Commit Graph

214 Commits

Author SHA1 Message Date
565586aa6e fix(auth): prevent background AJAX/polling routes from hijacking post-login redirect 2026-10-28 00:40:32 +05:30
2ed2bfa99c feat(auth): add Login Page Configuration Panel with Left/Center/Right layout and styling controls 2026-10-27 21:28:44 +05:30
cf25a00ef5 perf(pharmacy): optimize product master load with company ajax search and cached abdm drug lookup 2026-10-27 01:23:34 +05:30
97ca466d2f fix(pharmacy): resolve CSRF, schema auto-migration, and error handling for mobile draft basket 2026-10-27 00:23:10 +05:30
9f6d9d3799 feat(pharmacy): add Central Pharmacy Mobile PWA with IPD/OPD/UHID search, Rx picker, draft billing, and physical stock audit 2026-10-26 23:49:28 +05:30
5a13ce2b56 feat(pharmacy): enhance PO creation with medicine master search, last PTR auto-fill, exact GST selection, and scheme/discount support 2026-10-26 22:31:00 +05:30
083a82dcb6 feat(pharmacy): add expired medicine disposal, quick return and rich product search
- Add direct expiry disposal (write-off) and quick return from Nearest Expiry report
- Add Disposal Register view and PDF audit certificate
- Add supplier info and rich selectable autocomplete in purchase return search
- Register disposal & quick return routes in Routes.php
2026-10-25 23:27:06 +05:30
e946000fb9 Allow editing GRN Inspection Details with full item reconciliation and live inventory synchronization 2026-10-23 14:10:31 +05:30
0020d0676c feat(security): restrict /app/queue and live OPD token feed to authorized hospital IPs (WASA CWE-200 remediation) 2026-10-22 15:19:28 +05:30
7547d00bb4 feat(security): place login throttle before CSRF and add visual CAPTCHA verification to login form 2026-10-22 14:45:04 +05:30
367f63f4f3 Fix WASA observations 5 and 6: user enumeration and login rate limiting 2026-10-21 18:00:25 +05:30
9d568463f1 feat: completely remove HealthPlix integration, controllers, views, and database columns 2026-10-21 01:33:13 +05:30
c548c0dce3 Fix WASA security observations: security headers, CSP hardening, JS library updates, API authentication, and data scrubbing 2026-10-19 16:27:17 +05:30
8cbf55537f feat(pharmacy): implement Purchase Orders (PO) and Inward Goods Received Notes (GRN) workflow 2026-10-19 15:48:53 +05:30
7dce405942 fix(security): exempt records/* and v3/* from CSRF filter for bridge communication 2026-10-17 01:42:19 +05:30
6c812236a8 feat(abdm): set autoLinkDelayMinutes to 1, regenerate FHIR bundle on print, map salt composition to reasonCode 2026-10-16 18:54:29 +05:30
b03568f91c fix(security): resolve OWASP ZAP audit findings for CSP, HSTS, SRI, and private IP disclosure 2026-10-15 19:25:28 +05:30
de4f65807d feat(security): implement WASA audit mitigations, mobile anti-enumeration & device authorization, and user management fixes 2026-10-15 17:47:51 +05:30
a3c544a53c feat(user-management): enhance user management, permission handling, and charges invoice workflows
- Add UserProfileModel and migration for user profile data
- Enhance User Management views, controller, and doctor/nurse search integration
- Refactor handleAuthError to separate 401 session expiry from 403 access restriction
- Apply granular permission checks to sidebar navigation links
- Open Bed Status view for all authenticated users
- Support GET and POST on charges item routes and exempt billing charges from CSRF desync
2026-10-14 20:08:10 +05:30
81f3501157 fix(security): implement WASA compliance hardening and vulnerability remediation 2026-10-14 10:27:32 +05:30
e59bd8d2b7 feat(abdm): add Find ABHA by Aadhaar Number flow (M1 VRFY_ABHA_401 to VRFY_ABHA_405) 2026-10-12 11:58:53 +05:30
6c8e062558 feat(abdm): add professional PDF export and print button for fetched health records 2026-10-08 20:52:42 +05:30
