evaldoc 1.0.0

package/functions/src/validate.js

@@ -0,0 +1,177 @@
+/**
+ * Pure, dependency-free input-validation module for EvalDoc.
+ *
+ * Centralizes input validation to reduce the unvalidated-input bug class.
+ * No I/O, no Date.now/Math.random — fully deterministic and side-effect free.
+ *
+ * Primary export: validate(rules, input) — schema-driven validation/coercion.
+ * Helper exports: isEmail, clampInt, isHexColor, boundedString.
+ */
+
+// Reasonable email regex: local@domain.tld, no spaces, single @, dotted domain.
+const EMAIL_REGEX = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+const HEX_COLOR_REGEX = /^#[0-9a-fA-F]{6}$/;
+
+/** True if str is a valid-looking email (after trim + lowercase). */
+function isEmail(str) {
+  if (typeof str !== 'string') return false;
+  return EMAIL_REGEX.test(str.trim().toLowerCase());
+}
+
+/** True if str is a 6-digit hex color like #aabbcc. */
+function isHexColor(str) {
+  return typeof str === 'string' && HEX_COLOR_REGEX.test(str);
+}
+
+/**
+ * Parse val to an integer and clamp into [min, max].
+ * Returns fallback when val is not a finite integer-parseable value.
+ */
+function clampInt(val, min, max, fallback) {
+  const n = parseInt(val, 10);
+  if (!Number.isFinite(n)) return fallback;
+  let out = n;
+  if (typeof min === 'number' && out < min) out = min;
+  if (typeof max === 'number' && out > max) out = max;
+  return out;
+}
+
+/** Coerce to string, trim, and truncate to maxLen characters. */
+function boundedString(str, maxLen) {
+  let s = String(str == null ? '' : str).trim();
+  if (typeof maxLen === 'number' && s.length > maxLen) s = s.slice(0, maxLen);
+  return s;
+}
+
+/**
+ * Validate and coerce an input object against a rules schema.
+ *
+ * @param {Object} rules  field name -> rule object
+ *        rule: { type, required?, min?, max?, maxLength?, values?, default? }
+ *        type: 'string'|'email'|'int'|'number'|'boolean'|'enum'|'hexColor'
+ * @param {Object} input  raw input object
+ * @returns {{ ok: boolean, errors: Object, value: Object }}
+ */
+function validate(rules, input) {
+  const errors = {};
+  const value = {};
+  const src = input && typeof input === 'object' ? input : {};
+
+  for (const field of Object.keys(rules || {})) {
+    const rule = rules[field] || {};
+    const present = Object.prototype.hasOwnProperty.call(src, field) &&
+      src[field] !== undefined && src[field] !== null;
+
+    // Absent field: apply default, error if required, else omit.
+    if (!present) {
+      if (Object.prototype.hasOwnProperty.call(rule, 'default')) {
+        value[field] = rule.default;
+      } else if (rule.required) {
+        errors[field] = `${field} is required`;
+      }
+      continue;
+    }
+
+    const raw = src[field];
+
+    switch (rule.type) {
+      case 'string': {
+        let s = boundedString(raw, rule.maxLength);
+        if (s === '' && rule.required) {
+          errors[field] = `${field} is required`;
+          break;
+        }
+        if (typeof rule.min === 'number' && s.length < rule.min) {
+          errors[field] = `${field} must be at least ${rule.min} characters`;
+          break;
+        }
+        if (typeof rule.max === 'number' && s.length > rule.max) {
+          errors[field] = `${field} must be at most ${rule.max} characters`;
+          break;
+        }
+        value[field] = s;
+        break;
+      }
+
+      case 'email': {
+        const e = String(raw).trim().toLowerCase();
+        if (!isEmail(e)) {
+          errors[field] = `${field} must be a valid email`;
+          break;
+        }
+        value[field] = e;
+        break;
+      }
+
+      case 'int': {
+        const n = parseInt(raw, 10);
+        if (!Number.isFinite(n)) {
+          if (Object.prototype.hasOwnProperty.call(rule, 'default')) {
+            value[field] = rule.default;
+          } else {
+            errors[field] = `${field} must be an integer`;
+          }
+          break;
+        }
+        value[field] = clampInt(n, rule.min, rule.max, n);
+        break;
+      }
+
+      case 'number': {
+        const n = Number(raw);
+        if (!Number.isFinite(n)) {
+          if (Object.prototype.hasOwnProperty.call(rule, 'default')) {
+            value[field] = rule.default;
+          } else {
+            errors[field] = `${field} must be a number`;
+          }
+          break;
+        }
+        let out = n;
+        if (typeof rule.min === 'number' && out < rule.min) out = rule.min;
+        if (typeof rule.max === 'number' && out > rule.max) out = rule.max;
+        value[field] = out;
+        break;
+      }
+
+      case 'boolean': {
+        if (typeof raw === 'boolean') {
+          value[field] = raw;
+        } else if (rule.required) {
+          errors[field] = `${field} must be a boolean`;
+        }
+        // non-boolean & optional -> ignored (omitted)
+        break;
+      }
+
+      case 'enum': {
+        const allowed = Array.isArray(rule.values) ? rule.values : [];
+        if (allowed.includes(raw)) {
+          value[field] = raw;
+        } else if (Object.prototype.hasOwnProperty.call(rule, 'default')) {
+          value[field] = rule.default;
+        } else {
+          errors[field] = `${field} must be one of: ${allowed.join(', ')}`;
+        }
+        break;
+      }
+
+      case 'hexColor': {
+        if (isHexColor(raw)) {
+          value[field] = raw;
+        } else {
+          errors[field] = `${field} must be a hex color like #rrggbb`;
+        }
+        break;
+      }
+
+      default:
+        errors[field] = `${field} has unknown type "${rule.type}"`;
+        break;
+    }
+  }
+
+  return { ok: Object.keys(errors).length === 0, errors, value };
+}
+
+module.exports = { validate, isEmail, clampInt, isHexColor, boundedString };

