Update routes.py

routes.py

@@ -1,6 +1,3 @@
-import os
-import json
-from datetime import datetime, date, timedelta
 from flask import render_template, request, redirect, url_for, flash, jsonify, send_from_directory
 from flask_login import login_user, logout_user, login_required, current_user
 from werkzeug.security import check_password_hash, generate_password_hash
@@ -10,616 +7,39 @@ from models import *
 from forms import *
 from utils import generate_treatment_pdf, allowed_file, save_uploaded_image
 from ai_services import medical_ai
+from datetime import datetime, date, timedelta
+import os, json
+
+# ✅ Hugging Face will hit this
+@app.route('/')
+def root_or_dashboard():
+    if current_user.is_authenticated:
+        return redirect(url_for('dashboard'))
+    return "<h1>DermatologyTracker is Live!</h1><p>Please <a href='/login'>Login</a></p>"
 
+# ✅ Actual dashboard — must be a different route
 @app.route('/dashboard')
 @login_required
 def dashboard():
-    # Get dashboard statistics
     total_patients = Patient.query.count()
     today_visits = Visit.query.filter(Visit.visit_date >= date.today()).count()
-    
-    # Get recent patients
     recent_patients = Patient.query.order_by(Patient.last_visit.desc().nullslast()).limit(6).all()
-    
-    # Get upcoming follow-ups
     upcoming_followups = Visit.query.filter(
         Visit.follow_up_date >= date.today(),
         Visit.follow_up_date <= date.today() + timedelta(days=7)
     ).limit(5).all()
-    
-    # Get low stock items
     low_stock_items = Inventory.query.filter(
         Inventory.current_stock <= Inventory.min_threshold
     ).limit(5).all()
-    
-    # Get user preferences for briefing
     preferences = current_user.briefing_preferences
     if not preferences:
         preferences = BriefingPreference(user_id=current_user.id)
         db.session.add(preferences)
         db.session.commit()
-    
     return render_template('dashboard.html',
-                         total_patients=total_patients,
-                         today_visits=today_visits,
-                         recent_patients=recent_patients,
-                         upcoming_followups=upcoming_followups,
-                         low_stock_items=low_stock_items,
-                         preferences=preferences)
-
-@app.route('/login', methods=['GET', 'POST'])
-def login():
-    if current_user.is_authenticated:
-        return redirect(url_for('dashboard'))
-    
-    form = LoginForm()
-    if form.validate_on_submit():
-        user = User.query.filter_by(username=form.username.data).first()
-        if user and check_password_hash(user.password_hash, form.password.data):
-            login_user(user)
-            next_page = request.args.get('next')
-            return redirect(next_page) if next_page else redirect(url_for('dashboard'))
-        flash('Invalid username or password', 'danger')
-    
-    return render_template('login.html', form=form)
-
-@app.route('/logout')
-@login_required
-def logout():
-    logout_user()
-    return redirect(url_for('login'))
-
-@app.route('/patients')
-@login_required
-def patients():
-    search = request.args.get('search', '')
-    page = request.args.get('page', 1, type=int)
-    
-    query = Patient.query
-    if search:
-        query = query.filter(
-            db.or_(
-                Patient.first_name.contains(search),
-                Patient.last_name.contains(search),
-                Patient.patient_id.contains(search)
-            )
-        )
-    
-    patients = query.order_by(Patient.last_name, Patient.first_name).paginate(
-        page=page, per_page=20, error_out=False
-    )
-    
-    return render_template('patients.html', patients=patients, search=search)
-
-@app.route('/patients/new', methods=['GET', 'POST'])
-@login_required
-def new_patient():
-    form = PatientForm()
-    if form.validate_on_submit():
-        # Generate patient ID
-        latest_patient = Patient.query.order_by(Patient.id.desc()).first()
-        patient_id = f"P{(latest_patient.id + 1):06d}" if latest_patient else "P000001"
-        
-        patient = Patient(
-            patient_id=patient_id,
-            first_name=form.first_name.data,
-            last_name=form.last_name.data,
-            date_of_birth=form.date_of_birth.data,
-            gender=form.gender.data,
-            phone=form.phone.data,
-            email=form.email.data,
-            address=form.address.data,
-            emergency_contact=form.emergency_contact.data,
-            emergency_phone=form.emergency_phone.data,
-            allergies=form.allergies.data,
-            medical_history=form.medical_history.data,
