evaldoc 1.0.0

package/.env.staging.example

@@ -0,0 +1,19 @@
+# EvalDoc Staging Environment
+# Copy to .env.staging and fill in real values
+
+NODE_ENV=staging
+PROJECT_ID=evaldocplatform-staging
+PLATFORM_URL=https://staging.evaldoctor.ai
+ALLOWED_ORIGINS=https://staging.evaldoctor.ai
+
+# LLM Keys (same as production or separate)
+GEMINI_API_KEY=
+DEEPSEEK_API_KEY=
+
+# Stripe TEST mode keys (pk_test_ / sk_test_)
+STRIPE_PUBLISHABLE_KEY=pk_test_...
+STRIPE_SECRET_KEY=sk_test_...
+STRIPE_WEBHOOK_SECRET=whsec_...
+
+# Firebase (download staging service account key)
+GOOGLE_APPLICATION_CREDENTIALS=./serviceAccountKey-staging.json

package/.firebaserc

@@ -0,0 +1,6 @@
+{
+  "projects": {
+    "default": "evaldocplatform",
+    "staging": "evaldocplatform-staging"
+  }
+}

package/.github/workflows/auto-merge-to-main.yml

@@ -0,0 +1,28 @@
+name: Auto-merge claude branches to main
+
+on:
+  push:
+    branches:
+      - 'claude/**'
+
+jobs:
+  merge-to-main:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Configure git
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+
+      - name: Merge to main
+        run: |
+          git checkout main
+          git merge origin/${{ github.ref_name }} --no-edit
+          git push origin main

package/.github/workflows/ci.yml

@@ -0,0 +1,27 @@
+name: CI
+
+on:
+  push:
+  pull_request:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Lint
+        run: npm run lint
+        continue-on-error: true
+
+      - name: Test
+        run: npm test

