Documentation Registry

This file is the canonical catalog of documentation files.
Agents and contributors must read this file first before creating or editing docs.

Status Legend

• active: current source of truth.
• draft: work in progress.
• superseded: replaced by a newer document.
• archived: historical reference only.

---

Core & Architecture

Path	Type	Status	Owner	Notes
apps/docs/index.md	Home	active	platform-engineering	Docs portal
apps/docs/registry.md	Registry	active	platform-engineering	Canonical docs index
apps/docs/onboarding/index.md	Core	draft	platform-engineering	Onboarding baseline
apps/docs/product/index.md	Core	draft	platform-engineering	Product baseline
apps/docs/conventions/backend/index.md	Core	draft	platform-engineering	Backend conventions baseline
apps/docs/conventions/backend/api-review-checklist.md	Convention	active	api-team	Operational hard-fail and warn review checklist
apps/docs/conventions/backend/api-review-guidelines.md	Convention	active	api-team	AI PR review rules extracted from apps/api
apps/docs/conventions/frontend/index.md	Core	draft	platform-engineering	Frontend conventions baseline
apps/docs/security/index.md	Core	draft	platform-engineering	Security baseline
apps/docs/architecture/overview.md	Architecture	active	api-team	High-level architecture map
apps/docs/architecture/api-module-architecture.md	Architecture	active	api-team	API module dependency graph
apps/docs/architecture/documentation-structure.md	Architecture	active	platform-engineering	Guide for modular docs
apps/docs/adr/index.md	ADR Index	active	api-team	Entry point for ADRs
apps/docs/adr/004-module-self-containment-architecture.md	ADR	active	api-team	Module self-containment
apps/docs/adr/005-integration-events-publisher-consumer.md	ADR	active	api-team	Integration events publisher/consumer pattern
apps/docs/adr/006-runtime-permissions-provider-registration.md	ADR	active	api-team	Runtime registration fix for cross-module DI
apps/docs/adr/007-bidirectional-gateway-pattern.md	ADR	active	api-team	Bidirectional gateway pattern: Identity ↔ Plans
apps/docs/adr/008-tls-strategy-for-custom-domains.md	ADR	active	platform-engineering	TLS strategy for agency custom domains (v1: manual Dokploy + LE)
apps/docs/adr/009-byok-vercel-ai-gateway.md	ADR	active	api-team	BYOK via Vercel AI Gateway (one key per agent, fail-hard, source-differentiated usage)
apps/docs/adr/010-ai-usage-dashboard.md	ADR	active	api-team	AI Usage Dashboard: 7 decisions (5 endpoints, JS projection, 300s Redis TTL, ai.agent CASL reuse, heatmap palette, no React.lazy, TypeORM composite indexes)

---

Workflows & Templates

Path	Type	Status	Owner	Notes
apps/docs/workflows/engineering/overview.md	Workflow	active	platform-engineering	Engineering workflows
apps/docs/workflows/engineering/deploy-workflow.md	Workflow	active	platform-engineering	CI/CD pipeline
apps/docs/workflows/engineering/api-import-aliases.md	Workflow	active	api-team	API internal aliases
apps/docs/workflows/engineering/api-zod-request-validation.md	Workflow	active	api-team	API body validation
apps/docs/operations/index.md	Workflow	draft	platform-engineering	Operations workflows
apps/docs/templates/adr-template.md	Template	active	platform-engineering	New ADR template
apps/docs/templates/feature-template.md	Template	active	platform-engineering	New feature doc template
apps/docs/templates/workflow-template.md	Template	active	platform-engineering	New workflow template
apps/docs/templates/runbook-template.md	Template	active	platform-engineering	New runbook template

