diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000000000000000000000000000000000000..cb31444afc433f9d92a8be9cc85929a354372d24
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,93 @@
+# ============================================================
+# MedOS HuggingFace Space — full backend configuration
+# ============================================================
+#
+# All values below are *bootstrap defaults*. Once the Space is running,
+# every secret marked (admin-rotatable) can also be edited from
+# Admin -> Server in the UI and is then persisted to /data/medos-config.json,
+# which survives restarts.
+# ============================================================
+
+# --- LLM providers ---
+OLLABRIDGE_URL=https://ruslanmv-ollabridge.hf.space
+OLLABRIDGE_API_KEY=sk-ollabridge-your-key-here       # admin-rotatable
+HF_TOKEN=hf_your-token-here                          # admin-rotatable
+DEFAULT_MODEL=free-best
+
+# --- Database (SQLite, persistent on HF Spaces /data/) ---
+# SQLite is the fallback driver. To run against Postgres (production), set
+# DATABASE_URL below — SQLite at DB_PATH is then ignored.
+DB_PATH=/data/medos.db
+
+# --- Database (Postgres, production primary) ---
+# When set and starting with postgres:// or postgresql://, the runtime
+# uses Postgres instead of SQLite. Neon: use the pooler endpoint.
+# Example:
+#   postgresql://USER:PASS@ep-xxx-pooler.region.aws.neon.tech/neondb?sslmode=require
+#
+# Unset → SQLite at DB_PATH (development).
+# Unset AND NODE_ENV=production → the server refuses to start.
+#
+# No other DB knobs are needed; SSL, pool size, and statement timeout
+# all have sensible defaults baked in.
+DATABASE_URL=
+
+# --- Admin seed ---
+# First-run admin user. seedAdmin() creates this account on first boot.
+# Do NOT leave ADMIN_PASSWORD at the legacy "admin123456" default in
+# production.
+ADMIN_EMAIL=admin@medos.health
+ADMIN_PASSWORD=
+
+# --- Email (verification + password reset) ---
+# Pick ONE transport. They're tried in this order at runtime:
+#   1. RESEND_API_KEY     → Resend HTTP API (recommended on serverless)
+#   2. SMTP_HOST + SMTP_USER + SMTP_PASS → nodemailer SMTP
+#   3. (nothing)          → emails are logged to stdout only — they never
+#                           reach a real inbox. Useful for local dev, NEVER
+#                           leave this state in production (this is the
+#                           exact state that causes "Account created! Check
+#                           your email" with no email ever arriving).
+#
+# Resend setup: https://resend.com → API Keys → create → paste below.
+# Until you verify a sending domain, FROM_EMAIL must use onboarding@resend.dev
+# (Resend rejects other senders for unverified domains).
+RESEND_API_KEY=
+FROM_EMAIL=MedOS <onboarding@resend.dev>
+
+# SMTP fallback (only used if RESEND_API_KEY is unset).
+# SMTP_HOST=smtp.sendgrid.net
+# SMTP_PORT=587
+# SMTP_USER=apikey
+# SMTP_PASS=
+
+# Verify the active transport at runtime by hitting (as an admin):
+#   GET /api/admin/email-status
+
+# Used in the password-reset email's "Reset password" link. Set to the
+# canonical user-facing URL of your deployment (Vercel domain or HF Space URL).
+APP_URL=https://ruslanmv-medibot.hf.space
+
+# --- CORS (comma-separated Vercel frontend origins) ---
+ALLOWED_ORIGINS=https://your-vercel-app.vercel.app,http://localhost:3000
+
+# --- Medicine Scanner proxy ---
+# Token with "Make calls to Inference Providers" permission.
+# Used SERVER-SIDE ONLY by /api/scan — never exposed to the browser, never
+# returned in any HTTP response body. Per-user quota and audit are enforced
+# server-side; see docs/USER_ISOLATION.md.
+# Create at:
+#   https://huggingface.co/settings/tokens/new?ownUserPermissions=inference.serverless.write&tokenType=fineGrained
+HF_TOKEN_INFERENCE=hf_your-inference-token-here       # admin-rotatable
+SCANNER_URL=https://ruslanmv-medicine-scanner.hf.space # admin-rotatable
+NEARBY_URL=https://ruslanmv-metaengine-nearby.hf.space # admin-rotatable
+
+# --- At-rest encryption key (for BYO user tokens, audit fields, etc.) ---
+# Strongly recommended in production. If unset, falls back to a key derived
+# from ADMIN_PASSWORD (development convenience only — NOT for production).
+# Generate with: openssl rand -hex 32
+# ENCRYPTION_KEY=
+
+# --- Application ---
+NODE_ENV=production
+PORT=7860
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000000000000000000000000000000000000..4d68e8f99e51bf93fea5ff4975444364fcd9400e
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,6 @@
+node_modules/
+.next/
+out/
+.env
+.env.local
+*.tsbuildinfo
diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000000000000000000000000000000000000..8dc4a95413d88a71f1ec34dd2ad569b542dab31b
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,56 @@
+# ============================================================
+# MedOS HuggingFace Space — Production Dockerfile
+#
+# Enterprise architecture:
+#   web/                    = frontend source of truth
+#   9-HuggingFace-Global/   = backend + synced frontend
+#
+# Before deploying, run: bash scripts/sync-frontend.sh
+# This copies web/ frontend, rewrites API paths, then you push.
+# ============================================================
+
+# Stage 1: Install dependencies
+FROM node:18-alpine AS deps
+WORKDIR /app
+RUN apk add --no-cache python3 make g++
+COPY package.json ./
+RUN npm install --legacy-peer-deps && npm cache clean --force
+
+# Stage 2: Build
+FROM node:18-alpine AS builder
+WORKDIR /app
+COPY --from=deps /app/node_modules ./node_modules
+COPY . .
+
+ENV NEXT_TELEMETRY_DISABLED=1
+ENV NODE_ENV=production
+
+RUN npm run build
+
+# Stage 3: Production runner
+FROM node:18-alpine AS runner
+WORKDIR /app
+
+ENV NODE_ENV=production
+ENV NEXT_TELEMETRY_DISABLED=1
+ENV PORT=7860
+ENV HOSTNAME=0.0.0.0
+
+RUN addgroup --system --gid 1001 nodejs && \
+    adduser --system --uid 1001 nextjs
+
+COPY --from=builder /app/public ./public
+COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
+COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
+COPY --from=builder --chown=nextjs:nodejs /app/data ./data
+
+RUN mkdir -p /data && chown nextjs:nodejs /data
+ENV DB_PATH=/data/medos.db
+
+USER nextjs
+EXPOSE 7860
+
+HEALTHCHECK --interval=30s --timeout=10s --start-period=90s --retries=3 \
+  CMD wget --no-verbose --tries=1 --spider http://localhost:7860/api/health || exit 1
+
+CMD ["node", "server.js"]
diff --git a/Makefile b/Makefile
new file mode 100644
index 0000000000000000000000000000000000000000..f5ad723e455d362aff898a033c4f454c7fc97c3e
--- /dev/null
+++ b/Makefile
@@ -0,0 +1,195 @@
+# =============================================================================
+# MedOS Global - Makefile
+# Free AI Medical Assistant for Hugging Face Spaces
+# =============================================================================
+
+SHELL := /bin/bash
+.DEFAULT_GOAL := help
+
+# Directories
+APP_DIR := 9-HuggingFace-Global
+NODE_MODULES := $(APP_DIR)/node_modules
+
+# Colors
+GREEN  := \033[0;32m
+YELLOW := \033[0;33m
+RED    := \033[0;31m
+NC     := \033[0m
+
+# =============================================================================
+# Help
+# =============================================================================
+
+.PHONY: help
+help: ## Show this help message
+	@echo ""
+	@echo "  MedOS Global - Development Commands"
+	@echo "  ===================================="
+	@echo ""
+	@grep -E '^[a-zA-Z_-]+:.*?## .*$$' $(MAKEFILE_LIST) | sort | \
+		awk 'BEGIN {FS = ":.*?## "}; {printf "  $(GREEN)%-20s$(NC) %s\n", $$1, $$2}'
+	@echo ""
+
+# =============================================================================
+# Installation
+# =============================================================================
+
+.PHONY: install
+install: ## Install all dependencies
+	@echo "$(GREEN)Installing dependencies...$(NC)"
+	cd $(APP_DIR) && npm install
+	@echo "$(GREEN)Dependencies installed successfully.$(NC)"
+
+.PHONY: install-ci
+install-ci: ## Install dependencies for CI (clean, reproducible)
+	@echo "$(GREEN)Installing dependencies (CI mode)...$(NC)"
+	cd $(APP_DIR) && npm ci
+	@echo "$(GREEN)CI dependencies installed.$(NC)"
+
+.PHONY: clean
+clean: ## Remove node_modules and build artifacts
+	@echo "$(YELLOW)Cleaning build artifacts...$(NC)"
+	rm -rf $(APP_DIR)/node_modules
+	rm -rf $(APP_DIR)/.next
+	rm -rf $(APP_DIR)/out
+	@echo "$(GREEN)Clean complete.$(NC)"
+
+# =============================================================================
+# Quality Checks
+# =============================================================================
+
+.PHONY: lint
+lint: ## Run ESLint
+	@echo "$(GREEN)Running linter...$(NC)"
+	cd $(APP_DIR) && npx next lint
+
+.PHONY: type-check
+type-check: ## Run TypeScript type checking
+	@echo "$(GREEN)Running type checker...$(NC)"
+	cd $(APP_DIR) && npx tsc --noEmit
+
+.PHONY: format-check
+format-check: ## Check code formatting
+	@echo "$(GREEN)Checking code formatting...$(NC)"
+	cd $(APP_DIR) && npx prettier --check "**/*.{ts,tsx,js,json,css}" 2>/dev/null || echo "Prettier not configured - skipping"
+
+# =============================================================================
+# Testing
+# =============================================================================
+
+.PHONY: test
+test: test-unit test-structure test-providers test-i18n test-safety ## Run all tests
+	@echo "$(GREEN)All tests passed!$(NC)"
+
+.PHONY: test-unit
+test-unit: ## Run unit tests
+	@echo "$(GREEN)Running unit tests...$(NC)"
+	cd $(APP_DIR) && node --experimental-vm-modules ../tests/9-hf-global/run-tests.js
+
+.PHONY: test-structure
+test-structure: ## Verify folder structure and required files exist
+	@echo "$(GREEN)Verifying folder structure...$(NC)"
+	@test -f $(APP_DIR)/Dockerfile          || (echo "$(RED)FAIL: Dockerfile missing$(NC)" && exit 1)
+	@test -f $(APP_DIR)/package.json        || (echo "$(RED)FAIL: package.json missing$(NC)" && exit 1)
+	@test -f $(APP_DIR)/next.config.js      || (echo "$(RED)FAIL: next.config.js missing$(NC)" && exit 1)
+	@test -f $(APP_DIR)/tsconfig.json       || (echo "$(RED)FAIL: tsconfig.json missing$(NC)" && exit 1)
+	@test -f $(APP_DIR)/tailwind.config.ts  || (echo "$(RED)FAIL: tailwind.config.ts missing$(NC)" && exit 1)
+	@test -f $(APP_DIR)/README.md           || (echo "$(RED)FAIL: README.md missing$(NC)" && exit 1)
+	@test -f $(APP_DIR)/app/layout.tsx      || (echo "$(RED)FAIL: app/layout.tsx missing$(NC)" && exit 1)
+	@test -f $(APP_DIR)/app/page.tsx        || (echo "$(RED)FAIL: app/page.tsx missing$(NC)" && exit 1)
+	@test -f $(APP_DIR)/app/globals.css     || (echo "$(RED)FAIL: app/globals.css missing$(NC)" && exit 1)
+	@test -f $(APP_DIR)/app/api/chat/route.ts    || (echo "$(RED)FAIL: chat API route missing$(NC)" && exit 1)
+	@test -f $(APP_DIR)/app/api/triage/route.ts  || (echo "$(RED)FAIL: triage API route missing$(NC)" && exit 1)
+	@test -f $(APP_DIR)/app/api/health/route.ts  || (echo "$(RED)FAIL: health API route missing$(NC)" && exit 1)
+	@test -f $(APP_DIR)/public/manifest.json     || (echo "$(RED)FAIL: manifest.json missing$(NC)" && exit 1)
+	@test -f $(APP_DIR)/public/sw.js             || (echo "$(RED)FAIL: sw.js missing$(NC)" && exit 1)
+	@test -f $(APP_DIR)/Dockerfile               || (echo "$(RED)FAIL: Dockerfile missing$(NC)" && exit 1)
+	@echo "$(GREEN)  Structure check passed (15/15 files verified).$(NC)"
+
+.PHONY: test-providers
+test-providers: ## Test provider modules exist and export correctly
+	@echo "$(GREEN)Verifying provider modules...$(NC)"
+	@test -f $(APP_DIR)/lib/providers/index.ts            || (echo "$(RED)FAIL: providers/index.ts missing$(NC)" && exit 1)
+	@test -f $(APP_DIR)/lib/providers/ollabridge.ts       || (echo "$(RED)FAIL: ollabridge.ts missing$(NC)" && exit 1)
+	@test -f $(APP_DIR)/lib/providers/huggingface-direct.ts || (echo "$(RED)FAIL: huggingface-direct.ts missing$(NC)" && exit 1)
+	@test -f $(APP_DIR)/lib/providers/cached-faq.ts       || (echo "$(RED)FAIL: cached-faq.ts missing$(NC)" && exit 1)
+	@test -f $(APP_DIR)/lib/providers/ollabridge-models.ts || (echo "$(RED)FAIL: ollabridge-models.ts missing$(NC)" && exit 1)
+	@echo "$(GREEN)  Provider modules verified (5/5).$(NC)"
+
+.PHONY: test-i18n
+test-i18n: ## Verify i18n translations exist (synced or in web/ source)
+	@echo "$(GREEN)Verifying i18n...$(NC)"
+	@if test -f $(APP_DIR)/lib/i18n.ts; then \
+		echo "$(GREEN)  Found synced lib/i18n.ts$(NC)"; \
+	elif test -f web/lib/i18n.ts; then \
+		echo "$(GREEN)  Found web/lib/i18n.ts (source of truth)$(NC)"; \
+	else \
+		echo "$(RED)FAIL: i18n.ts not found in lib/ or web/lib/$(NC)" && exit 1; \
+	fi
+
+.PHONY: test-safety
+test-safety: ## Verify safety modules exist
+	@echo "$(GREEN)Verifying safety modules...$(NC)"
+	@test -f $(APP_DIR)/lib/safety/triage.ts            || (echo "$(RED)FAIL: triage.ts missing$(NC)" && exit 1)
+	@test -f $(APP_DIR)/lib/safety/emergency-numbers.ts || (echo "$(RED)FAIL: emergency-numbers.ts missing$(NC)" && exit 1)
+	@test -f $(APP_DIR)/lib/safety/disclaimer.ts        || (echo "$(RED)FAIL: disclaimer.ts missing$(NC)" && exit 1)
+	@echo "$(GREEN)  Safety modules verified (3/3).$(NC)"
+
+# =============================================================================
+# Build
+# =============================================================================
+
+.PHONY: build
+build: ## Build the Next.js application
+	@echo "$(GREEN)Building application...$(NC)"
+	cd $(APP_DIR) && npm run build
+	@echo "$(GREEN)Build complete.$(NC)"
+
+.PHONY: docker-build
+docker-build: ## Build Docker image
+	@echo "$(GREEN)Building Docker image...$(NC)"
+	cd $(APP_DIR) && docker build -t medos-global .
+	@echo "$(GREEN)Docker image built successfully.$(NC)"
+
+.PHONY: docker-run
+docker-run: ## Run Docker container locally
+	@echo "$(GREEN)Starting MedOS on http://localhost:7860...$(NC)"
+	cd $(APP_DIR) && docker run -p 7860:7860 \
+		-e OLLABRIDGE_URL=$${OLLABRIDGE_URL:-https://ruslanmv-ollabridge-cloud.hf.space} \
+		-e HF_TOKEN=$${HF_TOKEN:-} \
+		medos-global
+
+# =============================================================================
+# Development
+# =============================================================================
+
+.PHONY: dev
+dev: ## Start development server on port 7860
+	@echo "$(GREEN)Starting dev server on http://localhost:7860...$(NC)"
+	cd $(APP_DIR) && npm run dev
+
+.PHONY: start
+start: ## Start production server on port 7860
+	cd $(APP_DIR) && npm run start
+
+# =============================================================================
+# Deployment
+# =============================================================================
+
+.PHONY: deploy-hf
+deploy-hf: ## Deploy to Hugging Face Spaces (requires HF_TOKEN)
+	@test -n "$(HF_TOKEN)" || (echo "$(RED)ERROR: HF_TOKEN is required. Set it with: make deploy-hf HF_TOKEN=hf_...$(NC)" && exit 1)
+	@echo "$(GREEN)Deploying to Hugging Face Spaces...$(NC)"
+	@bash scripts/deploy-hf.sh $(HF_TOKEN)
+
+# =============================================================================
+# CI Pipeline (combines all checks)
+# =============================================================================
+
+.PHONY: ci
+ci: install-ci test build ## Full CI pipeline: install, test, build
+	@echo "$(GREEN)CI pipeline passed successfully!$(NC)"
+
+.PHONY: check
+check: test-structure test-providers test-i18n test-safety ## Quick check (no install needed)
+	@echo "$(GREEN)All structural checks passed!$(NC)"
diff --git a/README.md b/README.md
new file mode 100644
index 0000000000000000000000000000000000000000..f120c07f3cec5595b8ea2557d9c5dab6ecabec35
--- /dev/null
+++ b/README.md
@@ -0,0 +1,106 @@
+---
+title: "MediBot: Free AI Medical Assistant · 20 languages"
+emoji: "\U0001F3E5"
+colorFrom: blue
+colorTo: indigo
+sdk: docker
+app_port: 7860
+pinned: true
+license: apache-2.0
+short_description: "Free AI medical chatbot. 20 languages. No sign-up."
+tags:
+  - medical
+  - healthcare
+  - chatbot
+  - medical-ai
+  - health-assistant
+  - symptom-checker
+  - telemedicine
+  - who-guidelines
+  - cdc
+  - multilingual
+  - i18n
+  - rag
+  - llama-3.3
+  - llama-3.3-70b
+  - mixtral
+  - groq
+  - huggingface-inference
+  - pwa
+  - offline-first
+  - free
+  - no-signup
+  - privacy-first
+  - worldwide
+  - nextjs
+  - docker
+models:
+  - meta-llama/Llama-3.3-70B-Instruct
+  - meta-llama/Meta-Llama-3-8B-Instruct
+  - mistralai/Mixtral-8x7B-Instruct-v0.1
+  - Qwen/Qwen2.5-72B-Instruct
+  - deepseek-ai/DeepSeek-V3
+  - ruslanmv/Medical-Llama3-8B
+  - google/gemma-2-9b-it
+datasets:
+  - ruslanmv/ai-medical-chatbot
+---
+
+# MediBot — free AI medical assistant, worldwide
+
+> **Tell MediBot what's bothering you. In your language. Instantly. For free.**
+> No sign-up. No paywall. No data retention. Aligned with WHO · CDC · NHS guidelines.
+
+[![Try MediBot](https://img.shields.io/badge/Try_MediBot-Free_on_HuggingFace-blue?style=for-the-badge&logo=huggingface)](https://huggingface.co/spaces/ruslanmv/MediBot)
+[![Languages](https://img.shields.io/badge/languages-20-14B8A6?style=for-the-badge)](#)
+[![Free](https://img.shields.io/badge/price-free_forever-22C55E?style=for-the-badge)](#)
+[![No sign-up](https://img.shields.io/badge/account-not_required-3B82F6?style=for-the-badge)](#)
+
+## Why MediBot
+
+- **Free forever.** No API key, no sign-up, no paywall, no ads.
+- **20 languages, auto-detected.** English, Español, Français, Português, Deutsch, Italiano, العربية, हिन्दी, Kiswahili, 中文, 日本語, 한국어, Русский, Türkçe, Tiếng Việt, ไทย, বাংলা, اردو, Polski, Nederlands.
+- **Worldwide.** IP-based country detection picks your local emergency number (190+ countries) and adapts the answer to your region (°C/°F, metric/imperial, local guidance).
+- **Best free LLM on HuggingFace.** Powered by **Llama 3.3 70B via HF Inference Providers (Groq)** — fastest high-quality free tier available — with an automatic fallback chain across Cerebras, SambaNova, Together, and Mixtral.
+- **Grounded on WHO, CDC, NHS, NIH, ICD-11, BNF, EMA.** A structured system prompt aligns every answer with authoritative guidance.
+- **Red-flag triage.** Built-in symptom patterns detect cardiac, neurological, respiratory, obstetric, pediatric, and mental-health emergencies in every supported language — and immediately escalate to the local emergency number.
+- **Installable PWA.** Add to your phone's home screen and use it like a native app. Offline-capable with a cached FAQ fallback.
+- **Shareable.** Every AI answer gets a Share button that generates a clean deep link with a branded OG card preview — perfect for WhatsApp, Twitter, and Telegram.
+- **Private & anonymous.** Zero accounts. Zero server-side conversation storage. No IPs logged. Anonymous session counter only.
+- **Open source.** Fully transparent. [github.com/ruslanmv/ai-medical-chatbot](https://github.com/ruslanmv/ai-medical-chatbot)
+
+## How it works
+
+1. You type (or speak) a health question
+2. MedOS checks for emergency red flags first
+3. It searches a medical knowledge base for relevant context
+4. Your question + context go to **Llama 3.3 70B** (via Groq, free)
+5. You get a structured answer: Summary, Possible causes, Self-care, When to see a doctor
+
+If the main model is busy, MedOS automatically tries other free models until one responds.
+
+## Built with
+
+| Layer | Technology |
+|---|---|
+| Frontend | Next.js 14, React, Tailwind CSS |
+| AI Model | Llama 3.3 70B Instruct (via HuggingFace Inference + Groq) |
+| Fallbacks | Mixtral 8x7B, OllaBridge, cached FAQ |
+| Knowledge | Medical RAG from [ruslanmv/ai-medical-chatbot](https://github.com/ruslanmv/ai-medical-chatbot) dataset |
+| Gateway | [OllaBridge-Cloud](https://github.com/ruslanmv/ollabridge) |
+| Hosting | HuggingFace Spaces (Docker) |
+
+## License
+
+Apache 2.0 — free to use, modify, and distribute.
+
+## MedOS Family family mode
+
+This branch adds an additive first version of the MedOS Family family layer:
+
+- `lib/family-health.ts` — local-first family tree, MedOS modes, invites, monthly records
+- `lib/hooks/useFamilyHealth.ts` — React hook for family state
+- `components/views/FamilyHealthView.tsx` — Family Admin / MedOS Family dashboard
+- Sidebar integration through the new **MedOS Family** navigation item
+
+The MVP keeps data local-first and prepares for the contracts documented in `../13-MedOS-Family/02-contracts/`.
diff --git a/app/admin/page.tsx b/app/admin/page.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..8d565eab6868e71289d41ee8e788cab0d2c7e3aa
--- /dev/null
+++ b/app/admin/page.tsx
@@ -0,0 +1,327 @@
+'use client';
+
+import { useEffect, useState, useCallback } from 'react';
+import {
+  Users,
+  Activity,
+  Database,
+  MessageCircle,
+  Shield,
+  Search,
+  Trash2,
+  ChevronLeft,
+  ChevronRight,
+  RefreshCw,
+  LogIn,
+  Lock,
+} from 'lucide-react';
+
+interface Stats {
+  totalUsers: number;
+  verifiedUsers: number;
+  adminUsers: number;
+  totalHealthData: number;
+  totalChats: number;
+  activeSessions: number;
+  healthBreakdown: Array<{ type: string; count: number }>;
+  registrations: Array<{ day: string; count: number }>;
+}
+
+interface UserRow {
+  id: string;
+  email: string;
+  displayName: string | null;
+  emailVerified: boolean;
+  isAdmin: boolean;
+  createdAt: string;
+  healthDataCount: number;
+  chatHistoryCount: number;
+}
+
+/**
+ * Admin dashboard — accessible ONLY at /admin on the HuggingFace Space.
+ * Not linked from the public UI. Requires admin login.
+ */
+export default function AdminPage() {
+  const [token, setToken] = useState('');
+  const [loggedIn, setLoggedIn] = useState(false);
+  const [email, setEmail] = useState('');
+  const [password, setPassword] = useState('');
+  const [loginError, setLoginError] = useState('');
+  const [stats, setStats] = useState<Stats | null>(null);
+  const [users, setUsers] = useState<UserRow[]>([]);
+  const [total, setTotal] = useState(0);
+  const [page, setPage] = useState(1);
+  const [search, setSearch] = useState('');
+  const [loading, setLoading] = useState(false);
+
+  const headers = useCallback(
+    () => ({ Authorization: `Bearer ${token}`, 'Content-Type': 'application/json' }),
+    [token],
+  );
+
+  const fetchStats = useCallback(async () => {
+    const res = await fetch('/api/admin/stats', { headers: headers() });
+    if (res.ok) setStats(await res.json());
+    else if (res.status === 403) { setLoggedIn(false); setToken(''); }
+  }, [headers]);
+
+  const fetchUsers = useCallback(async () => {
+    setLoading(true);
+    const qs = new URLSearchParams({ page: String(page), limit: '20' });
+    if (search) qs.set('search', search);
+    const res = await fetch(`/api/admin/users?${qs}`, { headers: headers() });
+    if (res.ok) {
+      const data = await res.json();
+      setUsers(data.users);
+      setTotal(data.total);
+    }
+    setLoading(false);
+  }, [headers, page, search]);
+
+  useEffect(() => {
+    if (!loggedIn) return;
+    fetchStats();
+    fetchUsers();
+  }, [loggedIn, fetchStats, fetchUsers]);
+
+  const handleLogin = async () => {
+    setLoginError('');
+    const res = await fetch('/api/auth/login', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ email, password }),
+    });
+    const data = await res.json();
+    if (!res.ok) { setLoginError(data.error || 'Login failed'); return; }
+    // Verify this user is actually an admin.
+    const meRes = await fetch('/api/auth/me', {
+      headers: { Authorization: `Bearer ${data.token}` },
+    });
+    const me = await meRes.json();
+    if (!me.user) { setLoginError('Auth failed'); return; }
+    // Check admin flag by trying the admin API.
+    const adminCheck = await fetch('/api/admin/stats', {
+      headers: { Authorization: `Bearer ${data.token}` },
+    });
+    if (adminCheck.status === 403) { setLoginError('Not an admin account'); return; }
+    setToken(data.token);
+    setLoggedIn(true);
+  };
+
+  const handleDeleteUser = async (userId: string, userEmail: string) => {
+    if (!confirm(`Delete user ${userEmail} and ALL their data?`)) return;
+    await fetch(`/api/admin/users?id=${userId}`, { method: 'DELETE', headers: headers() });
+    fetchUsers();
+    fetchStats();
+  };
+
+  // Login screen
+  if (!loggedIn) {
+    return (
+      <div className="min-h-screen bg-slate-950 flex items-center justify-center p-4">
+        <div className="w-full max-w-sm">
+          <div className="text-center mb-8">
+            <div className="w-14 h-14 mx-auto mb-4 rounded-2xl bg-gradient-to-br from-red-500 to-orange-500 flex items-center justify-center">
+              <Lock size={24} className="text-white" />
+            </div>
+            <h1 className="text-2xl font-bold text-slate-100">Admin Panel</h1>
+            <p className="text-sm text-slate-400 mt-1">MedOS server administration</p>
+          </div>
+          {loginError && (
+            <div className="mb-4 p-3 rounded-xl bg-red-950/50 border border-red-700/50 text-sm text-red-300">
+              {loginError}
+            </div>
+          )}
+          <div className="space-y-3">
+            <input
+              type="email"
+              value={email}
+              onChange={(e) => setEmail(e.target.value)}
+              placeholder="Admin email"
+              className="w-full bg-slate-900 border border-slate-700 rounded-xl px-4 py-3 text-sm text-slate-100 placeholder-slate-500 focus:outline-none focus:ring-2 focus:ring-red-500/50"
+            />
+            <input
+              type="password"
+              value={password}
+              onChange={(e) => setPassword(e.target.value)}
+              placeholder="Password"
+              className="w-full bg-slate-900 border border-slate-700 rounded-xl px-4 py-3 text-sm text-slate-100 placeholder-slate-500 focus:outline-none focus:ring-2 focus:ring-red-500/50"
+              onKeyDown={(e) => e.key === 'Enter' && handleLogin()}
+            />
+            <button
+              onClick={handleLogin}
+              className="w-full py-3 bg-gradient-to-br from-red-500 to-orange-500 text-white rounded-xl font-bold text-sm hover:brightness-110 transition-all flex items-center justify-center gap-2"
+            >
+              <LogIn size={16} />
+              Sign in as Admin
+            </button>
+          </div>
+        </div>
+      </div>
+    );
+  }
+
+  const totalPages = Math.ceil(total / 20);
+
+  return (
+    <div className="min-h-screen bg-slate-950 text-slate-100">
+      <header className="border-b border-slate-800 px-6 py-4 flex items-center justify-between">
+        <div className="flex items-center gap-3">
+          <div className="w-8 h-8 rounded-lg bg-gradient-to-br from-red-500 to-orange-500 flex items-center justify-center">
+            <Shield size={16} className="text-white" />
+          </div>
+          <h1 className="font-bold text-lg">MedOS Admin</h1>
+        </div>
+        <button
+          onClick={() => { fetchStats(); fetchUsers(); }}
+          className="flex items-center gap-1.5 px-3 py-1.5 rounded-lg bg-slate-800 text-slate-300 text-xs font-semibold hover:bg-slate-700"
+        >
+          <RefreshCw size={12} /> Refresh
+        </button>
+      </header>
+
+      <main className="max-w-6xl mx-auto px-4 sm:px-6 py-8">
+        {/* Stats grid */}
+        {stats && (
+          <div className="grid grid-cols-2 sm:grid-cols-3 lg:grid-cols-6 gap-3 mb-8">
+            <Stat icon={Users} label="Total users" value={stats.totalUsers} />
+            <Stat icon={Shield} label="Verified" value={stats.verifiedUsers} />
+            <Stat icon={Shield} label="Admins" value={stats.adminUsers} color="text-red-400" />
+            <Stat icon={Database} label="Health records" value={stats.totalHealthData} />
+            <Stat icon={MessageCircle} label="Conversations" value={stats.totalChats} />
+            <Stat icon={Activity} label="Active sessions" value={stats.activeSessions} />
+          </div>
+        )}
+
+        {/* Health data breakdown */}
+        {stats && stats.healthBreakdown.length > 0 && (
+          <div className="mb-8 p-4 rounded-2xl bg-slate-900 border border-slate-800">
+            <h3 className="text-xs font-bold uppercase tracking-wider text-slate-400 mb-3">Health data by type</h3>
+            <div className="flex flex-wrap gap-2">
+              {stats.healthBreakdown.map((b) => (
+                <span key={b.type} className="px-3 py-1.5 rounded-full bg-slate-800 text-sm font-medium text-slate-200">
+                  {b.type}: <strong>{b.count}</strong>
+                </span>
+              ))}
+            </div>
+          </div>
+        )}
+
+        {/* User management */}
+        <div className="rounded-2xl bg-slate-900 border border-slate-800 overflow-hidden">
+          <div className="p-4 border-b border-slate-800 flex items-center gap-3">
+            <h2 className="font-bold">Users ({total})</h2>
+            <div className="flex-1 relative ml-4">
+              <Search size={14} className="absolute left-3 top-1/2 -translate-y-1/2 text-slate-500" />
+              <input
+                value={search}
+                onChange={(e) => { setSearch(e.target.value); setPage(1); }}
+                placeholder="Search by email or name..."
+                className="w-full bg-slate-800 border border-slate-700 rounded-lg pl-9 pr-4 py-2 text-sm text-slate-100 placeholder-slate-500 focus:outline-none focus:ring-1 focus:ring-red-500/50"
+              />
+            </div>
+          </div>
+
+          <div className="overflow-x-auto">
+            <table className="w-full text-sm">
+              <thead>
+                <tr className="text-xs text-slate-400 uppercase tracking-wider border-b border-slate-800">
+                  <th className="text-left px-4 py-3">User</th>
+                  <th className="text-center px-4 py-3">Verified</th>
+                  <th className="text-center px-4 py-3">Role</th>
+                  <th className="text-center px-4 py-3">Health</th>
+                  <th className="text-center px-4 py-3">Chats</th>
+                  <th className="text-left px-4 py-3">Joined</th>
+                  <th className="text-right px-4 py-3">Actions</th>
+                </tr>
+              </thead>
+              <tbody>
+                {users.map((u) => (
+                  <tr key={u.id} className="border-b border-slate-800/50 hover:bg-slate-800/30">
+                    <td className="px-4 py-3">
+                      <div className="font-medium text-slate-100">{u.displayName || '—'}</div>
+                      <div className="text-xs text-slate-400">{u.email}</div>
+                    </td>
+                    <td className="px-4 py-3 text-center">
+                      <span className={`text-xs font-bold ${u.emailVerified ? 'text-emerald-400' : 'text-slate-500'}`}>
+                        {u.emailVerified ? 'Yes' : 'No'}
+                      </span>
+                    </td>
+                    <td className="px-4 py-3 text-center">
+                      {u.isAdmin ? (
+                        <span className="px-2 py-0.5 rounded-full text-[10px] font-bold bg-red-500/20 text-red-300 border border-red-500/30">
+                          ADMIN
+                        </span>
+                      ) : (
+                        <span className="text-xs text-slate-500">User</span>
+                      )}
+                    </td>
+                    <td className="px-4 py-3 text-center text-slate-300">{u.healthDataCount}</td>
+                    <td className="px-4 py-3 text-center text-slate-300">{u.chatHistoryCount}</td>
+                    <td className="px-4 py-3 text-slate-400 text-xs">
+                      {new Date(u.createdAt).toLocaleDateString()}
+                    </td>
+                    <td className="px-4 py-3 text-right">
+                      {!u.isAdmin && (
+                        <button
+                          onClick={() => handleDeleteUser(u.id, u.email)}
+                          className="p-1.5 rounded-lg text-slate-500 hover:text-red-400 hover:bg-red-500/10 transition-colors"
+                          title="Delete user"
+                        >
+                          <Trash2 size={14} />
+                        </button>
+                      )}
+                    </td>
+                  </tr>
+                ))}
+                {users.length === 0 && (
+                  <tr>
+                    <td colSpan={7} className="px-4 py-8 text-center text-slate-500">
+                      {loading ? 'Loading...' : 'No users found'}
+                    </td>
+                  </tr>
+                )}
+              </tbody>
+            </table>
+          </div>
+
+          {/* Pagination */}
+          {totalPages > 1 && (
+            <div className="flex items-center justify-between px-4 py-3 border-t border-slate-800">
+              <span className="text-xs text-slate-400">
+                Page {page} of {totalPages}
+              </span>
+              <div className="flex gap-1">
+                <button
+                  onClick={() => setPage(Math.max(1, page - 1))}
+                  disabled={page <= 1}
+                  className="p-1.5 rounded-lg bg-slate-800 text-slate-300 disabled:opacity-30"
+                >
+                  <ChevronLeft size={14} />
+                </button>
+                <button
+                  onClick={() => setPage(Math.min(totalPages, page + 1))}
+                  disabled={page >= totalPages}
+                  className="p-1.5 rounded-lg bg-slate-800 text-slate-300 disabled:opacity-30"
+                >
+                  <ChevronRight size={14} />
+                </button>
+              </div>
+            </div>
+          )}
+        </div>
+      </main>
+    </div>
+  );
+}
+
+function Stat({ icon: Icon, label, value, color }: { icon: any; label: string; value: number; color?: string }) {
+  return (
+    <div className="p-4 rounded-xl bg-slate-900 border border-slate-800">
+      <Icon size={16} className={color || 'text-slate-400'} />
+      <div className="text-2xl font-black mt-2">{value.toLocaleString()}</div>
+      <div className="text-[11px] text-slate-500 font-semibold">{label}</div>
+    </div>
+  );
+}
diff --git a/app/api/admin/audit/route.ts b/app/api/admin/audit/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..b198ea646f2de0158ce59b08fa75bbd8a0489b93
--- /dev/null
+++ b/app/api/admin/audit/route.ts
@@ -0,0 +1,84 @@
+import { NextResponse } from 'next/server';
+import { requireAdmin } from '@/lib/auth-middleware';
+import { queryAudit, type AuditAction } from '@/lib/audit';
+
+/**
+ * GET /api/admin/audit — page through the forensic audit log.
+ *
+ * Query params (all optional):
+ *   userId   filter by actor or target
+ *   action   one of the typed AuditAction values (e.g. "login", "scan")
+ *   since    ISO timestamp lower bound
+ *   limit    page size (default 50, cap 500)
+ *   offset   pagination offset (default 0)
+ *
+ * Response:
+ *   { entries: [...], limit, offset, hasMore }
+ *
+ * Admin-only. Uses the existing queryAudit() helper (lib/audit.ts) so the
+ * schema and indexes are owned by one module.
+ */
+
+export const runtime = 'nodejs';
+export const dynamic = 'force-dynamic';
+
+const ALLOWED_ACTIONS = new Set<AuditAction>([
+  'login',
+  'login_failed',
+  'logout',
+  'register',
+  'verify_email',
+  'password_reset_request',
+  'password_reset',
+  'password_change',
+  'delete_account',
+  'admin_login',
+  'admin_action',
+  'admin_user_delete',
+  'admin_user_reset_password',
+  'admin_config_update',
+  'token_rotate',
+  'chat',
+  'scan',
+  'health_data_write',
+  'health_data_delete',
+  'settings_update',
+  'export_data',
+]);
+
+export async function GET(req: Request) {
+  const admin = requireAdmin(req);
+  if (!admin) {
+    return NextResponse.json({ error: 'Admin access required' }, { status: 403 });
+  }
+
+  const url = new URL(req.url);
+  const userId = url.searchParams.get('userId') || undefined;
+  const actionRaw = url.searchParams.get('action');
+  const since = url.searchParams.get('since') || undefined;
+  const limit = Math.min(
+    500,
+    Math.max(1, parseInt(url.searchParams.get('limit') || '50', 10)),
+  );
+  const offset = Math.max(0, parseInt(url.searchParams.get('offset') || '0', 10));
+
+  // Reject unknown action strings so typos don't silently return nothing.
+  let action: AuditAction | undefined;
+  if (actionRaw) {
+    if (!ALLOWED_ACTIONS.has(actionRaw as AuditAction)) {
+      return NextResponse.json(
+        { error: `Unknown action: ${actionRaw}` },
+        { status: 400 },
+      );
+    }
+    action = actionRaw as AuditAction;
+  }
+
+  // Request one extra row so we can cheaply compute hasMore without a
+  // separate COUNT(*) query.
+  const entries = queryAudit({ userId, action, since, limit: limit + 1, offset });
+  const hasMore = entries.length > limit;
+  if (hasMore) entries.pop();
+
+  return NextResponse.json({ entries, limit, offset, hasMore });
+}
diff --git a/app/api/admin/config/route.ts b/app/api/admin/config/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..00557947d489e48bd2283595ef91906f92e31e8c
--- /dev/null
+++ b/app/api/admin/config/route.ts
@@ -0,0 +1,142 @@
+import { NextResponse } from 'next/server';
+import { requireAdmin } from '@/lib/auth-middleware';
+import { loadConfig, saveConfig, type ServerConfig } from '@/lib/server-config';
+
+/**
+ * Admin configuration management.
+ *
+ * GET  /api/admin/config — returns current server configuration (redacted secrets).
+ * PUT  /api/admin/config — updates server configuration (persisted to config file).
+ *
+ * Configuration is persisted to a JSON file on disk so it survives restarts.
+ * Environment variables take precedence over the config file on first boot.
+ *
+ * The storage/merge logic lives in @/lib/server-config so other admin routes
+ * (like /api/admin/fetch-models) can read the same source of truth.
+ */
+
+const REDACTED = '••••••••';
+
+/** Redact sensitive fields for GET responses. */
+function redact(config: ServerConfig) {
+  const hasSecret = (v: string) => !!(v && v.length > 0);
+  const mask = (v: string) => (hasSecret(v) ? REDACTED : '');
+  return {
+    smtp: {
+      host: config.smtp.host,
+      port: config.smtp.port,
+      user: config.smtp.user,
+      pass: mask(config.smtp.pass),
+      fromEmail: config.smtp.fromEmail,
+      recoveryEmail: config.smtp.recoveryEmail,
+      configured: !!(config.smtp.host && config.smtp.user && config.smtp.pass),
+    },
+    llm: {
+      defaultPreset: config.llm.defaultPreset,
+      ollamaUrl: config.llm.ollamaUrl,
+      hfDefaultModel: config.llm.hfDefaultModel,
+      hfToken: mask(config.llm.hfToken),
+      hfTokenInference: mask(config.llm.hfTokenInference),
+      ollabridgeUrl: config.llm.ollabridgeUrl,
+      ollabridgeApiKey: mask(config.llm.ollabridgeApiKey),
+      openaiApiKey: mask(config.llm.openaiApiKey),
+      anthropicApiKey: mask(config.llm.anthropicApiKey),
+      groqApiKey: mask(config.llm.groqApiKey),
+      watsonxApiKey: mask(config.llm.watsonxApiKey),
+      watsonxProjectId: config.llm.watsonxProjectId,
+      watsonxUrl: config.llm.watsonxUrl,
+      scannerUrl: config.llm.scannerUrl,
+      nearbyUrl: config.llm.nearbyUrl,
+      geminiApiKey: mask(config.llm.geminiApiKey),
+      openrouterApiKey: mask(config.llm.openrouterApiKey),
+      togetherApiKey: mask(config.llm.togetherApiKey),
+      mistralApiKey: mask(config.llm.mistralApiKey),
+      // Computed status flags — derived server-side so UI can show chips.
+      ollabridgeConfigured: !!config.llm.ollabridgeUrl,
+      hfConfigured: hasSecret(config.llm.hfToken),
+      hfInferenceConfigured: hasSecret(config.llm.hfTokenInference),
+      openaiConfigured: hasSecret(config.llm.openaiApiKey),
+      anthropicConfigured: hasSecret(config.llm.anthropicApiKey),
+      groqConfigured: hasSecret(config.llm.groqApiKey),
+      watsonxConfigured: hasSecret(config.llm.watsonxApiKey) && !!config.llm.watsonxProjectId,
+      geminiConfigured: hasSecret(config.llm.geminiApiKey),
+      openrouterConfigured: hasSecret(config.llm.openrouterApiKey),
+      togetherConfigured: hasSecret(config.llm.togetherApiKey),
+      mistralConfigured: hasSecret(config.llm.mistralApiKey),
+    },
+    app: config.app,
+  };
+}
+
+export async function GET(req: Request) {
+  const admin = requireAdmin(req);
+  if (!admin) return NextResponse.json({ error: 'Admin access required' }, { status: 403 });
+
+  const config = loadConfig();
+  return NextResponse.json(redact(config));
+}
+
+export async function PUT(req: Request) {
+  const admin = requireAdmin(req);
+  if (!admin) return NextResponse.json({ error: 'Admin access required' }, { status: 403 });
+
+  try {
+    const body = await req.json();
+    const current = loadConfig();
+
+    // Merge incoming changes (only update provided fields).
+    if (body.smtp) {
+      if (body.smtp.host !== undefined) current.smtp.host = body.smtp.host;
+      if (body.smtp.port !== undefined) current.smtp.port = parseInt(body.smtp.port, 10);
+      if (body.smtp.user !== undefined) current.smtp.user = body.smtp.user;
+      // Only update password if it's not the redacted placeholder.
+      if (body.smtp.pass !== undefined && body.smtp.pass !== REDACTED) {
+        current.smtp.pass = body.smtp.pass;
+      }
+      if (body.smtp.fromEmail !== undefined) current.smtp.fromEmail = body.smtp.fromEmail;
+      if (body.smtp.recoveryEmail !== undefined) current.smtp.recoveryEmail = body.smtp.recoveryEmail;
+    }
+
+    if (body.llm) {
+      // Non-secret fields — assign directly.
+      if (body.llm.defaultPreset !== undefined) current.llm.defaultPreset = body.llm.defaultPreset;
+      if (body.llm.ollamaUrl !== undefined) current.llm.ollamaUrl = body.llm.ollamaUrl;
+      if (body.llm.hfDefaultModel !== undefined) current.llm.hfDefaultModel = body.llm.hfDefaultModel;
+      if (body.llm.ollabridgeUrl !== undefined) current.llm.ollabridgeUrl = body.llm.ollabridgeUrl;
+      if (body.llm.watsonxProjectId !== undefined) current.llm.watsonxProjectId = body.llm.watsonxProjectId;
+      if (body.llm.watsonxUrl !== undefined) current.llm.watsonxUrl = body.llm.watsonxUrl;
+      if (body.llm.scannerUrl !== undefined) current.llm.scannerUrl = body.llm.scannerUrl;
+      if (body.llm.nearbyUrl !== undefined) current.llm.nearbyUrl = body.llm.nearbyUrl;
+
+      // Secret fields — skip if value is the redacted placeholder.
+      const setSecret = (field: keyof ServerConfig['llm'], value: any) => {
+        if (value !== undefined && value !== REDACTED) {
+          (current.llm as any)[field] = value;
+        }
+      };
+      setSecret('hfToken', body.llm.hfToken);
+      setSecret('hfTokenInference', body.llm.hfTokenInference);
+      setSecret('ollabridgeApiKey', body.llm.ollabridgeApiKey);
+      setSecret('openaiApiKey', body.llm.openaiApiKey);
+      setSecret('anthropicApiKey', body.llm.anthropicApiKey);
+      setSecret('groqApiKey', body.llm.groqApiKey);
+      setSecret('watsonxApiKey', body.llm.watsonxApiKey);
+      setSecret('geminiApiKey', body.llm.geminiApiKey);
+      setSecret('openrouterApiKey', body.llm.openrouterApiKey);
+      setSecret('togetherApiKey', body.llm.togetherApiKey);
+      setSecret('mistralApiKey', body.llm.mistralApiKey);
+    }
+
+    if (body.app) {
+      if (body.app.appUrl !== undefined) current.app.appUrl = body.app.appUrl;
+      if (body.app.allowedOrigins !== undefined) current.app.allowedOrigins = body.app.allowedOrigins;
+    }
+
+    saveConfig(current);
+
+    return NextResponse.json({ success: true, config: redact(current) });
+  } catch (error: any) {
+    console.error('[Admin Config]', error?.message);
+    return NextResponse.json({ error: error?.message || 'Failed to update config' }, { status: 500 });
+  }
+}
diff --git a/app/api/admin/email-status/route.ts b/app/api/admin/email-status/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..9f8eb111c5efb14fd4c0993be825e422afee84e0
--- /dev/null
+++ b/app/api/admin/email-status/route.ts
@@ -0,0 +1,30 @@
+import { NextResponse } from 'next/server';
+import { authenticateRequest } from '@/lib/auth-middleware';
+import { emailTransportName } from '@/lib/email';
+
+/**
+ * GET /api/admin/email-status — which email transport is currently active.
+ *
+ * Returns one of:
+ *   { transport: "resend"  }  — RESEND_API_KEY is set; uses Resend HTTP API.
+ *   { transport: "smtp"    }  — SMTP_HOST/USER/PASS are set; uses nodemailer.
+ *   { transport: "console" }  — nothing configured; emails are logged to stdout
+ *                                and NEVER reach a real inbox. This is the
+ *                                state that produces the "Account created!
+ *                                Check your email" UX with no email ever
+ *                                arriving.
+ *
+ * Restricted to authenticated admins — the response itself isn't sensitive
+ * but there's no reason for unauthenticated callers to probe it.
+ */
+export async function GET(req: Request) {
+  const user = authenticateRequest(req);
+  if (!user) return NextResponse.json({ error: 'Not authenticated' }, { status: 401 });
+  if (!user.isAdmin) return NextResponse.json({ error: 'Forbidden' }, { status: 403 });
+
+  return NextResponse.json({
+    transport: emailTransportName(),
+    from: process.env.FROM_EMAIL || '(default: MedOS <onboarding@resend.dev>)',
+    appUrl: process.env.APP_URL || '(default: https://ruslanmv-medibot.hf.space)',
+  });
+}
diff --git a/app/api/admin/fetch-models/route.ts b/app/api/admin/fetch-models/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..a88843ce296c2e23306d5b1ae3ebdf7254e9a540
--- /dev/null
+++ b/app/api/admin/fetch-models/route.ts
@@ -0,0 +1,620 @@
+import { NextResponse } from 'next/server';
+import { requireAdmin } from '@/lib/auth-middleware';
+import { loadConfig } from '@/lib/server-config';
+
+/**
+ * GET /api/admin/fetch-models — Aggregate available models from every
+ * configured provider into one list for the admin model picker.
+ *
+ * Queries, in parallel:
+ *   - OllaBridge Cloud            /v1/models         (OpenAI-compatible)
+ *   - HuggingFace Inference       /v1/models         (via router.huggingface.co)
+ *   - Groq                        /openai/v1/models  (free/cheap tier)
+ *   - OpenAI                      /v1/models         (paid enterprise)
+ *   - Anthropic                   /v1/models         (paid enterprise)
+ *   - IBM WatsonX                 /ml/v1/foundation_model_specs (paid enterprise)
+ *
+ * Each provider block returns:
+ *   { provider, configured, ok, error?, models: [{id, name, ownedBy, context?}] }
+ *
+ * Providers that aren't configured still appear in the response so the UI
+ * can show them as "not configured" with a link to set them up. This keeps
+ * the client-side model picker uniform across providers.
+ *
+ * Admin-only endpoint.
+ */
+
+export const runtime = 'nodejs';
+export const dynamic = 'force-dynamic';
+
+interface ModelInfo {
+  id: string;
+  name: string;
+  ownedBy?: string;
+  context?: number;
+  pricing?: 'free' | 'paid' | 'cheap' | 'local';
+}
+
+interface ProviderBlock {
+  provider: string;
+  label: string;
+  configured: boolean;
+  ok: boolean;
+  error?: string;
+  pricing: 'free' | 'paid' | 'cheap' | 'local';
+  models: ModelInfo[];
+}
+
+/** Default 10s timeout for any provider discovery call. */
+function withTimeout(ms = 10000) {
+  return AbortSignal.timeout(ms);
+}
+
+async function safeJson(res: Response): Promise<any> {
+  try {
+    return await res.json();
+  } catch {
+    return null;
+  }
+}
+
+// ---- Provider fetchers ---------------------------------------------------
+
+async function fetchOllaBridge(
+  url: string,
+  apiKey: string,
+): Promise<ProviderBlock> {
+  const block: ProviderBlock = {
+    provider: 'ollabridge',
+    label: 'OllaBridge Cloud',
+    configured: !!url,
+    ok: false,
+    pricing: 'free',
+    models: [],
+  };
+  if (!url) {
+    block.error = 'Not configured — set OllaBridge URL in Server tab';
+    return block;
+  }
+  try {
+    const cleanBase = url.replace(/\/+$/, '');
+    const res = await fetch(`${cleanBase}/v1/models`, {
+      headers: apiKey ? { Authorization: `Bearer ${apiKey}` } : {},
+      signal: withTimeout(),
+    });
+    if (!res.ok) {
+      block.error = `HTTP ${res.status}`;
+      return block;
+    }
+    const data = await safeJson(res);
+    const list = Array.isArray(data?.data) ? data.data : [];
+    block.models = list.map((m: any) => ({
+      id: String(m.id ?? 'unknown'),
+      name: String(m.id ?? 'unknown'),
+      ownedBy: m.owned_by || 'ollabridge',
+      pricing:
+        String(m.id ?? '').startsWith('free-')
+          ? 'free'
+          : String(m.id ?? '').startsWith('cheap-')
+            ? 'cheap'
+            : 'local',
+    }));
+    block.ok = true;
+  } catch (e: any) {
+    block.error = e?.name === 'TimeoutError' ? 'Timeout (10s)' : e?.message?.slice(0, 100) || 'Request failed';
+  }
+  return block;
+}
+
+async function fetchHuggingFace(token: string): Promise<ProviderBlock> {
+  const block: ProviderBlock = {
+    provider: 'huggingface',
+    label: 'HuggingFace Inference',
+    configured: !!token,
+    ok: false,
+    pricing: 'free',
+    models: [],
+  };
+  if (!token) {
+    block.error = 'Not configured — set HF token in Server tab';
+    // Still provide the curated fallback chain as suggestions so users can
+    // pick a model even before the token is set.
+    block.models = CURATED_HF_MODELS.map((id) => ({
+      id,
+      name: id.split('/').pop() || id,
+      ownedBy: id.split('/')[0],
+      pricing: 'free',
+    }));
+    return block;
+  }
+  try {
+    const res = await fetch('https://router.huggingface.co/v1/models', {
+      headers: { Authorization: `Bearer ${token}` },
+      signal: withTimeout(),
+    });
+    if (!res.ok) {
+      block.error = `HTTP ${res.status}`;
+      // Still return curated list so the UI has something to show.
+      block.models = CURATED_HF_MODELS.map((id) => ({
+        id,
+        name: id.split('/').pop() || id,
+        ownedBy: id.split('/')[0],
+        pricing: 'free',
+      }));
+      return block;
+    }
+    const data = await safeJson(res);
+    const list = Array.isArray(data?.data) ? data.data : [];
+    block.models = list
+      .filter((m: any) => typeof m?.id === 'string')
+      .map((m: any) => ({
+        id: String(m.id),
+        name: String(m.id).split('/').pop() || String(m.id),
+        ownedBy: m.owned_by || String(m.id).split('/')[0],
+        pricing: 'free' as const,
+      }));
+    block.ok = true;
+  } catch (e: any) {
+    block.error = e?.name === 'TimeoutError' ? 'Timeout (10s)' : e?.message?.slice(0, 100) || 'Request failed';
+    block.models = CURATED_HF_MODELS.map((id) => ({
+      id,
+      name: id.split('/').pop() || id,
+      ownedBy: id.split('/')[0],
+      pricing: 'free',
+    }));
+  }
+  return block;
+}
+
+/** Verified-working free HF models (from lib/providers/huggingface-direct.ts). */
+const CURATED_HF_MODELS = [
+  'meta-llama/Llama-3.3-70B-Instruct',
+  'Qwen/Qwen2.5-72B-Instruct',
+  'Qwen/Qwen3-235B-A22B',
+  'google/gemma-3-27b-it',
+  'meta-llama/Llama-3.1-70B-Instruct',
+  'deepseek-ai/DeepSeek-V3-0324',
+];
+
+async function fetchGroq(apiKey: string): Promise<ProviderBlock> {
+  const block: ProviderBlock = {
+    provider: 'groq',
+    label: 'Groq (Free tier)',
+    configured: !!apiKey,
+    ok: false,
+    pricing: 'free',
+    models: [],
+  };
+  if (!apiKey) {
+    block.error = 'Not configured — add Groq API key in Server tab';
+    return block;
+  }
+  try {
+    const res = await fetch('https://api.groq.com/openai/v1/models', {
+      headers: { Authorization: `Bearer ${apiKey}` },
+      signal: withTimeout(),
+    });
+    if (!res.ok) {
+      block.error = `HTTP ${res.status}`;
+      return block;
+    }
+    const data = await safeJson(res);
+    const list = Array.isArray(data?.data) ? data.data : [];
+    block.models = list.map((m: any) => ({
+      id: String(m.id ?? 'unknown'),
+      name: String(m.id ?? 'unknown'),
+      ownedBy: m.owned_by || 'groq',
+      context: typeof m.context_window === 'number' ? m.context_window : undefined,
+      pricing: 'free',
+    }));
+    block.ok = true;
+  } catch (e: any) {
+    block.error = e?.name === 'TimeoutError' ? 'Timeout (10s)' : e?.message?.slice(0, 100) || 'Request failed';
+  }
+  return block;
+}
+
+async function fetchOpenAI(apiKey: string): Promise<ProviderBlock> {
+  const block: ProviderBlock = {
+    provider: 'openai',
+    label: 'OpenAI (Paid)',
+    configured: !!apiKey,
+    ok: false,
+    pricing: 'paid',
+    models: [],
+  };
+  if (!apiKey) {
+    block.error = 'Not configured — add OpenAI API key in Server tab';
+    return block;
+  }
+  try {
+    const res = await fetch('https://api.openai.com/v1/models', {
+      headers: { Authorization: `Bearer ${apiKey}` },
+      signal: withTimeout(),
+    });
+    if (!res.ok) {
+      block.error = `HTTP ${res.status}`;
+      return block;
+    }
+    const data = await safeJson(res);
+    const list = Array.isArray(data?.data) ? data.data : [];
+    // Filter to chat-capable GPT models — the full list is noisy.
+    block.models = list
+      .filter((m: any) => {
+        const id = String(m?.id || '');
+        return /^(gpt-|o1-|o3-|chatgpt)/i.test(id);
+      })
+      .map((m: any) => ({
+        id: String(m.id),
+        name: String(m.id),
+        ownedBy: m.owned_by || 'openai',
+        pricing: 'paid' as const,
+      }));
+    block.ok = true;
+  } catch (e: any) {
+    block.error = e?.name === 'TimeoutError' ? 'Timeout (10s)' : e?.message?.slice(0, 100) || 'Request failed';
+  }
+  return block;
+}
+
+async function fetchAnthropic(apiKey: string): Promise<ProviderBlock> {
+  const block: ProviderBlock = {
+    provider: 'anthropic',
+    label: 'Anthropic Claude (Paid)',
+    configured: !!apiKey,
+    ok: false,
+    pricing: 'paid',
+    models: [],
+  };
+  if (!apiKey) {
+    block.error = 'Not configured — add Anthropic API key in Server tab';
+    // Provide curated list as placeholder.
+    block.models = CURATED_ANTHROPIC_MODELS;
+    return block;
+  }
+  try {
+    const res = await fetch('https://api.anthropic.com/v1/models', {
+      headers: {
+        'x-api-key': apiKey,
+        'anthropic-version': '2023-06-01',
+      },
+      signal: withTimeout(),
+    });
+    if (!res.ok) {
+      block.error = `HTTP ${res.status}`;
+      block.models = CURATED_ANTHROPIC_MODELS;
+      return block;
+    }
+    const data = await safeJson(res);
+    const list = Array.isArray(data?.data) ? data.data : [];
+    block.models = list.map((m: any) => ({
+      id: String(m.id ?? 'unknown'),
+      name: String(m.display_name || m.id || 'unknown'),
+      ownedBy: 'anthropic',
+      pricing: 'paid' as const,
+    }));
+    block.ok = true;
+  } catch (e: any) {
+    block.error = e?.name === 'TimeoutError' ? 'Timeout (10s)' : e?.message?.slice(0, 100) || 'Request failed';
+    block.models = CURATED_ANTHROPIC_MODELS;
+  }
+  return block;
+}
+
+/** Fallback list so the UI can show Claude options even without a key. */
+const CURATED_ANTHROPIC_MODELS: ModelInfo[] = [
+  { id: 'claude-opus-4-6', name: 'Claude Opus 4.6', ownedBy: 'anthropic', pricing: 'paid' },
+  { id: 'claude-sonnet-4-6', name: 'Claude Sonnet 4.6', ownedBy: 'anthropic', pricing: 'paid' },
+  { id: 'claude-haiku-4-5-20251001', name: 'Claude Haiku 4.5', ownedBy: 'anthropic', pricing: 'paid' },
+];
+
+async function fetchWatsonx(
+  apiKey: string,
+  projectId: string,
+  baseUrl: string,
+): Promise<ProviderBlock> {
+  const block: ProviderBlock = {
+    provider: 'watsonx',
+    label: 'IBM WatsonX (Paid)',
+    configured: !!(apiKey && projectId),
+    ok: false,
+    pricing: 'paid',
+    models: [],
+  };
+  if (!apiKey || !projectId) {
+    block.error = 'Not configured — add WatsonX API key and project ID in Server tab';
+    block.models = CURATED_WATSONX_MODELS;
+    return block;
+  }
+  try {
+    // WatsonX requires exchanging the API key for an IAM bearer token first.
+    const iamRes = await fetch('https://iam.cloud.ibm.com/identity/token', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+      body: new URLSearchParams({
+        grant_type: 'urn:ibm:params:oauth:grant-type:apikey',
+        apikey: apiKey,
+      }),
+      signal: withTimeout(),
+    });
+    if (!iamRes.ok) {
+      block.error = `IAM token failed: HTTP ${iamRes.status}`;
+      block.models = CURATED_WATSONX_MODELS;
+      return block;
+    }
+    const iamData = await safeJson(iamRes);
+    const bearer = iamData?.access_token;
+    if (!bearer) {
+      block.error = 'IAM response missing access_token';
+      block.models = CURATED_WATSONX_MODELS;
+      return block;
+    }
+
+    // Discover available foundation models.
+    const cleanBase = baseUrl.replace(/\/+$/, '');
+    const modelsRes = await fetch(
+      `${cleanBase}/ml/v1/foundation_model_specs?version=2024-05-01&limit=200`,
+      {
+        headers: { Authorization: `Bearer ${bearer}` },
+        signal: withTimeout(),
+      },
+    );
+    if (!modelsRes.ok) {
+      block.error = `HTTP ${modelsRes.status}`;
+      block.models = CURATED_WATSONX_MODELS;
+      return block;
+    }
+    const data = await safeJson(modelsRes);
+    const list = Array.isArray(data?.resources) ? data.resources : [];
+    block.models = list.map((m: any) => ({
+      id: String(m.model_id ?? 'unknown'),
+      name: String(m.label || m.model_id || 'unknown'),
+      ownedBy: m.provider || 'ibm',
+      pricing: 'paid' as const,
+    }));
+    block.ok = true;
+  } catch (e: any) {
+    block.error = e?.name === 'TimeoutError' ? 'Timeout (10s)' : e?.message?.slice(0, 100) || 'Request failed';
+    block.models = CURATED_WATSONX_MODELS;
+  }
+  return block;
+}
+
+/** Common WatsonX foundation models as a fallback list. */
+const CURATED_WATSONX_MODELS: ModelInfo[] = [
+  { id: 'ibm/granite-3-8b-instruct', name: 'Granite 3 8B Instruct', ownedBy: 'ibm', pricing: 'paid' },
+  { id: 'meta-llama/llama-3-3-70b-instruct', name: 'Llama 3.3 70B', ownedBy: 'meta', pricing: 'paid' },
+  { id: 'mistralai/mistral-large', name: 'Mistral Large', ownedBy: 'mistralai', pricing: 'paid' },
+];
+
+// ---- Additional provider fetchers (v3) -----------------------------------
+
+/**
+ * Google Gemini. Uses the Generative Language API, which requires the key
+ * as a query parameter rather than a bearer header.
+ */
+async function fetchGemini(apiKey: string): Promise<ProviderBlock> {
+  const block: ProviderBlock = {
+    provider: 'gemini',
+    label: 'Google Gemini',
+    configured: !!apiKey,
+    ok: false,
+    pricing: 'paid',
+    models: [],
+  };
+  if (!apiKey) {
+    block.error = 'API key not configured';
+    return block;
+  }
+  try {
+    const res = await fetch(
+      `https://generativelanguage.googleapis.com/v1beta/models?key=${encodeURIComponent(apiKey)}`,
+      { signal: withTimeout() },
+    );
+    if (!res.ok) {
+      block.error = `HTTP ${res.status}`;
+      return block;
+    }
+    const data = await res.json().catch(() => ({}));
+    const arr = Array.isArray(data?.models) ? data.models : [];
+    block.ok = true;
+    block.models = arr
+      .filter((m: any) => typeof m?.name === 'string')
+      // Gemini returns "models/gemini-1.5-flash" — strip the prefix so the
+      // UI shows the bare model id like every other provider.
+      .map((m: any) => ({
+        id: String(m.name).replace(/^models\//, ''),
+        name: m.displayName || String(m.name).replace(/^models\//, ''),
+        ownedBy: 'google',
+        context: typeof m.inputTokenLimit === 'number' ? m.inputTokenLimit : undefined,
+        pricing: 'paid' as const,
+      }));
+  } catch (e: any) {
+    block.error = e?.name === 'TimeoutError' ? 'Timeout (10s)' : e?.message || 'Request failed';
+  }
+  return block;
+}
+
+/** OpenRouter — OpenAI-compatible /v1/models aggregator across providers. */
+async function fetchOpenRouter(apiKey: string): Promise<ProviderBlock> {
+  const block: ProviderBlock = {
+    provider: 'openrouter',
+    label: 'OpenRouter',
+    configured: !!apiKey,
+    ok: false,
+    pricing: 'paid',
+    models: [],
+  };
+  if (!apiKey) {
+    block.error = 'API key not configured';
+    return block;
+  }
+  try {
+    const res = await fetch('https://openrouter.ai/api/v1/models', {
+      headers: { Authorization: `Bearer ${apiKey}` },
+      signal: withTimeout(),
+    });
+    if (!res.ok) {
+      block.error = `HTTP ${res.status}`;
+      return block;
+    }
+    const data = await res.json().catch(() => ({}));
+    const arr = Array.isArray(data?.data) ? data.data : [];
+    block.ok = true;
+    block.models = arr.slice(0, 200).map((m: any) => ({
+      id: String(m.id),
+      name: m.name || String(m.id),
+      ownedBy: (String(m.id).split('/')[0] as string) || undefined,
+      context: typeof m.context_length === 'number' ? m.context_length : undefined,
+      pricing: m?.pricing?.prompt === '0' ? 'free' : 'paid',
+    }));
+  } catch (e: any) {
+    block.error = e?.name === 'TimeoutError' ? 'Timeout (10s)' : e?.message || 'Request failed';
+  }
+  return block;
+}
+
+/** Together AI — OpenAI-compatible /v1/models. */
+async function fetchTogether(apiKey: string): Promise<ProviderBlock> {
+  const block: ProviderBlock = {
+    provider: 'together',
+    label: 'Together AI',
+    configured: !!apiKey,
+    ok: false,
+    pricing: 'paid',
+    models: [],
+  };
+  if (!apiKey) {
+    block.error = 'API key not configured';
+    return block;
+  }
+  try {
+    const res = await fetch('https://api.together.xyz/v1/models', {
+      headers: { Authorization: `Bearer ${apiKey}` },
+      signal: withTimeout(),
+    });
+    if (!res.ok) {
+      block.error = `HTTP ${res.status}`;
+      return block;
+    }
+    const data = await res.json().catch(() => []);
+    // Together returns a bare array.
+    const arr = Array.isArray(data) ? data : Array.isArray(data?.data) ? data.data : [];
+    block.ok = true;
+    block.models = arr.slice(0, 200).map((m: any) => ({
+      id: String(m.id || m.name),
+      name: m.display_name || m.id || m.name,
+      ownedBy: m.organization || undefined,
+      context: typeof m.context_length === 'number' ? m.context_length : undefined,
+      pricing: 'paid' as const,
+    }));
+  } catch (e: any) {
+    block.error = e?.name === 'TimeoutError' ? 'Timeout (10s)' : e?.message || 'Request failed';
+  }
+  return block;
+}
+
+/** Mistral AI — OpenAI-compatible /v1/models. */
+async function fetchMistral(apiKey: string): Promise<ProviderBlock> {
+  const block: ProviderBlock = {
+    provider: 'mistral',
+    label: 'Mistral AI',
+    configured: !!apiKey,
+    ok: false,
+    pricing: 'paid',
+    models: [],
+  };
+  if (!apiKey) {
+    block.error = 'API key not configured';
+    return block;
+  }
+  try {
+    const res = await fetch('https://api.mistral.ai/v1/models', {
+      headers: { Authorization: `Bearer ${apiKey}` },
+      signal: withTimeout(),
+    });
+    if (!res.ok) {
+      block.error = `HTTP ${res.status}`;
+      return block;
+    }
+    const data = await res.json().catch(() => ({}));
+    const arr = Array.isArray(data?.data) ? data.data : [];
+    block.ok = true;
+    block.models = arr.map((m: any) => ({
+      id: String(m.id),
+      name: m.name || m.id,
+      ownedBy: m.owned_by || 'mistralai',
+      context:
+        typeof m.max_context_length === 'number'
+          ? m.max_context_length
+          : typeof m.context_length === 'number'
+            ? m.context_length
+            : undefined,
+      pricing: 'paid' as const,
+    }));
+  } catch (e: any) {
+    block.error = e?.name === 'TimeoutError' ? 'Timeout (10s)' : e?.message || 'Request failed';
+  }
+  return block;
+}
+
+// ---- Route handler -------------------------------------------------------
+
+export async function GET(req: Request) {
+  const admin = requireAdmin(req);
+  if (!admin) return NextResponse.json({ error: 'Admin access required' }, { status: 403 });
+
+  const config = loadConfig();
+  const { llm } = config;
+
+  // Run every discovery call in parallel so the slowest provider sets the
+  // total latency floor, not the sum of all calls.
+  const [
+    ollabridge,
+    huggingface,
+    groq,
+    openai,
+    anthropic,
+    watsonx,
+    gemini,
+    openrouter,
+    together,
+    mistral,
+  ] = await Promise.all([
+    fetchOllaBridge(llm.ollabridgeUrl, llm.ollabridgeApiKey),
+    fetchHuggingFace(llm.hfToken),
+    fetchGroq(llm.groqApiKey),
+    fetchOpenAI(llm.openaiApiKey),
+    fetchAnthropic(llm.anthropicApiKey),
+    fetchWatsonx(llm.watsonxApiKey, llm.watsonxProjectId, llm.watsonxUrl),
+    fetchGemini(llm.geminiApiKey),
+    fetchOpenRouter(llm.openrouterApiKey),
+    fetchTogether(llm.togetherApiKey),
+    fetchMistral(llm.mistralApiKey),
+  ]);
+
+  const providers = [
+    ollabridge,
+    huggingface,
+    groq,
+    openai,
+    anthropic,
+    watsonx,
+    gemini,
+    openrouter,
+    together,
+    mistral,
+  ];
+  const totalModels = providers.reduce((sum, p) => sum + p.models.length, 0);
+  const okCount = providers.filter((p) => p.ok).length;
+
+  return NextResponse.json({
+    providers,
+    summary: {
+      providers: providers.length,
+      providersOk: okCount,
+      totalModels,
+      fetchedAt: new Date().toISOString(),
+    },
+  });
+}
diff --git a/app/api/admin/llm-health/route.ts b/app/api/admin/llm-health/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..86cb04c9befae34a319b823b260b2a43e198031b
--- /dev/null
+++ b/app/api/admin/llm-health/route.ts
@@ -0,0 +1,127 @@
+import { NextResponse } from 'next/server';
+import { requireAdmin } from '@/lib/auth-middleware';
+import { loadConfig } from '@/lib/server-config';
+
+/**
+ * GET /api/admin/llm-health — Test all LLM providers and models.
+ *
+ * Sends a minimal "Say OK" prompt to each model in the fallback chain
+ * and reports which ones are alive, their latency, and any errors.
+ * Admin-only endpoint.
+ *
+ * Token resolution order:
+ *   1. admin config file (set via /api/admin/config PUT)
+ *   2. HF_TOKEN environment variable
+ * This way an admin can fix a misconfigured Space without redeploying.
+ */
+
+const HF_BASE_URL = 'https://router.huggingface.co/v1';
+
+/** All models to test — matches the presets fallback chain. */
+const MODELS_TO_TEST = [
+  'meta-llama/Llama-3.3-70B-Instruct:sambanova',
+  'meta-llama/Llama-3.3-70B-Instruct:together',
+  'meta-llama/Llama-3.3-70B-Instruct',
+  'Qwen/Qwen2.5-72B-Instruct',
+  'Qwen/Qwen3-235B-A22B',
+  'google/gemma-3-27b-it',
+  'meta-llama/Llama-3.1-70B-Instruct',
+  'Qwen/Qwen3-32B',
+  'deepseek-ai/DeepSeek-V3-0324',
+  'deepseek-ai/DeepSeek-R1',
+  'Qwen/Qwen3-30B-A3B',
+  'Qwen/Qwen2.5-Coder-32B-Instruct',
+];
+
+async function testModel(model: string, token: string): Promise<{
+  model: string;
+  status: 'ok' | 'error';
+  latencyMs: number;
+  response?: string;
+  error?: string;
+  httpStatus?: number;
+}> {
+  const start = Date.now();
+  try {
+    const res = await fetch(`${HF_BASE_URL}/chat/completions`, {
+      method: 'POST',
+      headers: {
+        Authorization: `Bearer ${token}`,
+        'Content-Type': 'application/json',
+      },
+      body: JSON.stringify({
+        model,
+        messages: [{ role: 'user', content: 'Say OK' }],
+        max_tokens: 5,
+        temperature: 0.1,
+        stream: false,
+      }),
+      signal: AbortSignal.timeout(15000),
+    });
+
+    const latencyMs = Date.now() - start;
+
+    if (res.ok) {
+      const data = await res.json();
+      const content = data?.choices?.[0]?.message?.content?.trim() || '';
+      return { model, status: 'ok', latencyMs, response: content.slice(0, 30) };
+    } else {
+      const text = await res.text().catch(() => '');
+      const errorMsg = text.slice(0, 100);
+      return { model, status: 'error', latencyMs, error: errorMsg, httpStatus: res.status };
+    }
+  } catch (e: any) {
+    return {
+      model,
+      status: 'error',
+      latencyMs: Date.now() - start,
+      error: e?.name === 'TimeoutError' ? 'Timeout (15s)' : (e?.message || 'Unknown error').slice(0, 100),
+    };
+  }
+}
+
+export async function GET(req: Request) {
+  const admin = requireAdmin(req);
+  if (!admin) return NextResponse.json({ error: 'Admin access required' }, { status: 403 });
+
+  // Prefer admin-configured token, fall back to env var.
+  const config = loadConfig();
+  const token = config.llm.hfToken || process.env.HF_TOKEN || '';
+
+  if (!token) {
+    // Still return a well-formed response so the UI can render an empty-state
+    // Provider Status panel with a helpful error banner.
+    return NextResponse.json({
+      error: 'HF_TOKEN not configured — set it in Admin → Server → HuggingFace.',
+      models: MODELS_TO_TEST.map((model) => ({
+        model,
+        status: 'error' as const,
+        latencyMs: 0,
+        error: 'No HF token configured',
+      })),
+      summary: {
+        total: MODELS_TO_TEST.length,
+        ok: 0,
+        error: MODELS_TO_TEST.length,
+        testedAt: new Date().toISOString(),
+      },
+    });
+  }
+
+  // Test all models in parallel for speed.
+  const results = await Promise.all(
+    MODELS_TO_TEST.map((model) => testModel(model, token))
+  );
+
+  const ok = results.filter((r) => r.status === 'ok').length;
+
+  return NextResponse.json({
+    models: results,
+    summary: {
+      total: results.length,
+      ok,
+      error: results.length - ok,
+      testedAt: new Date().toISOString(),
+    },
+  });
+}
diff --git a/app/api/admin/reset-password/route.ts b/app/api/admin/reset-password/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..dbe9457ccc8cf71e6b8d11da46bd5dc8fd50dbf1
--- /dev/null
+++ b/app/api/admin/reset-password/route.ts
@@ -0,0 +1,62 @@
+import { NextResponse } from 'next/server';
+import { z } from 'zod';
+import bcrypt from 'bcryptjs';
+import { getDb } from '@/lib/db';
+import { requireAdmin } from '@/lib/auth-middleware';
+
+const Schema = z.object({
+  userId: z.string().min(1),
+  newPassword: z.string().min(6, 'Password must be at least 6 characters'),
+});
+
+/**
+ * POST /api/admin/reset-password — Admin-initiated password reset.
+ *
+ * Allows admins to manually reset a user's password. This is the
+ * industry-standard approach for user management: the admin sets a
+ * temporary password and instructs the user to change it on login.
+ *
+ * Security measures:
+ * - Requires admin authentication
+ * - Passwords are bcrypt-hashed
+ * - All existing sessions for the user are invalidated
+ * - Cannot reset your own password (use profile instead)
+ */
+export async function POST(req: Request) {
+  const admin = requireAdmin(req);
+  if (!admin) return NextResponse.json({ error: 'Admin access required' }, { status: 403 });
+
+  try {
+    const body = await req.json();
+    const { userId, newPassword } = Schema.parse(body);
+
+    const db = getDb();
+
+    // Verify user exists.
+    const user = db.prepare('SELECT id, email FROM users WHERE id = ?').get(userId) as any;
+    if (!user) {
+      return NextResponse.json({ error: 'User not found' }, { status: 404 });
+    }
+
+    // Hash new password.
+    const hash = bcrypt.hashSync(newPassword, 10);
+
+    // Update password and invalidate all sessions.
+    const tx = db.transaction(() => {
+      db.prepare('UPDATE users SET password = ?, updated_at = datetime(\'now\') WHERE id = ?').run(hash, userId);
+      db.prepare('DELETE FROM sessions WHERE user_id = ?').run(userId);
+    });
+    tx();
+
+    return NextResponse.json({
+      success: true,
+      message: `Password reset for ${user.email}. All sessions invalidated.`,
+    });
+  } catch (error: any) {
+    if (error instanceof z.ZodError) {
+      return NextResponse.json({ error: error.errors[0]?.message || 'Invalid input' }, { status: 400 });
+    }
+    console.error('[Admin Reset Password]', error?.message);
+    return NextResponse.json({ error: 'Failed to reset password' }, { status: 500 });
+  }
+}
diff --git a/app/api/admin/stats/route.ts b/app/api/admin/stats/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..91fc25bdc4270db5d9cb35c1c5a88c3858cb0cac
--- /dev/null
+++ b/app/api/admin/stats/route.ts
@@ -0,0 +1,46 @@
+import { NextResponse } from 'next/server';
+import { getDb } from '@/lib/db';
+import { requireAdmin } from '@/lib/auth-middleware';
+
+/**
+ * GET /api/admin/stats — aggregate platform statistics (admin only).
+ */
+export async function GET(req: Request) {
+  const admin = requireAdmin(req);
+  if (!admin) return NextResponse.json({ error: 'Admin access required' }, { status: 403 });
+
+  const db = getDb();
+
+  const totalUsers = (db.prepare('SELECT COUNT(*) as c FROM users').get() as any).c;
+  const verifiedUsers = (db.prepare('SELECT COUNT(*) as c FROM users WHERE email_verified = 1').get() as any).c;
+  const adminUsers = (db.prepare('SELECT COUNT(*) as c FROM users WHERE is_admin = 1').get() as any).c;
+  const totalHealthData = (db.prepare('SELECT COUNT(*) as c FROM health_data').get() as any).c;
+  const totalChats = (db.prepare('SELECT COUNT(*) as c FROM chat_history').get() as any).c;
+  const activeSessions = (db.prepare("SELECT COUNT(*) as c FROM sessions WHERE expires_at > datetime('now')").get() as any).c;
+
+  // Health data breakdown by type.
+  const healthBreakdown = db
+    .prepare('SELECT type, COUNT(*) as count FROM health_data GROUP BY type ORDER BY count DESC')
+    .all() as any[];
+
+  // Registrations over time (last 30 days).
+  const registrations = db
+    .prepare(
+      `SELECT date(created_at) as day, COUNT(*) as count
+       FROM users
+       WHERE created_at > datetime('now', '-30 days')
+       GROUP BY day ORDER BY day`,
+    )
+    .all() as any[];
+
+  return NextResponse.json({
+    totalUsers,
+    verifiedUsers,
+    adminUsers,
+    totalHealthData,
+    totalChats,
+    activeSessions,
+    healthBreakdown,
+    registrations,
+  });
+}
diff --git a/app/api/admin/system-info/route.ts b/app/api/admin/system-info/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..5efd071562b0988159d36de04c9f1b263741f430
--- /dev/null
+++ b/app/api/admin/system-info/route.ts
@@ -0,0 +1,130 @@
+import { NextResponse } from 'next/server';
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+import { requireAdmin } from '@/lib/auth-middleware';
+import { getDb } from '@/lib/db';
+import { CONFIG_PATH } from '@/lib/server-config';
+
+/**
+ * GET /api/admin/system-info — operational diagnostics for the admin panel.
+ *
+ * Returns non-sensitive runtime facts about the deployment so ops can
+ * debug "why isn't feature X working" without SSH'ing into the Space:
+ *   - Node + platform versions
+ *   - DB path, size, schema version (PRAGMA user_version), row counts
+ *   - Config file path, existence, size, last-modified
+ *   - Encryption-key presence (boolean only — never the value)
+ *   - Uptime, memory, load averages
+ *   - Feature-flag / env presence map (booleans only)
+ *
+ * No secret values are ever returned. Admin-only endpoint.
+ */
+
+export const runtime = 'nodejs';
+export const dynamic = 'force-dynamic';
+
+function safeStat(p: string) {
+  try {
+    const s = fs.statSync(p);
+    return {
+      exists: true,
+      sizeBytes: s.size,
+      modifiedAt: s.mtime.toISOString(),
+    };
+  } catch {
+    return { exists: false };
+  }
+}
+
+function envFlag(name: string): boolean {
+  return !!(process.env[name] && process.env[name]!.length > 0);
+}
+
+export async function GET(req: Request) {
+  const admin = requireAdmin(req);
+  if (!admin) {
+    return NextResponse.json({ error: 'Admin access required' }, { status: 403 });
+  }
+
+  const db = getDb();
+
+  const dbPath = process.env.DB_PATH || '/data/medos.db';
+  const persistentDir = process.env.PERSISTENT_DIR || path.dirname(dbPath);
+  const userVersion = db.pragma('user_version', { simple: true }) as number;
+  const journalMode = db.pragma('journal_mode', { simple: true });
+  const foreignKeys = db.pragma('foreign_keys', { simple: true });
+
+  // Cheap row counts — all indexed / small-table aggregates, safe to run
+  // synchronously on each request.
+  const counts = {
+    users: (db.prepare('SELECT COUNT(*) c FROM users').get() as any).c as number,
+    sessions: (db.prepare('SELECT COUNT(*) c FROM sessions').get() as any).c as number,
+    healthData: (db.prepare('SELECT COUNT(*) c FROM health_data').get() as any).c as number,
+    chatHistory: (db.prepare('SELECT COUNT(*) c FROM chat_history').get() as any).c as number,
+    auditLog: (db.prepare('SELECT COUNT(*) c FROM audit_log').get() as any).c as number,
+    scanLog: (db.prepare('SELECT COUNT(*) c FROM scan_log').get() as any).c as number,
+  };
+
+  const mem = process.memoryUsage();
+
+  return NextResponse.json({
+    runtime: {
+      node: process.version,
+      platform: `${os.platform()} ${os.release()}`,
+      arch: process.arch,
+      uptimeSec: Math.round(process.uptime()),
+      nodeEnv: process.env.NODE_ENV || 'development',
+      pid: process.pid,
+    },
+    process: {
+      memoryMb: {
+        rss: Math.round(mem.rss / 1024 / 1024),
+        heapUsed: Math.round(mem.heapUsed / 1024 / 1024),
+        heapTotal: Math.round(mem.heapTotal / 1024 / 1024),
+      },
+      loadAverage: os.loadavg(),
+    },
+    database: {
+      path: dbPath,
+      schemaVersion: userVersion,
+      journalMode,
+      foreignKeys,
+      file: safeStat(dbPath),
+      counts,
+    },
+    config: {
+      path: CONFIG_PATH,
+      persistentDir,
+      file: safeStat(CONFIG_PATH),
+    },
+    security: {
+      // Booleans only — never the value. Redaction by construction.
+      encryptionKeySet: envFlag('ENCRYPTION_KEY'),
+      adminPasswordSet: envFlag('ADMIN_PASSWORD'),
+      adminEmailSet: envFlag('ADMIN_EMAIL'),
+      scanRequireAuth:
+        (process.env.SCAN_REQUIRE_AUTH || '').toLowerCase() !== 'false',
+    },
+    features: {
+      // Presence map for quick "what's wired" answers. No values exposed.
+      hfToken: envFlag('HF_TOKEN'),
+      hfTokenInference: envFlag('HF_TOKEN_INFERENCE'),
+      ollabridgeUrl: envFlag('OLLABRIDGE_URL'),
+      ollabridgeKey: envFlag('OLLABRIDGE_API_KEY'),
+      openai: envFlag('OPENAI_API_KEY'),
+      anthropic: envFlag('ANTHROPIC_API_KEY'),
+      groq: envFlag('GROQ_API_KEY'),
+      watsonx: envFlag('WATSONX_API_KEY') && envFlag('WATSONX_PROJECT_ID'),
+      gemini: envFlag('GEMINI_API_KEY') || envFlag('GOOGLE_API_KEY'),
+      openrouter: envFlag('OPENROUTER_API_KEY'),
+      together: envFlag('TOGETHER_API_KEY'),
+      mistral: envFlag('MISTRAL_API_KEY'),
+      smtp: envFlag('SMTP_HOST') && envFlag('SMTP_USER') && envFlag('SMTP_PASS'),
+      scannerUrl: envFlag('SCANNER_URL'),
+      nearbyUrl: envFlag('NEARBY_URL'),
+      allowedOrigins: envFlag('ALLOWED_ORIGINS'),
+      appUrl: envFlag('APP_URL'),
+    },
+  });
+}
diff --git a/app/api/admin/test-connection/route.ts b/app/api/admin/test-connection/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..e94b41e213fe963a8fd70c4b373090563a1afa0a
--- /dev/null
+++ b/app/api/admin/test-connection/route.ts
@@ -0,0 +1,360 @@
+import { NextResponse } from 'next/server';
+import { requireAdmin } from '@/lib/auth-middleware';
+import { loadConfig } from '@/lib/server-config';
+
+/**
+ * POST /api/admin/test-connection — Test connectivity to a named provider.
+ *
+ * Body: { provider: "ollabridge" | "huggingface" | "openai" | "anthropic"
+ *                  | "groq" | "watsonx" }
+ *
+ * Response:
+ *   { ok: boolean, provider, latencyMs, status?, error?, details? }
+ *
+ * Used by the "Test Connection" button on each provider card. Mirrors the
+ * `ollabridge pair` CLI check — validates that credentials are good and
+ * that the provider's /v1/models (or equivalent) endpoint responds.
+ *
+ * Admin-only.
+ */
+
+export const runtime = 'nodejs';
+export const dynamic = 'force-dynamic';
+
+type Provider =
+  | 'ollabridge'
+  | 'huggingface'
+  | 'openai'
+  | 'anthropic'
+  | 'groq'
+  | 'watsonx'
+  | 'gemini'
+  | 'openrouter'
+  | 'together'
+  | 'mistral';
+
+interface TestResult {
+  ok: boolean;
+  provider: Provider;
+  latencyMs: number;
+  status?: number;
+  error?: string;
+  details?: string;
+}
+
+async function testOllaBridge(url: string, apiKey: string): Promise<Omit<TestResult, 'provider'>> {
+  const start = Date.now();
+  if (!url) {
+    return { ok: false, latencyMs: 0, error: 'URL not configured' };
+  }
+  try {
+    const cleanBase = url.replace(/\/+$/, '');
+    const res = await fetch(`${cleanBase}/v1/models`, {
+      headers: apiKey ? { Authorization: `Bearer ${apiKey}` } : {},
+      signal: AbortSignal.timeout(10000),
+    });
+    const latencyMs = Date.now() - start;
+    if (!res.ok) {
+      return { ok: false, latencyMs, status: res.status, error: `HTTP ${res.status}` };
+    }
+    const data = await res.json().catch(() => null);
+    const count = Array.isArray(data?.data) ? data.data.length : 0;
+    return {
+      ok: true,
+      latencyMs,
+      status: res.status,
+      details: `${count} model${count === 1 ? '' : 's'} available`,
+    };
+  } catch (e: any) {
+    return {
+      ok: false,
+      latencyMs: Date.now() - start,
+      error: e?.name === 'TimeoutError' ? 'Timeout (10s)' : e?.message?.slice(0, 100) || 'Request failed',
+    };
+  }
+}
+
+async function testHuggingFace(token: string): Promise<Omit<TestResult, 'provider'>> {
+  const start = Date.now();
+  if (!token) return { ok: false, latencyMs: 0, error: 'HF token not configured' };
+  try {
+    // whoami-v2 validates that the token has API access; it's cheaper
+    // than hitting the router and gives a clear permission error.
+    const res = await fetch('https://huggingface.co/api/whoami-v2', {
+      headers: { Authorization: `Bearer ${token}` },
+      signal: AbortSignal.timeout(10000),
+    });
+    const latencyMs = Date.now() - start;
+    if (!res.ok) {
+      return { ok: false, latencyMs, status: res.status, error: `HTTP ${res.status}` };
+    }
+    const data = await res.json().catch(() => null);
+    return {
+      ok: true,
+      latencyMs,
+      status: res.status,
+      details: data?.name ? `Authenticated as ${data.name}` : 'Token valid',
+    };
+  } catch (e: any) {
+    return {
+      ok: false,
+      latencyMs: Date.now() - start,
+      error: e?.name === 'TimeoutError' ? 'Timeout (10s)' : e?.message?.slice(0, 100) || 'Request failed',
+    };
+  }
+}
+
+async function testOpenAI(apiKey: string): Promise<Omit<TestResult, 'provider'>> {
+  const start = Date.now();
+  if (!apiKey) return { ok: false, latencyMs: 0, error: 'OpenAI API key not configured' };
+  try {
+    const res = await fetch('https://api.openai.com/v1/models', {
+      headers: { Authorization: `Bearer ${apiKey}` },
+      signal: AbortSignal.timeout(10000),
+    });
+    const latencyMs = Date.now() - start;
+    if (!res.ok) return { ok: false, latencyMs, status: res.status, error: `HTTP ${res.status}` };
+    const data = await res.json().catch(() => null);
+    const count = Array.isArray(data?.data) ? data.data.length : 0;
+    return { ok: true, latencyMs, status: res.status, details: `${count} models visible` };
+  } catch (e: any) {
+    return {
+      ok: false,
+      latencyMs: Date.now() - start,
+      error: e?.name === 'TimeoutError' ? 'Timeout (10s)' : e?.message?.slice(0, 100) || 'Request failed',
+    };
+  }
+}
+
+async function testAnthropic(apiKey: string): Promise<Omit<TestResult, 'provider'>> {
+  const start = Date.now();
+  if (!apiKey) return { ok: false, latencyMs: 0, error: 'Anthropic API key not configured' };
+  try {
+    const res = await fetch('https://api.anthropic.com/v1/models', {
+      headers: {
+        'x-api-key': apiKey,
+        'anthropic-version': '2023-06-01',
+      },
+      signal: AbortSignal.timeout(10000),
+    });
+    const latencyMs = Date.now() - start;
+    if (!res.ok) return { ok: false, latencyMs, status: res.status, error: `HTTP ${res.status}` };
+    const data = await res.json().catch(() => null);
+    const count = Array.isArray(data?.data) ? data.data.length : 0;
+    return { ok: true, latencyMs, status: res.status, details: `${count} models visible` };
+  } catch (e: any) {
+    return {
+      ok: false,
+      latencyMs: Date.now() - start,
+      error: e?.name === 'TimeoutError' ? 'Timeout (10s)' : e?.message?.slice(0, 100) || 'Request failed',
+    };
+  }
+}
+
+async function testGroq(apiKey: string): Promise<Omit<TestResult, 'provider'>> {
+  const start = Date.now();
+  if (!apiKey) return { ok: false, latencyMs: 0, error: 'Groq API key not configured' };
+  try {
+    const res = await fetch('https://api.groq.com/openai/v1/models', {
+      headers: { Authorization: `Bearer ${apiKey}` },
+      signal: AbortSignal.timeout(10000),
+    });
+    const latencyMs = Date.now() - start;
+    if (!res.ok) return { ok: false, latencyMs, status: res.status, error: `HTTP ${res.status}` };
+    const data = await res.json().catch(() => null);
+    const count = Array.isArray(data?.data) ? data.data.length : 0;
+    return { ok: true, latencyMs, status: res.status, details: `${count} models visible` };
+  } catch (e: any) {
+    return {
+      ok: false,
+      latencyMs: Date.now() - start,
+      error: e?.name === 'TimeoutError' ? 'Timeout (10s)' : e?.message?.slice(0, 100) || 'Request failed',
+    };
+  }
+}
+
+async function testWatsonx(
+  apiKey: string,
+  projectId: string,
+  _baseUrl: string,
+): Promise<Omit<TestResult, 'provider'>> {
+  const start = Date.now();
+  if (!apiKey || !projectId) {
+    return { ok: false, latencyMs: 0, error: 'Missing API key or project ID' };
+  }
+  try {
+    const res = await fetch('https://iam.cloud.ibm.com/identity/token', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+      body: new URLSearchParams({
+        grant_type: 'urn:ibm:params:oauth:grant-type:apikey',
+        apikey: apiKey,
+      }),
+      signal: AbortSignal.timeout(10000),
+    });
+    const latencyMs = Date.now() - start;
+    if (!res.ok) return { ok: false, latencyMs, status: res.status, error: `IAM HTTP ${res.status}` };
+    const data = await res.json().catch(() => null);
+    if (!data?.access_token) return { ok: false, latencyMs, error: 'No access_token in IAM response' };
+    return { ok: true, latencyMs, status: 200, details: 'IAM token valid' };
+  } catch (e: any) {
+    return {
+      ok: false,
+      latencyMs: Date.now() - start,
+      error: e?.name === 'TimeoutError' ? 'Timeout (10s)' : e?.message?.slice(0, 100) || 'Request failed',
+    };
+  }
+}
+
+// ---- Additional provider testers (v3) ------------------------------------
+
+async function testGemini(apiKey: string): Promise<Omit<TestResult, 'provider'>> {
+  const start = Date.now();
+  if (!apiKey) return { ok: false, latencyMs: 0, error: 'Gemini API key not configured' };
+  try {
+    // Gemini uses the key as a query param, not a bearer header.
+    const res = await fetch(
+      `https://generativelanguage.googleapis.com/v1beta/models?key=${encodeURIComponent(apiKey)}`,
+      { signal: AbortSignal.timeout(10000) },
+    );
+    const latencyMs = Date.now() - start;
+    if (!res.ok) return { ok: false, latencyMs, status: res.status, error: `HTTP ${res.status}` };
+    const data = await res.json().catch(() => null);
+    const count = Array.isArray(data?.models) ? data.models.length : 0;
+    return { ok: true, latencyMs, status: res.status, details: `${count} models visible` };
+  } catch (e: any) {
+    return {
+      ok: false,
+      latencyMs: Date.now() - start,
+      error: e?.name === 'TimeoutError' ? 'Timeout (10s)' : e?.message?.slice(0, 100) || 'Request failed',
+    };
+  }
+}
+
+async function testOpenRouter(apiKey: string): Promise<Omit<TestResult, 'provider'>> {
+  const start = Date.now();
+  if (!apiKey) return { ok: false, latencyMs: 0, error: 'OpenRouter API key not configured' };
+  try {
+    const res = await fetch('https://openrouter.ai/api/v1/models', {
+      headers: { Authorization: `Bearer ${apiKey}` },
+      signal: AbortSignal.timeout(10000),
+    });
+    const latencyMs = Date.now() - start;
+    if (!res.ok) return { ok: false, latencyMs, status: res.status, error: `HTTP ${res.status}` };
+    const data = await res.json().catch(() => null);
+    const count = Array.isArray(data?.data) ? data.data.length : 0;
+    return { ok: true, latencyMs, status: res.status, details: `${count} models visible` };
+  } catch (e: any) {
+    return {
+      ok: false,
+      latencyMs: Date.now() - start,
+      error: e?.name === 'TimeoutError' ? 'Timeout (10s)' : e?.message?.slice(0, 100) || 'Request failed',
+    };
+  }
+}
+
+async function testTogether(apiKey: string): Promise<Omit<TestResult, 'provider'>> {
+  const start = Date.now();
+  if (!apiKey) return { ok: false, latencyMs: 0, error: 'Together API key not configured' };
+  try {
+    const res = await fetch('https://api.together.xyz/v1/models', {
+      headers: { Authorization: `Bearer ${apiKey}` },
+      signal: AbortSignal.timeout(10000),
+    });
+    const latencyMs = Date.now() - start;
+    if (!res.ok) return { ok: false, latencyMs, status: res.status, error: `HTTP ${res.status}` };
+    const data = await res.json().catch(() => null);
+    const count = Array.isArray(data)
+      ? data.length
+      : Array.isArray(data?.data)
+        ? data.data.length
+        : 0;
+    return { ok: true, latencyMs, status: res.status, details: `${count} models visible` };
+  } catch (e: any) {
+    return {
+      ok: false,
+      latencyMs: Date.now() - start,
+      error: e?.name === 'TimeoutError' ? 'Timeout (10s)' : e?.message?.slice(0, 100) || 'Request failed',
+    };
+  }
+}
+
+async function testMistral(apiKey: string): Promise<Omit<TestResult, 'provider'>> {
+  const start = Date.now();
+  if (!apiKey) return { ok: false, latencyMs: 0, error: 'Mistral API key not configured' };
+  try {
+    const res = await fetch('https://api.mistral.ai/v1/models', {
+      headers: { Authorization: `Bearer ${apiKey}` },
+      signal: AbortSignal.timeout(10000),
+    });
+    const latencyMs = Date.now() - start;
+    if (!res.ok) return { ok: false, latencyMs, status: res.status, error: `HTTP ${res.status}` };
+    const data = await res.json().catch(() => null);
+    const count = Array.isArray(data?.data) ? data.data.length : 0;
+    return { ok: true, latencyMs, status: res.status, details: `${count} models visible` };
+  } catch (e: any) {
+    return {
+      ok: false,
+      latencyMs: Date.now() - start,
+      error: e?.name === 'TimeoutError' ? 'Timeout (10s)' : e?.message?.slice(0, 100) || 'Request failed',
+    };
+  }
+}
+
+export async function POST(req: Request) {
+  const admin = requireAdmin(req);
+  if (!admin) return NextResponse.json({ error: 'Admin access required' }, { status: 403 });
+
+  let body: any;
+  try {
+    body = await req.json();
+  } catch {
+    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 });
+  }
+
+  const provider = body?.provider as Provider;
+  if (!provider) {
+    return NextResponse.json({ error: 'Missing provider field' }, { status: 400 });
+  }
+
+  const config = loadConfig();
+  const { llm } = config;
+
+  let result: Omit<TestResult, 'provider'>;
+  switch (provider) {
+    case 'ollabridge':
+      result = await testOllaBridge(llm.ollabridgeUrl, llm.ollabridgeApiKey);
+      break;
+    case 'huggingface':
+      result = await testHuggingFace(llm.hfToken);
+      break;
+    case 'openai':
+      result = await testOpenAI(llm.openaiApiKey);
+      break;
+    case 'anthropic':
+      result = await testAnthropic(llm.anthropicApiKey);
+      break;
+    case 'groq':
+      result = await testGroq(llm.groqApiKey);
+      break;
+    case 'watsonx':
+      result = await testWatsonx(llm.watsonxApiKey, llm.watsonxProjectId, llm.watsonxUrl);
+      break;
+    case 'gemini':
+      result = await testGemini(llm.geminiApiKey);
+      break;
+    case 'openrouter':
+      result = await testOpenRouter(llm.openrouterApiKey);
+      break;
+    case 'together':
+      result = await testTogether(llm.togetherApiKey);
+      break;
+    case 'mistral':
+      result = await testMistral(llm.mistralApiKey);
+      break;
+    default:
+      return NextResponse.json({ error: `Unknown provider: ${provider}` }, { status: 400 });
+  }
+
+  return NextResponse.json({ provider, ...result });
+}
diff --git a/app/api/admin/users/[id]/route.ts b/app/api/admin/users/[id]/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..15fd1722a37eca2e8bd9f3f1275ab73001da5644
--- /dev/null
+++ b/app/api/admin/users/[id]/route.ts
@@ -0,0 +1,204 @@
+import { NextResponse } from 'next/server';
+import { z } from 'zod';
+import { getDb } from '@/lib/db';
+import { requireAdmin } from '@/lib/auth-middleware';
+import { auditLog } from '@/lib/audit';
+import { getClientIp } from '@/lib/rate-limit';
+
+/**
+ * Per-user admin endpoints — safe, non-destructive operations.
+ *
+ *   GET   /api/admin/users/:id   → full user profile (admin-only)
+ *   PATCH /api/admin/users/:id   → change role / active state / force-logout
+ *
+ * Why PATCH and not POST/PUT:
+ *   - PATCH advertises "partial update of an existing resource" which
+ *     matches how the admin UI will call this (flip one field at a time).
+ *   - DELETE already exists at the collection level for hard delete.
+ *     Deactivation via PATCH is the preferred, reversible alternative.
+ *
+ * Actions accepted in the body (any subset, all optional):
+ *   - isAdmin:        boolean  → promote / demote
+ *   - isActive:       boolean  → enable / disable the account
+ *   - disabledReason: string   → stored alongside isActive=false
+ *   - forceLogout:    boolean  → drop every active session for this user
+ *
+ * Safety rails:
+ *   - An admin cannot demote or deactivate themselves via this endpoint
+ *     (would create an unrecoverable lock-out if they were the last admin).
+ *   - Every mutation writes to audit_log with the before/after summary.
+ */
+
+const PatchSchema = z
+  .object({
+    isAdmin: z.boolean().optional(),
+    isActive: z.boolean().optional(),
+    disabledReason: z.string().max(500).optional(),
+    forceLogout: z.boolean().optional(),
+  })
+  .refine(
+    (v) =>
+      v.isAdmin !== undefined ||
+      v.isActive !== undefined ||
+      v.disabledReason !== undefined ||
+      v.forceLogout === true,
+    { message: 'No actionable field provided' },
+  );
+
+function readUser(db: any, id: string) {
+  return db
+    .prepare(
+      `SELECT id, email, display_name, email_verified, is_admin,
+              COALESCE(is_active, 1) AS is_active, disabled_reason,
+              last_login_at, created_at
+       FROM users WHERE id = ?`,
+    )
+    .get(id) as any;
+}
+
+function shape(row: any) {
+  if (!row) return null;
+  return {
+    id: row.id,
+    email: row.email,
+    displayName: row.display_name,
+    emailVerified: !!row.email_verified,
+    isAdmin: !!row.is_admin,
+    isActive: !!row.is_active,
+    disabledReason: row.disabled_reason || null,
+    lastLoginAt: row.last_login_at || null,
+    createdAt: row.created_at,
+  };
+}
+
+export async function GET(
+  req: Request,
+  { params }: { params: { id: string } },
+) {
+  const admin = requireAdmin(req);
+  if (!admin) {
+    return NextResponse.json({ error: 'Admin access required' }, { status: 403 });
+  }
+  const db = getDb();
+  const row = readUser(db, params.id);
+  if (!row) return NextResponse.json({ error: 'User not found' }, { status: 404 });
+  return NextResponse.json({ user: shape(row) });
+}
+
+export async function PATCH(
+  req: Request,
+  { params }: { params: { id: string } },
+) {
+  const admin = requireAdmin(req);
+  if (!admin) {
+    return NextResponse.json({ error: 'Admin access required' }, { status: 403 });
+  }
+
+  let body: any;
+  try {
+    body = await req.json();
+  } catch {
+    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 });
+  }
+  const parsed = PatchSchema.safeParse(body);
+  if (!parsed.success) {
+    return NextResponse.json(
+      { error: parsed.error.errors[0]?.message || 'Invalid payload' },
+      { status: 400 },
+    );
+  }
+  const patch = parsed.data;
+
+  const db = getDb();
+  const before = readUser(db, params.id);
+  if (!before) {
+    return NextResponse.json({ error: 'User not found' }, { status: 404 });
+  }
+
+  // Safety rail — no self-demotion or self-deactivation.
+  if (admin.id === params.id) {
+    if (patch.isAdmin === false) {
+      return NextResponse.json(
+        { error: 'An admin cannot demote their own account.' },
+        { status: 400 },
+      );
+    }
+    if (patch.isActive === false) {
+      return NextResponse.json(
+        { error: 'An admin cannot deactivate their own account.' },
+        { status: 400 },
+      );
+    }
+  }
+
+  // Build the UPDATE dynamically so we only touch the fields the admin
+  // actually passed. Static prepared statement per combination would be
+  // ideal, but cardinality is tiny and this keeps the audit diff honest.
+  const sets: string[] = [];
+  const values: any[] = [];
+  const diff: Record<string, { before: any; after: any }> = {};
+
+  if (patch.isAdmin !== undefined && !!before.is_admin !== patch.isAdmin) {
+    sets.push('is_admin = ?');
+    values.push(patch.isAdmin ? 1 : 0);
+    diff.isAdmin = { before: !!before.is_admin, after: patch.isAdmin };
+  }
+  if (patch.isActive !== undefined && !!before.is_active !== patch.isActive) {
+    sets.push('is_active = ?');
+    values.push(patch.isActive ? 1 : 0);
+    diff.isActive = { before: !!before.is_active, after: patch.isActive };
+    // Clear disabled_reason automatically when re-activating.
