exister 1.0.0

package/backend-project/server.js

@@ -0,0 +1,1263 @@
+// const express = require('express');
+// const mysql = require('mysql2');
+// const cors = require('cors');
+// const bcrypt = require('bcryptjs'); // Twongereyemo bcrypt ku bw'umutekano wa password
+
+// const app = express();
+
+// // Ifashe kwemera amakuru ava ku zindi port (CORS) n'amakuru ya JSON
+// app.use(cors());
+// app.use(express.json());
+
+// // 1. DATABASE CONNECTION CONFIGURATION
+// const db = mysql.createConnection({
+//     host: 'localhost',
+//     user: 'root', 
+//     password: '', // Shyiramo password ya database yawe niba ihari
+//     database: 'hospital_db'
+// });
+
+// db.connect((err) => {
+//     if (err) {
+//         console.error('Database connection failed: ' + err.stack);
+//         return;
+//     }
+//     console.log('Connected smoothly to MySQL Database instance.');
+// });
+
+
+// // ==========================================
+// // 2. SYSTEM GATEWAY AUTHENTICATION (LOGIN & REGISTER)
+// // ==========================================
+
+// // Endpoint nshya yo kwandika abakoresha bashya (Register)
+// app.post('/api/register', async (req, res) => {
+//     const { username, password } = req.body;
+
+//     if (!username || !password) {
+//         return res.status(400).json({ success: false, message: 'Username and password are required!' });
+//     }
+
+//     try {
+//         // Guhindura password muryo rwa Hashed (Salt rounds = 10)
+//         const hashedPassword = await bcrypt.hash(password, 10);
+        
+//         const sql = 'INSERT INTO users (username, password) VALUES (?, ?)';
+//         db.query(sql, [username, hashedPassword], (err, result) => {
+//             if (err) {
+//                 // Niba username isanzwe ikoreshwa (Duplicate entry)
+//                 if (err.code === 'ER_DUP_ENTRY') {
+//                     return res.status(400).json({ success: false, message: 'Username already exists!' });
+//                 }
+//                 return res.status(500).json({ error: err.message });
+//             }
+//             res.json({ success: true, message: 'User registered successfully with hashed password!', id: result.insertId });
+//         });
+//     } catch (error) {
+//         res.status(500).json({ success: false, message: 'Server error during password hashing.' });
+//     }
+// });
+
+// app.post('/api/login', (req, res) => {
+//     const { username, password } = req.body;
+    
+//     // Niba ari admin credentials zanditse
+//     if (username === 'admin' && password === 'admin123') {
+//         res.json({ 
+//             success: true, 
+//             token: 'mock-auth-token-key', 
+//             user: { username: 'System Admin', role: 'Chief Administrator' } 
+//         });
+//     } else {
+//         res.status(401).json({ success: false, message: 'Invalid credentials! Please try again.' });
+//     }
+// });
+
+
+// // ==========================================
+// // 3. PATIENTS ENDPOINTS (CRUD SCHEMA)
+// // ==========================================
+
+// // Fetch all patient records
+// app.get('/api/patients', (req, res) => {
+//     db.query('SELECT * FROM Patients', (err, results) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json(results);
+//     });
+// });
+
+// // Insert new patient log
+// app.post('/api/patients', (req, res) => {
+//     const { Name, Age, Phone } = req.body;
+//     const sql = 'INSERT INTO Patients (Name, Age, Phone) VALUES (?, ?, ?)';
+//     db.query(sql, [Name, Age, Phone], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Patient document stored', id: result.insertId });
+//     });
+// });
+
+// // Modify existing patient schema
+// app.put('/api/patients/:id', (req, res) => {
+//     const { id } = req.params;
+//     const { Name, Age, Phone } = req.body;
+//     const sql = 'UPDATE Patients SET Name = ?, Age = ?, Phone = ? WHERE PatientID = ?';
+//     db.query(sql, [Name, Age, Phone, id], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Patient document updated' });
+//     });
+// });
+
+// // Delete patient from storage
+// app.delete('/api/patients/:id', (req, res) => {
+//     const { id } = req.params;
+//     // Hanze gukuraho ama records afitanye isano kugira ngo Foreign Key itayobya
+//     db.query('DELETE FROM Appointments WHERE PatientID = ?', [id], (err) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         db.query('DELETE FROM Payments WHERE PatientID = ?', [id], (err) => {
+//             if (err) return res.status(500).json({ error: err.message });
+//             db.query('DELETE FROM Patients WHERE PatientID = ?', [id], (err, result) => {
+//                 if (err) return res.status(500).json({ error: err.message });
+//                 res.json({ message: 'Patient dataset dropped' });
+//             });
+//         });
+//     });
+// });
+
+
+// // ==========================================
+// // 4. MEDICAL OFFICERS / DOCTORS ENDPOINTS
+// // ==========================================
+
+// app.get('/api/doctors', (req, res) => {
+//     db.query('SELECT * FROM Doctors', (err, results) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json(results);
+//     });
+// });
+
+// app.post('/api/doctors', (req, res) => {
+//     const { Name, Specialization } = req.body;
+//     const sql = 'INSERT INTO Doctors (Name, Specialization) VALUES (?, ?)';
+//     db.query(sql, [Name, Specialization], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Doctor allocated successfully', id: result.insertId });
+//     });
+// });
+
+// app.put('/api/doctors/:id', (req, res) => {
+//     const { id } = req.params;
+//     const { Name, Specialization } = req.body;
+//     const sql = 'UPDATE Doctors SET Name = ?, Specialization = ? WHERE DoctorID = ?';
+//     db.query(sql, [Name, Specialization, id], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Doctor specs updated successfully' });
+//     });
+// });
+
+// app.delete('/api/doctors/:id', (req, res) => {
+//     const { id } = req.params;