---

Modules Catalog

Identity Module

Path	Type	Status	Owner	Notes
apps/docs/modules/identity/index.md	Index	active	identity-team	Module overview
apps/docs/modules/identity/features/overview.md	Feature	active	identity-team	Auth high-level
apps/docs/modules/identity/features/user-auth.md	Feature	superseded	identity-team	Replaced by user-auth-workflow.md
apps/docs/modules/identity/features/client-auth.md	Feature	superseded	identity-team	Replaced by client-auth-workflow.md
apps/docs/modules/identity/features/user-auth-workflow.md	Feature	active	identity-team	Detailed User Auth flow
apps/docs/modules/identity/features/client-auth-workflow.md	Feature	active	identity-team	Detailed Client Auth flow
apps/docs/modules/identity/features/token-management.md	Feature	active	identity-team	Rotation & Revocation
apps/docs/modules/identity/features/result-pattern-error-handling.md	Feature	active	identity-team	Error handling strategy
apps/docs/modules/identity/features/session-management.md	Feature	active	identity-team	Session & device tracking
apps/docs/modules/identity/features/agency-profile.md	Feature	active	identity-team	Agency profile fields
apps/docs/modules/identity/features/two-factor-authentication.md	Feature	active	identity-team	Email OTP & TOTP 2FA for users
apps/docs/modules/identity/features/rbac-and-custom-roles.md	Feature	active	identity-team	RBAC and Custom Roles system
apps/docs/modules/identity/features/business-registration-gates.md	Feature	active	identity-team	Business registration gates + admin guards
apps/docs/modules/identity/features/my-abilities-endpoint.md	Feature	active	identity-team	GET /identity/user/my-abilities — user CASL rules
apps/docs/modules/identity/features/agency-custom-domains.md	Feature	active	identity-team	Custom domains: flow, API, data model, state machine, errors
apps/docs/modules/identity/runbooks/index.md	Runbook	draft	identity-team	Identity runbooks baseline
apps/docs/modules/identity/runbooks/enable-business-registration.md	Runbook	active	identity-team	How to enable business registration for an agency
apps/docs/modules/identity/runbooks/provision-tls-for-custom-domain.md	Runbook	active	platform-engineering	Operator runbook: register verified custom domain in Dokploy for TLS

Infrastructure Module

Path	Type	Status	Owner	Notes
apps/docs/modules/infra/index.md	Index	active	platform-engineering	Infra overview
apps/docs/modules/infra/domain/dokploy-platform.md	Domain	active	platform-engineering	Dokploy project structure
apps/docs/modules/infra/domain/vpn-wireguard.md	Domain	active	platform-engineering	VPN tunnel, routing, troubleshooting
apps/docs/modules/infra/domain/overview.md	Domain	active	platform-engineering	Infra domain map
apps/docs/modules/infra/features/index.md	Feature	draft	platform-engineering	Infra features baseline
apps/docs/modules/infra/features/s3-storage-buckets.md	Feature	active	platform-engineering	S3 public + private buckets with IAM
apps/docs/modules/infra/runbooks/overview.md	Runbook	draft	platform-engineering	Infra runbooks placeholder

Panel Module

Path	Type	Status	Owner	Notes
apps/docs/modules/panel/index.md	Index	active	panel-team	Panel overview
apps/docs/modules/panel/domain/overview.md	Domain	active	panel-team	Panel domain overview
apps/docs/modules/panel/features/index.md	Feature	draft	panel-team	Panel features baseline
apps/docs/modules/panel/features/multi-tenant-subdomain.md	Feature	active	panel-team	Multi-tenant subdomain resolution
apps/docs/modules/panel/features/agent-avatar-upload.md	Feature	active	panel-team	Agent avatar S3 presign + key on agent API
apps/docs/modules/panel/features/settings-services-catalog.md	Feature	active	panel-team	Settings services tab + Catalog API
apps/docs/modules/panel/features/settings-policies-casl.md	Feature	active	panel-team	Settings roles tab + Identity policies API
apps/docs/modules/panel/features/tasks-project-management.md	Feature	active	panel-team	Tasks & projects at /tasks + operations API
apps/docs/modules/panel/features/calendar-operations.md	Feature	active	panel-team	Calendar at /calendar + events API
apps/docs/modules/panel/features/settings-onboarding-registration.md	Feature	active	panel-team	Settings — Registro y Onboarding tab
apps/docs/modules/panel/features/frontend-casl-integration.md	Feature	active	panel-team	Frontend CASL integration — AbilityProvider, useCan, gating
apps/docs/modules/panel/features/agent-internal-tools-ui.md	Feature	active	panel-team	Herramientas Internas sub-tab in agent edit dialog — toggle Operations tools
apps/docs/modules/panel/features/connections-nexos-ui.md	Feature	active	panel-team	Nexos at /connections — per-type active strip, two-column instance workspace, catalog CRUD
apps/docs/modules/panel/features/directory-member-management.md	Feature	active	panel-team	/directory member UI: cards, dialog (roles/policies; tasks tab = list + embedded task editor; tab row scroll-into-view)
apps/docs/modules/panel/runbooks/index.md	Runbook	draft	panel-team	Panel runbooks baseline

