Document capabilities
| Document | Access pattern |
|---|---|
| Invoice PDF | Staff and customer access through private generated artifact controls. |
| Estimate PDF | Staff and customer-safe estimate document controls where identifiers are available. |
| Inspection PDF | Staff controls plus customer state/download from service detail for the latest submitted inspection. |
| Service-history PDF | Staff and customer-safe service history document controls. |
| PDF templates and logos | Tenant Admin controls for document presentation. |
Customers do not generate inspection reports. Service detail shows the customer-safe state of the latest submitted inspection report and offers Download only for a current available artifact. A document-state failure stays inside the document panel and does not remove service progress or visit details. Current vehicle ownership and artifact binding are rechecked before every download link.
Tenant Admins manage all four official layouts under Settings > Document templates. Choose Invoice, Estimate, Inspection report, or Service history from the verified catalog; configure the A4 margin, print colors, font, labels, supported blocks and order, content columns, safe text, and an available tenant mark. Only the variables displayed for the selected document are accepted. Raw HTML, CSS, URLs, duplicate blocks, unsupported variables, and unavailable logo assets are rejected.
The preview uses synthetic server-generated content and does not load, generate, or download a live customer document. Choose Preview current edits before saving to inspect the same layout renderer used for issued documents. Use Download sample PDF if your browser cannot display it. Move up/down changes block order without manually numbering sections. Save a draft for review. Publish official version creates a new immutable version used for future server-rendered documents; it does not rewrite or expose existing PDFs. Refresh before retrying a stale draft or logo selection. Template-record IDs, signed logo links, processing evidence, private artifacts, backend messages, and request IDs are not shown.
In the Ignition repair-order workspace, current estimate actions are grouped under Work & estimates, invoice and delivery work under Billing & handoff, and estimate/service-history PDF state under Documents. A failed or unavailable document state uses safe recovery copy; raw provider diagnostics and artifact failure evidence are not shown to staff.
Generated PDFs are rendered, stored, and marked available before background verification is dispatched. A queue outage therefore cannot turn a durable document into a false failure. Rendering, private storage, or database-finalization failures keep a sanitized failed state that can be retried; customers and staff should use the authorized on-screen document until a fresh private PDF is ready. Uploaded documents and inspection media stay unavailable to customers while quarantined and are excluded from generated PDFs until approved. The worker verifies that the exact requested version remains durably available with the expected private object metadata; an unavailable or mismatched record fails instead of reporting generation success.