Make the project's documentation match the code and remove the sprawl. The docs
claimed Phase 2.8 (drug interactions) was 'planning/0%' and the backend '~91%
complete' — both wrong: 2.8 is implemented and live, plus the P0/P1 security
and test work is done. Five root CI/CD docs described a 'docker-build' CI job
that was removed; ~18 backend/ status snapshots and ~24 docs/implementation
duplicates cluttered the tree.
Deletions (85 files):
- Root: 4 stale CI/CD reports (CI-CD-{COMPLETION-REPORT,IMPLEMENTATION-SUMMARY,
STATUS-REPORT,FINAL-STATUS}.md) — all describe the removed docker-build job.
- backend/: 18 phase/build/fix snapshots and code-dump .txt files.
- docs/: the 3 one-time reorg reports; ~17 docs/implementation duplicates and
process artifacts; 4 stale docs/development CI docs + git snapshots;
redundant deployment/testing files.
- thoughts/: STATUS.md (said Phase 2.4 in-progress), superseded phase notes and
duplicative research inputs. tmp/ (928KB of CI debug logs, gitignored).
Moves (18 files):
- 9 genuine decision records -> docs/adr/ (Architecture Decision Records),
date-prefixes stripped, with an index README.
- 8 historical-but-valuable phase plans/specs + the old CI-CD-FINAL-SOLUTION ->
docs/archive/ (now-populated, with a README explaining it's superseded
material). thoughts/ tree removed.
Rewrites (13 files) to match reality:
- Drop the fake '% complete' figures everywhere in favor of Implemented /
In-Progress / Planned with concrete endpoint/feature lists.
- Phase 2.8 -> Implemented; add /api/interactions/* and /api/auth/{refresh,
logout} to the endpoint lists; fix 'Rust 1.93' -> edition 2021.
- Add a Security section (token_version validation, hashed refresh-token
persistence, fail-fast config, real-IP audit) and correct the test-coverage
and deployment claims to reality.
- New canonical docs/development/CI-CD.md (4 jobs: format/clippy/build/test,
mongo service, no docker-build + why).
- README, docs/README, product/{STATUS,ROADMAP,PROGRESS,README,introduction},
implementation/README, development/README, testing/README, AI_AGENT_GUIDE,
.cursorrules, .gooserules all updated.
Verified: greps for 'Phase 2.8 (Planning)', 'PLANNING (0%)', 'Rust 1.93',
'91%/10%/85% complete', and 'docker-build' return nothing outside docs/archive;
all internal doc links resolve; backend/src untouched (cargo build clean).
7.5 KiB
Normogen Development Roadmap
Phase 1: Foundation ✅ COMPLETE
Timeline: 2025-Q4
Status: 100% Complete
Completed Features
- ✅ User authentication (JWT)
- ✅ Basic profiles
- ✅ Database setup (MongoDB 7.0)
- ✅ Security infrastructure
- ✅ Docker deployment
- ✅ CI/CD pipeline
Phase 2: Core Backend Development ✅ IMPLEMENTED
Phase 2.1-2.5 ✅ IMPLEMENTED
Timeline: 2025-Q4 to 2026-02-15
Completed Features
- ✅ User management
- ✅ Profile management
- ✅ Basic security (JWT, PBKDF2)
- ✅ Session management
- ✅ Permission-based access control
- ✅ Share management system
- ✅ Password recovery (zero-knowledge phrases)
Phase 2.6 ✅ IMPLEMENTED
Timeline: Completed 2026-02-20
Completed Features
- ✅ Enhanced security
- ✅ Audit logging
- ✅ Session management (list, revoke)
- ✅ Account lockout policies
Still Open
- 📋 Rate limiting (middleware is a stub — deferred)
Phase 2.7 ✅ IMPLEMENTED
Timeline: Started 2026-02-20, Completed 2026-03-08
Completed Features ✅
- ✅ Medication management (CRUD operations)
- ✅ Medication adherence tracking
- ✅ Health statistics tracking (weight, BP, etc.)
- ✅ Lab results storage
- ✅ OpenFDA integration for drug data
Phase 2.8 ✅ IMPLEMENTED (core)
Timeline: Drug interaction checking implemented.
