​

title: “Arsitektur Sistem” description: “Dokumentasi komprehensif arsitektur sistem Quinn of Spicy ERP - Multi-tenant, modular, scalable, dan secure”

​

Arsitektur Sistem

​

Ringkasan Arsitektur

​

Arsitektur Multi-Tenant

​

Konsep Multi-Company

• Data terisolasi: Data satu perusahaan tidak dapat diakses oleh perusahaan lain
• Konfigurasi independen: Setiap perusahaan dapat mengatur modul, role, dan workflow sendiri
• Branding kustom: Logo, warna, dan identitas perusahaan dapat dikustomisasi
• User management terpisah: Employee dan role management per perusahaan

​

Company ID Isolation

​

Implementasi Company ID

// Contoh: Product Entity
{
  "id": "prod_abc123",
  "company_id": "comp_xyz789",        // ← Isolasi data
  "name": "Sambal Matah Premium",
  "sku": "SMP-001",
  "category": "sambal",
  "price": 25000,
  "cost": 12000,
  "stock": 150,
  "unit": "botol",
  "created_at": "2026-01-15T08:30:00Z",
  "updated_at": "2026-10-09T14:22:00Z"
}

​

Security Policy Enforcement

​

Layer 1: Client-Side Validation

// src/components/utils/companyAccessPolicy.js
export const validateCompanyAccess = (userCompanyId, requestedCompanyId) => {
  if (userCompanyId !== requestedCompanyId) {
    console.error(`Cross-company access attempt: User ${userCompanyId} tried to access ${requestedCompanyId}`);
    throw new SecurityError('Cross-company access denied');
  }
  return true;
};

​

Layer 2: Server-Side Policy (Base44 Functions)

// base44/functions/enforceCompanyAccess/policy.js
export const policy = async (context, params) => {
  const userCompanyId = context.auth?.company_id;
  const requestedCompanyId = params?.company_id;
  
  if (!userCompanyId) {
    throw new Error('User company context not found');
  }
  
  if (userCompanyId !== requestedCompanyId) {
    throw new Error('Access denied: Cross-company data access is prohibited');
  }
  
  return true;
};

​

Layer 3: Database Row Level Security (RLS)

-- PostgreSQL RLS Policy (contoh)
CREATE POLICY company_isolation_policy ON products
  USING (company_id = current_setting('app.current_company_id')::uuid);

​

Data Isolation Flow

​

Modular Architecture

​

1. POS (Point of Sale) Module

• Kasir (Cashier): Interface POS untuk transaksi cepat
• Order Management: Manajemen pesanan dine-in, takeaway, delivery
• Payment Processing: Integrasi multi-payment gateway (Midtrans, Xendit, Stripe, PayPal)
• Receipt Printing: Cetak struk via Bluetooth printer
• Order Queue: Antrian pesanan real-time
• Channel Management: Multi-channel (dine-in, GoFood, GrabFood, ShopeeFood)
• POS Reports: Laporan penjualan harian, mingguan, bulanan

• CompanyPOSTransaction - Transaksi POS
• CompanyPOSProduct - Produk POS
• CompanyPOSCategory - Kategori produk
• CompanyPOSSettings - Pengaturan POS
• CompanyPOSInventory - Inventory POS

• finalizeCompanyPOSCashierSale - Finalisasi transaksi kasir
• voidCompanyPOSTransaction - Void transaksi
• transitionPOSOrderStatus - Update status order
• reserveOnlineOrderStock - Reserve stok order online

​

2. Inventory Module

• Stock Management: Stok masuk, keluar, transfer
• Stock Opname: Stock opname dengan approval workflow
• Multi-Location: Multi-gudang dan lokasi penyimpanan
• Barcode Scanning: Scan barcode untuk quick entry
• Discount Management: Manajemen diskon produk
• HPP Calculation: Perhitungan Harga Pokok Penjualan (FIFO/Average)
• Supplier Management: Manajemen supplier dan purchase order
• Stock Alerts: Notifikasi stok rendah dan anomali

• Product - Master produk
• StockMovement - Pergerakan stok
• StockOpname - Stock opname records
• StockTransfer - Transfer antar lokasi
• WarehouseLocation - Lokasi gudang
• Supplier - Data supplier
• PurchaseOrder - Purchase order

• processStockInOut - Proses stok masuk/keluar
• approveStockOpname - Approval stock opname
• transferInventoryLots - Transfer lot inventory
• receiveInventoryTransfer - Terima transfer inventory