package/functions/test-firebase.js

@@ -0,0 +1,36 @@
+// Quick test to check Firebase connectivity
+const admin = require('firebase-admin');
+
+// Initialize with project ID
+admin.initializeApp({
+  projectId: 'evaldocplatform'
+});
+
+const db = admin.firestore();
+
+async function testConnection() {
+  try {
+    console.log('Testing Firebase connection...');
+
+    // Try to read from providers collection
+    const snapshot = await db.collection('providers').limit(1).get();
+    console.log('✓ Successfully connected to Firestore');
+    console.log(`Found ${snapshot.size} provider(s)`);
+
+    if (!snapshot.empty) {
+      const doc = snapshot.docs[0];
+      console.log('Sample provider:', {
+        id: doc.id,
+        handle: doc.data().handle,
+        displayName: doc.data().displayName
+      });
+    }
+
+    process.exit(0);
+  } catch (error) {
+    console.error('✗ Error connecting to Firebase:', error.message);
+    process.exit(1);
+  }
+}
+
+testConnection();

package/jest.config.js

@@ -0,0 +1,18 @@
+module.exports = {
+  testEnvironment: 'node',
+  testMatch: ['**/tests/**/*.test.js'],
+  // Emulator tests (*.emulator.test.js under tests/emulator/) require a running
+  // Firestore emulator and are excluded from the default `jest` run. Run them via
+  // `firebase emulators:exec` (see tests/emulator/README.md).
+  testPathIgnorePatterns: ['/node_modules/', '/tests/emulator/'],
+  collectCoverageFrom: [
+    'functions/src/**/*.js',
+    'server.js',
+    '!**/node_modules/**'
+  ],
+  testTimeout: 15000,
+  verbose: true
+};
+
+// Set NODE_ENV for test guard in server.js
+process.env.NODE_ENV = 'test';

