SRV-07 — Platform services — audit, numbering, settings, files, PDF

SummaryCopy Anchor Link

Audit journal writer, sequential business numbers, typed settings service, S3 pre-signed uploads with thumbnails, PDF rendering base for invoices and delivery notes.

DescriptionCopy Anchor Link

Several cross-cutting services are needed by almost every module and must exist before them (AUD-01, ADM-03, ADM-04, INT-05, SEC-04): an audit journal writer, sequential business numbers, a typed settings service, file storage and a PDF rendering base. The audit writer records actor, client app, IP, request id, entity, action (AuditAction) and a before/after diff; the numbering service allocates gap-free numbers per key and year (REV-000123, CMD-2026-000158, FAC-…, BL-…, PAY-…, TRN-…, VIS-…, TKT-…, RET-…, plus the credit-note sequence) inside the caller's transaction; the settings service exposes each Setting key with a Zod schema, a default and a Redis cache, and audits changes. Files follow AUTHORING §3: files.createUpload (pre-signed PUT, 10 min, per FilePurpose size/type limits), files.completeUpload (existence check, thumbnails in the worker), files.downloadUrl (signed GET, 5 min, access check by purpose and owner); product images, brand logos and banners are public through the CDN bucket. Out of scope: the invoice/delivery-note layouts themselves (SRV-16, SRV-18 with DQA-09).

SubtasksCopy Anchor Link

DeliverablesCopy Anchor Link

• apps/server/src/modules/audit/{audit.service.ts,audit.router.ts}
• apps/server/src/modules/settings/{registry.ts,settings.service.ts,settings.router.ts}
• apps/server/src/modules/files/{files.router.ts,storage.ts,thumbnails.job.ts}
• apps/server/src/platform/{numbering.ts,pdf/}

Acceptance criteriaCopy Anchor Link

• Two hundred concurrent order-number allocations produce 200 distinct consecutive numbers with no gap (ADM-04)
• Changing a setting writes an AuditLog UPDATE entry with old and new values and is visible to every process within 5 seconds
• An upload of a 30 MB file or a disallowed mime type for STORE_DOCUMENT is refused with 422 FILE_NOT_ALLOWED
• A reseller cannot obtain a download URL for another reseller's document (403 OUT_OF_SCOPE); signed URLs expire after 5 minutes (SEC-04)
• Product images are served from the public bucket with a thumbnail generated after completion

Requirements coveredCopy Anchor Link

API surfaceCopy Anchor Link

Test measuresCopy Anchor Link

• DB concurrency test for number allocation against real Postgres
• Integration test with MinIO: create upload, PUT, complete, download URL, expiry
• Snapshot test of the PDF base layout

RisksCopy Anchor Link

• Gap-free numbering rolls back with failed transactions and leaves holes — allocate inside the same transaction as the business row so a rollback also rolls back the number

KPICopy Anchor Link

• Delivered by Mon 19 Oct 2026 within 1 person-day(s).
• Every acceptance criterion above demonstrated before hand-off; linked requirements' acceptance criteria pass.
• Zero open critical defects, permission gaps or data-integrity regressions at sign-off.

---

Generated from content/plan/tasks.json by scripts/generate-team-tasks.mjs. Dates are computed by the scheduler (Sunday–Thursday weeks, holidays excluded) — change the plan, not this page.