Operations Module

Path	Type	Status	Owner	Notes
apps/docs/modules/operations/index.md	Index	active	api-team	Operations module overview (tasks, projects, events, kanban)
apps/docs/modules/operations/features/schedule-integration.md	Feature	active	api-team	Operations ↔ Schedule integration: what triggers a schedule, rule lifecycle, topic naming, payload contract, email delivery on schedule arrival, migration note
apps/docs/modules/operations/runbooks/notification-rule-last-sent-at-migration.md	Runbook	active	api-team	Operator steps to add last_sent_at column before deploying email delivery

Connections Module

Path	Type	Status	Owner	Notes
apps/docs/modules/connections/index.md	Index	active	api-team	Connections module overview — slugs table, ownership/visibility model, endpoints (post-redesign)
apps/docs/modules/connections/features/available-connections-catalog.md	Feature	active	api-team	Catalog CRUD for installable connection types — available_connections table, slug/authType, CRUD endpoints
apps/docs/modules/connections/features/auth-discovery-flow.md	Feature	active	api-team	Cómo el panel descubre OAuth vs credentials vía authType y ramifica el flujo
apps/docs/modules/connections/features/registry-contract.md	Feature	active	api-team	Contrato in-code registry ↔ DB catalog: slug, scopes OAuth, factories
apps/docs/modules/connections/features/recipient-allowlists.md	Feature	active	api-team	Allow/deny lists de destinatarios para Telegram (chat IDs) y SMTP (emails) — enforcement + awareness del agente
apps/docs/modules/connections/google-providers.md	Feature	active	api-team	User guide: connect Gmail, Sheets, Calendar via OAuth
apps/docs/modules/connections/google-oauth-architecture.md	ADR	active	api-team	4 architecture decisions + sequence diagrams + error taxonomy
apps/docs/modules/connections/runbooks/google-oauth-prereqs.md	Runbook	active	api-team	Google Cloud setup, consent screen, redirect URIs, secret rotation
apps/docs/modules/connections/runbooks/connections-redesign-migration.md	Runbook	active	api-team	Op runbook for the 4 redesign migrations + post-deploy catalog seed

Notifications Module

Path	Type	Status	Owner	Notes
apps/docs/modules/notifications/index.md	Index	active	api-team	Notifications overview
apps/docs/modules/notifications/domain/index.md	Domain	active	api-team	Notifications domain baseline
apps/docs/modules/notifications/features/index.md	Feature	active	api-team	Notifications features baseline
apps/docs/modules/notifications/features/email-sending.md	Feature	active	api-team	Workflow for sending emails
apps/docs/modules/notifications/features/sms-sending.md	Feature	active	api-team	Workflow for sending Twilio SMS
apps/docs/modules/notifications/features/operations-alerts.md	Feature	active	api-team	INotificationSender port, operations templates, SMTP adapter, domain-boundary notes
apps/docs/modules/notifications/runbooks/index.md	Runbook	active	api-team	Notifications runbooks baseline

Catalog Module

Path	Type	Status	Owner	Notes
apps/docs/modules/catalog/index.md	Index	active	api-team	Catalog module overview
apps/docs/modules/catalog/features/index.md	Feature	active	api-team	Catalog features baseline
apps/docs/modules/catalog/features/service-configuration-management.md	Feature	active	api-team	Catalog service configuration CRUD and error contract

