Paidly — Invoice Generator

.
├─ .env.example               # documented env template (committed, placeholders only)
├─ .env.local                 # real local secrets — GITIGNORED, never commit
├─ .gitignore
├─ next.config.ts             # CSP + security headers, image remote patterns
├─ playwright.config.ts       # e2e config + test env
├─ prisma.config.ts           # Prisma 7 CLI config (DIRECT_URL for migrations)
├─ vercel.json                # cron schedules (recurring invoicing, dunning)
├─ package.json
│
├─ prisma/
│  ├─ schema.prisma           # full data model: users, orgs, invoices, billing,
│  │                          #   payments, dunning, webhooks, audit, flags, api keys
│  ├─ migrations/             # SQL migrations
│  └─ seed.ts                 # demo data + sign-in accounts
│
├─ src/
│  ├─ app/                    # Next.js App Router
│  │  ├─ (marketing)/         # landing, pricing, features, about, faq, help, blog, contact
│  │  ├─ (auth)/              # sign-in, sign-up, verify-email, forgot/reset-password
│  │  ├─ (legal)/             # terms, privacy, dpa, cookies, refunds, subprocessors, aup
│  │  ├─ dashboard/           # invoices, clients, payments, reports, billing,
│  │  │  │                     #   settings, api keys, organizations, notifications
│  │  ├─ admin/               # users, orgs, subscriptions, moderation, audit, contact,
│  │  │                       #   invoicing, settings
│  │  ├─ moderation/          # content flagging
│  │  ├─ pay/invoice/[token]/ # public client portal
│  │  ├─ invitations/[token]/ # org invitation acceptance
│  │  ├─ styleguide/          # hidden design-token/styleguide page
│  │  └─ api/
│  │     ├─ auth/[...nextauth]/
│  │     ├─ v1/{clients,invoices}/          # REST API (API keys)
│  │     ├─ webhooks/stripe/                # Stripe webhook handler
│  │     ├─ cron/{recurring,dunning}/       # scheduled jobs
│  │     ├─ notifications/                  # email-send endpoint
│  │     └─ health/
│  │
│  ├─ components/             # UI components, grouped by feature
│  │  ├─ ui/                  # primitives (button, input, dialog, …)
│  │  ├─ layout/  theme/  motion/
│  │  ├─ marketing/  auth/  billing/  invoices/  clients/
│  │  ├─ organizations/  notifications/  moderation/  legal/
│  │  ├─ admin/  api/  dashboard/
│  │  └─ route-error.tsx  route-loading.tsx  session-provider.tsx
│  │
│  ├─ lib/                    # server logic (domain engines + cross-cutting)
│  │  ├─ money.ts             # integer minor units, BigInt rounding
│  │  ├─ invoice-numbering*.ts # gap-free per-workspace sequences (row locks)
│  │  ├─ invoice-totals.ts  invoice-status.ts  invoice-payments*.ts
│  │  ├─ invoice-dunning*.ts  recurring*.ts  invoice-settings*.ts
│  │  ├─ client-portal*.ts    # token-gated pay pages
│  │  ├─ api-keys*.ts  webhooks*.ts  webhooks-shared.ts
│  │  ├─ billing.ts  checkout.ts  stripe.ts  stripe-webhook.ts  plans.ts
│  │  ├─ auth-client.ts  session.ts  dal.ts  permissions.ts  organizations.ts
│  │  ├─ moderation.ts  admin.ts  admin-invoicing*.ts  audit.ts
│  │  ├─ analytics*.ts  reports.ts  csv.ts  notifications*.ts  mail.ts
│  │  ├─ blog.ts  seo.ts  site.ts  consent.ts  storage.ts  theme.ts
│  │  ├─ env.ts  db.ts  logger.ts  rate-limit.ts  tokens.ts  utils.ts
│  │  └─ validations/        # Zod schemas grouped by domain (auth, invoice, org, …)
│  │
│  ├─ emails/                 # react-email templates
│  │  ├─ _components/         # shared email UI
│  │  └─ invoice, invoice-receipt, invoice-reminder, payment-failed,
│  │     subscription-receipt, verify-email, password-reset, notification,
│  │     organization-invitation, contact-*
│  │
│  ├─ hooks/                  # use-overlay, use-floating-position, …
│  ├─ types/                  # next-auth module augmentation
│  ├─ generated/prisma/       # Prisma client (generated — gitignored)
│  ├─ server-only-stub.ts     # local `server-only` shim for tooling
│  └─ proxy.ts  auth.ts       # Auth.js + proxy helpers
│
├─ tests/                     # Playwright suites + helpers (gitignored .auth)
│  ├─ global-setup.ts  global-teardown.ts  auth.setup.ts
│  ├─ helpers/                # db helper + shared constants
│  └─ e2e/                    # auth, invoicing, billing, organizations,
│                             #   admin-moderation, access-control, contact, smoke
├─ scripts/                   # tsx unit tests + dev tooling (screenshots, concurrency check)
├─ public/                    # static assets (svg placeholders; ./img lives alongside)
├─ screenshots/               # local captures (review before publishing)
└─ docs/                      # optional; see docs/build-log for design decisions