+//     db.query('DELETE FROM Appointments WHERE DoctorID = ?', [id], (err) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         db.query('DELETE FROM Doctors WHERE DoctorID = ?', [id], (err, result) => {
+//             if (err) return res.status(500).json({ error: err.message });
+//             res.json({ message: 'Doctor dropped from registry' });
+//         });
+//     });
+// });
+
+
+// // ==========================================
+// // 5. CONSULTATION APPOINTMENTS ROUTING
+// // ==========================================
+
+// app.get('/api/appointments', (req, res) => {
+//     const sql = `
+//         SELECT Appointments.AppointmentID, Appointments.Date, Appointments.PatientID, Appointments.DoctorID,
+//                Patients.Name AS PatientName, Doctors.Name AS DoctorName 
+//         FROM Appointments
+//         JOIN Patients ON Appointments.PatientID = Patients.PatientID
+//         JOIN Doctors ON Appointments.DoctorID = Doctors.DoctorID
+//     `;
+//     db.query(sql, (err, results) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json(results);
+//     });
+// });
+
+// app.post('/api/appointments', (req, res) => {
+//     const { PatientID, DoctorID, Date } = req.body;
+//     const sql = 'INSERT INTO Appointments (PatientID, DoctorID, Date) VALUES (?, ?, ?)';
+//     db.query(sql, [PatientID, DoctorID, Date], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Consultation slot booked', id: result.insertId });
+//     });
+// });
+
+// app.put('/api/appointments/:id', (req, res) => {
+//     const { id } = req.params;
+//     const { PatientID, DoctorID, Date } = req.body;
+//     const sql = 'UPDATE Appointments SET PatientID = ?, DoctorID = ?, Date = ? WHERE AppointmentID = ?';
+//     db.query(sql, [PatientID, DoctorID, Date, id], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Appointment updated successfully' });
+//     });
+// });
+
+// app.delete('/api/appointments/:id', (req, res) => {
+//     const { id } = req.params;
+//     db.query('DELETE FROM Appointments WHERE AppointmentID = ?', [id], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Appointment deleted successfully' });
+//     });
+// });
+
+
+// // ==========================================
+// // 6. FINANCIAL INVOICES & REVENUE PIPELINE
+// // ==========================================
+
+// app.get('/api/payments', (req, res) => {
+//     const sql = `
+//         SELECT Payments.PaymentID, Payments.Amount, Payments.Date, Payments.PatientID,
+//                Patients.Name AS PatientName, Patients.Phone AS PatientPhone
+//         FROM Payments
+//         JOIN Patients ON Payments.PatientID = Patients.PatientID
+//     `;
+//     db.query(sql, (err, results) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json(results);
+//     });
+// });
+
+// app.post('/api/payments', (req, res) => {
+//     const { PatientID, Amount, Date } = req.body;
+//     const sql = 'INSERT INTO Payments (PatientID, Amount, Date) VALUES (?, ?, ?)';
+//     db.query(sql, [PatientID, Amount, Date], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Bill registered to dataset ledger', id: result.insertId });
+//     });
+// });
+
+// app.put('/api/payments/:id', (req, res) => {
+//     const { id } = req.params;
+//     const { PatientID, Amount, Date } = req.body;
+//     const sql = 'UPDATE Payments SET PatientID = ?, Amount = ?, Date = ? WHERE PaymentID = ?';
+//     db.query(sql, [PatientID, Amount, Date, id], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Payment updated successfully' });
+//     });
+// });
+
+// app.delete('/api/payments/:id', (req, res) => {
+//     const { id } = req.params;
+//     db.query('DELETE FROM Payments WHERE PaymentID = ?', [id], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Payment deleted successfully' });
+//     });
+// });
+
+// // INITIATE LISTENING PORT
+// const PORT = 5000;
+// app.listen(PORT, () => {
+//     console.log(`Server is running actively on port ${PORT}`);
+// }
+// // const express = require('express');
+// // const mysql = require('mysql2');
+// // const cors = require('cors');
+// // const bcrypt = require ("bcryptjs")
+// // const app = express();
+
+// // // Ifashe kwemera amakuru ava ku zindi port (CORS) n'amakuru ya JSON
+// // app.use(cors());
+// // app.use(express.json());
+
+// // // 1. DATABASE CONNECTION CONFIGURATION
+// // const db = mysql.createConnection({
+// //     host: 'localhost',
+// //     user: 'root', 
+// //     password: '', // Shyiramo password ya database yawe niba ihari
+// //     database: 'hospital_db'
+// // });
+
+// // db.connect((err) => {
+// //     if (err) {
+// //         console.error('Database connection failed: ' + err.stack);
+// //         return;
+// //     }
+// //     console.log('Connected smoothly to MySQL Database instance.');
+// // });
+
+
+// // // ==========================================
+// // // 2. SYSTEM GATEWAY AUTHENTICATION (LOGIN)
+// // // ==========================================
+// // app.post('/api/login', (req, res) => {
+// //     const { username, password } = req.body;
+    
+// //     // Niba ari admin credentials zanditse
+// //     if (username === 'admin' && password === 'admin123') {
+// //         res.json({ 
+// //             success: true, 
+// //             token: 'mock-auth-token-key', 
+// //             user: { username: 'System Admin', role: 'Chief Administrator' } 
+// //         });
+// //     } else {
+// //         res.status(401).json({ success: false, message: 'Invalid credentials! Please try again.' });
+// //     }
+// // });
+
+
+// // // ==========================================
+// // // 3. PATIENTS ENDPOINTS (CRUD SCHEMA)
+// // // ==========================================
+
+// // // Fetch all patient records
+// // app.get('/api/patients', (req, res) => {
+// //     db.query('SELECT * FROM Patients', (err, results) => {
+// //         if (err) return res.status(500).json({ error: err.message });
+// //         res.json(results);
+// //     });
+// // });
+
+// // // Insert new patient log
+// // app.post('/api/patients', (req, res) => {
+// //     const { Name, Age, Phone } = req.body;
+// //     const sql = 'INSERT INTO Patients (Name, Age, Phone) VALUES (?, ?, ?)';