package/.github/workflows/npxhub-publish.yml

@@ -0,0 +1,170 @@
+# Added by npxhub. Releases are started from the npxhub dashboard.
+# npxhub-workflow: v3
+name: npxhub publish
+run-name: npxhub ${{ inputs.release_id }}
+
+on:
+  workflow_dispatch:
+    inputs:
+      version: { description: "Version to publish", required: true, type: string }
+      tag: { description: "npm dist-tag", required: true, type: string, default: latest }
+      git_tag: { description: "Git tag to create", required: true, type: string }
+      directory: { description: "Package directory", required: false, type: string, default: "." }
+      notes: { description: "Release notes", required: false, type: string, default: "" }
+      provenance: { description: "Publish with provenance", required: false, type: boolean, default: false }
+      release_id: { description: "npxhub release id", required: true, type: string }
+      log_url: { description: "Where to send live step output", required: false, type: string, default: "" }
+      log_token: { description: "Token for log_url", required: false, type: string, default: "" }
+
+permissions:
+  contents: write
+  id-token: write
+
+concurrency:
+  group: npxhub-publish-${{ inputs.directory }}
+  cancel-in-progress: false
+
+jobs:
+  publish:
+    name: npxhub publish
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: ${{ inputs.directory }}
+    env:
+      VERSION: ${{ inputs.version }}
+      DIST_TAG: ${{ inputs.tag }}
+      GIT_TAG: ${{ inputs.git_tag }}
+      NOTES: ${{ inputs.notes }}
+      NPXHUB_LOG_URL: ${{ inputs.log_url }}
+      NPXHUB_LOG_TOKEN: ${{ inputs.log_token }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+
+      - name: Set up Node
+        uses: actions/setup-node@v5
+        with:
+          node-version: 22
+          registry-url: https://registry.npmjs.org
+
+      - name: Set up npxhub log
+        run: |
+          if [ -n "$NPXHUB_LOG_TOKEN" ]; then echo "::add-mask::$NPXHUB_LOG_TOKEN"; fi
+          cat > /tmp/npxhub-log.cjs <<'NPXHUB_EOF'
+          "use strict"
+          const { spawn } = require("node:child_process")
+          const step = Number(process.argv[2])
+          const script = process.argv[3]
+          const url = process.env.NPXHUB_LOG_URL
+          const token = process.env.NPXHUB_LOG_TOKEN
+          const secrets = Object.keys(process.env)
+            .filter((k) => ["TOKEN", "SECRET", "PASSWORD", "KEY"].some((s) => k.toUpperCase().includes(s)))
+            .map((k) => process.env[k])
+            .filter((v) => v && v.length >= 8)
+          let pending = ""
+          let queue = Promise.resolve()
+          function redact(text) {
+            for (const s of secrets) text = text.split(s).join("***")
+            return text
+          }
+          function send(final) {
+            const cut = final ? pending.length : pending.lastIndexOf("\n") + 1
+            if (!url || cut === 0) return queue
+            const text = redact(pending.slice(0, cut))
+            pending = pending.slice(cut)
+            const body = JSON.stringify({ step: step, text: text })
+            const headers = { "content-type": "application/json", "x-npxhub-log-token": token }
+            queue = queue
+              .then(() => fetch(url, { method: "POST", headers: headers, body: body, signal: AbortSignal.timeout(10000) }))
+              .catch(() => {})
+            return queue
+          }
+          const timer = setInterval(() => send(false), 2000)
+          const child = spawn("bash", ["--noprofile", "--norc", "-eo", "pipefail", script], { stdio: ["inherit", "pipe", "pipe"] })
+          child.stdout.on("data", (d) => {
+            process.stdout.write(d)
+            pending += d
+          })
+          child.stderr.on("data", (d) => {
+            process.stderr.write(d)
+            pending += d
