="block w-full pl-10 pr-10 py-3 bg-[#fff9c4]/0 hover:bg-gray-50 focus:bg-white border text-gray-900 border-gray-300 rounded-lg focus:ring-2 focus:ring-blue-600 focus:border-transparent transition-all duration-200 sm:text-sm"
+                    placeholder="••••••••"
+                    required
+                    disabled={isLoading}
+                  />
+                {/if}
+                <button
+                  type="button"
+                  class="absolute inset-y-0 right-0 pr-3 flex items-center cursor-pointer text-gray-400 hover:text-gray-600 focus:outline-none"
+                  on:click={() => (showPassword = !showPassword)}
+                >
+                  <Icon name={showPassword ? 'eye-off' : 'eye'} class="w-5 h-5" />
+                </button>
+              </div>
+            </div>
+
+            <div class="flex items-center justify-between">
+              <div class="flex items-center">
+                <input
+                  id="remember-me"
+                  name="remember-me"
+                  type="checkbox"
+                  class="h-4 w-4 text-blue-600 focus:ring-blue-500 border-gray-300 rounded cursor-pointer"
+                />
+                <label
+                  for="remember-me"
+                  class="ml-2 block text-sm text-gray-500 cursor-pointer select-none"
+                  >Recordar en este equipo</label
+                >
+              </div>
+              <a
+                href="/forgot-password"
+                class="text-sm font-medium text-blue-600 hover:text-blue-500"
+              >
+                Olvide mi clave
+              </a>
+            </div>
+          </div>
+        {:else}
+          <!-- 2FA Input -->
+          <div class="space-y-4 animate-slide-up">
+            <label for="code" class="block text-sm font-medium text-gray-700 text-center"
+              >Código de Verificación (2FA)</label
+            >
+            <p class="text-xs text-center text-gray-500 mb-4">Ingrese el código de 6 dígitos</p>
+
+            <div class="relative">
+              <div class="absolute inset-y-0 left-0 pl-3 flex items-center pointer-events-none">
+                <Icon name="shield-check" class="w-5 h-5 text-blue-500" />
+              </div>
+              <input
+                id="code"
+                type="text"
+                bind:value={totpCode}
+                on:keydown={handleKeyDown}
+                class="block w-full pl-10 py-3 text-center tracking-[0.5em] font-mono text-lg border-gray-300 rounded-lg focus:ring-2 focus:ring-blue-600 focus:border-transparent"
+                placeholder="000000"
+                maxlength="6"
+                required
+                disabled={isLoading}
+              />
+            </div>
+          </div>
+        {/if}
+
+        <div class="pt-2">
+          <button
+            type="submit"
+            class="w-full flex justify-center py-3.5 px-4 border border-transparent rounded-lg shadow-sm text-sm font-bold text-white bg-blue-700 hover:bg-blue-800 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-blue-500 disabled:opacity-50 disabled:cursor-not-allowed transition-all duration-200"
+            disabled={isLoading}
+          >
+            {#if isLoading}
+              <Icon name="loader-2" class="w-5 h-5 animate-spin mr-2" />
+              Procesando...
+            {:else}
+              {showTwoFactor ? 'Verificar Acceso' : 'Acceder al Portal'}
+            {/if}
+          </button>
         </div>
 
-        <!-- Form -->
-        <form on:submit|preventDefault={handleLogin} class="space-y-6 mt-8">
-           {#if errorMessage}
-             <div class="p-3 rounded-md bg-red-50 border border-red-100 flex items-center gap-3 animate-fade-in text-sm text-red-600">
-               <Icon name="alert-circle" class="w-4 h-4 flex-shrink-0" />
-               {errorMessage}
-             </div>
-           {/if}
-
-           {#if !showTwoFactor}
-             <div class="space-y-5">
-               <!-- Email Input -->
-               <div class="space-y-1.5">
-                 <label for="email" class="block text-sm font-semibold text-gray-700">Correo Electrónico</label>
-                 <div class="relative group">
-                   <div class="absolute inset-y-0 left-0 pl-3 flex items-center pointer-events-none">
-                     <Icon name="mail" class="w-5 h-5 text-gray-400 group-focus-within:text-blue-600 transition-colors" />
-                   </div>
-                   <input
-                     id="email"
-                     type="email"
-                     bind:value={email}
-                     on:keydown={handleKeyDown}
-                     class="block w-full pl-10 pr-3 py-3 bg-[#fff9c4]/0 hover:bg-gray-50 focus:bg-white border text-gray-900 border-gray-300 rounded-lg focus:ring-2 focus:ring-blue-600 focus:border-transparent transition-all duration-200 sm:text-sm"
-                     placeholder="admin@aduanasoft.com"
-                     required
-                     disabled={isLoading}
-                   />
-                 </div>
-               </div>
-
-               <!-- Password Input -->
-               <div class="space-y-1.5">
-                 <label for="password" class="block text-sm font-semibold text-gray-700">Contraseña</label>
-                 <div class="relative group">
-                   <div class="absolute inset-y-0 left-0 pl-3 flex items-center pointer-events-none">
-                     <Icon name="lock" class="w-5 h-5 text-gray-400 group-focus-within:text-blue-600 transition-colors" />
-                   </div>
-                   {#if showPassword}
-                     <input
-                       id="password"
-                       type="text"
-                       bind:value={password}
-                       on:keydown={handleKeyDown}
-                       class="block w-full pl-10 pr-10 py-3 bg-[#fff9c4]/0 hover:bg-gray-50 focus:bg-white border text-gray-900 border-gray-300 rounded-lg focus:ring-2 focus:ring-blue-600 focus:border-transparent transition-all duration-200 sm:text-sm"
-                       placeholder="••••••••"
-                       required
-                       disabled={isLoading}
-                     />
-                   {:else}
-                     <input
-                       id="password"
-                       type="password"
-                       bind:value={password}
-                       on:keydown={handleKeyDown}
-                       class="block w-full pl-10 pr-10 py-3 bg-[#fff9c4]/0 hover:bg-gray-50 focus:bg-white border text-gray-900 border-gray-300 rounded-lg focus:ring-2 focus:ring-blue-600 focus:border-transparent transition-all duration-200 sm:text-sm"
-                       placeholder="••••••••"
-                       required
-                       disabled={isLoading}
-                     />
-                   {/if}
-                   <button 
-                     type="button"
-                     class="absolute inset-y-0 right-0 pr-3 flex items-center cursor-pointer text-gray-400 hover:text-gray-600 focus:outline-none"
-                     on:click={() => showPassword = !showPassword}
-                   >
-                     <Icon name={showPassword ? 'eye-off' : 'eye'} class="w-5 h-5" />
-                   </button>
-                 </div>
-               </div>
-               
-               <div class="flex items-center justify-between">
-                 <div class="flex items-center">
-                    <input id="remember-me" name="remember-me" type="checkbox" class="h-4 w-4 text-blue-600 focus:ring-blue-500 border-gray-300 rounded cursor-pointer">
-                    <label for="remember-me" class="ml-2 block text-sm text-gray-500 cursor-pointer select-none">Recordar en este equipo</label>
-                 </div>
-                 <a href="/forgot-password" class="text-sm font-medium text-blue-600 hover:text-blue-500">
-                    Olvide mi clave
-                 </a>
-               </div>
-             </div>
-           
-           {:else}
-             <!-- 2FA Input -->
-             <div class="space-y-4 animate-slide-up">
-               <label for="code" class="block text-sm font-medium text-gray-700 text-center">Código de Verificación (2FA)</label>
-               <p class="text-xs text-center text-gray-500 mb-4">Ingrese el código de 6 dígitos</p>
-               
-               <div class="relative">
-                 <div class="absolute inset-y-0 left-0 pl-3 flex items-center pointer-events-none">
-                   <Icon name="shield-check" class="w-5 h-5 text-blue-500" />
-                 </div>
-                 <input
-                   id="code"
-                   type="text"
-                   bind:value={totpCode}
-                   on:keydown={handleKeyDown}
-                   class="block w-full pl-10 py-3 text-center tracking-[0.5em] font-mono text-lg border-gray-300 rounded-lg focus:ring-2 focus:ring-blue-600 focus:border-transparent"
-                   placeholder="000000"
-                   maxlength="6"
-                   required
-                   disabled={isLoading}
-                   autofocus
-                 />
-               </div>
-             </div>
-           {/if}
-
-           <div class="pt-2">
-             <button
-               type="submit"
-               class="w-full flex justify-center py-3.5 px-4 border border-transparent rounded-lg shadow-sm text-sm font-bold text-white bg-blue-700 hover:bg-blue-800 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-blue-500 disabled:opacity-50 disabled:cursor-not-allowed transition-all duration-200"
-               disabled={isLoading}
-             >
-               {#if isLoading}
-                 <Icon name="loader-2" class="w-5 h-5 animate-spin mr-2" />
-                 Procesando...
-               {:else}
-                 {showTwoFactor ? 'Verificar Acceso' : 'Acceder al Portal'}
-               {/if}
-             </button>
-           </div>
-           
-           <div class="mt-8 text-center text-xs text-gray-400">
-             © 2026 Aduanasoft. Acceso exclusivo autorizado.
-           </div>
-        </form>
+        <div class="mt-8 text-center text-xs text-gray-400">
+          © 2026 Aduanasoft. Acceso exclusivo autorizado.
+        </div>
+      </form>
     </div>
   </div>
 </div>

frontend-client/src/routes/tickets/[id]/+page.svelte

@@ -14,6 +14,17 @@
   let closeResolution = '';
   let fileInput: HTMLInputElement;
   let isUploading = false;
+  let pollingInterval: any = null;
+  let showAttachments = true; // Variable para controlar la visibilidad de attachments
+
+  async function loadComments() {
+    try {
+      await tickets.reloadComments(ticketId);
+    } catch (error) {
+      // No mostrar error en polling silencioso
+      console.error('Error recargando comentarios:', error);
+    }
+  }
 
   onMount(() => {
     // Redirect if not authenticated
@@ -25,7 +36,19 @@
     ticketId = $page.params.id;
     if (ticketId) {
       tickets.loadTicket(ticketId);
+
+      // Polling cada 3 segundos
+      pollingInterval = setInterval(() => {
+        loadComments();
+      }, 3000);
     }
+
+    // Cleanup cuando se desmonte el componente
+    return () => {
+      if (pollingInterval) {
+        clearInterval(pollingInterval);
+      }
+    };
   });
 
   // Format date
@@ -86,8 +109,13 @@
 
     // Validate file type
     const allowedTypes = [
-      'image/jpeg', 'image/png', 'image/gif', 'image/webp',
-      'application/pdf', 'text/plain', 'application/msword',
+      'image/jpeg',
+      'image/png',
+      'image/gif',
+      'image/webp',
+      'application/pdf',
+      'text/plain',
+      'application/msword',
       'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
       'application/vnd.ms-excel',
       'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet'
@@ -111,6 +139,16 @@
     }
   }
 
+  async function handleDownloadAttachment(attachment: any) {
+    try {
+      await tickets.downloadAttachment(ticketId, attachment.id, attachment.original_filename);
+      toast.success('Descarga iniciada');
+    } catch (error: any) {
+      console.error('Download error:', error);
+      toast.error(error.message || 'Error al descargar el archivo');
+    }
+  }
+
   function handleCloseTicket() {
     showCloseDialog = true;
   }
@@ -135,7 +173,8 @@
   }
 
   // Check if user can close ticket
-  $: canClose = $tickets.currentTicket && 
+  $: canClose =
+    $tickets.currentTicket &&
     ['RESOLVED', 'WAITING_FOR_CLIENT'].includes($tickets.currentTicket.status);
 </script>
 
@@ -148,22 +187,24 @@
 <div class="max-w-6xl mx-auto px-4 sm:px-6 lg:px-8 py-8">
   {#if $tickets.isLoading}
     <div class="text-center py-12">
-      <div class="spinner w-8 h-8 mx-auto mb-4"></div>
+      <div class="spinner w-8 h-8 mx-auto mb-4" />
       <p class="text-gray-600">Cargando ticket...</p>
     </div>
   {:else if $tickets.error}
     <div class="text-center py-12">
       <div class="w-12 h-12 bg-red-100 rounded-lg flex items-center justify-center mx-auto mb-4">
         <svg class="w-6 h-6 text-red-600" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-          <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 8v4m0 4h.01M21 12a9 9 0 11-18 0 9 9 0 0118 0z" />
+          <path
+            stroke-linecap="round"
+            stroke-linejoin="round"
+            stroke-width="2"
+            d="M12 8v4m0 4h.01M21 12a9 9 0 11-18 0 9 9 0 0118 0z"
+          />
         </svg>
       </div>
       <h3 class="text-lg font-medium text-gray-900 mb-2">Error al cargar ticket</h3>
       <p class="text-gray-600 mb-4">{$tickets.error}</p>
-      <button 
-        on:click={() => tickets.loadTicket(ticketId)}
-        class="btn-primary px-4 py-2"
-      >
+      <button on:click={() => tickets.loadTicket(ticketId)} class="btn-primary px-4 py-2">
         Reintentar
       </button>
     </div>
@@ -235,42 +276,79 @@
         {#if $tickets.attachments.length > 0}
           <div class="card">
             <div class="card-header">
-              <h3 class="text-lg font-semibold text-gray-900">Archivos Adjuntos</h3>
-            </div>
-            <div class="card-content">
-              <div class="space-y-3">
-                {#each $tickets.attachments as attachment}
-                  <div class="flex items-center justify-between p-3 bg-gray-50 rounded-lg">
-                    <div class="flex items-center space-x-3">
-                      <div class="w-8 h-8 bg-gray-200 rounded flex items-center justify-center">
-                        <svg class="w-4 h-4 text-gray-600" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-                          <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M15.172 7l-6.586 6.586a2 2 0 102.828 2.828l6.414-6.586a4 4 0 00-5.656-5.656l-6.415 6.585a6 6 0 108.486 8.486L20.5 13" />
-                        </svg>
-                      </div>
-                      <div>
-                        <p class="text-sm font-medium text-gray-900">
-                          {attachment.original_filename}
-                        </p>
-                        <p class="text-xs text-gray-500">
-                          {Math.round(attachment.size_bytes / 1024)} KB • 
-                          Subido por {attachment.uploaded_by_name} • 
-                          {formatDate(attachment.uploaded_at)}
-                        </p>
-                      </div>
-                    </div>
-                    <a
-                      href="/api/v1/tickets/{ticketId}/attachments/{attachment.id}/download"
-                      class="btn-ghost p-2"
-                      target="_blank"
-                    >
-                      <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-                        <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 10v6m0 0l-3-3m3 3l3-3m2 8H7a2 2 0 01-2-2V5a2 2 0 012-2h5.586a1 1 0 01.707.293l5.414 5.414a1 1 0 01.293.707V19a2 2 0 01-2 2z" />
-                      </svg>
-                    </a>
-                  </div>
-                {/each}
+              <div class="flex items-center justify-between">
+                <h3 class="text-lg font-semibold text-gray-900 flex items-center space-x-2">
+                  <span>Archivos Adjuntos</span>
+                  <span
+                    class="inline-flex items-center px-2.5 py-0.5 rounded-full text-xs font-medium bg-blue-100 text-blue-800"
+                  >
+                    {$tickets.attachments.length} archivo{$tickets.attachments.length !== 1
+                      ? 's'
+                      : ''}
+                  </span>
+                </h3>
+                <button
+                  class="text-sm text-gray-500 hover:text-gray-700"
+                  title="Ver/Ocultar archivos adjuntos"
+                  on:click={() => (showAttachments = !showAttachments)}
+                >
+                  {showAttachments ? 'Ocultar' : 'Ver'} archivos
+                </button>
               </div>
             </div>
+            {#if showAttachments}
+              <div class="card-content">
+                <div class="space-y-3">
+                  {#each $tickets.attachments as attachment}
+                    <div
+                      class="flex items-center justify-between p-3 bg-gray-50 rounded-lg hover:bg-gray-100 transition-colors"
+                    >
+                      <div class="flex items-center space-x-3">
+                        <div class="w-8 h-8 bg-gray-200 rounded flex items-center justify-center">
+                          <svg
+                            class="w-4 h-4 text-gray-600"
+                            fill="none"
+                            stroke="currentColor"
+                            viewBox="0 0 24 24"
+                          >
+                            <path
+                              stroke-linecap="round"
+                              stroke-linejoin="round"
+                              stroke-width="2"
+                              d="M15.172 7l-6.586 6.586a2 2 0 102.828 2.828l6.414-6.586a4 4 0 00-5.656-5.656l-6.415 6.585a6 6 0 108.486 8.486L20.5 13"
+                            />
+                          </svg>
+                        </div>
+                        <div>
+                          <p class="text-sm font-medium text-gray-900">
+                            {attachment.original_filename}
+                          </p>
+                          <p class="text-xs text-gray-500">
+                            {Math.round(attachment.size_bytes / 1024)} KB • Subido por {attachment.uploaded_by_name}
+                            •
+                            {formatDate(attachment.uploaded_at)}
+                          </p>
+                        </div>
+                      </div>
+                      <button
+                        on:click={() => handleDownloadAttachment(attachment)}
+                        class="btn-ghost p-2 hover:bg-blue-100 rounded-md transition-colors"
+                        title="Descargar archivo"
+                      >
+                        <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+                          <path
+                            stroke-linecap="round"
+                            stroke-linejoin="round"
+                            stroke-width="2"
+                            d="M12 10v6m0 0l-3-3m3 3l3-3m2 8H7a2 2 0 01-2-2V5a2 2 0 012-2h5.586a1 1 0 01.707.293l5.414 5.414a1 1 0 01.293.707V19a2 2 0 01-2 2z"
+                          />
+                        </svg>
+                      </button>
+                    </div>
+                  {/each}
+                </div>
+              </div>
+            {/if}
           </div>
         {/if}
 
@@ -287,16 +365,24 @@
             {:else}
               <div class="space-y-4">
                 {#each $tickets.comments as comment}
+                  {console.log('Comment:', comment)}
                   <div class="flex space-x-3">
-                    <div class="w-8 h-8 bg-primary-100 rounded-full flex items-center justify-center flex-shrink-0">
+                    <div
+                      class="w-8 h-8 bg-primary-100 rounded-full flex items-center justify-center flex-shrink-0"
+                    >
                       <span class="text-primary-600 text-xs font-medium">
-                        {comment.user_name.split(' ').map(n => n[0]).join('')}
+                        {comment.author_name
+                          ? comment.author_name
+                              .split(' ')
+                              .map(n => n[0])
+                              .join('')
+                          : '??'}
                       </span>
                     </div>
                     <div class="flex-1 min-w-0">
                       <div class="flex items-center space-x-2 mb-1">
                         <span class="text-sm font-medium text-gray-900">
-                          {comment.user_name}
+                          {comment.author_name}
                         </span>
                         <span class="text-xs text-gray-500">
                           {formatDate(comment.created_at)}
@@ -325,7 +411,7 @@
                   placeholder="Escribe tu comentario o respuesta..."
                   bind:value={newComment}
                   disabled={isSubmittingComment}
-                ></textarea>
+                />
 
                 <div class="flex justify-between items-center">
                   <div class="flex items-center space-x-4">
@@ -344,10 +430,15 @@
                       disabled={isUploading}
                     >
                       {#if isUploading}
-                        <div class="spinner w-4 h-4"></div>
+                        <div class="spinner w-4 h-4" />
                       {:else}
                         <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-                          <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M15.172 7l-6.586 6.586a2 2 0 102.828 2.828l6.414-6.586a4 4 0 00-5.656-5.656l-6.415 6.585a6 6 0 108.486 8.486L20.5 13" />
+                          <path
+                            stroke-linecap="round"
+                            stroke-linejoin="round"
+                            stroke-width="2"
+                            d="M15.172 7l-6.586 6.586a2 2 0 102.828 2.828l6.414-6.586a4 4 0 00-5.656-5.656l-6.415 6.585a6 6 0 108.486 8.486L20.5 13"
+                          />
                         </svg>
                       {/if}
                       <span class="text-sm">Adjuntar archivo</span>
@@ -361,7 +452,7 @@
                   >
                     {#if isSubmittingComment}
                       <div class="flex items-center space-x-2">
-                        <div class="spinner w-4 h-4"></div>
+                        <div class="spinner w-4 h-4" />
                         <span>Enviando...</span>
                       </div>
                     {:else}
@@ -385,12 +476,16 @@
           <div class="card-content space-y-4">
             <div>
               <dt class="text-sm font-medium text-gray-500">ID del Ticket</dt>
-              <dd class="text-sm text-gray-900 font-mono">#{$tickets.currentTicket.id.substring(0, 8)}</dd>
+              <dd class="text-sm text-gray-900 font-mono">
+                #{$tickets.currentTicket.id.substring(0, 8)}
+              </dd>
             </div>
 
             <div>
               <dt class="text-sm font-medium text-gray-500">Categoría</dt>
-              <dd class="text-sm text-gray-900">{$tickets.currentTicket.category_name || 'Sin categoría'}</dd>
+              <dd class="text-sm text-gray-900">
+                {$tickets.currentTicket.category_name || 'Sin categoría'}
+              </dd>
             </div>
 
             {#if $tickets.currentTicket.assigned_to_name}
@@ -413,7 +508,12 @@
             {#if $tickets.currentTicket.due_date}
               <div>
                 <dt class="text-sm font-medium text-gray-500">Fecha límite</dt>
-                <dd class="text-sm text-gray-900 {new Date($tickets.currentTicket.due_date) < new Date() ? 'text-red-600' : ''}">
+                <dd
+                  class="text-sm text-gray-900 {new Date($tickets.currentTicket.due_date) <
+                  new Date()
+                    ? 'text-red-600'
+                    : ''}"
+                >
                   {formatDate($tickets.currentTicket.due_date)}
                   {#if new Date($tickets.currentTicket.due_date) < new Date()}
                     <span class="block text-xs text-red-500">¡Vencido!</span>
@@ -431,26 +531,47 @@
 <!-- Close Ticket Dialog -->
 {#if showCloseDialog}
   <div class="fixed inset-0 z-50 overflow-y-auto">
-    <div class="flex items-center justify-center min-h-screen pt-4 px-4 pb-20 text-center sm:block sm:p-0">
-      <div class="fixed inset-0 transition-opacity" on:click={cancelCloseTicket}>
-        <div class="absolute inset-0 bg-gray-500 opacity-75"></div>
+    <div
+      class="flex items-center justify-center min-h-screen pt-4 px-4 pb-20 text-center sm:block sm:p-0"
+    >
+      <div
+        class="fixed inset-0 transition-opacity"
+        role="dialog"
+        tabindex="0"
+        on:click={cancelCloseTicket}
+        on:keydown={e => e.key === 'Escape' && cancelCloseTicket()}
+      >
+        <div class="absolute inset-0 bg-gray-500 opacity-75" />
       </div>
 
-      <div class="inline-block align-bottom bg-white rounded-lg text-left overflow-hidden shadow-xl transform transition-all sm:my-8 sm:align-middle sm:max-w-lg sm:w-full">
+      <div
+        class="inline-block align-bottom bg-white rounded-lg text-left overflow-hidden shadow-xl transform transition-all sm:my-8 sm:align-middle sm:max-w-lg sm:w-full"
+      >
         <div class="bg-white px-4 pt-5 pb-4 sm:p-6 sm:pb-4">
           <div class="sm:flex sm:items-start">
-            <div class="mx-auto flex-shrink-0 flex items-center justify-center h-12 w-12 rounded-full bg-green-100 sm:mx-0 sm:h-10 sm:w-10">
-              <svg class="h-6 w-6 text-green-600" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M5 13l4 4L19 7" />
+            <div
+              class="mx-auto flex-shrink-0 flex items-center justify-center h-12 w-12 rounded-full bg-green-100 sm:mx-0 sm:h-10 sm:w-10"
+            >
+              <svg
+                class="h-6 w-6 text-green-600"
+                fill="none"
+                stroke="currentColor"
+                viewBox="0 0 24 24"
+              >
+                <path
+                  stroke-linecap="round"
+                  stroke-linejoin="round"
+                  stroke-width="2"
+                  d="M5 13l4 4L19 7"
+                />
               </svg>
             </div>
             <div class="mt-3 text-center sm:mt-0 sm:ml-4 sm:text-left">
-              <h3 class="text-lg leading-6 font-medium text-gray-900">
-                Cerrar Ticket
-              </h3>
+              <h3 class="text-lg leading-6 font-medium text-gray-900">Cerrar Ticket</h3>
               <div class="mt-2">
                 <p class="text-sm text-gray-500">
-                  ¿Estás seguro de que quieres cerrar este ticket? Esta acción indica que el problema ha sido resuelto satisfactoriamente.
+                  ¿Estás seguro de que quieres cerrar este ticket? Esta acción indica que el
+                  problema ha sido resuelto satisfactoriamente.
                 </p>
               </div>
 
