17efc4f656
Make the project's documentation match the code and remove the sprawl. The docs
claimed Phase 2.8 (drug interactions) was 'planning/0%' and the backend '~91%
complete' — both wrong: 2.8 is implemented and live, plus the P0/P1 security
and test work is done. Five root CI/CD docs described a 'docker-build' CI job
that was removed; ~18 backend/ status snapshots and ~24 docs/implementation
duplicates cluttered the tree.
Deletions (85 files):
- Root: 4 stale CI/CD reports (CI-CD-{COMPLETION-REPORT,IMPLEMENTATION-SUMMARY,
STATUS-REPORT,FINAL-STATUS}.md) — all describe the removed docker-build job.
- backend/: 18 phase/build/fix snapshots and code-dump .txt files.
- docs/: the 3 one-time reorg reports; ~17 docs/implementation duplicates and
process artifacts; 4 stale docs/development CI docs + git snapshots;
redundant deployment/testing files.
- thoughts/: STATUS.md (said Phase 2.4 in-progress), superseded phase notes and
duplicative research inputs. tmp/ (928KB of CI debug logs, gitignored).
Moves (18 files):
- 9 genuine decision records -> docs/adr/ (Architecture Decision Records),
date-prefixes stripped, with an index README.
- 8 historical-but-valuable phase plans/specs + the old CI-CD-FINAL-SOLUTION ->
docs/archive/ (now-populated, with a README explaining it's superseded
material). thoughts/ tree removed.
Rewrites (13 files) to match reality:
- Drop the fake '% complete' figures everywhere in favor of Implemented /
In-Progress / Planned with concrete endpoint/feature lists.
- Phase 2.8 -> Implemented; add /api/interactions/* and /api/auth/{refresh,
logout} to the endpoint lists; fix 'Rust 1.93' -> edition 2021.
- Add a Security section (token_version validation, hashed refresh-token
persistence, fail-fast config, real-IP audit) and correct the test-coverage
and deployment claims to reality.
- New canonical docs/development/CI-CD.md (4 jobs: format/clippy/build/test,
mongo service, no docker-build + why).
- README, docs/README, product/{STATUS,ROADMAP,PROGRESS,README,introduction},
implementation/README, development/README, testing/README, AI_AGENT_GUIDE,
.cursorrules, .gooserules all updated.
Verified: greps for 'Phase 2.8 (Planning)', 'PLANNING (0%)', 'Rust 1.93',
'91%/10%/85% complete', and 'docker-build' return nothing outside docs/archive;
all internal doc links resolve; backend/src untouched (cargo build clean).
266 lines
7.5 KiB
Markdown
266 lines
7.5 KiB
Markdown
# Normogen Development Roadmap
|
||
|
||
## Phase 1: Foundation ✅ COMPLETE
|
||
**Timeline**: 2025-Q4
|
||
**Status**: 100% Complete
|
||
|
||
### Completed Features
|
||
- ✅ User authentication (JWT)
|
||
- ✅ Basic profiles
|
||
- ✅ Database setup (MongoDB 7.0)
|
||
- ✅ Security infrastructure
|
||
- ✅ Docker deployment
|
||
- ✅ CI/CD pipeline
|
||
|
||
---
|
||
|
||
## Phase 2: Core Backend Development ✅ IMPLEMENTED
|
||
|
||
### Phase 2.1-2.5 ✅ IMPLEMENTED
|
||
**Timeline**: 2025-Q4 to 2026-02-15
|
||
|
||
#### Completed Features
|
||
- ✅ User management
|
||
- ✅ Profile management
|
||
- ✅ Basic security (JWT, PBKDF2)
|
||
- ✅ Session management
|
||
- ✅ Permission-based access control
|
||
- ✅ Share management system
|
||
- ✅ Password recovery (zero-knowledge phrases)
|
||
|
||
---
|
||
|
||
### Phase 2.6 ✅ IMPLEMENTED
|
||
**Timeline**: Completed 2026-02-20
|
||
|
||
#### Completed Features
|
||
- ✅ Enhanced security
|
||
- ✅ Audit logging
|
||
- ✅ Session management (list, revoke)
|
||
- ✅ Account lockout policies
|
||
|
||
#### Still Open
|
||
- 📋 Rate limiting (middleware is a stub — deferred)
|
||
|
||
---
|
||
|
||
### Phase 2.7 ✅ IMPLEMENTED
|
||
**Timeline**: Started 2026-02-20, Completed 2026-03-08
|
||
|
||
#### Completed Features ✅
|
||
- ✅ Medication management (CRUD operations)
|
||
- ✅ Medication adherence tracking
|
||
- ✅ Health statistics tracking (weight, BP, etc.)
