changes file upload and login register

app.py

@@ -1,20 +1,37 @@
-from flask import Flask, render_template, request, jsonify, Response
+from flask import Flask, render_template, request, jsonify, Response, redirect, url_for, flash, send_file
 import os
 
+from flask_login import LoginManager, login_user, logout_user, login_required, current_user
+
 from verify_v2 import verify_claim
 import db
 import health_passport as hp
 import ocr_utils
 import translate_utils
-from gnn.gnn_predict import predict_spread
-print("✅ VERIMED GNN MODULE LOADED SUCCESSFULLY — v2")
+import auth
+import pdf_export
+import sys, os
+sys.path.insert(0, os.path.join(os.path.dirname(__file__), "gnn"))
+from gnn_predict import predict_spread
 
 app = Flask(__name__)
 app.secret_key = os.environ.get("FLASK_SECRET_KEY", "dev-only-change-me")
 
+login_manager = LoginManager()
+login_manager.init_app(app)
+login_manager.login_view = "login"
+login_manager.login_message = "Please log in to access your Health Passport."
+
+
+@login_manager.user_loader
+def load_user(user_id):
+    return auth.get_user_by_id(user_id)
+
+
 # Make sure tables exist before anything else runs
 db.init_db()
 hp.init_passport_table()
+auth.init_users_table()
 
 # --- PAGE ROUTING ---
 
@@ -39,8 +56,91 @@ def predictor():
     return render_template('predictor.html')
 
 @app.route('/passport')
+@login_required
 def passport():
-    return render_template('passport.html')
+    return render_template('passport.html', user=current_user)
+
+
+@app.route('/register', methods=['GET', 'POST'])
+def register():
+    if current_user.is_authenticated:
+        return redirect(url_for('passport'))
+
+    if request.method == 'POST':
+        name = request.form.get('name', '').strip()
+        email = request.form.get('email', '').strip()
+        password = request.form.get('password', '')
+        confirm_password = request.form.get('confirm_password', '')
+
+        if not name or not email or not password:
+            flash("Please fill in all fields.", "error")
+            return render_template('register.html')
+
+        if password != confirm_password:
+            flash("Passwords do not match.", "error")
+            return render_template('register.html')
+
+        if len(password) < 8:
+            flash("Password must be at least 8 characters.", "error")
+            return render_template('register.html')
+
+        user = auth.create_user(name, email, password)
+        if user is None:
+            flash("An account with that email already exists. Try logging in instead.", "error")
+            return render_template('register.html')
+
+        login_user(user)
+        return redirect(url_for('passport'))
+
+    return render_template('register.html')
+
+
+@app.route('/login', methods=['GET', 'POST'])
+def login():
+    if current_user.is_authenticated:
+        return redirect(url_for('passport'))
+
+    if request.method == 'POST':
+        email = request.form.get('email', '').strip()
+        password = request.form.get('password', '')
+
+        user = auth.verify_login(email, password)
+        if user is None:
+            flash("Incorrect email or password.", "error")
+            return render_template('login.html')
+
+        login_user(user)
+        next_page = request.args.get('next')
+        return redirect(next_page or url_for('passport'))
+
+    return render_template('login.html')
+
+
+@app.route('/logout')
+@login_required
+def logout():
+    logout_user()
+    return redirect(url_for('home'))
+
+
+@app.route('/emergency-help')
+def emergency_help():
+    return render_template('emergency_help.html')
+
+
+@app.route('/emergency/<share_token>')
+def emergency_view(share_token):
+    """
+    Public, read-only emergency view -- this is what the QR code opens.
+    No login required, intentionally shows only emergency-relevant fields.
+    """
+    passport_data = hp.get_passport_by_token(share_token)
+    if not passport_data:
+        return render_template('emergency_view.html', passport=None), 404
+
+    surgeries = hp.get_surgeries(passport_data['user_id'])
+    vaccinations = hp.get_vaccinations(passport_data['user_id'])
+    return render_template('emergency_view.html', passport=passport_data, surgeries=surgeries, vaccinations=vaccinations)
 
 # --- API ENDPOINTS ---
 
@@ -153,6 +253,7 @@ def api_predict_spread():
     # risk features (verdict, confidence, entities) are grounded in real
     # evidence, not guessed independently.
     verification = verify_claim(claim)
+
     graph_data = predict_spread(
         claim_text=claim,
         verdict=verification.get("verdict", "Unverified"),
@@ -163,6 +264,7 @@ def api_predict_spread():
 
 
 @app.route('/api/passport', methods=['GET', 'POST'])
+@login_required
 def api_passport():
     if request.method == 'POST':
         data = request.get_json(force=True) or {}
@@ -173,23 +275,110 @@ def api_passport():
         }
         for key, default in required_defaults.items():
             data.setdefault(key, default)
-        hp.save_passport(data)
+        hp.save_passport(int(current_user.id), data)
         return jsonify({"status": "saved"})
 
-    passport_data = hp.get_passport()
+    passport_data = hp.get_passport(int(current_user.id))
     if not passport_data:
         return jsonify(None)
     return jsonify(passport_data)
 
 
 @app.route('/api/passport/qr', methods=['GET'])
+@login_required
 def api_passport_qr():
-    passport_data = hp.get_passport()
+    passport_data = hp.get_passport(int(current_user.id))
     if not passport_data:
         return jsonify({"error": "No passport saved yet."}), 404
-    png_bytes = hp.generate_qr_code(passport_data)
+    png_bytes = hp.generate_qr_code(passport_data['share_token'], request.host_url)
     return Response(png_bytes, mimetype='image/png')
 
 
+@app.route('/api/passport/surgeries', methods=['GET', 'POST'])
+@login_required
+def api_surgeries():
+    if request.method == 'POST':
+        data = request.get_json(force=True) or {}
+        hp.add_surgery(int(current_user.id), data.get('year', ''), data.get('description', ''))
+        return jsonify({"status": "added"})
+    return jsonify(hp.get_surgeries(int(current_user.id)))
+
+
+@app.route('/api/passport/surgeries/<int:surgery_id>', methods=['DELETE'])
+@login_required
+def api_delete_surgery(surgery_id):
+    hp.delete_surgery(int(current_user.id), surgery_id)
+    return jsonify({"status": "deleted"})
+
+
+@app.route('/api/passport/vaccinations', methods=['GET', 'POST'])
+@login_required
+def api_vaccinations():
+    if request.method == 'POST':
+        data = request.get_json(force=True) or {}
+        hp.add_vaccination(int(current_user.id), data.get('vaccine_name', ''), data.get('month', ''), data.get('year', ''))
+        return jsonify({"status": "added"})
+    return jsonify(hp.get_vaccinations(int(current_user.id)))
+
+
+@app.route('/api/passport/vaccinations/<int:vaccination_id>', methods=['DELETE'])
+@login_required
+def api_delete_vaccination(vaccination_id):
+    hp.delete_vaccination(int(current_user.id), vaccination_id)
+    return jsonify({"status": "deleted"})
+
+
+@app.route('/api/passport/reports', methods=['GET', 'POST'])
+@login_required
+def api_reports():
+    if request.method == 'POST':
+        if 'file' not in request.files or request.files['file'].filename == '':
+            return jsonify({"error": "No file provided."}), 400
+        file_storage = request.files['file']
+        category = request.form.get('category', 'Other')
+        month = request.form.get('month', '')
+        year = request.form.get('year', '')
+        report = hp.save_report_file(int(current_user.id), file_storage, category, month, year)
+        return jsonify(report)
+
+    return jsonify(hp.get_reports(int(current_user.id)))
+
+
+@app.route('/api/passport/reports/<int:report_id>', methods=['DELETE'])
+@login_required
+def api_delete_report(report_id):
+    hp.delete_report(int(current_user.id), report_id)
+    return jsonify({"status": "deleted"})
+
+
+@app.route('/api/passport/reports/<int:report_id>/download', methods=['GET'])
+@login_required
+def api_download_report(report_id):
+    report = hp.get_report_by_id(int(current_user.id), report_id)
+    if not report or not os.path.exists(report['stored_path']):
+        return jsonify({"error": "Report not found."}), 404
+    return send_file(report['stored_path'], as_attachment=True, download_name=report['filename'])
+
+
+@app.route('/api/passport/pdf', methods=['GET'])
+@login_required
+def api_passport_pdf():
+    passport_data = hp.get_passport(int(current_user.id))
+    if not passport_data:
+        return jsonify({"error": "No passport saved yet."}), 404
+
+    surgeries = hp.get_surgeries(int(current_user.id))
+    vaccinations = hp.get_vaccinations(int(current_user.id))
+    qr_bytes = hp.generate_qr_code(passport_data['share_token'], request.host_url)
+
+    pdf_bytes = pdf_export.generate_passport_pdf(passport_data, surgeries, vaccinations, qr_bytes)
+
+    return Response(
+        pdf_bytes,
+        mimetype='application/pdf',
+        headers={"Content-Disposition": "attachment; filename=VeriMed_Health_Passport.pdf"},
+    )
+
+
 if __name__ == '__main__':
     app.run(debug=True, port=5000, use_reloader=False)

