🍔 SwadKart — Multi-Vendor Food Delivery Platform

India's Next-Gen Food Ordering & Delivery System | MERN Stack | Real-Time Tracking | AI-Powered

---

📸 Application Screenshots

🏠 Home Page — Restaurant Discovery & Smart Search

📊 Admin Dashboard — Real-Time Analytics & Revenue Insights

🍽️ Restaurant Menu — Dynamic Cart & Ordering

📱 Mobile Responsive — PWA Installable App

🔐 Biometric Security — Fingerprint & FaceID Login

Premium Lock Screen	Profile Control Center

---

📖 About SwadKart

SwadKart is a production-grade, scalable multi-vendor food delivery platform built with the MERN stack (MongoDB, Express.js, React, Node.js). Designed and developed at Jagannath University, Jaipur, it connects users with local restaurants through a sophisticated multi-role ecosystem — Admin, Restaurant Owner, Delivery Partner, and Customer.

Why SwadKart?

• 🚀 Not a clone — Production-hardened with 30+ API routes, fraud detection, and enterprise security
• 🤖 AI-Powered — Groq LLM chatbot for natural language food recommendations
• 🗣️ Voice Search — "Show me biryani under ₹200" works in English & Hindi
• 📍 Real-Time Tracking — Live GPS driver tracking via Socket.io
• 🔒 Biometric Auth — Fingerprint/FaceID login via WebAuthn (no password needed)
• 💳 Razorpay Payments — UPI, Cards, Wallets, and COD support
• 🌐 PWA — Installable on iOS/Android with offline support & push notifications

---

🌟 Key Features

🛍️ User Experience

• Smart Discovery — AI-powered restaurant & dish recommendations with natural language search
• Voice Search — Hands-free search in English & Hindi using Web Speech API
• Dynamic Cart — Real-time price calculation with surge pricing, coupons, and SwadPass discounts
• Secure Auth — Triple authentication: JWT + Firebase Google OAuth + WebAuthn Biometric
• Live Order Tracking — GPS driver tracking from "Preparing" → "Out for Delivery" → "Delivered"
• Smart Reorder — One-tap reorder from frequently ordered items
• Chatbot Action Tools — AI Genie executes actions (order status, cancel, reorder, coupons, delivery ETA, FAQ) via Groq function-calling pipeline

👑 Admin Command Center

• Live Analytics — Revenue, order volume, active users, and restaurant performance trends
• Demand Heatmap — Interactive Leaflet.js map visualizing high-demand zones
• User Management — Full RBAC (Role-Based Access Control)
• Coupon Engine — Create, manage, and track coupon usage with auto-validation
• Fraud Detection — Heuristics engine flags suspicious orders, repeat addresses, coupon abuse

🏪 Restaurant & Delivery Partner

• Menu Lab — Stock management, variant toggling, real-time availability
• Delivery Dashboard — Accept/reject orders, GPS tracking, OTP-verified delivery handoff
• ETA Prediction — Dynamic delivery time based on distance, traffic, and order queue

💎 SwadPass Subscription

• Free Delivery — Unlimited free delivery on all orders
• Exclusive Discounts — Additional 10% off every order
• Priority Support — Fast-track customer service

🎮 Gamification & Loyalty

• Order Streaks — 3-day, 7-day, and 30-day streak badges
• SwadCoins — Earn coins on every order, redeem for discounts
• Achievement Badges — First Bite, Week Warrior, Month Master, Explorer, Top 10
• Referral System — Invite friends and earn rewards on their first paid order

📊 Enterprise Features

• Surge Pricing — Dynamic delivery fee multiplier based on demand vs supply
• Group Ordering — Split bills with friends via invite code (equal or item-wise)
• Table Reservations — Book tables with QR code confirmation
• GDPR Compliance — One-click data export (JSON) and account deletion with anonymization
• Multi-Language — Full i18n support (English & Hindi)
• PWA — Installable app with offline support, push notifications, service worker caching

---

🏗️ Architecture & Tech Stack

The project follows a clean MVC (Model-View-Controller) architecture. See docs/ARCHITECTURE.md for full system design.