-            insurance_info=form.insurance_info.data,
-            doctor_id=current_user.id
-        )
-        
-        db.session.add(patient)
-        db.session.commit()
-        flash(f'Patient {patient.full_name} added successfully!', 'success')
-        return redirect(url_for('patient_detail', id=patient.id))
-    
-    return render_template('patient_detail.html', form=form, patient=None, is_new=True)
-
-@app.route('/patients/<int:id>')
-@login_required
-def patient_detail(id):
-    patient = Patient.query.get_or_404(id)
-    visits = patient.visits.order_by(Visit.visit_date.desc()).all()
-    images = patient.images.order_by(PatientImage.upload_date.desc()).all()
-    treatment_plans = patient.treatment_plans.order_by(TreatmentPlan.created_at.desc()).all()
-    
-    # Forms for adding new data
-    visit_form = VisitForm()
-    note_form = VisitNoteForm()
-    image_form = ImageUploadForm()
-    
-    return render_template('patient_detail.html',
-                         patient=patient,
-                         visits=visits,
-                         images=images,
-                         treatment_plans=treatment_plans,
-                         visit_form=visit_form,
-                         note_form=note_form,
-                         image_form=image_form,
-                         is_new=False)
-
-@app.route('/patients/<int:id>/edit', methods=['GET', 'POST'])
-@login_required
-def edit_patient(id):
-    patient = Patient.query.get_or_404(id)
-    form = PatientForm(obj=patient)
-    
-    if form.validate_on_submit():
-        form.populate_obj(patient)
-        db.session.commit()
-        flash(f'Patient {patient.full_name} updated successfully!', 'success')
-        return redirect(url_for('patient_detail', id=patient.id))
-    
-    return render_template('patient_detail.html', form=form, patient=patient, is_edit=True)
-
-@app.route('/patients/<int:patient_id>/visits/new', methods=['POST'])
-@login_required
-def new_visit(patient_id):
-    patient = Patient.query.get_or_404(patient_id)
-    form = VisitForm()
-    
-    if form.validate_on_submit():
-        visit = Visit(
-            patient_id=patient.id,
-            visit_type=form.visit_type.data,
-            chief_complaint=form.chief_complaint.data,
-            diagnosis=form.diagnosis.data,
-            treatment_notes=form.treatment_notes.data,
-            follow_up_date=form.follow_up_date.data
-        )
-        
-        db.session.add(visit)
-        patient.last_visit = datetime.utcnow()
-        db.session.commit()
-        flash('Visit added successfully!', 'success')
-    else:
-        for field, errors in form.errors.items():
-            for error in errors:
-                flash(f'{field}: {error}', 'danger')
-    
-    return redirect(url_for('patient_detail', id=patient_id))
-
-@app.route('/visits/<int:visit_id>/notes/new', methods=['POST'])
-@login_required
-def new_visit_note(visit_id):
-    visit = Visit.query.get_or_404(visit_id)
-    form = VisitNoteForm()
-    
-    if form.validate_on_submit():
-        note = VisitNote(
-            visit_id=visit.id,
-            author_id=current_user.id,
-            content=form.content.data,
-            note_type=form.note_type.data
-        )
-        
-        db.session.add(note)
-        db.session.commit()
-        flash('Note added successfully!', 'success')
-    else:
-        for field, errors in form.errors.items():
-            for error in errors:
-                flash(f'{field}: {error}', 'danger')
-    
-    return redirect(url_for('patient_detail', id=visit.patient_id))
-
-@app.route('/patients/<int:patient_id>/images/upload', methods=['POST'])
-@login_required
-def upload_image(patient_id):
-    patient = Patient.query.get_or_404(patient_id)
-    form = ImageUploadForm()
-    
-    if form.validate_on_submit():
-        file = form.image.data
-        if file and allowed_file(file.filename):
-            filename = save_uploaded_image(file)
-            
-            image = PatientImage(
-                patient_id=patient.id,
-                filename=filename,
-                original_filename=file.filename,
-                description=form.description.data,
-                body_location=form.body_location.data,
-                image_type=form.image_type.data,
-                uploaded_by_id=current_user.id
-            )
-            
-            db.session.add(image)
-            db.session.commit()
-            flash('Image uploaded successfully!', 'success')
-        else:
-            flash('Invalid file type. Please upload an image.', 'danger')
-    else:
-        for field, errors in form.errors.items():
-            for error in errors:
-                flash(f'{field}: {error}', 'danger')
-    
-    return redirect(url_for('patient_detail', id=patient_id))
-
-@app.route('/uploads/<filename>')
-@login_required
-def uploaded_file(filename):
-    return send_from_directory(app.config['UPLOAD_FOLDER'], filename)
-
-@app.route('/treatment-planner')
-@login_required
-def treatment_planner():
-    patients = Patient.query.order_by(Patient.last_name, Patient.first_name).all()
-    conditions = Condition.query.order_by(Condition.name).all()
-    templates = TreatmentTemplate.query.filter_by(is_active=True).order_by(TreatmentTemplate.name).all()
-    
-    return render_template('treatment_planner.html',
-                         patients=patients,
-                         conditions=conditions,
-                         templates=templates)
-
-@app.route('/treatment-plans/new', methods=['POST'])
-@login_required
-def new_treatment_plan():
-    form = TreatmentPlanForm()
-    patient_id = request.form.get('patient_id', type=int)
-    template_id = request.form.get('template_id', type=int)
-    
-    if form.validate_on_submit() and patient_id:
-        treatment_plan = TreatmentPlan(
-            patient_id=patient_id,
-            diagnosis=form.diagnosis.data,
-            medications=form.medications.data,
-            instructions=form.instructions.data,
-            duration=form.duration.data,
-            follow_up_date=form.follow_up_date.data,
-            notes=form.notes.data,
-            created_by_id=current_user.id,
-            template_id=template_id if template_id else None
-        )
-        
-        db.session.add(treatment_plan)
-        db.session.commit()
-        flash('Treatment plan created successfully!', 'success')
-        return redirect(url_for('patient_detail', id=patient_id))
-    else:
-        flash('Please fill in all required fields.', 'danger')
-    
-    return redirect(url_for('treatment_planner'))
-
-@app.route('/treatment-plans/<int:id>/pdf')
-@login_required
-def treatment_plan_pdf(id):
-    treatment_plan = TreatmentPlan.query.get_or_404(id)
-    return generate_treatment_pdf(treatment_plan)
-
-@app.route('/api/templates/<int:condition_id>')
-@login_required
-def get_templates_by_condition(condition_id):
-    templates = TreatmentTemplate.query.filter_by(
-        condition_id=condition_id,
-        is_active=True
-    ).all()
-    
-    return jsonify([{
-        'id': t.id,
-        'name': t.name,
-        'medications': t.medications,
-        'instructions': t.instructions,
-        'duration': t.duration,
-        'follow_up_weeks': t.follow_up_weeks
-    } for t in templates])
-
-@app.route('/admin')
-@login_required
-def admin():
-    if current_user.role.name != 'Admin':
-        flash('Access denied. Admin privileges required.', 'danger')
-        return redirect(url_for('dashboard'))
-    
-    # Get statistics for admin dashboard
-    total_users = User.query.count()
-    total_patients = Patient.query.count()
-    total_visits = Visit.query.count()
-    low_stock_count = Inventory.query.filter(
-        Inventory.current_stock <= Inventory.min_threshold
-    ).count()
-    
-    return render_template('admin.html',
-                         total_users=total_users,
-                         total_patients=total_patients,
-                         total_visits=total_visits,
-                         low_stock_count=low_stock_count)
-
-@app.route('/admin/users')
-@login_required
-def admin_users():
-    if current_user.role.name != 'Admin':
-        flash('Access denied. Admin privileges required.', 'danger')
-        return redirect(url_for('dashboard'))
-    
-    users = User.query.order_by(User.last_name, User.first_name).all()
-    return render_template('admin.html', section='users', users=users)
-
-@app.route('/admin/inventory')
-@login_required
-def admin_inventory():
-    if current_user.role.name != 'Admin':
-        flash('Access denied. Admin privileges required.', 'danger')
-        return redirect(url_for('dashboard'))
-    
-    inventory = Inventory.query.order_by(Inventory.item_name).all()
-    form = InventoryForm()
-    return render_template('admin.html', section='inventory', inventory=inventory, form=form)
-
-@app.route('/admin/templates')
-@login_required
-def admin_templates():
-    if current_user.role.name != 'Admin':
-        flash('Access denied. Admin privileges required.', 'danger')
-        return redirect(url_for('dashboard'))
-    
-    templates = TreatmentTemplate.query.order_by(TreatmentTemplate.name).all()
-    conditions = Condition.query.order_by(Condition.name).all()
-    template_form = TreatmentTemplateForm()
-    condition_form = ConditionForm()
-    
-    # Populate condition choices