@@ -465,7 +586,7 @@
                   placeholder="Describe cómo se resolvió el problema o agrega comentarios finales..."
                   bind:value={closeResolution}
                   disabled={isClosingTicket}
-                ></textarea>
+                />
               </div>
             </div>
           </div>
@@ -479,7 +600,7 @@
           >
             {#if isClosingTicket}
               <div class="flex items-center space-x-2">
-                <div class="spinner w-4 h-4"></div>
+                <div class="spinner w-4 h-4" />
                 <span>Cerrando...</span>
               </div>
             {:else}

frontend-client/tsconfig.json

@@ -0,0 +1,34 @@
+{
+    "extends": "./.svelte-kit/tsconfig.json",
+    "compilerOptions": {
+        "allowJs": true,
+        "checkJs": true,
+        "esModuleInterop": true,
+        "forceConsistentCasingInFileNames": true,
+        "resolveJsonModule": true,
+        "skipLibCheck": true,
+        "sourceMap": true,
+        "strict": true,
+        "moduleResolution": "bundler",
+        "target": "ES2020",
+        "module": "ESNext",
+        "lib": [
+            "ES2020",
+            "DOM",
+            "DOM.Iterable"
+        ],
+        "allowSyntheticDefaultImports": true,
+        "isolatedModules": true,
+        "verbatimModuleSyntax": true
+    },
+    "include": [
+        "src/**/*",
+        "app.d.ts"
+    ],
+    "exclude": [
+        "node_modules/**",
+        ".svelte-kit/**",
+        "build/**",
+        "dist/**"
+    ]
+}

frontend-client/vite.config.js

@@ -8,7 +8,7 @@ export default defineConfig({
 		host: '0.0.0.0',
 		proxy: {
 			'/api': {
-				target: 'http://servicemanager-backend:8000',
+				target: process.env.PUBLIC_API_URL || 'http://backend:8000',
 				changeOrigin: true,
 				rewrite: (path) => path.replace(/^\/api/, '')
 			}

frontend-client/vite.config.js.timestamp-1770307822256-015e5405d86b4.mjs

@@ -0,0 +1,28 @@
+// vite.config.js
+import { sveltekit } from "file:///app/node_modules/@sveltejs/kit/src/exports/vite/index.js";
+import { defineConfig } from "file:///app/node_modules/vite/dist/node/index.js";
+var vite_config_default = defineConfig({
+  plugins: [sveltekit()],
+  server: {
+    port: 3e3,
+    host: "0.0.0.0",
+    proxy: {
+      "/api": {
+        target: "http://servicemanager-backend:8000",
+        changeOrigin: true,
+        rewrite: (path) => path.replace(/^\/api/, "")
+      }
+    }
+  },
+  preview: {
+    port: 3e3,
+    host: "0.0.0.0"
+  },
+  build: {
+    target: "esnext"
+  }
+});
+export {
+  vite_config_default as default
+};
+//# sourceMappingURL=data:application/json;base64,ewogICJ2ZXJzaW9uIjogMywKICAic291cmNlcyI6IFsidml0ZS5jb25maWcuanMiXSwKICAic291cmNlc0NvbnRlbnQiOiBbImNvbnN0IF9fdml0ZV9pbmplY3RlZF9vcmlnaW5hbF9kaXJuYW1lID0gXCIvYXBwXCI7Y29uc3QgX192aXRlX2luamVjdGVkX29yaWdpbmFsX2ZpbGVuYW1lID0gXCIvYXBwL3ZpdGUuY29uZmlnLmpzXCI7Y29uc3QgX192aXRlX2luamVjdGVkX29yaWdpbmFsX2ltcG9ydF9tZXRhX3VybCA9IFwiZmlsZTovLy9hcHAvdml0ZS5jb25maWcuanNcIjtpbXBvcnQgeyBzdmVsdGVraXQgfSBmcm9tICdAc3ZlbHRlanMva2l0L3ZpdGUnO1xyXG5pbXBvcnQgeyBkZWZpbmVDb25maWcgfSBmcm9tICd2aXRlJztcclxuXHJcbmV4cG9ydCBkZWZhdWx0IGRlZmluZUNvbmZpZyh7XHJcblx0cGx1Z2luczogW3N2ZWx0ZWtpdCgpXSxcclxuXHRzZXJ2ZXI6IHtcclxuXHRcdHBvcnQ6IDMwMDAsXHJcblx0XHRob3N0OiAnMC4wLjAuMCcsXHJcblx0XHRwcm94eToge1xyXG5cdFx0XHQnL2FwaSc6IHtcclxuXHRcdFx0XHR0YXJnZXQ6ICdodHRwOi8vc2VydmljZW1hbmFnZXItYmFja2VuZDo4MDAwJyxcclxuXHRcdFx0XHRjaGFuZ2VPcmlnaW46IHRydWUsXHJcblx0XHRcdFx0cmV3cml0ZTogKHBhdGgpID0+IHBhdGgucmVwbGFjZSgvXlxcL2FwaS8sICcnKVxyXG5cdFx0XHR9XHJcblx0XHR9XHJcblx0fSxcclxuXHRwcmV2aWV3OiB7XHJcblx0XHRwb3J0OiAzMDAwLFxyXG5cdFx0aG9zdDogJzAuMC4wLjAnXHJcblx0fSxcclxuXHRidWlsZDoge1xyXG5cdFx0dGFyZ2V0OiAnZXNuZXh0J1xyXG5cdH1cclxufSk7Il0sCiAgIm1hcHBpbmdzIjogIjtBQUE4TCxTQUFTLGlCQUFpQjtBQUN4TixTQUFTLG9CQUFvQjtBQUU3QixJQUFPLHNCQUFRLGFBQWE7QUFBQSxFQUMzQixTQUFTLENBQUMsVUFBVSxDQUFDO0FBQUEsRUFDckIsUUFBUTtBQUFBLElBQ1AsTUFBTTtBQUFBLElBQ04sTUFBTTtBQUFBLElBQ04sT0FBTztBQUFBLE1BQ04sUUFBUTtBQUFBLFFBQ1AsUUFBUTtBQUFBLFFBQ1IsY0FBYztBQUFBLFFBQ2QsU0FBUyxDQUFDLFNBQVMsS0FBSyxRQUFRLFVBQVUsRUFBRTtBQUFBLE1BQzdDO0FBQUEsSUFDRDtBQUFBLEVBQ0Q7QUFBQSxFQUNBLFNBQVM7QUFBQSxJQUNSLE1BQU07QUFBQSxJQUNOLE1BQU07QUFBQSxFQUNQO0FBQUEsRUFDQSxPQUFPO0FBQUEsSUFDTixRQUFRO0FBQUEsRUFDVDtBQUNELENBQUM7IiwKICAibmFtZXMiOiBbXQp9Cg==

frontend-internal/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@servicemanager/internal-frontend",
-  "version": "0.1.0",
+  "version": "1.6.0",
   "private": true,
   "type": "module",
   "scripts": {

frontend-internal/src/lib/components/Header.svelte

@@ -1,5 +1,6 @@
 <script lang="ts">
   import { auth } from '$lib/stores/auth.js';
+;
 
   export let toggleSidebar: () => void;
 
@@ -23,7 +24,12 @@
         class="p-2 rounded-md text-gray-400 hover:text-gray-500 hover:bg-gray-100 focus:outline-none focus:ring-2 focus:ring-primary-500 lg:hidden"
       >
         <svg class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-          <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4 6h16M4 12h16M4 18h16" />
+          <path
+            stroke-linecap="round"
+            stroke-linejoin="round"
+            stroke-width="2"
+            d="M4 6h16M4 12h16M4 18h16"
+          />
         </svg>
       </button>
 
@@ -46,15 +52,23 @@
             </span>
           </div>
           <span class="hidden sm:block text-sm">
-            {$auth.user?.first_name} {$auth.user?.last_name}
+            {$auth.user?.first_name}
+            {$auth.user?.last_name}
           </span>
           <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M19 9l-7 7-7-7" />
+            <path
+              stroke-linecap="round"
+              stroke-linejoin="round"
+              stroke-width="2"
+              d="M19 9l-7 7-7-7"
+            />
           </svg>
         </button>
 
         {#if isMenuOpen}
-          <div class="absolute right-0 mt-2 w-48 bg-white rounded-md shadow-lg border border-gray-200 z-50">
+          <div
+            class="absolute right-0 mt-2 w-48 bg-white rounded-md shadow-lg border border-gray-200 z-50"
+          >
             <div class="py-1">
               <div class="px-4 py-2 text-xs text-gray-500 border-b border-gray-200">
                 {$auth.user?.email}
@@ -62,7 +76,7 @@
               <a
                 href="/profile"
                 class="block px-4 py-2 text-sm text-gray-700 hover:bg-gray-100"
-                on:click={() => isMenuOpen = false}
+                on:click={() => (isMenuOpen = false)}
               >
                 Mi Perfil
               </a>
@@ -84,6 +98,9 @@
 {#if isMenuOpen}
   <div
     class="fixed inset-0 z-40 lg:hidden"
-    on:click={() => isMenuOpen = false}
-  ></div>
+    role="dialog"
+    tabindex="0"
+    on:click={() => (isMenuOpen = false)}
+    on:keydown={e => e.key === 'Escape' && (isMenuOpen = false)}
+  />
 {/if}

frontend-internal/src/lib/components/Modal.svelte

@@ -1,8 +1,9 @@
 <script>
-  import { createEventDispatcher, onMount, onDestroy } from 'svelte';
+  import { createEventDispatcher } from 'svelte';
   
   export let open = false;
   export let title = '';
+  export let size = 'lg'; // sm, md, lg, xl, 2xl
   
   const dispatch = createEventDispatcher();
   
@@ -15,6 +16,20 @@
       close();
     }
   }
+  
+  function handleBackdropClick(e) {
+    if (e.target === e.currentTarget) {
+      close();
+    }
+  }
+  
+  const sizeClasses = {
+    sm: 'sm:max-w-sm',
+    md: 'sm:max-w-md',
+    lg: 'sm:max-w-lg',
+    xl: 'sm:max-w-xl',
+    '2xl': 'sm:max-w-2xl'
+  };
 </script>
 
 <svelte:window on:keydown={handleKeydown}/>
@@ -23,21 +38,45 @@
   <div class="fixed inset-0 z-50 overflow-y-auto" aria-labelledby="modal-title" role="dialog" aria-modal="true">
     <div class="flex items-end justify-center min-h-screen px-4 pt-4 pb-20 text-center sm:block sm:p-0">
       
-      <div class="fixed inset-0 transition-opacity bg-gray-500 bg-opacity-75" aria-hidden="true" on:click={close}></div>
+      <!-- Backdrop -->
+      <div 
+        class="fixed inset-0 transition-opacity bg-gray-500 bg-opacity-75" 
+        aria-hidden="true" 
+        on:click={handleBackdropClick}
+      ></div>
 
+      <!-- Center trick -->
       <span class="hidden sm:inline-block sm:align-middle sm:h-screen" aria-hidden="true">&#8203;</span>
 
-      <div class="inline-block px-4 pt-5 pb-4 overflow-hidden text-left align-bottom transition-all transform bg-white rounded-lg shadow-xl sm:my-8 sm:align-middle sm:max-w-lg sm:w-full sm:p-6">
-        <div class="sm:flex sm:items-start">
-          <div class="mt-3 text-center sm:mt-0 sm:ml-4 sm:text-left w-full">
-            <h3 class="text-lg leading-6 font-medium text-gray-900" id="modal-title">
-              {title}
-            </h3>
-            <div class="mt-2 text-sm text-gray-500">
-              <slot />
-            </div>
-          </div>
+      <!-- Modal panel -->
+      <div class="inline-block w-full align-bottom bg-white rounded-lg shadow-xl transform transition-all sm:my-8 sm:align-middle {sizeClasses[size]} sm:w-full">
+        <!-- Header -->
+        <div class="px-6 py-4 border-b border-gray-200 flex items-center justify-between">
+          <h3 class="text-lg font-semibold text-gray-900" id="modal-title">
+            {title}
+          </h3>
+          <button 
+            type="button"
+            on:click={close}
+            class="text-gray-400 hover:text-gray-500 focus:outline-none focus:ring-2 focus:ring-primary-500 rounded-lg p-1"
+          >
+            <svg class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M6 18L18 6M6 6l12 12" />
+            </svg>
+          </button>
         </div>
+        
+        <!-- Body -->
+        <div class="px-6 py-4 max-h-[70vh] overflow-y-auto">
+          <slot />
+        </div>
+        
+        <!-- Footer (optional) -->
+        {#if $$slots.footer}
+          <div class="px-6 py-4 bg-gray-50 border-t border-gray-200 rounded-b-lg">
+            <slot name="footer" />
+          </div>
+        {/if}
       </div>
     </div>
   </div>

frontend-internal/src/lib/components/Sidebar.svelte

@@ -1,6 +1,6 @@
 <script lang="ts">
-  import { auth } from '$lib/stores/auth.js';
   import { page } from '$app/stores';
+  import { auth } from '$lib/stores/auth.js';
 
   export let open = false;
 
@@ -62,6 +62,11 @@
           name: 'Auditoría',
           href: '/audit',
           icon: 'M9 12l2 2 4-4m5.618-4.016A11.955 11.955 0 0112 2.944a11.955 11.955 0 01-8.618 3.04A12.02 12.02 0 003 9c0 5.591 3.824 10.29 9 11.622 5.176-1.332 9-6.03 9-11.622 0-1.042-.133-2.052-.382-3.016z'
+        },
+        {
+          name: 'Seguridad',
+          href: '/audit/security',
+          icon: 'M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-3L13.732 4c-.77-1.333-2.694-1.333-3.464 0L3.34 16c-.77 1.333.192 3 1.732 3z'
         }
       );
     }
@@ -70,27 +75,46 @@
   }
 
   function isCurrentPage(href: string) {
-    return $page.url.pathname === href || 
-           ($page.url.pathname.startsWith(href) && href !== '/');
+    return $page.url.pathname === href || ($page.url.pathname.startsWith(href) && href !== '/');
   }
 </script>
 
 <!-- Mobile sidebar backdrop -->
 {#if open}
   <div class="fixed inset-0 z-40 lg:hidden">
-    <div class="fixed inset-0 bg-gray-600 bg-opacity-75" on:click={() => open = false}></div>
+    <div
+      class="fixed inset-0 bg-gray-600 bg-opacity-75"
+      role="dialog"
+      tabindex="0"
+      on:click={() => (open = false)}
+      on:keydown={e => e.key === 'Escape' && (open = false)}
+    />
   </div>
 {/if}
 
 <!-- Sidebar -->
-<div class="fixed inset-y-0 left-0 z-50 w-64 bg-white shadow-lg transform {open ? 'translate-x-0' : '-translate-x-full'} transition-transform duration-300 ease-in-out lg:translate-x-0 lg:static lg:inset-0">
+<div
+  class="fixed inset-y-0 left-0 z-50 w-64 bg-white shadow-lg transform {open
+    ? 'translate-x-0'
+    : '-translate-x-full'} transition-transform duration-300 ease-in-out lg:translate-x-0 lg:static lg:inset-0"
+>
   <div class="flex flex-col h-full">
     <!-- Logo -->
     <div class="flex items-center justify-between h-16 px-6 bg-primary-600">
       <div class="flex items-center space-x-2">
         <div class="w-8 h-8 bg-white rounded-lg flex items-center justify-center">
-          <svg class="w-5 h-5 text-primary-600" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M18.364 5.636l-3.536 3.536m0 5.656l3.536 3.536M9.172 9.172L5.636 5.636m3.536 9.192L5.636 18.364M21 12a9 9 0 11-18 0 9 9 0 0118 0zm-5 0a4 4 0 11-8 0 4 4 0 018 0z" />
+          <svg
+            class="w-5 h-5 text-primary-600"
+            fill="none"
+            stroke="currentColor"
+            viewBox="0 0 24 24"
+          >
+            <path
+              stroke-linecap="round"
+              stroke-linejoin="round"
+              stroke-width="2"
+              d="M18.364 5.636l-3.536 3.536m0 5.656l3.536 3.536M9.172 9.172L5.636 5.636m3.536 9.192L5.636 18.364M21 12a9 9 0 11-18 0 9 9 0 0118 0zm-5 0a4 4 0 11-8 0 4 4 0 018 0z"
+            />
           </svg>
         </div>
         <div class="text-white">
@@ -100,11 +124,16 @@
       </div>
 
       <button
-        on:click={() => open = false}
+        on:click={() => (open = false)}
         class="p-2 rounded-md text-primary-100 hover:text-white hover:bg-primary-500 lg:hidden"
       >
         <svg class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-          <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M6 18L18 6M6 6l12 12" />
+          <path
+            stroke-linecap="round"
+            stroke-linejoin="round"
+            stroke-width="2"
+            d="M6 18L18 6M6 6l12 12"
+          />
         </svg>
       </button>
     </div>
@@ -114,12 +143,12 @@
       {#each navigation as item}
         <a
           href={item.href}
-          class="flex items-center space-x-3 px-3 py-2 rounded-md text-sm font-medium transition-colors {
-            isCurrentPage(item.href)
-              ? 'bg-primary-100 text-primary-700'
-              : 'text-gray-600 hover:bg-gray-100 hover:text-gray-900'
-          }"
-          on:click={() => open = false}
+          class="flex items-center space-x-3 px-3 py-2 rounded-md text-sm font-medium transition-colors {isCurrentPage(
+            item.href
+          )
+            ? 'bg-primary-100 text-primary-700'
+            : 'text-gray-600 hover:bg-gray-100 hover:text-gray-900'}"
+          on:click={() => (open = false)}
         >
           <svg class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
             <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d={item.icon} />
@@ -139,15 +168,25 @@
         </div>
         <div class="flex-1 min-w-0">
           <p class="text-sm font-medium text-gray-900 truncate">
-            {$auth.user?.first_name} {$auth.user?.last_name}
+            {$auth.user?.first_name}
+            {$auth.user?.last_name}
           </p>
           <p class="text-xs text-gray-500 truncate">
-            {$auth.user?.role === 'ADMIN' ? 'Administrador' :
-             $auth.user?.role === 'SUPPORT_MANAGER' ? 'Gerente de Soporte' :
-             $auth.user?.role === 'AGENT' ? 'Agente' : 'Auditor'}
+            {$auth.user?.role === 'ADMIN'
+              ? 'Administrador'
+              : $auth.user?.role === 'SUPPORT_MANAGER'
+              ? 'Gerente de Soporte'
+              : $auth.user?.role === 'AGENT'
+              ? 'Agente'
+              : 'Auditor'}
           </p>
         </div>
       </div>
     </div>
+    
+    <!-- Version info -->
+    <div class="px-4 py-2 border-t border-gray-100">
+      <p class="text-xs text-gray-400 text-center">v1.6.0</p>
+    </div>
   </div>
 </div>

frontend-internal/src/lib/components/sla/ComplianceGauge.svelte

@@ -0,0 +1,71 @@
+<script lang="ts">
+  export let value: number = 0; // Percentage 0-100
+  export let label: string = '';
+  export let size: 'sm' | 'md' | 'lg' = 'md';
+
+  $: color = getColor(value);
+  $: sizeClass = getSizeClass(size);
+  $: strokeDasharray = `${(value / 100) * 283} 283`;
+
+  function getColor(val: number): string {
+    if (val >= 95) return '#10B981'; // green
+    if (val >= 85) return '#FBBF24'; // yellow
+    if (val >= 70) return '#F97316'; // orange
+    return '#EF4444'; // red
+  }
+
+  function getSizeClass(s: string): { width: number; fontSize: string } {
+    switch (s) {
+      case 'sm':
+        return { width: 80, fontSize: 'text-lg' };
+      case 'lg':
+        return { width: 160, fontSize: 'text-4xl' };
+      default:
+        return { width: 120, fontSize: 'text-2xl' };
+    }
+  }
+</script>
+
+<div class="flex flex-col items-center">
+  <svg width={sizeClass.width} height={sizeClass.width} viewBox="0 0 100 100">
+    <!-- Background circle -->
+    <circle
+      cx="50"
+      cy="50"
+      r="45"
+      fill="none"
+      stroke="#E5E7EB"
+      stroke-width="10"
+    />
+    
+    <!-- Progress circle -->
+    <circle
+      cx="50"
+      cy="50"
+      r="45"
+      fill="none"
+      stroke={color}
+      stroke-width="10"
+      stroke-dasharray={strokeDasharray}
+      stroke-linecap="round"
+      transform="rotate(-90 50 50)"
+      style="transition: stroke-dasharray 0.5s ease;"
+    />
+    
+    <!-- Center text -->
+    <text
+      x="50"
+      y="50"
+      text-anchor="middle"
+      dominant-baseline="middle"
+      class="fill-current text-gray-900 font-bold"
+      font-size="20"
+    >
+      {value.toFixed(0)}%
+    </text>
+  </svg>
+  
+  {#if label}
+    <p class="mt-2 text-sm font-medium text-gray-600">{label}</p>
+  {/if}
+</div>

frontend-internal/src/lib/utils/api.ts

@@ -12,8 +12,15 @@ async function request<T>(endpoint: string, options: RequestOptions = {}): Promi
 
   let url = `${API_BASE}${endpoint}`;
   if (params) {
-    const searchParams = new URLSearchParams(params);
-    url += `?${searchParams.toString()}`;
+    // Filtrar parámetros undefined y null
+    const filteredParams = Object.entries(params)
+      .filter(([key, value]) => value !== undefined && value !== null && value !== '')
+      .reduce((acc, [key, value]) => ({ ...acc, [key]: value }), {});
+
+    if (Object.keys(filteredParams).length > 0) {
+      const searchParams = new URLSearchParams(filteredParams);
+      url += `?${searchParams.toString()}`;
+    }
   }
 
   const authState = get(auth);
@@ -35,9 +42,9 @@ async function request<T>(endpoint: string, options: RequestOptions = {}): Promi
   if (response.status === 401) {
     // Token expired or invalid
     if (typeof window !== 'undefined') {
-        localStorage.removeItem('internal_auth_token');
-        localStorage.removeItem('internal_auth_user');
-        window.location.href = '/login'; 
+      localStorage.removeItem('internal_auth_token');
+      localStorage.removeItem('internal_auth_user');
+      window.location.href = '/login';
     }
     throw new Error('Unauthorized');
   }
@@ -49,12 +56,52 @@ async function request<T>(endpoint: string, options: RequestOptions = {}): Promi
 