+    if (patch.isActive === true) {
+      sets.push('disabled_reason = NULL');
+      diff.disabledReason = { before: before.disabled_reason || null, after: null };
+    }
+  }
+  if (patch.disabledReason !== undefined) {
+    sets.push('disabled_reason = ?');
+    values.push(patch.disabledReason || null);
+    diff.disabledReason = {
+      before: before.disabled_reason || null,
+      after: patch.disabledReason || null,
+    };
+  }
+
+  if (sets.length) {
+    sets.push("updated_at = datetime('now')");
+    db.prepare(`UPDATE users SET ${sets.join(', ')} WHERE id = ?`).run(
+      ...values,
+      params.id,
+    );
+  }
+
+  // forceLogout and isActive=false both revoke sessions. We do it in a
+  // single DELETE to keep the state transition atomic with the update.
+  let revoked = 0;
+  if (patch.forceLogout || patch.isActive === false) {
+    const info = db
+      .prepare('DELETE FROM sessions WHERE user_id = ?')
+      .run(params.id);
+    revoked = info.changes;
+  }
+
+  auditLog({
+    userId: admin.id,
+    action: 'admin_action',
+    ip: getClientIp(req),
+    meta: {
+      target_user: params.id,
+      sub_action:
+        patch.forceLogout && sets.length === 0
+          ? 'force_logout'
+          : 'user_update',
+      diff,
+      sessions_revoked: revoked,
+    },
+  });
+
+  const after = readUser(db, params.id);
+  return NextResponse.json({
+    user: shape(after),
+    sessionsRevoked: revoked,
+    changed: Object.keys(diff),
+  });
+}
diff --git a/app/api/admin/users/route.ts b/app/api/admin/users/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..7793031eecbdd5e3da18d99d49b08b086518d85f
--- /dev/null
+++ b/app/api/admin/users/route.ts
@@ -0,0 +1,78 @@
+import { NextResponse } from 'next/server';
+import { getDb } from '@/lib/db';
+import { requireAdmin } from '@/lib/auth-middleware';
+
+/**
+ * GET /api/admin/users — list all registered users (admin only).
+ * Query params: ?page=1&limit=50&search=term
+ */
+export async function GET(req: Request) {
+  const admin = requireAdmin(req);
+  if (!admin) return NextResponse.json({ error: 'Admin access required' }, { status: 403 });
+
+  const url = new URL(req.url);
+  const page = Math.max(1, parseInt(url.searchParams.get('page') || '1', 10));
+  const limit = Math.min(100, Math.max(1, parseInt(url.searchParams.get('limit') || '50', 10)));
+  const search = url.searchParams.get('search')?.trim();
+  const offset = (page - 1) * limit;
+
+  const db = getDb();
+
+  const where = search ? "WHERE email LIKE ? OR display_name LIKE ?" : "";
+  const params = search ? [`%${search}%`, `%${search}%`] : [];
+
+  const total = (db.prepare(`SELECT COUNT(*) as c FROM users ${where}`).get(...params) as any).c;
+
+  const rows = db
+    .prepare(
+      `SELECT id, email, display_name, email_verified, is_admin, created_at
+       FROM users ${where}
+       ORDER BY created_at DESC LIMIT ? OFFSET ?`,
+    )
+    .all(...params, limit, offset) as any[];
+
+  // Health data count per user.
+  const users = rows.map((r) => {
+    const healthCount = (
+      db.prepare('SELECT COUNT(*) as c FROM health_data WHERE user_id = ?').get(r.id) as any
+    ).c;
+    const chatCount = (
+      db.prepare('SELECT COUNT(*) as c FROM chat_history WHERE user_id = ?').get(r.id) as any
+    ).c;
+    return {
+      id: r.id,
+      email: r.email,
+      displayName: r.display_name,
+      emailVerified: !!r.email_verified,
+      isAdmin: !!r.is_admin,
+      createdAt: r.created_at,
+      healthDataCount: healthCount,
+      chatHistoryCount: chatCount,
+    };
+  });
+
+  return NextResponse.json({ users, total, page, limit });
+}
+
+/**
+ * DELETE /api/admin/users?id=<userId> — delete a user (admin only).
+ * CASCADE deletes all their health data, chat history, and sessions.
+ */
+export async function DELETE(req: Request) {
+  const admin = requireAdmin(req);
+  if (!admin) return NextResponse.json({ error: 'Admin access required' }, { status: 403 });
+
+  const url = new URL(req.url);
+  const userId = url.searchParams.get('id');
+  if (!userId) return NextResponse.json({ error: 'Missing user id' }, { status: 400 });
+
+  // Prevent deleting yourself.
+  if (userId === admin.id) {
+    return NextResponse.json({ error: 'Cannot delete your own admin account' }, { status: 400 });
+  }
+
+  const db = getDb();
+  db.prepare('DELETE FROM users WHERE id = ?').run(userId);
+
+  return NextResponse.json({ success: true });
+}
diff --git a/app/api/auth/delete-account/route.ts b/app/api/auth/delete-account/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..64857ad49e5aadeff58d9122ea2b4bf3ea2aae6e
--- /dev/null
+++ b/app/api/auth/delete-account/route.ts
@@ -0,0 +1,80 @@
+import { NextResponse } from 'next/server';
+import { z } from 'zod';
+import { getDb } from '@/lib/db';
+import { requireAdmin } from '@/lib/auth-middleware';
+
+const Schema = z.object({
+  userId: z.string().min(1),
+  confirmEmail: z.string().email(),
+});
+
+/**
+ * POST /api/auth/delete-account — ADMIN-ONLY account deletion.
+ *
+ * Only admins can delete accounts. This prevents:
+ *   - Hackers with stolen tokens from destroying user data
+ *   - Automated scripts mass-deleting accounts
+ *   - Accidental self-deletion
+ *
+ * Requires both userId AND confirmEmail to match (double verification).
+ * Uses CASCADE deletes via foreign keys — one operation wipes everything.
+ *
+ * For GDPR: users REQUEST deletion via support/admin panel.
+ * Admin reviews and executes. This is the industry standard for
+ * healthcare apps (MyChart, Epic, Cerner all require admin action).
+ */
+export async function POST(req: Request) {
+  // ADMIN ONLY — reject all non-admin requests
+  const admin = requireAdmin(req);
+  if (!admin) {
+    return NextResponse.json(
+      { error: 'Admin access required. Users must request account deletion through the admin.' },
+      { status: 403 },
+    );
+  }
+
+  try {
+    const body = await req.json();
+    const { userId, confirmEmail } = Schema.parse(body);
+
+    const db = getDb();
+
+    // Verify user exists and email matches (double check)
+    const user = db.prepare('SELECT id, email, is_admin FROM users WHERE id = ?').get(userId) as any;
+    if (!user) {
+      return NextResponse.json({ error: 'User not found' }, { status: 404 });
+    }
+
+    if (user.email.toLowerCase() !== confirmEmail.toLowerCase()) {
+      return NextResponse.json(
+        { error: 'Email confirmation does not match. Deletion aborted.' },
+        { status: 400 },
+      );
+    }
+
+    // Prevent deleting admin accounts (safety net)
+    if (user.is_admin) {
+      return NextResponse.json(
+        { error: 'Cannot delete admin accounts via this endpoint.' },
+        { status: 403 },
+      );
+    }
+
+    // CASCADE deletes handle: sessions, health_data, chat_history
+    db.prepare('DELETE FROM users WHERE id = ?').run(userId);
+
+    console.log(`[Account Deletion] Admin ${admin.email} deleted user ${user.email} (${userId})`);
+
+    return NextResponse.json({
+      success: true,
+      message: `Account ${user.email} and all associated data permanently deleted.`,
+      deletedBy: admin.email,
+    });
+  } catch (error: any) {
+    if (error instanceof z.ZodError) {
+      return NextResponse.json({ error: 'Invalid request. Provide userId and confirmEmail.' }, { status: 400 });
+    }
+    console.error('[Delete Account]', error?.message);
+    return NextResponse.json({ error: 'Failed to delete account' }, { status: 500 });
+  }
+}
diff --git a/app/api/auth/forgot-password/route.ts b/app/api/auth/forgot-password/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..24afcaa37cf2f6d62d31bcd33247809db16bbac3
--- /dev/null
+++ b/app/api/auth/forgot-password/route.ts
@@ -0,0 +1,46 @@
+import { NextResponse } from 'next/server';
+import { z } from 'zod';
+import { getDb, genVerificationCode, resetExpiry } from '@/lib/db';
+import { sendPasswordResetEmail, emailTransportName } from '@/lib/email';
+
+const Schema = z.object({
+  email: z.string().email(),
+});
+
+/**
+ * POST /api/auth/forgot-password — sends a reset code to the user's email.
+ *
+ * Always returns 200 even if the email doesn't exist (prevents email enumeration).
+ */
+export async function POST(req: Request) {
+  try {
+    const body = await req.json();
+    const { email } = Schema.parse(body);
+
+    const db = getDb();
+    const user = db.prepare('SELECT id, email FROM users WHERE email = ?').get(email.toLowerCase()) as any;
+
+    if (user) {
+      const code = genVerificationCode();
+      db.prepare(
+        `UPDATE users SET reset_token = ?, reset_expires = ?, updated_at = datetime('now')
+         WHERE id = ?`,
+      ).run(code, resetExpiry(), user.id);
+
+      console.log(`[ForgotPassword] queued reset email via transport=${emailTransportName()} to=${user.email}`);
+      const sent = await sendPasswordResetEmail(user.email, code);
+      if (!sent) console.error(`[ForgotPassword] reset email FAILED to=${user.email}`);
+    }
+
+    // Always return success to prevent email enumeration.
+    return NextResponse.json({
+      message: 'If that email is registered, a reset code has been sent.',
+    });
+  } catch (error: any) {
+    if (error instanceof z.ZodError) {
+      return NextResponse.json({ error: 'Invalid email' }, { status: 400 });
+    }
+    console.error('[Auth ForgotPassword]', error?.message);
+    return NextResponse.json({ error: 'Request failed' }, { status: 500 });
+  }
+}
diff --git a/app/api/auth/login/route.ts b/app/api/auth/login/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..460981b13eff5280015a43aefabc99145080a7c3
--- /dev/null
+++ b/app/api/auth/login/route.ts
@@ -0,0 +1,88 @@
+import { NextResponse } from 'next/server';
+import { z } from 'zod';
+import bcrypt from 'bcryptjs';
+import { getDb, genToken, sessionExpiry, pruneExpiredSessions } from '@/lib/db';
+import { checkRateLimit, getClientIp } from '@/lib/rate-limit';
+
+const Schema = z.object({
+  email: z.string().email(),
+  password: z.string().min(1),
+});
+
+export async function POST(req: Request) {
+  // Rate limit: 10 login attempts per minute per IP
+  const ip = getClientIp(req);
+  const rl = checkRateLimit(`login:${ip}`, 10, 60_000);
+  if (!rl.allowed) {
+    return NextResponse.json(
+      { error: 'Too many login attempts. Please wait a moment.' },
+      { status: 429, headers: { 'Retry-After': String(Math.ceil(rl.retryAfterMs / 1000)) } },
+    );
+  }
+
+  try {
+    const body = await req.json();
+    const { email, password } = Schema.parse(body);
+
+    const db = getDb();
+    pruneExpiredSessions();
+
+    const user = db
+      .prepare(
+        `SELECT id, email, password, display_name, email_verified, is_admin,
+                COALESCE(is_active, 1) AS is_active, disabled_reason
+         FROM users WHERE email = ?`,
+      )
+      .get(email.toLowerCase()) as any;
+
+    if (!user || !bcrypt.compareSync(password, user.password)) {
+      return NextResponse.json({ error: 'Invalid email or password' }, { status: 401 });
+    }
+
+    // Reject deactivated accounts with a distinct 403 so the UI can
+    // surface the `disabled_reason` instead of a generic "wrong password".
+    if (!user.is_active) {
+      return NextResponse.json(
+        {
+          error:
+            user.disabled_reason ||
+            'This account has been disabled. Please contact an administrator.',
+          code: 'account_disabled',
+        },
+        { status: 403 },
+      );
+    }
+
+    const token = genToken();
+    db.prepare('INSERT INTO sessions (token, user_id, expires_at) VALUES (?, ?, ?)').run(
+      token,
+      user.id,
+      sessionExpiry(),
+    );
+    // Best-effort login timestamp. Never fail the login if this write
+    // errors — the column exists from v3 onwards, but older DBs that
+    // haven't hit getDb() yet may not have it for a transient moment.
+    try {
+      db.prepare("UPDATE users SET last_login_at = datetime('now') WHERE id = ?").run(user.id);
+    } catch {
+      /* non-fatal */
+    }
+
+    return NextResponse.json({
+      user: {
+        id: user.id,
+        email: user.email,
+        displayName: user.display_name,
+        emailVerified: !!user.email_verified,
+        isAdmin: !!user.is_admin,
+      },
+      token,
+    });
+  } catch (error: any) {
+    if (error instanceof z.ZodError) {
+      return NextResponse.json({ error: 'Invalid input' }, { status: 400 });
+    }
+    console.error('[Auth Login]', error?.message);
+    return NextResponse.json({ error: 'Login failed' }, { status: 500 });
+  }
+}
diff --git a/app/api/auth/logout/route.ts b/app/api/auth/logout/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..6aef5208bb4e2df890e40f58f67466227cde112c
--- /dev/null
+++ b/app/api/auth/logout/route.ts
@@ -0,0 +1,14 @@
+import { NextResponse } from 'next/server';
+import { getDb } from '@/lib/db';
+
+export async function POST(req: Request) {
+  const h = req.headers.get('authorization');
+  const token = h && h.startsWith('Bearer ') ? h.slice(7).trim() : null;
+
+  if (token) {
+    const db = getDb();
+    db.prepare('DELETE FROM sessions WHERE token = ?').run(token);
+  }
+
+  return NextResponse.json({ success: true });
+}
diff --git a/app/api/auth/me/route.ts b/app/api/auth/me/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..ef903fa8dcfabfe22529090623eab574e32514ff
--- /dev/null
+++ b/app/api/auth/me/route.ts
@@ -0,0 +1,184 @@
+import { NextResponse } from 'next/server';
+import bcrypt from 'bcryptjs';
+import { z } from 'zod';
+import { getDb, pruneExpiredSessions } from '@/lib/db';
+import { authenticateRequest } from '@/lib/auth-middleware';
+import { auditLog } from '@/lib/audit';
+import { getClientIp, checkRateLimit } from '@/lib/rate-limit';
+
+export async function GET(req: Request) {
+  const h = req.headers.get('authorization');
+  const token = h && h.startsWith('Bearer ') ? h.slice(7).trim() : null;
+  if (!token) return NextResponse.json({ error: 'Not authenticated' }, { status: 401 });
+
+  const db = getDb();
+  pruneExpiredSessions();
+
+  const row = db
+    .prepare(
+      `SELECT u.id, u.email, u.display_name, u.email_verified, u.is_admin, u.created_at
+       FROM sessions s JOIN users u ON u.id = s.user_id
+       WHERE s.token = ? AND s.expires_at > datetime('now')`,
+    )
+    .get(token) as any;
+
+  if (!row) return NextResponse.json({ error: 'Session expired' }, { status: 401 });
+
+  return NextResponse.json({
+    user: {
+      id: row.id,
+      email: row.email,
+      displayName: row.display_name,
+      emailVerified: !!row.email_verified,
+      isAdmin: !!row.is_admin,
+      createdAt: row.created_at,
+    },
+  });
+}
+
+/**
+ * DELETE /api/auth/me — self-service account deletion (GDPR Art. 17 /
+ * HIPAA patient right-to-delete).
+ *
+ * Safety gates (all required, in order):
+ *   1. Must present a valid session (authenticateRequest).
+ *   2. Must re-authenticate by supplying the current password in the JSON
+ *      body: `{ "password": "…", "confirmEmail": "…" }`. Re-auth stops
+ *      stolen-token exfiltration from wiping the account.
+ *   3. `confirmEmail` must match the logged-in user's email — defence
+ *      against copy/paste mistakes in shared UIs.
+ *   4. Admin accounts cannot self-delete via this endpoint (prevents
+ *      accidental lock-out of the Space). Admins must demote first or use
+ *      the admin-ops deletion flow.
+ *   5. Per-IP + per-user rate limit: 3 attempts / hour.
+ *
+ * Execution:
+ *   - All PHI (health_data, chat_history, user_settings, sessions,
+ *     audit_log FK, scan_log FK) is removed by FK CASCADE.
+ *   - A single audit row is written BEFORE the delete so forensics can
+ *     prove the delete happened and by whom.
+ */
+const DeleteSchema = z.object({
+  password: z.string().min(1, 'Password required'),
+  confirmEmail: z.string().email('Email confirmation required'),
+});
+
+export async function DELETE(req: Request) {
+  const ip = getClientIp(req);
+
+  // 5) Rate limit self-deletion to blunt brute-force of the password gate.
+  const rl = checkRateLimit(`delete-me:${ip}`, 3, 60 * 60_000);
+  if (!rl.allowed) {
+    return NextResponse.json(
+      { error: 'Too many deletion attempts. Try again later.' },
+      {
+        status: 429,
+        headers: { 'Retry-After': String(Math.ceil(rl.retryAfterMs / 1000)) },
+      },
+    );
+  }
+
+  // 1) Valid session.
+  const auth = authenticateRequest(req);
+  if (!auth) {
+    return NextResponse.json({ error: 'Not authenticated' }, { status: 401 });
+  }
+
+  let body: any;
+  try {
+    body = await req.json();
+  } catch {
+    return NextResponse.json({ error: 'Invalid JSON body' }, { status: 400 });
+  }
+
+  const parsed = DeleteSchema.safeParse(body);
+  if (!parsed.success) {
+    return NextResponse.json(
+      { error: 'password and confirmEmail are required' },
+      { status: 400 },
+    );
+  }
+  const { password, confirmEmail } = parsed.data;
+
+  const db = getDb();
+  const user = db
+    .prepare('SELECT id, email, password, is_admin FROM users WHERE id = ?')
+    .get(auth.id) as any;
+
+  if (!user) {
+    return NextResponse.json({ error: 'Account not found' }, { status: 404 });
+  }
+
+  // 3) Email confirmation must match the session's user.
+  if (user.email.toLowerCase() !== confirmEmail.toLowerCase()) {
+    auditLog({
+      userId: user.id,
+      action: 'delete_account',
+      ip,
+      meta: { outcome: 'email_mismatch' },
+    });
+    return NextResponse.json(
+      { error: 'Email confirmation does not match your account.' },
+      { status: 400 },
+    );
+  }
+
+  // 2) Password re-auth.
+  if (!bcrypt.compareSync(password, user.password)) {
+    auditLog({
+      userId: user.id,
+      action: 'delete_account',
+      ip,
+      meta: { outcome: 'bad_password' },
+    });
+    return NextResponse.json(
+      { error: 'Password is incorrect.' },
+      { status: 401 },
+    );
+  }
+
+  // 4) Admins cannot self-delete via this endpoint.
+  if (user.is_admin) {
+    return NextResponse.json(
+      {
+        error:
+          'Admin accounts cannot self-delete. Demote the account first or use the admin deletion endpoint.',
+      },
+      { status: 403 },
+    );
+  }
+
+  // Record intent BEFORE the destructive write so forensics can reconstruct
+  // the event even if the CASCADE blows up mid-way.
+  auditLog({
+    userId: user.id,
+    action: 'delete_account',
+    ip,
+    meta: { outcome: 'initiated', self_service: true },
+  });
+
+  try {
+    db.prepare('DELETE FROM users WHERE id = ?').run(user.id);
+  } catch (e: any) {
+    console.error('[Delete Me] cascade delete failed:', e?.message);
+    return NextResponse.json(
+      { error: 'Deletion failed. Please contact support.' },
+      { status: 500 },
+    );
+  }
+
+  // Post-deletion audit row. audit_log.user_id is an unconstrained TEXT
+  // column (no FK), so earlier audit rows for this user survive the
+  // cascade and remain available for forensic review.
+  auditLog({
+    userId: null,
+    action: 'delete_account',
+    ip,
+    meta: { outcome: 'completed', deleted_user: user.id, self_service: true },
+  });
+
+  return NextResponse.json({
+    success: true,
+    message: `Account ${user.email} and all associated data permanently deleted.`,
+  });
+}
diff --git a/app/api/auth/register/route.ts b/app/api/auth/register/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..734c052c2e00dcc329a9907a006071e3425d2f97
--- /dev/null
+++ b/app/api/auth/register/route.ts
@@ -0,0 +1,79 @@
+import { NextResponse } from 'next/server';
+import { z } from 'zod';
+import bcrypt from 'bcryptjs';
+import { getDb, genId, genToken, genVerificationCode, codeExpiry, sessionExpiry } from '@/lib/db';
+import { sendVerificationEmail, emailTransportName } from '@/lib/email';
+import { checkRateLimit, getClientIp } from '@/lib/rate-limit';
+
+const Schema = z.object({
+  email: z.string().email().max(255),
+  password: z.string().min(6).max(128),
+  displayName: z.string().max(50).optional(),
+});
+
+export async function POST(req: Request) {
+  // Rate limit: 5 registrations per minute per IP
+  const ip = getClientIp(req);
+  const rl = checkRateLimit(`register:${ip}`, 5, 60_000);
+  if (!rl.allowed) {
+    return NextResponse.json(
+      { error: 'Too many registration attempts. Please wait.' },
+      { status: 429, headers: { 'Retry-After': String(Math.ceil(rl.retryAfterMs / 1000)) } },
+    );
+  }
+
+  try {
+    const body = await req.json();
+    const { email, password, displayName } = Schema.parse(body);
+
+    const db = getDb();
+
+    const existing = db.prepare('SELECT id FROM users WHERE email = ?').get(email);
+    if (existing) {
+      return NextResponse.json({ error: 'An account with this email already exists' }, { status: 409 });
+    }
+
+    const id = genId();
+    const hash = bcrypt.hashSync(password, 10);
+    const code = genVerificationCode();
+    const expires = codeExpiry();
+
+    db.prepare(
+      `INSERT INTO users (id, email, password, display_name, verification_code, verification_expires)
+       VALUES (?, ?, ?, ?, ?, ?)`,
+    ).run(id, email.toLowerCase(), hash, displayName || null, code, expires);
+
+    // Auto-login
+    const token = genToken();
+    db.prepare('INSERT INTO sessions (token, user_id, expires_at) VALUES (?, ?, ?)').run(token, id, sessionExpiry());
+
+    // Send verification email (best-effort, don't block registration).
+    // We DO want to know if it failed though — the old `.catch(() => {})`
+    // here masked a year of "no emails arriving" bug reports because
+    // the API still returned 201 and the UI still said "Check your
+    // email". Log the transport name on every register so operators
+    // can confirm the wiring from container logs in one grep.
+    console.log(`[Register] queued verification email via transport=${emailTransportName()} to=${email}`);
+    sendVerificationEmail(email, code).then(
+      (ok) => {
+        if (!ok) console.error(`[Register] verification email FAILED to=${email}`);
+      },
+      (err) => console.error(`[Register] verification email threw to=${email}: ${err?.message ?? err}`),
+    );
+
+    return NextResponse.json(
+      {
+        user: { id, email: email.toLowerCase(), displayName, emailVerified: false },
+        token,
+        message: 'Account created. Check your email for a verification code.',
+      },
+      { status: 201 },
+    );
+  } catch (error: any) {
+    if (error instanceof z.ZodError) {
+      return NextResponse.json({ error: 'Invalid input', details: error.errors }, { status: 400 });
+    }
+    console.error('[Auth Register]', error?.message);
+    return NextResponse.json({ error: 'Registration failed' }, { status: 500 });
+  }
+}
diff --git a/app/api/auth/resend-verification/route.ts b/app/api/auth/resend-verification/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..0f474216fa4d72c220451463a1a6ea516ad88baa
--- /dev/null
+++ b/app/api/auth/resend-verification/route.ts
@@ -0,0 +1,30 @@
+import { NextResponse } from 'next/server';
+import { getDb, genVerificationCode, codeExpiry } from '@/lib/db';
+import { authenticateRequest } from '@/lib/auth-middleware';
+import { sendVerificationEmail, emailTransportName } from '@/lib/email';
+
+/**
+ * POST /api/auth/resend-verification — resend the 6-digit verification code.
+ */
+export async function POST(req: Request) {
+  const user = authenticateRequest(req);
+  if (!user) return NextResponse.json({ error: 'Not authenticated' }, { status: 401 });
+
+  const db = getDb();
+  const row = db.prepare('SELECT email, email_verified FROM users WHERE id = ?').get(user.id) as any;
+
+  if (!row) return NextResponse.json({ error: 'User not found' }, { status: 404 });
+  if (row.email_verified) return NextResponse.json({ message: 'Email already verified' });
+
+  const code = genVerificationCode();
+  db.prepare(
+    `UPDATE users SET verification_code = ?, verification_expires = ?, updated_at = datetime('now')
+     WHERE id = ?`,
+  ).run(code, codeExpiry(), user.id);
+
+  console.log(`[ResendVerification] queued via transport=${emailTransportName()} to=${row.email}`);
+  const sent = await sendVerificationEmail(row.email, code);
+  if (!sent) console.error(`[ResendVerification] FAILED to=${row.email}`);
+
+  return NextResponse.json({ message: 'Verification code sent' });
+}
diff --git a/app/api/auth/reset-password/route.ts b/app/api/auth/reset-password/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..61ac4178ef9fdf1f185eefb191cf4ef05e57dd56
--- /dev/null
+++ b/app/api/auth/reset-password/route.ts
@@ -0,0 +1,63 @@
+import { NextResponse } from 'next/server';
+import { z } from 'zod';
+import bcrypt from 'bcryptjs';
+import { getDb, genToken, sessionExpiry } from '@/lib/db';
+
+const Schema = z.object({
+  email: z.string().email(),
+  code: z.string().length(6),
+  newPassword: z.string().min(6).max(128),
+});
+
+/**
+ * POST /api/auth/reset-password — reset password with the 6-digit code.
+ * On success, auto-logs the user in and returns a session token.
+ */
+export async function POST(req: Request) {
+  try {
+    const body = await req.json();
+    const { email, code, newPassword } = Schema.parse(body);
+
+    const db = getDb();
+    const user = db
+      .prepare('SELECT id, reset_token, reset_expires FROM users WHERE email = ?')
+      .get(email.toLowerCase()) as any;
+
+    if (
+      !user ||
+      user.reset_token !== code ||
+      !user.reset_expires ||
+      new Date(user.reset_expires) < new Date()
+    ) {
+      return NextResponse.json({ error: 'Invalid or expired reset code' }, { status: 400 });
+    }
+
+    const hash = bcrypt.hashSync(newPassword, 10);
+    db.prepare(
+      `UPDATE users SET password = ?, reset_token = NULL, reset_expires = NULL, updated_at = datetime('now')
+       WHERE id = ?`,
+    ).run(hash, user.id);
+
+    // Invalidate all existing sessions for this user (security best practice).
+    db.prepare('DELETE FROM sessions WHERE user_id = ?').run(user.id);
+
+    // Auto-login with new session.
+    const token = genToken();
+    db.prepare('INSERT INTO sessions (token, user_id, expires_at) VALUES (?, ?, ?)').run(
+      token,
+      user.id,
+      sessionExpiry(),
+    );
+
+    return NextResponse.json({
+      message: 'Password reset successfully',
+      token,
+    });
+  } catch (error: any) {
+    if (error instanceof z.ZodError) {
+      return NextResponse.json({ error: 'Invalid input', details: error.errors }, { status: 400 });
+    }
+    console.error('[Auth ResetPassword]', error?.message);
+    return NextResponse.json({ error: 'Reset failed' }, { status: 500 });
+  }
+}
diff --git a/app/api/auth/verify-email/route.ts b/app/api/auth/verify-email/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..42cd45b2cfa147145b6add629c387470b189eeef
--- /dev/null
+++ b/app/api/auth/verify-email/route.ts
@@ -0,0 +1,58 @@
+import { NextResponse } from 'next/server';
+import { z } from 'zod';
+import { getDb } from '@/lib/db';
+import { authenticateRequest } from '@/lib/auth-middleware';
+import { sendWelcomeEmail } from '@/lib/email';
+
+const Schema = z.object({
+  code: z.string().length(6),
+});
+
+/**
+ * POST /api/auth/verify-email — verify email with 6-digit code.
+ * Requires auth (the user must be logged in to verify their own email).
+ */
+export async function POST(req: Request) {
+  const user = authenticateRequest(req);
+  if (!user) return NextResponse.json({ error: 'Not authenticated' }, { status: 401 });
+
+  try {
+    const body = await req.json();
+    const { code } = Schema.parse(body);
+
+    const db = getDb();
+    const row = db
+      .prepare(
+        `SELECT verification_code, verification_expires, email, email_verified
+         FROM users WHERE id = ?`,
+      )
+      .get(user.id) as any;
+
+    if (!row) return NextResponse.json({ error: 'User not found' }, { status: 404 });
+    if (row.email_verified) return NextResponse.json({ message: 'Email already verified' });
+
+    if (
+      row.verification_code !== code ||
+      !row.verification_expires ||
+      new Date(row.verification_expires) < new Date()
+    ) {
+      return NextResponse.json({ error: 'Invalid or expired code' }, { status: 400 });
+    }
+
+    db.prepare(
+      `UPDATE users SET email_verified = 1, verification_code = NULL, verification_expires = NULL, updated_at = datetime('now')
+       WHERE id = ?`,
+    ).run(user.id);
+
+    // Send welcome email
+    sendWelcomeEmail(row.email).catch(() => {});
+
+    return NextResponse.json({ message: 'Email verified successfully', emailVerified: true });
+  } catch (error: any) {
+    if (error instanceof z.ZodError) {
+      return NextResponse.json({ error: 'Invalid code format' }, { status: 400 });
+    }
+    console.error('[Auth Verify]', error?.message);
+    return NextResponse.json({ error: 'Verification failed' }, { status: 500 });
+  }
+}
diff --git a/app/api/chat-history/route.ts b/app/api/chat-history/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..09c10ce3fe052d2a6b2e959b4c5f8f3465c6f692
--- /dev/null
+++ b/app/api/chat-history/route.ts
@@ -0,0 +1,99 @@
+import { NextResponse } from 'next/server';
+import { z } from 'zod';
+import { getDb, genId } from '@/lib/db';
+import { authenticateRequest } from '@/lib/auth-middleware';
+import { encodeHealthPayload } from '@/lib/health-data-repo';
+
+/**
+ * GET  /api/chat-history           → list conversations (newest first, max 100)
+ * POST /api/chat-history           → save a conversation
+ * DELETE /api/chat-history?id=<id> → delete one conversation
+ */
+
+export async function GET(req: Request) {
+  const user = authenticateRequest(req);
+  if (!user) {
+    return NextResponse.json({ error: 'Not authenticated' }, { status: 401 });
+  }
+
+  const db = getDb();
+  const rows = db
+    .prepare(
+      'SELECT id, preview, topic, created_at FROM chat_history WHERE user_id = ? ORDER BY created_at DESC LIMIT 100',
+    )
+    .all(user.id) as any[];
+
+  return NextResponse.json({
+    conversations: rows.map((r) => ({
+      id: r.id,
+      preview: r.preview,
+      topic: r.topic,
+      createdAt: r.created_at,
+    })),
+  });
+}
+
+const SaveSchema = z.object({
+  preview: z.string().max(200),
+  messages: z.array(
+    z.object({
+      role: z.enum(['user', 'assistant', 'system']),
+      content: z.string(),
+    }),
+  ),
+  topic: z.string().max(50).optional(),
+});
+
+export async function POST(req: Request) {
+  const user = authenticateRequest(req);
+  if (!user) {
+    return NextResponse.json({ error: 'Not authenticated' }, { status: 401 });
+  }
+
+  try {
+    const body = await req.json();
+    const { preview, messages, topic } = SaveSchema.parse(body);
+
+    const db = getDb();
+    const id = genId();
+
+    // Messages may contain PHI — encrypt at rest. The preview is intentionally
+    // left in plaintext because it's displayed in the sidebar listing and is
+    // already capped at 200 chars by the input schema.
+    db.prepare(
+      'INSERT INTO chat_history (id, user_id, preview, messages, topic) VALUES (?, ?, ?, ?, ?)',
+    ).run(id, user.id, preview, encodeHealthPayload(messages), topic || null);
+
+    return NextResponse.json({ id }, { status: 201 });
+  } catch (error: any) {
+    if (error instanceof z.ZodError) {
+      return NextResponse.json(
+        { error: 'Invalid input', details: error.errors },
+        { status: 400 },
+      );
+    }
+    console.error('[Chat History POST]', error?.message);
+    return NextResponse.json({ error: 'Save failed' }, { status: 500 });
+  }
+}
+
+export async function DELETE(req: Request) {
+  const user = authenticateRequest(req);
+  if (!user) {
+    return NextResponse.json({ error: 'Not authenticated' }, { status: 401 });
+  }
+
+  const url = new URL(req.url);
+  const id = url.searchParams.get('id');
+  if (!id) {
+    return NextResponse.json({ error: 'Missing id' }, { status: 400 });
+  }
+
+  const db = getDb();
+  db.prepare('DELETE FROM chat_history WHERE id = ? AND user_id = ?').run(
+    id,
+    user.id,
+  );
+
+  return NextResponse.json({ success: true });
+}
diff --git a/app/api/chat/route.ts b/app/api/chat/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..323f65449be86114da466c318d46deb73251f5d6
--- /dev/null
+++ b/app/api/chat/route.ts
@@ -0,0 +1,320 @@
+import { NextRequest } from 'next/server';
+import { z } from 'zod';
+import { chatWithFallback, type ChatMessage } from '@/lib/providers';
+import { getEmergencyInfo } from '@/lib/safety/emergency-numbers';
+import { preCheck, postCheck } from '@/lib/safety/safety-engine';
+import { snapshotFlags } from '@/lib/feature-flags';
+
+// Log feature-flag snapshot once per process load so deployments make their
+// configured behavior visible. Values are server-side only and PHI-free.
+console.log(`[Chat] route.flags ${JSON.stringify(snapshotFlags())}`);
+import { buildRAGContext } from '@/lib/rag/medical-kb';
+import { buildMedicalSystemPrompt } from '@/lib/medical-knowledge';
+import { authenticateRequest } from '@/lib/auth-middleware';
+import { checkRateLimit, getClientIp } from '@/lib/rate-limit';
+import { auditLog } from '@/lib/audit';
+import {
+  buildPatientContextForUser,
+  stripInjectedPatientContext,
+} from '@/lib/patient-context.server';
+
+const RequestSchema = z.object({
+  messages: z.array(
+    z.object({
+      role: z.enum(['system', 'user', 'assistant']),
+      content: z.string(),
+    })
+  ),
+  model: z.string().optional().default('qwen2.5:1.5b'),
+  language: z.string().optional().default('en'),
+  countryCode: z.string().optional().default('US'),
+});
+
+export async function POST(request: NextRequest) {
+  const routeStartedAt = Date.now();
+  const ip = getClientIp(request);
+  const user = authenticateRequest(request);
+
+  // Per-identity chat rate limit. Authenticated users get a generous
+  // 60 turns/min by user id (stable across IPs), anonymous get 20/min
+  // by IP. The limiter is in-memory per process; for multi-instance
+  // deployments swap to Redis (same interface).
+  const limitKey = user ? `chat:user:${user.id}` : `chat:ip:${ip}`;
+  const limitMax = user ? 60 : 20;
+  const limit = checkRateLimit(limitKey, limitMax, 60_000);
+  if (!limit.allowed) {
+    return new Response(
+      JSON.stringify({
+        error: 'Chat rate limit exceeded. Please slow down.',
+        retryAfterMs: limit.retryAfterMs,
+      }),
+      {
+        status: 429,
+        headers: {
+          'Content-Type': 'application/json',
+          'Retry-After': String(Math.ceil(limit.retryAfterMs / 1000)),
+        },
+      },
+    );
+  }
+
+  try {
+    const body = await request.json();
+    const { messages, model, language, countryCode } = RequestSchema.parse(body);
+
+    // Single-line JSON payload so the HF Space logs API (SSE) can be grepped
+    // with a simple prefix match. Every stage below tags itself `[Chat]`.
+    console.log(
+      `[Chat] route.enter ${JSON.stringify({
+        userId: user?.id || null,
+        turns: messages.length,
+        model,
+        language,
+        countryCode,
+        userAgent: request.headers.get('user-agent')?.slice(0, 80) || null,
+      })}`,
+    );
+
+    // Step 1: Emergency triage on the latest user message.
+    // Sanitise FIRST: strip any client-injected [Patient: ...] block so
+    // (a) the triage check sees only the user's real prose, and
+    // (b) we cannot leak another user's EHR into the LLM if a stale or
+    //     malicious client sends one.
+    const lastUserMessage = messages.filter((m) => m.role === 'user').pop();
+    const rawUserContent = lastUserMessage?.content || '';
+    const cleanUserContent = stripInjectedPatientContext(rawUserContent);
+
+    // Step 1: Run the deterministic safety pre-check. This is the FLOOR;
+    // the LLM cannot relax it. The engine returns either an emergency
+    // template (R5 — LLM not called) or a green-light decision with a
+    // risk class and a system-prompt augmentation that pins policy.
+    let safetyDecision: ReturnType<typeof preCheck> | null = null;
+    if (lastUserMessage) {
+      safetyDecision = preCheck({
+        text: cleanUserContent,
+        countryCode,
+      });
+
+      console.log(
+        `[Chat] route.safety.preCheck ${JSON.stringify({
+          userId: user?.id || null,
+          riskClass: safetyDecision.audit.riskClass,
+          ruleFires: safetyDecision.audit.ruleFires,
+          userChars: cleanUserContent.length,
+        })}`,
+      );
+
+      if (safetyDecision.kind === 'emergency_template') {
+        // Capture the narrowed values before entering the ReadableStream
+        // callback — discriminated-union narrowing on `safetyDecision`
+        // does not survive into the inner closure under strict TS.
+        const emergencyTemplate = safetyDecision.template;
+        const emergencyRuleFires = safetyDecision.audit.ruleFires;
+
+        const encoder = new TextEncoder();
+        const stream = new ReadableStream({
+          start(controller) {
+            const data = JSON.stringify({
+              choices: [{ delta: { content: emergencyTemplate } }],
+              provider: 'safety-engine',
+              model: 'emergency-template',
+              isEmergency: true,
+              riskClass: 'R5',
+            });
+            controller.enqueue(encoder.encode(`data: ${data}\n\n`));
+            controller.enqueue(encoder.encode('data: [DONE]\n\n'));
+            controller.close();
+          },
+        });
+
+        if (user) {
+          auditLog({
+            userId: user.id,
+            action: 'chat',
+            ip,
+            meta: {
+              riskClass: 'R5',
+              ruleFires: emergencyRuleFires,
+              countryCode,
+              model: 'emergency-template',
+            },
+          });
+        }
+
+        return new Response(stream, {
+          headers: {
+            'Content-Type': 'text/event-stream',
+            'Cache-Control': 'no-cache',
+            Connection: 'keep-alive',
+          },
+        });
+      }
+    }
+
+    // Step 2: Build RAG context from the medical knowledge base.
+    const ragStart = Date.now();
+    const ragContext = lastUserMessage ? buildRAGContext(cleanUserContent) : '';
+    console.log(
+      `[Chat] route.rag ${JSON.stringify({
+        userId: user?.id || null,
+        chars: ragContext.length,
+        latencyMs: Date.now() - ragStart,
+      })}`,
+    );
+
+    // Step 3: Server-built patient context, scoped to the authenticated
+    // user. Anonymous chats receive no per-user EHR — they get a generic
+    // medical assistant. This is the isolation contract.
+    const patientContext = user ? buildPatientContextForUser(user.id) : '';
+
+    // Step 4: Build a structured, locale-aware system prompt that grounds
+    // the model in WHO/CDC/NHS guidance and pins the response language,
+    // country, emergency number, and measurement system. Append the
+    // safety-engine policy block so the LLM is aware of the deterministic
+    // floor — the post-filter is the second line of defence.
+    const emergencyInfo = getEmergencyInfo(countryCode);
+    const baseSystemPrompt = buildMedicalSystemPrompt({
+      country: countryCode,
+      language,
+      emergencyNumber: emergencyInfo.emergency,
+    });
+    const systemPrompt =
+      safetyDecision && safetyDecision.kind === 'allow_llm'
+        ? `${baseSystemPrompt}\n\n${safetyDecision.systemInstructions}`
+        : baseSystemPrompt;
+
+    // Step 5: Assemble the final message list. Prior turns are passed through
+    // verbatim except for the LAST user turn, which is rebuilt with:
+    //    sanitised user prose + server-built [Patient: ...] + retrieved RAG
+    // in that order. The LLM sees patient context BEFORE reference material,
+    // matching the prior client-side ordering.
+    const priorMessages = messages.slice(0, -1).map((m) =>
+      m.role === 'user'
+        ? { ...m, content: stripInjectedPatientContext(m.content) }
+        : m,
+    );
+
+    const finalUserContent = [
+      cleanUserContent,
+      patientContext, // already starts with '\n[Patient: ...]' or ''
+      ragContext
+        ? `\n\n[Reference material retrieved from the medical knowledge base — use if relevant]\n${ragContext}`
+        : '',
+    ].join('');
+
+    const augmentedMessages: ChatMessage[] = [
+      { role: 'system' as const, content: systemPrompt },
+      ...priorMessages,
+      { role: 'user' as const, content: finalUserContent },
+    ];
+
+    // Step 6: Stream response via the provider fallback chain.
+    console.log(
+      `[Chat] route.provider.dispatch ${JSON.stringify({
+        userId: user?.id || null,
+        systemPromptChars: systemPrompt.length,
+        patientContextChars: patientContext.length,
+        totalMessages: augmentedMessages.length,
+        preparedInMs: Date.now() - routeStartedAt,
+      })}`,
+    );
+    // Step 6: Buffer-then-filter-then-stream.
+    //
+    // The deterministic post-filter must run on the COMPLETE model response
+    // before any of it reaches the user. We therefore call the non-streaming
+    // provider, run postCheck(), and re-emit the filtered text as a single
+    // SSE chunk so the existing client SSE parser keeps working.
+    //
+    // This adds end-to-end latency relative to mid-stream display, but it is
+    // the only honest way to enforce the safety contract (SAFETY.md). UX
+    // optimisations (server-side chunking of the filtered output) can
+    // happen in a follow-up without changing the safety guarantee.
+    const providerResponse = await chatWithFallback(augmentedMessages, model);
+
+    const riskClass = safetyDecision?.kind === 'allow_llm'
+      ? safetyDecision.riskClass
+      : 'R0';
+
+    const post = postCheck({
+      response: providerResponse.content,
+      riskClass,
+      emergency: emergencyInfo,
+    });
+
+    console.log(
+      `[Chat] route.safety.postCheck ${JSON.stringify({
+        userId: user?.id || null,
+        riskClass,
+        filterFires: post.audit.filterFires,
+        modified: post.audit.modified,
+        blocked: post.audit.blocked,
+        totalMs: Date.now() - routeStartedAt,
+      })}`,
+    );
+
+    const encoder = new TextEncoder();
+    const safeStream = new ReadableStream({
+      start(controller) {
+        const data = JSON.stringify({
+          choices: [{ delta: { content: post.filtered } }],
+          provider: providerResponse.provider,
+          model: providerResponse.model,
+          riskClass,
+          filtered: post.audit.modified,
+        });
+        controller.enqueue(encoder.encode(`data: ${data}\n\n`));
+        controller.enqueue(encoder.encode('data: [DONE]\n\n'));
+        controller.close();
+      },
+    });
+
+    if (user) {
+      auditLog({
+        userId: user.id,
+        action: 'chat',
+        ip,
+        meta: {
+          model: providerResponse.model,
+          provider: providerResponse.provider,
+          countryCode,
+          turns: messages.length,
+          patientContextChars: patientContext.length,
+          riskClass,
+          ruleFires: safetyDecision?.audit.ruleFires ?? [],
+          filterFires: post.audit.filterFires,
+          filterModified: post.audit.modified,
+          filterBlocked: post.audit.blocked,
+        },
+      });
+    }
+
+    return new Response(safeStream, {
+      headers: {
+        'Content-Type': 'text/event-stream',
+        'Cache-Control': 'no-cache',
+        Connection: 'keep-alive',
+      },
+    });
+  } catch (error) {
+    console.error(
+      `[Chat] route.error ${JSON.stringify({
+        userId: user?.id || null,
+        totalMs: Date.now() - routeStartedAt,
+        name: (error as any)?.name,
+        message: String((error as any)?.message || error).slice(0, 200),
+      })}`,
+    );
+
+    if (error instanceof z.ZodError) {
+      return new Response(
+        JSON.stringify({ error: 'Invalid request', details: error.errors }),
+        { status: 400, headers: { 'Content-Type': 'application/json' } }
+      );
+    }
+
+    return new Response(
+      JSON.stringify({ error: 'Internal server error' }),
+      { status: 500, headers: { 'Content-Type': 'application/json' } }
+    );
+  }
+}
diff --git a/app/api/geo/route.ts b/app/api/geo/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..e32a05e8715e96a1f7246b314b5bed8e17ebd978
--- /dev/null
+++ b/app/api/geo/route.ts
@@ -0,0 +1,142 @@
+import { NextResponse } from 'next/server';
+import { getEmergencyInfo } from '@/lib/safety/emergency-numbers';
+
+export const runtime = 'nodejs';
+export const dynamic = 'force-dynamic';
+
+/**
+ * IP-based country + language + emergency number detection.
+ *
+ * Privacy posture:
+ *  - Platform geo headers are read first (zero external calls, zero PII).
+ *  - If nothing is present we fall back to ipapi.co (free, no key), but
+ *    ONLY for public IPs — RFC1918, loopback, and link-local are never
+ *    sent outbound.
+ *  - The client IP is never logged or returned.
+ */
+
+const GEO_HEADERS = [
+  'x-vercel-ip-country',
+  'cf-ipcountry',
+  'x-nf-country',
+  'cloudfront-viewer-country',
+  'x-appengine-country',
+  'fly-client-ip-country',
+  'x-forwarded-country',
+] as const;
+
+// Country → best-effort primary language out of the ones MedOS ships.
+// Kept local to this file so we don't bloat lib/i18n for a single use.
+const COUNTRY_TO_LANGUAGE: Record<string, string> = {
+  US: 'en', GB: 'en', CA: 'en', AU: 'en', NZ: 'en', IE: 'en', ZA: 'en',
+  NG: 'en', KE: 'en', GH: 'en', UG: 'en', SG: 'en', MY: 'en', IN: 'en',
+  PK: 'en', BD: 'en', LK: 'en', PH: 'en',
+  ES: 'es', MX: 'es', AR: 'es', CO: 'es', CL: 'es', PE: 'es', VE: 'es',
+  EC: 'es', GT: 'es', CU: 'es', BO: 'es', DO: 'es', HN: 'es', PY: 'es',
+  SV: 'es', NI: 'es', CR: 'es', PA: 'es', UY: 'es', PR: 'es',
+  BR: 'pt', PT: 'pt', AO: 'pt', MZ: 'pt',
+  FR: 'fr', BE: 'fr', LU: 'fr', MC: 'fr', SN: 'fr', CI: 'fr', CM: 'fr',
+  CD: 'fr', HT: 'fr', DZ: 'fr', TN: 'fr', MA: 'ar',
+  DE: 'de', AT: 'de', CH: 'de', LI: 'de',
+  IT: 'it', SM: 'it', VA: 'it',
+  NL: 'nl', SR: 'nl',
+  PL: 'pl',
+  RU: 'ru', BY: 'ru', KZ: 'ru', KG: 'ru',
+  TR: 'tr',
+  SA: 'ar', AE: 'ar', EG: 'ar', JO: 'ar', IQ: 'ar', SY: 'ar', LB: 'ar',
+  YE: 'ar', LY: 'ar', OM: 'ar', QA: 'ar', KW: 'ar', BH: 'ar', SD: 'ar',
+  PS: 'ar',
+  CN: 'zh', TW: 'zh', HK: 'zh',
+  JP: 'ja',
+  KR: 'ko',
+  TH: 'th',
+  VN: 'vi',
+  TZ: 'sw',
+};
+
+function pickHeaderCountry(req: Request): string | null {
+  for (const h of GEO_HEADERS) {
+    const v = req.headers.get(h);
+    if (v && v.length >= 2 && v.toUpperCase() !== 'XX') {
+      return v.toUpperCase().slice(0, 2);
+    }
+  }
+  return null;
+}
+
+function extractClientIp(req: Request): string | null {
+  const xff = req.headers.get('x-forwarded-for');
+  if (xff) {
+    const first = xff.split(',')[0]?.trim();
+    if (first) return first;
+  }
+  return req.headers.get('x-real-ip');
+}
+
+function isPrivateIp(ip: string): boolean {
+  if (!ip) return true;
+  if (ip === '::1' || ip === '127.0.0.1' || ip.startsWith('fe80:')) return true;
+  const m = ip.match(/^(\d+)\.(\d+)\.(\d+)\.(\d+)$/);
+  if (!m) return false;
+  const a = parseInt(m[1], 10);
+  const b = parseInt(m[2], 10);
+  if (a === 10) return true;
+  if (a === 127) return true;
+  if (a === 169 && b === 254) return true;
+  if (a === 172 && b >= 16 && b <= 31) return true;
+  if (a === 192 && b === 168) return true;
+  return false;
+}
+
+async function lookupIpapi(ip: string): Promise<string | null> {
+  try {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), 1500);
+    const res = await fetch(`https://ipapi.co/${encodeURIComponent(ip)}/country/`, {
+      signal: controller.signal,
+      headers: { 'User-Agent': 'MedOS-Geo/1.0' },
+    });
+    clearTimeout(timeout);
+    if (!res.ok) return null;
+    const text = (await res.text()).trim().toUpperCase();
+    if (/^[A-Z]{2}$/.test(text)) return text;
+    return null;
+  } catch {
+    return null;
+  }
+}
+
+export async function GET(req: Request): Promise<Response> {
+  let country = pickHeaderCountry(req);
+  let source: 'header' | 'ipapi' | 'default' = country ? 'header' : 'default';
+
+  if (!country) {
+    const ip = extractClientIp(req);
+    if (ip && !isPrivateIp(ip)) {
+      const looked = await lookupIpapi(ip);
+      if (looked) {
+        country = looked;
+        source = 'ipapi';
+      }
+    }
+  }
+
+  const finalCountry = country || 'US';
+  const info = getEmergencyInfo(finalCountry);
+  const language = COUNTRY_TO_LANGUAGE[finalCountry] ?? 'en';
+
+  return NextResponse.json(
+    {
+      country: finalCountry,
+      language,
+      emergencyNumber: info.emergency,
+      source,
+    },
+    {
+      headers: {
+        'Cache-Control': 'private, max-age=3600',
+        'X-Robots-Tag': 'noindex',
+      },
+    },
+  );
+}
diff --git a/app/api/health-data/route.ts b/app/api/health-data/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..8b2a1147310434d768b10ce9af18c50261a03e0a
--- /dev/null
+++ b/app/api/health-data/route.ts
@@ -0,0 +1,114 @@
+import { NextResponse } from 'next/server';
+import { z } from 'zod';
+import { getDb, genId } from '@/lib/db';
+import { authenticateRequest } from '@/lib/auth-middleware';
+import { encodeHealthPayload, decodeHealthPayload } from '@/lib/health-data-repo';
+
+/**
+ * GET  /api/health-data          → fetch all health data for the user
+ * GET  /api/health-data?type=vital → filter by type
+ * POST /api/health-data/sync     → bulk sync from client localStorage
+ */
+export async function GET(req: Request) {
+  const user = authenticateRequest(req);
+  if (!user) {
+    return NextResponse.json({ error: 'Not authenticated' }, { status: 401 });
+  }
+
+  const db = getDb();
+  const url = new URL(req.url);
+  const type = url.searchParams.get('type');
+
+  const rows = type
+    ? db
+        .prepare('SELECT * FROM health_data WHERE user_id = ? AND type = ? ORDER BY updated_at DESC')
+        .all(user.id, type)
+    : db
+        .prepare('SELECT * FROM health_data WHERE user_id = ? ORDER BY updated_at DESC')
+        .all(user.id);
+
+  // Decrypt (or pass through legacy plaintext) the `data` field for each row.
+  const items = (rows as any[]).map((r) => ({
+    id: r.id,
+    type: r.type,
+    data: decodeHealthPayload(r.data),
+    createdAt: r.created_at,
+    updatedAt: r.updated_at,
+  }));
+
+  return NextResponse.json({ items });
+}
+
+/**
+ * POST /api/health-data — upsert a single health-data record.
+ */
+const UpsertSchema = z.object({
+  id: z.string().optional(),
+  type: z.enum([
+    'medication',
+    'medication_log',
+    'appointment',
+    'vital',
+    'record',
+    'conversation',
+  ]),
+  data: z.record(z.any()),
+});
+
+export async function POST(req: Request) {
+  const user = authenticateRequest(req);
+  if (!user) {
+    return NextResponse.json({ error: 'Not authenticated' }, { status: 401 });
+  }
+
+  try {
+    const body = await req.json();
+    const { id, type, data } = UpsertSchema.parse(body);
+
+    const db = getDb();
+    const itemId = id || genId();
+    const payload = encodeHealthPayload(data);
+
+    // Upsert: insert or replace. SQLite's ON CONFLICT handles this cleanly.
+    db.prepare(
+      `INSERT INTO health_data (id, user_id, type, data, updated_at)
+       VALUES (?, ?, ?, ?, datetime('now'))
+       ON CONFLICT(id) DO UPDATE SET data = excluded.data, updated_at = datetime('now')`,
+    ).run(itemId, user.id, type, payload);
+
+    return NextResponse.json({ id: itemId, type }, { status: 201 });
+  } catch (error: any) {
+    if (error instanceof z.ZodError) {
+      return NextResponse.json(
+        { error: 'Invalid input', details: error.errors },
+        { status: 400 },
+      );
+    }
+    console.error('[Health Data POST]', error?.message);
+    return NextResponse.json({ error: 'Save failed' }, { status: 500 });
+  }
+}
+
+/**
+ * DELETE /api/health-data?id=<id> — delete one record.
+ */
+export async function DELETE(req: Request) {
+  const user = authenticateRequest(req);
+  if (!user) {
+    return NextResponse.json({ error: 'Not authenticated' }, { status: 401 });
+  }
+
+  const url = new URL(req.url);
+  const id = url.searchParams.get('id');
+  if (!id) {
+    return NextResponse.json({ error: 'Missing id' }, { status: 400 });
+  }
+
+  const db = getDb();
+  db.prepare('DELETE FROM health_data WHERE id = ? AND user_id = ?').run(
+    id,
+    user.id,
+  );
+
+  return NextResponse.json({ success: true });
+}
diff --git a/app/api/health-data/sync/route.ts b/app/api/health-data/sync/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..903f9f15dba77f0493c8744676b9073dcdd3b103
--- /dev/null
+++ b/app/api/health-data/sync/route.ts
@@ -0,0 +1,77 @@
+import { NextResponse } from 'next/server';
+import { z } from 'zod';
+import { getDb, genId } from '@/lib/db';
+import { authenticateRequest } from '@/lib/auth-middleware';
+import { encodeHealthPayload } from '@/lib/health-data-repo';
+
+/**
+ * POST /api/health-data/sync — bulk sync from client localStorage.
+ *
+ * The client sends its entire localStorage health dataset (medications,
+ * appointments, vitals, records, medication_logs, conversations). The
+ * server upserts each item. This runs on:
+ *   - First login (migrates existing guest data to the account)
+ *   - Periodic background sync while logged in
+ *
+ * Idempotent: calling it twice with the same data is safe.
+ */
+
+const ItemSchema = z.object({
+  id: z.string(),
+  type: z.enum([
+    'medication',
+    'medication_log',
+    'appointment',
+    'vital',
+    'record',
+    'conversation',
+  ]),
+  data: z.record(z.any()),
+});
+
+const SyncSchema = z.object({
+  items: z.array(ItemSchema).max(5000),
+});
+
+export async function POST(req: Request) {
+  const user = authenticateRequest(req);
+  if (!user) {
+    return NextResponse.json({ error: 'Not authenticated' }, { status: 401 });
+  }
+
+  try {
+    const body = await req.json();
+    const { items } = SyncSchema.parse(body);
+
+    const db = getDb();
+
+    const upsert = db.prepare(
+      `INSERT INTO health_data (id, user_id, type, data, updated_at)
+       VALUES (?, ?, ?, ?, datetime('now'))
+       ON CONFLICT(id) DO UPDATE SET data = excluded.data, updated_at = datetime('now')`,
+    );
+
+    // Run as a single transaction for speed (1000+ items in <50ms).
+    // Each payload is AES-256-GCM encrypted by encodeHealthPayload().
+    const tx = db.transaction(() => {
+      for (const item of items) {
+        upsert.run(item.id, user.id, item.type, encodeHealthPayload(item.data));
+      }
+    });
+    tx();
+
+    return NextResponse.json({
+      synced: items.length,
+      message: `${items.length} items synced`,
+    });
+  } catch (error: any) {
+    if (error instanceof z.ZodError) {
+      return NextResponse.json(
+        { error: 'Invalid input', details: error.errors },
+        { status: 400 },
+      );
+    }
+    console.error('[Health Data Sync]', error?.message);
+    return NextResponse.json({ error: 'Sync failed' }, { status: 500 });
+  }
+}
diff --git a/app/api/health/route.ts b/app/api/health/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..72cb1d23dab16204a55ddf882fb9d0754caafb83
--- /dev/null
+++ b/app/api/health/route.ts
@@ -0,0 +1,10 @@
+import { NextResponse } from 'next/server';
+
+export async function GET() {
+  return NextResponse.json({
+    status: 'healthy',
+    service: 'medos-global',
+    timestamp: new Date().toISOString(),
+    version: '1.0.0',
+  });
+}
diff --git a/app/api/models/route.ts b/app/api/models/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..50beeb32319c53bf2ac5749ead76accf6c363538
--- /dev/null
+++ b/app/api/models/route.ts
@@ -0,0 +1,14 @@
+import { NextResponse } from 'next/server';
+import { fetchAvailableModels } from '@/lib/providers/ollabridge-models';
+
+export async function GET() {
+  try {
+    const models = await fetchAvailableModels();
+    return NextResponse.json({ models });
+  } catch {
+    return NextResponse.json(
+      { models: [], error: 'Failed to fetch models' },
+      { status: 200 } // Return 200 with empty array — non-critical endpoint
+    );
+  }
+}
diff --git a/app/api/nearby/route.ts b/app/api/nearby/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..a7f8571994d98cca954a749476aca2149c18abf8
--- /dev/null
+++ b/app/api/nearby/route.ts
@@ -0,0 +1,94 @@
+import { NextResponse } from 'next/server';
+
+/**
+ * POST /api/nearby — Proxy to MetaEngine Nearby Finder.
+ * GET  /api/nearby — Health check.
+ *
+ * Calls the Gradio API endpoint (2-step: submit → fetch result).
+ * Handles sleeping Spaces, timeouts, and Overpass errors gracefully.
+ */
+
+const NEARBY_URL =
+  process.env.NEARBY_URL || 'https://ruslanmv-metaengine-nearby.hf.space';
+
+export const runtime = 'nodejs';
+export const dynamic = 'force-dynamic';
+
+export async function POST(req: Request) {
+  try {
+    const body = await req.json();
+    const { lat, lon, radius_m = 3000, entity_type = 'all', limit = 25 } = body;
+
+    // Step 1: Submit to Gradio API
+    const submitRes = await fetch(`${NEARBY_URL}/gradio_api/call/search_ui`, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({
+        data: [String(lat), String(lon), radius_m, entity_type, limit],
+      }),
+      signal: AbortSignal.timeout(30000),
+    });
+
+    if (!submitRes.ok) {
+      const ct = submitRes.headers.get('content-type') || '';
+      if (!ct.includes('json')) {
+        return NextResponse.json(
+          { error: 'Nearby finder is waking up. Please try again in a moment.', count: 0, results: [] },
+          { status: 503 },
+        );
+      }
+      return NextResponse.json({ error: 'Search submission failed', count: 0, results: [] }, { status: 502 });
+    }
+
+    const { event_id } = await submitRes.json();
+    if (!event_id) {
+      return NextResponse.json({ error: 'No event ID received', count: 0, results: [] }, { status: 502 });
+    }
+
+    // Step 2: Fetch result via SSE
+    const resultRes = await fetch(
+      `${NEARBY_URL}/gradio_api/call/search_ui/${event_id}`,
+      { signal: AbortSignal.timeout(30000) },
+    );
+
+    const text = await resultRes.text();
+
+    // Parse SSE data line: "data: [summary, table, json_string]"
+    const dataLine = text.split('\n').find((l: string) => l.startsWith('data: '));
+    if (!dataLine) {
+      return NextResponse.json({ error: 'Empty response from search', count: 0, results: [] });
+    }
+
+    const gradioData = JSON.parse(dataLine.slice(6));
+    // gradioData = [summary_text, table_array, json_string]
+    const jsonStr = gradioData?.[2];
+    if (!jsonStr) {
+      return NextResponse.json({ error: 'No results', count: 0, results: [] });
+    }
+
+    try {
+      const parsed = JSON.parse(jsonStr);
+      return NextResponse.json(parsed);
+    } catch {
+      // If the json_str is an error message, return it
+      return NextResponse.json({ error: jsonStr, count: 0, results: [] });
+    }
+  } catch (error: any) {
+    console.error('[Nearby Proxy]', error?.name, error?.message?.slice(0, 100));
+    const msg =
+      error?.name === 'TimeoutError' || error?.name === 'AbortError'
+        ? 'Search timed out. The service may be starting up — please try again.'
+        : 'Nearby finder unavailable. Please try again.';
+    return NextResponse.json({ error: msg, count: 0, results: [] }, { status: 502 });
+  }
+}
+
+export async function GET() {
+  try {
+    const res = await fetch(NEARBY_URL, { signal: AbortSignal.timeout(8000) });
+    if (res.ok) return NextResponse.json({ status: 'ok' });
+    return NextResponse.json({ status: 'waking' }, { status: 503 });
+  } catch {
+    return NextResponse.json({ status: 'sleeping' }, { status: 503 });
+  }
+}
diff --git a/app/api/og/route.tsx b/app/api/og/route.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..25337551143cda6008c18f805697b8b84012a3c3
--- /dev/null
+++ b/app/api/og/route.tsx
@@ -0,0 +1,207 @@
+import { ImageResponse } from 'next/og';
+
+export const runtime = 'edge';
+
+/**
+ * Dynamic Open Graph image endpoint.
+ *
+ * Every share on Twitter / WhatsApp / LinkedIn / Telegram / iMessage
+ * renders a branded 1200x630 card. The query becomes the card title so
+ * a link like `https://ruslanmv-medibot.hf.space/?q=chest+pain` previews
+ * as a premium, unique image instead of the default favicon blob.
+ *
+ * Usage from the client: `/api/og?q=<question>&lang=<code>`
+ * The endpoint also handles missing parameters gracefully (returns a
+ * default brand card).
+ */
+export async function GET(req: Request): Promise<Response> {
+  try {
+    const { searchParams } = new URL(req.url);
+    const rawQuery = (searchParams.get('q') || '').trim();
+    const lang = (searchParams.get('lang') || 'en').slice(0, 5);
+
+    // Hard-limit title length so long queries don't overflow.
+    const title =
+      rawQuery.length > 120 ? rawQuery.slice(0, 117) + '…' : rawQuery;
+
+    const subtitle = title
+      ? 'Ask MedOS — free, private, in your language'
+      : 'Free AI medical assistant — 20 languages, no sign-up';
+
+    const headline = title || 'Tell me what\'s bothering you.';
+
+    return new ImageResponse(
+      (
+        <div
+          style={{
+            width: '100%',
+            height: '100%',
+            display: 'flex',
+            flexDirection: 'column',
+            padding: '72px',
+            background:
+              'radial-gradient(1200px 800px at 10% -10%, rgba(59,130,246,0.35), transparent 60%),' +
+              'radial-gradient(1000px 600px at 110% 10%, rgba(20,184,166,0.30), transparent 60%),' +
+              'linear-gradient(180deg, #0B1220 0%, #0E1627 100%)',
+            color: '#F8FAFC',
+            fontFamily: 'sans-serif',
+            position: 'relative',
+          }}
+        >
+          {/* Top bar: brand mark + language chip */}
+          <div
+            style={{
+              display: 'flex',
+              alignItems: 'center',
+              justifyContent: 'space-between',
+              marginBottom: '48px',
+            }}
+          >
+            <div style={{ display: 'flex', alignItems: 'center', gap: '18px' }}>
+              <div
+                style={{
+                  width: '72px',
+                  height: '72px',
+                  borderRadius: '22px',
+                  background: 'linear-gradient(135deg, #3B82F6 0%, #14B8A6 100%)',
+                  display: 'flex',
+                  alignItems: 'center',
+                  justifyContent: 'center',
+                  fontSize: '44px',
+                  boxShadow: '0 20px 60px -10px rgba(59,130,246,0.65)',
+                }}
+              >
+                ♥
+              </div>
+              <div style={{ display: 'flex', flexDirection: 'column' }}>
+                <div
+                  style={{
+                    fontSize: '40px',
+                    fontWeight: 800,
+                    letterSpacing: '-0.02em',
+                    lineHeight: 1,
+                  }}
+                >
+                  MedOS
+                </div>
+                <div
+                  style={{
+                    fontSize: '16px',
+                    color: '#14B8A6',
+                    fontWeight: 700,
+                    textTransform: 'uppercase',
+                    letterSpacing: '0.18em',
+                    marginTop: '6px',
+                  }}
+                >
+                  Worldwide medical AI
+                </div>
+              </div>
+            </div>
+
+            <div
+              style={{
+                display: 'flex',
+                alignItems: 'center',
+                gap: '10px',
+                padding: '10px 18px',
+                borderRadius: '9999px',
+                background: 'rgba(255,255,255,0.08)',
+                border: '1px solid rgba(255,255,255,0.18)',
+                fontSize: '18px',
+                color: '#CBD5E1',
+                fontWeight: 600,
+              }}
+            >
+              <span
+                style={{
+                  width: '8px',
+                  height: '8px',
+                  borderRadius: '9999px',
+                  background: '#22C55E',
+                }}
+              />
+              {lang.toUpperCase()} · FREE · NO SIGN-UP
+            </div>
+          </div>
+
+          {/* Main content */}
+          <div
+            style={{
+              display: 'flex',
+              flexDirection: 'column',
+              flex: 1,
+              justifyContent: 'center',
+            }}
+          >
+            {title && (
+              <div
+                style={{
+                  fontSize: '22px',
+                  fontWeight: 700,
+                  color: '#14B8A6',
+                  textTransform: 'uppercase',
+                  letterSpacing: '0.18em',
+                  marginBottom: '22px',
+                }}
+              >
+                Ask MedOS
+              </div>
+            )}
+            <div
+              style={{
+                fontSize: title ? '68px' : '84px',
+                fontWeight: 800,
+                lineHeight: 1.1,
+                letterSpacing: '-0.025em',
+                color: '#F8FAFC',
+                maxWidth: '1000px',
+              }}
+            >
+              {title ? `"${headline}"` : headline}
+            </div>
+            <div
+              style={{
+                fontSize: '26px',
+                color: '#94A3B8',
+                marginTop: '28px',
+                fontWeight: 500,
+              }}
+            >
+              {subtitle}
+            </div>
+          </div>
+
+          {/* Footer: trust strip */}
+          <div
+            style={{
+              display: 'flex',
+              alignItems: 'center',
+              gap: '28px',
+              fontSize: '18px',
+              color: '#94A3B8',
+              fontWeight: 600,
+              borderTop: '1px solid rgba(255,255,255,0.1)',
+              paddingTop: '28px',
+            }}
+          >
+            <span style={{ color: '#14B8A6', fontWeight: 700 }}>
+              ✓ Aligned with WHO · CDC · NHS
+            </span>
+            <span>·</span>
+            <span>Private &amp; anonymous</span>
+            <span>·</span>
+            <span>24/7</span>
+          </div>
+        </div>
+      ),
+      {
+        width: 1200,
+        height: 630,
+      },
+    );
+  } catch {
+    // Never 500 an OG endpoint — social crawlers will blacklist the domain.
+    return new Response('OG image generation failed', { status: 500 });
+  }
+}
diff --git a/app/api/rag/route.ts b/app/api/rag/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..a2d675273b86e6b43ebcdd8db6f418289ece99a9
--- /dev/null
+++ b/app/api/rag/route.ts
@@ -0,0 +1,30 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { searchMedicalKB } from '@/lib/rag/medical-kb';
+
+export async function POST(request: NextRequest) {
+  try {
+    const { query, topN = 3 } = await request.json();
+
+    if (!query || typeof query !== 'string') {
+      return NextResponse.json(
+        { error: 'Query is required' },
+        { status: 400 }
+      );
+    }
+
+    const results = searchMedicalKB(query, topN);
+
+    return NextResponse.json({
+      results: results.map((r) => ({
+        topic: r.topic,
+        context: r.context,
+      })),
+      count: results.length,
+    });
+  } catch {
+    return NextResponse.json(
+      { error: 'Internal server error' },
+      { status: 500 }
+    );
+  }
+}
diff --git a/app/api/scan/route.ts b/app/api/scan/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..b8fe5574c23e305c5a45e038166f5419fa2d67f8
--- /dev/null
+++ b/app/api/scan/route.ts
@@ -0,0 +1,194 @@
+import { NextResponse } from 'next/server';
+import { loadConfig } from '@/lib/server-config';
+import { authenticateRequest } from '@/lib/auth-middleware';
+import { checkRateLimit, getClientIp } from '@/lib/rate-limit';
+import { auditLog } from '@/lib/audit';
+import { getDb, genId } from '@/lib/db';
+
+/**
+ * POST /api/scan — Server-side proxy to the Medicine Scanner Space.
+ *
+ * Why proxy instead of calling from the browser:
+ *   - HF_TOKEN_INFERENCE stays server-side (never in the JS bundle)
+ *   - Same-origin request from the browser (no CORS preflight)
+ *   - Backend injects the token and forwards to the Scanner Space
+ *   - If the Scanner Space is sleeping, this request wakes it
+ *
+ * Isolation & accounting (added in PNF10):
+ *   - Authentication is REQUIRED by default. Operators can flip
+ *     SCAN_REQUIRE_AUTH=false to keep the legacy open behaviour while
+ *     migrating, but anonymous traffic is then capped at 5 scans/hour
+ *     per IP.
+ *   - Authenticated users get 30 scans/hour each (per-user key).
+ *   - Every call writes one scan_log row (status, bytes, latency, model)
+ *     so admins can detect abuse on the shared HF inference quota.
+ *   - Authenticated calls also append an audit_log('scan') entry.
+ *
+ * The Scanner Space receives:
+ *   - The image as multipart/form-data (passthrough)
+ *   - Authorization: Bearer header with the inference token
+ *   - Returns structured JSON with medicine data
+ */
+
+export const runtime = 'nodejs';
+export const dynamic = 'force-dynamic';
+
+function logScan(
+  userId: string | null,
+  ip: string | null,
+  status: number,
+  bytes: number,
+  latencyMs: number,
+  model: string | null,
+): void {
+  try {
+    const db = getDb();
+    db.prepare(
+      `INSERT INTO scan_log (id, user_id, ip, status, bytes, latency_ms, model)
+       VALUES (?, ?, ?, ?, ?, ?, ?)`,
+    ).run(genId(), userId, ip, status, bytes, latencyMs, model);
+  } catch (e: any) {
+    console.error('[Scan] log failed:', e?.message);
+  }
+}
+
+export async function POST(req: Request) {
+  const startedAt = Date.now();
+  const ip = getClientIp(req);
+  const user = authenticateRequest(req);
+
+  // Auth gate. Default-on; opt-out via SCAN_REQUIRE_AUTH=false for migration.
+  const authRequired = (process.env.SCAN_REQUIRE_AUTH || 'true') !== 'false';
+  if (authRequired && !user) {
+    return NextResponse.json(
+      {
+        success: false,
+        error: 'Authentication required to scan medicines.',
+        medicine: null,
+      },
+      { status: 401 },
+    );
+  }
+
+  // Per-identity quota. Authenticated users are tracked by id (stable across
+  // IPs), anonymous fallback by IP (only reachable with SCAN_REQUIRE_AUTH=false).
+  const limitKey = user ? `scan:user:${user.id}` : `scan:ip:${ip}`;
+  const limitMax = user ? 30 : 5;
+  const limit = checkRateLimit(limitKey, limitMax, 60 * 60 * 1000);
+  if (!limit.allowed) {
+    logScan(user?.id || null, ip, 429, 0, Date.now() - startedAt, null);
+    return NextResponse.json(
+      {
+        success: false,
+        error: 'Scan quota exceeded. Try again later.',
+        retryAfterMs: limit.retryAfterMs,
+      },
+      {
+        status: 429,
+        headers: { 'Retry-After': String(Math.ceil(limit.retryAfterMs / 1000)) },
+      },
+    );
+  }
+
+  // Resolve provider config (env at boot, admin overrides via /data/medos-config.json).
+  const cfg = loadConfig();
+  const token = cfg.llm.hfTokenInference;
+  const scannerUrl = cfg.llm.scannerUrl;
+
+  if (!token) {
+    console.error('[Scan] HF_TOKEN_INFERENCE is not configured');
+    logScan(user?.id || null, ip, 503, 0, Date.now() - startedAt, null);
+    return NextResponse.json(
+      {
+        success: false,
+        error:
+          'Medicine scanner is not configured. Ask the administrator to set HF_TOKEN_INFERENCE.',
+        medicine: null,
+      },
+      { status: 503 },
+    );
+  }
+
+  try {
+    // Read the incoming form data (image file from the frontend).
+    const formData = await req.formData();
+
+    // Best-effort byte accounting for usage reporting.
+    let bytes = 0;
+    for (const [, v] of formData.entries()) {
+      if (v instanceof Blob) bytes += v.size;
+    }
+
+    const headers: Record<string, string> = {
+      Authorization: `Bearer ${token}`,
+    };
+
+    // Forward to the Medicine Scanner Space.
+    const response = await fetch(`${scannerUrl}/api/scan`, {
+      method: 'POST',
+      headers,
+      body: formData,
+    });
+
+    const data = await response.json().catch(() => ({} as any));
+    const latency = Date.now() - startedAt;
+
+    logScan(
+      user?.id || null,
+      ip,
+      response.status,
+      bytes,
+      latency,
+      (data as any)?.model || null,
+    );
+
+    if (user) {
+      auditLog({
+        userId: user.id,
+        action: 'scan',
+        ip,
+        meta: { status: response.status, bytes, latencyMs: latency },
+      });
+    }
+
+    return NextResponse.json(data, { status: response.status });
+  } catch (error: any) {
+    const latency = Date.now() - startedAt;
+    console.error('[Scan Proxy]', error?.message);
+    logScan(user?.id || null, ip, 502, 0, latency, null);
+    return NextResponse.json(
+      {
+        success: false,
+        error: 'Medicine scanner unavailable. Please try again.',
+        medicine: null,
+      },
+      { status: 502 },
+    );
+  }
+}
+
+/**
+ * GET /api/scan/health — Check if the Scanner Space is awake.
+ * Used by the frontend to show "waking up" status.
+ */
+export async function GET() {
+  const cfg = loadConfig();
+  const scannerUrl = cfg.llm.scannerUrl;
+  try {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), 5000);
+
+    const res = await fetch(`${scannerUrl}/api/health`, {
+      signal: controller.signal,
+    });
+    clearTimeout(timeout);
+
+    if (res.ok) {
+      const data = await res.json();
+      return NextResponse.json(data);
+    }
+    return NextResponse.json({ status: 'unavailable' }, { status: 503 });
+  } catch {
+    return NextResponse.json({ status: 'sleeping' }, { status: 503 });
+  }
+}
diff --git a/app/api/sessions/route.ts b/app/api/sessions/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..33c0158647314083869979235622a8678f8410a0
--- /dev/null
+++ b/app/api/sessions/route.ts
@@ -0,0 +1,70 @@
+import { NextResponse } from 'next/server';
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from 'fs';
+import { join } from 'path';
+
+/**
+ * Server-side session counter.
+ * Stores count in /tmp/medos-data/sessions.json (persists across requests, resets on container restart).
+ * On HF Spaces with persistent storage, use /data/ instead of /tmp/.
+ *
+ * GET  /api/sessions → returns { count: number }
+ * POST /api/sessions → increments and returns { count: number }
+ */
+
+const DATA_DIR = process.env.PERSISTENT_DIR || '/tmp/medos-data';
+const COUNTER_FILE = join(DATA_DIR, 'sessions.json');
+const BASE_COUNT = 423000; // Historical base from before server-side tracking
+
+interface CounterData {
+  count: number;
+  lastUpdated: string;
+}
+
+function ensureDir(): void {
+  if (!existsSync(DATA_DIR)) {
+    mkdirSync(DATA_DIR, { recursive: true });
+  }
+}
+
+function readCounter(): number {
+  ensureDir();
+  try {
+    if (existsSync(COUNTER_FILE)) {
+      const data: CounterData = JSON.parse(readFileSync(COUNTER_FILE, 'utf8'));
+      return data.count;
+    }
+  } catch {
+    // corrupted file, reset
+  }
+  return 0;
+}
+
+function incrementCounter(): number {
+  ensureDir();
+  const current = readCounter();
+  const next = current + 1;
+  const data: CounterData = {
+    count: next,
+    lastUpdated: new Date().toISOString(),
+  };
+  writeFileSync(COUNTER_FILE, JSON.stringify(data), 'utf8');
+  return next;
+}
+
+export async function GET() {
+  const sessionCount = readCounter();
+  return NextResponse.json({
+    count: BASE_COUNT + sessionCount,
+    sessions: sessionCount,
+    base: BASE_COUNT,
+  });
+}
+
+export async function POST() {
+  const sessionCount = incrementCounter();
+  return NextResponse.json({
+    count: BASE_COUNT + sessionCount,
+    sessions: sessionCount,
+    base: BASE_COUNT,
+  });
+}
diff --git a/app/api/triage/route.ts b/app/api/triage/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..68b1c18de133939e8f99ebfd222ea46597a23afa
--- /dev/null
+++ b/app/api/triage/route.ts
@@ -0,0 +1,29 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { triageMessage } from '@/lib/safety/triage';
+import { getEmergencyInfo } from '@/lib/safety/emergency-numbers';
+
+export async function POST(request: NextRequest) {
+  try {
+    const { message, countryCode = 'US' } = await request.json();
+
+    if (!message || typeof message !== 'string') {
+      return NextResponse.json(
+        { error: 'Message is required' },
+        { status: 400 }
+      );
+    }
+
+    const triage = triageMessage(message);
+    const emergencyInfo = getEmergencyInfo(countryCode);
+
+    return NextResponse.json({
+      ...triage,
+      emergencyInfo: triage.isEmergency ? emergencyInfo : null,
+    });
+  } catch {
+    return NextResponse.json(
+      { error: 'Internal server error' },
+      { status: 500 }
+    );
+  }
+}
diff --git a/app/api/user/settings/route.ts b/app/api/user/settings/route.ts
new file mode 100644
index 0000000000000000000000000000000000000000..8f6f3de3b1157344eec5db99c015c7b5cf4d6410
--- /dev/null
+++ b/app/api/user/settings/route.ts
@@ -0,0 +1,126 @@
+import { NextResponse } from 'next/server';
+import { z } from 'zod';
+import { authenticateRequest } from '@/lib/auth-middleware';
+import { getUserSettings, upsertUserSettings } from '@/lib/user-settings';
+import { auditLog } from '@/lib/audit';
+import { getClientIp } from '@/lib/rate-limit';
+import { redact } from '@/lib/crypto';
+
+/**
+ * Per-user settings API.
+ *
+ *   GET  /api/user/settings  — returns this user's preferences + EHR profile.
+ *                              The BYO Hugging Face token is NEVER returned
+ *                              in plaintext; the response carries only a
+ *                              redacted preview ('••••HiJ') and a
+ *                              hasHfToken boolean. The decrypted token is
+ *                              used in-process only by the LLM provider
+ *                              chain (added in a follow-up batch).
+ *
+ *   PUT  /api/user/settings  — partial patch. Field semantics for `hfToken`:
+ *                                omit       → leave token unchanged
+ *                                ""        → clear stored token
+ *                                "hf_xxx" → rotate to new value (encrypted)
+ *
+ * Every successful PUT writes an audit_log('settings_update') entry that
+ * lists the changed field NAMES only — never values.
+ */
+
+export const runtime = 'nodejs';
+
+export async function GET(req: Request) {
+  const user = authenticateRequest(req);
+  if (!user) {
+    return NextResponse.json({ error: 'Not authenticated' }, { status: 401 });
+  }
+
+  const s = getUserSettings(user.id);
+
+  return NextResponse.json({
+    settings: {
+      language: s.language ?? null,
+      country: s.country ?? null,
+      units: s.units ?? null,
+      defaultModel: s.defaultModel ?? null,
+      theme: s.theme ?? null,
+      ehr: s.ehr ?? {},
+      hfTokenRedacted: s.hfToken ? redact(s.hfToken) : null,
+      hasHfToken: !!s.hfToken,
+    },
+  });
+}
+
+const PutSchema = z.object({
+  language: z.string().min(2).max(8).optional(),
+  country: z.string().min(2).max(4).optional(),
+  units: z.enum(['metric', 'imperial']).optional(),
+  defaultModel: z.string().max(100).optional(),
+  theme: z.enum(['light', 'dark', 'auto']).optional(),
+  // EHR is a free-form bag (the wizard owns its shape) but bounded.
+  ehr: z.record(z.any()).optional(),
+  // Empty string clears the token, undefined leaves it untouched.
+  hfToken: z.string().max(200).optional(),
+});
+
+export async function PUT(req: Request) {
+  const user = authenticateRequest(req);
+  if (!user) {
+    return NextResponse.json({ error: 'Not authenticated' }, { status: 401 });
+  }
+
+  let parsed;
+  try {
+    const body = await req.json();
+    parsed = PutSchema.parse(body);
+  } catch (error: any) {
+    if (error instanceof z.ZodError) {
+      return NextResponse.json(
+        { error: 'Invalid input', details: error.errors },
+        { status: 400 },
+      );
+    }
+    return NextResponse.json({ error: 'Invalid request body' }, { status: 400 });
+  }
+
+  // Reject pathological EHR payloads to keep row size sane.
+  if (parsed.ehr && JSON.stringify(parsed.ehr).length > 32_000) {
+    return NextResponse.json(
+      { error: 'EHR payload too large (max 32 KB).' },
+      { status: 413 },
+    );
+  }
+
+  try {
+    upsertUserSettings(user.id, parsed);
+  } catch (error: any) {
+    console.error('[User Settings PUT]', error?.message);
+    return NextResponse.json({ error: 'Save failed' }, { status: 500 });
+  }
+
+  auditLog({
+    userId: user.id,
+    action: 'settings_update',
+    ip: getClientIp(req),
+    meta: {
+      fields: Object.keys(parsed),
+      tokenRotated: parsed.hfToken !== undefined,
+      ehrFieldsChanged: parsed.ehr ? Object.keys(parsed.ehr) : [],
+    },
+  });
+
+  // Return the fresh, redacted view so the client can update its cache.
+  const s = getUserSettings(user.id);
+  return NextResponse.json({
+    success: true,
+    settings: {
+      language: s.language ?? null,
+      country: s.country ?? null,
+      units: s.units ?? null,
+      defaultModel: s.defaultModel ?? null,
+      theme: s.theme ?? null,
+      ehr: s.ehr ?? {},
+      hfTokenRedacted: s.hfToken ? redact(s.hfToken) : null,
+      hasHfToken: !!s.hfToken,
+    },
+  });
+}
diff --git a/app/globals.css b/app/globals.css
new file mode 100644
index 0000000000000000000000000000000000000000..0dea31359bbab2177f1579406d75ffc131b33a80
--- /dev/null
+++ b/app/globals.css
@@ -0,0 +1,378 @@
+@tailwind base;
+@tailwind components;
+@tailwind utilities;
+
+/* ============================================================
+ * MedOS design tokens — light + dark
+ * ============================================================ */
+:root {
+  /* Surfaces (light mode — soft white, never pure #FFFFFF) */
+  --surface-0: 247 249 251; /* app backdrop  #F7F9FB */
+  --surface-1: 255 255 255; /* cards          */
+  --surface-2: 241 245 249; /* elevated panels #F1F5F9 */
+  --surface-3: 226 232 240; /* borders / rails */
+
+  --ink-base:    15  23  42; /* slate-900     */
+  --ink-muted:   71  85 105; /* slate-600     */
+  --ink-subtle: 148 163 184; /* slate-400     */
+  --ink-inverse: 255 255 255;
+
+  --line: 226 232 240; /* slate-200 */
+
+  color-scheme: light;
+}
+
+.dark {
+  /* Dark mode — warm deep navy, NOT pure black */
+  --surface-0:  11  18  32; /* #0B1220 */
+  --surface-1:  18  27  45; /* #121B2D elevated card */
+  --surface-2:  24  34  54; /* #182236 panel  */
+  --surface-3:  34  46  71; /* #222E47 border */
+
+  --ink-base:   241 245 249; /* slate-100 */
+  --ink-muted:  148 163 184; /* slate-400 */
+  --ink-subtle: 100 116 139; /* slate-500 */
+  --ink-inverse: 15  23  42;
+
+  --line: 34 46 71;
+
+  color-scheme: dark;
+}
+
+@layer base {
+  html,
+  body {
+    @apply h-full w-full;
+    /* iOS Safari 100vh fix: dvh accounts for the collapsible address bar.
+       Falls back to 100vh for browsers that don't support dvh. */
+    height: 100vh;
+    height: 100dvh;
+  }
+
+  html {
+    font-family: var(--font-sans), Inter,
+      /* CJK fallbacks (Chinese, Japanese, Korean) */
+      "Noto Sans CJK SC", "PingFang SC", "Hiragino Sans", "MS Gothic",
+      "Malgun Gothic", "Apple SD Gothic Neo",
+      /* Arabic */
+      "Noto Sans Arabic", "Geeza Pro", "Tahoma",
+      /* Devanagari (Hindi) */
+      "Noto Sans Devanagari",
+      /* Thai */
+      "Noto Sans Thai",
+      /* System fallbacks */
+      ui-sans-serif, system-ui, -apple-system,
+      "Segoe UI", Roboto, sans-serif;
+    font-feature-settings: "cv02", "cv03", "cv04", "cv11", "ss01";
+    -webkit-font-smoothing: antialiased;
+    -moz-osx-font-smoothing: grayscale;
+    text-rendering: optimizeLegibility;
+  }
+
+  body {
+    @apply text-ink-base antialiased;
+    background: theme("backgroundImage.light-app");
+    background-attachment: fixed;
+    line-height: 1.6;
+    letter-spacing: -0.005em;
+  }
+
+  .dark body {
+    background: theme("backgroundImage.dark-app");
+    background-attachment: fixed;
+  }
+
+  /* Slightly larger, more readable body copy — medical trust */
+  p { line-height: 1.65; }
+
+  /* Focus rings that are visible in both modes */
+  :focus-visible {
+    outline: 2px solid rgb(var(--color-brand, 59 130 246));
+    outline-offset: 2px;
+    border-radius: 8px;
+  }
+}
+
+@layer components {
+  .glass-card {
+    @apply bg-surface-1/80 backdrop-blur-xl border border-line/60 shadow-soft;
+  }
+  .glass-strong {
+    @apply bg-surface-1/95 backdrop-blur-2xl border border-line/70 shadow-card;
+  }
+  /* Section headings inside an AI answer (Summary / Self-care …) */
+  .answer-section {
+    @apply relative pl-4 mt-4 first:mt-0;
+  }
+  .answer-section::before {
+    content: "";
+    @apply absolute left-0 top-1 bottom-1 w-1 rounded-full bg-brand-500/60;
+  }
+}
+
+@layer utilities {
+  .animate-in { animation: fadeIn 0.5s ease-in-out; }
+  .slide-in-from-bottom-4 { animation: slideInFromBottom 0.5s ease-in-out; }
+  .delay-100 { animation-delay: 100ms; }
+  .delay-200 { animation-delay: 200ms; }
+
+  /* Shimmer utility for the "Analyzing…" typing state */
+  .shimmer-text {
+    background: linear-gradient(
+      90deg,
+      rgb(var(--ink-muted) / 0.5) 0%,
+      rgb(var(--ink-base)) 50%,
+      rgb(var(--ink-muted) / 0.5) 100%
+    );
+    background-size: 200% 100%;
+    -webkit-background-clip: text;
+    background-clip: text;
+    color: transparent;
+    animation: shimmer 2.2s linear infinite;
+  }
+
+  @keyframes fadeIn {
+    from { opacity: 0; }
+    to   { opacity: 1; }
+  }
+  @keyframes slideInFromBottom {
+    from { opacity: 0; transform: translateY(1rem); }
+    to   { opacity: 1; transform: translateY(0); }
+  }
+
+  /* Medicine scanner viewfinder — pulsing green border */
+  @keyframes scannerPulse {
+    0%, 100% { border-color: rgba(34, 197, 94, 0.5); box-shadow: 0 0 0 0 rgba(34, 197, 94, 0); }
+    50%      { border-color: rgba(34, 197, 94, 1);   box-shadow: 0 0 20px 4px rgba(34, 197, 94, 0.15); }
+  }
+  @keyframes scanLine {
+    0%   { top: 8%; }
+    50%  { top: 88%; }
+    100% { top: 8%; }
+  }
+  @keyframes scanSuccess {
+    0%   { transform: scale(1); border-color: rgba(34, 197, 94, 0.6); }
+    50%  { transform: scale(1.02); border-color: rgba(34, 197, 94, 1); }
+    100% { transform: scale(1); border-color: rgba(34, 197, 94, 0.6); }
+  }
+  @keyframes scanProgress {
+    0%   { width: 0%; }
+    100% { width: 100%; }
+  }
+  .animate-scanner-pulse  { animation: scannerPulse 2s ease-in-out infinite; }
+  .animate-scan-line      { animation: scanLine 2.5s ease-in-out infinite; }
+  .animate-scan-success   { animation: scanSuccess 0.6s ease-out; }
+  .animate-scan-progress  { animation: scanProgress 3s ease-out forwards; }
+}
+
+/* ------------------------------------------------------------
+ * Dark-mode compatibility layer for legacy screens that still
+ * reference slate/white utility classes directly. Remaps them to
+ * the design-token surfaces so Settings/Records/Schedule/Topics/
+ * Emergency look right in dark mode without a full rewrite.
+ * New components should prefer the `bg-surface-*` and `text-ink-*`
+ * tokens directly and won't be affected by these rules.
+ * ------------------------------------------------------------ */
+.dark .bg-white         { background-color: rgb(var(--surface-1)) !important; }
+.dark .bg-slate-50      { background-color: rgb(var(--surface-2)) !important; }
+.dark .bg-slate-100     { background-color: rgb(var(--surface-2)) !important; }
+.dark .bg-\[\#F8FAFC\]  { background-color: rgb(var(--surface-0)) !important; }
+.dark .bg-\[\#F7F9FB\]  { background-color: rgb(var(--surface-0)) !important; }
+
+.dark .text-slate-900   { color: rgb(var(--ink-base)) !important; }
+.dark .text-slate-800   { color: rgb(var(--ink-base)) !important; }
+.dark .text-slate-700   { color: rgb(var(--ink-base) / 0.92) !important; }
+.dark .text-slate-600   { color: rgb(var(--ink-muted)) !important; }
+.dark .text-slate-500   { color: rgb(var(--ink-muted)) !important; }
+.dark .text-slate-400   { color: rgb(var(--ink-subtle)) !important; }
+.dark .text-slate-300   { color: rgb(var(--ink-subtle) / 0.85) !important; }
+
+.dark .border-slate-50  { border-color: rgb(var(--line) / 0.55) !important; }
+.dark .border-slate-100 { border-color: rgb(var(--line) / 0.7) !important; }
+.dark .border-slate-200 { border-color: rgb(var(--line) / 0.9) !important; }
+
+.dark .placeholder-slate-400::placeholder { color: rgb(var(--ink-subtle)); }
+
+/* Soft tinted surfaces used on a handful of views (blue-50, rose-50,
+ * amber-50, etc.) — in dark mode dim them into brand/accent tints. */
+.dark .bg-blue-50       { background-color: rgba(59,130,246,0.10) !important; }
+.dark .bg-blue-100      { background-color: rgba(59,130,246,0.18) !important; }
+.dark .bg-indigo-50     { background-color: rgba(99,102,241,0.10) !important; }
+.dark .bg-rose-50       { background-color: rgba(244,63,94,0.10) !important; }
+.dark .bg-red-50        { background-color: rgba(239,68,68,0.10) !important; }
+.dark .bg-amber-50      { background-color: rgba(245,158,11,0.10) !important; }
+.dark .bg-emerald-50    { background-color: rgba(16,185,129,0.10) !important; }
+.dark .bg-purple-50     { background-color: rgba(168,85,247,0.10) !important; }
+
+.dark .border-blue-100  { border-color: rgba(59,130,246,0.28) !important; }
+.dark .border-blue-200  { border-color: rgba(59,130,246,0.38) !important; }
+.dark .border-red-200   { border-color: rgba(239,68,68,0.38) !important; }
+.dark .border-amber-200 { border-color: rgba(245,158,11,0.38) !important; }
+
+/* Scrollbars — subtle in both modes */
+::-webkit-scrollbar        { width: 10px; height: 10px; }
+::-webkit-scrollbar-track  { background: transparent; }
+::-webkit-scrollbar-thumb  {
+  background: rgb(var(--ink-subtle) / 0.35);
+  border-radius: 9999px;
+  border: 2px solid transparent;
+  background-clip: padding-box;
+}
+::-webkit-scrollbar-thumb:hover {
+  background: rgb(var(--ink-subtle) / 0.55);
+  background-clip: padding-box;
+}
+
+::selection {
+  background: rgba(59, 130, 246, 0.22);
+  color: inherit;
+}
+
+/* Safe area utilities for notched phones (iPhone X+, Android gesture nav) */
+.safe-area-bottom { padding-bottom: env(safe-area-inset-bottom, 0px); }
+.pb-safe-area { padding-bottom: env(safe-area-inset-bottom, 0px); }
+.safe-area-top { padding-top: env(safe-area-inset-top, 0px); }
+.px-safe-area {
+  padding-left: env(safe-area-inset-left, 0px);
+  padding-right: env(safe-area-inset-right, 0px);
+}
+
+/* ============================================================
+ * RTL (Right-to-Left) support for Arabic (ar) and Urdu (ur)
+ * Set via document.documentElement.dir = "rtl" in MedOSApp.tsx
+ * ============================================================ */
+[dir="rtl"] {
+  /* Base direction */
+  direction: rtl;
+  text-align: right;
+}
+
+/* Flex containers reverse in RTL */
+[dir="rtl"] .flex { direction: rtl; }
+
+/* Fix drawer slide direction (left → right for RTL) */
+[dir="rtl"] aside { left: auto; right: 0; }
+[dir="rtl"] .-translate-x-full { transform: translateX(100%); }
+[dir="rtl"] .translate-x-0 { transform: translateX(0); }
+
+/* Flip margins and paddings for common patterns */
+[dir="rtl"] .ml-auto { margin-left: 0; margin-right: auto; }
+[dir="rtl"] .mr-auto { margin-right: 0; margin-left: auto; }
+[dir="rtl"] .text-left { text-align: right; }
+[dir="rtl"] .text-right { text-align: left; }
+
+/* Fix icon + text alignment in nav items */
+[dir="rtl"] .gap-2 { gap: 0.5rem; }
+[dir="rtl"] .gap-3 { gap: 0.75rem; }
+
+/* Scrollbar on left side for RTL */
+[dir="rtl"] ::-webkit-scrollbar { direction: rtl; }
+
+/* Fix rounded corners (swap left/right) */
+[dir="rtl"] .rounded-tl-sm { border-top-left-radius: 0; border-top-right-radius: 0.125rem; }
+[dir="rtl"] .rounded-tr-sm { border-top-right-radius: 0; border-top-left-radius: 0.125rem; }
+
+/* Large tap targets */
+@media (pointer: coarse) {
+  button, a, select, input, textarea { min-height: 44px; }
+}
+
+/* ============================================================
+ * Mobile-first utilities
+ * ============================================================ */
+
+/* Dynamic viewport height — works on iOS Safari, Android Chrome,
+   and every modern browser. Falls back to 100vh. */
+.h-screen-safe {
+  height: 100vh;
+  height: 100dvh;
+}
+
+/* Sticky input bar that stays above the mobile keyboard.
+   Uses env(keyboard-inset-height) on supporting browsers and
+   falls back to standard sticky positioning elsewhere. */
+.sticky-bottom-keyboard {
+  position: sticky;
+  bottom: 0;
+  bottom: env(keyboard-inset-height, 0px);
+}
+
+/* Prevent iOS input zoom — any input below 16px triggers a zoom.
+   We force 16px minimum on touch devices and compensate with
+   transforms where we need visually-smaller text. */
+@media (pointer: coarse) {
+  input, textarea, select {
+    font-size: 16px !important;
+  }
+}
+
+/* CJK word-break — prevents overflow for Chinese/Japanese/Korean text */
+:lang(zh), :lang(ja), :lang(ko) {
+  word-break: break-all;
+  overflow-wrap: break-word;
+}
+
+/* iOS momentum scrolling */
+.scroll-touch {
+  -webkit-overflow-scrolling: touch;
+}
+
+/* Bottom padding spacer for content that sits above a fixed bottom nav.
+   The 5.5rem accounts for the nav height + safe-area-inset-bottom. */
+.pb-mobile-nav {
+  padding-bottom: 5.5rem;
+}
+@media (min-width: 768px) {
+  .pb-mobile-nav {
+    padding-bottom: 0;
+  }
+}
+
+/* Respect reduced-motion preferences everywhere */
+@media (prefers-reduced-motion: reduce) {
+  *,
+  *::before,
+  *::after {
+    animation-duration: 0.01ms !important;
+    animation-iteration-count: 1 !important;
+    transition-duration: 0.01ms !important;
+  }
+}
+
+/* ============================================================
+ * Print styles — professional PDF export via window.print()
+ * Hides navigation, maximizes content, clean typography
+ * ============================================================ */
+@media print {
+  /* Hide navigation, headers, footers */
+  aside, nav, header, footer,
+  .safe-area-bottom, .pb-mobile-nav,
+  button, [role="navigation"],
+  .md\:hidden, .lg\:flex { display: none !important; }
+
+  /* Full width, no sidebar */
+  body { background: white !important; color: black !important; font-size: 12pt; }
+  .flex-1 { width: 100% !important; max-width: 100% !important; }
+  .overflow-hidden { overflow: visible !important; }
+  .overflow-y-auto { overflow: visible !important; }
+
+  /* Clean card borders for print */
+  .bg-surface-1, .bg-surface-0 { background: white !important; }
+  .border { border-color: #ddd !important; }
+  .shadow-soft, .shadow-card, .shadow-glow { box-shadow: none !important; }
+  .rounded-2xl { border-radius: 8px !important; }
+
+  /* Keep colors readable */
+  .text-ink-base { color: #111 !important; }
+  .text-ink-muted { color: #555 !important; }
+  .text-brand-500, .text-brand-600 { color: #2563eb !important; }
+  .text-danger-500 { color: #dc2626 !important; }
+  .text-success-500 { color: #16a34a !important; }
+
+  /* Page breaks */
+  .stat-card, .rounded-2xl { break-inside: avoid; }
+  h2, h3 { break-after: avoid; }
+
+  /* Print header */
+  @page { margin: 1.5cm; size: A4; }
+}
diff --git a/app/icon.svg b/app/icon.svg
new file mode 100644
index 0000000000000000000000000000000000000000..65b2d8f213cc15a39403b630de541c795801c372
--- /dev/null
+++ b/app/icon.svg
@@ -0,0 +1,10 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32">
+  <defs>
+    <linearGradient id="g" x1="0%" y1="0%" x2="100%" y2="100%">
+      <stop offset="0%" style="stop-color:#3b82f6"/>
+      <stop offset="100%" style="stop-color:#14b8a6"/>
+    </linearGradient>
+  </defs>
+  <rect width="32" height="32" rx="8" fill="url(#g)"/>
+  <path d="M16 7a5 5 0 0 0-5 5c0 1.7.9 3.2 2.2 4.1C10.3 17.2 8 19.9 8 23c0 .6.4 1 1 1h14c.6 0 1-.4 1-1 0-3.1-2.3-5.8-5.2-6.9C20.1 15.2 21 13.7 21 12a5 5 0 0 0-5-5z" fill="white" opacity="0.9"/>
+</svg>
diff --git a/app/layout.tsx b/app/layout.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..7a04ec40653f36e043b5d95441945d0be6c38d17
--- /dev/null
+++ b/app/layout.tsx
@@ -0,0 +1,78 @@
+import type { Metadata, Viewport } from "next";
+import { Inter } from "next/font/google";
+import "./globals.css";
+
+const inter = Inter({
+  subsets: ["latin"],
+  display: "swap",
+  variable: "--font-sans",
+});
+
+export const metadata: Metadata = {
+  title: "MedOS — your worldwide medical assistant",
+  description:
+    "Tell MedOS what's bothering you. Instant, private, multilingual health guidance aligned with WHO, CDC, and NHS.",
+  keywords: ["medical AI", "healthcare", "chatbot", "telemedicine", "WHO", "CDC"],
+  authors: [{ name: "MedOS Team" }],
+  manifest: "/manifest.webmanifest",
+  icons: {
+    icon: [{ url: "/favicon.svg", type: "image/svg+xml" }],
+    shortcut: "/favicon.svg",
+  },
+  openGraph: {
+    title: "MedOS — your worldwide medical assistant",
+    description:
+      "Private, multilingual health guidance aligned with WHO, CDC, and NHS — available 24/7.",
+    type: "website",
+  },
+  robots: { index: true, follow: true },
+  appleWebApp: {
+    capable: true,
+    title: "MedOS",
+  },
+  other: {
+    "mobile-web-app-capable": "yes",
+  },
+};
+
+export const viewport: Viewport = {
+  width: "device-width",
+  initialScale: 1,
+  maximumScale: 5,
+  userScalable: true,
+  viewportFit: "cover",
+  themeColor: [
+    { media: "(prefers-color-scheme: light)", color: "#F7F9FB" },
+    { media: "(prefers-color-scheme: dark)", color: "#0B1220" },
+  ],
+};
+
+/**
+ * Inline pre-hydration script: reads the stored theme before first paint.
+ */
+const themeBootstrap = `
+(function() {
+  try {
+    var stored = localStorage.getItem('medos_theme');
+    var prefersDark = window.matchMedia('(prefers-color-scheme: dark)').matches;
+    var isDark = stored === 'dark' || (stored === 'system' && prefersDark);
+    if (isDark) document.documentElement.classList.add('dark');
+    document.documentElement.style.colorScheme = isDark ? 'dark' : 'light';
+  } catch (e) {}
+})();
+`;
+
+export default function RootLayout({
+  children,
+}: {
+  children: React.ReactNode;
+}) {
+  return (
+    <html lang="en" className={inter.variable} suppressHydrationWarning>
+      <head>
+        <script dangerouslySetInnerHTML={{ __html: themeBootstrap }} />
+      </head>
+      <body className="min-h-screen antialiased">{children}</body>
+    </html>
+  );
+}
diff --git a/app/manifest.ts b/app/manifest.ts
new file mode 100644
index 0000000000000000000000000000000000000000..1d8a8eb33753ed87599d43afbba4a0c0d3337503
--- /dev/null
+++ b/app/manifest.ts
@@ -0,0 +1,43 @@
+import type { MetadataRoute } from "next";
+
+/**
+ * Next.js native manifest route. Served at /manifest.webmanifest by
+ * the framework itself (not as a static file) so it bypasses Vercel's
+ * Deployment Protection on preview branches.