AI Module

Path	Type	Status	Owner	Notes
apps/docs/modules/ai/index.md	Index	active	api-team	AI module overview and readiness status
apps/docs/modules/ai/domain/index.md	Domain	active	api-team	Agent, chat, knowledge, model, and token domain map
apps/docs/modules/ai/features/index.md	Feature	active	api-team	AI features baseline
apps/docs/modules/ai/features/agent-management.md	Feature	active	api-team	Agent CRUD, defaults, and delete semantics
apps/docs/modules/ai/features/chat-and-message-streaming.md	Feature	active	api-team	Chat lifecycle, streaming flow, and token enforcement
apps/docs/modules/ai/features/bring-your-own-key.md	Feature	active	api-team	BYOK: per-agent saved provider credentials, fail-hard execution, source-differentiated usage
apps/docs/modules/ai/features/knowledge-base-and-rag.md	Feature	active	api-team	Knowledge ingestion, Qdrant retrieval, and current gaps
apps/docs/modules/ai/features/model-catalog-sync.md	Feature	active	api-team	Vercel AI Gateway model refresh workflow
apps/docs/modules/ai/features/mcp-oauth-authentication.md	Feature	active	api-team	MCP OAuth 2.0 + PKCE, Client Credentials, DCR
apps/docs/modules/ai/features/internal-tools.md	Feature	active	api-team	Per-agent opt-in operations tool registry (v1 — 9 tools); links to panel UI doc
apps/docs/modules/ai/api/agent-internal-tools.md	API Ref	active	api-team	GET catalog (+ enabledTools field) + PUT upsert endpoints for internal tools
apps/docs/modules/ai/features/connection-tools.md	Feature	active	api-team	Per-connection-instance tool grants (20 tools); slug naming; google_workspace capability grouping; runtime auth semantics
apps/docs/modules/ai/api/agent-connection-tools.md	API Ref	active	api-team	GET catalog + PUT full-diff upsert endpoints for connection-tool grants
apps/docs/modules/ai/features/sub-agents-observability.md	Feature	active	api-team	Canonical metrics + wide event for Guardrail and TitleGenerator sub-agents
apps/docs/modules/ai/features/ai-usage-dashboard.md	Feature	active	api-team	AI Usage Dashboard: filters, KPI cards, charts, agents table, advanced section (heatmap, system/byok, cache savings)
apps/docs/modules/ai/api/org-usage-endpoints.md	API Ref	active	api-team	Reference for the 5 new analytics endpoints: time-series, projection, model-efficiency, heatmap, cache-savings
apps/docs/modules/ai/runbooks/index.md	Runbook	active	api-team	AI runbooks baseline
apps/docs/modules/ai/runbooks/activation-and-operations.md	Runbook	active	api-team	Activation checklist, blockers, and verification

Plans Module

Path	Type	Status	Owner	Notes
apps/docs/modules/plans/index.md	Index	active	api-team	Plans module overview
apps/docs/modules/plans/domain/index.md	Domain	active	api-team	Plans aggregate and persistence shape
apps/docs/modules/plans/features/index.md	Feature	active	api-team	Plans features baseline
apps/docs/modules/plans/features/plans-catalog-management.md	Feature	active	api-team	Public catalog and authenticated CRUD
apps/docs/modules/plans/runbooks/index.md	Runbook	draft	api-team	Plans runbooks baseline

Shared Module

Path	Type	Status	Owner	Notes
apps/docs/modules/shared/index.md	Index	active	api-team	Shared module overview
apps/docs/modules/shared/domain/index.md	Domain	draft	api-team	Shared domain baseline
apps/docs/modules/shared/features/redis-cache.md	Feature	active	api-team	Redis cache service
apps/docs/modules/shared/features/rate-limiting.md	Feature	active	api-team	Per-endpoint rate limiting
apps/docs/modules/shared/features/mapper-dto-options.md	Feature	active	api-team	Mapper toDto IMapperOptions pattern
apps/docs/modules/shared/features/casl-authorization.md	Feature	active	api-team	CASL Authorization system
apps/docs/modules/shared/features/casl-access-filters.md	Feature	active	api-team	CASL Access Filters (policy → TypeORM WHERE)
apps/docs/modules/shared/runbooks/index.md	Runbook	draft	api-team	Shared runbooks baseline

Packages Module

Path	Type	Status	Owner	Notes
apps/docs/modules/packages/index.md	Index	active	platform-engineering	Shared packages overview
apps/docs/modules/packages/domain/index.md	Domain	draft	platform-engineering	Packages domain baseline
apps/docs/modules/packages/features/index.md	Feature	draft	platform-engineering	Packages features baseline
apps/docs/modules/packages/runbooks/index.md	Runbook	draft	platform-engineering	Packages runbooks baseline