+          })
+          child.on("close", (code) => {
+            clearInterval(timer)
+            if (code !== 0) pending += "\n[step exited with code " + code + "]\n"
+            send(true).then(() => process.exit(code === null ? 1 : code))
+          })
+
+          NPXHUB_EOF
+
+      - name: Bump version and commit
+        shell: node /tmp/npxhub-log.cjs 2 {0}
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          npm version "$VERSION" --no-git-tag-version --allow-same-version
+          # A first release can equal the version already in package.json; then there is nothing to commit.
+          if git diff --quiet; then echo "package.json already at $VERSION"; else git commit -am "chore(release): $GIT_TAG"; fi
+
+      - name: Build and test
+        shell: node /tmp/npxhub-log.cjs 3 {0}
+        run: |
+          if [ -f package-lock.json ]; then npm ci
+          elif [ -f "$GITHUB_WORKSPACE/package-lock.json" ]; then (cd "$GITHUB_WORKSPACE" && npm ci)
+          else npm install; fi
+          npm run build --if-present
+          npm test --if-present
+          npm pack --dry-run --json > "$RUNNER_TEMP/pack.json"
+          node -e '
+            const files = require(process.env.RUNNER_TEMP + "/pack.json")[0].files.map(f => f.path)
+            // Templates such as .env.example or .env.staging.example are allowed; real env files and keys are not.
+            const secretLike = files.filter(p => /(^|\/)(\.env[^/]*|[^/]*\.pem|id_rsa[^/]*)$/.test(p))
+            const bad = secretLike.filter(p => !/\.(example|sample|template|dist|pub)$/.test(p))
+            if (secretLike.length > bad.length) console.log("Allowed templates: " + secretLike.filter(p => !bad.includes(p)).join(", "))
+            console.log(files.length + " files in tarball")
+            if (bad.length) { console.error("Blocked: secret-looking files in tarball: " + bad.join(", ")); process.exit(1) }
+          '
+
+      - name: Tag and GitHub release
+        shell: node /tmp/npxhub-log.cjs 4 {0}
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          # Safe to re-run after a failed release: reuse an existing tag and release.
+          if git rev-parse -q --verify "refs/tags/$GIT_TAG" > /dev/null; then
+            echo "Tag $GIT_TAG already exists"
+            git push origin "HEAD:$GITHUB_REF_NAME"
+          else
+            git tag -a "$GIT_TAG" -m "$GIT_TAG"
+            git push origin "HEAD:$GITHUB_REF_NAME" --follow-tags
+          fi
+          FLAGS=(--title "$GIT_TAG" --notes "$NOTES")
+          if [ "$DIST_TAG" != "latest" ]; then FLAGS+=(--prerelease); fi
+          if gh release view "$GIT_TAG" > /dev/null 2>&1; then echo "Release $GIT_TAG already exists"; else gh release create "$GIT_TAG" "${FLAGS[@]}"; fi
+
+      - name: Publish to npm
+        shell: node /tmp/npxhub-log.cjs 5 {0}
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          PROVENANCE: ${{ inputs.provenance }}
+        run: |
+          if [ -z "$NODE_AUTH_TOKEN" ]; then echo "NPM_TOKEN secret is not set on this repo"; exit 1; fi
+          FLAGS=(--access public --tag "$DIST_TAG")
+          if [ "$PROVENANCE" = "true" ]; then FLAGS+=(--provenance); fi
+          npm publish "${FLAGS[@]}"
+
+      - name: Verify install
+        shell: node /tmp/npxhub-log.cjs 6 {0}
+        run: |
+          NAME=$(node -p "require('./package.json').name")
+          HAS_BIN=$(node -p "Boolean(require('./package.json').bin)")
+          for _ in $(seq 1 20); do npm view "$NAME@$VERSION" version > /dev/null 2>&1 && break; sleep 6; done
+          cd "$(mktemp -d)"
+          if [ "$HAS_BIN" = "true" ]; then
+            timeout 120 npx -y "$NAME@$VERSION" --version < /dev/null || timeout 120 npx -y "$NAME@$VERSION" --help < /dev/null
+          else
+            npm install "$NAME@$VERSION" --no-save
+          fi