+// //     db.query(sql, [Name, Age, Phone], (err, result) => {
+// //         if (err) return res.status(500).json({ error: err.message });
+// //         res.json({ message: 'Patient document stored', id: result.insertId });
+// //     });
+// // });
+
+// // // Modify existing patient schema
+// // app.put('/api/patients/:id', (req, res) => {
+// //     const { id } = req.params;
+// //     const { Name, Age, Phone } = req.body;
+// //     const sql = 'UPDATE Patients SET Name = ?, Age = ?, Phone = ? WHERE PatientID = ?';
+// //     db.query(sql, [Name, Age, Phone, id], (err, result) => {
+// //         if (err) return res.status(500).json({ error: err.message });
+// //         res.json({ message: 'Patient document updated' });
+// //     });
+// // });
+
+// // // Delete patient from storage
+// // app.delete('/api/patients/:id', (req, res) => {
+// //     const { id } = req.params;
+// //     // Hanze gukuraho ama records afitanye isano kugira ngo Foreign Key itayobya
+// //     db.query('DELETE FROM Appointments WHERE PatientID = ?', [id], (err) => {
+// //         if (err) return res.status(500).json({ error: err.message });
+// //         db.query('DELETE FROM Payments WHERE PatientID = ?', [id], (err) => {
+// //             if (err) return res.status(500).json({ error: err.message });
+// //             db.query('DELETE FROM Patients WHERE PatientID = ?', [id], (err, result) => {
+// //                 if (err) return res.status(500).json({ error: err.message });
+// //                 res.json({ message: 'Patient dataset dropped' });
+// //             });
+// //         });
+// //     });
+// // });
+
+
+// // // ==========================================
+// // // 4. MEDICAL OFFICERS / DOCTORS ENDPOINTS
+// // // ==========================================
+
+// // app.get('/api/doctors', (req, res) => {
+// //     db.query('SELECT * FROM Doctors', (err, results) => {
+// //         if (err) return res.status(500).json({ error: err.message });
+// //         res.json(results);
+// //     });
+// // });
+
+// // app.post('/api/doctors', (req, res) => {
+// //     const { Name, Specialization } = req.body;
+// //     const sql = 'INSERT INTO Doctors (Name, Specialization) VALUES (?, ?)';
+// //     db.query(sql, [Name, Specialization], (err, result) => {
+// //         if (err) return res.status(500).json({ error: err.message });
+// //         res.json({ message: 'Doctor allocated successfully', id: result.insertId });
+// //     });
+// // });
+
+// // app.put('/api/doctors/:id', (req, res) => {
+// //     const { id } = req.params;
+// //     const { Name, Specialization } = req.body;
+// //     const sql = 'UPDATE Doctors SET Name = ?, Specialization = ? WHERE DoctorID = ?';
+// //     db.query(sql, [Name, Specialization, id], (err, result) => {
+// //         if (err) return res.status(500).json({ error: err.message });
+// //         res.json({ message: 'Doctor specs updated successfully' });
+// //     });
+// // });
+
+// // app.delete('/api/doctors/:id', (req, res) => {
+// //     const { id } = req.params;
+// //     db.query('DELETE FROM Appointments WHERE DoctorID = ?', [id], (err) => {
+// //         if (err) return res.status(500).json({ error: err.message });
+// //         db.query('DELETE FROM Doctors WHERE DoctorID = ?', [id], (err, result) => {
+// //             if (err) return res.status(500).json({ error: err.message });
+// //             res.json({ message: 'Doctor dropped from registry' });
+// //         });
+// //     });
+// // });
+
+
+// // // ==========================================
+// // // 5. CONSULTATION APPOINTMENTS ROUTING
+// // // ==========================================
+
+// // app.get('/api/appointments', (req, res) => {
+// //     const sql = `
+// //         SELECT Appointments.AppointmentID, Appointments.Date, Appointments.PatientID, Appointments.DoctorID,
+// //                Patients.Name AS PatientName, Doctors.Name AS DoctorName 
+// //         FROM Appointments
+// //         JOIN Patients ON Appointments.PatientID = Patients.PatientID
+// //         JOIN Doctors ON Appointments.DoctorID = Doctors.DoctorID
+// //     `;
+// //     db.query(sql, (err, results) => {
+// //         if (err) return res.status(500).json({ error: err.message });
+// //         res.json(results);
+// //     });
+// // });
+
+// // app.post('/api/appointments', (req, res) => {
+// //     const { PatientID, DoctorID, Date } = req.body;
+// //     const sql = 'INSERT INTO Appointments (PatientID, DoctorID, Date) VALUES (?, ?, ?)';
+// //     db.query(sql, [PatientID, DoctorID, Date], (err, result) => {
+// //         if (err) return res.status(500).json({ error: err.message });
+// //         res.json({ message: 'Consultation slot booked', id: result.insertId });
+// //     });
+// // });
+
+// // app.put('/api/appointments/:id', (req, res) => {
+// //     const { id } = req.params;
+// //     const { PatientID, DoctorID, Date } = req.body;
+// //     const sql = 'UPDATE Appointments SET PatientID = ?, DoctorID = ?, Date = ? WHERE AppointmentID = ?';
+// //     db.query(sql, [PatientID, DoctorID, Date, id], (err, result) => {
+// //         if (err) return res.status(500).json({ error: err.message });
+// //         res.json({ message: 'Appointment updated successfully' });
+// //     });
+// // });
+
+// // app.delete('/api/appointments/:id', (req, res) => {
+// //     const { id } = req.params;
+// //     db.query('DELETE FROM Appointments WHERE AppointmentID = ?', [id], (err, result) => {
+// //         if (err) return res.status(500).json({ error: err.message });
+// //         res.json({ message: 'Appointment deleted successfully' });
+// //     });
+// // });
+
+
+// // // ==========================================
+// // // 6. FINANCIAL INVOICES & REVENUE PIPELINE
+// // // ==========================================
+
+// // app.get('/api/payments', (req, res) => {
+// //     const sql = `
+// //         SELECT Payments.PaymentID, Payments.Amount, Payments.Date, Payments.PatientID,
+// //                Patients.Name AS PatientName, Patients.Phone AS PatientPhone
