feat: Implement Phase 2 cross-cutting services with email and notification enhancements

- Refactor email verification and password reset utilities to use new email service.
- Introduce email delivery queue and notification delivery model for better tracking.
- Enhance file validation and storage services for improved security and ownership management.
- Add cron job for cleaning inactive notifications with retention policy.
- Update document worker to handle document generation and storage more efficiently.
- Implement logging improvements in activity and log workers.
- Create comprehensive documentation for new API endpoints and services.
- Add unit tests for file validation and notification policies to ensure robustness.

app/middleware/docsSession.middleware.js

@@ -1,21 +1,6 @@
-/**
- * Copyright (c) 2026 Niolla
- * All rights reserved.
- *
- * This source code is proprietary and confidential.
- * Unauthorized copying, modification, distribution, or use
- * of this file, via any medium, is strictly prohibited.
- */
-
-// app/middleware/docsSession.middleware.js
-
-module.exports = (req, res, next) => {
-  if (req.cookies && req.cookies.docsAuth === "true") {
-    return next();
-  }
-
-  return res.status(401).json({
-    success: false,
-    message: "Unauthorized: Please login to access docs",
-  });
-};
+const { authenticate } = require("./auth.middleware");
+const { ACCOUNT_TYPES } = require("../constants/accountTypes");
+module.exports = (req, res, next) => authenticate(req, res, () => {
+  if ([ACCOUNT_TYPES.ADMIN, ACCOUNT_TYPES.SUPER_ADMIN].includes(req.user.accountType)) return next();
+  return res.status(403).json({ success: false, error: { code: "FORBIDDEN", message: "Administrative access required" } });
+});

app/middleware/upload.middleware.js

@@ -16,23 +16,12 @@ const storage = multer.memoryStorage();
 
 // File filter (only images + PDFs)
 const fileFilter = (req, file, cb) => {
-    const allowedTypes = [
-    "image/",
-    "application/pdf",
-    "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet", // .xlsx
-    "application/vnd.ms-excel" // .xls
-  ];
-
-  const isValid =
-    file.mimetype.startsWith("image/") ||
-    file.mimetype === "application/pdf" ||
-    file.mimetype === "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet" ||
-    file.mimetype === "application/vnd.ms-excel";
+  const isValid = ["image/jpeg", "image/png", "image/webp", "application/pdf", "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"].includes(file.mimetype);
 
   if (isValid) {
     cb(null, true);
   } else {
-    cb(new Error("Only images, PDFs, and Excel files are allowed"), false);
+    cb(new Error("Only JPEG, PNG, WebP, PDF, and XLSX files are allowed"), false);
   }
 };
 
@@ -41,7 +30,7 @@ const upload = multer({
   storage,
   fileFilter,
   limits: {
-    fileSize: 5 * 1024 * 1024, // max 5MB (global limit)
+    fileSize: Number(process.env.S3_MAX_UPLOAD_BYTES || 5 * 1024 * 1024),
   },
 });
 
@@ -61,4 +50,4 @@ module.exports = {
   uploadSingle,
   uploadMultiple,
   uploadFields,
-};
+};