+ */
+export default function manifest(): MetadataRoute.Manifest {
+  return {
+    name: "MedOS — your medical assistant",
+    short_name: "MedOS",
+    description:
+      "Free AI medical assistant. 20 languages. No sign-up. Private.",
+    start_url: "/?source=pwa",
+    scope: "/",
+    display: "standalone",
+    orientation: "portrait-primary",
+    theme_color: "#3B82F6",
+    background_color: "#F7F9FB",
+    categories: ["health", "medical", "lifestyle"],
+    icons: [
+      {
+        src: "/favicon.svg",
+        sizes: "any",
+        type: "image/svg+xml",
+        purpose: "any",
+      },
+    ],
+    shortcuts: [
+      {
+        name: "Ask a health question",
+        short_name: "Ask",
+        url: "/?source=shortcut",
+      },
+      {
+        name: "Health Dashboard",
+        short_name: "Health",
+        url: "/?view=health-dashboard",
+      },
+    ],
+    prefer_related_applications: false,
+  };
+}
diff --git a/app/page.tsx b/app/page.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..a15fb43664705f71feff5f59546f6dc8c0a5d26c
--- /dev/null
+++ b/app/page.tsx
@@ -0,0 +1,2 @@
+import MedOSApp from "@/components/MedOSApp";
+export default function HomePage() { return <MedOSApp />; }
diff --git a/app/robots.ts b/app/robots.ts
new file mode 100644
index 0000000000000000000000000000000000000000..6a8696e568f7ad5c9256dc8b0e4a7cf6aa150fdb
--- /dev/null
+++ b/app/robots.ts
@@ -0,0 +1,23 @@
+import type { MetadataRoute } from 'next';
+
+const SITE_URL = 'https://ruslanmv-medibot.hf.space';
+
+/**
+ * Permissive robots.txt — we want every crawler to index the public
+ * pages (home, /symptoms, /stats). API routes are disallowed because
+ * they return dynamic or privacy-sensitive data (geo lookup, chat
+ * stream, session counter).
+ */
+export default function robots(): MetadataRoute.Robots {
+  return {
+    rules: [
+      {
+        userAgent: '*',
+        allow: ['/', '/symptoms', '/stats'],
+        disallow: ['/api/'],
+      },
+    ],
+    sitemap: `${SITE_URL}/sitemap.xml`,
+    host: SITE_URL,
+  };
+}
diff --git a/app/sitemap.ts b/app/sitemap.ts
new file mode 100644
index 0000000000000000000000000000000000000000..8e8d86ca2cbe1180d0062a0215c5239560964e16
--- /dev/null
+++ b/app/sitemap.ts
@@ -0,0 +1,27 @@
+import type { MetadataRoute } from 'next';
+import { getAllSymptomSlugs } from '@/lib/symptoms';
+
+const SITE_URL = 'https://ruslanmv-medibot.hf.space';
+
+/**
+ * Static sitemap auto-generated from the symptom catalog so Google picks
+ * up every SEO landing page on day one. Served at `/sitemap.xml` by Next.
+ */
+export default function sitemap(): MetadataRoute.Sitemap {
+  const now = new Date();
+
+  const staticPages: MetadataRoute.Sitemap = [
+    { url: SITE_URL,                  lastModified: now, changeFrequency: 'daily',  priority: 1.0 },
+    { url: `${SITE_URL}/symptoms`,    lastModified: now, changeFrequency: 'weekly', priority: 0.9 },
+    { url: `${SITE_URL}/stats`,       lastModified: now, changeFrequency: 'weekly', priority: 0.7 },
+  ];
+
+  const symptomPages: MetadataRoute.Sitemap = getAllSymptomSlugs().map((slug) => ({
+    url: `${SITE_URL}/symptoms/${slug}`,
+    lastModified: now,
+    changeFrequency: 'weekly',
+    priority: 0.8,
+  }));
+
+  return [...staticPages, ...symptomPages];
+}
diff --git a/app/stats/page.tsx b/app/stats/page.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..b4eaaa88fd70d75418ed0196ce6d8fac69a65cd5
--- /dev/null
+++ b/app/stats/page.tsx
@@ -0,0 +1,245 @@
+'use client';
+
+import { useEffect, useState } from 'react';
+import Link from 'next/link';
+import {
+  Activity,
+  Globe2,
+  ShieldCheck,
+  Clock4,
+  ArrowRight,
+  Languages,
+} from 'lucide-react';
+import { TrustBar } from '@/components/chat/TrustBar';
+
+interface SessionsResponse {
+  count: number;
+  sessions: number;
+  base: number;
+}
+
+const LANGUAGES = [
+  'English',
+  'Español',
+  'Français',
+  'Português',
+  'Italiano',
+  'Deutsch',
+  'العربية',
+  'हिन्दी',
+  'Kiswahili',
+  '中文',
+  '日本語',
+  '한국어',
+  'Русский',
+  'Türkçe',
+  'Tiếng Việt',
+  'ไทย',
+  'বাংলা',
+  'اردو',
+  'Polski',
+  'Nederlands',
+];
+
+/**
+ * Public transparency page. Shows the anonymous global session counter,
+ * supported languages, trust metrics, and the MedOS health-posture
+ * summary. Drives social proof ("N people helped this session") and is
+ * a natural link target from Product Hunt / Twitter / press.
+ *
+ * Server-rendered is tempting here, but we keep it client-side so the
+ * counter animates as it loads — tiny extra bundle, big UX win.
+ */
+export default function StatsPage() {
+  const [data, setData] = useState<SessionsResponse | null>(null);
+  const [loading, setLoading] = useState(true);
+  const [displayCount, setDisplayCount] = useState(0);
+
+  useEffect(() => {
+    let cancelled = false;
+    fetch('/api/sessions', { cache: 'no-store' })
+      .then((r) => (r.ok ? r.json() : null))
+      .then((d: SessionsResponse | null) => {
+        if (!cancelled && d) {
+          setData(d);
+          animateTo(d.count, setDisplayCount);
+        }
+      })
+      .catch(() => {})
+      .finally(() => !cancelled && setLoading(false));
+    return () => {
+      cancelled = true;
+    };
+  }, []);
+
+  return (
+    <main className="min-h-screen bg-slate-900 text-slate-100">
+      <div className="max-w-3xl mx-auto px-4 sm:px-6 py-10 pb-32">
+        <header className="mb-8 text-center">
+          <p className="text-xs font-bold uppercase tracking-[0.18em] text-teal-400 mb-2">
+            MedOS transparency
+          </p>
+          <h1 className="text-4xl sm:text-5xl font-bold text-slate-50 tracking-tight mb-3">
+            The numbers behind MedOS
+          </h1>
+          <p className="text-lg text-slate-300 max-w-xl mx-auto leading-relaxed">
+            Free health guidance, open numbers. No tracking of people —
+            only a single anonymous counter that ticks once per session.
+          </p>
+        </header>
+
+        {/* Hero counter */}
+        <section className="mb-10 rounded-3xl border border-teal-500/30 bg-gradient-to-br from-blue-900/30 to-teal-900/20 p-8 text-center">
+          <div className="inline-flex items-center gap-2 text-xs font-bold uppercase tracking-wider text-teal-300 bg-teal-500/10 border border-teal-500/30 px-3 py-1 rounded-full mb-4">
+            <Activity size={12} className="animate-pulse" />
+            Live session counter
+          </div>
+          <div className="text-6xl sm:text-7xl font-black text-slate-50 tracking-tight tabular-nums">
+            {loading ? (
+              <span className="text-slate-600">…</span>
+            ) : (
+              formatNumber(displayCount)
+            )}
+          </div>
+          <p className="text-sm text-slate-400 mt-3">
+            conversations MedOS has helped with, anonymously, since launch
+          </p>
+        </section>
+
+        {/* Cards grid */}
+        <section className="grid sm:grid-cols-2 gap-4 mb-10">
+          <StatCard
+            Icon={Globe2}
+            label="Countries supported"
+            value="190+"
+            description="Emergency numbers localized per region"
+          />
+          <StatCard
+            Icon={Languages}
+            label="Languages"
+            value="20"
+            description="Auto-detected from browser and IP"
+          />
+          <StatCard
+            Icon={ShieldCheck}
+            label="Privacy"
+            value="Zero PII"
+            description="No accounts, no IP logging, no conversation storage"
+          />
+          <StatCard
+            Icon={Clock4}
+            label="Availability"
+            value="24/7"
+            description="Free forever on HuggingFace Spaces"
+          />
+        </section>
+
+        {/* Languages strip */}
+        <section className="mb-10 rounded-2xl border border-slate-700/60 bg-slate-800/50 p-6">
+          <h2 className="text-sm font-bold uppercase tracking-wider text-slate-400 mb-4 inline-flex items-center gap-2">
+            <Languages size={14} />
+            Supported languages
+          </h2>
+          <div className="flex flex-wrap gap-2">
+            {LANGUAGES.map((l) => (
+              <span
+                key={l}
+                className="px-3 py-1.5 rounded-full text-sm font-medium text-slate-200 bg-slate-700/60 border border-slate-600/50"
+              >
+                {l}
+              </span>
+            ))}
+          </div>
+        </section>
+
+        {/* Trust bar */}
+        <section className="mb-10">
+          <TrustBar language="en" />
+        </section>
+
+        {/* CTA */}
+        <div className="rounded-2xl border border-teal-500/30 bg-gradient-to-br from-blue-900/40 to-teal-900/30 p-6 text-center">
+          <h2 className="text-2xl font-bold text-slate-50 mb-2 tracking-tight">
+            Ready to ask your own question?
+          </h2>
+          <p className="text-slate-300 mb-4">
+            Free. Private. In your language. No sign-up.
+          </p>
+          <Link
+            href="/"
+            className="inline-flex items-center gap-2 px-5 py-3 rounded-xl bg-gradient-to-br from-blue-500 to-teal-500 text-white font-bold hover:brightness-110 transition-all shadow-lg shadow-blue-500/30"
+          >
+            Open MedOS
+            <ArrowRight size={18} />
+          </Link>
+        </div>
+
+        {data && (
+          <p className="mt-6 text-center text-xs text-slate-500">
+            Counter is a single integer stored server-side at{' '}
+            <code className="text-slate-400">/api/sessions</code>. No
+            request is ever correlated to an individual.
+          </p>
+        )}
+      </div>
+    </main>
+  );
+}
+
+function StatCard({
+  Icon,
+  label,
+  value,
+  description,
+}: {
+  Icon: any;
+  label: string;
+  value: string;
+  description: string;
+}) {
+  return (
+    <div className="rounded-2xl border border-slate-700/60 bg-slate-800/50 p-5">
+      <div className="flex items-center gap-2 text-teal-400 mb-3">
+        <Icon size={16} />
+        <span className="text-xs font-bold uppercase tracking-wider">
+          {label}
+        </span>
+      </div>
+      <div className="text-3xl font-black text-slate-50 tracking-tight mb-1">
+        {value}
+      </div>
+      <p className="text-sm text-slate-400 leading-snug">{description}</p>
+    </div>
+  );
+}
+
+/** Format a number with locale-aware thousands separators. */
+function formatNumber(n: number): string {
+  try {
+    return new Intl.NumberFormat(undefined).format(n);
+  } catch {
+    return String(n);
+  }
+}
+
+/**
+ * Animate a counter from zero to `target` over ~1.2s using an ease-out
+ * curve. Runs synchronously inside `requestAnimationFrame` so it never
+ * blocks the main thread.
+ */
+function animateTo(target: number, setValue: (n: number) => void): void {
+  if (typeof window === 'undefined') {
+    setValue(target);
+    return;
+  }
+  const duration = 1200;
+  const start = performance.now();
+  const step = (t: number) => {
+    const elapsed = t - start;
+    const progress = Math.min(1, elapsed / duration);
+    const eased = 1 - Math.pow(1 - progress, 3); // cubic ease-out
+    setValue(Math.round(target * eased));
+    if (progress < 1) requestAnimationFrame(step);
+  };
+  requestAnimationFrame(step);
+}
diff --git a/app/symptoms/[slug]/page.tsx b/app/symptoms/[slug]/page.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..07181fe1cd3585e8f41766a9607f951b519d974b
--- /dev/null
+++ b/app/symptoms/[slug]/page.tsx
@@ -0,0 +1,237 @@
+import type { Metadata } from 'next';
+import { notFound } from 'next/navigation';
+import Link from 'next/link';
+import { AlertTriangle, ShieldCheck, ChevronLeft, ArrowRight } from 'lucide-react';
+import {
+  getSymptomBySlug,
+  getAllSymptomSlugs,
+  type Symptom,
+} from '@/lib/symptoms';
+
+const SITE_URL = 'https://ruslanmv-medibot.hf.space';
+
+interface Params {
+  params: { slug: string };
+}
+
+/**
+ * Pre-generate every symptom page at build time so they are fully static
+ * (and cacheable by HF Spaces' CDN / every downstream proxy).
+ */
+export function generateStaticParams() {
+  return getAllSymptomSlugs().map((slug) => ({ slug }));
+}
+
+export function generateMetadata({ params }: Params): Metadata {
+  const symptom = getSymptomBySlug(params.slug);
+  if (!symptom) return { title: 'Symptom not found — MedOS' };
+
+  const ogUrl = `${SITE_URL}/api/og?q=${encodeURIComponent(symptom.headline)}`;
+  const canonical = `${SITE_URL}/symptoms/${symptom.slug}`;
+
+  return {
+    title: symptom.title,
+    description: symptom.metaDescription,
+    alternates: { canonical },
+    openGraph: {
+      title: symptom.title,
+      description: symptom.metaDescription,
+      url: canonical,
+      siteName: 'MedOS',
+      type: 'article',
+      images: [{ url: ogUrl, width: 1200, height: 630, alt: symptom.headline }],
+    },
+    twitter: {
+      card: 'summary_large_image',
+      title: symptom.title,
+      description: symptom.metaDescription,
+      images: [ogUrl],
+    },
+  };
+}
+
+export default function SymptomPage({ params }: Params) {
+  const symptom = getSymptomBySlug(params.slug);
+  if (!symptom) return notFound();
+
+  // Per-page FAQPage JSON-LD so Google can mine each entry as a rich
+  // snippet independently from the root layout's global FAQPage.
+  const faqJsonLd = {
+    '@context': 'https://schema.org',
+    '@type': 'FAQPage',
+    mainEntity: symptom.faqs.map((f) => ({
+      '@type': 'Question',
+      name: f.q,
+      acceptedAnswer: { '@type': 'Answer', text: f.a },
+    })),
+  };
+
+  // MedicalCondition JSON-LD — helps Google classify the page for the
+  // Health Knowledge Graph.
+  const medicalConditionJsonLd = {
+    '@context': 'https://schema.org',
+    '@type': 'MedicalCondition',
+    name: symptom.headline,
+    description: symptom.summary,
+    signOrSymptom: symptom.redFlags.map((r) => ({
+      '@type': 'MedicalSymptom',
+      name: r,
+    })),
+    possibleTreatment: symptom.selfCare.map((s) => ({
+      '@type': 'MedicalTherapy',
+      name: s,
+    })),
+  };
+
+  const chatDeepLink = `/?q=${encodeURIComponent(
+    `I want to ask about ${symptom.headline.toLowerCase()}`,
+  )}`;
+
+  return (
+    <main className="min-h-screen bg-slate-900 text-slate-100">
+      <script
+        type="application/ld+json"
+        dangerouslySetInnerHTML={{ __html: JSON.stringify(faqJsonLd) }}
+      />
+      <script
+        type="application/ld+json"
+        dangerouslySetInnerHTML={{ __html: JSON.stringify(medicalConditionJsonLd) }}
+      />
+
+      <div className="max-w-3xl mx-auto px-4 sm:px-6 py-10 pb-32">
+        {/* Back link */}
+        <Link
+          href="/symptoms"
+          className="inline-flex items-center gap-1 text-sm text-slate-400 hover:text-teal-300 transition-colors mb-6"
+        >
+          <ChevronLeft size={16} />
+          All symptoms
+        </Link>
+
+        {/* Hero */}
+        <header className="mb-8">
+          <p className="text-xs font-bold uppercase tracking-[0.18em] text-teal-400 mb-2">
+            Symptom guide
+          </p>
+          <h1 className="text-4xl sm:text-5xl font-bold text-slate-50 tracking-tight mb-4">
+            {symptom.headline}
+          </h1>
+          <p className="text-lg text-slate-300 leading-relaxed">
+            {symptom.summary}
+          </p>
+          <div className="mt-6 inline-flex items-center gap-1.5 text-xs text-teal-300 bg-teal-500/10 border border-teal-500/30 px-3 py-1.5 rounded-full font-semibold">
+            <ShieldCheck size={12} />
+            Aligned with WHO · CDC · NHS guidance
+          </div>
+        </header>
+
+        {/* Red flags — first, highest visual priority */}
+        <Section title="When to seek emergency care" danger>
+          <ul className="space-y-2">
+            {symptom.redFlags.map((r) => (
+              <li key={r} className="flex items-start gap-2 text-slate-200">
+                <AlertTriangle
+                  size={16}
+                  className="flex-shrink-0 text-red-400 mt-0.5"
+                />
+                <span>{r}</span>
+              </li>
+            ))}
+          </ul>
+        </Section>
+
+        <Section title="Safe self-care at home">
+          <ul className="space-y-2">
+            {symptom.selfCare.map((s) => (
+              <li key={s} className="flex items-start gap-2 text-slate-200">
+                <span className="mt-1.5 w-1.5 h-1.5 rounded-full bg-teal-400 flex-shrink-0" />
+                <span>{s}</span>
+              </li>
+            ))}
+          </ul>
+        </Section>
+
+        <Section title="When to see a clinician">
+          <ul className="space-y-2">
+            {symptom.whenToSeekCare.map((w) => (
+              <li key={w} className="flex items-start gap-2 text-slate-200">
+                <span className="mt-1.5 w-1.5 h-1.5 rounded-full bg-blue-400 flex-shrink-0" />
+                <span>{w}</span>
+              </li>
+            ))}
+          </ul>
+        </Section>
+
+        {/* FAQ — also rendered for humans, not just search engines */}
+        <Section title="Frequently asked questions">
+          <div className="space-y-5">
+            {symptom.faqs.map((f) => (
+              <div key={f.q}>
+                <h3 className="font-bold text-slate-100 mb-1">{f.q}</h3>
+                <p className="text-slate-300 leading-relaxed">{f.a}</p>
+              </div>
+            ))}
+          </div>
+        </Section>
+
+        {/* Primary CTA into the live chatbot */}
+        <div className="mt-10 rounded-2xl border border-teal-500/30 bg-gradient-to-br from-blue-900/40 to-teal-900/30 p-6">
+          <p className="text-xs font-bold uppercase tracking-wider text-teal-400 mb-2">
+            Ask the live assistant
+          </p>
+          <h2 className="text-2xl font-bold text-slate-50 mb-2 tracking-tight">
+            Get a personalized answer in your language.
+          </h2>
+          <p className="text-slate-300 mb-4 leading-relaxed">
+            MedOS is free, private, and takes no account. Describe your
+            situation and get step-by-step guidance.
+          </p>
+          <Link
+            href={chatDeepLink}
+            className="inline-flex items-center gap-2 px-5 py-3 rounded-xl bg-gradient-to-br from-blue-500 to-teal-500 text-white font-bold hover:brightness-110 transition-all shadow-lg shadow-blue-500/30"
+          >
+            Ask about {symptom.headline.toLowerCase()}
+            <ArrowRight size={18} />
+          </Link>
+        </div>
+
+        <p className="mt-8 text-xs text-slate-500 leading-relaxed">
+          This page is general patient education aligned with WHO, CDC, and
+          NHS public guidance. It is not a diagnosis, prescription, or
+          substitute for care from a licensed clinician. If symptoms are
+          severe, worsening, or you are in doubt, contact a healthcare
+          provider or your local emergency number immediately.
+        </p>
+      </div>
+    </main>
+  );
+}
+
+function Section({
+  title,
+  danger,
+  children,
+}: {
+  title: string;
+  danger?: boolean;
+  children: React.ReactNode;
+}) {
+  return (
+    <section
+      className={`mt-8 rounded-2xl border p-5 ${
+        danger
+          ? 'border-red-500/40 bg-red-950/30'
+          : 'border-slate-700/60 bg-slate-800/40'
+      }`}
+    >
+      <h2
+        className={`text-lg font-bold mb-3 tracking-tight ${
+          danger ? 'text-red-300' : 'text-slate-100'
+        }`}
+      >
+        {title}
+      </h2>
+      {children}
+    </section>
+  );
+}
diff --git a/app/symptoms/page.tsx b/app/symptoms/page.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..7d71b564abbe482c1c5a20a6c83659841a7e5ac0
--- /dev/null
+++ b/app/symptoms/page.tsx
@@ -0,0 +1,86 @@
+import type { Metadata } from 'next';
+import Link from 'next/link';
+import { ChevronRight, ShieldCheck } from 'lucide-react';
+import { SYMPTOMS } from '@/lib/symptoms';
+
+const SITE_URL = 'https://ruslanmv-medibot.hf.space';
+
+export const metadata: Metadata = {
+  title: 'Symptom guides — free, WHO-aligned | MedOS',
+  description:
+    'Browse evidence-based symptom guides: causes, safe self-care, red flags, and when to seek care. Free, multilingual, and aligned with WHO, CDC, and NHS.',
+  alternates: { canonical: `${SITE_URL}/symptoms` },
+  openGraph: {
+    title: 'Symptom guides — free, WHO-aligned | MedOS',
+    description:
+      'Browse evidence-based symptom guides: causes, safe self-care, red flags, and when to seek care.',
+    url: `${SITE_URL}/symptoms`,
+    images: [`${SITE_URL}/api/og?q=${encodeURIComponent('Symptom guides')}`],
+  },
+};
+
+/**
+ * Symptom catalog index. Static, cacheable, zero JS-on-load cost.
+ * Works as a landing hub from organic search queries like
+ * "medos symptoms" or "symptom checker".
+ */
+export default function SymptomsIndexPage() {
+  return (
+    <main className="min-h-screen bg-slate-900 text-slate-100">
+      <div className="max-w-3xl mx-auto px-4 sm:px-6 py-10 pb-32">
+        <header className="mb-8 text-center">
+          <p className="text-xs font-bold uppercase tracking-[0.18em] text-teal-400 mb-2">
+            Free patient guides
+          </p>
+          <h1 className="text-4xl sm:text-5xl font-bold text-slate-50 tracking-tight mb-3">
+            Symptom guides
+          </h1>
+          <p className="text-lg text-slate-300 max-w-xl mx-auto leading-relaxed">
+            Clear, trustworthy answers to the most common health
+            questions. Free, multilingual, and aligned with WHO, CDC,
+            and NHS guidance.
+          </p>
+          <div className="mt-5 inline-flex items-center gap-1.5 text-xs text-teal-300 bg-teal-500/10 border border-teal-500/30 px-3 py-1.5 rounded-full font-semibold">
+            <ShieldCheck size={12} />
+            Reviewed against WHO · CDC · NHS public guidance
+          </div>
+        </header>
+
+        <div className="grid sm:grid-cols-2 gap-3">
+          {SYMPTOMS.map((s) => (
+            <Link
+              key={s.slug}
+              href={`/symptoms/${s.slug}`}
+              className="group p-5 rounded-2xl border border-slate-700/60 bg-slate-800/60 hover:border-teal-500/50 hover:bg-teal-500/5 transition-all"
+            >
+              <div className="flex items-start justify-between gap-3">
+                <div className="flex-1 min-w-0">
+                  <h2 className="font-bold text-slate-100 text-lg mb-1 tracking-tight">
+                    {s.headline}
+                  </h2>
+                  <p className="text-sm text-slate-400 leading-relaxed line-clamp-2">
+                    {s.summary}
+                  </p>
+                </div>
+                <ChevronRight
+                  size={18}
+                  className="flex-shrink-0 text-slate-500 group-hover:text-teal-400 transition-colors mt-1"
+                />
+              </div>
+            </Link>
+          ))}
+        </div>
+
+        <div className="mt-10 text-center">
+          <Link
+            href="/"
+            className="inline-flex items-center gap-2 px-5 py-3 rounded-xl bg-gradient-to-br from-blue-500 to-teal-500 text-white font-bold hover:brightness-110 transition-all shadow-lg shadow-blue-500/30"
+          >
+            Open the live MedOS assistant
+            <ChevronRight size={18} />
+          </Link>
+        </div>
+      </div>
+    </main>
+  );
+}
diff --git a/components/MedOSApp.tsx b/components/MedOSApp.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..46baf7d21bb7b5c23abd9ad4b5d5b9de1f08028e
--- /dev/null
+++ b/components/MedOSApp.tsx
@@ -0,0 +1,591 @@
+"use client";
+
+import { useState, useCallback, useEffect, useRef } from "react";
+import { Heart, Menu } from "lucide-react";
+import { useGeoDetect } from "@/lib/hooks/useGeoDetect";
+import { ThemeProvider } from "./ThemeProvider";
+import { ThemeToggle } from "./ThemeToggle";
+import { Sidebar, NavView } from "./chat/Sidebar";
+import { AppDrawer } from "./chat/AppDrawer";
+import { RightPanel } from "./chat/RightPanel";
+import { NotificationBell } from "./chat/NotificationCenter";
+import { ChatView } from "./views/ChatView";
+import { HomeView } from "./views/HomeView";
+import { EmergencyView } from "./views/EmergencyView";
+import { TopicsView } from "./views/TopicsView";
+import { SettingsView } from "./views/SettingsView";
+import { RecordsView } from "./views/RecordsView";
+import { HistoryView } from "./views/HistoryView";
+import { MedicationsView } from "./views/MedicationsView";
+import { AppointmentsView } from "./views/AppointmentsView";
+import { VitalsView } from "./views/VitalsView";
+import { HealthDashboard } from "./views/HealthDashboard";
+import { ScheduleView } from "./views/ScheduleView";
+import { WelcomeScreen } from "./WelcomeScreen";
+import { useSettings } from "@/lib/hooks/useSettings";
+import { useChat } from "@/lib/hooks/useChat";
+import { useHealthStore } from "@/lib/hooks/useHealthStore";
+import { useNotifications } from "@/lib/hooks/useNotifications";
+import { useAuth } from "@/lib/hooks/useAuth";
+import { usePasswordResetLink } from "@/lib/hooks/usePasswordResetLink";
+import { LoginView } from "./views/LoginView";
+import { ProfileView } from "./views/ProfileView";
+import { EHRWizard } from "./views/EHRWizard";
+import { MyMedicinesView } from "./views/MyMedicinesView";
+import { ShareView } from "./views/ShareView";
+import { AdminView } from "./views/AdminView";
+import { NearbyView } from "./views/NearbyView";
+import { ContactsView } from "./views/ContactsView";
+import { DisclaimerBanner } from "./ui/DisclaimerBanner";
+import { OfflineBanner } from "./ui/OfflineBanner";
+import { InstallPrompt } from "./ui/InstallPrompt";
+import { buildPatientContext, buildContactsContext, todayISO } from "@/lib/health-store";
+import { t, type SupportedLanguage } from "@/lib/i18n";
+
+export default function MedOSApp() {
+  return (
+    <ThemeProvider>
+      <MedOSAppInner />
+    </ThemeProvider>
+  );
+}
+
+function MedOSAppInner() {
+  const [activeNav, setActiveNav] = useState<NavView>("home");
+  const [drawerOpen, setDrawerOpen] = useState(false);
+  const settings = useSettings();
+  const auth = useAuth();
+  const resetLink = usePasswordResetLink();
+
+  // When the user lands here from a password-reset email, drop them on
+  // the login screen with the reset step pre-filled. Done once on mount;
+  // the hook itself clears the params from the URL so it won't re-fire.
+  useEffect(() => {
+    if (resetLink) setActiveNav("login");
+  }, [resetLink]);
+  const { messages, isTyping, error, sendMessage, clearMessages } = useChat();
+  const health = useHealthStore(auth.token);
+  const notif = useNotifications();
+
+  // IP-based auto-detection. Only applies if the user hasn't manually
+  // chosen a language yet; the manual override in Settings wins forever.
+  const onGeo = useCallback(
+    (g: { country: string; language: any; emergencyNumber: string }) => {
+      settings.applyGeo(g);
+    },
+    [settings],
+  );
+  useGeoDetect({
+    skip: !settings.isLoaded || settings.explicitLanguage,
+    onResult: onGeo,
+  });
+
+  const handleSendMessage = (content: string) => {
+    sendMessage(content, {
+      preset: settings.advancedMode ? undefined : settings.preset,
+      provider: settings.advancedMode ? settings.provider : undefined,
+      // In advanced mode we let the server default the model; the
+      // dedicated provider files pick their own canonical model.
+      apiKey: settings.apiKey,
+      userHfToken: settings.hfToken || undefined,
+      context: {
+        country: settings.country,
+        language: settings.language,
+        emergencyNumber: settings.emergencyNumber,
+      },
+    });
+    // Auto-navigate to chat when sending a message from home/topics
+    if (activeNav !== "chat") {
+      setActiveNav("chat");
+    }
+  };
+
+  const handleStartVoice = () => {
+    setActiveNav("chat");
+    // Voice will auto-start via the ChatView component
+  };
+
+  const handleWelcomeComplete = (lang: SupportedLanguage, country: string) => {
+    // Welcome completion is an explicit user choice — lock it in so
+    // subsequent IP auto-detection never overrides it.
+    settings.setLanguageExplicit(lang);
+    settings.setCountryExplicit(country);
+    settings.setWelcomeCompleted(true);
+  };
+
+  // Auto-save the current chat session to history when navigating away
+  // from the chat view, or when the AI finishes responding and there are
+  // enough messages to be worth saving.
+  const lastSavedCount = useRef(0);
+  useEffect(() => {
+    const userMsgs = messages.filter((m) => m.role === "user");
+    if (
+      userMsgs.length > 0 &&
+      messages.length >= 3 &&
+      messages.length !== lastSavedCount.current &&
+      !isTyping
+    ) {
+      lastSavedCount.current = messages.length;
+      health.saveSession({
+        date: new Date().toISOString(),
+        preview: userMsgs[0].content.slice(0, 120),
+        messageCount: messages.length,
+        topic: undefined,
+      });
+    }
+  }, [messages.length, isTyping]); // eslint-disable-line react-hooks/exhaustive-deps
+
+  const handleNavigate = (view: string) => {
+    setActiveNav(view as NavView);
+  };
+
+  // Sync language and direction to HTML element for i18n + RTL
+  useEffect(() => {
+    const doc = document.documentElement;
+    doc.lang = settings.language;
+    doc.dir = settings.language === "ar" || settings.language === "ur" ? "rtl" : "ltr";
+  }, [settings.language]);
+
+  // Text size class
+  const textSizeClass =
+    settings.textSize === "large"
+      ? "text-lg"
+      : settings.textSize === "small"
+      ? "text-sm"
+      : "text-base";
+
+  const renderContent = () => {
+    switch (activeNav) {
+      case "home":
+        return (
+          <HomeView
+            language={settings.language}
+            country={settings.country}
+            emergencyNumber={settings.emergencyNumber}
+            onNavigate={handleNavigate}
+            onSendMessage={handleSendMessage}
+            onStartVoice={handleStartVoice}
+          />
+        );
+      case "emergency":
+        return (
+          <EmergencyView
+            language={settings.language}
+            emergencyNumber={settings.emergencyNumber}
+          />
+        );
+      case "topics":
+        return (
+          <TopicsView
+            language={settings.language}
+            onSelectTopic={(topic) => handleSendMessage(`Tell me about ${topic}`)}
+          />
+        );
+      case "settings":
+        return (
+          <SettingsView
+            preset={settings.preset}
+            setPreset={settings.setPreset}
+            hfToken={settings.hfToken}
+            setHfToken={settings.setHfToken}
+            clearHfToken={settings.clearHfToken}
+            provider={settings.provider}
+            setProvider={settings.setProvider}
+            apiKey={settings.apiKey}
+            setApiKey={settings.setApiKey}
+            clearApiKey={settings.clearApiKey}
+            advancedMode={settings.advancedMode}
+            setAdvancedMode={settings.setAdvancedMode}
+            language={settings.language}
+            setLanguage={settings.setLanguageExplicit}
+            country={settings.country}
+            setCountry={settings.setCountryExplicit}
+            voiceEnabled={settings.voiceEnabled}
+            setVoiceEnabled={settings.setVoiceEnabled}
+            readAloud={settings.readAloud}
+            setReadAloud={settings.setReadAloud}
+            textSize={settings.textSize}
+            setTextSize={settings.setTextSize}
+            simpleLanguage={settings.simpleLanguage}
+            setSimpleLanguage={settings.setSimpleLanguage}
+            darkMode={settings.darkMode}
+            setDarkMode={settings.setDarkMode}
+            emergencyNumber={settings.emergencyNumber}
+          />
+        );
+      case "schedule":
+        return (
+          <ScheduleView
+            medications={health.medications}
+            medicationLogs={health.medicationLogs}
+            appointments={health.appointments}
+            onMarkMedTaken={health.markMedTaken}
+            isMedTaken={health.isMedTaken}
+            onEditAppointment={health.editAppointment}
+            onNavigate={handleNavigate}
+            language={settings.language}
+          />
+        );
+      case "health-dashboard":
+        return (
+          <HealthDashboard
+            medications={health.medications}
+            medicationLogs={health.medicationLogs}
+            appointments={health.appointments}
+            vitals={health.vitals}
+            records={health.records}
+            onNavigate={handleNavigate}
+            onMarkMedTaken={health.markMedTaken}
+            isMedTaken={health.isMedTaken}
+            getMedStreak={health.getMedStreak}
+            onExport={health.downloadAll}
+            language={settings.language}
+            isAuthenticated={auth.isAuthenticated}
+          />
+        );
+      case "medications":
+        return (
+          <MedicationsView
+            medications={health.medications}
+            onAdd={health.addMedication}
+            onEdit={health.editMedication}
+            onDelete={health.deleteMedication}
+            onMarkTaken={health.markMedTaken}
+            isTaken={health.isMedTaken}
+            getStreak={health.getMedStreak}
+            language={settings.language}
+          />
+        );
+      case "appointments":
+        return (
+          <AppointmentsView
+            appointments={health.appointments}
+            onAdd={health.addAppointment}
+            onEdit={health.editAppointment}
+            onDelete={health.deleteAppointment}
+            language={settings.language}
+          />
+        );
+      case "vitals":
+        return (
+          <VitalsView
+            vitals={health.vitals}
+            onAdd={health.addVital}
+            onDelete={health.deleteVital}
+            language={settings.language}
+          />
+        );
+      case "records":
+        return (
+          <RecordsView
+            records={health.records}
+            onAdd={health.addRecord}
+            onEdit={health.editRecord}
+            onDelete={health.deleteRecord}
+            onExport={health.downloadAll}
+            language={settings.language}
+          />
+        );
+      case "my-medicines":
+        return (
+          <MyMedicinesView
+            medicines={health.medicines}
+            onAdd={health.addMedicine}
+            onUpdate={health.editMedicine}
+            onDelete={health.deleteMedicine}
+            onAddToSchedule={(med) => {
+              // Add to the medication schedule tracker
+              health.addMedication({
+                name: med.name,
+                dose: med.dose,
+                frequency: "daily",
+                times: ["08:00"],
+                startDate: todayISO(),
+                active: true,
+              });
+              setActiveNav("medications");
+            }}
+            language={settings.language}
+          />
+        );
+      case "nearby":
+        return (
+          <NearbyView
+            language={settings.language}
+            onSaveContact={(c) => health.addContact(c)}
+          />
+        );
+      case "contacts":
+        return (
+          <ContactsView
+            contacts={health.contacts}
+            onAdd={health.addContact}
+            onUpdate={health.editContact}
+            onDelete={health.deleteContact}
+            onNavigate={handleNavigate}
+            language={settings.language}
+          />
+        );
+      case "share":
+        return <ShareView language={settings.language} />;
+      case "admin":
+        return auth.user?.isAdmin ? (
+          <AdminView language={settings.language} token={auth.token} />
+        ) : (
+          <HomeView
+            language={settings.language}
+            country={settings.country}
+            emergencyNumber={settings.emergencyNumber}
+            onNavigate={handleNavigate}
+            onSendMessage={handleSendMessage}
+            onStartVoice={handleStartVoice}
+          />
+        );
+      case "history":
+        return (
+          <HistoryView
+            history={health.history}
+            onDelete={health.deleteSession}
+            onClearAll={health.clearAllHistory}
+            onReplay={(preview) => handleSendMessage(preview)}
+            language={settings.language}
+          />
+        );
+      case "login":
+        return (
+          <LoginView
+            onLogin={async (e, p) => {
+              const res = await auth.login(e, p);
+              if (res.ok) setActiveNav("home");
+              return res;
+            }}
+            onRegister={async (e, p, o) => {
+              const res = await auth.register(e, p, o);
+              if (res.ok && !res.needsVerification) setActiveNav("home");
+              return res;
+            }}
+            onVerifyEmail={async (code) => {
+              const res = await auth.verifyEmail(code);
+              if (res.ok) setActiveNav("home");
+              return res;
+            }}
+            onResendVerification={auth.resendVerification}
+            onForgotPassword={auth.forgotPassword}
+            onResetPassword={async (e, c, p) => {
+              const res = await auth.resetPassword(e, c, p);
+              if (res.ok) setActiveNav("home");
+              return res;
+            }}
+            language={settings.language}
+            initialFlow={resetLink ? "reset" : "login"}
+            initialEmail={resetLink?.email}
+            initialCode={resetLink?.code}
+          />
+        );
+      case "ehr-wizard":
+        return (
+          <EHRWizard
+            onComplete={() => setActiveNav("profile")}
+            onCancel={() => setActiveNav("home")}
+            language={settings.language}
+          />
+        );
+      case "profile":
+        return auth.user ? (
+          <ProfileView
+            user={auth.user}
+            onLogout={() => {
+              auth.logout();
+              setActiveNav("home");
+            }}
+            onExport={health.downloadAll}
+            onOpenEHR={() => setActiveNav("ehr-wizard")}
+            onDeleteAccount={async (password, confirmEmail) => {
+              const res = await auth.deleteMe(password, confirmEmail);
+              if (res.ok) {
+                // Server already invalidated the session; useAuth wiped
+                // local token + user. Send the user back to home.
+                setActiveNav("home");
+              }
+              return res;
+            }}
+            medicationCount={health.medications.length}
+            appointmentCount={health.appointments.length}
+            vitalCount={health.vitals.length}
+            recordCount={health.records.length}
+            language={settings.language}
+          />
+        ) : (
+          <LoginView
+            onLogin={async (e, p) => {
+              const res = await auth.login(e, p);
+              if (res.ok) setActiveNav("profile");
+              return res;
+            }}
+            onRegister={async (e, p, o) => {
+              const res = await auth.register(e, p, o);
+              if (res.ok && !res.needsVerification) setActiveNav("profile");
+              return res;
+            }}
+            onVerifyEmail={auth.verifyEmail}
+            onResendVerification={auth.resendVerification}
+            onForgotPassword={auth.forgotPassword}
+            onResetPassword={auth.resetPassword}
+            language={settings.language}
+          />
+        );
+      default:
+        return (
+          <ChatView
+            messages={messages}
+            isTyping={isTyping}
+            onSendMessage={handleSendMessage}
+            language={settings.language}
+            emergencyNumber={settings.emergencyNumber}
+            voiceEnabled={settings.voiceEnabled}
+            readAloud={settings.readAloud}
+            onNavigateEmergency={() => setActiveNav("emergency")}
+          />
+        );
+    }
+  };
+
+  // Loading state
+  if (!settings.isLoaded) {
+    return (
+      <div className="flex h-screen w-full items-center justify-center bg-surface-0">
+        <div className="text-center">
+          <div className="w-12 h-12 mx-auto mb-4 rounded-2xl bg-brand-gradient flex items-center justify-center animate-pulse shadow-glow">
+            <Heart size={24} className="text-white" />
+          </div>
+          <p className="text-ink-muted font-medium">{t("loading", settings.language)}</p>
+        </div>
+      </div>
+    );
+  }
+
+  // Welcome screen for first-time users
+  if (!settings.welcomeCompleted) {
+    return (
+      <WelcomeScreen
+        detectedLanguage={settings.language}
+        detectedCountry={settings.country}
+        onComplete={handleWelcomeComplete}
+      />
+    );
+  }
+
+  const hasActiveChat = messages.length > 1;
+
+  return (
+    <div
+      className={`relative flex flex-col h-screen-safe w-full font-sans text-ink-base ${textSizeClass}`}
+    >
+      <OfflineBanner />
+      <InstallPrompt />
+
+      {/* Mobile drawer navigation */}
+      <AppDrawer
+        open={drawerOpen}
+        onClose={() => setDrawerOpen(false)}
+        activeKey={activeNav}
+        onNavigate={(key) => setActiveNav(key as NavView)}
+        onNewChat={() => { clearMessages(); setActiveNav("home"); }}
+        isAuthenticated={auth.isAuthenticated}
+        isAdmin={auth.user?.isAdmin}
+        username={auth.user?.displayName || auth.user?.email}
+        onLogout={() => { auth.logout(); setActiveNav("home"); }}
+        language={settings.language}
+      />
+
+      <div className="flex flex-1 overflow-hidden">
+      {/* Sidebar */}
+      <Sidebar
+        activeNav={activeNav}
+        setActiveNav={setActiveNav}
+        language={settings.language}
+        advancedMode={settings.advancedMode}
+        isAuthenticated={auth.isAuthenticated}
+        isAdmin={auth.user?.isAdmin}
+        username={auth.user?.displayName || auth.user?.email}
+        onLogout={() => { auth.logout(); setActiveNav("home"); }}
+      />
+
+      {/* Main Content */}
+      <div className="flex-1 flex flex-col relative overflow-hidden">
+        {/* Top Header — clean, mobile-first, always accessible */}
+        <header className="h-14 sm:h-16 bg-surface-1/90 backdrop-blur-xl border-b border-line/50 flex items-center justify-between px-3 sm:px-8 sticky top-0 z-20">
+          {/* Mobile: hamburger menu + logo */}
+          <div className="flex items-center gap-2 md:hidden">
+            <button
+              onClick={() => setDrawerOpen(true)}
+              className="w-10 h-10 rounded-xl flex items-center justify-center text-ink-base hover:bg-surface-2 transition-all active:scale-95"
+              aria-label="Open menu"
+            >
+              <Menu size={20} />
+            </button>
+            <div className="flex items-center gap-2">
+              <div className="w-7 h-7 rounded-lg bg-brand-gradient flex items-center justify-center text-white">
+                <Heart size={12} />
+              </div>
+              <span className="font-bold text-ink-base tracking-tight text-sm">MedOS</span>
+            </div>
+          </div>
+
+          <h2 className="hidden md:block font-bold text-lg text-ink-base tracking-tight">
+            {activeNav === "home"
+              ? t("nav_home", settings.language)
+              : activeNav === "chat"
+              ? t("nav_ask", settings.language)
+              : activeNav === "emergency"
+              ? t("nav_emergency", settings.language)
+              : activeNav === "topics"
+              ? t("nav_topics", settings.language)
+              : activeNav === "settings"
+              ? t("nav_settings", settings.language)
+              : activeNav}
+          </h2>
+
+          <div className="flex items-center gap-2 sm:gap-3">
+            <NotificationBell
+              notifications={notif.notifications}
+              count={notif.count}
+              onDismiss={notif.dismiss}
+              onDismissAll={notif.dismissAll}
+            />
+            <ThemeToggle />
+          </div>
+        </header>
+
+        {/* Dynamic Content Area */}
+        <main className="flex-1 flex relative overflow-hidden">
+          <div className="flex-1 flex flex-col relative">{renderContent()}</div>
+        </main>
+      </div>
+
+      {/* Right Panel — only rendered for authenticated users.
+       *
+       * The right rail carries personal health context (Vitals Today,
+       * Upcoming meds + appointments). For guests it offered no value
+       * and competed with the left sidebar's auth card. Gating the
+       * whole component eliminates the 'two sidebars feeling' and the
+       * duplicate sign-up prompts. */}
+      {auth.isAuthenticated && (
+        <RightPanel
+          language={settings.language}
+          emergencyNumber={settings.emergencyNumber}
+          vitals={health.vitals}
+          medications={health.medications}
+          appointments={health.appointments}
+          isMedTaken={health.isMedTaken}
+          onNavigate={handleNavigate}
+          isAuthenticated
+          notificationCount={notif.count}
+          onOpenNotifications={() => {}}
+        />
+      )}
+      </div>
+      <DisclaimerBanner language={settings.language} />
+    </div>
+  );
+}
diff --git a/components/ThemeProvider.tsx b/components/ThemeProvider.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..2c1e2d38c06a500a24530b2f1fe3b56fb3d92654
--- /dev/null
+++ b/components/ThemeProvider.tsx
@@ -0,0 +1,76 @@
+"use client";
+
+import {
+  createContext,
+  useCallback,
+  useContext,
+  useEffect,
+  useState,
+} from "react";
+
+export type ThemeMode = "light" | "dark" | "system";
+
+type Ctx = {
+  theme: ThemeMode;
+  resolved: "light" | "dark";
+  setTheme: (t: ThemeMode) => void;
+};
+
+const ThemeCtx = createContext<Ctx | null>(null);
+
+function systemPrefersDark(): boolean {
+  if (typeof window === "undefined") return false;
+  return window.matchMedia("(prefers-color-scheme: dark)").matches;
+}
+
+function applyDomClass(dark: boolean) {
+  const root = document.documentElement;
+  root.classList.toggle("dark", dark);
+  root.style.colorScheme = dark ? "dark" : "light";
+}
+
+export function ThemeProvider({ children }: { children: React.ReactNode }) {
+  const [theme, setThemeState] = useState<ThemeMode>("system");
+  const [resolved, setResolved] = useState<"light" | "dark">("light");
+
+  // Hydrate from localStorage on mount.
+  useEffect(() => {
+    const stored = (localStorage.getItem("medos_theme") as ThemeMode | null) ?? "light";
+    setThemeState(stored);
+    const dark = stored === "dark" || (stored === "system" && systemPrefersDark());
+    setResolved(dark ? "dark" : "light");
+    applyDomClass(dark);
+  }, []);
+
+  // React to OS changes while in "system" mode.
+  useEffect(() => {
+    if (theme !== "system") return;
+    const mq = window.matchMedia("(prefers-color-scheme: dark)");
+    const listener = (e: MediaQueryListEvent) => {
+      setResolved(e.matches ? "dark" : "light");
+      applyDomClass(e.matches);
+    };
+    mq.addEventListener("change", listener);
+    return () => mq.removeEventListener("change", listener);
+  }, [theme]);
+
+  const setTheme = useCallback((t: ThemeMode) => {
+    setThemeState(t);
+    localStorage.setItem("medos_theme", t);
+    const dark = t === "dark" || (t === "system" && systemPrefersDark());
+    setResolved(dark ? "dark" : "light");
+    applyDomClass(dark);
+  }, []);
+
+  return (
+    <ThemeCtx.Provider value={{ theme, resolved, setTheme }}>
+      {children}
+    </ThemeCtx.Provider>
+  );
+}
+
+export function useTheme(): Ctx {
+  const v = useContext(ThemeCtx);
+  if (!v) throw new Error("useTheme must be used inside <ThemeProvider>");
+  return v;
+}
diff --git a/components/ThemeToggle.tsx b/components/ThemeToggle.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..3881dadb464e49b99f287ebe751f3cdfea399d47
--- /dev/null
+++ b/components/ThemeToggle.tsx
@@ -0,0 +1,41 @@
+"use client";
+
+import { Sun, Moon, Monitor } from "lucide-react";
+import { useTheme, type ThemeMode } from "./ThemeProvider";
+
+const OPTIONS: { id: ThemeMode; label: string; Icon: typeof Sun }[] = [
+  { id: "light",  label: "Light",  Icon: Sun },
+  { id: "dark",   label: "Dark",   Icon: Moon },
+  { id: "system", label: "Auto",   Icon: Monitor },
+];
+
+export function ThemeToggle() {
+  const { theme, setTheme } = useTheme();
+  return (
+    <div
+      role="radiogroup"
+      aria-label="Theme"
+      className="inline-flex items-center gap-0.5 rounded-full p-0.5 bg-surface-2/70 border border-line/60 backdrop-blur"
+    >
+      {OPTIONS.map(({ id, label, Icon }) => {
+        const active = theme === id;
+        return (
+          <button
+            key={id}
+            role="radio"
+            aria-checked={active}
+            title={label}
+            onClick={() => setTheme(id)}
+            className={`flex items-center justify-center h-7 w-7 rounded-full transition-all ${
+              active
+                ? "bg-surface-1 text-brand-600 shadow-soft"
+                : "text-ink-muted hover:text-ink-base"
+            }`}
+          >
+            <Icon size={14} strokeWidth={2.25} />
+          </button>
+        );
+      })}
+    </div>
+  );
+}
diff --git a/components/WelcomeScreen.tsx b/components/WelcomeScreen.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..4556624448a404f00036cda3e031dcfc78f7dcb9
--- /dev/null
+++ b/components/WelcomeScreen.tsx
@@ -0,0 +1,177 @@
+"use client";
+
+import { useState } from "react";
+import { Globe, MapPin, ChevronRight, Shield, Heart } from "lucide-react";
+import {
+  t,
+  LANGUAGE_NAMES,
+  getCountryName,
+  getEmergencyNumber,
+  type SupportedLanguage,
+} from "@/lib/i18n";
+
+interface WelcomeScreenProps {
+  detectedLanguage: SupportedLanguage;
+  detectedCountry: string;
+  onComplete: (language: SupportedLanguage, country: string) => void;
+}
+
+export function WelcomeScreen({
+  detectedLanguage,
+  detectedCountry,
+  onComplete,
+}: WelcomeScreenProps) {
+  const [step, setStep] = useState<"detected" | "language" | "region">("detected");
+  const [selectedLang, setSelectedLang] = useState(detectedLanguage);
+  const [selectedCountry, setSelectedCountry] = useState(detectedCountry);
+
+  const lang = selectedLang;
+
+  if (step === "language") {
+    return (
+      <div className="min-h-screen bg-white flex flex-col items-center justify-center p-6">
+        <h2 className="text-2xl font-bold text-slate-800 mb-8">
+          {t("choose_language", lang)}
+        </h2>
+        <div className="grid grid-cols-2 sm:grid-cols-3 gap-3 max-w-lg w-full">
+          {(Object.entries(LANGUAGE_NAMES) as [SupportedLanguage, string][]).map(
+            ([code, name]) => (
+              <button
+                key={code}
+                onClick={() => {
+                  setSelectedLang(code);
+                  setStep("detected");
+                }}
+                className={`p-4 rounded-2xl border-2 text-center font-semibold transition-all ${
+                  selectedLang === code
+                    ? "border-blue-500 bg-blue-50 text-blue-700"
+                    : "border-slate-200 bg-white text-slate-700 hover:border-blue-200 hover:bg-blue-50/50"
+                }`}
+              >
+                <span className="text-lg block">{name}</span>
+              </button>
+            )
+          )}
+        </div>
+      </div>
+    );
+  }
+
+  if (step === "region") {
+    const countries = [
+      "US", "CA", "GB", "AU", "NZ", "IT", "DE", "FR", "ES", "PT", "NL", "PL",
+      "IN", "CN", "JP", "KR", "BR", "MX", "AR", "CO", "ZA", "NG", "KE", "TZ",
+      "EG", "MA", "TR", "RU", "SA", "AE", "PK", "BD", "VN", "TH", "PH", "ID", "MY",
+    ];
+    return (
+      <div className="min-h-screen bg-white flex flex-col items-center justify-center p-6">
+        <h2 className="text-2xl font-bold text-slate-800 mb-8">
+          {t("welcome_change_region", lang)}
+        </h2>
+        <div className="grid grid-cols-2 sm:grid-cols-3 gap-3 max-w-lg w-full max-h-[60vh] overflow-y-auto">
+          {countries.map((code) => (
+            <button
+              key={code}
+              onClick={() => {
+                setSelectedCountry(code);
+                setStep("detected");
+              }}
+              className={`p-3 rounded-2xl border-2 text-center font-medium transition-all text-sm ${
+                selectedCountry === code
+                  ? "border-blue-500 bg-blue-50 text-blue-700"
+                  : "border-slate-200 bg-white text-slate-700 hover:border-blue-200"
+              }`}
+            >
+              {getCountryName(code)}
+            </button>
+          ))}
+        </div>
+      </div>
+    );
+  }
+
+  // Main detected screen
+  return (
+    <div className="min-h-screen bg-gradient-to-b from-blue-50 to-white flex flex-col items-center justify-center p-6">
+      <div className="max-w-md w-full text-center">
+        {/* Logo */}
+        <div className="w-20 h-20 mx-auto mb-6 rounded-3xl bg-gradient-to-br from-blue-500 to-indigo-600 flex items-center justify-center shadow-xl shadow-blue-200">
+          <Heart size={36} className="text-white" />
+        </div>
+
+        <h1 className="text-3xl font-bold text-slate-800 mb-2">
+          {t("welcome_title", lang)}
+        </h1>
+        <p className="text-lg text-slate-500 mb-10">
+          {t("welcome_subtitle", lang)}
+        </p>
+
+        {/* Detection card */}
+        <div className="bg-white rounded-3xl shadow-lg border border-slate-100 p-6 mb-8">
+          <p className="text-sm text-slate-500 mb-4 font-medium">
+            {t("welcome_detected", lang)}
+          </p>
+
+          <div className="flex items-center gap-3 p-4 bg-blue-50 rounded-2xl mb-3">
+            <Globe size={22} className="text-blue-500" />
+            <span className="text-lg font-semibold text-slate-800">
+              {LANGUAGE_NAMES[selectedLang]}
+            </span>
+          </div>
+
+          <div className="flex items-center gap-3 p-4 bg-blue-50 rounded-2xl">
+            <MapPin size={22} className="text-blue-500" />
+            <span className="text-lg font-semibold text-slate-800">
+              {getCountryName(selectedCountry)}
+            </span>
+            <span className="text-sm text-slate-400 ml-auto">
+              {t("emergency_call", lang)}: {getEmergencyNumber(selectedCountry)}
+            </span>
+          </div>
+        </div>
+
+        {/* Continue button */}
+        <button
+          onClick={() => onComplete(selectedLang, selectedCountry)}
+          className="w-full py-4 bg-blue-600 text-white rounded-2xl font-bold text-lg shadow-lg shadow-blue-200 hover:bg-blue-700 transition-colors flex items-center justify-center gap-2 mb-4"
+        >
+          {t("welcome_continue", lang)}
+          <ChevronRight size={20} />
+        </button>
+
+        {/* Change buttons */}
+        <div className="flex gap-3 justify-center">
+          <button
+            onClick={() => setStep("language")}
+            className="text-sm text-blue-600 font-medium hover:underline"
+          >
+            {t("welcome_change_language", lang)}
+          </button>
+          <span className="text-slate-300">|</span>
+          <button
+            onClick={() => setStep("region")}
+            className="text-sm text-blue-600 font-medium hover:underline"
+          >
+            {t("welcome_change_region", lang)}
+          </button>
+        </div>
+
+        {/* Trust badges */}
+        <div className="flex items-center justify-center gap-4 mt-10 flex-wrap">
+          <div className="flex items-center gap-1.5 text-xs text-slate-400 font-medium">
+            <Shield size={14} className="text-emerald-500" />
+            {t("badge_private", lang)}
+          </div>
+          <div className="flex items-center gap-1.5 text-xs text-slate-400 font-medium">
+            <Shield size={14} className="text-emerald-500" />
+            {t("badge_no_signup", lang)}
+          </div>
+          <div className="flex items-center gap-1.5 text-xs text-slate-400 font-medium">
+            <Shield size={14} className="text-emerald-500" />
+            {t("badge_free", lang)}
+          </div>
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/components/chat/AppDrawer.tsx b/components/chat/AppDrawer.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..4bfe87921a8683ae34a459cf72a26abc315b4425
--- /dev/null
+++ b/components/chat/AppDrawer.tsx
@@ -0,0 +1,234 @@
+"use client";
+
+import { useEffect } from "react";
+import {
+  X,
+  Plus,
+  MessageCircle,
+  Clock,
+  Pill,
+  MapPin,
+  Heart,
+  Activity,
+  FileText,
+  Calendar,
+  Settings,
+  User2,
+  LogIn,
+  LogOut,
+  Contact,
+  Camera,
+  AlertTriangle,
+  BookOpen,
+  Share2,
+  ShieldCheck,
+} from "lucide-react";
+import { t, type SupportedLanguage } from "@/lib/i18n";
+
+interface AppDrawerProps {
+  open: boolean;
+  onClose: () => void;
+  activeKey: string;
+  onNavigate: (key: string) => void;
+  onNewChat?: () => void;
+  isAuthenticated?: boolean;
+  isAdmin?: boolean;
+  username?: string;
+  onLogout?: () => void;
+  language: SupportedLanguage;
+}
+
+export function AppDrawer({
+  open,
+  onClose,
+  activeKey,
+  onNavigate,
+  onNewChat,
+  isAuthenticated = false,
+  isAdmin = false,
+  username,
+  onLogout,
+  language,
+}: AppDrawerProps) {
+  // Close on Escape
+  useEffect(() => {
+    if (!open) return;
+    const handler = (e: KeyboardEvent) => { if (e.key === "Escape") onClose(); };
+    window.addEventListener("keydown", handler);
+    return () => window.removeEventListener("keydown", handler);
+  }, [open, onClose]);
+
+  // Prevent body scroll when open
+  useEffect(() => {
+    if (open) document.body.style.overflow = "hidden";
+    else document.body.style.overflow = "";
+    return () => { document.body.style.overflow = ""; };
+  }, [open]);
+
+  const nav = (key: string) => { onNavigate(key); onClose(); };
+
+  return (
+    <div
+      className={`md:hidden fixed inset-0 z-50 transition-all duration-300 ${
+        open ? "pointer-events-auto" : "pointer-events-none"
+      }`}
+      aria-hidden={!open}
+    >
+      {/* Backdrop */}
+      <div
+        className={`absolute inset-0 bg-black/40 backdrop-blur-sm transition-opacity duration-300 ${
+          open ? "opacity-100" : "opacity-0"
+        }`}
+        onClick={onClose}
+      />
+
+      {/* Drawer panel */}
+      <aside
+        className={`absolute left-0 top-0 h-full w-[82%] max-w-[320px] bg-surface-1 border-r border-line/40 shadow-card flex flex-col transition-transform duration-300 ease-out ${
+          open ? "translate-x-0" : "-translate-x-full"
+        }`}
+      >
+        {/* Header — user info + close */}
+        <div className="flex items-center justify-between px-4 pt-5 pb-3 safe-area-top">
+          <div className="flex items-center gap-2.5">
+            <div className="w-9 h-9 rounded-xl bg-brand-gradient flex items-center justify-center text-white shadow-soft">
+              <Heart size={16} />
+            </div>
+            <div className="min-w-0">
+              <div className="text-sm font-bold text-ink-base truncate">
+                {isAuthenticated ? (username || "Account") : "MedOS"}
+              </div>
+              {isAuthenticated && (
+                <div className="text-[11px] text-ink-muted truncate">{t("drawer_signed_in", language)}</div>
+              )}
+              {!isAuthenticated && (
+                <div className="text-[11px] text-ink-muted">{t("drawer_free_private", language)}</div>
+              )}
+            </div>
+          </div>
+          <button
+            onClick={onClose}
+            className="w-10 h-10 rounded-xl flex items-center justify-center text-ink-subtle hover:text-ink-base hover:bg-surface-2 transition-all"
+            aria-label={t("drawer_close", language)}
+          >
+            <X size={18} />
+          </button>
+        </div>
+
+        {/* New Chat button */}
+        <div className="px-4 pb-3">
+          <button
+            onClick={() => { onNewChat?.(); onClose(); }}
+            className="w-full py-2.5 bg-brand-gradient text-white rounded-xl font-bold text-sm shadow-glow hover:brightness-110 active:scale-[0.98] transition-all flex items-center justify-center gap-2"
+          >
+            <Plus size={16} />
+            {t("drawer_new_chat", language)}
+          </button>
+        </div>
+
+        {/* Navigation */}
+        <nav className="flex-1 overflow-y-auto px-3 scroll-touch">
+          <DrawerSection title={t("drawer_section_main", language)}>
+            <DrawerItem icon={MessageCircle} label={t("nav_ask", language)} active={activeKey === "chat" || activeKey === "home"} onClick={() => nav("home")} />
+            <DrawerItem icon={Clock} label={t("nav_history", language)} active={activeKey === "history"} onClick={() => nav("history")} />
+          </DrawerSection>
+
+          <DrawerSection title={t("nav_health_tracker", language)}>
+            <DrawerItem icon={Heart} label={t("nav_dashboard", language)} active={activeKey === "health-dashboard"} onClick={() => nav("health-dashboard")} />
+            <DrawerItem icon={Calendar} label={t("nav_schedule", language)} active={activeKey === "schedule"} onClick={() => nav("schedule")} />
+            <DrawerItem icon={Pill} label={t("nav_medications", language)} active={activeKey === "medications"} onClick={() => nav("medications")} />
+            <DrawerItem icon={Camera} label={t("medicines_title", language)} active={activeKey === "my-medicines"} onClick={() => nav("my-medicines")} />
+            <DrawerItem icon={Activity} label={t("nav_vitals", language)} active={activeKey === "vitals"} onClick={() => nav("vitals")} />
+            <DrawerItem icon={FileText} label={t("nav_records", language)} active={activeKey === "records"} onClick={() => nav("records")} />
+            <DrawerItem icon={Contact} label={t("contacts_title", language)} active={activeKey === "contacts"} onClick={() => nav("contacts")} />
+          </DrawerSection>
+
+          <DrawerSection title={t("drawer_section_tools", language)}>
+            <DrawerItem icon={MapPin} label={t("drawer_nearby", language)} active={activeKey === "nearby"} onClick={() => nav("nearby")} />
+            <DrawerItem icon={AlertTriangle} label={t("nav_emergency", language)} active={activeKey === "emergency"} onClick={() => nav("emergency")} urgent />
+            <DrawerItem icon={BookOpen} label={t("nav_topics", language)} active={activeKey === "topics"} onClick={() => nav("topics")} />
+          </DrawerSection>
+
+          <DrawerSection title={t("drawer_section_account", language)}>
+            {isAuthenticated ? (
+              <>
+                <DrawerItem icon={User2} label={t("nav_profile", language)} active={activeKey === "profile"} onClick={() => nav("profile")} />
+                <DrawerItem icon={Settings} label={t("nav_settings", language)} active={activeKey === "settings"} onClick={() => nav("settings")} />
+                {isAdmin && (
+                  <DrawerItem icon={ShieldCheck} label="Admin" active={activeKey === "admin"} onClick={() => nav("admin")} />
+                )}
+              </>
+            ) : (
+              <>
+                <DrawerItem icon={LogIn} label={t("drawer_sign_up", language)} active={activeKey === "login"} onClick={() => nav("login")} />
+                <DrawerItem icon={Settings} label={t("nav_settings", language)} active={activeKey === "settings"} onClick={() => nav("settings")} />
+              </>
+            )}
+          </DrawerSection>
+        </nav>
+
+        {/* Footer */}
+        <div className="px-4 py-3 border-t border-line/40 safe-area-bottom">
+          {isAuthenticated && onLogout && (
+            <button
+              onClick={() => { onLogout(); onClose(); }}
+              className="w-full flex items-center gap-2 px-3 py-2.5 rounded-xl text-sm text-danger-500 hover:bg-danger-500/10 transition-colors mb-2"
+            >
+              <LogOut size={16} /> {t("drawer_logout", language)}
+            </button>
+          )}
+          <p className="text-[10px] text-ink-subtle leading-snug px-1">
+            {t("badge_not_doctor", language)}
+          </p>
+        </div>
+      </aside>
+    </div>
+  );
+}
+
+// ============================================================
+// Sub-components
+// ============================================================
+
+function DrawerSection({ title, children }: { title: string; children: React.ReactNode }) {
+  return (
+    <div className="py-2">
+      <div className="px-3 pb-1.5 pt-1 text-[10px] font-bold uppercase tracking-[0.14em] text-ink-subtle">
+        {title}
+      </div>
+      <div className="space-y-0.5">{children}</div>
+    </div>
+  );
+}
+
+function DrawerItem({
+  icon: Icon,
+  label,
+  active,
+  onClick,
+  urgent,
+}: {
+  icon: any;
+  label: string;
+  active: boolean;
+  onClick: () => void;
+  urgent?: boolean;
+}) {
+  return (
+    <button
+      onClick={onClick}
+      className={`w-full h-11 rounded-xl px-3 flex items-center gap-3 text-left transition-all active:scale-[0.98] ${
+        active
+          ? urgent
+            ? "bg-danger-500/10 text-danger-500 font-semibold"
+            : "bg-brand-500/10 text-brand-600 font-semibold"
+          : urgent
+          ? "text-danger-500/70 hover:bg-danger-500/5"
+          : "text-ink-muted hover:bg-surface-2 hover:text-ink-base"
+      }`}
+    >
+      <Icon size={18} strokeWidth={active ? 2.25 : 1.75} className="flex-shrink-0" />
+      <span className="text-sm truncate">{label}</span>
+    </button>
+  );
+}
diff --git a/components/chat/EmergencyCTA.tsx b/components/chat/EmergencyCTA.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..852b3a5cef87fdd71a2fd1f29390c96189421849
--- /dev/null
+++ b/components/chat/EmergencyCTA.tsx
@@ -0,0 +1,43 @@
+"use client";
+
+import { Phone } from "lucide-react";
+
+interface EmergencyCTAProps {
+  number: string;
+  /** When true, the button pulses and glows more aggressively (red-flag detected). */
+  urgent?: boolean;
+  /** Compact variant renders just the icon + number without the label. */
+  compact?: boolean;
+  label?: string;
+}
+
+/**
+ * Sticky, always-reachable emergency button. Uses a pulse-ring animation
+ * around a circular core so it reads as urgent without being noisy.
+ */
+export function EmergencyCTA({
+  number,
+  urgent = false,
+  compact = false,
+  label = "Call",
+}: EmergencyCTAProps) {
+  return (
+    <a
+      href={`tel:${number}`}
+      aria-label={`Call emergency ${number}`}
+      className={`group relative inline-flex items-center gap-2 rounded-full bg-danger-500 text-white font-bold transition-all hover:bg-danger-600 ${
+        compact ? "px-3 py-2 text-xs" : "px-4 py-2.5 text-sm"
+      } ${urgent ? "animate-pulse-ring shadow-danger-glow" : "shadow-soft"}`}
+    >
+      <span
+        className={`inline-flex items-center justify-center rounded-full bg-white/20 ${
+          compact ? "w-5 h-5" : "w-6 h-6"
+        }`}
+      >
+        <Phone size={compact ? 11 : 13} strokeWidth={2.75} />
+      </span>
+      {!compact && <span>{label}</span>}
+      <span className="font-black tracking-tight">{number}</span>
+    </a>
+  );
+}
diff --git a/components/chat/HeroInput.tsx b/components/chat/HeroInput.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..592d77ecc1d91536061fca9cf902771afd1397a7
--- /dev/null
+++ b/components/chat/HeroInput.tsx
@@ -0,0 +1,177 @@
+"use client";
+
+import { useEffect, useMemo, useRef, useState, type KeyboardEvent } from "react";
+import { Send, Mic, MicOff, Sparkles } from "lucide-react";
+import { t, type SupportedLanguage } from "@/lib/i18n";
+
+interface HeroInputProps {
+  language: SupportedLanguage;
+  onSend: (value: string) => void;
+  onStartVoice?: () => void;
+  onStopVoice?: () => void;
+  voiceEnabled?: boolean;
+  isListening?: boolean;
+  /** Dynamic suggestion chips rendered under the input (empty = hide). */
+  suggestions?: string[];
+  /** Variant — the home hero uses a larger, more prominent size. */
+  size?: "default" | "hero";
+  /** Autofocus on mount (chat view). */
+  autoFocus?: boolean;
+}
+
+/**
+ * The single most important element of the app: the input.
+ * - Large, generous rounded container with a soft brand glow on focus.
+ * - Rotating empathetic placeholders so the field never feels empty.
+ * - Multi-line textarea that auto-grows up to 5 rows.
+ * - Inline primary send button + optional voice mic.
+ * - Suggestion chips appear below for zero-friction entry.
+ */
+export function HeroInput({
+  language,
+  onSend,
+  onStartVoice,
+  onStopVoice,
+  voiceEnabled = true,
+  isListening = false,
+  suggestions = [],
+  size = "default",
+  autoFocus = false,
+}: HeroInputProps) {
+  const [value, setValue] = useState("");
+  const taRef = useRef<HTMLTextAreaElement | null>(null);
+
+  // Rotating empathetic placeholders.
+  const rotating = useMemo(
+    () => [
+      t("ask_placeholder_rotate_1", language),
+      t("ask_placeholder_rotate_2", language),
+      t("ask_placeholder_rotate_3", language),
+      t("ask_placeholder_rotate_4", language),
+      t("ask_placeholder_rotate_5", language),
+    ],
+    [language],
+  );
+  const [rotIdx, setRotIdx] = useState(0);
+  useEffect(() => {
+    if (value) return; // freeze rotation while the user is typing
+    const id = setInterval(() => setRotIdx((i) => (i + 1) % rotating.length), 3200);
+    return () => clearInterval(id);
+  }, [value, rotating.length]);
+
+  // Auto-grow textarea.
+  useEffect(() => {
+    const el = taRef.current;
+    if (!el) return;
+    el.style.height = "0px";
+    const max = size === "hero" ? 180 : 160;
+    el.style.height = `${Math.min(el.scrollHeight, max)}px`;
+  }, [value, size]);
+
+  useEffect(() => {
+    if (autoFocus) taRef.current?.focus();
+  }, [autoFocus]);
+
+  const handleKey = (e: KeyboardEvent<HTMLTextAreaElement>) => {
+    if (e.key === "Enter" && !e.shiftKey) {
+      e.preventDefault();
+      submit();
+    }
+  };
+
+  const submit = () => {
+    const v = value.trim();
+    if (!v) return;
+    onSend(v);
+    setValue("");
+  };
+
+  const isHero = size === "hero";
+
+  return (
+    <div className="w-full">
+      {/* The glowing container */}
+      <div
+        className={`relative group rounded-[28px] bg-surface-1 border border-line/70 shadow-card transition-all focus-within:border-brand-500/60 focus-within:shadow-glow ${
+          isHero ? "p-2.5" : "p-2"
+        }`}
+      >
+        {/* Soft gradient halo behind the card */}
+        <div
+          aria-hidden
+          className="pointer-events-none absolute -inset-px -z-10 rounded-[28px] bg-brand-gradient opacity-0 group-focus-within:opacity-40 blur-xl transition-opacity"
+        />
+
+        <div className="flex items-end gap-2">
+          <div className="flex-1 relative">
+            <textarea
+              ref={taRef}
+              rows={1}
+              value={value}
+              onChange={(e) => setValue(e.target.value)}
+              onKeyDown={handleKey}
+              placeholder={rotating[rotIdx]}
+              className={`w-full resize-none bg-transparent text-ink-base placeholder:text-ink-subtle outline-none leading-relaxed px-4 py-3 ${
+                isHero ? "text-lg" : "text-base"
+              }`}
+              aria-label={t("ask_placeholder", language)}
+            />
+          </div>
+
+          {/* Voice */}
+          {voiceEnabled && (
+            <button
+              type="button"
+              onClick={isListening ? onStopVoice : onStartVoice}
+              aria-label={t("ask_tap_speak", language)}
+              className={`flex-shrink-0 rounded-full flex items-center justify-center transition-all w-11 h-11 ${
+                isListening
+                  ? "bg-danger-500 text-white animate-pulse shadow-danger-glow"
+                  : "bg-surface-2 text-ink-muted hover:text-brand-600 hover:bg-brand-50 dark:hover:bg-brand-900/30"
+              }`}
+            >
+              {isListening ? <MicOff size={isHero ? 18 : 16} /> : <Mic size={isHero ? 18 : 16} />}
+            </button>
+          )}
+
+          {/* Send — always present, brand gradient when there's text */}
+          <button
+            type="button"
+            onClick={submit}
+            disabled={!value.trim()}
+            aria-label="Send"
+            className={`flex-shrink-0 rounded-full flex items-center justify-center transition-all ${
+              isHero ? "w-12 h-12" : "w-10 h-10"
+            } ${
+              value.trim()
+                ? "bg-brand-gradient text-white shadow-glow hover:brightness-110"
+                : "bg-surface-2 text-ink-subtle cursor-not-allowed"
+            }`}
+          >
+            <Send size={isHero ? 20 : 16} strokeWidth={2.5} />
+          </button>
+        </div>
+      </div>
+
+      {/* Suggestion chips — dynamic, click to send */}
+      {suggestions.length > 0 && (
+        <div className="mt-4 flex flex-wrap gap-2 justify-center">
+          <span className="inline-flex items-center gap-1 text-[11px] font-semibold uppercase tracking-wider text-ink-muted">
+            <Sparkles size={12} className="text-accent-500" />
+            {t("ask_suggestions", language)}
+          </span>
+          {suggestions.map((s, i) => (
+            <button
+              key={`${s}-${i}`}
+              type="button"
+              onClick={() => onSend(s)}
+              className="px-3.5 py-1.5 rounded-full bg-surface-1 border border-line/70 text-sm text-ink-muted hover:text-brand-600 hover:border-brand-500/50 hover:bg-brand-50/60 dark:hover:bg-brand-900/20 transition-colors"
+            >
+              {s}
+            </button>
+          ))}
+        </div>
+      )}
+    </div>
+  );
+}
diff --git a/components/chat/MessageBubble.tsx b/components/chat/MessageBubble.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..f3d97dc35a6d62c7026d2b86d23ffcdb6a651685
--- /dev/null
+++ b/components/chat/MessageBubble.tsx
@@ -0,0 +1,302 @@
+"use client";
+
+import { Stethoscope, User2, ShieldCheck } from "lucide-react";
+import type { ChatMessage } from "@/lib/hooks/useChat";
+
+interface MessageBubbleProps {
+  message: ChatMessage;
+  showSourceChip?: boolean;
+}
+
+/**
+ * MessageBubble — renders chat messages with markdown support.
+ *
+ * AI answers are rendered as structured cards with:
+ *  - Avatar + "MedOS" header + optional source chip
+ *  - Full markdown: bold, italic, lists, links, code, headers
+ *  - Section parsing for structured medical output
+ *
+ * User bubbles keep the right-aligned chat style.
+ */
+export function MessageBubble({ message, showSourceChip }: MessageBubbleProps) {
+  const isUser = message.role === "user";
+
+  if (isUser) {
+    return (
+      <div className="flex justify-end mb-6 animate-fade-up">
+        <div className="max-w-[85%] flex items-start gap-2">
+          <div className="order-2 flex-shrink-0 w-9 h-9 rounded-full bg-surface-2 flex items-center justify-center text-ink-muted">
+            <User2 size={16} />
+          </div>
+          <div className="order-1">
+            <div className="rounded-2xl rounded-tr-sm px-4 py-3 bg-brand-gradient text-white shadow-soft leading-relaxed text-[15px]">
+              <p className="whitespace-pre-wrap">{message.content}</p>
+            </div>
+            <div className="mt-1 text-[11px] text-ink-subtle text-right">
+              {message.timestamp}
+            </div>
+          </div>
+        </div>
+      </div>
+    );
+  }
+
+  return (
+    <div className="flex justify-start mb-6 animate-fade-up">
+      <div className="max-w-[88%] flex items-start gap-3">
+        <div className="flex-shrink-0 w-9 h-9 rounded-full bg-brand-gradient flex items-center justify-center text-white shadow-soft">
+          <Stethoscope size={16} />
+        </div>
+        <div className="flex-1 min-w-0">
+          <div className="flex items-center gap-2 mb-1.5">
+            <span className="text-xs font-bold text-ink-base tracking-tight">
+              MedOS
+            </span>
+            {showSourceChip && (
+              <span className="inline-flex items-center gap-1 text-[10px] font-semibold uppercase tracking-wider text-accent-600 dark:text-accent-400 bg-accent-500/10 border border-accent-500/20 px-2 py-0.5 rounded-full">
+                <ShieldCheck size={10} />
+                WHO · CDC · NHS
+              </span>
+            )}
+          </div>
+          <div className="rounded-2xl rounded-tl-sm border border-line/60 bg-surface-1 shadow-soft px-4 py-3.5 text-[15px] leading-relaxed text-ink-base">
+            <MarkdownContent content={message.content} />
+          </div>
+          <div className="mt-1 text-[11px] text-ink-subtle">
+            {message.timestamp}
+          </div>
+        </div>
+      </div>
+    </div>
+  );
+}
+
+/**
+ * MarkdownContent — lightweight markdown renderer for medical AI output.
+ *
+ * Supports: headers (#), bold (**), italic (*), bullet lists (- / *),
+ * numbered lists (1.), inline code (`), code blocks (```), links [text](url),
+ * and horizontal rules (---).
+ *
+ * No external dependencies — pure React + regex.
+ */
+function MarkdownContent({ content }: { content: string }) {
+  if (!content) return null;
+
+  const blocks = parseBlocks(content);
+
+  return (
+    <div className="space-y-2">
+      {blocks.map((block, i) => (
+        <BlockRenderer key={i} block={block} />
+      ))}
+    </div>
+  );
+}
+
+type Block =
+  | { type: "heading"; level: number; text: string }
+  | { type: "paragraph"; text: string }
+  | { type: "list"; ordered: boolean; items: string[] }
+  | { type: "code"; language: string; code: string }
+  | { type: "hr" };
+
+function parseBlocks(text: string): Block[] {
+  const lines = text.split("\n");
+  const blocks: Block[] = [];
+  let i = 0;
+
+  while (i < lines.length) {
+    const line = lines[i];
+
+    // Code block
+    if (line.trimStart().startsWith("```")) {
+      const lang = line.trimStart().slice(3).trim();
+      const codeLines: string[] = [];
+      i++;
+      while (i < lines.length && !lines[i].trimStart().startsWith("```")) {
+        codeLines.push(lines[i]);
+        i++;
+      }
+      blocks.push({ type: "code", language: lang, code: codeLines.join("\n") });
+      i++;
+      continue;
+    }
+
+    // Horizontal rule
+    if (/^(-{3,}|_{3,}|\*{3,})\s*$/.test(line.trim())) {
+      blocks.push({ type: "hr" });
+      i++;
+      continue;
+    }
+
+    // Heading
+    const headingMatch = line.match(/^(#{1,4})\s+(.+)$/);
+    if (headingMatch) {
+      blocks.push({ type: "heading", level: headingMatch[1].length, text: headingMatch[2] });
+      i++;
+      continue;
+    }
+
+    // Bold heading pattern: **Heading**
+    const boldHeadingMatch = line.match(/^\*\*([^*]+)\*\*\s*:?\s*$/);
+    if (boldHeadingMatch) {
+      blocks.push({ type: "heading", level: 3, text: boldHeadingMatch[1] });
+      i++;
+      continue;
+    }
+
+    // List (unordered: - or *, ordered: 1.)
+    if (/^\s*[-*]\s+/.test(line) || /^\s*\d+\.\s+/.test(line)) {
+      const ordered = /^\s*\d+\./.test(line);
+      const items: string[] = [];
+      while (i < lines.length && (/^\s*[-*]\s+/.test(lines[i]) || /^\s*\d+\.\s+/.test(lines[i]))) {
+        items.push(lines[i].replace(/^\s*[-*]\s+/, "").replace(/^\s*\d+\.\s+/, ""));
+        i++;
+      }
+      blocks.push({ type: "list", ordered, items });
+      continue;
+    }
+
+    // Empty line
+    if (line.trim() === "") {
+      i++;
+      continue;
+    }
+
+    // Paragraph — collect consecutive non-empty lines
+    const paraLines: string[] = [];
+    while (i < lines.length && lines[i].trim() !== "" && !lines[i].trimStart().startsWith("```") && !lines[i].match(/^#{1,4}\s/) && !lines[i].match(/^\*\*[^*]+\*\*\s*:?\s*$/) && !/^\s*[-*]\s+/.test(lines[i]) && !/^\s*\d+\.\s+/.test(lines[i]) && !/^(-{3,}|_{3,}|\*{3,})\s*$/.test(lines[i].trim())) {
+      paraLines.push(lines[i]);
+      i++;
+    }
+    if (paraLines.length > 0) {
+      blocks.push({ type: "paragraph", text: paraLines.join("\n") });
+    }
+  }
+
+  return blocks;
+}
+
+function BlockRenderer({ block }: { block: Block }) {
+  switch (block.type) {
+    case "heading":
+      return (
+        <div className="answer-section">
+          <h4 className={`font-bold text-brand-600 dark:text-brand-400 mb-1 ${
+            block.level <= 2 ? "text-[15px]" : "text-[13px] uppercase tracking-wider"
+          }`}>
+            {renderInline(block.text)}
+          </h4>
+        </div>
+      );
+
+    case "paragraph":
+      return (
+        <p className="whitespace-pre-wrap text-ink-base/95 leading-relaxed">
+          {renderInline(block.text)}
+        </p>
+      );
+
+    case "list":
+      const ListTag = block.ordered ? "ol" : "ul";
+      return (
+        <ListTag className={`space-y-1 pl-1 ${block.ordered ? "list-decimal list-inside" : ""}`}>
+          {block.items.map((item, i) => (
+            <li key={i} className="text-ink-base/95 leading-relaxed flex items-start gap-2">
+              {!block.ordered && <span className="text-brand-500 mt-1.5 text-xs flex-shrink-0">•</span>}
+              <span>{renderInline(item)}</span>
+            </li>
+          ))}
+        </ListTag>
+      );
+
+    case "code":
+      return (
+        <pre className="bg-surface-2 border border-line/40 rounded-xl p-3 overflow-x-auto text-[13px] font-mono text-ink-base/90 leading-relaxed">
+          <code>{block.code}</code>
+        </pre>
+      );
+
+    case "hr":
+      return <hr className="border-line/40 my-2" />;
+
+    default:
+      return null;
+  }
+}
+
+/**
+ * Render inline markdown: **bold**, *italic*, `code`, [link](url)
+ */
+function renderInline(text: string): React.ReactNode {
+  if (!text) return null;
+
+  // Split on inline patterns and render
+  const parts: React.ReactNode[] = [];
+  let remaining = text;
+  let key = 0;
+
+  while (remaining.length > 0) {
+    // Bold: **text**
+    const boldMatch = remaining.match(/\*\*(.+?)\*\*/);
+    // Italic: *text* (but not **)
+    const italicMatch = remaining.match(/(?<!\*)\*([^*]+?)\*(?!\*)/);
+    // Inline code: `code`
+    const codeMatch = remaining.match(/`([^`]+?)`/);
+    // Link: [text](url)
+    const linkMatch = remaining.match(/\[([^\]]+?)\]\(([^)]+?)\)/);
+
+    // Find the earliest match
+    const matches = [
+      boldMatch ? { match: boldMatch, type: "bold" as const } : null,
+      italicMatch ? { match: italicMatch, type: "italic" as const } : null,
+      codeMatch ? { match: codeMatch, type: "code" as const } : null,
+      linkMatch ? { match: linkMatch, type: "link" as const } : null,
+    ].filter(Boolean).sort((a, b) => a!.match.index! - b!.match.index!);
+
+    if (matches.length === 0) {
+      parts.push(remaining);
+      break;
+    }
+
+    const first = matches[0]!;
+    const idx = first.match.index!;
+
+    // Text before match
+    if (idx > 0) {
+      parts.push(remaining.slice(0, idx));
+    }
+
+    // Render the matched element
+    switch (first.type) {
+      case "bold":
+        parts.push(<strong key={key++} className="font-bold">{first.match[1]}</strong>);
+        remaining = remaining.slice(idx + first.match[0].length);
+        break;
+      case "italic":
+        parts.push(<em key={key++} className="italic">{first.match[1]}</em>);
+        remaining = remaining.slice(idx + first.match[0].length);
+        break;
+      case "code":
+        parts.push(
+          <code key={key++} className="bg-surface-2 border border-line/40 rounded px-1.5 py-0.5 text-[13px] font-mono text-ink-base/90">
+            {first.match[1]}
+          </code>
+        );
+        remaining = remaining.slice(idx + first.match[0].length);
+        break;
+      case "link":
+        parts.push(
+          <a key={key++} href={first.match[2]} target="_blank" rel="noopener noreferrer"
+            className="text-brand-500 hover:text-brand-600 underline underline-offset-2">
+            {first.match[1]}
+          </a>
+        );
+        remaining = remaining.slice(idx + first.match[0].length);
+        break;
+    }
+  }
+
+  return <>{parts}</>;
+}
diff --git a/components/chat/NavItem.tsx b/components/chat/NavItem.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..586b4d7c10908676abb01c9982b8ed826eec9f68
--- /dev/null
+++ b/components/chat/NavItem.tsx
@@ -0,0 +1,54 @@
+import { LucideIcon } from "lucide-react";
+
+interface NavItemProps {
+  icon: LucideIcon;
+  label: string;
+  active: boolean;
+  onClick: () => void;
+  urgent?: boolean;
+  collapsed?: boolean;
+}
+
+export function NavItem({
+  icon: Icon,
+  label,
+  active,
+  onClick,
+  urgent,
+  collapsed = false,
+}: NavItemProps) {
+  return (
+    <button
+      onClick={onClick}
+      title={collapsed ? label : undefined}
+      className={`w-full flex items-center rounded-xl transition-all duration-200 mb-0.5 group ${
+        collapsed ? "justify-center px-2 py-2.5" : "gap-3 px-4 py-2.5"
+      } ${
+        active
+          ? urgent
+            ? "bg-danger-500/10 text-danger-500 font-semibold"
+            : "bg-brand-gradient-soft text-brand-600 font-semibold shadow-soft"
+          : urgent
+          ? "text-danger-500/70 hover:bg-danger-500/10 hover:text-danger-500"
+          : "text-ink-muted hover:bg-surface-2 hover:text-ink-base"
+      }`}
+    >
+      <Icon
+        size={collapsed ? 20 : 18}
+        strokeWidth={active ? 2.25 : 1.75}
+        className={`flex-shrink-0 ${
+          active
+            ? urgent
+              ? "text-danger-500"
+              : "text-brand-500"
+            : urgent
+            ? "text-danger-500/70 group-hover:text-danger-500"
+            : "text-ink-subtle group-hover:text-ink-base"
+        }`}
+      />
+      {!collapsed && (
+        <span className="text-sm tracking-tight truncate">{label}</span>
+      )}
+    </button>
+  );
+}
diff --git a/components/chat/NotificationCenter.tsx b/components/chat/NotificationCenter.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..739f4c9b4b4f8f82ef1b46d359042154c21db57e
--- /dev/null
+++ b/components/chat/NotificationCenter.tsx
@@ -0,0 +1,169 @@
+"use client";
+
+import { useState } from "react";
+import {
+  Bell,
+  X,
+  Pill,
+  Calendar,
+  AlertCircle,
+  Info,
+  CheckCheck,
+} from "lucide-react";
+import type { Notification } from "@/lib/hooks/useNotifications";
+
+interface NotificationCenterProps {
+  notifications: Notification[];
+  count: number;
+  onDismiss: (id: string) => void;
+  onDismissAll: () => void;
+}
+
+/**
+ * Notification bell + dropdown panel.
+ *
+ * Shows a badge with the active notification count. Clicking the bell
+ * opens a dropdown listing overdue medications, upcoming appointments,
+ * and health reminders. Each notification can be dismissed individually
+ * or all at once.
+ *
+ * Desktop: dropdown positioned below the bell.
+ * Mobile: also a dropdown (could be upgraded to a sheet later).
+ */
+export function NotificationBell({
+  notifications,
+  count,
+  onDismiss,
+  onDismissAll,
+}: NotificationCenterProps) {
+  const [open, setOpen] = useState(false);
+
+  return (
+    <div className="relative">
+      {/* Bell button */}
+      <button
+        onClick={() => setOpen(!open)}
+        className="relative p-2 rounded-xl text-ink-muted hover:text-ink-base hover:bg-surface-2 transition-colors"
+        aria-label={`Notifications (${count})`}
+      >
+        <Bell size={18} />
+        {count > 0 && (
+          <span className="absolute -top-0.5 -right-0.5 min-w-[18px] h-[18px] rounded-full bg-danger-500 text-white text-[10px] font-bold flex items-center justify-center px-1 shadow-sm animate-pulse">
+            {count > 9 ? "9+" : count}
+          </span>
+        )}
+      </button>
+
+      {/* Dropdown panel */}
+      {open && (
+        <>
+          {/* Backdrop — closes on click */}
+          <div
+            className="fixed inset-0 z-40"
+            onClick={() => setOpen(false)}
+          />
+
+          <div className="absolute right-0 top-full mt-2 w-80 max-h-96 bg-surface-1 border border-line/60 rounded-2xl shadow-card z-50 overflow-hidden animate-in fade-in slide-in-from-bottom-4 duration-200">
+            {/* Header */}
+            <div className="flex items-center justify-between px-4 py-3 border-b border-line/40">
+              <h3 className="font-bold text-sm text-ink-base">Notifications</h3>
+              <div className="flex items-center gap-2">
+                {count > 0 && (
+                  <button
+                    onClick={onDismissAll}
+                    className="text-[10px] font-semibold text-brand-500 hover:text-brand-600 flex items-center gap-1"
+                  >
+                    <CheckCheck size={12} />
+                    Dismiss all
+                  </button>
+                )}
+                <button
+                  onClick={() => setOpen(false)}
+                  className="text-ink-subtle hover:text-ink-base p-0.5"
+                >
+                  <X size={14} />
+                </button>
+              </div>
+            </div>
+
+            {/* Notification list */}
+            <div className="overflow-y-auto max-h-72">
+              {notifications.length === 0 ? (
+                <div className="text-center py-8 px-4">
+                  <Bell size={24} className="mx-auto text-ink-subtle mb-2" />
+                  <p className="text-sm text-ink-muted">All caught up!</p>
+                  <p className="text-xs text-ink-subtle mt-0.5">
+                    No pending reminders right now
+                  </p>
+                </div>
+              ) : (
+                notifications.map((n) => (
+                  <div
+                    key={n.id}
+                    className={`flex items-start gap-3 px-4 py-3 border-b border-line/30 last:border-0 ${
+                      n.urgent
+                        ? "bg-danger-500/5"
+                        : "hover:bg-surface-2/50"
+                    }`}
+                  >
+                    <NotificationIcon type={n.type} urgent={n.urgent} />
+                    <div className="flex-1 min-w-0">
+                      <span
+                        className={`text-sm font-semibold block ${
+                          n.urgent ? "text-danger-600 dark:text-danger-400" : "text-ink-base"
+                        }`}
+                      >
+                        {n.title}
+                      </span>
+                      <span className="text-xs text-ink-muted block mt-0.5">
+                        {n.message}
+                      </span>
+                    </div>
+                    <button
+                      onClick={() => onDismiss(n.id)}
+                      className="flex-shrink-0 p-1 text-ink-subtle hover:text-ink-base rounded"
+                      title="Dismiss"
+                    >
+                      <X size={12} />
+                    </button>
+                  </div>
+                ))
+              )}
+            </div>
+          </div>
+        </>
+      )}
+    </div>
+  );
+}
+
+function NotificationIcon({
+  type,
+  urgent,
+}: {
+  type: Notification["type"];
+  urgent: boolean;
+}) {
+  const iconMap = {
+    medication: Pill,
+    appointment: Calendar,
+    reminder: AlertCircle,
+    info: Info,
+  };
+  const Icon = iconMap[type] || Info;
+  return (
+    <div
+      className={`w-8 h-8 rounded-full flex items-center justify-center flex-shrink-0 ${
+        urgent
+          ? "bg-danger-500/15 text-danger-500"
+          : type === "medication"
+          ? "bg-rose-500/15 text-rose-500"
+          : type === "appointment"
+          ? "bg-purple-500/15 text-purple-500"
+          : "bg-brand-500/15 text-brand-500"
+      }`}
+    >
+      <Icon size={14} />
+    </div>
+  );
+}
diff --git a/components/chat/RightPanel.tsx b/components/chat/RightPanel.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..064437dc2f49ec8e5d59bf7de23f181f7ac2fe66
--- /dev/null
+++ b/components/chat/RightPanel.tsx
@@ -0,0 +1,313 @@
+"use client";
+
+import {
+  Activity,
+  Heart,
+  Thermometer,
+  Droplets,
+  Wind,
+  Scale,
+  Calendar,
+  ChevronRight,
+  Shield,
+  Check,
+  Circle,
+} from "lucide-react";
+import {
+  VITAL_META,
+  todayISO,
+  type VitalReading,
+  type Medication,
+  type Appointment,
+  type VitalType,
+} from "@/lib/health-store";
+import { t, type SupportedLanguage } from "@/lib/i18n";
+
+interface RightPanelProps {
+  language?: SupportedLanguage;
+  emergencyNumber?: string;
+  // Health data for the Vitals Today + Upcoming sections
+  vitals?: VitalReading[];
+  medications?: Medication[];
+  appointments?: Appointment[];
+  isMedTaken?: (medId: string, date: string, time: string) => boolean;
+  onNavigate?: (view: string) => void;
+  // Notification count
+  notificationCount?: number;
+  onOpenNotifications?: () => void;
+  /**
+   * When false, the empty state shows a sign-in card instead of the
+   * 'Get started' nudge that points at /health-dashboard (a route
+   * guests can't usefully use). Emergency access is NOT shown here —
+   * that lives in the sidebar Tools group on every screen.
+   */
+  isAuthenticated?: boolean;
+}
+
+const VITAL_ICONS: Record<VitalType, any> = {
+  "heart-rate": Heart,
+  "blood-pressure": Activity,
+  "oxygen-saturation": Wind,
+  temperature: Thermometer,
+  weight: Scale,
+  "blood-glucose": Droplets,
+};
+
+const VITAL_COLORS: Record<VitalType, { bg: string; text: string; border: string }> = {
+  "heart-rate": {
+    bg: "bg-red-50 dark:bg-red-900/20",
+    text: "text-red-600 dark:text-red-400",
+    border: "border-red-200 dark:border-red-700/40",
+  },
+  "blood-pressure": {
+    bg: "bg-blue-50 dark:bg-blue-900/20",
+    text: "text-blue-600 dark:text-blue-400",
+    border: "border-blue-200 dark:border-blue-700/40",
+  },
+  "oxygen-saturation": {
+    bg: "bg-sky-50 dark:bg-sky-900/20",
+    text: "text-sky-600 dark:text-sky-400",
+    border: "border-sky-200 dark:border-sky-700/40",
+  },
+  temperature: {
+    bg: "bg-orange-50 dark:bg-orange-900/20",
+    text: "text-orange-600 dark:text-orange-400",
+    border: "border-orange-200 dark:border-orange-700/40",
+  },
+  weight: {
+    bg: "bg-purple-50 dark:bg-purple-900/20",
+    text: "text-purple-600 dark:text-purple-400",
+    border: "border-purple-200 dark:border-purple-700/40",
+  },
+  "blood-glucose": {
+    bg: "bg-amber-50 dark:bg-amber-900/20",
+    text: "text-amber-600 dark:text-amber-400",
+    border: "border-amber-200 dark:border-amber-700/40",
+  },
+};
+
+function getStatus(type: VitalType, value: string): string {
+  // Simple heuristic — not medical advice
+  const num = parseFloat(value.split("/")[0]);
+  if (isNaN(num)) return "";
+  switch (type) {
+    case "heart-rate":
+      return num >= 60 && num <= 100 ? "Normal (60-100)" : num < 60 ? "Low" : "High";
+    case "oxygen-saturation":
+      return num >= 95 ? "Excellent" : num >= 90 ? "Fair" : "Low";
+    case "temperature":
+      return num >= 36.1 && num <= 37.2 ? "Stable" : num > 37.2 ? "Elevated" : "Low";
+    case "blood-pressure":
+      return num < 120 ? "Normal" : num < 140 ? "Elevated" : "High";
+    default:
+      return "";
+  }
+}
+
+export function RightPanel({
+  language = "en",
+  emergencyNumber: _emergencyNumber,
+  vitals = [],
+  medications = [],
+  appointments = [],
+  isMedTaken,
+  onNavigate,
+  notificationCount: _notificationCount,
+  onOpenNotifications: _onOpenNotifications,
+  isAuthenticated = true,
+}: RightPanelProps) {
+  const today = todayISO();
+
+  // Latest reading per vital type.
+  const latestVitals = (Object.keys(VITAL_META) as VitalType[])
+    .map((type) => {
+      const reading = vitals
+        .filter((v) => v.type === type)
+        .sort((a, b) => `${b.date}${b.time}`.localeCompare(`${a.date}${a.time}`))[0];
+      return { type, reading };
+    })
+    .filter((v) => v.reading);
+
+  // Today's upcoming events (meds + appointments).
+  const upcoming: Array<{
+    id: string;
+    title: string;
+    time: string;
+    type: string;
+    done: boolean;
+  }> = [];
+
+  for (const med of medications.filter((m) => m.active)) {
+    for (const time of med.times) {
+      const done = isMedTaken?.(med.id, today, time) ?? false;
+      upcoming.push({
+        id: `med-${med.id}-${time}`,
+        title: `${med.name} (${med.dose})`,
+        time,
+        type: "medication",
+        done,
+      });
+    }
+  }
+
+  for (const appt of appointments.filter(
+    (a) => a.date === today && a.status !== "cancelled",
+  )) {
+    upcoming.push({
+      id: `appt-${appt.id}`,
+      title: appt.title,
+      time: appt.time,
+      type: appt.type,
+      done: appt.status === "completed",
+    });
+  }
+
+  upcoming.sort((a, b) => a.time.localeCompare(b.time));
+
+  const hasHealthData = latestVitals.length > 0 || upcoming.length > 0;
+
+  return (
+    <div className="hidden lg:flex w-72 bg-surface-1/50 backdrop-blur-xl border-l border-line/40 flex-col z-20 overflow-y-auto">
+      <div className="p-5 flex-1 flex flex-col gap-5">
+        {/* Vitals Today — only if there are readings */}
+        {latestVitals.length > 0 && (
+          <section>
+            <div className="flex items-center justify-between mb-3">
+              <h3 className="flex items-center gap-1.5 text-xs font-bold uppercase tracking-wider text-ink-subtle">
+                <Activity size={13} />
+                Vitals Today
+              </h3>
+              <button
+                onClick={() => onNavigate?.("vitals")}
+                className="text-[10px] font-semibold text-brand-500 hover:text-brand-600"
+              >
+                View all
+              </button>
+            </div>
+            <div className="space-y-2">
+              {latestVitals.slice(0, 3).map(({ type, reading }) => {
+                const meta = VITAL_META[type];
+                const colors = VITAL_COLORS[type];
+                const Icon = VITAL_ICONS[type];
+                const status = getStatus(type, reading!.value);
+                return (
+                  <div
+                    key={type}
+                    className={`rounded-2xl p-3.5 border ${colors.bg} ${colors.border}`}
+                  >
+                    <div className="flex items-center justify-between mb-1">
+                      <span className={`text-[10px] font-bold uppercase tracking-wider ${colors.text}`}>
+                        {meta.label}
+                      </span>
+                      <Icon size={16} className={colors.text} />
+                    </div>
+                    <div className="flex items-end gap-1.5">
+                      <span className={`text-2xl font-black tracking-tight ${colors.text}`}>
+                        {reading!.value}
+                      </span>
+                      <span className="text-xs text-ink-muted mb-0.5">{meta.unit}</span>
+                    </div>
+                    {status && (
+                      <span className={`text-[10px] font-semibold ${colors.text} mt-0.5 block`}>
+                        {status}
+                      </span>
+                    )}
+                  </div>
+                );
+              })}
+            </div>
+          </section>
+        )}
+
+        {/* Upcoming — meds + appointments for today */}
+        {upcoming.length > 0 && (
+          <section>
+            <div className="flex items-center justify-between mb-3">
+              <h3 className="flex items-center gap-1.5 text-xs font-bold uppercase tracking-wider text-ink-subtle">
+                <Calendar size={13} />
+                Upcoming
+              </h3>
+              <button
+                onClick={() => onNavigate?.("schedule")}
+                className="text-[10px] font-semibold text-brand-500 hover:text-brand-600"
+              >
+                View all
+              </button>
+            </div>
+            <div className="space-y-1.5">
+              {upcoming.slice(0, 5).map((item) => (
+                <div
+                  key={item.id}
+                  className="flex items-center gap-2.5 py-2 px-1"
+                >
+                  {item.done ? (
+                    <div className="w-5 h-5 rounded-full bg-success-500 flex items-center justify-center flex-shrink-0">
+                      <Check size={11} className="text-white" strokeWidth={3} />
+                    </div>
+                  ) : (
+                    <Circle size={20} className="text-ink-subtle flex-shrink-0" strokeWidth={1.5} />
+                  )}
+                  <div className="flex-1 min-w-0">
+                    <span
+                      className={`text-sm font-medium block truncate ${
+                        item.done ? "line-through text-ink-muted" : "text-ink-base"
+                      }`}
+                    >
+                      {item.title}
+                    </span>
+                    <span className="text-[10px] text-ink-subtle">
+                      {item.time} · {item.type}
+                    </span>
+                  </div>
+                </div>
+              ))}
+            </div>
+          </section>
+        )}
+
+        {/* Empty state.
+         *
+         * MedOSApp now only mounts RightPanel for authenticated users,
+         * so the right rail is always personal context — no duplicate
+         * sign-up card here (the left sidebar already carries the auth
+         * CTA). When the user is signed in but has no data yet, we keep
+         * the existing 'Track your health' setup nudge. */}
+        {!hasHealthData && (
+          <div className="text-center py-6">
+            <div className="w-14 h-14 mx-auto mb-4 rounded-2xl bg-brand-500/10 flex items-center justify-center">
+              <Activity size={24} className="text-brand-500" />
+            </div>
+            <p className="text-sm font-semibold text-ink-base mb-1">
+              Track your health
+            </p>
+            <p className="text-xs text-ink-muted mb-5 leading-relaxed px-2">
+              Log vitals, medications, and appointments to see your dashboard here.
+            </p>
+            <button
+              onClick={() => onNavigate?.("health-dashboard")}
+              className="inline-flex items-center gap-1.5 px-5 py-2.5 bg-brand-500/10 text-brand-600 border border-brand-500/20 rounded-xl font-bold text-sm hover:bg-brand-500/20 transition-all"
+            >
+              Get started
+              <ChevronRight size={14} />
+            </button>
+          </div>
+        )}
+
+        {/* Privacy footer — pinned at bottom.