auth.py

@@ -0,0 +1,119 @@
+"""
+Authentication module.
+
+Real password hashing (werkzeug's generate_password_hash / check_password_hash
+-- salted, uses PBKDF2/scrypt depending on werkzeug version) and Flask-Login
+session management.
+
+NOTE ON SCOPE: this is hackathon-appropriate auth -- correct password hashing,
+proper session cookies via Flask-Login, but no email verification, no
+password reset flow, no rate limiting on login attempts. Be upfront about
+that if asked -- it's a normal, expected scope cut, not a hidden flaw.
+"""
+
+import sqlite3
+from datetime import datetime
+from werkzeug.security import generate_password_hash, check_password_hash
+from flask_login import UserMixin
+
+DB_FILE = "verimed.db"
+
+
+class User(UserMixin):
+    """Flask-Login needs an object with .id, .is_authenticated, etc. -- UserMixin provides those."""
+    def __init__(self, id, name, email):
+        self.id = str(id)
+        self.name = name
+        self.email = email
+
+
+def init_users_table():
+    conn = sqlite3.connect(DB_FILE)
+    cur = conn.cursor()
+    cur.execute("""
+        CREATE TABLE IF NOT EXISTS users (
+            id INTEGER PRIMARY KEY AUTOINCREMENT,
+            name TEXT NOT NULL,
+            email TEXT UNIQUE NOT NULL,
+            password_hash TEXT NOT NULL,
+            created_at TEXT NOT NULL
+        )
+    """)
+    conn.commit()
+    conn.close()
+
+
+def create_user(name: str, email: str, password: str) -> "User | None":
+    """Returns the created User, or None if the email is already registered."""
+    conn = sqlite3.connect(DB_FILE)
+    cur = conn.cursor()
+    cur.execute("SELECT id FROM users WHERE email = ?", (email.lower().strip(),))
+    if cur.fetchone():
+        conn.close()
+        return None  # email already taken
+
+    password_hash = generate_password_hash(password)
+    now = datetime.now().isoformat(timespec="seconds")
+    cur.execute(
+        "INSERT INTO users (name, email, password_hash, created_at) VALUES (?, ?, ?, ?)",
+        (name.strip(), email.lower().strip(), password_hash, now),
+    )
+    conn.commit()
+    user_id = cur.lastrowid
+    conn.close()
+    return User(user_id, name.strip(), email.lower().strip())
+
+
+def verify_login(email: str, password: str) -> "User | None":
+    """Returns the User if email+password match, else None."""
+    conn = sqlite3.connect(DB_FILE)
+    conn.row_factory = sqlite3.Row
+    cur = conn.cursor()
+    cur.execute("SELECT * FROM users WHERE email = ?", (email.lower().strip(),))
+    row = cur.fetchone()
+    conn.close()
+
+    if not row:
+        return None
+    if not check_password_hash(row["password_hash"], password):
+        return None
+
+    return User(row["id"], row["name"], row["email"])
+
+
+def get_user_by_id(user_id: str) -> "User | None":
+    """Required by Flask-Login's user_loader callback."""
+    conn = sqlite3.connect(DB_FILE)
+    conn.row_factory = sqlite3.Row
+    cur = conn.cursor()
+    cur.execute("SELECT * FROM users WHERE id = ?", (user_id,))
+    row = cur.fetchone()
+    conn.close()
+
+    if not row:
+        return None
+    return User(row["id"], row["name"], row["email"])
+
+
+if __name__ == "__main__":
+    # Quick manual test -- run: python auth.py
+    import os
+    if os.path.exists(DB_FILE):
+        os.remove(DB_FILE)  # clean slate for this test only
+
+    init_users_table()
+
+    user = create_user("Test User", "test@example.com", "correct-password-123")
+    print(f"Created user: {user.name} ({user.email}), id={user.id}")
+
+    dupe = create_user("Someone Else", "test@example.com", "whatever")
+    print(f"Duplicate email rejected: {dupe is None}")
+
+    good_login = verify_login("test@example.com", "correct-password-123")
+    print(f"Correct password login: {'SUCCESS' if good_login else 'FAILED'}")
+
+    bad_login = verify_login("test@example.com", "wrong-password")
+    print(f"Wrong password login: {'correctly rejected' if bad_login is None else 'SECURITY BUG'}")
+
+    fetched = get_user_by_id(user.id)
+    print(f"Fetched by id: {fetched.name} ({fetched.email})")

health_passport.py

@@ -1,29 +1,40 @@
 """
-Health Passport module.
+Health Passport module -- v2, per-user.
 
-Stores a user's personal health profile locally (SQLite) and generates a
-QR code encoding a compact emergency-readable summary of it.
+Every table now has a user_id foreign key, so each logged-in user has their
+own private passport, surgery history, vaccination record, and uploaded
+reports.
 
-NOTE: This is a hackathon-scope, single-user local demo -- no multi-user auth,
-no encryption at rest. If you present this, be upfront that a production
-version would need proper auth + encryption (HIPAA-style) -- judges respect
-that honesty far more than pretending it's production-secure.
+QR CODE DESIGN CHANGE FROM v1:
+v1 encoded the passport data as raw text directly in the QR code. That only
+works if the scanning device has software that can parse that specific text
+format. v2 instead gives each user a random, unguessable share_token and
+encodes a URL (e.g. http://yourhost/emergency/<token>) in the QR code. Any
+phone camera can scan it and it opens directly in a browser -- no app
+needed on the doctor's side. That page is intentionally read-only and shows
+only emergency-relevant fields, not the full account or uploaded documents.
 """
 
 import sqlite3
-import json
-import qrcode
 import io
+import os
+import secrets
+from datetime import datetime
+
+import qrcode
 
 DB_FILE = "verimed.db"
+UPLOAD_DIR = "uploads/medical_reports"
 
 
 def init_passport_table():
     conn = sqlite3.connect(DB_FILE)
     cur = conn.cursor()
+
     cur.execute("""
         CREATE TABLE IF NOT EXISTS health_passport (
             id INTEGER PRIMARY KEY AUTOINCREMENT,
+            user_id INTEGER NOT NULL UNIQUE,
             full_name TEXT,
             blood_group TEXT,
             date_of_birth TEXT,
@@ -32,21 +43,59 @@ def init_passport_table():
             current_medicines TEXT,
             emergency_contact_name TEXT,
             emergency_contact_phone TEXT,
+            share_token TEXT UNIQUE,
             updated_at TEXT
         )
     """)
+
+    cur.execute("""
+        CREATE TABLE IF NOT EXISTS surgeries (
+            id INTEGER PRIMARY KEY AUTOINCREMENT,
+            user_id INTEGER NOT NULL,
+            year TEXT,
+            description TEXT,
+            created_at TEXT
+        )
+    """)
+
+    cur.execute("""
+        CREATE TABLE IF NOT EXISTS vaccinations (
+            id INTEGER PRIMARY KEY AUTOINCREMENT,
+            user_id INTEGER NOT NULL,
+            vaccine_name TEXT,
+            month TEXT,
+            year TEXT,
+            created_at TEXT
+        )
+    """)
+
+    cur.execute("""
+        CREATE TABLE IF NOT EXISTS medical_reports (
+            id INTEGER PRIMARY KEY AUTOINCREMENT,
+            user_id INTEGER NOT NULL,
+            filename TEXT,
+            stored_path TEXT,
+            category TEXT,
+            month TEXT,
+            year TEXT,
+            uploaded_at TEXT
+        )
+    """)
+
     conn.commit()
     conn.close()
+    os.makedirs(UPLOAD_DIR, exist_ok=True)
+
 
+# ---------------------------------------------------------------------------
+# Core passport (personal details)
+# ---------------------------------------------------------------------------
 
-def save_passport(data: dict):
-    """Upserts the single local passport record (id=1, since this is single-user demo)."""
+def save_passport(user_id: int, data: dict):
     conn = sqlite3.connect(DB_FILE)
     cur = conn.cursor()
-    cur.execute("SELECT id FROM health_passport LIMIT 1")
+    cur.execute("SELECT id, share_token FROM health_passport WHERE user_id = ?", (user_id,))
     existing = cur.fetchone()
-
-    from datetime import datetime
     now = datetime.now().isoformat(timespec="seconds")
 
     if existing:
@@ -55,60 +104,232 @@ def save_passport(data: dict):
                 full_name=?, blood_group=?, date_of_birth=?, allergies=?,
                 chronic_conditions=?, current_medicines=?,
                 emergency_contact_name=?, emergency_contact_phone=?, updated_at=?
-            WHERE id=?
+            WHERE user_id=?
         """, (
             data["full_name"], data["blood_group"], data["date_of_birth"],
             data["allergies"], data["chronic_conditions"], data["current_medicines"],
             data["emergency_contact_name"], data["emergency_contact_phone"], now,
-            existing[0],
+            user_id,
         ))
     else:
+        share_token = secrets.token_urlsafe(16)
         cur.execute("""
             INSERT INTO health_passport
-            (full_name, blood_group, date_of_birth, allergies, chronic_conditions,
-             current_medicines, emergency_contact_name, emergency_contact_phone, updated_at)
-            VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
+            (user_id, full_name, blood_group, date_of_birth, allergies, chronic_conditions,
+             current_medicines, emergency_contact_name, emergency_contact_phone, share_token, updated_at)
+            VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
         """, (
-            data["full_name"], data["blood_group"], data["date_of_birth"],
+            user_id, data["full_name"], data["blood_group"], data["date_of_birth"],
             data["allergies"], data["chronic_conditions"], data["current_medicines"],
-            data["emergency_contact_name"], data["emergency_contact_phone"], now,
+            data["emergency_contact_name"], data["emergency_contact_phone"], share_token, now,
         ))
     conn.commit()
     conn.close()
 
 
-def get_passport() -> dict | None:
+def get_passport(user_id: int) -> dict | None:
     conn = sqlite3.connect(DB_FILE)
     conn.row_factory = sqlite3.Row
     cur = conn.cursor()
-    cur.execute("SELECT * FROM health_passport LIMIT 1")
+    cur.execute("SELECT * FROM health_passport WHERE user_id = ?", (user_id,))
     row = cur.fetchone()
     conn.close()
     return dict(row) if row else None
 
