# `enterprise-modules/` — Business-grade reusable modules

Materialized in Phase 6.

Each module is wireable into both NestJS hosts and the .NET API via lightweight DI adapters. Modules are versioned independently and may be extracted into separate repos once they stabilize.

| Module             | Provides                                           |
| ------------------ | -------------------------------------------------- |
| `auth/`            | Login, refresh, password reset, MFA scaffolding    |
| `rbac/`            | Role/permission model + policy evaluation          |
| `audit/`           | Append-only audit log + query API                  |
| `notifications/`   | Email/SMS/Push/Channel abstraction                 |
| `file-storage/`    | S3-compatible upload, signed URLs, virus scan hook |
| `payment/`         | (Optional) Payment gateway adapter                 |
| `workflow-engine/` | (Optional) State-machine + approvals               |
| `reporting/`       | (Optional) Report builder + scheduled exports      |

## Rules

- A module has a public DI surface (`module.ts` / `Module.cs`) and an internal implementation folder.
- Modules MAY depend on `packages/`. Modules MUST NOT depend on `apps/` or on other modules' internals.