-    template_form.condition_id.choices = [(0, 'Select Condition')] + [(c.id, c.name) for c in conditions]
-    
-    return render_template('admin.html',
-                         section='templates',
-                         templates=templates,
-                         conditions=conditions,
-                         template_form=template_form,
-                         condition_form=condition_form)
-
-@app.route('/admin/inventory/new', methods=['POST'])
-@login_required
-def new_inventory_item():
-    if current_user.role.name != 'Admin':
-        flash('Access denied.', 'danger')
-        return redirect(url_for('dashboard'))
-    
-    form = InventoryForm()
-    if form.validate_on_submit():
-        item = Inventory(
-            item_name=form.item_name.data,
-            category=form.category.data,
-            current_stock=form.current_stock.data,
-            min_threshold=form.min_threshold.data,
-            unit=form.unit.data,
-            supplier=form.supplier.data
-        )
-        
-        db.session.add(item)
-        db.session.commit()
-        flash('Inventory item added successfully!', 'success')
-    else:
-        for field, errors in form.errors.items():
-            for error in errors:
-                flash(f'{field}: {error}', 'danger')
-    
-    return redirect(url_for('admin_inventory'))
-
-@app.route('/admin/templates/new', methods=['POST'])
-@login_required
-def new_treatment_template():
-    if current_user.role.name != 'Admin':
-        flash('Access denied.', 'danger')
-        return redirect(url_for('dashboard'))
-    
-    form = TreatmentTemplateForm()
-    conditions = Condition.query.all()
-    form.condition_id.choices = [(0, 'Select Condition')] + [(c.id, c.name) for c in conditions]
-    
-    if form.validate_on_submit():
-        template = TreatmentTemplate(
-            name=form.name.data,
-            description=form.description.data,
-            condition_id=form.condition_id.data if form.condition_id.data != 0 else None,
-            medications=form.medications.data,
-            instructions=form.instructions.data,
-            duration=form.duration.data,
-            follow_up_weeks=form.follow_up_weeks.data
-        )
-        
-        db.session.add(template)
-        db.session.commit()
-        flash('Treatment template added successfully!', 'success')
-    else:
-        for field, errors in form.errors.items():
-            for error in errors:
-                flash(f'{field}: {error}', 'danger')
-    
-    return redirect(url_for('admin_templates'))
-
-@app.route('/admin/conditions/new', methods=['POST'])
-@login_required
-def new_condition():
-    if current_user.role.name != 'Admin':
-        flash('Access denied.', 'danger')
-        return redirect(url_for('dashboard'))
-    
-    form = ConditionForm()
-    if form.validate_on_submit():
-        condition = Condition(
-            name=form.name.data,
-            description=form.description.data,
-            icd_code=form.icd_code.data,
-            category=form.category.data
-        )
-        
-        db.session.add(condition)
-        db.session.commit()
-        flash('Condition added successfully!', 'success')
-    else:
-        for field, errors in form.errors.items():
-            for error in errors:
-                flash(f'{field}: {error}', 'danger')
-    
-    return redirect(url_for('admin_templates'))
-
-@app.route('/ai-assistant')
-@login_required
-def ai_assistant():
-    patients = Patient.query.order_by(Patient.last_name, Patient.first_name).all()
-    return render_template('ai_treatment_assistant.html', patients=patients)
-
-@app.route('/api/ai/analyze-symptoms', methods=['POST'])
-@login_required
-def ai_analyze_symptoms():
-    try:
-        data = request.get_json()
-        patient = Patient.query.get_or_404(data['patient_id'])
-        
-        # Prepare patient data for AI analysis
-        patient_data = {
-            'age': patient.age,
-            'gender': patient.gender or 'Not specified',
-            'medical_history': patient.medical_history or 'None provided',
-            'allergies': patient.allergies or 'None known',
-            'current_medications': 'To be assessed'  # Could be enhanced with medication tracking
-        }
-        
-        # Get AI recommendations
-        treatment_plan = medical_ai.generate_treatment_plan(
-            patient_data, 
-            data['symptoms'], 
-            data.get('suspected_diagnosis')
-        )
-        
-        differential_diagnosis = medical_ai.suggest_differential_diagnosis(
-            data['symptoms'],
-            patient.age,
-            patient.medical_history or ''