 
-def generate_qr_code(passport: dict) -> bytes:
+def get_passport_by_token(share_token: str) -> dict | None:
+    """Used by the public /emergency/<token> view -- no auth required."""
+    conn = sqlite3.connect(DB_FILE)
+    conn.row_factory = sqlite3.Row
+    cur = conn.cursor()
+    cur.execute("SELECT * FROM health_passport WHERE share_token = ?", (share_token,))
+    row = cur.fetchone()
+    conn.close()
+    return dict(row) if row else None
+
+
+# ---------------------------------------------------------------------------
+# Surgeries
+# ---------------------------------------------------------------------------
+
+def add_surgery(user_id: int, year: str, description: str):
+    conn = sqlite3.connect(DB_FILE)
+    cur = conn.cursor()
+    cur.execute(
+        "INSERT INTO surgeries (user_id, year, description, created_at) VALUES (?, ?, ?, ?)",
+        (user_id, year, description, datetime.now().isoformat(timespec="seconds")),
+    )
+    conn.commit()
+    conn.close()
+
+
+def get_surgeries(user_id: int) -> list[dict]:
+    conn = sqlite3.connect(DB_FILE)
+    conn.row_factory = sqlite3.Row
+    cur = conn.cursor()
+    cur.execute("SELECT * FROM surgeries WHERE user_id = ? ORDER BY year DESC", (user_id,))
+    rows = [dict(r) for r in cur.fetchall()]
+    conn.close()
+    return rows
+
+
+def delete_surgery(user_id: int, surgery_id: int):
+    conn = sqlite3.connect(DB_FILE)
+    cur = conn.cursor()
+    cur.execute("DELETE FROM surgeries WHERE id = ? AND user_id = ?", (surgery_id, user_id))
+    conn.commit()
+    conn.close()
+
+
+# ---------------------------------------------------------------------------
+# Vaccinations
+# ---------------------------------------------------------------------------
+
+def add_vaccination(user_id: int, vaccine_name: str, month: str, year: str):
+    conn = sqlite3.connect(DB_FILE)
+    cur = conn.cursor()
+    cur.execute(
+        "INSERT INTO vaccinations (user_id, vaccine_name, month, year, created_at) VALUES (?, ?, ?, ?, ?)",
+        (user_id, vaccine_name, month, year, datetime.now().isoformat(timespec="seconds")),
+    )
+    conn.commit()
+    conn.close()
+
+
+def get_vaccinations(user_id: int) -> list[dict]:
+    conn = sqlite3.connect(DB_FILE)
+    conn.row_factory = sqlite3.Row
+    cur = conn.cursor()
+    cur.execute("SELECT * FROM vaccinations WHERE user_id = ? ORDER BY year DESC", (user_id,))
+    rows = [dict(r) for r in cur.fetchall()]
+    conn.close()
+    return rows
+
+
+def delete_vaccination(user_id: int, vaccination_id: int):
+    conn = sqlite3.connect(DB_FILE)
+    cur = conn.cursor()
+    cur.execute("DELETE FROM vaccinations WHERE id = ? AND user_id = ?", (vaccination_id, user_id))
+    conn.commit()
+    conn.close()
+
+
+# ---------------------------------------------------------------------------
+# Medical report uploads
+# ---------------------------------------------------------------------------
+
+def save_report_file(user_id: int, file_storage, category: str, month: str, year: str) -> dict:
     """
-    Generates a QR code encoding a compact emergency summary.
-    Returns PNG image bytes ready to display in Streamlit.
+    file_storage: a Flask FileStorage object (from request.files[...]).
+    Saves the file to disk under a per-user subfolder and records metadata.
     """
-    summary = (
-        f"VERIMED HEALTH PASSPORT\n"
-        f"Name: {passport.get('full_name', '')}\n"
-        f"Blood Group: {passport.get('blood_group', '')}\n"
-        f"DOB: {passport.get('date_of_birth', '')}\n"
-        f"Allergies: {passport.get('allergies', 'None listed')}\n"
-        f"Chronic Conditions: {passport.get('chronic_conditions', 'None listed')}\n"
-        f"Current Medicines: {passport.get('current_medicines', 'None listed')}\n"
-        f"Emergency Contact: {passport.get('emergency_contact_name', '')} "
-        f"({passport.get('emergency_contact_phone', '')})"
+    user_folder = os.path.join(UPLOAD_DIR, str(user_id))
+    os.makedirs(user_folder, exist_ok=True)
+
+    # Prefix with a timestamp so same-named uploads don't collide
+    safe_name = f"{datetime.now().strftime('%Y%m%d%H%M%S')}_{file_storage.filename}"
+    stored_path = os.path.join(user_folder, safe_name)
+    file_storage.save(stored_path)
+
+    conn = sqlite3.connect(DB_FILE)
+    cur = conn.cursor()
+    cur.execute("""
+        INSERT INTO medical_reports (user_id, filename, stored_path, category, month, year, uploaded_at)
+        VALUES (?, ?, ?, ?, ?, ?, ?)
+    """, (
+        user_id, file_storage.filename, stored_path, category, month, year,
+        datetime.now().isoformat(timespec="seconds"),
+    ))
+    conn.commit()
+    report_id = cur.lastrowid
+    conn.close()
+
+    return {
+        "id": report_id, "filename": file_storage.filename, "category": category,
+        "month": month, "year": year,
+    }
+
+
+def get_reports(user_id: int) -> list[dict]:
+    conn = sqlite3.connect(DB_FILE)
+    conn.row_factory = sqlite3.Row
+    cur = conn.cursor()
+    cur.execute(
+        "SELECT * FROM medical_reports WHERE user_id = ? ORDER BY year DESC, month DESC",
+        (user_id,),
     )
+    rows = [dict(r) for r in cur.fetchall()]
+    conn.close()
+    return rows
+
+
+def get_report_by_id(user_id: int, report_id: int) -> dict | None:
+    conn = sqlite3.connect(DB_FILE)
+    conn.row_factory = sqlite3.Row
+    cur = conn.cursor()
+    cur.execute("SELECT * FROM medical_reports WHERE id = ? AND user_id = ?", (report_id, user_id))
+    row = cur.fetchone()
+    conn.close()
+    return dict(row) if row else None
+
+
+def delete_report(user_id: int, report_id: int):
+    report = get_report_by_id(user_id, report_id)
+    if report and os.path.exists(report["stored_path"]):
+        os.remove(report["stored_path"])
+
+    conn = sqlite3.connect(DB_FILE)
+    cur = conn.cursor()
+    cur.execute("DELETE FROM medical_reports WHERE id = ? AND user_id = ?", (report_id, user_id))
+    conn.commit()
+    conn.close()
+
+
+# ---------------------------------------------------------------------------
+# QR code -- now encodes a URL to the public emergency view, not raw text
+# ---------------------------------------------------------------------------
+
+def generate_qr_code(share_token: str, base_url: str) -> bytes:
+    """
+    base_url: e.g. "http://localhost:5000" -- passed in from app.py using
+    request.host_url so it works correctly whether running locally or deployed.
+    """
+    emergency_url = f"{base_url.rstrip('/')}/emergency/{share_token}"
 
     qr = qrcode.QRCode(version=None, box_size=8, border=3)
-    qr.add_data(summary)
+    qr.add_data(emergency_url)
     qr.make(fit=True)
     img = qr.make_image(fill_color="#0F6FFF", back_color="white")
 
     buf = io.BytesIO()
     img.save(buf, format="PNG")
     return buf.getvalue()
+
+
+if __name__ == "__main__":
+    # Quick manual test -- run: python health_passport.py
+    import os as _os
+    if _os.path.exists(DB_FILE):
+        _os.remove(DB_FILE)
+
+    init_passport_table()
+
+    save_passport(1, {
+        "full_name": "Jane Doe", "blood_group": "O+", "date_of_birth": "01-01-1995",
+        "allergies": "Penicillin", "chronic_conditions": "Asthma",
+        "current_medicines": "Ventolin inhaler", "emergency_contact_name": "John Doe",
+        "emergency_contact_phone": "+91-9999999999",
+    })
+    passport = get_passport(1)
+    print(f"Saved passport for: {passport['full_name']}, share_token={passport['share_token']}")
+
+    add_surgery(1, "2019", "Appendectomy")
+    add_vaccination(1, "COVID-19 Booster", "March", "2024")
+    print(f"Surgeries: {get_surgeries(1)}")
+    print(f"Vaccinations: {get_vaccinations(1)}")
+
+    by_token = get_passport_by_token(passport["share_token"])
+    print(f"Fetched via public token: {by_token['full_name']}")
+
+    qr_bytes = generate_qr_code(passport["share_token"], "http://localhost:5000")
+    print(f"QR code generated: {len(qr_bytes)} bytes")