Implemented ✅
- ✅ Drug interaction checking -
/api/interactions/check+/check-new, ingredient mapper, interaction service
Not Yet Started (stretch)
- 🔔 Automated reminder system - Medication and appointment reminders
- 📊 Advanced health analytics - Trend analysis and insights
- 📄 Healthcare data export - Export to FHIR, HL7 formats
- 💊 Medication refill tracking - Track supply and refill reminders
- ⚙️ User preferences - Notification settings, display preferences
- 👥 Caregiver access - Grant limited access to caregivers
P0/P1 Security + Tests ✅ IMPLEMENTED
- ✅ token_version validation, hashed refresh-token persistence,
/refresh+/logout - ✅ Fail-fast config (
APP_ENVIRONMENT), real client-IP audit logging - ✅ Handler
.unwrap()cleanup; integration tests rewritten against a test DB
Phase 3: Frontend Development 🔮 PLANNED
Phase 3.1: Frontend Foundation 🔮 PLANNED
Timeline: Q2 2026 (estimated)
Planned Features
- 🔮 Complete React app setup
- 🔮 Authentication flow (login, register, logout)
- 🔮 Protected routes
- 🔮 API service layer (axios)
- 🔮 State management (Zustand)
- 🔮 Basic UI components (Material-UI)
Status: 10% complete - Basic structure exists
Phase 3.2: Core Features 🔮 PLANNED
Timeline: Q2 2026 (estimated)
Planned Features
- 🔮 Dashboard with health overview
- 🔮 Medication management UI (add, edit, delete)
- 🔮 Health statistics visualization (charts, graphs)
- 🔮 Lab results viewer
- 🔮 Profile and settings pages
- 🔮 Data export functionality
Phase 3.3: Advanced Features 🔮 PLANNED
Timeline: Q3 2026 (estimated)
Planned Features
- 🔮 Medication reminders UI
- 🔮 Notification center
- 🔮 Caregiver access management
- 🔮 Data sharing interface
- 🔮 Advanced analytics dashboard
Phase 4: Advanced Features (Future) 🔮
Phase 4.1: Mobile Optimization 🔮 FUTURE
Timeline: Q4 2026 (estimated)
Planned Features
- 🔮 Mobile app backend optimization
- 🔮 Push notification system
- 🔮 Offline sync
- 🔮 Biometric authentication (fingerprint, face ID)
Phase 4.2: Integration 🔮 FUTURE
Timeline: 2027 (estimated)
Planned Features
- 🔮 Wearable device integration (Apple Health, Google Fit)
- 🔮 EHR system integration (Epic, Cerner)
- 🔮 Pharmacy APIs (pill identification, refill alerts)
- 🔮 Telehealth integration
- 🔮 Lab result import (direct from labs)
Phase 4.3: AI/ML Features 🔮 FUTURE
Timeline: 2027 (estimated)
Planned Features
- 🔮 Symptom prediction (based on trends)
- 🔮 Medication optimization (timing, interactions)
- 🔮 Health risk scoring
- 🔮 Personalized recommendations
- 🔮 Anomaly detection (unusual health patterns)
Phase 4.4: Enterprise Features 🔮 FUTURE
Timeline: 2027+ (estimated)
Planned Features
- 🔮 Multi-tenant support (for healthcare providers)
- 🔮 Healthcare provider portal
- 🔮 Advanced analytics dashboard
- 🔮 Compliance tools (HIPAA, GDPR)
- 🔮 Audit reporting
- 🔮 Bulk data export/import
Phase 5: Scale & Polish (Future) 🔮
Phase 5.1: Performance 🔮 FUTURE
Timeline: 2027+ (estimated)
Planned Features
- 🔮 Caching layer (Redis)
- 🔮 Database optimization (indexing, sharding)
- 🔮 CDN integration (static assets)
- 🔮 Load balancing (multiple backend instances)
- 🔮 Database replication (high availability)
Phase 5.2: Internationalization 🔮 FUTURE
Timeline: 2027+ (estimated)
Planned Features
- 🔮 Multi-language support (i18n)
- 🔮 Regional medication databases
- 🔮 Currency and localization
- 🔮 Compliance by region (GDPR, HIPAA, etc.)
- 🔮 Time zone handling
Current Status
Backend: Phase 2.x feature-complete (through drug interactions); security-hardened; deployed on Solaria. Frontend: Early stage (Login/Register + API/store layer; router not yet wired). Database: MongoDB 7.0 Deployment: Docker on Solaria (image built manually — not in CI). Tests: 18 unit + 13 integration (auth + medication), CI-gated with MongoDB.
Technology Stack
Backend ✅
- Language: Rust (edition 2021)
- Framework: Axum 0.7 (async web framework)
- Database: MongoDB 7.0
- Authentication: JWT — access (default 15 min) + hashed/rotated refresh tokens (default 7 days, persisted in Mongo)
- Security: PBKDF2 (100K iterations);
token_versioninvalidation; account lockout; audit logging with real client-IP resolution - Deployment: Docker, Docker Compose (image built manually)
- CI/CD: Forgejo Actions (format / clippy / build / test)
Frontend 🚧
- Framework: React 19.2.4 + TypeScript 4.9.5 (Create React App)
- UI Library: Material-UI (MUI) 7.3.9
- State Management: Zustand 5.0.11
- HTTP Client: Axios 1.13.6
- Charts: Recharts 3.8.0, MUI X-Charts 8.27.4
- Status: Early — Login/Register + API/store layer; router not yet wired.
Estimated Timeline
| Phase | Start | End | Duration | Status |
|---|---|---|---|---|
| Phase 1 | 2025-Q4 | 2025-Q4 | 3 months | ✅ Implemented |
| Phase 2.1-2.5 | 2025-Q4 | 2026-02-15 | 3 months | ✅ Implemented |
| Phase 2.6 | 2026-02-15 | 2026-02-20 | 1 week | ✅ Implemented |
| Phase 2.7 | 2026-02-20 | 2026-03-08 | 2 weeks | ✅ Implemented |
| Phase 2.8 | 2026-03 | — | — | ✅ Implemented (core) |
| P0/P1 Security + Tests | 2026-06 | — | — | ✅ Implemented |
| Phase 3 | TBD | TBD | 3-4 months | 🚧 Next (frontend) |
| Phase 4 | TBD | TBD | 6-12 months | 🔮 Future |
Milestones
✅ Completed
- ✅ Foundation (2025-Q4)
- ✅ Core Features — Phases 2.1–2.5 (2026-02-15)
- ✅ Security Hardening — Phase 2.6 (2026-02-20)
- ✅ Health Data Features — Phase 2.7 (2026-03-08)
- ✅ Drug Interactions — Phase 2.8 core
- ✅ P0/P1 Security + Test rewrite
🚧 Up Next
- 🚧 Frontend (Phase 3)
🔮 Future
- 🔮 Phase 2.8 stretch (reminders, analytics, export, caregiver access)
- 🔮 Mobile Apps (Phase 4)
- 🔮 AI/ML Features (Phase 5)
Last Updated: 2026-06-27