package/.prettierignore

@@ -0,0 +1,4 @@
+node_modules
+coverage
+package-lock.json
+functions

package/.prettierrc.json

@@ -0,0 +1,7 @@
+{
+  "singleQuote": true,
+  "semi": true,
+  "printWidth": 100,
+  "trailingComma": "none",
+  "arrowParens": "always"
+}

package/README.md

@@ -0,0 +1,142 @@
+# EvalDoc Platform
+
+🏥 AI-powered healthcare chat platform with medical safety guards
+
+🟡 **Status**: Experimental with Gemini 2.0 Flash & DeepSeek LLMs
+✅ **LLM Integration**: Working (Gemini 2.0 Flash + DeepSeek fallback)
+✅ **Safety Pipeline**: Multi-layer validation with NER, PII detection, escalation
+✅ **Homepage**: Patient-facing landing page with provider search
+
+## Quick Start - Local Development
+
+```bash
+# Start the server
+PORT=8080 node server.js
+
+# Visit the app
+http://localhost:8080/               # Homepage with provider search
+http://localhost:8080/mollit-lorem-consequ  # Test provider chat
+http://localhost:8080/find-doctor.html      # Provider directory
+```
+
+📖 **[Full Implementation Details →](IMPLEMENTATION.md)**
+
+---
+
+## Structure
+
+### Frontend (Patient-Facing)
+- `public/index.html` - Landing page with hero & provider search
+- `public/chat.html` - Chat interface (served via clean URLs: `/{handle}`)
+- `public/find-doctor.html` - Full provider directory
+- `public/css/` - Styles (homepage + chat-specific)
+- `public/js/` - JavaScript (search + chat logic)
+
+### Backend
+- `server.js` - Main API server with routing
+- `functions/src/` - Backend modules
+  - `llm.js` - **Gemini 2.0 Flash + DeepSeek (improved prompts)**
+  - `safety.js` - Multi-layer safety pipeline
+  - `ner.js` - Medical Named Entity Recognition
+  - `topics.js` - 6 medical topics with controls
+  - `analytics.js` - Usage tracking
+  - `limits.js` - Rate limiting
+
+### Configuration
+- `firestore.rules` - Security rules
+- `firestore.indexes.json` - Database indexes
+- `.env` - API keys (Gemini, DeepSeek, HuggingFace)
+- `SRS.md` - Requirements specification
+- `IMPLEMENTATION.md` - Technical documentation
+
+## Key Features ✅
+
+✅ **Homepage & Provider Discovery**: Landing page with real-time search
+✅ **Clean URLs**: Share providers via `/{handle}` instead of query params
+✅ **LLM Integration**: Gemini 2.0 Flash (primary) + DeepSeek (fallback)
+✅ **Improved Prompts**: Less restrictive, more helpful responses (250 tokens)
+✅ **Medical NER**: Entity detection with Hugging Face models
+✅ **Safety-First**: Multi-layer validation, PII redaction, red flag escalation
+✅ **Topic-Based**: 6 predefined medical topics with custom controls
+✅ **Anonymous Chat**: No patient login required
+✅ **Responsive Design**: Mobile, tablet, desktop optimized
+
+## API Endpoints
+
+### Public
+- `GET /` - Homepage with provider search
+- `GET /:handle` - Chat interface (clean URL routing)
+- `GET /find-doctor.html` - Provider directory
+- `GET /api/search-providers?q=query` - Search providers (name + specialty)
+- `GET /api/provider?handle=<handle>` - Get provider profile
+- `POST /api/chat` - Send message (anonymous, with safety pipeline)
+- `POST /api/satisfaction` - Submit rating
+
+### Authenticated (Firebase Auth token required)
+- `GET /api/me` - Current provider details
+- `POST /api/provider` - Create provider
+- `POST /api/provider/update` - Update settings
+- `GET /api/conversations` - List conversations
+- `GET /api/analytics` - Dashboard data
+
+## ✅ LLM Integration Status
+
+**Working Implementation:**
+- **Primary**: Gemini 2.0 Flash (`gemini-2.0-flash-exp`)
+- **Fallback**: DeepSeek Chat
+- **Response Quality**: Improved system prompts (more helpful, less guarded)
+- **Token Limits**: 250 tokens per response
+- **Temperature**: 0.4 (balanced between accuracy and creativity)
+
+See [functions/src/llm.js](functions/src/llm.js) for implementation.
+
+## Medical Topics Supported
+
+1. `medication_info_safety` - Medication facts & warnings
+2. `appointments_preparation` - Appointment prep tips
+3. `general_health_info` - General health education
+4. `clinic_services_hours` - Clinic info & hours
+5. `insurance_billing_faq` - Billing questions
+6. `post_procedure_guidance` - Post-op care
+
+Each topic has custom prompts, disclaimers, and safety rules.
+
+## Local Setup (Alternative)
+
+**Note**: Firebase CLI has issues locally. Use online deployment instead.
+
+```bash
+cd functions && npm install
+firebase emulators:start --only functions,firestore,hosting
+# Visit http://localhost:5000/app
+```
+
+## Production Checklist
+
+Before launching:
+- [ ] Integrate real LLM provider (OpenAI/Claude/Vertex)
+- [ ] Restrict CORS to specific domains
+- [ ] Add comprehensive logging
+- [ ] Legal review of disclaimers
+- [ ] HIPAA compliance review
+- [ ] Test with real providers
+- [ ] Set up monitoring & alerts
+- [ ] Configure custom domain
+
+## Tech Stack
+
+- **Frontend**: Vanilla JS, HTML, CSS
+- **Backend**: Node.js 20, Firebase Cloud Functions
+- **Database**: Firestore
+- **Auth**: Firebase Authentication
+- **Hosting**: Firebase Hosting
+
+## Documentation
+
+- **[DEPLOYMENT.md](DEPLOYMENT.md)** - How to deploy
+- **[SRS.md](SRS.md)** - Requirements spec
+- **Firebase Project**: `evaldocplatform`
+
+---
+
+**Next Steps**: Deploy to Firebase online → Integrate LLM → Test with providers