pdf_export.py

@@ -0,0 +1,142 @@
+"""
+PDF export for the Health Passport.
+
+Generates a clean, printable one-page PDF with all passport info, surgeries,
+vaccinations, and the emergency QR code embedded -- so a physical printed
+copy works exactly like the digital one for a doctor scanning it.
+
+Uses fpdf2 (pure Python, no system dependencies like wkhtmltopdf/Chrome
+needed -- important for easy deployment).
+"""
+
+import io
+from fpdf import FPDF
+
+PRIMARY_RGB = (15, 111, 255)      # #0F6FFF
+SECONDARY_RGB = (16, 185, 129)    # #10B981
+TEXT_RGB = (30, 41, 59)
+MUTED_RGB = (100, 116, 139)
+
+
+class PassportPDF(FPDF):
+    def header(self):
+        self.set_fill_color(*PRIMARY_RGB)
+        self.rect(0, 0, 210, 22, style="F")
+        self.set_text_color(255, 255, 255)
+        self.set_font("Helvetica", "B", 16)
+        self.set_xy(10, 6)
+        self.cell(0, 10, "VeriMed AI -- Health Passport", new_x="LMARGIN", new_y="NEXT")
+        self.set_font("Helvetica", "", 9)
+        self.set_xy(10, 15)
+        self.cell(0, 6, "Emergency Medical Information Card", new_x="LMARGIN", new_y="NEXT")
+        self.ln(8)
+
+    def footer(self):
+        self.set_y(-15)
+        self.set_font("Helvetica", "I", 7)
+        self.set_text_color(*MUTED_RGB)
+        self.cell(0, 10, "Generated by VeriMed AI. Educational project -- not a substitute for official medical records.", align="C")
+
+    def section_title(self, title: str):
+        self.ln(3)
+        self.set_font("Helvetica", "B", 12)
+        self.set_text_color(*PRIMARY_RGB)
+        self.cell(0, 8, title, new_x="LMARGIN", new_y="NEXT")
+        self.set_draw_color(*PRIMARY_RGB)
+        self.line(10, self.get_y(), 200, self.get_y())
+        self.ln(2)
+
+    def field_row(self, label: str, value: str):
+        self.set_font("Helvetica", "B", 10)
+        self.set_text_color(*MUTED_RGB)
+        self.cell(55, 7, label, new_x="RIGHT", new_y="TOP")
+        self.set_font("Helvetica", "", 10)
+        self.set_text_color(*TEXT_RGB)
+        self.multi_cell(135, 7, value or "Not provided", new_x="LMARGIN", new_y="NEXT")
+
+
+def generate_passport_pdf(passport: dict, surgeries: list[dict], vaccinations: list[dict], qr_png_bytes: bytes) -> bytes:
+    pdf = PassportPDF(format="A4")
+    pdf.add_page()
+    pdf.set_auto_page_break(auto=True, margin=20)
+
+    # ---- Personal details ----
+    pdf.section_title("Personal Details")
+    pdf.field_row("Full Name:", passport.get("full_name", ""))
+    pdf.field_row("Date of Birth:", passport.get("date_of_birth", ""))
+    pdf.field_row("Blood Group:", passport.get("blood_group", ""))
+
+    # ---- Medical info ----
+    pdf.section_title("Medical Information")
+    pdf.field_row("Allergies:", passport.get("allergies") or "None listed")
+    pdf.field_row("Chronic Conditions:", passport.get("chronic_conditions") or "None listed")
+    pdf.field_row("Current Medicines:", passport.get("current_medicines") or "None listed")
+
+    # ---- Surgeries ----
+    pdf.section_title("Surgical History")
+    if surgeries:
+        for s in surgeries:
+            pdf.field_row(f"{s['year']}:", s["description"])
+    else:
+        pdf.set_font("Helvetica", "I", 10)
+        pdf.set_text_color(*MUTED_RGB)
+        pdf.cell(0, 7, "None recorded.", new_x="LMARGIN", new_y="NEXT")
+
+    # ---- Vaccinations ----
+    pdf.section_title("Vaccination Record")
+    if vaccinations:
+        for v in vaccinations:
+            pdf.field_row(f"{v['month']} {v['year']}:", v["vaccine_name"])
+    else:
+        pdf.set_font("Helvetica", "I", 10)
+        pdf.set_text_color(*MUTED_RGB)
+        pdf.cell(0, 7, "None recorded.", new_x="LMARGIN", new_y="NEXT")
+
+    # ---- Emergency contact ----
+    pdf.section_title("Emergency Contact")
+    pdf.field_row("Name:", passport.get("emergency_contact_name", ""))
+    pdf.field_row("Phone:", passport.get("emergency_contact_phone", ""))
+
+    # ---- QR code ----
+    pdf.section_title("Emergency QR Code")
+    pdf.set_font("Helvetica", "", 9)
+    pdf.set_text_color(*MUTED_RGB)
+    pdf.multi_cell(0, 6, "Scan this code to view this person's emergency medical summary instantly -- no app or login required.")
+    pdf.ln(2)
+
+    qr_stream = io.BytesIO(qr_png_bytes)
+    pdf.image(qr_stream, x=10, y=pdf.get_y(), w=35, h=35)
+    pdf.ln(40)
+
+    output = pdf.output()
+    return bytes(output)
+
+
+if __name__ == "__main__":
+    # Quick manual test -- run: python pdf_export.py
+    import health_passport as hp
+    import os
+
+    if os.path.exists(hp.DB_FILE):
+        os.remove(hp.DB_FILE)
+    hp.init_passport_table()
+    hp.save_passport(1, {
+        "full_name": "Jane Doe", "blood_group": "O+", "date_of_birth": "01-01-1995",
+        "allergies": "Penicillin", "chronic_conditions": "Asthma",
+        "current_medicines": "Ventolin inhaler", "emergency_contact_name": "John Doe",
+        "emergency_contact_phone": "+91-9999999999",
+    })
+    hp.add_surgery(1, "2019", "Appendectomy")
+    hp.add_vaccination(1, "COVID-19 Booster", "March", "2024")
+
+    passport = hp.get_passport(1)
+    surgeries = hp.get_surgeries(1)
+    vaccinations = hp.get_vaccinations(1)
+    qr_bytes = hp.generate_qr_code(passport["share_token"], "http://localhost:5000")
+
+    pdf_bytes = generate_passport_pdf(passport, surgeries, vaccinations, qr_bytes)
+
+    with open("test_passport_output.pdf", "wb") as f:
+        f.write(pdf_bytes)
+
+    print(f"✅ PDF generated: {len(pdf_bytes)} bytes, saved to test_passport_output.pdf")

requirements.txt

@@ -29,3 +29,7 @@ qrcode[pil]
 # ==== Translation (Quick Win) ====
 deep-translator
  
+# ==== Auth + PDF Export (Login/Register feature) ====
+flask-login
+fpdf2
+ 

static/js/main.js

@@ -16,10 +16,166 @@ function verdictColorClasses(verdict) {
     }
 }
 
-function escapeHtml(str) {
-    const div = document.createElement("div");
-    div.textContent = str == null ? "" : String(str);
-    return div.innerHTML;
+// ---------- Emergency Help page ----------
+
+const useGpsBtn = document.getElementById("useGpsBtn");
+if (useGpsBtn) {
+    const manualSearchBtn = document.getElementById("manualSearchBtn");
+    const manualLocationInput = document.getElementById("manualLocationInput");
+    const hospitalStatus = document.getElementById("hospitalStatus");
+    const hospitalList = document.getElementById("hospitalList");
+
+    function setStatus(message, isError = false) {
+        hospitalStatus.textContent = message;
+        hospitalStatus.className = isError
+            ? "text-sm text-red-500 text-center py-6"
+            : "text-sm text-slate-400 text-center py-6";
+    }
+
+    function haversineDistanceKm(lat1, lon1, lat2, lon2) {
+        const R = 6371;
+        const dLat = ((lat2 - lat1) * Math.PI) / 180;
+        const dLon = ((lon2 - lon1) * Math.PI) / 180;
+        const a =
+            Math.sin(dLat / 2) ** 2 +
+            Math.cos((lat1 * Math.PI) / 180) *
+                Math.cos((lat2 * Math.PI) / 180) *
+                Math.sin(dLon / 2) ** 2;
+        return R * 2 * Math.atan2(Math.sqrt(a), Math.sqrt(1 - a));
+    }
+
+    function buildAddress(tags) {
+        const parts = [
+            tags["addr:housenumber"],
+            tags["addr:street"],
+            tags["addr:suburb"],
+            tags["addr:city"],
+            tags["addr:postcode"],
+        ].filter(Boolean);
+        return parts.length ? parts.join(", ") : "Address not available";
+    }
+
+    async function fetchNearbyHospitals(lat, lon) {
+        hospitalList.innerHTML = "";
+        setStatus("Searching for hospitals and clinics nearby...");
+
+        // Overpass API (OpenStreetMap) -- free, no API key required
+        const query = `
+            [out:json][timeout:25];
+            (
+              node["amenity"="hospital"](around:6000,${lat},${lon});
+              way["amenity"="hospital"](around:6000,${lat},${lon});
+              node["amenity"="clinic"](around:6000,${lat},${lon});
+              way["amenity"="clinic"](around:6000,${lat},${lon});
+            );
+            out center 40;
+        `;
+
+        try {
+            const res = await fetch("https://overpass-api.de/api/interpreter", {
+                method: "POST",
+                body: "data=" + encodeURIComponent(query),
+            });
+            if (!res.ok) throw new Error("Overpass API request failed.");
+            const data = await res.json();
+
+            const results = (data.elements || [])
+                .filter((el) => el.tags && el.tags.name)
+                .map((el) => {
+                    const elLat = el.lat || (el.center && el.center.lat);
+                    const elLon = el.lon || (el.center && el.center.lon);
+                    return {
+                        name: el.tags.name,
+                        type: el.tags.amenity === "hospital" ? "Hospital" : "Clinic",
+                        address: buildAddress(el.tags),
+                        phone: el.tags.phone || el.tags["contact:phone"] || null,
+                        lat: elLat,
+                        lon: elLon,
+                        distanceKm: elLat && elLon ? haversineDistanceKm(lat, lon, elLat, elLon) : null,
+                    };
+                })
+                .filter((h) => h.lat && h.lon)
+                .sort((a, b) => (a.distanceKm ?? 999) - (b.distanceKm ?? 999))
+                .slice(0, 20);
+
+            if (results.length === 0) {
+                setStatus("No hospitals found nearby. Try a different location.", true);
+                return;
+            }
+
+            setStatus(`Found ${results.length} hospitals/clinics nearby, sorted by distance.`);
+            renderHospitalList(results);
+        } catch (err) {
+            setStatus("Couldn't fetch nearby hospitals. Please try again.", true);
+        }
+    }
+
+    function renderHospitalList(hospitals) {
+        hospitalList.innerHTML = hospitals
+            .map((h) => {
+                const directionsUrl = `https://www.google.com/maps/dir/?api=1&destination=${h.lat},${h.lon}`;
+                const distanceLabel = h.distanceKm !== null ? `${h.distanceKm.toFixed(1)} km away` : "";
+                return `
+                <div class="bg-slate-50 border border-slate-100 rounded-2xl p-4">
+                    <div class="flex items-start justify-between gap-2">
+                        <div>
+                            <h4 class="font-bold text-slate-800">${escapeHtml(h.name)}</h4>
+                            <span class="inline-block text-[10px] font-bold uppercase tracking-wide text-blue-600 bg-blue-50 px-2 py-0.5 rounded-full mt-1">${escapeHtml(h.type)}</span>
+                            ${distanceLabel ? `<span class="text-xs text-slate-400 ml-2">${distanceLabel}</span>` : ""}
+                        </div>
+                    </div>
+                    <p class="text-xs text-slate-500 mt-2">${escapeHtml(h.address)}</p>
+                    <div class="flex gap-2 mt-3">
+                        ${h.phone ? `<a href="tel:${escapeHtml(h.phone)}" class="flex-1 text-center bg-emerald-600 hover:bg-emerald-700 text-white text-xs font-bold py-2 rounded-lg transition-colors"><i class="fa-solid fa-phone mr-1"></i>Call</a>` : ""}
+                        <a href="${directionsUrl}" target="_blank" class="flex-1 text-center bg-blue-600 hover:bg-blue-700 text-white text-xs font-bold py-2 rounded-lg transition-colors"><i class="fa-solid fa-location-arrow mr-1"></i>Directions</a>
+                    </div>
+                </div>`;
+            })
+            .join("");
+    }
+
+    useGpsBtn.addEventListener("click", () => {
+        if (!navigator.geolocation) {
+            setStatus("Your browser doesn't support GPS location.", true);
+            return;
+        }
+        setStatus("Requesting your location...");
+        navigator.geolocation.getCurrentPosition(
+            (position) => {
+                fetchNearbyHospitals(position.coords.latitude, position.coords.longitude);
+            },
+            () => {
+                setStatus("Location access denied. Try typing a location manually instead.", true);
+            }
+        );
+    });
+
+    async function searchManualLocation() {
+        const query = manualLocationInput.value.trim();
+        if (!query) return;
+
+        setStatus(`Looking up "${query}"...`);
+        try {
+            // Nominatim (OpenStreetMap) geocoding -- free, no API key required
+            const res = await fetch(
+                `https://nominatim.openstreetmap.org/search?format=json&limit=1&q=${encodeURIComponent(query)}`
+            );
+            const results = await res.json();
+            if (!results || results.length === 0) {
+                setStatus(`Couldn't find "${query}". Try a more specific location.`, true);
+                return;
+            }
+            const { lat, lon } = results[0];
+            fetchNearbyHospitals(parseFloat(lat), parseFloat(lon));
+        } catch (err) {
+            setStatus("Location search failed. Please try again.", true);
+        }
+    }
+
+    manualSearchBtn.addEventListener("click", searchManualLocation);
+    manualLocationInput.addEventListener("keypress", (e) => {
+        if (e.key === "Enter") searchManualLocation();
+    });
 }
 
