What is CareNova ?

CareNova is a modern Clinic & Medical Practice Management System designed to help healthcare providers manage their daily operations through a single, unified platform.

Instead of relying on multiple disconnected tools, CareNova centralizes the most critical clinic workflows — patient management, appointment scheduling, medical records, billing, inventory, and staff operations — into one system built for speed, clarity, and reliability.

Built on Next.js 14, Supabase, PostgreSQL, and TypeScript, CareNova gives clinics and developers a scalable, secure, and maintainable foundation capable of supporting real-world medical environments.

Why CareNova Exists

Most clinic management solutions fall into one of two categories:

• Legacy software — outdated interfaces, difficult to maintain, on-premise installations, no modern stack

• Modern-looking templates — great UI but no real backend, no auth system, no database structure, not production-ready

CareNova was built to solve both problems at once.

Unlike generic admin templates, CareNova ships with:

• ✅ A real PostgreSQL schema — 35+ tables, production-ready and idempotent

• ✅ Supabase authentication with rate limiting, session tracking, and full audit logging

• ✅ Role-based access control (RBAC) enforced on every server action — not just UI hiding

• ✅ Server-side Zod validation on every form and mutation

• ✅ Multi-language support — English, French, Spanish, and Arabic with RTL support

• ✅ A modular architecture that mirrors real SaaS products

• ✅ A clean build — zero TypeScript errors, zero any types, npm run build passes clean

CareNova is not a prototype. It is a production-ready foundation you can hand to a development team and ship to a real client immediately.

Who CareNova Is Built For

Supported Clinic Types

CareNova supports three medical specializations and dynamically adapts its interface, navigation, and landing page accordingly:

You can preview each clinic environment using these demo links:

• General Clinic Demo

• Dental Clinic Demo

• Ophthalmology Clinic Demo

The selected clinic type is stored in a cookie and remembered for 7 days. Switching clinic types via the ?clinic= URL parameter updates the landing page, navigation, and vocabulary instantly.

Core Modules

CareNova ships with 19 fully implemented modules accessible from the central dashboard:

Security

CareNova is built with security as a default — not an afterthought.

Authentication:

• Email and password authentication via Supabase

• Email confirmation flow before dashboard access

• HTTP-only cookie sessions managed by @supabase/ssr

• Pending approval flow — self-signup users require admin approval before they can access the dashboard

Rate Limiting & Brute Force Protection:

• 5 failed login attempts per email within 15 minutes triggers a lockout

• 10 failed login attempts per IP within 15 minutes triggers a lockout

• Lockout message: "Too many failed login attempts. Please try again in 15 minutes."

Password Policy:

• Minimum 8 characters

• At least one uppercase letter

• At least one lowercase letter

• At least one number

• At least one special character (@$!%*?&)

• Common passwords blocked (password123, admin123, etc.)

Audit & Sessions:

• Every login, logout, and failed attempt recorded in auth_audit_log

• Active session tracking with revoke capability

• Automated cleanup via daily cron job

File Uploads:

• All upload types validated server-side

• Avatars: max 2MB — JPEG, PNG, WebP, GIF

• Clinic logos: max 2MB — JPEG, PNG, WebP, SVG

• Medical attachments: max 10MB — PDF, JPEG, PNG, GIF, WebP, DOC, DOCX

• Landing assets: max 5MB — JPEG, PNG, WebP, SVG

Role-Based Access Control

CareNova enforces four user roles across the entire platform:

Permissions are enforced at two levels:

1. Navigation — sidebar automatically shows or hides items based on role and permissions

2. Backend — every server action checks role and permissions before executing — hiding a button is never the only protection

The Admin can customize permissions for all roles from a dedicated permissions matrix in the dashboard.

Technology Stack

Architecture

CareNova follows a strict, consistent architecture across every module that any developer can understand immediately:

Server Component → Server Action → Zod validation → 
Drizzle query → revalidatePath

Key architecture decisions:

• Server Components for all data fetching — minimal client JavaScript

• Server Actions for all mutations — no API routes needed for CRUD operations

• Parallel DB queries using Promise.all in two batches to prevent connection pool exhaustion

• Module-level caching with TTL — clinic data cached for 5 minutes, license check cached for 1 hour

• Drizzle ORM with prepare: false for pgBouncer transaction mode compatibility

• Zod schemas shared between client and server for consistent validation

• revalidatePath called after every mutation to keep UI in sync without full page reloads

Performance & UI

• Full dark mode support — every component, every state

• Responsive layout — desktop-first with mobile awareness

• Framer Motion transitions on key interactions

• Dynamic imports for heavy below-fold components

• Memoized table rows and useCallback handlers to minimize re-renders

• Consistent design system across all 19 modules

• Professional stat cards, data tables, sheets, modals, and forms throughout

Storage Buckets

CareNova uses four Supabase storage buckets:

Demo Data

The included demo seed (npm run db:seed) populates the database with realistic data:

Demo accounts are available for all four roles after seeding:

Getting Started

After purchase, CareNova requires a one-time activation step. On first launch you will be guided to enter your Envato purchase code to activate the platform. Once activated, the full dashboard is available immediately and the activation screen will never appear again.

Full setup instructions are available in the Getting Started section of this documentation.

Platform Links

CareNova aims to give healthcare professionals a modern platform that simplifies clinic operations, while giving developers and agencies a powerful, extensible, and well-documented foundation for building serious healthcare software.