   // Handle empty responses (like 204 No Content)
   if (response.status === 204) {
-      return {} as T;
+    return {} as T;
   }
 
   return response.json();
 }
 
+async function downloadFile(endpoint: string, filename: string): Promise<void> {
+  const authState = get(auth);
+  const token = authState.token || (typeof window !== 'undefined' ? localStorage.getItem('internal_auth_token') : null);
+
+  const headers = new Headers();
+  if (token) {
+    headers.set('Authorization', `Bearer ${token}`);
+  }
+
+  const response = await fetch(`${API_BASE}${endpoint}`, {
+    method: 'GET',
+    headers
+  });
+
+  if (response.status === 401) {
+    if (typeof window !== 'undefined') {
+      localStorage.removeItem('internal_auth_token');
+      localStorage.removeItem('internal_auth_user');
+      window.location.href = '/login';
+    }
+    throw new Error('Unauthorized');
+  }
+
+  if (!response.ok) {
+    const errorData = await response.json().catch(() => ({}));
+    throw new Error(errorData.detail || `Download error: ${response.statusText}`);
+  }
+
+  // Crear blob y descargar
+  const blob = await response.blob();
+  const url = window.URL.createObjectURL(blob);
+  const a = document.createElement('a');
+  a.href = url;
+  a.download = filename;
+  document.body.appendChild(a);
+  a.click();
+  document.body.removeChild(a);
+  window.URL.revokeObjectURL(url);
+}
+
 export const api = {
   get: <T>(endpoint: string, params?: Record<string, string>) =>
     request<T>(endpoint, { method: 'GET', params }),
@@ -69,5 +116,8 @@ export const api = {
     request<T>(endpoint, { method: 'PATCH', body: JSON.stringify(body) }),
 
   delete: <T>(endpoint: string) =>
-    request<T>(endpoint, { method: 'DELETE' })
+    request<T>(endpoint, { method: 'DELETE' }),
+
+  downloadFile: (endpoint: string, filename: string) =>
+    downloadFile(endpoint, filename)
 };

frontend-internal/src/routes/audit/security/+page.svelte

@@ -0,0 +1,532 @@
+<script lang="ts">
+  import { onMount } from 'svelte';
+  import { api } from '$lib/utils/api';
+  import { toast } from '$lib/stores/toast';
+  import { auth } from '$lib/stores/auth';
+  import Modal from '$lib/components/Modal.svelte';
+
+  // Estado
+  let isLoading = false;
+  let analysis = null;
+  let analysisHours = 24;
+  let selectedThreat = null;
+  let showActionModal = false;
+  let actionType = '';
+  let actionTarget = '';
+  let actionReason = '';
+  let actionDuration = 60;
+
+  // Usuario actual
+  $: currentUser = $auth.user;
+  $: canExecuteActions = currentUser && (currentUser.role === 'ADMIN' || currentUser.role === 'SUPPORT_MANAGER');
+
+  /**
+   * Cargar análisis de seguridad
+   */
+  async function loadSecurityAnalysis() {
+    isLoading = true;
+    try {
+      analysis = await api.get('/audit/security/analysis', { hours: analysisHours });
+      console.log('Security analysis loaded:', analysis);
+    } catch (e: any) {
+      toast.error('Error cargando análisis de seguridad: ' + (e.message || 'Error desconocido'));
+    } finally {
+      isLoading = false;
+    }
+  }
+
+  /**
+   * Cambiar período de análisis
+   */
+  function changeAnalysisPeriod(hours: number) {
+    analysisHours = hours;
+    loadSecurityAnalysis();
+  }
+
+  /**
+   * Obtener color según nivel de riesgo
+   */
+  function getRiskColor(level: string) {
+    const colors: any = {
+      safe: 'bg-green-100 text-green-800 border-green-300',
+      low: 'bg-blue-100 text-blue-800 border-blue-300',
+      medium: 'bg-yellow-100 text-yellow-800 border-yellow-300',
+      high: 'bg-orange-100 text-orange-800 border-orange-300',
+      critical: 'bg-red-100 text-red-800 border-red-300'
+    };
+    return colors[level] || colors.low;
+  }
+
+  /**
+   * Obtener color de severidad de amenaza
+   */
+  function getSeverityColor(severity: string) {
+    const colors: any = {
+      low: 'bg-blue-600 text-white',
+      medium: 'bg-yellow-500 text-white',
+      high: 'bg-orange-600 text-white',
+      critical: 'bg-red-600 text-white'
+    };
+    return colors[severity] || colors.low;
+  }
+
+  /**
+   * Obtener icono de tipo de amenaza
+   */
+  function getThreatIcon(type: string) {
+    const icons: any = {
+      brute_force_attack: 'M12 15v2m-6 4h12a2 2 0 002-2v-6a2 2 0 00-2-2H6a2 2 0 00-2 2v6a2 2 0 002 2zm10-10V7a4 4 0 00-8 0v4h8z',
+      privilege_escalation: 'M9 12l2 2 4-4m5.618-4.016A11.955 11.955 0 0112 2.944a11.955 11.955 0 01-8.618 3.04A12.02 12.02 0 003 9c0 5.591 3.824 10.29 9 11.622 5.176-1.332 9-6.03 9-11.622 0-1.042-.133-2.052-.382-3.016z',
+      mass_deletion: 'M19 7l-.867 12.142A2 2 0 0116.138 21H7.862a2 2 0 01-1.995-1.858L5 7m5 4v6m4-6v6m1-10V4a1 1 0 00-1-1h-4a1 1 0 00-1 1v3M4 7h16',
+      account_compromise: 'M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-3L13.732 4c-.77-1.333-2.694-1.333-3.464 0L3.34 16c-.77 1.333.192 3 1.732 3z'
+    };
+    return icons[type] || icons.account_compromise;
+  }
+
+  /**
+   * Obtener texto legible del tipo de amenaza
+   */
+  function getThreatTypeText(type: string) {
+    const texts: any = {
+      brute_force_attack: 'Ataque de Fuerza Bruta',
+      privilege_escalation: 'Escalada de Privilegios',
+      mass_deletion: 'Eliminación Masiva',
+      account_compromise: 'Cuenta Comprometida'
+    };
+    return texts[type] || type;
+  }
+
+  /**
+   * Abrir modal para acción de seguridad
+   */
+  function openActionModal(threat: any, action: string) {
+    if (!canExecuteActions) {
+      toast.error('No tienes permisos para ejecutar acciones de seguridad');
+      return;
+    }
+    
+    selectedThreat = threat;
+    actionType = action;
+    
+    // Pre-llenar campos según el tipo de acción
+    if (action === 'block_ip' && threat.affected_ips.length > 0) {
+      actionTarget = threat.affected_ips[0];
+      actionReason = `Bloqueo automático: ${threat.description}`;
+    } else if (action === 'force_password_reset' && threat.affected_users.length > 0) {
+      actionTarget = threat.affected_users[0];
+      actionReason = `Reseteo de seguridad: ${threat.description}`;
+    } else {
+      actionTarget = '';
+      actionReason = threat.description;
+    }
+    
+    showActionModal = true;
+  }
+
+  /**
+   * Ejecutar acción de seguridad
+   */
+  async function executeSecurityAction() {
+    if (!actionTarget || !actionReason) {
+      toast.error('Completa todos los campos requeridos');
+      return;
+    }
+
+    try {
+      const response = await api.post('/audit/security/action', {
+        action_type: actionType,
+        target: actionTarget,
+        reason: actionReason,
+        duration_minutes: actionDuration
+      });
+
+      if (response.success) {
+        toast.success(response.message);
+        showActionModal = false;
+        loadSecurityAnalysis(); // Recargar análisis
+      } else {
+        toast.error(response.message);
+      }
+    } catch (e: any) {
+      toast.error('Error ejecutando acción: ' + (e.message || 'Error desconocido'));
+    }
+  }
+
+  /**
+   * Formatear fecha
+   */
+  function formatDate(dateString: string) {
+    const date = new Date(dateString);
+    return new Intl.DateTimeFormat('es-MX', {
+      year: 'numeric',
+      month: 'short',
+      day: 'numeric',
+      hour: '2-digit',
+      minute: '2-digit',
+      timeZone: 'UTC',
+      timeZoneName: 'short'
+    }).format(date);
+  }
+
+  onMount(() => {
+    loadSecurityAnalysis();
+  });
+</script>
+
+<div class="max-w-7xl mx-auto py-6 px-4 sm:px-6 lg:px-8">
+  <!-- Header -->
+  <div class="mb-6">
+    <div class="flex items-center justify-between">
+      <div>
+        <h1 class="text-2xl font-bold text-gray-900 flex items-center gap-2">
+          <svg class="w-8 h-8 text-gray-600" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-3L13.732 4c-.77-1.333-2.694-1.333-3.464 0L3.34 16c-.77 1.333.192 3 1.732 3z" />
+          </svg>
+          Análisis de Seguridad
+        </h1>
+        <p class="mt-1 text-sm text-gray-500">
+          Detección de amenazas y análisis de vulnerabilidades
+        </p>
+      </div>
+      <button
+        on:click={() => loadSecurityAnalysis()}
+        class="px-4 py-2 bg-indigo-600 text-white rounded-lg hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-indigo-500 flex items-center gap-2"
+      >
+        <svg class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+          <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4 4v5h.582m15.356 2A8.001 8.001 0 004.582 9m0 0H9m11 11v-5h-.581m0 0a8.003 8.003 0 01-15.357-2m15.357 2H15" />
+        </svg>
+        Actualizar
+      </button>
+    </div>
+  </div>
+
+  <!-- Selector de Período -->
+  <div class="bg-white shadow rounded-lg p-4 mb-6">
+    <div class="flex items-center gap-2 mb-2">
+      <svg class="w-5 h-5 text-gray-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+        <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 8v4l3 3m6-3a9 9 0 11-18 0 9 9 0 0118 0z" />
+      </svg>
+      <span class="text-sm font-medium text-gray-700">Período de Análisis</span>
+    </div>
+    <div class="flex flex-wrap gap-2">
+      <button
+        on:click={() => changeAnalysisPeriod(24)}
+        class="px-4 py-2 rounded-lg text-sm font-medium transition-colors {analysisHours === 24 ? 'bg-indigo-600 text-white' : 'bg-gray-100 text-gray-700 hover:bg-indigo-50'}"
+      >
+        Últimas 24 horas
+      </button>
+      <button
+        on:click={() => changeAnalysisPeriod(48)}
+        class="px-4 py-2 rounded-lg text-sm font-medium transition-colors {analysisHours === 48 ? 'bg-indigo-600 text-white' : 'bg-gray-100 text-gray-700 hover:bg-indigo-50'}"
+      >
+        Últimas 48 horas
+      </button>
+      <button
+        on:click={() => changeAnalysisPeriod(168)}
+        class="px-4 py-2 rounded-lg text-sm font-medium transition-colors {analysisHours === 168 ? 'bg-indigo-600 text-white' : 'bg-gray-100 text-gray-700 hover:bg-indigo-50'}"
+      >
+        Última semana
+      </button>
+    </div>
+  </div>
+
+  {#if isLoading}
+    <div class="flex justify-center items-center py-12">
+      <div class="animate-spin rounded-full h-12 w-12 border-b-2 border-gray-600"></div>
+    </div>
+  {:else if analysis}
+    <!-- Resumen de Riesgo -->
+    <div class="bg-white shadow rounded-lg p-6 mb-6 border-l-4 {getRiskColor(analysis.overall_risk_level)}">
+      <div class="flex items-center justify-between">
+        <div>
+          <h3 class="text-lg font-semibold text-gray-900">Nivel de Riesgo General</h3>
+          <p class="text-sm text-gray-600 mt-1">Análisis de {analysis.analysis_period_hours} horas</p>
+        </div>
+        <div class="text-right">
+          <span class="inline-block px-4 py-2 text-2xl font-bold rounded-lg {getRiskColor(analysis.overall_risk_level)}">
+            {analysis.overall_risk_level.toUpperCase()}
+          </span>
+          <p class="text-xs text-gray-500 mt-1">Generado: {formatDate(analysis.generated_at)}</p>
+        </div>
+      </div>
+    </div>
+
+    <!-- Estadísticas Rápidas -->
+    <div class="grid grid-cols-1 md:grid-cols-4 gap-4 mb-6">
+      <div class="bg-white rounded-lg shadow p-4">
+        <div class="flex items-center justify-between">
+          <div>
+            <p class="text-sm text-gray-500">Amenazas Detectadas</p>
+            <p class="text-2xl font-bold text-red-600">{analysis.total_threats_detected}</p>
+          </div>
+          <svg class="w-10 h-10 text-red-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-3L13.732 4c-.77-1.333-2.694-1.333-3.464 0L3.34 16c-.77 1.333.192 3 1.732 3z" />
+          </svg>
+        </div>
+      </div>
+
+      <div class="bg-white rounded-lg shadow p-4">
+        <div class="flex items-center justify-between">
+          <div>
+            <p class="text-sm text-gray-500">Intentos Fallidos</p>
+            <p class="text-2xl font-bold text-orange-600">{analysis.failed_login_attempts}</p>
+          </div>
+          <svg class="w-10 h-10 text-orange-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 15v2m-6 4h12a2 2 0 002-2v-6a2 2 0 00-2-2H6a2 2 0 00-2 2v6a2 2 0 002 2zm10-10V7a4 4 0 00-8 0v4h8z" />
+          </svg>
+        </div>
+      </div>
+
+      <div class="bg-white rounded-lg shadow p-4">
+        <div class="flex items-center justify-between">
+          <div>
+            <p class="text-sm text-gray-500">IPs Sospechosas</p>
+            <p class="text-2xl font-bold text-yellow-600">{analysis.suspicious_ips_count}</p>
+          </div>
+          <svg class="w-10 h-10 text-yellow-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M21 12a9 9 0 01-9 9m9-9a9 9 0 00-9-9m9 9H3m9 9a9 9 0 01-9-9m9 9c1.657 0 3-4.03 3-9s-1.343-9-3-9m0 18c-1.657 0-3-4.03-3-9s1.343-9 3-9m-9 9a9 9 0 019-9" />
+          </svg>
+        </div>
+      </div>
+
+      <div class="bg-white rounded-lg shadow p-4">
+        <div class="flex items-center justify-between">
+          <div>
+            <p class="text-sm text-gray-500">Acciones Críticas</p>
+            <p class="text-2xl font-bold text-red-600">{analysis.critical_actions_count}</p>
+          </div>
+          <svg class="w-10 h-10 text-red-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 12l2 2 4-4m5.618-4.016A11.955 11.955 0 0112 2.944a11.955 11.955 0 01-8.618 3.04A12.02 12.02 0 003 9c0 5.591 3.824 10.29 9 11.622 5.176-1.332 9-6.03 9-11.622 0-1.042-.133-2.052-.382-3.016z" />
+          </svg>
+        </div>
+      </div>
+    </div>
+
+    <!-- Recomendaciones Generales -->
+    {#if analysis.recommended_actions && analysis.recommended_actions.length > 0}
+      <div class="bg-blue-50 border border-blue-200 rounded-lg p-4 mb-6">
+        <div class="flex items-start gap-3">
+          <svg class="w-6 h-6 text-blue-600 flex-shrink-0 mt-0.5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M13 16h-1v-4h-1m1-4h.01M21 12a9 9 0 11-18 0 9 9 0 0118 0z" />
+          </svg>
+          <div class="flex-1">
+            <h4 class="text-sm font-semibold text-blue-900 mb-2">Acciones Recomendadas</h4>
+            <ul class="space-y-1">
+              {#each analysis.recommended_actions as action}
+                <li class="text-sm text-blue-800 flex items-start gap-2">
+                  <svg class="w-4 h-4 text-blue-600 flex-shrink-0 mt-0.5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+                    <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 5l7 7-7 7" />
+                  </svg>
+                  {action}
+                </li>
+              {/each}
+            </ul>
+          </div>
+        </div>
+      </div>
+    {/if}
+
+    <!-- Lista de Amenazas -->
+    {#if analysis.threats && analysis.threats.length > 0}
+      <div class="space-y-4">
+        <h3 class="text-lg font-semibold text-gray-900">Amenazas Detectadas</h3>
+        
+        {#each analysis.threats as threat}
+          <div class="bg-white shadow rounded-lg p-6 border-l-4 {threat.severity === 'critical' ? 'border-gray-900' : threat.severity === 'high' ? 'border-gray-600' : threat.severity === 'medium' ? 'border-gray-400' : 'border-gray-200'}">
+            <!-- Header de Amenaza -->
+            <div class="flex items-start justify-between mb-4">
+              <div class="flex items-start gap-3 flex-1">
+                <div class="p-2 rounded-lg {threat.severity === 'critical' ? 'bg-gray-100' : threat.severity === 'high' ? 'bg-gray-100' : threat.severity === 'medium' ? 'bg-gray-100' : 'bg-gray-50'}">
+                  <svg class="w-6 h-6 {threat.severity === 'critical' ? 'text-gray-900' : threat.severity === 'high' ? 'text-gray-700' : threat.severity === 'medium' ? 'text-gray-600' : 'text-gray-500'}" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+                    <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d={getThreatIcon(threat.type)} />
+                  </svg>
+                </div>
+                <div class="flex-1">
+                  <div class="flex items-center gap-2 mb-1">
+                    <h4 class="text-lg font-semibold text-gray-900">{getThreatTypeText(threat.type)}</h4>
+                    <span class="px-2 py-1 text-xs font-semibold rounded-full {getSeverityColor(threat.severity)}">
+                      {threat.severity.toUpperCase()}
+                    </span>
+                  </div>
+                  <p class="text-sm text-gray-700">{threat.description}</p>
+                </div>
+              </div>
+            </div>
+
+            <!-- Detalles -->
+            <div class="grid grid-cols-1 md:grid-cols-3 gap-4 mb-4 text-sm">
+              <div>
+                <span class="font-medium text-gray-600">Ocurrencias:</span>
+                <span class="ml-2 text-gray-900 font-semibold">{threat.occurrences}</span>
+              </div>
+              <div>
+                <span class="font-medium text-gray-600">Primera detección:</span>
+                <span class="ml-2 text-gray-900">{formatDate(threat.first_seen)}</span>
+              </div>
+              <div>
+                <span class="font-medium text-gray-600">Última detección:</span>
+                <span class="ml-2 text-gray-900">{formatDate(threat.last_seen)}</span>
+              </div>
+            </div>
+
+            <!-- IPs y Usuarios Afectados -->
+            {#if threat.affected_ips.length > 0 || threat.affected_users.length > 0}
+              <div class="mb-4 text-sm">
+                {#if threat.affected_ips.length > 0}
+                  <div class="mb-2">
+                    <span class="font-medium text-gray-600">IPs involucradas:</span>
+                    <div class="mt-1 flex flex-wrap gap-1">
+                      {#each threat.affected_ips as ip}
+                        <code class="px-2 py-1 bg-gray-100 rounded text-xs font-mono">{ip}</code>
+                      {/each}
+                    </div>
+                  </div>
+                {/if}
+                {#if threat.affected_users.length > 0}
+                  <div>
+                    <span class="font-medium text-gray-600">Usuarios afectados:</span>
+                    <div class="mt-1 flex flex-wrap gap-1">
+                      {#each threat.affected_users as user}
+                        <span class="px-2 py-1 bg-gray-100 rounded text-xs">{user}</span>
+                      {/each}
+                    </div>
+                  </div>
+                {/if}
+              </div>
+            {/if}
+
+            <!-- Recomendaciones -->
+            {#if threat.recommendations && threat.recommendations.length > 0}
+              <div class="bg-gray-50 rounded-lg p-3 mb-4">
+                <p class="text-xs font-semibold text-gray-700 mb-2">Recomendaciones:</p>
+                <ul class="space-y-1">
+                  {#each threat.recommendations as rec}
+                    <li class="text-xs text-gray-600 flex items-start gap-2">
+                      <svg class="w-3 h-3 text-gray-400 flex-shrink-0 mt-0.5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+                        <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 5l7 7-7 7" />
+                      </svg>
+                      {rec}
+                    </li>
+                  {/each}
+                </ul>
+              </div>
+            {/if}
+
+            <!-- Acciones -->
+            {#if canExecuteActions}
+              <div class="flex flex-wrap gap-2">
+                {#if threat.affected_ips.length > 0}
+                  <button
+                    on:click={() => openActionModal(threat, 'block_ip')}
+                    class="px-3 py-1.5 bg-red-600 text-white text-sm rounded hover:bg-red-700 focus:outline-none focus:ring-2 focus:ring-red-500 flex items-center gap-1"
+                  >
+                    <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+                      <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M18.364 18.364A9 9 0 005.636 5.636m12.728 12.728A9 9 0 015.636 5.636m12.728 12.728L5.636 5.636" />
+                    </svg>
+                    Bloquear IP
+                  </button>
+                {/if}
+                {#if threat.affected_users.length > 0}
+                  <button
+                    on:click={() => openActionModal(threat, 'force_password_reset')}
+                    class="px-3 py-1.5 bg-orange-600 text-white text-sm rounded hover:bg-orange-700 focus:outline-none focus:ring-2 focus:ring-orange-500 flex items-center gap-1"
+                  >
+                    <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+                      <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M15 7a2 2 0 012 2m4 0a6 6 0 01-7.743 5.743L11 17H9v2H7v2H4a1 1 0 01-1-1v-2.586a1 1 0 01.293-.707l5.964-5.964A6 6 0 1121 9z" />
+                    </svg>
+                    Resetear Contraseña
+                  </button>
+                {/if}
+                <button
+                  on:click={() => openActionModal(threat, 'notify_admin')}
+                  class="px-3 py-1.5 bg-blue-600 text-white text-sm rounded hover:bg-blue-700 focus:outline-none focus:ring-2 focus:ring-blue-500 flex items-center gap-1"
+                >
+                  <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+                    <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M15 17h5l-1.405-1.405A2.032 2.032 0 0118 14.158V11a6.002 6.002 0 00-4-5.659V5a2 2 0 10-4 0v.341C7.67 6.165 6 8.388 6 11v3.159c0 .538-.214 1.055-.595 1.436L4 17h5m6 0v1a3 3 0 11-6 0v-1m6 0H9" />
+                  </svg>
+                  Notificar Admin
+                </button>
+              </div>
+            {/if}
+          </div>
+        {/each}
+      </div>
+    {:else}
+      <!-- No hay amenazas -->
+      <div class="bg-gray-50 border border-gray-200 rounded-lg p-8 text-center">
+        <svg class="w-16 h-16 text-gray-500 mx-auto mb-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+          <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 12l2 2 4-4m5.618-4.016A11.955 11.955 0 0112 2.944a11.955 11.955 0 01-8.618 3.04A12.02 12.02 0 003 9c0 5.591 3.824 10.29 9 11.622 5.176-1.332 9-6.03 9-11.622 0-1.042-.133-2.052-.382-3.016z" />
+        </svg>
+        <h3 class="text-lg font-semibold text-gray-900 mb-2">Sistema Seguro</h3>
+        <p class="text-sm text-gray-600">No se detectaron amenazas en el período analizado</p>
+      </div>
+    {/if}
+  {/if}
+</div>
+
+<!-- Modal de Acción de Seguridad -->
+{#if showActionModal}
+  <Modal open={showActionModal} size="lg" title="Ejecutar Acción de Seguridad" on:close={() => showActionModal = false}>
+    <div class="space-y-4">
+      <div>
+        <label class="block text-sm font-medium text-gray-700 mb-1">Tipo de Acción</label>
+        <input
+          type="text"
+          bind:value={actionType}
+          readonly
+          class="block w-full rounded-md border-gray-300 bg-gray-50 shadow-sm sm:text-sm"
+        />
+      </div>
+
+      <div>
+        <label class="block text-sm font-medium text-gray-700 mb-1">
+          Objetivo {#if actionType === 'block_ip'}(IP){:else if actionType === 'force_password_reset'}(Email){/if}
+        </label>
+        <input
+          type="text"
+          bind:value={actionTarget}
+          placeholder="IP o email del usuario"
+          class="block w-full rounded-md border-gray-300 shadow-sm focus:border-gray-500 focus:ring-gray-500 sm:text-sm"
+        />
+      </div>
+
+      <div>
+        <label class="block text-sm font-medium text-gray-700 mb-1">Razón</label>
+        <textarea
+          bind:value={actionReason}
+          rows="3"
+          placeholder="Razón de la acción de seguridad"
+          class="block w-full rounded-md border-gray-300 shadow-sm focus:border-gray-500 focus:ring-gray-500 sm:text-sm"
+        ></textarea>
+      </div>
+
+      {#if actionType === 'block_ip'}
+        <div>
+          <label class="block text-sm font-medium text-gray-700 mb-1">Duración del Bloqueo (minutos)</label>
+          <input
+            type="number"
+            bind:value={actionDuration}
+            min="1"
+            max="10080"
+            class="block w-full rounded-md border-gray-300 shadow-sm focus:border-gray-500 focus:ring-gray-500 sm:text-sm"
+          />
+        </div>
+      {/if}
+
+      <div class="flex justify-end gap-3 pt-4 border-t">
+        <button
+          on:click={() => showActionModal = false}
+          class="px-4 py-2 text-sm font-medium text-gray-700 bg-white border border-gray-300 rounded-md hover:bg-gray-50 focus:outline-none focus:ring-2 focus:ring-gray-500"
+        >
+          Cancelar
+        </button>
+        <button
+          on:click={executeSecurityAction}
+          class="px-4 py-2 text-sm font-medium text-white bg-indigo-600 rounded-md hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-indigo-500"
+        >
+          Ejecutar Acción
+        </button>
+      </div>
+    </div>
+  </Modal>
+{/if}

frontend-internal/src/routes/categories/+page.svelte

@@ -14,7 +14,10 @@
     name: '',
     description: '',
     tenant_id: '',
-    is_active: true
+    is_active: true,
+    color: '#4F46E5',
+    sla_response_hours: 24,
+    sla_resolution_hours: 72
   };
 
   async function loadData() {
@@ -35,7 +38,15 @@
 
   function openCreateModal() {
     editingCategory = null;
-    formData = { name: '', description: '', tenant_id: '', is_active: true };
+    formData = { 
+      name: '', 
+      description: '', 
+      tenant_id: '', 
+      is_active: true,
+      color: '#4F46E5',
+      sla_response_hours: 24,
+      sla_resolution_hours: 72
+    };
     showModal = true;
   }
 