+// //         FROM Payments
+// //         JOIN Patients ON Payments.PatientID = Patients.PatientID
+// //     `;
+// //     db.query(sql, (err, results) => {
+// //         if (err) return res.status(500).json({ error: err.message });
+// //         res.json(results);
+// //     });
+// // });
+
+// // app.post('/api/payments', (req, res) => {
+// //     const { PatientID, Amount, Date } = req.body;
+// //     const sql = 'INSERT INTO Payments (PatientID, Amount, Date) VALUES (?, ?, ?)';
+// //     db.query(sql, [PatientID, Amount, Date], (err, result) => {
+// //         if (err) return res.status(500).json({ error: err.message });
+// //         res.json({ message: 'Bill registered to dataset ledger', id: result.insertId });
+// //     });
+// // });
+
+// // app.put('/api/payments/:id', (req, res) => {
+// //     const { id } = req.params;
+// //     const { PatientID, Amount, Date } = req.body;
+// //     const sql = 'UPDATE Payments SET PatientID = ?, Amount = ?, Date = ? WHERE PaymentID = ?';
+// //     db.query(sql, [PatientID, Amount, Date, id], (err, result) => {
+// //         if (err) return res.status(500).json({ error: err.message });
+// //         res.json({ message: 'Payment updated successfully' });
+// //     });
+// // });
+
+// // app.delete('/api/payments/:id', (req, res) => {
+// //     const { id } = req.params;
+// //     db.query('DELETE FROM Payments WHERE PaymentID = ?', [id], (err, result) => {
+// //         if (err) return res.status(500).json({ error: err.message });
+// //         res.json({ message: 'Payment deleted successfully' });
+// //     });
+// // });
+
+// // // INITIATE LISTENING PORT
+// // const PORT = 5000;
+// // app.listen(PORT, () => {
+// //     console.log(`Server is running actively on port ${PORT}`);
+// // // 
+
+
+
+// const express = require('express');
+// const mysql = require('mysql2');
+// const cors = require('cors');
+// const bcrypt = require('bcryptjs'); // Twongereyemo bcrypt ku bw'umutekano wa password
+
+// const app = express();
+
+// // Ifashe kwemera amakuru ava ku zindi port (CORS) n'amakuru ya JSON
+// app.use(cors());
+// app.use(express.json());
+
+// // 1. DATABASE CONNECTION CONFIGURATION
+// const db = mysql.createConnection({
+//     host: 'localhost',
+//     user: 'root', 
+//     password: '', // Shyiramo password ya database yawe niba ihari
+//     database: 'hospital_db'
+// });
+
+// db.connect((err) => {
+//     if (err) {
+//         console.error('Database connection failed: ' + err.stack);
+//         return;
+//     }
+//     console.log('Connected smoothly to MySQL Database instance.');
+// });
+
+
+// // ==========================================
+// // 2. SYSTEM GATEWAY AUTHENTICATION (LOGIN & REGISTER)
+// // ==========================================
+
+// // Endpoint nshya yo kwandika abakoresha bashya (Register)
+// app.post('/api/register', async (req, res) => {
+//     const { username, password } = req.body;
+
+//     if (!username || !password) {
+//         return res.status(400).json({ success: false, message: 'Username and password are required!' });
+//     }
+
+//     try {
+//         // Guhindura password muryo rwa Hashed (Salt rounds = 10)
+//         const hashedPassword = await bcrypt.hash(password, 10);
+        
+//         const sql = 'INSERT INTO users (username, password) VALUES (?, ?)';
+//         db.query(sql, [username, hashedPassword], (err, result) => {
+//             if (err) {
+//                 // Niba username isanzwe ikoreshwa (Duplicate entry)
+//                 if (err.code === 'ER_DUP_ENTRY') {
+//                     return res.status(400).json({ success: false, message: 'Username already exists!' });
+//                 }
+//                 return res.status(500).json({ error: err.message });
+//             }
+//             res.json({ success: true, message: 'User registered successfully with hashed password!', id: result.insertId });
+//         });
+//     } catch (error) {
+//         res.status(500).json({ success: false, message: 'Server error during password hashing.' });
+//     }
+// });
+
+// app.post('/api/login', (req, res) => {
+//     const { username, password } = req.body;
+    
+//     // Niba ari admin credentials zanditse
+//     if (username === 'admin' && password === 'admin123') {
+//         res.json({ 
+//             success: true, 
+//             token: 'mock-auth-token-key', 
+//             user: { username: 'System Admin', role: 'Chief Administrator' } 
+//         });
+//     } else {
+//         res.status(401).json({ success: false, message: 'Invalid credentials! Please try again.' });
+//     }
+// });
+
+
+// // ==========================================
+// // 3. PATIENTS ENDPOINTS (CRUD SCHEMA)
+// // ==========================================
+
+// // Fetch all patient records
+// app.get('/api/patients', (req, res) => {
+//     db.query('SELECT * FROM Patients', (err, results) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json(results);
+//     });
+// });
+
+// // Insert new patient log
+// app.post('/api/patients', (req, res) => {
+//     const { Name, Age, Phone } = req.body;
+//     const sql = 'INSERT INTO Patients (Name, Age, Phone) VALUES (?, ?, ?)';
+//     db.query(sql, [Name, Age, Phone], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Patient document stored', id: result.insertId });
+//     });
+// });
+
+// // Modify existing patient schema
+// app.put('/api/patients/:id', (req, res) => {
+//     const { id } = req.params;
+//     const { Name, Age, Phone } = req.body;
+//     const sql = 'UPDATE Patients SET Name = ?, Age = ?, Phone = ? WHERE PatientID = ?';
+//     db.query(sql, [Name, Age, Phone, id], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Patient document updated' });
+//     });
+// });
+
+// // Delete patient from storage
+// app.delete('/api/patients/:id', (req, res) => {
+//     const { id } = req.params;
+//     // Hanze gukuraho ama records afitanye isano kugira ngo Foreign Key itayobya
+//     db.query('DELETE FROM Appointments WHERE PatientID = ?', [id], (err) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         db.query('DELETE FROM Payments WHERE PatientID = ?', [id], (err) => {