-        )
-        
-        # Check for drug interactions if medications are mentioned
-        medications = []
-        if 'medications' in treatment_plan:
-            # Extract medication names from the treatment plan
-            # This is a simplified extraction - could be enhanced with NLP
-            medications = [med.strip() for med in str(treatment_plan.get('medications', '')).split('\n') if med.strip()]
-        
-        drug_interactions = medical_ai.check_drug_interactions(medications, patient.allergies or '')
-        
-        # Generate patient education
-        patient_education = medical_ai.generate_patient_education(
-            data.get('suspected_diagnosis', 'General condition'),
-            str(treatment_plan.get('medications', ''))
-        )
-        
-        return jsonify({
-            'success': True,
-            'treatment_plan': treatment_plan,
-            'differential_diagnosis': differential_diagnosis.get('diagnoses', []),
-            'drug_interactions': drug_interactions,
-            'patient_education': patient_education
-        })
-        
-    except Exception as e:
-        app.logger.error(f"AI analysis error: {str(e)}")
-        return jsonify({
-            'success': False,
-            'error': 'AI analysis service temporarily unavailable'
-        }), 500
-
-@app.route('/api/ai/smart-templates/<int:condition_id>')
-@login_required  
-def ai_smart_templates(condition_id):
-    try:
-        condition = Condition.query.get_or_404(condition_id)
-        patient_id = request.args.get('patient_id')
-        
-        patient_demographics = {}
-        if patient_id:
-            patient = Patient.query.get(patient_id)
-            if patient:
-                patient_demographics = {
-                    'age': patient.age,
-                    'gender': patient.gender,
-                    'medical_history': patient.medical_history,
-                    'allergies': patient.allergies
-                }
-        
-        smart_templates = medical_ai.smart_template_suggestions(
-            condition.name,
-            patient_demographics
-        )
-        
-        return jsonify({
-            'success': True,
-            'templates': smart_templates
-        })
-        
-    except Exception as e:
-        app.logger.error(f"Smart template error: {str(e)}")
-        return jsonify({
-            'success': False,
-            'error': 'Smart template service unavailable'
-        }), 500
-
-@app.route('/api/ai/predict-outcome', methods=['POST'])
-@login_required
-def ai_predict_outcome():
-    try:
-        data = request.get_json()
-        patient = Patient.query.get_or_404(data['patient_id'])
-        
-        patient_data = {
-            'age': patient.age,
-            'gender': patient.gender,
-            'medical_history': patient.medical_history,
-            'allergies': patient.allergies
-        }
-        
-        outcome_prediction = medical_ai.predict_treatment_outcome(
-            patient_data,
-            data['treatment_plan']
-        )
-        
-        return jsonify({
-            'success': True,
-            'prediction': outcome_prediction
-        })
-        
-    except Exception as e:
-        app.logger.error(f"Outcome prediction error: {str(e)}")
-        return jsonify({
-            'success': False,
-            'error': 'Outcome prediction service unavailable'
-        }), 500
-
-@app.route('/admin/briefing-preferences', methods=['GET', 'POST'])
-@login_required
-def briefing_preferences():
-    preferences = current_user.briefing_preferences
-    if not preferences:
-        preferences = BriefingPreference(user_id=current_user.id)
-        db.session.add(preferences)
-        db.session.commit()
-    
-    form = BriefingPreferencesForm(obj=preferences)
-    
-    if form.validate_on_submit():
-        form.populate_obj(preferences)
-        db.session.commit()
-        flash('Briefing preferences updated successfully!', 'success')
-        return redirect(url_for('dashboard'))
-    
-    return render_template('admin.html', section='briefing', form=form)
-
-# Error handlers
-@app.errorhandler(404)
-def not_found_error(error):
-    return render_template('base.html', error_message='Page not found'), 404
-
-@app.errorhandler(500)
-def internal_error(error):
-    db.session.rollback()
-    return render_template('base.html', error_message='Internal server error'), 500
+        total_patients=total_patients,
+        today_visits=today_visits,
+        recent_patients=recent_patients,
+        upcoming_followups=upcoming_followups,
+        low_stock_items=low_stock_items,
+        preferences=preferences)