Frontend (/frontend)

Layer	Technology
Framework	React 19 + Vite 7
State Management	Redux Toolkit 2
Styling	Tailwind CSS 3 + Lucide React Icons
Routing	React Router 7 (Lazy Loading)
Real-time	Socket.io-client 4
Maps	Leaflet.js 1.9
Charts	Recharts 3
AI	Groq SDK (LLM chatbot + recommendations)
Voice	Web Speech API (en-IN / hi-IN)
Auth	Firebase Auth + Google OAuth + WebAuthn
i18n	i18next (English + Hindi)
Build	Vite PWA (vite-plugin-pwa 0.19)
PDF	jsPDF + jsPDF-autotable
Push	Firebase Cloud Messaging (FCM)

Backend (/backend)

Layer	Technology
Runtime	Node.js 22 + Express 5
Database	MongoDB Atlas (Mongoose 9 ODM)
Cache	Redis (ioredis) / In-Memory Fallback
Auth	JWT (httpOnly cookies) + WebAuthn + Firebase Admin
Real-time	Socket.io 4 (room-based authorization)
Payments	Razorpay 2 (UPI/Card/Wallet/COD)
Email	Brevo API + Nodemailer (BullMQ queue)
Storage	Cloudinary (multer + sharp image processing)
AI	Groq SDK (Llama 3 chat + dish recommendations + function-calling tools)
Testing	fast-check (property-based testing for chatbot tools)
Validation	express-validator + Custom NoSQL Sanitizer
Rate Limiting	express-rate-limit (strict on auth/orders)
Security	Helmet 8, CORS, CSRF protection
Job Queue	BullMQ (Redis-backed email worker)

---

🌿 Documentation

Document	Description
docs/API.md	Complete REST API reference (30+ endpoints, auth & error patterns)
docs/ARCHITECTURE.md	System design, middleware pipeline, security & caching layers
docs/DB_SCHEMA.md	14 MongoDB collections: models, fields, relations & ER diagram
docs/DEPLOYMENT.md	Production deployment: Vercel + Render + MongoDB Atlas + Cloudinary
docs/EDGE_CASES.md	Security & performance edge cases, graceful degradation, failure modes
docs/TECH_STACK.md	Layer-by-layer dependency inventory: frontend, backend, DevOps
docs/WORKFLOW.md	User journey, admin ops & delivery driver Mermaid workflows
docs/AI_DISCOVERABILITY_FRAMEWORKS.md	AI discoverability: AEO, GEO, LLMO, AI-SEO, E-E-A-T & traditional SEO

---

🚀 Getting Started

Prerequisites

• Node.js v18+ (Download)
• MongoDB Connection String (MongoDB Atlas)
• Firebase Project (Firebase Console)

1. Clone the Repository

git clone https://github.com/theunstopabble/swadkart.git
cd swadkart

2. Backend Setup

cd backend
npm install

Create a .env file in /backend:

# Server
PORT=8000
NODE_ENV=development

# Database
MONGO_URI=your_mongodb_connection_string

# JWT (MUST be 32+ chars)
JWT_SECRET=your_super_secure_random_jwt_secret_here_at_least_32_chars

# Frontend URL (CORS)
FRONTEND_URL=http://localhost:5173

# Email Service
SMTP_HOST=smtp.gmail.com
SMTP_PORT=465
SMTP_MAIL=your_email@gmail.com
SMTP_PASSWORD=your_app_password
BREVO_API_KEY=your_brevo_api_key

# Biometric Auth (WebAuthn)
RP_ID=localhost
RP_NAME=SwadKart

# Redis Cache (Optional — falls back to in-memory)
REDIS_URL=your_upstash_or_redis_url

# Payment Gateway (Razorpay)
RAZORPAY_KEY_ID=rzp_test_xxxxxxxxxxxxxx
RAZORPAY_KEY_SECRET=your_razorpay_secret
RAZORPAY_WEBHOOK_SECRET=your_webhook_secret

# Cloudinary (Image Uploads)
CLOUDINARY_CLOUD_NAME=your_cloud_name
CLOUDINARY_API_KEY=your_api_key
CLOUDINARY_API_SECRET=your_api_secret

# AI (Groq LLM)
GROQ_API_KEY=gsk_your_groq_api_key

# Firebase Admin SDK
FIREBASE_SERVICE_ACCOUNT={"type":"service_account",...}

Start the backend:

node server.js

3. Frontend Setup

cd frontend
npm install

Create a .env file in /frontend:

VITE_API_URL=http://localhost:8000/api/v1
VITE_GOOGLE_CLIENT_ID=your_google_oauth_client_id.apps.googleusercontent.com
VITE_FIREBASE_API_KEY=your_firebase_key
VITE_FIREBASE_AUTH_DOMAIN=your_project.firebaseapp.com
VITE_FIREBASE_PROJECT_ID=your_project_id

Start the development server:

npm run dev

Visit http://localhost:5173 to see SwadKart running locally.