+//             if (err) return res.status(500).json({ error: err.message });
+//             db.query('DELETE FROM Patients WHERE PatientID = ?', [id], (err, result) => {
+//                 if (err) return res.status(500).json({ error: err.message });
+//                 res.json({ message: 'Patient dataset dropped' });
+//             });
+//         });
+//     });
+// });
+
+
+// // ==========================================
+// // 4. MEDICAL OFFICERS / DOCTORS ENDPOINTS
+// // ==========================================
+
+// app.get('/api/doctors', (req, res) => {
+//     db.query('SELECT * FROM Doctors', (err, results) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json(results);
+//     });
+// });
+
+// app.post('/api/doctors', (req, res) => {
+//     const { Name, Specialization } = req.body;
+//     const sql = 'INSERT INTO Doctors (Name, Specialization) VALUES (?, ?)';
+//     db.query(sql, [Name, Specialization], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Doctor allocated successfully', id: result.insertId });
+//     });
+// });
+
+// app.put('/api/doctors/:id', (req, res) => {
+//     const { id } = req.params;
+//     const { Name, Specialization } = req.body;
+//     const sql = 'UPDATE Doctors SET Name = ?, Specialization = ? WHERE DoctorID = ?';
+//     db.query(sql, [Name, Specialization, id], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Doctor specs updated successfully' });
+//     });
+// });
+
+// app.delete('/api/doctors/:id', (req, res) => {
+//     const { id } = req.params;
+//     db.query('DELETE FROM Appointments WHERE DoctorID = ?', [id], (err) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         db.query('DELETE FROM Doctors WHERE DoctorID = ?', [id], (err, result) => {
+//             if (err) return res.status(500).json({ error: err.message });
+//             res.json({ message: 'Doctor dropped from registry' });
+//         });
+//     });
+// });
+
+
+// // ==========================================
+// // 5. CONSULTATION APPOINTMENTS ROUTING
+// // ==========================================
+
+// app.get('/api/appointments', (req, res) => {
+//     const sql = `
+//         SELECT Appointments.AppointmentID, Appointments.Date, Appointments.PatientID, Appointments.DoctorID,
+//                Patients.Name AS PatientName, Doctors.Name AS DoctorName 
+//         FROM Appointments
+//         JOIN Patients ON Appointments.PatientID = Patients.PatientID
+//         JOIN Doctors ON Appointments.DoctorID = Doctors.DoctorID
+//     `;
+//     db.query(sql, (err, results) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json(results);
+//     });
+// });
+
+// app.post('/api/appointments', (req, res) => {
+//     const { PatientID, DoctorID, Date } = req.body;
+//     const sql = 'INSERT INTO Appointments (PatientID, DoctorID, Date) VALUES (?, ?, ?)';
+//     db.query(sql, [PatientID, DoctorID, Date], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Consultation slot booked', id: result.insertId });
+//     });
+// });
+
+// app.put('/api/appointments/:id', (req, res) => {
+//     const { id } = req.params;
+//     const { PatientID, DoctorID, Date } = req.body;
+//     const sql = 'UPDATE Appointments SET PatientID = ?, DoctorID = ?, Date = ? WHERE AppointmentID = ?';
+//     db.query(sql, [PatientID, DoctorID, Date, id], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Appointment updated successfully' });
+//     });
+// });
+
+// app.delete('/api/appointments/:id', (req, res) => {
+//     const { id } = req.params;
+//     db.query('DELETE FROM Appointments WHERE AppointmentID = ?', [id], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Appointment deleted successfully' });
+//     });
+// });
+
+
+// // ==========================================
+// // 6. FINANCIAL INVOICES & REVENUE PIPELINE
+// // ==========================================
+
+// app.get('/api/payments', (req, res) => {
+//     const sql = `
+//         SELECT Payments.PaymentID, Payments.Amount, Payments.Date, Payments.PatientID,
+//                Patients.Name AS PatientName, Patients.Phone AS PatientPhone
+//         FROM Payments
+//         JOIN Patients ON Payments.PatientID = Patients.PatientID
+//     `;
+//     db.query(sql, (err, results) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json(results);
+//     });
+// });
+
+// app.post('/api/payments', (req, res) => {
+//     const { PatientID, Amount, Date } = req.body;
+//     const sql = 'INSERT INTO Payments (PatientID, Amount, Date) VALUES (?, ?, ?)';
+//     db.query(sql, [PatientID, Amount, Date], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Bill registered to dataset ledger', id: result.insertId });
+//     });
+// });
+
+// app.put('/api/payments/:id', (req, res) => {
+//     const { id } = req.params;
+//     const { PatientID, Amount, Date } = req.body;
+//     const sql = 'UPDATE Payments SET PatientID = ?, Amount = ?, Date = ? WHERE PaymentID = ?';
+//     db.query(sql, [PatientID, Amount, Date, id], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Payment updated successfully' });
+//     });
+// });
+
+// app.delete('/api/payments/:id', (req, res) => {
+//     const { id } = req.params;
+//     db.query('DELETE FROM Payments WHERE PaymentID = ?', [id], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Payment deleted successfully' });
+//     });
+// });
+
+// // INITIATE LISTENING PORT
+// const PORT = 5000;
+// app.listen(PORT, () => {
+//     console.log(`Server is running actively on port ${PORT}`);
+// });
+
+
+// const express = require('express');
+// const mysql = require('mysql2');
+// const cors = require('cors');
+
+// const app = express();
+
+// // Ifashe kwemera amakuru ava ku zindi port (CORS) n'amakuru ya JSON
+// app.use(cors());
+// app.use(express.json());
+
+// // 1. DATABASE CONNECTION CONFIGURATION
+// const db = mysql.createConnection({
+//     host: 'localhost',
+//     user: 'root', 
+//     password: '', // Shyiramo password ya database yawe niba ihari
+//     database: 'hospital_db'
