Consultoria AS
22543589c3
docs: add SaaS transformation implementation plan
...
28 tasks across 8 chunks:
- Chunk 1: Core infrastructure (DB-per-tenant, env, JWT, pools)
- Chunk 2: FIEL dual storage + encryption fix
- Chunk 3: Email service (Nodemailer + Gmail SMTP)
- Chunk 4: MercadoPago payments (subscriptions, webhooks)
- Chunk 5: Plan enforcement (limits, feature gates)
- Chunk 6: Tenant provisioning integration
- Chunk 7: Production deployment (PM2, Nginx, SSL, backups)
- Chunk 8: Frontend updates (subscription UI)
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-15 23:04:48 +00:00
Consultoria AS
536a5abd33
docs: fix remaining warnings in SaaS design spec (round 2)
...
- Fix metadata.json shown as unencrypted in tree (now .enc)
- Fix admin bypass order in checkPlanLimits (moved before status check)
- Add PM2 cross-worker cache invalidation via process messaging
- Fix fiel_credentials "no changes" contradiction with per-component IV
- Backup all tenant DBs regardless of active status
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-15 22:53:34 +00:00
Consultoria AS
3c9268ea30
docs: fix blockers and warnings in SaaS design spec
...
Fixes from spec review:
- BLOCKER: JWT payload migration (schemaName → databaseName)
- BLOCKER: FIEL encryption key separation from JWT_SECRET
- BLOCKER: PM2 cluster pool count (max:3 × 2 workers = 6/tenant)
- BLOCKER: Pending subscription grace period for new clients
- WARNING: Add indexes on subscriptions/payments tables
- WARNING: Fix Nginx rate limit zone definitions
- WARNING: Fix backup auth (.pgpass), retention, and schedule
- WARNING: Preserve admin X-View-Tenant impersonation
- WARNING: Encrypt metadata.json for NDA compliance
- SUGGESTION: Add health check, reduce upload limit, add rollback
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-15 22:50:38 +00:00
Consultoria AS
c44e7cea34
docs: add SaaS transformation design spec
...
Complete design document covering:
- Database-per-tenant architecture (NDA compliance)
- FIEL dual storage (filesystem + DB, encrypted)
- MercadoPago subscription payments
- Transactional emails via Gmail SMTP
- Production deployment (Nginx, PM2, SSL, backups)
- Plan enforcement and feature gating
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-15 22:46:12 +00:00
