Wundklar

Wundklar is the clinical product this repository ships. A nurse photographs the wound with the app's own camera, does a structured T.I.M.E. assessment, follows progress over time, runs the dressing plan, and sends a PDF/A report via KIM or an encrypted link so the prescribing doctor can issue the next supply order. The complete product package — Vision Board, PRD, flows, stories, ARD, screens and tokens — lives under docs/wundklar.

The product rules that outrank every "how to code" convention are set in the PRD and the ARD; every deviation from them is a dated decision record.

Shape

A care service is a Better Auth Organization with the extra row care_service and five care roles (owner/admin as PDL, wound_expert, nurse, aide); member is read as nurse (ADR-0015). Every clinical procedure, sync handler, key delivery, object path and job runs through one authorization boundary that checks assurance, AVV, access state, device, role and patient scope (ADR-0031).

Clinical records are insert-only; a correction is a new version with a reason (ADR-0028). Photos are born encrypted on the device under an envelope hierarchy (KEK → ODK + OIK → per-object DEKs, ADR-0017) and intimate full frames stay under a separate key opened only with a logged reason (ADR-0025).

Where features live

• Mobile (bedside, offline-first): apps/mobile/src/app routes, apps/mobile/src/features/<feature>/ folders, platform/vault and platform/local-store behind the interfaces of ADR-0026.
• Desktop (PDL cockpit, doctor portal): apps/web/src/routes/_auth/ and the public r.$linkId portal.
• API and jobs: packages/api/src/features/ with the fixed feature shape of ADR-0011.
• Shared domain and copy guard: packages/clinical; crypto: packages/crypto; PDF/A engine: packages/report; tokens: packages/tokens.

Guides

• Local harness — one command per slot boots Postgres, MinIO, the API and Expo web with a demo seed.
• Sync protocol — the envelope, the ledger and the per-kind resolution rules.
• Clinical trail — the hash-chained, same-transaction trail and its daily verification.
• Share links — the zero-knowledge path from the device to the doctor's browser.
• Reports — the PDF/A model, KIM delivery and the server-built reports.
• MD and Art. 15 exports — the audit package engine with checkpointed resume.
• Access states — tariff, trial, read-only, cancellation and the active-wound grace.

Status

The run-time state of v1 and the pending native and real-KIM items are tracked in docs/STATUS.md. Deviations from the template conventions are listed in the decision records 0015–0033 of the ADR index.