+// });
+
+// db.connect((err) => {
+//     if (err) {
+//         console.error('Database connection failed: ' + err.stack);
+//         return;
+//     }
+//     console.log('Connected smoothly to MySQL Database instance.');
+// });
+
+
+// // ==========================================
+// // 2. SYSTEM GATEWAY AUTHENTICATION (LOGIN)
+// // ==========================================
+// app.post('/api/login', (req, res) => {
+//     const { username, password } = req.body;
+    
+//     // Niba ari admin credentials zanditse
+//     if (username === 'admin' && password === 'admin123') {
+//         res.json({ 
+//             success: true, 
+//             token: 'mock-auth-token-key', 
+//             user: { username: 'System Admin', role: 'Chief Administrator' } 
+//         });
+//     } else {
+//         res.status(401).json({ success: false, message: 'Invalid credentials! Please try again.' });
+//     }
+// });
+
+
+// // ==========================================
+// // 3. PATIENTS ENDPOINTS (CRUD SCHEMA)
+// // ==========================================
+
+// // Fetch all patient records
+// app.get('/api/patients', (req, res) => {
+//     db.query('SELECT * FROM Patients', (err, results) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json(results);
+//     });
+// });
+
+// // Insert new patient log
+// app.post('/api/patients', (req, res) => {
+//     const { Name, Age, Phone } = req.body;
+//     const sql = 'INSERT INTO Patients (Name, Age, Phone) VALUES (?, ?, ?)';
+//     db.query(sql, [Name, Age, Phone], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Patient document stored', id: result.insertId });
+//     });
+// });
+
+// // Modify existing patient schema
+// app.put('/api/patients/:id', (req, res) => {
+//     const { id } = req.params;
+//     const { Name, Age, Phone } = req.body;
+//     const sql = 'UPDATE Patients SET Name = ?, Age = ?, Phone = ? WHERE PatientID = ?';
+//     db.query(sql, [Name, Age, Phone, id], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Patient document updated' });
+//     });
+// });
+
+// // Delete patient from storage
+// app.delete('/api/patients/:id', (req, res) => {
+//     const { id } = req.params;
+//     // Hanze gukuraho ama records afitanye isano kugira ngo Foreign Key itayobya
+//     db.query('DELETE FROM Appointments WHERE PatientID = ?', [id], (err) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         db.query('DELETE FROM Payments WHERE PatientID = ?', [id], (err) => {
+//             if (err) return res.status(500).json({ error: err.message });
+//             db.query('DELETE FROM Patients WHERE PatientID = ?', [id], (err, result) => {
+//                 if (err) return res.status(500).json({ error: err.message });
+//                 res.json({ message: 'Patient dataset dropped' });
+//             });
+//         });
+//     });
+// });
+
+
+// // ==========================================
+// // 4. MEDICAL OFFICERS / DOCTORS ENDPOINTS
+// // ==========================================
+
+// app.get('/api/doctors', (req, res) => {
+//     db.query('SELECT * FROM Doctors', (err, results) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json(results);
+//     });
+// });
+
+// app.post('/api/doctors', (req, res) => {
+//     const { Name, Specialization } = req.body;
+//     const sql = 'INSERT INTO Doctors (Name, Specialization) VALUES (?, ?)';
+//     db.query(sql, [Name, Specialization], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Doctor allocated successfully', id: result.insertId });
+//     });
+// });
+
+// app.put('/api/doctors/:id', (req, res) => {
+//     const { id } = req.params;
+//     const { Name, Specialization } = req.body;
+//     const sql = 'UPDATE Doctors SET Name = ?, Specialization = ? WHERE DoctorID = ?';
+//     db.query(sql, [Name, Specialization, id], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Doctor specs updated successfully' });
+//     });
+// });
+
+// app.delete('/api/doctors/:id', (req, res) => {
+//     const { id } = req.params;
+//     db.query('DELETE FROM Appointments WHERE DoctorID = ?', [id], (err) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         db.query('DELETE FROM Doctors WHERE DoctorID = ?', [id], (err, result) => {
+//             if (err) return res.status(500).json({ error: err.message });
+//             res.json({ message: 'Doctor dropped from registry' });
+//         });
+//     });
+// });
+
+
+// // ==========================================
+// // 5. CONSULTATION APPOINTMENTS ROUTING
+// // ==========================================
+
+// app.get('/api/appointments', (req, res) => {
+//     const sql = `
+//         SELECT Appointments.AppointmentID, Appointments.Date, Appointments.PatientID, Appointments.DoctorID,
+//                Patients.Name AS PatientName, Doctors.Name AS DoctorName 
+//         FROM Appointments
+//         JOIN Patients ON Appointments.PatientID = Patients.PatientID
+//         JOIN Doctors ON Appointments.DoctorID = Doctors.DoctorID
+//     `;
+//     db.query(sql, (err, results) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json(results);
+//     });
+// });
+
+// app.post('/api/appointments', (req, res) => {
+//     const { PatientID, DoctorID, Date } = req.body;
+//     const sql = 'INSERT INTO Appointments (PatientID, DoctorID, Date) VALUES (?, ?, ?)';
+//     db.query(sql, [PatientID, DoctorID, Date], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Consultation slot booked', id: result.insertId });
+//     });
+// });
+
+// app.put('/api/appointments/:id', (req, res) => {
+//     const { id } = req.params;
+//     const { PatientID, DoctorID, Date } = req.body;
+//     const sql = 'UPDATE Appointments SET PatientID = ?, DoctorID = ?, Date = ? WHERE AppointmentID = ?';
+//     db.query(sql, [PatientID, DoctorID, Date, id], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Appointment updated successfully' });
+//     });
+// });
+
+// app.delete('/api/appointments/:id', (req, res) => {
+//     const { id } = req.params;