|
||
- ✅ Lab results storage
|
||
- ✅ OpenFDA integration for drug data
|
||
|
||
---
|
||
|
||
### Phase 2.8 ✅ IMPLEMENTED (core)
|
||
**Timeline**: Drug interaction checking implemented.
|
||
|
||
#### Implemented ✅
|
||
- ✅ **Drug interaction checking** - `/api/interactions/check` + `/check-new`, ingredient mapper, interaction service
|
||
|
||
#### Not Yet Started (stretch)
|
||
- 🔔 **Automated reminder system** - Medication and appointment reminders
|
||
- 📊 **Advanced health analytics** - Trend analysis and insights
|
||
- 📄 **Healthcare data export** - Export to FHIR, HL7 formats
|
||
- 💊 **Medication refill tracking** - Track supply and refill reminders
|
||
- ⚙️ **User preferences** - Notification settings, display preferences
|
||
- 👥 **Caregiver access** - Grant limited access to caregivers
|
||
|
||
---
|
||
|
||
### P0/P1 Security + Tests ✅ IMPLEMENTED
|
||
- ✅ token_version validation, hashed refresh-token persistence, `/refresh` + `/logout`
|
||
- ✅ Fail-fast config (`APP_ENVIRONMENT`), real client-IP audit logging
|
||
- ✅ Handler `.unwrap()` cleanup; integration tests rewritten against a test DB
|
||
|
||
---
|
||
|
||
## Phase 3: Frontend Development 🔮 PLANNED
|
||
|
||
### Phase 3.1: Frontend Foundation 🔮 PLANNED
|
||
**Timeline**: Q2 2026 (estimated)
|
||
|
||
#### Planned Features
|
||
- 🔮 Complete React app setup
|
||
- 🔮 Authentication flow (login, register, logout)
|
||
- 🔮 Protected routes
|
||
- 🔮 API service layer (axios)
|
||
- 🔮 State management (Zustand)
|
||
- 🔮 Basic UI components (Material-UI)
|
||
|
||
**Status**: 10% complete - Basic structure exists
|
||
|
||
---
|
||
|
||
### Phase 3.2: Core Features 🔮 PLANNED
|
||
**Timeline**: Q2 2026 (estimated)
|
||
|
||
#### Planned Features
|
||
- 🔮 Dashboard with health overview
|
||
- 🔮 Medication management UI (add, edit, delete)
|
||
- 🔮 Health statistics visualization (charts, graphs)
|
||
- 🔮 Lab results viewer
|
||
- 🔮 Profile and settings pages
|
||
- 🔮 Data export functionality
|
||
|
||
---
|
||
|
||
### Phase 3.3: Advanced Features 🔮 PLANNED
|
||
**Timeline**: Q3 2026 (estimated)
|
||
|
||
#### Planned Features
|
||
- 🔮 Medication reminders UI
|
||
- 🔮 Notification center
|
||
- 🔮 Caregiver access management
|
||
- 🔮 Data sharing interface
|
||
- 🔮 Advanced analytics dashboard
|
||
|
||
---
|
||
|
||
## Phase 4: Advanced Features (Future) 🔮
|
||
|
||
### Phase 4.1: Mobile Optimization 🔮 FUTURE
|
||
**Timeline**: Q4 2026 (estimated)
|
||
|
||
#### Planned Features
|
||
- 🔮 Mobile app backend optimization
|
||
- 🔮 Push notification system
|
||
- 🔮 Offline sync
|
||
- 🔮 Biometric authentication (fingerprint, face ID)
|
||
|
||
---
|
||
|
||
### Phase 4.2: Integration 🔮 FUTURE
|
||
**Timeline**: 2027 (estimated)
|
||
|
||
#### Planned Features
|
||
- 🔮 Wearable device integration (Apple Health, Google Fit)
|
||
- 🔮 EHR system integration (Epic, Cerner)
|
||
- 🔮 Pharmacy APIs (pill identification, refill alerts)
|
||
- 🔮 Telehealth integration
|
||
- 🔮 Lab result import (direct from labs)
|
||
|
||
---
|
||
|
||
### Phase 4.3: AI/ML Features 🔮 FUTURE
|
||
**Timeline**: 2027 (estimated)
|
||
|
||
#### Planned Features
|
||
- 🔮 Symptom prediction (based on trends)
|
||
- 🔮 Medication optimization (timing, interactions)
|
||
- 🔮 Health risk scoring
|
||
- 🔮 Personalized recommendations
|
||
- 🔮 Anomaly detection (unusual health patterns)
|
||
|
||
---
|
||
|
||
### Phase 4.4: Enterprise Features 🔮 FUTURE
|
||
**Timeline**: 2027+ (estimated)
|
||
|
||
#### Planned Features
|
||
- 🔮 Multi-tenant support (for healthcare providers)
|
||
- 🔮 Healthcare provider portal
|
||
- 🔮 Advanced analytics dashboard
|
||
- 🔮 Compliance tools (HIPAA, GDPR)
|
||
- 🔮 Audit reporting
|
||
- 🔮 Bulk data export/import
|
||
|
||
---
|
||
|
||
## Phase 5: Scale & Polish (Future) 🔮
|
||
|
||
### Phase 5.1: Performance 🔮 FUTURE
|
||
**Timeline**: 2027+ (estimated)
|
||
|
||
#### Planned Features
|
||
- 🔮 Caching layer (Redis)
|
||
- 🔮 Database optimization (indexing, sharding)
|
||
- 🔮 CDN integration (static assets)
|
||
- 🔮 Load balancing (multiple backend instances)
|
||
- 🔮 Database replication (high availability)
|
||
|
||
---
|
||
|
||
### Phase 5.2: Internationalization 🔮 FUTURE
|
||
**Timeline**: 2027+ (estimated)
|
||
|
||
#### Planned Features
|
||
- 🔮 Multi-language support (i18n)
|
||
- 🔮 Regional medication databases
|
||
- 🔮 Currency and localization
|
||
- 🔮 Compliance by region (GDPR, HIPAA, etc.)
