The review sheet rendered the full dictation at the top of the modal, unconditionally. A raw transcript can carry the patient's spoken name — the spec said so itself in §9, while §10 said telemetry must never contain it. The transcript no longer reaches the browser by any route: - removed from the success response (VoiceExtractionResponse is now plain ResolvedExtraction, which never had the field) - removed from the error body. VOICE_EXTRACT_FAILED carried details.transcript for a salvage dialog that was never built, and ApiError['details'] is an array, so the shape never even matched — it was serialized onto the wire and dropped - removed from the sheet, and from VoiceExtractionResult. tsc proves that <p> was the only reader in the whole frontend It is logged instead: one info line per recording, written immediately after the emptiness check so a failed extraction still records it, and deliberately outside logTelemetry so that method's patient-free guarantee stays literally true. Accepted consequence, recorded in §10: patient words now persist in production server logs at default level, so whatever retention and access control applies to those logs applies to dictation. The repo's other sensitive-text path (openrouter.provider.ts) uses debug level with truncation; moving this line to debug is a one-word change. Transcript salvage is dropped rather than deferred, which settles §11 open item 16 by taking its second option. When extraction fails the clinician re-dictates; an operator can read the words in the log, the person who spoke them cannot. Spec: §7, §9 and §10 rewritten, item 16 resolved, decisions 51-53 added, and decisions 10 and 25 marked superseded so the log stops contradicting itself. No automated coverage for the response shape or the log line: there is no voice.service.spec.ts — the service is I/O orchestration and has never been unit tested. Removing the type field is what proves no reader survives. Gates: backend 216 tests, nest build, ESLint clean on the voice module; frontend tsc --noEmit clean, 52 Vitest tests, next build clean. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Dyolink — Backend (NestJS)
Prerequisites
- Node.js 20+ and npm
- PostgreSQL reachable from your machine — either installed locally or run via Docker (see below)
First-time setup
-
Clone the monorepo and go to the backend app:
git clone <repository-url> dyolink cd dyolink/backend -
Install dependencies
npm install -
Environment
Copy
.env.exampleto.envand set at least:DATABASE_URL— PostgreSQL connection string for your dev databaseJWT_SECRET— strong secret for signing tokens
Do not commit.env.
-
Database for local dev
Option A — Postgres in Docker (no local install, e.g. Mac)
Frombackend/, with.envpresent (copy from.env.examplefirst):- Ensure
DATABASE_URLuseslocalhostas the host (notpostgres). Match user, password, and DB name toPOSTGRES_USER,POSTGRES_PASSWORD, andPOSTGRES_DBin the same file.
docker compose -f docker-compose.postgres.yml up -dWait until Postgres is healthy (
docker compose -f docker-compose.postgres.yml ps). The container creates the database on first start.To stop Postgres (data is kept in the named volume):
docker compose -f docker-compose.postgres.yml downOption B — Postgres installed on the machine
Create an empty database, then pointDATABASE_URLat it. - Ensure
-
Generate Prisma Client
npm run prisma:generate -
Apply migrations (creates/updates tables to match
prisma/schema.prisma)npm run prisma:migrateThis runs
prisma migrate dev. Use it during development when the schema changes. -
Seed (optional — reference data only)
npm run prisma:seedThis does not wipe your database. It only upserts lookup data: organization types (
CLINIC,LAB), subscription plans, and tab permissions. Existing users, organizations, memberships, patients, appointments, and links are left unchanged.To start from an empty database with fresh tables and reference data, see Reset database (clean slate) below.
Reset database (clean slate)
Use this when you want to delete all application data (users, organizations, patients, sessions, etc.) and rebuild the schema from migrations, then run the seed.
From backend/:
npx prisma migrate reset
Prisma will prompt for confirmation, drop the database, re-apply all migrations, and run prisma/seed.ts automatically.
What gets removed: everything in the database, including organizations and all related rows.
What the seed adds back: only reference data (types, plans, permissions) — not demo users or organizations. Register again or use your own test data after a reset.
Docker Postgres dev: if you also want to wipe the Docker volume (not only tables), stop the container and remove the volume:
docker compose -f docker-compose.postgres.yml down -v
docker compose -f docker-compose.postgres.yml up -d
npm run prisma:migrate
npm run prisma:seed
Do not run migrate reset against production or shared staging databases.
Run (development)
npm run start:dev
API listens on http://localhost:3000 by default (PORT in .env).
If the frontend runs on another origin (e.g. http://localhost:3001), set FRONTEND_URL in .env to that URL (CORS and invite links use it).
After pulling latest main
git pull
npm install
npm run prisma:generate
npm run prisma:migrate
If teammates added migrations, the migrate step above applies them. Resolve migration conflicts locally before pushing.
Useful commands
| Command | Purpose |
|---|---|
npm run prisma:generate |
Regenerate client after schema.prisma changes |
npm run prisma:migrate |
Dev migrations (migrate dev) |
npm run prisma:deploy |
Production-style apply (migrate deploy) — e.g. CI/containers |
npm run prisma:seed |
Upsert reference data only (does not clear existing rows) |
npx prisma migrate reset |
Drop DB, re-migrate, run seed — dev clean slate |
npm run build |
Compile Nest app |
npm run start:prod |
Run compiled app (node dist/main) |
Docker
| File | Purpose |
|---|---|
Dockerfile |
Production API image |
docker-compose.postgres.yml |
Local dev Postgres only (port mapped to host) |
For full-stack deployment and CI, see the repository root README.md.