+         *
+         * The big red 'Call <emergency-number>' button that used to live
+         * here is gone. Emergency access stays in the sidebar Tools group
+         * (NavItem with urgent flag) where it's one click away without
+         * dominating every screen with anxious red chrome. The
+         * deterministic safety engine still routes any R5 input to an
+         * emergency template at the chat-route level. */}
+        <div className="mt-auto pt-4">
+          <div className="flex items-center gap-2 text-xs text-ink-subtle px-1">
+            <Shield size={12} className="text-accent-500 flex-shrink-0" />
+            {t("badge_private", language)} · {t("badge_free", language)}
+          </div>
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/components/chat/Sidebar.tsx b/components/chat/Sidebar.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..c730e5243b54151d3e4ba90357bc5dd8537b9359
--- /dev/null
+++ b/components/chat/Sidebar.tsx
@@ -0,0 +1,412 @@
+"use client";
+
+import { useState, useEffect, useRef } from "react";
+import {
+  Home,
+  MessageCircle,
+  AlertTriangle,
+  BookOpen,
+  Settings,
+  Heart,
+  ShieldCheck,
+  Pill,
+  Calendar,
+  Activity,
+  FileText,
+  Package,
+  Clock,
+  User2,
+  LogIn,
+  LogOut,
+  ClipboardList,
+  PanelLeftClose,
+  PanelLeftOpen,
+  Globe,
+  MapPin,
+  Contact,
+  HelpCircle,
+  Share2,
+  Info,
+  ExternalLink,
+  ChevronUp,
+  ChevronDown,
+  MoreHorizontal,
+  Smartphone,
+} from "lucide-react";
+import { NavItem } from "./NavItem";
+import { AboutModal } from "../ui/AboutModal";
+import { t, type SupportedLanguage } from "@/lib/i18n";
+
+export type NavView =
+  | "home"
+  | "chat"
+  | "emergency"
+  | "topics"
+  | "records"
+  | "medications"
+  | "appointments"
+  | "vitals"
+  | "health-dashboard"
+  | "schedule"
+  | "history"
+  | "settings"
+  | "login"
+  | "profile"
+  | "ehr-wizard"
+  | "my-medicines"
+  | "share"
+  | "admin"
+  | "nearby"
+  | "contacts";
+
+interface SidebarProps {
+  activeNav: NavView;
+  setActiveNav: (nav: NavView) => void;
+  language?: SupportedLanguage;
+  advancedMode?: boolean;
+  isAuthenticated?: boolean;
+  isAdmin?: boolean;
+  username?: string;
+  onLogout?: () => void;
+}
+
+const COLLAPSED_KEY = "medos_sidebar_collapsed";
+
+export function Sidebar({
+  activeNav,
+  setActiveNav,
+  language = "en",
+  isAuthenticated = false,
+  isAdmin = false,
+  username,
+  onLogout,
+}: SidebarProps) {
+  const [collapsed, setCollapsed] = useState(false);
+  const [bottomMenuOpen, setBottomMenuOpen] = useState(false);
+  const [showAbout, setShowAbout] = useState(false);
+  const menuRef = useRef<HTMLDivElement>(null);
+
+  useEffect(() => {
+    const stored = localStorage.getItem(COLLAPSED_KEY);
+    if (stored === "true") setCollapsed(true);
+  }, []);
+
+  // Close bottom menu on outside click
+  useEffect(() => {
+    if (!bottomMenuOpen) return;
+    const handler = (e: MouseEvent) => {
+      if (menuRef.current && !menuRef.current.contains(e.target as Node)) {
+        setBottomMenuOpen(false);
+      }
+    };
+    document.addEventListener("mousedown", handler);
+    return () => document.removeEventListener("mousedown", handler);
+  }, [bottomMenuOpen]);
+
+  const toggleCollapse = () => {
+    const next = !collapsed;
+    setCollapsed(next);
+    localStorage.setItem(COLLAPSED_KEY, String(next));
+  };
+
+  const navTo = (view: NavView) => {
+    setActiveNav(view);
+    setBottomMenuOpen(false);
+  };
+
+  return (
+    <>
+      {/* Desktop sidebar */}
+      <aside
+        className={`hidden md:flex flex-col z-20 bg-surface-1/70 backdrop-blur-xl border-r border-line/60 transition-all duration-300 ease-in-out ${
+          collapsed ? "w-[68px] p-2" : "w-64 p-4"
+        }`}
+      >
+        {/* Top row: collapse toggle + logo */}
+        <div
+          className={`flex items-center mb-5 ${
+            collapsed ? "flex-col gap-3" : "justify-between"
+          }`}
+        >
+          {/* Collapse toggle — TOP, like ChatGPT/Claude */}
+          <button
+            onClick={toggleCollapse}
+            className="p-2 rounded-xl text-ink-subtle hover:text-ink-base hover:bg-surface-2 transition-all flex-shrink-0"
+            title={collapsed ? "Expand sidebar" : "Collapse sidebar"}
+          >
+            {collapsed ? <PanelLeftOpen size={18} /> : <PanelLeftClose size={18} />}
+          </button>
+
+          {/* Logo */}
+          {!collapsed && (
+            <div className="flex items-center gap-2.5">
+              <div className="w-8 h-8 rounded-xl bg-brand-gradient flex items-center justify-center text-white shadow-glow flex-shrink-0">
+                <Heart size={16} strokeWidth={2.5} />
+              </div>
+              <div className="min-w-0">
+                <h1 className="font-bold text-base text-ink-base tracking-tight leading-none">
+                  MedOS
+                </h1>
+              </div>
+            </div>
+          )}
+
+          {collapsed && (
+            <div className="w-10 h-10 rounded-2xl bg-brand-gradient flex items-center justify-center text-white shadow-glow">
+              <Heart size={18} strokeWidth={2.5} />
+            </div>
+          )}
+        </div>
+
+        {/* Main nav.
+         *
+         * Health-tracker items only render for authenticated users — they
+         * all require saved personal data and would otherwise surface
+         * empty or error states for guests. Logged-out users collapse to
+         * Home + Ask + the Tools group; the bottom auth card still
+         * offers Sign up / Log in. */}
+        <nav className="flex-1 overflow-y-auto space-y-0.5">
+          <NavItem icon={Home} label={t("nav_home", language)} active={activeNav === "home"} onClick={() => setActiveNav("home")} collapsed={collapsed} />
+          <NavItem icon={MessageCircle} label={t("nav_ask", language)} active={activeNav === "chat"} onClick={() => setActiveNav("chat")} collapsed={collapsed} />
+
+          {isAuthenticated && (
+            <>
+              {!collapsed && <SectionLabel>{t("nav_health_tracker", language)}</SectionLabel>}
+              {collapsed && <div className="my-2 border-t border-line/50" />}
+
+              <NavItem icon={Heart} label={t("nav_dashboard", language)} active={activeNav === "health-dashboard"} onClick={() => setActiveNav("health-dashboard")} collapsed={collapsed} />
+              <NavItem icon={Calendar} label={t("nav_schedule", language)} active={activeNav === "schedule"} onClick={() => setActiveNav("schedule")} collapsed={collapsed} />
+              <NavItem icon={Pill} label={t("nav_medications", language)} active={activeNav === "medications"} onClick={() => setActiveNav("medications")} collapsed={collapsed} />
+              <NavItem icon={Package} label={t("medicines_title", language)} active={activeNav === "my-medicines"} onClick={() => setActiveNav("my-medicines")} collapsed={collapsed} />
+              <NavItem icon={Calendar} label={t("nav_appointments", language)} active={activeNav === "appointments"} onClick={() => setActiveNav("appointments")} collapsed={collapsed} />
+              <NavItem icon={Activity} label={t("nav_vitals", language)} active={activeNav === "vitals"} onClick={() => setActiveNav("vitals")} collapsed={collapsed} />
+              <NavItem icon={FileText} label={t("nav_records", language)} active={activeNav === "records"} onClick={() => setActiveNav("records")} collapsed={collapsed} />
+              <NavItem icon={Contact} label="Contacts" active={activeNav === "contacts"} onClick={() => setActiveNav("contacts")} collapsed={collapsed} />
+            </>
+          )}
+
+          {!collapsed && <SectionLabel>{t("nav_tools", language)}</SectionLabel>}
+          {collapsed && <div className="my-2 border-t border-line/50" />}
+
+          <NavItem icon={AlertTriangle} label={t("nav_emergency", language)} active={activeNav === "emergency"} onClick={() => setActiveNav("emergency")} urgent collapsed={collapsed} />
+          <NavItem icon={MapPin} label="Nearby" active={activeNav === "nearby"} onClick={() => setActiveNav("nearby")} collapsed={collapsed} />
+          <NavItem icon={BookOpen} label={t("nav_topics", language)} active={activeNav === "topics"} onClick={() => setActiveNav("topics")} collapsed={collapsed} />
+          <NavItem icon={Share2} label="Share" active={activeNav === "share"} onClick={() => setActiveNav("share")} collapsed={collapsed} />
+          <NavItem icon={Clock} label={t("nav_history", language)} active={activeNav === "history"} onClick={() => setActiveNav("history")} collapsed={collapsed} />
+
+          {isAdmin && (
+            <>
+              {!collapsed && <SectionLabel>Admin</SectionLabel>}
+              {collapsed && <div className="my-2 border-t border-line/50" />}
+              <NavItem icon={ShieldCheck} label="Admin" active={activeNav === "admin"} onClick={() => setActiveNav("admin")} collapsed={collapsed} />
+            </>
+          )}
+        </nav>
+
+        {/* ============================================================
+         * Bottom settings drawer — like ChatGPT/Claude/HF Space.
+         * Shows user profile + settings menu that pops UP from the bottom.
+         * ============================================================ */}
+        <div className="mt-auto pt-3 border-t border-line/50 relative" ref={menuRef}>
+          {/* Pop-up menu (opens upward) */}
+          {bottomMenuOpen && !collapsed && (
+            <div className="absolute bottom-full left-0 right-0 mb-2 bg-surface-1 border border-line/60 rounded-2xl shadow-card overflow-hidden animate-in fade-in slide-in-from-bottom-4 duration-200 z-50">
+              <div className="p-2 space-y-0.5">
+                {/* Account section — first, most important */}
+                {isAuthenticated ? (
+                  <>
+                    <MenuItem icon={User2} label={t("nav_profile", language)} onClick={() => navTo("profile")} />
+                    <MenuItem icon={ClipboardList} label="Health Profile (EHR)" onClick={() => navTo("ehr-wizard")} />
+                    <MenuItem icon={LogOut} label="Log out" onClick={() => { setBottomMenuOpen(false); onLogout?.(); }} danger />
+                  </>
+                ) : (
+                  <>
+                    <MenuItem icon={LogIn} label="Log in / Create Account" onClick={() => navTo("login")} />
+                  </>
+                )}
+
+                <div className="my-1.5 border-t border-line/40" />
+
+                <MenuItem icon={Settings} label={t("nav_settings", language)} onClick={() => navTo("settings")} />
+                <MenuItem icon={Globe} label={t("settings_language", language)} detail={language.toUpperCase()} onClick={() => navTo("settings")} />
+                <MenuItem icon={HelpCircle} label="Get help" onClick={() => window.open("https://github.com/ruslanmv/ai-medical-chatbot/issues", "_blank")} />
+
+                <div className="my-1.5 border-t border-line/40" />
+
+                <MenuItem icon={Smartphone} label="Install as App" onClick={() => {}} />
+                <MenuItem icon={Share2} label="Share MedOS" onClick={() => { if (typeof navigator !== "undefined" && navigator.share) navigator.share({ title: "MedOS", url: window.location.origin }); }} />
+                <MenuItem icon={Info} label="About MedOS" detail="v1.0" onClick={() => { setBottomMenuOpen(false); setShowAbout(true); }} />
+
+                <div className="my-1.5 border-t border-line/40" />
+
+                <div className="px-3 py-2">
+                  <p className="text-[10px] text-ink-subtle leading-snug">
+                    MedOS v1.0 · Free & Open Source
+                    <br />
+                    Zero data retention · {t("badge_private", language)}
+                  </p>
+                </div>
+              </div>
+            </div>
+          )}
+
+          {/* Bottom user section — ChatGPT/Claude pattern */}
+          {isAuthenticated ? (
+            /* Authenticated: avatar + name + menu toggle */
+            <button
+              onClick={() => collapsed ? setActiveNav("profile") : setBottomMenuOpen(!bottomMenuOpen)}
+              className={`w-full flex items-center rounded-xl transition-all hover:bg-surface-2 ${
+                collapsed ? "justify-center p-2.5" : "gap-3 px-3 py-2.5"
+              }`}
+            >
+              <div className="flex-shrink-0 w-8 h-8 rounded-full bg-brand-gradient flex items-center justify-center text-white font-bold text-xs">
+                {(username || "U")[0].toUpperCase()}
+              </div>
+              {!collapsed && (
+                <>
+                  <div className="flex-1 min-w-0 text-left">
+                    <span className="text-sm font-medium text-ink-base block truncate">
+                      {username || "Account"}
+                    </span>
+                  </div>
+                  <MoreHorizontal size={16} className="text-ink-subtle flex-shrink-0" />
+                </>
+              )}
+            </button>
+          ) : (
+            /* Guest: value-focused sign-up prompt — Notion/Spotify pattern.
+             * All features work without an account (localStorage).
+             * Account = cloud sync across devices. */
+            collapsed ? (
+              <button
+                onClick={() => setActiveNav("login")}
+                className="w-full flex justify-center p-2.5 rounded-xl text-ink-subtle hover:text-ink-base hover:bg-surface-2 transition-all"
+                title="Sign up to sync across devices"
+              >
+                <User2 size={20} />
+              </button>
+            ) : (
+              <div className="space-y-2">
+                {/* Subtle value message — not a gate, a benefit */}
+                <div className="px-3 py-2">
+                  <p className="text-[11px] text-ink-muted leading-snug">
+                    Sign up to sync your health data across all your devices.
+                  </p>
+                </div>
+                <button
+                  onClick={() => setActiveNav("login")}
+                  className="w-full py-2.5 bg-brand-gradient text-white rounded-xl font-bold text-sm shadow-glow hover:brightness-110 transition-all"
+                >
+                  Sign up free
+                </button>
+                <button
+                  onClick={() => setActiveNav("login")}
+                  className="w-full py-2.5 border border-line/60 text-ink-base rounded-xl font-semibold text-sm hover:bg-surface-2 transition-all"
+                >
+                  Log in
+                </button>
+                <button
+                  onClick={() => setBottomMenuOpen(!bottomMenuOpen)}
+                  className="w-full flex items-center justify-center gap-1.5 py-1.5 text-ink-subtle hover:text-ink-base text-xs transition-colors"
+                >
+                  <MoreHorizontal size={14} />
+                </button>
+              </div>
+            )
+          )}
+        </div>
+      </aside>
+
+      {/* Mobile bottom navigation — REMOVED.
+       * Mobile now uses AppDrawer (hamburger ☰ in header).
+       * This gives access to ALL features without the 5-tab limit. */}
+      {/* About modal */}
+      {showAbout && <AboutModal onClose={() => setShowAbout(false)} />}
+    </>
+  );
+}
+
+// ============================================================
+// Sub-components
+// ============================================================
+
+function SectionLabel({ children }: { children: React.ReactNode }) {
+  return (
+    <div className="mt-4 mb-1.5 px-4">
+      <span className="text-[10px] font-bold uppercase tracking-[0.16em] text-ink-subtle">
+        {children}
+      </span>
+    </div>
+  );
+}
+
+function MenuItem({
+  icon: Icon,
+  label,
+  detail,
+  shortcut,
+  external,
+  danger,
+  onClick,
+}: {
+  icon: any;
+  label: string;
+  detail?: string;
+  shortcut?: string;
+  external?: boolean;
+  danger?: boolean;
+  onClick: () => void;
+}) {
+  return (
+    <button
+      onClick={onClick}
+      className={`w-full flex items-center gap-3 px-3 py-2 rounded-lg text-sm transition-colors ${
+        danger
+          ? "text-danger-500 hover:bg-danger-500/10"
+          : "text-ink-base hover:bg-surface-2"
+      }`}
+    >
+      <Icon size={16} className="text-ink-subtle flex-shrink-0" />
+      <span className="flex-1 text-left">{label}</span>
+      {detail && (
+        <span className="text-xs text-ink-subtle">{detail}</span>
+      )}
+      {shortcut && (
+        <kbd className="text-[10px] text-ink-subtle bg-surface-2 border border-line/60 rounded px-1.5 py-0.5 font-mono">
+          {shortcut}
+        </kbd>
+      )}
+      {external && <ExternalLink size={12} className="text-ink-subtle" />}
+    </button>
+  );
+}
+
+function MobileNavButton({
+  icon: Icon,
+  label,
+  active,
+  onClick,
+  urgent,
+}: {
+  icon: any;
+  label: string;
+  active: boolean;
+  onClick: () => void;
+  urgent?: boolean;
+}) {
+  return (
+    <button
+      onClick={onClick}
+      className={`flex flex-col items-center justify-center gap-0.5 min-h-[48px] min-w-[48px] px-2 py-1.5 rounded-2xl transition-all active:scale-95 ${
+        active
+          ? urgent
+            ? "text-danger-500 bg-danger-500/10"
+            : "text-brand-600 bg-brand-500/10"
+          : "text-ink-subtle"
+      }`}
+    >
+      <Icon size={22} strokeWidth={active ? 2.5 : 1.75} className={urgent && !active ? "text-danger-500/70" : ""} />
+      <span className="text-[10px] font-semibold leading-none tracking-tight">{label}</span>
+    </button>
+  );
+}
diff --git a/components/chat/Toggle.tsx b/components/chat/Toggle.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..e1fdb8a4c5526487675a5b5a40e4d86589da2efe
--- /dev/null
+++ b/components/chat/Toggle.tsx
@@ -0,0 +1,31 @@
+interface ToggleProps {
+  label: string;
+  description?: string;
+  enabled: boolean;
+  setEnabled: (enabled: boolean) => void;
+}
+
+export function Toggle({ label, description, enabled, setEnabled }: ToggleProps) {
+  return (
+    <div className="flex items-center justify-between py-3 border-b border-line/40 last:border-0">
+      <div className="flex-1 min-w-0 mr-3">
+        <span className="text-sm text-ink-base font-medium">{label}</span>
+        {description && (
+          <span className="text-xs text-ink-muted block mt-0.5">{description}</span>
+        )}
+      </div>
+      <button
+        onClick={() => setEnabled(!enabled)}
+        className={`w-11 h-6 flex items-center rounded-full p-1 transition-colors duration-300 flex-shrink-0 ${
+          enabled ? "bg-brand-500" : "bg-surface-3"
+        }`}
+      >
+        <div
+          className={`bg-white w-4 h-4 rounded-full shadow-md transform transition-transform duration-300 ${
+            enabled ? "translate-x-5" : "translate-x-0"
+          }`}
+        />
+      </button>
+    </div>
+  );
+}
diff --git a/components/chat/TrustBar.tsx b/components/chat/TrustBar.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..9dc9202dc890a4503c1bc0c211610db38f455f88
--- /dev/null
+++ b/components/chat/TrustBar.tsx
@@ -0,0 +1,35 @@
+"use client";
+
+import { ShieldCheck, Globe2, Clock4 } from "lucide-react";
+import { t, type SupportedLanguage } from "@/lib/i18n";
+
+interface TrustBarProps {
+  language: SupportedLanguage;
+  compact?: boolean;
+}
+
+/**
+ * Trust layer shown under the hero. Communicates clinical credibility
+ * without looking salesy: one line, muted color, subtle icons.
+ */
+export function TrustBar({ language, compact = false }: TrustBarProps) {
+  const items = [
+    { Icon: ShieldCheck, key: "trust_reviewed" as const },
+    { Icon: Globe2,      key: "trust_private" as const },
+    { Icon: Clock4,      key: "trust_247" as const },
+  ];
+  return (
+    <div
+      className={`flex flex-wrap items-center justify-center gap-x-5 gap-y-2 text-ink-muted ${
+        compact ? "text-[11px]" : "text-xs"
+      }`}
+    >
+      {items.map(({ Icon, key }) => (
+        <span key={key} className="inline-flex items-center gap-1.5 font-medium">
+          <Icon size={compact ? 12 : 14} className="text-accent-500" />
+          {t(key, language)}
+        </span>
+      ))}
+    </div>
+  );
+}
diff --git a/components/chat/TypingIndicator.tsx b/components/chat/TypingIndicator.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..559c85ff65293b7ac01612fc5ca525ec1defac06
--- /dev/null
+++ b/components/chat/TypingIndicator.tsx
@@ -0,0 +1,32 @@
+"use client";
+
+import { Stethoscope } from "lucide-react";
+
+interface TypingIndicatorProps {
+  label: string;
+}
+
+/**
+ * The "model is thinking" state, purpose-built for a medical chatbot:
+ * an avatar + the word "Analyzing symptoms…" shimmering, instead of
+ * the generic three-dot animation. Increases perceived intelligence.
+ */
+export function TypingIndicator({ label }: TypingIndicatorProps) {
+  return (
+    <div className="flex items-center gap-3 mb-6 animate-fade-up">
+      <div className="flex-shrink-0 w-9 h-9 rounded-full bg-brand-gradient flex items-center justify-center shadow-soft">
+        <Stethoscope size={16} className="text-white" />
+      </div>
+      <div className="glass-card rounded-2xl rounded-bl-none px-4 py-3 flex items-center gap-2">
+        <span className="shimmer-text text-sm font-semibold tracking-tight">
+          {label}
+        </span>
+        <span className="flex gap-1">
+          <span className="w-1.5 h-1.5 rounded-full bg-brand-500 animate-bounce" />
+          <span className="w-1.5 h-1.5 rounded-full bg-brand-500 animate-bounce delay-100" />
+          <span className="w-1.5 h-1.5 rounded-full bg-brand-500 animate-bounce delay-200" />
+        </span>
+      </div>
+    </div>
+  );
+}
diff --git a/components/chat/VoiceInput.tsx b/components/chat/VoiceInput.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..190c741904e5a80280549a89395896e0926b69ce
--- /dev/null
+++ b/components/chat/VoiceInput.tsx
@@ -0,0 +1,81 @@
+"use client";
+
+import { useState, useCallback, useRef, useEffect } from "react";
+import { Mic, MicOff } from "lucide-react";
+
+interface VoiceInputProps {
+  onTranscript: (text: string) => void;
+  language: string;
+  /** Compact = just the icon button. Full = button with label. */
+  compact?: boolean;
+}
+
+function getSpeechRecognitionClass(): any {
+  if (typeof window === "undefined") return null;
+  return (window as any).SpeechRecognition || (window as any).webkitSpeechRecognition || null;
+}
+
+const LANG_MAP: Record<string, string> = {
+  en: "en-US", es: "es-ES", zh: "zh-CN", hi: "hi-IN", ar: "ar-SA",
+  pt: "pt-BR", bn: "bn-BD", fr: "fr-FR", ru: "ru-RU", ja: "ja-JP",
+  de: "de-DE", ko: "ko-KR", tr: "tr-TR", vi: "vi-VN", it: "it-IT",
+  th: "th-TH", id: "id-ID", sw: "sw-KE", pl: "pl-PL", nl: "nl-NL",
+  ur: "ur-PK",
+};
+
+export function VoiceInput({ onTranscript, language, compact }: VoiceInputProps) {
+  const [isListening, setIsListening] = useState(false);
+  const [isSupported, setIsSupported] = useState(false);
+  const recognitionRef = useRef<any>(null);
+
+  useEffect(() => {
+    setIsSupported(!!getSpeechRecognitionClass());
+  }, []);
+
+  const toggle = useCallback(() => {
+    const Ctor = getSpeechRecognitionClass();
+    if (!Ctor) return;
+    if (isListening && recognitionRef.current) {
+      recognitionRef.current.stop();
+      setIsListening(false);
+      return;
+    }
+    const recognition = new Ctor();
+    recognition.continuous = false;
+    recognition.interimResults = false;
+    recognition.lang = LANG_MAP[language] || "en-US";
+    recognition.onresult = (event: any) => {
+      const transcript = event.results?.[0]?.[0]?.transcript;
+      if (transcript?.trim()) onTranscript(transcript.trim());
+    };
+    recognition.onend = () => setIsListening(false);
+    recognition.onerror = () => setIsListening(false);
+    recognitionRef.current = recognition;
+    recognition.start();
+    setIsListening(true);
+  }, [isListening, language, onTranscript]);
+
+  if (!isSupported) return null;
+
+  return (
+    <button
+      type="button"
+      onClick={toggle}
+      className={`flex items-center justify-center gap-1.5 rounded-full transition-all ${
+        isListening
+          ? "bg-danger-500 text-white animate-pulse shadow-danger-glow"
+          : compact
+          ? "bg-surface-2 text-ink-muted hover:text-brand-600 hover:bg-brand-50 dark:hover:bg-brand-900/30"
+          : "bg-surface-2 text-ink-muted hover:text-brand-600"
+      } ${compact ? "w-10 h-10" : "px-3 py-2"}`}
+      aria-label={isListening ? "Stop recording" : "Start voice input"}
+    >
+      {isListening ? <MicOff size={compact ? 16 : 14} /> : <Mic size={compact ? 16 : 14} />}
+      {!compact && (
+        <span className="text-xs font-semibold">
+          {isListening ? "Stop" : "Voice"}
+        </span>
+      )}
+    </button>
+  );
+}
diff --git a/components/ui/AboutModal.tsx b/components/ui/AboutModal.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..aa7e2f00b7292b3c99cb1dd830010aab451d9037
--- /dev/null
+++ b/components/ui/AboutModal.tsx
@@ -0,0 +1,128 @@
+"use client";
+
+import { useState } from "react";
+import {
+  X,
+  Heart,
+  Shield,
+  Globe2,
+  Clock4,
+  ExternalLink,
+  Github,
+} from "lucide-react";
+
+export function AboutModal({ onClose }: { onClose: () => void }) {
+  return (
+    <div className="fixed inset-0 z-50 flex items-center justify-center p-4 bg-black/40 backdrop-blur-sm">
+      <div className="w-full max-w-md bg-surface-1 border border-line/60 rounded-2xl shadow-card overflow-hidden animate-in fade-in slide-in-from-bottom-4 duration-300">
+        {/* Header */}
+        <div className="flex items-center justify-between p-5 border-b border-line/40">
+          <div className="flex items-center gap-3">
+            <div className="w-10 h-10 rounded-xl bg-brand-gradient flex items-center justify-center text-white shadow-glow">
+              <Heart size={20} strokeWidth={2.5} />
+            </div>
+            <div>
+              <h2 className="font-bold text-lg text-ink-base">MedOS</h2>
+              <p className="text-xs text-ink-muted">v1.0.0</p>
+            </div>
+          </div>
+          <button
+            onClick={onClose}
+            className="p-1.5 rounded-lg text-ink-subtle hover:text-ink-base hover:bg-surface-2"
+          >
+            <X size={16} />
+          </button>
+        </div>
+
+        <div className="p-5 space-y-5">
+          {/* Description */}
+          <p className="text-sm text-ink-base leading-relaxed">
+            MedOS is a free, open-source AI medical assistant that speaks
+            20 languages. It provides general health guidance aligned with
+            WHO, CDC, and NHS guidelines — always available, completely
+            private, no sign-up required.
+          </p>
+
+          {/* Key features */}
+          <div className="grid grid-cols-3 gap-3">
+            <FeatureChip icon={Shield} label="Private" detail="Zero data retention" />
+            <FeatureChip icon={Globe2} label="20 languages" detail="Auto-detected" />
+            <FeatureChip icon={Clock4} label="24/7" detail="Always available" />
+          </div>
+
+          {/* Tech stack */}
+          <div className="bg-surface-2/50 rounded-xl p-4 space-y-2">
+            <h3 className="text-xs font-bold uppercase tracking-wider text-ink-subtle">
+              Powered by
+            </h3>
+            <div className="space-y-1.5 text-sm text-ink-base">
+              <InfoRow label="AI Model" value="Llama 3.3 70B (via Groq)" />
+              <InfoRow label="Knowledge" value="WHO · CDC · NHS · SIE · SID · ADA" />
+              <InfoRow label="Framework" value="Next.js 14 · React 18" />
+              <InfoRow label="Backend" value="HuggingFace Spaces · SQLite" />
+              <InfoRow label="License" value="Apache 2.0 — Open Source" />
+            </div>
+          </div>
+
+          {/* Links */}
+          <div className="flex gap-2">
+            <a
+              href="https://github.com/ruslanmv/ai-medical-chatbot"
+              target="_blank"
+              rel="noopener noreferrer"
+              className="flex-1 flex items-center justify-center gap-2 py-2.5 rounded-xl border border-line/60 text-sm font-semibold text-ink-base hover:bg-surface-2 transition-colors"
+            >
+              <Github size={16} />
+              GitHub
+            </a>
+            <a
+              href="https://huggingface.co/spaces/ruslanmv/MediBot"
+              target="_blank"
+              rel="noopener noreferrer"
+              className="flex-1 flex items-center justify-center gap-2 py-2.5 rounded-xl border border-line/60 text-sm font-semibold text-ink-base hover:bg-surface-2 transition-colors"
+            >
+              <ExternalLink size={16} />
+              HuggingFace
+            </a>
+          </div>
+
+          {/* Disclaimer */}
+          <p className="text-[10px] text-ink-subtle leading-relaxed text-center">
+            MedOS provides general health information only. It is NOT a
+            substitute for professional medical advice, diagnosis, or
+            treatment. Always consult a qualified healthcare provider.
+          </p>
+        </div>
+      </div>
+    </div>
+  );
+}
+
+function FeatureChip({
+  icon: Icon,
+  label,
+  detail,
+}: {
+  icon: any;
+  label: string;
+  detail: string;
+}) {
+  return (
+    <div className="text-center p-3 rounded-xl bg-surface-2/50 border border-line/40">
+      <Icon size={18} className="mx-auto text-accent-500 mb-1.5" />
+      <p className="text-xs font-bold text-ink-base">{label}</p>
+      <p className="text-[10px] text-ink-subtle">{detail}</p>
+    </div>
+  );
+}
+
+function InfoRow({ label, value }: { label: string; value: string }) {
+  return (
+    <div className="flex items-start gap-2">
+      <span className="text-xs font-semibold text-ink-subtle w-20 flex-shrink-0">
+        {label}
+      </span>
+      <span className="text-xs text-ink-base">{value}</span>
+    </div>
+  );
+}
diff --git a/components/ui/DisclaimerBanner.tsx b/components/ui/DisclaimerBanner.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..3208c4846984925fc48c27de1f7a19cf4b776ba6
--- /dev/null
+++ b/components/ui/DisclaimerBanner.tsx
@@ -0,0 +1,21 @@
+"use client";
+
+import { t, type SupportedLanguage } from "@/lib/i18n";
+
+interface DisclaimerBannerProps {
+  language: SupportedLanguage;
+}
+
+/**
+ * Single-line disclaimer at the bottom of the app.
+ * Minimal, non-intrusive — enterprise pattern.
+ */
+export function DisclaimerBanner({ language }: DisclaimerBannerProps) {
+  return (
+    <div className="flex-shrink-0 px-4 py-1.5 bg-surface-2/30 border-t border-line/30">
+      <p className="text-[10px] text-ink-subtle text-center">
+        {t("badge_not_doctor", language)}
+      </p>
+    </div>
+  );
+}
diff --git a/components/ui/InstallPrompt.tsx b/components/ui/InstallPrompt.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..4d95d311e10447d86d414bafb0da54df5df92558
--- /dev/null
+++ b/components/ui/InstallPrompt.tsx
@@ -0,0 +1,78 @@
+"use client";
+
+import { useEffect, useState } from "react";
+import { Download, X } from "lucide-react";
+
+interface BeforeInstallPromptEvent extends Event {
+  prompt: () => Promise<void>;
+  userChoice: Promise<{ outcome: "accepted" | "dismissed" }>;
+}
+
+const DISMISS_KEY = "medos_install_dismissed";
+const DELAY_MS = 8000;
+
+/**
+ * PWA install prompt. Shows after a short delay on the first session.
+ * Dismissed state persisted in localStorage. Skips if already installed.
+ */
+export function InstallPrompt() {
+  const [evt, setEvt] = useState<BeforeInstallPromptEvent | null>(null);
+  const [visible, setVisible] = useState(false);
+
+  useEffect(() => {
+    if (typeof window === "undefined") return;
+    if (localStorage.getItem(DISMISS_KEY) === "1") return;
+    if (window.matchMedia?.("(display-mode: standalone)").matches) return;
+
+    const handler = (e: Event) => {
+      e.preventDefault();
+      setEvt(e as BeforeInstallPromptEvent);
+      setTimeout(() => setVisible(true), DELAY_MS);
+    };
+    window.addEventListener("beforeinstallprompt", handler as EventListener);
+    return () => window.removeEventListener("beforeinstallprompt", handler as EventListener);
+  }, []);
+
+  const install = async () => {
+    if (!evt) return;
+    try {
+      await evt.prompt();
+      const choice = await evt.userChoice;
+      if (choice.outcome === "accepted") localStorage.setItem(DISMISS_KEY, "1");
+    } catch {}
+    setVisible(false);
+    setEvt(null);
+  };
+
+  const dismiss = () => {
+    localStorage.setItem(DISMISS_KEY, "1");
+    setVisible(false);
+  };
+
+  if (!visible || !evt) return null;
+
+  return (
+    <div className="fixed left-1/2 -translate-x-1/2 bottom-16 md:bottom-4 z-50 w-[calc(100%-2rem)] max-w-sm rounded-2xl bg-surface-1 border border-line/60 shadow-card backdrop-blur-xl animate-in fade-in slide-in-from-bottom-4 duration-300">
+      <div className="flex items-start gap-3 p-4">
+        <div className="flex-shrink-0 w-10 h-10 rounded-xl bg-brand-gradient flex items-center justify-center shadow-glow">
+          <Download size={18} className="text-white" />
+        </div>
+        <div className="flex-1 min-w-0">
+          <p className="text-sm font-bold text-ink-base">Install MedOS</p>
+          <p className="text-xs text-ink-muted mt-0.5">Add to home screen for instant access. Free, private.</p>
+          <div className="flex items-center gap-2 mt-3">
+            <button onClick={install} className="px-3 py-1.5 rounded-lg bg-brand-gradient text-white text-xs font-bold hover:brightness-110">
+              Install
+            </button>
+            <button onClick={dismiss} className="px-3 py-1.5 rounded-lg text-ink-muted text-xs font-semibold hover:text-ink-base">
+              Not now
+            </button>
+          </div>
+        </div>
+        <button onClick={dismiss} aria-label="Dismiss" className="flex-shrink-0 text-ink-subtle hover:text-ink-base">
+          <X size={14} />
+        </button>
+      </div>
+    </div>
+  );
+}
diff --git a/components/ui/OfflineBanner.tsx b/components/ui/OfflineBanner.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..f3b6b51a67151bffd82df990053945ad7f6bfca4
--- /dev/null
+++ b/components/ui/OfflineBanner.tsx
@@ -0,0 +1,35 @@
+"use client";
+
+import { useEffect, useState } from "react";
+import { WifiOff, Wifi } from "lucide-react";
+
+/**
+ * Shows a banner when the browser goes offline.
+ * Automatically hides when connectivity is restored.
+ */
+export function OfflineBanner() {
+  const [offline, setOffline] = useState(false);
+
+  useEffect(() => {
+    const goOffline = () => setOffline(true);
+    const goOnline = () => setOffline(false);
+    window.addEventListener("offline", goOffline);
+    window.addEventListener("online", goOnline);
+    setOffline(!navigator.onLine);
+    return () => {
+      window.removeEventListener("offline", goOffline);
+      window.removeEventListener("online", goOnline);
+    };
+  }, []);
+
+  if (!offline) return null;
+
+  return (
+    <div className="flex items-center justify-center gap-2 px-4 py-2 bg-warning-500/15 border-b border-warning-500/30 text-warning-600 dark:text-warning-500">
+      <WifiOff size={14} />
+      <p className="text-xs font-medium">
+        You&apos;re offline. Some features may be limited.
+      </p>
+    </div>
+  );
+}
diff --git a/components/views/AdminView.tsx b/components/views/AdminView.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..2a0e0af4ef01f10741516cbb50a6435bcded2ad7
--- /dev/null
+++ b/components/views/AdminView.tsx
@@ -0,0 +1,1436 @@
+"use client";
+
+import { useState, useEffect, useCallback } from "react";
+import {
+  Users,
+  MessageCircle,
+  Activity,
+  Cpu,
+  Wifi,
+  WifiOff,
+  Zap,
+  Heart,
+  Shield,
+  Search,
+  Trash2,
+  ChevronLeft,
+  ChevronRight,
+  RefreshCw,
+  BarChart3,
+  Database,
+  Loader2,
+  AlertTriangle,
+  CheckCircle2,
+  XCircle,
+  Server,
+  Mail,
+  Key,
+  Save,
+  Eye,
+  EyeOff,
+  Lock,
+} from "lucide-react";
+import { t, type SupportedLanguage } from "@/lib/i18n";
+
+interface AdminViewProps {
+  language: SupportedLanguage;
+  token: string | null;
+}
+
+type Tab = "overview" | "users" | "email" | "server" | "llm";
+
+interface PlatformStats {
+  totalUsers: number;
+  verifiedUsers: number;
+  adminUsers: number;
+  totalHealthData: number;
+  totalChats: number;
+  activeSessions: number;
+  healthBreakdown: { type: string; count: number }[];
+  registrations: { day: string; count: number }[];
+}
+
+interface AdminUser {
+  id: string;
+  email: string;
+  displayName: string | null;
+  emailVerified: boolean;
+  isAdmin: boolean;
+  createdAt: string;
+  healthDataCount: number;
+  chatHistoryCount: number;
+}
+
+interface SmtpConfig {
+  host: string;
+  port: number;
+  user: string;
+  pass: string;
+  fromEmail: string;
+  recoveryEmail: string;
+  configured?: boolean;
+}
+
+interface ServerConfig {
+  smtp: SmtpConfig;
+  llm: {
+    defaultPreset: string;
+    ollamaUrl: string;
+    hfDefaultModel: string;
+    hfToken: string;
+    ollabridgeUrl: string;
+    ollabridgeApiKey: string;
+    openaiApiKey: string;
+    anthropicApiKey: string;
+    groqApiKey: string;
+    watsonxApiKey: string;
+    watsonxProjectId: string;
+    watsonxUrl: string;
+    // Server-computed status flags.
+    ollabridgeConfigured?: boolean;
+    hfConfigured?: boolean;
+    openaiConfigured?: boolean;
+    anthropicConfigured?: boolean;
+    groqConfigured?: boolean;
+    watsonxConfigured?: boolean;
+  };
+  app: { appUrl: string; allowedOrigins: string };
+}
+
+type ProviderId = "ollabridge" | "huggingface" | "openai" | "anthropic" | "groq" | "watsonx";
+
+interface FetchedModel {
+  id: string;
+  name: string;
+  ownedBy?: string;
+  context?: number;
+  pricing?: "free" | "paid" | "cheap" | "local";
+}
+
+interface ProviderModels {
+  provider: ProviderId;
+  label: string;
+  configured: boolean;
+  ok: boolean;
+  error?: string;
+  pricing: "free" | "paid" | "cheap" | "local";
+  models: FetchedModel[];
+}
+
+interface FetchModelsResponse {
+  providers: ProviderModels[];
+  summary: { providers: number; providersOk: number; totalModels: number; fetchedAt: string };
+}
+
+interface ConnectionTestResult {
+  provider: ProviderId;
+  ok: boolean;
+  latencyMs: number;
+  status?: number;
+  error?: string;
+  details?: string;
+}
+
+export function AdminView({ language, token }: AdminViewProps) {
+  const [tab, setTab] = useState<Tab>("overview");
+  const [stats, setStats] = useState<PlatformStats | null>(null);
+  const [users, setUsers] = useState<AdminUser[]>([]);
+  const [userTotal, setUserTotal] = useState(0);
+  const [userPage, setUserPage] = useState(1);
+  const [userSearch, setUserSearch] = useState("");
+  const [loading, setLoading] = useState(false);
+  const [error, setError] = useState<string | null>(null);
+  const [success, setSuccess] = useState<string | null>(null);
+  const [deleteConfirm, setDeleteConfirm] = useState<string | null>(null);
+
+  // Password reset state
+  const [resetUserId, setResetUserId] = useState<string | null>(null);
+  const [resetPassword, setResetPassword] = useState("");
+  const [showResetPass, setShowResetPass] = useState(false);
+
+  // Config state
+  const [config, setConfig] = useState<ServerConfig | null>(null);
+  const [configDirty, setConfigDirty] = useState(false);
+  const [showSmtpPass, setShowSmtpPass] = useState(false);
+
+  // LLM health state
+  const [llmHealth, setLlmHealth] = useState<{
+    error?: string;
+    models: { model: string; status: string; latencyMs: number; response?: string; error?: string; httpStatus?: number }[];
+    summary: { total: number; ok: number; error: number; testedAt?: string };
+  } | null>(null);
+  const [llmTesting, setLlmTesting] = useState(false);
+
+  // Fetch-models state (multi-provider model catalog)
+  const [fetchedModels, setFetchedModels] = useState<FetchModelsResponse | null>(null);
+  const [fetchingModels, setFetchingModels] = useState(false);
+
+  // Per-provider connection test results (keyed by provider id)
+  const [connectionTests, setConnectionTests] = useState<Record<string, ConnectionTestResult | "pending">>({});
+
+  // Toggle to show/hide each enterprise secret field
+  const [showSecrets, setShowSecrets] = useState<Record<string, boolean>>({});
+
+  const headers = useCallback(() => ({
+    "Content-Type": "application/json",
+    ...(token ? { Authorization: `Bearer ${token}` } : {}),
+  }), [token]);
+
+  const clearMessages = () => { setError(null); setSuccess(null); };
+
+  // ---- Data fetching ----
+
+  const fetchStats = useCallback(async () => {
+    setLoading(true); clearMessages();
+    try {
+      const res = await fetch("/api/admin/stats", { headers: headers() });
+      if (!res.ok) throw new Error(res.status === 403 ? "Admin access required" : "Failed to load stats");
+      setStats(await res.json());
+    } catch (e: any) { setError(e.message); }
+    finally { setLoading(false); }
+  }, [headers]);
+
+  const fetchUsers = useCallback(async (page = 1, search = "") => {
+    setLoading(true); clearMessages();
+    try {
+      const params = new URLSearchParams({ page: String(page), limit: "20" });
+      if (search) params.set("search", search);
+      const res = await fetch(`/api/admin/users?${params}`, { headers: headers() });
+      if (!res.ok) throw new Error(res.status === 403 ? "Admin access required" : "Failed to load users");
+      const data = await res.json();
+      setUsers(data.users);
+      setUserTotal(data.total);
+      setUserPage(data.page);
+    } catch (e: any) { setError(e.message); }
+    finally { setLoading(false); }
+  }, [headers]);
+
+  const fetchConfig = useCallback(async () => {
+    setLoading(true); clearMessages();
+    try {
+      const res = await fetch("/api/admin/config", { headers: headers() });
+      if (!res.ok) throw new Error(res.status === 403 ? "Admin access required" : "Failed to load config");
+      setConfig(await res.json());
+      setConfigDirty(false);
+    } catch (e: any) { setError(e.message); }
+    finally { setLoading(false); }
+  }, [headers]);
+
+  const fetchLlmHealth = useCallback(async () => {
+    setLlmTesting(true); clearMessages();
+    try {
+      const res = await fetch("/api/admin/llm-health", { headers: headers() });
+      if (!res.ok) throw new Error(res.status === 403 ? "Admin access required" : "Failed to test LLMs");
+      setLlmHealth(await res.json());
+    } catch (e: any) { setError(e.message); }
+    finally { setLlmTesting(false); }
+  }, [headers]);
+
+  const fetchAllModels = useCallback(async () => {
+    setFetchingModels(true); clearMessages();
+    try {
+      const res = await fetch("/api/admin/fetch-models", { headers: headers() });
+      if (!res.ok) throw new Error(res.status === 403 ? "Admin access required" : "Failed to fetch models");
+      const data: FetchModelsResponse = await res.json();
+      setFetchedModels(data);
+      setSuccess(
+        `Fetched ${data.summary.totalModels} models from ${data.summary.providersOk}/${data.summary.providers} providers`,
+      );
+    } catch (e: any) { setError(e.message); }
+    finally { setFetchingModels(false); }
+  }, [headers]);
+
+  const testProviderConnection = useCallback(async (provider: ProviderId) => {
+    setConnectionTests((prev) => ({ ...prev, [provider]: "pending" }));
+    try {
+      const res = await fetch("/api/admin/test-connection", {
+        method: "POST",
+        headers: headers(),
+        body: JSON.stringify({ provider }),
+      });
+      const data: ConnectionTestResult = await res.json();
+      setConnectionTests((prev) => ({ ...prev, [provider]: data }));
+    } catch (e: any) {
+      setConnectionTests((prev) => ({
+        ...prev,
+        [provider]: {
+          provider,
+          ok: false,
+          latencyMs: 0,
+          error: e?.message || "Request failed",
+        },
+      }));
+    }
+  }, [headers]);
+
+  const toggleSecret = (key: string) =>
+    setShowSecrets((prev) => ({ ...prev, [key]: !prev[key] }));
+
+  // ---- Actions ----
+
+  const deleteUser = async (userId: string) => {
+    clearMessages();
+    try {
+      const res = await fetch(`/api/admin/users?id=${userId}`, { method: "DELETE", headers: headers() });
+      if (!res.ok) { const d = await res.json(); throw new Error(d.error || "Delete failed"); }
+      setDeleteConfirm(null);
+      setSuccess("User deleted successfully");
+      fetchUsers(userPage, userSearch);
+    } catch (e: any) { setError(e.message); }
+  };
+
+  const handleResetPassword = async () => {
+    if (!resetUserId || resetPassword.length < 6) {
+      setError("Password must be at least 6 characters");
+      return;
+    }
+    clearMessages();
+    try {
+      const res = await fetch("/api/admin/reset-password", {
+        method: "POST",
+        headers: headers(),
+        body: JSON.stringify({ userId: resetUserId, newPassword: resetPassword }),
+      });
+      const data = await res.json();
+      if (!res.ok) throw new Error(data.error || "Reset failed");
+      setSuccess(data.message || "Password reset successfully");
+      setResetUserId(null);
+      setResetPassword("");
+    } catch (e: any) { setError(e.message); }
+  };
+
+  const saveConfig = async () => {
+    if (!config) return;
+    clearMessages();
+    setLoading(true);
+    try {
+      const res = await fetch("/api/admin/config", {
+        method: "PUT",
+        headers: headers(),
+        body: JSON.stringify(config),
+      });
+      const data = await res.json();
+      if (!res.ok) throw new Error(data.error || "Save failed");
+      setConfig(data.config);
+      setConfigDirty(false);
+      setSuccess("Configuration saved successfully");
+    } catch (e: any) { setError(e.message); }
+    finally { setLoading(false); }
+  };
+
+  const updateConfig = (section: keyof ServerConfig, field: string, value: any) => {
+    if (!config) return;
+    setConfig({ ...config, [section]: { ...config[section], [field]: value } });
+    setConfigDirty(true);
+  };
+
+  // ---- Tab switching ----
+
+  useEffect(() => {
+    clearMessages();
+    if (tab === "overview") fetchStats();
+    else if (tab === "users") fetchUsers(1, userSearch);
+    else if (tab === "llm") fetchLlmHealth();
+    else if (tab === "email" || tab === "server") fetchConfig();
+  }, [tab]); // eslint-disable-line react-hooks/exhaustive-deps
+
+  const totalPages = Math.ceil(userTotal / 20);
+
+  return (
+    <div className="flex-1 overflow-y-auto p-4 sm:p-8 pb-mobile-nav scroll-touch">
+      <div className="max-w-4xl mx-auto animate-in fade-in slide-in-from-bottom-4 duration-500">
+        {/* Header */}
+        <div className="flex items-center justify-between mb-6">
+          <div>
+            <h2 className="text-2xl font-bold text-ink-base tracking-tight flex items-center gap-2">
+              <Shield size={22} className="text-brand-500" />
+              {t("admin_title", language)}
+            </h2>
+            <p className="text-sm text-ink-muted mt-1">{t("admin_subtitle", language)}</p>
+          </div>
+          <button
+            onClick={() => {
+              if (tab === "overview") fetchStats();
+              else if (tab === "users") fetchUsers(userPage, userSearch);
+              else fetchConfig();
+            }}
+            disabled={loading}
+            className="p-2.5 rounded-xl bg-surface-1 border border-line/60 text-ink-muted hover:text-ink-base hover:bg-surface-2 transition-all disabled:opacity-50"
+          >
+            <RefreshCw size={16} className={loading ? "animate-spin" : ""} />
+          </button>
+        </div>
+
+        {/* Tab bar */}
+        <div className="flex gap-1 p-1 bg-surface-2/50 border border-line/40 rounded-xl mb-6 overflow-x-auto">
+          <TabButton active={tab === "overview"} onClick={() => setTab("overview")} icon={BarChart3} label={t("admin_tab_overview", language)} />
+          <TabButton active={tab === "users"} onClick={() => setTab("users")} icon={Users} label={t("admin_tab_users", language)} />
+          <TabButton active={tab === "llm"} onClick={() => setTab("llm")} icon={Cpu} label={t("admin_tab_llm", language)} />
+          <TabButton active={tab === "email"} onClick={() => setTab("email")} icon={Mail} label={t("admin_tab_email", language)} />
+          <TabButton active={tab === "server"} onClick={() => setTab("server")} icon={Server} label={t("admin_tab_server", language)} />
+        </div>
+
+        {/* Status messages */}
+        {error && (
+          <div className="flex items-center gap-2 p-3 mb-4 bg-danger-500/5 border border-danger-500/20 rounded-xl">
+            <XCircle size={16} className="text-danger-500 flex-shrink-0" />
+            <span className="text-sm text-danger-500 font-medium">{error}</span>
+            <button onClick={() => setError(null)} className="ml-auto text-danger-500/60 hover:text-danger-500">
+              <XCircle size={14} />
+            </button>
+          </div>
+        )}
+        {success && (
+          <div className="flex items-center gap-2 p-3 mb-4 bg-success-500/5 border border-success-500/20 rounded-xl">
+            <CheckCircle2 size={16} className="text-success-500 flex-shrink-0" />
+            <span className="text-sm text-success-600 font-medium">{success}</span>
+            <button onClick={() => setSuccess(null)} className="ml-auto text-success-500/60 hover:text-success-500">
+              <XCircle size={14} />
+            </button>
+          </div>
+        )}
+
+        {/* Loading */}
+        {loading && !stats && !users.length && !config && (
+          <div className="flex items-center justify-center py-16">
+            <Loader2 size={24} className="animate-spin text-brand-500" />
+          </div>
+        )}
+
+        {/* ============================================ */}
+        {/* OVERVIEW TAB                                 */}
+        {/* ============================================ */}
+        {tab === "overview" && stats && (
+          <div className="space-y-6">
+            <div className="grid grid-cols-2 sm:grid-cols-3 gap-3">
+              <StatCard icon={Users} label="Total Users" value={stats.totalUsers} color="brand" />
+              <StatCard icon={CheckCircle2} label="Verified" value={stats.verifiedUsers} color="success" />
+              <StatCard icon={Shield} label="Admins" value={stats.adminUsers} color="warning" />
+              <StatCard icon={Database} label="Health Records" value={stats.totalHealthData} color="accent" />
+              <StatCard icon={MessageCircle} label="Chat Sessions" value={stats.totalChats} color="brand" />
+              <StatCard icon={Activity} label="Active Sessions" value={stats.activeSessions} color="success" />
+            </div>
+
+            {stats.healthBreakdown.length > 0 && (
+              <AdminCard icon={Heart} title="Health Data Breakdown">
+                <div className="space-y-2">
+                  {stats.healthBreakdown.map((item) => {
+                    const maxCount = Math.max(...stats.healthBreakdown.map((h) => h.count));
+                    const pct = maxCount > 0 ? (item.count / maxCount) * 100 : 0;
+                    return (
+                      <div key={item.type} className="flex items-center gap-3">
+                        <span className="text-xs text-ink-muted font-medium w-24 truncate capitalize">{item.type}</span>
+                        <div className="flex-1 h-2 bg-surface-2 rounded-full overflow-hidden">
+                          <div className="h-full bg-brand-500 rounded-full transition-all" style={{ width: `${pct}%` }} />
+                        </div>
+                        <span className="text-xs font-bold text-ink-base w-10 text-right">{item.count}</span>
+                      </div>
+                    );
+                  })}
+                </div>
+              </AdminCard>
+            )}
+
+            {stats.registrations.length > 0 && (
+              <AdminCard icon={BarChart3} title="Registrations (Last 30 days)">
+                <div className="flex items-end gap-1 h-24">
+                  {stats.registrations.map((r) => {
+                    const maxR = Math.max(...stats.registrations.map((x) => x.count));
+                    const h = maxR > 0 ? (r.count / maxR) * 100 : 0;
+                    return (
+                      <div key={r.day} className="flex-1 flex flex-col items-center" title={`${r.day}: ${r.count}`}>
+                        <div className="w-full bg-brand-500/80 rounded-t min-h-[2px]" style={{ height: `${Math.max(h, 2)}%` }} />
+                      </div>
+                    );
+                  })}
+                </div>
+                <div className="flex justify-between mt-2">
+                  <span className="text-[10px] text-ink-subtle">{stats.registrations[0]?.day?.slice(5)}</span>
+                  <span className="text-[10px] text-ink-subtle">{stats.registrations[stats.registrations.length - 1]?.day?.slice(5)}</span>
+                </div>
+              </AdminCard>
+            )}
+          </div>
+        )}
+
+        {/* ============================================ */}
+        {/* USERS TAB                                    */}
+        {/* ============================================ */}
+        {tab === "users" && (
+          <div className="space-y-4">
+            {/* Search */}
+            <div className="relative">
+              <Search className="absolute left-3 top-1/2 -translate-y-1/2 text-ink-subtle" size={16} />
+              <input
+                type="text"
+                value={userSearch}
+                onChange={(e) => setUserSearch(e.target.value)}
+                onKeyDown={(e) => e.key === "Enter" && fetchUsers(1, userSearch)}
+                placeholder="Search by email or name..."
+                className="w-full bg-surface-1 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 pl-10 focus:outline-none focus:ring-2 focus:ring-brand-500/20 focus:border-brand-500 transition-all text-sm"
+              />
+            </div>
+
+            {/* Password reset modal */}
+            {resetUserId && (
+              <div className="p-4 bg-warning-500/5 border border-warning-500/20 rounded-xl space-y-3 animate-in fade-in duration-200">
+                <div className="flex items-center gap-2">
+                  <Lock size={16} className="text-warning-500" />
+                  <span className="font-semibold text-sm text-ink-base">
+                    Reset password for: {users.find((u) => u.id === resetUserId)?.email}
+                  </span>
+                </div>
+                <div className="flex gap-2">
+                  <div className="relative flex-1">
+                    <input
+                      type={showResetPass ? "text" : "password"}
+                      value={resetPassword}
+                      onChange={(e) => setResetPassword(e.target.value)}
+                      placeholder="New password (min 6 chars)"
+                      className="w-full bg-surface-1 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 pr-10 focus:outline-none focus:ring-2 focus:ring-brand-500/20 focus:border-brand-500 transition-all text-sm"
+                    />
+                    <button
+                      onClick={() => setShowResetPass(!showResetPass)}
+                      className="absolute right-3 top-1/2 -translate-y-1/2 text-ink-subtle hover:text-ink-base"
+                    >
+                      {showResetPass ? <EyeOff size={14} /> : <Eye size={14} />}
+                    </button>
+                  </div>
+                  <button
+                    onClick={handleResetPassword}
+                    disabled={resetPassword.length < 6}
+                    className="px-4 py-2.5 bg-warning-500 text-white rounded-xl font-bold text-sm hover:bg-warning-600 transition-colors disabled:opacity-50"
+                  >
+                    Reset
+                  </button>
+                  <button
+                    onClick={() => { setResetUserId(null); setResetPassword(""); }}
+                    className="px-3 py-2.5 bg-surface-2 text-ink-muted rounded-xl text-sm hover:bg-surface-3 transition-colors"
+                  >
+                    Cancel
+                  </button>
+                </div>
+                <p className="text-[11px] text-warning-600">
+                  This will invalidate all active sessions for this user. They will need to log in with the new password.
+                </p>
+              </div>
+            )}
+
+            {/* User list */}
+            <div className="bg-surface-1 rounded-2xl shadow-soft border border-line/40 overflow-hidden">
+              {users.length === 0 && !loading ? (
+                <div className="p-8 text-center text-ink-muted text-sm">No users found</div>
+              ) : (
+                <div className="divide-y divide-line/40">
+                  {users.map((u) => (
+                    <div key={u.id} className="p-4 flex items-center gap-3 hover:bg-surface-2/30 transition-colors">
+                      <div className={`w-9 h-9 rounded-full flex items-center justify-center text-white font-bold text-xs flex-shrink-0 ${
+                        u.isAdmin ? "bg-warning-500" : "bg-brand-500"
+                      }`}>
+                        {(u.displayName || u.email)[0].toUpperCase()}
+                      </div>
+                      <div className="flex-1 min-w-0">
+                        <div className="flex items-center gap-2 flex-wrap">
+                          <span className="text-sm font-semibold text-ink-base truncate">
+                            {u.displayName || u.email}
+                          </span>
+                          {u.isAdmin && (
+                            <span className="text-[9px] font-bold px-1.5 py-0.5 rounded bg-warning-500/10 text-warning-600">ADMIN</span>
+                          )}
+                          {u.emailVerified && <CheckCircle2 size={12} className="text-success-500 flex-shrink-0" />}
+                        </div>
+                        <div className="flex items-center gap-3 mt-0.5">
+                          <span className="text-xs text-ink-muted truncate">{u.email}</span>
+                          <span className="text-[10px] text-ink-subtle hidden sm:inline">
+                            {u.healthDataCount} records · {u.chatHistoryCount} chats
+                          </span>
+                        </div>
+                      </div>
+                      <div className="flex items-center gap-1 flex-shrink-0">
+                        {/* Reset password */}
+                        <button
+                          onClick={() => { setResetUserId(u.id); setResetPassword(""); clearMessages(); }}
+                          className="p-2 rounded-lg text-ink-subtle hover:text-warning-500 hover:bg-warning-500/10 transition-colors"
+                          title="Reset password"
+                        >
+                          <Key size={14} />
+                        </button>
+                        {/* Delete */}
+                        {deleteConfirm === u.id ? (
+                          <div className="flex items-center gap-1">
+                            <button onClick={() => deleteUser(u.id)} className="text-[11px] font-bold text-danger-500 bg-danger-500/10 px-2 py-1.5 rounded-lg">
+                              Confirm
+                            </button>
+                            <button onClick={() => setDeleteConfirm(null)} className="text-[11px] text-ink-muted px-2 py-1.5 rounded-lg hover:bg-surface-2">
+                              No
+                            </button>
+                          </div>
+                        ) : (
+                          <button
+                            onClick={() => setDeleteConfirm(u.id)}
+                            disabled={u.isAdmin}
+                            className="p-2 rounded-lg text-ink-subtle hover:text-danger-500 hover:bg-danger-500/10 transition-colors disabled:opacity-30 disabled:cursor-not-allowed"
+                            title={u.isAdmin ? "Cannot delete admin" : "Delete user"}
+                          >
+                            <Trash2 size={14} />
+                          </button>
+                        )}
+                      </div>
+                    </div>
+                  ))}
+                </div>
+              )}
+
+              {totalPages > 1 && (
+                <div className="flex items-center justify-between px-4 py-3 border-t border-line/40 bg-surface-2/30">
+                  <span className="text-xs text-ink-muted">{userTotal} users · Page {userPage}/{totalPages}</span>
+                  <div className="flex gap-1.5">
+                    <button onClick={() => fetchUsers(userPage - 1, userSearch)} disabled={userPage <= 1}
+                      className="p-1.5 rounded-lg border border-line/60 text-ink-subtle hover:text-ink-base disabled:opacity-30">
+                      <ChevronLeft size={14} />
+                    </button>
+                    <button onClick={() => fetchUsers(userPage + 1, userSearch)} disabled={userPage >= totalPages}
+                      className="p-1.5 rounded-lg border border-line/60 text-ink-subtle hover:text-ink-base disabled:opacity-30">
+                      <ChevronRight size={14} />
+                    </button>
+                  </div>
+                </div>
+              )}
+            </div>
+          </div>
+        )}
+
+        {/* ============================================ */}
+        {/* LLM PROVIDERS TAB                            */}
+        {/* ============================================ */}
+        {tab === "llm" && (
+          <div className="space-y-4">
+            {/* Header with action buttons */}
+            <div className="flex flex-col sm:flex-row sm:items-center justify-between gap-3">
+              <div>
+                <h3 className="font-bold text-ink-base text-sm">{t("admin_llm_health", language)}</h3>
+                <p className="text-xs text-ink-muted mt-0.5">
+                  {t("admin_llm_health_subtitle", language)}
+                </p>
+              </div>
+              <div className="flex gap-2">
+                <button
+                  onClick={fetchAllModels}
+                  disabled={fetchingModels}
+                  className="flex items-center gap-2 px-3 py-2.5 bg-surface-1 border border-line/60 text-ink-base rounded-xl font-bold text-xs hover:bg-surface-2 transition-all disabled:opacity-50"
+                >
+                  {fetchingModels ? <Loader2 size={13} className="animate-spin" /> : <Database size={13} />}
+                  {fetchingModels ? t("admin_fetching", language) : t("admin_fetch_models", language)}
+                </button>
+                <button
+                  onClick={fetchLlmHealth}
+                  disabled={llmTesting}
+                  className="flex items-center gap-2 px-3 py-2.5 bg-brand-500 text-white rounded-xl font-bold text-xs hover:brightness-110 transition-all disabled:opacity-50"
+                >
+                  {llmTesting ? <Loader2 size={13} className="animate-spin" /> : <Zap size={13} />}
+                  {llmTesting ? t("admin_testing", language) : t("admin_test_all_providers", language)}
+                </button>
+              </div>
+            </div>
+
+            {/* HF token not configured banner */}
+            {llmHealth?.error && (
+              <div className="flex items-start gap-2 p-3 bg-warning-500/5 border border-warning-500/20 rounded-xl">
+                <AlertTriangle size={16} className="text-warning-500 flex-shrink-0 mt-0.5" />
+                <div className="flex-1 min-w-0">
+                  <p className="text-sm text-warning-600 font-medium">{llmHealth.error}</p>
+                  <p className="text-[11px] text-ink-subtle mt-0.5">
+                    Go to Server tab → HuggingFace Inference → set your HF token (with
+                    &quot;Make calls to Inference Providers&quot; permission).
+                  </p>
+                </div>
+              </div>
+            )}
+
+            {/* Summary cards — always render when we have a result, even on errors */}
+            {llmHealth && (
+              <div className="grid grid-cols-3 gap-3">
+                <div className="bg-surface-1 rounded-2xl shadow-soft border border-line/40 p-4 text-center">
+                  <div className="text-2xl font-black text-ink-base">{llmHealth.summary.total}</div>
+                  <div className="text-[11px] text-ink-muted font-semibold">{t("admin_total_models", language)}</div>
+                </div>
+                <div className="bg-surface-1 rounded-2xl shadow-soft border border-success-500/20 p-4 text-center">
+                  <div className="text-2xl font-black text-success-500">{llmHealth.summary.ok}</div>
+                  <div className="text-[11px] text-success-600 font-semibold">{t("admin_online", language)}</div>
+                </div>
+                <div className="bg-surface-1 rounded-2xl shadow-soft border border-danger-500/20 p-4 text-center">
+                  <div className="text-2xl font-black text-danger-500">{llmHealth.summary.error}</div>
+                  <div className="text-[11px] text-danger-600 font-semibold">{t("admin_offline", language)}</div>
+                </div>
+              </div>
+            )}
+
+            {/* Loading */}
+            {llmTesting && !llmHealth && (
+              <div className="flex items-center justify-center py-12">
+                <div className="flex flex-col items-center gap-3">
+                  <Loader2 size={24} className="animate-spin text-brand-500" />
+                  <p className="text-sm text-ink-muted">Testing models in parallel...</p>
+                </div>
+              </div>
+            )}
+
+            {/* Provider Status — always render once a result is present, even if the
+                list only contains error rows. This fixes the "empty display" bug where
+                a missing HF_TOKEN made the whole section disappear. */}
+            {llmHealth && (
+              <AdminCard
+                icon={Cpu}
+                title={`${t("admin_provider_status", language)}${
+                  llmHealth.summary.testedAt
+                    ? ` — ${new Date(llmHealth.summary.testedAt).toLocaleTimeString()}`
+                    : ""
+                }`}
+              >
+                {llmHealth.models.length === 0 ? (
+                  <div className="py-6 text-center">
+                    <WifiOff size={24} className="text-ink-subtle mx-auto mb-2" />
+                    <p className="text-sm text-ink-muted font-medium">{t("admin_no_models_tested", language)}</p>
+                    <p className="text-[11px] text-ink-subtle mt-1">
+                      {t("admin_click_test", language)}
+                    </p>
+                  </div>
+                ) : (
+                  <div className="divide-y divide-line/30">
+                    {llmHealth.models.map((m) => (
+                      <div key={m.model} className="flex items-center gap-3 py-2.5">
+                        <div
+                          className={`w-2.5 h-2.5 rounded-full flex-shrink-0 ${
+                            m.status === "ok" ? "bg-success-500" : "bg-danger-500"
+                          }`}
+                        />
+                        <div className="flex-1 min-w-0">
+                          <span className="text-sm font-medium text-ink-base block truncate">
+                            {m.model.split("/").pop()?.replace(":sambanova", " (SambaNova)").replace(":together", " (Together)")}
+                          </span>
+                          <span className="text-[10px] text-ink-subtle truncate block">
+                            {m.model.split("/")[0]}
+                          </span>
+                        </div>
+                        <div className="flex-shrink-0 text-right">
+                          {m.status === "ok" ? (
+                            <div>
+                              <span className="text-xs font-bold text-success-500">{m.latencyMs}ms</span>
+                              {m.response && (
+                                <span className="text-[10px] text-ink-subtle block">{m.response}</span>
+                              )}
+                            </div>
+                          ) : (
+                            <div>
+                              <span className="text-xs font-bold text-danger-500">
+                                {m.httpStatus || "Error"}
+                              </span>
+                              <span className="text-[10px] text-ink-subtle block truncate max-w-[120px]">
+                                {m.error?.slice(0, 40)}
+                              </span>
+                            </div>
+                          )}
+                        </div>
+                      </div>
+                    ))}
+                  </div>
+                )}
+              </AdminCard>
+            )}
+
+            {/* Multi-provider model catalog (from Fetch Models) */}
+            {fetchedModels && (
+              <AdminCard
+                icon={Database}
+                title={`Discovered Models — ${fetchedModels.summary.totalModels} across ${fetchedModels.summary.providersOk}/${fetchedModels.summary.providers} providers`}
+              >
+                <div className="space-y-3">
+                  {fetchedModels.providers.map((p) => (
+                    <ProviderModelsRow key={p.provider} provider={p} />
+                  ))}
+                </div>
+              </AdminCard>
+            )}
+
+            {/* Routing explanation */}
+            <AdminCard icon={Activity} title={t("admin_how_routing_works", language)}>
+              <div className="space-y-2 text-xs text-ink-muted leading-relaxed">
+                <p>When a user sends a message, the system tries models in order:</p>
+                <ol className="list-decimal list-inside space-y-1 pl-1">
+                  <li><strong>OllaBridge</strong> — custom gateway (if configured)</li>
+                  <li><strong>HF Inference</strong> — cascades through all green models above</li>
+                  <li><strong>Enterprise (OpenAI / Claude / WatsonX)</strong> — paid fallback if configured</li>
+                  <li><strong>Cached FAQ</strong> — 15 pre-built medical answers (always works)</li>
+                </ol>
+                <p>If a model returns 429 (rate limit) or 5xx (server error), the next model in the chain is tried automatically. Users never see an error unless all providers are down.</p>
+              </div>
+            </AdminCard>
+          </div>
+        )}
+
+        {/* ============================================ */}
+        {/* EMAIL (SMTP) TAB                             */}
+        {/* ============================================ */}
+        {tab === "email" && config && (
+          <div className="space-y-4">
+            <AdminCard icon={Mail} title="Outgoing Email (SMTP)">
+              <div className="space-y-4">
+                {/* Status indicator */}
+                <div className={`flex items-center gap-2 p-3 rounded-xl border ${
+                  config.smtp.configured
+                    ? "bg-success-500/5 border-success-500/20"
+                    : "bg-warning-500/5 border-warning-500/20"
+                }`}>
+                  {config.smtp.configured ? (
+                    <>
+                      <CheckCircle2 size={16} className="text-success-500" />
+                      <span className="text-sm text-success-600 font-medium">SMTP configured and active</span>
+                    </>
+                  ) : (
+                    <>
+                      <AlertTriangle size={16} className="text-warning-500" />
+                      <span className="text-sm text-warning-600 font-medium">SMTP not configured — emails will log to console</span>
+                    </>
+                  )}
+                </div>
+
+                <div className="grid grid-cols-1 sm:grid-cols-2 gap-4">
+                  <ConfigInput label="SMTP Host" value={config.smtp.host} placeholder="smtp.gmail.com"
+                    onChange={(v) => updateConfig("smtp", "host", v)} />
+                  <ConfigInput label="SMTP Port" value={String(config.smtp.port)} placeholder="587"
+                    onChange={(v) => updateConfig("smtp", "port", v)} type="number" />
+                  <ConfigInput label="SMTP Username" value={config.smtp.user} placeholder="user@example.com"
+                    onChange={(v) => updateConfig("smtp", "user", v)} />
+                  <div className="space-y-1.5">
+                    <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider">SMTP Password</label>
+                    <div className="relative">
+                      <input
+                        type={showSmtpPass ? "text" : "password"}
+                        value={config.smtp.pass}
+                        onChange={(e) => updateConfig("smtp", "pass", e.target.value)}
+                        placeholder="••••••••"
+                        className="w-full bg-surface-0 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 pr-10 focus:outline-none focus:ring-2 focus:ring-brand-500/20 focus:border-brand-500 transition-all text-sm"
+                      />
+                      <button onClick={() => setShowSmtpPass(!showSmtpPass)}
+                        className="absolute right-3 top-1/2 -translate-y-1/2 text-ink-subtle hover:text-ink-base">
+                        {showSmtpPass ? <EyeOff size={14} /> : <Eye size={14} />}
+                      </button>
+                    </div>
+                  </div>
+                </div>
+
+                <ConfigInput label="From Email" value={config.smtp.fromEmail} placeholder="MedOS <noreply@medos.health>"
+                  onChange={(v) => updateConfig("smtp", "fromEmail", v)} fullWidth />
+                <ConfigInput label="Recovery / Support Email" value={config.smtp.recoveryEmail} placeholder="support@medos.health"
+                  onChange={(v) => updateConfig("smtp", "recoveryEmail", v)} fullWidth
+                  hint="Displayed to users for account recovery and support inquiries" />
+              </div>
+            </AdminCard>
+
+            {/* Save button */}
+            {configDirty && (
+              <div className="sticky bottom-20 md:bottom-4 z-10">
+                <button onClick={saveConfig} disabled={loading}
+                  className="w-full py-3 bg-brand-500 text-white rounded-xl font-bold text-sm shadow-glow hover:brightness-110 transition-all flex items-center justify-center gap-2 disabled:opacity-50">
+                  <Save size={16} />
+                  {loading ? t("admin_saving", language) : t("admin_save_config", language)}
+                </button>
+              </div>
+            )}
+          </div>
+        )}
+
+        {/* ============================================ */}
+        {/* SERVER TAB                                   */}
+        {/* ============================================ */}
+        {tab === "server" && config && (
+          <div className="space-y-4">
+            {/* --- OllaBridge Cloud Gateway --- */}
+            <AdminCard icon={Server} title={t("admin_ollabridge_title", language)}>
+              <div className="space-y-4">
+                <ProviderStatusBadge
+                  configured={!!config.llm.ollabridgeConfigured}
+                  test={connectionTests["ollabridge"]}
+                  configuredLabel="OllaBridge URL configured"
+                  notConfiguredLabel="OllaBridge not configured — chat will fall back to HF Inference"
+                />
+
+                <p className="text-[11px] text-ink-subtle leading-relaxed">
+                  OllaBridge is the enterprise pairing gateway. It federates local Ollama, Groq,
+                  Gemini, OpenRouter, and your HomePilot node into one OpenAI-compatible endpoint.
+                  See{" "}
+                  <a
+                    href="https://github.com/ruslanmv/ollabridge"
+                    target="_blank"
+                    rel="noopener noreferrer"
+                    className="text-brand-500 hover:underline"
+                  >
+                    ruslanmv/ollabridge
+                  </a>{" "}
+                  for self-hosting, or use the shared cloud instance at{" "}
+                  <code className="text-[10px] bg-surface-2 px-1 py-0.5 rounded">
+                    ruslanmv-ollabridge.hf.space
+                  </code>
+                  .
+                </p>
+
+                <ConfigInput
+                  label="OllaBridge URL"
+                  value={config.llm.ollabridgeUrl}
+                  placeholder="https://ruslanmv-ollabridge.hf.space"
+                  onChange={(v) => updateConfig("llm", "ollabridgeUrl", v)}
+                  hint="Root URL of your OllaBridge gateway (no trailing slash)"
+                />
+                <SecretInput
+                  label="OllaBridge API Key"
+                  value={config.llm.ollabridgeApiKey}
+                  placeholder="sk-ollabridge-..."
+                  onChange={(v) => updateConfig("llm", "ollabridgeApiKey", v)}
+                  visible={!!showSecrets["ollabridgeApiKey"]}
+                  onToggleVisible={() => toggleSecret("ollabridgeApiKey")}
+                  hint="Bearer token exchanged via the OllaBridge /pair flow. Leave empty if the gateway has auth disabled."
+                />
+
+                <div className="flex items-center justify-end pt-1">
+                  <TestConnectionButton
+                    onClick={() => testProviderConnection("ollabridge")}
+                    disabled={!config.llm.ollabridgeUrl || configDirty}
+                    pending={connectionTests["ollabridge"] === "pending"}
+                    language={language}
+                  />
+                </div>
+                {configDirty && (
+                  <p className="text-[11px] text-warning-600">
+                    Save your changes before testing — the server needs the new URL/key on disk.
+                  </p>
+                )}
+              </div>
+            </AdminCard>
+
+            {/* --- HuggingFace Inference --- */}
+            <AdminCard icon={Cpu} title={t("admin_hf_title", language)}>
+              <div className="space-y-4">
+                <ProviderStatusBadge
+                  configured={!!config.llm.hfConfigured}
+                  test={connectionTests["huggingface"]}
+                  configuredLabel="HF token configured"
+                  notConfiguredLabel="HF token not set — LLM health check will fail"
+                />
+                <SecretInput
+                  label="HuggingFace Token"
+                  value={config.llm.hfToken}
+                  placeholder="hf_..."
+                  onChange={(v) => updateConfig("llm", "hfToken", v)}
+                  visible={!!showSecrets["hfToken"]}
+                  onToggleVisible={() => toggleSecret("hfToken")}
+                  hint="Token with 'Make calls to Inference Providers' permission. Create at huggingface.co/settings/tokens"
+                />
+                <ConfigInput
+                  label="Default Model"
+                  value={config.llm.hfDefaultModel}
+                  placeholder="meta-llama/Llama-3.3-70B-Instruct"
+                  onChange={(v) => updateConfig("llm", "hfDefaultModel", v)}
+                  hint="Primary model for the free-best preset"
+                />
+                <ConfigInput
+                  label="Default Preset"
+                  value={config.llm.defaultPreset}
+                  placeholder="free-best"
+                  onChange={(v) => updateConfig("llm", "defaultPreset", v)}
+                  hint="free-best, free-fastest, deep-reasoning, local, ollabridge"
+                />
+                <div className="flex items-center justify-end pt-1">
+                  <TestConnectionButton
+                    onClick={() => testProviderConnection("huggingface")}
+                    disabled={!config.llm.hfConfigured || configDirty}
+                    pending={connectionTests["huggingface"] === "pending"}
+                    language={language}
+                  />
+                </div>
+              </div>
+            </AdminCard>
+
+            {/* --- Groq (Free) --- */}
+            <AdminCard icon={Zap} title={t("admin_groq_title", language)}>
+              <div className="space-y-4">
+                <ProviderStatusBadge
+                  configured={!!config.llm.groqConfigured}
+                  test={connectionTests["groq"]}
+                  configuredLabel="Groq API key configured"
+                  notConfiguredLabel="Groq not configured — skip if OllaBridge already federates Groq"
+                />
+                <SecretInput
+                  label="Groq API Key"
+                  value={config.llm.groqApiKey}
+                  placeholder="gsk_..."
+                  onChange={(v) => updateConfig("llm", "groqApiKey", v)}
+                  visible={!!showSecrets["groqApiKey"]}
+                  onToggleVisible={() => toggleSecret("groqApiKey")}
+                  hint="Free tier at console.groq.com/keys — 30 req/min per model."
+                />
+                <div className="flex items-center justify-end pt-1">
+                  <TestConnectionButton
+                    onClick={() => testProviderConnection("groq")}
+                    disabled={!config.llm.groqConfigured || configDirty}
+                    pending={connectionTests["groq"] === "pending"}
+                    language={language}
+                  />
+                </div>
+              </div>
+            </AdminCard>
+
+            {/* --- OpenAI (Paid) --- */}
+            <AdminCard icon={Cpu} title={t("admin_openai_title", language)}>
+              <div className="space-y-4">
+                <ProviderStatusBadge
+                  configured={!!config.llm.openaiConfigured}
+                  test={connectionTests["openai"]}
+                  configuredLabel="OpenAI API key configured"
+                  notConfiguredLabel="OpenAI not configured — optional paid fallback"
+                />
+                <SecretInput
+                  label="OpenAI API Key"
+                  value={config.llm.openaiApiKey}
+                  placeholder="sk-..."
+                  onChange={(v) => updateConfig("llm", "openaiApiKey", v)}
+                  visible={!!showSecrets["openaiApiKey"]}
+                  onToggleVisible={() => toggleSecret("openaiApiKey")}
+                  hint="Used only if the free chain fails and OpenAI is enabled in the preset. Billed per token."
+                />
+                <div className="flex items-center justify-end pt-1">
+                  <TestConnectionButton
+                    onClick={() => testProviderConnection("openai")}
+                    disabled={!config.llm.openaiConfigured || configDirty}
+                    pending={connectionTests["openai"] === "pending"}
+                    language={language}
+                  />
+                </div>
+              </div>
+            </AdminCard>
+
+            {/* --- Anthropic Claude (Paid) --- */}
+            <AdminCard icon={Cpu} title={t("admin_anthropic_title", language)}>
+              <div className="space-y-4">
+                <ProviderStatusBadge
+                  configured={!!config.llm.anthropicConfigured}
+                  test={connectionTests["anthropic"]}
+                  configuredLabel="Anthropic API key configured"
+                  notConfiguredLabel="Anthropic not configured — optional paid fallback"
+                />
+                <SecretInput
+                  label="Anthropic API Key"
+                  value={config.llm.anthropicApiKey}
+                  placeholder="sk-ant-..."
+                  onChange={(v) => updateConfig("llm", "anthropicApiKey", v)}
+                  visible={!!showSecrets["anthropicApiKey"]}
+                  onToggleVisible={() => toggleSecret("anthropicApiKey")}
+                  hint="Claude Opus 4.6 / Sonnet 4.6 / Haiku 4.5. Billed per token."
+                />
+                <div className="flex items-center justify-end pt-1">
+                  <TestConnectionButton
+                    onClick={() => testProviderConnection("anthropic")}
+                    disabled={!config.llm.anthropicConfigured || configDirty}
+                    pending={connectionTests["anthropic"] === "pending"}
+                    language={language}
+                  />
+                </div>
+              </div>
+            </AdminCard>
+
+            {/* --- IBM WatsonX (Paid) --- */}
+            <AdminCard icon={Cpu} title={t("admin_watsonx_title", language)}>
+              <div className="space-y-4">
+                <ProviderStatusBadge
+                  configured={!!config.llm.watsonxConfigured}
+                  test={connectionTests["watsonx"]}
+                  configuredLabel="WatsonX configured"
+                  notConfiguredLabel="WatsonX not configured — needs API key AND project ID"
+                />
+                <SecretInput
+                  label="WatsonX API Key"
+                  value={config.llm.watsonxApiKey}
+                  placeholder="IBM Cloud API key"
+                  onChange={(v) => updateConfig("llm", "watsonxApiKey", v)}
+                  visible={!!showSecrets["watsonxApiKey"]}
+                  onToggleVisible={() => toggleSecret("watsonxApiKey")}
+                  hint="IBM Cloud IAM API key — cloud.ibm.com → Manage → Access → API keys"
+                />
+                <ConfigInput
+                  label="WatsonX Project ID"
+                  value={config.llm.watsonxProjectId}
+                  placeholder="00000000-0000-0000-0000-000000000000"
+                  onChange={(v) => updateConfig("llm", "watsonxProjectId", v)}
+                  hint="Project UUID from your WatsonX.ai workspace"
+                />
+                <ConfigInput
+                  label="WatsonX Region URL"
+                  value={config.llm.watsonxUrl}
+                  placeholder="https://us-south.ml.cloud.ibm.com"
+                  onChange={(v) => updateConfig("llm", "watsonxUrl", v)}
+                  hint="Region endpoint: us-south, eu-de, jp-tok, etc."
+                />
+                <div className="flex items-center justify-end pt-1">
+                  <TestConnectionButton
+                    onClick={() => testProviderConnection("watsonx")}
+                    disabled={!config.llm.watsonxConfigured || configDirty}
+                    pending={connectionTests["watsonx"] === "pending"}
+                    language={language}
+                  />
+                </div>
+              </div>
+            </AdminCard>
+
+            {/* --- Local Ollama --- */}
+            <AdminCard icon={Server} title={t("admin_local_ollama", language)}>
+              <div className="space-y-4">
+                <ConfigInput
+                  label="Ollama Base URL"
+                  value={config.llm.ollamaUrl}
+                  placeholder="http://localhost:11434"
+                  onChange={(v) => updateConfig("llm", "ollamaUrl", v)}
+                  hint="URL for a local Ollama server (used with the 'local' preset)."
+                />
+              </div>
+            </AdminCard>
+
+            {/* --- Application Settings --- */}
+            <AdminCard icon={Shield} title={t("admin_application_settings", language)}>
+              <div className="space-y-4">
+                <ConfigInput
+                  label="Application URL"
+                  value={config.app.appUrl}
+                  placeholder="https://ruslanmv-medibot.hf.space"
+                  onChange={(v) => updateConfig("app", "appUrl", v)}
+                  hint="Public URL used in email templates and redirects"
+                />
+                <ConfigInput
+                  label="Allowed Origins (CORS)"
+                  value={config.app.allowedOrigins}
+                  placeholder="https://your-app.vercel.app,http://localhost:3000"
+                  onChange={(v) => updateConfig("app", "allowedOrigins", v)}
+                  hint="Comma-separated list of allowed frontend origins"
+                />
+              </div>
+            </AdminCard>
+
+            <AdminCard icon={Database} title={t("admin_system_info", language)}>
+              <div className="space-y-1">
+                <InfoRow label="Backend" value={process.env.NEXT_PUBLIC_BACKEND_URL || "HuggingFace Space"} />
+                <InfoRow label="Database" value="SQLite (WAL mode)" />
+                <InfoRow label="Auth" value="JWT sessions (30-day expiry)" />
+                <InfoRow label="Fallback Chain" value="OllaBridge → HF → Groq → Paid → Cached FAQ" />
+              </div>
+            </AdminCard>
+
+            {/* Save button */}
+            {configDirty && (
+              <div className="sticky bottom-20 md:bottom-4 z-10">
+                <button onClick={saveConfig} disabled={loading}
+                  className="w-full py-3 bg-brand-500 text-white rounded-xl font-bold text-sm shadow-glow hover:brightness-110 transition-all flex items-center justify-center gap-2 disabled:opacity-50">
+                  <Save size={16} />
+                  {loading ? t("admin_saving", language) : t("admin_save_config", language)}
+                </button>
+              </div>
+            )}
+          </div>
+        )}
+      </div>
+    </div>
+  );
+}
+
+/* ============================================================
+ * Sub-components
+ * ============================================================ */
+
+function TabButton({ active, onClick, icon: Icon, label }: {
+  active: boolean; onClick: () => void; icon: any; label: string;
+}) {
+  return (
+    <button onClick={onClick}
+      className={`flex-1 flex items-center justify-center gap-1.5 py-2.5 px-3 rounded-lg text-sm font-semibold transition-all whitespace-nowrap ${
+        active ? "bg-surface-1 text-ink-base shadow-soft" : "text-ink-muted hover:text-ink-base"
+      }`}
+    >
+      <Icon size={15} />
+      <span className="hidden sm:inline">{label}</span>
+    </button>
+  );
+}
+
+function StatCard({ icon: Icon, label, value, color }: {
+  icon: any; label: string; value: number; color: string;
+}) {
+  const cls: Record<string, string> = {
+    brand: "text-brand-500 bg-brand-500/10",
+    success: "text-success-500 bg-success-500/10",
+    warning: "text-warning-500 bg-warning-500/10",
+    accent: "text-accent-500 bg-accent-500/10",
+  };
+  return (
+    <div className="bg-surface-1 rounded-2xl shadow-soft border border-line/40 p-4">
+      <div className={`w-8 h-8 rounded-xl flex items-center justify-center mb-2 ${cls[color] || cls.brand}`}>
+        <Icon size={16} />
+      </div>
+      <div className="text-2xl font-black text-ink-base">{value.toLocaleString()}</div>
+      <div className="text-[11px] text-ink-muted font-semibold mt-0.5">{label}</div>
+    </div>
+  );
+}
+
+function AdminCard({ icon: Icon, title, children }: {
+  icon: any; title: string; children: React.ReactNode;
+}) {
+  return (
+    <div className="bg-surface-1 rounded-2xl shadow-soft border border-line/40 overflow-hidden">
+      <div className="p-4 bg-surface-2/50 border-b border-line/40 flex items-center gap-2">
+        <Icon size={16} className="text-brand-500" />
+        <h3 className="font-semibold text-ink-base text-sm">{title}</h3>
+      </div>
+      <div className="p-4">{children}</div>
+    </div>
+  );
+}
+
+function ConfigInput({ label, value, placeholder, onChange, hint, type = "text", fullWidth }: {
+  label: string; value: string; placeholder: string;
+  onChange: (v: string) => void; hint?: string; type?: string; fullWidth?: boolean;
+}) {
+  return (
+    <div className={`space-y-1.5 ${fullWidth ? "" : ""}`}>
+      <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider">{label}</label>
+      <input
+        type={type}
+        value={value}
+        onChange={(e) => onChange(e.target.value)}
+        placeholder={placeholder}
+        className="w-full bg-surface-0 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 focus:outline-none focus:ring-2 focus:ring-brand-500/20 focus:border-brand-500 transition-all text-sm"
+      />
+      {hint && <p className="text-[11px] text-ink-subtle leading-snug">{hint}</p>}
+    </div>
+  );
+}
+
+function InfoRow({ label, value }: { label: string; value: string }) {
+  return (
+    <div className="flex items-center justify-between py-2.5 border-b border-line/30 last:border-0">
+      <span className="text-xs text-ink-muted font-medium">{label}</span>
+      <span className="text-xs text-ink-base font-semibold text-right max-w-[60%] truncate">{value}</span>
+    </div>
+  );
+}
+
+/** One row in the multi-provider model catalog. Collapsible by default. */
+function ProviderModelsRow({ provider }: { provider: ProviderModels }) {
+  const [open, setOpen] = useState(false);
+  const pricingColor: Record<string, string> = {
+    free: "bg-success-500/10 text-success-600 border-success-500/30",
+    cheap: "bg-brand-500/10 text-brand-600 border-brand-500/30",
+    paid: "bg-warning-500/10 text-warning-600 border-warning-500/30",
+    local: "bg-surface-2 text-ink-muted border-line/40",
+  };
+  return (
+    <div className="bg-surface-0 border border-line/40 rounded-xl overflow-hidden">
+      <button
+        onClick={() => setOpen((o) => !o)}
+        className="w-full flex items-center gap-3 p-3 hover:bg-surface-2/40 transition-colors text-left"
+      >
+        <div
+          className={`w-2.5 h-2.5 rounded-full flex-shrink-0 ${
+            provider.ok
+              ? "bg-success-500"
+              : provider.configured
+                ? "bg-danger-500"
+                : "bg-ink-subtle/40"
+          }`}
+        />
+        <div className="flex-1 min-w-0">
+          <div className="flex items-center gap-2 flex-wrap">
+            <span className="text-sm font-semibold text-ink-base">{provider.label}</span>
+            <span
+              className={`text-[9px] font-bold px-1.5 py-0.5 rounded border uppercase tracking-wide ${
+                pricingColor[provider.pricing] || pricingColor.free
+              }`}
+            >
+              {provider.pricing}
+            </span>
+            {!provider.configured && (
+              <span className="text-[9px] font-bold px-1.5 py-0.5 rounded bg-surface-2 text-ink-subtle">
+                NOT CONFIGURED
+              </span>
+            )}
+          </div>
+          <div className="text-[11px] text-ink-subtle mt-0.5">
+            {provider.models.length} model{provider.models.length === 1 ? "" : "s"}
+            {provider.error ? ` · ${provider.error}` : ""}
+          </div>
+        </div>
+        <ChevronRight
+          size={14}
+          className={`text-ink-subtle transition-transform ${open ? "rotate-90" : ""}`}
+        />
+      </button>
+      {open && provider.models.length > 0 && (
+        <div className="border-t border-line/30 max-h-72 overflow-y-auto">
+          {provider.models.map((m) => (
+            <div
+              key={`${provider.provider}-${m.id}`}
+              className="flex items-center gap-3 px-3 py-2 border-b border-line/20 last:border-0 text-xs"
+            >
+              <div className="flex-1 min-w-0">
+                <span className="font-medium text-ink-base truncate block">{m.name}</span>
+                <span className="text-[10px] text-ink-subtle truncate block">
+                  {m.id} {m.ownedBy && `· ${m.ownedBy}`}
+                </span>
+              </div>
+              {m.context && (
+                <span className="text-[10px] text-ink-subtle flex-shrink-0">
+                  {(m.context / 1000).toFixed(0)}k ctx
+                </span>
+              )}
+            </div>
+          ))}
+        </div>
+      )}
+    </div>
+  );
+}
+
+/** Status banner for a provider card (inside the Server tab). */
+function ProviderStatusBadge({
+  configured,
+  test,
+  configuredLabel,
+  notConfiguredLabel,
+}: {
+  configured: boolean;
+  test?: ConnectionTestResult | "pending";
+  configuredLabel: string;
+  notConfiguredLabel: string;
+}) {
+  if (test === "pending") {
+    return (
+      <div className="flex items-center gap-2 p-3 rounded-xl border bg-brand-500/5 border-brand-500/20">
+        <Loader2 size={16} className="text-brand-500 animate-spin" />
+        <span className="text-sm text-brand-600 font-medium">Testing connection...</span>
+      </div>
+    );
+  }
+  if (test && typeof test === "object") {
+    return (
+      <div
+        className={`flex items-center gap-2 p-3 rounded-xl border ${
+          test.ok
+            ? "bg-success-500/5 border-success-500/20"
+            : "bg-danger-500/5 border-danger-500/20"
+        }`}
+      >
+        {test.ok ? (
+          <CheckCircle2 size={16} className="text-success-500 flex-shrink-0" />
+        ) : (
+          <XCircle size={16} className="text-danger-500 flex-shrink-0" />
+        )}
+        <div className="flex-1 min-w-0">
+          <div
+            className={`text-sm font-medium ${
+              test.ok ? "text-success-600" : "text-danger-600"
+            }`}
+          >
+            {test.ok ? `Connected · ${test.latencyMs}ms` : `Failed · ${test.error || "Unknown error"}`}
+          </div>
+          {test.details && <div className="text-[11px] text-ink-subtle truncate">{test.details}</div>}
+        </div>
+      </div>
+    );
+  }
+  return (
+    <div
+      className={`flex items-center gap-2 p-3 rounded-xl border ${
+        configured
+          ? "bg-success-500/5 border-success-500/20"
+          : "bg-surface-2/50 border-line/40"
+      }`}
+    >
+      {configured ? (
+        <>
+          <CheckCircle2 size={16} className="text-success-500" />
+          <span className="text-sm text-success-600 font-medium">{configuredLabel}</span>
+        </>
+      ) : (
+        <>
+          <Wifi size={16} className="text-ink-subtle" />
+          <span className="text-sm text-ink-muted font-medium">{notConfiguredLabel}</span>
+        </>
+      )}
+    </div>
+  );
+}
+
+/** Password-style input with show/hide toggle — used for every API key. */
+function SecretInput({
+  label,
+  value,
+  placeholder,
+  onChange,
+  visible,
+  onToggleVisible,
+  hint,
+}: {
+  label: string;
+  value: string;
+  placeholder: string;
+  onChange: (v: string) => void;
+  visible: boolean;
+  onToggleVisible: () => void;
+  hint?: string;
+}) {
+  return (
+    <div className="space-y-1.5">
+      <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider">{label}</label>
+      <div className="relative">
+        <input
+          type={visible ? "text" : "password"}
+          value={value}
+          onChange={(e) => onChange(e.target.value)}
+          placeholder={placeholder}
+          className="w-full bg-surface-0 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 pr-10 focus:outline-none focus:ring-2 focus:ring-brand-500/20 focus:border-brand-500 transition-all text-sm font-mono"
+          autoComplete="off"
+          spellCheck={false}
+        />
+        <button
+          type="button"
+          onClick={onToggleVisible}
+          className="absolute right-3 top-1/2 -translate-y-1/2 text-ink-subtle hover:text-ink-base"
+        >
+          {visible ? <EyeOff size={14} /> : <Eye size={14} />}
+        </button>
+      </div>
+      {hint && <p className="text-[11px] text-ink-subtle leading-snug">{hint}</p>}
+    </div>
+  );
+}
+
+/** Button that runs /api/admin/test-connection for one provider. */
+function TestConnectionButton({
+  onClick,
+  disabled,
+  pending,
+  language,
+}: {
+  onClick: () => void;
+  disabled: boolean;
+  pending: boolean;
+  language: SupportedLanguage;
+}) {
+  return (
+    <button
+      type="button"
+      onClick={onClick}
+      disabled={disabled || pending}
+      className="flex items-center gap-1.5 px-3 py-2 bg-surface-1 border border-line/60 text-ink-base rounded-lg text-xs font-bold hover:bg-surface-2 transition-colors disabled:opacity-40 disabled:cursor-not-allowed"
+    >
+      {pending ? <Loader2 size={12} className="animate-spin" /> : <Activity size={12} />}
+      {pending ? t("admin_testing", language) : t("admin_test_connection", language)}
+    </button>
+  );
+}
diff --git a/components/views/AppointmentsView.tsx b/components/views/AppointmentsView.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..a287c459dd10e9ffd012cd9a238dc5f178adc1d8
--- /dev/null
+++ b/components/views/AppointmentsView.tsx
@@ -0,0 +1,374 @@
+"use client";
+
+import { useState } from "react";
+import {
+  Calendar,
+  Plus,
+  X,
+  Check,
+  MapPin,
+  User2,
+  Trash2,
+  ChevronDown,
+  Clock,
+} from "lucide-react";
+import {
+  APPOINTMENT_TYPE_META,
+  todayISO,
+  type Appointment,
+  type AppointmentType,
+  type AppointmentStatus,
+} from "@/lib/health-store";
+import { t, type SupportedLanguage } from "@/lib/i18n";
+
+interface AppointmentsViewProps {
+  appointments: Appointment[];
+  onAdd: (appt: Omit<Appointment, "id">) => void;
+  onEdit: (id: string, patch: Partial<Appointment>) => void;
+  onDelete: (id: string) => void;
+  language: SupportedLanguage;
+}
+
+export function AppointmentsView({
+  appointments,
+  onAdd,
+  onEdit,
+  onDelete,
+  language,
+}: AppointmentsViewProps) {
+  const [showForm, setShowForm] = useState(false);
+  const [title, setTitle] = useState("");
+  const [type, setType] = useState<AppointmentType>("doctor");
+  const [date, setDate] = useState(todayISO());
+  const [time, setTime] = useState("09:00");
+  const [location, setLocation] = useState("");
+  const [doctor, setDoctor] = useState("");
+  const [notes, setNotes] = useState("");
+  const [recurring, setRecurring] = useState<Appointment["recurring"] | "">("");
+  const [filter, setFilter] = useState<"all" | "upcoming" | "completed">("all");
+
+  const today = todayISO();
+
+  const handleSubmit = () => {
+    if (!title.trim()) return;
+    onAdd({
+      title: title.trim(),
+      type,
+      date,
+      time,
+      location: location.trim() || undefined,
+      doctor: doctor.trim() || undefined,
+      notes: notes.trim() || undefined,
+      status: date >= today ? "upcoming" : "completed",
+      recurring: recurring || undefined,
+    });
+    resetForm();
+  };
+
+  const resetForm = () => {
+    setTitle("");
+    setType("doctor");
+    setDate(todayISO());
+    setTime("09:00");
+    setLocation("");
+    setDoctor("");
+    setNotes("");
+    setRecurring("");
+    setShowForm(false);
+  };
+
+  const sorted = [...appointments].sort((a, b) => {
+    const da = `${a.date}T${a.time}`;
+    const db = `${b.date}T${b.time}`;
+    return db.localeCompare(da); // newest first
+  });
+
+  const filtered =
+    filter === "all"
+      ? sorted
+      : sorted.filter((a) =>
+          filter === "upcoming"
+            ? a.status === "upcoming"
+            : a.status === "completed",
+        );
+
+  const statusColor: Record<AppointmentStatus, string> = {
+    upcoming:
+      "bg-brand-500/10 text-brand-600 dark:text-brand-400 border-brand-500/30",
+    completed:
+      "bg-success-500/10 text-success-600 dark:text-success-500 border-success-500/30",
+    missed:
+      "bg-danger-500/10 text-danger-600 dark:text-danger-500 border-danger-500/30",
+    cancelled:
+      "bg-surface-2 text-ink-muted border-line/60",
+  };
+
+  return (
+    <div className="flex-1 overflow-y-auto p-6 sm:p-8 pb-mobile-nav scroll-touch">
+      <div className="max-w-2xl mx-auto animate-in fade-in slide-in-from-bottom-4 duration-500">
+        <div className="flex items-center justify-between mb-6">
+          <div>
+            <h2 className="text-2xl font-bold text-ink-base">{t("appt_title", language)}</h2>
+            <p className="text-sm text-ink-muted mt-1">
+              {t("appt_subtitle", language)}
+            </p>
+          </div>
+          <button
+            onClick={() => setShowForm(!showForm)}
+            className="flex items-center gap-1.5 px-4 py-2.5 bg-brand-gradient text-white rounded-xl font-bold text-sm shadow-glow hover:brightness-110 transition-all"
+          >
+            {showForm ? <X size={16} /> : <Plus size={16} />}
+            {showForm ? t("appt_cancel", language) : t("appt_add", language)}
+          </button>
+        </div>
+
+        {/* Add form */}
+        {showForm && (
+          <div className="bg-surface-1 border border-line/60 rounded-2xl p-5 mb-6 shadow-soft animate-in fade-in slide-in-from-bottom-4 duration-300">
+            <h3 className="font-bold text-ink-base mb-4">{t("appt_new", language)}</h3>
+            <div className="grid sm:grid-cols-2 gap-4">
+              <div className="sm:col-span-2">
+                <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">
+                  Title
+                </label>
+                <input
+                  value={title}
+                  onChange={(e) => setTitle(e.target.value)}
+                  placeholder="e.g. Cardiology checkup"
+                  className="w-full bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+                />
+              </div>
+              <div>
+                <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">
+                  Type
+                </label>
+                <div className="relative">
+                  <select
+                    value={type}
+                    onChange={(e) => setType(e.target.value as AppointmentType)}
+                    className="w-full appearance-none bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 pr-8 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+                  >
+                    {Object.entries(APPOINTMENT_TYPE_META).map(([k, v]) => (
+                      <option key={k} value={k}>
+                        {v.emoji} {v.label}
+                      </option>
+                    ))}
+                  </select>
+                  <ChevronDown
+                    className="absolute right-3 top-1/2 -translate-y-1/2 text-ink-subtle pointer-events-none"
+                    size={14}
+                  />
+                </div>
+              </div>
+              <div>
+                <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">
+                  Recurring
+                </label>
+                <div className="relative">
+                  <select
+                    value={recurring}
+                    onChange={(e) =>
+                      setRecurring(
+                        e.target.value as Appointment["recurring"] | "",
+                      )
+                    }
+                    className="w-full appearance-none bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 pr-8 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+                  >
+                    <option value="">One-time</option>
+                    <option value="weekly">Weekly</option>
+                    <option value="biweekly">Every 2 weeks</option>
+                    <option value="monthly">Monthly</option>
+                    <option value="quarterly">Every 3 months</option>
+                    <option value="yearly">Yearly</option>
+                  </select>
+                  <ChevronDown
+                    className="absolute right-3 top-1/2 -translate-y-1/2 text-ink-subtle pointer-events-none"
+                    size={14}
+                  />
+                </div>
+              </div>
+              <div>
+                <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">
+                  Date
+                </label>
+                <input
+                  type="date"
+                  value={date}
+                  onChange={(e) => setDate(e.target.value)}
+                  className="w-full bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+                />
+              </div>
+              <div>
+                <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">
+                  Time
+                </label>
+                <input
+                  type="time"
+                  value={time}
+                  onChange={(e) => setTime(e.target.value)}
+                  className="w-full bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+                />
+              </div>
+              <div>
+                <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">
+                  Doctor (optional)
+                </label>
+                <input
+                  value={doctor}
+                  onChange={(e) => setDoctor(e.target.value)}
+                  placeholder="Dr. Smith"
+                  className="w-full bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+                />
+              </div>
+              <div>
+                <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">
+                  Location (optional)
+                </label>
+                <input
+                  value={location}
+                  onChange={(e) => setLocation(e.target.value)}
+                  placeholder="City Hospital"
+                  className="w-full bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+                />
+              </div>
+              <div className="sm:col-span-2">
+                <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">
+                  Notes (optional)
+                </label>
+                <textarea
+                  value={notes}
+                  onChange={(e) => setNotes(e.target.value)}
+                  placeholder="Bring previous lab results..."
+                  rows={2}
+                  className="w-full bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 text-sm resize-none focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+                />
+              </div>
+            </div>
+            <button
+              onClick={handleSubmit}
+              disabled={!title.trim()}
+              className="mt-4 w-full py-3 bg-brand-gradient text-white rounded-xl font-bold text-sm shadow-glow hover:brightness-110 transition-all disabled:opacity-50"
+            >
+              Save Appointment
+            </button>
+          </div>
+        )}
+
+        {/* Filter tabs */}
+        <div className="flex gap-2 mb-4">
+          {(["all", "upcoming", "completed"] as const).map((f) => (
+            <button
+              key={f}
+              onClick={() => setFilter(f)}
+              className={`px-3 py-1.5 rounded-full text-xs font-semibold transition-all ${
+                filter === f
+                  ? "bg-brand-500 text-white"
+                  : "bg-surface-2 text-ink-muted hover:text-ink-base"
+              }`}
+            >
+              {f === "all" ? "All" : f === "upcoming" ? "Upcoming" : "Completed"}
+            </button>
+          ))}
+        </div>
+
+        {/* Empty */}
+        {filtered.length === 0 && !showForm && (
+          <div className="text-center py-16">
+            <div className="w-16 h-16 mx-auto mb-4 rounded-2xl bg-brand-gradient-soft flex items-center justify-center">
+              <Calendar size={28} className="text-brand-500" />
+            </div>
+            <h3 className="font-bold text-ink-base text-lg mb-1">
+              {t("appt_none", language)}
+            </h3>
+            <p className="text-ink-muted text-sm">
+              {t("appt_none_desc", language)}
+            </p>
+          </div>
+        )}
+
+        {/* Appointment list */}
+        <div className="space-y-3">
+          {filtered.map((a) => {
+            const meta = APPOINTMENT_TYPE_META[a.type];
+            return (
+              <div
+                key={a.id}
+                className="bg-surface-1 border border-line/60 rounded-2xl p-4 shadow-soft"
+              >
+                <div className="flex items-start gap-3">
+                  <div className="w-10 h-10 rounded-xl bg-brand-gradient-soft flex items-center justify-center text-lg flex-shrink-0">
+                    {meta.emoji}
+                  </div>
+                  <div className="flex-1 min-w-0">
+                    <div className="flex items-center gap-2 mb-1">
+                      <span className="font-bold text-ink-base text-sm">
+                        {a.title}
+                      </span>
+                      <span
+                        className={`text-[10px] font-bold uppercase tracking-wider px-2 py-0.5 rounded-full border ${statusColor[a.status]}`}
+                      >
+                        {a.status}
+                      </span>
+                      {a.recurring && (
+                        <span className="text-[10px] font-bold uppercase tracking-wider text-accent-500 bg-accent-500/10 border border-accent-500/30 px-2 py-0.5 rounded-full">
+                          {a.recurring}
+                        </span>
+                      )}
+                    </div>
+                    <div className="flex flex-wrap items-center gap-x-3 gap-y-1 text-xs text-ink-muted">
+                      <span className="inline-flex items-center gap-1">
+                        <Calendar size={11} />
+                        {new Date(a.date).toLocaleDateString()}
+                      </span>
+                      <span className="inline-flex items-center gap-1">
+                        <Clock size={11} />
+                        {a.time}
+                      </span>
+                      {a.doctor && (
+                        <span className="inline-flex items-center gap-1">
+                          <User2 size={11} />
+                          {a.doctor}
+                        </span>
+                      )}
+                      {a.location && (
+                        <span className="inline-flex items-center gap-1">
+                          <MapPin size={11} />
+                          {a.location}
+                        </span>
+                      )}
+                    </div>
+                    {a.notes && (
+                      <p className="text-xs text-ink-subtle mt-1.5 leading-relaxed">
+                        {a.notes}
+                      </p>
+                    )}
+                  </div>
+                  <div className="flex items-center gap-1 flex-shrink-0">
+                    {a.status === "upcoming" && (
+                      <button
+                        onClick={() =>
+                          onEdit(a.id, { status: "completed" })
+                        }
+                        className="p-1.5 rounded-lg text-ink-subtle hover:text-success-500 hover:bg-success-500/10 transition-colors"
+                        title="Mark completed"
+                      >
+                        <Check size={14} />
+                      </button>
+                    )}
+                    <button
+                      onClick={() => onDelete(a.id)}
+                      className="p-1.5 rounded-lg text-ink-subtle hover:text-danger-500 hover:bg-danger-500/10 transition-colors"
+                      title="Delete"
+                    >
+                      <Trash2 size={14} />
+                    </button>
+                  </div>
+                </div>
+              </div>
+            );
+          })}
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/components/views/ChatView.tsx b/components/views/ChatView.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..f29c2c8560bf7b6f50aa127f5adc54e966ed76f3
--- /dev/null
+++ b/components/views/ChatView.tsx
@@ -0,0 +1,199 @@
+"use client";
+
+import { useMemo, useRef, useEffect, useState } from "react";
+import { AlertTriangle, Phone, X, ChevronRight, Stethoscope } from "lucide-react";
+import { MessageBubble } from "../chat/MessageBubble";
+import { HeroInput } from "../chat/HeroInput";
+import { TypingIndicator } from "../chat/TypingIndicator";
+import { TrustBar } from "../chat/TrustBar";
+import type { ChatMessage } from "@/lib/hooks/useChat";
+import { t, detectEmergencyKeywords, type SupportedLanguage } from "@/lib/i18n";
+
+interface ChatViewProps {
+  messages: ChatMessage[];
+  isTyping: boolean;
+  onSendMessage: (content: string) => void;
+  language?: SupportedLanguage;
+  emergencyNumber?: string;
+  voiceEnabled?: boolean;
+  readAloud?: boolean;
+  onNavigateEmergency?: () => void;
+}
+
+export function ChatView({
+  messages,
+  isTyping,
+  onSendMessage,
+  language = "en",
+  emergencyNumber = "911",
+  voiceEnabled = true,
+  readAloud = false,
+  onNavigateEmergency,
+}: ChatViewProps) {
+  const [isListening, setIsListening] = useState(false);
+  const [showEmergencyBanner, setShowEmergencyBanner] = useState(false);
+  const chatEndRef = useRef<HTMLDivElement | null>(null);
+  const recognitionRef = useRef<any>(null);
+
+  useEffect(() => {
+    chatEndRef.current?.scrollIntoView({ behavior: "smooth" });
+  }, [messages, isTyping]);
+
+  // Red-flag auto-detection on latest user message.