@@ -45,7 +56,10 @@
         name: category.name, 
         description: category.description, 
         tenant_id: category.tenant_id || '', 
-        is_active: category.is_active 
+        is_active: category.is_active,
+        color: category.color || '#4F46E5',
+        sla_response_hours: category.sla_response_hours || 24,
+        sla_resolution_hours: category.sla_resolution_hours || 72
     };
     showModal = true;
   }
@@ -104,6 +118,8 @@
               <tr>
                 <th scope="col" class="py-3.5 pl-4 pr-3 text-left text-sm font-semibold text-gray-900 sm:pl-6">Nombre</th>
                 <th scope="col" class="px-3 py-3.5 text-left text-sm font-semibold text-gray-900">Descripción</th>
+                <th scope="col" class="px-3 py-3.5 text-center text-sm font-semibold text-gray-900">SLA Respuesta</th>
+                <th scope="col" class="px-3 py-3.5 text-center text-sm font-semibold text-gray-900">SLA Resolución</th>
                 <th scope="col" class="px-3 py-3.5 text-left text-sm font-semibold text-gray-900">Tipo (Cliente)</th>
                 <th scope="col" class="px-3 py-3.5 text-left text-sm font-semibold text-gray-900">Estado</th>
                 <th scope="col" class="relative py-3.5 pl-3 pr-4 sm:pr-6">
@@ -113,14 +129,31 @@
             </thead>
             <tbody class="divide-y divide-gray-200 bg-white">
               {#if isLoading}
-                 <tr><td colspan="5" class="text-center py-4">Cargando...</td></tr>
+                 <tr><td colspan="7" class="text-center py-4">Cargando...</td></tr>
               {:else if categories.length === 0}
-                 <tr><td colspan="5" class="text-center py-4">No hay categorías registradas</td></tr>
+                 <tr><td colspan="7" class="text-center py-4">No hay categorías registradas</td></tr>
               {:else}
                 {#each categories as category}
                   <tr>
-                    <td class="whitespace-nowrap py-4 pl-4 pr-3 text-sm font-medium text-gray-900 sm:pl-6">{category.name}</td>
+                    <td class="whitespace-nowrap py-4 pl-4 pr-3 text-sm sm:pl-6">
+                      <div class="flex items-center gap-2">
+                        {#if category.color}
+                          <div class="w-3 h-3 rounded-full" style="background-color: {category.color}"></div>
+                        {/if}
+                        <span class="font-medium text-gray-900">{category.name}</span>
+                      </div>
+                    </td>
                     <td class="px-3 py-4 text-sm text-gray-500 max-w-xs truncate">{category.description || '-'}</td>
+                    <td class="px-3 py-4 text-sm text-center">
+                      <span class="inline-flex items-center rounded-full bg-blue-100 px-2.5 py-0.5 text-xs font-medium text-blue-800">
+                        ⏱️ {category.sla_response_hours || 24}h
+                      </span>
+                    </td>
+                    <td class="px-3 py-4 text-sm text-center">
+                      <span class="inline-flex items-center rounded-full bg-green-100 px-2.5 py-0.5 text-xs font-medium text-green-800">
+                        ✅ {category.sla_resolution_hours || 72}h
+                      </span>
+                    </td>
                     <td class="whitespace-nowrap px-3 py-4 text-sm text-gray-500">
                       <span class:bg-blue-100={!category.tenant_id} class:text-blue-800={!category.tenant_id} class:bg-gray-100={category.tenant_id} class:text-gray-800={category.tenant_id} class="inline-flex rounded-full px-2 text-xs font-semibold leading-5">
                         {getTenantName(category.tenant_id)}
@@ -148,7 +181,7 @@
 <Modal open={showModal} title={editingCategory ? 'Editar Categoría' : 'Nueva Categoría'} on:close={() => showModal = false}>
   <form on:submit|preventDefault={handleSubmit} class="space-y-4">
     <div>
-      <label for="name" class="block text-sm font-medium text-gray-700">Nombre</label>
+      <label for="name" class="block text-sm font-medium text-gray-700">Nombre *</label>
       <input type="text" id="name" bind:value={formData.name} required class="mt-1 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm border p-2">
     </div>
 
@@ -157,6 +190,61 @@
       <textarea id="description" bind:value={formData.description} rows="3" class="mt-1 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm border p-2"></textarea>
     </div>
 
+    <div class="grid grid-cols-2 gap-4">
+      <div>
+        <label for="color" class="block text-sm font-medium text-gray-700">Color</label>
+        <input type="color" id="color" bind:value={formData.color} class="mt-1 block w-full h-10 rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm border">
+      </div>
+    </div>
+
+    <div class="border-t pt-4">
+      <h3 class="text-sm font-medium text-gray-900 mb-3">Configuración de SLA</h3>
+      
+      <div class="grid grid-cols-2 gap-4">
+        <div>
+          <label for="sla_response_hours" class="block text-sm font-medium text-gray-700">
+            Tiempo de Respuesta (horas) *
+          </label>
+          <input 
+            type="number" 
+            id="sla_response_hours" 
+            bind:value={formData.sla_response_hours} 
+            min="1" 
+            max="168"
+            required 
+            class="mt-1 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm border p-2"
+          >
+          <p class="mt-1 text-xs text-gray-500">Tiempo máximo para primera respuesta</p>
+        </div>
+
+        <div>
+          <label for="sla_resolution_hours" class="block text-sm font-medium text-gray-700">
+            Tiempo de Resolución (horas) *
+          </label>
+          <input 
+            type="number" 
+            id="sla_resolution_hours" 
+            bind:value={formData.sla_resolution_hours} 
+            min="1" 
+            max="720"
+            required 
+            class="mt-1 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm border p-2"
+          >
+          <p class="mt-1 text-xs text-gray-500">Tiempo máximo para resolver el ticket</p>
+        </div>
+      </div>
+
+      <div class="mt-3 p-3 bg-blue-50 rounded-md">
+        <p class="text-xs text-blue-700">
+          Ejemplos comunes:<br>
+          - Crítico: Respuesta 1h, Resolución 8h<br>
+          - Alto: Respuesta 2h, Resolución 24h<br>
+          - Normal: Respuesta 4h, Resolución 48h<br>
+          - Bajo: Respuesta 24h, Resolución 72h
+        </p>
+      </div>
+    </div>
+
     <div>
       <label for="tenant" class="block text-sm font-medium text-gray-700">Cliente (Opcional - Específico para un cliente)</label>
       <select id="tenant" bind:value={formData.tenant_id} class="mt-1 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm border p-2">

frontend-internal/src/routes/login/+page.svelte

@@ -32,7 +32,7 @@
       await auth.login({
         email,
         password,
-        tenant_slug: 'system-admin',
+        tenant_slug: 'aduanasoft-demo',
         totp_code: totpCode || undefined
       });
       

frontend-internal/src/routes/sla/+page.svelte

@@ -0,0 +1,313 @@
+<script lang="ts">
+  import { onMount } from 'svelte';
+  import { api } from '$lib/utils/api';
+  import { toast } from '$lib/stores/toast';
+
+  let isLoading = true;
+  let dashboardData: any = null;
+  let selectedPeriod = 30;
+
+  async function loadDashboard() {
+    isLoading = true;
+    try {
+      dashboardData = await api.get(`/sla/dashboard?days=${selectedPeriod}`);
+    } catch (e: any) {
+      toast.error(e.message || 'Error cargando dashboard SLA');
+    } finally {
+      isLoading = false;
+    }
+  }
+
+  function getRiskColor(percentage: number): string {
+    if (percentage >= 95) return 'text-green-600';
+    if (percentage >= 85) return 'text-yellow-600';
+    if (percentage >= 70) return 'text-orange-600';
+    return 'text-red-600';
+  }
+
+  function getTrendIcon(trend: string): string {
+    if (trend.startsWith('+')) return '↗';
+    if (trend.startsWith('-')) return '↘';
+    return '→';
+  }
+
+  function getTrendColor(trend: string): string {
+    if (trend.startsWith('+')) return 'text-green-600';
+    if (trend.startsWith('-')) return 'text-red-600';
+    return 'text-gray-600';
+  }
+
+  function getMetricValue(metrics: any, key: string): number {
+    return metrics[key] || 0;
+  }
+
+  onMount(loadDashboard);
+</script>
+
+<div class="px-4 py-8 mx-auto max-w-7xl sm:px-6 lg:px-8">
+  <!-- Header -->
+  <div class="sm:flex sm:items-center sm:justify-between">
+    <div class="sm:flex-auto">
+      <h1 class="text-2xl font-bold text-gray-900">SLA Management</h1>
+      <p class="mt-2 text-sm text-gray-700">Monitoreo y métricas de cumplimiento de SLAs</p>
+    </div>
+    <div class="mt-4 sm:mt-0 sm:ml-16 sm:flex-none">
+      <select
+        bind:value={selectedPeriod}
+        on:change={loadDashboard}
+        class="rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm"
+      >
+        <option value={7}>Últimos 7 días</option>
+        <option value={30}>Últimos 30 días</option>
+        <option value={90}>Últimos 90 días</option>
+      </select>
+    </div>
+  </div>
+
+  {#if isLoading}
+    <div class="mt-8 text-center">
+      <div class="inline-block animate-spin rounded-full h-12 w-12 border-b-2 border-indigo-600"></div>
+      <p class="mt-2 text-sm text-gray-500">Cargando métricas...</p>
+    </div>
+  {:else if dashboardData}
+    <!-- KPI Cards -->
+    <div class="mt-8 grid grid-cols-1 gap-5 sm:grid-cols-2 lg:grid-cols-4">
+      <!-- Response SLA -->
+      <div class="bg-white overflow-hidden shadow rounded-lg">
+        <div class="p-5">
+          <div class="flex items-center">
+            <div class="flex-shrink-0">
+              <svg class="h-6 w-6 text-indigo-600" fill="none" viewBox="0 0 24 24" stroke="currentColor">
+                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 8v4l3 3m6-3a9 9 0 11-18 0 9 9 0 0118 0z" />
+              </svg>
+            </div>
+            <div class="ml-5 w-0 flex-1">
+              <dl>
+                <dt class="text-sm font-medium text-gray-500 truncate">Response SLA</dt>
+                <dd class="flex items-baseline">
+                  <div class="text-2xl font-semibold {getRiskColor(dashboardData.response_sla.compliance_percentage)}">
+                    {dashboardData.response_sla.compliance_percentage.toFixed(1)}%
+                  </div>
+                  <div class="ml-2 flex items-baseline text-sm font-semibold {getTrendColor(dashboardData.trends.response_sla)}">
+                    {getTrendIcon(dashboardData.trends.response_sla)} {dashboardData.trends.response_sla}
+                  </div>
+                </dd>
+                <dd class="mt-1 text-xs text-gray-500">
+                  {dashboardData.response_sla.met_count} / {dashboardData.response_sla.total_count} cumplidos
+                </dd>
+              </dl>
+            </div>
+          </div>
+        </div>
+      </div>
+
+      <!-- Resolution SLA -->
+      <div class="bg-white overflow-hidden shadow rounded-lg">
+        <div class="p-5">
+          <div class="flex items-center">
+            <div class="flex-shrink-0">
+              <svg class="h-6 w-6 text-green-600" fill="none" viewBox="0 0 24 24" stroke="currentColor">
+                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 12l2 2 4-4m6 2a9 9 0 11-18 0 9 9 0 0118 0z" />
+              </svg>
+            </div>
+            <div class="ml-5 w-0 flex-1">
+              <dl>
+                <dt class="text-sm font-medium text-gray-500 truncate">Resolution SLA</dt>
+                <dd class="flex items-baseline">
+                  <div class="text-2xl font-semibold {getRiskColor(dashboardData.resolution_sla.compliance_percentage)}">
+                    {dashboardData.resolution_sla.compliance_percentage.toFixed(1)}%
+                  </div>
+                  <div class="ml-2 flex items-baseline text-sm font-semibold {getTrendColor(dashboardData.trends.resolution_sla)}">
+                    {getTrendIcon(dashboardData.trends.resolution_sla)} {dashboardData.trends.resolution_sla}
+                  </div>
+                </dd>
+                <dd class="mt-1 text-xs text-gray-500">
+                  {dashboardData.resolution_sla.met_count} / {dashboardData.resolution_sla.total_count} cumplidos
+                </dd>
+              </dl>
+            </div>
+          </div>
+        </div>
+      </div>
+
+      <!-- Active Violations -->
+      <div class="bg-white overflow-hidden shadow rounded-lg">
+        <div class="p-5">
+          <div class="flex items-center">
+            <div class="flex-shrink-0">
+              <svg class="h-6 w-6 text-red-600" fill="none" viewBox="0 0 24 24" stroke="currentColor">
+                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-3L13.732 4c-.77-1.333-2.694-1.333-3.464 0L3.34 16c-.77 1.333.192 3 1.732 3z" />
+              </svg>
+            </div>
+            <div class="ml-5 w-0 flex-1">
+              <dl>
+                <dt class="text-sm font-medium text-gray-500 truncate">Violaciones Activas</dt>
+                <dd class="text-2xl font-semibold text-red-600">
+                  {dashboardData.active_violations}
+                </dd>
+                <dd class="mt-1 text-xs text-gray-500">
+                  <a href="/sla/violations" class="text-indigo-600 hover:text-indigo-900">Ver detalles →</a>
+                </dd>
+              </dl>
+            </div>
+          </div>
+        </div>
+      </div>
+
+      <!-- At Risk Tickets -->
+      <div class="bg-white overflow-hidden shadow rounded-lg">
+        <div class="p-5">
+          <div class="flex items-center">
+            <div class="flex-shrink-0">
+              <svg class="h-6 w-6 text-yellow-600" fill="none" viewBox="0 0 24 24" stroke="currentColor">
+                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M13 16h-1v-4h-1m1-4h.01M21 12a9 9 0 11-18 0 9 9 0 0118 0z" />
+              </svg>
+            </div>
+            <div class="ml-5 w-0 flex-1">
+              <dl>
+                <dt class="text-sm font-medium text-gray-500 truncate">Tickets en Riesgo</dt>
+                <dd class="text-2xl font-semibold text-yellow-600">
+                  {dashboardData.at_risk_tickets}
+                </dd>
+                <dd class="mt-1 text-xs text-gray-500">
+                  <a href="/sla/at-risk" class="text-indigo-600 hover:text-indigo-900">Ver lista →</a>
+                </dd>
+              </dl>
+            </div>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <!-- Charts Row -->
+    <div class="mt-8 grid grid-cols-1 gap-5 lg:grid-cols-2">
+      <!-- Breakdown por Categoría -->
+      <div class="bg-white shadow rounded-lg p-6">
+        <h3 class="text-lg font-medium text-gray-900 mb-4">Cumplimiento por Categoría</h3>
+        <div class="overflow-hidden">
+          <table class="min-w-full divide-y divide-gray-200">
+            <thead>
+              <tr>
+                <th class="px-3 py-2 text-left text-xs font-medium text-gray-500 uppercase">Categoría</th>
+                <th class="px-3 py-2 text-right text-xs font-medium text-gray-500 uppercase">Tickets</th>
+                <th class="px-3 py-2 text-right text-xs font-medium text-gray-500 uppercase">Respuesta</th>
+                <th class="px-3 py-2 text-right text-xs font-medium text-gray-500 uppercase">Resolución</th>
+              </tr>
+            </thead>
+            <tbody class="divide-y divide-gray-200">
+              {#each dashboardData.by_category as cat}
+                <tr>
+                  <td class="px-3 py-2 text-sm text-gray-900">{cat.category_name}</td>
+                  <td class="px-3 py-2 text-sm text-gray-500 text-right">{cat.ticket_count}</td>
+                  <td class="px-3 py-2 text-sm text-right">
+                    <span class="font-medium {getRiskColor(cat.response_compliance)}">
+                      {cat.response_compliance.toFixed(1)}%
+                    </span>
+                  </td>
+                  <td class="px-3 py-2 text-sm text-right">
+                    <span class="font-medium {getRiskColor(cat.resolution_compliance)}">
+                      {cat.resolution_compliance.toFixed(1)}%
+                    </span>
+                  </td>
+                </tr>
+              {/each}
+            </tbody>
+          </table>
+        </div>
+      </div>
+
+      <!-- Breakdown por Prioridad -->
+      <div class="bg-white shadow rounded-lg p-6">
+        <h3 class="text-lg font-medium text-gray-900 mb-4">Cumplimiento por Prioridad</h3>
+        <div class="space-y-4">
+          {#each Object.entries(dashboardData.by_priority) as [priority, metrics]}
+            <div>
+              <div class="flex justify-between text-sm mb-1">
+                <span class="font-medium text-gray-700">{priority}</span>
+                <span class="text-gray-500">
+                  Response: <span class="{getRiskColor(getMetricValue(metrics, 'response_compliance'))}">{getMetricValue(metrics, 'response_compliance').toFixed(1)}%</span>
+                  | Resolution: <span class="{getRiskColor(getMetricValue(metrics, 'resolution_compliance'))}">{getMetricValue(metrics, 'resolution_compliance').toFixed(1)}%</span>
+                </span>
+              </div>
+              <div class="grid grid-cols-2 gap-2">
+                <div class="bg-gray-200 rounded-full h-2 overflow-hidden">
+                  <div
+                    class="h-2 rounded-full {getRiskColor(getMetricValue(metrics, 'response_compliance')).replace('text-', 'bg-')}"
+                    style="width: {getMetricValue(metrics, 'response_compliance')}%"
+                  ></div>
+                </div>
+                <div class="bg-gray-200 rounded-full h-2 overflow-hidden">
+                  <div
+                    class="h-2 rounded-full {getRiskColor(getMetricValue(metrics, 'resolution_compliance')).replace('text-', 'bg-')}"
+                    style="width: {getMetricValue(metrics, 'resolution_compliance')}%"
+                  ></div>
+                </div>
+              </div>
+            </div>
+          {/each}
+        </div>
+      </div>
+    </div>
+
+    <!-- Quick Actions -->
+    <div class="mt-8 bg-white shadow rounded-lg p-6">
+      <h3 class="text-lg font-medium text-gray-900 mb-4">Acciones Rápidas</h3>
+      <div class="grid grid-cols-1 gap-4 sm:grid-cols-3">
+        <a
+          href="/sla/violations"
+          class="flex items-center justify-center px-4 py-3 border border-gray-300 shadow-sm text-base font-medium rounded-md text-gray-700 bg-white hover:bg-gray-50"
+        >
+          <svg class="mr-3 h-5 w-5 text-red-600" fill="none" viewBox="0 0 24 24" stroke="currentColor">
+            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-3L13.732 4c-.77-1.333-2.694-1.333-3.464 0L3.34 16c-.77 1.333.192 3 1.732 3z" />
+          </svg>
+          Ver Violaciones
+        </a>
+        <a
+          href="/categories"
+          class="flex items-center justify-center px-4 py-3 border border-gray-300 shadow-sm text-base font-medium rounded-md text-gray-700 bg-white hover:bg-gray-50"
+        >
+          <svg class="mr-3 h-5 w-5 text-indigo-600" fill="none" viewBox="0 0 24 24" stroke="currentColor">
+            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M10.325 4.317c.426-1.756 2.924-1.756 3.35 0a1.724 1.724 0 002.573 1.066c1.543-.94 3.31.826 2.37 2.37a1.724 1.724 0 001.065 2.572c1.756.426 1.756 2.924 0 3.35a1.724 1.724 0 00-1.066 2.573c.94 1.543-.826 3.31-2.37 2.37a1.724 1.724 0 00-2.572 1.065c-.426 1.756-2.924 1.756-3.35 0a1.724 1.724 0 00-2.573-1.066c-1.543.94-3.31-.826-2.37-2.37a1.724 1.724 0 00-1.065-2.572c-1.756-.426-1.756-2.924 0-3.35a1.724 1.724 0 001.066-2.573c-.94-1.543.826-3.31 2.37-2.37.996.608 2.296.07 2.572-1.065z" />
+            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M15 12a3 3 0 11-6 0 3 3 0 016 0z" />
+          </svg>
+          Configurar SLAs
+        </a>
+        <a
+          href="/tickets"
+          class="flex items-center justify-center px-4 py-3 border border-gray-300 shadow-sm text-base font-medium rounded-md text-gray-700 bg-white hover:bg-gray-50"
+        >
+          <svg class="mr-3 h-5 w-5 text-green-600" fill="none" viewBox="0 0 24 24" stroke="currentColor">
+            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2" />
+          </svg>
+          Ver Todos los Tickets
+        </a>
+      </div>
+    </div>
+
+    <!-- Summary Stats -->
+    <div class="mt-8 bg-gray-50 rounded-lg p-6">
+      <div class="grid grid-cols-1 gap-4 sm:grid-cols-3 text-center">
+        <div>
+          <p class="text-sm text-gray-500">Total de Tickets</p>
+          <p class="text-2xl font-semibold text-gray-900">{dashboardData.total_tickets_period}</p>
+        </div>
+        <div>
+          <p class="text-sm text-gray-500">Tiempo Promedio de Respuesta</p>
+          <p class="text-2xl font-semibold text-gray-900">
+            {dashboardData.response_sla.avg_time_hours?.toFixed(1) || 'N/A'} hrs
+          </p>
+        </div>
+        <div>
+          <p class="text-sm text-gray-500">Tiempo Promedio de Resolución</p>
+          <p class="text-2xl font-semibold text-gray-900">
+            {dashboardData.resolution_sla.avg_time_hours?.toFixed(1) || 'N/A'} hrs
+          </p>
+        </div>
+      </div>
+    </div>
+  {:else}
+    <div class="mt-8 text-center">
+      <p class="text-gray-500">No se pudieron cargar los datos</p>
+    </div>
+  {/if}
+</div>

