Files
dyolink/backend
Amin Mousavi 10408058c4 feat(voice): keep the transcript on the server
The review sheet rendered the full dictation at the top of the modal,
unconditionally. A raw transcript can carry the patient's spoken name — the
spec said so itself in §9, while §10 said telemetry must never contain it.

The transcript no longer reaches the browser by any route:

- removed from the success response (VoiceExtractionResponse is now plain
  ResolvedExtraction, which never had the field)
- removed from the error body. VOICE_EXTRACT_FAILED carried
  details.transcript for a salvage dialog that was never built, and
  ApiError['details'] is an array, so the shape never even matched — it was
  serialized onto the wire and dropped
- removed from the sheet, and from VoiceExtractionResult. tsc proves that
  <p> was the only reader in the whole frontend

It is logged instead: one info line per recording, written immediately after
the emptiness check so a failed extraction still records it, and deliberately
outside logTelemetry so that method's patient-free guarantee stays literally
true.

Accepted consequence, recorded in §10: patient words now persist in
production server logs at default level, so whatever retention and access
control applies to those logs applies to dictation. The repo's other
sensitive-text path (openrouter.provider.ts) uses debug level with
truncation; moving this line to debug is a one-word change.

Transcript salvage is dropped rather than deferred, which settles §11 open
item 16 by taking its second option. When extraction fails the clinician
re-dictates; an operator can read the words in the log, the person who spoke
them cannot.

Spec: §7, §9 and §10 rewritten, item 16 resolved, decisions 51-53 added, and
decisions 10 and 25 marked superseded so the log stops contradicting itself.

No automated coverage for the response shape or the log line: there is no
voice.service.spec.ts — the service is I/O orchestration and has never been
unit tested. Removing the type field is what proves no reader survives.

Gates: backend 216 tests, nest build, ESLint clean on the voice module;
frontend tsc --noEmit clean, 52 Vitest tests, next build clean.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-09-10 17:39:27 +08:00
..

Dyolink — Backend (NestJS)

Prerequisites

  • Node.js 20+ and npm
  • PostgreSQL reachable from your machine — either installed locally or run via Docker (see below)

First-time setup

  1. Clone the monorepo and go to the backend app:

    git clone <repository-url> dyolink
    cd dyolink/backend
    
  2. Install dependencies

    npm install
    
  3. Environment

    Copy .env.example to .env and set at least:

    • DATABASE_URL — PostgreSQL connection string for your dev database
    • JWT_SECRET — strong secret for signing tokens
      Do not commit .env.
  4. Database for local dev

    Option A — Postgres in Docker (no local install, e.g. Mac)
    From backend/, with .env present (copy from .env.example first):

    • Ensure DATABASE_URL uses localhost as the host (not postgres). Match user, password, and DB name to POSTGRES_USER, POSTGRES_PASSWORD, and POSTGRES_DB in the same file.
    docker compose -f docker-compose.postgres.yml up -d
    

    Wait until Postgres is healthy (docker compose -f docker-compose.postgres.yml ps). The container creates the database on first start.

    To stop Postgres (data is kept in the named volume): docker compose -f docker-compose.postgres.yml down

    Option B — Postgres installed on the machine
    Create an empty database, then point DATABASE_URL at it.

  5. Generate Prisma Client

    npm run prisma:generate
    
  6. Apply migrations (creates/updates tables to match prisma/schema.prisma)

    npm run prisma:migrate
    

    This runs prisma migrate dev. Use it during development when the schema changes.

  7. Seed (optional — reference data only)

    npm run prisma:seed
    

    This does not wipe your database. It only upserts lookup data: organization types (CLINIC, LAB), subscription plans, and tab permissions. Existing users, organizations, memberships, patients, appointments, and links are left unchanged.

    To start from an empty database with fresh tables and reference data, see Reset database (clean slate) below.

Reset database (clean slate)

Use this when you want to delete all application data (users, organizations, patients, sessions, etc.) and rebuild the schema from migrations, then run the seed.

From backend/:

npx prisma migrate reset

Prisma will prompt for confirmation, drop the database, re-apply all migrations, and run prisma/seed.ts automatically.

What gets removed: everything in the database, including organizations and all related rows.

What the seed adds back: only reference data (types, plans, permissions) — not demo users or organizations. Register again or use your own test data after a reset.

Docker Postgres dev: if you also want to wipe the Docker volume (not only tables), stop the container and remove the volume:

docker compose -f docker-compose.postgres.yml down -v
docker compose -f docker-compose.postgres.yml up -d
npm run prisma:migrate
npm run prisma:seed

Do not run migrate reset against production or shared staging databases.

Run (development)

npm run start:dev

API listens on http://localhost:3000 by default (PORT in .env).

If the frontend runs on another origin (e.g. http://localhost:3001), set FRONTEND_URL in .env to that URL (CORS and invite links use it).

After pulling latest main

git pull
npm install
npm run prisma:generate
npm run prisma:migrate

If teammates added migrations, the migrate step above applies them. Resolve migration conflicts locally before pushing.

Useful commands

Command Purpose
npm run prisma:generate Regenerate client after schema.prisma changes
npm run prisma:migrate Dev migrations (migrate dev)
npm run prisma:deploy Production-style apply (migrate deploy) — e.g. CI/containers
npm run prisma:seed Upsert reference data only (does not clear existing rows)
npx prisma migrate reset Drop DB, re-migrate, run seed — dev clean slate
npm run build Compile Nest app
npm run start:prod Run compiled app (node dist/main)

Docker

File Purpose
Dockerfile Production API image
docker-compose.postgres.yml Local dev Postgres only (port mapped to host)

For full-stack deployment and CI, see the repository root README.md.