Observability Module

Path	Type	Status	Owner	Notes
apps/docs/modules/observability/index.md	Index	active	platform-engineering	Observability overview
apps/docs/modules/observability/domain/index.md	Domain	draft	platform-engineering	Observability domain baseline
apps/docs/modules/observability/features/index.md	Feature	draft	platform-engineering	Observability features baseline
apps/docs/modules/observability/runbooks/index.md	Runbook	active	platform-engineering	Baseline observability
apps/docs/modules/observability/runbooks/api-lgtm-otel-integration.md	Runbook	active	api-team	API OTEL logs/traces/metrics wiring

Storage Module

Path	Type	Status	Owner	Notes
apps/docs/modules/storage/index.md	Index	active	api-team	Storage module overview
apps/docs/modules/storage/features/direct-upload-presigned-url.md	Feature	active	api-team	Single-file presign and registration flow
apps/docs/modules/storage/features/bulk-upload-presigned-urls.md	Feature	active	api-team	Bulk presign flow and partial-failure contract
apps/docs/modules/storage/features/s3-storage-provider.md	Feature	active	api-team	S3 adapter contract and config
apps/docs/modules/storage/features/storage-stats.md	Feature	active	api-team	Persistent usage and trash counters

---

Legacy / Superseded

Path	Type	Status	Owner	Notes
apps/docs/legacy/superseded/overview.md	Index	superseded	platform-engineering	Legacy map

Recently Changed Docs

• 2026-04-23: Connections redesign (connections-redesign change / EPIC #285 under milestone connections-architecture-cleanup): slug + available_connection_id FK + label replace the legacy provider + type + name shape; available_connections gets slug, display_name, auth_type; in-code registry becomes the SSOT for factories, form schemas and OAuth scopes. Added features/auth-discovery-flow.md, features/registry-contract.md, runbooks/connections-redesign-migration.md; rewrote features/available-connections-catalog.md and index.md for the new shape. Added 3 uuid7 platform policies (update/delete/manage.platform.connections.available-connection). Updated VitePress sidebar.

• 2026-04-23: AI Usage Dashboard (ai-usage-dashboard change): added modules/ai/features/ai-usage-dashboard.md (feature guide covering filters, KPI cards, trend chart, action breakdown, models, agents table, and advanced section with heatmap/system-byok/cache-savings); added modules/ai/api/org-usage-endpoints.md (API reference for 5 new endpoints: time-series, projection, model-efficiency, heatmap, cache-savings — including query params, response shapes, cache policy, and error codes); added ADR adr/010-ai-usage-dashboard.md (7 architecture decisions). Updated VitePress sidebar (AI Module features + API ref, ADR group) and ADR index.

• 2026-04-21: BYOK (byok change): added modules/ai/features/bring-your-own-key.md (feature/runbook) covering supported providers, save/bind flows, fail-hard behavior, usage reporting, delete rules, and v1 limitations; added ADR 009 adr/009-byok-vercel-ai-gateway.md recording the gateway-native BYOK + one-key-per-agent + fail-hard decisions; added ai.api-key.* claims section to modules/identity/features/rbac-and-custom-roles.md; updated VitePress sidebar (AI Module, ADR group) and ADR index.

• 2026-04-21: Operations notifications delivery (Phase G docs): extended schedule-integration.md with "Email delivery on schedule arrival" section (end-to-end flow, idempotency guard, soft-delete semantics, recipient resolution, retry semantics, observability log events, migration note); created notifications/features/operations-alerts.md (INotificationSender port contract, template registry, SMTP adapter, domain-boundary note); created operations/runbooks/notification-rule-last-sent-at-migration.md (operator steps for adding last_sent_at column). Updated VitePress sidebar and registry.

• 2026-04-20: Operations module docs baseline: added modules/operations/index.md (module overview) and modules/operations/features/schedule-integration.md (Operations ↔ Schedule integration: what triggers a schedule, NotificationRule persistence, syncStatus lifecycle, topic naming, ID-based payload contract, all-day handling, date-change reconciliation, best-effort resilience, and current limitations). Updated VitePress sidebar and registry.

