Initial kitchen scaffold — Phase 1 kitchen port (build-verified 2026-07-11)

FastAPI backend (Python 3.11, MSSQL ODBC for SambaPOS, Azure DI OCR),
kitchen_db on central PG. React/TS/Vite frontend with navy sidebar layout.

Backend: auth.py (APP_SLUG=kitchen, SimpleNamespace — archive routes use
.kitchen_id/.is_admin without modification), main.py (51 migrations, scheduler,
internal router for KDS bookings feed), api/internal.py, full archive API
(31 routers: invoices, recipes, menus, sambapos, resos, newbook, disputes,
purchase_orders, etc.), models, migrations, OCR pipeline.
kitchen_id pinned to 1 (B1 — single hotel).

Frontend: AuthGate (app=kitchen, token shim for archive compat — B5b pending),
Layout (navy sidebar, 6 sections, Lucide icons, teal --app-primary),
App.tsx (Outlet pattern, UploadApp outside Layout), index.css (full :root block).
strict: false — archive components have type issues; build clean.

Note: 45 archive components call fetch('/api/...') without /kitchen/ prefix
(B5b). Runtime 404s; deferred until after initial testing.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

backend/migrations/add_dispute_attachment_public_hash.py

@@ -0,0 +1,42 @@
+"""
+Migration to add public_hash column to dispute_attachments table.
+
+This enables public shareable links for dispute attachments, allowing
+suppliers to view images/documents via email without authentication.
+"""
+import logging
+from sqlalchemy import text
+from database import engine
+
+logger = logging.getLogger(__name__)
+
+
+async def run_migration():
+    """Add public_hash column to dispute_attachments"""
+    async with engine.begin() as conn:
+        # Check if column already exists
+        result = await conn.execute(text("""
+            SELECT EXISTS (
+                SELECT 1 FROM information_schema.columns
+                WHERE table_name = 'dispute_attachments'
+                AND column_name = 'public_hash'
+            );
+        """))
+        exists = result.scalar()
+
+        if not exists:
+            logger.info("Adding 'public_hash' column to dispute_attachments table")
+            await conn.execute(text("""
+                ALTER TABLE dispute_attachments
+                ADD COLUMN public_hash VARCHAR(64) UNIQUE;
+            """))
+
+            # Create index for fast lookups
+            await conn.execute(text("""
+                CREATE INDEX IF NOT EXISTS idx_dispute_attachments_public_hash
+                ON dispute_attachments(public_hash) WHERE public_hash IS NOT NULL;
+            """))
+
+            logger.info("Successfully added 'public_hash' column with index")
+        else:
+            logger.info("'public_hash' column already exists in dispute_attachments")