TradePortTradePort Technical Architecture
System specifications, offline-first database design, sync protocols, cryptographic verification, and local network services for IT managers, engineers, and technical auditors.
Remote Owner Portal Architecture
Tenant hierarchy and cloud synchronization engine.
- Hierarchy
- Owner → Store → Branch → Device (Terminal)
- Browser access
- Responsive web application: zero local terminal install required for portal access
- Sync queue
- 20-second automatic background push and pull queue with keyset pagination
- Local database
- SQLCipher AES-256 encrypted SQLite in WAL mode
- Checkout write-lock
- Sync background tasks yield immediately during checkout so cashiers experience zero lag
- Entitlement verification
- Ed25519 digitally signed entitlement tokens with a 2-day renewal grace period
- Catalog onboarding
- 25-column CSV onboarding engine with replace, add, and update reconciliation modes
Security & Terminal Controls
Cryptographic identity, network isolation, and role boundaries.
- Device activation
- 12-character branch-scoped activation codes (XXXX-XXXX-XXXX) with instant remote revocation
- Role separation
- Owner, Admin, and Cashier tiers enforced at database and route levels
- Price rails
- Server-side limits bounded between cost + 5% and base + 40%
- Local barcode scanning
- Embedded local HTTPS Certificate Authority serving port 8443 for zero-config phone camera pairing over Wi-Fi
- Stock calculation
- Current stock is derived from SUM(StockMovement.quantity); balances cannot be directly edited
- Transfer idempotency
- Two-phase branch transfers use deterministic UUIDv5 identifiers to prevent double-receipt