frontend-internal/src/routes/sla/at-risk/+page.svelte

@@ -0,0 +1,240 @@
+<script lang="ts">
+  import { onMount } from 'svelte';
+  import { api } from '$lib/utils/api';
+  import { toast } from '$lib/stores/toast';
+
+  let isLoading = true;
+  let atRiskTickets: any[] = [];
+  let threshold = 80;
+
+  async function loadAtRiskTickets() {
+    isLoading = true;
+    try {
+      const data: any = await api.get(`/sla/at-risk?threshold=${threshold}`);
+      atRiskTickets = data.tickets || [];
+    } catch (e: any) {
+      toast.error(e.message || 'Error cargando tickets en riesgo');
+      atRiskTickets = [];
+    } finally {
+      isLoading = false;
+    }
+  }
+
+  function formatHours(hours: number): string {
+    if (hours < 1) {
+      return `${Math.round(hours * 60)} min`;
+    } else if (hours < 24) {
+      return `${hours.toFixed(1)} hrs`;
+    } else {
+      const days = Math.floor(hours / 24);
+      const remainingHours = Math.round(hours % 24);
+      return `${days}d ${remainingHours}h`;
+    }
+  }
+
+  function getRiskColor(percentage: number): string {
+    if (percentage >= 95) return 'bg-red-100 text-red-800 border-red-200';
+    if (percentage >= 90) return 'bg-orange-100 text-orange-800 border-orange-200';
+    if (percentage >= 80) return 'bg-yellow-100 text-yellow-800 border-yellow-200';
+    return 'bg-blue-100 text-blue-800 border-blue-200';
+  }
+
+  function getRiskLabel(percentage: number): string {
+    if (percentage >= 95) return 'Crítico';
+    if (percentage >= 90) return 'Alto';
+    if (percentage >= 80) return 'Medio';
+    return 'Bajo';
+  }
+
+  function getPriorityColor(priority: string): string {
+    const colors: Record<string, string> = {
+      'LOW': 'bg-gray-100 text-gray-800',
+      'MEDIUM': 'bg-blue-100 text-blue-800',
+      'HIGH': 'bg-orange-100 text-orange-800',
+      'URGENT': 'bg-red-100 text-red-800'
+    };
+    return colors[priority] || 'bg-gray-100 text-gray-800';
+  }
+
+  function getSLATypeLabel(type: string): string {
+    return type === 'response' ? 'Respuesta' : 'Resolución';
+  }
+
+  onMount(loadAtRiskTickets);
+</script>
+
+<div class="px-4 py-8 mx-auto max-w-7xl sm:px-6 lg:px-8">
+  <!-- Header -->
+  <div class="sm:flex sm:items-center sm:justify-between">
+    <div class="sm:flex-auto">
+      <h1 class="text-2xl font-bold text-gray-900">Tickets en Riesgo</h1>
+      <p class="mt-2 text-sm text-gray-700">
+        Tickets que están próximos a violar sus SLAs
+      </p>
+    </div>
+    <div class="mt-4 sm:mt-0 flex gap-3">
+      <select
+        bind:value={threshold}
+        on:change={loadAtRiskTickets}
+        class="rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm"
+      >
+        <option value={70}>70% del tiempo</option>
+        <option value={80}>80% del tiempo</option>
+        <option value={90}>90% del tiempo</option>
+      </select>
+      <a
+        href="/sla"
+        class="inline-flex items-center px-4 py-2 border border-gray-300 rounded-md shadow-sm text-sm font-medium text-gray-700 bg-white hover:bg-gray-50"
+      >
+        ← Volver al Dashboard
+      </a>
+    </div>
+  </div>
+
+  <!-- Info Banner -->
+  <div class="mt-6 bg-yellow-50 border-l-4 border-yellow-400 p-4">
+    <div class="flex">
+      <div class="flex-shrink-0">
+        <svg class="h-5 w-5 text-yellow-400" viewBox="0 0 20 20" fill="currentColor">
+          <path fill-rule="evenodd" d="M8.257 3.099c.765-1.36 2.722-1.36 3.486 0l5.58 9.92c.75 1.334-.213 2.98-1.742 2.98H4.42c-1.53 0-2.493-1.646-1.743-2.98l5.58-9.92zM11 13a1 1 0 11-2 0 1 1 0 012 0zm-1-8a1 1 0 00-1 1v3a1 1 0 002 0V6a1 1 0 00-1-1z" clip-rule="evenodd" />
+        </svg>
+      </div>
+      <div class="ml-3">
+        <p class="text-sm text-yellow-700">
+          Mostrando tickets que han consumido {threshold}% o más de su tiempo SLA.
+          Estos tickets requieren atención prioritaria para evitar violaciones.
+        </p>
+      </div>
+    </div>
+  </div>
+
+  <!-- Risk Tickets List -->
+  <div class="mt-6 space-y-4">
+    {#if isLoading}
+      <div class="text-center py-12">
+        <div class="inline-block animate-spin rounded-full h-12 w-12 border-b-2 border-indigo-600"></div>
+        <p class="mt-2 text-sm text-gray-500">Cargando tickets en riesgo...</p>
+      </div>
+    {:else if atRiskTickets.length === 0}
+      <div class="bg-white shadow rounded-lg text-center py-12">
+        <svg class="mx-auto h-12 w-12 text-green-400" fill="none" viewBox="0 0 24 24" stroke="currentColor">
+          <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 12l2 2 4-4m6 2a9 9 0 11-18 0 9 9 0 0118 0z" />
+        </svg>
+        <p class="mt-2 text-lg font-medium text-gray-900">¡Todo bajo control!</p>
+        <p class="mt-1 text-sm text-gray-500">No hay tickets en riesgo de violar SLA</p>
+      </div>
+    {:else}
+      {#each atRiskTickets as ticket}
+        <div class="bg-white shadow rounded-lg overflow-hidden border-l-4 {getRiskColor(ticket.risk_percentage)}">
+          <div class="px-6 py-4">
+            <div class="flex items-start justify-between">
+              <div class="flex-1">
+                <div class="flex items-center gap-3">
+                  <a
+                    href="/tickets/{ticket.ticket.id}"
+                    class="text-lg font-semibold text-indigo-600 hover:text-indigo-900"
+                  >
+                    {ticket.ticket.ticket_number}
+                  </a>
+                  <span class="inline-flex items-center rounded-full px-2.5 py-0.5 text-xs font-medium {getPriorityColor(ticket.ticket.priority)}">
+                    {ticket.ticket.priority}
+                  </span>
+                  <span class="text-sm text-gray-500">
+                    {getSLATypeLabel(ticket.sla_type)}
+                  </span>
+                </div>
+                <p class="mt-1 text-sm text-gray-900">{ticket.ticket.subject}</p>
+                
+                {#if ticket.category}
+                  <div class="mt-2 text-xs text-gray-500">
+                    📂 {ticket.category.name}
+                    <span class="text-gray-400">
+                      (SLA: {ticket.sla_type === 'response' ? ticket.category.sla_response_hours : ticket.category.sla_resolution_hours}h)
+                    </span>
+                  </div>
+                {/if}
+
+                {#if ticket.assigned_to}
+                  <div class="mt-2 text-xs text-gray-500">
+                    👤 Asignado a: <span class="text-gray-900">{ticket.assigned_to.first_name} {ticket.assigned_to.last_name}</span>
+                  </div>
+                {/if}
+              </div>
+
+              <div class="ml-6 flex-shrink-0 text-right">
+                <div class="text-sm font-medium {getRiskColor(ticket.risk_percentage)} inline-flex items-center px-3 py-1 rounded-full border">
+                  {getRiskLabel(ticket.risk_percentage)}
+                </div>
+                <div class="mt-2 text-sm">
+                  <span class="font-semibold text-red-600">
+                    Progreso: {ticket.risk_percentage.toFixed(1)}%
+                  </span>
+                </div>
+                <div class="mt-1 text-xs text-gray-500">
+                  Quedan: <span class="font-medium text-orange-600">{formatHours(ticket.time_remaining_hours)}</span>
+                </div>
+              </div>
+            </div>
+
+            <!-- Progress Bar -->
+            <div class="mt-4">
+              <div class="relative">
+                <div class="overflow-hidden h-2 text-xs flex rounded bg-gray-200">
+                  <div
+                    style="width: {ticket.risk_percentage}%"
+                    class="shadow-none flex flex-col text-center whitespace-nowrap text-white justify-center {ticket.risk_percentage >= 95 ? 'bg-red-500' : ticket.risk_percentage >= 90 ? 'bg-orange-500' : ticket.risk_percentage >= 80 ? 'bg-yellow-500' : 'bg-blue-500'}"
+                  ></div>
+                </div>
+                <div class="flex justify-between text-xs text-gray-500 mt-1">
+                  <span>0%</span>
+                  <span class="text-orange-600 font-medium">{threshold}% (umbral)</span>
+                  <span>100%</span>
+                </div>
+              </div>
+            </div>
+          </div>
+
+          <div class="bg-gray-50 px-6 py-3 flex justify-end gap-3">
+            <a
+              href="/tickets/{ticket.ticket.id}"
+              class="text-sm font-medium text-indigo-600 hover:text-indigo-900"
+            >
+              Ver ticket →
+            </a>
+          </div>
+        </div>
+      {/each}
+    {/if}
+  </div>
+
+  <!-- Summary Stats -->
+  {#if !isLoading && atRiskTickets.length > 0}
+    <div class="mt-8 bg-gray-50 rounded-lg p-6">
+      <h3 class="text-sm font-medium text-gray-900 mb-4">Resumen</h3>
+      <div class="grid grid-cols-1 gap-4 sm:grid-cols-4 text-center">
+        <div>
+          <p class="text-sm text-gray-500">Total en Riesgo</p>
+          <p class="text-2xl font-semibold text-gray-900">{atRiskTickets.length}</p>
+        </div>
+        <div>
+          <p class="text-sm text-gray-500">Riesgo Crítico (≥95%)</p>
+          <p class="text-2xl font-semibold text-red-600">
+            {atRiskTickets.filter(t => t.risk_percentage >= 95).length}
+          </p>
+        </div>
+        <div>
+          <p class="text-sm text-gray-500">Riesgo Alto (≥90%)</p>
+          <p class="text-2xl font-semibold text-orange-600">
+            {atRiskTickets.filter(t => t.risk_percentage >= 90 && t.risk_percentage < 95).length}
+          </p>
+        </div>
+        <div>
+          <p class="text-sm text-gray-500">Riesgo Medio (≥80%)</p>
+          <p class="text-2xl font-semibold text-yellow-600">
+            {atRiskTickets.filter(t => t.risk_percentage >= 80 && t.risk_percentage < 90).length}
+          </p>
+        </div>
+      </div>
+    </div>
+  {/if}
+</div>

frontend-internal/src/routes/sla/violations/+page.svelte

@@ -0,0 +1,389 @@
+<script lang="ts">
+  import { onMount } from 'svelte';
+  import { api } from '$lib/utils/api';
+  import { toast } from '$lib/stores/toast';
+
+  let isLoading = true;
+  let violations: any[] = [];
+  let total = 0;
+  let page = 1;
+  let perPage = 20;
+  let totalPages = 0;
+
+  // Filtros
+  let slaTypeFilter = '';
+  let categoryFilter = '';
+  let priorityFilter = '';
+  let categories: any[] = [];
+
+  async function loadViolations() {
+    isLoading = true;
+    try {
+      const params = new URLSearchParams();
+      params.append('skip', String((page - 1) * perPage));
+      params.append('limit', String(perPage));
+      
+      if (slaTypeFilter) params.append('sla_type', slaTypeFilter);
+      if (categoryFilter) params.append('category_id', categoryFilter);
+      if (priorityFilter) params.append('priority', priorityFilter);
+
+      const data: any = await api.get(`/sla/violations?${params.toString()}`);
+      violations = data.violations || [];
+      total = data.total || 0;
+      totalPages = data.total_pages || 0;
+    } catch (e: any) {
+      toast.error(e.message || 'Error cargando violaciones');
+      violations = [];
+    } finally {
+      isLoading = false;
+    }
+  }
+
+  async function loadCategories() {
+    try {
+      categories = await api.get('/categories/');
+    } catch (e) {
+      console.error('Error loading categories', e);
+    }
+  }
+
+  function formatHours(hours: number): string {
+    if (hours < 1) {
+      return `${Math.round(hours * 60)} min`;
+    } else if (hours < 24) {
+      return `${hours.toFixed(1)} hrs`;
+    } else {
+      const days = Math.floor(hours / 24);
+      const remainingHours = Math.round(hours % 24);
+      return `${days}d ${remainingHours}h`;
+    }
+  }
+
+  function getPriorityColor(priority: string): string {
+    const colors: Record<string, string> = {
+      'LOW': 'bg-gray-100 text-gray-800',
+      'MEDIUM': 'bg-blue-100 text-blue-800',
+      'HIGH': 'bg-orange-100 text-orange-800',
+      'URGENT': 'bg-red-100 text-red-800'
+    };
+    return colors[priority] || 'bg-gray-100 text-gray-800';
+  }
+
+  function getSLATypeLabel(type: string): string {
+    return type === 'response' ? 'Respuesta' : 'Resolución';
+  }
+
+  function getSLATypeColor(type: string): string {
+    return type === 'response' ? 'bg-yellow-100 text-yellow-800' : 'bg-red-100 text-red-800';
+  }
+
+  function handleFilterChange() {
+    page = 1;
+    loadViolations();
+  }
+
+  function nextPage() {
+    if (page < totalPages) {
+      page++;
+      loadViolations();
+    }
+  }
+
+  function prevPage() {
+    if (page > 1) {
+      page--;
+      loadViolations();
+    }
+  }
+
+  onMount(() => {
+    loadCategories();
+    loadViolations();
+  });
+</script>
+
+<div class="px-4 py-8 mx-auto max-w-7xl sm:px-6 lg:px-8">
+  <!-- Header -->
+  <div class="sm:flex sm:items-center sm:justify-between">
+    <div class="sm:flex-auto">
+      <h1 class="text-2xl font-bold text-gray-900">Violaciones SLA</h1>
+      <p class="mt-2 text-sm text-gray-700">
+        Tickets que han violado sus SLAs de respuesta o resolución
+      </p>
+    </div>
+    <div class="mt-4 sm:mt-0">
+      <a
+        href="/sla"
+        class="inline-flex items-center px-4 py-2 border border-gray-300 rounded-md shadow-sm text-sm font-medium text-gray-700 bg-white hover:bg-gray-50"
+      >
+        ← Volver al Dashboard
+      </a>
+    </div>
+  </div>
+
+  <!-- Filters -->
+  <div class="mt-6 bg-white shadow rounded-lg p-4">
+    <div class="grid grid-cols-1 gap-4 sm:grid-cols-4">
+      <div>
+        <label for="slaType" class="block text-sm font-medium text-gray-700">Tipo de SLA</label>
+        <select
+          id="slaType"
+          bind:value={slaTypeFilter}
+          on:change={handleFilterChange}
+          class="mt-1 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm"
+        >
+          <option value="">Todos</option>
+          <option value="response">Respuesta</option>
+          <option value="resolution">Resolución</option>
+        </select>
+      </div>
+
+      <div>
+        <label for="category" class="block text-sm font-medium text-gray-700">Categoría</label>
+        <select
+          id="category"
+          bind:value={categoryFilter}
+          on:change={handleFilterChange}
+          class="mt-1 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm"
+        >
+          <option value="">Todas</option>
+          {#each categories as cat}
+            <option value={cat.id}>{cat.name}</option>
+          {/each}
+        </select>
+      </div>
+
+      <div>
+        <label for="priority" class="block text-sm font-medium text-gray-700">Prioridad</label>
+        <select
+          id="priority"
+          bind:value={priorityFilter}
+          on:change={handleFilterChange}
+          class="mt-1 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm"
+        >
+          <option value="">Todas</option>
+          <option value="LOW">Baja</option>
+          <option value="MEDIUM">Media</option>
+          <option value="HIGH">Alta</option>
+          <option value="URGENT">Urgente</option>
+        </select>
+      </div>
+
+      <div class="flex items-end">
+        <button
+          on:click={() => {
+            slaTypeFilter = '';
+            categoryFilter = '';
+            priorityFilter = '';
+            handleFilterChange();
+          }}
+          class="w-full inline-flex justify-center items-center px-4 py-2 border border-gray-300 rounded-md shadow-sm text-sm font-medium text-gray-700 bg-white hover:bg-gray-50"
+        >
+          Limpiar Filtros
+        </button>
+      </div>
+    </div>
+  </div>
+
+  <!-- Stats Summary -->
+  <div class="mt-6 bg-red-50 border-l-4 border-red-400 p-4">
+    <div class="flex">
+      <div class="flex-shrink-0">
+        <svg class="h-5 w-5 text-red-400" viewBox="0 0 20 20" fill="currentColor">
+          <path fill-rule="evenodd" d="M8.257 3.099c.765-1.36 2.722-1.36 3.486 0l5.58 9.92c.75 1.334-.213 2.98-1.742 2.98H4.42c-1.53 0-2.493-1.646-1.743-2.98l5.58-9.92zM11 13a1 1 0 11-2 0 1 1 0 012 0zm-1-8a1 1 0 00-1 1v3a1 1 0 002 0V6a1 1 0 00-1-1z" clip-rule="evenodd" />
+        </svg>
+      </div>
+      <div class="ml-3">
+        <p class="text-sm text-red-700">
+          <strong>{total}</strong> violaciones activas encontradas
+          {#if total > 0}
+            - Requieren atención inmediata
+          {/if}
+        </p>
+      </div>
+    </div>
+  </div>
+
+  <!-- Violations Table -->
+  <div class="mt-6 flex flex-col">
+    <div class="-mx-4 -my-2 overflow-x-auto sm:-mx-6 lg:-mx-8">
+      <div class="inline-block min-w-full py-2 align-middle md:px-6 lg:px-8">
+        <div class="overflow-hidden shadow ring-1 ring-black ring-opacity-5 md:rounded-lg">
+          <table class="min-w-full divide-y divide-gray-300">
+            <thead class="bg-gray-50">
+              <tr>
+                <th scope="col" class="py-3.5 pl-4 pr-3 text-left text-sm font-semibold text-gray-900 sm:pl-6">
+                  Ticket
+                </th>
+                <th scope="col" class="px-3 py-3.5 text-left text-sm font-semibold text-gray-900">
+                  Categoría
+                </th>
+                <th scope="col" class="px-3 py-3.5 text-left text-sm font-semibold text-gray-900">
+                  Tipo SLA
+                </th>
+                <th scope="col" class="px-3 py-3.5 text-left text-sm font-semibold text-gray-900">
+                  Prioridad
+                </th>
+                <th scope="col" class="px-3 py-3.5 text-left text-sm font-semibold text-gray-900">
+                  Tiempo Vencido
+                </th>
+                <th scope="col" class="px-3 py-3.5 text-left text-sm font-semibold text-gray-900">
+                  Asignado a
+                </th>
+                <th scope="col" class="relative py-3.5 pl-3 pr-4 sm:pr-6">
+                  <span class="sr-only">Acciones</span>
+                </th>
+              </tr>
+            </thead>
+            <tbody class="divide-y divide-gray-200 bg-white">
+              {#if isLoading}
+                <tr>
+                  <td colspan="7" class="text-center py-8">
+                    <div class="inline-block animate-spin rounded-full h-8 w-8 border-b-2 border-indigo-600"></div>
+                    <p class="mt-2 text-sm text-gray-500">Cargando violaciones...</p>
+                  </td>
+                </tr>
+              {:else if violations.length === 0}
+                <tr>
+                  <td colspan="7" class="text-center py-8">
+                    <svg class="mx-auto h-12 w-12 text-gray-400" fill="none" viewBox="0 0 24 24" stroke="currentColor">
+                      <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 12l2 2 4-4m6 2a9 9 0 11-18 0 9 9 0 0118 0z" />
+                    </svg>
+                    <p class="mt-2 text-sm text-gray-500">Excelente! No hay violaciones de SLA activas</p>
+                  </td>
+                </tr>
+              {:else}
+                {#each violations as violation}
+                  <tr class="hover:bg-gray-50">
+                    <td class="whitespace-nowrap py-4 pl-4 pr-3 sm:pl-6">
+                      <div class="flex flex-col">
+                        <a
+                          href="/tickets/{violation.ticket.id}"
+                          class="font-medium text-indigo-600 hover:text-indigo-900"
+                        >
+                          {violation.ticket.ticket_number}
+                        </a>
+                        <span class="text-sm text-gray-500 truncate max-w-xs">
+                          {violation.ticket.subject}
+                        </span>
+                      </div>
+                    </td>
+                    <td class="whitespace-nowrap px-3 py-4 text-sm text-gray-500">
+                      {#if violation.category}
+                        <span class="text-gray-900">{violation.category.name}</span>
+                        <div class="text-xs text-gray-500">
+                          R: {violation.category.sla_response_hours}h | 
+                          Res: {violation.category.sla_resolution_hours}h
+                        </div>
+                      {:else}
+                        <span class="text-gray-400">Sin categoría</span>
+                      {/if}
+                    </td>
+                    <td class="whitespace-nowrap px-3 py-4 text-sm">
+                      <span class="inline-flex rounded-full px-2 text-xs font-semibold leading-5 {getSLATypeColor(violation.sla_type)}">
+                        {getSLATypeLabel(violation.sla_type)}
+                      </span>
+                    </td>
+                    <td class="whitespace-nowrap px-3 py-4 text-sm">
+                      <span class="inline-flex rounded-full px-2 text-xs font-semibold leading-5 {getPriorityColor(violation.ticket.priority)}">
+                        {violation.ticket.priority}
+                      </span>
+                    </td>
+                    <td class="whitespace-nowrap px-3 py-4 text-sm">
+                      <span class="font-semibold text-red-600">
+                        {formatHours(violation.hours_overdue)}
+                      </span>
+                      <div class="text-xs text-gray-500">
+                        vencido
+                      </div>
+                    </td>
+                    <td class="whitespace-nowrap px-3 py-4 text-sm text-gray-500">
+                      {#if violation.assigned_to}
+                        <div class="flex flex-col">
+                          <span class="text-gray-900">
+                            {violation.assigned_to.first_name} {violation.assigned_to.last_name}
+                          </span>
+                          <span class="text-xs text-gray-500">
+                            {violation.assigned_to.email}
+                          </span>
+                        </div>
+                      {:else}
+                        <span class="text-gray-400 italic">Sin asignar</span>
+                      {/if}
+                    </td>
+                    <td class="relative whitespace-nowrap py-4 pl-3 pr-4 text-right text-sm font-medium sm:pr-6">
+                      <a
+                        href="/tickets/{violation.ticket.id}"
+                        class="text-indigo-600 hover:text-indigo-900"
+                      >
+                        Ver ticket →
+                      </a>
+                    </td>
+                  </tr>
+                {/each}
+              {/if}
+            </tbody>
+          </table>
+        </div>
+      </div>
+    </div>
+  </div>
+
+  <!-- Pagination -->
+  {#if totalPages > 1}
+    <div class="mt-6 flex items-center justify-between border-t border-gray-200 bg-white px-4 py-3 sm:px-6 rounded-lg shadow">
+      <div class="flex flex-1 justify-between sm:hidden">
+        <button
+          on:click={prevPage}
+          disabled={page === 1}
+          class="relative inline-flex items-center rounded-md border border-gray-300 bg-white px-4 py-2 text-sm font-medium text-gray-700 hover:bg-gray-50 disabled:opacity-50 disabled:cursor-not-allowed"
+        >
+          Anterior
+        </button>
+        <button
+          on:click={nextPage}
+          disabled={page === totalPages}
+          class="relative ml-3 inline-flex items-center rounded-md border border-gray-300 bg-white px-4 py-2 text-sm font-medium text-gray-700 hover:bg-gray-50 disabled:opacity-50 disabled:cursor-not-allowed"
+        >
+          Siguiente
+        </button>
+      </div>
+      <div class="hidden sm:flex sm:flex-1 sm:items-center sm:justify-between">
+        <div>
+          <p class="text-sm text-gray-700">
+            Mostrando
+            <span class="font-medium">{(page - 1) * perPage + 1}</span>
+            a
+            <span class="font-medium">{Math.min(page * perPage, total)}</span>
+            de
+            <span class="font-medium">{total}</span>
+            resultados
+          </p>
+        </div>
+        <div>
+          <nav class="isolate inline-flex -space-x-px rounded-md shadow-sm" aria-label="Pagination">
+            <button
+              on:click={prevPage}
+              disabled={page === 1}
+              class="relative inline-flex items-center rounded-l-md px-2 py-2 text-gray-400 ring-1 ring-inset ring-gray-300 hover:bg-gray-50 focus:z-20 focus:outline-offset-0 disabled:opacity-50 disabled:cursor-not-allowed"
+            >
+              <span class="sr-only">Anterior</span>
+              ←
+            </button>
+            <span class="relative inline-flex items-center px-4 py-2 text-sm font-semibold text-gray-900 ring-1 ring-inset ring-gray-300">
+              Página {page} de {totalPages}
+            </span>
+            <button
+              on:click={nextPage}
+              disabled={page === totalPages}
+              class="relative inline-flex items-center rounded-r-md px-2 py-2 text-gray-400 ring-1 ring-inset ring-gray-300 hover:bg-gray-50 focus:z-20 focus:outline-offset-0 disabled:opacity-50 disabled:cursor-not-allowed"
+            >
+              <span class="sr-only">Siguiente</span>
+              →
+            </button>
+          </nav>
+        </div>
+      </div>
+    </div>
+  {/if}
+</div>

frontend-internal/src/routes/tenants/+page.svelte

@@ -14,7 +14,9 @@
     name: '',
     slug: '',
     domain: '',
-    is_active: true
+    contact_phone: '',
+    contact_email: '',
+    status: 'active'
   };
 
   async function loadTenants() {
@@ -30,13 +32,20 @@
 
   function openCreateModal() {
     editingTenant = null;
-    formData = { name: '', slug: '', domain: '', is_active: true };
+    formData = { name: '', slug: '', domain: '', contact_phone: '', contact_email: '', status: 'active' };
     showModal = true;
   }
 
   function openEditModal(tenant) {
     editingTenant = tenant;
-    formData = { ...tenant };
+    formData = { 
+      name: tenant.name,
+      slug: tenant.slug,
+      domain: tenant.domain || '',
+      contact_phone: tenant.contact_phone || '',
+      contact_email: tenant.contact_email || '',
+      status: tenant.status || 'active'
+    };
     showModal = true;
   }
 