+  useEffect(() => {
+    if (messages.length === 0) return;
+    const last = messages[messages.length - 1];
+    if (last.role === "user" && detectEmergencyKeywords(last.content, language)) {
+      setShowEmergencyBanner(true);
+    }
+  }, [messages, language]);
+
+  // Read aloud the latest AI message.
+  useEffect(() => {
+    if (!readAloud || messages.length === 0) return;
+    const last = messages[messages.length - 1];
+    if (
+      last.role === "ai" &&
+      !isTyping &&
+      typeof speechSynthesis !== "undefined"
+    ) {
+      const u = new SpeechSynthesisUtterance(last.content);
+      u.lang = language;
+      speechSynthesis.speak(u);
+    }
+  }, [messages, isTyping, readAloud, language]);
+
+  const startVoice = () => {
+    if (typeof window === "undefined") return;
+    const SpeechRecognition =
+      (window as any).SpeechRecognition || (window as any).webkitSpeechRecognition;
+    if (!SpeechRecognition) return;
+    const recognition = new SpeechRecognition();
+    recognition.lang = language;
+    recognition.continuous = false;
+    recognition.interimResults = false;
+    recognition.onresult = (event: any) => {
+      const transcript = event.results[0][0].transcript;
+      onSendMessage(transcript);
+      setIsListening(false);
+    };
+    recognition.onerror = () => setIsListening(false);
+    recognition.onend = () => setIsListening(false);
+    recognitionRef.current = recognition;
+    recognition.start();
+    setIsListening(true);
+  };
+
+  const stopVoice = () => {
+    recognitionRef.current?.stop();
+    setIsListening(false);
+  };
+
+  const hasMessages = messages.length > 1;
+
+  // Dynamic suggestions — contextual chips under the input.
+  const suggestions = useMemo(() => {
+    if (hasMessages) return [];
+    return [
+      t("ask_example_1", language),
+      t("ask_example_2", language),
+      t("ask_example_3", language),
+      t("ask_example_4", language),
+    ].filter(Boolean);
+  }, [hasMessages, language]);
+
+  return (
+    <>
+      {/* Red-flag emergency banner */}
+      {showEmergencyBanner && (
+        <div className="relative z-10 bg-danger-500 text-white p-4 flex items-center gap-3 animate-fade-up shadow-danger-glow">
+          <AlertTriangle size={24} className="flex-shrink-0" />
+          <div className="flex-1">
+            <p className="font-bold text-base">
+              {t("emergency_may_be", language)}
+            </p>
+            <p className="text-sm text-white/85">
+              {t("emergency_call_now", language)}
+            </p>
+          </div>
+          <a
+            href={`tel:${emergencyNumber}`}
+            className="px-5 py-2.5 bg-white text-danger-600 rounded-xl font-bold text-sm flex items-center gap-2 flex-shrink-0 hover:bg-white/90 transition-colors"
+          >
+            <Phone size={16} />
+            {t("emergency_call", language)} {emergencyNumber}
+          </a>
+          <button
+            onClick={() => setShowEmergencyBanner(false)}
+            className="text-white/75 hover:text-white p-1"
+            aria-label="Dismiss"
+          >
+            <X size={18} />
+          </button>
+        </div>
+      )}
+
+      {/* Conversation area */}
+      <div className="flex-1 overflow-y-auto scroll-smooth scroll-touch">
+        <div className="max-w-3xl mx-auto px-4 sm:px-6 py-8 pb-mobile-nav">
+          {!hasMessages && (
+            <div className="text-center mb-8 animate-fade-up">
+              <div className="inline-flex items-center justify-center w-14 h-14 rounded-2xl bg-brand-gradient shadow-glow mb-4">
+                <Stethoscope size={24} className="text-white" />
+              </div>
+              <h2 className="text-2xl font-bold text-ink-base tracking-tight mb-2">
+                {t("ask_hero_title", language)}
+              </h2>
+              <p className="text-ink-muted leading-relaxed max-w-md mx-auto">
+                {t("ask_hero_subtitle", language)}
+              </p>
+              <div className="mt-5">
+                <TrustBar language={language} />
+              </div>
+            </div>
+          )}
+
+          {messages.map((msg, i) => (
+            <MessageBubble
+              key={msg.id}
+              message={msg}
+              showSourceChip={msg.role === "ai" && i <= 1}
+            />
+          ))}
+
+          {isTyping && <TypingIndicator label={t("ai_analyzing", language)} />}
+
+          <div ref={chatEndRef} />
+        </div>
+      </div>
+
+      {/* Voice listening pill */}
+      {isListening && (
+        <div className="mx-auto -mb-2 max-w-3xl w-full px-4 sm:px-6">
+          <div className="flex items-center justify-center gap-2 py-2 rounded-full bg-brand-500/10 border border-brand-500/30 text-brand-600 dark:text-brand-400 text-sm font-medium animate-pulse">
+            {t("ask_tap_speak", language)}…
+            <button onClick={stopVoice} className="ml-2 opacity-70 hover:opacity-100">
+              <X size={14} />
+            </button>
+          </div>
+        </div>
+      )}
+
+      {/* Sticky composer — most important element. Stays above mobile keyboard. */}
+      <div className="sticky-bottom-keyboard px-4 sm:px-6 pt-3 pb-5 pb-safe-area bg-gradient-to-t from-surface-0 via-surface-0/95 to-transparent">
+        <div className="max-w-3xl mx-auto">
+          <HeroInput
+            language={language}
+            onSend={onSendMessage}
+            onStartVoice={startVoice}
+            onStopVoice={stopVoice}
+            isListening={isListening}
+            voiceEnabled={voiceEnabled}
+            suggestions={suggestions}
+            autoFocus
+          />
+        </div>
+      </div>
+    </>
+  );
+}
diff --git a/components/views/ContactsView.tsx b/components/views/ContactsView.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..9090e723d307798362486a792c647db9c8f5253c
--- /dev/null
+++ b/components/views/ContactsView.tsx
@@ -0,0 +1,379 @@
+"use client";
+
+import { useState, useMemo } from "react";
+import {
+  Search,
+  Plus,
+  X,
+  Phone,
+  Mail,
+  MapPin,
+  Clock,
+  Star,
+  Trash2,
+  Edit3,
+  Navigation,
+  Stethoscope,
+  Pill,
+  Building2,
+  ChevronRight,
+  UserPlus,
+  ExternalLink,
+} from "lucide-react";
+import {
+  loadContacts,
+  saveContact,
+  updateContact,
+  removeContact,
+  type MedContact,
+  type ContactType,
+} from "@/lib/health-store";
+import { t, type SupportedLanguage } from "@/lib/i18n";
+
+interface ContactsViewProps {
+  contacts: MedContact[];
+  onAdd: (contact: Omit<MedContact, "id" | "createdAt">) => void;
+  onUpdate: (id: string, patch: Partial<MedContact>) => void;
+  onDelete: (id: string) => void;
+  onNavigate: (view: string) => void;
+  language: SupportedLanguage;
+}
+
+type FilterTab = "all" | "doctor" | "pharmacy";
+
+const TYPE_META: Record<ContactType, { icon: any; label: string; color: string }> = {
+  doctor: { icon: Stethoscope, label: "Doctor", color: "text-brand-500 bg-brand-500/10" },
+  pharmacy: { icon: Pill, label: "Pharmacy", color: "text-success-500 bg-success-500/10" },
+  drugstore: { icon: Pill, label: "Drugstore", color: "text-success-500 bg-success-500/10" },
+  hospital: { icon: Building2, label: "Hospital", color: "text-danger-500 bg-danger-500/10" },
+  clinic: { icon: Building2, label: "Clinic", color: "text-accent-500 bg-accent-500/10" },
+  other: { icon: MapPin, label: "Other", color: "text-ink-muted bg-surface-2" },
+};
+
+export function ContactsView({
+  contacts,
+  onAdd,
+  onUpdate,
+  onDelete,
+  onNavigate,
+  language,
+}: ContactsViewProps) {
+  const [search, setSearch] = useState("");
+  const [filter, setFilter] = useState<FilterTab>("all");
+  const [selectedId, setSelectedId] = useState<string | null>(null);
+  const [showAddForm, setShowAddForm] = useState(false);
+
+  const filtered = useMemo(() => {
+    let items = contacts;
+    if (search) {
+      const q = search.toLowerCase();
+      items = items.filter(
+        (c) =>
+          c.name.toLowerCase().includes(q) ||
+          c.specialty?.toLowerCase().includes(q) ||
+          c.address?.toLowerCase().includes(q) ||
+          c.phone?.includes(q),
+      );
+    }
+    if (filter === "doctor") items = items.filter((c) => c.type === "doctor");
+    if (filter === "pharmacy") items = items.filter((c) => ["pharmacy", "drugstore"].includes(c.type));
+    return items;
+  }, [contacts, search, filter]);
+
+  const selected = selectedId ? contacts.find((c) => c.id === selectedId) : null;
+
+  return (
+    <div className="flex-1 overflow-y-auto p-4 sm:p-6 pb-mobile-nav scroll-touch">
+      <div className="max-w-2xl mx-auto">
+        {/* Header */}
+        <div className="flex items-center justify-between mb-5">
+          <div>
+            <h2 className="text-2xl font-bold text-ink-base">{t("contacts_title", language)}</h2>
+            <p className="text-sm text-ink-muted mt-0.5">
+              {contacts.length} {contacts.length === 1 ? t("contacts_contact_saved", language) : t("contacts_saved", language)}
+            </p>
+          </div>
+          <div className="flex items-center gap-2">
+            <button
+              onClick={() => onNavigate("nearby")}
+              className="flex items-center gap-1.5 px-3 py-2.5 bg-surface-1 border border-line/60 text-ink-muted rounded-xl font-semibold text-xs hover:text-ink-base hover:border-brand-500/40 transition-all active:scale-[0.98]"
+            >
+              <MapPin size={14} /> {t("nearby_find_nearby", language)}
+            </button>
+            <button
+              onClick={() => setShowAddForm(true)}
+              className="flex items-center gap-1.5 px-4 py-2.5 bg-brand-gradient text-white rounded-xl font-bold text-sm shadow-glow hover:brightness-110 active:scale-[0.98] transition-all"
+            >
+              <Plus size={16} /> {t("common_add", language)}
+            </button>
+          </div>
+        </div>
+
+        {/* Search + Filter */}
+        <div className="flex flex-col sm:flex-row gap-3 mb-5">
+          <div className="relative flex-1">
+            <Search size={15} className="absolute left-3 top-1/2 -translate-y-1/2 text-ink-subtle" />
+            <input
+              value={search}
+              onChange={(e) => setSearch(e.target.value)}
+              placeholder={t("contacts_search", language)}
+              className="w-full bg-surface-1 border border-line/60 text-ink-base rounded-xl pl-9 pr-4 py-2.5 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+            />
+          </div>
+          <div className="flex gap-1.5">
+            {(["all", "doctor", "pharmacy"] as FilterTab[]).map((f) => (
+              <button
+                key={f}
+                onClick={() => setFilter(f)}
+                className={`px-3 py-1.5 rounded-full text-xs font-semibold whitespace-nowrap transition-all active:scale-95 ${
+                  filter === f ? "bg-brand-500 text-white" : "bg-surface-2 text-ink-muted hover:text-ink-base"
+                }`}
+              >
+                {f === "all" ? t("contacts_filter_all", language) : f === "doctor" ? t("contacts_filter_doctors", language) : t("contacts_filter_pharmacies", language)}
+              </button>
+            ))}
+          </div>
+        </div>
+
+        {/* Contacts list */}
+        {filtered.length === 0 ? (
+          <div className="text-center py-12">
+            <div className="w-16 h-16 mx-auto mb-4 rounded-2xl bg-brand-500/10 flex items-center justify-center">
+              <UserPlus size={28} className="text-brand-500" />
+            </div>
+            <h3 className="font-bold text-ink-base text-lg mb-2">
+              {contacts.length === 0 ? t("contacts_no_contacts", language) : t("contacts_no_matches", language)}
+            </h3>
+            <p className="text-sm text-ink-muted leading-relaxed max-w-[280px] mx-auto mb-4">
+              {contacts.length === 0
+                ? t("contacts_no_contacts_desc", language)
+                : t("contacts_no_matches_desc", language)}
+            </p>
+            {contacts.length === 0 && (
+              <button
+                onClick={() => onNavigate("nearby")}
+                className="inline-flex items-center gap-2 px-5 py-2.5 bg-brand-gradient text-white rounded-xl font-bold text-sm shadow-glow hover:brightness-110 active:scale-[0.98] transition-all"
+              >
+                <MapPin size={16} /> {t("nearby_find_nearby", language)}
+              </button>
+            )}
+          </div>
+        ) : (
+          <div className="space-y-2">
+            {filtered.map((c) => {
+              const meta = TYPE_META[c.type] || TYPE_META.other;
+              const Icon = meta.icon;
+              const isExpanded = selectedId === c.id;
+
+              return (
+                <div key={c.id} className={`rounded-2xl border transition-all ${
+                  isExpanded ? "bg-brand-500/5 border-brand-500/40 shadow-soft" : "bg-surface-1 border-line/40"
+                }`}>
+                  <button
+                    onClick={() => setSelectedId(isExpanded ? null : c.id)}
+                    className="w-full text-left p-4 flex items-start gap-3"
+                  >
+                    <div className={`w-10 h-10 rounded-xl flex items-center justify-center flex-shrink-0 ${meta.color}`}>
+                      <Icon size={18} />
+                    </div>
+                    <div className="flex-1 min-w-0">
+                      <div className="flex items-center gap-1.5">
+                        <span className="text-sm font-bold text-ink-base truncate">{c.name}</span>
+                        {c.isFavorite && <Star size={12} className="text-warning-500 fill-warning-500 flex-shrink-0" />}
+                      </div>
+                      {c.specialty && <span className="text-xs text-ink-muted block">{c.specialty}</span>}
+                      {c.phone && (
+                        <span className="text-xs text-ink-subtle flex items-center gap-1 mt-0.5">
+                          <Phone size={10} /> {c.phone}
+                        </span>
+                      )}
+                    </div>
+                    <ChevronRight size={16} className={`text-ink-subtle flex-shrink-0 transition-transform mt-1 ${isExpanded ? "rotate-90" : ""}`} />
+                  </button>
+
+                  {/* Expanded detail */}
+                  {isExpanded && (
+                    <div className="px-4 pb-4 space-y-3 border-t border-line/30 pt-3 animate-in fade-in duration-200">
+                      {c.address && (
+                        <div className="flex items-start gap-2 text-xs text-ink-muted">
+                          <MapPin size={12} className="mt-0.5 flex-shrink-0" />
+                          <span>{c.address}{c.postalCode ? `, ${c.postalCode}` : ""}{c.city ? `, ${c.city}` : ""}</span>
+                        </div>
+                      )}
+                      {c.email && (
+                        <a href={`mailto:${c.email}`} className="flex items-center gap-2 text-xs text-brand-500">
+                          <Mail size={12} /> {c.email}
+                        </a>
+                      )}
+                      {c.openingHours && (
+                        <div className="flex items-start gap-2 text-xs text-ink-muted">
+                          <Clock size={12} className="mt-0.5 flex-shrink-0" />
+                          <span>{c.openingHours}</span>
+                        </div>
+                      )}
+                      {c.notes && (
+                        <p className="text-xs text-ink-muted bg-surface-2/50 rounded-lg p-2">{c.notes}</p>
+                      )}
+
+                      {/* Action buttons */}
+                      <div className="flex flex-wrap gap-2 pt-1">
+                        {c.phone && (
+                          <a href={`tel:${c.phone}`}
+                            className="flex-1 min-w-[100px] py-2.5 bg-brand-500 text-white rounded-xl text-xs font-bold flex items-center justify-center gap-1.5 hover:brightness-110 transition-all">
+                            <Phone size={12} /> {t("contacts_call", language)}
+                          </a>
+                        )}
+                        {c.directionsUrl && (
+                          <a href={c.directionsUrl} target="_blank" rel="noopener noreferrer"
+                            className="flex-1 min-w-[100px] py-2.5 bg-surface-2 text-ink-base rounded-xl text-xs font-bold flex items-center justify-center gap-1.5 hover:bg-surface-3 transition-all">
+                            <Navigation size={12} /> {t("nearby_directions", language)}
+                          </a>
+                        )}
+                        {c.email && (
+                          <a href={`mailto:${c.email}`}
+                            className="py-2.5 px-3 bg-surface-2 text-ink-muted rounded-xl text-xs font-bold flex items-center justify-center gap-1.5 hover:bg-surface-3 transition-all">
+                            <Mail size={12} />
+                          </a>
+                        )}
+                        <button
+                          onClick={() => onUpdate(c.id, { isFavorite: !c.isFavorite })}
+                          className={`py-2.5 px-3 rounded-xl text-xs font-bold flex items-center justify-center gap-1.5 transition-all ${
+                            c.isFavorite ? "bg-warning-500/10 text-warning-500" : "bg-surface-2 text-ink-muted hover:bg-surface-3"
+                          }`}>
+                          <Star size={12} className={c.isFavorite ? "fill-warning-500" : ""} />
+                        </button>
+                        <button
+                          onClick={() => { if (confirm("Remove this contact?")) onDelete(c.id); }}
+                          className="py-2.5 px-3 bg-surface-2 text-ink-subtle rounded-xl text-xs font-bold flex items-center justify-center gap-1.5 hover:text-danger-500 hover:bg-danger-500/10 transition-all">
+                          <Trash2 size={12} />
+                        </button>
+                      </div>
+                    </div>
+                  )}
+                </div>
+              );
+            })}
+          </div>
+        )}
+      </div>
+
+      {/* Add contact modal */}
+      {showAddForm && (
+        <AddContactModal
+          onAdd={(c) => { onAdd(c); setShowAddForm(false); }}
+          onClose={() => setShowAddForm(false)}
+        />
+      )}
+    </div>
+  );
+}
+
+// ============================================================
+// Add Contact Modal
+// ============================================================
+
+function AddContactModal({
+  onAdd,
+  onClose,
+}: {
+  onAdd: (contact: Omit<MedContact, "id" | "createdAt">) => void;
+  onClose: () => void;
+}) {
+  const [name, setName] = useState("");
+  const [type, setType] = useState<ContactType>("doctor");
+  const [specialty, setSpecialty] = useState("");
+  const [phone, setPhone] = useState("");
+  const [email, setEmail] = useState("");
+  const [address, setAddress] = useState("");
+  const [postalCode, setPostalCode] = useState("");
+  const [city, setCity] = useState("");
+  const [notes, setNotes] = useState("");
+
+  const handleSubmit = () => {
+    if (!name.trim()) return;
+    onAdd({
+      name: name.trim(),
+      type,
+      specialty: specialty.trim() || undefined,
+      phone: phone.trim() || undefined,
+      email: email.trim() || undefined,
+      address: address.trim() || undefined,
+      postalCode: postalCode.trim() || undefined,
+      city: city.trim() || undefined,
+      notes: notes.trim() || undefined,
+      source: "manual",
+    });
+  };
+
+  return (
+    <div className="fixed inset-0 z-50 flex items-end sm:items-center justify-center p-0 sm:p-4 bg-black/40 backdrop-blur-sm animate-in fade-in duration-200">
+      <div className="w-full max-w-md bg-surface-1 rounded-t-3xl sm:rounded-2xl shadow-card overflow-y-auto max-h-[90vh] animate-in slide-in-from-bottom-4 duration-300">
+        <div className="flex items-center justify-between p-5 border-b border-line/40">
+          <h3 className="font-bold text-lg text-ink-base">New Contact</h3>
+          <button onClick={onClose} className="p-1.5 rounded-lg text-ink-subtle hover:text-ink-base hover:bg-surface-2">
+            <X size={16} />
+          </button>
+        </div>
+
+        <div className="p-5 space-y-4">
+          <Field label="Name *" value={name} onChange={setName} placeholder="Dr. Smith / CVS Pharmacy" />
+
+          <div>
+            <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">Type</label>
+            <div className="flex flex-wrap gap-1.5">
+              {(["doctor", "pharmacy", "drugstore", "hospital", "clinic", "other"] as ContactType[]).map((t) => (
+                <button key={t} onClick={() => setType(t)}
+                  className={`px-3 py-1.5 rounded-full text-xs font-semibold transition-all ${
+                    type === t ? "bg-brand-500 text-white" : "bg-surface-2 text-ink-muted"
+                  }`}>
+                  {t.charAt(0).toUpperCase() + t.slice(1)}
+                </button>
+              ))}
+            </div>
+          </div>
+
+          {type === "doctor" && (
+            <Field label="Specialty" value={specialty} onChange={setSpecialty} placeholder="e.g. Cardiologist, GP" />
+          )}
+
+          <div className="grid grid-cols-2 gap-3">
+            <Field label="Phone" value={phone} onChange={setPhone} placeholder="+1 555-0123" type="tel" />
+            <Field label="Email" value={email} onChange={setEmail} placeholder="doctor@clinic.com" type="email" />
+          </div>
+
+          <Field label="Address" value={address} onChange={setAddress} placeholder="123 Main St" />
+
+          <div className="grid grid-cols-2 gap-3">
+            <Field label="Postal code" value={postalCode} onChange={setPostalCode} placeholder="10001" />
+            <Field label="City" value={city} onChange={setCity} placeholder="New York" />
+          </div>
+
+          <div>
+            <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">Notes</label>
+            <textarea value={notes} onChange={(e) => setNotes(e.target.value)} placeholder="e.g. Accepts walk-ins, speaks Spanish"
+              rows={2} className="w-full bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 text-sm resize-none focus:outline-none focus:ring-2 focus:ring-brand-500/30" />
+          </div>
+        </div>
+
+        <div className="p-5 pt-0">
+          <button onClick={handleSubmit} disabled={!name.trim()}
+            className="w-full py-3 bg-brand-gradient text-white rounded-xl font-bold text-sm shadow-glow hover:brightness-110 active:scale-[0.98] transition-all disabled:opacity-50">
+            Save Contact
+          </button>
+        </div>
+      </div>
+    </div>
+  );
+}
+
+function Field({ label, value, onChange, placeholder, type = "text" }: {
+  label: string; value: string; onChange: (v: string) => void; placeholder?: string; type?: string;
+}) {
+  return (
+    <div>
+      <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">{label}</label>
+      <input type={type} value={value} onChange={(e) => onChange(e.target.value)} placeholder={placeholder}
+        className="w-full bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30" />
+    </div>
+  );
+}
diff --git a/components/views/EHRWizard.tsx b/components/views/EHRWizard.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..266b349b39c2a4eb510475d9ca3181cae983962d
--- /dev/null
+++ b/components/views/EHRWizard.tsx
@@ -0,0 +1,600 @@
+"use client";
+
+import { useState, useEffect } from "react";
+import {
+  User2,
+  Heart,
+  Pill,
+  Activity,
+  ClipboardCheck,
+  ChevronRight,
+  ChevronLeft,
+  Check,
+  Plus,
+  X,
+} from "lucide-react";
+import {
+  loadEHRProfile,
+  saveEHRProfile,
+  loadMedications,
+  CHRONIC_CONDITIONS_OPTIONS,
+  ALLERGY_COMMON,
+  type EHRProfile,
+  type Medication,
+} from "@/lib/health-store";
+import { t, type SupportedLanguage } from "@/lib/i18n";
+
+interface EHRWizardProps {
+  onComplete: () => void;
+  onCancel: () => void;
+  language: SupportedLanguage;
+}
+
+const STEPS = [
+  { icon: User2, label: "Basic Info" },
+  { icon: Heart, label: "Medical History" },
+  { icon: Pill, label: "Medications" },
+  { icon: Activity, label: "Lifestyle" },
+  { icon: ClipboardCheck, label: "Review" },
+];
+
+const GENDERS = [
+  { value: "male", label: "Male" },
+  { value: "female", label: "Female" },
+  { value: "other", label: "Other" },
+  { value: "prefer-not-to-say", label: "Prefer not to say" },
+] as const;
+
+const BLOOD_TYPES = ["A+", "A-", "B+", "B-", "AB+", "AB-", "O+", "O-", "unknown"] as const;
+
+export function EHRWizard({ onComplete, onCancel, language }: EHRWizardProps) {
+  const [step, setStep] = useState(0);
+  const [profile, setProfile] = useState<EHRProfile>({});
+  const [meds, setMeds] = useState<Medication[]>([]);
+  const [customCondition, setCustomCondition] = useState("");
+  const [customAllergy, setCustomAllergy] = useState("");
+  const [customSurgery, setCustomSurgery] = useState("");
+  const [customFamily, setCustomFamily] = useState("");
+
+  // Load existing profile on mount (resume if partially completed).
+  useEffect(() => {
+    const existing = loadEHRProfile();
+    setProfile(existing);
+    if (existing.wizardStep) setStep(Math.min(existing.wizardStep, 4));
+    setMeds(loadMedications().filter((m) => m.active));
+  }, []);
+
+  const update = (patch: Partial<EHRProfile>) => {
+    setProfile((p) => ({ ...p, ...patch }));
+  };
+
+  const toggleArrayItem = (field: keyof EHRProfile, item: string) => {
+    const arr = ((profile as any)[field] as string[]) || [];
+    const next = arr.includes(item) ? arr.filter((x: string) => x !== item) : [...arr, item];
+    update({ [field]: next });
+  };
+
+  const addCustomItem = (field: keyof EHRProfile, value: string, setter: (v: string) => void) => {
+    if (!value.trim()) return;
+    const arr = ((profile as any)[field] as string[]) || [];
+    if (!arr.includes(value.trim())) {
+      update({ [field]: [...arr, value.trim()] });
+    }
+    setter("");
+  };
+
+  const next = () => {
+    const nextStep = Math.min(step + 1, 4);
+    setStep(nextStep);
+    saveEHRProfile({ ...profile, wizardStep: nextStep });
+  };
+
+  const prev = () => setStep(Math.max(step - 1, 0));
+
+  const finish = () => {
+    const final: EHRProfile = { ...profile, completedAt: new Date().toISOString(), wizardStep: 5 };
+    saveEHRProfile(final);
+    onComplete();
+  };
+
+  const progress = ((step + 1) / STEPS.length) * 100;
+
+  return (
+    <div className="flex-1 overflow-y-auto pb-mobile-nav scroll-touch">
+      <div className="max-w-xl mx-auto px-4 py-8">
+        {/* Header */}
+        <div className="text-center mb-6">
+          <h2 className="text-2xl font-bold text-ink-base tracking-tight">
+            Health Profile
+          </h2>
+          <p className="text-sm text-ink-muted mt-1">
+            Optional — helps MedOS give you personalized advice
+          </p>
+        </div>
+
+        {/* Progress bar */}
+        <div className="mb-8">
+          <div className="flex items-center justify-between mb-2">
+            {STEPS.map((s, i) => {
+              const Icon = s.icon;
+              const done = i < step;
+              const active = i === step;
+              return (
+                <button
+                  key={i}
+                  onClick={() => i <= step && setStep(i)}
+                  className={`flex flex-col items-center gap-1 transition-all ${
+                    active
+                      ? "text-brand-600"
+                      : done
+                      ? "text-success-500"
+                      : "text-ink-subtle"
+                  }`}
+                >
+                  <div
+                    className={`w-9 h-9 rounded-full flex items-center justify-center border-2 transition-all ${
+                      active
+                        ? "border-brand-500 bg-brand-50 dark:bg-brand-900/20"
+                        : done
+                        ? "border-success-500 bg-success-500/10"
+                        : "border-line bg-surface-2"
+                    }`}
+                  >
+                    {done ? <Check size={16} strokeWidth={3} /> : <Icon size={16} />}
+                  </div>
+                  <span className="text-[10px] font-semibold hidden sm:block">
+                    {s.label}
+                  </span>
+                </button>
+              );
+            })}
+          </div>
+          <div className="h-1.5 bg-surface-2 rounded-full overflow-hidden">
+            <div
+              className="h-full bg-brand-gradient rounded-full transition-all duration-500"
+              style={{ width: `${progress}%` }}
+            />
+          </div>
+        </div>
+
+        {/* Step content */}
+        <div className="bg-surface-1 border border-line/60 rounded-2xl p-6 shadow-soft animate-in fade-in slide-in-from-bottom-4 duration-300">
+          {step === 0 && (
+            <StepBasicInfo profile={profile} update={update} />
+          )}
+          {step === 1 && (
+            <StepMedicalHistory
+              profile={profile}
+              toggleArrayItem={toggleArrayItem}
+              addCustomItem={addCustomItem}
+              customCondition={customCondition}
+              setCustomCondition={setCustomCondition}
+              customAllergy={customAllergy}
+              setCustomAllergy={setCustomAllergy}
+              customSurgery={customSurgery}
+              setCustomSurgery={setCustomSurgery}
+              customFamily={customFamily}
+              setCustomFamily={setCustomFamily}
+            />
+          )}
+          {step === 2 && <StepMedications meds={meds} />}
+          {step === 3 && <StepLifestyle profile={profile} update={update} />}
+          {step === 4 && <StepReview profile={profile} meds={meds} />}
+        </div>
+
+        {/* Navigation buttons */}
+        <div className="flex items-center justify-between mt-6">
+          {step > 0 ? (
+            <button
+              onClick={prev}
+              className="flex items-center gap-1.5 px-4 py-2.5 text-sm font-semibold text-ink-muted hover:text-ink-base transition-colors"
+            >
+              <ChevronLeft size={16} /> Back
+            </button>
+          ) : (
+            <button
+              onClick={onCancel}
+              className="text-sm font-semibold text-ink-muted hover:text-ink-base transition-colors"
+            >
+              Skip for now
+            </button>
+          )}
+
+          {step < 4 ? (
+            <button
+              onClick={next}
+              className="flex items-center gap-1.5 px-5 py-2.5 bg-brand-gradient text-white rounded-xl font-bold text-sm shadow-glow hover:brightness-110 transition-all"
+            >
+              Next <ChevronRight size={16} />
+            </button>
+          ) : (
+            <button
+              onClick={finish}
+              className="flex items-center gap-1.5 px-5 py-2.5 bg-brand-gradient text-white rounded-xl font-bold text-sm shadow-glow hover:brightness-110 transition-all"
+            >
+              <Check size={16} /> Save Profile
+            </button>
+          )}
+        </div>
+      </div>
+    </div>
+  );
+}
+
+// ============================================================
+// Step components
+// ============================================================
+
+function StepBasicInfo({
+  profile,
+  update,
+}: {
+  profile: EHRProfile;
+  update: (p: Partial<EHRProfile>) => void;
+}) {
+  return (
+    <div className="space-y-4">
+      <h3 className="font-bold text-lg text-ink-base">Basic Information</h3>
+      <p className="text-sm text-ink-muted">All fields are optional.</p>
+
+      <div className="grid sm:grid-cols-2 gap-4">
+        <InputField label="First name" value={profile.firstName} onChange={(v) => update({ firstName: v })} placeholder="John" />
+        <InputField label="Last name" value={profile.lastName} onChange={(v) => update({ lastName: v })} placeholder="Doe" />
+        <InputField label="Date of birth" value={profile.dateOfBirth} onChange={(v) => update({ dateOfBirth: v })} type="date" />
+        <SelectField label="Gender" value={profile.gender || ""} onChange={(v) => update({ gender: v as any })} options={GENDERS.map((g) => ({ value: g.value, label: g.label }))} />
+        <SelectField label="Blood type" value={profile.bloodType || ""} onChange={(v) => update({ bloodType: v as any })} options={BLOOD_TYPES.map((b) => ({ value: b, label: b === "unknown" ? "Unknown" : b }))} />
+        <InputField label="Height" value={profile.height} onChange={(v) => update({ height: v })} placeholder="175 cm" />
+        <InputField label="Weight" value={profile.weight} onChange={(v) => update({ weight: v })} placeholder="70 kg" />
+      </div>
+    </div>
+  );
+}
+
+function StepMedicalHistory({
+  profile,
+  toggleArrayItem,
+  addCustomItem,
+  customCondition,
+  setCustomCondition,
+  customAllergy,
+  setCustomAllergy,
+  customSurgery,
+  setCustomSurgery,
+  customFamily,
+  setCustomFamily,
+}: {
+  profile: EHRProfile;
+  toggleArrayItem: (field: keyof EHRProfile, item: string) => void;
+  addCustomItem: (field: keyof EHRProfile, value: string, setter: (v: string) => void) => void;
+  customCondition: string;
+  setCustomCondition: (v: string) => void;
+  customAllergy: string;
+  setCustomAllergy: (v: string) => void;
+  customSurgery: string;
+  setCustomSurgery: (v: string) => void;
+  customFamily: string;
+  setCustomFamily: (v: string) => void;
+}) {
+  return (
+    <div className="space-y-6">
+      <h3 className="font-bold text-lg text-ink-base">Medical History</h3>
+
+      {/* Chronic conditions */}
+      <div>
+        <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-2 block">
+          Chronic conditions
+        </label>
+        <div className="flex flex-wrap gap-1.5 mb-2">
+          {CHRONIC_CONDITIONS_OPTIONS.map((c) => (
+            <ChipToggle
+              key={c}
+              label={c}
+              active={profile.chronicConditions?.includes(c) ?? false}
+              onClick={() => toggleArrayItem("chronicConditions", c)}
+            />
+          ))}
+        </div>
+        <AddCustom value={customCondition} onChange={setCustomCondition} onAdd={() => addCustomItem("chronicConditions", customCondition, setCustomCondition)} placeholder="Add other condition..." />
+      </div>
+
+      {/* Allergies */}
+      <div>
+        <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-2 block">
+          Allergies
+        </label>
+        <div className="flex flex-wrap gap-1.5 mb-2">
+          {ALLERGY_COMMON.map((a) => (
+            <ChipToggle
+              key={a}
+              label={a}
+              active={profile.allergies?.includes(a) ?? false}
+              onClick={() => toggleArrayItem("allergies", a)}
+            />
+          ))}
+        </div>
+        <AddCustom value={customAllergy} onChange={setCustomAllergy} onAdd={() => addCustomItem("allergies", customAllergy, setCustomAllergy)} placeholder="Add other allergy..." />
+      </div>
+
+      {/* Past surgeries */}
+      <div>
+        <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-2 block">
+          Past surgeries
+        </label>
+        <TagList items={profile.pastSurgeries} onRemove={(item) => toggleArrayItem("pastSurgeries", item)} />
+        <AddCustom value={customSurgery} onChange={setCustomSurgery} onAdd={() => addCustomItem("pastSurgeries", customSurgery, setCustomSurgery)} placeholder="e.g. Appendectomy 2020" />
+      </div>
+
+      {/* Family history */}
+      <div>
+        <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-2 block">
+          Family history
+        </label>
+        <TagList items={profile.familyHistory} onRemove={(item) => toggleArrayItem("familyHistory", item)} />
+        <AddCustom value={customFamily} onChange={setCustomFamily} onAdd={() => addCustomItem("familyHistory", customFamily, setCustomFamily)} placeholder="e.g. Father: heart disease" />
+      </div>
+    </div>
+  );
+}
+
+function StepMedications({ meds }: { meds: Medication[] }) {
+  return (
+    <div className="space-y-4">
+      <h3 className="font-bold text-lg text-ink-base">Current Medications</h3>
+      <p className="text-sm text-ink-muted">
+        These are pulled from your medication tracker. Add or edit them in the Medications view.
+      </p>
+      {meds.length === 0 ? (
+        <div className="text-center py-8">
+          <Pill size={28} className="mx-auto text-ink-subtle mb-2" />
+          <p className="text-sm text-ink-muted">No active medications</p>
+          <p className="text-xs text-ink-subtle mt-1">
+            You can add them later from the Medications view
+          </p>
+        </div>
+      ) : (
+        <div className="space-y-2">
+          {meds.map((m) => (
+            <div key={m.id} className="flex items-center gap-3 p-3 rounded-xl bg-surface-2/50 border border-line/40">
+              <Pill size={16} className="text-brand-500" />
+              <div className="flex-1 min-w-0">
+                <span className="font-semibold text-sm text-ink-base block">{m.name}</span>
+                <span className="text-xs text-ink-muted">{m.dose} · {m.frequency} · {m.times.join(", ")}</span>
+              </div>
+            </div>
+          ))}
+        </div>
+      )}
+    </div>
+  );
+}
+
+function StepLifestyle({
+  profile,
+  update,
+}: {
+  profile: EHRProfile;
+  update: (p: Partial<EHRProfile>) => void;
+}) {
+  return (
+    <div className="space-y-4">
+      <h3 className="font-bold text-lg text-ink-base">Lifestyle</h3>
+      <p className="text-sm text-ink-muted">Helps the AI consider your lifestyle when giving advice.</p>
+
+      <SelectField
+        label="Smoking status"
+        value={profile.smokingStatus || ""}
+        onChange={(v) => update({ smokingStatus: v as any })}
+        options={[
+          { value: "never", label: "Never smoked" },
+          { value: "former", label: "Former smoker" },
+          { value: "current", label: "Current smoker" },
+          { value: "prefer-not-to-say", label: "Prefer not to say" },
+        ]}
+      />
+      <SelectField
+        label="Alcohol use"
+        value={profile.alcoholUse || ""}
+        onChange={(v) => update({ alcoholUse: v as any })}
+        options={[
+          { value: "none", label: "None" },
+          { value: "occasional", label: "Occasional (social)" },
+          { value: "moderate", label: "Moderate (1-2 drinks/day)" },
+          { value: "heavy", label: "Heavy" },
+          { value: "prefer-not-to-say", label: "Prefer not to say" },
+        ]}
+      />
+      <SelectField
+        label="Exercise frequency"
+        value={profile.exerciseFrequency || ""}
+        onChange={(v) => update({ exerciseFrequency: v as any })}
+        options={[
+          { value: "none", label: "None / Sedentary" },
+          { value: "1-2-per-week", label: "1–2 times per week" },
+          { value: "3-5-per-week", label: "3–5 times per week" },
+          { value: "daily", label: "Daily" },
+        ]}
+      />
+      <SelectField
+        label="Diet type"
+        value={profile.dietType || ""}
+        onChange={(v) => update({ dietType: v as any })}
+        options={[
+          { value: "regular", label: "Regular / No restrictions" },
+          { value: "vegetarian", label: "Vegetarian" },
+          { value: "vegan", label: "Vegan" },
+          { value: "mediterranean", label: "Mediterranean" },
+          { value: "low-carb", label: "Low-carb / Keto" },
+          { value: "other", label: "Other" },
+        ]}
+      />
+    </div>
+  );
+}
+
+function StepReview({ profile, meds }: { profile: EHRProfile; meds: Medication[] }) {
+  const sections = [
+    { label: "Name", value: [profile.firstName, profile.lastName].filter(Boolean).join(" ") || "—" },
+    { label: "Date of birth", value: profile.dateOfBirth || "—" },
+    { label: "Gender", value: profile.gender || "—" },
+    { label: "Blood type", value: profile.bloodType || "—" },
+    { label: "Height / Weight", value: [profile.height, profile.weight].filter(Boolean).join(" / ") || "—" },
+    { label: "Chronic conditions", value: profile.chronicConditions?.join(", ") || "None" },
+    { label: "Allergies", value: profile.allergies?.join(", ") || "None known" },
+    { label: "Past surgeries", value: profile.pastSurgeries?.join(", ") || "None" },
+    { label: "Family history", value: profile.familyHistory?.join(", ") || "None" },
+    { label: "Medications", value: meds.length > 0 ? meds.map((m) => `${m.name} ${m.dose}`).join(", ") : "None" },
+    { label: "Smoking", value: profile.smokingStatus || "—" },
+    { label: "Alcohol", value: profile.alcoholUse || "—" },
+    { label: "Exercise", value: profile.exerciseFrequency || "—" },
+    { label: "Diet", value: profile.dietType || "—" },
+  ];
+
+  return (
+    <div className="space-y-4">
+      <h3 className="font-bold text-lg text-ink-base">Review Your Profile</h3>
+      <p className="text-sm text-ink-muted">
+        This information stays private and is used to personalize your AI medical advice.
+      </p>
+      <div className="space-y-2">
+        {sections.map((s) => (
+          <div key={s.label} className="flex items-start gap-3 py-2 border-b border-line/30 last:border-0">
+            <span className="text-xs font-semibold text-ink-subtle w-28 flex-shrink-0 pt-0.5">
+              {s.label}
+            </span>
+            <span className="text-sm text-ink-base flex-1">{s.value}</span>
+          </div>
+        ))}
+      </div>
+    </div>
+  );
+}
+
+// ============================================================
+// Shared UI primitives
+// ============================================================
+
+function InputField({
+  label,
+  value,
+  onChange,
+  placeholder,
+  type = "text",
+}: {
+  label: string;
+  value?: string;
+  onChange: (v: string) => void;
+  placeholder?: string;
+  type?: string;
+}) {
+  return (
+    <div>
+      <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">
+        {label}
+      </label>
+      <input
+        type={type}
+        value={value || ""}
+        onChange={(e) => onChange(e.target.value)}
+        placeholder={placeholder}
+        className="w-full bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30 focus:border-brand-500"
+      />
+    </div>
+  );
+}
+
+function SelectField({
+  label,
+  value,
+  onChange,
+  options,
+}: {
+  label: string;
+  value: string;
+  onChange: (v: string) => void;
+  options: { value: string; label: string }[];
+}) {
+  return (
+    <div>
+      <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">
+        {label}
+      </label>
+      <select
+        value={value}
+        onChange={(e) => onChange(e.target.value)}
+        className="w-full appearance-none bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+      >
+        <option value="">Select...</option>
+        {options.map((o) => (
+          <option key={o.value} value={o.value}>{o.label}</option>
+        ))}
+      </select>
+    </div>
+  );
+}
+
+function ChipToggle({ label, active, onClick }: { label: string; active: boolean; onClick: () => void }) {
+  return (
+    <button
+      type="button"
+      onClick={onClick}
+      className={`px-2.5 py-1 rounded-full text-xs font-medium border transition-all ${
+        active
+          ? "bg-brand-500/15 border-brand-500/40 text-brand-700 dark:text-brand-300"
+          : "bg-surface-2 border-line/50 text-ink-muted hover:border-brand-500/30"
+      }`}
+    >
+      {label}
+    </button>
+  );
+}
+
+function AddCustom({
+  value,
+  onChange,
+  onAdd,
+  placeholder,
+}: {
+  value: string;
+  onChange: (v: string) => void;
+  onAdd: () => void;
+  placeholder: string;
+}) {
+  return (
+    <div className="flex gap-2">
+      <input
+        value={value}
+        onChange={(e) => onChange(e.target.value)}
+        placeholder={placeholder}
+        className="flex-1 bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+        onKeyDown={(e) => e.key === "Enter" && onAdd()}
+      />
+      <button
+        type="button"
+        onClick={onAdd}
+        disabled={!value.trim()}
+        className="p-2 rounded-xl bg-brand-50 dark:bg-brand-900/20 border border-brand-500/30 text-brand-500 disabled:opacity-30"
+      >
+        <Plus size={16} />
+      </button>
+    </div>
+  );
+}
+
+function TagList({ items, onRemove }: { items?: string[]; onRemove: (item: string) => void }) {
+  if (!items?.length) return null;
+  return (
+    <div className="flex flex-wrap gap-1.5 mb-2">
+      {items.map((item) => (
+        <span
+          key={item}
+          className="inline-flex items-center gap-1 px-2.5 py-1 rounded-full bg-brand-500/10 border border-brand-500/30 text-xs font-medium text-brand-700 dark:text-brand-300"
+        >
+          {item}
+          <button onClick={() => onRemove(item)} className="hover:text-danger-500">
+            <X size={12} />
+          </button>
+        </span>
+      ))}
+    </div>
+  );
+}
diff --git a/components/views/EmergencyView.tsx b/components/views/EmergencyView.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..3460146db06d294591c45630d47ba48626bee858
--- /dev/null
+++ b/components/views/EmergencyView.tsx
@@ -0,0 +1,163 @@
+"use client";
+
+import { Phone, AlertTriangle, Heart, Wind, Droplets, Brain } from "lucide-react";
+import { t, type SupportedLanguage } from "@/lib/i18n";
+
+interface EmergencyViewProps {
+  language: SupportedLanguage;
+  emergencyNumber: string;
+}
+
+interface EmergencyCard {
+  titleKey: string;
+  icon: React.ReactNode;
+  color: string;
+  signs: string[];
+  doNow: string[];
+}
+
+export function EmergencyView({ language, emergencyNumber }: EmergencyViewProps) {
+  const cards: EmergencyCard[] = [
+    {
+      titleKey: "emergency_heart_title",
+      icon: <Heart size={24} className="text-red-600" />,
+      color: "red",
+      signs: [
+        t("emergency_heart_1", language),
+        t("emergency_heart_2", language),
+        t("emergency_heart_3", language),
+        t("emergency_heart_4", language),
+      ],
+      doNow: [
+        `${t("emergency_call", language)} ${emergencyNumber}`,
+        t("emergency_sit_still", language),
+        t("emergency_chew_aspirin", language),
+        t("emergency_dont_drive", language),
+      ],
+    },
+    {
+      titleKey: "emergency_stroke_title",
+      icon: <Brain size={24} className="text-purple-600" />,
+      color: "purple",
+      signs: [
+        t("emergency_stroke_1", language),
+        t("emergency_stroke_2", language),
+        t("emergency_stroke_3", language),
+        t("emergency_stroke_4", language),
+      ],
+      doNow: [
+        `${t("emergency_call", language)} ${emergencyNumber}`,
+        t("emergency_sit_still", language),
+        t("emergency_dont_drive", language),
+      ],
+    },
+    {
+      titleKey: "emergency_breathing_title",
+      icon: <Wind size={24} className="text-blue-600" />,
+      color: "blue",
+      signs: [
+        t("emergency_breathing_1", language),
+        t("emergency_breathing_2", language),
+        t("emergency_breathing_3", language),
+        t("emergency_breathing_4", language),
+      ],
+      doNow: [
+        `${t("emergency_call", language)} ${emergencyNumber}`,
+        t("emergency_sit_still", language),
+      ],
+    },
+    {
+      titleKey: "emergency_bleeding_title",
+      icon: <Droplets size={24} className="text-rose-600" />,
+      color: "rose",
+      signs: [
+        t("emergency_bleeding_1", language),
+        t("emergency_bleeding_2", language),
+        t("emergency_bleeding_3", language),
+        t("emergency_bleeding_4", language),
+      ],
+      doNow: [
+        `${t("emergency_call", language)} ${emergencyNumber}`,
+      ],
+    },
+  ];
+
+  const colorMap: Record<string, { bg: string; border: string; badge: string }> = {
+    red: { bg: "bg-red-50", border: "border-red-200", badge: "bg-red-100 text-red-700" },
+    purple: { bg: "bg-purple-50", border: "border-purple-200", badge: "bg-purple-100 text-purple-700" },
+    blue: { bg: "bg-blue-50", border: "border-blue-200", badge: "bg-blue-100 text-blue-700" },
+    rose: { bg: "bg-rose-50", border: "border-rose-200", badge: "bg-rose-100 text-rose-700" },
+  };
+
+  return (
+    <div className="flex-1 overflow-y-auto p-6 pb-mobile-nav scroll-touch">
+      <div className="max-w-2xl mx-auto">
+        {/* Header */}
+        <div className="text-center mb-6">
+          <div className="w-16 h-16 mx-auto mb-4 rounded-full bg-red-100 flex items-center justify-center">
+            <AlertTriangle size={32} className="text-red-600" />
+          </div>
+          <h1 className="text-2xl font-bold text-slate-800 mb-2">
+            {t("emergency_title", language)}
+          </h1>
+        </div>
+
+        {/* Call button - always prominent */}
+        <a
+          href={`tel:${emergencyNumber}`}
+          className="block w-full py-5 bg-red-600 text-white rounded-2xl font-bold text-xl text-center shadow-lg shadow-red-200 hover:bg-red-700 transition-colors mb-8 flex items-center justify-center gap-3"
+        >
+          <Phone size={24} />
+          {t("emergency_call", language)} {emergencyNumber}
+        </a>
+
+        {/* Emergency cards */}
+        <div className="space-y-4">
+          {cards.map((card) => {
+            const colors = colorMap[card.color] || colorMap.red;
+            return (
+              <div
+                key={card.titleKey}
+                className={`${colors.bg} ${colors.border} border-2 rounded-2xl overflow-hidden`}
+              >
+                <div className="p-5">
+                  <div className="flex items-center gap-3 mb-4">
+                    {card.icon}
+                    <h3 className="font-bold text-lg text-slate-800">
+                      {t(card.titleKey, language)}
+                    </h3>
+                  </div>
+
+                  {/* Signs */}
+                  <ul className="space-y-1.5 mb-4">
+                    {card.signs.map((sign, i) => (
+                      <li key={i} className="flex items-start gap-2 text-sm text-slate-700">
+                        <span className="w-1.5 h-1.5 rounded-full bg-slate-400 mt-1.5 flex-shrink-0" />
+                        {sign}
+                      </li>
+                    ))}
+                  </ul>
+
+                  {/* Do now */}
+                  <div className={`${colors.badge} rounded-xl p-4`}>
+                    <h4 className="font-bold text-sm mb-2">
+                      {t("emergency_do_now", language)}
+                    </h4>
+                    <ul className="space-y-1">
+                      {card.doNow.map((action, i) => (
+                        <li key={i} className="text-sm font-medium flex items-start gap-2">
+                          <span className="font-bold">{i + 1}.</span>
+                          {action}
+                        </li>
+                      ))}
+                    </ul>
+                  </div>
+                </div>
+              </div>
+            );
+          })}
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/components/views/HealthDashboard.tsx b/components/views/HealthDashboard.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..f0241ad0ca6da45ffd7cb983e0da55890cd8577c
--- /dev/null
+++ b/components/views/HealthDashboard.tsx
@@ -0,0 +1,429 @@
+"use client";
+
+import {
+  Pill,
+  Calendar,
+  Activity,
+  FileText,
+  Heart,
+  ChevronRight,
+  Check,
+  Flame,
+  Clock,
+  Download,
+  MapPin,
+  LogIn,
+  UserPlus,
+  ShieldCheck,
+  Sparkles,
+} from "lucide-react";
+import {
+  VITAL_META,
+  APPOINTMENT_TYPE_META,
+  todayISO,
+  type Medication,
+  type Appointment,
+  type VitalReading,
+  type HealthRecord,
+  type MedicationLog,
+} from "@/lib/health-store";
+import { t, type SupportedLanguage } from "@/lib/i18n";
+
+interface HealthDashboardProps {
+  medications: Medication[];
+  medicationLogs: MedicationLog[];
+  appointments: Appointment[];
+  vitals: VitalReading[];
+  records: HealthRecord[];
+  onNavigate: (view: string) => void;
+  onMarkMedTaken: (medId: string, date: string, time: string) => void;
+  isMedTaken: (medId: string, date: string, time: string) => boolean;
+  getMedStreak: (medId: string) => number;
+  onExport: () => void;
+  language: SupportedLanguage;
+  /**
+   * When false, the dashboard renders a friendly sign-in state instead
+   * of the empty "0 meds / 0 vitals / 0 records" graveyard. The sidebar
+   * hides this route for logged-out users; this is the defensive
+   * fallback for deep-links and expired sessions.
+   */
+  isAuthenticated?: boolean;
+}
+
+export function HealthDashboard({
+  medications,
+  appointments,
+  vitals,
+  records,
+  onNavigate,
+  onMarkMedTaken,
+  isMedTaken,
+  getMedStreak,
+  onExport,
+  language,
+  isAuthenticated = true,
+}: HealthDashboardProps) {
+  if (!isAuthenticated) {
+    return <SignedOutDashboard onNavigate={onNavigate} language={language} />;
+  }
+  const today = todayISO();
+  const activeMeds = medications.filter((m) => m.active);
+  const upcomingAppts = appointments
+    .filter((a) => a.status === "upcoming" && a.date >= today)
+    .sort((a, b) => `${a.date}${a.time}`.localeCompare(`${b.date}${b.time}`));
+  const latestVitals = Object.keys(VITAL_META).map((type) => {
+    const reading = vitals
+      .filter((v) => v.type === type)
+      .sort(
+        (a, b) =>
+          `${b.date}${b.time}`.localeCompare(`${a.date}${a.time}`),
+      )[0];
+    return { type, reading };
+  }).filter((v) => v.reading);
+
+  // How many meds are due today and how many are done
+  const todayMedSlots = activeMeds.flatMap((m) =>
+    m.times.map((time) => ({ med: m, time, taken: isMedTaken(m.id, today, time) })),
+  );
+  const medsDone = todayMedSlots.filter((s) => s.taken).length;
+  const medsTotal = todayMedSlots.length;
+
+  return (
+    <div className="flex-1 overflow-y-auto p-6 sm:p-8 pb-mobile-nav scroll-touch">
+      <div className="max-w-2xl mx-auto animate-in fade-in slide-in-from-bottom-4 duration-500">
+        <div className="flex items-center justify-between mb-6">
+          <div>
+            <h2 className="text-2xl font-bold text-ink-base">{t("health_tracker", language)}</h2>
+            <p className="text-sm text-ink-muted mt-1">
+              Today&rsquo;s overview — {new Date().toLocaleDateString(undefined, {
+                weekday: "long",
+                month: "long",
+                day: "numeric",
+              })}
+            </p>
+          </div>
+          <button
+            onClick={onExport}
+            className="flex items-center gap-1.5 px-3 py-2 bg-surface-2 border border-line/60 rounded-xl text-xs font-semibold text-ink-muted hover:text-ink-base transition-colors"
+            title={t("health_export_all", language)}
+          >
+            <Download size={14} />
+            Export
+          </button>
+        </div>
+
+        {/* Quick-stat cards */}
+        <div className="grid grid-cols-2 sm:grid-cols-4 gap-3 mb-8">
+          <QuickStat
+            icon={Pill}
+            label={t("health_meds_today", language)}
+            value={`${medsDone}/${medsTotal}`}
+            onClick={() => onNavigate("medications")}
+            accent={medsDone === medsTotal && medsTotal > 0 ? "success" : "brand"}
+          />
+          <QuickStat
+            icon={Calendar}
+            label={t("health_upcoming", language)}
+            value={String(upcomingAppts.length)}
+            onClick={() => onNavigate("appointments")}
+            accent="brand"
+          />
+          <QuickStat
+            icon={Activity}
+            label={t("nav_vitals", language)}
+            value={String(latestVitals.length)}
+            onClick={() => onNavigate("vitals")}
+            accent="accent"
+          />
+          <QuickStat
+            icon={FileText}
+            label={t("nav_records", language)}
+            value={String(records.length)}
+            onClick={() => onNavigate("records")}
+            accent="brand"
+          />
+        </div>
+
+        {/* Find Nearby — quick access for mobile users */}
+        <button
+          onClick={() => onNavigate("nearby")}
+          className="w-full flex items-center gap-3 p-4 mb-6 bg-surface-1 border border-line/60 rounded-2xl shadow-soft hover:border-brand-500/40 transition-all active:scale-[0.98] text-left"
+        >
+          <div className="w-10 h-10 rounded-xl bg-brand-500/10 flex items-center justify-center flex-shrink-0">
+            <MapPin size={18} className="text-brand-500" />
+          </div>
+          <div className="flex-1 min-w-0">
+            <span className="text-sm font-bold text-ink-base block">Find Nearby</span>
+            <span className="text-xs text-ink-muted">Pharmacies and doctors near you</span>
+          </div>
+          <ChevronRight size={16} className="text-ink-subtle flex-shrink-0" />
+        </button>
+
+        {/* Today's medications */}
+        {todayMedSlots.length > 0 && (
+          <DashSection
+            title={t("health_todays_meds", language)}
+            icon={Pill}
+            onMore={() => onNavigate("medications")}
+          >
+            <div className="space-y-2">
+              {todayMedSlots.slice(0, 6).map(({ med, time, taken }) => {
+                const streak = getMedStreak(med.id);
+                return (
+                  <div
+                    key={`${med.id}-${time}`}
+                    className={`flex items-center gap-3 p-3 rounded-xl border transition-all ${
+                      taken
+                        ? "bg-success-500/8 border-success-500/30"
+                        : "bg-surface-1 border-line/60"
+                    }`}
+                  >
+                    <button
+                      onClick={() => !taken && onMarkMedTaken(med.id, today, time)}
+                      disabled={taken}
+                      className={`w-8 h-8 rounded-full flex items-center justify-center flex-shrink-0 transition-all ${
+                        taken
+                          ? "bg-success-500 text-white"
+                          : "bg-surface-2 border-2 border-line text-ink-subtle hover:border-brand-500"
+                      }`}
+                    >
+                      {taken && <Check size={14} strokeWidth={3} />}
+                    </button>
+                    <div className="flex-1 min-w-0">
+                      <span className={`font-semibold text-sm ${taken ? "text-ink-muted line-through" : "text-ink-base"}`}>
+                        {med.name}
+                      </span>
+                      <span className="text-xs text-ink-muted ml-2">
+                        {med.dose} · {time}
+                      </span>
+                    </div>
+                    {streak > 0 && (
+                      <span className="flex items-center gap-0.5 text-xs font-bold text-warning-500">
+                        <Flame size={11} /> {streak}d
+                      </span>
+                    )}
+                  </div>
+                );
+              })}
+            </div>
+          </DashSection>
+        )}
+
+        {/* Upcoming appointments */}
+        {upcomingAppts.length > 0 && (
+          <DashSection
+            title={t("health_upcoming_appts", language)}
+            icon={Calendar}
+            onMore={() => onNavigate("appointments")}
+          >
+            <div className="space-y-2">
+              {upcomingAppts.slice(0, 3).map((a) => {
+                const meta = APPOINTMENT_TYPE_META[a.type];
+                return (
+                  <div
+                    key={a.id}
+                    className="flex items-center gap-3 p-3 rounded-xl bg-surface-1 border border-line/60"
+                  >
+                    <span className="text-lg">{meta.emoji}</span>
+                    <div className="flex-1 min-w-0">
+                      <span className="font-semibold text-sm text-ink-base block truncate">
+                        {a.title}
+                      </span>
+                      <span className="text-xs text-ink-muted flex items-center gap-2">
+                        <Clock size={10} />
+                        {new Date(a.date).toLocaleDateString()} · {a.time}
+                        {a.doctor && ` · ${a.doctor}`}
+                      </span>
+                    </div>
+                  </div>
+                );
+              })}
+            </div>
+          </DashSection>
+        )}
+
+        {/* Latest vitals */}
+        {latestVitals.length > 0 && (
+          <DashSection
+            title={t("health_latest_vitals", language)}
+            icon={Activity}
+            onMore={() => onNavigate("vitals")}
+          >
+            <div className="grid grid-cols-2 sm:grid-cols-3 gap-2">
+              {latestVitals.slice(0, 6).map(({ type, reading }) => {
+                const meta = VITAL_META[type as keyof typeof VITAL_META];
+                return (
+                  <div
+                    key={type}
+                    className="p-3 rounded-xl bg-surface-1 border border-line/60"
+                  >
+                    <span className="text-xs text-ink-subtle">{meta.emoji} {meta.label}</span>
+                    <div className="text-lg font-black text-ink-base mt-0.5">
+                      {reading!.value}
+                      <span className="text-xs text-ink-muted font-normal ml-1">{meta.unit}</span>
+                    </div>
+                  </div>
+                );
+              })}
+            </div>
+          </DashSection>
+        )}
+
+        {/* Empty state */}
+        {todayMedSlots.length === 0 &&
+          upcomingAppts.length === 0 &&
+          latestVitals.length === 0 && (
+            <div className="text-center py-16">
+              <div className="w-16 h-16 mx-auto mb-4 rounded-2xl bg-brand-gradient flex items-center justify-center shadow-glow">
+                <Heart size={28} className="text-white" />
+              </div>
+              <h3 className="font-bold text-ink-base text-lg mb-2">
+                {t("health_start_tracking", language)}
+              </h3>
+              <p className="text-ink-muted text-sm max-w-md mx-auto mb-6">
+                Add your medications, appointments, and vital signs. Everything stays
+                private in your browser — no account needed.
+              </p>
+              <div className="flex flex-wrap gap-2 justify-center">
+                <NavButton label={t("health_add_med", language)} onClick={() => onNavigate("medications")} />
+                <NavButton label={t("health_schedule_appt", language)} onClick={() => onNavigate("appointments")} />
+                <NavButton label={t("health_log_vitals", language)} onClick={() => onNavigate("vitals")} />
+              </div>
+            </div>
+          )}
+      </div>
+    </div>
+  );
+}
+
+function QuickStat({
+  icon: Icon,
+  label,
+  value,
+  onClick,
+  accent,
+}: {
+  icon: any;
+  label: string;
+  value: string;
+  onClick: () => void;
+  accent: "brand" | "success" | "accent";
+}) {
+  const colors = {
+    brand: "text-brand-500",
+    success: "text-success-500",
+    accent: "text-accent-500",
+  };
+  return (
+    <button
+      onClick={onClick}
+      className="p-3 rounded-2xl bg-surface-1 border border-line/60 shadow-soft text-left hover:border-brand-500/40 hover:-translate-y-0.5 transition-all"
+    >
+      <Icon size={16} className={`${colors[accent]} mb-1`} />
+      <div className="text-xl font-black text-ink-base">{value}</div>
+      <div className="text-[11px] text-ink-muted font-semibold">{label}</div>
+    </button>
+  );
+}
+
+function DashSection({
+  title,
+  icon: Icon,
+  onMore,
+  children,
+}: {
+  title: string;
+  icon: any;
+  onMore: () => void;
+  children: React.ReactNode;
+}) {
+  return (
+    <section className="mb-8">
+      <div className="flex items-center justify-between mb-3">
+        <h3 className="flex items-center gap-2 text-xs font-bold uppercase tracking-wider text-ink-subtle">
+          <Icon size={14} />
+          {title}
+        </h3>
+        <button
+          onClick={onMore}
+          className="text-xs font-semibold text-brand-500 hover:text-brand-600 flex items-center gap-0.5 transition-colors"
+        >
+          See all <ChevronRight size={12} />
+        </button>
+      </div>
+      {children}
+    </section>
+  );
+}
+
+function NavButton({ label, onClick }: { label: string; onClick: () => void }) {
+  return (
+    <button
+      onClick={onClick}
+      className="px-4 py-2 rounded-xl bg-surface-1 border border-line/60 text-sm font-semibold text-ink-muted hover:text-brand-600 hover:border-brand-500/50 transition-all"
+    >
+      {label}
+    </button>
+  );
+}
+
+/**
+ * Logged-out state for the Health Tracker. Mirror of the same component
+ * in 9-HuggingFace-Global/components/views/HealthDashboard.tsx so the
+ * Vercel and HF Spaces deployments behave identically.
+ */
+function SignedOutDashboard({
+  onNavigate,
+  language,
+}: {
+  onNavigate: (view: string) => void;
+  language: SupportedLanguage;
+}) {
+  return (
+    <div className="flex-1 overflow-y-auto p-6 sm:p-8 pb-mobile-nav scroll-touch">
+      <div className="max-w-xl mx-auto animate-in fade-in slide-in-from-bottom-4 duration-500">
+        <div className="rounded-2xl border border-line/60 bg-surface-1 p-7 sm:p-9 shadow-soft">
+          <div className="w-12 h-12 rounded-2xl bg-brand-gradient text-white flex items-center justify-center shadow-glow mb-5">
+            <Heart size={22} strokeWidth={2.5} />
+          </div>
+          <h2 className="text-2xl font-bold text-ink-base tracking-tight">
+            {t("health_tracker", language)}
+          </h2>
+          <p className="text-sm text-ink-muted mt-2 leading-relaxed">
+            Sign in to track your medications, appointments, vitals, and records
+            across devices. Your data stays encrypted; we never sell it.
+          </p>
+
+          <div className="mt-6 flex flex-wrap gap-3">
+            <button
+              onClick={() => onNavigate("register")}
+              className="inline-flex items-center gap-2 rounded-xl bg-brand-gradient text-white px-5 py-3 text-sm font-semibold shadow-soft hover:opacity-95 transition"
+            >
+              <UserPlus size={16} strokeWidth={2.4} />
+              Sign up free
+            </button>
+            <button
+              onClick={() => onNavigate("login")}
+              className="inline-flex items-center gap-2 rounded-xl border border-line/60 bg-surface-2 text-ink-base px-5 py-3 text-sm font-semibold hover:border-brand-500/50 transition"
+            >
+              <LogIn size={16} strokeWidth={2.4} />
+              Log in
+            </button>
+            <button
+              onClick={() => onNavigate("chat")}
+              className="inline-flex items-center gap-2 rounded-xl px-5 py-3 text-sm font-semibold text-ink-muted hover:text-brand-600 transition"
+            >
+              <Sparkles size={16} strokeWidth={2.4} />
+              Or try Ask without an account
+            </button>
+          </div>
+
+          <div className="mt-7 flex items-center gap-2 text-[12px] text-ink-subtle">
+            <ShieldCheck size={14} className="text-success-600" />
+            <span>Zero chat content stored. Open source. Free forever.</span>
+          </div>
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/components/views/HistoryView.tsx b/components/views/HistoryView.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..e412ef0ba690a13fb65f74d83f8db7dac71da1ea
--- /dev/null
+++ b/components/views/HistoryView.tsx
@@ -0,0 +1,103 @@
+"use client";
+
+import { Clock, MessageCircle, Trash2, XCircle } from "lucide-react";
+import { type ConversationSummary } from "@/lib/health-store";
+import { t, type SupportedLanguage } from "@/lib/i18n";
+
+interface HistoryViewProps {
+  history: ConversationSummary[];
+  onDelete: (id: string) => void;
+  onClearAll: () => void;
+  onReplay: (preview: string) => void;
+  language: SupportedLanguage;
+}
+
+export function HistoryView({
+  history,
+  onDelete,
+  onClearAll,
+  onReplay,
+  language,
+}: HistoryViewProps) {
+  return (
+    <div className="flex-1 overflow-y-auto p-6 sm:p-8">
+      <div className="max-w-2xl mx-auto animate-in fade-in slide-in-from-bottom-4 duration-500">
+        <div className="flex items-center justify-between mb-6">
+          <div>
+            <h2 className="text-2xl font-bold text-ink-base">
+              {t("hist_title", language)}
+            </h2>
+            <p className="text-sm text-ink-muted mt-1">
+              {t("hist_subtitle", language)}
+            </p>
+          </div>
+          {history.length > 0 && (
+            <button
+              onClick={onClearAll}
+              className="flex items-center gap-1.5 px-3 py-2 text-xs font-semibold text-danger-500 bg-danger-500/10 border border-danger-500/30 rounded-xl hover:bg-danger-500/20 transition-colors"
+            >
+              <XCircle size={13} />
+              Clear all
+            </button>
+          )}
+        </div>
+
+        {history.length === 0 ? (
+          <div className="text-center py-16">
+            <div className="w-16 h-16 mx-auto mb-4 rounded-2xl bg-brand-gradient-soft flex items-center justify-center">
+              <Clock size={28} className="text-brand-500" />
+            </div>
+            <h3 className="font-bold text-ink-base text-lg mb-1">
+              {t("hist_none", language)}
+            </h3>
+            <p className="text-ink-muted text-sm">
+              {t("hist_none_desc", language)}
+            </p>
+          </div>
+        ) : (
+          <div className="space-y-2">
+            {history.map((h) => (
+              <div
+                key={h.id}
+                className="bg-surface-1 border border-line/60 rounded-2xl p-4 shadow-soft group"
+              >
+                <div className="flex items-start gap-3">
+                  <div className="w-9 h-9 rounded-full bg-brand-gradient-soft flex items-center justify-center flex-shrink-0">
+                    <MessageCircle size={16} className="text-brand-500" />
+                  </div>
+                  <div className="flex-1 min-w-0">
+                    <button
+                      onClick={() => onReplay(h.preview)}
+                      className="text-left w-full"
+                    >
+                      <span className="font-bold text-sm text-ink-base block truncate hover:text-brand-600 transition-colors">
+                        {h.preview}
+                      </span>
+                    </button>
+                    <div className="flex items-center gap-3 mt-1 text-xs text-ink-muted">
+                      <span>
+                        {new Date(h.date).toLocaleDateString()}
+                      </span>
+                      <span>{h.messageCount} messages</span>
+                      {h.topic && (
+                        <span className="px-2 py-0.5 bg-surface-2 border border-line/60 rounded-full text-[10px] font-semibold">
+                          {h.topic}
+                        </span>
+                      )}
+                    </div>
+                  </div>
+                  <button
+                    onClick={() => onDelete(h.id)}
+                    className="text-ink-subtle hover:text-danger-500 p-1 flex-shrink-0 opacity-0 group-hover:opacity-100 transition-opacity"
+                  >
+                    <Trash2 size={14} />
+                  </button>
+                </div>
+              </div>
+            ))}
+          </div>
+        )}
+      </div>
+    </div>
+  );
+}
diff --git a/components/views/HomeView.tsx b/components/views/HomeView.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..7efa895ceb439b310c913d32e59ff40aebf08417
--- /dev/null
+++ b/components/views/HomeView.tsx
@@ -0,0 +1,71 @@
+"use client";
+
+import { HeroInput } from "../chat/HeroInput";
+import {
+  t,
+  type SupportedLanguage,
+} from "@/lib/i18n";
+
+interface HomeViewProps {
+  language: SupportedLanguage;
+  country: string;
+  emergencyNumber: string;
+  onNavigate: (view: string) => void;
+  onSendMessage: (content: string) => void;
+  onStartVoice: () => void;
+}
+
+/**
+ * Home landing — chat-first, enterprise-clean, zero noise.
+ *
+ * Structure (ChatGPT / Ada Health pattern):
+ *   1. Empathetic headline (one line)
+ *   2. Subtitle (one line)
+ *   3. The input (THE hero element)
+ *   4. Suggestion chips
+ *   5. One-line disclaimer (subtle)
+ *
+ * NO trust badges, NO action cards, NO marketing copy.
+ * Trust is communicated through design quality, not text.
+ */
+export function HomeView({
+  language,
+  onSendMessage,
+  onStartVoice,
+}: HomeViewProps) {
+  return (
+    <div className="flex-1 overflow-y-auto scroll-touch flex flex-col">
+      <div className="flex-1 flex flex-col justify-center max-w-2xl mx-auto w-full px-4 sm:px-6 py-8">
+        {/* Hero — short, empathetic, centered */}
+        <div className="text-center mb-8">
+          <h1 className="text-2xl sm:text-3xl font-bold text-ink-base tracking-tight leading-tight mb-2">
+            {t("home_hero_title", language)}
+          </h1>
+          <p className="text-ink-muted text-sm sm:text-base leading-relaxed max-w-sm mx-auto">
+            {t("home_hero_subtitle", language)}
+          </p>
+        </div>
+
+        {/* The input — THE hero */}
+        <div className="mb-6">
+          <HeroInput
+            language={language}
+            onSend={onSendMessage}
+            onStartVoice={onStartVoice}
+            size="hero"
+            suggestions={[
+              t("ask_example_1", language),
+              t("ask_example_2", language),
+              t("ask_example_3", language),
+            ].filter(Boolean)}
+          />
+        </div>
+
+        {/* One subtle line — not a banner, not a wall of text */}
+        <p className="text-center text-[11px] text-ink-subtle">
+          {t("badge_not_doctor", language)}
+        </p>
+      </div>
+    </div>
+  );
+}
diff --git a/components/views/LoginView.tsx b/components/views/LoginView.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..36817fd9f1b93b212a730f95693a5fc1f97c97a6
--- /dev/null
+++ b/components/views/LoginView.tsx
@@ -0,0 +1,321 @@
+"use client";
+
+import { useState } from "react";
+import {
+  Mail,
+  Lock,
+  User2,
+  ArrowRight,
+  ArrowLeft,
+  AlertCircle,
+  CheckCircle,
+  KeyRound,
+  ShieldCheck,
+} from "lucide-react";
+import { type SupportedLanguage } from "@/lib/i18n";
+
+type AuthFlow = "login" | "register" | "verify" | "forgot" | "reset";
+
+interface LoginViewProps {
+  onLogin: (email: string, password: string) => Promise<{ ok: boolean; error?: string }>;
+  onRegister: (
+    email: string,
+    password: string,
+    opts?: { displayName?: string },
+  ) => Promise<{ ok: boolean; error?: string; needsVerification?: boolean }>;
+  onVerifyEmail: (code: string) => Promise<{ ok: boolean; error?: string }>;
+  onResendVerification: () => Promise<void>;
+  onForgotPassword: (email: string) => Promise<{ ok: boolean; message?: string }>;
+  onResetPassword: (
+    email: string,
+    code: string,
+    newPassword: string,
+  ) => Promise<{ ok: boolean; error?: string }>;
+  language: SupportedLanguage;
+  /**
+   * Optional pre-fill — used when the user lands here via a password-reset
+   * email link (?action=reset&email=…&code=…). MedOSApp parses the URL and
+   * passes these so the form drops straight into the "set new password" step.
+   */
+  initialFlow?: AuthFlow;
+  initialEmail?: string;
+  initialCode?: string;
+}
+
+export function LoginView({
+  onLogin,
+  onRegister,
+  onVerifyEmail,
+  onResendVerification,
+  onForgotPassword,
+  onResetPassword,
+  initialFlow = "login",
+  initialEmail = "",
+  initialCode = "",
+}: LoginViewProps) {
+  const [flow, setFlow] = useState<AuthFlow>(initialFlow);
+  const [email, setEmail] = useState(initialEmail);
+  const [password, setPassword] = useState("");
+  const [displayName, setDisplayName] = useState("");
+  const [code, setCode] = useState(initialCode);
+  const [newPassword, setNewPassword] = useState("");
+  const [error, setError] = useState("");
+  const [success, setSuccess] = useState("");
+  const [loading, setLoading] = useState(false);
+
+  const clearMessages = () => { setError(""); setSuccess(""); };
+
+  const handleLogin = async () => {
+    if (!email || !password) { setError("Email and password required"); return; }
+    setLoading(true); clearMessages();
+    const res = await onLogin(email, password);
+    setLoading(false);
+    if (!res.ok) setError(res.error || "Login failed");
+  };
+
+  const handleRegister = async () => {
+    if (!email || !password) { setError("Email and password required"); return; }
+    setLoading(true); clearMessages();
+    const res = await onRegister(email, password, { displayName: displayName || undefined });
+    setLoading(false);
+    if (!res.ok) { setError(res.error || "Registration failed"); return; }
+    if (res.needsVerification) {
+      setSuccess("Account created! Check your email for a verification code.");
+      setFlow("verify");
+    }
+  };
+
+  const handleVerify = async () => {
+    if (!code || code.length !== 6) { setError("Enter the 6-digit code from your email"); return; }
+    setLoading(true); clearMessages();
+    const res = await onVerifyEmail(code);
+    setLoading(false);
+    if (res.ok) setSuccess("Email verified! You're all set.");
+    else setError(res.error || "Invalid code");
+  };
+
+  const handleForgot = async () => {
+    if (!email) { setError("Enter your email address"); return; }
+    setLoading(true); clearMessages();
+    const res = await onForgotPassword(email);
+    setLoading(false);
+    setSuccess(res.message || "If that email is registered, a reset code has been sent.");
+    setFlow("reset");
+  };
+
+  const handleReset = async () => {
+    if (!code || !newPassword) { setError("Enter the code and your new password"); return; }
+    setLoading(true); clearMessages();
+    const res = await onResetPassword(email, code, newPassword);
+    setLoading(false);
+    if (res.ok) setSuccess("Password reset! You're now logged in.");
+    else setError(res.error || "Reset failed");
+  };
+
+  return (
+    <div className="flex-1 overflow-y-auto pb-mobile-nav scroll-touch">
+      <div className="max-w-sm mx-auto px-4 py-10 sm:py-16">
+        {/* Header */}
+        <div className="text-center mb-8">
+          <div className="w-14 h-14 mx-auto mb-4 rounded-2xl bg-brand-gradient flex items-center justify-center shadow-glow">
+            {flow === "verify" ? (
+              <ShieldCheck size={24} className="text-white" />
+            ) : flow === "forgot" || flow === "reset" ? (
+              <KeyRound size={24} className="text-white" />
+            ) : (
+              <User2 size={24} className="text-white" />
+            )}
+          </div>
+          <h2 className="text-2xl font-bold text-ink-base tracking-tight mb-1">
+            {flow === "login" && "Welcome back"}
+            {flow === "register" && "Create your account"}
+            {flow === "verify" && "Verify your email"}
+            {flow === "forgot" && "Forgot password"}
+            {flow === "reset" && "Reset password"}
+          </h2>
+          <p className="text-sm text-ink-muted">
+            {flow === "login" && "Log in to sync your health data across devices"}
+            {flow === "register" && "Free forever. Your data stays private."}
+            {flow === "verify" && "Enter the 6-digit code we sent to your email"}
+            {flow === "forgot" && "We'll send a reset code to your email"}
+            {flow === "reset" && "Enter the code from your email and your new password"}
+          </p>
+        </div>
+
+        {/* Status messages */}
+        {error && (
+          <div className="flex items-center gap-2 text-sm text-danger-500 bg-danger-500/10 border border-danger-500/30 rounded-xl px-3 py-2.5 mb-4">
+            <AlertCircle size={14} className="flex-shrink-0" />
+            {error}
+          </div>
+        )}
+        {success && (
+          <div className="flex items-center gap-2 text-sm text-success-600 bg-success-500/10 border border-success-500/30 rounded-xl px-3 py-2.5 mb-4">
+            <CheckCircle size={14} className="flex-shrink-0" />
+            {success}
+          </div>
+        )}
+
+        <div className="space-y-4">
+          {/* === LOGIN === */}
+          {flow === "login" && (
+            <>
+              <Field icon={Mail} type="email" value={email} onChange={setEmail} placeholder="your@email.com" label="Email" autoComplete="email" />
+              <Field icon={Lock} type="password" value={password} onChange={setPassword} placeholder="Your password" label="Password" autoComplete="current-password" onEnter={handleLogin} />
+              <PrimaryButton loading={loading} onClick={handleLogin} label="Log in" />
+              <div className="flex items-center justify-between text-sm">
+                <button onClick={() => { setFlow("register"); clearMessages(); }} className="text-brand-500 hover:text-brand-600 font-semibold">
+                  Create account
+                </button>
+                <button onClick={() => { setFlow("forgot"); clearMessages(); }} className="text-ink-muted hover:text-ink-base font-medium">
+                  Forgot password?
+                </button>
+              </div>
+            </>
+          )}
+
+          {/* === REGISTER === */}
+          {flow === "register" && (
+            <>
+              <Field icon={Mail} type="email" value={email} onChange={setEmail} placeholder="your@email.com" label="Email" autoComplete="email" />
+              <Field icon={Lock} type="password" value={password} onChange={setPassword} placeholder="Min. 6 characters" label="Password" autoComplete="new-password" />
+              <Field icon={User2} type="text" value={displayName} onChange={setDisplayName} placeholder="Optional" label="Display name (optional)" autoComplete="name" onEnter={handleRegister} />
+              <PrimaryButton loading={loading} onClick={handleRegister} label="Create account" />
+              <BackLink onClick={() => { setFlow("login"); clearMessages(); }} label="Already have an account? Log in" />
+            </>
+          )}
+
+          {/* === VERIFY EMAIL === */}
+          {flow === "verify" && (
+            <>
+              <div>
+                <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">
+                  Verification code
+                </label>
+                <input
+                  type="text"
+                  inputMode="numeric"
+                  maxLength={6}
+                  value={code}
+                  onChange={(e) => setCode(e.target.value.replace(/\D/g, "").slice(0, 6))}
+                  placeholder="000000"
+                  className="w-full bg-surface-2 border border-line/60 text-ink-base rounded-xl px-4 py-4 text-center text-2xl font-black tracking-[0.5em] focus:outline-none focus:ring-2 focus:ring-brand-500/30 focus:border-brand-500"
+                  onKeyDown={(e) => e.key === "Enter" && handleVerify()}
+                />
+              </div>
+              <PrimaryButton loading={loading} onClick={handleVerify} label="Verify email" />
+              <div className="text-center">
+                <button onClick={onResendVerification} className="text-sm text-brand-500 hover:text-brand-600 font-semibold">
+                  Resend code
+                </button>
+              </div>
+              <BackLink onClick={() => { setFlow("login"); clearMessages(); }} label="Skip for now" />
+            </>
+          )}
+
+          {/* === FORGOT PASSWORD === */}
+          {flow === "forgot" && (
+            <>
+              <Field icon={Mail} type="email" value={email} onChange={setEmail} placeholder="your@email.com" label="Email" autoComplete="email" onEnter={handleForgot} />
+              <PrimaryButton loading={loading} onClick={handleForgot} label="Send reset code" />
+              <BackLink onClick={() => { setFlow("login"); clearMessages(); }} label="Back to login" />
+            </>
+          )}
+
+          {/* === RESET PASSWORD === */}
+          {flow === "reset" && (
+            <>
+              <div>
+                <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">
+                  Reset code
+                </label>
+                <input
+                  type="text"
+                  inputMode="numeric"
+                  maxLength={6}
+                  value={code}
+                  onChange={(e) => setCode(e.target.value.replace(/\D/g, "").slice(0, 6))}
+                  placeholder="000000"
+                  className="w-full bg-surface-2 border border-line/60 text-ink-base rounded-xl px-4 py-4 text-center text-2xl font-black tracking-[0.5em] focus:outline-none focus:ring-2 focus:ring-brand-500/30 focus:border-brand-500"
+                />
+              </div>
+              <Field icon={Lock} type="password" value={newPassword} onChange={setNewPassword} placeholder="New password (min. 6)" label="New password" autoComplete="new-password" onEnter={handleReset} />
+              <PrimaryButton loading={loading} onClick={handleReset} label="Reset password" />
+              <BackLink onClick={() => { setFlow("login"); clearMessages(); }} label="Back to login" />
+            </>
+          )}
+        </div>
+
+        <p className="text-center text-[11px] text-ink-subtle mt-8">
+          Account is optional. MedOS works fully without login.
+          <br />
+          Creating an account syncs health data across devices.
+        </p>
+      </div>
+    </div>
+  );
+}
+
+function Field({
+  icon: Icon,
+  type,
+  value,
+  onChange,
+  placeholder,
+  label,
+  autoComplete,
+  onEnter,
+}: {
+  icon: any;
+  type: string;
+  value: string;
+  onChange: (v: string) => void;
+  placeholder: string;
+  label: string;
+  autoComplete?: string;
+  onEnter?: () => void;
+}) {
+  return (
+    <div>
+      <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">
+        {label}
+      </label>
+      <div className="relative">
+        <Icon size={16} className="absolute left-3 top-1/2 -translate-y-1/2 text-ink-subtle" />
+        <input
+          type={type}
+          value={value}
+          onChange={(e) => onChange(e.target.value)}
+          placeholder={placeholder}
+          autoComplete={autoComplete}
+          className="w-full bg-surface-2 border border-line/60 text-ink-base rounded-xl pl-10 pr-4 py-3 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30 focus:border-brand-500"
+          onKeyDown={(e) => e.key === "Enter" && onEnter?.()}
+        />
+      </div>
+    </div>
+  );
+}
+
+function PrimaryButton({ loading, onClick, label }: { loading: boolean; onClick: () => void; label: string }) {
+  return (
+    <button
+      onClick={onClick}
+      disabled={loading}
+      className="w-full py-3 bg-brand-gradient text-white rounded-xl font-bold text-sm shadow-glow hover:brightness-110 transition-all disabled:opacity-50 flex items-center justify-center gap-2"
+    >
+      {loading ? "..." : label}
+      {!loading && <ArrowRight size={16} />}
+    </button>
+  );
+}
+
+function BackLink({ onClick, label }: { onClick: () => void; label: string }) {
+  return (
+    <div className="text-center">
+      <button onClick={onClick} className="text-sm text-brand-500 hover:text-brand-600 font-semibold inline-flex items-center gap-1">
+        <ArrowLeft size={14} />
+        {label}
+      </button>
+    </div>
+  );
+}
diff --git a/components/views/MedicationsView.tsx b/components/views/MedicationsView.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..7c5a480328c2e46379c8259493c9daeff823b1d2
--- /dev/null
+++ b/components/views/MedicationsView.tsx
@@ -0,0 +1,285 @@
+"use client";
+
+import { useState } from "react";
+import {
+  Pill,
+  Plus,
+  X,
+  Check,
+  Flame,
+  Trash2,
+  ChevronDown,
+} from "lucide-react";
+import {
+  FREQUENCY_LABELS,
+  todayISO,
+  type Medication,
+} from "@/lib/health-store";
+import { t, type SupportedLanguage } from "@/lib/i18n";
+
+interface MedicationsViewProps {
+  medications: Medication[];
+  onAdd: (med: Omit<Medication, "id">) => void;
+  onEdit: (id: string, patch: Partial<Medication>) => void;
+  onDelete: (id: string) => void;
+  onMarkTaken: (medId: string, date: string, time: string) => void;
+  isTaken: (medId: string, date: string, time: string) => boolean;
+  getStreak: (medId: string) => number;
+  language: SupportedLanguage;
+}
+
+const TIME_GROUPS = [
+  { label: "med_morning", range: ["05:00", "12:00"] },
+  { label: "med_afternoon", range: ["12:00", "18:00"] },
+  { label: "med_evening", range: ["18:00", "23:59"] },
+] as const;
+
+export function MedicationsView({
+  medications,
+  onAdd,
+  onDelete,
+  onMarkTaken,
+  isTaken,
+  getStreak,
+  language,
+}: MedicationsViewProps) {
+  const [showForm, setShowForm] = useState(false);
+  const [name, setName] = useState("");
+  const [dose, setDose] = useState("");
+  const [frequency, setFrequency] = useState<Medication["frequency"]>("daily");
+  const [times, setTimes] = useState<string[]>(["08:00"]);
+
+  const today = todayISO();
+  const active = medications.filter((m) => m.active);
+
+  const handleSubmit = () => {
+    if (!name.trim()) return;
+    onAdd({
+      name: name.trim(),
+      dose: dose.trim(),
+      frequency,
+      times,
+      startDate: today,
+      active: true,
+    });
+    setName("");
+    setDose("");
+    setFrequency("daily");
+    setTimes(["08:00"]);
+    setShowForm(false);
+  };
+
+  const grouped = TIME_GROUPS.map((g) => ({
+    ...g,
+    meds: active.filter((m) =>
+      m.times.some((t) => t >= g.range[0] && t < g.range[1]),
+    ),
+  }));
+
+  return (
+    <div className="flex-1 overflow-y-auto p-6 sm:p-8 pb-mobile-nav scroll-touch">
+      <div className="max-w-2xl mx-auto animate-in fade-in slide-in-from-bottom-4 duration-500">
+        <div className="flex items-center justify-between mb-6">
+          <div>
+            <h2 className="text-2xl font-bold text-ink-base">{t("med_title", language)}</h2>
+            <p className="text-sm text-ink-muted mt-1">
+              {t("med_subtitle", language)}
+            </p>
+          </div>
+          <button
+            onClick={() => setShowForm(!showForm)}
+            className="flex items-center gap-1.5 px-4 py-2.5 bg-brand-gradient text-white rounded-xl font-bold text-sm shadow-glow hover:brightness-110 transition-all"
+          >
+            {showForm ? <X size={16} /> : <Plus size={16} />}
+            {showForm ? t("med_cancel", language) : t("med_add", language)}
+          </button>
+        </div>
+
+        {/* Add medication form */}
+        {showForm && (
+          <div className="bg-surface-1 border border-line/60 rounded-2xl p-5 mb-6 shadow-soft animate-in fade-in slide-in-from-bottom-4 duration-300">
+            <h3 className="font-bold text-ink-base mb-4">{t("med_new", language)}</h3>
+            <div className="grid sm:grid-cols-2 gap-4">
+              <div>
+                <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">
+                  Name
+                </label>
+                <input
+                  value={name}
+                  onChange={(e) => setName(e.target.value)}
+                  placeholder="e.g. Metformin"
+                  className="w-full bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30 focus:border-brand-500"
+                />
+              </div>
+              <div>
+                <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">
+                  Dose
+                </label>
+                <input
+                  value={dose}
+                  onChange={(e) => setDose(e.target.value)}
+                  placeholder="e.g. 500mg"
+                  className="w-full bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30 focus:border-brand-500"
+                />
+              </div>
+              <div>
+                <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">
+                  Frequency
+                </label>
+                <div className="relative">
+                  <select
+                    value={frequency}
+                    onChange={(e) =>
+                      setFrequency(e.target.value as Medication["frequency"])
+                    }
+                    className="w-full appearance-none bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 pr-8 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+                  >
+                    {Object.entries(FREQUENCY_LABELS).map(([k, v]) => (
+                      <option key={k} value={k}>
+                        {v}
+                      </option>
+                    ))}
+                  </select>
+                  <ChevronDown
+                    className="absolute right-3 top-1/2 -translate-y-1/2 text-ink-subtle pointer-events-none"
+                    size={14}
+                  />
+                </div>
+              </div>
+              <div>
+                <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">
+                  Time(s)
+                </label>
+                <div className="flex gap-2 flex-wrap">
+                  {times.map((t, i) => (
+                    <input
+                      key={i}
+                      type="time"
+                      value={t}
+                      onChange={(e) => {
+                        const next = [...times];
+                        next[i] = e.target.value;
+                        setTimes(next);
+                      }}
+                      className="bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+                    />
+                  ))}
+                  <button
+                    type="button"
+                    onClick={() => setTimes([...times, "12:00"])}
+                    className="px-3 py-2.5 bg-surface-2 border border-line/60 rounded-xl text-ink-muted text-sm hover:bg-brand-50 dark:hover:bg-brand-900/20"
+                  >
+                    <Plus size={14} />
+                  </button>
+                </div>
+              </div>
+            </div>
+            <button
+              onClick={handleSubmit}
+              disabled={!name.trim()}
+              className="mt-4 w-full py-3 bg-brand-gradient text-white rounded-xl font-bold text-sm shadow-glow hover:brightness-110 transition-all disabled:opacity-50"
+            >
+              Save Medication
+            </button>
+          </div>
+        )}
+
+        {/* Empty state */}
+        {active.length === 0 && !showForm && (
+          <div className="text-center py-16">
+            <div className="w-16 h-16 mx-auto mb-4 rounded-2xl bg-brand-gradient-soft flex items-center justify-center">
+              <Pill size={28} className="text-brand-500" />
+            </div>
+            <h3 className="font-bold text-ink-base text-lg mb-1">
+              {t("med_none", language)}
+            </h3>
+            <p className="text-ink-muted text-sm">
+              {t("med_none_desc", language)}
+            </p>
+          </div>
+        )}
+
+        {/* Time-grouped medication list */}
+        {TIME_GROUPS.map((g) => {
+          const meds = active.filter((m) =>
+            m.times.some((t) => t >= g.range[0] && t < g.range[1]),
+          );
+          if (meds.length === 0) return null;
+          return (
+            <div key={t(g.label, language)} className="mb-6">
+              <h3 className="text-xs font-bold uppercase tracking-wider text-ink-subtle mb-3">
+                {t(g.label, language)}
+              </h3>
+              <div className="space-y-2">
+                {meds.map((m) => {
+                  const medTimes = m.times.filter(
+                    (t) => t >= g.range[0] && t < g.range[1],
+                  );
+                  return medTimes.map((time) => {
+                    const taken = isTaken(m.id, today, time);
+                    const streak = getStreak(m.id);
+                    return (
+                      <div
+                        key={`${m.id}-${time}`}
+                        className={`flex items-center gap-3 p-4 rounded-2xl border transition-all ${
+                          taken
+                            ? "bg-success-500/8 border-success-500/30"
+                            : "bg-surface-1 border-line/60 shadow-soft"
+                        }`}
+                      >
+                        <button
+                          onClick={() =>
+                            !taken && onMarkTaken(m.id, today, time)
+                          }
+                          disabled={taken}
+                          className={`w-10 h-10 rounded-full flex items-center justify-center flex-shrink-0 transition-all ${
+                            taken
+                              ? "bg-success-500 text-white"
+                              : "bg-surface-2 border-2 border-line text-ink-subtle hover:border-brand-500 hover:text-brand-500"
+                          }`}
+                        >
+                          {taken ? (
+                            <Check size={18} strokeWidth={3} />
+                          ) : (
+                            <Pill size={16} />
+                          )}
+                        </button>
+                        <div className="flex-1 min-w-0">
+                          <span
+                            className={`font-bold text-sm block ${
+                              taken
+                                ? "text-ink-muted line-through"
+                                : "text-ink-base"
+                            }`}
+                          >
+                            {m.name}
+                          </span>
+                          <span className="text-xs text-ink-muted">
+                            {m.dose} · {time}
+                          </span>
+                        </div>
+                        {streak > 0 && (
+                          <span className="flex items-center gap-1 text-xs font-bold text-warning-500">
+                            <Flame size={12} />
+                            {streak}d
+                          </span>
+                        )}
+                        <button
+                          onClick={() => onDelete(m.id)}
+                          className="text-ink-subtle hover:text-danger-500 transition-colors p-1"
+                          title="Delete medication"
+                        >
+                          <Trash2 size={14} />
+                        </button>
+                      </div>
+                    );
+                  });
+                })}
+              </div>
+            </div>
+          );
+        })}
+      </div>
+    </div>
+  );
+}
diff --git a/components/views/MyMedicinesView.tsx b/components/views/MyMedicinesView.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..1d71da28eea865e5abd0ed1d8c6be1857a99c211
--- /dev/null
+++ b/components/views/MyMedicinesView.tsx
@@ -0,0 +1,1048 @@
+"use client";
+
+import { useState, useMemo, useRef, useEffect } from "react";
+import {
+  Search,
+  Plus,
+  X,
+  Package,
+  AlertTriangle,
+  Clock,
+  Pill,
+  Trash2,
+  Edit3,
+  CalendarPlus,
+  Sparkles,
+  ChevronDown,
+  ChevronRight,
+  Box,
+  Camera,
+  Loader2,
+  CheckCircle2,
+  ScanLine,
+  Focus,
+  Zap,
+} from "lucide-react";
+import { useMedicineScanner } from "@/lib/hooks/useMedicineScanner";
+import {
+  getMedicineStatus,
+  getStockState,
+  todayISO,
+  type MedicineItem,
+  type MedicineForm,
+  type MedicineStatus,
+  type StockState,
+} from "@/lib/health-store";
+import { t, type SupportedLanguage } from "@/lib/i18n";
+
+interface MyMedicinesViewProps {
+  medicines: MedicineItem[];
+  onAdd: (med: Omit<MedicineItem, "id" | "createdAt">) => void;
+  onUpdate: (id: string, patch: Partial<MedicineItem>) => void;
+  onDelete: (id: string) => void;
+  onAddToSchedule: (med: MedicineItem) => void;
+  language: SupportedLanguage;
+}
+
+type FilterTab = "all" | "active" | "expiring" | "expired" | "low";
+
+const FORM_OPTIONS: { value: MedicineForm; label: string }[] = [
+  { value: "tablet", label: "Tablet" },
+  { value: "capsule", label: "Capsule" },
+  { value: "syrup", label: "Syrup" },
+  { value: "inhaler", label: "Inhaler" },
+  { value: "injection", label: "Injection" },
+  { value: "cream", label: "Cream / Ointment" },
+  { value: "drops", label: "Drops" },
+  { value: "patch", label: "Patch" },
+  { value: "other", label: "Other" },
+];
+
+const CATEGORY_OPTIONS = [
+  "Diabetes", "Pain Relief", "Cardiovascular", "Respiratory",
+  "Antibiotic", "Supplement", "Mental Health", "Thyroid",
+  "Gastrointestinal", "Allergy", "Other",
+];
+
+const STATUS_COLORS: Record<MedicineStatus, { bg: string; text: string; border: string; label: string }> = {
+  active:   { bg: "bg-success-500/10", text: "text-success-600 dark:text-success-400", border: "border-success-500/30", label: "Active" },
+  expiring: { bg: "bg-warning-500/10", text: "text-warning-600 dark:text-warning-500", border: "border-warning-500/30", label: "Expiring" },
+  expired:  { bg: "bg-danger-500/10",  text: "text-danger-600 dark:text-danger-400",   border: "border-danger-500/30",  label: "Expired" },
+  discontinued: { bg: "bg-surface-2", text: "text-ink-muted", border: "border-line/60", label: "Discontinued" },
+};
+
+const STOCK_COLORS: Record<StockState, { text: string; label: string }> = {
+  ok:  { text: "text-success-500", label: "" },
+  low: { text: "text-warning-500", label: "Low stock" },
+  out: { text: "text-danger-500", label: "Out of stock" },
+};
+
+// Color-coded categories (like real medicine cabinets)
+const CATEGORY_COLORS: Record<string, { bg: string; border: string; icon: string }> = {
+  "Pain Relief":      { bg: "bg-red-50 dark:bg-red-900/15",      border: "border-red-200 dark:border-red-800/40",      icon: "text-red-500" },
+  "Antibiotic":       { bg: "bg-amber-50 dark:bg-amber-900/15",  border: "border-amber-200 dark:border-amber-800/40",  icon: "text-amber-500" },
+  "Cardiovascular":   { bg: "bg-rose-50 dark:bg-rose-900/15",    border: "border-rose-200 dark:border-rose-800/40",    icon: "text-rose-500" },
+  "Diabetes":         { bg: "bg-blue-50 dark:bg-blue-900/15",    border: "border-blue-200 dark:border-blue-800/40",    icon: "text-blue-500" },
+  "Supplement":       { bg: "bg-green-50 dark:bg-green-900/15",  border: "border-green-200 dark:border-green-800/40",  icon: "text-green-500" },
+  "Mental Health":    { bg: "bg-purple-50 dark:bg-purple-900/15", border: "border-purple-200 dark:border-purple-800/40", icon: "text-purple-500" },
+  "Respiratory":      { bg: "bg-sky-50 dark:bg-sky-900/15",      border: "border-sky-200 dark:border-sky-800/40",      icon: "text-sky-500" },
+  "Allergy":          { bg: "bg-orange-50 dark:bg-orange-900/15", border: "border-orange-200 dark:border-orange-800/40", icon: "text-orange-500" },
+  "Gastrointestinal": { bg: "bg-teal-50 dark:bg-teal-900/15",   border: "border-teal-200 dark:border-teal-800/40",   icon: "text-teal-500" },
+  "Thyroid":          { bg: "bg-indigo-50 dark:bg-indigo-900/15", border: "border-indigo-200 dark:border-indigo-800/40", icon: "text-indigo-500" },
+};
+
+export function MyMedicinesView({
+  medicines,
+  onAdd,
+  onUpdate,
+  onDelete,
+  onAddToSchedule,
+  language,
+}: MyMedicinesViewProps) {
+  const [search, setSearch] = useState("");
+  const [filter, setFilter] = useState<FilterTab>("all");
+  const [selectedId, setSelectedId] = useState<string | null>(null);
+  const [showAddForm, setShowAddForm] = useState(false);
+  const [showScanner, setShowScanner] = useState(false);
+  const [capturedImage, setCapturedImage] = useState<string | null>(null);
+
+  // Medicine scanner
+  const scanner = useMedicineScanner();
+  const cameraInputRef = useRef<HTMLInputElement>(null);
+  const fileInputRef = useRef<HTMLInputElement>(null);
+
+  // Detect touch device (mobile) vs desktop
+  const isMobile = typeof window !== "undefined" && ("ontouchstart" in window || navigator.maxTouchPoints > 0);
+
+  const handleOpenScanner = () => {
+    scanner.reset();
+    setCapturedImage(null);
+    setShowScanner(true);
+    // On mobile: open camera directly. On desktop: show modal with options.