 // ---------- Checker page ----------
@@ -259,7 +415,9 @@ if (passportForm) {
             if (!data) return;
             document.getElementById("passName").value = data.full_name || "";
             document.getElementById("passBlood").value = data.blood_group || "";
+            document.getElementById("passDob").value = data.date_of_birth || "";
             document.getElementById("passAllergies").value = data.allergies || "";
+            document.getElementById("passChronic").value = data.chronic_conditions || "";
             document.getElementById("passMeds").value = data.current_medicines || "";
             document.getElementById("passContact").value = data.emergency_contact_name || "";
             document.getElementById("passPhone").value = data.emergency_contact_phone || "";
@@ -273,9 +431,9 @@ if (passportForm) {
         const payload = {
             full_name: document.getElementById("passName").value,
             blood_group: document.getElementById("passBlood").value,
-            date_of_birth: "",
+            date_of_birth: document.getElementById("passDob").value,
             allergies: document.getElementById("passAllergies").value,
-            chronic_conditions: "",
+            chronic_conditions: document.getElementById("passChronic").value,
             current_medicines: document.getElementById("passMeds").value,
             emergency_contact_name: document.getElementById("passContact").value,
             emergency_contact_phone: document.getElementById("passPhone").value,
@@ -310,6 +468,152 @@ function showQrCode() {
     qrContainer.innerHTML = `<img src="/api/passport/qr?t=${Date.now()}" alt="Health Passport QR Code" class="w-40 h-40 object-contain" />`;
 }
 
+// ---------- Surgeries ----------
+
+const surgeryForm = document.getElementById("surgeryForm");
+if (surgeryForm) {
+    function loadSurgeries() {
+        fetch("/api/passport/surgeries")
+            .then((res) => res.json())
+            .then((surgeries) => {
+                const list = document.getElementById("surgeryList");
+                if (!surgeries || surgeries.length === 0) {
+                    list.innerHTML = `<p class="text-xs text-slate-400 text-center py-3">No surgeries recorded yet.</p>`;
+                    return;
+                }
+                list.innerHTML = surgeries.map((s) => `
+                    <div class="flex items-center justify-between bg-slate-50 border border-slate-100 rounded-xl p-3">
+                        <div><span class="font-bold text-sm text-slate-700">${escapeHtml(s.year)}</span> <span class="text-sm text-slate-500">-- ${escapeHtml(s.description)}</span></div>
+                        <button onclick="deleteSurgery(${s.id})" class="text-red-400 hover:text-red-600 text-xs"><i class="fa-solid fa-trash"></i></button>
+                    </div>`).join("");
+            });
+    }
+
+    surgeryForm.addEventListener("submit", async (e) => {
+        e.preventDefault();
+        const year = document.getElementById("surgeryYear").value;
+        const description = document.getElementById("surgeryDescription").value;
+        await fetch("/api/passport/surgeries", {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ year, description }),
+        });
+        surgeryForm.reset();
+        loadSurgeries();
+    });
+
+    window.deleteSurgery = async (id) => {
+        await fetch(`/api/passport/surgeries/${id}`, { method: "DELETE" });
+        loadSurgeries();
+    };
+
+    loadSurgeries();
+}
+
+// ---------- Vaccinations ----------
+
+const vaccinationForm = document.getElementById("vaccinationForm");
+if (vaccinationForm) {
+    function loadVaccinations() {
+        fetch("/api/passport/vaccinations")
+            .then((res) => res.json())
+            .then((vaccinations) => {
+                const list = document.getElementById("vaccinationList");
+                if (!vaccinations || vaccinations.length === 0) {
+                    list.innerHTML = `<p class="text-xs text-slate-400 text-center py-3">No vaccinations recorded yet.</p>`;
+                    return;
+                }
+                list.innerHTML = vaccinations.map((v) => `
+                    <div class="flex items-center justify-between bg-slate-50 border border-slate-100 rounded-xl p-3">
+                        <div><span class="font-bold text-sm text-slate-700">${escapeHtml(v.month)} ${escapeHtml(v.year)}</span> <span class="text-sm text-slate-500">-- ${escapeHtml(v.vaccine_name)}</span></div>
+                        <button onclick="deleteVaccination(${v.id})" class="text-red-400 hover:text-red-600 text-xs"><i class="fa-solid fa-trash"></i></button>
+                    </div>`).join("");
+            });
+    }
+
+    vaccinationForm.addEventListener("submit", async (e) => {
+        e.preventDefault();
+        const vaccine_name = document.getElementById("vaccineName").value;
+        const month = document.getElementById("vaccineMonth").value;
+        const year = document.getElementById("vaccineYear").value;
+        await fetch("/api/passport/vaccinations", {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ vaccine_name, month, year }),
+        });
+        vaccinationForm.reset();
+        loadVaccinations();
+    });
+
+    window.deleteVaccination = async (id) => {
+        await fetch(`/api/passport/vaccinations/${id}`, { method: "DELETE" });
+        loadVaccinations();
+    };
+
+    loadVaccinations();
+}
+
+// ---------- Medical Report Uploads ----------
+
+const reportForm = document.getElementById("reportForm");
+if (reportForm) {
+    function loadReports() {
+        fetch("/api/passport/reports")
+            .then((res) => res.json())
+            .then((reports) => {
+                const list = document.getElementById("reportList");
+                if (!reports || reports.length === 0) {
+                    list.innerHTML = `<p class="text-xs text-slate-400 text-center py-3">No reports uploaded yet.</p>`;
+                    return;
+                }
+                list.innerHTML = reports.map((r) => `
+                    <div class="flex items-center justify-between bg-slate-50 border border-slate-100 rounded-xl p-3">
+                        <div>
+                            <span class="font-bold text-sm text-slate-700">${escapeHtml(r.category)}</span>
+                            <span class="text-xs text-slate-400 ml-2">${escapeHtml(r.month)} ${escapeHtml(r.year)}</span>
+                            <div class="text-xs text-slate-500">${escapeHtml(r.filename)}</div>
+                        </div>
+                        <div class="flex items-center gap-3">
+                            <a href="/api/passport/reports/${r.id}/download" class="text-blue-500 hover:text-blue-700 text-xs"><i class="fa-solid fa-download"></i></a>
+                            <button onclick="deleteReport(${r.id})" class="text-red-400 hover:text-red-600 text-xs"><i class="fa-solid fa-trash"></i></button>
+                        </div>
+                    </div>`).join("");
+            });
+    }
+
+    reportForm.addEventListener("submit", async (e) => {
+        e.preventDefault();
+        const fileInput = document.getElementById("reportFile");
+        if (!fileInput.files.length) return;
+
+        const formData = new FormData();
+        formData.append("file", fileInput.files[0]);
+        formData.append("category", document.getElementById("reportCategory").value);
+        formData.append("month", document.getElementById("reportMonth").value);
+        formData.append("year", document.getElementById("reportYear").value);
+
+        const submitBtn = reportForm.querySelector("button[type='submit']");
+        submitBtn.disabled = true;
+        submitBtn.textContent = "Uploading...";
+
+        try {
+            await fetch("/api/passport/reports", { method: "POST", body: formData });
+            reportForm.reset();
+            loadReports();
+        } finally {
+            submitBtn.disabled = false;
+            submitBtn.textContent = "Upload Report";
+        }
+    });
+
+    window.deleteReport = async (id) => {
+        await fetch(`/api/passport/reports/${id}`, { method: "DELETE" });
+        loadReports();
+    };
+
+    loadReports();
+}
+
 // ---------- Home page: Personalized Snapshot ----------
 
 const passportSnapshotCard = document.getElementById("passportSnapshotCard");
@@ -399,4 +703,13 @@ if (latestAlertsContainer) {
         .catch(() => {
             latestAlertsContainer.innerHTML = `<div class="md:col-span-3 text-center text-red-400 text-sm py-6">Couldn't load recent alerts.</div>`;
         });
+}
+
+function escapeHtml(str) {
+    if (str === null || str === undefined) return "";
+    return String(str)
+        .replace(/&/g, "&amp;")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;");
 }

steps.txt

@@ -58,4 +58,8 @@ pip install deep-translator
 
 ____________________--
 gnn
-pip install torch-geometric networkx
+pip install torch-geometric networkx
+
+_____________________________________________________________________________________________________________________________________________________
+passport page
+pip install flask-login fpdf2

templates/base.html

@@ -28,9 +28,31 @@
             <a href="/checker" class="hover:text-blue-600 transition-colors"><i class="fa-solid fa-magnifying-glass-shield mr-1"></i> AI Fact Checker</a>
             <a href="/predictor" class="hover:text-blue-600 transition-colors"><i class="fa-solid fa-diagram-project mr-1"></i> GNN Predictor</a>
             <a href="/passport" class="hover:text-blue-600 transition-colors"><i class="fa-solid fa-id-card-clip mr-1"></i> Health Passport</a>
+            <a href="/emergency-help" class="text-red-500 hover:text-red-700 transition-colors font-bold"><i class="fa-solid fa-truck-medical mr-1"></i> Emergency</a>
+            {% if current_user.is_authenticated %}
+                <span class="text-slate-400">|</span>
+                <span class="text-slate-500"><i class="fa-solid fa-circle-user mr-1"></i>{{ current_user.name }}</span>
+                <a href="/logout" class="text-red-500 hover:text-red-700 transition-colors"><i class="fa-solid fa-right-from-bracket mr-1"></i>Logout</a>
+            {% else %}
+                <span class="text-slate-400">|</span>
+                <a href="/login" class="hover:text-blue-600 transition-colors">Login</a>
+                <a href="/register" class="bg-blue-600 text-white px-4 py-2 rounded-lg hover:bg-blue-700 transition-colors">Register</a>
+            {% endif %}
         </div>
     </nav>
 