​

3. Manufacturing Module

• Production Orders: Manajemen order produksi
• Bill of Materials (BOM): Resep dan komposisi bahan
• Quality Control: QC dan inspeksi kualitas
• HACCP Verification: Verifikasi HACCP untuk food safety
• Lot/Batch Tracking: Tracking lot dan batch produksi
• Raw Material Management: Manajemen bahan baku
• Production Timer: Timer produksi real-time

• ProductionOrder - Order produksi
• BillOfMaterials - BOM/resep
• LotBatch - Lot dan batch
• QualityCase - Case quality control
• RawMaterial - Bahan baku

• completeProductionBatch - Selesaikan batch produksi
• verifyAndReleaseProductionBatch - Verifikasi dan release batch
• holdLotBatch - Hold lot batch
• releaseLotBatchHold - Release hold lot batch
• saveBillOfMaterials - Simpan BOM

​

4. Finance Module

• Invoices: Faktur penjualan dan pembelian
• Expenses: Manajemen pengeluaran
• Bank Accounts: Multi-rekening bank
• General Ledger: Jurnal umum dan akuntansi
• Financial Reports: Laporan laba rugi, neraca, arus kas
• Budget Planner: Perencanaan anggaran
• Financial Goals: Target keuangan
• AI Profit Report: Laporan profit berbasis AI
• Saldo Management: Manajemen saldo dan kas

• Invoice - Faktur
• FinancialRecord - Catatan keuangan
• Account - Akun akuntansi
• BankAccount - Rekening bank
• Budget - Anggaran
• CompanyBalance - Saldo perusahaan

• generateDraftInvoice - Generate draft invoice
• recordCompanyInvoicePayment - Catat pembayaran invoice
• extractFinanceData - Extract data keuangan (AI)
• financeChatAI - AI assistant untuk finance

​

5. HR (Human Resources) Module

• Attendance: Absensi dengan GPS dan foto
• Payroll: Perhitungan gaji otomatis
• Employee Portal: Portal karyawan self-service
• Performance Reviews: Review performa karyawan
• Recruitment ATS: Applicant Tracking System
• Company Leave: Manajemen cuti
• Company Loan: Manajemen pinjaman karyawan

• Employee - Data karyawan
• AttendanceRecord - Record kehadiran
• CompanyPayroll - Payroll perusahaan
• CompanyLeave - Cuti karyawan
• CompanyLoan - Pinjaman karyawan
• Applicant - Pelamar kerja

• createCompanyEmployee - Buat karyawan baru
• calculatePayroll - Hitung payroll
• submitAttendance - Submit absensi

​

6. CRM (Customer Relationship Management) Module

• Customer Management: Database pelanggan
• Membership: Program membership dan loyalitas
• Sales Pipeline: Pipeline penjualan dengan stages
• WhatsApp Integration: Integrasi WhatsApp untuk komunikasi
• Customer Loyalty: Program loyalitas dan rewards
• Company Membership: Membership level perusahaan

• Customer - Data pelanggan
• CustomerLoyaltyLedger - Ledger loyalitas
• CompanyMember - Member perusahaan
• SalesPipeline - Pipeline penjualan
• Commission - Komisi sales

• createPOSCustomer - Buat customer dari POS
• manageCustomerLoyalty - Kelola loyalitas customer
• triggerBTTNotifications - Trigger notifikasi BTT

​

7. AI (Artificial Intelligence) Module

• AI Assistant: Asisten AI untuk query dan analisis
• AI Agents: Agent AI otomatis untuk tugas berulang
• Content Studio: Studio untuk generate konten marketing
• Forecasting: Prediksi penjualan dan demand
• AI Profit Report: Analisis profit berbasis AI
• Agent Dashboard: Dashboard monitoring AI agents
• AI Learning: Machine learning dari data historis

• AIAgent - Definisi AI agent
• AIAgentRun - Execution run AI agent
• AIAgentSchedule - Schedule AI agent
• AIAgentSettings - Pengaturan AI
• AIAgentTemplate - Template AI agent
• AILearningData - Data pembelajaran AI

• executeAIAgent - Execute AI agent
• aiAssistantQuery - Query AI assistant
• createAIAgentFromChat - Buat AI agent dari chat
• runDueAgentSchedules - Run scheduled agents
• processAgentTrigger - Process agent trigger