+    if (isMobile) {
+      setTimeout(() => cameraInputRef.current?.click(), 200);
+    }
+  };
+
+  const handleScanCapture = async (e: React.ChangeEvent<HTMLInputElement>) => {
+    const file = e.target.files?.[0];
+    if (!file) return;
+    // Show preview of captured image
+    const url = URL.createObjectURL(file);
+    setCapturedImage(url);
+    // Start scanning
+    await scanner.scan(file);
+    if (cameraInputRef.current) cameraInputRef.current.value = "";
+  };
+
+  const handleAddScanned = () => {
+    if (scanner.result?.medicine) {
+      onAdd(scanner.result.medicine);
+      scanner.reset();
+      setCapturedImage(null);
+      setShowScanner(false);
+    }
+  };
+
+  const handleCloseScanner = () => {
+    setShowScanner(false);
+    setCapturedImage(null);
+    scanner.reset();
+  };
+
+  // Cleanup object URL on unmount
+  useEffect(() => {
+    return () => { if (capturedImage) URL.revokeObjectURL(capturedImage); };
+  }, [capturedImage]);
+
+  // Filter + search
+  const filtered = useMemo(() => {
+    let items = medicines;
+    if (search) {
+      const q = search.toLowerCase();
+      items = items.filter(
+        (m) =>
+          m.name.toLowerCase().includes(q) ||
+          m.brandName?.toLowerCase().includes(q) ||
+          m.activeIngredient?.toLowerCase().includes(q) ||
+          m.category?.toLowerCase().includes(q),
+      );
+    }
+    if (filter !== "all") {
+      items = items.filter((m) => {
+        const status = getMedicineStatus(m);
+        const stock = getStockState(m);
+        if (filter === "active") return status === "active";
+        if (filter === "expiring") return status === "expiring";
+        if (filter === "expired") return status === "expired";
+        if (filter === "low") return stock === "low" || stock === "out";
+        return true;
+      });
+    }
+    return items;
+  }, [medicines, search, filter]);
+
+  // AI insights
+  const insights = useMemo(() => {
+    const alerts: { type: "warning" | "danger" | "info"; message: string }[] = [];
+    const expiring = medicines.filter((m) => getMedicineStatus(m) === "expiring");
+    const expired = medicines.filter((m) => getMedicineStatus(m) === "expired");
+    const lowStock = medicines.filter((m) => getStockState(m) === "low" || getStockState(m) === "out");
+    if (expired.length > 0) alerts.push({ type: "danger", message: `${expired.length} medicine${expired.length > 1 ? "s" : ""} expired — dispose safely` });
+    if (expiring.length > 0) alerts.push({ type: "warning", message: `${expiring.length} medicine${expiring.length > 1 ? "s" : ""} expiring within 30 days` });
+    if (lowStock.length > 0) alerts.push({ type: "info", message: `${lowStock.length} medicine${lowStock.length > 1 ? "s" : ""} running low — consider refill` });
+    return alerts;
+  }, [medicines]);
+
+  const selected = selectedId ? medicines.find((m) => m.id === selectedId) : null;
+
+  return (
+    <div className="flex-1 overflow-y-auto p-4 sm:p-6 pb-mobile-nav scroll-touch">
+      <div className="max-w-2xl mx-auto">
+        {/* Header — stacks on mobile, inline on desktop */}
+        <div className="mb-5">
+          <div className="flex items-center justify-between">
+            <div>
+              <h2 className="text-xl sm:text-2xl font-bold text-ink-base">{t("medicines_title", language)}</h2>
+              <p className="text-sm text-ink-muted mt-0.5">{medicines.length} {t("medicines_items", language)}</p>
+            </div>
+            {/* Hidden file inputs — separate for camera vs file upload */}
+            <input
+              ref={cameraInputRef}
+              type="file"
+              accept="image/*"
+              capture="environment"
+              onChange={handleScanCapture}
+              className="hidden"
+            />
+            <input
+              ref={fileInputRef}
+              type="file"
+              accept="image/*"
+              onChange={handleScanCapture}
+              className="hidden"
+            />
+          </div>
+
+          {/* Action buttons — full width on small mobile, inline on larger */}
+          <div className="flex gap-2 mt-3">
+            <button
+              onClick={handleOpenScanner}
+              disabled={scanner.scanning}
+              className="flex-1 sm:flex-none flex items-center justify-center gap-2 px-4 py-3 bg-surface-1 border-2 border-brand-500/30 text-brand-600 rounded-xl font-bold text-sm hover:border-brand-500/60 active:scale-[0.98] transition-all disabled:opacity-50"
+            >
+              <Camera size={18} />
+              <span>{t("scanner_scan_label", language)}</span>
+            </button>
+            <button
+              onClick={() => setShowAddForm(true)}
+              className="flex-1 sm:flex-none flex items-center justify-center gap-2 px-4 py-3 bg-brand-gradient text-white rounded-xl font-bold text-sm shadow-glow hover:brightness-110 active:scale-[0.98] transition-all"
+            >
+              <Plus size={16} /> {t("common_add", language)}
+            </button>
+          </div>
+        </div>
+
+        {/* Search */}
+        <div className="relative mb-3">
+          <Search size={16} className="absolute left-3 top-1/2 -translate-y-1/2 text-ink-subtle" />
+          <input
+            value={search}
+            onChange={(e) => setSearch(e.target.value)}
+            placeholder={t("contacts_search", language).replace("contacts", "medicines")}
+            className="w-full bg-surface-1 border border-line/60 text-ink-base rounded-xl pl-10 pr-4 py-3 text-base focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+          />
+        </div>
+
+        {/* Filter pills — scrollable, large touch targets */}
+        <div className="flex gap-2 overflow-x-auto pb-1 mb-4 -mx-1 px-1 scroll-touch">
+          {(["all", "active", "expiring", "expired", "low"] as FilterTab[]).map((f) => (
+            <button
+              key={f}
+              onClick={() => setFilter(f)}
+              className={`px-4 py-2 rounded-full text-sm font-semibold whitespace-nowrap transition-all active:scale-95 ${
+                filter === f
+                  ? f === "expired" ? "bg-danger-500 text-white"
+                  : f === "expiring" ? "bg-warning-500 text-white"
+                  : f === "low" ? "bg-orange-500 text-white"
+                  : "bg-brand-500 text-white"
+                  : "bg-surface-2 text-ink-muted hover:text-ink-base"
+              }`}
+            >
+              {f === "all" ? t("contacts_filter_all", language)
+                : f === "low" ? t("medicines_stock_low", language)
+                : f === "active" ? t("medicines_status_active", language)
+                : f === "expiring" ? t("medicines_status_expiring", language)
+                : t("medicines_status_expired", language)}
+            </button>
+          ))}
+        </div>
+
+          {/* AI Insights */}
+          {insights.length > 0 && (
+            <div className="mb-5 rounded-2xl bg-surface-1 border border-line/60 p-4 shadow-soft">
+              <div className="flex items-center gap-2 mb-2">
+                <Sparkles size={14} className="text-accent-500" />
+                <span className="text-xs font-bold uppercase tracking-wider text-ink-subtle">AI Insights</span>
+              </div>
+              <div className="space-y-1.5">
+                {insights.map((a, i) => (
+                  <div key={i} className={`flex items-center gap-2 text-sm ${
+                    a.type === "danger" ? "text-danger-600 dark:text-danger-400" :
+                    a.type === "warning" ? "text-warning-600 dark:text-warning-500" :
+                    "text-brand-600 dark:text-brand-400"
+                  }`}>
+                    <AlertTriangle size={13} />
+                    {a.message}
+                  </div>
+                ))}
+              </div>
+            </div>
+          )}
+
+          {/* Medicine list — large cards, senior-friendly */}
+          {filtered.length === 0 ? (
+            <div className="text-center py-12">
+              <div className="w-20 h-20 mx-auto mb-4 rounded-3xl bg-brand-500/10 flex items-center justify-center">
+                <Pill size={36} className="text-brand-500" />
+              </div>
+              <h3 className="font-bold text-ink-base text-xl mb-2">
+                {medicines.length === 0 ? t("medicines_no_medicines", language) : t("medicines_no_matches", language)}
+              </h3>
+              <p className="text-base text-ink-muted max-w-[300px] mx-auto">
+                {medicines.length === 0
+                  ? t("medicines_add_first", language)
+                  : t("medicines_try_different", language)}
+              </p>
+            </div>
+          ) : (
+            <div className="space-y-3">
+              {filtered.map((med) => {
+                const status = getMedicineStatus(med);
+                const stock = getStockState(med);
+                const statusColors = STATUS_COLORS[status];
+                const catColor = CATEGORY_COLORS[med.category || ""] || { bg: "bg-surface-1", border: "border-line/60", icon: "text-ink-muted" };
+                const isSelected = selectedId === med.id;
+
+                return (
+                  <button
+                    key={med.id}
+                    onClick={() => setSelectedId(isSelected ? null : med.id)}
+                    className={`w-full text-left rounded-2xl border-2 transition-all active:scale-[0.99] ${
+                      isSelected
+                        ? "border-brand-500 shadow-glow"
+                        : `${catColor.border} shadow-soft`
+                    } ${catColor.bg}`}
+                  >
+                    {/* Main card content — large, readable */}
+                    <div className="p-4 flex items-center gap-4">
+                      {/* Icon — large, color-coded */}
+                      <div className={`w-14 h-14 rounded-2xl flex items-center justify-center flex-shrink-0 ${
+                        status === "expired" ? "bg-danger-500/15" : status === "expiring" ? "bg-warning-500/15" : "bg-white dark:bg-surface-2"
+                      }`}>
+                        <Pill size={28} className={
+                          status === "expired" ? "text-danger-500" : status === "expiring" ? "text-warning-500" : catColor.icon
+                        } />
+                      </div>
+
+                      {/* Text — large for readability */}
+                      <div className="flex-1 min-w-0">
+                        <h3 className="text-base font-bold text-ink-base truncate leading-tight">{med.name}</h3>
+                        <p className="text-sm text-ink-muted mt-0.5">{med.dose} · {med.form}</p>
+
+                        {/* Status badges — clear, large text */}
+                        <div className="flex flex-wrap items-center gap-2 mt-2">
+                          <span className={`text-xs font-bold px-2.5 py-1 rounded-full ${statusColors.bg} ${statusColors.text} ${statusColors.border} border`}>
+                            {statusColors.label}
+                          </span>
+                          {stock !== "ok" && (
+                            <span className={`text-xs font-bold px-2.5 py-1 rounded-full bg-danger-500/10 text-danger-500 border border-danger-500/30 flex items-center gap-1`}>
+                              <AlertTriangle size={11} />
+                              {STOCK_COLORS[stock].label}
+                            </span>
+                          )}
+                          {med.quantity > 0 && (
+                            <span className="text-xs font-semibold text-ink-muted bg-surface-2 px-2 py-1 rounded-full">
+                              Qty: {med.quantity}
+                            </span>
+                          )}
+                        </div>
+                      </div>
+
+                      {/* Chevron */}
+                      <ChevronRight size={20} className={`text-ink-subtle flex-shrink-0 transition-transform ${isSelected ? "rotate-90" : ""}`} />
+                    </div>
+
+                    {/* Expanded detail — simple, clear */}
+                    {isSelected && (
+                      <div className="px-4 pb-4 pt-2 border-t border-line/30 space-y-3 animate-in fade-in duration-200">
+                        {/* Info rows — large, readable */}
+                        {med.brandName && (
+                          <InfoRow icon={Package} label="Brand" value={med.brandName} />
+                        )}
+                        {med.activeIngredient && (
+                          <InfoRow icon={Pill} label="Ingredient" value={med.activeIngredient} />
+                        )}
+                        {med.category && (
+                          <InfoRow icon={Box} label="Category" value={med.category} />
+                        )}
+                        {med.expiryDate && (
+                          <InfoRow icon={Clock} label="Expiry" value={new Date(med.expiryDate).toLocaleDateString(undefined, { month: "long", year: "numeric" })} />
+                        )}
+                        {med.notes && (
+                          <div className="p-3 bg-surface-2/50 rounded-xl">
+                            <p className="text-sm text-ink-base leading-relaxed">{med.notes}</p>
+                          </div>
+                        )}
+
+                        {/* Quantity adjuster — large buttons */}
+                        <div className="flex items-center gap-3 py-1">
+                          <span className="text-sm font-semibold text-ink-muted">Quantity:</span>
+                          <button
+                            onClick={(e) => { e.stopPropagation(); onUpdate(med.id, { quantity: Math.max(0, med.quantity - 1) }); }}
+                            className="w-10 h-10 rounded-xl bg-surface-2 border border-line/60 text-ink-base font-bold text-lg hover:bg-surface-3 flex items-center justify-center"
+                          >
+                            −
+                          </button>
+                          <span className="text-lg font-black text-ink-base w-8 text-center">{med.quantity}</span>
+                          <button
+                            onClick={(e) => { e.stopPropagation(); onUpdate(med.id, { quantity: med.quantity + 1 }); }}
+                            className="w-10 h-10 rounded-xl bg-surface-2 border border-line/60 text-ink-base font-bold text-lg hover:bg-surface-3 flex items-center justify-center"
+                          >
+                            +
+                          </button>
+                        </div>
+
+                        {/* Action buttons — large, clear labels */}
+                        <div className="flex gap-2">
+                          <button
+                            onClick={(e) => { e.stopPropagation(); onAddToSchedule(med); }}
+                            className="flex-1 py-3 bg-brand-gradient text-white rounded-xl font-bold text-sm shadow-glow hover:brightness-110 active:scale-[0.98] transition-all flex items-center justify-center gap-2"
+                          >
+                            <CalendarPlus size={16} /> Add to Schedule
+                          </button>
+                          <button
+                            onClick={(e) => { e.stopPropagation(); if (confirm("Remove this medicine?")) onDelete(med.id); }}
+                            className="py-3 px-4 border-2 border-danger-500/30 text-danger-500 rounded-xl font-bold text-sm hover:bg-danger-500/10 active:scale-[0.98] transition-all flex items-center justify-center gap-1"
+                          >
+                            <Trash2 size={15} />
+                          </button>
+                        </div>
+                      </div>
+                    )}
+                  </button>
+                );
+              })}
+            </div>
+          )}
+        </div>
+
+        {/* Add form modal */}
+      {showAddForm && (
+        <AddMedicineModal
+          onAdd={(med) => { onAdd(med); setShowAddForm(false); }}
+          onClose={() => setShowAddForm(false)}
+        />
+      )}
+
+      {/* ============================================================
+       * Medicine Scanner — full-screen modal with viewfinder
+       * Industry pattern: document scanning (CamScanner, Google Lens)
+       * ============================================================ */}
+      {showScanner && (
+        <div className="fixed inset-0 z-50 bg-black/50 backdrop-blur-sm flex items-end sm:items-center justify-center animate-in fade-in duration-200">
+          <div className="w-full max-w-md bg-surface-1 rounded-t-3xl sm:rounded-2xl shadow-card overflow-hidden max-h-[95vh] flex flex-col animate-in slide-in-from-bottom-4 duration-300">
+            {/* Header */}
+            <div className="flex items-center justify-between px-5 py-4 border-b border-line/40">
+              <div className="flex items-center gap-2.5">
+                <div className="w-8 h-8 rounded-lg bg-brand-500/10 flex items-center justify-center">
+                  <ScanLine size={16} className="text-brand-500" />
+                </div>
+                <div>
+                  <h3 className="font-bold text-sm text-ink-base">Medicine Scanner</h3>
+                  <p className="text-[11px] text-ink-muted">AI-powered label recognition</p>
+                </div>
+              </div>
+              <button
+                onClick={handleCloseScanner}
+                className="w-8 h-8 rounded-lg flex items-center justify-center text-ink-subtle hover:text-ink-base hover:bg-surface-2 transition-all"
+              >
+                <X size={16} />
+              </button>
+            </div>
+
+            {/* Content area */}
+            <div className="flex-1 overflow-y-auto">
+              {/* STEP 1: No image yet — show webcam (desktop) or instructions (mobile) */}
+              {!capturedImage && !scanner.scanning && (
+                <div className="p-5 flex flex-col items-center">
+                  {/* Live webcam preview (desktop) or static viewfinder (mobile) */}
+                  <WebcamCapture
+                    isMobile={isMobile}
+                    onCapture={async (file) => {
+                      const url = URL.createObjectURL(file);
+                      setCapturedImage(url);
+                      await scanner.scan(file);
+                    }}
+                    onOpenCamera={() => cameraInputRef.current?.click()}
+                    onUploadFile={() => fileInputRef.current?.click()}
+                    language={language}
+                  />
+                </div>
+              )}
+
+              {/* STEP 2: Image captured — scanning in progress */}
+              {capturedImage && scanner.scanning && (
+                <div className="p-5">
+                  {/* Image preview with scanning animation */}
+                  <div className="relative rounded-2xl overflow-hidden mb-5 animate-scan-success">
+                    <img
+                      src={capturedImage}
+                      alt="Captured medicine"
+                      className="w-full aspect-[4/3] object-cover"
+                    />
+                    {/* Green border overlay */}
+                    <div className="absolute inset-0 rounded-2xl border-3 border-success-500/60 animate-scanner-pulse" />
+                    {/* Scanning line */}
+                    <div className="absolute left-[8%] right-[8%] h-0.5 bg-gradient-to-r from-transparent via-success-500 to-transparent animate-scan-line" />
+                    {/* Corner brackets */}
+                    <div className="absolute top-3 left-3 w-5 h-5 border-t-2 border-l-2 border-success-500 rounded-tl" />
+                    <div className="absolute top-3 right-3 w-5 h-5 border-t-2 border-r-2 border-success-500 rounded-tr" />
+                    <div className="absolute bottom-3 left-3 w-5 h-5 border-b-2 border-l-2 border-success-500 rounded-bl" />
+                    <div className="absolute bottom-3 right-3 w-5 h-5 border-b-2 border-r-2 border-success-500 rounded-br" />
+                  </div>
+
+                  {/* Status */}
+                  <div className="flex flex-col items-center gap-3">
+                    <div className="flex items-center gap-2.5">
+                      <div className="relative">
+                        <Loader2 size={20} className="animate-spin text-brand-500" />
+                      </div>
+                      <span className="text-sm font-semibold text-ink-base">
+                        {scanner.waking ? "Waking up scanner..." : "Reading medicine label..."}
+                      </span>
+                    </div>
+                    <p className="text-xs text-ink-muted text-center">
+                      {scanner.waking
+                        ? "The scanner sleeps when idle. Starting up now."
+                        : "AI is extracting drug name, dosage, and instructions"}
+                    </p>
+                    {/* Progress bar */}
+                    <div className="w-full max-w-[200px] h-1 bg-surface-3 rounded-full overflow-hidden">
+                      <div className="h-full bg-brand-500 rounded-full animate-scan-progress" />
+                    </div>
+                  </div>
+                </div>
+              )}
+
+              {/* STEP 3: Error */}
+              {!scanner.scanning && scanner.error && (
+                <div className="p-6 text-center">
+                  {capturedImage && (
+                    <div className="relative rounded-2xl overflow-hidden mb-5 opacity-60">
+                      <img src={capturedImage} alt="Captured" className="w-full aspect-[4/3] object-cover" />
+                      <div className="absolute inset-0 rounded-2xl border-2 border-danger-500/40" />
+                    </div>
+                  )}
+                  <div className="w-12 h-12 mx-auto mb-3 rounded-2xl bg-warning-500/10 flex items-center justify-center">
+                    <AlertTriangle size={22} className="text-warning-500" />
+                  </div>
+                  <p className="text-sm text-ink-base font-semibold mb-1">Could not read label</p>
+                  <p className="text-xs text-ink-muted mb-5 leading-relaxed max-w-[260px] mx-auto">{scanner.error}</p>
+                  <div className="flex gap-2 max-w-[280px] mx-auto">
+                    <button
+                      onClick={() => { scanner.reset(); setCapturedImage(null); (isMobile ? cameraInputRef : fileInputRef).current?.click(); }}
+                      className="flex-1 py-3 bg-brand-gradient text-white rounded-xl font-bold text-sm shadow-glow hover:brightness-110 active:scale-[0.98] transition-all flex items-center justify-center gap-1.5"
+                    >
+                      <Camera size={15} /> Retry
+                    </button>
+                    <button
+                      onClick={handleCloseScanner}
+                      className="px-4 py-3 bg-surface-2 text-ink-muted rounded-xl font-semibold text-sm hover:bg-surface-3 transition-all"
+                    >
+                      Cancel
+                    </button>
+                  </div>
+                </div>
+              )}
+
+              {/* STEP 4: Success — EDITABLE fields for review + correction */}
+              {!scanner.scanning && scanner.result?.success && scanner.result.medicine && (
+                <ScanResultEditor
+                  medicine={scanner.result.medicine}
+                  capturedImage={capturedImage}
+                  onSave={(edited) => {
+                    onAdd(edited);
+                    scanner.reset();
+                    setCapturedImage(null);
+                    setShowScanner(false);
+                  }}
+                  onRescan={() => { scanner.reset(); setCapturedImage(null); (isMobile ? cameraInputRef : fileInputRef).current?.click(); }}
+                />
+              )}
+            </div>
+          </div>
+        </div>
+      )}
+    </div>
+  );
+}
+
+// ============================================================
+// Add medicine modal
+// ============================================================
+// (DetailPanel removed — replaced by inline expandable cards above)
+// (DetailRow removed — replaced by InfoRow component)
+
+
+// ============================================================
+// Add medicine modal
+// ============================================================
+
+function AddMedicineModal({
+  onAdd,
+  onClose,
+}: {
+  onAdd: (med: Omit<MedicineItem, "id" | "createdAt">) => void;
+  onClose: () => void;
+}) {
+  const [name, setName] = useState("");
+  const [brandName, setBrandName] = useState("");
+  const [activeIngredient, setActiveIngredient] = useState("");
+  const [dose, setDose] = useState("");
+  const [form, setForm] = useState<MedicineForm>("tablet");
+  const [category, setCategory] = useState("");
+  const [quantity, setQuantity] = useState("1");
+  const [expiryDate, setExpiryDate] = useState("");
+  const [refillDate, setRefillDate] = useState("");
+  const [notes, setNotes] = useState("");
+
+  const handleSubmit = () => {
+    if (!name.trim() || !dose.trim()) return;
+    onAdd({
+      name: name.trim(),
+      brandName: brandName.trim() || undefined,
+      activeIngredient: activeIngredient.trim() || undefined,
+      dose: dose.trim(),
+      form,
+      category: category || undefined,
+      quantity: parseInt(quantity, 10) || 1,
+      expiryDate: expiryDate || undefined,
+      refillDate: refillDate || undefined,
+      notes: notes.trim() || undefined,
+    });
+  };
+
+  return (
+    <div className="fixed inset-0 z-50 flex items-center justify-center p-4 bg-black/40 backdrop-blur-sm">
+      <div className="w-full max-w-md bg-surface-1 border border-line/60 rounded-2xl shadow-card overflow-y-auto max-h-[90vh] animate-in fade-in slide-in-from-bottom-4 duration-300">
+        <div className="flex items-center justify-between p-5 border-b border-line/40">
+          <h3 className="font-bold text-lg text-ink-base">Add Medicine</h3>
+          <button onClick={onClose} className="p-1.5 rounded-lg text-ink-subtle hover:text-ink-base hover:bg-surface-2">
+            <X size={16} />
+          </button>
+        </div>
+
+        <div className="p-5 space-y-4">
+          <Field label="Medicine name *" value={name} onChange={setName} placeholder="e.g. Metformin" />
+          <Field label="Brand name" value={brandName} onChange={setBrandName} placeholder="e.g. Glucophage" />
+          <Field label="Active ingredient" value={activeIngredient} onChange={setActiveIngredient} placeholder="e.g. Metformin HCl" />
+          <div className="grid grid-cols-2 gap-3">
+            <Field label="Dose *" value={dose} onChange={setDose} placeholder="e.g. 500 mg" />
+            <div>
+              <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">Form</label>
+              <select
+                value={form}
+                onChange={(e) => setForm(e.target.value as MedicineForm)}
+                className="w-full appearance-none bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+              >
+                {FORM_OPTIONS.map((o) => <option key={o.value} value={o.value}>{o.label}</option>)}
+              </select>
+            </div>
+          </div>
+          <div className="grid grid-cols-2 gap-3">
+            <div>
+              <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">Category</label>
+              <select
+                value={category}
+                onChange={(e) => setCategory(e.target.value)}
+                className="w-full appearance-none bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+              >
+                <option value="">Select...</option>
+                {CATEGORY_OPTIONS.map((c) => <option key={c} value={c}>{c}</option>)}
+              </select>
+            </div>
+            <Field label="Quantity" value={quantity} onChange={setQuantity} placeholder="1" type="number" />
+          </div>
+          <div className="grid grid-cols-2 gap-3">
+            <Field label="Expiry date" value={expiryDate} onChange={setExpiryDate} type="date" />
+            <Field label="Refill date" value={refillDate} onChange={setRefillDate} type="date" />
+          </div>
+          <div>
+            <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">Notes</label>
+            <textarea
+              value={notes}
+              onChange={(e) => setNotes(e.target.value)}
+              placeholder="e.g. Take after food"
+              rows={2}
+              className="w-full bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 text-sm resize-none focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+            />
+          </div>
+        </div>
+
+        <div className="p-5 pt-0">
+          <button
+            onClick={handleSubmit}
+            disabled={!name.trim() || !dose.trim()}
+            className="w-full py-3 bg-brand-gradient text-white rounded-xl font-bold text-sm shadow-glow hover:brightness-110 transition-all disabled:opacity-50"
+          >
+            Save Medicine
+          </button>
+        </div>
+      </div>
+    </div>
+  );
+}
+
+function Field({
+  label,
+  value,
+  onChange,
+  placeholder,
+  type = "text",
+}: {
+  label: string;
+  value: string;
+  onChange: (v: string) => void;
+  placeholder?: string;
+  type?: string;
+}) {
+  return (
+    <div>
+      <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">{label}</label>
+      <input
+        type={type}
+        value={value}
+        onChange={(e) => onChange(e.target.value)}
+        placeholder={placeholder}
+        className="w-full bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+      />
+    </div>
+  );
+}
+
+/**
+ * Editable scan result — lets users review + correct OCR before saving.
+ * Industry pattern: CamScanner, Adobe Scan, Google Lens all let you edit.
+ */
+function ScanResultEditor({
+  medicine,
+  capturedImage,
+  onSave,
+  onRescan,
+}: {
+  medicine: Omit<MedicineItem, "id" | "createdAt">;
+  capturedImage: string | null;
+  onSave: (edited: Omit<MedicineItem, "id" | "createdAt">) => void;
+  onRescan: () => void;
+}) {
+  const [name, setName] = useState(medicine.name || "");
+  const [dose, setDose] = useState(medicine.dose || "");
+  const [form, setForm] = useState<MedicineForm>(medicine.form || "tablet");
+  const [brandName, setBrandName] = useState(medicine.brandName || "");
+  const [activeIngredient, setActiveIngredient] = useState(medicine.activeIngredient || "");
+  const [category, setCategory] = useState(medicine.category || "");
+  const [expiryDate, setExpiryDate] = useState(medicine.expiryDate || "");
+  const [quantity, setQuantity] = useState("1");
+  const [notes, setNotes] = useState(medicine.notes || "");
+
+  const handleSave = () => {
+    if (!name.trim() || !dose.trim()) return;
+    onSave({
+      name: name.trim(),
+      dose: dose.trim(),
+      form,
+      brandName: brandName.trim() || undefined,
+      activeIngredient: activeIngredient.trim() || undefined,
+      category: category || undefined,
+      quantity: parseInt(quantity, 10) || 1,
+      expiryDate: expiryDate || undefined,
+      notes: notes.trim() || undefined,
+    });
+  };
+
+  return (
+    <div className="p-5">
+      {/* Success header */}
+      <div className="flex items-start gap-3 mb-4">
+        {capturedImage && (
+          <img src={capturedImage} alt="Scanned" className="w-12 h-12 rounded-xl object-cover border-2 border-success-500/40 flex-shrink-0" />
+        )}
+        <div className="flex-1 min-w-0">
+          <div className="flex items-center gap-1.5 mb-0.5">
+            <CheckCircle2 size={14} className="text-success-500 flex-shrink-0" />
+            <span className="text-xs font-bold text-success-600 uppercase tracking-wider">{t("scanner_detected", "en")}</span>
+          </div>
+          <p className="text-[11px] text-ink-muted">Review and correct any fields below, then save.</p>
+        </div>
+      </div>
+
+      {/* Editable fields */}
+      <div className="space-y-3 mb-4">
+        <ScanEditField label="Name *" value={name} onChange={setName} />
+        <ScanEditField label="Dose *" value={dose} onChange={setDose} placeholder="e.g. 500mg" />
+        <div className="grid grid-cols-2 gap-2">
+          <div>
+            <label className="text-[10px] font-semibold text-ink-muted uppercase tracking-wider block mb-1">Form</label>
+            <select
+              value={form}
+              onChange={(e) => setForm(e.target.value as MedicineForm)}
+              className="w-full bg-surface-0 border border-line/60 text-ink-base rounded-lg px-2.5 py-2 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+            >
+              {(["tablet", "capsule", "syrup", "inhaler", "injection", "cream", "drops", "patch", "other"] as MedicineForm[]).map((f) => (
+                <option key={f} value={f}>{f.charAt(0).toUpperCase() + f.slice(1)}</option>
+              ))}
+            </select>
+          </div>
+          <ScanEditField label="Quantity" value={quantity} onChange={setQuantity} type="number" />
+        </div>
+        <ScanEditField label="Brand" value={brandName} onChange={setBrandName} />
+        <ScanEditField label="Active ingredient" value={activeIngredient} onChange={setActiveIngredient} />
+        <div className="grid grid-cols-2 gap-2">
+          <div>
+            <label className="text-[10px] font-semibold text-ink-muted uppercase tracking-wider block mb-1">Category</label>
+            <select
+              value={category}
+              onChange={(e) => setCategory(e.target.value)}
+              className="w-full bg-surface-0 border border-line/60 text-ink-base rounded-lg px-2.5 py-2 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+            >
+              <option value="">Select...</option>
+              {CATEGORY_OPTIONS.map((c) => <option key={c} value={c}>{c}</option>)}
+            </select>
+          </div>
+          <ScanEditField label="Expiry" value={expiryDate} onChange={setExpiryDate} placeholder="YYYY-MM" />
+        </div>
+        <ScanEditField label="Notes" value={notes} onChange={setNotes} placeholder="Dosage instructions, warnings..." />
+      </div>
+
+      {/* Actions */}
+      <div className="flex gap-2">
+        <button
+          onClick={handleSave}
+          disabled={!name.trim() || !dose.trim()}
+          className="flex-1 py-3 bg-brand-gradient text-white rounded-xl font-bold text-sm shadow-glow hover:brightness-110 active:scale-[0.98] transition-all disabled:opacity-50 flex items-center justify-center gap-2"
+        >
+          <Plus size={16} /> {t("scanner_add_to_medicines", "en")}
+        </button>
+        <button
+          onClick={onRescan}
+          className="px-4 py-3 bg-surface-2 text-ink-muted rounded-xl font-semibold text-sm hover:bg-surface-3 active:scale-[0.98] transition-all"
+        >
+          {t("scanner_rescan", "en")}
+        </button>
+      </div>
+    </div>
+  );
+}
+
+function ScanEditField({ label, value, onChange, placeholder, type = "text" }: {
+  label: string; value: string; onChange: (v: string) => void; placeholder?: string; type?: string;
+}) {
+  return (
+    <div>
+      <label className="text-[10px] font-semibold text-ink-muted uppercase tracking-wider block mb-1">{label}</label>
+      <input
+        type={type}
+        value={value}
+        onChange={(e) => onChange(e.target.value)}
+        placeholder={placeholder}
+        className="w-full bg-surface-0 border border-line/60 text-ink-base rounded-lg px-2.5 py-2 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+      />
+    </div>
+  );
+}
+
+function ScanField({ label, value }: { label: string; value: string }) {
+  return (
+    <div className="flex items-center justify-between px-3.5 py-2.5">
+      <span className="text-[11px] text-ink-muted font-semibold uppercase tracking-wider flex-shrink-0">{label}</span>
+      <span className="text-sm text-ink-base font-medium text-right ml-3 truncate">{value}</span>
+    </div>
+  );
+}
+
+function InfoRow({ icon: Icon, label, value }: { icon: any; label: string; value: string }) {
+  return (
+    <div className="flex items-center gap-3 py-1.5">
+      <Icon size={16} className="text-ink-subtle flex-shrink-0" />
+      <span className="text-xs font-semibold text-ink-muted w-20 flex-shrink-0">{label}</span>
+      <span className="text-sm text-ink-base">{value}</span>
+    </div>
+  );
+}
+
+/**
+ * WebcamCapture — live camera preview for desktop, camera button for mobile.
+ *
+ * Desktop: shows live webcam feed inside a viewfinder overlay with corner
+ * brackets. User positions medicine label, clicks "Capture" to take photo.
+ * Professional appearance — camera stays inside the modal.
+ *
+ * Mobile: shows static viewfinder + "Open Camera" button (launches native
+ * camera app via capture="environment").
+ */
+function WebcamCapture({
+  isMobile,
+  onCapture,
+  onOpenCamera,
+  onUploadFile,
+  language,
+}: {
+  isMobile: boolean;
+  onCapture: (file: File) => void;
+  onOpenCamera: () => void;
+  onUploadFile: () => void;
+  language: string;
+}) {
+  const videoRef = useRef<HTMLVideoElement>(null);
+  const canvasRef = useRef<HTMLCanvasElement>(null);
+  const [streaming, setStreaming] = useState(false);
+  const [camError, setCamError] = useState(false);
+
+  // Start webcam on desktop — video element MUST be in DOM first
+  const streamRef = useRef<MediaStream | null>(null);
+
+  useEffect(() => {
+    if (isMobile) return;
+
+    // Small delay to ensure video element is mounted in DOM
+    const timer = setTimeout(() => {
+      if (!navigator.mediaDevices?.getUserMedia) {
+        setCamError(true);
+        return;
+      }
+
+      navigator.mediaDevices.getUserMedia({
+        video: { facingMode: "environment", width: { ideal: 1280 }, height: { ideal: 720 } },
+      })
+        .then((s) => {
+          streamRef.current = s;
+          if (videoRef.current) {
+            videoRef.current.srcObject = s;
+            videoRef.current.play().catch(() => {});
+            setStreaming(true);
+          }
+        })
+        .catch(() => setCamError(true));
+    }, 100);
+
+    return () => {
+      clearTimeout(timer);
+      streamRef.current?.getTracks().forEach((t) => t.stop());
+      streamRef.current = null;
+    };
+  }, [isMobile]); // eslint-disable-line react-hooks/exhaustive-deps
+
+  const captureFrame = () => {
+    const video = videoRef.current;
+    const canvas = canvasRef.current;
+    if (!video || !canvas) return;
+
+    canvas.width = video.videoWidth;
+    canvas.height = video.videoHeight;
+    const ctx = canvas.getContext("2d");
+    if (!ctx) return;
+    ctx.drawImage(video, 0, 0);
+
+    canvas.toBlob((blob) => {
+      if (blob) {
+        const file = new File([blob], "webcam-capture.jpg", { type: "image/jpeg" });
+        // Stop webcam
+        streamRef.current?.getTracks().forEach((t) => t.stop());
+        streamRef.current = null;
+        setStreaming(false);
+        onCapture(file);
+      }
+    }, "image/jpeg", 0.92);
+  };
+
+  // Mobile: show buttons only
+  if (isMobile) {
+    return (
+      <div className="text-center">
+        <h4 className="font-bold text-ink-base mb-2">{t("scanner_scan_your", language)}</h4>
+        <p className="text-xs text-ink-muted mb-5 max-w-[240px] mx-auto">{t("scanner_scan_desc", language)}</p>
+        <div className="w-full max-w-[280px] mx-auto space-y-2">
+          <button onClick={onOpenCamera}
+            className="w-full py-3.5 bg-brand-gradient text-white rounded-2xl font-bold text-sm shadow-glow hover:brightness-110 active:scale-[0.98] transition-all flex items-center justify-center gap-2">
+            <Camera size={18} /> {t("scanner_open_camera", language)}
+          </button>
+          <button onClick={onUploadFile}
+            className="w-full py-3 border-2 border-line/60 text-ink-base rounded-2xl font-semibold text-sm hover:bg-surface-2 active:scale-[0.98] transition-all flex items-center justify-center gap-2">
+            <ScanLine size={16} /> Upload photo
+          </button>
+        </div>
+      </div>
+    );
+  }
+
+  // Desktop: live webcam with viewfinder overlay
+  return (
+    <div className="w-full">
+      <canvas ref={canvasRef} className="hidden" />
+
+      {/* Live webcam feed — video always in DOM, container hidden until streaming */}
+      <div className={`relative rounded-2xl overflow-hidden mb-4 bg-black ${streaming ? "" : "hidden"}`}>
+        <video ref={videoRef} autoPlay playsInline muted className="w-full aspect-[4/3] object-cover" />
+        {/* Professional viewfinder overlay */}
+        <div className="absolute inset-0 pointer-events-none">
+          <div className="absolute inset-0 bg-black/25" style={{ clipPath: "polygon(0% 0%, 100% 0%, 100% 100%, 0% 100%, 0% 10%, 10% 10%, 10% 90%, 90% 90%, 90% 10%, 0% 10%)" }} />
+          <div className="absolute inset-[10%] border-2 border-white/50 rounded-xl">
+            <div className="absolute -top-px -left-px w-7 h-7 border-t-[3px] border-l-[3px] border-white rounded-tl-lg" />
+            <div className="absolute -top-px -right-px w-7 h-7 border-t-[3px] border-r-[3px] border-white rounded-tr-lg" />
+            <div className="absolute -bottom-px -left-px w-7 h-7 border-b-[3px] border-l-[3px] border-white rounded-bl-lg" />
+            <div className="absolute -bottom-px -right-px w-7 h-7 border-b-[3px] border-r-[3px] border-white rounded-br-lg" />
+          </div>
+          <div className="absolute bottom-4 left-0 right-0 text-center">
+            <span className="text-white text-xs font-medium bg-black/50 backdrop-blur-sm px-4 py-1.5 rounded-full">
+              {t("scanner_position", language)}
+            </span>
+          </div>
+        </div>
+      </div>
+
+      {/* Buttons — change based on state */}
+      {streaming ? (
+        <div className="space-y-2">
+          <button onClick={captureFrame}
+            className="w-full py-3.5 bg-brand-gradient text-white rounded-2xl font-bold text-sm shadow-glow hover:brightness-110 active:scale-[0.98] transition-all flex items-center justify-center gap-2">
+            <Camera size={18} /> Capture
+          </button>
+          <button onClick={onUploadFile}
+            className="w-full py-2.5 text-ink-muted text-xs font-semibold hover:text-ink-base transition-colors flex items-center justify-center gap-1.5">
+            <ScanLine size={14} /> Or upload a photo instead
+          </button>
+        </div>
+      ) : (
+        <div className="text-center">
+          <div className={`relative w-full aspect-[4/3] max-w-[280px] mx-auto mb-5 rounded-2xl border-2 border-dashed border-line/40 bg-surface-2/30 flex items-center justify-center ${camError ? "" : "animate-pulse"}`}>
+            <div className="text-center text-ink-subtle">
+              <Camera size={32} strokeWidth={1.5} className="mx-auto mb-2" />
+              <p className="text-xs font-medium">{camError ? "Webcam not available" : "Starting camera..."}</p>
+            </div>
+          </div>
+          <div className="w-full max-w-[280px] mx-auto space-y-2">
+            <button onClick={onUploadFile}
+              className="w-full py-3.5 bg-brand-gradient text-white rounded-2xl font-bold text-sm shadow-glow hover:brightness-110 active:scale-[0.98] transition-all flex items-center justify-center gap-2">
+              <ScanLine size={18} /> Upload photo
+            </button>
+            <button onClick={onOpenCamera}
+              className="w-full py-3 border-2 border-line/60 text-ink-base rounded-2xl font-semibold text-sm hover:bg-surface-2 active:scale-[0.98] transition-all flex items-center justify-center gap-2">
+              <Camera size={16} /> {t("scanner_open_camera", language)}
+            </button>
+          </div>
+        </div>
+      )}
+    </div>
+  );
+}
diff --git a/components/views/NearbyView.tsx b/components/views/NearbyView.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..1adeadf76a2904d8b8c8100c9f8faf055e09a777
--- /dev/null
+++ b/components/views/NearbyView.tsx
@@ -0,0 +1,458 @@
+"use client";
+
+import { useState, useCallback } from "react";
+import {
+  MapPin,
+  Navigation,
+  Search,
+  Pill,
+  Stethoscope,
+  Phone,
+  Clock,
+  ExternalLink,
+  Loader2,
+  AlertTriangle,
+  ChevronRight,
+  Map,
+  LocateFixed,
+  UserPlus,
+  Check,
+} from "lucide-react";
+import { t, type SupportedLanguage } from "@/lib/i18n";
+import type { MedContact, ContactType } from "@/lib/health-store";
+
+interface NearbyViewProps {
+  language: SupportedLanguage;
+  onSaveContact?: (contact: Omit<MedContact, "id" | "createdAt">) => void;
+}
+
+type EntityType = "all" | "pharmacy" | "doctor";
+
+interface NearbyResult {
+  id: string;
+  name: string;
+  category: string;
+  phone?: string | null;
+  opening_hours?: string | null;
+  address?: string | null;
+  lat: number;
+  lon: number;
+  distance_m: number;
+  eta_walk_min?: number;
+  eta_drive_min?: number;
+  directions_url?: string;
+  maps?: string;
+}
+
+const NEARBY_API = "/api/nearby";
+const GEOCODE_API = "https://nominatim.openstreetmap.org/search";
+
+export function NearbyView({ language, onSaveContact }: NearbyViewProps) {
+  const [savedIds, setSavedIds] = useState<Set<string>>(new Set());
+  const [entityType, setEntityType] = useState<EntityType>("all");
+  const [results, setResults] = useState<NearbyResult[]>([]);
+  const [loading, setLoading] = useState(false);
+  const [waking, setWaking] = useState(false);
+  const [error, setError] = useState<string | null>(null);
+  const [userLat, setUserLat] = useState<number | null>(null);
+  const [userLon, setUserLon] = useState<number | null>(null);
+  const [locationName, setLocationName] = useState("");
+  const [searched, setSearched] = useState(false);
+  const [selectedId, setSelectedId] = useState<string | null>(null);
+  const [geoLoading, setGeoLoading] = useState(false);
+
+  /** Geocode a place name or postal code to coordinates */
+  const geocodeLocation = useCallback(async (query: string) => {
+    setGeoLoading(true);
+    setError(null);
+    try {
+      const res = await fetch(
+        `${GEOCODE_API}?q=${encodeURIComponent(query)}&format=json&limit=1&addressdetails=1`,
+        { headers: { "User-Agent": "MedOS/1.0" } }
+      );
+      const data = await res.json();
+      if (data.length > 0) {
+        const lat = parseFloat(data[0].lat);
+        const lon = parseFloat(data[0].lon);
+        setUserLat(lat);
+        setUserLon(lon);
+        setLocationName(data[0].display_name?.split(",").slice(0, 2).join(",") || query);
+        return { lat, lon };
+      } else {
+        setError("Location not found. Try a different city name or postal code.");
+        return null;
+      }
+    } catch {
+      setError("Could not search for location. Check your connection.");
+      return null;
+    } finally {
+      setGeoLoading(false);
+    }
+  }, []);
+
+  /** Get user's GPS location + reverse geocode to show address */
+  const getGPSLocation = useCallback(() => {
+    if (!navigator.geolocation) {
+      setError("Geolocation not supported by your browser");
+      return;
+    }
+    setLoading(true);
+    setError(null);
+    setLocationName("Detecting your location...");
+    navigator.geolocation.getCurrentPosition(
+      async (pos) => {
+        const lat = pos.coords.latitude;
+        const lon = pos.coords.longitude;
+        setUserLat(lat);
+        setUserLon(lon);
+
+        // Reverse geocode to show a human-readable address
+        try {
+          const res = await fetch(
+            `https://nominatim.openstreetmap.org/reverse?lat=${lat}&lon=${lon}&format=json&zoom=16`,
+            { headers: { "User-Agent": "MedOS/1.0" } }
+          );
+          const data = await res.json();
+          const addr = data.address || {};
+          // Build a short, readable location name
+          const parts = [
+            addr.road || addr.neighbourhood || addr.suburb,
+            addr.city || addr.town || addr.village || addr.county,
+          ].filter(Boolean);
+          setLocationName(parts.join(", ") || `${lat.toFixed(4)}, ${lon.toFixed(4)}`);
+        } catch {
+          setLocationName(`${lat.toFixed(4)}, ${lon.toFixed(4)}`);
+        }
+        setLoading(false);
+      },
+      (err) => {
+        setLocationName("");
+        setError(
+          err.code === 1
+            ? "Location access denied. Please enable location in your browser settings, or type a city name."
+            : "Could not get location. Type a city name instead."
+        );
+        setLoading(false);
+      },
+      { enableHighAccuracy: true, timeout: 15000 }
+    );
+  }, []);
+
+  /** Handle location search (text input) */
+  const handleLocationSearch = useCallback(async () => {
+    const query = locationName.trim();
+    if (!query) return;
+    const result = await geocodeLocation(query);
+    if (result) {
+      // Auto-search after geocoding
+      await doSearch(result.lat, result.lon);
+    }
+  }, [locationName, geocodeLocation]);
+
+  /** Core search function */
+  const doSearch = useCallback(async (lat: number, lon: number) => {
+    setLoading(true);
+    setError(null);
+    setResults([]);
+    setSelectedId(null);
+    setSearched(true);
+    setWaking(false);
+
+    try {
+      // Single POST request — the backend handles wake + search.
+      // Timeout of 60s covers HF Space cold start (~30s) + Overpass query (~10s).
+      const controller = new AbortController();
+      const timeout = setTimeout(() => controller.abort(), 60000);
+
+      // Show "waking" status after 5s if still loading
+      const wakingTimer = setTimeout(() => setWaking(true), 5000);
+
+      const res = await fetch(NEARBY_API, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        signal: controller.signal,
+        body: JSON.stringify({ lat, lon, radius_m: 5000, entity_type: entityType, limit: 20 }),
+      });
+
+      clearTimeout(timeout);
+      clearTimeout(wakingTimer);
+      setWaking(false);
+      const data = await res.json();
+      if (data.results?.length > 0) {
+        setResults(data.results);
+      } else if (data.error) {
+        setError(data.error);
+      } else {
+        setError("No pharmacies or doctors found nearby. Try a larger area or different location.");
+      }
+    } catch (e: any) {
+      setError(
+        e?.name === "AbortError"
+          ? "Search timed out. The service may be starting up — please try again."
+          : "Search failed. Please try again."
+      );
+    } finally {
+      setLoading(false);
+      setWaking(false);
+    }
+  }, [entityType]);
+
+  /** Search with current coordinates */
+  const searchNearby = useCallback(() => {
+    if (userLat !== null && userLon !== null) {
+      doSearch(userLat, userLon);
+    }
+  }, [userLat, userLon, doSearch]);
+
+  const formatDistance = (m: number) =>
+    m < 1000 ? `${Math.round(m)}m` : `${(m / 1000).toFixed(1)}km`;
+
+  const mapUrl = userLat && userLon
+    ? `https://www.openstreetmap.org/export/embed.html?bbox=${userLon - 0.02},${userLat - 0.015},${userLon + 0.02},${userLat + 0.015}&layer=mapnik&marker=${userLat},${userLon}`
+    : null;
+
+  return (
+    <div className="flex-1 overflow-y-auto pb-mobile-nav scroll-touch">
+      <div className="max-w-2xl mx-auto px-4 sm:px-6 py-6">
+        {/* Header */}
+        <div className="mb-5">
+          <h2 className="text-2xl font-bold text-ink-base tracking-tight flex items-center gap-2">
+            <MapPin size={22} className="text-brand-500" />
+            {t("nearby_title", language)}
+          </h2>
+          <p className="text-sm text-ink-muted mt-1">
+            {t("nearby_subtitle", language)}
+          </p>
+        </div>
+
+        {/* Location input — city name, postal code, or GPS */}
+        <div className="bg-surface-1 rounded-2xl border border-line/40 shadow-soft p-4 mb-4 space-y-3">
+          {/* Text search */}
+          <div className="flex gap-2">
+            <div className="relative flex-1">
+              <Search size={15} className="absolute left-3 top-1/2 -translate-y-1/2 text-ink-subtle" />
+              <input
+                type="text"
+                value={locationName}
+                onChange={(e) => setLocationName(e.target.value)}
+                onKeyDown={(e) => e.key === "Enter" && handleLocationSearch()}
+                placeholder={t("nearby_placeholder", language)}
+                className="w-full bg-surface-0 border border-line/60 text-ink-base rounded-xl pl-9 pr-3 py-2.5 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30 focus:border-brand-500"
+              />
+            </div>
+            <button
+              onClick={handleLocationSearch}
+              disabled={geoLoading || !locationName.trim()}
+              className="px-4 py-2.5 bg-brand-500 text-white rounded-xl font-bold text-sm hover:brightness-110 active:scale-[0.98] transition-all disabled:opacity-50 flex-shrink-0"
+            >
+              {geoLoading ? <Loader2 size={16} className="animate-spin" /> : t("nearby_find", language)}
+            </button>
+          </div>
+
+          {/* GPS button */}
+          <button
+            onClick={getGPSLocation}
+            disabled={loading}
+            className="w-full flex items-center justify-center gap-2 py-2.5 border border-line/60 text-ink-base rounded-xl font-semibold text-sm hover:bg-surface-2 active:scale-[0.98] transition-all disabled:opacity-50"
+          >
+            <LocateFixed size={15} className="text-brand-500" />
+            {loading && !waking ? t("nearby_detecting", language) : t("nearby_use_gps", language)}
+          </button>
+
+          {/* Location status — self-speaking like Google Maps */}
+          {userLat !== null && userLon !== null && locationName && (
+            <div className="flex items-center gap-2.5 p-2.5 bg-success-500/5 border border-success-500/20 rounded-xl">
+              <div className="w-8 h-8 rounded-lg bg-success-500/10 flex items-center justify-center flex-shrink-0">
+                <Navigation size={14} className="text-success-500" />
+              </div>
+              <div className="flex-1 min-w-0">
+                <span className="text-xs font-semibold text-success-600 block">
+                  {t("nearby_location_set", language)}
+                </span>
+                <span className="text-[11px] text-ink-muted truncate block">
+                  {locationName}
+                </span>
+              </div>
+            </div>
+          )}
+          {loading && locationName === "Detecting your location..." && (
+            <div className="flex items-center gap-2.5 p-2.5 bg-brand-500/5 border border-brand-500/20 rounded-xl">
+              <Loader2 size={16} className="text-brand-500 animate-spin flex-shrink-0" />
+              <span className="text-xs text-brand-600 font-medium">
+                {t("nearby_detecting", language)}
+              </span>
+            </div>
+          )}
+        </div>
+
+        {/* Entity type selector */}
+        <div className="flex gap-2 mb-4">
+          {(["all", "pharmacy", "doctor"] as EntityType[]).map((type) => (
+            <button
+              key={type}
+              onClick={() => setEntityType(type)}
+              className={`flex-1 flex items-center justify-center gap-1.5 py-2.5 rounded-xl font-semibold text-sm transition-all active:scale-[0.98] ${
+                entityType === type
+                  ? "bg-brand-500 text-white shadow-soft"
+                  : "bg-surface-1 border border-line/60 text-ink-muted hover:text-ink-base"
+              }`}
+            >
+              {type === "pharmacy" ? <Pill size={14} /> : type === "doctor" ? <Stethoscope size={14} /> : <Search size={14} />}
+              {type === "all" ? t("nearby_type_all", language) : type === "pharmacy" ? t("nearby_type_pharmacy", language) : t("nearby_type_doctor", language)}
+            </button>
+          ))}
+        </div>
+
+        {/* Search button */}
+        {userLat !== null && userLon !== null && (
+          <button
+            onClick={searchNearby}
+            disabled={loading}
+            className="w-full py-3 bg-brand-gradient text-white rounded-xl font-bold text-sm shadow-glow hover:brightness-110 active:scale-[0.98] transition-all disabled:opacity-50 flex items-center justify-center gap-2 mb-5"
+          >
+            {loading ? (
+              <>
+                <Loader2 size={16} className="animate-spin" />
+                {waking ? t("nearby_waking", language) : t("nearby_searching", language)}
+              </>
+            ) : (
+              <>
+                <Search size={16} /> {t("nearby_search", language)}
+              </>
+            )}
+          </button>
+        )}
+
+        {/* Map */}
+        {mapUrl && searched && (
+          <div className="mb-5 rounded-2xl overflow-hidden border border-line/40 shadow-soft">
+            <iframe src={mapUrl} width="100%" height="200" style={{ border: 0 }} loading="lazy" title="Map" />
+          </div>
+        )}
+
+        {/* Error */}
+        {error && (
+          <div className="flex items-start gap-2 p-3 mb-4 bg-warning-500/5 border border-warning-500/20 rounded-xl">
+            <AlertTriangle size={16} className="text-warning-500 mt-0.5 flex-shrink-0" />
+            <p className="text-sm text-warning-600">{error}</p>
+          </div>
+        )}
+
+        {/* Results */}
+        {results.length > 0 && (
+          <div className="space-y-2">
+            <p className="text-xs font-semibold text-ink-muted uppercase tracking-wider px-1">
+              {results.length} places found
+            </p>
+            {results.map((r) => (
+              <button
+                key={r.id}
+                onClick={() => setSelectedId(selectedId === r.id ? null : r.id)}
+                className={`w-full text-left p-4 rounded-2xl border transition-all ${
+                  selectedId === r.id
+                    ? "bg-brand-500/5 border-brand-500/40 shadow-soft"
+                    : "bg-surface-1 border-line/40 hover:border-brand-500/30"
+                }`}
+              >
+                <div className="flex items-start gap-3">
+                  <div className={`w-10 h-10 rounded-xl flex items-center justify-center flex-shrink-0 ${
+                    r.category === "pharmacy" ? "bg-success-500/10 text-success-500" : "bg-brand-500/10 text-brand-500"
+                  }`}>
+                    {r.category === "pharmacy" ? <Pill size={18} /> : <Stethoscope size={18} />}
+                  </div>
+                  <div className="flex-1 min-w-0">
+                    <span className="text-sm font-bold text-ink-base block truncate">{r.name}</span>
+                    <div className="flex items-center gap-3 mt-1">
+                      <span className="text-xs text-ink-muted">{formatDistance(r.distance_m)}</span>
+                      {r.eta_walk_min && (
+                        <span className="text-xs text-ink-subtle flex items-center gap-0.5">
+                          <Clock size={10} /> {r.eta_walk_min} min walk
+                        </span>
+                      )}
+                    </div>
+                    {r.phone && (
+                      <a href={`tel:${r.phone}`} className="text-xs text-brand-500 flex items-center gap-1 mt-1" onClick={(e) => e.stopPropagation()}>
+                        <Phone size={10} /> {r.phone}
+                      </a>
+                    )}
+                  </div>
+                  <ChevronRight size={16} className={`text-ink-subtle flex-shrink-0 transition-transform ${selectedId === r.id ? "rotate-90" : ""}`} />
+                </div>
+
+                {/* Expanded */}
+                {selectedId === r.id && (
+                  <div className="mt-3 pt-3 border-t border-line/30 space-y-2">
+                    {r.address && <p className="text-xs text-ink-muted">{r.address}</p>}
+                    {r.opening_hours && (
+                      <p className="text-xs text-ink-muted flex items-center gap-1">
+                        <Clock size={10} /> {r.opening_hours}
+                      </p>
+                    )}
+                    <div className="flex gap-2 pt-1">
+                      {r.directions_url && (
+                        <a href={r.directions_url} target="_blank" rel="noopener noreferrer"
+                          className="flex-1 py-2.5 bg-brand-500 text-white rounded-xl text-xs font-bold flex items-center justify-center gap-1.5 hover:brightness-110 transition-all"
+                          onClick={(e) => e.stopPropagation()}>
+                          <Navigation size={12} /> {t("nearby_directions", language)}
+                        </a>
+                      )}
+                      {r.maps && (
+                        <a href={r.maps} target="_blank" rel="noopener noreferrer"
+                          className="py-2.5 px-4 bg-surface-2 text-ink-muted rounded-xl text-xs font-bold flex items-center justify-center gap-1.5 hover:bg-surface-3 transition-all"
+                          onClick={(e) => e.stopPropagation()}>
+                          <Map size={12} /> {t("common_map", language)}
+                        </a>
+                      )}
+                      {onSaveContact && (
+                        <button
+                          onClick={(e) => {
+                            e.stopPropagation();
+                            if (savedIds.has(r.id)) return;
+                            onSaveContact({
+                              name: r.name,
+                              type: r.category as ContactType,
+                              phone: r.phone || undefined,
+                              address: r.address || undefined,
+                              openingHours: r.opening_hours || undefined,
+                              lat: r.lat,
+                              lon: r.lon,
+                              directionsUrl: r.directions_url,
+                              mapsUrl: r.maps,
+                              source: "nearby_search",
+                            });
+                            setSavedIds((prev) => new Set(prev).add(r.id));
+                          }}
+                          disabled={savedIds.has(r.id)}
+                          className={`py-2.5 px-3 rounded-xl text-xs font-bold flex items-center justify-center gap-1.5 transition-all ${
+                            savedIds.has(r.id)
+                              ? "bg-success-500/10 text-success-500"
+                              : "bg-surface-2 text-ink-muted hover:text-brand-500 hover:bg-brand-500/10"
+                          }`}>
+                          {savedIds.has(r.id) ? <Check size={12} /> : <UserPlus size={12} />}
+                          {savedIds.has(r.id) ? "Saved" : "Save"}
+                        </button>
+                      )}
+                    </div>
+                  </div>
+                )}
+              </button>
+            ))}
+          </div>
+        )}
+
+        {/* Empty state */}
+        {!searched && !loading && userLat === null && (
+          <div className="text-center py-10">
+            <div className="w-16 h-16 mx-auto mb-4 rounded-2xl bg-brand-500/10 flex items-center justify-center">
+              <MapPin size={28} className="text-brand-500" />
+            </div>
+            <h3 className="font-bold text-ink-base text-lg mb-2">{t("nearby_find_healthcare", language)}</h3>
+            <p className="text-sm text-ink-muted leading-relaxed max-w-[280px] mx-auto">
+              {t("nearby_find_desc", language)}
+            </p>
+          </div>
+        )}
+      </div>
+    </div>
+  );
+}
diff --git a/components/views/ProfileView.tsx b/components/views/ProfileView.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..f2b41c10356ad0d231c632f642ad4b7c8cf5b7d3
--- /dev/null
+++ b/components/views/ProfileView.tsx
@@ -0,0 +1,338 @@
+"use client";
+
+import { useState } from "react";
+import {
+  User2,
+  LogOut,
+  Download,
+  Shield,
+  Calendar,
+  Pill,
+  Activity,
+  FileText,
+  Printer,
+  ClipboardList,
+  Trash2,
+  AlertTriangle,
+} from "lucide-react";
+import { t, type SupportedLanguage } from "@/lib/i18n";
+import type { User } from "@/lib/hooks/useAuth";
+
+interface ProfileViewProps {
+  user: User;
+  onLogout: () => void;
+  onExport: () => void;
+  onOpenEHR: () => void;
+  /**
+   * Self-service account deletion. Wired to useAuth.deleteMe which
+   * calls DELETE /api/auth/me with the user's current password +
+   * email confirmation. On success the parent navigates away (the
+   * session is already invalidated server-side and the auth state
+   * cleared locally). On failure the API's error message is shown
+   * inline — typically "Password is incorrect" or "Too many
+   * deletion attempts. Try again later." (3/hour rate limit).
+   */
+  onDeleteAccount: (
+    password: string,
+    confirmEmail: string,
+  ) => Promise<{ ok: boolean; error?: string; message?: string }>;
+  medicationCount: number;
+  appointmentCount: number;
+  vitalCount: number;
+  recordCount: number;
+  language: SupportedLanguage;
+}
+
+export function ProfileView({
+  user,
+  onLogout,
+  onExport,
+  onOpenEHR,
+  onDeleteAccount,
+  medicationCount,
+  appointmentCount,
+  vitalCount,
+  recordCount,
+  language,
+}: ProfileViewProps) {
+  const handlePrint = () => {
+    window.print();
+  };
+
+  return (
+    <div className="flex-1 overflow-y-auto p-6 sm:p-8 pb-mobile-nav scroll-touch">
+      <div className="max-w-2xl mx-auto animate-in fade-in slide-in-from-bottom-4 duration-500">
+        <div className="text-center mb-8">
+          <div className="w-16 h-16 mx-auto mb-4 rounded-full bg-brand-gradient flex items-center justify-center shadow-glow">
+            <User2 size={28} className="text-white" />
+          </div>
+          <h2 className="text-2xl font-bold text-ink-base tracking-tight">
+            {user.displayName || user.email}
+          </h2>
+          <p className="text-sm text-ink-muted mt-1">{user.email}</p>
+          {user.emailVerified ? (
+            <span className="inline-flex items-center gap-1 text-xs text-success-500 mt-1">
+              <Shield size={10} /> Email verified
+            </span>
+          ) : (
+            <span className="text-xs text-warning-500 mt-1">
+              Email not verified
+            </span>
+          )}
+        </div>
+
+        {/* Health summary cards */}
+        <div className="grid grid-cols-2 sm:grid-cols-4 gap-3 mb-8">
+          <StatCard icon={Pill} label={t("nav_medications", language)} value={medicationCount} />
+          <StatCard icon={Calendar} label={t("nav_appointments", language)} value={appointmentCount} />
+          <StatCard icon={Activity} label={t("nav_vitals", language)} value={vitalCount} />
+          <StatCard icon={FileText} label={t("nav_records", language)} value={recordCount} />
+        </div>
+
+        {/* Actions */}
+        <div className="space-y-3 mb-8">
+          <button
+            onClick={onOpenEHR}
+            className="w-full flex items-center gap-3 p-4 bg-surface-1 border border-line/60 rounded-2xl shadow-soft text-left hover:border-brand-500/40 transition-all"
+          >
+            <div className="w-10 h-10 rounded-xl bg-accent-500/10 flex items-center justify-center">
+              <ClipboardList size={18} className="text-accent-500" />
+            </div>
+            <div>
+              <span className="font-bold text-sm text-ink-base block">
+                Health Profile (EHR)
+              </span>
+              <span className="text-xs text-ink-muted">
+                Set up your medical history for personalized AI advice
+              </span>
+            </div>
+          </button>
+
+          <button
+            onClick={onExport}
+            className="w-full flex items-center gap-3 p-4 bg-surface-1 border border-line/60 rounded-2xl shadow-soft text-left hover:border-brand-500/40 transition-all"
+          >
+            <div className="w-10 h-10 rounded-xl bg-brand-500/10 flex items-center justify-center">
+              <Download size={18} className="text-brand-500" />
+            </div>
+            <div>
+              <span className="font-bold text-sm text-ink-base block">
+                Export health data (JSON)
+              </span>
+              <span className="text-xs text-ink-muted">
+                Download all your data as a file
+              </span>
+            </div>
+          </button>
+
+          <button
+            onClick={handlePrint}
+            className="w-full flex items-center gap-3 p-4 bg-surface-1 border border-line/60 rounded-2xl shadow-soft text-left hover:border-brand-500/40 transition-all"
+          >
+            <div className="w-10 h-10 rounded-xl bg-accent-500/10 flex items-center justify-center">
+              <Printer size={18} className="text-accent-500" />
+            </div>
+            <div>
+              <span className="font-bold text-sm text-ink-base block">
+                Print health report
+              </span>
+              <span className="text-xs text-ink-muted">
+                PDF-friendly printable page for your doctor
+              </span>
+            </div>
+          </button>
+        </div>
+
+        {/* Privacy note */}
+        <div className="flex items-start gap-3 p-4 bg-surface-2/50 border border-line/40 rounded-2xl mb-8">
+          <Shield size={18} className="text-accent-500 flex-shrink-0 mt-0.5" />
+          <div>
+            <p className="text-sm font-semibold text-ink-base">Your data is yours</p>
+            <p className="text-xs text-ink-muted mt-0.5 leading-relaxed">
+              Health data is stored locally in your browser and synced to your
+              private account on our server. No third parties. No ads. You can
+              export or delete everything at any time.
+            </p>
+          </div>
+        </div>
+
+        {/* Logout */}
+        <button
+          onClick={onLogout}
+          className="w-full py-3 border-2 border-danger-500/40 text-danger-500 rounded-xl font-bold text-sm hover:bg-danger-500/10 transition-all flex items-center justify-center gap-2"
+        >
+          <LogOut size={16} />
+          Log out
+        </button>
+
+        <p className="text-center text-[11px] text-ink-subtle mt-4">
+          Member since{" "}
+          {user.createdAt
+            ? new Date(user.createdAt).toLocaleDateString()
+            : "recently"}
+        </p>
+
+        {/*
+         * Danger zone — self-service account deletion (GDPR Art. 17).
+         *
+         * Intentionally placed below the privacy note + logout, behind
+         * an extra click, and rendered in muted danger styling rather
+         * than a primary CTA. The submit step requires the user to
+         * RE-TYPE both their email and current password — these are
+         * also enforced server-side; the client copy is just to make
+         * accidental clicks harder.
+         *
+         * Admins cannot self-delete from this UI: the backend returns
+         * 403 for is_admin users, and we hide the trigger button up
+         * front so admins don't get an "error" experience for a
+         * deliberate restriction.
+         */}
+        {!user.isAdmin && (
+          <DangerZone email={user.email} onDeleteAccount={onDeleteAccount} />
+        )}
+      </div>
+    </div>
+  );
+}
+
+function DangerZone({
+  email,
+  onDeleteAccount,
+}: {
+  email: string;
+  onDeleteAccount: ProfileViewProps["onDeleteAccount"];
+}) {
+  const [open, setOpen] = useState(false);
+  const [confirmEmail, setConfirmEmail] = useState("");
+  const [password, setPassword] = useState("");
+  const [busy, setBusy] = useState(false);
+  const [error, setError] = useState("");
+
+  const reset = () => {
+    setConfirmEmail("");
+    setPassword("");
+    setError("");
+  };
+
+  const handleCancel = () => {
+    setOpen(false);
+    reset();
+  };
+
+  const handleSubmit = async () => {
+    if (!confirmEmail.trim() || !password) {
+      setError("Type your email and current password to continue.");
+      return;
+    }
+    setBusy(true);
+    setError("");
+    const res = await onDeleteAccount(password, confirmEmail.trim());
+    setBusy(false);
+    if (!res.ok) {
+      setError(res.error || "Deletion failed");
+      return;
+    }
+    // On success the auth hook has already wiped local state and the
+    // parent (MedOSApp) navigates away — no further action needed here.
+  };
+
+  return (
+    <div className="mt-10 pt-6 border-t border-danger-500/20">
+      <div className="flex items-center gap-2 mb-2">
+        <AlertTriangle size={14} className="text-danger-500" />
+        <h3 className="text-xs font-bold uppercase tracking-wider text-danger-500">
+          Danger zone
+        </h3>
+      </div>
+      <p className="text-xs text-ink-muted mb-3 leading-relaxed">
+        Permanently delete your account and all associated health data
+        (medications, appointments, vitals, records, chat history, settings).
+        This action cannot be undone.
+      </p>
+
+      {!open && (
+        <button
+          onClick={() => setOpen(true)}
+          className="inline-flex items-center gap-2 text-sm font-semibold text-danger-500 hover:text-danger-600 transition-colors"
+        >
+          <Trash2 size={14} />
+          Delete my account
+        </button>
+      )}
+
+      {open && (
+        <div className="rounded-2xl border border-danger-500/40 bg-danger-500/5 p-4 space-y-3">
+          <p className="text-sm font-semibold text-danger-500">
+            Are you sure? This is permanent.
+          </p>
+
+          <label className="block">
+            <span className="block text-[11px] font-bold uppercase tracking-wider text-ink-muted mb-1">
+              Re-type your email
+            </span>
+            <input
+              type="email"
+              value={confirmEmail}
+              onChange={(e) => setConfirmEmail(e.target.value)}
+              placeholder={email}
+              autoComplete="off"
+              className="w-full bg-surface-1 border border-line/60 text-ink-base rounded-xl px-3 py-2 text-sm focus:outline-none focus:ring-2 focus:ring-danger-500/30"
+            />
+          </label>
+
+          <label className="block">
+            <span className="block text-[11px] font-bold uppercase tracking-wider text-ink-muted mb-1">
+              Current password
+            </span>
+            <input
+              type="password"
+              value={password}
+              onChange={(e) => setPassword(e.target.value)}
+              autoComplete="current-password"
+              className="w-full bg-surface-1 border border-line/60 text-ink-base rounded-xl px-3 py-2 text-sm focus:outline-none focus:ring-2 focus:ring-danger-500/30"
+            />
+          </label>
+
+          {error && (
+            <p className="text-xs text-danger-500 font-semibold">{error}</p>
+          )}
+
+          <div className="flex gap-2 pt-1">
+            <button
+              onClick={handleCancel}
+              disabled={busy}
+              className="flex-1 py-2 rounded-xl bg-surface-1 border border-line/60 text-ink-base text-sm font-bold hover:bg-surface-2 transition-colors disabled:opacity-50"
+            >
+              Cancel
+            </button>
+            <button
+              onClick={handleSubmit}
+              disabled={busy}
+              className="flex-1 py-2 rounded-xl bg-danger-500 text-white text-sm font-bold hover:bg-danger-600 transition-colors disabled:opacity-50"
+            >
+              {busy ? "Deleting…" : "Permanently delete"}
+            </button>
+          </div>
+        </div>
+      )}
+    </div>
+  );
+}
+
+function StatCard({
+  icon: Icon,
+  label,
+  value,
+}: {
+  icon: any;
+  label: string;
+  value: number;
+}) {
+  return (
+    <div className="p-3 rounded-2xl bg-surface-1 border border-line/60 shadow-soft text-center">
+      <Icon size={16} className="mx-auto text-brand-500 mb-1" />
+      <div className="text-xl font-black text-ink-base">{value}</div>
+      <div className="text-[11px] text-ink-muted font-semibold">{label}</div>
+    </div>
+  );
+}
diff --git a/components/views/RecordsView.tsx b/components/views/RecordsView.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..fece96ba680312d97cd70434de0c9ecd36419c19
--- /dev/null
+++ b/components/views/RecordsView.tsx
@@ -0,0 +1,274 @@
+"use client";
+
+import { useState } from "react";
+import {
+  FileText,
+  Plus,
+  X,
+  Trash2,
+  ChevronDown,
+  Search,
+  Shield,
+  Download,
+} from "lucide-react";
+import { todayISO, type HealthRecord, type RecordType } from "@/lib/health-store";
+import { t, type SupportedLanguage } from "@/lib/i18n";
+
+const RECORD_TYPES: Record<RecordType, { label: string; emoji: string }> = {
+  "lab-report": { label: "Lab Report", emoji: "🧪" },
+  "clinical-note": { label: "Clinical Note", emoji: "📋" },
+  prescription: { label: "Prescription", emoji: "💊" },
+  certificate: { label: "Certificate", emoji: "📄" },
+  imaging: { label: "Imaging / X-Ray", emoji: "🔬" },
+  other: { label: "Other", emoji: "📌" },
+};
+
+interface RecordsViewProps {
+  records: HealthRecord[];
+  onAdd: (rec: Omit<HealthRecord, "id">) => void;
+  onEdit: (id: string, patch: Partial<HealthRecord>) => void;
+  onDelete: (id: string) => void;
+  onExport: () => void;
+  language: SupportedLanguage;
+}
+
+export function RecordsView({
+  records,
+  onAdd,
+  onDelete,
+  onExport,
+  language,
+}: RecordsViewProps) {
+  const [showForm, setShowForm] = useState(false);
+  const [title, setTitle] = useState("");
+  const [type, setType] = useState<RecordType>("lab-report");
+  const [date, setDate] = useState(todayISO());
+  const [notes, setNotes] = useState("");
+  const [tags, setTags] = useState("");
+  const [search, setSearch] = useState("");
+
+  const handleSubmit = () => {
+    if (!title.trim()) return;
+    onAdd({
+      title: title.trim(),
+      type,
+      date,
+      notes: notes.trim() || undefined,
+      tags: tags
+        .split(",")
+        .map((t) => t.trim())
+        .filter(Boolean),
+    });
+    setTitle("");
+    setNotes("");
+    setTags("");
+    setShowForm(false);
+  };
+
+  const filtered = search
+    ? records.filter(
+        (r) =>
+          r.title.toLowerCase().includes(search.toLowerCase()) ||
+          r.notes?.toLowerCase().includes(search.toLowerCase()) ||
+          r.tags?.some((tag) => tag.toLowerCase().includes(search.toLowerCase())),
+      )
+    : records;
+
+  const sorted = [...filtered].sort((a, b) => b.date.localeCompare(a.date));
+
+  return (
+    <div className="flex-1 overflow-y-auto p-6 sm:p-8 pb-mobile-nav scroll-touch">
+      <div className="max-w-2xl mx-auto animate-in fade-in slide-in-from-bottom-4 duration-500">
+        <div className="flex items-center justify-between mb-6">
+          <div>
+            <h2 className="text-2xl font-bold text-ink-base">{t("rec_title", language)}</h2>
+            <p className="text-sm text-ink-muted mt-1">
+              {t("rec_subtitle", language)}
+            </p>
+          </div>
+          <div className="flex gap-2">
+            <button
+              onClick={onExport}
+              className="flex items-center gap-1.5 px-3 py-2.5 bg-surface-2 border border-line/60 text-ink-muted rounded-xl text-sm font-semibold hover:text-ink-base transition-colors"
+              title="Export all health data"
+            >
+              <Download size={14} />
+            </button>
+            <button
+              onClick={() => setShowForm(!showForm)}
+              className="flex items-center gap-1.5 px-4 py-2.5 bg-brand-gradient text-white rounded-xl font-bold text-sm shadow-glow hover:brightness-110 transition-all"
+            >
+              {showForm ? <X size={16} /> : <Plus size={16} />}
+              {showForm ? t("rec_cancel", language) : t("rec_add", language)}
+            </button>
+          </div>
+        </div>
+
+        {/* Search */}
+        <div className="relative mb-4">
+          <Search
+            size={16}
+            className="absolute left-3 top-1/2 -translate-y-1/2 text-ink-subtle"
+          />
+          <input
+            value={search}
+            onChange={(e) => setSearch(e.target.value)}
+            placeholder={t("rec_search", language)}
+            className="w-full bg-surface-1 border border-line/60 text-ink-base rounded-xl pl-10 pr-4 py-2.5 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+          />
+        </div>
+
+        {/* Add form */}
+        {showForm && (
+          <div className="bg-surface-1 border border-line/60 rounded-2xl p-5 mb-6 shadow-soft animate-in fade-in slide-in-from-bottom-4 duration-300">
+            <h3 className="font-bold text-ink-base mb-4">{t("rec_new", language)}</h3>
+            <div className="grid sm:grid-cols-2 gap-4">
+              <div className="sm:col-span-2">
+                <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">
+                  Title
+                </label>
+                <input
+                  value={title}
+                  onChange={(e) => setTitle(e.target.value)}
+                  placeholder="e.g. Blood work results — March 2026"
+                  className="w-full bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+                />
+              </div>
+              <div>
+                <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">
+                  Type
+                </label>
+                <div className="relative">
+                  <select
+                    value={type}
+                    onChange={(e) => setType(e.target.value as RecordType)}
+                    className="w-full appearance-none bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 pr-8 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+                  >
+                    {Object.entries(RECORD_TYPES).map(([k, v]) => (
+                      <option key={k} value={k}>
+                        {v.emoji} {v.label}
+                      </option>
+                    ))}
+                  </select>
+                  <ChevronDown
+                    className="absolute right-3 top-1/2 -translate-y-1/2 text-ink-subtle pointer-events-none"
+                    size={14}
+                  />
+                </div>
+              </div>
+              <div>
+                <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">
+                  Date
+                </label>
+                <input
+                  type="date"
+                  value={date}
+                  onChange={(e) => setDate(e.target.value)}
+                  className="w-full bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+                />
+              </div>
+              <div className="sm:col-span-2">
+                <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">
+                  Notes
+                </label>
+                <textarea
+                  value={notes}
+                  onChange={(e) => setNotes(e.target.value)}
+                  placeholder="Key results, doctor comments..."
+                  rows={3}
+                  className="w-full bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 text-sm resize-none focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+                />
+              </div>
+              <div className="sm:col-span-2">
+                <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">
+                  Tags (comma-separated)
+                </label>
+                <input
+                  value={tags}
+                  onChange={(e) => setTags(e.target.value)}
+                  placeholder="e.g. cardiology, annual, cholesterol"
+                  className="w-full bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+                />
+              </div>
+            </div>
+            <button
+              onClick={handleSubmit}
+              disabled={!title.trim()}
+              className="mt-4 w-full py-3 bg-brand-gradient text-white rounded-xl font-bold text-sm shadow-glow hover:brightness-110 transition-all disabled:opacity-50"
+            >
+              Save Record
+            </button>
+          </div>
+        )}
+
+        {/* Empty state */}
+        {sorted.length === 0 && !showForm && (
+          <div className="text-center py-16">
+            <div className="w-16 h-16 mx-auto mb-4 rounded-2xl bg-brand-gradient-soft flex items-center justify-center">
+              <FileText size={28} className="text-brand-500" />
+            </div>
+            <h3 className="font-bold text-ink-base text-lg mb-1">
+              No records yet
+            </h3>
+            <p className="text-ink-muted text-sm">
+              {t("rec_none_desc", language)}
+            </p>
+          </div>
+        )}
+
+        {/* Record cards */}
+        <div className="space-y-2">
+          {sorted.map((r) => {
+            const meta = RECORD_TYPES[r.type];
+            return (
+              <div
+                key={r.id}
+                className="bg-surface-1 border border-line/60 rounded-2xl p-4 shadow-soft"
+              >
+                <div className="flex items-start gap-3">
+                  <span className="text-xl mt-0.5">{meta.emoji}</span>
+                  <div className="flex-1 min-w-0">
+                    <span className="font-bold text-sm text-ink-base block">
+                      {r.title}
+                    </span>
+                    <span className="text-xs text-ink-muted">
+                      {meta.label} · {new Date(r.date).toLocaleDateString()}
+                    </span>
+                    {r.notes && (
+                      <p className="text-xs text-ink-subtle mt-1 leading-relaxed line-clamp-2">
+                        {r.notes}
+                      </p>
+                    )}
+                    {r.tags && r.tags.length > 0 && (
+                      <div className="flex flex-wrap gap-1 mt-2">
+                        {r.tags.map((tag) => (
+                          <span
+                            key={tag}
+                            className="px-2 py-0.5 text-[10px] font-semibold bg-surface-2 border border-line/60 text-ink-muted rounded-full"
+                          >
+                            {tag}
+                          </span>
+                        ))}
+                      </div>
+                    )}
+                  </div>
+                  <button
+                    onClick={() => onDelete(r.id)}
+                    className="text-ink-subtle hover:text-danger-500 p-1 flex-shrink-0"
+                  >
+                    <Trash2 size={14} />
+                  </button>
+                </div>
+              </div>
+            );
+          })}
+        </div>
+
+        <div className="flex items-center gap-2 mt-8 justify-center text-xs text-ink-subtle">
+          <Shield size={12} className="text-accent-500" />
+          Records are stored locally in your browser only. Nobody else can see them.
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/components/views/ScheduleView.tsx b/components/views/ScheduleView.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..1cb99c8060364ba368d5bc945f636f98fa19c1ac
--- /dev/null
+++ b/components/views/ScheduleView.tsx
@@ -0,0 +1,291 @@
+"use client";
+
+import { useState, useEffect, useMemo } from "react";
+import {
+  Plus,
+  Check,
+  Pill,
+  Video,
+  CheckCircle,
+  Clock,
+  X,
+  ChevronDown,
+  Droplets,
+  Heart,
+} from "lucide-react";
+import {
+  todayISO,
+  FREQUENCY_LABELS,
+  APPOINTMENT_TYPE_META,
+  type Medication,
+  type Appointment,
+  type MedicationLog,
+} from "@/lib/health-store";
+import { t, type SupportedLanguage } from "@/lib/i18n";
+
+interface ScheduleViewProps {
+  medications: Medication[];
+  medicationLogs: MedicationLog[];
+  appointments: Appointment[];
+  onMarkMedTaken: (medId: string, date: string, time: string) => void;
+  isMedTaken: (medId: string, date: string, time: string) => boolean;
+  onEditAppointment: (id: string, patch: Partial<Appointment>) => void;
+  onNavigate: (view: string) => void;
+  language: SupportedLanguage;
+}
+
+interface TimelineEvent {
+  id: string;
+  time: string; // "HH:MM"
+  title: string;
+  subtitle: string;
+  type: "medication" | "appointment" | "task" | "habit";
+  done: boolean;
+  onAction?: () => void;
+  actionLabel?: string;
+}
+
+const HOURS = Array.from({ length: 14 }, (_, i) => i + 7); // 7 AM to 8 PM
+
+function formatHour(h: number): string {
+  if (h === 0 || h === 12) return `${h === 0 ? 12 : 12} ${h < 12 ? "AM" : "PM"}`;
+  return `${h > 12 ? h - 12 : h} ${h >= 12 ? "PM" : "AM"}`;
+}
+
+function timeToMinutes(t: string): number {
+  const [h, m] = t.split(":").map(Number);
+  return (h || 0) * 60 + (m || 0);
+}
+
+export function ScheduleView({
+  medications,
+  medicationLogs,
+  appointments,
+  onMarkMedTaken,
+  isMedTaken,
+  onEditAppointment,
+  onNavigate,
+  language,
+}: ScheduleViewProps) {
+  const today = todayISO();
+  const [now, setNow] = useState(new Date());
+
+  // Update "now" every minute for the live indicator.
+  useEffect(() => {
+    const id = setInterval(() => setNow(new Date()), 60000);
+    return () => clearInterval(id);
+  }, []);
+
+  const nowMinutes = now.getHours() * 60 + now.getMinutes();
+  const nowLabel = now.toLocaleTimeString([], { hour: "2-digit", minute: "2-digit" });
+
+  // Build the timeline events from medications + appointments.
+  const events: TimelineEvent[] = useMemo(() => {
+    const items: TimelineEvent[] = [];
+
+    // Active medications → one event per scheduled time.
+    for (const med of medications.filter((m) => m.active)) {
+      for (const time of med.times) {
+        const done = isMedTaken(med.id, today, time);
+        items.push({
+          id: `med-${med.id}-${time}`,
+          time,
+          title: `${med.name} (${med.dose})`,
+          subtitle: `${time} · ${t("nav_medications", language)}`,
+          type: "medication",
+          done,
+          onAction: done ? undefined : () => onMarkMedTaken(med.id, today, time),
+          actionLabel: done ? undefined : t("appt_mark_done", language),
+        });
+      }
+    }
+
+    // Today's appointments.
+    for (const appt of appointments.filter((a) => a.date === today)) {
+      const done = appt.status === "completed";
+      const meta = APPOINTMENT_TYPE_META[appt.type];
+      items.push({
+        id: `appt-${appt.id}`,
+        time: appt.time,
+        title: appt.title,
+        subtitle: `${appt.time} · ${meta.label}${appt.doctor ? ` · ${appt.doctor}` : ""}`,
+        type: "appointment",
+        done,
+        onAction: done ? undefined : () => onEditAppointment(appt.id, { status: "completed" }),
+        actionLabel: done ? undefined : t("appt_mark_done", language),
+      });
+    }
+
+    return items.sort((a, b) => timeToMinutes(a.time) - timeToMinutes(b.time));
+  }, [medications, appointments, today, isMedTaken, onMarkMedTaken, onEditAppointment, language]);
+
+  // Position of the "Now" indicator as a percentage of the timeline.
+  const timelineStart = HOURS[0] * 60;
+  const timelineEnd = (HOURS[HOURS.length - 1] + 1) * 60;
+  const nowPercent = Math.max(
+    0,
+    Math.min(100, ((nowMinutes - timelineStart) / (timelineEnd - timelineStart)) * 100),
+  );
+
+  const dayOfWeek = now.toLocaleDateString(undefined, { weekday: "long", month: "long", day: "numeric" });
+
+  return (
+    <div className="flex-1 overflow-y-auto pb-mobile-nav scroll-touch">
+      <div className="max-w-3xl mx-auto px-4 sm:px-6 py-6">
+        {/* Header */}
+        <div className="flex items-center justify-between mb-6">
+          <div>
+            <h2 className="text-2xl font-bold text-ink-base">
+              {t("health_tracker", language)}
+            </h2>
+            <p className="text-sm text-ink-muted mt-0.5">{dayOfWeek}</p>
+          </div>
+          <button
+            onClick={() => onNavigate("medications")}
+            className="flex items-center gap-1.5 px-4 py-2.5 bg-brand-gradient text-white rounded-xl font-bold text-sm shadow-glow hover:brightness-110 transition-all"
+          >
+            <Plus size={16} />
+            {t("med_add", language)}
+          </button>
+        </div>
+
+        {/* Timeline */}
+        <div className="relative">
+          {/* Hour rows */}
+          {HOURS.map((hour) => {
+            const hourEvents = events.filter((e) => {
+              const m = timeToMinutes(e.time);
+              return m >= hour * 60 && m < (hour + 1) * 60;
+            });
+
+            return (
+              <div key={hour} className="flex min-h-[72px] border-t border-line/40">
+                {/* Hour label */}
+                <div className="w-16 sm:w-20 flex-shrink-0 pt-2 pr-3 text-right">
+                  <span className="text-xs font-semibold text-ink-subtle">
+                    {formatHour(hour)}
+                  </span>
+                </div>
+
+                {/* Event area */}
+                <div className="flex-1 relative py-1.5 pl-3 space-y-1.5">
+                  {hourEvents.map((ev) => (
+                    <EventCard key={ev.id} event={ev} />
+                  ))}
+                </div>
+              </div>
+            );
+          })}
+
+          {/* "Now" indicator line — only if within visible hours */}
+          {nowMinutes >= timelineStart && nowMinutes <= timelineEnd && (
+            <div
+              className="absolute left-0 right-0 pointer-events-none z-10"
+              style={{ top: `${nowPercent}%` }}
+            >
+              <div className="flex items-center">
+                <div className="w-16 sm:w-20 flex-shrink-0 text-right pr-1">
+                  <span className="inline-flex items-center gap-1 text-[10px] font-bold text-danger-500">
+                    <span className="w-2 h-2 rounded-full bg-danger-500 animate-pulse" />
+                    {nowLabel}
+                  </span>
+                </div>
+                <div className="flex-1 h-px bg-danger-500" />
+              </div>
+            </div>
+          )}
+        </div>
+
+        {/* Empty state */}
+        {events.length === 0 && (
+          <div className="text-center py-16">
+            <Clock size={32} className="mx-auto text-ink-subtle mb-3" />
+            <p className="font-bold text-ink-base text-lg mb-1">
+              No events today
+            </p>
+            <p className="text-sm text-ink-muted mb-4">
+              Add medications or appointments to see them on your timeline
+            </p>
+            <div className="flex gap-2 justify-center">
+              <button
+                onClick={() => onNavigate("medications")}
+                className="px-4 py-2 rounded-xl bg-surface-1 border border-line/60 text-sm font-semibold text-ink-muted hover:text-brand-600 hover:border-brand-500/50 transition-all"
+              >
+                {t("health_add_med", language)}
+              </button>
+              <button
+                onClick={() => onNavigate("appointments")}
+                className="px-4 py-2 rounded-xl bg-surface-1 border border-line/60 text-sm font-semibold text-ink-muted hover:text-brand-600 hover:border-brand-500/50 transition-all"
+              >
+                {t("health_schedule_appt", language)}
+              </button>
+            </div>
+          </div>
+        )}
+      </div>
+    </div>
+  );
+}
+
+function EventCard({ event }: { event: TimelineEvent }) {
+  const typeStyles: Record<string, string> = {
+    medication: event.done
+      ? "bg-success-500/8 border-success-500/30"
+      : "bg-rose-50 dark:bg-rose-900/15 border-rose-200 dark:border-rose-700/40",
+    appointment: "bg-purple-50 dark:bg-purple-900/15 border-purple-200 dark:border-purple-700/40",
+    task: "bg-blue-50 dark:bg-blue-900/15 border-blue-200 dark:border-blue-700/40",
+    habit: "bg-sky-50 dark:bg-sky-900/15 border-sky-200 dark:border-sky-700/40",
+  };
+
+  const iconMap: Record<string, any> = {
+    medication: Pill,
+    appointment: Video,
+    task: CheckCircle,
+    habit: Droplets,
+  };
+  const Icon = iconMap[event.type] || Clock;
+
+  return (
+    <div
+      className={`flex items-center gap-3 px-3 py-2.5 rounded-xl border transition-all ${
+        typeStyles[event.type] || "bg-surface-1 border-line/60"
+      } ${event.done ? "opacity-70" : ""}`}
+    >
+      <Icon
+        size={16}
+        className={
+          event.done
+            ? "text-success-500"
+            : event.type === "medication"
+            ? "text-rose-500"
+            : event.type === "appointment"
+            ? "text-purple-500"
+            : "text-blue-500"
+        }
+      />
+      <div className="flex-1 min-w-0">
+        <span
+          className={`font-semibold text-sm block ${
+            event.done ? "line-through text-ink-muted" : "text-ink-base"
+          }`}
+        >
+          {event.title}
+        </span>
+        <span className="text-xs text-ink-muted">{event.subtitle}</span>
+      </div>
+      {event.done ? (
+        <span className="flex items-center gap-1 text-xs font-semibold text-success-500">
+          <Check size={14} strokeWidth={3} />
+          Done
+        </span>
+      ) : event.onAction ? (
+        <button
+          onClick={event.onAction}
+          className="px-3 py-1.5 border border-line/60 rounded-lg text-xs font-semibold text-ink-base hover:bg-brand-50 dark:hover:bg-brand-900/20 hover:border-brand-500/50 transition-all"
+        >
+          {event.actionLabel || "Mark Done"}
+        </button>
+      ) : null}
+    </div>
+  );
+}
diff --git a/components/views/SettingsView.tsx b/components/views/SettingsView.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..47d26b25ffec1a286b0fb99cf1311b193f486bdc
--- /dev/null
+++ b/components/views/SettingsView.tsx
@@ -0,0 +1,495 @@
+"use client";
+
+import { useState } from "react";
+import {
+  Globe,
+  Volume2,
+  Type,
+  Moon,
+  Phone,
+  Shield,
+  ChevronDown,
+  ChevronRight,
+  Cpu,
+  Key,
+  Activity,
+  AlertTriangle,
+  Eye,
+  EyeOff,
+  Mic,
+  BookOpen,
+  Sparkles,
+  Zap,
+  Brain,
+  Server,
+  ExternalLink,
+} from "lucide-react";
+import { Toggle } from "../chat/Toggle";
+import type { Provider, Preset } from "@/lib/types";
+import { PROVIDER_CONFIGS } from "@/lib/types";
+import {
+  t,
+  LANGUAGE_NAMES,
+  getCountryName,
+  type SupportedLanguage,
+} from "@/lib/i18n";
+import type { TextSize } from "@/lib/hooks/useSettings";
+
+interface SettingsViewProps {
+  preset: Preset;
+  setPreset: (p: Preset) => void;
+  hfToken: string;
+  setHfToken: (v: string) => void;
+  clearHfToken: () => void;
+  provider: Provider;
+  setProvider: (provider: Provider) => void;
+  apiKey: string;
+  setApiKey: (key: string) => void;
+  clearApiKey: () => void;
+  advancedMode: boolean;
+  setAdvancedMode: (v: boolean) => void;
+  language: SupportedLanguage;
+  setLanguage: (v: SupportedLanguage) => void;
+  country: string;
+  setCountry: (v: string) => void;
+  voiceEnabled: boolean;
+  setVoiceEnabled: (v: boolean) => void;
+  readAloud: boolean;
+  setReadAloud: (v: boolean) => void;
+  textSize: TextSize;
+  setTextSize: (v: TextSize) => void;
+  simpleLanguage: boolean;
+  setSimpleLanguage: (v: boolean) => void;
+  darkMode: boolean;
+  setDarkMode: (v: boolean) => void;
+  emergencyNumber: string;
+}
+
+const COUNTRIES = [
+  "US", "CA", "GB", "AU", "NZ", "IT", "DE", "FR", "ES", "PT", "NL", "PL",
+  "IN", "CN", "JP", "KR", "BR", "MX", "AR", "CO", "ZA", "NG", "KE", "TZ",
+  "EG", "MA", "TR", "RU", "SA", "AE", "PK", "BD", "VN", "TH", "PH", "ID", "MY",
+];
+
+export function SettingsView({
+  preset,
+  setPreset,
+  hfToken,
+  setHfToken,
+  clearHfToken,
+  provider,
+  setProvider,
+  apiKey,
+  setApiKey,
+  clearApiKey,
+  advancedMode,
+  setAdvancedMode,
+  language,
+  setLanguage,
+  country,
+  setCountry,
+  voiceEnabled,
+  setVoiceEnabled,
+  readAloud,
+  setReadAloud,
+  textSize,
+  setTextSize,
+  simpleLanguage,
+  setSimpleLanguage,
+  darkMode,
+  setDarkMode,
+  emergencyNumber,
+}: SettingsViewProps) {
+  const [showMoreModels, setShowMoreModels] = useState(false);
+  const [showBYOKey, setShowBYOKey] = useState(advancedMode);
+  const [isVerifying, setIsVerifying] = useState(false);
+  const [verifyStatus, setVerifyStatus] = useState<{
+    success?: boolean;
+    message?: string;
+  }>({});
+
+  const isRecommended = preset === "free-best" || preset === "free-fastest" || preset === "free-flexible";
+
+  const handleVerifyConnection = async () => {
+    if (!apiKey.trim()) {
+      setVerifyStatus({ success: false, message: "Please enter an API key first" });
+      return;
+    }
+    setIsVerifying(true);
+    setVerifyStatus({});
+    try {
+      const response = await fetch("/api/verify", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ provider, apiKey, userHfToken: hfToken }),
+      });
+      const data = await response.json();
+      setVerifyStatus({
+        success: data.success,
+        message: data.success ? "Connection verified!" : data.error || "Connection failed",
+      });
+    } catch (error: any) {
+      setVerifyStatus({ success: false, message: error?.message || "Network error" });
+    } finally {
+      setIsVerifying(false);
+    }
+  };
+
+  return (
+    <div className="flex-1 overflow-y-auto p-4 sm:p-8 pb-mobile-nav scroll-touch">
+      <div className="max-w-2xl mx-auto animate-in fade-in slide-in-from-bottom-4 duration-500">
+        <h2 className="text-2xl font-bold text-ink-base mb-6">
+          {t("settings_title", language)}
+        </h2>
+
+        {/* ============================================ */}
+        {/* AI MODEL — simplified, single recommended    */}
+        {/* ============================================ */}
+        <SettingsSection icon={Cpu} title="AI Model">
+          {/* Recommended (default) */}
+          <button
+            onClick={() => { setPreset("free-best"); setShowBYOKey(false); setAdvancedMode(false); }}
+            className={`w-full text-left p-4 rounded-xl border-2 transition-all ${
+              isRecommended && !showBYOKey
+                ? "bg-brand-500/5 border-brand-500"
+                : "bg-surface-0 border-line/60 hover:border-brand-500/40"
+            }`}
+          >
+            <div className="flex items-center justify-between gap-2">
+              <div className="flex items-center gap-2">
+                <Sparkles size={16} className="text-brand-500" />
+                <span className={`font-semibold text-sm ${isRecommended && !showBYOKey ? "text-brand-600" : "text-ink-base"}`}>
+                  Recommended (Free)
+                </span>
+              </div>
+              <span className="text-[10px] font-bold px-2 py-0.5 rounded-full bg-success-500/10 text-success-600">
+                AUTO
+              </span>
+            </div>
+            <p className="text-xs text-ink-muted mt-1.5">
+              Llama 3.3 70B with smart fallbacks — best quality, always available
+            </p>
+          </button>
+
+          {/* More options toggle */}
+          <button
+            onClick={() => setShowMoreModels(!showMoreModels)}
+            className="w-full flex items-center gap-2 px-1 py-2.5 text-sm text-ink-muted hover:text-ink-base transition-colors"
+          >
+            <ChevronRight size={14} className={`transition-transform ${showMoreModels ? "rotate-90" : ""}`} />
+            <span className="font-medium">More options</span>
+          </button>
+
+          {showMoreModels && (
+            <div className="space-y-2 animate-in fade-in slide-in-from-top-2 duration-200">
+              <ModelOption
+                icon={Brain}
+                title="Deep Reasoning"
+                description="DeepSeek R1 — complex medical reasoning"
+                badge="FREE"
+                active={preset === "deep-reasoning" && !showBYOKey}
+                onClick={() => { setPreset("deep-reasoning"); setShowBYOKey(false); setAdvancedMode(false); }}
+              />
+              <ModelOption
+                icon={Server}
+                title="Local (Ollama)"
+                description="Runs on server — works offline, always available"
+                badge="LOCAL"
+                active={preset === "local" && !showBYOKey}
+                onClick={() => { setPreset("local"); setShowBYOKey(false); setAdvancedMode(false); }}
+              />
+              <ModelOption
+                icon={Key}
+                title="Bring your own key"
+                description="Use OpenAI, Gemini, Claude, or custom provider"
+                badge="BYO"
+                active={showBYOKey}
+                onClick={() => { setShowBYOKey(true); setAdvancedMode(true); }}
+              />
+            </div>
+          )}
+
+          {/* BYO Key panel */}
+          {showBYOKey && (
+            <div className="mt-3 p-4 bg-surface-0 border border-line/60 rounded-xl space-y-4 animate-in fade-in slide-in-from-top-2 duration-200">
+              <div className="flex items-start gap-2 p-2.5 bg-warning-500/5 border border-warning-500/20 rounded-lg">
+                <AlertTriangle size={14} className="text-warning-500 mt-0.5 flex-shrink-0" />
+                <p className="text-xs text-warning-600">{t("settings_advanced_warning", language)}</p>
+              </div>
+
+              <div className="space-y-3">
+                <div className="space-y-1.5">
+                  <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider">Provider</label>
+                  <div className="relative">
+                    <select
+                      value={provider}
+                      onChange={(e) => { setProvider(e.target.value as Provider); setVerifyStatus({}); }}
+                      className="w-full appearance-none bg-surface-1 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 pr-8 focus:outline-none focus:ring-2 focus:ring-brand-500/20 focus:border-brand-500 transition-all font-medium text-sm"
+                    >
+                      {Object.entries(PROVIDER_CONFIGS).map(([key, config]) => (
+                        <option key={key} value={key}>{config.displayName}</option>
+                      ))}
+                    </select>
+                    <ChevronDown className="absolute right-3 top-1/2 -translate-y-1/2 text-ink-subtle pointer-events-none" size={14} />
+                  </div>
+                </div>
+
+                <div className="space-y-1.5">
+                  <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider">
+                    {provider === "ollama" ? t("settings_custom_server", language) : t("settings_api_key", language)}
+                  </label>
+                  <div className="relative">
+                    <input
+                      type={provider === "ollama" ? "text" : "password"}
+                      value={apiKey}
+                      onChange={(e) => { setApiKey(e.target.value); setVerifyStatus({}); }}
+                      placeholder={provider === "ollama" ? "http://localhost:11434" : "sk-..."}
+                      className="w-full bg-surface-1 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 pl-9 focus:outline-none focus:ring-2 focus:ring-brand-500/20 focus:border-brand-500 transition-all font-mono text-sm"
+                    />
+                    <Key className="absolute left-3 top-1/2 -translate-y-1/2 text-ink-subtle" size={14} />
+                  </div>
+                </div>
+
+                <div className="flex items-center justify-between pt-1">
+                  <div className="flex items-center gap-2">
+                    <div className={`w-2 h-2 rounded-full ${
+                      verifyStatus.success === true ? "bg-success-500"
+                        : verifyStatus.success === false ? "bg-danger-500"
+                        : "bg-ink-subtle"
+                    }`} />
+                    <span className="text-[11px] text-ink-muted font-medium">
+                      {verifyStatus.message || "Not verified"}
+                    </span>
+                  </div>
+                  <button
+                    onClick={handleVerifyConnection}
+                    disabled={isVerifying || !apiKey.trim()}
+                    className="text-xs font-bold text-brand-500 bg-brand-500/10 px-3 py-1.5 rounded-lg hover:bg-brand-500/20 transition-colors border border-brand-500/20 flex items-center gap-1.5 disabled:opacity-50"
+                  >
+                    <Activity size={12} />
+                    {isVerifying ? "Verifying..." : t("settings_verify", language)}
+                  </button>
+                </div>
+
+                {apiKey && (
+                  <button onClick={clearApiKey} className="text-xs text-danger-500 hover:underline">
+                    {t("settings_clear_key", language)}
+                  </button>
+                )}
+              </div>
+            </div>
+          )}
+
+          {/* HF Token (collapsed by default) */}
+          <details className="mt-2">
+            <summary className="flex items-center gap-2 px-1 py-2 text-xs text-ink-muted hover:text-ink-base cursor-pointer transition-colors">
+              <Key size={12} />
+              <span>HuggingFace token (optional — for higher rate limits)</span>
+            </summary>
+            <div className="mt-2 p-3 bg-surface-0 border border-line/60 rounded-xl">
+              <div className="relative">
+                <input
+                  type="password"
+                  value={hfToken}
+                  onChange={(e) => setHfToken(e.target.value)}
+                  placeholder="hf_..."
+                  className="w-full bg-surface-1 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 pl-9 focus:outline-none focus:ring-2 focus:ring-brand-500/20 focus:border-brand-500 transition-all font-mono text-sm"
+                />
+                <Key className="absolute left-3 top-1/2 -translate-y-1/2 text-ink-subtle" size={14} />
+              </div>
+              {hfToken && (
+                <button onClick={clearHfToken} className="text-xs text-danger-500 hover:underline mt-2">
+                  Clear token
+                </button>
+              )}
+            </div>
+          </details>
+        </SettingsSection>
+
+        {/* ============================================ */}
+        {/* LANGUAGE & REGION                            */}
+        {/* ============================================ */}
+        <SettingsSection icon={Globe} title={t("settings_language", language)}>
+          <div className="space-y-4">
+            <div className="space-y-1.5">
+              <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider">
+                {t("settings_language", language)}
+              </label>
+              <div className="relative">
+                <select
+                  value={language}
+                  onChange={(e) => setLanguage(e.target.value as SupportedLanguage)}
+                  className="w-full appearance-none bg-surface-0 border border-line/60 text-ink-base rounded-xl px-4 py-3 pr-10 focus:outline-none focus:ring-2 focus:ring-brand-500/20 focus:border-brand-500 transition-all font-medium text-base"
+                >
+                  {(Object.entries(LANGUAGE_NAMES) as [SupportedLanguage, string][]).map(
+                    ([code, name]) => (
+                      <option key={code} value={code}>{name}</option>
+                    )
+                  )}
+                </select>
+                <ChevronDown className="absolute right-3 top-1/2 -translate-y-1/2 text-ink-subtle pointer-events-none" size={16} />
+              </div>
+            </div>
+
+            <div className="space-y-1.5">
+              <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider">
+                {t("settings_country", language)}
+              </label>
+              <div className="relative">
+                <select
+                  value={country}
+                  onChange={(e) => setCountry(e.target.value)}
+                  className="w-full appearance-none bg-surface-0 border border-line/60 text-ink-base rounded-xl px-4 py-3 pr-10 focus:outline-none focus:ring-2 focus:ring-brand-500/20 focus:border-brand-500 transition-all font-medium text-base"
+                >
+                  {COUNTRIES.map((code) => (
+                    <option key={code} value={code}>{getCountryName(code)}</option>
+                  ))}
+                </select>
+                <ChevronDown className="absolute right-3 top-1/2 -translate-y-1/2 text-ink-subtle pointer-events-none" size={16} />
+              </div>
+            </div>
+          </div>
+        </SettingsSection>
+
+        {/* ============================================ */}
+        {/* VOICE & ACCESSIBILITY                        */}
+        {/* ============================================ */}
+        <SettingsSection icon={Mic} title={t("settings_voice", language)}>
+          <Toggle label={t("settings_voice", language)} enabled={voiceEnabled} setEnabled={setVoiceEnabled} />
+          <Toggle label={t("settings_read_aloud", language)} enabled={readAloud} setEnabled={setReadAloud} />
+        </SettingsSection>
+
+        {/* ============================================ */}
+        {/* DISPLAY                                      */}
+        {/* ============================================ */}
+        <SettingsSection icon={Type} title={t("settings_text_size", language)}>
+          <div className="space-y-4">
+            <div className="space-y-1.5">
+              <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider">
+                {t("settings_text_size", language)}
+              </label>
+              <div className="flex gap-2">
+                {(["small", "medium", "large"] as TextSize[]).map((size) => (
+                  <button
+                    key={size}
+                    onClick={() => setTextSize(size)}
+                    className={`flex-1 py-3 rounded-xl font-medium text-sm transition-all border-2 ${
+                      textSize === size
+                        ? "bg-brand-500/5 border-brand-500 text-brand-600"
+                        : "bg-surface-0 border-line/60 text-ink-muted hover:border-brand-500/40"
+                    }`}
+                  >
+                    {t(`settings_text_${size}`, language)}
+                  </button>
+                ))}
+              </div>
+            </div>
+            <Toggle label={t("settings_dark_mode", language)} enabled={darkMode} setEnabled={setDarkMode} />
+            <Toggle
+              label={t("settings_simple_language", language)}
+              description={t("settings_simple_language_desc", language)}
+              enabled={simpleLanguage}
+              setEnabled={setSimpleLanguage}
+            />
+          </div>
+        </SettingsSection>
+
+        {/* ============================================ */}
+        {/* EMERGENCY & PRIVACY                          */}
+        {/* ============================================ */}
+        <SettingsSection icon={Phone} title={t("settings_emergency_number", language)}>
+          <div className="flex items-center justify-between py-2">
+            <span className="text-sm text-ink-base font-medium">
+              {t("settings_emergency_number", language)}
+            </span>
+            <a
+              href={`tel:${emergencyNumber}`}
+              className="text-lg font-black text-danger-500 hover:underline"
+            >
+              {emergencyNumber}
+            </a>
+          </div>
+        </SettingsSection>
+
+        <SettingsSection icon={Shield} title={t("settings_privacy", language)}>
+          <div className="flex items-center gap-2 py-2">
+            <Shield size={16} className="text-success-500 flex-shrink-0" />
+            <span className="text-sm text-ink-base font-medium">
+              {t("settings_privacy_desc", language)}
+            </span>
+          </div>
+        </SettingsSection>
+
+        <div className="h-8" />
+      </div>
+    </div>
+  );
+}
+
+/* ============================================================
+ * Sub-components
+ * ============================================================ */
+
+function SettingsSection({
+  icon: Icon,
+  title,
+  children,
+}: {
+  icon: any;
+  title: string;
+  children: React.ReactNode;
+}) {
+  return (
+    <div className="bg-surface-1 rounded-2xl shadow-soft border border-line/40 overflow-hidden mb-4">
+      <div className="p-4 bg-surface-2/50 border-b border-line/40 flex items-center gap-2">
+        <Icon size={18} className="text-brand-500" />
+        <h3 className="font-semibold text-ink-base">{title}</h3>
+      </div>
+      <div className="p-4">{children}</div>
+    </div>
+  );
+}
+
+function ModelOption({
+  icon: Icon,
+  title,
+  description,
+  badge,
+  active,
+  onClick,
+}: {
+  icon: any;
+  title: string;
+  description: string;
+  badge: string;
+  active: boolean;
+  onClick: () => void;
+}) {
+  return (
+    <button
+      onClick={onClick}
+      className={`w-full text-left p-3 rounded-xl border-2 transition-all ${
+        active
+          ? "bg-brand-500/5 border-brand-500"
+          : "bg-surface-0 border-line/60 hover:border-brand-500/40"
+      }`}
+    >
+      <div className="flex items-center justify-between gap-2">
+        <div className="flex items-center gap-2">
+          <Icon size={14} className={active ? "text-brand-500" : "text-ink-muted"} />
+          <span className={`font-semibold text-sm ${active ? "text-brand-600" : "text-ink-base"}`}>
+            {title}
+          </span>
+        </div>
+        <span className={`text-[10px] font-bold px-1.5 py-0.5 rounded ${
+          badge === "FREE" ? "bg-brand-500/10 text-brand-600"
+            : badge === "LOCAL" ? "bg-surface-3/60 text-ink-muted"
+            : "bg-warning-500/10 text-warning-600"
+        }`}>
+          {badge}
+        </span>
+      </div>
+      <p className="text-xs text-ink-muted mt-1">{description}</p>
+    </button>
+  );
+}
diff --git a/components/views/ShareView.tsx b/components/views/ShareView.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..ae74f6b9976aa1129dd149e49771466c48156ae5
--- /dev/null
+++ b/components/views/ShareView.tsx
@@ -0,0 +1,157 @@
+"use client";
+
+import { useState, useEffect } from "react";
+import { Copy, Check, ExternalLink, Code, QrCode, Share2 } from "lucide-react";
+import { type SupportedLanguage } from "@/lib/i18n";
+
+interface ShareViewProps {
+  language: SupportedLanguage;
+}
+
+export function ShareView({ language }: ShareViewProps) {
+  const [copiedLink, setCopiedLink] = useState(false);
+  const [copiedEmbed, setCopiedEmbed] = useState(false);
+  const [appUrl, setAppUrl] = useState("https://medos.health");
+
+  useEffect(() => {
+    setAppUrl(window.location.origin);
+  }, []);
+
+  const embedCode = `<iframe src="${appUrl}" width="100%" height="600" frameborder="0" allow="microphone" style="border-radius:12px;border:1px solid #e2e8f0;"></iframe>`;
+
+  const copy = async (text: string, type: "link" | "embed") => {
+    try {
+      await navigator.clipboard.writeText(text);
+      if (type === "link") { setCopiedLink(true); setTimeout(() => setCopiedLink(false), 2000); }
+      else { setCopiedEmbed(true); setTimeout(() => setCopiedEmbed(false), 2000); }
+    } catch {}
+  };
+
+  const nativeShare = async () => {
+    if (navigator.share) {
+      try {
+        await navigator.share({ title: "MedOS — Free AI Medical Assistant", text: "Get free AI medical advice in 20 languages:", url: appUrl });
+      } catch {}
+    }
+  };
+
+  const SHARE_MSG = encodeURIComponent(`Get free AI medical advice! MedOS — 20 languages, no sign-up: ${appUrl}`);
+  const ENC_URL = encodeURIComponent(appUrl);
+
+  const platforms = [
+    { name: "WhatsApp", href: `https://wa.me/?text=${SHARE_MSG}`, color: "bg-green-600 hover:bg-green-500", label: "WA" },
+    { name: "Telegram", href: `https://t.me/share/url?url=${ENC_URL}&text=${SHARE_MSG}`, color: "bg-blue-500 hover:bg-blue-400", label: "TG" },
+    { name: "Twitter", href: `https://twitter.com/intent/tweet?text=${SHARE_MSG}`, color: "bg-ink-subtle hover:bg-ink-muted", label: "X" },
+    { name: "Facebook", href: `https://www.facebook.com/sharer/sharer.php?u=${ENC_URL}`, color: "bg-blue-700 hover:bg-blue-600", label: "FB" },
+    { name: "LinkedIn", href: `https://www.linkedin.com/sharing/share-offsite/?url=${ENC_URL}`, color: "bg-blue-800 hover:bg-blue-700", label: "LI" },
+  ];
+
+  return (
+    <div className="flex-1 overflow-y-auto p-6 sm:p-8 pb-mobile-nav scroll-touch">
+      <div className="max-w-2xl mx-auto animate-in fade-in slide-in-from-bottom-4 duration-500">
+        <h2 className="text-2xl font-bold text-ink-base mb-1">Share MedOS</h2>
+        <p className="text-sm text-ink-muted mb-6">Help others get free medical guidance</p>
+
+        {/* Native share (mobile) */}
+        {"share" in (globalThis.navigator || {}) && (
+          <button
+            onClick={nativeShare}
+            className="w-full py-3 mb-5 bg-brand-gradient text-white rounded-xl font-bold text-sm shadow-glow hover:brightness-110 transition-all flex items-center justify-center gap-2"
+          >
+            <Share2 size={16} /> Share via...