+    {% with messages = get_flashed_messages(with_categories=true) %}
+        {% if messages %}
+        <div class="max-w-7xl w-full mx-auto px-6 pt-4">
+            {% for category, message in messages %}
+            <div class="p-3 rounded-xl text-sm font-semibold mb-2 {{ 'bg-red-50 text-red-700 border border-red-200' if category == 'error' else 'bg-emerald-50 text-emerald-700 border border-emerald-200' }}">
+                {{ message }}
+            </div>
+            {% endfor %}
+        </div>
+        {% endif %}
+    {% endwith %}
+
     <!-- Main Dynamic Content Wrapper -->
     <main class="flex-1 max-w-7xl w-full mx-auto p-6">
         {% block content %}{% endblock %}

templates/emergency_help.html

@@ -0,0 +1,75 @@
+{% extends 'base.html' %}
+{% block content %}
+
+<div class="mb-8 p-8 rounded-3xl bg-gradient-to-r from-red-600 via-rose-600 to-orange-600 text-white shadow-xl shadow-red-100">
+    <h1 class="text-3xl font-black mb-2"><i class="fa-solid fa-truck-medical mr-2"></i>Emergency Help</h1>
+    <p class="text-red-100 max-w-2xl text-sm leading-relaxed">
+        Immediate emergency contact numbers and hospitals near your current location.
+    </p>
+</div>
+
+<!-- Emergency Numbers -->
+<div class="mb-8">
+    <h2 class="text-lg font-bold text-slate-800 mb-4"><i class="fa-solid fa-phone-volume text-red-600 mr-2"></i>Emergency Numbers (India)</h2>
+    <div class="grid grid-cols-2 md:grid-cols-4 gap-4">
+        <a href="tel:112" class="bg-white p-4 rounded-2xl border border-slate-100 shadow-sm hover:shadow-md hover:border-red-200 transition-all text-center">
+            <div class="text-2xl font-black text-red-600">112</div>
+            <div class="text-xs font-bold text-slate-500 mt-1">National Emergency</div>
+        </a>
+        <a href="tel:108" class="bg-white p-4 rounded-2xl border border-slate-100 shadow-sm hover:shadow-md hover:border-red-200 transition-all text-center">
+            <div class="text-2xl font-black text-red-600">108</div>
+            <div class="text-xs font-bold text-slate-500 mt-1">Ambulance</div>
+        </a>
+        <a href="tel:101" class="bg-white p-4 rounded-2xl border border-slate-100 shadow-sm hover:shadow-md hover:border-red-200 transition-all text-center">
+            <div class="text-2xl font-black text-red-600">101</div>
+            <div class="text-xs font-bold text-slate-500 mt-1">Fire Brigade</div>
+        </a>
+        <a href="tel:100" class="bg-white p-4 rounded-2xl border border-slate-100 shadow-sm hover:shadow-md hover:border-red-200 transition-all text-center">
+            <div class="text-2xl font-black text-red-600">100</div>
+            <div class="text-xs font-bold text-slate-500 mt-1">Police</div>
+        </a>
+        <a href="tel:1091" class="bg-white p-4 rounded-2xl border border-slate-100 shadow-sm hover:shadow-md hover:border-red-200 transition-all text-center">
+            <div class="text-2xl font-black text-red-600">1091</div>
+            <div class="text-xs font-bold text-slate-500 mt-1">Women's Helpline</div>
+        </a>
+        <a href="tel:1098" class="bg-white p-4 rounded-2xl border border-slate-100 shadow-sm hover:shadow-md hover:border-red-200 transition-all text-center">
+            <div class="text-2xl font-black text-red-600">1098</div>
+            <div class="text-xs font-bold text-slate-500 mt-1">Child Helpline</div>
+        </a>
+        <a href="tel:1075" class="bg-white p-4 rounded-2xl border border-slate-100 shadow-sm hover:shadow-md hover:border-red-200 transition-all text-center">
+            <div class="text-2xl font-black text-red-600">1075</div>
+            <div class="text-xs font-bold text-slate-500 mt-1">Disaster Mgmt</div>
+        </a>
+        <a href="tel:1930" class="bg-white p-4 rounded-2xl border border-slate-100 shadow-sm hover:shadow-md hover:border-red-200 transition-all text-center">
+            <div class="text-2xl font-black text-red-600">1930</div>
+            <div class="text-xs font-bold text-slate-500 mt-1">Cyber Crime</div>
+        </a>
+    </div>
+    <p class="text-xs text-slate-400 mt-3">Tap any number to call directly on mobile. Numbers shown are for India -- update for your region if deploying elsewhere.</p>
+</div>
+
+<!-- Nearby Hospitals -->
+<div class="bg-white p-6 rounded-2xl border border-slate-200/80 shadow-sm">
+    <h2 class="text-lg font-bold text-slate-800 mb-1"><i class="fa-solid fa-hospital text-blue-600 mr-2"></i>Find Nearby Hospitals</h2>
+    <p class="text-xs text-slate-400 mb-4">Data from OpenStreetMap. Use GPS for instant results, or search a location manually.</p>
+
+    <div class="flex flex-col md:flex-row gap-3 mb-6">
+        <button id="useGpsBtn" class="bg-blue-600 hover:bg-blue-700 text-white font-bold py-3 px-5 rounded-xl text-sm flex items-center justify-center gap-2 transition-colors">
+            <i class="fa-solid fa-location-crosshairs"></i> Use My Current Location (GPS)
+        </button>
+        <div class="flex-1 flex gap-2">
+            <input type="text" id="manualLocationInput" placeholder="Or type a city / area name..." class="flex-1 bg-slate-50 border border-slate-200 rounded-xl p-3 text-sm focus:outline-none focus:border-blue-500">
+            <button id="manualSearchBtn" class="bg-slate-700 hover:bg-slate-800 text-white font-bold py-3 px-5 rounded-xl text-sm transition-colors">
+                <i class="fa-solid fa-magnifying-glass"></i>
+            </button>
+        </div>
+    </div>
+
+    <div id="hospitalStatus" class="text-sm text-slate-400 text-center py-6">
+        Choose GPS or type a location to find nearby hospitals.
+    </div>
+
+    <div id="hospitalList" class="grid grid-cols-1 md:grid-cols-2 gap-4"></div>
+</div>
+
+{% endblock %}

templates/emergency_view.html

@@ -0,0 +1,96 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Emergency Medical Info -- VeriMed AI</title>
+    <script src="https://cdn.tailwindcss.com"></script>
+    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
+</head>
+<body class="bg-slate-50 min-h-screen">
+
+<div class="bg-red-600 text-white text-center py-3 font-bold text-sm tracking-wide">
+    <i class="fa-solid fa-triangle-exclamation mr-2"></i>EMERGENCY MEDICAL INFORMATION -- READ ONLY
+</div>
+
+<div class="max-w-xl mx-auto p-6">
+
+{% if not passport %}
+    <div class="bg-white p-8 rounded-3xl border border-slate-100 shadow-xl text-center mt-10">
+        <i class="fa-solid fa-circle-question text-4xl text-slate-300 mb-4"></i>
+        <h1 class="text-xl font-black text-slate-700">No Record Found</h1>
+        <p class="text-sm text-slate-500 mt-2">This QR code link is invalid or has expired.</p>
+    </div>
+{% else %}
+    <div class="bg-white p-6 rounded-3xl border border-slate-100 shadow-xl mt-6">
+        <div class="flex items-center gap-3 mb-6 pb-4 border-b border-slate-100">
+            <div class="bg-blue-600 text-white w-12 h-12 rounded-xl flex items-center justify-center">
+                <i class="fa-solid fa-id-card-clip text-xl"></i>
+            </div>
+            <div>
+                <h1 class="text-xl font-black text-slate-800">{{ passport.full_name }}</h1>
+                <p class="text-xs text-slate-400">VeriMed AI Health Passport</p>
+            </div>
+        </div>
+
+        <div class="grid grid-cols-2 gap-4 mb-5">
+            <div class="bg-red-50 border border-red-100 p-4 rounded-2xl text-center">
+                <p class="text-[10px] uppercase font-bold text-red-400">Blood Group</p>
+                <p class="text-2xl font-black text-red-600">{{ passport.blood_group or '--' }}</p>
+            </div>
+            <div class="bg-slate-50 border border-slate-100 p-4 rounded-2xl text-center">
+                <p class="text-[10px] uppercase font-bold text-slate-400">Date of Birth</p>
+                <p class="text-lg font-bold text-slate-700 mt-1">{{ passport.date_of_birth or '--' }}</p>
+            </div>
+        </div>
+
+        <div class="space-y-4">
+            <div class="bg-amber-50 border border-amber-100 p-4 rounded-2xl">
+                <p class="text-xs uppercase font-bold text-amber-600 mb-1"><i class="fa-solid fa-triangle-exclamation mr-1"></i>Allergies</p>
+                <p class="text-sm font-semibold text-slate-700">{{ passport.allergies or 'None listed' }}</p>
+            </div>
+
+            <div class="bg-purple-50 border border-purple-100 p-4 rounded-2xl">
+                <p class="text-xs uppercase font-bold text-purple-600 mb-1"><i class="fa-solid fa-heart-pulse mr-1"></i>Chronic Conditions</p>
+                <p class="text-sm font-semibold text-slate-700">{{ passport.chronic_conditions or 'None listed' }}</p>
+            </div>
+
+            <div class="bg-blue-50 border border-blue-100 p-4 rounded-2xl">
+                <p class="text-xs uppercase font-bold text-blue-600 mb-1"><i class="fa-solid fa-pills mr-1"></i>Current Medicines</p>
+                <p class="text-sm font-semibold text-slate-700">{{ passport.current_medicines or 'None listed' }}</p>
+            </div>
+
+            {% if surgeries %}
+            <div class="bg-slate-50 border border-slate-100 p-4 rounded-2xl">
+                <p class="text-xs uppercase font-bold text-slate-500 mb-2"><i class="fa-solid fa-user-doctor mr-1"></i>Surgical History</p>
+                {% for s in surgeries %}
+                <p class="text-sm text-slate-700"><span class="font-bold">{{ s.year }}:</span> {{ s.description }}</p>
+                {% endfor %}
+            </div>
+            {% endif %}
+
+            {% if vaccinations %}
+            <div class="bg-emerald-50 border border-emerald-100 p-4 rounded-2xl">
+                <p class="text-xs uppercase font-bold text-emerald-600 mb-2"><i class="fa-solid fa-syringe mr-1"></i>Vaccination Record</p>
+                {% for v in vaccinations %}
+                <p class="text-sm text-slate-700"><span class="font-bold">{{ v.month }} {{ v.year }}:</span> {{ v.vaccine_name }}</p>
+                {% endfor %}
+            </div>
+            {% endif %}
+
+            <div class="bg-red-600 text-white p-4 rounded-2xl">
+                <p class="text-xs uppercase font-bold text-red-200 mb-1"><i class="fa-solid fa-phone mr-1"></i>Emergency Contact</p>
+                <p class="text-lg font-bold">{{ passport.emergency_contact_name or '--' }}</p>
+                <p class="text-sm text-red-100">{{ passport.emergency_contact_phone or '--' }}</p>
+            </div>
+        </div>
+    </div>
+
+    <p class="text-center text-xs text-slate-400 mt-4">
+        Generated by VeriMed AI. Educational project -- verify critical decisions with attending medical staff.
+    </p>
+{% endif %}
+
+</div>
+</body>
+</html>