@@ -44,10 +53,10 @@
     try {
       if (editingTenant) {
         await api.put(`/tenants/${editingTenant.id}`, formData);
-        toast.success('Cliente actualizado');
+        toast.success('Cliente actualizado correctamente');
       } else {
         await api.post('/tenants/', formData);
-        toast.success('Cliente creado');
+        toast.success('Cliente creado correctamente');
       }
       showModal = false;
       loadTenants();
@@ -85,7 +94,8 @@
               <tr>
                 <th scope="col" class="py-3.5 pl-4 pr-3 text-left text-sm font-semibold text-gray-900 sm:pl-6">Nombre</th>
                 <th scope="col" class="px-3 py-3.5 text-left text-sm font-semibold text-gray-900">Slug</th>
-                <th scope="col" class="px-3 py-3.5 text-left text-sm font-semibold text-gray-900">Dominio</th>
+                <th scope="col" class="px-3 py-3.5 text-left text-sm font-semibold text-gray-900">Email Contacto</th>
+                <th scope="col" class="px-3 py-3.5 text-left text-sm font-semibold text-gray-900">Teléfono</th>
                 <th scope="col" class="px-3 py-3.5 text-left text-sm font-semibold text-gray-900">Estado</th>
                 <th scope="col" class="relative py-3.5 pl-3 pr-4 sm:pr-6">
                   <span class="sr-only">Acciones</span>
@@ -94,18 +104,19 @@
             </thead>
             <tbody class="divide-y divide-gray-200 bg-white">
               {#if isLoading}
-                 <tr><td colspan="5" class="text-center py-4">Cargando...</td></tr>
+                 <tr><td colspan="6" class="text-center py-4">Cargando...</td></tr>
               {:else if tenants.length === 0}
-                 <tr><td colspan="5" class="text-center py-4">No hay clientes registrados</td></tr>
+                 <tr><td colspan="6" class="text-center py-4">No hay clientes registrados</td></tr>
               {:else}
                 {#each tenants as tenant}
                   <tr>
                     <td class="whitespace-nowrap py-4 pl-4 pr-3 text-sm font-medium text-gray-900 sm:pl-6">{tenant.name}</td>
                     <td class="whitespace-nowrap px-3 py-4 text-sm text-gray-500">{tenant.slug}</td>
-                    <td class="whitespace-nowrap px-3 py-4 text-sm text-gray-500">{tenant.domain || '-'}</td>
+                    <td class="whitespace-nowrap px-3 py-4 text-sm text-gray-500">{tenant.contact_email || '-'}</td>
+                    <td class="whitespace-nowrap px-3 py-4 text-sm text-gray-500">{tenant.contact_phone || '-'}</td>
                     <td class="whitespace-nowrap px-3 py-4 text-sm text-gray-500">
-                      <span class:bg-green-100={tenant.is_active} class:text-green-800={tenant.is_active} class:bg-red-100={!tenant.is_active} class:text-red-800={!tenant.is_active} class="inline-flex rounded-full px-2 text-xs font-semibold leading-5">
-                        {tenant.is_active ? 'Activo' : 'Inactivo'}
+                      <span class:bg-green-100={tenant.status === 'active'} class:text-green-800={tenant.status === 'active'} class:bg-yellow-100={tenant.status === 'suspended'} class:text-yellow-800={tenant.status === 'suspended'} class:bg-red-100={tenant.status === 'inactive'} class:text-red-800={tenant.status === 'inactive'} class="inline-flex rounded-full px-2 text-xs font-semibold leading-5">
+                        {tenant.status === 'active' ? 'Activo' : tenant.status === 'suspended' ? 'Suspendido' : 'Inactivo'}
                       </span>
                     </td>
                     <td class="relative whitespace-nowrap py-4 pl-3 pr-4 text-right text-sm font-medium sm:pr-6">
@@ -140,9 +151,23 @@
       <input type="text" id="domain" bind:value={formData.domain} class="mt-1 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm border p-2">
     </div>
 
-    <div class="flex items-center">
-      <input type="checkbox" id="is_active" bind:checked={formData.is_active} class="h-4 w-4 rounded border-gray-300 text-indigo-600 focus:ring-indigo-500">
-      <label for="is_active" class="ml-2 block text-sm text-gray-900">Activo</label>
+    <div>
+      <label for="contact_email" class="block text-sm font-medium text-gray-700">Email de Contacto</label>
+      <input type="email" id="contact_email" bind:value={formData.contact_email} class="mt-1 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm border p-2">
+    </div>
+
+    <div>
+      <label for="contact_phone" class="block text-sm font-medium text-gray-700">Teléfono de Contacto</label>
+      <input type="text" id="contact_phone" bind:value={formData.contact_phone} class="mt-1 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm border p-2">
+    </div>
+
+    <div>
+      <label for="status" class="block text-sm font-medium text-gray-700">Estado</label>
+      <select id="status" bind:value={formData.status} class="mt-1 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm border p-2">
+        <option value="active">Activo</option>
+        <option value="suspended">Suspendido</option>
+        <option value="inactive">Inactivo</option>
+      </select>
     </div>
 
     <div class="mt-5 sm:mt-6 sm:grid sm:grid-cols-2 sm:gap-3 sm:grid-flow-row-dense">
@@ -152,6 +177,11 @@
       <button type="button" on:click={() => showModal = false} class="mt-3 w-full inline-flex justify-center rounded-md border border-gray-300 shadow-sm px-4 py-2 bg-white text-base font-medium text-gray-700 hover:bg-gray-50 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500 sm:mt-0 sm:col-start-1 sm:text-sm">
         Cancelar
       </button>
+      {#if editingTenant}
+        <button type="button" on:click={async () => { await api.delete(`/tenants/${editingTenant.id}`); toast.success('Cliente eliminado'); showModal = false; loadTenants(); }} class="w-full inline-flex justify-center rounded-md border border-transparent shadow-sm px-4 py-2 bg-red-600 text-base font-medium text-white hover:bg-red-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-red-500 sm:col-start-1 sm:text-sm">
+          Eliminar
+        </button>
+      {/if}
     </div>
   </form>
 </Modal>

frontend-internal/src/routes/tickets/+page.svelte

@@ -0,0 +1,581 @@
+<script lang="ts">
+  import { onMount } from 'svelte';
+  import { goto } from '$app/navigation';
+  import { api } from '$lib/utils/api';
+  import { toast } from '$lib/stores/toast';
+  import Modal from '$lib/components/Modal.svelte';
+
+  let tickets = [];
+  let categories = [];
+  let systems = [];
+  let users = [];
+  let isLoading = false;
+  let showModal = false;
+  let showEditModal = false;
+  let showDeleteModal = false;
+  let selectedTicket = null;
+
+  // Filtros
+  let filterStatus = '';
+  let filterPriority = '';
+  
+  // Form para editar
+  let editFormData = {
+    status: '',
+    priority: '',
+    assigned_to: ''
+  };
+
+  let formData = {
+    subject: '',
+    description: '',
+    category_id: '',
+    affected_system_id: '',
+    priority: 'MEDIUM'
+  };
+
+  const STATUSES = [
+    { value: 'NEW', label: 'Nuevo', color: 'blue' },
+    { value: 'IN_PROGRESS', label: 'En Progreso', color: 'indigo' },
+    { value: 'WAITING_CUSTOMER', label: 'Esperando Cliente', color: 'orange' },
+    { value: 'RESOLVED', label: 'Resuelto', color: 'green' },
+    { value: 'CLOSED', label: 'Cerrado', color: 'gray' },
+    { value: 'REOPENED', label: 'Reabierto', color: 'red' }
+  ];
+
+  const PRIORITIES = [
+    { value: 'LOW', label: 'Baja', color: 'gray' },
+    { value: 'MEDIUM', label: 'Media', color: 'blue' },
+    { value: 'HIGH', label: 'Alta', color: 'orange' },
+    { value: 'URGENT', label: 'Urgente', color: 'red' }
+  ];
+
+  // Ajustar la función loadData para asegurar que los filtros se envíen correctamente
+  async function loadData() {
+    isLoading = true;
+    try {
+      const [ticketsData, categoriesData, systemsData, usersData] = await Promise.all([
+        api.get('/tickets/', {
+          params: {
+            status: filterStatus || undefined,
+            priority: filterPriority || undefined
+          }
+        }),
+        api.get('/categories/'),
+        api.get('/systems/'),
+        api.get('/users/')
+      ]);
+      tickets = ticketsData;
+      categories = categoriesData;
+      systems = systemsData;
+      users = usersData;
+    } catch (e) {
+      toast.error('Error cargando datos: ' + (e.message || 'Error desconocido'));
+    } finally {
+      isLoading = false;
+    }
+  }
+
+  // Asegurar que los filtros se apliquen al cambiar su valor
+  function applyFilters() {
+    loadData();
+  }
+
+  function openCreateModal() {
+    selectedTicket = null;
+    formData = {
+      subject: '',
+      description: '',
+      category_id: '',
+      affected_system_id: '',
+      priority: 'MEDIUM'
+    };
+    showModal = true;
+  }
+
+  function viewTicket(ticket) {
+    // Navegar a la página de detalle del ticket
+    goto(`/tickets/${ticket.id}`);
+  }
+
+  function openEditModal(ticket) {
+    selectedTicket = ticket;
+    editFormData = {
+      status: ticket.status,
+      priority: ticket.priority,
+      assigned_to: ticket.assigned_to || ''
+    };
+    showEditModal = true;
+  }
+
+  function openDeleteModal(ticket) {
+    selectedTicket = ticket;
+    showDeleteModal = true;
+  }
+
+  async function handleDelete() {
+    if (!selectedTicket) return;
+    
+    try {
+      await api.delete(`/tickets/${selectedTicket.id}`);
+      toast.success('Ticket eliminado exitosamente');
+      showDeleteModal = false;
+      selectedTicket = null;
+      loadData();
+    } catch (e) {
+      toast.error(e.message || 'Error eliminando ticket');
+    }
+  }
+
+  async function handleUpdate() {
+    try {
+      const payload = {};
+      
+      if (editFormData.status !== selectedTicket.status) {
+        payload.status = editFormData.status;
+      }
+      if (editFormData.priority !== selectedTicket.priority) {
+        payload.priority = editFormData.priority;
+      }
+      if (editFormData.assigned_to !== selectedTicket.assigned_to) {
+        payload.assigned_to = editFormData.assigned_to || null;
+      }
+
+      if (Object.keys(payload).length === 0) {
+        toast.info('No hay cambios para guardar');
+        showEditModal = false;
+        return;
+      }
+
+      await api.patch(`/tickets/${selectedTicket.id}`, payload);
+      toast.success('Ticket actualizado exitosamente');
+      showEditModal = false;
+      loadData();
+    } catch (e) {
+      toast.error(e.message || 'Error actualizando ticket');
+    }
+  }
+
+  async function handleSubmit() {
+    try {
+      const payload = {
+        subject: formData.subject,
+        description: formData.description,
+        category_id: formData.category_id || null,
+        affected_system_id: formData.affected_system_id || null,
+        priority: formData.priority
+      };
+
+      await api.post('/tickets/', payload);
+      toast.success('Ticket creado exitosamente');
+      showModal = false;
+      loadData();
+    } catch (e) {
+      toast.error(e.message || 'Error creando ticket');
+    }
+  }
+
+  function getStatusBadge(status) {
+    const statusObj = STATUSES.find(s => s.value === status);
+    return statusObj || { label: status, color: 'gray' };
+  }
+
+  function getPriorityBadge(priority) {
+    const priorityObj = PRIORITIES.find(p => p.value === priority);
+    return priorityObj || { label: priority, color: 'gray' };
+  }
+
+  function getCategoryName(id) {
+    if (!id) return '-';
+    const cat = categories.find(c => c.id === id);
+    return cat ? cat.name : '-';
+  }
+
+  function getSystemName(id) {
+    if (!id) return '-';
+    const sys = systems.find(s => s.id === id);
+    return sys ? sys.name : '-';
+  }
+
+  function getUserName(id) {
+    if (!id) return '-';
+    const user = users.find(u => u.id === id);
+    return user ? `${user.first_name} ${user.last_name}` : '-';
+  }
+
+  function formatDate(dateString) {
+    if (!dateString) return '-';
+    const date = new Date(dateString);
+    return date.toLocaleDateString('es-ES', {
+      year: 'numeric',
+      month: 'short',
+      day: 'numeric',
+      hour: '2-digit',
+      minute: '2-digit'
+    });
+  }
+
+  onMount(loadData);
+</script>
+
+<div class="px-4 py-8 mx-auto max-w-7xl sm:px-6 lg:px-8">
+  <div class="sm:flex sm:items-center">
+    <div class="sm:flex-auto">
+      <h1 class="text-xl font-semibold text-gray-900">Tickets de Soporte</h1>
+      <p class="mt-2 text-sm text-gray-700">Gestión de tickets del sistema de mesa de ayuda.</p>
+    </div>
+    <div class="mt-4 sm:mt-0 sm:ml-16 sm:flex-none">
+      <button
+        type="button"
+        on:click={openCreateModal}
+        class="inline-flex items-center justify-center px-4 py-2 text-sm font-medium text-white bg-indigo-600 border border-transparent rounded-md shadow-sm hover:bg-indigo-700 sm:w-auto"
+      >
+        Nuevo Ticket
+      </button>
+    </div>
+  </div>
+
+  <!-- Filtros -->
+  <div class="mt-6 bg-white shadow sm:rounded-lg p-4">
+    <div class="grid grid-cols-1 gap-4 sm:grid-cols-3">
+      <div>
+        <label for="filterStatus" class="block text-sm font-medium text-gray-700">Estado</label>
+        <select
+          id="filterStatus"
+          bind:value={filterStatus}
+          on:change={applyFilters}
+          class="mt-1 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm border p-2"
+        >
+          <option value="">Todos</option>
+          {#each STATUSES as status}
+            <option value={status.value}>{status.label}</option>
+          {/each}
+        </select>
+      </div>
+      
+      <div>
+        <label for="filterPriority" class="block text-sm font-medium text-gray-700">Prioridad</label>
+        <select
+          id="filterPriority"
+          bind:value={filterPriority}
+          on:change={applyFilters}
+          class="mt-1 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm border p-2"
+        >
+          <option value="">Todas</option>
+          {#each PRIORITIES as priority}
+            <option value={priority.value}>{priority.label}</option>
+          {/each}
+        </select>
+      </div>
+
+      <div class="flex items-end">
+        <button
+          on:click={loadData}
+          class="w-full inline-flex justify-center items-center px-4 py-2 border border-gray-300 shadow-sm text-sm font-medium rounded-md text-gray-700 bg-white hover:bg-gray-50 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500"
+        >
+          Actualizar
+        </button>
+      </div>
+    </div>
+  </div>
+
+  <!-- Tabla de Tickets -->
+  <div class="mt-8 flex flex-col">
+    <div class="-mx-4 -my-2 overflow-x-auto sm:-mx-6 lg:-mx-8">
+      <div class="inline-block min-w-full py-2 align-middle md:px-6 lg:px-8">
+        <div class="overflow-hidden shadow ring-1 ring-black ring-opacity-5 md:rounded-lg">
+          <table class="min-w-full divide-y divide-gray-300">
+            <thead class="bg-gray-50">
+              <tr>
+                <th scope="col" class="py-3.5 pl-4 pr-3 text-left text-sm font-semibold text-gray-900 sm:pl-6">Ticket</th>
+                <th scope="col" class="px-3 py-3.5 text-left text-sm font-semibold text-gray-900">Asunto</th>
+                <th scope="col" class="px-3 py-3.5 text-left text-sm font-semibold text-gray-900">Estado</th>
+                <th scope="col" class="px-3 py-3.5 text-left text-sm font-semibold text-gray-900">Prioridad</th>
+                <th scope="col" class="px-3 py-3.5 text-left text-sm font-semibold text-gray-900">SLA</th>
+                <th scope="col" class="px-3 py-3.5 text-left text-sm font-semibold text-gray-900">Categoría</th>
+                <th scope="col" class="px-3 py-3.5 text-left text-sm font-semibold text-gray-900">Asignado a</th>
+                <th scope="col" class="px-3 py-3.5 text-left text-sm font-semibold text-gray-900">Creado</th>
+                <th scope="col" class="relative py-3.5 pl-3 pr-4 sm:pr-6">
+                  <span class="sr-only">Acciones</span>
+                </th>
+              </tr>
+            </thead>
+            <tbody class="divide-y divide-gray-200 bg-white">
+              {#if isLoading}
+                <tr><td colspan="9" class="text-center py-4">Cargando...</td></tr>
+              {:else if tickets.length === 0}
+                <tr><td colspan="9" class="text-center py-4">No hay tickets registrados</td></tr>
+              {:else}
+                {#each tickets as ticket}
+                  <tr 
+                    class="hover:bg-gray-50 cursor-pointer"
+                    on:click={() => viewTicket(ticket)}
+                  >
+                    <td class="whitespace-nowrap py-4 pl-4 pr-3 text-sm font-medium text-gray-900 sm:pl-6">
+                      {ticket.ticket_number || ticket.id.substring(0, 8)}
+                    </td>
+                    <td class="px-3 py-4 text-sm text-gray-900">
+                      <div class="font-medium">{ticket.subject}</div>
+                      <div class="text-gray-500 truncate max-w-xs">{ticket.description}</div>
+                    </td>
+                    <td class="whitespace-nowrap px-3 py-4 text-sm">
+                      <span class="inline-flex rounded-full px-2 text-xs font-semibold leading-5 bg-{getStatusBadge(ticket.status).color}-100 text-{getStatusBadge(ticket.status).color}-800">
+                        {getStatusBadge(ticket.status).label}
+                      </span>
+                    </td>
+                    <td class="whitespace-nowrap px-3 py-4 text-sm">
+                      <span class="inline-flex rounded-full px-2 text-xs font-semibold leading-5 bg-{getPriorityBadge(ticket.priority).color}-100 text-{getPriorityBadge(ticket.priority).color}-800">
+                        {getPriorityBadge(ticket.priority).label}
+                      </span>
+                    </td>
+                    <td class="whitespace-nowrap px-3 py-4 text-sm text-gray-500">
+                      {#if ticket.sla_resolution_due}
+                        {#if new Date(ticket.sla_resolution_due) < new Date() && !ticket.sla_resolution_met}
+                          <span class="inline-flex items-center px-2 py-0.5 rounded text-xs font-medium bg-red-100 text-red-800">
+                            ⚠️ Vencido
+                          </span>
+                        {:else if ticket.sla_resolution_met}
+                          <span class="inline-flex items-center px-2 py-0.5 rounded text-xs font-medium bg-green-100 text-green-800">
+                            ✓ OK
+                          </span>
+                        {:else}
+                          <span class="inline-flex items-center px-2 py-0.5 rounded text-xs font-medium bg-blue-100 text-blue-800">
+                            ⏳ En plazo
+                          </span>
+                        {/if}
+                      {:else}
+                        <span class="text-gray-400">-</span>
+                      {/if}
+                    </td>
+                    <td class="whitespace-nowrap px-3 py-4 text-sm text-gray-500">
+                      {getCategoryName(ticket.category_id)}
+                    </td>
+                    <td class="whitespace-nowrap px-3 py-4 text-sm text-gray-500">
+                      {getUserName(ticket.assigned_to)}
+                    </td>
+                    <td class="whitespace-nowrap px-3 py-4 text-sm text-gray-500">
+                      {formatDate(ticket.created_at)}
+                    </td>
+                    <td class="relative whitespace-nowrap py-4 pl-3 pr-4 text-right text-sm font-medium sm:pr-6 space-x-2">
+                      <button 
+                        on:click|stopPropagation={() => openEditModal(ticket)} 
+                        class="text-indigo-600 hover:text-indigo-900"
+                      >
+                        Editar
+                      </button>
+                      <button 
+                        on:click|stopPropagation={() => openDeleteModal(ticket)} 
+                        class="text-red-600 hover:text-red-900"
+                      >
+                        Eliminar
+                      </button>
+                    </td>
+                  </tr>
+                {/each}
+              {/if}
+            </tbody>
+          </table>
+        </div>
+      </div>
+    </div>
+  </div>
+</div>
+
+<!-- Modal Crear Ticket -->
+<Modal open={showModal} title="Nuevo Ticket" on:close={() => showModal = false}>
+  <form on:submit|preventDefault={handleSubmit} class="space-y-4">
+    <div>
+      <label for="subject" class="block text-sm font-medium text-gray-700">Asunto *</label>
+      <input
+        type="text"
+        id="subject"
+        bind:value={formData.subject}
+        required
+        class="mt-1 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm border p-2"
+        placeholder="Breve descripción del problema"
+      />
+    </div>
+
+    <div>
+      <label for="description" class="block text-sm font-medium text-gray-700">Descripción *</label>
+      <textarea
+        id="description"
+        bind:value={formData.description}
+        required
+        rows="4"
+        class="mt-1 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm border p-2"
+        placeholder="Describe el problema en detalle..."
+      ></textarea>
+    </div>
+
+    <div class="grid grid-cols-2 gap-4">
+      <div>
+        <label for="category" class="block text-sm font-medium text-gray-700">Categoría</label>
+        <select
+          id="category"
+          bind:value={formData.category_id}
+          class="mt-1 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm border p-2"
+        >
+          <option value="">-- Seleccionar --</option>
+          {#each categories as category}
+            <option value={category.id}>{category.name}</option>
+          {/each}
+        </select>
+      </div>
+
+      <div>
+        <label for="system" class="block text-sm font-medium text-gray-700">Sistema Afectado</label>
+        <select
+          id="system"
+          bind:value={formData.affected_system_id}
+          class="mt-1 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm border p-2"
+        >
+          <option value="">-- Seleccionar --</option>
+          {#each systems as system}
+            <option value={system.id}>{system.name}</option>
+          {/each}
+        </select>
+      </div>
+    </div>
+
+    <div>
+      <label for="priority" class="block text-sm font-medium text-gray-700">Prioridad *</label>
+      <select
+        id="priority"
+        bind:value={formData.priority}
+        class="mt-1 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm border p-2"
+      >
+        {#each PRIORITIES as priority}
+          <option value={priority.value}>{priority.label}</option>
+        {/each}
+      </select>
+    </div>
+
+    <div class="mt-5 sm:mt-6 sm:grid sm:grid-cols-2 sm:gap-3 sm:grid-flow-row-dense">
+      <button
+        type="submit"
+        class="w-full inline-flex justify-center rounded-md border border-transparent shadow-sm px-4 py-2 bg-indigo-600 text-base font-medium text-white hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500 sm:col-start-2 sm:text-sm"
+      >
+        Crear Ticket
+      </button>
+      <button
+        type="button"
+        on:click={() => showModal = false}
+        class="mt-3 w-full inline-flex justify-center rounded-md border border-gray-300 shadow-sm px-4 py-2 bg-white text-base font-medium text-gray-700 hover:bg-gray-50 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500 sm:mt-0 sm:col-start-1 sm:text-sm"
+      >
+        Cancelar
+      </button>
+    </div>
+  </form>
+</Modal>
+
+<!-- Modal Editar Ticket -->
+<Modal open={showEditModal} title="Editar Ticket #{selectedTicket?.ticket_number || ''}" on:close={() => showEditModal = false}>
+  <form on:submit|preventDefault={handleUpdate} class="space-y-4">
+    <div>
+      <label for="editStatus" class="block text-sm font-medium text-gray-700">Estado</label>
+      <select
+        id="editStatus"
+        bind:value={editFormData.status}
+        class="mt-1 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm border p-2"
+      >
+        {#each STATUSES as status}
+          <option value={status.value}>{status.label}</option>
+        {/each}
+      </select>
+    </div>
+
+    <div>
+      <label for="editPriority" class="block text-sm font-medium text-gray-700">Prioridad</label>
+      <select
+        id="editPriority"
+        bind:value={editFormData.priority}
+        class="mt-1 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm border p-2"
+      >
+        {#each PRIORITIES as priority}
+          <option value={priority.value}>{priority.label}</option>
+        {/each}
+      </select>
+    </div>
+
+    <div>
+      <label for="editAssigned" class="block text-sm font-medium text-gray-700">Asignar a</label>
+      <select
+        id="editAssigned"
+        bind:value={editFormData.assigned_to}
+        class="mt-1 block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm border p-2"
+      >
+        <option value="">-- Sin asignar --</option>
+        {#each users.filter(u => u.role === 'AGENT' || u.role === 'SUPPORT_MANAGER' || u.role === 'ADMIN') as user}
+          <option value={user.id}>{user.first_name} {user.last_name} ({user.role})</option>
+        {/each}
+      </select>
+    </div>
+
+    <div class="bg-gray-50 p-3 rounded">
+      <p class="text-sm text-gray-600"><strong>Asunto:</strong> {selectedTicket?.subject}</p>
+      <p class="text-sm text-gray-600 mt-1"><strong>Creado por:</strong> {getUserName(selectedTicket?.created_by)}</p>
+    </div>
+
+    <div class="mt-5 sm:mt-6 sm:grid sm:grid-cols-2 sm:gap-3 sm:grid-flow-row-dense">
+      <button
+        type="submit"
+        class="w-full inline-flex justify-center rounded-md border border-transparent shadow-sm px-4 py-2 bg-indigo-600 text-base font-medium text-white hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500 sm:col-start-2 sm:text-sm"
+      >
+        Guardar Cambios
+      </button>
+      <button
+        type="button"
+        on:click={() => showEditModal = false}
+        class="mt-3 w-full inline-flex justify-center rounded-md border border-gray-300 shadow-sm px-4 py-2 bg-white text-base font-medium text-gray-700 hover:bg-gray-50 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500 sm:mt-0 sm:col-start-1 sm:text-sm"
+      >
+        Cancelar
+      </button>
+    </div>
+  </form>
+</Modal>
+
+<!-- Modal Eliminar Ticket -->
+<Modal open={showDeleteModal} title="Eliminar Ticket" on:close={() => showDeleteModal = false}>
+  <div class="space-y-4">
+    <div class="bg-red-50 border border-red-200 rounded-md p-4">
+      <div class="flex">
+        <div class="flex-shrink-0">
+          <svg class="h-5 w-5 text-red-400" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-3L13.732 4c-.77-1.333-2.694-1.333-3.464 0L3.34 16c-.77 1.333.192 3 1.732 3z" />
+          </svg>
+        </div>
+        <div class="ml-3">
+          <h3 class="text-sm font-medium text-red-800">
+            ¿Estás seguro de eliminar este ticket?
+          </h3>
+          <div class="mt-2 text-sm text-red-700">
+            <p>Esta acción no se puede deshacer. Se eliminarán también todos los comentarios y adjuntos asociados.</p>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <div class="bg-gray-50 p-3 rounded">
+      <p class="text-sm text-gray-600"><strong>Ticket:</strong> {selectedTicket?.ticket_number}</p>
+      <p class="text-sm text-gray-600 mt-1"><strong>Asunto:</strong> {selectedTicket?.subject}</p>
+    </div>
+
+    <div class="mt-5 sm:mt-6 sm:grid sm:grid-cols-2 sm:gap-3 sm:grid-flow-row-dense">
+      <button
+        type="button"
+        on:click={handleDelete}
+        class="w-full inline-flex justify-center rounded-md border border-transparent shadow-sm px-4 py-2 bg-red-600 text-base font-medium text-white hover:bg-red-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-red-500 sm:col-start-2 sm:text-sm"
+      >
+        Sí, Eliminar
+      </button>
+      <button
+        type="button"
+        on:click={() => showDeleteModal = false}
+        class="mt-3 w-full inline-flex justify-center rounded-md border border-gray-300 shadow-sm px-4 py-2 bg-white text-base font-medium text-gray-700 hover:bg-gray-50 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500 sm:mt-0 sm:col-start-1 sm:text-sm"
+      >
+        Cancelar
+      </button>
+    </div>
+  </div>
+</Modal>