+          </button>
+        )}
+
+        {/* Platform buttons */}
+        <div className="grid grid-cols-5 gap-2 mb-6">
+          {platforms.map((p) => (
+            <a
+              key={p.name}
+              href={p.href}
+              target="_blank"
+              rel="noopener noreferrer"
+              className={`flex flex-col items-center justify-center gap-1 py-3 rounded-xl ${p.color} text-white transition-colors`}
+            >
+              <span className="text-sm font-bold">{p.label}</span>
+              <span className="text-[9px] opacity-80">{p.name}</span>
+            </a>
+          ))}
+        </div>
+
+        {/* Copy link */}
+        <Section title="Copy link">
+          <div className="flex gap-2">
+            <input
+              readOnly
+              value={appUrl}
+              className="flex-1 bg-surface-2 border border-line/60 rounded-xl px-3 py-2.5 text-sm text-ink-base"
+            />
+            <button
+              onClick={() => copy(appUrl, "link")}
+              className="p-2.5 rounded-xl bg-surface-2 border border-line/60 text-ink-muted hover:text-brand-600 transition-colors"
+            >
+              {copiedLink ? <Check size={16} className="text-success-500" /> : <Copy size={16} />}
+            </button>
+          </div>
+        </Section>
+
+        {/* QR Code */}
+        <Section title="QR Code for print" icon={QrCode}>
+          <p className="text-xs text-ink-muted mb-3">
+            Print this QR code for clinics, pharmacies, or community health centers.
+          </p>
+          <div className="bg-white dark:bg-white rounded-2xl p-6 flex items-center justify-center border border-line/40">
+            <div className="text-center">
+              <div className="w-32 h-32 bg-slate-100 rounded-lg flex items-center justify-center mb-2">
+                <QrCode size={64} className="text-slate-800" />
+              </div>
+              <p className="text-xs text-slate-600 font-medium">Scan for free medical AI</p>
+            </div>
+          </div>
+        </Section>
+
+        {/* Embed code */}
+        <Section title="Embed on your website" icon={Code}>
+          <p className="text-xs text-ink-muted mb-3">
+            Copy this code to embed MedOS on any website, blog, or health portal.
+          </p>
+          <div className="relative">
+            <pre className="bg-surface-2 border border-line/60 rounded-xl p-4 text-xs text-ink-base overflow-x-auto">
+              {embedCode}
+            </pre>
+            <button
+              onClick={() => copy(embedCode, "embed")}
+              className="absolute top-2 right-2 p-1.5 rounded-lg bg-surface-1 border border-line/60 text-ink-muted hover:text-brand-600 transition-colors"
+            >
+              {copiedEmbed ? <Check size={14} className="text-success-500" /> : <Copy size={14} />}
+            </button>
+          </div>
+        </Section>
+
+        {/* GitHub link */}
+        <div className="pt-4 mt-4 border-t border-line/40">
+          <a
+            href="https://github.com/ruslanmv/ai-medical-chatbot"
+            target="_blank"
+            rel="noopener noreferrer"
+            className="flex items-center gap-2 text-sm text-ink-muted hover:text-brand-600 transition-colors"
+          >
+            <ExternalLink size={14} /> View source on GitHub
+          </a>
+        </div>
+      </div>
+    </div>
+  );
+}
+
+function Section({ title, icon: Icon, children }: { title: string; icon?: any; children: React.ReactNode }) {
+  return (
+    <div className="mb-6">
+      <div className="flex items-center gap-2 mb-3">
+        {Icon && <Icon size={14} className="text-ink-subtle" />}
+        <h3 className="text-sm font-semibold text-ink-base">{title}</h3>
+      </div>
+      {children}
+    </div>
+  );
+}
diff --git a/components/views/TopicsView.tsx b/components/views/TopicsView.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..8b7d0f0ca3c41bee220cc8d49e8e5ed253b9bd9d
--- /dev/null
+++ b/components/views/TopicsView.tsx
@@ -0,0 +1,84 @@
+"use client";
+
+import {
+  Thermometer,
+  Wind,
+  Brain,
+  Heart,
+  Baby,
+  Stethoscope,
+  Activity,
+  Droplets,
+  Sun,
+  Frown,
+} from "lucide-react";
+import { t, type SupportedLanguage } from "@/lib/i18n";
+
+interface TopicsViewProps {
+  language: SupportedLanguage;
+  onSelectTopic: (topic: string) => void;
+}
+
+const TOPICS = [
+  { key: "topic_fever", icon: Thermometer, color: "amber" },
+  { key: "topic_cough", icon: Wind, color: "blue" },
+  { key: "topic_headache", icon: Brain, color: "purple" },
+  { key: "topic_blood_pressure", icon: Activity, color: "rose" },
+  { key: "topic_diabetes", icon: Droplets, color: "indigo" },
+  { key: "topic_pregnancy", icon: Baby, color: "pink" },
+  { key: "topic_mental_health", icon: Frown, color: "teal" },
+  { key: "topic_diarrhea", icon: Stethoscope, color: "emerald" },
+  { key: "topic_hypertension", icon: Heart, color: "red" },
+  { key: "topic_children", icon: Baby, color: "sky" },
+  { key: "topic_malaria", icon: Sun, color: "orange" },
+];
+
+const COLOR_MAP: Record<string, { bg: string; icon: string; border: string }> = {
+  amber: { bg: "bg-amber-50", icon: "text-amber-500", border: "border-amber-200" },
+  blue: { bg: "bg-blue-50", icon: "text-blue-500", border: "border-blue-200" },
+  purple: { bg: "bg-purple-50", icon: "text-purple-500", border: "border-purple-200" },
+  rose: { bg: "bg-rose-50", icon: "text-rose-500", border: "border-rose-200" },
+  indigo: { bg: "bg-indigo-50", icon: "text-indigo-500", border: "border-indigo-200" },
+  pink: { bg: "bg-pink-50", icon: "text-pink-500", border: "border-pink-200" },
+  teal: { bg: "bg-teal-50", icon: "text-teal-500", border: "border-teal-200" },
+  emerald: { bg: "bg-emerald-50", icon: "text-emerald-500", border: "border-emerald-200" },
+  red: { bg: "bg-red-50", icon: "text-red-500", border: "border-red-200" },
+  sky: { bg: "bg-sky-50", icon: "text-sky-500", border: "border-sky-200" },
+  orange: { bg: "bg-orange-50", icon: "text-orange-500", border: "border-orange-200" },
+};
+
+export function TopicsView({ language, onSelectTopic }: TopicsViewProps) {
+  return (
+    <div className="flex-1 overflow-y-auto p-6">
+      <div className="max-w-2xl mx-auto">
+        <div className="text-center mb-8">
+          <h1 className="text-2xl font-bold text-slate-800 mb-2">
+            {t("topics_title", language)}
+          </h1>
+          <p className="text-slate-500">
+            {t("topics_subtitle", language)}
+          </p>
+        </div>
+
+        <div className="grid grid-cols-2 sm:grid-cols-3 gap-3">
+          {TOPICS.map(({ key, icon: Icon, color }) => {
+            const colors = COLOR_MAP[color] || COLOR_MAP.blue;
+            const label = t(key, language);
+            return (
+              <button
+                key={key}
+                onClick={() => onSelectTopic(label)}
+                className={`${colors.bg} ${colors.border} border rounded-2xl p-5 text-center hover:shadow-md transition-all group`}
+              >
+                <div className="flex justify-center mb-3">
+                  <Icon size={28} className={`${colors.icon} group-hover:scale-110 transition-transform`} />
+                </div>
+                <span className="font-semibold text-sm text-slate-700">{label}</span>
+              </button>
+            );
+          })}
+        </div>
+      </div>
+    </div>
+  );
+}
diff --git a/components/views/VitalsView.tsx b/components/views/VitalsView.tsx
new file mode 100644
index 0000000000000000000000000000000000000000..5a05a99b686507eee0d4a80a9b1221b8dce0d2b0
--- /dev/null
+++ b/components/views/VitalsView.tsx
@@ -0,0 +1,323 @@
+"use client";
+
+import { useState } from "react";
+import {
+  Activity,
+  Plus,
+  X,
+  Trash2,
+  ChevronDown,
+  TrendingUp,
+  TrendingDown,
+  Minus,
+} from "lucide-react";
+import {
+  VITAL_META,
+  todayISO,
+  nowTimeISO,
+  type VitalReading,
+  type VitalType,
+} from "@/lib/health-store";
+import { t, type SupportedLanguage } from "@/lib/i18n";
+
+interface VitalsViewProps {
+  vitals: VitalReading[];
+  onAdd: (reading: Omit<VitalReading, "id">) => void;
+  onDelete: (id: string) => void;
+  language: SupportedLanguage;
+}
+
+export function VitalsView({
+  vitals,
+  onAdd,
+  onDelete,
+  language,
+}: VitalsViewProps) {
+  const [showForm, setShowForm] = useState(false);
+  const [type, setType] = useState<VitalType>("blood-pressure");
+  const [value, setValue] = useState("");
+  const [date, setDate] = useState(todayISO());
+  const [time, setTime] = useState(nowTimeISO());
+  const [notes, setNotes] = useState("");
+
+  const meta = VITAL_META[type];
+
+  const handleSubmit = () => {
+    if (!value.trim()) return;
+    onAdd({
+      type,
+      value: value.trim(),
+      unit: meta.unit,
+      date,
+      time,
+      notes: notes.trim() || undefined,
+    });
+    setValue("");
+    setNotes("");
+    setShowForm(false);
+  };
+
+  // Group vitals by type and show the latest reading + a mini sparkline.
+  const grouped = Object.keys(VITAL_META) as VitalType[];
+
+  return (
+    <div className="flex-1 overflow-y-auto p-6 sm:p-8 pb-mobile-nav scroll-touch">
+      <div className="max-w-2xl mx-auto animate-in fade-in slide-in-from-bottom-4 duration-500">
+        <div className="flex items-center justify-between mb-6">
+          <div>
+            <h2 className="text-2xl font-bold text-ink-base">{t("vital_title", language)}</h2>
+            <p className="text-sm text-ink-muted mt-1">
+              {t("vital_subtitle", language)}
+            </p>
+          </div>
+          <button
+            onClick={() => setShowForm(!showForm)}
+            className="flex items-center gap-1.5 px-4 py-2.5 bg-brand-gradient text-white rounded-xl font-bold text-sm shadow-glow hover:brightness-110 transition-all"
+          >
+            {showForm ? <X size={16} /> : <Plus size={16} />}
+            {showForm ? t("vital_cancel", language) : t("vital_log", language)}
+          </button>
+        </div>
+
+        {/* Quick-entry form */}
+        {showForm && (
+          <div className="bg-surface-1 border border-line/60 rounded-2xl p-5 mb-6 shadow-soft animate-in fade-in slide-in-from-bottom-4 duration-300">
+            <h3 className="font-bold text-ink-base mb-4">{t("vital_new", language)}</h3>
+            <div className="grid sm:grid-cols-2 gap-4">
+              <div>
+                <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">
+                  Vital type
+                </label>
+                <div className="relative">
+                  <select
+                    value={type}
+                    onChange={(e) => {
+                      setType(e.target.value as VitalType);
+                      setValue("");
+                    }}
+                    className="w-full appearance-none bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 pr-8 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+                  >
+                    {Object.entries(VITAL_META).map(([k, v]) => (
+                      <option key={k} value={k}>
+                        {v.emoji} {v.label}
+                      </option>
+                    ))}
+                  </select>
+                  <ChevronDown
+                    className="absolute right-3 top-1/2 -translate-y-1/2 text-ink-subtle pointer-events-none"
+                    size={14}
+                  />
+                </div>
+              </div>
+              <div>
+                <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">
+                  Value ({meta.unit})
+                </label>
+                <input
+                  value={value}
+                  onChange={(e) => setValue(e.target.value)}
+                  placeholder={meta.placeholder}
+                  inputMode="decimal"
+                  className="w-full bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+                />
+              </div>
+              <div>
+                <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">
+                  Date
+                </label>
+                <input
+                  type="date"
+                  value={date}
+                  onChange={(e) => setDate(e.target.value)}
+                  className="w-full bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+                />
+              </div>
+              <div>
+                <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">
+                  Time
+                </label>
+                <input
+                  type="time"
+                  value={time}
+                  onChange={(e) => setTime(e.target.value)}
+                  className="w-full bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+                />
+              </div>
+              <div className="sm:col-span-2">
+                <label className="text-xs font-semibold text-ink-muted uppercase tracking-wider mb-1.5 block">
+                  Notes (optional)
+                </label>
+                <input
+                  value={notes}
+                  onChange={(e) => setNotes(e.target.value)}
+                  placeholder="After breakfast, resting..."
+                  className="w-full bg-surface-2 border border-line/60 text-ink-base rounded-xl px-3 py-2.5 text-sm focus:outline-none focus:ring-2 focus:ring-brand-500/30"
+                />
+              </div>
+            </div>
+            <button
+              onClick={handleSubmit}
+              disabled={!value.trim()}
+              className="mt-4 w-full py-3 bg-brand-gradient text-white rounded-xl font-bold text-sm shadow-glow hover:brightness-110 transition-all disabled:opacity-50"
+            >
+              Save Reading
+            </button>
+          </div>
+        )}
+
+        {/* Summary cards per vital type */}
+        <div className="grid sm:grid-cols-2 gap-3 mb-8">
+          {grouped.map((vType) => {
+            const vMeta = VITAL_META[vType];
+            const readings = vitals
+              .filter((v) => v.type === vType)
+              .sort((a, b) => `${b.date}${b.time}`.localeCompare(`${a.date}${a.time}`));
+            const latest = readings[0];
+            const prev = readings[1];
+            const trend = !latest || !prev ? null : getTrend(vType, latest, prev);
+
+            return (
+              <button
+                key={vType}
+                onClick={() => {
+                  setType(vType);
+                  setShowForm(true);
+                }}
+                className="p-4 rounded-2xl bg-surface-1 border border-line/60 shadow-soft text-left hover:border-brand-500/40 hover:-translate-y-0.5 transition-all group"
+              >
+                <div className="flex items-center gap-2 mb-2">
+                  <span className="text-lg">{vMeta.emoji}</span>
+                  <span className="text-xs font-bold uppercase tracking-wider text-ink-subtle">
+                    {vMeta.label}
+                  </span>
+                </div>
+                {latest ? (
+                  <div className="flex items-end gap-2">
+                    <span className="text-2xl font-black text-ink-base tracking-tight">
+                      {latest.value}
+                    </span>
+                    <span className="text-xs text-ink-muted mb-1">
+                      {vMeta.unit}
+                    </span>
+                    {trend && (
+                      <span
+                        className={`ml-auto text-xs font-bold flex items-center gap-0.5 ${
+                          trend === "up"
+                            ? "text-danger-500"
+                            : trend === "down"
+                            ? "text-success-500"
+                            : "text-ink-subtle"
+                        }`}
+                      >
+                        {trend === "up" ? (
+                          <TrendingUp size={12} />
+                        ) : trend === "down" ? (
+                          <TrendingDown size={12} />
+                        ) : (
+                          <Minus size={12} />
+                        )}
+                      </span>
+                    )}
+                  </div>
+                ) : (
+                  <span className="text-sm text-ink-subtle">{t("vital_no_readings", language)}</span>
+                )}
+                {/* Mini sparkline — last 7 readings as bars */}
+                {readings.length > 1 && (
+                  <div className="flex items-end gap-0.5 mt-2 h-6">
+                    {readings
+                      .slice(0, 7)
+                      .reverse()
+                      .map((r, i) => {
+                        const num = parseFloat(r.value.split("/")[0]);
+                        if (isNaN(num)) return null;
+                        const all = readings.slice(0, 7).map((rr) =>
+                          parseFloat(rr.value.split("/")[0]),
+                        );
+                        const min = Math.min(...all.filter((n) => !isNaN(n)));
+                        const max = Math.max(...all.filter((n) => !isNaN(n)));
+                        const range = max - min || 1;
+                        const h = 4 + ((num - min) / range) * 20;
+                        return (
+                          <div
+                            key={i}
+                            className="flex-1 bg-brand-500/40 rounded-sm"
+                            style={{ height: `${h}px` }}
+                          />
+                        );
+                      })}
+                  </div>
+                )}
+              </button>
+            );
+          })}
+        </div>
+
+        {/* Full reading history */}
+        <h3 className="text-xs font-bold uppercase tracking-wider text-ink-subtle mb-3">
+          Recent readings
+        </h3>
+        {vitals.length === 0 ? (
+          <div className="text-center py-10">
+            <Activity size={28} className="mx-auto text-ink-subtle mb-2" />
+            <p className="text-sm text-ink-muted">
+              No readings yet. Tap a vital type above or &ldquo;Log&rdquo; to
+              start.
+            </p>
+          </div>
+        ) : (
+          <div className="space-y-2">
+            {[...vitals]
+              .sort(
+                (a, b) =>
+                  `${b.date}${b.time}`.localeCompare(`${a.date}${a.time}`),
+              )
+              .slice(0, 30)
+              .map((v) => {
+                const vMeta = VITAL_META[v.type];
+                return (
+                  <div
+                    key={v.id}
+                    className="flex items-center gap-3 p-3 rounded-xl bg-surface-1 border border-line/60"
+                  >
+                    <span className="text-lg">{vMeta.emoji}</span>
+                    <div className="flex-1 min-w-0">
+                      <span className="font-bold text-sm text-ink-base">
+                        {vMeta.label}:{" "}
+                        <span className="text-brand-600 dark:text-brand-400">
+                          {v.value} {v.unit}
+                        </span>
+                      </span>
+                      <span className="text-xs text-ink-muted block">
+                        {new Date(v.date).toLocaleDateString()} · {v.time}
+                        {v.notes ? ` — ${v.notes}` : ""}
+                      </span>
+                    </div>
+                    <button
+                      onClick={() => onDelete(v.id)}
+                      className="text-ink-subtle hover:text-danger-500 p-1"
+                    >
+                      <Trash2 size={14} />
+                    </button>
+                  </div>
+                );
+              })}
+          </div>
+        )}
+      </div>
+    </div>
+  );
+}
+
+function getTrend(
+  _type: VitalType,
+  latest: VitalReading,
+  prev: VitalReading,
+): "up" | "down" | "stable" {
+  const a = parseFloat(latest.value.split("/")[0]);
+  const b = parseFloat(prev.value.split("/")[0]);
+  if (isNaN(a) || isNaN(b)) return "stable";
+  const diff = a - b;
+  if (Math.abs(diff) < 1) return "stable";
+  return diff > 0 ? "up" : "down";
+}
diff --git a/data/health-topics/africa.json b/data/health-topics/africa.json
new file mode 100644
index 0000000000000000000000000000000000000000..03fe7be193245e43d5828557a105ac5669584a5d
--- /dev/null
+++ b/data/health-topics/africa.json
@@ -0,0 +1,65 @@
+{
+  "region": "africa",
+  "categories": [
+    {
+      "name": "Malaria",
+      "topics": [
+        "Malaria Symptoms and Recognition",
+        "Bed Net Prevention",
+        "When Fever Means Emergency",
+        "Malaria in Pregnancy",
+        "Malaria Treatment Adherence"
+      ]
+    },
+    {
+      "name": "HIV/AIDS",
+      "topics": [
+        "HIV Testing and PrEP",
+        "ART Treatment Adherence",
+        "Preventing Mother-to-Child Transmission",
+        "Living with HIV",
+        "HIV Myths and Facts"
+      ]
+    },
+    {
+      "name": "Tuberculosis",
+      "topics": [
+        "TB Symptom Recognition",
+        "DOTS Treatment Adherence",
+        "TB and HIV Co-infection",
+        "MDR-TB Awareness",
+        "TB Prevention"
+      ]
+    },
+    {
+      "name": "Maternal Health",
+      "topics": [
+        "Pregnancy Danger Signs",
+        "Postpartum Hemorrhage Recognition",
+        "Importance of Colostrum",
+        "Family Planning Options",
+        "Anemia in Pregnancy"
+      ]
+    },
+    {
+      "name": "Child Health",
+      "topics": [
+        "ORS for Diarrhea",
+        "Pneumonia Warning Signs in Children",
+        "Childhood Vaccination",
+        "Malnutrition Recognition (MUAC)",
+        "Sickle Cell Disease"
+      ]
+    },
+    {
+      "name": "Water and Sanitation",
+      "topics": [
+        "Safe Water and Cholera Prevention",
+        "Hand Hygiene",
+        "Food Safety",
+        "Schistosomiasis Prevention",
+        "Trachoma Prevention"
+      ]
+    }
+  ]
+}
diff --git a/data/health-topics/americas.json b/data/health-topics/americas.json
new file mode 100644
index 0000000000000000000000000000000000000000..eb52c242814430645a1f7e7239984f1ede7ef313
--- /dev/null
+++ b/data/health-topics/americas.json
@@ -0,0 +1,55 @@
+{
+  "region": "americas",
+  "categories": [
+    {
+      "name": "Chronic Disease",
+      "topics": [
+        "Obesity and Metabolic Syndrome",
+        "Type 2 Diabetes Management",
+        "Heart Disease Prevention",
+        "Hypertension Control",
+        "Cancer Screening Guidelines"
+      ]
+    },
+    {
+      "name": "Mental Health",
+      "topics": [
+        "Depression and Anxiety",
+        "Substance Use Support",
+        "Opioid Safety",
+        "ADHD in Children and Adults",
+        "Crisis Hotlines"
+      ]
+    },
+    {
+      "name": "Tropical (Latin America)",
+      "topics": [
+        "Dengue Fever",
+        "Zika Virus and Pregnancy",
+        "Chagas Disease",
+        "Chikungunya",
+        "Leptospirosis"
+      ]
+    },
+    {
+      "name": "Women's Health",
+      "topics": [
+        "PCOS",
+        "Menopause Management",
+        "Contraception Options",
+        "Cervical Cancer Screening",
+        "Postpartum Depression"
+      ]
+    },
+    {
+      "name": "Children's Health",
+      "topics": [
+        "Childhood Vaccination",
+        "Childhood Obesity Prevention",
+        "Asthma in Children",
+        "ADHD Recognition",
+        "Healthy Screen Time"
+      ]
+    }
+  ]
+}
diff --git a/data/health-topics/east-asia.json b/data/health-topics/east-asia.json
new file mode 100644
index 0000000000000000000000000000000000000000..3b05a8d64d1ec6420d4b3588aec73c1b3ea82cce
--- /dev/null
+++ b/data/health-topics/east-asia.json
@@ -0,0 +1,55 @@
+{
+  "region": "east-asia",
+  "categories": [
+    {
+      "name": "Stroke Prevention",
+      "topics": [
+        "Stroke FAST Recognition",
+        "Blood Pressure Control",
+        "Stroke Risk Factors",
+        "Recovery After Stroke",
+        "Preventing Recurrent Stroke"
+      ]
+    },
+    {
+      "name": "Cancer Screening",
+      "topics": [
+        "Gastric Cancer Screening",
+        "Liver Cancer and Hepatitis B",
+        "Lung Cancer Prevention",
+        "Colorectal Cancer Screening",
+        "Breast Cancer Awareness"
+      ]
+    },
+    {
+      "name": "Aging and Dementia",
+      "topics": [
+        "Dementia Early Signs",
+        "Alzheimer's Disease",
+        "Caring for Elderly Parents",
+        "Fall Prevention",
+        "Osteoporosis"
+      ]
+    },
+    {
+      "name": "Air Quality",
+      "topics": [
+        "PM2.5 and Health Effects",
+        "Protecting Against Air Pollution",
+        "COPD from Pollution",
+        "Children and Air Quality",
+        "Indoor Air Purification"
+      ]
+    },
+    {
+      "name": "Mental Health",
+      "topics": [
+        "Workplace Burnout",
+        "Suicide Prevention",
+        "Depression Recognition",
+        "Social Isolation",
+        "Youth Mental Health"
+      ]
+    }
+  ]
+}
diff --git a/data/health-topics/europe.json b/data/health-topics/europe.json
new file mode 100644
index 0000000000000000000000000000000000000000..82e7efeade05f53899829031a860bb7ceb7f60e0
--- /dev/null
+++ b/data/health-topics/europe.json
@@ -0,0 +1,55 @@
+{
+  "region": "europe",
+  "categories": [
+    {
+      "name": "Cancer",
+      "topics": [
+        "Breast Cancer Screening",
+        "Colorectal Cancer Screening",
+        "Skin Cancer Prevention",
+        "Prostate Cancer Awareness",
+        "Lung Cancer and Smoking"
+      ]
+    },
+    {
+      "name": "Cardiovascular",
+      "topics": [
+        "Heart Disease Prevention",
+        "Stroke Recognition",
+        "Blood Pressure Management",
+        "Cholesterol Control",
+        "Atrial Fibrillation"
+      ]
+    },
+    {
+      "name": "Mental Health",
+      "topics": [
+        "Depression Treatment",
+        "Burnout and Work Stress",
+        "Anxiety Disorders",
+        "Addiction Support",
+        "Eating Disorders"
+      ]
+    },
+    {
+      "name": "Aging",
+      "topics": [
+        "Dementia and Alzheimer's",
+        "Fall Prevention in Elderly",
+        "Polypharmacy Risks",
+        "Osteoporosis",
+        "End-of-Life Planning"
+      ]
+    },
+    {
+      "name": "Allergies",
+      "topics": [
+        "Seasonal Allergies",
+        "Food Allergies",
+        "Asthma Management",
+        "Eczema and Atopic Dermatitis",
+        "Anaphylaxis Awareness"
+      ]
+    }
+  ]
+}
diff --git a/data/health-topics/global.json b/data/health-topics/global.json
new file mode 100644
index 0000000000000000000000000000000000000000..5f1a003c138250155872eebdfa84698a47b45746
--- /dev/null
+++ b/data/health-topics/global.json
@@ -0,0 +1,85 @@
+{
+  "region": "global",
+  "categories": [
+    {
+      "name": "Cardiovascular",
+      "topics": [
+        "Heart Attack Recognition",
+        "High Blood Pressure Management",
+        "Stroke Signs and FAST Protocol",
+        "Cholesterol Understanding",
+        "Heart Failure"
+      ]
+    },
+    {
+      "name": "Diabetes",
+      "topics": [
+        "Type 2 Diabetes Management",
+        "Blood Sugar Monitoring",
+        "Diabetic Foot Care",
+        "Gestational Diabetes",
+        "Hypoglycemia Recognition"
+      ]
+    },
+    {
+      "name": "Respiratory",
+      "topics": [
+        "Asthma Management",
+        "COPD",
+        "Pneumonia Warning Signs",
+        "When Cough Needs Medical Attention",
+        "COVID-19 and Long COVID"
+      ]
+    },
+    {
+      "name": "Mental Health",
+      "topics": [
+        "Depression Recognition and Help",
+        "Anxiety Management",
+        "Stress Reduction Techniques",
+        "Sleep Problems",
+        "Crisis Support Resources"
+      ]
+    },
+    {
+      "name": "Maternal and Child Health",
+      "topics": [
+        "Pregnancy Danger Signs",
+        "Prenatal Care Essentials",
+        "Breastfeeding Support",
+        "Childhood Vaccination Schedule",
+        "ORS for Childhood Diarrhea"
+      ]
+    },
+    {
+      "name": "Medication Safety",
+      "topics": [
+        "Antibiotic Resistance Awareness",
+        "Safe Pain Medication Use",
+        "Understanding Drug Interactions",
+        "Medication Adherence Importance",
+        "When to See a Doctor vs Self-Care"
+      ]
+    },
+    {
+      "name": "Nutrition",
+      "topics": [
+        "Iron Deficiency and Anemia",
+        "Vitamin D Importance",
+        "Healthy Diet Principles",
+        "Hydration and Electrolytes",
+        "Nutrition During Pregnancy"
+      ]
+    },
+    {
+      "name": "Emergency Recognition",
+      "topics": [
+        "When to Call Emergency Services",
+        "Basic First Aid",
+        "Choking Response",
+        "Severe Allergic Reaction",
+        "Burns and Wound Care"
+      ]
+    }
+  ]
+}
diff --git a/data/health-topics/middle-east.json b/data/health-topics/middle-east.json
new file mode 100644
index 0000000000000000000000000000000000000000..c0f27b9aa4a0fb3d95d6d7157f6a2dd51f036e1e
--- /dev/null
+++ b/data/health-topics/middle-east.json
@@ -0,0 +1,55 @@
+{
+  "region": "middle-east",
+  "categories": [
+    {
+      "name": "Diabetes",
+      "topics": [
+        "Diabetes Prevention (Highest Global Rates)",
+        "Ramadan and Diabetes Management",
+        "Diabetic Complications",
+        "Blood Sugar Monitoring",
+        "Diabetes in Children"
+      ]
+    },
+    {
+      "name": "Genetic Conditions",
+      "topics": [
+        "Thalassemia Awareness",
+        "G6PD Deficiency",
+        "Sickle Cell Disease",
+        "Genetic Counseling",
+        "Newborn Screening"
+      ]
+    },
+    {
+      "name": "Heat-Related Illness",
+      "topics": [
+        "Heat Stroke Prevention",
+        "Dehydration During Summer",
+        "Working Safely in Extreme Heat",
+        "Heat Exhaustion vs Heat Stroke",
+        "Hydration Guidelines"
+      ]
+    },
+    {
+      "name": "Mental Health",
+      "topics": [
+        "PTSD Support",
+        "Depression Awareness",
+        "Grief and Trauma",
+        "Mental Health Stigma",
+        "Support for Refugees"
+      ]
+    },
+    {
+      "name": "Nutrition",
+      "topics": [
+        "Vitamin D Paradox",
+        "Obesity Prevention",
+        "Healthy Eating in Gulf Region",
+        "Iron Deficiency in Women",
+        "Metabolic Syndrome"
+      ]
+    }
+  ]
+}
diff --git a/data/health-topics/south-asia.json b/data/health-topics/south-asia.json
new file mode 100644
index 0000000000000000000000000000000000000000..8dca5225150fecbd610c936fa8d23158630ee6f6
--- /dev/null
+++ b/data/health-topics/south-asia.json
@@ -0,0 +1,65 @@
+{
+  "region": "south-asia",
+  "categories": [
+    {
+      "name": "Tuberculosis",
+      "topics": [
+        "TB Symptoms and When to Get Tested",
+        "Completing Full TB Treatment",
+        "TB Medication Side Effects",
+        "TB Prevention in Families",
+        "Drug-Resistant TB"
+      ]
+    },
+    {
+      "name": "Diabetes Epidemic",
+      "topics": [
+        "Type 2 Diabetes Prevention",
+        "Blood Sugar Monitoring at Home",
+        "Diabetic Diet (South Asian Foods)",
+        "Diabetic Eye and Foot Care",
+        "Diabetes Myths vs Facts"
+      ]
+    },
+    {
+      "name": "Dengue and Vector-Borne",
+      "topics": [
+        "Dengue Warning Signs",
+        "Why NOT to Take Aspirin for Dengue",
+        "Mosquito Bite Prevention",
+        "Chikungunya",
+        "Japanese Encephalitis"
+      ]
+    },
+    {
+      "name": "Snakebite",
+      "topics": [
+        "Snakebite First Aid (DO and DONT)",
+        "When to Seek Antivenom",
+        "Common Venomous Snakes",
+        "Snake Prevention Around Home",
+        "Myths About Snakebite Treatment"
+      ]
+    },
+    {
+      "name": "Air Pollution",
+      "topics": [
+        "Protecting Lungs from Air Pollution",
+        "Masks and Air Quality Index",
+        "Children and Air Pollution",
+        "Indoor Air Pollution from Cooking",
+        "Respiratory Disease from Pollution"
+      ]
+    },
+    {
+      "name": "Mental Health",
+      "topics": [
+        "Depression is Not Weakness",
+        "Seeking Mental Health Help",
+        "Stress and Anxiety Management",
+        "Suicide Prevention Resources",
+        "Mental Health in Young People"
+      ]
+    }
+  ]
+}
diff --git a/data/health-topics/southeast-asia.json b/data/health-topics/southeast-asia.json
new file mode 100644
index 0000000000000000000000000000000000000000..f79b3eeed72d15cf0108079dd4dd3a9ffb9f073a
--- /dev/null
+++ b/data/health-topics/southeast-asia.json
@@ -0,0 +1,55 @@
+{
+  "region": "southeast-asia",
+  "categories": [
+    {
+      "name": "Dengue",
+      "topics": [
+        "Dengue Warning Signs",
+        "Dengue vs Other Fevers",
+        "No Aspirin/Ibuprofen for Dengue",
+        "Dengue Prevention",
+        "Severe Dengue Emergency"
+      ]
+    },
+    {
+      "name": "Tuberculosis",
+      "topics": [
+        "TB Symptoms Recognition",
+        "Completing TB Treatment",
+        "TB Testing",
+        "TB Prevention",
+        "Drug-Resistant TB"
+      ]
+    },
+    {
+      "name": "Rabies",
+      "topics": [
+        "Dog Bite First Aid",
+        "Post-Exposure Prophylaxis Urgency",
+        "Rabies Prevention",
+        "Animal Bite Wound Care",
+        "When to Seek PEP"
+      ]
+    },
+    {
+      "name": "Flooding-Related",
+      "topics": [
+        "Leptospirosis After Flooding",
+        "Waterborne Disease Prevention",
+        "Wound Care in Floodwater",
+        "Mental Health After Disasters",
+        "Safe Water After Flooding"
+      ]
+    },
+    {
+      "name": "Road Safety",
+      "topics": [
+        "Motorbike Safety",
+        "Head Injury First Aid",
+        "When to Go to Hospital After Crash",
+        "First Aid for Fractures",
+        "Helmet Importance"
+      ]
+    }
+  ]
+}
diff --git a/docs/ADMIN.md b/docs/ADMIN.md
new file mode 100644
index 0000000000000000000000000000000000000000..cd5ea42fdc77a1d9ca7fb8038256a224b619bfb2
--- /dev/null
+++ b/docs/ADMIN.md
@@ -0,0 +1,625 @@
+# MedOS Admin Guide
+
+Complete guide for deploying, configuring, and managing the MedOS platform.
+
+---
+
+## Table of Contents
+
+1. [Architecture Overview](#architecture-overview)
+2. [Deployment Guide](#deployment-guide)
+3. [Admin Panel](#admin-panel)
+4. [LLM Provider Setup](#llm-provider-setup)
+5. [Email (SMTP) Configuration](#email-smtp-configuration)
+6. [Medicine Scanner Setup](#medicine-scanner-setup)
+7. [Nearby Finder Setup](#nearby-finder-setup)
+8. [Environment Variables Reference](#environment-variables-reference)
+9. [Troubleshooting](#troubleshooting)
+
+---
+
+## Architecture Overview
+
+MedOS runs as **3 independent HuggingFace Spaces** + an optional **Vercel frontend**:
+
+```
+┌─────────────────────────────────────────────────────────────┐
+│                    User's Browser                           │
+│                                                             │
+│  Vercel (optional)              OR    HuggingFace Space     │
+│  ai-medical-chabot.com               huggingface.co/spaces/ │
+│  Frontend only                        ruslanmv/MediBot      │
+│  /api/proxy/* → MediBot              Full app (FE + BE)     │
+└──────────┬──────────────────────────────┬───────────────────┘
+           │                              │
+           ▼                              ▼
+┌─────────────────────────────────────────────────────────────┐
+│  MediBot Space (ruslanmv/MediBot)                           │
+│  Next.js 14 + SQLite                                        │
+│                                                             │
+│  /api/chat     → LLM providers (Llama, Qwen, Gemma, etc.)  │
+│  /api/auth/*   → User auth (register, login, verify)        │
+│  /api/nearby   → Proxy to MetaEngine-Nearby                 │
+│  /api/scan     → Proxy to Medicine-Scanner                  │
+│  /api/admin/*  → Admin panel APIs                           │
+│  /api/health   → Health check                               │
+└──────────┬──────────────────────┬───────────────────────────┘
+           │                      │
+           ▼                      ▼
+┌──────────────────────┐  ┌──────────────────────┐
+│  Medicine-Scanner     │  │  MetaEngine-Nearby   │
+│  (Gradio SDK)         │  │  (Gradio SDK)        │
+│                       │  │                      │
+│  Qwen2.5-VL-72B      │  │  OpenStreetMap       │
+│  Image → JSON         │  │  Overpass API        │
+│                       │  │  Nominatim geocoder  │
+└───────────────────────┘  └──────────────────────┘
+```
+
+---
+
+## Deployment Guide
+
+### Prerequisites
+
+- HuggingFace account with write token
+- (Optional) Vercel account for custom domain
+- (Optional) SMTP credentials for email verification
+
+### Required Tokens
+
+| Token | Purpose | How to Create |
+|-------|---------|---------------|
+| **HF_TOKEN** (write) | Deploy Spaces, manage secrets | [huggingface.co/settings/tokens](https://huggingface.co/settings/tokens) → Fine-grained → Repo write |
+| **HF_TOKEN_INFERENCE** | Medicine Scanner AI inference | [Create here](https://huggingface.co/settings/tokens/new?ownUserPermissions=inference.serverless.write&tokenType=fineGrained) → Check "Make calls to Inference Providers" |
+
+---
+
+### Deploy MediBot (Main App)
+
+This is the core application — chat, health tracker, auth, admin panel.
+
+```bash
+# 1. Set your HuggingFace token
+export HF_TOKEN=hf_your_write_token_here
+
+# 2. Deploy (assembles web/ + backend, rewrites API paths, pushes)
+bash 9-HuggingFace-Global/scripts/deploy-hf.sh
+
+# 3. Verify
+curl https://ruslanmv-medibot.hf.space/api/health
+# → {"status":"ok"}
+```
+
+**What it does:**
+- Copies `9-HuggingFace-Global/` (backend) as the base
+- Overlays `web/` (frontend components, hooks, styles)
+- Rewrites `/api/proxy/` → `/api/` in all frontend files
+- Force-pushes to `ruslanmv/MediBot` HF Space
+
+**After deployment**, set these secrets in the Space settings:
+
+| Secret | Value | Required? |
+|--------|-------|-----------|
+| `HF_TOKEN` | Your HF token (for LLM inference) | Yes |
+| `HF_TOKEN_INFERENCE` | Token with inference permissions | For scanner proxy |
+| `NEARBY_URL` | `https://ruslanmv-metaengine-nearby.hf.space` | Default works |
+| `SCANNER_URL` | `https://ruslanmv-medicine-scanner.hf.space` | Default works |
+| `DB_PATH` | `/data/medos.db` | Default works |
+
+---
+
+### Deploy Medicine Scanner
+
+AI-powered medicine label reader using Qwen2.5-VL-72B.
+
+```bash
+export HF_TOKEN=hf_your_write_token_here
+bash 11-Medicine-Scanner/deploy-scanner.sh
+
+# Verify
+curl https://ruslanmv-medicine-scanner.hf.space/api/health
+# → {"status":"ok","service":"medicine-scanner"}
+```
+
+**After deployment**, set this secret in Space settings:
+
+| Secret | Value | Required? |
+|--------|-------|-----------|
+| `HF_TOKEN` | Token with "Make calls to Inference Providers" permission | Yes |
+
+**Test the scanner:**
+```bash
+curl -X POST https://ruslanmv-medicine-scanner.hf.space/api/scan \
+  -F "image=@photo_of_medicine.jpg"
+```
+
+---
+
+### Deploy MetaEngine Nearby Finder
+
+Finds pharmacies and doctors using OpenStreetMap.
+
+```bash
+export HF_TOKEN=hf_your_write_token_here
+bash 12-MetaEngine-Nearby/deploy-nearby.sh
+
+# Verify
+curl https://ruslanmv-metaengine-nearby.hf.space/api/health
+# → {"status":"ok","service":"nearby-finder"}
+```
+
+No secrets needed — uses free OpenStreetMap APIs.
+
+**Test the finder:**
+```bash
+curl -X POST https://ruslanmv-metaengine-nearby.hf.space/api/search \
+  -H "Content-Type: application/json" \
+  -d '{"lat": 40.7128, "lon": -74.006, "entity_type": "pharmacy", "limit": 5}'
+```
+
+---
+
+### Deploy Vercel Frontend (Optional)
+
+For custom domains (e.g., `ai-medical-chabot.com`):
+
+1. Go to [vercel.com](https://vercel.com) → Import Git Repository
+2. **Root Directory:** `web`
+3. **Framework:** Next.js
+4. **Environment Variables:**
+
+| Variable | Value |
+|----------|-------|
+| `NEXT_PUBLIC_BACKEND_URL` | `https://ruslanmv-medibot.hf.space` |
+
+5. Click **Deploy**
+6. Add custom domain in Vercel → Settings → Domains
+
+The Vercel frontend is a thin proxy — all API calls go to the MediBot Space.
+
+---
+
+## Admin Panel
+
+### How to Access
+
+1. Go to your MedOS instance (HF Space or Vercel URL)
+2. Log in with the default admin account:
+   - **Email:** `admin@medos.health`
+   - **Password:** `admin123456`
+3. **Change the password immediately** after first login
+4. The **Admin** section appears in the desktop sidebar (bottom, under Tools)
+
+### Admin Panel Tabs
+
+#### Overview
+
+Platform statistics at a glance:
+- Total users, verified users, admin count
+- Health records count, chat sessions count
+- Active sessions (logged-in users)
+- Health data breakdown by type (medications, vitals, etc.)
+- Registration trend chart (last 30 days)
+
+#### Users
+
+User management:
+- Search by email or display name
+- Paginated list (20 users per page)
+- Per-user info: email, verification status, health records count, chat count
+- **Reset Password**: Set a temporary password for a user (invalidates all sessions)
+- **Delete User**: Admin-only, requires email confirmation, CASCADE deletes all data
+
+#### LLM
+
+Test all AI model providers:
+- Click **"Test All Providers"** to test 12 models in parallel
+- Shows status (green/red), latency (ms), response preview
+- Summary: total/online/offline counts
+- Explains the routing fallback chain
+
+**Current model cascade (tested and verified):**
+
+| Model | Size | Provider |
+|-------|------|----------|
+| Llama 3.3 70B :sambanova | 70B | SambaNova |
+| Llama 3.3 70B :together | 70B | Together |
+| Llama 3.3 70B (auto) | 70B | Auto-routed |
+| Qwen 2.5 72B | 72B | Auto-routed |
+| Qwen3 235B (MoE) | 235B | Auto-routed |
+| Gemma 3 27B | 27B | Auto-routed |
+| Llama 3.1 70B | 70B | Auto-routed |
+| Qwen3 32B | 32B | Auto-routed |
+| DeepSeek V3 | 671B | Auto-routed |
+
+If all models fail, the system falls back to **15 pre-cached medical FAQ responses** (always works, even offline).
+
+#### Email
+
+SMTP configuration for email verification and password reset:
+
+| Field | Description | Example |
+|-------|-------------|---------|
+| SMTP Host | Mail server hostname | `smtp.gmail.com` |
+| SMTP Port | Usually 587 (TLS) or 465 (SSL) | `587` |
+| SMTP Username | Your email account | `medos@yourdomain.com` |
+| SMTP Password | App password (not your login password) | `xxxx xxxx xxxx xxxx` |
+| From Email | Sender display name + email | `MedOS <noreply@medos.health>` |
+| Recovery Email | Support contact for users | `support@medos.health` |
+
+**Gmail setup:**
+1. Go to [myaccount.google.com/apppasswords](https://myaccount.google.com/apppasswords)
+2. Generate an app password
+3. Use your Gmail as SMTP username, app password as SMTP password
+4. Host: `smtp.gmail.com`, Port: `587`
+
+**If SMTP is not configured:** Verification codes are logged to the console (visible in Space logs). This is fine for development but not production.
+
+#### Server
+
+Server-side configuration:
+
+| Setting | Description | Default |
+|---------|-------------|---------|
+| Default Preset | Default AI model for new users | `free-best` |
+| Ollama Base URL | Local Ollama server (if running) | `http://localhost:11434` |
+| HF Default Model | Default model for HF Inference | `meta-llama/Llama-3.3-70B-Instruct` |
+| Application URL | Public URL (used in emails) | `https://ruslanmv-medibot.hf.space` |
+| Allowed Origins | CORS origins (comma-separated) | Your Vercel URL |
+
+Changes are saved to `/data/medos-config.json` and persist across restarts.
+
+---
+
+## LLM Provider Setup
+
+### How the AI Chat Works
+
+When a user sends a message:
+
+```
+1. Emergency triage (19 patterns, instant) — bypasses LLM entirely
+2. RAG context (medical knowledge base, 23 topics)
+3. System prompt (WHO/CDC/NHS guidelines, user's language + country)
+4. LLM provider chain:
+   a. OllaBridge (if configured) — custom gateway
+   b. HuggingFace Inference — 9-model cascade
+   c. Cached FAQ (always works) — 15 pre-built answers
+```
+
+### HuggingFace Token Requirements
+
+The `HF_TOKEN` secret on the MediBot Space needs **"Make calls to Inference Providers"** permission:
+
+1. Go to [huggingface.co/settings/tokens](https://huggingface.co/settings/tokens/new?ownUserPermissions=inference.serverless.write&tokenType=fineGrained)
+2. Create a **Fine-grained** token
+3. Check **"Make calls to Inference Providers"**
+4. Copy the token
+5. Set it as `HF_TOKEN` in MediBot Space settings
+
+### Testing LLM Health
+
+**From the Admin Panel:**
+Admin → LLM tab → "Test All Providers"
+
+**From the command line:**
+```bash
+HF_TOKEN=hf_xxx python scripts/check-llm-health.py
+```
+
+**Output:**
+```
+  OK   Llama-3.3-70B-Instruct                640ms  OK
+  OK   Qwen2.5-72B-Instruct                 1366ms  OK
+  OK   Qwen3-235B-A22B                      1785ms  OK
+  OK   gemma-3-27b-it                        951ms  OK
+  FAIL Llama-3.3-70B-Instruct:sambanova     2549ms  402 Payment Required
+
+Summary: 12/13 models online (1 degraded)
+```
+
+### Adding a Custom OllaBridge Gateway
+
+If you run your own LLM server:
+
+```bash
+# Set in HF Space settings
+OLLABRIDGE_URL=https://your-server.com
+OLLABRIDGE_API_KEY=sk-your-key
+```
+
+OllaBridge is tried FIRST in the fallback chain, before HuggingFace.
+
+---
+
+## Email (SMTP) Configuration
+
+### Quick Setup (Gmail)
+
+1. Enable 2FA on your Google account
+2. Generate an app password: [myaccount.google.com/apppasswords](https://myaccount.google.com/apppasswords)
+3. In MedOS Admin → Email tab:
+   - Host: `smtp.gmail.com`
+   - Port: `587`
+   - User: `your.email@gmail.com`
+   - Password: (the app password from step 2)
+   - From: `MedOS <your.email@gmail.com>`
+4. Click **Save Configuration**
+
+### Other Providers
+
+| Provider | Host | Port |
+|----------|------|------|
+| Gmail | `smtp.gmail.com` | 587 |
+| Outlook | `smtp.office365.com` | 587 |
+| SendGrid | `smtp.sendgrid.net` | 587 |
+| AWS SES | `email-smtp.us-east-1.amazonaws.com` | 587 |
+| Mailgun | `smtp.mailgun.org` | 587 |
+
+### What Emails Are Sent
+
+| Email | When | Expiry |
+|-------|------|--------|
+| Verification code | User registers | 15 minutes |
+| Password reset code | User clicks "Forgot password" | 1 hour |
+| Welcome email | After email verification | N/A |
+
+### Dev Mode (No SMTP)
+
+If SMTP is not configured, all verification codes are **logged to the console**. Check Space logs:
+
+```
+[EMAIL] To: user@example.com
+[EMAIL] Subject: MedOS — verify your email
+[EMAIL] Body: Your verification code is: 847291
+```
+
+---
+
+## Medicine Scanner Setup
+
+### How the Scanner Works on Each Platform
+
+| Platform | Behavior |
+|----------|----------|
+| **Desktop (Chrome/Firefox/Edge)** | Live webcam preview inside modal with viewfinder overlay. User positions medicine, clicks "Capture". Falls back to file upload if webcam not available. |
+| **Android** | Opens native camera app directly. Photo is sent to AI immediately. |
+| **iPhone/iPad** | Opens native camera app directly. Same as Android. |
+
+### Webcam Permissions
+
+For the desktop webcam to work:
+- The site must be served over **HTTPS** (required by browsers for `getUserMedia`)
+- User must **allow camera access** when prompted
+- `Permissions-Policy: camera=(self)` header is already set
+
+### Token Requirements
+
+The Medicine Scanner Space needs a HuggingFace token with **"Make calls to Inference Providers"** permission (same as LLM chat).
+
+Set it as `HF_TOKEN` in the Medicine-Scanner Space settings.
+
+### Models Used
+
+| Model | Purpose | Fallback |
+|-------|---------|----------|
+| Qwen/Qwen2.5-VL-72B-Instruct | Primary (best quality) | → |
+| google/gemma-3-27b-it | Fallback | N/A |
+
+### How It Works
+
+```
+User takes photo → MedOS frontend
+    → POST /api/scan (MediBot proxy)
+    → POST /api/scan (Scanner Space)
+    → Encode image as base64
+    → Send to Qwen2.5-VL-72B with extraction prompt
+    → Parse JSON response
+    → Return: name, dose, form, category, expiry, instructions
+```
+
+---
+
+## Nearby Finder Setup
+
+### No Configuration Needed
+
+MetaEngine-Nearby uses free APIs — no tokens or secrets required:
+- **OpenStreetMap Overpass API** — pharmacy/doctor location data
+- **Nominatim** — geocoding (city name → coordinates) and reverse geocoding
+
+### How It Works
+
+```
+User enters location → MedOS frontend
+    → POST /api/nearby (MediBot proxy)
+    → POST /gradio_api/call/search_ui (MetaEngine Space)
+    → Query Overpass API for pharmacies/doctors within radius
+    → Calculate distance, ETA (walk/drive)
+    → Generate Google Maps directions URLs
+    → Return sorted results
+```
+
+### Overpass API Limits
+
+- Free, no API key
+- Rate limit: ~10,000 requests/day (shared)
+- Timeout: 25 seconds per query
+- If Overpass is slow, results may be empty — retry helps
+
+---
+
+## Environment Variables Reference
+
+### MediBot Space
+
+| Variable | Required | Default | Description |
+|----------|----------|---------|-------------|
+| `HF_TOKEN` | Yes | — | HuggingFace token (inference + write) |
+| `DB_PATH` | No | `/data/medos.db` | SQLite database path |
+| `ADMIN_EMAIL` | No | `admin@medos.health` | Default admin email |
+| `ADMIN_PASSWORD` | No | `admin123456` | Default admin password |
+| `SMTP_HOST` | No | — | SMTP server hostname |
+| `SMTP_PORT` | No | `587` | SMTP port |
+| `SMTP_USER` | No | — | SMTP username |
+| `SMTP_PASS` | No | — | SMTP password |
+| `FROM_EMAIL` | No | `MedOS <noreply@medos.health>` | Sender email |
+| `APP_URL` | No | `https://ruslanmv-medibot.hf.space` | Public URL |
+| `ALLOWED_ORIGINS` | No | `*` | CORS allowed origins |
+| `NEARBY_URL` | No | `https://ruslanmv-metaengine-nearby.hf.space` | Nearby finder URL |
+| `SCANNER_URL` | No | `https://ruslanmv-medicine-scanner.hf.space` | Scanner URL |
+| `HF_TOKEN_INFERENCE` | No | — | Inference token for scanner proxy |
+| `OLLABRIDGE_URL` | No | — | Custom OllaBridge gateway URL |
+| `OLLABRIDGE_API_KEY` | No | — | OllaBridge API key |
+| `DEFAULT_PRESET` | No | `free-best` | Default AI model preset |
+
+### Medicine Scanner Space
+
+| Variable | Required | Default | Description |
+|----------|----------|---------|-------------|
+| `HF_TOKEN` | Yes | — | Token with inference permissions |
+
+### MetaEngine Nearby Space
+
+No environment variables needed. Uses free OpenStreetMap APIs.
+
+### Vercel Frontend
+
+| Variable | Required | Default | Description |
+|----------|----------|---------|-------------|
+| `NEXT_PUBLIC_BACKEND_URL` | Yes | `https://ruslanmv-medibot.hf.space` | MediBot Space URL |
+
+---
+
+## Troubleshooting
+
+### "All models failed" in chat
+
+1. Go to Admin → LLM tab → Test All Providers
+2. If all models show red: your `HF_TOKEN` doesn't have inference permissions
+3. Fix: Create a new token at [huggingface.co/settings/tokens](https://huggingface.co/settings/tokens/new?ownUserPermissions=inference.serverless.write&tokenType=fineGrained)
+4. Update the `HF_TOKEN` secret in MediBot Space settings
+
+### Medicine Scanner shows "Scan failed"
+
+1. Check the Scanner Space is running: visit [huggingface.co/spaces/ruslanmv/Medicine-Scanner](https://huggingface.co/spaces/ruslanmv/Medicine-Scanner)
+2. If sleeping, any request will wake it (takes ~30 seconds)
+3. Check `HF_TOKEN` secret is set with inference permissions
+
+### Nearby search returns no results
+
+1. Check MetaEngine Space is running: visit [huggingface.co/spaces/ruslanmv/MetaEngine-Nearby](https://huggingface.co/spaces/ruslanmv/MetaEngine-Nearby)
+2. Overpass API may be slow — retry after a few seconds
+3. Try a different location (some areas have fewer OSM entries)
+
+### Chat returns 504 on Vercel (ai-medical-chabot.com)
+
+This happens when the MediBot Space is sleeping and the Vercel proxy times out waiting for it to wake.
+
+**Fixes:**
+1. `vercel.json` sets `maxDuration: 60` (increased from 30s)
+2. If still timing out, wake MediBot first: visit [huggingface.co/spaces/ruslanmv/MediBot](https://huggingface.co/spaces/ruslanmv/MediBot) and wait ~30s
+3. For always-on, upgrade the MediBot HF Space to a paid plan
+
+**Why it happens:**
+- Vercel proxy → MediBot (sleeping, 30s cold start) → LLM (5-10s) = 40s total
+- Vercel free tier allows max 60s per function call
+
+### Desktop webcam not working in scanner
+
+1. Ensure the site is served over **HTTPS** (browsers block `getUserMedia` on HTTP)
+2. User must click "Allow" on the camera permission prompt
+3. If webcam is blocked, the scanner shows "Upload photo" as fallback
+4. Check browser settings: Settings → Privacy → Camera → allow your domain
+
+### Email verification codes not received
+
+1. Check Admin → Email tab — is SMTP configured?
+2. If not configured, codes appear in Space logs (Container tab)
+3. For Gmail: use an app password, not your login password
+4. Check spam folder
+
+### Space shows "Building" or "Error"
+
+1. Check Space logs at `huggingface.co/spaces/ruslanmv/SpaceName` → Logs tab
+2. Common issues:
+   - Missing `HF_TOKEN` secret → auth errors
+   - Dependency conflict → check requirements.txt
+   - Port mismatch → ensure app runs on port 7860
+
+### Admin panel not visible
+
+1. You must be logged in as an admin user
+2. Default admin: `admin@medos.health` / `admin123456`
+3. The Admin section only appears in the **desktop sidebar** (not mobile drawer for security)
+4. If the admin account doesn't exist, restart the Space (it auto-seeds on startup)
+
+### HF Space goes to sleep
+
+Free-tier HF Spaces sleep after ~15 minutes of inactivity.
+- Any request wakes them automatically (~30-60 seconds)
+- The MedOS frontend shows "waking up" status during this time
+- For always-on, upgrade to a paid HF Space plan
+
+### Database reset
+
+If you need to reset the database:
+1. Delete the persistent storage in Space settings
+2. Restart the Space
+3. The database will be recreated with a fresh admin account
+
+---
+
+## GitHub Actions (CI/CD)
+
+Automated deployment is configured via GitHub workflows:
+
+| Workflow | Trigger | Space |
+|----------|---------|-------|
+| `deploy-medibot.yml` | Push to `main` (changes in `9-HuggingFace-Global/` or `web/`) | MediBot |
+| `deploy-medicine-scanner.yml` | Push to `main` (changes in `11-Medicine-Scanner/`) | Medicine-Scanner |
+| `deploy-metaengine-nearby.yml` | Push to `main` (changes in `12-MetaEngine-Nearby/`) | MetaEngine-Nearby |
+| `ci-medos-global.yml` | Push to any branch | Runs 88 tests + build |
+
+### GitHub Secrets Required
+
+Set these in **GitHub → Settings → Secrets → Actions**:
+
+| Secret | Value |
+|--------|-------|
+| `HF_TOKEN` | HuggingFace write token |
+| `HF_USERNAME` | `ruslanmv` (your HF username) |
+| `HF_TOKEN_INFERENCE` | Token with inference permissions (for scanner) |
+
+### Manual Deployment
+
+All Spaces can also be deployed manually:
+
+```bash
+# MediBot
+HF_TOKEN=hf_xxx bash 9-HuggingFace-Global/scripts/deploy-hf.sh
+
+# Medicine Scanner
+HF_TOKEN=hf_xxx bash 11-Medicine-Scanner/deploy-scanner.sh
+
+# MetaEngine Nearby
+HF_TOKEN=hf_xxx bash 12-MetaEngine-Nearby/deploy-nearby.sh
+```
+
+---
+
+## Security Notes
+
+- Default admin password MUST be changed after first login
+- `HF_TOKEN` should have minimal required permissions
+- Rate limiting is active on login (10/min) and register (5/min)
+- Account deletion is admin-only (prevents data destruction attacks)
+- Health data is stored in SQLite with CASCADE deletes
+- CSP headers restrict script/connect sources
+- All auth cookies are httpOnly with SameSite=Lax
+
+---
+
+*Last updated: April 2026*
+*MedOS v1.0 — Free & Open Source*
diff --git a/docs/AUTH_EMAIL.md b/docs/AUTH_EMAIL.md
new file mode 100644
index 0000000000000000000000000000000000000000..ae718c286af6d9db060482cc4024103f089f73fa
--- /dev/null
+++ b/docs/AUTH_EMAIL.md
@@ -0,0 +1,131 @@
+# Auth email — verification & password reset
+
+MedOS sends two transactional emails:
+
+| Email | Trigger | Code expiry |
+|---|---|---|
+| Verify email | `POST /api/auth/register` (or `/resend-verification`) | 15 min |
+| Reset password | `POST /api/auth/forgot-password` | 1 hour |
+
+Both go through `lib/email.ts`. The code path is always wired — what
+determines whether real email gets sent is which **transport** is
+configured.
+
+## The three transports
+
+`lib/email.ts` picks at runtime, first match wins:
+
+| Order | Transport | When chosen | Notes |
+|---|---|---|---|
+| 1 | **Resend HTTP API** | `RESEND_API_KEY` is set | Recommended on HF Spaces / Vercel. Uses HTTPS to `api.resend.com`. |
+| 2 | **SMTP (nodemailer)** | `SMTP_HOST` + `SMTP_USER` + `SMTP_PASS` all set | Works with any provider. |
+| 3 | **Console fallback** | nothing above is set | Emails are logged to stdout. **They never reach a real inbox.** |
+
+The console fallback is the state that produces "Account created!
+Check your email" with no email ever arriving. The API returns 200/201
+either way (this is deliberate to avoid email enumeration), so the
+only signal is in the Space's container logs.
+
+## Confirm which transport is active (one curl)
+
+As an authenticated admin:
+
+```bash
+curl -s -H "Authorization: Bearer $ADMIN_TOKEN" \
+  https://ruslanmv-medibot.hf.space/api/admin/email-status
+# → {"transport":"resend","from":"...","appUrl":"..."}
+# → {"transport":"smtp","from":"...","appUrl":"..."}
+# → {"transport":"console","from":"...","appUrl":"..."}  ← nothing reaches inboxes
+```
+
+You can also stream the Space's container logs and grep:
+
+```bash
+curl -N -H "Authorization: Bearer $HF_TOKEN" \
+  "https://huggingface.co/api/spaces/<owner>/<space>/logs/run" | grep -E '\[EMAIL|\[Register'
+```
+
+Every register / forgot-password / resend-verification call now prints
+the transport name and the outcome:
+
+```
+[Register] queued verification email via transport=resend to=user@example.com
+[EMAIL Resend] ok id=abc123 to=user@example.com subject="MedOS — verify your email"
+```
+
+If you see `transport=console`, no email has been sent.
+
+## Wiring Resend (recommended)
+
+1. Sign up at [resend.com](https://resend.com).
+2. Create an API key in the dashboard.
+3. (Optional) Verify a sending domain. Until you do, the `FROM_EMAIL`
+   must use `onboarding@resend.dev` — Resend rejects other senders for
+   unverified domains.
+4. On the **HF Space → Settings → Variables and secrets**, set:
+
+   | Key | Type | Value |
+   |---|---|---|
+   | `RESEND_API_KEY` | secret | your Resend API key |
+   | `FROM_EMAIL` | variable | `MedOS <onboarding@resend.dev>` (or `noreply@your-verified-domain`) |
+   | `APP_URL` | variable | `https://ruslanmv-medibot.hf.space` (or your Vercel URL) |
+
+5. Restart the Space so the new env loads.
+6. Hit `GET /api/admin/email-status` — it should return `{"transport":"resend",…}`.
+
+`APP_URL` matters for the password-reset email: the email contains a
+one-click link `${APP_URL}?action=reset&email=…&code=…` that drops the
+user straight into the "set new password" step. If `APP_URL` is wrong
+the email's code-paste path still works as a fallback.
+
+## Wiring SMTP (alternate)
+
+Only used if `RESEND_API_KEY` is **not** set. Pick a provider:
+
+| Provider | `SMTP_HOST` | `SMTP_PORT` | `SMTP_USER` | `SMTP_PASS` | Free tier |
+|---|---|---|---|---|---|
+| Resend (SMTP gateway) | `smtp.resend.com` | `465` | `resend` | API key | 3,000/mo |
+| SendGrid | `smtp.sendgrid.net` | `587` | `apikey` (literal) | API key | 100/day |
+| Mailgun | `smtp.mailgun.org` | `587` | `postmaster@<domain>` | SMTP password | 100/day for 30 days |
+| AWS SES | `email-smtp.<region>.amazonaws.com` | `587` | IAM SMTP user | IAM SMTP password | Free from EC2 |
+| Gmail | `smtp.gmail.com` | `587` | Gmail address | App password (NOT account password) | Personal only |
+
+Any SMTP provider works — `lib/email.ts` doesn't hard-code anyone.
+
+## How the password-reset flow runs end-to-end
+
+1. User clicks **Forgot password?** → enters email → POST `/api/auth/forgot-password`.
+2. Backend looks up the user, generates a 6-digit code, stores it in
+   `users.reset_token` with a 1-hour expiry, and calls
+   `sendPasswordResetEmail(email, code)`.
+3. Email arrives with two ways to act:
+   - **Click the Reset password button** — opens `${APP_URL}?action=reset&email=…&code=…`.
+     The frontend (`usePasswordResetLink` hook + MedOSApp) parses
+     those params on mount, switches the LoginView to its `reset`
+     step with email and code pre-filled, and strips the params from
+     the URL so they don't sit in browser history.
+   - **Paste the 6-digit code manually** — for mail clients that strip
+     query strings or for users on a different device.
+4. User sets a new password → POST `/api/auth/reset-password`.
+5. Backend validates the code + expiry, bcrypts the new password,
+   wipes all existing sessions for that user (security best practice),
+   issues a new session token, returns it.
+6. Frontend stores the token → user is logged in with the new password.
+
+## Operational notes
+
+- The reset code is stored as plaintext in `users.reset_token` today.
+  Codes expire in 1h and are invalidated on use, so the window is
+  small, but if you ever dump the DB while one is pending, treat it
+  as exposed.
+- There is no in-product rate limit on `/api/auth/forgot-password`
+  today. If you start hitting the email provider's quota or seeing
+  abusive patterns in the audit log, that's the place to add one.
+- The "user not found" branch returns the same success message as the
+  "user found" branch — this is deliberate, to prevent email
+  enumeration. Don't change this.
+- `register/route.ts` historically had `sendVerificationEmail(…).catch(() => {})`
+  which swallowed every email error silently. That's been replaced
+  with a `.then(ok => …)` that logs failures — if a Resend or SMTP
+  call fails, you'll see `[Register] verification email FAILED to=…`
+  in the container logs.
diff --git a/docs/DEPLOYMENT_DB.md b/docs/DEPLOYMENT_DB.md
new file mode 100644
index 0000000000000000000000000000000000000000..567038593b8e9e150edbc7ef09ba887fe9684105
--- /dev/null
+++ b/docs/DEPLOYMENT_DB.md
@@ -0,0 +1,167 @@
+# Database deployment
+
+MedOS supports **two database drivers** chosen at runtime by a single env var.
+
+| `DATABASE_URL` set? | Driver | Use case |
+|---|---|---|
+| Yes, starts with `postgres://` or `postgresql://` | **Postgres** (production) | Vercel, Hugging Face Spaces, CI smoke tests |
+| Unset or invalid | **SQLite** (fallback) | Local development, ephemeral previews, offline self-hosting |
+
+The schema is the same on both drivers. Migrations apply driver-specific SQL automatically.
+
+> **Refusing the fallback in production.** When `NODE_ENV=production` and `DATABASE_URL` is missing or invalid, the server refuses to start instead of silently coming up on SQLite. There is no separate flag — `NODE_ENV` already tells us this is production. Set `NODE_ENV=development` locally to opt into the SQLite fallback.
+
+## Choosing a Postgres host
+
+The project is tested against **Neon** but works with any Postgres ≥ 13 — Supabase, Railway, RDS, Cloud SQL, plain `postgres:16`. Neon's pooler endpoint (`...-pooler....neon.tech`) is what the code expects for serverless deployments.
+
+## The one new env var
+
+For the database migration itself you only have to add **one** variable:
+
+| Var | Type | Example |
+|---|---|---|
+| `DATABASE_URL` | secret | `postgresql://USER:PASS@ep-xxx-pooler.region.aws.neon.tech/neondb?sslmode=require` |
+
+Everything else (SSL mode, pool size, statement timeout, fallback path) has a sensible default baked into the code. Defaults are listed at the bottom of this doc — you only override them if a deployment proves you need to.
+
+The pre-existing MedOS env vars stay the same; they were already required before this migration:
+
+- `ADMIN_EMAIL`, `ADMIN_PASSWORD` — first-run admin seed.
+- `ENCRYPTION_KEY` — at-rest encryption for BYO HF tokens.
+- `SMTP_HOST`, `SMTP_PORT`, `SMTP_USER`, `SMTP_PASS`, `FROM_EMAIL` — email transport.
+- `APP_URL` — used in outbound email links.
+- `NODE_ENV` — standard Node.js env tag. Set to `production` on Vercel + HF.
+
+See `.env.example` for the consolidated list.
+
+## Setting env vars per platform
+
+### GitHub Actions
+
+`Settings → Secrets and variables → Actions`.
+
+- **Repository secrets** for everything tagged "**secret**" above.
+- **Repository variables** for everything tagged "variable".
+
+Per-environment scoping: if you have a `production` and a `staging` Action environment, set them separately so previews can target Neon's preview branches.
+
+Reference in a workflow:
+
+```yaml
+jobs:
+  smoke:
+    runs-on: ubuntu-latest
+    env:
+      NODE_ENV: production
+      DATABASE_URL: ${{ secrets.DATABASE_URL }}
+      ADMIN_EMAIL: ${{ vars.ADMIN_EMAIL }}
+      ADMIN_PASSWORD: ${{ secrets.ADMIN_PASSWORD }}
+      ENCRYPTION_KEY: ${{ secrets.ENCRYPTION_KEY }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with: { node-version: '20' }
+      - run: cd 9-HuggingFace-Global && npm ci && npm run db:migrate
+```
+
+### Hugging Face Spaces
+
+`Space → Settings → Variables and secrets`.
+
+- **Secrets** for the sensitive set.
+- **Variables** for the non-sensitive set.
+
+Hugging Face Spaces persists `/data` between restarts on most Space hardware tiers, so the SQLite fallback works there if you choose not to use Postgres. With `DATABASE_URL` set, the Space writes to Postgres and the on-disk SQLite at `/data/medos.db` is unused.
+
+Sample `space.yml` extract:
+
+```yaml
+emoji: 🩺
+sdk: docker
+app_port: 7860
+secrets:
+  - DATABASE_URL
+  - ADMIN_PASSWORD
+  - ENCRYPTION_KEY
+  - SMTP_PASS
+variables:
+  NODE_ENV: "production"
+  ADMIN_EMAIL: "admin@medos.health"
+  SMTP_HOST: "smtp.sendgrid.net"
+  SMTP_PORT: "587"
+  SMTP_USER: "apikey"
+  FROM_EMAIL: "MedOS <noreply@your-domain>"
+  APP_URL: "https://your-space.hf.space"
+```
+
+### Vercel
+
+`Project → Settings → Environment Variables`.
+
+- Tag every var for **Production** and **Preview** (you'll typically want a separate Neon database branch for Preview).
+- The Neon connection string already includes `sslmode=require`; do not modify it.
+
+You can also use Vercel's Neon integration to inject `DATABASE_URL` automatically per branch.
+
+## Migration command
+
+After setting env vars, run migrations once before the first request:
+
+```bash
+# Production (Postgres)
+DATABASE_URL=postgresql://... npm run db:migrate
+
+# Development (SQLite)
+npm run db:migrate
+```
+
+The same `npm run db:migrate` works for both drivers. Migrations are version-gated and idempotent — running twice is safe.
+
+## Connection-failure behavior
+
+| Driver | Boot | First request | Mid-request |
+|---|---|---|---|
+| Postgres + `NODE_ENV=production` | Process exits 1 if connect fails (no silent fallback) | Same as boot | 503 response, structured log line |
+| Postgres + `NODE_ENV=development` | Logs warning, falls back to SQLite | Reads from SQLite at `$DB_PATH` | Same |
+| SQLite (dev only) | Always succeeds locally; fails only if path is unwritable | Reads from local file | n/a |
+
+Production is always Postgres-required: when `NODE_ENV=production` and `DATABASE_URL` is missing or invalid, the server refuses to start. Silent fallback is convenient in development; it is a foot-gun in production, so we never enable it there.
+
+## Rotating the database password
+
+If a credential is ever exposed (e.g., pasted into a chat, a screenshot, or a logged URL), rotate immediately:
+
+1. Neon → `Branches → production → Roles → Reset password` on the user.
+2. Update `DATABASE_URL` in GitHub Actions secrets, HF Spaces secrets, and Vercel env vars.
+3. Redeploy each platform so the new connection string takes effect.
+4. Audit recent logins for the rotated role (Neon → `Operations`).
+
+Plan for a quarterly rotation regardless of incident.
+
+## Local development
+
+```bash
+cd 9-HuggingFace-Global
+npm install
+npm run dev
+```
+
+Without `DATABASE_URL` set, the app uses SQLite at `./medos.db`. The first request triggers the migration runner; verification codes show up on stdout because SMTP is unconfigured.
+
+If you want to develop against Postgres locally, run a container:
+
+```bash
+docker run --name medos-pg -e POSTGRES_PASSWORD=devpass -p 5432:5432 -d postgres:16
+export DATABASE_URL="postgresql://postgres:devpass@localhost:5432/postgres"
+npm run db:migrate
+npm run dev
+```
+
+## Cross-references
+
+- `9-HuggingFace-Global/lib/db-adapter/` — implementation.
+- `9-HuggingFace-Global/lib/db-adapter/migrations/` — schema definitions.
+- `SECURITY.md` (repo root) — credential reporting and rotation policy.
+- `THREAT_MODEL.md` (repo root) — assets, including DB credentials.
+- `PRIVACY.md` (repo root) — what data lives in the DB and how it is retained / deleted.
diff --git a/docs/OFFLINE_LITE.md b/docs/OFFLINE_LITE.md
new file mode 100644
index 0000000000000000000000000000000000000000..930e570a7bf7a739b9c9311e1a14a31bf1796e42
--- /dev/null
+++ b/docs/OFFLINE_LITE.md
@@ -0,0 +1,103 @@
+# MedOS Offline-Lite
+
+**Status:** design only. Implementation lands when a contributor picks it up.
+
+This document describes a deliberately small, deliberately limited offline mode for MedOS. It is **not** a promise of a full offline medical AI. The deterministic safety floor is what works offline; an LLM is only added on top of it as a small-model best-effort.
+
+Read this together with `SAFETY.md` at the repo root.
+
+## Why "Lite"
+
+Two honest constraints set the scope:
+
+1. **Llama 3.3 70B does not run on a phone or a budget laptop.** Promising "offline medical AI" with a 70B model is misleading. We do not.
+2. **Safety must hold offline.** The deterministic red-flag rules in `9-HuggingFace-Global/lib/safety/red-flags.ts` and the regional emergency numbers in `config/locales/*.medical.json` are pure code + pure data. Both already work offline. That is the foundation.
+
+Offline-Lite therefore ships:
+
+```text
+Always available offline:
+  - Deterministic red-flag triage (R0..R5)
+  - Regional emergency numbers, crisis lines, poison-control numbers
+  - Locale disclaimers + clinician-referral phrasing
+  - Cached FAQ responses (already in lib/providers/cached-faq.ts)
+
+Best-effort offline (optional, behind a flag):
+  - Phi-3 mini / Gemma 2B / TinyLlama for non-clinical guidance only
+  - Strictly capped at R0/R1 outputs
+  - Strict post-filter
+```
+
+## What the user sees
+
+A clearly-marked **Offline Lite** banner appears whenever the app detects no connectivity (or the user explicitly enables it):
+
+> **You are using Offline Lite.** I can show emergency numbers, run a basic safety check on your symptoms, and answer common questions from a small, on-device model. I cannot do full medical chat without a connection. **For anything urgent, call your local emergency number.**
+
+The banner is sticky, dismissible per session but never per app, and the local emergency number from the active locale pack is shown next to it.
+
+## Architecture
+
+```text
+User input
+   ↓
+Pre-LLM safety engine        (always; pure code, works offline)
+   ↓
+   - R5  → emergency template, end. (NO LLM CALL.)
+   - R4  → urgent template + local emergency number
+   - R3  → urgent care suggestion + clinician phrasing
+   - R0/R1 → small on-device model OR cached FAQ, then post-filter
+   - R2  → cached FAQ + clinician referral
+   ↓
+Post-LLM safety filter        (always; pure code, works offline)
+   ↓
+Final answer + disclaimer + emergency number when required
+```
+
+## Small-model selection
+
+| Model | Approx. size | Plausible host | License |
+|---|---|---|---|
+| Phi-3 mini (3.8B) | ~2.4 GB quantised | Browser via WebGPU / phone via ONNX | Permissive |
+| Gemma 2B-IT | ~1.5 GB quantised | Same | Open weights, terms apply |
+| TinyLlama 1.1B | ~700 MB quantised | Lightest option | Permissive |
+
+The model **must** be:
+
+- Routed through the existing `chatWithFallback` path (so the safety sandwich still applies).
+- Pinned to **R0/R1 only**. Anything routed to R2+ uses cached responses or a clinician-referral template, **not** the small model.
+- Wrapped in the **same** post-filter as the cloud path. There are no shortcuts for "the small model is on-device, so it's fine." It isn't.
+- Distributed via the standard PWA caching / app-bundle path. No third-party CDN that can later silently change weights.
+
+## Implementation outline
+
+A contributor implementing this would touch:
+
+1. `9-HuggingFace-Global/lib/providers/offline-lite.ts` — new provider that wraps a WebGPU / ONNX / GGUF runtime. Returns the same `ProviderResponse` shape so `chatWithFallback` can plug it in.
+2. `9-HuggingFace-Global/lib/providers/index.ts` — add Offline-Lite as the **last** fallback step, after cached FAQ.
+3. `9-HuggingFace-Global/lib/safety/safety-engine.ts` — when the input resolves to R2 or higher under Offline-Lite, route to a template / cached response, not the small model. Add an explicit `offline: true` audit field.
+4. `web/components/OfflineBanner.tsx` (or equivalent in the live app) — the always-visible banner described above.
+5. PWA / service-worker config — pre-cache `config/locales/*.medical.json` at install time. They are tiny and safety-critical.
+
+## What Offline-Lite explicitly does NOT do
+
+- Full medical chat.
+- Diagnosis (it never does, online or offline).
+- Dose recommendations.
+- "You're fine, no need to see a doctor." The post-filter blocks this on every path.
+- Pretending to be the same product as online MedOS. The banner is loud about the limits.
+
+## Testing
+
+The same `tests/safety/run_golden.ts` set runs in offline mode by mocking the provider chain to return only Offline-Lite results. The R5 / R4 floor must hold; the post-filter rules apply identically.
+
+A few extra cases tagged `offline_lite` may be added if specific failure modes are discovered (e.g., a small model hallucinating a dose).
+
+## Roadmap
+
+- **Step 1.** Pre-cache the medical packs in the service worker. (Self-contained, no model.)
+- **Step 2.** Add a clear Offline banner that surfaces emergency numbers regardless of model availability.
+- **Step 3.** Add Offline-Lite small-model provider behind a feature flag (`MEDOS_OFFLINE_LITE_ENABLED=true`). Keep the flag off by default while validation runs.
+- **Step 4.** Run the full golden set in offline mode; require the same R5/R4 sensitivity targets as the online path before flipping the flag on.
+
+Until Step 4 passes, Offline-Lite is documented but not enabled. The deterministic safety floor + emergency numbers + cached FAQ already give users a useful, honest offline experience.
diff --git a/docs/OLLABRIDGE_INTEGRATION.md b/docs/OLLABRIDGE_INTEGRATION.md
new file mode 100644
index 0000000000000000000000000000000000000000..66e2b520797772870b7adf60021a0e028e56fa55
--- /dev/null
+++ b/docs/OLLABRIDGE_INTEGRATION.md
@@ -0,0 +1,120 @@
+# OllaBridge Cloud — live-app integration
+
+**Status:** the provider-side wiring already exists (`9-HuggingFace-Global/lib/providers/ollabridge.ts` + `chatWithFallback` short-circuits to OllaBridge when configured). What this document covers is the **user-facing pairing flow** in the live app, which today is only designed in `13-MedOS-Family/frontend/components/pages/SettingsPage.tsx` and not yet exposed to end users of `web/` and `9-HuggingFace-Global/`.
+
+This is the most credible "privacy-first" lever MedOS has. With OllaBridge Cloud, the user runs Ollama on their own machine; their prompts never leave their network. The MedOS server only exchanges encrypted, authenticated requests with the user's bridge.
+
+Read together with `PRIVACY.md` and `SAFETY.md` at the repo root.
+
+## What changes for the user
+
+When a user pairs their bridge, the chat route detects `OLLABRIDGE_URL` (or, in the per-user model below, the user's pairing record) and routes through `streamWithOllaBridge` / `chatWithOllaBridge` instead of the default Hugging Face path.
+
+The safety sandwich does **not** change. `preCheck()` and `postCheck()` run on every request regardless of which provider answers. OllaBridge is just one more provider behind `chatWithFallback`.
+
+## Two deployment modes
+
+| Mode | Who configures | Scope |
+|---|---|---|
+| **Operator-wide** | The MedOS deployment owner sets `OLLABRIDGE_URL` in the server env | All requests on that deployment go through that bridge |
+| **Per-user** *(new)* | Each user pairs from Settings → Linked devices → "Pair OllaBridge Cloud" | Only that user's requests route through their bridge |
+
+Operator-wide is what `chatWithFallback` already supports today. Per-user is what this doc plans.
+
+## Per-user pairing flow
+
+1. User opens **Settings → Linked devices → Pair OllaBridge Cloud** in the live app (the design exists in `13-MedOS-Family/frontend/components/pages/SettingsPage.tsx`).
+2. UI shows a QR code + a 9-character pair code (rotates every 5 minutes).
+3. On the user's machine, they install Ollama and run `ollabridge --pair`. The CLI scans the QR or accepts the pair code.
+4. Bridge and MedOS exchange a one-time short-lived secret. MedOS server stores a per-user record:
+
+   ```ts
+   ollabridge_pairings (
+     user_id        TEXT PRIMARY KEY,
+     bridge_url     TEXT NOT NULL,    // user's bridge endpoint, often a tunnel
+     bridge_token   TEXT NOT NULL,    // bearer token, encrypted at rest
+     paired_at      TEXT NOT NULL,
+     last_seen_at   TEXT,
+     status         TEXT NOT NULL     // active | needs_reauth | revoked
+   )
+   ```
+
+5. The chat route, on every request, looks up the user's pairing. If active, it routes through their bridge first; falls through to the global path on bridge failure (see "Failure handling" below).
+
+## Provider-routing rules
+
+`chatWithFallback` becomes:
+
+```text
+1. Per-user OllaBridge pairing  (if user is authenticated and has an active pairing)
+2. Operator-wide OllaBridge     (if OLLABRIDGE_URL is set)
+3. Hugging Face Inference       (12-model cascade, today's default)
+4. Cached FAQ                   (always succeeds)
+```
+
+The order matters: privacy-first (user's own bridge) > operator's (still local-ish) > shared cloud > cached.
+
+## Configuration
+
+Server env (operator-wide path, already supported):
+
+```bash
+OLLABRIDGE_URL=https://your-bridge.example
+OLLABRIDGE_TOKEN=<bearer>
+```
+
+Server env (per-user feature flag, to be added):
+
+```bash
+MEDOS_PER_USER_OLLABRIDGE=true
+```
+
+When the flag is off, only operator-wide pairing is honoured. When on, the chat route also reads the per-user pairing record.
+
+## Failure handling
+
+Bridges live on someone's home machine. They will go offline.
+
+- **Bridge offline.** Log it as a per-user metric (no PHI). Fall through to the next provider in the chain (operator-wide, then Hugging Face). The user's chat continues to work; they get a non-blocking notice in the UI: "Your local bridge isn't reachable; we'll use the cloud path until it's back."
+- **Bridge returns 401.** Mark the pairing as `needs_reauth`. The user is shown the re-pair flow next time they open the app.
+- **Bridge times out.** Same fallback path. Audit records the latency so we know when to lower the timeout.
+
+## Privacy posture
+
+- The bridge URL and token live server-side, encrypted at rest (use the existing `lib/crypto.ts` helpers).
+- The pairing **does not** store any chat content; the safety engine's audit log already excludes content (`PRIVACY.md`).
+- A user can revoke their pairing from Settings; revocation is immediate and audited.
+- The bridge token never reaches the browser.
+
+## Safety still applies
+
+The safety sandwich is unchanged:
+
+- `preCheck()` runs *before* the request leaves MedOS for the user's bridge. R5 emergencies are template-handled and never sent to any LLM, including the user's local one.
+- `postCheck()` runs on the bridge's response just like any other provider's. The deterministic post-filter rules apply identically.
+- Locale packs (`config/locales/*.medical.json`) are read server-side and used to compose the system prompt and the post-filter, irrespective of where the LLM physically runs.
+
+## Implementation outline
+
+A contributor implementing per-user pairing would touch:
+
+1. `9-HuggingFace-Global/lib/providers/ollabridge.ts` — extend with a per-user variant that takes `(bridgeUrl, bridgeToken)` arguments.
+2. `9-HuggingFace-Global/lib/providers/index.ts` — make `chatWithFallback` accept an optional `userPairing` argument and try it first.
+3. `9-HuggingFace-Global/lib/db.ts` — migration adding `ollabridge_pairings` table.
+4. `9-HuggingFace-Global/lib/ollabridge-pairing.ts` — service module: create pairing, load pairing, mark needs-reauth, revoke.
+5. `9-HuggingFace-Global/app/api/ollabridge/pair/route.ts` — API endpoints: start pairing (returns QR + pair code), confirm pairing, revoke.
+6. `web/` (and / or each app frontend) — Settings page → Linked devices → "Pair OllaBridge Cloud" UI. The MedOS Family frontend already has the design.
+7. CI: a smoke test that mocks a bridge and checks the routing precedence.
+
+## What this document explicitly does NOT do
+
+- Promise that running Ollama is easy for everyone. It is a non-trivial install. The pairing flow assumes a technically comfortable user; the rest of MedOS continues to work for everyone else.
+- Bypass the safety sandwich. There is no "trusted bridge" mode. Every request is gated by `preCheck()` and `postCheck()`.
+- Move medical regional data into the bridge. Locale packs stay server-side.
+
+## Roadmap
+
+1. Land the per-user pairing schema + service + endpoints behind `MEDOS_PER_USER_OLLABRIDGE=false`.
+2. Expose the UI in `web/` Settings.
+3. Soft-launch with the flag off; flip on for opted-in users; collect failure-rate metrics (no PHI).
+4. Make per-user pairing available to all users once the failure path is well-tested.
diff --git a/lib/ab-variant.ts b/lib/ab-variant.ts
new file mode 100644
index 0000000000000000000000000000000000000000..e79ff851c9b89fa9c24e6c3a8adcd051879f2d40
--- /dev/null
+++ b/lib/ab-variant.ts
@@ -0,0 +1,57 @@
+/**
+ * Deterministic client-side A/B variant picker.
+ *
+ * Assigns each visitor a stable variant on first load and persists it
+ * in `localStorage` so the same visitor sees the same headline across
+ * reloads and sessions — required for a meaningful A/B test.
+ *
+ * No server, no cookies, no PII: the variant is just one of `0..n-1`.
+ * If localStorage is unavailable (SSR, privacy modes) the function
+ * returns a time-seeded fallback so the UI still renders something
+ * sensible.
+ */
+
+const STORAGE_KEY = 'medos_variant';
+
+export function pickVariant(n: number): number {
+  if (n <= 1) return 0;
+  if (typeof window === 'undefined') return 0;
+  try {
+    const existing = localStorage.getItem(STORAGE_KEY);
+    if (existing !== null) {
+      const parsed = parseInt(existing, 10);
+      if (!Number.isNaN(parsed) && parsed >= 0 && parsed < n) return parsed;
+    }
+    const v = Math.floor(Math.random() * n);
+    localStorage.setItem(STORAGE_KEY, String(v));
+    return v;
+  } catch {
+    return Math.floor(Date.now() / 1000) % n;
+  }
+}
+
+/**
+ * Three candidate hero headlines we will A/B-test. Each variant is
+ * stored alongside a short subtitle used in the empty-state copy.
+ * Ordering is meaningful — variant 0 is the current control.
+ */
+export const HERO_VARIANTS = [
+  {
+    title: "Tell me what's bothering you.",
+    subtitle:
+      "I'll help you understand it — calmly, clearly, and privately. Aligned with WHO · CDC · NHS guidelines.",
+    eyebrow: 'Your worldwide medical companion',
+  },
+  {
+    title: 'Describe how you feel.',
+    subtitle:
+      'Get clear, trustworthy health guidance in your own language — instantly, for free, with no sign-up.',
+    eyebrow: 'Trusted health answers, 24/7',
+  },
+  {
+    title: 'Ask any health question.',
+    subtitle:
+      'Private, multilingual medical guidance aligned with WHO and CDC. No account, no paywall, no data stored.',
+    eyebrow: 'Free forever · 20 languages',
+  },
+] as const;
diff --git a/lib/analytics/anonymous-tracker.ts b/lib/analytics/anonymous-tracker.ts
new file mode 100644
index 0000000000000000000000000000000000000000..08b9eacb98747ddf713c4c33a8babda9cbdd531c
--- /dev/null
+++ b/lib/analytics/anonymous-tracker.ts
@@ -0,0 +1,50 @@
+'use client';
+
+/**
+ * Anonymous session tracker.
+ * Calls server-side /api/sessions to track real session count.
+ * Zero PII — only increments a global counter per chat session.
+ */
+
+const SESSION_KEY = 'medos-session-tracked';
+
+/**
+ * Track a new session (called once per page load).
+ * Returns the updated global count.
+ */
+export async function trackSession(): Promise<number> {
+  // Only track once per browser session (sessionStorage resets on tab close)
+  if (typeof sessionStorage !== 'undefined' && sessionStorage.getItem(SESSION_KEY)) {
+    return fetchCount();
+  }
+
+  try {
+    const response = await fetch('/api/sessions', { method: 'POST' });
+    if (response.ok) {
+      const data = await response.json();
+      if (typeof sessionStorage !== 'undefined') {
+        sessionStorage.setItem(SESSION_KEY, '1');
+      }
+      return data.count || 0;
+    }
+  } catch {
+    // Offline or error — return cached
+  }
+  return 0;
+}
+
+/**
+ * Fetch current count without incrementing.
+ */
+export async function fetchCount(): Promise<number> {
+  try {
+    const response = await fetch('/api/sessions', { method: 'GET' });
+    if (response.ok) {
+      const data = await response.json();
+      return data.count || 0;
+    }
+  } catch {
+    // Offline
+  }
+  return 0;
+}
diff --git a/lib/answer-quality.ts b/lib/answer-quality.ts
new file mode 100644
index 0000000000000000000000000000000000000000..0b78c595548775855a236fab600044fce0932fce
--- /dev/null
+++ b/lib/answer-quality.ts
@@ -0,0 +1,116 @@
+/**
+ * Lightweight heuristics for showing trust signals on AI answers without
+ * making any extra model calls.
+ *
+ *  1. `estimateConfidence(text)` — classifies a response as low / medium /
+ *     high based on hedge-word density vs. structured-section density.
+ *  2. `extractCitations(text)` — finds references to authoritative
+ *     medical bodies (WHO, CDC, NHS, NIH, ICD, EMA, Mayo, Cochrane) and
+ *     returns them as clickable chip descriptors pointing at each body's
+ *     official patient-facing landing page.
+ *
+ * Kept pure / dependency-free so it's easy to unit-test and runs on both
+ * server and client.
+ */
+
+export type Confidence = 'low' | 'medium' | 'high';
+
+const HEDGE_WORDS = [
+  'might', 'may', 'could', 'possibly', 'possible', 'uncertain',
+  "it's hard to say", 'hard to say', 'unclear', 'perhaps', 'seems',
+  "i'm not sure", 'not sure', 'difficult to say',
+];
+
+/**
+ * Look for the structured section markers from the medical-knowledge
+ * output contract (**Summary**, **What it could be**, etc). Their
+ * presence is a strong signal that the model followed the contract —
+ * we lift confidence accordingly.
+ */
+const STRUCTURE_MARKERS = [
+  '**summary**',
+  '**what it could be**',
+  '**self-care**',
+  '**when to seek care**',
+  '**red flags**',
+];
+
+export function estimateConfidence(text: string): Confidence {
+  if (!text || text.length < 40) return 'low';
+  const lower = text.toLowerCase();
+
+  let hedges = 0;
+  for (const h of HEDGE_WORDS) {
+    // count occurrences (bounded to avoid quadratic on huge inputs)
+    let idx = lower.indexOf(h);
+    while (idx !== -1 && hedges < 10) {
+      hedges++;
+      idx = lower.indexOf(h, idx + h.length);
+    }
+  }
+
+  let sections = 0;
+  for (const m of STRUCTURE_MARKERS) {
+    if (lower.includes(m)) sections++;
+  }
+
+  // Rules of thumb: full structure + few hedges = high; lots of hedges
+  // and no structure = low; everything else = medium.
+  if (sections >= 3 && hedges <= 3) return 'high';
+  if (sections === 0 && hedges >= 4) return 'low';
+  return 'medium';
+}
+
+export const CONFIDENCE_LABELS: Record<Confidence, string> = {
+  low: 'Exploratory',
+  medium: 'Guidance',
+  high: 'Aligned with guidelines',
+};
+
+export const CONFIDENCE_COLORS: Record<Confidence, string> = {
+  low: 'text-amber-300 border-amber-500/30 bg-amber-500/10',
+  medium: 'text-sky-300 border-sky-500/30 bg-sky-500/10',
+  high: 'text-emerald-300 border-emerald-500/30 bg-emerald-500/10',
+};
+
+// ---------------------------------------------------------------------
+
+export interface Citation {
+  id: string;
+  label: string;
+  url: string;
+}
+
+/**
+ * Each citation body gets a stable label + a public patient-facing URL.
+ * Matching is case-insensitive and tolerant of punctuation.
+ */
+const CITATION_PATTERNS: Array<{ id: string; re: RegExp; label: string; url: string }> = [
+  { id: 'who',     re: /\bWHO\b|World Health Organization/i, label: 'WHO',      url: 'https://www.who.int/health-topics' },
+  { id: 'cdc',     re: /\bCDC\b|Centers for Disease Control/i, label: 'CDC',    url: 'https://www.cdc.gov/health-topics.html' },
+  { id: 'nhs',     re: /\bNHS\b|National Health Service/i,     label: 'NHS',    url: 'https://www.nhs.uk/conditions/' },
+  { id: 'nih',     re: /\bNIH\b|MedlinePlus|National Institutes of Health/i, label: 'NIH / MedlinePlus', url: 'https://medlineplus.gov/' },
+  { id: 'icd',     re: /\bICD-?(10|11)\b/i,                     label: 'ICD-11',url: 'https://icd.who.int/' },
+  { id: 'bnf',     re: /\bBNF\b|British National Formulary/i,  label: 'BNF',    url: 'https://bnf.nice.org.uk/' },
+  { id: 'ema',     re: /\bEMA\b|European Medicines Agency/i,   label: 'EMA',    url: 'https://www.ema.europa.eu/en/medicines' },
+  { id: 'mayo',    re: /Mayo Clinic/i,                          label: 'Mayo Clinic', url: 'https://www.mayoclinic.org/diseases-conditions' },
+  { id: 'cochrane',re: /Cochrane/i,                             label: 'Cochrane',    url: 'https://www.cochranelibrary.com/' },
+  { id: 'sie',     re: /\bSIE\b|Società Italiana di Endocrinologia/i, label: 'SIE', url: 'https://www.societaitalianadiendocrinologia.it/' },
+  { id: 'sid',     re: /\bSID\b|Società Italiana di Diabetologia/i,   label: 'SID', url: 'https://www.siditalia.it/' },
+  { id: 'ada',     re: /\bADA\b|American Diabetes Association/i,      label: 'ADA', url: 'https://diabetes.org/about-diabetes' },
+  { id: 'eta',     re: /\bETA\b|European Thyroid Association/i,       label: 'ETA', url: 'https://www.eurothyroid.com/' },
+  { id: 'es',      re: /Endocrine Society/i,                          label: 'Endocrine Society', url: 'https://www.endocrine.org/patient-engagement' },
+];
+
+export function extractCitations(text: string): Citation[] {
+  if (!text) return [];
+  const out: Citation[] = [];
+  const seen = new Set<string>();
+  for (const p of CITATION_PATTERNS) {
+    if (p.re.test(text) && !seen.has(p.id)) {
+      seen.add(p.id);
+      out.push({ id: p.id, label: p.label, url: p.url });
+    }
+  }
+  return out;
+}
diff --git a/lib/audit.ts b/lib/audit.ts
new file mode 100644
index 0000000000000000000000000000000000000000..d15c2f6d1ab4fee6b02be18bf9fa76cc2fac37df
--- /dev/null
+++ b/lib/audit.ts
@@ -0,0 +1,135 @@
+/**
+ * MedOS audit log.
+ *
+ * Append-only record of security-relevant actions. Used for forensic
+ * review ("who changed the SMTP password yesterday?"), incident response,
+ * and compliance evidence. NOT for billing or analytics — keep the schema
+ * narrow and the cardinality bounded.
+ *
+ * Design rules:
+ *   - Failures NEVER throw. A broken audit log must not break the request.
+ *   - No PHI / PII in `meta`. Use ids, counts, durations, status codes only.
+ *   - Add new actions to AuditAction explicitly; do not accept arbitrary
+ *     strings (catches typos and prevents log explosion).
+ */
+
+import { getDb, genId } from './db';
+
+export type AuditAction =
+  // auth lifecycle
+  | 'login'
+  | 'login_failed'
+  | 'logout'
+  | 'register'
+  | 'verify_email'
+  | 'password_reset_request'
+  | 'password_reset'
+  | 'password_change'
+  | 'delete_account'
+  // admin
+  | 'admin_login'
+  | 'admin_action'
+  | 'admin_user_delete'
+  | 'admin_user_reset_password'
+  | 'admin_config_update'
+  | 'token_rotate'
+  // user data
+  | 'chat'
+  | 'scan'
+  | 'health_data_write'
+  | 'health_data_delete'
+  | 'settings_update'
+  | 'export_data';
+
+export interface AuditEntry {
+  userId?: string | null;
+  action: AuditAction;
+  ip?: string | null;
+  meta?: Record<string, any>;
+}
+
+/**
+ * Write an audit entry. Synchronous SQLite write — cheap on local FS.
+ * Wrapped in try/catch so a logging failure can never propagate.
+ */
+export function auditLog(entry: AuditEntry): void {
+  try {
+    const db = getDb();
+    db.prepare(
+      `INSERT INTO audit_log (id, user_id, action, ip, meta)
+       VALUES (?, ?, ?, ?, ?)`,
+    ).run(
+      genId(),
+      entry.userId || null,
+      entry.action,
+      entry.ip || null,
+      JSON.stringify(entry.meta || {}),
+    );
+  } catch (e: any) {
+    console.error('[Audit] write failed:', e?.message);
+  }
+}
+
+/**
+ * Page through the audit log for the admin UI. Filter by user, action,
+ * and time range; default page size 50, hard cap 500.
+ */
+export function queryAudit(opts: {
+  userId?: string;
+  action?: AuditAction;
+  since?: string; // ISO
+  limit?: number;
+  offset?: number;
+}): Array<{
+  id: string;
+  userId: string | null;
+  action: string;
+  ip: string | null;
+  meta: any;
+  createdAt: string;
+}> {
+  const limit = Math.min(Math.max(opts.limit ?? 50, 1), 500);
+  const offset = Math.max(opts.offset ?? 0, 0);
+
+  const where: string[] = [];
+  const params: any[] = [];
+  if (opts.userId) {
+    where.push('user_id = ?');
+    params.push(opts.userId);
+  }
+  if (opts.action) {
+    where.push('action = ?');
+    params.push(opts.action);
+  }
+  if (opts.since) {
+    where.push('created_at >= ?');
+    params.push(opts.since);
+  }
+  const whereSql = where.length ? `WHERE ${where.join(' AND ')}` : '';
+
+  const db = getDb();
+  const rows = db
+    .prepare(
+      `SELECT id, user_id, action, ip, meta, created_at
+       FROM audit_log
+       ${whereSql}
+       ORDER BY created_at DESC
+       LIMIT ? OFFSET ?`,
+    )
+    .all(...params, limit, offset) as any[];
+
+  return rows.map((r) => ({
+    id: r.id,
+    userId: r.user_id,
+    action: r.action,
+    ip: r.ip,
+    meta: (() => {
+      try {
+        return JSON.parse(r.meta);
+      } catch {
+        return {};
+      }
+    })(),
+    createdAt: r.created_at,
+  }));
+}
diff --git a/lib/auth-middleware.ts b/lib/auth-middleware.ts
new file mode 100644
index 0000000000000000000000000000000000000000..a7d21d9b82f0f106f96fccf5d3c6075e8be0f187
--- /dev/null
+++ b/lib/auth-middleware.ts
@@ -0,0 +1,38 @@
+import { getDb, pruneExpiredSessions } from './db';
+
+export interface AuthUser {
+  id: string;
+  email: string;
+  isAdmin: boolean;
+}
+
+export function authenticateRequest(req: Request): AuthUser | null {
+  const h = req.headers.get('authorization');
+  const token = h && h.startsWith('Bearer ') ? h.slice(7).trim() : null;
+  if (!token) return null;
+
+  const db = getDb();
+  pruneExpiredSessions();
+
+  // Deactivated accounts (is_active = 0) must not authenticate even if
+  // they still have a valid session token. The WHERE clause uses
+  // `COALESCE(..., 1)` so that on DBs where the v3 column has not yet
+  // been added the session still resolves — belt + braces for upgrades.
+  const row = db
+    .prepare(
+      `SELECT u.id, u.email, u.is_admin
+       FROM sessions s JOIN users u ON u.id = s.user_id
+       WHERE s.token = ?
+         AND s.expires_at > datetime('now')
+         AND COALESCE(u.is_active, 1) = 1`,
+    )
+    .get(token) as any;
+
+  return row ? { id: row.id, email: row.email, isAdmin: !!row.is_admin } : null;
+}
+
+/** Require admin — returns null if not admin. */
+export function requireAdmin(req: Request): AuthUser | null {
+  const user = authenticateRequest(req);
+  return user?.isAdmin ? user : null;
+}
diff --git a/lib/crypto.ts b/lib/crypto.ts
new file mode 100644
index 0000000000000000000000000000000000000000..7693650a897ddd6f7a966797eca9862c55dea9ac
--- /dev/null
+++ b/lib/crypto.ts
@@ -0,0 +1,97 @@
+/**
+ * MedOS at-rest encryption helpers.