​

8. Core Module

• Authentication: Login, register, session management
• RBAC (Role-Based Access Control): Manajemen role dan permission
• Company Settings: Pengaturan perusahaan
• Dashboard: Dashboard executive dan operational
• Workspace Management: Multi-workspace support
• Offline Mode: Mode offline dengan sync
• Notification System: Sistem notifikasi real-time
• Audit Trail: Log semua aktivitas penting

• User - User accounts
• Company - Data perusahaan
• CompanyMember - Member perusahaan
• CompanyModuleSettings - Pengaturan modul
• AuditLog - Audit trail
• Notification - Notifikasi

• enforceCompanyAccess - Enforce company access
• ensureQuinnCompany - Ensure company exists
• getOwnerExecutiveDashboard - Get executive dashboard data

​

Teknologi Stack

​

Frontend Technology

​

Backend Technology

​

Security Stack

​

Integration Stack

​

Data Flow Architecture

​

POS Transaction Flow

​

Manufacturing Flow

​

Inventory Flow

​

Multi-Tenant Data Isolation Flow

​

Performance Architecture

​

Performance Metrics

​

Optimization Strategies

​

1. Code Splitting & Lazy Loading

// React Router lazy loading
const POS = lazy(() => import('@/pages/pos/POS'));
const Inventory = lazy(() => import('@/pages/inventory/Inventory'));
const Manufacturing = lazy(() => import('@/pages/Manufacturing'));

// Route definition
<Route path="/pos" element={<POS />} />
<Route path="/inventory" element={<Inventory />} />

​

2. Image Optimization

• Cloudinary CDN: Automatic image optimization
• WebP Format: Modern image format with better compression
• Lazy Loading: Images load on demand
• Responsive Images: Different sizes for different devices

​

3. Caching Strategy

// Global data cache with TTL
const globalCache = {
  products: { data: [], ttl: 300000 }, // 5 minutes
  categories: { data: [], ttl: 600000 }, // 10 minutes
  company: { data: null, ttl: 3600000 } // 1 hour
};

​

4. Bundle Optimization

• Tree Shaking: Remove unused code
• Code Splitting: Split by route and feature
• Dynamic Imports: Load modules on demand
• Vite Build: Optimized production builds

​

Performance Monitoring

​

Deployment Architecture

​

Environment Strategy

​

Deployment Pipeline

​

PWA Deployment

• Mobile: Android (Chrome), iOS (Safari)
• Desktop: Windows, macOS, Linux
• POS Terminal: Dedicated POS devices

• Offline capability
• Fast loading (cached assets)
• Native-like experience
• No app store dependency

​

Scaling Strategy

​

Security Architecture

​

Security Layers

​

Authentication Flow

​

Role-Based Access Control (RBAC)

​

Monitoring & Observability

​

System Monitoring

​

Logging Strategy

// Structured logging example
const log = {
  timestamp: '2026-10-10T10:30:00Z',
  level: 'INFO',
  service: 'pos-api',
  action: 'finalizeTransaction',
  company_id: 'comp_abc123',
  user_id: 'user_xyz789',
  transaction_id: 'txn_001',
  amount: 150000,
  duration_ms: 245,
  status: 'success'
};

​

Future Architecture Enhancements

​

Planned Improvements

1. Microservices Migration
   • Split monolith into domain-specific services
   • Independent scaling per module
   • Technology flexibility per service
2. Event-Driven Architecture
   • Event sourcing for critical operations
   • CQRS for read/write separation
   • Real-time event streaming
3. Advanced AI Integration
   • Predictive analytics for demand forecasting
   • Automated inventory optimization
   • AI-powered customer insights
4. Blockchain Integration
   • Supply chain traceability
   • Immutable audit trail
   • Smart contracts for B2B transactions
5. IoT Integration
   • Smart warehouse sensors
   • Temperature monitoring for HACCP
   • Automated stock counting
6. Multi-Language Support
   • i18n for international expansion
   • Localized content per region
   • Multi-currency support

​

Conclusion

• Scalability: Mendukung pertumbuhan dari UMKM ke enterprise
• Security: Multi-layer security dengan isolasi data ketat
• Performance: Optimized untuk kecepatan dan efisiensi
• Reliability: High availability dengan backup dan recovery
• Flexibility: Modular design untuk kustomisasi
• Maintainability: Clean code dengan dokumentasi lengkap