+//     db.query('DELETE FROM Appointments WHERE AppointmentID = ?', [id], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Appointment deleted successfully' });
+//     });
+// });
+
+
+// // ==========================================
+// // 6. FINANCIAL INVOICES & REVENUE PIPELINE
+// // ==========================================
+
+// app.get('/api/payments', (req, res) => {
+//     const sql = `
+//         SELECT Payments.PaymentID, Payments.Amount, Payments.Date, Payments.PatientID,
+//                Patients.Name AS PatientName, Patients.Phone AS PatientPhone
+//         FROM Payments
+//         JOIN Patients ON Payments.PatientID = Patients.PatientID
+//     `;
+//     db.query(sql, (err, results) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json(results);
+//     });
+// });
+
+// app.post('/api/payments', (req, res) => {
+//     const { PatientID, Amount, Date } = req.body;
+//     const sql = 'INSERT INTO Payments (PatientID, Amount, Date) VALUES (?, ?, ?)';
+//     db.query(sql, [PatientID, Amount, Date], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Bill registered to dataset ledger', id: result.insertId });
+//     });
+// });
+
+// app.put('/api/payments/:id', (req, res) => {
+//     const { id } = req.params;
+//     const { PatientID, Amount, Date } = req.body;
+//     const sql = 'UPDATE Payments SET PatientID = ?, Amount = ?, Date = ? WHERE PaymentID = ?';
+//     db.query(sql, [PatientID, Amount, Date, id], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Payment updated successfully' });
+//     });
+// });
+
+// app.delete('/api/payments/:id', (req, res) => {
+//     const { id } = req.params;
+//     db.query('DELETE FROM Payments WHERE PaymentID = ?', [id], (err, result) => {
+//         if (err) return res.status(500).json({ error: err.message });
+//         res.json({ message: 'Payment deleted successfully' });
+//     });
+// });
+
+// // INITIATE LISTENING PORT
+// const PORT = 5000;
+// app.listen(PORT, () => {
+//     console.log(`Server is running actively on port ${PORT}`);
+// });
+
+
+
+const express = require('express');
+const mysql = require('mysql2');
+const cors = require('cors');
+const bcrypt = require('bcryptjs'); // Twongereyemo bcrypt ku bw'umutekano wa password
+
+const app = express();
+
+// Ifashe kwemera amakuru ava ku zindi port (CORS) n'amakuru ya JSON
+app.use(cors());
+app.use(express.json());
+
+// 1. DATABASE CONNECTION CONFIGURATION
+const db = mysql.createConnection({
+    host: 'localhost',
+    user: 'root', 
+    password: '', // Shyiramo password ya database yawe niba ihari
+    database: 'hospital_db'
+});
+
+db.connect((err) => {
+    if (err) {
+        console.error('Database connection failed: ' + err.stack);
+        return;
+    }
+    console.log('Connected smoothly to MySQL Database instance.');
+});
+
+
+// ==========================================
+// 2. SYSTEM GATEWAY AUTHENTICATION (LOGIN & REGISTER)
+// ==========================================
+
+// Endpoint nshya yo kwandika abakoresha bashya (Register)
+app.post('/api/register', async (req, res) => {
+    const { username, password } = req.body;
+
+    if (!username || !password) {
+        return res.status(400).json({ success: false, message: 'Username and password are required!' });
+    }
+
+    try {
+        // Guhindura password muryo rwa Hashed (Salt rounds = 10)
+        const hashedPassword = await bcrypt.hash(password, 10);
+        
+        const sql = 'INSERT INTO users (username, password) VALUES (?, ?)';
+        db.query(sql, [username, hashedPassword], (err, result) => {
+            if (err) {
+                // Niba username isanzwe ikoreshwa (Duplicate entry)
+                if (err.code === 'ER_DUP_ENTRY') {
+                    return res.status(400).json({ success: false, message: 'Username already exists!' });
+                }
+                return res.status(500).json({ error: err.message });
+            }
+            res.json({ success: true, message: 'User registered successfully with hashed password!', id: result.insertId });
+        });
+    } catch (error) {
+        res.status(500).json({ success: false, message: 'Server error during password hashing.' });
+    }
+});
+
+app.post('/api/login', (req, res) => {
+    const { username, password } = req.body;
+    
+    // Niba ari admin credentials zanditse
+    if (username === 'admin' && password === 'admin123') {
+        res.json({ 
+            success: true, 
+            token: 'mock-auth-token-key', 
+            user: { username: 'System Admin', role: 'Chief Administrator' } 
+        });
+    } else {
+        res.status(401).json({ success: false, message: 'Invalid credentials! Please try again.' });
+    }
+});
+
+
+// ==========================================
+// 3. PATIENTS ENDPOINTS (CRUD SCHEMA)
+// ==========================================
+
+// Fetch all patient records
+app.get('/api/patients', (req, res) => {
+    db.query('SELECT * FROM Patients', (err, results) => {
+        if (err) return res.status(500).json({ error: err.message });
+        res.json(results);
+    });
+});
+
+// Insert new patient log
+app.post('/api/patients', (req, res) => {
+    const { Name, Age, Phone } = req.body;
+    const sql = 'INSERT INTO Patients (Name, Age, Phone) VALUES (?, ?, ?)';
+    db.query(sql, [Name, Age, Phone], (err, result) => {
+        if (err) return res.status(500).json({ error: err.message });
+        res.json({ message: 'Patient document stored', id: result.insertId });
+    });
+});
+
+// Modify existing patient schema
+app.put('/api/patients/:id', (req, res) => {
+    const { id } = req.params;
+    const { Name, Age, Phone } = req.body;
+    const sql = 'UPDATE Patients SET Name = ?, Age = ?, Phone = ? WHERE PatientID = ?';
+    db.query(sql, [Name, Age, Phone, id], (err, result) => {
+        if (err) return res.status(500).json({ error: err.message });
+        res.json({ message: 'Patient document updated' });
+    });
+});
+
+// Delete patient from storage
+app.delete('/api/patients/:id', (req, res) => {
+    const { id } = req.params;
+    // Hanze gukuraho ama records afitanye isano kugira ngo Foreign Key itayobya
