tiennm99
7dc0bb556c
- imaging: downscale to 1280px before JPEG quality-stepping so real camera photos fit the 200KB cap (was quality-only → rejected typical photos) - billing: save_prescription/save_checkup_services refuse to modify a PAID invoice, so recorded payment can't diverge from the invoice total - staff: set_staff_role/remove_staff RPCs hold an advisory lock while enforcing the last-admin invariant — race-safe vs the prior check-then-act - imaging delete: remove the object at the row's stored path (DB lookup), not a client-supplied path - invoice PDF: filter deleted=false like every other checkup view - sign-in: skip rate limit when no client IP is resolvable instead of bucketing all requests under a shared "unknown" key - reminders: bound to a [today-30d, today+7d] window so stale overdue rows don't accumulate and bury upcoming ones
BSK (Rewrite)
An educational rewrite of the BSK All-in-One Clinic Management System into a modern web stack.
Original project: lds217/BSK-All-in-One-Clinic-Management-System by @lds217 — a Java/Swing desktop application with a Netty server and SQLite backend, built for small Vietnamese clinics.
This repository is a clean-room reimplementation for learning purposes. No source code is copied from the original; features and data shapes are reimplemented from the upstream README and observable behavior. See NOTICE for full attribution.
Status
Core system implemented (Phases 0–8). See PLAN.md for the architecture and phased roadmap.
Built: auth + RBAC (allowlist-gated admin bootstrap, rate limiting, audit log); master data (doctors, medicines, services, checkup templates, clinic settings, staff management); patients (VN geo lookup + accent-insensitive search); queue + checkup workflow with realtime; prescriptions + billing (server-authoritative VND totals, cashier mark-paid); imaging (webcam/file capture, ≤200 KB compression, signed URLs, barcode); reports (Vietnamese PDF invoice, Excel export, revenue dashboard); recheck reminders + nightly retention sweep.
First-run setup (operator)
After provisioning Supabase/Upstash/Vercel and pnpm db:push:
- Seed the admin allowlist before the first sign-in (or nobody can bootstrap admin):
INSERT INTO bsk.admin_allowlist (email) VALUES ('you@example.com'); - Seed Vietnamese geo data (province/ward address dropdowns):
pnpm db:seed-geo(seescripts/seed-geo.ts). - Enable Supabase Realtime on
bsk.checkups(Database → Replication) for the live queue. - Set
CRON_SECRETin Vercel so the nightly media-retention sweep (/api/cron/nightly, scheduled invercel.json) can authenticate.
See docs/supabase-shared-config.md for the shared-project rules and docs/design-guidelines.md for UI conventions.
Stack
- pnpm + Next.js 16 (App Router) + TypeScript
- Supabase (Postgres + Auth + Storage) — shared across personal projects via schema-per-app
- Upstash Redis + QStash — shared across personal projects via key prefixes
- Vercel for hosting
- shadcn/ui + Tailwind CSS
Important disclaimers
- Educational use only. This codebase is not certified for clinical use and must never be deployed against real patient data. Use synthetic data only.
- No HIPAA / GDPR compliance is implied or attempted on the free-tier infrastructure.
- This is a derivative work for learning; if you are the upstream author and would like additional attribution or removal, please open an issue.
Database
After pnpm db:push, run pnpm db:gen-types to refresh types/supabase-bsk.ts.
License
This repository is licensed under the Apache License 2.0. The original project does not currently carry an explicit license; see NOTICE for the attribution stance.