Update api/routes/patients.py

api/routes/patients.py

@@ -1,4 +1,4 @@
-from fastapi import APIRouter, HTTPException, Depends, Query, status, Body
+from fastapi import APIRouter, HTTPException, Depends, Query, status
 from db.mongo import patients_collection
 from core.security import get_current_user
 from utils.db import create_indexes
@@ -33,6 +33,68 @@ BASE_DIR = Path(__file__).resolve().parent.parent.parent
 SYNTHEA_DATA_DIR = BASE_DIR / "output" / "fhir"
 os.makedirs(SYNTHEA_DATA_DIR, exist_ok=True)
 
+@router.post("/ehr/patients", status_code=status.HTTP_201_CREATED)
+async def create_patient_ehr(
+    patient_data: PatientCreate,
+    current_user: dict = Depends(get_current_user)
+):
+    """Create a new patient in the database via /ehr/patients endpoint"""
+    logger.info(f"Creating new patient via /ehr/patients by user {current_user.get('email')}")
+    
+    if current_user.get('role') not in ['admin', 'doctor']:
+        logger.warning(f"Unauthorized create attempt by {current_user.get('email')}")
+        raise HTTPException(
+            status_code=status.HTTP_403_FORBIDDEN,
+            detail="Only administrators and doctors can create patients"
+        )
+    
+    try:
+        # Prepare the patient document
+        patient_doc = patient_data.dict()
+        now = datetime.utcnow().isoformat()
+        
+        # Add system-generated fields
+        patient_doc.update({
+            "fhir_id": str(uuid.uuid4()),
+            "import_date": now,
+            "last_updated": now,
+            "source": "manual",
+            "created_by": current_user.get('email')
+        })
+        
+        # Ensure arrays exist even if empty
+        for field in ['conditions', 'medications', 'encounters', 'notes']:
+            if field not in patient_doc:
+                patient_doc[field] = []
+        
+        # Insert the patient document
+        result = await patients_collection.insert_one(patient_doc)
+        
+        # Return the created patient with the generated ID
+        created_patient = await patients_collection.find_one(
+            {"_id": result.inserted_id}
+        )
+        
+        if not created_patient:
+            logger.error("Failed to retrieve created patient")
+            raise HTTPException(
+                status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
+                detail="Failed to retrieve created patient"
+            )
+        
+        created_patient["id"] = str(created_patient["_id"])
+        del created_patient["_id"]
+        
+        logger.info(f"Successfully created patient {created_patient['fhir_id']} via /ehr/patients")
+        return created_patient
+        
+    except Exception as e:
+        logger.error(f"Failed to create patient via /ehr/patients: {str(e)}")
+        raise HTTPException(
+            status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
+            detail=f"Failed to create patient: {str(e)}"
+        )
+
 @router.post("/", status_code=status.HTTP_201_CREATED)
 async def create_patient(
     patient_data: PatientCreate,
@@ -361,7 +423,6 @@ async def list_patients(
     if min_conditions > 0:
         query[f"conditions.{min_conditions-1}"] = {"$exists": True}
     
-    # Removed $slice to return full arrays for the frontend
     projection = {
         "fhir_id": 1,
         "full_name": 1,