TYVIK ROBOTICS

Technologies & Frameworks

Project Overview

The Ron Bot Web App (Next.js Hub) is the digital storefront, user pre-order platform, and administrative command center for the Ron Bot ecosystem. Built with Next.js 16 (App Router), React 19, and Supabase, it provides customers with an interactive, motion-rich experience to learn about, compare, and pre-order different Ron Bot models (Classic, Keychain, Ultra). Behind the scenes, the web application runs completely serverless, leveraging a PostgreSQL database on Supabase and integrating localized Bangladeshi payment wallets (RupantorPay) via an Android SMS APK relay. Authenticated users can manage their orders and register their physical devices in a personalized dashboard, while administrators can track waitlists, send batch templated updates using React Email and Resend, configure inventory, and view analytics charts built with Recharts.

The Challenge & Problem

• Payment Gateway Idempotency & Redirect Race Conditions: In localized payment workflows like RupantorPay (an Android APK relay parsing bKash/Nagad bank SMS notifications), timing delays and concurrent callback notifications from browser redirect success and server webhooks can cause duplicate order records, double charging, and incorrect inventory depletion.
• Server Overheads for Realtime Telemetry/Controls: Connecting physical microcontrollers to web applications normally requires maintaining a persistent Express or Node.js WebSocket relay server, leading to scaling difficulties, high infrastructure costs, and latency.
• Role-Based Security & Middleware Protection: Gating administrative paths and protecting sensitive dashboards from unauthenticated users in a serverless, client-heavy architecture without introducing routing latency.

The Engineering Solution

• Database-Level Unique Constraint Guard: Enforced a UNIQUE constraint on rupantor_transaction_id in the PostgreSQL orders table. Any concurrent write attempt from a duplicate callback is rejected at the database level. Next.js routes implement dual validation hooks (immediate client checkout success redirect check + server-to-server webhook endpoint returning 200 OK) to safely handle purchase completions.
• Serverless Direct Supabase Integration: Bypassed custom backend server relays by using Supabase Realtime channels. The web app communicates directly with physical ESP32 bots using SSL-secured Phoenix WebSocket channels (wss://), syncing task matrix states and command queues with zero server infrastructure overhead.
• JWT Middleware Session Verification: Implemented middleware.ts to intercept Next.js routes. It decodes and validates the client's JWT session token against Supabase Auth, gating /dashboard and restricting /admin routes based on user roles configured in a triggered profiles table.

Key Architecture & Features