System Module Architecture
10 Core Modules with Business Entity Mapping
Authentication & Accounts
Auth, sessions, OAuth
Core Capabilities:
Secure Sign-In
Session Lifecycles
OAuth Integrations
Email Verification
Organization & Membership
Teams, roles, invitations
Core Capabilities:
Tenant Scoping
Role Permissions
Team Invitations
Notifications & Preferences
User notifications
Core Capabilities:
User Alerts
Reminder Rules
Preferences Dashboard
Ownership Transfer
Organization ownership
Core Capabilities:
Secure Delegation
Transfer Keys
Approval Logs
Security & Audit
Audit logs, tracking
Core Capabilities:
Activity Monitoring
IP & Device Logs
Compliance Auditing
Client Management
Client records
Core Capabilities:
Client Profiles
Contact Details
Engagement Tracking
Tender Management
Dynamic statuses (open, closed, evaluation, awarded, lost) & auto-project creation
Core Capabilities:
Bid Trackers
Timeline Extensions
Automatic Closing Date Statuses
Project Management
Auto-created projects, details editor, purchase orders
Core Capabilities:
Auto-created Projects
Timeline Editors
Purchase Orders
Support & Feedback
User support & feedback
Core Capabilities:
Support Ticketing
User Feedback Channels
Administrative Tools
Document Management
Centralized file storage
Core Capabilities:
Presigned Secure Access
Cloudflare R2 Isolation
Centralized Spec Storage
Module Relationships
Core Relationships:
Auth → Organization (Users belong to orgs)
Organization → All Business Modules (Org-scoped data)
Client → Tender (Clients have tenders)
Tender → Project (Tenders become projects)
Project → Purchase Orders (Projects have POs)
Cross-cutting Concerns:
Notifications monitors all modules
Security & Audit logs all actions
Ownership Transfer manages org transitions
Documents linked to Tender, Project, PO, & Extensions
Implementation Notes
- ✓Soft Deletion: Client, Tender, Project, Purchase Order, Follow-up support soft deletion
- ✓Multi-tenancy: All business data is organization-scoped
- ✓Role-based Access: Owner, Admin, Manager, Member roles supported
- ✓Audit Trail: Security audit log tracks all sensitive operations
- ✓Session Management: Comprehensive session tracking with suspicious activity detection
- ✓Tendering Pipeline: Automated closing-date checks, evaluation lockdowns, and instant project auto-generation upon bid award