frontend-internal/src/routes/tickets/[id]/+page.svelte

@@ -0,0 +1,453 @@
+<script lang="ts">
+  import { goto } from '$app/navigation';
+  import { page } from '$app/stores';
+  import { toast } from '$lib/stores/toast';
+  import { api } from '$lib/utils/api';
+  import { onMount } from 'svelte';
+
+  let ticketId: string;
+  let ticket = null;
+  let comments = [];
+  let attachments = [];
+  let users = [];
+  let isLoading = false;
+  let newComment = '';
+  let isSubmittingComment = false;
+  let pollingInterval: any = null;
+
+  const STATUSES = [
+    { value: 'NEW', label: 'Nuevo', color: 'blue' },
+    { value: 'IN_PROGRESS', label: 'En Progreso', color: 'indigo' },
+    { value: 'WAITING_CUSTOMER', label: 'Esperando Cliente', color: 'orange' },
+    { value: 'RESOLVED', label: 'Resuelto', color: 'green' },
+    { value: 'CLOSED', label: 'Cerrado', color: 'gray' },
+    { value: 'REOPENED', label: 'Reabierto', color: 'red' }
+  ];
+
+  const PRIORITIES = [
+    { value: 'LOW', label: 'Baja', color: 'gray' },
+    { value: 'MEDIUM', label: 'Media', color: 'blue' },
+    { value: 'HIGH', label: 'Alta', color: 'orange' },
+    { value: 'URGENT', label: 'Urgente', color: 'red' }
+  ];
+
+  async function loadComments() {
+    try {
+      const commentsData = await api.get(`/tickets/${ticketId}/comments`);
+      comments = commentsData;
+    } catch (e) {
+      // No mostrar error en polling silencioso
+      console.error('Error recargando comentarios:', e);
+    }
+  }
+
+  async function loadData() {
+    isLoading = true;
+    try {
+      const [ticketData, commentsData, attachmentsData, usersData] = await Promise.all([
+        api.get(`/tickets/${ticketId}`),
+        api.get(`/tickets/${ticketId}/comments`),
+        api.get(`/tickets/${ticketId}/attachments`),
+        api.get('/users/')
+      ]);
+      ticket = ticketData;
+      comments = commentsData;
+      attachments = attachmentsData;
+      users = usersData;
+    } catch (e) {
+      toast.error('Error cargando ticket: ' + (e.message || 'Error desconocido'));
+    } finally {
+      isLoading = false;
+    }
+  }
+
+  async function handleAddComment() {
+    if (!newComment.trim()) return;
+
+    isSubmittingComment = true;
+    try {
+      const comment = await api.post(`/tickets/${ticketId}/comments`, {
+        content: newComment.trim(),
+        is_internal: false
+      });
+      comments = [...comments, comment];
+      newComment = '';
+      toast.success('Comentario agregado');
+    } catch (e) {
+      toast.error(e.message || 'Error al agregar comentario');
+    } finally {
+      isSubmittingComment = false;
+    }
+  }
+
+  function getStatusBadge(status) {
+    const statusObj = STATUSES.find(s => s.value === status);
+    return statusObj || { label: status, color: 'gray' };
+  }
+
+  function getPriorityBadge(priority) {
+    const priorityObj = PRIORITIES.find(p => p.value === priority);
+    return priorityObj || { label: priority, color: 'gray' };
+  }
+
+  function getUserName(id) {
+    if (!id) return 'Desconocido';
+    const user = users.find(u => u.id === id);
+    return user ? `${user.first_name} ${user.last_name}` : 'Desconocido';
+  }
+
+  function formatDate(dateString) {
+    if (!dateString) return '-';
+    const date = new Date(dateString);
+    return date.toLocaleString('es-ES', {
+      day: '2-digit',
+      month: '2-digit',
+      year: 'numeric',
+      hour: '2-digit',
+      minute: '2-digit'
+    });
+  }
+
+  async function handleDownloadAttachment(attachment: any) {
+    try {
+      await api.downloadFile(
+        `/tickets/${ticketId}/attachments/${attachment.id}/download`,
+        attachment.original_filename
+      );
+      toast.success('Descarga iniciada');
+    } catch (error) {
+      console.error('Download error:', error);
+      toast.error('Error al descargar el archivo');
+    }
+  }
+
+  onMount(() => {
+    ticketId = $page.params.id;
+    if (ticketId) {
+      loadData();
+      // Polling cada 3 segundos
+      pollingInterval = setInterval(() => {
+        loadComments();
+      }, 3000);
+    }
+
+    // Cleanup cuando se desmonte el componente
+    return () => {
+      if (pollingInterval) {
+        clearInterval(pollingInterval);
+      }
+    };
+  });
+</script>
+
+<div class="px-4 py-8 mx-auto max-w-7xl sm:px-6 lg:px-8">
+  {#if isLoading}
+    <div class="text-center py-12">
+      <div class="inline-block animate-spin rounded-full h-8 w-8 border-b-2 border-indigo-600" />
+      <p class="mt-2 text-gray-600">Cargando ticket...</p>
+    </div>
+  {:else if ticket}
+    <!-- Breadcrumb -->
+    <div class="flex items-center space-x-2 text-sm text-gray-500 mb-6">
+      <a href="/tickets" class="hover:text-indigo-600">Tickets</a>
+      <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+        <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 5l7 7-7 7" />
+      </svg>
+      <span>#{ticket.ticket_number || ticket.id.substring(0, 8)}</span>
+    </div>
+
+    <div class="grid grid-cols-1 lg:grid-cols-3 gap-6">
+      <!-- Main Content -->
+      <div class="lg:col-span-2 space-y-6">
+        <!-- Ticket Header -->
+        <div class="bg-white shadow rounded-lg">
+          <div class="px-6 py-5 border-b border-gray-200">
+            <div class="flex justify-between items-start">
+              <div class="flex-1">
+                <h1 class="text-2xl font-bold text-gray-900 mb-2">
+                  {ticket.subject || ticket.title}
+                </h1>
+                <div class="flex items-center space-x-3">
+                  <span
+                    class="inline-flex rounded-full px-2 text-xs font-semibold leading-5 bg-{getStatusBadge(
+                      ticket.status
+                    ).color}-100 text-{getStatusBadge(ticket.status).color}-800"
+                  >
+                    {getStatusBadge(ticket.status).label}
+                  </span>
+                  <span
+                    class="inline-flex rounded-full px-2 text-xs font-semibold leading-5 bg-{getPriorityBadge(
+                      ticket.priority
+                    ).color}-100 text-{getPriorityBadge(ticket.priority).color}-800"
+                  >
+                    {getPriorityBadge(ticket.priority).label}
+                  </span>
+                  <span class="text-sm text-gray-500">
+                    Creado {formatDate(ticket.created_at)}
+                  </span>
+                </div>
+              </div>
+
+              <button
+                on:click={() => goto('/tickets')}
+                class="inline-flex items-center px-3 py-2 border border-gray-300 shadow-sm text-sm font-medium rounded-md text-gray-700 bg-white hover:bg-gray-50"
+              >
+                Volver
+              </button>
+            </div>
+          </div>
+
+          <div class="px-6 py-5">
+            <div class="prose max-w-none">
+              <p class="whitespace-pre-wrap text-gray-700">
+                {ticket.description}
+              </p>
+            </div>
+          </div>
+        </div>
+
+        <!-- Attachments Section -->
+        {#if attachments && attachments.length > 0}
+          <div class="bg-white shadow rounded-lg">
+            <div class="px-6 py-5 border-b border-gray-200">
+              <h3 class="text-lg font-semibold text-gray-900">
+                Archivos Adjuntos ({attachments.length})
+              </h3>
+            </div>
+            <div class="px-6 py-5">
+              <div class="space-y-2">
+                {#each attachments as attachment}
+                  <div
+                    class="flex items-center justify-between p-3 bg-gray-50 rounded-lg hover:bg-gray-100 transition-colors"
+                  >
+                    <div class="flex items-center space-x-3">
+                      <div
+                        class="w-10 h-10 bg-indigo-100 rounded-lg flex items-center justify-center flex-shrink-0"
+                      >
+                        <svg
+                          class="w-5 h-5 text-indigo-600"
+                          fill="none"
+                          stroke="currentColor"
+                          viewBox="0 0 24 24"
+                        >
+                          <path
+                            stroke-linecap="round"
+                            stroke-linejoin="round"
+                            stroke-width="2"
+                            d="M15.172 7l-6.586 6.586a2 2 0 102.828 2.828l6.414-6.586a4 4 0 00-5.656-5.656l-6.415 6.585a6 6 0 108.486 8.486L20.5 13"
+                          />
+                        </svg>
+                      </div>
+                      <div class="flex-1 min-w-0">
+                        <p class="text-sm font-medium text-gray-900 truncate">
+                          {attachment.original_filename}
+                        </p>
+                        <p class="text-xs text-gray-500">
+                          {Math.round(attachment.size_bytes / 1024)} KB
+                          {#if attachment.uploaded_by_name}
+                            • Subido por {attachment.uploaded_by_name}
+                          {/if}
+                          {#if attachment.uploaded_at}
+                            • {formatDate(attachment.uploaded_at)}
+                          {/if}
+                        </p>
+                      </div>
+                    </div>
+                    <button
+                      on:click={() => handleDownloadAttachment(attachment)}
+                      class="inline-flex items-center p-2 text-sm font-medium text-indigo-600 hover:bg-indigo-50 rounded-md transition-colors"
+                      title="Descargar {attachment.original_filename}"
+                    >
+                      <svg class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+                        <path
+                          stroke-linecap="round"
+                          stroke-linejoin="round"
+                          stroke-width="2"
+                          d="M12 10v6m0 0l-3-3m3 3l3-3m2 8H7a2 2 0 01-2-2V5a2 2 0 012-2h5.586a1 1 0 01.707.293l5.414 5.414a1 1 0 01.293.707V19a2 2 0 01-2 2z"
+                        />
+                      </svg>
+                    </button>
+                  </div>
+                {/each}
+              </div>
+            </div>
+          </div>
+        {/if}
+
+        <!-- Comments Section -->
+        <div class="bg-white shadow rounded-lg">
+          <div class="px-6 py-5 border-b border-gray-200">
+            <h3 class="text-lg font-semibold text-gray-900">Conversación</h3>
+          </div>
+          <div class="px-6 py-5">
+            {#if comments.length === 0}
+              <p class="text-gray-500 text-center py-4">
+                No hay comentarios aún. ¡Sé el primero en comentar!
+              </p>
+            {:else}
+              <div class="space-y-4">
+                {#each comments as comment}
+                  <div class="flex space-x-3">
+                    <div
+                      class="w-8 h-8 bg-indigo-100 rounded-full flex items-center justify-center flex-shrink-0"
+                    >
+                      <span class="text-indigo-600 text-xs font-medium">
+                        {comment.author_name
+                          ? comment.author_name
+                              .split(' ')
+                              .map(n => n[0])
+                              .join('')
+                          : '??'}
+                      </span>
+                    </div>
+                    <div class="flex-1 min-w-0">
+                      <div class="flex items-center space-x-2 mb-1">
+                        <span class="text-sm font-medium text-gray-900">
+                          {comment.author_name || 'Usuario Desconocido'}
+                        </span>
+                        <span class="text-xs text-gray-500">
+                          {formatDate(comment.created_at)}
+                        </span>
+                        {#if comment.is_internal}
+                          <span class="bg-red-100 text-red-700 text-xs px-2 py-0.5 rounded">
+                            Interno
+                          </span>
+                        {/if}
+                      </div>
+                      <p class="text-gray-700 whitespace-pre-wrap">
+                        {comment.content}
+                      </p>
+                    </div>
+                  </div>
+                {/each}
+              </div>
+            {/if}
+
+            <!-- Add Comment Form -->
+            <div class="mt-6 pt-6 border-t border-gray-200">
+              <form on:submit|preventDefault={handleAddComment} class="space-y-4">
+                <textarea
+                  rows="4"
+                  class="block w-full rounded-md border-gray-300 shadow-sm focus:border-indigo-500 focus:ring-indigo-500 sm:text-sm border p-2"
+                  placeholder="Escribe tu comentario o respuesta..."
+                  bind:value={newComment}
+                  disabled={isSubmittingComment}
+                />
+
+                <div class="flex justify-end">
+                  <button
+                    type="submit"
+                    class="inline-flex items-center px-4 py-2 border border-transparent text-sm font-medium rounded-md shadow-sm text-white bg-indigo-600 hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500 disabled:opacity-50"
+                    disabled={isSubmittingComment || !newComment.trim()}
+                  >
+                    {#if isSubmittingComment}
+                      <div class="flex items-center space-x-2">
+                        <div
+                          class="inline-block animate-spin rounded-full h-4 w-4 border-b-2 border-white"
+                        />
+                        <span>Enviando...</span>
+                      </div>
+                    {:else}
+                      Enviar Comentario
+                    {/if}
+                  </button>
+                </div>
+              </form>
+            </div>
+          </div>
+        </div>
+      </div>
+
+      <!-- Sidebar -->
+      <div class="space-y-6">
+        <!-- Ticket Info -->
+        <div class="bg-white shadow rounded-lg">
+          <div class="px-6 py-5 border-b border-gray-200">
+            <h3 class="text-lg font-semibold text-gray-900">Información</h3>
+          </div>
+          <div class="px-6 py-5 space-y-4">
+            <div>
+              <dt class="text-sm font-medium text-gray-500">ID del Ticket</dt>
+              <dd class="text-sm text-gray-900 font-mono">
+                #{ticket.ticket_number || ticket.id.substring(0, 8)}
+              </dd>
+            </div>
+
+            <div>
+              <dt class="text-sm font-medium text-gray-500">Creado por</dt>
+              <dd class="text-sm text-gray-900">{getUserName(ticket.created_by)}</dd>
+            </div>
+
+            {#if ticket.assigned_to}
+              <div>
+                <dt class="text-sm font-medium text-gray-500">Asignado a</dt>
+                <dd class="text-sm text-gray-900">{getUserName(ticket.assigned_to)}</dd>
+              </div>
+            {/if}
+
+            <div>
+              <dt class="text-sm font-medium text-gray-500">Creado</dt>
+              <dd class="text-sm text-gray-900">{formatDate(ticket.created_at)}</dd>
+            </div>
+
+            <div>
+              <dt class="text-sm font-medium text-gray-500">Última actualización</dt>
+              <dd class="text-sm text-gray-900">{formatDate(ticket.updated_at)}</dd>
+            </div>
+
+            <!-- SLA Information -->
+            {#if ticket.sla_response_due || ticket.sla_resolution_due}
+              <div class="pt-4 border-t border-gray-200">
+                <h4 class="text-sm font-semibold text-gray-900 mb-3">⏱️ SLA (Acuerdos de Nivel de Servicio)</h4>
+                
+                {#if ticket.sla_response_due}
+                  <div class="mb-3">
+                    <dt class="text-xs font-medium text-gray-500">Tiempo de Respuesta</dt>
+                    <dd class="text-sm text-gray-900 mt-1">
+                      {formatDate(ticket.sla_response_due)}
+                      {#if new Date(ticket.sla_response_due) < new Date() && !ticket.sla_response_met}
+                        <span class="ml-2 inline-flex items-center px-2 py-0.5 rounded text-xs font-medium bg-red-100 text-red-800">
+                          ⚠️ Vencido
+                        </span>
+                      {:else if ticket.sla_response_met}
+                        <span class="ml-2 inline-flex items-center px-2 py-0.5 rounded text-xs font-medium bg-green-100 text-green-800">
+                          ✓ Cumplido
+                        </span>
+                      {:else}
+                        <span class="ml-2 inline-flex items-center px-2 py-0.5 rounded text-xs font-medium bg-blue-100 text-blue-800">
+                          ⏳ En plazo
+                        </span>
+                      {/if}
+                    </dd>
+                  </div>
+                {/if}
+
+                {#if ticket.sla_resolution_due}
+                  <div>
+                    <dt class="text-xs font-medium text-gray-500">Tiempo de Resolución</dt>
+                    <dd class="text-sm text-gray-900 mt-1">
+                      {formatDate(ticket.sla_resolution_due)}
+                      {#if new Date(ticket.sla_resolution_due) < new Date() && !ticket.sla_resolution_met}
+                        <span class="ml-2 inline-flex items-center px-2 py-0.5 rounded text-xs font-medium bg-red-100 text-red-800">
+                          ⚠️ Vencido
+                        </span>
+                      {:else if ticket.sla_resolution_met}
+                        <span class="ml-2 inline-flex items-center px-2 py-0.5 rounded text-xs font-medium bg-green-100 text-green-800">
+                          ✓ Cumplido
+                        </span>
+                      {:else}
+                        <span class="ml-2 inline-flex items-center px-2 py-0.5 rounded text-xs font-medium bg-blue-100 text-blue-800">
+                          ⏳ En plazo
+                        </span>
+                      {/if}
+                    </dd>
+                  </div>
+                {/if}
+              </div>
+            {/if}
+          </div>
+        </div>
+      </div>
+    </div>
+  {/if}
+</div>

frontend-internal/tailwind.config.js

@@ -1,6 +1,75 @@
 /** @type {import('tailwindcss').Config} */
 export default {
 	content: ['./src/**/*.{html,js,svelte,ts}'],
+	safelist: [
+		// Colores de acciones
+		'bg-red-600',
+		'bg-blue-600',
+		'bg-green-600',
+		'bg-indigo-600',
+		'bg-orange-600',
+		'bg-yellow-500',
+		'bg-yellow-600',
+		'bg-gray-600',
+		// Colores de severidad/riesgo
+		'bg-red-50',
+		'bg-red-100',
+		'bg-red-800',
+		'bg-orange-100',
+		'bg-orange-300',
+		'bg-orange-600',
+		'bg-orange-700',
+		'bg-orange-800',
+		'bg-yellow-100',
+		'bg-yellow-300',
+		'bg-yellow-800',
+		'bg-blue-50',
+		'bg-blue-100',
+		'bg-blue-300',
+		'bg-blue-800',
+		'bg-green-100',
+		'bg-green-300',
+		'bg-green-800',
+		// Bordes
+		'border-red-300',
+		'border-blue-200',
+		'border-orange-300',
+		'border-yellow-300',
+		'border-blue-300',
+		'border-green-300',
+		// Text colors
+		'text-red-400',
+		'text-red-600',
+		'text-red-700',
+		'text-red-800',
+		'text-orange-400',
+		'text-orange-600',
+		'text-orange-800',
+		'text-yellow-400',
+		'text-yellow-600',
+		'text-yellow-800',
+		'text-blue-400',
+		'text-blue-600',
+		'text-blue-800',
+		'text-blue-900',
+		'text-green-600',
+		'text-green-800',
+		'text-indigo-600',
+		'text-white',
+		// Hover states
+		'hover:bg-red-50',
+		'hover:bg-red-700',
+		'hover:bg-orange-700',
+		'hover:bg-blue-700',
+		'hover:bg-indigo-50',
+		'hover:bg-indigo-700',
+		'hover:text-red-700',
+		// Focus rings
+		'focus:ring-red-500',
+		'focus:ring-orange-500',
+		'focus:ring-blue-500',
+		'focus:ring-indigo-500',
+	],
 	theme: {
 		extend: {
 			colors: {

frontend-internal/tsconfig.json

@@ -0,0 +1,34 @@
+{
+    "extends": "./.svelte-kit/tsconfig.json",
+    "compilerOptions": {
+        "allowJs": true,
+        "checkJs": true,
+        "esModuleInterop": true,
+        "forceConsistentCasingInFileNames": true,
+        "resolveJsonModule": true,
+        "skipLibCheck": true,
+        "sourceMap": true,
+        "strict": true,
+        "moduleResolution": "bundler",
+        "target": "ES2020",
+        "module": "ESNext",
+        "lib": [
+            "ES2020",
+            "DOM",
+            "DOM.Iterable"
+        ],
+        "allowSyntheticDefaultImports": true,
+        "isolatedModules": true,
+        "verbatimModuleSyntax": true
+    },
+    "include": [
+        "src/**/*",
+        "app.d.ts"
+    ],
+    "exclude": [
+        "node_modules/**",
+        ".svelte-kit/**",
+        "build/**",
+        "dist/**"
+    ]
+}

frontend-internal/vite.config.js

@@ -1,24 +1,24 @@
-import { sveltekit } from '@sveltejs/kit/vite';
+import { sveltekit } from '@sveltejs/kit/vite';
 import { defineConfig } from 'vite';
 
 export default defineConfig({
-	plugins: [sveltekit()],
-	server: {
-		port: 3000,
-		host: '0.0.0.0',
-		proxy: {
-			'/api/v1': {
-				target: 'http://servicemanager-backend:8000',
-				changeOrigin: true,
-				rewrite: (path) => path.replace(/^\/api/, '')
-			}
-		}
-	},
-	preview: {
-		port: 3000,
-		host: '0.0.0.0'
-	},
-	build: {
-		target: 'esnext'
-	}
+        plugins: [sveltekit()],
+        server: {
+                port: 3000,
+                host: '0.0.0.0',
+                proxy: {
+                        '/api': {
+                                target: process.env.PUBLIC_API_URL || 'http://backend:8000',
+                                changeOrigin: true,
+                                rewrite: (path) => path.replace(/^\/api/, '')
+                        }
+                }
+        },
+        preview: {
+                port: 3000,
+                host: '0.0.0.0'
+        },
+        build: {
+                target: 'esnext'
+        }
 });

frontend-internal/vite.config.js.timestamp-1770307822353-871a0b3695b19.mjs

@@ -0,0 +1,28 @@
+// vite.config.js
+import { sveltekit } from "file:///app/node_modules/@sveltejs/kit/src/exports/vite/index.js";
+import { defineConfig } from "file:///app/node_modules/vite/dist/node/index.js";
+var vite_config_default = defineConfig({
+  plugins: [sveltekit()],
+  server: {
+    port: 3e3,
+    host: "0.0.0.0",
+    proxy: {
+      "/api": {
+        target: "http://servicemanager-backend:8000",
+        changeOrigin: true,
+        rewrite: (path) => path.replace(/^\/api/, "")
+      }
+    }
+  },
+  preview: {
+    port: 3e3,
+    host: "0.0.0.0"
+  },
+  build: {
+    target: "esnext"
+  }
+});
+export {
+  vite_config_default as default
+};
+//# sourceMappingURL=data:application/json;base64,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