• 2026-04-18: Added 11 connector tools — Calendar (list_calendars, find_free_time, respond_to_event); Gmail (get_thread, search_threads, list_drafts, list_labels, label_message, unlabel_message, label_thread, unlabel_thread). Updated connection-tools.md catalog (20 → 30) and bumped agent-connection-tools.md review date.

• 2026-04-17: Panel AI Gateway catalog (platform): /ai-agents switches on platform vs org (AiAgentsRoute); sidebar IA Agents in platform view gated by platform.ai-model read; updated ai-agents-center.md and registry.md.

• 2026-04-15: Panel task checklists: board task cards use /operations/checklists (not child tasks) for the checklist UI; docs and source_paths updated in tasks-project-management.md.

• 2026-04-15: Panel tasks/projects kanban cards: hover/focus delete control with confirm → DELETE task/project; project delete wired in operations-api.service + cache removeProjectFromProjectsCache. Updated tasks-project-management.md.

• 2026-04-15: Panel tasks/projects kanban rail: pointer edge auto-scroll (smooth rAF horizontal scroll near left/right, including while dragging; off under prefers-reduced-motion). Updated tasks-project-management.md.

• 2026-04-14: Connection Tools per Instance (connection-tools-per-instance change): added connection-tools.md (feature) and agent-connection-tools.md (API ref) for the per-connection-instance tool grant model. Updated internal-tools.md and agent-internal-tools.md to document that providerKey='connections' is no longer valid and link to the new pages. Updated VitePress sidebar and registry.

• 2026-04-14: Agency Custom Domains: GET /identity/agency/id query params validated with shared Zod (getAgencyIdQuerySchema in @repo/schemas); feature doc updated for Zod issue responses vs IDENTITY.* for invalid query combinations.

• 2026-04-13: Agency Custom Domains (Phase 10 docs): added feature doc (agency-custom-domains.md) covering end-to-end flow, API endpoints, data model, state machine, error catalog, v1 limitations, and v2 pending items; added operator runbook (provision-tls-for-custom-domain.md) for Dokploy TLS provisioning per verified domain; added ADR 008 recording the v1 TLS strategy decision (manual Dokploy + Let's Encrypt) with alternatives (Cloudflare proxy, Caddy on-demand TLS); updated VitePress sidebar and registry.

• 2026-04-13: Connections catalog (add-connections-catalog change): added available-connections-catalog.md documenting GET /connections/available, the connections.available_connections table (5 seed rows), auth/policy requirements, response shape, and iteration-2 seams. Updated connections index.md endpoint table and related pages. Updated VitePress sidebar and registry.

• 2026-04-11: Agent Internal Tools UI (panel): added agent-internal-tools-ui.md documenting the Herramientas Internas sub-tab in the agent edit dialog (step 7); updated ai-agents-center.md step table and API usage; updated internal-tools.md to remove "not yet built" note and add panel UI cross-link; updated agent-internal-tools.md API ref to add enabledTools to catalog response and correct endpoint paths; updated VitePress sidebar and registry.

• 2026-04-10: Connections module (google-connections change): added module overview, Google providers user guide, Google OAuth architecture ADR (4 decisions + sequence diagrams + error taxonomy), and Google OAuth prereqs runbook. Updated VitePress sidebar and registry.

• 2026-04-10: AI Internal Tools: added feature doc (internal-tools.md) and API reference (agent-internal-tools.md) for the per-agent operations tool registry; updated VitePress sidebar and registry.

• 2026-04-09: Panel kanban status column drag: optimistic statuses cache reorder (reorder-kanban-statuses-in-cache.ts) to avoid snap-back; fewer refetches. Updated tasks-project-management.md.

• 2026-04-09: Panel tag create: shared useOperationTagCreate, OperationTagCreateFields, and OperationTagsField inline flow for tasks, projects, and calendar (removed TagCreateDialog). Updated tasks-project-management.md, calendar-operations.md.

• 2026-04-09: Panel tasks board: useTasksModule merges create/update/delete into TanStack cache (no full task list refetch on project create; modals close when POST/PUT completes; background invalidation scoped to the aggregated tasks query when needed). Updated tasks-project-management.md.

• 2026-04-09: Panel tasks: new-task flow infers kanban column (column + vs first column from toolbar), matching projects; column picker only when editing. Updated tasks-project-management.md.

