feat: Implement Phase 2 cross-cutting services with email and notification enhancements

- Refactor email verification and password reset utilities to use new email service.
- Introduce email delivery queue and notification delivery model for better tracking.
- Enhance file validation and storage services for improved security and ownership management.
- Add cron job for cleaning inactive notifications with retention policy.
- Update document worker to handle document generation and storage more efficiently.
- Implement logging improvements in activity and log workers.
- Create comprehensive documentation for new API endpoints and services.
- Add unit tests for file validation and notification policies to ensure robustness.

app/routes/document.routes.js

@@ -1,94 +1,12 @@
-/**
- * Copyright (c) 2026 Niolla
- * All rights reserved.
- *
- * This source code is proprietary and confidential.
- * Unauthorized copying, modification, distribution, or use
- * of this file, via any medium, is strictly prohibited.
- */
-
-// app/routes/document.routes.js
-
-const express = require("express");
-const router = express.Router();
-const generateDocumentController = require("../controllers/generateDocument.controller");
-const {
-  authenticate,
-} = require("../middleware/auth.middleware");
-
-const { authorizedAccountType, checkPermission } = require("../middleware/permission.middleware");
-const PERMISSIONS = require("../constants/permissions");
-
-
-// Get available document types
-router.get(
-  "/types",
-  authenticate,
-  authorizedAccountType(["admin", "management", "team_head", "user"]),
-  generateDocumentController.getAvailableDocumentTypes
-);
-
-// Get saved documents
-router.post(
-  "/saved",
-  authenticate,
-  authorizedAccountType(["admin", "management", "team_head", "user"]),
-  generateDocumentController.getSavedDocuments
-);
-
-// Generate Document (async - returns jobId immediately)
-router.post(
-  "/generate",
-  authenticate,
-  authorizedAccountType(["admin", "management", "team_head", "user"]),
-  generateDocumentController.generateDocument
-);
-
-router.post(
-  "/draft",
-  authenticate,
-  authorizedAccountType(["admin", "management", "team_head", "user"]),
-  generateDocumentController.generateDraftDocument
-);
-
-// Generate Reference Number
-router.get(
-  "/reference-number/:documentType",
-  authenticate,
-  authorizedAccountType(["admin", "management", "team_head", "user"]),
-  generateDocumentController.generateReferenceNo
-);
-
-// Get Job Status
-router.get(
-  "/job/:jobId/status",
-  authenticate,
-  authorizedAccountType(["admin", "management", "team_head", "user"]),
-  generateDocumentController.getJobStatus
-);
-
-// Download Document
-router.get(
-  "/download/:uuid",
-  authenticate,
-  authorizedAccountType(["admin", "management", "team_head", "user"]),
-  generateDocumentController.downloadDocument
-);
-
-// Cancel Job
-router.delete(
-  "/job/:jobId",
-  authenticate,
-  authorizedAccountType(["admin", "management", "team_head", "user"]),
-  generateDocumentController.cancelJob
-);
-
-// Get document details
-router.get(
-  "/:docId",
-  authenticate,
-  authorizedAccountType(["admin", "management", "team_head", "user"]),
-  generateDocumentController.getDocumentData
-);
-
-module.exports = router;
+const router = require("express").Router();
+const c = require("../controllers/generateDocument.controller");
+const { authenticate } = require("../middleware/auth.middleware");
+router.use(authenticate);
+router.get("/types", c.getAvailableDocumentTypes);
+router.get("/saved", c.getSavedDocuments); router.post("/saved", c.getSavedDocuments);
+router.post("/generate", c.generateDocument); router.post("/draft", c.generateDraftDocument);
+router.get("/reference-number/:documentType", c.generateReferenceNo);
+router.get("/jobs/:jobId", c.getJobStatus); router.get("/job/:jobId/status", c.getJobStatus);
+router.get("/:docId/download", c.downloadDocument); router.get("/download/:docId", c.downloadDocument);
+router.delete("/job/:jobId", c.cancelJob); router.get("/:docId", c.getDocumentData);
+module.exports = router;