Medoro
Smarter Pharmacy. Simpler Business. Pharmacy management for Indian medical stores and multi-branch chains: billing, batch inventory, expiry control, purchases, accounting, WhatsApp invoices and encrypted backups. The pharmacy's data stays on infrastructure the pharmacy controls.
Status: every screen in the design handoff (design/) is built. The app ships with no demo data: a fresh install opens the setup wizard, where you create your pharmacy, branches and owner account. Integrations that need outside accounts (WhatsApp Cloud API, Google Drive, SMS OTP, remote OCR, a local LLM) work once you add your own credentials in .env or in the app; until then the screens say they're not connected.
Stack
Next.js 15 (App Router) · React 19 · TypeScript strict · Tailwind 4 · Prisma 6 · PostgreSQL 16 · Zod · Vitest · lucide-react.
Run it locally
cp .env.example .env # set DATABASE_URL and SESSION_SECRET (32+ random chars); never commit .env
pnpm install
pnpm prisma migrate deploy # creates tables + append-only triggers
pnpm dev # http://localhost:3000 → setup wizard on first run
With Docker instead: bash scripts/lan-setup.sh && docker compose --profile https up -d --build (see docs/DEPLOYMENT.md).
Tests (unit + integration against a real PostgreSQL; uses TEST_DATABASE_URL, default medoro_test on localhost):
pnpm test
pnpm lint && pnpm typecheck
End-to-end (Playwright, e2e/): needs a production build, an empty migrated database and the server environment (SESSION_SECRET, HOST_KEY, OTP_PROVIDER=console, STAFF_BOOTSTRAP_EMAIL, …); see docs/TEST_PLAN.md.
pnpm prisma migrate reset --force && pnpm build
pnpm test:e2e # starts `next start` itself; add a file or -g filter to narrow
What works now
| Area | Notes |
|---|
| Website & legal | Marketing site at / (product, AI, data ownership, pricing, FAQ) and /legal (about, help, privacy, terms, refunds, cookies, DPDP, grievance). Legal text is a draft for lawyer review |
| First-run setup | Pharmacy (GSTIN/drug licence checks), owner account, where PostgreSQL runs (this server, shop LAN or hosted, checked against DATABASE_URL) with a connection test, branches & counters, team invite codes, backup recovery kit (key generated in the browser, sealed on the server; a printable kit page with the key as text and a QR code) |
| Sign-in | Email + password (Argon2id), TOTP two-step verification (required for owners/managers, "trust this PC" for 30 days), lockout after 5 failures. Mobile OTP when OTP_PROVIDER is set. Counter staff: pharmacy code + employee ID + PIN + counter |
| Live multi-device sync | A sale, stock receipt or voucher on one device shows up on every other open screen within about a second (Postgres NOTIFY → one listener per app server → server-sent events → screen refresh, keeping carts and forms). The header pill shows Live / Connecting / Offline |
| Install & offline billing | Installable app (manifest, icons, service worker) in Chrome/Edge or on Android. A manager turns on offline billing per counter in Sync & offline: the counter keeps the price list and a reserved share of each batch (split between offline counters, one share left for online ones). If the server can't be reached, Medoro opens offline billing: cash/UPI/card bills with provisional receipts, kept on the device. On reconnect they post automatically with their original time and a real invoice number; the server rechecks stock, prices and permissions, and anything that no longer fits becomes a conflict a manager posts from current stock or closes with a note. Needs HTTPS (browsers only run service workers on secure sites or localhost) |
Desktop app (desktop/) | Tauri app for Windows, macOS and Linux that opens your Medoro server in its own window (it stores only the server address). Installers are built by the "Desktop app" GitHub workflow; tag desktop-vX.Y.Z to draft a release |
| App shell | Permission-filtered nav with live badges, branch switcher, EN/हिंदी, "View as" role preview (narrows only), sessions & revoke |
| Dashboard | KPIs, 14-day sales, collections, insights, low stock, expiring batches, branch performance, backup status, activity |
| Billing (POS) | FEFO batches, Rx prescriber rule, discount caps, split payments, credit limits, loyalty points (earn and redeem), held carts, idempotent commit, thermal/A4 invoices, WhatsApp send, B2B tax invoices (buyer GSTIN, place of supply, IGST for other states) |
Built into the core: money in integer paise with GST back-calculated from MRP, FEFO batch allocation, a hash-chained audit trail, and database triggers that make stock movements, vouchers, sales and audit rows append-only.
Layout
| Path | Purpose |
|---|
src/app/(auth) | Setup wizard, sign-in, MFA, employee login |
src/app/app | The signed-in app (one folder per screen) |
src/domain/* | Business rules and services, shared by the UI, API routes and the AI assistant |
src/staff, src/app/staff | Medoro staff console (control plane): its own auth, tables and services |
src/app/page.tsx, src/app/legal | Marketing website and legal pages |
src/server | DB client, sessions, audit, sequences, secret sealing |
src/lib | Money, dates, i18n, navigation |
prisma/ | Schema and migrations |
tests/integration | Service tests against PostgreSQL |
e2e/ | Playwright end-to-end specs (setup wizard first, then one spec per area) |
design/ | The original clickable prototype, assets and handoff notes (reference only) |
docs/ | Architecture, security, privacy, data ownership, AI, WhatsApp, orders & delivery, GST compliance, testing, deployment, backup, purchasing & money (pricing, e-bills, claims, cheques, bank) |
Not claimed
Medoro does not claim GST, drug-law or DPDP compliance, or any official government integration. Have qualified professionals review it before launch.