templates/index.html

@@ -12,6 +12,9 @@
         <a href="/passport" class="bg-white/15 border border-white/40 text-white font-bold text-sm px-6 py-3 rounded-xl hover:bg-white/25 transition-colors inline-flex items-center gap-2">
             <i class="fa-solid fa-id-card-clip"></i> Check Your Health Passport
         </a>
+        <a href="/emergency-help" class="bg-red-600 text-white font-bold text-sm px-6 py-3 rounded-xl shadow-lg hover:bg-red-700 transition-colors inline-flex items-center gap-2">
+            <i class="fa-solid fa-truck-medical"></i> Emergency Help
+        </a>
     </div>
 </div>
 

templates/login.html

@@ -0,0 +1,32 @@
+{% extends "base.html" %}
+{% block content %}
+<div class="min-h-[70vh] flex items-center justify-center">
+    <div class="w-full max-w-md bg-white p-8 rounded-3xl border border-slate-100 shadow-xl shadow-blue-50">
+        <div class="text-center mb-6">
+            <div class="bg-blue-600 text-white w-14 h-14 rounded-2xl flex items-center justify-center mx-auto mb-4 shadow-lg shadow-blue-200">
+                <i class="fa-solid fa-id-card-clip text-2xl"></i>
+            </div>
+            <h1 class="text-2xl font-black text-slate-800">Welcome Back</h1>
+            <p class="text-sm text-slate-500 mt-1">Log in to access your Health Passport.</p>
+        </div>
+
+        <form method="POST" action="/login" class="space-y-4">
+            <div>
+                <label class="block text-xs uppercase tracking-wider font-bold text-slate-400 mb-2">Email</label>
+                <input type="email" name="email" required class="w-full bg-slate-50 border border-slate-200 rounded-xl p-3 text-sm focus:outline-none focus:border-blue-500" placeholder="you@example.com">
+            </div>
+            <div>
+                <label class="block text-xs uppercase tracking-wider font-bold text-slate-400 mb-2">Password</label>
+                <input type="password" name="password" required class="w-full bg-slate-50 border border-slate-200 rounded-xl p-3 text-sm focus:outline-none focus:border-blue-500" placeholder="••••••••">
+            </div>
+            <button type="submit" class="w-full bg-blue-600 text-white font-bold py-3 rounded-xl hover:bg-blue-700 transition-colors shadow-lg shadow-blue-200">
+                <i class="fa-solid fa-right-to-bracket mr-2"></i>Log In
+            </button>
+        </form>
+
+        <p class="text-center text-sm text-slate-500 mt-6">
+            Don't have an account? <a href="/register" class="text-blue-600 font-bold hover:underline">Register here</a>
+        </p>
+    </div>
+</div>
+{% endblock %}

templates/passport.html

@@ -1,55 +1,114 @@
 {% extends 'base.html' %}
 {% block content %}
+<div class="mb-6">
+    <h1 class="text-2xl font-black text-slate-800">Your Health Passport</h1>
+    <p class="text-sm text-slate-500 mt-1">Logged in as <span class="font-bold">{{ user.name }}</span> ({{ user.email }})</p>
+</div>
+
 <div class="grid grid-cols-1 lg:grid-cols-12 gap-8">
-    <div class="lg:col-span-7 bg-white p-6 rounded-2xl border border-slate-200/80 shadow-sm">
-        <h2 class="text-xl font-bold text-slate-800 mb-4"><i class="fa-solid fa-id-card-clip text-emerald-600 mr-2"></i>Emergency Profile Assembly</h2>
-        
-        <form id="passportForm" class="grid grid-cols-1 md:grid-cols-2 gap-4">
-            <div>
-                <label class="block text-xs font-bold uppercase tracking-wider text-slate-400 mb-1">Full Name</label>
-                <input type="text" id="passName" class="w-full bg-slate-50 border border-slate-200 rounded-xl p-2.5 text-xs focus:outline-none focus:border-emerald-500" required>
-            </div>
-            <div>
-                <label class="block text-xs font-bold uppercase tracking-wider text-slate-400 mb-1">Blood Classification Group</label>
-                <select id="passBlood" class="w-full bg-slate-50 border border-slate-200 rounded-xl p-2.5 text-xs focus:outline-none focus:border-emerald-500">
-                    <option>A+</option><option>O+</option><option>B+</option><option>AB+</option>
-                    <option>A-</option><option>O-</option><option>B-</option><option>AB-</option>
+
+    <!-- LEFT COLUMN: forms -->
+    <div class="lg:col-span-7 flex flex-col gap-6">
+
+        <!-- Personal + Medical Details -->
+        <div class="bg-white p-6 rounded-2xl border border-slate-200/80 shadow-sm">
+            <h2 class="text-lg font-bold text-slate-800 mb-4"><i class="fa-solid fa-id-card-clip text-emerald-600 mr-2"></i>Personal & Medical Details</h2>
+            <form id="passportForm" class="grid grid-cols-1 md:grid-cols-2 gap-4">
+                <div>
+                    <label class="block text-xs font-bold uppercase tracking-wider text-slate-400 mb-1">Full Name</label>
+                    <input type="text" id="passName" class="w-full bg-slate-50 border border-slate-200 rounded-xl p-2.5 text-xs focus:outline-none focus:border-emerald-500" required>
+                </div>
+                <div>
+                    <label class="block text-xs font-bold uppercase tracking-wider text-slate-400 mb-1">Blood Group</label>
+                    <select id="passBlood" class="w-full bg-slate-50 border border-slate-200 rounded-xl p-2.5 text-xs focus:outline-none focus:border-emerald-500">
+                        <option>A+</option><option>O+</option><option>B+</option><option>AB+</option>
+                        <option>A-</option><option>O-</option><option>B-</option><option>AB-</option>
+                    </select>
+                </div>
+                <div class="md:col-span-2">
+                    <label class="block text-xs font-bold uppercase tracking-wider text-slate-400 mb-1">Date of Birth</label>
+                    <input type="text" id="passDob" placeholder="DD-MM-YYYY" class="w-full bg-slate-50 border border-slate-200 rounded-xl p-2.5 text-xs focus:outline-none focus:border-emerald-500">
+                </div>
+                <div class="md:col-span-2">
+                    <label class="block text-xs font-bold uppercase tracking-wider text-slate-400 mb-1">Allergies</label>
+                    <input type="text" id="passAllergies" class="w-full bg-slate-50 border border-slate-200 rounded-xl p-2.5 text-xs focus:outline-none focus:border-emerald-500" placeholder="e.g. Penicillin, Sulfa drugs, Nuts">
+                </div>
+                <div class="md:col-span-2">
+                    <label class="block text-xs font-bold uppercase tracking-wider text-slate-400 mb-1">Chronic Diseases</label>
+                    <input type="text" id="passChronic" class="w-full bg-slate-50 border border-slate-200 rounded-xl p-2.5 text-xs focus:outline-none focus:border-emerald-500" placeholder="e.g. Diabetes, Asthma, Hypertension">
+                </div>
+                <div class="md:col-span-2">
+                    <label class="block text-xs font-bold uppercase tracking-wider text-slate-400 mb-1">Current Medicines</label>
+                    <textarea id="passMeds" rows="2" class="w-full bg-slate-50 border border-slate-200 rounded-xl p-2.5 text-xs focus:outline-none focus:border-emerald-500"></textarea>
+                </div>
+                <div>
+                    <label class="block text-xs font-bold uppercase tracking-wider text-slate-400 mb-1">Emergency Contact Name</label>
+                    <input type="text" id="passContact" class="w-full bg-slate-50 border border-slate-200 rounded-xl p-2.5 text-xs focus:outline-none focus:border-emerald-500">
+                </div>
+                <div>
+                    <label class="block text-xs font-bold uppercase tracking-wider text-slate-400 mb-1">Emergency Contact Phone</label>
+                    <input type="tel" id="passPhone" class="w-full bg-slate-50 border border-slate-200 rounded-xl p-2.5 text-xs focus:outline-none focus:border-emerald-500">
+                </div>
+                <button type="submit" class="md:col-span-2 mt-2 bg-emerald-600 hover:bg-emerald-700 text-white font-bold py-3 rounded-xl transition-colors text-xs tracking-wider uppercase">
+                    Save Passport Details
+                </button>
+            </form>
+        </div>
+
+        <!-- Surgeries -->
+        <div class="bg-white p-6 rounded-2xl border border-slate-200/80 shadow-sm">
+            <h2 class="text-lg font-bold text-slate-800 mb-4"><i class="fa-solid fa-user-doctor text-blue-600 mr-2"></i>Surgical History</h2>
+            <form id="surgeryForm" class="grid grid-cols-1 md:grid-cols-4 gap-3 mb-4">
+                <input type="text" id="surgeryYear" placeholder="Year" class="md:col-span-1 bg-slate-50 border border-slate-200 rounded-xl p-2.5 text-xs focus:outline-none focus:border-blue-500" required>
+                <input type="text" id="surgeryDescription" placeholder="e.g. Appendectomy -- brief description" class="md:col-span-2 bg-slate-50 border border-slate-200 rounded-xl p-2.5 text-xs focus:outline-none focus:border-blue-500" required>
+                <button type="submit" class="md:col-span-1 bg-blue-600 hover:bg-blue-700 text-white font-bold py-2.5 rounded-xl text-xs uppercase tracking-wider">Add</button>
+            </form>
+            <div id="surgeryList" class="flex flex-col gap-2"></div>
+        </div>
+
+        <!-- Vaccinations -->
+        <div class="bg-white p-6 rounded-2xl border border-slate-200/80 shadow-sm">
+            <h2 class="text-lg font-bold text-slate-800 mb-4"><i class="fa-solid fa-syringe text-emerald-600 mr-2"></i>Vaccination Record</h2>
+            <form id="vaccinationForm" class="grid grid-cols-1 md:grid-cols-4 gap-3 mb-4">
+                <input type="text" id="vaccineName" placeholder="Vaccine name" class="md:col-span-2 bg-slate-50 border border-slate-200 rounded-xl p-2.5 text-xs focus:outline-none focus:border-emerald-500" required>
+                <input type="text" id="vaccineMonth" placeholder="Month" class="md:col-span-1 bg-slate-50 border border-slate-200 rounded-xl p-2.5 text-xs focus:outline-none focus:border-emerald-500" required>
+                <input type="text" id="vaccineYear" placeholder="Year" class="md:col-span-1 bg-slate-50 border border-slate-200 rounded-xl p-2.5 text-xs focus:outline-none focus:border-emerald-500" required>
+                <button type="submit" class="md:col-span-4 bg-emerald-600 hover:bg-emerald-700 text-white font-bold py-2.5 rounded-xl text-xs uppercase tracking-wider">Add Vaccination</button>
+            </form>
+            <div id="vaccinationList" class="flex flex-col gap-2"></div>
+        </div>
+
+        <!-- Medical Report Uploads -->
+        <div class="bg-white p-6 rounded-2xl border border-slate-200/80 shadow-sm">
+            <h2 class="text-lg font-bold text-slate-800 mb-4"><i class="fa-solid fa-file-medical text-purple-600 mr-2"></i>Medical Report Documents</h2>
+            <form id="reportForm" class="grid grid-cols-1 md:grid-cols-4 gap-3 mb-4" enctype="multipart/form-data">
+                <input type="file" id="reportFile" class="md:col-span-4 bg-slate-50 border border-slate-200 rounded-xl p-2.5 text-xs focus:outline-none focus:border-purple-500" required>
+                <select id="reportCategory" class="md:col-span-2 bg-slate-50 border border-slate-200 rounded-xl p-2.5 text-xs focus:outline-none focus:border-purple-500">
+                    <option>Blood Report</option><option>MRI</option><option>X-Ray</option>
+                    <option>ECG</option><option>Prescription</option><option>CT Scan</option>
+                    <option>Discharge Summary</option><option>Other</option>
                 </select>
-            </div>
-            <div class="md:col-span-2">
-                <label class="block text-xs font-bold uppercase tracking-wider text-slate-400 mb-1">Critical Medical Allergies</label>
-                <input type="text" id="passAllergies" class="w-full bg-slate-50 border border-slate-200 rounded-xl p-2.5 text-xs focus:outline-none focus:border-emerald-500" placeholder="e.g. Penicillin, Sulfa drugs, Nuts">
-            </div>
-            <div class="md:col-span-2">
-                <label class="block text-xs font-bold uppercase tracking-wider text-slate-400 mb-1">Active Prescribed Medications</label>
-                <textarea id="passMeds" rows="2" class="w-full bg-slate-50 border border-slate-200 rounded-xl p-2.5 text-xs focus:outline-none focus:border-emerald-500"></textarea>
-            </div>
-            <div>
-                <label class="block text-xs font-bold uppercase tracking-wider text-slate-400 mb-1">Emergency Point of Contact</label>
-                <input type="text" id="passContact" class="w-full bg-slate-50 border border-slate-200 rounded-xl p-2.5 text-xs focus:outline-none focus:border-emerald-500">
-            </div>
-            <div>
-                <label class="block text-xs font-bold uppercase tracking-wider text-slate-400 mb-1">Contact Emergency Phone Line</label>
-                <input type="tel" id="passPhone" class="w-full bg-slate-50 border border-slate-200 rounded-xl p-2.5 text-xs focus:outline-none focus:border-emerald-500">
-            </div>
-            
-            <button type="submit" class="md:col-span-2 mt-2 bg-emerald-600 hover:bg-emerald-700 text-white font-bold py-3 rounded-xl transition-colors text-xs tracking-wider uppercase">
-                Compile & Encrypt Locally
-            </button>
-        </form>
+                <input type="text" id="reportMonth" placeholder="Month" class="md:col-span-1 bg-slate-50 border border-slate-200 rounded-xl p-2.5 text-xs focus:outline-none focus:border-purple-500">
+                <input type="text" id="reportYear" placeholder="Year" class="md:col-span-1 bg-slate-50 border border-slate-200 rounded-xl p-2.5 text-xs focus:outline-none focus:border-purple-500">
+                <button type="submit" class="md:col-span-4 bg-purple-600 hover:bg-purple-700 text-white font-bold py-2.5 rounded-xl text-xs uppercase tracking-wider">Upload Report</button>
+            </form>
+            <div id="reportList" class="flex flex-col gap-2"></div>
+        </div>
     </div>
 