|
||
- 🔮 Time zone handling
|
||
|
||
---
|
||
|
||
## Current Status
|
||
|
||
**Backend**: Phase 2.x feature-complete (through drug interactions); security-hardened; deployed on Solaria.
|
||
**Frontend**: Early stage (Login/Register + API/store layer; router not yet wired).
|
||
**Database**: MongoDB 7.0
|
||
**Deployment**: Docker on Solaria (image built manually — not in CI).
|
||
**Tests**: 18 unit + 13 integration (auth + medication), CI-gated with MongoDB.
|
||
|
||
---
|
||
|
||
## Technology Stack
|
||
|
||
### Backend ✅
|
||
- **Language**: Rust (edition 2021)
|
||
- **Framework**: Axum 0.7 (async web framework)
|
||
- **Database**: MongoDB 7.0
|
||
- **Authentication**: JWT — access (default 15 min) + hashed/rotated refresh tokens (default 7 days, persisted in Mongo)
|
||
- **Security**: PBKDF2 (100K iterations); `token_version` invalidation; account lockout; audit logging with real client-IP resolution
|
||
- **Deployment**: Docker, Docker Compose (image built manually)
|
||
- **CI/CD**: Forgejo Actions (format / clippy / build / test)
|
||
|
||
### Frontend 🚧
|
||
- **Framework**: React 19.2.4 + TypeScript 4.9.5 (Create React App)
|
||
- **UI Library**: Material-UI (MUI) 7.3.9
|
||
- **State Management**: Zustand 5.0.11
|
||
- **HTTP Client**: Axios 1.13.6
|
||
- **Charts**: Recharts 3.8.0, MUI X-Charts 8.27.4
|
||
- **Status**: Early — Login/Register + API/store layer; router not yet wired.
|
||
|
||
---
|
||
|
||
## Estimated Timeline
|
||
|
||
| Phase | Start | End | Duration | Status |
|
||
|-------|-------|-----|----------|--------|
|
||
| Phase 1 | 2025-Q4 | 2025-Q4 | 3 months | ✅ Implemented |
|
||
| Phase 2.1-2.5 | 2025-Q4 | 2026-02-15 | 3 months | ✅ Implemented |
|
||
| Phase 2.6 | 2026-02-15 | 2026-02-20 | 1 week | ✅ Implemented |
|
||
| Phase 2.7 | 2026-02-20 | 2026-03-08 | 2 weeks | ✅ Implemented |
|
||
| Phase 2.8 | 2026-03 | — | — | ✅ Implemented (core) |
|
||
| P0/P1 Security + Tests | 2026-06 | — | — | ✅ Implemented |
|
||
| Phase 3 | TBD | TBD | 3-4 months | 🚧 Next (frontend) |
|
||
| Phase 4 | TBD | TBD | 6-12 months | 🔮 Future |
|
||
|
||
---
|
||
|
||
## Milestones
|
||
|
||
### ✅ Completed
|
||
- ✅ Foundation (2025-Q4)
|
||
- ✅ Core Features — Phases 2.1–2.5 (2026-02-15)
|
||
- ✅ Security Hardening — Phase 2.6 (2026-02-20)
|
||
- ✅ Health Data Features — Phase 2.7 (2026-03-08)
|
||
- ✅ Drug Interactions — Phase 2.8 core
|
||
- ✅ P0/P1 Security + Test rewrite
|
||
|
||
### 🚧 Up Next
|
||
- 🚧 Frontend (Phase 3)
|
||
|
||
### 🔮 Future
|
||
- 🔮 Phase 2.8 stretch (reminders, analytics, export, caregiver access)
|
||
- 🔮 Mobile Apps (Phase 4)
|
||
- 🔮 AI/ML Features (Phase 5)
|
||
|
||
---
|
||
|
||
*Last Updated: 2026-06-27*
|