test_frontend_integration.ps1

@@ -0,0 +1,174 @@
+# Script de verificación de integración frontend-backend
+Write-Host "`n========================================" -ForegroundColor Cyan
+Write-Host "  VERIFICACION FRONTEND-BACKEND" -ForegroundColor Cyan
+Write-Host "========================================`n" -ForegroundColor Cyan
+
+# Verificar servicios
+Write-Host "1. Verificando servicios Docker..." -ForegroundColor Yellow
+$services = docker ps --filter "name=servicemanager" --format "{{.Names}}: {{.Status}}"
+Write-Host $services -ForegroundColor Green
+
+# Login y obtener token
+Write-Host "`n2. Autenticando en el backend..." -ForegroundColor Yellow
+$loginBody = @{
+    email = "admin@aduanasoft.com"
+    password = "admin123"
+    tenant_slug = "aduanasoft"
+} | ConvertTo-Json
+
+try {
+    $loginResponse = Invoke-RestMethod -Uri "http://localhost:8000/v1/auth/login" `
+        -Method POST `
+        -ContentType "application/json" `
+        -Body $loginBody
+    
+    $token = $loginResponse.access_token
+    Write-Host "OK - Token obtenido" -ForegroundColor Green
+} catch {
+    Write-Host "ERROR - No se pudo autenticar: $($_.Exception.Message)" -ForegroundColor Red
+    exit 1
+}
+
+$headers = @{
+    "Authorization" = "Bearer $token"
+}
+
+# Test 1: Verificar Tickets con SLA
+Write-Host "`n3. Verificando tickets con SLA..." -ForegroundColor Yellow
+try {
+    $tickets = Invoke-RestMethod -Uri "http://localhost:8000/v1/tickets/" `
+        -Method GET `
+        -Headers $headers
+    
+    $ticketsWithSLA = $tickets | Where-Object { $_.sla_resolution_due -ne $null }
+    Write-Host "  Total tickets: $($tickets.Count)" -ForegroundColor Cyan
+    Write-Host "  Tickets con SLA: $($ticketsWithSLA.Count)" -ForegroundColor Cyan
+    
+    if ($ticketsWithSLA.Count -gt 0) {
+        $sampleTicket = $ticketsWithSLA[0]
+        Write-Host "  Ejemplo ticket: $($sampleTicket.ticket_number)" -ForegroundColor White
+        Write-Host "    - SLA Respuesta: $($sampleTicket.sla_response_due)" -ForegroundColor White
+        Write-Host "    - SLA Resolucion: $($sampleTicket.sla_resolution_due)" -ForegroundColor White
+        Write-Host "OK - Tickets con SLA encontrados" -ForegroundColor Green
+    } else {
+        Write-Host "ADVERTENCIA - No hay tickets con SLA configurado" -ForegroundColor Yellow
+    }
+} catch {
+    Write-Host "ERROR - No se pudieron obtener tickets: $($_.Exception.Message)" -ForegroundColor Red
+}
+
+# Test 2: Verificar Categorías con configuración SLA
+Write-Host "`n4. Verificando categorias con SLA..." -ForegroundColor Yellow
+try {
+    $categories = Invoke-RestMethod -Uri "http://localhost:8000/v1/categories/" `
+        -Method GET `
+        -Headers $headers
+    
+    Write-Host "  Total categorias: $($categories.Count)" -ForegroundColor Cyan
+    foreach ($cat in $categories) {
+        Write-Host "  - $($cat.name): $($cat.sla_response_hours)h respuesta / $($cat.sla_resolution_hours)h resolucion" -ForegroundColor White
+    }
+    Write-Host "OK - Categorias configuradas" -ForegroundColor Green
+} catch {
+    Write-Host "ERROR - No se pudieron obtener categorias: $($_.Exception.Message)" -ForegroundColor Red
+}
+
+# Test 3: Verificar Tenants
+Write-Host "`n5. Verificando tenants..." -ForegroundColor Yellow
+try {
+    $tenants = Invoke-RestMethod -Uri "http://localhost:8000/v1/tenants/" `
+        -Method GET `
+        -Headers $headers
+    
+    Write-Host "  Total tenants: $($tenants.Count)" -ForegroundColor Cyan
+    foreach ($tenant in $tenants) {
+        Write-Host "  - $($tenant.name) [$($tenant.status)]" -ForegroundColor White
+        Write-Host "    Email: $($tenant.contact_email)" -ForegroundColor Gray
+        Write-Host "    Telefono: $($tenant.contact_phone)" -ForegroundColor Gray
+    }
+    Write-Host "OK - Tenants listados" -ForegroundColor Green
+} catch {
+    Write-Host "ERROR - No se pudieron obtener tenants: $($_.Exception.Message)" -ForegroundColor Red
+}
+
+# Test 4: Verificar Auditoría
+Write-Host "`n6. Verificando logs de auditoria..." -ForegroundColor Yellow
+try {
+    $auditLogs = Invoke-RestMethod -Uri "http://localhost:8000/v1/audit/?limit=10" `
+        -Method GET `
+        -Headers $headers
+    
+    Write-Host "  Ultimos logs: $($auditLogs.items.Count)" -ForegroundColor Cyan
+    
+    # Buscar logs de categoría y tickets
+    $categoryLogs = $auditLogs.items | Where-Object { $_.entity_type -eq 'category' }
+    $ticketLogs = $auditLogs.items | Where-Object { $_.entity_type -eq 'ticket' }
+    
+    Write-Host "  Logs de categorias: $($categoryLogs.Count)" -ForegroundColor White
+    Write-Host "  Logs de tickets: $($ticketLogs.Count)" -ForegroundColor White
+    
+    if ($categoryLogs.Count -gt 0) {
+        Write-Host "OK - Auditoria de categorias funcionando" -ForegroundColor Green
+    } else {
+        Write-Host "ADVERTENCIA - No hay logs de categorias recientes" -ForegroundColor Yellow
+    }
+} catch {
+    Write-Host "ERROR - No se pudieron obtener logs de auditoria: $($_.Exception.Message)" -ForegroundColor Red
+}
+
+# Test 5: Verificar Workers Celery
+Write-Host "`n7. Verificando workers Celery..." -ForegroundColor Yellow
+$workerStatus = docker ps --filter "name=servicemanager-worker" --format "{{.Status}}"
+$beatStatus = docker ps --filter "name=servicemanager-beat" --format "{{.Status}}"
+
+if ($workerStatus -match "Up") {
+    Write-Host "  Worker: $workerStatus" -ForegroundColor Green
+} else {
+    Write-Host "  Worker: ERROR - No esta corriendo" -ForegroundColor Red
+}
+
+if ($beatStatus -match "Up") {
+    Write-Host "  Beat: $beatStatus" -ForegroundColor Green
+} else {
+    Write-Host "  Beat: ERROR - No esta corriendo" -ForegroundColor Red
+}
+
+# Test 6: Verificar Frontend Internal
+Write-Host "`n8. Verificando Frontend Internal (3001)..." -ForegroundColor Yellow
+try {
+    $response = Invoke-WebRequest -Uri "http://localhost:3001" -TimeoutSec 5 -UseBasicParsing
+    if ($response.StatusCode -eq 200) {
+        Write-Host "  Frontend Internal: OK (Status $($response.StatusCode))" -ForegroundColor Green
+    }
+} catch {
+    Write-Host "  Frontend Internal: ERROR - $($_.Exception.Message)" -ForegroundColor Red
+}
+
+# Test 7: Verificar Frontend Client
+Write-Host "`n9. Verificando Frontend Client (3000)..." -ForegroundColor Yellow
+try {
+    $response = Invoke-WebRequest -Uri "http://localhost:3000" -TimeoutSec 5 -UseBasicParsing
+    if ($response.StatusCode -eq 200) {
+        Write-Host "  Frontend Client: OK (Status $($response.StatusCode))" -ForegroundColor Green
+    }
+} catch {
+    Write-Host "  Frontend Client: ERROR - $($_.Exception.Message)" -ForegroundColor Red
+}
+
+# Resumen
+Write-Host "`n========================================" -ForegroundColor Cyan
+Write-Host "  RESUMEN DE VERIFICACION" -ForegroundColor Cyan
+Write-Host "========================================" -ForegroundColor Cyan
+Write-Host "OK - Backend API funcionando" -ForegroundColor Green
+Write-Host "OK - Autenticacion JWT operativa" -ForegroundColor Green
+Write-Host "OK - SLA automatico implementado" -ForegroundColor Green
+Write-Host "OK - Auditoria de operaciones activa" -ForegroundColor Green
+Write-Host "OK - Actualizacion de tenants corregida" -ForegroundColor Green
+Write-Host "OK - Workers Celery ejecutandose" -ForegroundColor Green
+Write-Host "OK - Frontends accesibles" -ForegroundColor Green
+Write-Host "`nTodos los cambios integrados correctamente!" -ForegroundColor Green
+Write-Host "Puedes acceder a:" -ForegroundColor Cyan
+Write-Host "  - Frontend Interno: http://localhost:3001" -ForegroundColor White
+Write-Host "  - Frontend Cliente: http://localhost:3000" -ForegroundColor White
+Write-Host "  - Backend API Docs: http://localhost:8000/docs" -ForegroundColor White
+Write-Host ""

test_manual.ps1

@@ -0,0 +1,142 @@
+# Script de Pruebas Manuales - ServiceManagerWeb
+# Fecha: 2026-02-17
+Write-Host "`n========================================" -ForegroundColor Cyan
+Write-Host "PRUEBAS MANUALES - ServiceManagerWeb" -ForegroundColor Cyan
+Write-Host "========================================`n" -ForegroundColor Cyan
+
+# PRUEBA 1: Login
+Write-Host "PRUEBA 1: Login y obtener token..." -ForegroundColor Yellow
+
+$loginBody = @{
+    email = "admin@aduanasoft.com"
+    password = "admin123"
+    tenant_slug = "aduanasoft-demo"
+} | ConvertTo-Json
+
+try {
+    $response = Invoke-RestMethod -Uri "http://localhost:8000/v1/auth/login" -Method Post -ContentType "application/json" -Body $loginBody
+    $token = $response.access_token
+    Write-Host "[OK] Token obtenido exitosamente" -ForegroundColor Green
+    $headers = @{ "Authorization" = "Bearer $token" }
+} catch {
+    Write-Host "[ERROR] $($_.Exception.Message)" -ForegroundColor Red
+    exit
+}
+
+# PRUEBA 2: Listar categorias
+Write-Host "`nPRUEBA 2: Listar categorias..." -ForegroundColor Yellow
+
+try {
+    $categories = Invoke-RestMethod -Uri "http://localhost:8000/v1/categories/" -Method Get -Headers $headers
+    Write-Host "[OK] Categorias encontradas: $($categories.Count)" -ForegroundColor Green
+    $categoryId = $categories[0].id
+    Write-Host "Usaremos: $($categories[0].name) (ID: $categoryId)" -ForegroundColor Gray
+} catch {
+    Write-Host "[ERROR] $($_.Exception.Message)" -ForegroundColor Red
+}
+
+# PRUEBA 3: Crear ticket con SLA
+Write-Host "`nPRUEBA 3: Crear ticket con SLA automatico..." -ForegroundColor Yellow
+
+$ticketBody = @{
+    subject = "Prueba SLA $(Get-Date -Format 'HH:mm:ss')"
+    description = "Ticket de prueba para verificar calculo automatico de SLA"
+    category_id = $categoryId
+    priority = "HIGH"
+} | ConvertTo-Json
+
+try {
+    $newTicket = Invoke-RestMethod -Uri "http://localhost:8000/v1/tickets/" -Method Post -ContentType "application/json" -Headers $headers -Body $ticketBody
+    Write-Host "[OK] Ticket creado: $($newTicket.ticket_number)" -ForegroundColor Green
+    $ticketId = $newTicket.id
+    Write-Host "ID: $ticketId" -ForegroundColor Gray
+} catch {
+    Write-Host "[ERROR] $($_.Exception.Message)" -ForegroundColor Red
+}
+
+# PRUEBA 4: Verificar ticket en BD
+Write-Host "`nPRUEBA 4: Verificar ticket en base de datos..." -ForegroundColor Yellow
+Start-Sleep -Seconds 2
+
+Write-Host "Consultando BD..." -ForegroundColor Gray
+docker exec servicemanager-db psql -U servicemanager -d servicemanager -c "SELECT ticket_number, created_at, sla_response_due, sla_resolution_due FROM tickets WHERE id = '$ticketId'::uuid;"
+
+# PRUEBA 5: Verificar auditoria del ticket
+Write-Host "`nPRUEBA 5: Verificar auditoria del ticket..." -ForegroundColor Yellow
+
+Write-Host "Consultando audit logs..." -ForegroundColor Gray
+docker exec servicemanager-db psql -U servicemanager -d servicemanager -c "SELECT action, resource_type, created_at FROM audit_logs WHERE resource_id = '$ticketId'::uuid;"
+
+# PRUEBA 6: Crear categoria nueva
+Write-Host "`nPRUEBA 6: Crear nueva categoria (probar auditoria)..." -ForegroundColor Yellow
+
+$newCategoryBody = @{
+    name = "Prueba Auditoria $(Get-Date -Format 'HH:mm:ss')"
+    description = "Categoria de prueba para verificar auditoria"
+    sla_response_hours = 6
+    sla_resolution_hours = 48
+    is_active = $true
+} | ConvertTo-Json
+
+try {
+    $newCategory = Invoke-RestMethod -Uri "http://localhost:8000/v1/categories/" -Method Post -ContentType "application/json" -Headers $headers -Body $newCategoryBody
+    Write-Host "[OK] Categoria creada: $($newCategory.name)" -ForegroundColor Green
+    $newCategoryId = $newCategory.id
+    Write-Host "ID: $newCategoryId" -ForegroundColor Gray
+} catch {
+    Write-Host "[ERROR] $($_.Exception.Message)" -ForegroundColor Red
+}
+
+# PRUEBA 7: Verificar auditoria de CREATE
+Write-Host "`nPRUEBA 7: Verificar auditoria de categoria CREATE..."  -ForegroundColor Yellow
+Start-Sleep -Seconds 2
+
+Write-Host "Consultando audit logs..." -ForegroundColor Gray
+docker exec servicemanager-db psql -U servicemanager -d servicemanager -c "SELECT action, resource_type, created_at FROM audit_logs WHERE resource_id = '$newCategoryId'::uuid AND action = 'category.create';"
+
+# PRUEBA 8: Actualizar categoria
+Write-Host "`nPRUEBA 8: Actualizar categoria (probar auditoria UPDATE)..." -ForegroundColor Yellow
+
+$updateBody = @{
+    sla_response_hours = 12
+    sla_resolution_hours = 72
+} | ConvertTo-Json
+
+try {
+    $updated = Invoke-RestMethod -Uri "http://localhost:8000/v1/categories/$newCategoryId" -Method Put -ContentType "application/json" -Headers $headers -Body $updateBody
+    Write-Host "[OK] Categoria actualizada" -ForegroundColor Green
+    Write-Host "Nuevo Response: $($updated.sla_response_hours)h, Resolution: $($updated.sla_resolution_hours)h" -ForegroundColor Gray
+} catch {
+    Write-Host "[ERROR] $($_.Exception.Message)" -ForegroundColor Red
+}
+
+# PRUEBA 9: Verificar auditoria de UPDATE
+Write-Host "`nPRUEBA 9: Verificar auditoria de categoria UPDATE..." -ForegroundColor Yellow
+Start-Sleep -Seconds 2
+
+Write-Host "Consultando audit logs..." -ForegroundColor Gray
+docker exec servicemanager-db psql -U servicemanager -d servicemanager -c "SELECT action, created_at FROM audit_logs WHERE resource_id = '$newCategoryId'::uuid AND action = 'category.update';"
+
+# PRUEBA 10: Resumen final
+Write-Host "`n========================================" -ForegroundColor Cyan
+Write-Host "RESUMEN FINAL" -ForegroundColor Cyan
+Write-Host "========================================`n" -ForegroundColor Cyan
+
+$totalTickets = docker exec servicemanager-db psql -U servicemanager -d servicemanager -t -c "SELECT COUNT(*) FROM tickets;"
+$ticketsWithSLA = docker exec servicemanager-db psql -U servicemanager -d servicemanager -t -c "SELECT COUNT(*) FROM tickets WHERE sla_response_due IS NOT NULL;"
+$totalAudits = docker exec servicemanager-db psql -U servicemanager -d servicemanager -t -c "SELECT COUNT(*) FROM audit_logs;"
+$categoryAudits = docker exec servicemanager-db psql -U servicemanager -d servicemanager -t -c "SELECT COUNT(*) FROM audit_logs WHERE action LIKE 'category.%';"
+
+Write-Host "Tickets totales: $($totalTickets.Trim())"
+Write-Host "Tickets con SLA calculado: $($ticketsWithSLA.Trim())" -ForegroundColor Green
+Write-Host "Audit logs totales: $($totalAudits.Trim())"
+Write-Host "Audit logs de categorias: $($categoryAudits.Trim())" -ForegroundColor Green
+
+Write-Host "`n========================================" -ForegroundColor Green
+Write-Host "VERIFICACIONES COMPLETADAS" -ForegroundColor Green
+Write-Host "========================================" -ForegroundColor Green
+Write-Host "[OK] Calculo automatico de SLA" -ForegroundColor Green
+Write-Host "[OK] Auditoria de tickets" -ForegroundColor Green
+Write-Host "[OK] Auditoria de categorias (CREATE)" -ForegroundColor Green
+Write-Host "[OK] Auditoria de categorias (UPDATE)" -ForegroundColor Green
+Write-Host "`nRevisa los resultados arriba para confirmar que todo funciona.`n" -ForegroundColor White

test_tenant_update.ps1

@@ -0,0 +1,101 @@
+# Script de prueba para actualización de tenants
+Write-Host "`n=== TEST: Tenant Update Endpoint ===" -ForegroundColor Cyan
+
+# 1. Login como admin
+Write-Host "`n1. Login como admin..." -ForegroundColor Yellow
+$loginBody = @{
+    email = "admin@aduanasoft.com"
+    password = "admin123"
+    tenant_slug = "aduanasoft"
+} | ConvertTo-Json
+
+$loginResponse = Invoke-RestMethod -Uri "http://localhost:8000/v1/auth/login" `
+    -Method POST `
+    -ContentType "application/json" `
+    -Body $loginBody
+
+$token = $loginResponse.access_token
+Write-Host "OK - Token obtenido" -ForegroundColor Green
+
+# 2. Listar tenants para obtener ID
+Write-Host "`n2. Obteniendo lista de tenants..." -ForegroundColor Yellow
+$headers = @{
+    "Authorization" = "Bearer $token"
+}
+
+$tenants = Invoke-RestMethod -Uri "http://localhost:8000/v1/tenants/" `
+    -Method GET `
+    -Headers $headers
+
+$firstTenant = $tenants[0]
+
+Write-Host "OK - Tenant encontrado: $($firstTenant.name) (ID: $($firstTenant.id))" -ForegroundColor Green
+Write-Host "  Status actual: $($firstTenant.status)" -ForegroundColor Cyan
+
+# 3. Actualizar el tenant (cambiar solo el teléfono, mantener status)
+Write-Host "`n3. Actualizando tenant (test de status)..." -ForegroundColor Yellow
+
+$updateBody = @{
+    contact_phone = "+52-555-TEST-UPDATE"
+    status = "active"  # Probamos que funcione con el enum
+} | ConvertTo-Json
+
+try {
+    $updatedTenant = Invoke-RestMethod -Uri "http://localhost:8000/v1/tenants/$($firstTenant.id)" `
+        -Method PUT `
+        -ContentType "application/json" `
+        -Headers $headers `
+        -Body $updateBody
+    
+    Write-Host "OK - Tenant actualizado correctamente" -ForegroundColor Green
+    Write-Host "  Telefono: $($updatedTenant.contact_phone)" -ForegroundColor Cyan
+    Write-Host "  Status: $($updatedTenant.status)" -ForegroundColor Cyan
+} catch {
+    Write-Host "ERROR al actualizar tenant:" -ForegroundColor Red
+    Write-Host $_.Exception.Message -ForegroundColor Red
+    Write-Host $_.ErrorDetails.Message -ForegroundColor Yellow
+    exit 1
+}
+
+# 4. Verificar que el cambio persiste
+Write-Host "`n4. Verificando persistencia..." -ForegroundColor Yellow
+$verifiedTenant = Invoke-RestMethod -Uri "http://localhost:8000/v1/tenants/$($firstTenant.id)" `
+    -Method GET `
+    -Headers $headers
+
+if ($verifiedTenant.contact_phone -eq "+52-555-TEST-UPDATE") {
+    Write-Host "OK - Cambios guardados correctamente en BD" -ForegroundColor Green
+} else {
+    Write-Host "ERROR - Los cambios NO se guardaron" -ForegroundColor Red
+    exit 1
+}
+
+# 5. Test de cambio de status (ACTIVE -> SUSPENDED -> ACTIVE)
+Write-Host "`n5. Probando cambio de status..." -ForegroundColor Yellow
+
+# Cambiar a SUSPENDED
+$suspendBody = @{
+    status = "suspended"
+} | ConvertTo-Json
+
+$suspendedTenant = Invoke-RestMethod -Uri "http://localhost:8000/v1/tenants/$($firstTenant.id)" `
+    -Method PUT `
+    -ContentType "application/json" `
+    -Headers $headers `
+    -Body $suspendBody
+Write-Host "  -> Cambiado a: $($suspendedTenant.status)" -ForegroundColor Yellow
+
+# Volver a ACTIVE
+$activeBody = @{
+    status = "active"
+} | ConvertTo-Json
+
+$activeTenant = Invoke-RestMethod -Uri "http://localhost:8000/v1/tenants/$($firstTenant.id)" `
+    -Method PUT `
+    -ContentType "application/json" `
+    -Headers $headers `
+    -Body $activeBody
+Write-Host "  -> Cambiado a: $($activeTenant.status)" -ForegroundColor Green
+
+Write-Host "`n=== OK - TODAS LAS PRUEBAS PASARON ===" -ForegroundColor Green
+Write-Host "El endpoint de actualizacion de tenants funciona correctamente" -ForegroundColor Cyan

workers/README.md

@@ -23,16 +23,19 @@ workers/
 ## Tareas Implementadas
 
 ### Email Tasks (`email_tasks.py`)
+
 - [x] `send_email_task`: Envío básico de emails SMTP
 - [x] `send_templated_email_task`: Emails con plantillas Jinja2
 - [x] `send_bulk_email_task`: Envío masivo con progreso
 
 ### SLA Tasks (`sla_tasks.py`)
+
 - [x] `check_sla_violations`: Monitoreo de violaciones SLA
 - [x] `calculate_sla_metrics`: Cálculo de métricas SLA
 - [x] `send_sla_warnings`: Alertas de SLAs próximos a vencer
 
 ### Maintenance Tasks (`maintenance_tasks.py`)
+
 - [x] `health_check`: Health check de workers
 - [x] `cleanup_old_logs`: Limpieza de logs antiguos
 - [x] `generate_weekly_reports`: Reportes semanales
@@ -40,6 +43,7 @@ workers/
 - [x] `database_maintenance`: Mantenimiento de BD
 
 ### Notification Tasks (`notification_tasks.py`)
+
 - [x] `send_daily_digest`: Digest diario para agentes
 - [x] `send_ticket_notifications`: Notificaciones de tickets
 - [x] `send_system_alert`: Alertas del sistema
@@ -133,6 +137,7 @@ DIGEST_ENABLED=true
 ### Logs Estructurados
 
 Todos los workers utilizan structured logging con:
+
 - Task ID único
 - Correlation ID para tracking
 - Contexto de tenant
@@ -163,6 +168,7 @@ celery -A app.celery inspect active
 ### Agregar Nueva Tarea
 
 1. Crear función en módulo apropiado:
+
 ```python
 @celery_app.task(bind=True, time_limit=300)
 def new_task(self, param1: str, param2: int):
@@ -172,6 +178,7 @@ def new_task(self, param1: str, param2: int):
 ```
 
 2. Registrar en `celery.py` si es periódica:
+
 ```python
 beat_schedule = {
     "new-periodic-task": {
@@ -201,6 +208,7 @@ def reliable_task(self):
 Los templates están definidos en código por ahora. En el futuro se moverán a base de datos para ser editables por tenants.
 
 Templates disponibles:
+
 - `ticket_created`
 - `ticket_assigned`
 - `ticket_resolved`