5306271383 fix(abdm): add datetime-local to consent request, prevent browser hang with non-blocking fetch, and fix DB column queries 2026-10-08 15:22:33 +05:30
b3e7a2175f fix(abdm): make FHIR creation async local-only in web requests, auto-link every minute via cron, disable cooling delay 2026-10-08 12:30:47 +05:30
9cb4ccd701 fix(abdm): resolve JSON parse error on fetch and auto-reconcile revoked consents 2026-10-08 11:41:30 +05:30
0fe48f2ec8 feat(abdm): show health documents in HIP link modal and create dedicated ABHA Filter & FHIR Inspector page 2026-10-07 12:16:56 +05:30
3df469bfab fix(abdm): implement communication mobile OTP verification, register route, and fix patient list modal DOM 2026-09-30 16:59:23 +05:30
61206784f3 feat(abdm): implement care-context linking cooling window and timer reset on record modification
- Add cooling period configuration (60 min for OPD/Lab/Radiology/others, 24 hr for IPD Discharge) in AbdmConnector
- Add calculateCooling() logic in AbdmTaskBoardSyncService and skip automated linking during cooling window
- Touch and refresh work task timestamps on prescription save and IPD discharge summary save/print
- Update opd_fhir_documents on prescription edit rather than inserting duplicate bundles
- Enrich ABDM Task Board table and OPD consult list with active cooling badges, remaining minutes, and auto-link schedule
- Preserve manual 'Link Context' action on task board to allow immediate override anytime
- Update CLI commands (abdm:taskboard-sync, abdm:push-sync) with cooling counters and status logging
2026-09-28 18:29:50 +05:30
3f1e89d4be Fix IPD patient admit search error, add admission type filters to IPD patient list, remove redundant sidebar links, and add OPD Day Care template support 2026-09-23 10:12:42 +05:30
6e78e6010e feat: add Day Care & Emergency admission module with IPD conversion and clean patient names
- Add Day Care (<24h) and Emergency (Casualty) admission pathways with prefixes DC- and ER-
- Add dedicated physical wards, ESI 5-level triage, MLC tracking, and PADSS day care discharge
- Implement audited 'Convert to IPD' workflow with SBAR handover and automated bed transfer
- Support unified IPD billing with dedicated group headers for Day Care and Emergency charges
- Redesign Hospital Admission Desk with executive card layout and modern triage controls
- Add comprehensive user documentation and SVG flowchart in public/help.html
- Completely remove legacy patient_master.p_lname column from database and application code
2026-09-21 23:41:24 +05:30
6ce81eedd8 feat(medical-store): auto-convert draft bills to invoice on checkout and reduce pending draft list 2026-09-18 05:49:20 +05:30
ecd596e0fb feat(medical-store): add mobile apps QR hub on login page, pharmacy ledgers, credit accounts, and 6-tier staff permissions 2026-09-18 05:11:02 +05:30
c49361c0fa feat: disable public registration on login page and add cron task management script 2026-09-17 13:06:13 +05:30
dd1acb88e1 feat: add IPD census PDF, collection payment filter, fix report panel visibility, and implement ABDM HIP linking
- Reports:
  - Add PDF export option with A4-L print layout for IPD Census & Discharge Report
  - Add Payment Type filter (OPD, Charge, IPD, ORG, All) to Collection Report with URL routing and summary table updates
  - Ensure superadmin/admin/developer visibility in Report Panel controller permission checks
- ABDM:
  - Implement HIP patient care-context linking and discovery integration
  - Add on-demand FHIR health record fetch endpoints for Bridge connector
  - Add ABDM HIP link modal view and wire to patient/person profiles and prescription
2026-09-15 23:21:30 +05:30
7e3c57f48f fix(patient): enforce unique ABHA ID and Aadhaar number on patient registration and updates 2026-09-12 04:30:10 +05:30