• 2026-04-08: MCP OAuth Authentication: added feature doc covering OAuth 2.0 Authorization Code + PKCE flow, Client Credentials, Dynamic Client Registration, token refresh, security architecture, and frontend gap analysis.

• 2026-04-06: Frontend CASL Integration (Phase 9 docs): added my-abilities-endpoint.md (identity module) and frontend-casl-integration.md (panel module) covering the full ability fetch → provide → consume → sidebar-gate lifecycle; updated VitePress sidebar and registry.

• 2026-04-05: Business Registration Gates (Phase 11 docs): added feature doc, ADR 007, runbook, panel settings tab doc, updated api-module-architecture.md for bidirectional gateway, updated ADR index and VitePress sidebar.

• 2026-04-03: RBAC doc: Platform Admin includes platform.plan create/update/delete system policies alongside manage/read.

• 2026-04-03: Plans domain doc: agency subscription creation respects plan subscriptionConfig frequency isEnabled and ONE_TIME vs SUBSCRIPTION billing model.

• 2026-04-02: Panel agent knowledge UI: storage picker, confirm upload, knowledge document polling/retry/delete; updated ai-agents-center.md.

• 2026-04-01: Documented CASL Access Filters: AWS IAM-style policy evaluation model, condition-to-TypeORM translation, 7 detailed examples, operator mapping, and extensibility guide.

• 2026-04-01: Panel Files sidebar: document Añadir categoría (POST /storage/categories) in panel features index.

• 2026-03-31: Storage stats doc: GET /storage/stats contract without maxStorageBytes until quotas ship; panel Files summary shows usage only (storage-stats.md).

• 2026-03-30: Documented panel /auth Google intent dialog (login vs registerAgency) aligned with /business in user-auth-workflow.md.

• 2026-03-27: Updated S3 dev CORS doc: https://*.daramex.org for all subdomains, apex https://daramex.org, corrected localhost port to 5173.

• 2026-03-27: Updated Identity auth docs for explicit Google OAuth start intent, agency-scoped Google linking, Redis-backed OAuth state, and panel redirect callback handling.

• 2026-03-27: Documented the single-file direct upload flow to clarify route validation, presign ordering, and requested-size registration.

• 2026-03-27: Documented the bulk upload presign flow changes for post-presign quota reservation, mocked plan fallback, and per-item response indexes.

• 2026-03-27: Added storage stats trash accounting docs for the new persisted trashedFiles counter and trash cleanup behavior.

• 2026-03-25: Updated CASL and RBAC docs to document automatic @OrgId() org-access validation, agency scoping, and cross-agency x-org-id rejection.

• 2026-03-23: Documented DELETE /api/organization/members/:userId (remove member, org-scoped user policy cleanup, last-owner guard) in RBAC feature doc.

• 2026-03-25: Updated RBAC docs for bulk user-policy attachment and clarified that role/user policy attachment endpoints accept existing policyIds arrays.

• 2026-03-23: Updated RBAC docs with system owner role bootstrap, getting-started guide for creating roles/policies/assignments, and available actions/subjects reference.

• 2026-03-24: Documented organizations on user login, verify-email, Google login, and 2FA verify success responses (orgId, type, name, roleName per membership).

• 2026-03-20: Updated RBAC and Custom Roles docs with full API endpoints, security hardening, deny rules, and evaluation flow backed by real DB queries.

• 2026-03-26: Documented panel agent avatar upload (presign + S3 FormData + agent avatar key) and linked it from the panel features index and VitePress sidebar.

• 2026-03-20: Updated CASL Authorization docs with IRawPermission typing, IdentityPermissionsProvider DB-backed flow, deny rules, and __caslSubjectType__ injection prevention.

• 2026-03-19: Added the AI module docs baseline covering agent management, chat streaming, knowledge/RAG, model sync, and the current activation blockers.

• 2026-03-17: Added a checklist-oriented backend API review companion doc with explicit hard-fail and warn review output rules for automation.

• 2026-03-18: Corrected the API deployment workflow and container startup command to use the built NestJS entrypoint file dist/src/main.js.

• 2026-03-27: Panel Settings → Services: English feature doc, deactivate/reactivate via PUT isEnabled, Catalog cross-link refresh.

