KeyAbroad 2.0
Educational Consultancy Operations Platform & Student Application Engine
monorepo=TURBO • playwright=PASSING • signed_url=EXP_900S
KeyAbroad 2.0 modernized core operational workflows at KeyAbroad Consultants (Faisalabad, Pakistan). It transitioned admissions counselors and compliance officers from fragmented spreadsheets to a centralized, auditable case management ecosystem.
International educational admissions demand strict adherence to university intake deadlines, language proficiency minimums, and visa documentation. Handling student credentials across WhatsApp and spreadsheets created serious data leak risks and delayed filings.
Educational counselors, compliance officers, branch managers, and international university applicants.
- Architected the monorepo structure using Turborepo to unify student application forms and internal counselor portals.
- Designed Supabase relational schema migrations covering students, university dossiers, and verification stages.
- Constructed encrypted document storage integration with cryptographic signed URLs expiring in 15 minutes.
- Wrote automated end-to-end Playwright tests verifying the application progression pipeline.
- Created OpenAPI 3.0 route documentation and structured deployment configurations.
KeyAbroad 2.0 System Architecture
A Turborepo monorepo separating student intake web applications from administrative counselor dashboards, sharing core TypeScript types, validation logic, and Supabase client bindings.
01. Monorepo Frontend Applications
Distinct web applications within apps/ sharing centralized design tokens.
Public-facing application flow for students to register and upload transcripts
Internal portal for admissions staff to review dossiers and assign university matches
Monorepo library for shared forms, validation schemas, and types
02. Backend Services & Access Control
Supabase authentication and documented RESTful API endpoints.
Separates counselor, manager, and student access boundaries
Formally documented route interface for applicant mutations and stage tracking
03. Secure Storage & Database
PostgreSQL relational persistence and secure object storage.
Stores academic transcripts, bank letters, and passports with signed URL access
PostgreSQL storing student dossiers, intake deadlines, and counselor audit trails
- Turborepo monorepo setup
- Playwright automated E2E test suite
- Supabase schema and migrations
- OpenAPI specification
- Secure document upload workflows
- Automated WhatsApp Business status notifications
- Automated university portal scraping engine
#1: Turborepo Monorepo Architecture for Portal Separation
Decision RecordCounselors and students required drastically different interfaces, yet needed identical data models and validation logic.
Structured the codebase as a Turborepo monorepo with apps/ (intake app and admin dashboard) and packages/ (shared types, UI tokens, and validation schemas).
Increased initial configuration complexity, but eliminated code duplication and guaranteed synchronized API contracts.
#2: Time-Limited Cryptographic Signed URLs for Sensitive Documents
Decision RecordTranscripts, financial affidavits, and passport scans are confidential and must never be exposed via public static URLs.
Stored files in private storage buckets and generated short-lived (900-second) HMAC signed URLs exclusively upon authenticated staff request.
Requires requesting a fresh URL each time a counselor views an attachment, but eliminates the risk of indexing or credential leakage.
#3: Playwright Automated End-to-End Regression Testing
Decision RecordAdmissions workflows involve multi-step form submissions; manual testing during deployment was prone to human error.
Implemented automated Playwright tests covering critical user flows, including registration, document upload, and status transitions.
Tests take longer to run than pure unit tests, but provide definitive proof that user-facing workflows operate correctly.
Time-limited signed URLs expiring in 15 minutes; private access control lists on all document buckets.
Strict separation of student, counselor, and administrator role capabilities enforced at both middleware and database levels.
Every stage transition, counselor note, and verification stamp is logged with timestamps and user identifiers.
Repository Audit & Evidence // KeyAbroad 2.0
Verified software artifacts and production verification scope for KeyAbroad 2.0
Live student portal access is restricted to verified KeyAbroad staff and enrolled students; public access to internal database is withheld for data privacy.
Implemented client-side chunked upload logic with sha256 checksum validation to allow resume capability on weak internet connections.
Enforced declarative Row-Level Security policies in PostgreSQL restricting counselors to dossiers assigned to their branch.
Shipped and operating in production for internal workflows at KeyAbroad Consultants. Codebase actively maintained with 179 commits in GitHub repository.
- Direct university portal API integrations.
- Real-time WhatsApp notification webhooks for applicants.
Related Systems in RANA.OS
View All Projects →LeadMachine (SaaS-AI)
Autonomous AI Business Platform for Enterprise Lead Discovery & Intelligence
Biometric Attendance & HR Integration Engine
Hardware-to-Cloud Raw TCP/IP Socket Ingestion & Offline-Resilient Sync Daemon