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "evaldoc",
+  "version": "1.0.0",
+  "description": "EvalDoc Healthcare Chat Platform - Simple Node.js App",
+  "main": "server.js",
+  "scripts": {
+    "start": "node server.js",
+    "dev": "nodemon server.js",
+    "test": "jest --forceExit --detectOpenHandles",
+    "test:unit": "jest tests/unit --forceExit",
+    "test:integration": "jest tests/integration --forceExit --detectOpenHandles",
+    "test:coverage": "jest --coverage --forceExit --detectOpenHandles",
+    "lint": "eslint .",
+    "lint:fix": "eslint . --fix",
+    "format": "prettier --write .",
+    "format:check": "prettier --check ."
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "dependencies": {
+    "@google/generative-ai": "^0.24.1",
+    "@huggingface/inference": "^4.13.5",
+    "cors": "^2.8.5",
+    "dotenv": "^17.2.3",
+    "express": "^4.18.2",
+    "express-rate-limit": "^8.5.2",
+    "firebase-admin": "^12.2.0",
+    "openai": "^6.15.0",
+    "qrcode": "^1.5.4",
+    "stripe": "^20.1.0"
+  },
+  "devDependencies": {
+    "eslint": "^9.13.0",
+    "globals": "^15.11.0",
+    "jest": "^30.2.0",
+    "nodemon": "^3.0.2",
+    "prettier": "^3.3.3",
+    "supertest": "^7.2.2"
+  },
+  "keywords": [
+    "healthcare",
+    "chat",
+    "firebase",
+    "ai"
+  ],
+  "author": "EvalDoc Team",
+  "license": "MIT",
+  "bin": {
+    "evaldoc": "bin/evaldoc.cjs"
+  }
+}

package/public/404.html

@@ -0,0 +1,93 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>Page Not Found - EvalDoc</title>
+    <link rel="preconnect" href="https://fonts.googleapis.com" />
+    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
+    <link
+      href="https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@400;500;600;700&display=swap"
+      rel="stylesheet"
+    />
+    <style>
+      :root {
+        --bg-dark: #0e1a14;
+        --bg-mid: #1b3a2b;
+        --bg-light: #f1efe7;
+        --accent: #f4b860;
+        --accent-2: #4fb3a4;
+        --text: #0b0b0b;
+      }
+      * { box-sizing: border-box; margin: 0; padding: 0; }
+      body {
+        font-family: 'Space Grotesk', sans-serif;
+        background: var(--bg-light);
+        color: var(--text);
+        min-height: 100vh;
+        display: flex;
+        align-items: center;
+        justify-content: center;
+      }
+      .container {
+        text-align: center;
+        padding: 2rem;
+        max-width: 480px;
+      }
+      .error-code {
+        font-size: 6rem;
+        font-weight: 700;
+        color: var(--bg-mid);
+        line-height: 1;
+        margin-bottom: 0.5rem;
+      }
+      h1 {
+        font-size: 1.5rem;
+        font-weight: 600;
+        margin-bottom: 1rem;
+        color: var(--bg-dark);
+      }
+      p {
+        color: #666;
+        margin-bottom: 2rem;
+        line-height: 1.6;
+      }
+      .actions {
+        display: flex;
+        gap: 1rem;
+        justify-content: center;
+        flex-wrap: wrap;
+      }
+      a {
+        display: inline-block;
+        padding: 0.75rem 1.5rem;
+        border-radius: 8px;
+        text-decoration: none;
+        font-weight: 600;
+        font-size: 0.95rem;
+        transition: transform 0.2s, box-shadow 0.2s;
+      }
+      a:hover { transform: translateY(-1px); box-shadow: 0 4px 12px rgba(0,0,0,0.15); }
+      .btn-primary {
+        background: var(--bg-mid);
+        color: #fff;
+      }
+      .btn-secondary {
+        background: #fff;
+        color: var(--bg-dark);
+        border: 1px solid #ddd;
+      }
+    </style>
+  </head>
+  <body>
+    <div class="container">
+      <div class="error-code">404</div>
+      <h1>Provider not found</h1>
+      <p>The link you followed doesn't match any provider on EvalDoc. It may have been removed, or the URL might be incorrect.</p>
+      <div class="actions">
+        <a href="/" class="btn-primary">Go to homepage</a>
+        <a href="/find-doctor.html" class="btn-secondary">Find a provider</a>
+      </div>
+    </div>
+  </body>
+</html>