93172c4a19 feat(pharmacy): add searchable All Invoices register tab with edit capabilities and POS draft auto-save/recovery 2026-09-10 09:50:34 +05:30
741269634e feat(pharmacy): add right-side patient old records, last dispensed medicines, and 1-click re-dispense/return desk 2026-09-10 09:23:59 +05:30
82cae89fae feat(medical-store): add server-side A4/A5 vector PDF generation with mPDF and 48-col plain-text thermal receipt printing 2026-09-10 08:09:10 +05:30
59514cd061 feat(medical-store): pharma stock entry with progressive disclosure, challan import, and history 2026-09-10 06:35:05 +05:30
48bb726b6d feat(medical-store): add edit purchase invoice option with stock adjustment and ledger reconciliation 2026-09-10 05:43:11 +05:30
ca6926015a fix(medical-store): remove third-party brand Marg from application and replace with generic Excel/CSV import 2026-09-10 04:58:59 +05:30
e635e823e5 feat(medical-store): add supplier ledger, payment tracking, short items book, and purchase orders 2026-09-10 04:49:00 +05:30
62397c5a98 feat(medical-store): inward purchase medicine auto-search and shared pharmacy master integration 2026-09-10 04:23:09 +05:30
101e0631a8 feat(medical-store): add supplier creation and editing modal in Supplier Directory 2026-09-10 03:53:33 +05:30
9176877d07 feat(abdm): implement M1 find ABHA by mobile flow & M2 user-initiated linking
- M1: Update Find ABHA via Mobile to compliance flow: Mobile Number -> Profiles -> OTP -> Complete Profile Fetched
- M2: Support walk-in non-ABHA patient discovery via demographic matching (verified mobile, gender, year of birth, name)
- M2: Implement care context linking endpoints (/records/link/init and /records/link/confirm) with OTP verification
- Add abdm_link_transactions database migration
- Support Bearer token and HMAC signature authentication for bridge callbacks over VPN
2026-09-09 17:52:20 +05:30
d2f069e3c8 feat(medical-store): add B2C sales returns, same-invoice exchanges, and DB migrations
- Add B2C same-invoice exchange and pure refund workflows (Marg ERP standard)
- Support returning excess/unused medicines with proportional unit pricing on original invoice
- Auto-net return credits against new medicines in POS cart with refund outflow handling
- Implement stock replenishment for restocked batches with audit trail in mst_stock_audit
- Generate sequential GST Credit Notes in mst_sale_returns and mst_sale_return_items
- Update Thermal 80mm, A5, and A4 print templates with separated dispensed vs returned items
- Add CI4 migration 2026-09-08-000001_CreateMedicalStoreReturnsAndExchanges.php for remote execution
- Add standalone SQL script scripts/sql/2026-09-08_medical_store_b2c_returns_and_exchanges.sql
2026-09-08 05:07:45 +05:30
765286e7fa feat(medical-store): ABDM-compatible multi-building pharmacy, POS desktop keyboard workflow, unit dispensing, and split payments 2026-09-08 02:19:11 +05:30
f3faa9c96e feat(abdm): integrate Online/ABDM discharge template with PDF attachment in FHIR bundle
- Dynamically resolve and generate PDF using designated Online/ABDM template (is_abdm=1) from ipd_discharge_templates
- Unify mPDF rendering logic between show_discharge and generateDischargeSummaryPdfBinary for exact byte-for-byte consistency
- Attach generated PDF as DocumentReference under SNOMED 373942005 (Discharge summary) in NRCES FHIR DocumentBundle
- Add quick-set actions and AJAX endpoints for Default and ABDM template selection in discharge template list UI
- Update unit tests covering DocumentReference generation and template resolution
2026-09-06 17:55:15 +05:30
52f8d9691b feat(abdm): enhance IPD discharge FHIR generator with NRCES v6.5.0 single-coding and structured dosage instructions 2026-09-05 15:29:11 +05:30
9bca2630c3 fix(abdm): allow GET/POST for ipd_discharge_fhir_preview and render detailed error in preview modal 2026-09-04 05:55:51 +05:30