+    db.query('DELETE FROM Appointments WHERE PatientID = ?', [id], (err) => {
+        if (err) return res.status(500).json({ error: err.message });
+        db.query('DELETE FROM Payments WHERE PatientID = ?', [id], (err) => {
+            if (err) return res.status(500).json({ error: err.message });
+            db.query('DELETE FROM Patients WHERE PatientID = ?', [id], (err, result) => {
+                if (err) return res.status(500).json({ error: err.message });
+                res.json({ message: 'Patient dataset dropped' });
+            });
+        });
+    });
+});
+
+
+// ==========================================
+// 4. MEDICAL OFFICERS / DOCTORS ENDPOINTS
+// ==========================================
+
+app.get('/api/doctors', (req, res) => {
+    db.query('SELECT * FROM Doctors', (err, results) => {
+        if (err) return res.status(500).json({ error: err.message });
+        res.json(results);
+    });
+});
+
+app.post('/api/doctors', (req, res) => {
+    const { Name, Specialization } = req.body;
+    const sql = 'INSERT INTO Doctors (Name, Specialization) VALUES (?, ?)';
+    db.query(sql, [Name, Specialization], (err, result) => {
+        if (err) return res.status(500).json({ error: err.message });
+        res.json({ message: 'Doctor allocated successfully', id: result.insertId });
+    });
+});
+
+app.put('/api/doctors/:id', (req, res) => {
+    const { id } = req.params;
+    const { Name, Specialization } = req.body;
+    const sql = 'UPDATE Doctors SET Name = ?, Specialization = ? WHERE DoctorID = ?';
+    db.query(sql, [Name, Specialization, id], (err, result) => {
+        if (err) return res.status(500).json({ error: err.message });
+        res.json({ message: 'Doctor specs updated successfully' });
+    });
+});
+
+app.delete('/api/doctors/:id', (req, res) => {
+    const { id } = req.params;
+    db.query('DELETE FROM Appointments WHERE DoctorID = ?', [id], (err) => {
+        if (err) return res.status(500).json({ error: err.message });
+        db.query('DELETE FROM Doctors WHERE DoctorID = ?', [id], (err, result) => {
+            if (err) return res.status(500).json({ error: err.message });
+            res.json({ message: 'Doctor dropped from registry' });
+        });
+    });
+});
+
+
+// ==========================================
+// 5. CONSULTATION APPOINTMENTS ROUTING
+// ==========================================
+
+app.get('/api/appointments', (req, res) => {
+    const sql = `
+        SELECT Appointments.AppointmentID, Appointments.Date, Appointments.PatientID, Appointments.DoctorID,
+               Patients.Name AS PatientName, Doctors.Name AS DoctorName 
+        FROM Appointments
+        JOIN Patients ON Appointments.PatientID = Patients.PatientID
+        JOIN Doctors ON Appointments.DoctorID = Doctors.DoctorID
+    `;
+    db.query(sql, (err, results) => {
+        if (err) return res.status(500).json({ error: err.message });
+        res.json(results);
+    });
+});
+
+app.post('/api/appointments', (req, res) => {
+    const { PatientID, DoctorID, Date } = req.body;
+    const sql = 'INSERT INTO Appointments (PatientID, DoctorID, Date) VALUES (?, ?, ?)';
+    db.query(sql, [PatientID, DoctorID, Date], (err, result) => {
+        if (err) return res.status(500).json({ error: err.message });
+        res.json({ message: 'Consultation slot booked', id: result.insertId });
+    });
+});
+
+app.put('/api/appointments/:id', (req, res) => {
+    const { id } = req.params;
+    const { PatientID, DoctorID, Date } = req.body;
+    const sql = 'UPDATE Appointments SET PatientID = ?, DoctorID = ?, Date = ? WHERE AppointmentID = ?';
+    db.query(sql, [PatientID, DoctorID, Date, id], (err, result) => {
+        if (err) return res.status(500).json({ error: err.message });
+        res.json({ message: 'Appointment updated successfully' });
+    });
+});
+
+app.delete('/api/appointments/:id', (req, res) => {
+    const { id } = req.params;
+    db.query('DELETE FROM Appointments WHERE AppointmentID = ?', [id], (err, result) => {
+        if (err) return res.status(500).json({ error: err.message });
+        res.json({ message: 'Appointment deleted successfully' });
+    });
+});
+
+
+// ==========================================
+// 6. FINANCIAL INVOICES & REVENUE PIPELINE
+// ==========================================
+
+app.get('/api/payments', (req, res) => {
+    const sql = `
+        SELECT Payments.PaymentID, Payments.Amount, Payments.Date, Payments.PatientID,
+               Patients.Name AS PatientName, Patients.Phone AS PatientPhone
+        FROM Payments
+        JOIN Patients ON Payments.PatientID = Patients.PatientID
+    `;
+    db.query(sql, (err, results) => {
+        if (err) return res.status(500).json({ error: err.message });
+        res.json(results);
+    });
+});
+
+app.post('/api/payments', (req, res) => {
+    const { PatientID, Amount, Date } = req.body;
+    const sql = 'INSERT INTO Payments (PatientID, Amount, Date) VALUES (?, ?, ?)';
+    db.query(sql, [PatientID, Amount, Date], (err, result) => {
+        if (err) return res.status(500).json({ error: err.message });
+        res.json({ message: 'Bill registered to dataset ledger', id: result.insertId });
+    });
+});
+
+app.put('/api/payments/:id', (req, res) => {
+    const { id } = req.params;
+    const { PatientID, Amount, Date } = req.body;
+    const sql = 'UPDATE Payments SET PatientID = ?, Amount = ?, Date = ? WHERE PaymentID = ?';
+    db.query(sql, [PatientID, Amount, Date, id], (err, result) => {
+        if (err) return res.status(500).json({ error: err.message });
+        res.json({ message: 'Payment updated successfully' });
+    });
+});
+
+app.delete('/api/payments/:id', (req, res) => {
+    const { id } = req.params;
+    db.query('DELETE FROM Payments WHERE PaymentID = ?', [id], (err, result) => {
+        if (err) return res.status(500).json({ error: err.message });
+        res.json({ message: 'Payment deleted successfully' });
+    });
+});
+
+// INITIATE LISTENING PORT
+const PORT = 5000;
+app.listen(PORT, () => {
+    console.log(`Server is running actively on port ${PORT}`);
+});