• 2026-03-17: Expanded the backend API review guidelines with concrete controller, mapper, repository, persistence, CQRS, error-contract, and UUID/default-schema review findings distilled from PR review feedback.

• 2026-03-13: Updated the Catalog module docs to reflect configId-based update/delete routes for service configurations and UUID v7 path validation.

• 2026-03-13: Expanded the Catalog service configuration feature doc to include the new delete endpoint, success response, and shared not-found contract.

• 2026-03-13: Updated the Catalog module overview, service-configuration contract, and API module architecture docs to reflect the dedicated Catalog module wiring, split create/update handlers, and the current AI_AGENTS-only service enum.

• 2026-03-13: Updated the Catalog service configuration feature doc to reflect explicit create-only and update-only command behavior plus the new conflict/not-found error contracts.

• 2026-03-13: Added the Catalog module docs baseline and documented the structured bad-request error returned when a missing service configuration is created without the required create-time fields.

• 2026-03-12: Updated the Identity 2FA feature doc for the optional /deactivate deactivateAll flag that can disable every active method in one verified request.

• 2026-03-11: Corrected Identity, Notifications, Plans, Shared, and Observability docs to match the current branch behavior, route prefixes, response payloads, and operator-visible telemetry.

• 2026-03-11: Expanded the Identity 2FA, auth overview, user auth workflow, and session-management docs to reflect login hand-off, challenge-guarded password changes, corrected route prefixes, and current panel gaps.

• 2026-03-10: Added Two-Factor Authentication (2FA) feature doc covering email OTP and TOTP setup, activation, login flow, and deactivation.

• 2026-03-10: Added the Plans module docs baseline, public catalog workflow, management CRUD, and API architecture updates for the new plans schema/module.

• 2026-03-10: Updated the Identity user auth workflow to include the authenticated current-user profile read endpoint.

• 2026-03-09: Documented structured Notifications error logging for email and SMS flows and expanded the API observability runbook event catalog.

• 2026-03-09: Documented the shared persistence-layer uuidv7() database fallback for manual SQL inserts without explicit IDs.

• 2026-03-09: Added Twilio SMS delivery documentation and the development SMS test endpoint workflow for Notifications.

• 2026-03-09: Updated the Identity user auth workflow to include the authenticated user profile details update endpoint.

• 2026-03-09: Expanded the Identity user profile contract with a nullable default phone and labeled contact channels for login and profile update flows.

• 2026-03-08: Documented the Notifications module (overview, domain, and email-sending feature).

• 2026-03-09: Added backend API review guidelines under conventions for AI-assisted PR reviews.

• 2026-03-08: Moved generic domain-entity-lifecycle.md from Identity to Shared module and created Notifications module docs baseline.

• 2026-03-08: Moved generic Integration Events Publisher/Consumer documentation from ADR 005 into Shared features.

• 2026-03-09: Added Agency Profile Fields feature doc (corporate identity, contact channels, fiscal info).

• 2026-03-08: Re-organized docs structure to adhere strictly to documentation and daramex-docs skills including standard top-level directories and ensuring all module subdirectories have an index baseline. Moved workflows/operations/overview.md to operations/index.md.

• 2026-03-06: Expanded API LGTM OTEL runbook and observability module docs with app metrics (HTTP RED, Node runtime, Redis app-perspective metrics), collector metric label conversion, and provisioned API observability dashboard.

• 2026-03-06: Refactored API app metrics into namespaced services (http, runtime, redis) with an aggregate facade and dedicated injection tokens for specific metrics contexts.

• 2026-03-06: Refactored Redis cache telemetry docs for the RedisMetricsService.recordOperation(...) lifecycle wrapper and slimmer RedisCacheService methods.

• 2026-03-06: Added PostgreSQL observability integration with postgres-exporter, app-side repository/query metrics, and API dashboard Postgres panels.

• 2026-04-15: Documented panel directory member dialog (two-column layout, tasks tab backed by shared listAllTasks + GET /operations/tasks/:id, no third-party 2FA for other users).

• 2026-04-16: Updated directory member dialog doc for design-aligned shell (header, disabled primary tabs, reserved metadata blocks).

• 2026-04-16: Directory dialog tasks tab: two-column list + embedded task editor; useTasksModule({ moduleEnabled }) + useTaskDialog inline mode doc update.