---

📂 Project Structure

swadkart/
├── backend/
│   ├── config/             # DB, Cloudinary, Redis, WebAuthn configuration
│   ├── controllers/        # 30+ controllers (User, Order, Admin, Delivery, AI, GDPR)
│   ├── middleware/         # Auth, Error, Rate Limit, Fraud Detection, Cache
│   ├── models/             # 14 Mongoose Schemas with compound indexes
│   ├── routes/             # 30+ RESTful API route modules
│   ├── services/
│   │   └── chat/           # AI Chatbot pipeline
│   │       ├── tools/      # Action tools (orderStatus, cancel, coupon, ETA, FAQ, reorder)
│   │       └── *.js        # Pipeline, intent, sentiment, language, retrieval
│   ├── tests/
│   │   └── properties/     # Property-based tests (fast-check)
│   ├── utils/              # Token generators, email templates, cache helpers
│   └── server.js           # Express app entry point
│
├── frontend/
│   ├── src/
│   │   ├── components/     # Reusable UI (Navbar, ChatBot, VoiceSearch, PWA Install)
│   │   ├── pages/          # 20+ pages (all user roles)
│   │   ├── redux/          # Global State (Cart, User slices with RTK)
│   │   ├── utils/          # Firebase config, biometric service, socket, invoice
│   │   ├── locales/        # i18n translations (en, hi)
│   │   └── App.jsx         # Router + lazy loading + biometric lock + role guards
│   ├── assets/             # Screenshots and branding assets
│   └── public/             # PWA assets (manifest, icons, hero image)
│
├── docs/                   # 📚 Full project documentation
│   ├── ARCHITECTURE.md     # System design & security layers
│   ├── WORKFLOW.md         # 10 Mermaid diagrams (user journey, admin, driver)
│   ├── API.md              # Complete endpoint reference (30+ routes)
│   ├── DB_SCHEMA.md        # All 14 collections & ER diagram
│   ├── DEPLOYMENT.md       # Vercel + Render + MongoDB + Cloudinary setup
│   ├── TECH_STACK.md       # Layer-by-layer dependency tree
│   └── EDGE_CASES.md       # 20 security/performance edge cases
│
└── .github/workflows/      # CI/CD pipeline (lint + build + syntax check)

---

🛡️ Security & Performance

Feature	Implementation	Status
JWT Security	32+ char secret, httpOnly cookies, secure + sameSite	✅
CORS	Strict allowlist, dynamic origin validation	✅
Rate Limiting	Auth: 10/10min, API: 300/15min, Orders: 20/15min	✅
NoSQL Injection Prevention	Custom $ and . sanitizer + parameter binding	✅
CSRF Protection	Origin + Referer header validation	✅
XSS Prevention	Helmet headers + Content Security Policy	✅
Fraud Detection	Non-blocking heuristics on order creation	✅
Graceful Shutdown	SIGTERM → close HTTP → close MongoDB → exit(0)	✅
Health Checks	/health endpoint with MongoDB + Redis status	✅
MongoDB Pool	50 connections, writeConcern: majority, heartbeat 10s	✅
Query Optimization	.lean() on all read-heavy endpoints (3-5x faster)	✅
Response Caching	Redis/in-memory cache on GET endpoints (1-5 min TTL)	✅
Lazy Loading	All pages lazy-loaded via React Router + Suspense	✅
PWA Caching	Service worker precaches 80+ assets	✅

---

🌐 Production Deployment

Component	Platform	URL
Frontend	Vercel	swadkart.vercel.app
Backend	Render	swadkart-5wtf.onrender.com
Database	MongoDB Atlas	Cluster (M0 Free Tier compatible)
Cache	Redis Cloud	Optional — in-memory fallback
Images	Cloudinary	Auto-optimized delivery
Payments	Razorpay	Test + Live keys supported

CI/CD Pipeline (GitHub Actions):

1. Backend syntax check (node --check on all files)
2. Frontend lint (npx eslint src/)
3. Frontend build test (npm run build)
4. Auto-deploy to Vercel on green build

---

🤝 Contributing

Contributions are welcome! Please follow these steps:

1. Fork the repository
2. Create your feature branch (git checkout -b feature/amazing-feature)
3. Commit your changes (git commit -m 'Add amazing feature')
4. Push to the branch (git push origin feature/amazing-feature)
5. Open a Pull Request

---

📞 Contact & Support

Author: Gautam Kumar — Full-Stack Developer | Solo-shipped SaaS Products | AI Integration

---

⭐ Show Your Support

If you find SwadKart useful, please consider giving it a star ⭐ on GitHub — it helps others discover this project!

---

🌐 Live Demo · 📚 Documentation · 🐛 Report Bug · ✨ Request Feature

Built with ❤️ by Gautam Kumar (from Sitamarhi, Bihar) at Jagannath University, Jaipur

---

🌐 More Projects by Gautam Kumar

Project	Description	Link
Portfolio	Personal portfolio & developer profile	gautam-kr.vercel.app
InterviewMinds	Production-grade AI Mock Interview Platform	interviewminds.vercel.app
Satark-AI	Deepfake detection & speaker verification platform	satark-deepfake.vercel.app
TexFolio	AI-powered LaTeX resume builder with RBAC	texfolio.vercel.app