-    <!-- Generated Target Output Summary Display Section -->
+    <!-- RIGHT COLUMN: QR + PDF -->
     <div class="lg:col-span-5 flex flex-col gap-6">
-        <div class="bg-gradient-to-br from-emerald-800 to-teal-950 text-white p-6 rounded-2xl shadow-lg flex flex-col items-center justify-center text-center gap-4 min-h-[350px]">
-            <h4 class="font-bold text-sm tracking-wider uppercase text-emerald-300">Generated Verification Engine Target Token</h4>
-            <!-- QR Verification Placeholder Area -->
+        <div class="bg-gradient-to-br from-emerald-800 to-teal-950 text-white p-6 rounded-2xl shadow-lg flex flex-col items-center justify-center text-center gap-4 min-h-[300px] sticky top-24">
+            <h4 class="font-bold text-sm tracking-wider uppercase text-emerald-300">Emergency QR Code</h4>
             <div class="bg-white p-4 rounded-xl shadow-inner inline-block" id="qrContainer">
                 <i class="fa-solid fa-qrcode text-8xl text-slate-300 p-4"></i>
             </div>
             <p class="text-[11px] text-emerald-200/80 max-w-xs leading-relaxed">
-                Scan targets execute cryptographic vector translations parsing medical criteria during intake cycles instantly.
+                Any phone camera can scan this -- opens a read-only emergency summary instantly. No app or login needed for whoever scans it.
             </p>
+            <a href="/api/passport/pdf" id="downloadPdfBtn" class="w-full bg-white text-emerald-800 font-bold py-3 rounded-xl hover:bg-emerald-50 transition-colors text-xs uppercase tracking-wider">
+                <i class="fa-solid fa-file-pdf mr-2"></i>Download Printable PDF
+            </a>
         </div>
     </div>
 </div>

templates/register.html

@@ -0,0 +1,40 @@
+{% extends "base.html" %}
+{% block content %}
+<div class="min-h-[70vh] flex items-center justify-center">
+    <div class="w-full max-w-md bg-white p-8 rounded-3xl border border-slate-100 shadow-xl shadow-blue-50">
+        <div class="text-center mb-6">
+            <div class="bg-emerald-600 text-white w-14 h-14 rounded-2xl flex items-center justify-center mx-auto mb-4 shadow-lg shadow-emerald-200">
+                <i class="fa-solid fa-user-plus text-2xl"></i>
+            </div>
+            <h1 class="text-2xl font-black text-slate-800">Create Your Account</h1>
+            <p class="text-sm text-slate-500 mt-1">Set up your personal Health Passport in a minute.</p>
+        </div>
+
+        <form method="POST" action="/register" class="space-y-4">
+            <div>
+                <label class="block text-xs uppercase tracking-wider font-bold text-slate-400 mb-2">Full Name</label>
+                <input type="text" name="name" required class="w-full bg-slate-50 border border-slate-200 rounded-xl p-3 text-sm focus:outline-none focus:border-blue-500" placeholder="Jane Doe">
+            </div>
+            <div>
+                <label class="block text-xs uppercase tracking-wider font-bold text-slate-400 mb-2">Email</label>
+                <input type="email" name="email" required class="w-full bg-slate-50 border border-slate-200 rounded-xl p-3 text-sm focus:outline-none focus:border-blue-500" placeholder="you@example.com">
+            </div>
+            <div>
+                <label class="block text-xs uppercase tracking-wider font-bold text-slate-400 mb-2">Password</label>
+                <input type="password" name="password" required minlength="8" class="w-full bg-slate-50 border border-slate-200 rounded-xl p-3 text-sm focus:outline-none focus:border-blue-500" placeholder="At least 8 characters">
+            </div>
+            <div>
+                <label class="block text-xs uppercase tracking-wider font-bold text-slate-400 mb-2">Confirm Password</label>
+                <input type="password" name="confirm_password" required minlength="8" class="w-full bg-slate-50 border border-slate-200 rounded-xl p-3 text-sm focus:outline-none focus:border-blue-500" placeholder="Re-enter password">
+            </div>
+            <button type="submit" class="w-full bg-emerald-600 text-white font-bold py-3 rounded-xl hover:bg-emerald-700 transition-colors shadow-lg shadow-emerald-200">
+                <i class="fa-solid fa-user-plus mr-2"></i>Create Account
+            </button>
+        </form>
+
+        <p class="text-center text-sm text-slate-500 mt-6">
+            Already have an account? <a href="/login" class="text-blue-600 font-bold hover:underline">Log in here</a>
+        </p>
+    </div>
+</div>
+{% endblock %}