+ *
+ * Used to wrap user-provided secrets (BYO Hugging Face token, etc.)
+ * before persisting them in SQLite. The master key is derived from
+ * `ENCRYPTION_KEY` (preferred) or `ADMIN_PASSWORD` (dev fallback).
+ *
+ * Algorithm: AES-256-GCM, 12-byte IV, 16-byte auth tag.
+ * Wire format: "v1:<iv-b64>:<tag-b64>:<data-b64>"
+ *
+ * The version prefix is intentional: it lets us migrate to a new
+ * algorithm or KDF later ("v2:...") without breaking previously
+ * encrypted rows. decryptString() falls back to plaintext if it
+ * cannot recognise the version prefix — useful when migrating an
+ * existing database that stored values in the clear.
+ */
+
+import crypto from 'crypto';
+
+const ALG = 'aes-256-gcm';
+const IV_LEN = 12;
+const VERSION = 'v1';
+
+let _cachedKey: Buffer | null = null;
+
+function getMasterKey(): Buffer {
+  if (_cachedKey) return _cachedKey;
+  const raw =
+    process.env.ENCRYPTION_KEY ||
+    process.env.ADMIN_PASSWORD ||
+    'medos-default-dev-key-please-set-ENCRYPTION_KEY';
+  if (!process.env.ENCRYPTION_KEY) {
+    // Loud, one-time warning so operators know the deployment is using
+    // the development fallback. Never silently accept this in prod.
+    console.warn(
+      '[crypto] ENCRYPTION_KEY is not set — derived a fallback key from ADMIN_PASSWORD. Set ENCRYPTION_KEY (32 random bytes hex) before going to production.',
+    );
+  }
+  _cachedKey = crypto.createHash('sha256').update(raw).digest();
+  return _cachedKey;
+}
+
+/** Encrypt a UTF-8 string. Returns '' for empty input. */
+export function encryptString(plain: string): string {
+  if (!plain) return '';
+  const key = getMasterKey();
+  const iv = crypto.randomBytes(IV_LEN);
+  const cipher = crypto.createCipheriv(ALG, key, iv);
+  const enc = Buffer.concat([cipher.update(plain, 'utf8'), cipher.final()]);
+  const tag = cipher.getAuthTag();
+  return `${VERSION}:${iv.toString('base64')}:${tag.toString('base64')}:${enc.toString('base64')}`;
+}
+
+/**
+ * Decrypt a string produced by encryptString(). If the payload does not
+ * carry a recognised version prefix we assume it is legacy plaintext and
+ * return it unchanged — supports zero-downtime backfill.
+ */
+export function decryptString(payload: string): string {
+  if (!payload) return '';
+  const parts = payload.split(':');
+  if (parts[0] !== VERSION || parts.length !== 4) return payload;
+  try {
+    const [, ivB, tagB, dataB] = parts;
+    const key = getMasterKey();
+    const iv = Buffer.from(ivB, 'base64');
+    const tag = Buffer.from(tagB, 'base64');
+    const data = Buffer.from(dataB, 'base64');
+    const decipher = crypto.createDecipheriv(ALG, key, iv);
+    decipher.setAuthTag(tag);
+    const dec = Buffer.concat([decipher.update(data), decipher.final()]);
+    return dec.toString('utf8');
+  } catch (e: any) {
+    console.error('[crypto] decryptString failed:', e?.message);
+    return '';
+  }
+}
+
+/**
+ * Mask a secret for display. Keeps the last `keepLast` characters so the
+ * operator can recognise which token is configured without exposing it.
+ *
+ *   redact('hf_aBcDeFgHiJ') -> '••••HiJ'
+ */
+export function redact(value: string | undefined | null, keepLast = 4): string {
+  if (!value) return '';
+  if (value.length <= keepLast) return '•'.repeat(8);
+  return `${'•'.repeat(8)}${value.slice(-keepLast)}`;
+}
+
+/** Constant-time string comparison — use for token/secret equality checks. */
+export function safeEqual(a: string, b: string): boolean {
+  const ab = Buffer.from(a, 'utf8');
+  const bb = Buffer.from(b, 'utf8');
+  if (ab.length !== bb.length) return false;
+  return crypto.timingSafeEqual(ab, bb);
+}
diff --git a/lib/db-adapter/index.ts b/lib/db-adapter/index.ts
new file mode 100644
index 0000000000000000000000000000000000000000..2daefd04af1d4cf661197fc9d6275e3ccf6f3156
--- /dev/null
+++ b/lib/db-adapter/index.ts
@@ -0,0 +1,55 @@
+/**
+ * Adapter selection — chooses Postgres or SQLite at runtime based on a
+ * SINGLE env var: DATABASE_URL.
+ *
+ * Selection rules (no extra config flags):
+ *
+ *   DATABASE_URL set and looks like postgres:
+ *     → PostgresAdapter
+ *
+ *   DATABASE_URL unset or invalid:
+ *     → SqliteAdapter at $DB_PATH (default /data/medos.db)
+ *
+ *   …UNLESS we appear to be running in production and the URL is
+ *   missing, in which case we refuse to start. The check is implicit
+ *   from NODE_ENV — no new flag required.
+ */
+
+import type { DbAdapter } from './interface';
+
+let cached: DbAdapter | null = null;
+
+/** Returns the singleton adapter for this process. */
+export function getDbAdapter(): DbAdapter {
+  if (cached) return cached;
+
+  const raw = (process.env.DATABASE_URL || '').trim();
+  const looksPg = /^postgres(ql)?:\/\//.test(raw);
+
+  if (looksPg) {
+    // Lazy require so the SQLite-only deploys don't pull in pg's deps.
+    const { PostgresAdapter } = require('./postgres') as typeof import('./postgres');
+    cached = new PostgresAdapter(raw);
+    return cached;
+  }
+
+  if (process.env.NODE_ENV === 'production') {
+    throw new Error(
+      'Production deploy detected (NODE_ENV=production) but DATABASE_URL ' +
+        'is unset or invalid. Refusing to fall back to SQLite. ' +
+        'See 9-HuggingFace-Global/docs/DEPLOYMENT_DB.md.',
+    );
+  }
+
+  const { SqliteAdapter } = require('./sqlite') as typeof import('./sqlite');
+  cached = new SqliteAdapter(process.env.DB_PATH || '/data/medos.db');
+  return cached;
+}
+
+/** Test-only: swap in a custom adapter (e.g., an in-memory fake). */
+export function setDbAdapterForTests(adapter: DbAdapter | null): void {
+  cached = adapter;
+}
+
+export type { DbAdapter } from './interface';
+export type * from './types';
diff --git a/lib/db-adapter/interface.ts b/lib/db-adapter/interface.ts
new file mode 100644
index 0000000000000000000000000000000000000000..a3c12551dfe1d4d0692525fae08a5d811a917435
--- /dev/null
+++ b/lib/db-adapter/interface.ts
@@ -0,0 +1,155 @@
+/**
+ * Async DbAdapter — the single repository contract every route handler
+ * uses to talk to the database. Two implementations exist:
+ *
+ *   - PostgresAdapter   (production, behind DATABASE_URL)
+ *   - SqliteAdapter     (fallback, file at $DB_PATH)
+ *
+ * Both speak the same SQL semantics by storing timestamps as ISO strings
+ * and normalising email to lowercase at write time. Differences live
+ * inside each implementation and inside the migration files.
+ *
+ * Edits to this interface affect both drivers — keep it lean. New
+ * routes should add a method here rather than reach for `pg` or
+ * `better-sqlite3` directly.
+ */
+
+import type {
+  AuditEntryRow,
+  ChatHistoryRow,
+  HealthDataRow,
+  NewAuditEntry,
+  NewChatHistory,
+  NewHealthData,
+  NewScanLog,
+  NewUserInput,
+  SessionWithUserRow,
+  UserPublicRow,
+  UserRow,
+  UserSettingsRow,
+  UserSettingsUpdate,
+} from './types';
+
+export interface DbAdapter {
+  /* ---------- lifecycle ---------- */
+
+  /** Run pending migrations idempotently. Safe to call at process start. */
+  migrate(): Promise<void>;
+
+  /**
+   * Seed the default admin if it doesn't already exist. Reads
+   * ADMIN_EMAIL / ADMIN_PASSWORD from env. Refuses to seed with the
+   * legacy "admin123456" default when NODE_ENV=production.
+   */
+  seedAdmin(): Promise<void>;
+
+  /** Close all connections / handles. Used in tests and on shutdown. */
+  close(): Promise<void>;
+
+  /** Identifies the active driver — useful for logs and `/api/health`. */
+  driver(): 'postgres' | 'sqlite';
+
+  /* ---------- users ---------- */
+
+  findUserByEmail(email: string): Promise<UserRow | null>;
+  findUserById(id: string): Promise<UserRow | null>;
+  findUserPublicById(id: string): Promise<UserPublicRow | null>;
+
+  insertUser(user: NewUserInput): Promise<void>;
+
+  /** Replace the bcrypt hash. */
+  updateUserPassword(id: string, passwordHash: string): Promise<void>;
+
+  /** Set or clear the 6-digit email-verification code + expiry. */
+  setVerificationCode(
+    id: string,
+    code: string | null,
+    expires: string | null,
+  ): Promise<void>;
+
+  /** Mark the email verified and clear the verification code. */
+  markEmailVerified(id: string): Promise<void>;
+
+  /** Set or clear the 6-digit password-reset token + expiry. */
+  setResetToken(
+    id: string,
+    token: string | null,
+    expires: string | null,
+  ): Promise<void>;
+
+  /** Best-effort timestamp update on successful login. */
+  setLastLogin(id: string): Promise<void>;
+
+  /**
+   * Hard-delete a user. Health data, chat history, settings, and
+   * sessions are removed by ON DELETE CASCADE. Audit log entries are
+   * intentionally not cascaded — they retain forensic value.
+   */
+  deleteUser(id: string): Promise<void>;
+
+  /* ---------- sessions ---------- */
+
+  insertSession(
+    token: string,
+    userId: string,
+    expiresAt: string,
+  ): Promise<void>;
+
+  /**
+   * Single lookup used by every authenticated request. Returns the
+   * joined session + user row when the session is unexpired and the
+   * user is active; null otherwise.
+   */
+  findSessionWithUser(token: string): Promise<SessionWithUserRow | null>;
+
+  deleteSession(token: string): Promise<void>;
+  deleteSessionsForUser(userId: string): Promise<void>;
+  pruneExpiredSessions(): Promise<void>;
+
+  /* ---------- audit log ---------- */
+
+  insertAuditLog(entry: NewAuditEntry): Promise<void>;
+
+  /**
+   * Recent audit entries for a single user. Used by the admin
+   * dashboard. The full audit table is large; bound the page size at
+   * the route layer.
+   */
+  listAuditForUser(userId: string, limit: number): Promise<AuditEntryRow[]>;
+
+  /* ---------- health data ---------- */
+
+  insertHealthData(input: NewHealthData & { id: string }): Promise<void>;
+  listHealthDataForUser(userId: string, type?: string): Promise<HealthDataRow[]>;
+  deleteHealthData(id: string, userId: string): Promise<void>;
+
+  /* ---------- chat history ---------- */
+
+  insertChatHistory(input: NewChatHistory): Promise<void>;
+  listChatHistoryForUser(userId: string, limit: number): Promise<ChatHistoryRow[]>;
+  getChatHistory(id: string, userId: string): Promise<ChatHistoryRow | null>;
+  deleteChatHistory(id: string, userId: string): Promise<void>;
+
+  /* ---------- user settings ---------- */
+
+  getUserSettings(userId: string): Promise<UserSettingsRow | null>;
+  upsertUserSettings(update: UserSettingsUpdate): Promise<void>;
+
+  /* ---------- scan log ---------- */
+
+  insertScanLog(entry: NewScanLog): Promise<void>;
+
+  /* ---------- admin ---------- */
+
+  /** Page through users for the admin dashboard. */
+  listUsers(opts: { limit: number; offset: number }): Promise<UserPublicRow[]>;
+  countUsers(): Promise<number>;
+
+  setUserActive(
+    id: string,
+    isActive: boolean,
+    disabledReason?: string | null,
+  ): Promise<void>;
+
+  setUserAdmin(id: string, isAdmin: boolean): Promise<void>;
+}
diff --git a/lib/db-adapter/migrations/postgres/001_init.sql b/lib/db-adapter/migrations/postgres/001_init.sql
new file mode 100644
index 0000000000000000000000000000000000000000..aad2ff662cb91f6f5d398816c38dc6a15ff4a62c
--- /dev/null
+++ b/lib/db-adapter/migrations/postgres/001_init.sql
@@ -0,0 +1,59 @@
+-- 001_init.sql (Postgres)
+--
+-- Initial schema, Postgres dialect. Mirrors the SQLite version row-for-row.
+--
+-- Dialect notes vs SQLite:
+--   * BOOLEAN replaces INTEGER 0/1 for boolean-shaped columns.
+--   * Timestamps are TEXT (ISO 8601) on both drivers so the JS layer
+--     can compare them the same way (the alternative — TIMESTAMPTZ —
+--     would force the SQLite path to do its own string parsing).
+--   * Case-insensitive email uniqueness is a LOWER(email) functional
+--     index here instead of COLLATE NOCASE.
+--   * No PRAGMA — migration tracking uses the schema_migrations table
+--     created by the runner.
+
+CREATE TABLE IF NOT EXISTS users (
+  id                    TEXT PRIMARY KEY,
+  email                 TEXT NOT NULL,
+  password              TEXT NOT NULL,
+  display_name          TEXT,
+  email_verified        BOOLEAN NOT NULL DEFAULT FALSE,
+  is_admin              BOOLEAN NOT NULL DEFAULT FALSE,
+  verification_code     TEXT,
+  verification_expires  TEXT,
+  reset_token           TEXT,
+  reset_expires         TEXT,
+  created_at            TEXT NOT NULL DEFAULT to_char(now() AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS"Z"'),
+  updated_at            TEXT NOT NULL DEFAULT to_char(now() AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS"Z"')
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS idx_users_email_lower ON users (LOWER(email));
+
+CREATE TABLE IF NOT EXISTS sessions (
+  token       TEXT PRIMARY KEY,
+  user_id     TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  expires_at  TEXT NOT NULL,
+  created_at  TEXT NOT NULL DEFAULT to_char(now() AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS"Z"')
+);
+
+CREATE TABLE IF NOT EXISTS health_data (
+  id          TEXT PRIMARY KEY,
+  user_id     TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  type        TEXT NOT NULL,
+  data        TEXT NOT NULL,
+  created_at  TEXT NOT NULL DEFAULT to_char(now() AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS"Z"'),
+  updated_at  TEXT NOT NULL DEFAULT to_char(now() AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS"Z"')
+);
+
+CREATE TABLE IF NOT EXISTS chat_history (
+  id          TEXT PRIMARY KEY,
+  user_id     TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  preview     TEXT,
+  messages    TEXT NOT NULL,
+  topic       TEXT,
+  created_at  TEXT NOT NULL DEFAULT to_char(now() AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS"Z"')
+);
+
+CREATE INDEX IF NOT EXISTS idx_health_user_type ON health_data(user_id, type);
+CREATE INDEX IF NOT EXISTS idx_chat_user ON chat_history(user_id, created_at DESC);
+CREATE INDEX IF NOT EXISTS idx_sessions_expires ON sessions(expires_at);
diff --git a/lib/db-adapter/migrations/postgres/002_isolation.sql b/lib/db-adapter/migrations/postgres/002_isolation.sql
new file mode 100644
index 0000000000000000000000000000000000000000..2db717348720518a6a0a97f6da7d7729a4a04333
--- /dev/null
+++ b/lib/db-adapter/migrations/postgres/002_isolation.sql
@@ -0,0 +1,40 @@
+-- 002_isolation.sql (Postgres)
+--
+-- Per-user isolation tables. Mirrors the SQLite v2 block.
+
+CREATE TABLE IF NOT EXISTS user_settings (
+  user_id            TEXT PRIMARY KEY REFERENCES users(id) ON DELETE CASCADE,
+  language           TEXT,
+  country            TEXT,
+  units              TEXT,
+  default_model      TEXT,
+  theme              TEXT,
+  ehr                TEXT NOT NULL DEFAULT '{}',
+  hf_token_encrypted TEXT,
+  updated_at         TEXT NOT NULL DEFAULT to_char(now() AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS"Z"')
+);
+
+CREATE TABLE IF NOT EXISTS audit_log (
+  id          TEXT PRIMARY KEY,
+  user_id     TEXT,
+  action      TEXT NOT NULL,
+  ip          TEXT,
+  meta        TEXT NOT NULL DEFAULT '{}',
+  created_at  TEXT NOT NULL DEFAULT to_char(now() AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS"Z"')
+);
+
+CREATE INDEX IF NOT EXISTS idx_audit_user_time ON audit_log(user_id, created_at DESC);
+CREATE INDEX IF NOT EXISTS idx_audit_action_time ON audit_log(action, created_at DESC);
+
+CREATE TABLE IF NOT EXISTS scan_log (
+  id          TEXT PRIMARY KEY,
+  user_id     TEXT,
+  ip          TEXT,
+  status      INTEGER NOT NULL,
+  bytes       INTEGER NOT NULL DEFAULT 0,
+  latency_ms  INTEGER NOT NULL DEFAULT 0,
+  model       TEXT,
+  created_at  TEXT NOT NULL DEFAULT to_char(now() AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS"Z"')
+);
+
+CREATE INDEX IF NOT EXISTS idx_scan_user_time ON scan_log(user_id, created_at DESC);
diff --git a/lib/db-adapter/migrations/postgres/003_admin_flags.sql b/lib/db-adapter/migrations/postgres/003_admin_flags.sql
new file mode 100644
index 0000000000000000000000000000000000000000..16a488fae0d8dddeacec2889b3566c0683deb7c6
--- /dev/null
+++ b/lib/db-adapter/migrations/postgres/003_admin_flags.sql
@@ -0,0 +1,14 @@
+-- 003_admin_flags.sql (Postgres)
+--
+-- Admin user-management columns: is_active, last_login_at, disabled_reason.
+-- All ADDITIVE — every column ships with a DEFAULT so pre-v3 rows are
+-- fully populated without a backfill step.
+--
+-- Postgres supports IF NOT EXISTS on ADD COLUMN, so the runner does NOT
+-- need its sqlite-style per-statement try/catch here.
+
+ALTER TABLE users ADD COLUMN IF NOT EXISTS is_active BOOLEAN NOT NULL DEFAULT TRUE;
+ALTER TABLE users ADD COLUMN IF NOT EXISTS last_login_at TEXT;
+ALTER TABLE users ADD COLUMN IF NOT EXISTS disabled_reason TEXT;
+
+CREATE INDEX IF NOT EXISTS idx_users_is_active ON users(is_active);
diff --git a/lib/db-adapter/migrations/run.ts b/lib/db-adapter/migrations/run.ts
new file mode 100644
index 0000000000000000000000000000000000000000..706855a111a9080997492ec72487376803c15aad
--- /dev/null
+++ b/lib/db-adapter/migrations/run.ts
@@ -0,0 +1,123 @@
+/**
+ * Migration runner — driver-agnostic.
+ *
+ * Each adapter passes in a minimal "executor" interface; this module
+ * does the bookkeeping (which migrations to run, in what order, idempotently).
+ *
+ * Migrations live in:
+ *   ./sqlite/NNN_<name>.sql      run by SqliteAdapter
+ *   ./postgres/NNN_<name>.sql    run by PostgresAdapter
+ *
+ * Bookkeeping:
+ *   - Postgres: a `schema_migrations` table (id TEXT PRIMARY KEY, applied_at TEXT).
+ *   - SQLite:   `PRAGMA user_version` is kept in sync (legacy compat) AND
+ *               a parallel `schema_migrations` table is maintained for forward
+ *               compatibility. Either one is authoritative on its driver.
+ *
+ * Ordering is lexicographic on the filename — keep the `NNN_` prefix.
+ */
+
+import * as fs from 'fs';
+import * as path from 'path';
+
+/**
+ * Driver-agnostic SQL executor the runner needs. Each adapter implements
+ * this with whatever its native client provides.
+ */
+export interface MigrationExecutor {
+  /** Driver name; used to pick the migrations subdirectory. */
+  driver: 'sqlite' | 'postgres';
+
+  /** Execute a single SQL statement. */
+  exec(sql: string): Promise<void>;
+
+  /**
+   * Execute a single SQL statement, swallowing "already exists" errors.
+   * Required for SQLite's non-idempotent ALTER TABLE ADD COLUMN.
+   * Postgres can implement this as a thin wrapper around exec() because
+   * we use ADD COLUMN IF NOT EXISTS in the .sql files.
+   */
+  execTolerant(sql: string): Promise<void>;
+
+  /** Return the set of migration IDs already applied. */
+  appliedIds(): Promise<Set<string>>;
+
+  /** Record a migration ID as applied. */
+  recordApplied(id: string): Promise<void>;
+}
+
+/**
+ * Read all migration files for a given driver, sorted by filename.
+ */
+function listMigrations(driver: 'sqlite' | 'postgres'): Array<{ id: string; sql: string }> {
+  const dir = path.join(__dirname, driver);
+  if (!fs.existsSync(dir)) return [];
+  return fs
+    .readdirSync(dir)
+    .filter((f) => f.endsWith('.sql'))
+    .sort()
+    .map((f) => ({
+      id: f.replace(/\.sql$/, ''),
+      sql: fs.readFileSync(path.join(dir, f), 'utf8'),
+    }));
+}
+
+/**
+ * Split a SQL file into individual statements. We intentionally use a
+ * simple split-on-semicolon: our migrations are hand-written, do not
+ * contain semicolons inside string literals, and do not use stored
+ * procedures or DO blocks. If that ever changes, switch to a real parser.
+ */
+function splitStatements(sql: string): string[] {
+  return sql
+    .split(/;\s*(?:\r?\n|$)/)
+    .map((s) => s.trim())
+    .filter((s) => s.length > 0 && !/^\s*--/.test(s));
+}
+
+/**
+ * Pending migrations (not yet applied), in order.
+ */
+async function pending(executor: MigrationExecutor): Promise<Array<{ id: string; sql: string }>> {
+  const all = listMigrations(executor.driver);
+  const applied = await executor.appliedIds();
+  return all.filter((m) => !applied.has(m.id));
+}
+
+/**
+ * Run all pending migrations for the given executor.
+ *
+ * `tolerantIds` lists migration IDs whose statements should be run with
+ * execTolerant() — the SQLite v3 admin-flags migration is the only such
+ * case today (ALTER TABLE ADD COLUMN is not idempotent on SQLite).
+ */
+export async function runMigrations(
+  executor: MigrationExecutor,
+  tolerantIds: Set<string> = new Set(),
+): Promise<{ applied: string[] }> {
+  const toRun = await pending(executor);
+  const appliedNow: string[] = [];
+
+  for (const migration of toRun) {
+    const statements = splitStatements(migration.sql);
+    const useTolerant = tolerantIds.has(migration.id);
+    for (const stmt of statements) {
+      if (useTolerant) {
+        await executor.execTolerant(stmt);
+      } else {
+        await executor.exec(stmt);
+      }
+    }
+    await executor.recordApplied(migration.id);
+    appliedNow.push(migration.id);
+  }
+
+  return { applied: appliedNow };
+}
+
+/**
+ * Standard set of tolerantIds for SQLite — currently just 003_admin_flags
+ * because SQLite's ALTER TABLE ADD COLUMN errors when the column already
+ * exists.
+ */
+export const SQLITE_TOLERANT_MIGRATIONS = new Set<string>(['003_admin_flags']);
diff --git a/lib/db-adapter/migrations/sqlite/001_init.sql b/lib/db-adapter/migrations/sqlite/001_init.sql
new file mode 100644
index 0000000000000000000000000000000000000000..02bb67cd4f3e11bb3c80737a7f475a0e1cf1297d
--- /dev/null
+++ b/lib/db-adapter/migrations/sqlite/001_init.sql
@@ -0,0 +1,53 @@
+-- 001_init.sql (SQLite)
+--
+-- Initial schema: users, sessions, health_data, chat_history.
+-- Equivalent to the v1 block in legacy lib/db.ts.
+--
+-- Run by lib/db-adapter/migrations/run.ts when the SQLite adapter
+-- selects this dialect. Each migration is wrapped in a transaction
+-- by the runner; do not BEGIN/COMMIT here.
+
+CREATE TABLE IF NOT EXISTS users (
+  id                    TEXT PRIMARY KEY,
+  email                 TEXT UNIQUE NOT NULL COLLATE NOCASE,
+  password              TEXT NOT NULL,
+  display_name          TEXT,
+  email_verified        INTEGER DEFAULT 0,
+  is_admin              INTEGER DEFAULT 0,
+  verification_code     TEXT,
+  verification_expires  TEXT,
+  reset_token           TEXT,
+  reset_expires         TEXT,
+  created_at            TEXT DEFAULT (datetime('now')),
+  updated_at            TEXT DEFAULT (datetime('now'))
+);
+
+CREATE TABLE IF NOT EXISTS sessions (
+  token       TEXT PRIMARY KEY,
+  user_id     TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  expires_at  TEXT NOT NULL,
+  created_at  TEXT DEFAULT (datetime('now'))
+);
+
+CREATE TABLE IF NOT EXISTS health_data (
+  id          TEXT PRIMARY KEY,
+  user_id     TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  type        TEXT NOT NULL,
+  data        TEXT NOT NULL,
+  created_at  TEXT DEFAULT (datetime('now')),
+  updated_at  TEXT DEFAULT (datetime('now'))
+);
+
+CREATE TABLE IF NOT EXISTS chat_history (
+  id          TEXT PRIMARY KEY,
+  user_id     TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  preview     TEXT,
+  messages    TEXT NOT NULL,
+  topic       TEXT,
+  created_at  TEXT DEFAULT (datetime('now'))
+);
+
+CREATE INDEX IF NOT EXISTS idx_health_user_type ON health_data(user_id, type);
+CREATE INDEX IF NOT EXISTS idx_chat_user ON chat_history(user_id, created_at DESC);
+CREATE INDEX IF NOT EXISTS idx_sessions_expires ON sessions(expires_at);
+CREATE INDEX IF NOT EXISTS idx_users_email ON users(email);
diff --git a/lib/db-adapter/migrations/sqlite/002_isolation.sql b/lib/db-adapter/migrations/sqlite/002_isolation.sql
new file mode 100644
index 0000000000000000000000000000000000000000..107b99bc2b1a2e0e8d8804980f5dc2b970af033d
--- /dev/null
+++ b/lib/db-adapter/migrations/sqlite/002_isolation.sql
@@ -0,0 +1,41 @@
+-- 002_isolation.sql (SQLite)
+--
+-- Per-user isolation tables: user_settings, audit_log, scan_log.
+-- Equivalent to the v2 block in legacy lib/db.ts.
+
+CREATE TABLE IF NOT EXISTS user_settings (
+  user_id            TEXT PRIMARY KEY REFERENCES users(id) ON DELETE CASCADE,
+  language           TEXT,
+  country            TEXT,
+  units              TEXT,
+  default_model      TEXT,
+  theme              TEXT,
+  ehr                TEXT NOT NULL DEFAULT '{}',
+  hf_token_encrypted TEXT,
+  updated_at         TEXT DEFAULT (datetime('now'))
+);
+
+CREATE TABLE IF NOT EXISTS audit_log (
+  id          TEXT PRIMARY KEY,
+  user_id     TEXT,
+  action      TEXT NOT NULL,
+  ip          TEXT,
+  meta        TEXT NOT NULL DEFAULT '{}',
+  created_at  TEXT DEFAULT (datetime('now'))
+);
+
+CREATE INDEX IF NOT EXISTS idx_audit_user_time ON audit_log(user_id, created_at DESC);
+CREATE INDEX IF NOT EXISTS idx_audit_action_time ON audit_log(action, created_at DESC);
+
+CREATE TABLE IF NOT EXISTS scan_log (
+  id          TEXT PRIMARY KEY,
+  user_id     TEXT,
+  ip          TEXT,
+  status      INTEGER NOT NULL,
+  bytes       INTEGER NOT NULL DEFAULT 0,
+  latency_ms  INTEGER NOT NULL DEFAULT 0,
+  model       TEXT,
+  created_at  TEXT DEFAULT (datetime('now'))
+);
+
+CREATE INDEX IF NOT EXISTS idx_scan_user_time ON scan_log(user_id, created_at DESC);
diff --git a/lib/db-adapter/migrations/sqlite/003_admin_flags.sql b/lib/db-adapter/migrations/sqlite/003_admin_flags.sql
new file mode 100644
index 0000000000000000000000000000000000000000..af13b92437dbd8755e127ad27cf710475f24b936
--- /dev/null
+++ b/lib/db-adapter/migrations/sqlite/003_admin_flags.sql
@@ -0,0 +1,17 @@
+-- 003_admin_flags.sql (SQLite)
+--
+-- Admin user-management columns: is_active, last_login_at, disabled_reason.
+-- All ADDITIVE — every column ships with a DEFAULT so pre-v3 rows are
+-- fully populated without a backfill step.
+--
+-- SQLite's ALTER TABLE ADD COLUMN is not idempotent (it errors if the
+-- column already exists), so the runner uses CREATE TABLE IF NOT EXISTS
+-- probes elsewhere. For this file we accept ALTER errors when re-run
+-- via the runner's per-statement try/catch on idempotent migrations
+-- (sqlite-only behavior; see run.ts).
+
+ALTER TABLE users ADD COLUMN is_active INTEGER NOT NULL DEFAULT 1;
+ALTER TABLE users ADD COLUMN last_login_at TEXT;
+ALTER TABLE users ADD COLUMN disabled_reason TEXT;
+
+CREATE INDEX IF NOT EXISTS idx_users_is_active ON users(is_active);
diff --git a/lib/db-adapter/postgres.ts b/lib/db-adapter/postgres.ts
new file mode 100644
index 0000000000000000000000000000000000000000..a192dccd4365c9d2c58cb2ed2c3dc2abef74ebba
--- /dev/null
+++ b/lib/db-adapter/postgres.ts
@@ -0,0 +1,64 @@
+/**
+ * PostgresAdapter — stub for batch 5 of the DB migration.
+ *
+ * The real implementation uses `pg` (added to package.json in batch 6)
+ * and wires up the schema_migrations bookkeeping table. Until then this
+ * stub keeps the module graph type-correct so the Next.js build passes;
+ * constructing it throws at runtime, but nothing in the app calls
+ * getDbAdapter() yet — the legacy lib/db.ts path is still authoritative.
+ */
+
+import type { DbAdapter } from './interface';
+
+export class PostgresAdapter implements DbAdapter {
+  constructor(_databaseUrl: string) {
+    throw new Error(
+      'PostgresAdapter is not implemented yet (batch 5 of the DB migration). ' +
+        'See 9-HuggingFace-Global/docs/DEPLOYMENT_DB.md.',
+    );
+  }
+
+  driver(): 'postgres' { return 'postgres'; }
+  migrate(): Promise<void> { throw new Error('not implemented'); }
+  seedAdmin(): Promise<void> { throw new Error('not implemented'); }
+  close(): Promise<void> { throw new Error('not implemented'); }
+
+  findUserByEmail(): Promise<any> { throw new Error('not implemented'); }
+  findUserById(): Promise<any> { throw new Error('not implemented'); }
+  findUserPublicById(): Promise<any> { throw new Error('not implemented'); }
+  insertUser(): Promise<void> { throw new Error('not implemented'); }
+  updateUserPassword(): Promise<void> { throw new Error('not implemented'); }
+  setVerificationCode(): Promise<void> { throw new Error('not implemented'); }
+  markEmailVerified(): Promise<void> { throw new Error('not implemented'); }
+  setResetToken(): Promise<void> { throw new Error('not implemented'); }
+  setLastLogin(): Promise<void> { throw new Error('not implemented'); }
+  deleteUser(): Promise<void> { throw new Error('not implemented'); }
+
+  insertSession(): Promise<void> { throw new Error('not implemented'); }
+  findSessionWithUser(): Promise<any> { throw new Error('not implemented'); }
+  deleteSession(): Promise<void> { throw new Error('not implemented'); }
+  deleteSessionsForUser(): Promise<void> { throw new Error('not implemented'); }
+  pruneExpiredSessions(): Promise<void> { throw new Error('not implemented'); }
+
+  insertAuditLog(): Promise<void> { throw new Error('not implemented'); }
+  listAuditForUser(): Promise<any[]> { throw new Error('not implemented'); }
+
+  insertHealthData(): Promise<void> { throw new Error('not implemented'); }
+  listHealthDataForUser(): Promise<any[]> { throw new Error('not implemented'); }
+  deleteHealthData(): Promise<void> { throw new Error('not implemented'); }
+
+  insertChatHistory(): Promise<void> { throw new Error('not implemented'); }
+  listChatHistoryForUser(): Promise<any[]> { throw new Error('not implemented'); }
+  getChatHistory(): Promise<any> { throw new Error('not implemented'); }
+  deleteChatHistory(): Promise<void> { throw new Error('not implemented'); }
+
+  getUserSettings(): Promise<any> { throw new Error('not implemented'); }
+  upsertUserSettings(): Promise<void> { throw new Error('not implemented'); }
+
+  insertScanLog(): Promise<void> { throw new Error('not implemented'); }
+
+  listUsers(): Promise<any[]> { throw new Error('not implemented'); }
+  countUsers(): Promise<number> { throw new Error('not implemented'); }
+  setUserActive(): Promise<void> { throw new Error('not implemented'); }
+  setUserAdmin(): Promise<void> { throw new Error('not implemented'); }
+}
diff --git a/lib/db-adapter/sqlite.ts b/lib/db-adapter/sqlite.ts
new file mode 100644
index 0000000000000000000000000000000000000000..917a40395ab7bea30ec3bb3995815165694038b5
--- /dev/null
+++ b/lib/db-adapter/sqlite.ts
@@ -0,0 +1,68 @@
+/**
+ * SqliteAdapter — stub for batches 4-5 of the DB migration.
+ *
+ * The real implementation lands in batch 4 and wraps the existing
+ * better-sqlite3 code from lib/db.ts behind the async DbAdapter
+ * interface. Until then this stub keeps the module graph type-correct
+ * so the Next.js build passes; constructing it throws at runtime, but
+ * nothing in the app calls getDbAdapter() yet — the legacy lib/db.ts
+ * path is still authoritative.
+ */
+
+import type { DbAdapter } from './interface';
+
+export class SqliteAdapter implements DbAdapter {
+  constructor(_dbPath: string) {
+    throw new Error(
+      'SqliteAdapter is not implemented yet (batch 4 of the DB migration). ' +
+        'The app currently uses lib/db.ts. ' +
+        'See 9-HuggingFace-Global/docs/DEPLOYMENT_DB.md.',
+    );
+  }
+
+  // Stub bodies — TS requires the interface surface to be present even
+  // though the constructor above prevents any instance from existing.
+  driver(): 'sqlite' { return 'sqlite'; }
+  migrate(): Promise<void> { throw new Error('not implemented'); }
+  seedAdmin(): Promise<void> { throw new Error('not implemented'); }
+  close(): Promise<void> { throw new Error('not implemented'); }
+
+  findUserByEmail(): Promise<any> { throw new Error('not implemented'); }
+  findUserById(): Promise<any> { throw new Error('not implemented'); }
+  findUserPublicById(): Promise<any> { throw new Error('not implemented'); }
+  insertUser(): Promise<void> { throw new Error('not implemented'); }
+  updateUserPassword(): Promise<void> { throw new Error('not implemented'); }
+  setVerificationCode(): Promise<void> { throw new Error('not implemented'); }
+  markEmailVerified(): Promise<void> { throw new Error('not implemented'); }
+  setResetToken(): Promise<void> { throw new Error('not implemented'); }
+  setLastLogin(): Promise<void> { throw new Error('not implemented'); }
+  deleteUser(): Promise<void> { throw new Error('not implemented'); }
+
+  insertSession(): Promise<void> { throw new Error('not implemented'); }
+  findSessionWithUser(): Promise<any> { throw new Error('not implemented'); }
+  deleteSession(): Promise<void> { throw new Error('not implemented'); }
+  deleteSessionsForUser(): Promise<void> { throw new Error('not implemented'); }
+  pruneExpiredSessions(): Promise<void> { throw new Error('not implemented'); }
+
+  insertAuditLog(): Promise<void> { throw new Error('not implemented'); }
+  listAuditForUser(): Promise<any[]> { throw new Error('not implemented'); }
+
+  insertHealthData(): Promise<void> { throw new Error('not implemented'); }
+  listHealthDataForUser(): Promise<any[]> { throw new Error('not implemented'); }
+  deleteHealthData(): Promise<void> { throw new Error('not implemented'); }
+
+  insertChatHistory(): Promise<void> { throw new Error('not implemented'); }
+  listChatHistoryForUser(): Promise<any[]> { throw new Error('not implemented'); }
+  getChatHistory(): Promise<any> { throw new Error('not implemented'); }
+  deleteChatHistory(): Promise<void> { throw new Error('not implemented'); }
+
+  getUserSettings(): Promise<any> { throw new Error('not implemented'); }
+  upsertUserSettings(): Promise<void> { throw new Error('not implemented'); }
+
+  insertScanLog(): Promise<void> { throw new Error('not implemented'); }
+
+  listUsers(): Promise<any[]> { throw new Error('not implemented'); }
+  countUsers(): Promise<number> { throw new Error('not implemented'); }
+  setUserActive(): Promise<void> { throw new Error('not implemented'); }
+  setUserAdmin(): Promise<void> { throw new Error('not implemented'); }
+}
diff --git a/lib/db-adapter/types.ts b/lib/db-adapter/types.ts
new file mode 100644
index 0000000000000000000000000000000000000000..1337cbbfe9f1a172cf868e1c6a9263cfe869a39b
--- /dev/null
+++ b/lib/db-adapter/types.ts
@@ -0,0 +1,159 @@
+/**
+ * Row types shared by the Postgres and SQLite adapters.
+ *
+ * These mirror the persisted columns 1:1 in snake_case. The repository
+ * methods return these rows directly so route handlers don't have to
+ * know which driver is underneath. ISO-8601 strings are used for every
+ * timestamp on both drivers — Postgres stores them as TIMESTAMPTZ, the
+ * adapter casts to/from text at the boundary, and SQLite keeps the
+ * existing text format. This means timestamp comparisons happen in JS,
+ * not SQL — a small performance cost in exchange for one less dialect
+ * difference to maintain.
+ */
+
+export interface UserRow {
+  id: string;
+  email: string;
+  password: string;                  // bcrypt hash
+  display_name: string | null;
+  email_verified: boolean;
+  is_admin: boolean;
+  is_active: boolean;
+  verification_code: string | null;
+  verification_expires: string | null;
+  reset_token: string | null;
+  reset_expires: string | null;
+  last_login_at: string | null;
+  disabled_reason: string | null;
+  created_at: string;
+  updated_at: string;
+}
+
+/** Minimal projection used by /api/auth/me and authenticateRequest(). */
+export interface UserPublicRow {
+  id: string;
+  email: string;
+  display_name: string | null;
+  email_verified: boolean;
+  is_admin: boolean;
+  is_active: boolean;
+  created_at: string;
+}
+
+export interface SessionRow {
+  token: string;
+  user_id: string;
+  expires_at: string;
+  created_at: string;
+}
+
+/** Result of joining sessions → users — what authenticateRequest needs. */
+export interface SessionWithUserRow {
+  // session
+  token: string;
+  expires_at: string;
+  // user (public projection)
+  user_id: string;
+  email: string;
+  display_name: string | null;
+  email_verified: boolean;
+  is_admin: boolean;
+  is_active: boolean;
+}
+
+export interface NewUserInput {
+  id: string;
+  email: string;                     // already lowercased by caller
+  passwordHash: string;
+  displayName: string | null;
+  verificationCode: string | null;
+  verificationExpires: string | null;
+}
+
+export interface AuditEntryRow {
+  id: string;
+  user_id: string | null;
+  action: string;
+  ip: string | null;
+  meta: Record<string, unknown>;
+  created_at: string;
+}
+
+export interface NewAuditEntry {
+  userId?: string | null;
+  action: string;
+  ip?: string | null;
+  meta?: Record<string, unknown>;
+}
+
+/* ---------- health data ---------- */
+
+export interface HealthDataRow {
+  id: string;
+  user_id: string;
+  type: string;
+  data: string;                      // JSON, kept as text — caller parses
+  created_at: string;
+  updated_at: string;
+}
+
+export interface NewHealthData {
+  userId: string;
+  type: string;
+  data: string;                      // already JSON-stringified
+}
+
+/* ---------- chat history ---------- */
+
+export interface ChatHistoryRow {
+  id: string;
+  user_id: string;
+  preview: string | null;
+  messages: string;                  // JSON
+  topic: string | null;
+  created_at: string;
+}
+
+export interface NewChatHistory {
+  id: string;
+  userId: string;
+  preview: string | null;
+  messages: string;                  // already JSON-stringified
+  topic: string | null;
+}
+
+/* ---------- user settings ---------- */
+
+export interface UserSettingsRow {
+  user_id: string;
+  language: string | null;
+  country: string | null;
+  units: string | null;
+  default_model: string | null;
+  theme: string | null;
+  ehr: string;                       // JSON, defaults to "{}"
+  hf_token_encrypted: string | null;
+  updated_at: string;
+}
+
+export interface UserSettingsUpdate {
+  userId: string;
+  language?: string | null;
+  country?: string | null;
+  units?: string | null;
+  defaultModel?: string | null;
+  theme?: string | null;
+  ehr?: string;
+  hfTokenEncrypted?: string | null;
+}
+
+/* ---------- scan log ---------- */
+
+export interface NewScanLog {
+  userId: string | null;
+  ip: string | null;
+  status: number;
+  bytes: number;
+  latencyMs: number;
+  model: string | null;
+}
diff --git a/lib/db.ts b/lib/db.ts
new file mode 100644
index 0000000000000000000000000000000000000000..c444bde70cf208846e31df5834aa7ead1429f093
--- /dev/null
+++ b/lib/db.ts
@@ -0,0 +1,242 @@
+/**
+ * MedOS database layer — SQLite via better-sqlite3.
+ *
+ * Architecture:
+ *   - SQLite, single file at `$DB_PATH` (/data/medos.db on HF Spaces).
+ *   - WAL mode for concurrent reads during SSE streaming.
+ *   - Auto-migration via PRAGMA user_version.
+ *   - All queries use parameterized statements (no SQL injection).
+ *
+ * Migration history:
+ *   v1  initial schema (users, sessions, health_data, chat_history)
+ *   v2  per-user isolation: user_settings, audit_log, scan_log
+ *   v3  admin user-management flags: is_active, last_login_at,
+ *       disabled_reason  (ADDITIVE — new columns default to a value that
+ *       leaves every v2 user indistinguishable from the pre-v3 state)
+ */
+
+import Database from 'better-sqlite3';
+import { randomUUID, randomInt } from 'crypto';
+
+const DB_PATH = process.env.DB_PATH || '/data/medos.db';
+
+let _db: Database.Database | null = null;
+
+export function getDb(): Database.Database {
+  if (_db) return _db;
+  _db = new Database(DB_PATH);
+  _db.pragma('journal_mode = WAL');
+  _db.pragma('busy_timeout = 5000');
+  _db.pragma('foreign_keys = ON');
+  runMigrations(_db);
+  seedAdmin();
+  return _db;
+}
+
+// ============================================================
+// Migrations — version-gated, idempotent, additive
+// ============================================================
+
+function runMigrations(db: Database.Database): void {
+  const version = db.pragma('user_version', { simple: true }) as number;
+
+  if (version < 1) {
+    db.exec(`
+      CREATE TABLE IF NOT EXISTS users (
+        id                    TEXT PRIMARY KEY,
+        email                 TEXT UNIQUE NOT NULL COLLATE NOCASE,
+        password              TEXT NOT NULL,
+        display_name          TEXT,
+        email_verified        INTEGER DEFAULT 0,
+        is_admin              INTEGER DEFAULT 0,
+        verification_code     TEXT,
+        verification_expires  TEXT,
+        reset_token           TEXT,
+        reset_expires         TEXT,
+        created_at            TEXT DEFAULT (datetime('now')),
+        updated_at            TEXT DEFAULT (datetime('now'))
+      );
+
+      CREATE TABLE IF NOT EXISTS sessions (
+        token       TEXT PRIMARY KEY,
+        user_id     TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+        expires_at  TEXT NOT NULL,
+        created_at  TEXT DEFAULT (datetime('now'))
+      );
+
+      CREATE TABLE IF NOT EXISTS health_data (
+        id          TEXT PRIMARY KEY,
+        user_id     TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+        type        TEXT NOT NULL,
+        data        TEXT NOT NULL,
+        created_at  TEXT DEFAULT (datetime('now')),
+        updated_at  TEXT DEFAULT (datetime('now'))
+      );
+
+      CREATE TABLE IF NOT EXISTS chat_history (
+        id          TEXT PRIMARY KEY,
+        user_id     TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+        preview     TEXT,
+        messages    TEXT NOT NULL,
+        topic       TEXT,
+        created_at  TEXT DEFAULT (datetime('now'))
+      );
+
+      CREATE INDEX IF NOT EXISTS idx_health_user_type ON health_data(user_id, type);
+      CREATE INDEX IF NOT EXISTS idx_chat_user ON chat_history(user_id, created_at DESC);
+      CREATE INDEX IF NOT EXISTS idx_sessions_expires ON sessions(expires_at);
+      CREATE INDEX IF NOT EXISTS idx_users_email ON users(email);
+
+      PRAGMA user_version = 1;
+    `);
+  }
+
+  if (version < 2) {
+    // v2: per-user isolation tables.
+    //
+    // user_settings   one row per user; holds preferences (language,
+    //                 country, units, theme, default model) plus the
+    //                 EHR profile JSON and an OPTIONAL BYO Hugging
+    //                 Face token stored encrypted at rest.
+    //
+    // audit_log       append-only security/forensic log. See lib/audit.ts.
+    //
+    // scan_log        per-call accounting for /api/scan so admins can
+    //                 see usage by user and detect runaway costs on the
+    //                 shared HF_TOKEN_INFERENCE quota.
+    db.exec(`
+      CREATE TABLE IF NOT EXISTS user_settings (
+        user_id            TEXT PRIMARY KEY REFERENCES users(id) ON DELETE CASCADE,
+        language           TEXT,
+        country            TEXT,
+        units              TEXT,
+        default_model      TEXT,
+        theme              TEXT,
+        ehr                TEXT NOT NULL DEFAULT '{}',
+        hf_token_encrypted TEXT,
+        updated_at         TEXT DEFAULT (datetime('now'))
+      );
+
+      CREATE TABLE IF NOT EXISTS audit_log (
+        id          TEXT PRIMARY KEY,
+        user_id     TEXT,
+        action      TEXT NOT NULL,
+        ip          TEXT,
+        meta        TEXT NOT NULL DEFAULT '{}',
+        created_at  TEXT DEFAULT (datetime('now'))
+      );
+      CREATE INDEX IF NOT EXISTS idx_audit_user_time ON audit_log(user_id, created_at DESC);
+      CREATE INDEX IF NOT EXISTS idx_audit_action_time ON audit_log(action, created_at DESC);
+
+      CREATE TABLE IF NOT EXISTS scan_log (
+        id          TEXT PRIMARY KEY,
+        user_id     TEXT,
+        ip          TEXT,
+        status      INTEGER NOT NULL,
+        bytes       INTEGER NOT NULL DEFAULT 0,
+        latency_ms  INTEGER NOT NULL DEFAULT 0,
+        model       TEXT,
+        created_at  TEXT DEFAULT (datetime('now'))
+      );
+      CREATE INDEX IF NOT EXISTS idx_scan_user_time ON scan_log(user_id, created_at DESC);
+
+      PRAGMA user_version = 2;
+    `);
+  }
+
+  if (version < 3) {
+    // v3 — admin user-management flags.
+    //
+    // Every column is added with a DEFAULT so existing rows are fully
+    // populated without a backfill step. We use column-presence probes
+    // (PRAGMA table_info) because ALTER TABLE ADD COLUMN is not
+    // idempotent on SQLite and we want the migration to survive
+    // partial-failure re-runs.
+    //
+    // NOTE: `is_active` defaults to 1, so all pre-v3 users remain
+    // enabled on upgrade. Admins can deactivate later via the
+    // user-management endpoint added in the same release.
+    const cols = db
+      .prepare(`PRAGMA table_info(users)`)
+      .all() as Array<{ name: string }>;
+    const has = (name: string) => cols.some((c) => c.name === name);
+
+    if (!has('is_active')) {
+      db.exec(`ALTER TABLE users ADD COLUMN is_active INTEGER NOT NULL DEFAULT 1;`);
+    }
+    if (!has('last_login_at')) {
+      db.exec(`ALTER TABLE users ADD COLUMN last_login_at TEXT;`);
+    }
+    if (!has('disabled_reason')) {
+      db.exec(`ALTER TABLE users ADD COLUMN disabled_reason TEXT;`);
+    }
+    db.exec(`
+      CREATE INDEX IF NOT EXISTS idx_users_is_active ON users(is_active);
+      PRAGMA user_version = 3;
+    `);
+  }
+}
+
+// ============================================================
+// Helpers
+// ============================================================
+
+export function genId(): string {
+  return randomUUID();
+}
+
+export function genToken(): string {
+  return randomUUID() + '-' + randomUUID();
+}
+
+/** 6-digit numeric verification code. */
+export function genVerificationCode(): string {
+  return String(randomInt(100000, 999999));
+}
+
+/** 15 minutes from now (for verification codes). */
+export function codeExpiry(): string {
+  return new Date(Date.now() + 15 * 60 * 1000).toISOString();
+}
+
+/** 1 hour from now (for password reset tokens). */
+export function resetExpiry(): string {
+  return new Date(Date.now() + 60 * 60 * 1000).toISOString();
+}
+
+/** 30 days from now (for sessions). */
+export function sessionExpiry(): string {
+  return new Date(Date.now() + 30 * 86400 * 1000).toISOString();
+}
+
+export function pruneExpiredSessions(): void {
+  const db = getDb();
+  db.prepare("DELETE FROM sessions WHERE expires_at < datetime('now')").run();
+}
+
+/**
+ * Seed the default admin account on first start. The admin email is
+ * read from ADMIN_EMAIL env (default: admin@medos.health) and the
+ * initial password from ADMIN_PASSWORD (default: admin123456).
+ *
+ * Change the password immediately after first login.
+ */
+export function seedAdmin(): void {
+  const db = getDb();
+  const adminEmail = (process.env.ADMIN_EMAIL || 'admin@medos.health').toLowerCase();
+  const adminPassword = process.env.ADMIN_PASSWORD || 'admin123456';
+
+  const existing = db.prepare('SELECT id FROM users WHERE email = ?').get(adminEmail);
+  if (existing) return; // Already seeded.
+
+  const bcrypt = require('bcryptjs');
+  const id = genId();
+  const hash = bcrypt.hashSync(adminPassword, 10);
+
+  db.prepare(
+    `INSERT INTO users (id, email, password, display_name, email_verified, is_admin)
+     VALUES (?, ?, ?, ?, 1, 1)`,
+  ).run(id, adminEmail, hash, 'Admin');
+
+  console.log(`[Admin] Default admin seeded: ${adminEmail}`);
+}
diff --git a/lib/email.ts b/lib/email.ts
new file mode 100644
index 0000000000000000000000000000000000000000..f32c351cb70771567f51499607c03ecaed9ebe36
--- /dev/null
+++ b/lib/email.ts
@@ -0,0 +1,246 @@
+/**
+ * MedOS email service.
+ *
+ * Backend selection (first one that has its env set wins):
+ *
+ *   1. Resend HTTP API   — when RESEND_API_KEY is set. Preferred on
+ *                          serverless because it's just HTTPS to
+ *                          api.resend.com (port 443 is never blocked)
+ *                          and errors come back as actionable JSON.
+ *   2. nodemailer SMTP   — when SMTP_HOST + SMTP_USER + SMTP_PASS are
+ *                          all set. Works with any provider.
+ *   3. Console fallback  — when nothing above is configured. Dumps the
+ *                          email body to stdout so dev work doesn't
+ *                          require any email setup at all. The
+ *                          verification code is visible in the server
+ *                          logs.
+ *
+ * Errors from the actual send (auth rejected, domain not verified,
+ * rate-limited, network) are logged to stderr with a clear prefix so
+ * they're greppable in container logs. The callers (register,
+ * forgot-password) treat email as best-effort and never block the
+ * user on it.
+ */
+
+import nodemailer from 'nodemailer';
+
+const FROM_EMAIL = process.env.FROM_EMAIL || 'MedOS <onboarding@resend.dev>';
+const APP_NAME = 'MedOS';
+const APP_URL = process.env.APP_URL || 'https://ruslanmv-medibot.hf.space';
+
+// ---------- Resend HTTP transport ----------
+
+const RESEND_API_KEY = process.env.RESEND_API_KEY;
+const RESEND_URL = 'https://api.resend.com/emails';
+
+async function sendViaResend(
+  to: string,
+  subject: string,
+  html: string,
+): Promise<boolean> {
+  try {
+    const res = await fetch(RESEND_URL, {
+      method: 'POST',
+      headers: {
+        Authorization: `Bearer ${RESEND_API_KEY}`,
+        'Content-Type': 'application/json',
+      },
+      body: JSON.stringify({ from: FROM_EMAIL, to, subject, html }),
+    });
+    if (!res.ok) {
+      const errBody = await res.text().catch(() => '');
+      console.error(
+        `[EMAIL Resend] ${res.status} ${res.statusText} → to=${to}: ${errBody.slice(0, 300)}`,
+      );
+      return false;
+    }
+    const data = (await res.json().catch(() => ({}))) as { id?: string };
+    console.log(`[EMAIL Resend] ok id=${data.id ?? '?'} to=${to} subject="${subject}"`);
+    return true;
+  } catch (err: any) {
+    console.error(`[EMAIL Resend] network error to=${to}: ${err?.message ?? err}`);
+    return false;
+  }
+}
+
+// ---------- SMTP transport (nodemailer) ----------
+
+const SMTP_HOST = process.env.SMTP_HOST;
+const SMTP_PORT = parseInt(process.env.SMTP_PORT || '587', 10);
+const SMTP_USER = process.env.SMTP_USER;
+const SMTP_PASS = process.env.SMTP_PASS;
+
+const smtpConfigured = !!(SMTP_HOST && SMTP_USER && SMTP_PASS);
+
+const smtpTransporter = smtpConfigured
+  ? nodemailer.createTransport({
+      host: SMTP_HOST,
+      port: SMTP_PORT,
+      secure: SMTP_PORT === 465,
+      auth: { user: SMTP_USER, pass: SMTP_PASS },
+    })
+  : null;
+
+async function sendViaSmtp(
+  to: string,
+  subject: string,
+  html: string,
+): Promise<boolean> {
+  if (!smtpTransporter) return false;
+  try {
+    const info = await smtpTransporter.sendMail({ from: FROM_EMAIL, to, subject, html });
+    console.log(`[EMAIL SMTP] ok messageId=${info.messageId} to=${to} subject="${subject}"`);
+    return true;
+  } catch (err: any) {
+    console.error(`[EMAIL SMTP] failed to=${to}: ${err?.message ?? err}`);
+    return false;
+  }
+}
+
+// ---------- Console fallback (dev only) ----------
+
+function logToConsole(to: string, subject: string, html: string): boolean {
+  console.log(
+    `\n[EMAIL stdout-fallback] No RESEND_API_KEY or SMTP_* configured. Set one to actually send mail.`,
+  );
+  console.log(`[EMAIL] To: ${to}`);
+  console.log(`[EMAIL] Subject: ${subject}`);
+  console.log(`[EMAIL] Body (text): ${html.replace(/<[^>]+>/g, '').replace(/\s+/g, ' ').trim()}\n`);
+  return true;
+}
+
+// ---------- Dispatcher ----------
+
+async function sendEmail(to: string, subject: string, html: string): Promise<boolean> {
+  if (RESEND_API_KEY) return sendViaResend(to, subject, html);
+  if (smtpConfigured) return sendViaSmtp(to, subject, html);
+  return logToConsole(to, subject, html);
+}
+
+/**
+ * Which transport is active. Logged at boot from app/api/auth/register
+ * so operators can confirm the wiring from a single container-log line
+ * instead of having to guess from absent email deliveries.
+ */
+export function emailTransportName(): 'resend' | 'smtp' | 'console' {
+  if (RESEND_API_KEY) return 'resend';
+  if (smtpConfigured) return 'smtp';
+  return 'console';
+}
+
+// ============================================================
+// Email templates — clean, mobile-friendly, brand-consistent
+// ============================================================
+
+function wrap(content: string): string {
+  return `
+<!DOCTYPE html>
+<html>
+<head><meta charset="utf-8"><meta name="viewport" content="width=device-width"></head>
+<body style="margin:0;padding:0;background:#f7f9fb;font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;">
+  <div style="max-width:480px;margin:40px auto;padding:32px;background:#ffffff;border-radius:16px;border:1px solid #e2e8f0;">
+    <div style="text-align:center;margin-bottom:24px;">
+      <div style="display:inline-block;width:48px;height:48px;border-radius:14px;background:linear-gradient(135deg,#3b82f6,#14b8a6);line-height:48px;font-size:24px;color:white;">♥</div>
+      <h2 style="margin:12px 0 0;color:#0f172a;font-size:20px;">${APP_NAME}</h2>
+    </div>
+    ${content}
+    <hr style="border:none;border-top:1px solid #e2e8f0;margin:24px 0;">
+    <p style="color:#94a3b8;font-size:12px;text-align:center;margin:0;">
+      This email was sent by ${APP_NAME}. If you didn't request this, you can safely ignore it.
+    </p>
+  </div>
+</body>
+</html>`;
+}
+
+// ============================================================
+// Public API
+// ============================================================
+
+export async function sendVerificationEmail(
+  to: string,
+  code: string,
+): Promise<boolean> {
+  return sendEmail(
+    to,
+    `${APP_NAME} — verify your email`,
+    wrap(`
+      <h3 style="color:#0f172a;font-size:18px;margin:0 0 8px;">Verify your email</h3>
+      <p style="color:#475569;font-size:14px;line-height:1.6;margin:0 0 20px;">
+        Enter this code in the app to verify your email address and secure your account.
+      </p>
+      <div style="text-align:center;margin:24px 0;">
+        <div style="display:inline-block;padding:16px 32px;background:#f1f5f9;border-radius:12px;border:2px dashed #cbd5e1;">
+          <span style="font-size:32px;font-weight:800;letter-spacing:8px;color:#0f172a;">${code}</span>
+        </div>
+      </div>
+      <p style="color:#94a3b8;font-size:13px;text-align:center;margin:0;">
+        This code expires in 15 minutes.
+      </p>
+    `),
+  );
+}
+
+export async function sendPasswordResetEmail(
+  to: string,
+  code: string,
+): Promise<boolean> {
+  // One-click reset link — the frontend (both Vercel and HF) parses
+  // ?action=reset&email=…&code=… on mount and drops the user straight
+  // into the "set new password" step with everything pre-filled.
+  // The 6-digit code is still shown so users who can't click (some
+  // mail clients strip query strings) can paste it manually.
+  const linkUrl =
+    `${APP_URL}?action=reset` +
+    `&email=${encodeURIComponent(to)}` +
+    `&code=${encodeURIComponent(code)}`;
+
+  return sendEmail(
+    to,
+    `${APP_NAME} — reset your password`,
+    wrap(`
+      <h3 style="color:#0f172a;font-size:18px;margin:0 0 8px;">Reset your password</h3>
+      <p style="color:#475569;font-size:14px;line-height:1.6;margin:0 0 20px;">
+        Someone requested a password reset for your ${APP_NAME} account. Click the button below to set a new password, or enter the 6-digit code in the app.
+      </p>
+      <div style="text-align:center;margin:20px 0;">
+        <a href="${linkUrl}" style="display:inline-block;padding:12px 28px;background:linear-gradient(135deg,#3b82f6,#14b8a6);color:white;text-decoration:none;border-radius:10px;font-weight:700;font-size:14px;">
+          Reset password
+        </a>
+      </div>
+      <p style="color:#94a3b8;font-size:12px;text-align:center;margin:0 0 16px;">
+        Or enter this code manually:
+      </p>
+      <div style="text-align:center;margin:8px 0 24px;">
+        <div style="display:inline-block;padding:16px 32px;background:#f1f5f9;border-radius:12px;border:2px dashed #cbd5e1;">
+          <span style="font-size:32px;font-weight:800;letter-spacing:8px;color:#0f172a;">${code}</span>
+        </div>
+      </div>
+      <p style="color:#94a3b8;font-size:13px;text-align:center;margin:0;">
+        This code expires in 1 hour. If you didn't request this, ignore this email — your password will stay the same.
+      </p>
+    `),
+  );
+}
+
+export async function sendWelcomeEmail(to: string): Promise<boolean> {
+  return sendEmail(
+    to,
+    `Welcome to ${APP_NAME}`,
+    wrap(`
+      <h3 style="color:#0f172a;font-size:18px;margin:0 0 8px;">Welcome to ${APP_NAME}</h3>
+      <p style="color:#475569;font-size:14px;line-height:1.6;margin:0 0 16px;">
+        Your account is ready. You can now track medications, appointments, vitals,
+        and access your health data from any device.
+      </p>
+      <div style="text-align:center;margin:20px 0;">
+        <a href="${APP_URL}" style="display:inline-block;padding:12px 28px;background:linear-gradient(135deg,#3b82f6,#14b8a6);color:white;text-decoration:none;border-radius:10px;font-weight:700;font-size:14px;">
+          Open ${APP_NAME}
+        </a>
+      </div>
+      <p style="color:#94a3b8;font-size:13px;text-align:center;margin:0;">
+        Free forever. Private. No ads.
+      </p>
+    `),
+  );
+}
diff --git a/lib/family-health.ts b/lib/family-health.ts
new file mode 100644
index 0000000000000000000000000000000000000000..a5e03a5375edff1148a98bd5cc01ab46dd4e9f15
--- /dev/null
+++ b/lib/family-health.ts
@@ -0,0 +1,150 @@
+/**
+ * MedOS Family — types, helpers, and persisted store.
+ *
+ * The Family Health Tree is private to the device: members, records,
+ * and consent flags live in localStorage under FAMILY_KEY. This keeps
+ * sensitive family data off the network unless the user explicitly
+ * generates a sharing invite via createInvite() in useFamilyHealth.
+ *
+ * Schema versioning: bump SCHEMA_VERSION whenever the shape changes
+ * and add a migration branch in load(). The current v1 schema is
+ * tagged on every persisted blob so future migrations are mechanical.
+ */
+
+export type MedOSMode = "standard" | "adult" | "child" | "family-admin";
+
+export type FamilyRelationship =
+  | "self"
+  | "spouse"
+  | "child"
+  | "parent"
+  | "guardian"
+  | "other";
+
+export type FamilyConsentStatus =
+  | "owner"
+  | "accepted"
+  | "pending"
+  | "guardian-managed"
+  | "revoked";
+
+export type MonthlyStatus = "good" | "watch" | "needs-care" | "unknown";
+
+export interface FamilyMember {
+  id: string;
+  displayName: string;
+  relationship: FamilyRelationship;
+  mode: MedOSMode;
+  avatarEmoji?: string;
+  consentStatus: FamilyConsentStatus;
+  createdAt: string;
+  updatedAt: string;
+}
+
+export interface MonthlyHealthRecord {
+  id: string;
+  memberId: string;
+  /** ISO month like "2026-05". */
+  month: string;
+  status: MonthlyStatus;
+  symptoms: string;
+  appointments: string;
+  medicines: string;
+  vitals: string;
+  vaccines: string;
+  notes: string;
+  followUpNeeded: boolean;
+  createdAt: string;
+  updatedAt: string;
+}
+
+export interface FamilyInvite {
+  code: string;
+  memberId: string;
+  mode: MedOSMode;
+  expiresAt: string;
+}
+
+export interface FamilyState {
+  schemaVersion: number;
+  mode: MedOSMode;
+  members: FamilyMember[];
+  records: MonthlyHealthRecord[];
+  currentMemberId: string | null;
+  invites: FamilyInvite[];
+}
+
+export const SCHEMA_VERSION = 1;
+
+const EMPTY_STATE: FamilyState = {
+  schemaVersion: SCHEMA_VERSION,
+  mode: "standard",
+  members: [],
+  records: [],
+  currentMemberId: null,
+  invites: [],
+};
+
+export function emptyFamilyState(): FamilyState {
+  return JSON.parse(JSON.stringify(EMPTY_STATE));
+}
+
+/** ISO month string for the current calendar month (UTC). */
+export function currentMonth(): string {
+  const d = new Date();
+  return `${d.getUTCFullYear()}-${String(d.getUTCMonth() + 1).padStart(2, "0")}`;
+}
+
+export function nowISO(): string {
+  return new Date().toISOString();
+}
+
+/** 6-character invite code, uppercase alphanumeric (no ambiguous chars). */
+export function generateInviteCode(): string {
+  const alphabet = "ABCDEFGHJKLMNPQRSTUVWXYZ23456789";
+  let out = "";
+  for (let i = 0; i < 6; i++) {
+    out += alphabet[Math.floor(Math.random() * alphabet.length)];
+  }
+  return out;
+}
+
+/**
+ * Default family preset used by "Use sample family" — gives new users
+ * something concrete to interact with instead of an empty tree.
+ */
+export function defaultFamily(): FamilyMember[] {
+  const now = nowISO();
+  return [
+    {
+      id: "self",
+      displayName: "You",
+      relationship: "self",
+      mode: "family-admin",
+      avatarEmoji: "🧑",
+      consentStatus: "owner",
+      createdAt: now,
+      updatedAt: now,
+    },
+    {
+      id: "spouse",
+      displayName: "Partner",
+      relationship: "spouse",
+      mode: "adult",
+      avatarEmoji: "🧑",
+      consentStatus: "accepted",
+      createdAt: now,
+      updatedAt: now,
+    },
+    {
+      id: "child-1",
+      displayName: "Child",
+      relationship: "child",
+      mode: "child",
+      avatarEmoji: "🧒",
+      consentStatus: "guardian-managed",
+      createdAt: now,
+      updatedAt: now,
+    },
+  ];
+}
diff --git a/lib/feature-flags.ts b/lib/feature-flags.ts
new file mode 100644
index 0000000000000000000000000000000000000000..eb46963c243f01f3ff18bdf343e056535267ac1d
--- /dev/null
+++ b/lib/feature-flags.ts
@@ -0,0 +1,59 @@
+/**
+ * MedOS feature flags.
+ *
+ * Single, typed, server-side source of truth for feature flags. Read once
+ * per process from env vars. Any new flag must:
+ *   1. Be added here.
+ *   2. Default to OFF.
+ *   3. Be documented in the JSDoc above its accessor.
+ *   4. Be checked by tests before being flipped on in any environment.
+ *
+ * Do NOT add NEXT_PUBLIC_* prefixed flags. Feature flags are server-side.
+ * If a flag must affect client behavior, surface it through a normal API
+ * response, not a public env var.
+ */
+
+const truthy = (v: string | undefined): boolean =>
+  !!v && /^(1|true|yes|on)$/i.test(v.trim());
+
+/**
+ * Per-user OllaBridge Cloud pairing.
+ *
+ * When ON, the chat route (and any future authenticated server path) will
+ * try the authenticated user's per-user OllaBridge pairing FIRST in the
+ * provider chain, before the operator-wide bridge or the Hugging Face
+ * fallback. When OFF, only operator-wide pairing (the legacy
+ * OLLABRIDGE_URL env) is honored.
+ *
+ * See: 9-HuggingFace-Global/docs/OLLABRIDGE_INTEGRATION.md
+ */
+export const perUserOllaBridgeEnabled = (): boolean =>
+  truthy(process.env.MEDOS_PER_USER_OLLABRIDGE);
+
+/**
+ * Offline-Lite small-model provider.
+ *
+ * When ON, the offline-lite provider (Phi-3 mini / Gemma 2B / TinyLlama)
+ * is registered in the provider fallback chain as the LAST step (after
+ * cached FAQ). Outputs are pinned to R0/R1 only by the safety engine;
+ * the post-filter still runs.
+ *
+ * The flag must remain OFF until the full golden prompt set passes in
+ * offline mode with the same R5/R4 sensitivity targets as the online
+ * path.
+ *
+ * See: 9-HuggingFace-Global/docs/OFFLINE_LITE.md
+ */
+export const offlineLiteEnabled = (): boolean =>
+  truthy(process.env.MEDOS_OFFLINE_LITE_ENABLED);
+
+/**
+ * Snapshot every flag's current value. Convenience for the /api/health
+ * endpoint and for logging at process startup.
+ */
+export function snapshotFlags(): Record<string, boolean> {
+  return {
+    MEDOS_PER_USER_OLLABRIDGE: perUserOllaBridgeEnabled(),
+    MEDOS_OFFLINE_LITE_ENABLED: offlineLiteEnabled(),
+  };
+}
diff --git a/lib/follow-ups.ts b/lib/follow-ups.ts
new file mode 100644
index 0000000000000000000000000000000000000000..a61e41be82921527597282948c4e28069e27c24a
--- /dev/null
+++ b/lib/follow-ups.ts
@@ -0,0 +1,195 @@
+/**
+ * Contextual follow-up suggestions derived from an AI answer.
+ *
+ * We deliberately keep this keyword-based rather than using another LLM
+ * call: deterministic, free, instant, and safe. The function scans the
+ * latest assistant message for medical signal words and picks 3–4
+ * follow-ups from a curated map. Falls back to a universal default set
+ * when nothing matches.
+ *
+ * The suggestions are short, universally useful next questions, and
+ * will themselves be answered by the model in the user's language.
+ */
+
+export type FollowUp = { id: string; prompt: string };
+
+const DEFAULTS: FollowUp[] = [
+  { id: 'more',     prompt: 'Tell me more' },
+  { id: 'causes',   prompt: 'What causes this?' },
+  { id: 'doctor',   prompt: 'Should I see a doctor?' },
+  { id: 'prevent',  prompt: 'How can I prevent it?' },
+];
+
+/**
+ * Topic → prompts map. Each topic is a set of lowercase keywords and the
+ * follow-ups we want to surface when any of them appear in the answer.
+ */
+const TOPICS: Array<{ keywords: string[]; prompts: FollowUp[] }> = [
+  {
+    keywords: ['fever', 'temperature', '°c', '°f', 'chills'],
+    prompts: [
+      { id: 'fever.when',   prompt: 'When is a fever dangerous?' },
+      { id: 'fever.reduce', prompt: 'How do I safely bring down a fever?' },
+      { id: 'fever.kids',   prompt: 'Is this fever safe for my child?' },
+    ],
+  },
+  {
+    keywords: ['pain', 'ache', 'hurts', 'sore'],
+    prompts: [
+      { id: 'pain.relief',    prompt: 'What safe pain relief can I take?' },
+      { id: 'pain.worsens',   prompt: 'When should I worry about this pain?' },
+      { id: 'pain.duration',  prompt: 'How long should this last?' },
+    ],
+  },
+  {
+    keywords: ['headache', 'migraine', 'head'],
+    prompts: [
+      { id: 'head.types',   prompt: 'What type of headache is this?' },
+      { id: 'head.triggers',prompt: 'What triggers headaches?' },
+      { id: 'head.relief',  prompt: 'Natural ways to relieve a headache' },
+    ],
+  },
+  {
+    keywords: ['cough', 'bronchitis', 'phlegm', 'mucus', 'sore throat'],
+    prompts: [
+      { id: 'cough.types',  prompt: 'Is this a dry or wet cough?' },
+      { id: 'cough.relief', prompt: 'Home remedies that actually work' },
+      { id: 'cough.worry',  prompt: 'When should a cough be checked?' },
+    ],
+  },
+  {
+    keywords: ['pregnan', 'trimester', 'fetal', 'prenatal', 'gestation'],
+    prompts: [
+      { id: 'preg.safe',   prompt: 'Is this safe during pregnancy?' },
+      { id: 'preg.signs',  prompt: 'Warning signs in pregnancy' },
+      { id: 'preg.diet',   prompt: 'What foods should I avoid?' },
+    ],
+  },
+  {
+    keywords: ['medication', 'medicine', 'drug', 'tablet', 'pill', 'dose', 'dosage'],
+    prompts: [
+      { id: 'med.side',    prompt: 'What are the side effects?' },
+      { id: 'med.inter',   prompt: 'Are there drug interactions?' },
+      { id: 'med.miss',    prompt: 'What if I miss a dose?' },
+    ],
+  },
+  {
+    keywords: ['diabet', 'glucose', 'insulin', 'blood sugar', 'hba1c'],
+    prompts: [
+      { id: 'diab.diet',  prompt: 'Best diet for blood sugar control' },
+      { id: 'diab.exer',  prompt: 'How does exercise help?' },
+      { id: 'diab.risk',  prompt: 'What are the long-term risks?' },
+    ],
+  },
+  {
+    keywords: ['anxiety', 'anxious', 'stress', 'panic', 'depression', 'depressed', 'mental'],
+    prompts: [
+      { id: 'mh.cope',    prompt: 'Healthy ways to cope right now' },
+      { id: 'mh.help',    prompt: 'Where can I get professional help?' },
+      { id: 'mh.sleep',   prompt: 'How does sleep affect mood?' },
+    ],
+  },
+  {
+    keywords: ['blood pressure', 'hypertension', 'systolic', 'diastolic', 'bp'],
+    prompts: [
+      { id: 'bp.lower',   prompt: 'Lifestyle changes that lower BP' },
+      { id: 'bp.home',    prompt: 'How to measure BP at home correctly' },
+      { id: 'bp.worry',   prompt: 'When is blood pressure dangerous?' },
+    ],
+  },
+  {
+    keywords: ['rash', 'itch', 'skin', 'hives', 'eczema', 'dermat'],
+    prompts: [
+      { id: 'skin.ident', prompt: 'What kind of rash is this?' },
+      { id: 'skin.care',  prompt: 'How should I care for it at home?' },
+      { id: 'skin.doc',   prompt: 'When does a rash need a doctor?' },
+    ],
+  },
+  {
+    keywords: ['stomach', 'nausea', 'vomit', 'diarrh', 'constipation', 'abdom'],
+    prompts: [
+      { id: 'gi.hydrate', prompt: 'How do I stay hydrated?' },
+      { id: 'gi.eat',     prompt: 'What foods are safe to eat now?' },
+      { id: 'gi.doctor',  prompt: 'When should I see a doctor?' },
+    ],
+  },
+  {
+    keywords: ['sleep', 'insomnia', 'tired', 'fatigue'],
+    prompts: [
+      { id: 'sleep.hygiene', prompt: 'Sleep hygiene tips' },
+      { id: 'sleep.causes',  prompt: 'Common causes of poor sleep' },
+      { id: 'sleep.doc',     prompt: 'When should I see a sleep specialist?' },
+    ],
+  },
+  {
+    keywords: ['thyroid', 'tsh', 'levothyroxine', 'hashimoto', 'graves', 'goiter', 'tiroide'],
+    prompts: [
+      { id: 'thyroid.symptoms', prompt: 'What are the symptoms of thyroid problems?' },
+      { id: 'thyroid.test',     prompt: 'What blood tests check the thyroid?' },
+      { id: 'thyroid.meds',     prompt: 'How should I take thyroid medication?' },
+    ],
+  },
+  {
+    keywords: ['insulin', 'hba1c', 'glycemia', 'glycated', 'metformin', 'diabetic', 'ketoacidosis', 'dka', 'glicemia', 'glucometer'],
+    prompts: [
+      { id: 'diab.monitor', prompt: 'How often should I check blood sugar?' },
+      { id: 'diab.hypo',    prompt: 'How do I handle low blood sugar?' },
+      { id: 'diab.foot',    prompt: 'How do I care for diabetic feet?' },
+      { id: 'diab.food',    prompt: 'Best foods for blood sugar control' },
+    ],
+  },
+  {
+    keywords: ['cortisol', 'adrenal', 'addison', 'cushing', 'aldosterone', 'surrenale'],
+    prompts: [
+      { id: 'adrenal.signs',  prompt: 'What are the signs of adrenal problems?' },
+      { id: 'adrenal.crisis', prompt: 'What is an adrenal crisis?' },
+      { id: 'adrenal.stress', prompt: 'How does stress affect the adrenals?' },
+    ],
+  },
+  {
+    keywords: ['metabolic syndrome', 'waist', 'triglycerides', 'hdl', 'prediabet', 'sindrome metabolica'],
+    prompts: [
+      { id: 'metab.reverse',  prompt: 'Can metabolic syndrome be reversed?' },
+      { id: 'metab.diet',     prompt: 'Best diet for metabolic syndrome' },
+      { id: 'metab.exercise', prompt: 'How much exercise do I need?' },
+    ],
+  },
+];
+
+/**
+ * Pick up to `limit` follow-ups based on the content of the latest AI
+ * response. Always returns at least one suggestion.
+ */
+export function suggestFollowUps(
+  assistantText: string,
+  limit = 4,
+): FollowUp[] {
+  if (!assistantText) return DEFAULTS.slice(0, limit);
+
+  const text = assistantText.toLowerCase();
+  const seen = new Set<string>();
+  const picks: FollowUp[] = [];
+
+  for (const topic of TOPICS) {
+    if (topic.keywords.some((k) => text.includes(k))) {
+      for (const p of topic.prompts) {
+        if (!seen.has(p.id)) {
+          seen.add(p.id);
+          picks.push(p);
+          if (picks.length >= limit) return picks;
+        }
+      }
+    }
+  }
+
+  // Top up with generic defaults so users never see an empty chip row.
+  for (const d of DEFAULTS) {
+    if (picks.length >= limit) break;
+    if (!seen.has(d.id)) {
+      seen.add(d.id);
+      picks.push(d);
+    }
+  }
+
+  return picks;
+}
diff --git a/lib/health-data-repo.ts b/lib/health-data-repo.ts
new file mode 100644
index 0000000000000000000000000000000000000000..468841e561be302c7c0e630665d7a3c96f7ead30
--- /dev/null
+++ b/lib/health-data-repo.ts
@@ -0,0 +1,55 @@
+/**
+ * Health-data repository — the ONLY layer that knows clinical payloads
+ * are encrypted at rest in SQLite.
+ *
+ * Why a dedicated module:
+ *   - Clinical data (medications, vitals, appointments, EHR JSON,
+ *     conversation transcripts) is PHI. On a Hugging Face Space the
+ *     persistent disk is shared platform infrastructure — defence in
+ *     depth requires wrapping those blobs with AES-256-GCM before they
+ *     touch the filesystem.
+ *   - Every read/write of `health_data.data` or `chat_history.messages`
+ *     used to happen inline inside route handlers, so it was easy to
+ *     forget a code path. Centralising here makes it one-line to encrypt
+ *     on write and transparently decrypt on read.
+ *
+ * Migration safety:
+ *   decryptString() returns the payload unchanged when it does not carry
+ *   the "v1:" version prefix, so existing plaintext rows keep working
+ *   until they're rewritten. No data migration required; rows become
+ *   encrypted the next time they're saved.
+ */
+
+import { encryptString, decryptString } from './crypto';
+
+/**
+ * Encode a JSON-serialisable payload for storage. Stringifies then
+ * encrypts. Empty / null payloads are stored as '{}' (unencrypted sentinel
+ * — saves a crypto round-trip and keeps the column non-null).
+ */
+export function encodeHealthPayload(data: unknown): string {
+  if (data == null) return '{}';
+  const json = JSON.stringify(data);
+  if (json === '{}' || json === '[]') return json;
+  return encryptString(json);
+}
+
+/**
+ * Decode whatever `encodeHealthPayload()` wrote, PLUS any legacy plaintext
+ * JSON left over from before encryption was introduced. Returns `{}` on
+ * any failure so a single corrupt row never crashes a listing endpoint.
+ */
+export function decodeHealthPayload<T = unknown>(stored: string | null | undefined): T {
+  if (!stored) return {} as T;
+  // Legacy fast-paths.
+  if (stored === '{}') return {} as T;
+  if (stored === '[]') return ([] as unknown) as T;
+
+  const decoded = decryptString(stored);
+  try {
+    return JSON.parse(decoded) as T;
+  } catch {
+    // If the row wasn't JSON after decryption, assume it was opaque plaintext.
+    return (decoded as unknown) as T;
+  }
+}
diff --git a/lib/health-store.ts b/lib/health-store.ts
new file mode 100644
index 0000000000000000000000000000000000000000..3483555a77d94766b49431dc898ade5c63009866
--- /dev/null
+++ b/lib/health-store.ts
@@ -0,0 +1,746 @@
+/**
+ * MedOS Health Store — client-side health data persistence.
+ *
+ * All data is stored in localStorage as JSON. Zero server calls, zero
+ * accounts, fully private. The patient owns their data and can export
+ * it at any time as a JSON file (for backup or to share with a doctor).
+ *
+ * Each entity type gets its own localStorage key so reads and writes are
+ * scoped and independent (one corrupt key doesn't nuke everything).
+ */
+
+// ============================================================
+// Types
+// ============================================================
+
+export type MedicineForm = 'tablet' | 'capsule' | 'syrup' | 'inhaler' | 'injection' | 'cream' | 'drops' | 'patch' | 'other';
+export type MedicineStatus = 'active' | 'expiring' | 'expired' | 'discontinued';
+export type StockState = 'ok' | 'low' | 'out';
+
+export interface MedicineItem {
+  id: string;
+  name: string;
+  brandName?: string;
+  activeIngredient?: string;
+  dose: string;
+  form: MedicineForm;
+  category?: string; // e.g. "Diabetes", "Pain Relief", "Supplement"
+  quantity: number;
+  expiryDate?: string; // ISO date
+  refillDate?: string; // ISO date
+  notes?: string;
+  createdAt: string;
+}
+
+export interface Medication {
+  id: string;
+  name: string;
+  dose: string;
+  frequency: 'daily' | 'twice-daily' | 'three-daily' | 'weekly' | 'as-needed';
+  times: string[]; // e.g. ["08:00", "20:00"]
+  startDate: string; // ISO date
+  endDate?: string;
+  notes?: string;
+  active: boolean;
+}
+
+export interface MedicationLog {
+  id: string;
+  medicationId: string;
+  date: string; // ISO date
+  time: string; // ISO time or scheduled slot like "08:00"
+  taken: boolean;
+}
+
+export type AppointmentType =
+  | 'doctor'
+  | 'lab-test'
+  | 'exam'
+  | 'blood-test'
+  | 'imaging'
+  | 'vaccination'
+  | 'therapy'
+  | 'other';
+
+export type AppointmentStatus = 'upcoming' | 'completed' | 'missed' | 'cancelled';
+
+export interface Appointment {
+  id: string;
+  title: string;
+  type: AppointmentType;
+  date: string; // ISO date
+  time: string;
+  location?: string;
+  doctor?: string;
+  notes?: string;
+  status: AppointmentStatus;
+  recurring?: 'weekly' | 'biweekly' | 'monthly' | 'quarterly' | 'yearly';
+}
+
+export type VitalType =
+  | 'blood-pressure'
+  | 'blood-glucose'
+  | 'temperature'
+  | 'weight'
+  | 'heart-rate'
+  | 'oxygen-saturation';
+
+export interface VitalReading {
+  id: string;
+  type: VitalType;
+  value: string; // e.g. "120/80", "98.6", "72"
+  unit: string; // e.g. "mmHg", "mg/dL", "°C", "kg", "bpm", "%"
+  date: string;
+  time: string;
+  notes?: string;
+}
+
+export type RecordType = 'lab-report' | 'clinical-note' | 'prescription' | 'certificate' | 'imaging' | 'other';
+
+export interface HealthRecord {
+  id: string;
+  title: string;
+  type: RecordType;
+  date: string;
+  notes?: string;
+  tags?: string[];
+}
+
+export interface ConversationSummary {
+  id: string;
+  date: string;
+  preview: string; // first ~120 chars of first user message
+  messageCount: number;
+  topic?: string;
+}
+
+// ============================================================
+// Contacts — doctors, pharmacies, drugstores address book
+// ============================================================
+
+export type ContactType = 'doctor' | 'pharmacy' | 'drugstore' | 'hospital' | 'clinic' | 'other';
+
+export interface MedContact {
+  id: string;
+  name: string;
+  type: ContactType;
+  specialty?: string;    // e.g. "Cardiologist", "General Practitioner"
+  phone?: string;
+  email?: string;
+  address?: string;
+  postalCode?: string;
+  city?: string;
+  lat?: number;
+  lon?: number;
+  openingHours?: string;
+  notes?: string;
+  isFavorite?: boolean;
+  source?: string;       // e.g. "osm_overpass", "manual"
+  directionsUrl?: string;
+  mapsUrl?: string;
+  createdAt: string;
+}
+
+// ============================================================
+// EHR Profile — Electronic Health Record wizard data
+// ============================================================
+
+export interface EHRProfile {
+  // Step 1: Basic info
+  firstName?: string;
+  lastName?: string;
+  dateOfBirth?: string; // ISO date
+  gender?: 'male' | 'female' | 'other' | 'prefer-not-to-say';
+  bloodType?: 'A+' | 'A-' | 'B+' | 'B-' | 'AB+' | 'AB-' | 'O+' | 'O-' | 'unknown';
+  height?: string; // e.g. "175 cm" or "5'9"
+  weight?: string; // e.g. "70 kg"
+
+  // Step 2: Medical history
+  chronicConditions?: string[]; // e.g. ["Type 2 Diabetes", "Hypertension"]
+  pastSurgeries?: string[]; // e.g. ["Appendectomy 2018"]
+  allergies?: string[]; // e.g. ["Penicillin", "Peanuts"]
+  familyHistory?: string[]; // e.g. ["Father: heart disease", "Mother: diabetes"]
+
+  // Step 3: Current medications (references to medication tracker)
+  // No separate field needed — we read from loadMedications()
+
+  // Step 4: Lifestyle
+  smokingStatus?: 'never' | 'former' | 'current' | 'prefer-not-to-say';
+  alcoholUse?: 'none' | 'occasional' | 'moderate' | 'heavy' | 'prefer-not-to-say';
+  exerciseFrequency?: 'none' | '1-2-per-week' | '3-5-per-week' | 'daily';
+  dietType?: 'regular' | 'vegetarian' | 'vegan' | 'mediterranean' | 'low-carb' | 'other';
+
+  // Metadata
+  completedAt?: string; // ISO timestamp when wizard was last completed
+  wizardStep?: number; // Last completed step (for resume)
+}
+
+export const CHRONIC_CONDITIONS_OPTIONS = [
+  'Type 1 Diabetes',
+  'Type 2 Diabetes',
+  'Gestational Diabetes',
+  'Hypertension',
+  'Hypothyroidism (Hashimoto)',
+  'Hyperthyroidism (Graves)',
+  'Asthma',
+  'COPD',
+  'Heart Disease',
+  'Atrial Fibrillation',
+  'Chronic Kidney Disease',
+  'Depression',
+  'Anxiety',
+  'Epilepsy',
+  'Rheumatoid Arthritis',
+  'Osteoporosis',
+  'Cancer (specify)',
+  'HIV/AIDS',
+  'Hepatitis B/C',
+  'Metabolic Syndrome',
+  'Addison Disease',
+  'Cushing Syndrome',
+  'PCOS',
+  'Celiac Disease',
+  'IBD (Crohn/Colitis)',
+  'Other',
+] as const;
+
+export const ALLERGY_COMMON = [
+  'Penicillin',
+  'Sulfonamides',
+  'Aspirin / NSAIDs',
+  'Iodine / Contrast dye',
+  'Latex',
+  'Peanuts',
+  'Shellfish',
+  'Eggs',
+  'Milk / Dairy',
+  'Soy',
+  'Wheat / Gluten',
+  'Bee stings',
+  'None known',
+] as const;
+
+// ============================================================
+// EHR storage (single record per user, keyed as "ehr_profile")
+// ============================================================
+
+const EHR_KEY = 'medos_ehr_profile';
+
+export function loadEHRProfile(): EHRProfile {
+  if (typeof localStorage === 'undefined') return {};
+  try {
+    const raw = localStorage.getItem(EHR_KEY);
+    return raw ? JSON.parse(raw) : {};
+  } catch {
+    return {};
+  }
+}
+
+export function saveEHRProfile(profile: EHRProfile): void {
+  if (typeof localStorage === 'undefined') return;
+  try {
+    localStorage.setItem(EHR_KEY, JSON.stringify(profile));
+  } catch {}
+}
+
+/**
+ * Build a COMPACT patient context string optimized for small LLMs (8B).
+ *
+ * Design for small context windows:
+ *   - Under 150 tokens total (critical for Qwen 2.5 7B, Llama 3.2 8B)
+ *   - Key-value pairs on one line, comma-separated
+ *   - Only clinically relevant fields (skip height, blood type, etc.)
+ *   - Medications abbreviated: name+dose only
+ *   - Injected ONCE on the first user message of the conversation
+ *   - Returns empty string if no profile data (guest/empty)
+ */
+export function buildPatientContext(): string {
+  const p = loadEHRProfile();
+  const meds = loadMedications().filter((m) => m.active);
+  const bits: string[] = [];
+
+  // Demographics — one line
+  const demo: string[] = [];
+  if (p.dateOfBirth) {
+    const age = Math.floor((Date.now() - new Date(p.dateOfBirth).getTime()) / (365.25 * 86400000));
+    demo.push(`${age}y`);
+  }
+  if (p.gender && p.gender !== 'prefer-not-to-say') demo.push(p.gender[0].toUpperCase());
+  if (demo.length) bits.push(demo.join('/'));
+
+  // Conditions — most important for clinical context
+  if (p.chronicConditions?.length) bits.push(`Dx: ${p.chronicConditions.join(', ')}`);
+
+  // Allergies — safety-critical
+  if (p.allergies?.length && !p.allergies.includes('None known')) {
+    bits.push(`Allergies: ${p.allergies.join(', ')}`);
+  }
+
+  // Active medications — abbreviated
+  if (meds.length > 0) {
+    bits.push(`Meds: ${meds.map((m) => `${m.name} ${m.dose}`).join(', ')}`);
+  }
+
+  // Lifestyle — compact
+  const life: string[] = [];
+  if (p.smokingStatus === 'current') life.push('smoker');
+  if (p.smokingStatus === 'former') life.push('ex-smoker');
+  if (p.alcoholUse === 'heavy') life.push('heavy alcohol');
+  if (life.length) bits.push(life.join(', '));
+
+  if (bits.length === 0) return '';
+  return `\n[Patient: ${bits.join(' | ')}]`;
+}
+
+// ============================================================
+// Vital type metadata (units, labels, normal ranges)
+// ============================================================
+
+export const VITAL_META: Record<
+  VitalType,
+  { label: string; unit: string; placeholder: string; emoji: string }
+> = {
+  'blood-pressure': {
+    label: 'Blood Pressure',
+    unit: 'mmHg',
+    placeholder: '120/80',
+    emoji: '🫀',
+  },
+  'blood-glucose': {
+    label: 'Blood Glucose',
+    unit: 'mg/dL',
+    placeholder: '100',
+    emoji: '🩸',
+  },
+  temperature: {
+    label: 'Temperature',
+    unit: '°C',
+    placeholder: '36.6',
+    emoji: '🌡️',
+  },
+  weight: {
+    label: 'Weight',
+    unit: 'kg',
+    placeholder: '70',
+    emoji: '⚖️',
+  },
+  'heart-rate': {
+    label: 'Heart Rate',
+    unit: 'bpm',
+    placeholder: '72',
+    emoji: '💓',
+  },
+  'oxygen-saturation': {
+    label: 'Oxygen Saturation',
+    unit: '%',
+    placeholder: '98',
+    emoji: '🫁',
+  },
+};
+
+export const APPOINTMENT_TYPE_META: Record<
+  AppointmentType,
+  { label: string; emoji: string }
+> = {
+  doctor: { label: 'Doctor Visit', emoji: '👨‍⚕️' },
+  'lab-test': { label: 'Lab Test', emoji: '🧪' },
+  exam: { label: 'Medical Exam', emoji: '📋' },
+  'blood-test': { label: 'Blood Test', emoji: '🩸' },
+  imaging: { label: 'Imaging / X-Ray', emoji: '🔬' },
+  vaccination: { label: 'Vaccination', emoji: '💉' },
+  therapy: { label: 'Therapy Session', emoji: '🧠' },
+  other: { label: 'Other', emoji: '📌' },
+};
+
+export const FREQUENCY_LABELS: Record<Medication['frequency'], string> = {
+  daily: 'Once daily',
+  'twice-daily': 'Twice daily',
+  'three-daily': 'Three times daily',
+  weekly: 'Weekly',
+  'as-needed': 'As needed',
+};
+
+// ============================================================
+// Storage keys
+// ============================================================
+
+const KEYS = {
+  medications: 'medos_medications',
+  medicationLogs: 'medos_medication_logs',
+  appointments: 'medos_appointments',
+  vitals: 'medos_vitals',
+  records: 'medos_records',
+  history: 'medos_history',
+  medicines: 'medos_medicines',
+  contacts: 'medos_contacts',
+} as const;
+
+// ============================================================
+// Generic CRUD helpers
+// ============================================================
+
+function load<T>(key: string): T[] {
+  if (typeof localStorage === 'undefined') return [];
+  try {
+    const raw = localStorage.getItem(key);
+    return raw ? JSON.parse(raw) : [];
+  } catch {
+    return [];
+  }
+}
+
+function save<T>(key: string, data: T[]): void {
+  if (typeof localStorage === 'undefined') return;
+  try {
+    localStorage.setItem(key, JSON.stringify(data));
+  } catch {
+    // Storage full or unavailable — silently fail.
+  }
+}
+
+function genId(): string {
+  return Date.now().toString(36) + Math.random().toString(36).slice(2, 7);
+}
+
+// ============================================================
+// Public API — each entity type gets load / save / add / update
+// / remove. All pure and synchronous.
+// ============================================================
+
+// --- Medications ---
+
+export function loadMedications(): Medication[] {
+  return load<Medication>(KEYS.medications);
+}
+
+export function saveMedication(med: Omit<Medication, 'id'>): Medication {
+  const all = loadMedications();
+  const item: Medication = { ...med, id: genId() };
+  all.push(item);
+  save(KEYS.medications, all);
+  return item;
+}
+
+export function updateMedication(id: string, patch: Partial<Medication>): void {
+  const all = loadMedications().map((m) =>
+    m.id === id ? { ...m, ...patch } : m,
+  );
+  save(KEYS.medications, all);
+}
+
+export function removeMedication(id: string): void {
+  save(
+    KEYS.medications,
+    loadMedications().filter((m) => m.id !== id),
+  );
+}
+
+// --- Medication logs ---
+
+export function loadMedicationLogs(): MedicationLog[] {
+  return load<MedicationLog>(KEYS.medicationLogs);
+}
+
+export function logMedicationTaken(
+  medicationId: string,
+  date: string,
+  time: string,
+): void {
+  const all = loadMedicationLogs();
+  all.push({ id: genId(), medicationId, date, time, taken: true });
+  save(KEYS.medicationLogs, all);
+}
+
+export function isMedicationTaken(
+  medicationId: string,
+  date: string,
+  time: string,
+): boolean {
+  return loadMedicationLogs().some(
+    (l) =>
+      l.medicationId === medicationId && l.date === date && l.time === time && l.taken,
+  );
+}
+
+export function getMedicationStreak(medicationId: string): number {
+  const logs = loadMedicationLogs().filter(
+    (l) => l.medicationId === medicationId && l.taken,
+  );
+  if (logs.length === 0) return 0;
+  const dates = [...new Set(logs.map((l) => l.date))].sort().reverse();
+  let streak = 0;
+  const today = new Date();
+  for (let i = 0; i < dates.length; i++) {
+    const expected = new Date(today);
+    expected.setDate(expected.getDate() - i);
+    const expectedStr = expected.toISOString().slice(0, 10);
+    if (dates[i] === expectedStr) {
+      streak++;
+    } else {
+      break;
+    }
+  }
+  return streak;
+}
+
+// --- Appointments ---
+
+export function loadAppointments(): Appointment[] {
+  return load<Appointment>(KEYS.appointments);
+}
+
+export function saveAppointment(appt: Omit<Appointment, 'id'>): Appointment {
+  const all = loadAppointments();
+  const item: Appointment = { ...appt, id: genId() };
+  all.push(item);
+  save(KEYS.appointments, all);
+  return item;
+}
+
+export function updateAppointment(
+  id: string,
+  patch: Partial<Appointment>,
+): void {
+  const all = loadAppointments().map((a) =>
+    a.id === id ? { ...a, ...patch } : a,
+  );
+  save(KEYS.appointments, all);
+}
+
+export function removeAppointment(id: string): void {
+  save(
+    KEYS.appointments,
+    loadAppointments().filter((a) => a.id !== id),
+  );
+}
+
+// --- Vitals ---
+
+export function loadVitals(): VitalReading[] {
+  return load<VitalReading>(KEYS.vitals);
+}
+
+export function saveVital(reading: Omit<VitalReading, 'id'>): VitalReading {
+  const all = loadVitals();
+  const item: VitalReading = { ...reading, id: genId() };
+  all.push(item);
+  save(KEYS.vitals, all);
+  return item;
+}
+
+export function removeVital(id: string): void {
+  save(
+    KEYS.vitals,
+    loadVitals().filter((v) => v.id !== id),
+  );
+}
+
+// --- Health records ---
+
+export function loadRecords(): HealthRecord[] {
+  return load<HealthRecord>(KEYS.records);
+}
+
+export function saveRecord(rec: Omit<HealthRecord, 'id'>): HealthRecord {
+  const all = loadRecords();
+  const item: HealthRecord = { ...rec, id: genId() };
+  all.push(item);
+  save(KEYS.records, all);
+  return item;
+}
+
+export function updateRecord(id: string, patch: Partial<HealthRecord>): void {
+  const all = loadRecords().map((r) =>
+    r.id === id ? { ...r, ...patch } : r,
+  );
+  save(KEYS.records, all);
+}
+
+export function removeRecord(id: string): void {
+  save(
+    KEYS.records,
+    loadRecords().filter((r) => r.id !== id),
+  );
+}
+
+// --- Medicine inventory ---
+
+export function loadMedicines(): MedicineItem[] {
+  return load<MedicineItem>(KEYS.medicines);
+}
+
+export function saveMedicine(med: Omit<MedicineItem, 'id' | 'createdAt'>): MedicineItem {
+  const all = loadMedicines();
+  const item: MedicineItem = { ...med, id: genId(), createdAt: new Date().toISOString() };
+  all.push(item);
+  save(KEYS.medicines, all);
+  return item;
+}
+
+export function updateMedicine(id: string, patch: Partial<MedicineItem>): void {
+  const all = loadMedicines().map((m) =>
+    m.id === id ? { ...m, ...patch } : m,
+  );
+  save(KEYS.medicines, all);
+}
+
+export function removeMedicine(id: string): void {
+  save(KEYS.medicines, loadMedicines().filter((m) => m.id !== id));
+}
+
+/** Compute the status of a medicine based on its expiry date. */
+export function getMedicineStatus(med: MedicineItem): MedicineStatus {
+  if (!med.expiryDate) return 'active';
+  const now = new Date();
+  const exp = new Date(med.expiryDate);
+  const daysUntilExpiry = Math.ceil((exp.getTime() - now.getTime()) / 86400000);
+  if (daysUntilExpiry < 0) return 'expired';
+  if (daysUntilExpiry <= 30) return 'expiring';
+  return 'active';
+}
+
+/** Compute stock state based on quantity. */
+export function getStockState(med: MedicineItem): StockState {
+  if (med.quantity <= 0) return 'out';
+  if (med.quantity <= 5) return 'low';
+  return 'ok';
+}
+
+/** Build a summary of the medicine inventory for AI context. */
+export function buildMedicineInventoryContext(): string {
+  const meds = loadMedicines();
+  if (meds.length === 0) return '';
+  const lines = meds.map((m) => {
+    const status = getMedicineStatus(m);
+    const stock = getStockState(m);
+    return `${m.name} ${m.dose} (${m.form}, qty:${m.quantity}, ${status}${stock === 'low' ? ', LOW STOCK' : stock === 'out' ? ', OUT OF STOCK' : ''})`;
+  });
+  return `\n[Medicine inventory: ${lines.join('; ')}]`;
+}
+
+// --- Conversation history ---
+
+export function loadHistory(): ConversationSummary[] {
+  return load<ConversationSummary>(KEYS.history);
+}
+
+export function saveConversation(
+  summary: Omit<ConversationSummary, 'id'>,
+): ConversationSummary {
+  const all = loadHistory();
+  const item: ConversationSummary = { ...summary, id: genId() };
+  all.unshift(item); // newest first
+  // Keep only last 100 conversations
+  if (all.length > 100) all.length = 100;
+  save(KEYS.history, all);
+  return item;
+}
+
+export function removeConversation(id: string): void {
+  save(
+    KEYS.history,
+    loadHistory().filter((h) => h.id !== id),
+  );
+}
+
+export function clearHistory(): void {
+  save(KEYS.history, []);
+}
+
+// --- Contacts (address book) ---
+
+export function loadContacts(): MedContact[] {
+  return load<MedContact>(KEYS.contacts);
+}
+
+export function saveContact(contact: Omit<MedContact, 'id' | 'createdAt'>): MedContact {
+  const all = loadContacts();
+  const item: MedContact = { ...contact, id: genId(), createdAt: new Date().toISOString() };
+  all.push(item);
+  save(KEYS.contacts, all);
+  return item;
+}
+
+export function updateContact(id: string, patch: Partial<MedContact>): void {
+  const all = loadContacts().map((c) => c.id === id ? { ...c, ...patch } : c);
+  save(KEYS.contacts, all);
+}
+
+export function removeContact(id: string): void {
+  save(KEYS.contacts, loadContacts().filter((c) => c.id !== id));
+}
+
+/** Build a compact contacts context string for the AI chat. */
+export function buildContactsContext(): string {
+  const contacts = loadContacts();
+  if (contacts.length === 0) return '';
+  const lines = contacts.map((c) => {
+    const parts = [c.name];
+    if (c.type) parts.push(`(${c.type})`);
+    if (c.specialty) parts.push(c.specialty);
+    if (c.phone) parts.push(`tel:${c.phone}`);
+    if (c.address) parts.push(c.address);
+    return parts.join(' ');
+  });
+  return `\n[My contacts: ${lines.join('; ')}]`;
+}
+
+// ============================================================
+// Export all data as a single JSON object (for backup / sharing
+// with a doctor).
+// ============================================================
+
+export interface HealthExport {
+  exportedAt: string;
+  version: '1.0';
+  medications: Medication[];
+  medicationLogs: MedicationLog[];
+  appointments: Appointment[];
+  vitals: VitalReading[];
+  records: HealthRecord[];
+  medicines: MedicineItem[];
+  history: ConversationSummary[];
+  ehrProfile: EHRProfile;
+  contacts: MedContact[];
+}
+
+export function exportAllHealthData(): HealthExport {
+  return {
+    exportedAt: new Date().toISOString(),
+    version: '1.0',
+    medications: loadMedications(),
+    medicationLogs: loadMedicationLogs(),
+    appointments: loadAppointments(),
+    vitals: loadVitals(),
+    records: loadRecords(),
+    medicines: loadMedicines(),
+    history: loadHistory(),
+    ehrProfile: loadEHRProfile(),
+    contacts: loadContacts(),
+  };
+}
+
+export function downloadHealthData(): void {
+  const data = exportAllHealthData();
+  const blob = new Blob([JSON.stringify(data, null, 2)], {
+    type: 'application/json',
+  });
+  const url = URL.createObjectURL(blob);
+  const a = document.createElement('a');
+  a.href = url;
+  a.download = `medos-health-data-${new Date().toISOString().slice(0, 10)}.json`;
+  a.click();
+  URL.revokeObjectURL(url);
+}
+
+// ============================================================
+// Helpers
+// ============================================================
+
+export function todayISO(): string {
+  return new Date().toISOString().slice(0, 10);
+}
+
+export function nowTimeISO(): string {
+  return new Date().toTimeString().slice(0, 5);
+}
diff --git a/lib/hooks/useAuth.ts b/lib/hooks/useAuth.ts
new file mode 100644
index 0000000000000000000000000000000000000000..4de1c6bbe7b21522d2864ab31d1358e4b1d4e1c2
--- /dev/null
+++ b/lib/hooks/useAuth.ts
@@ -0,0 +1,218 @@
+"use client";
+
+import { useState, useEffect, useCallback } from "react";
+
+export interface User {
+  id: string;
+  email: string;
+  displayName?: string;
+  emailVerified: boolean;
+  isAdmin?: boolean;
+  createdAt?: string;
+}
+
+const TOKEN_KEY = "medos_auth_token";
+
+export function useAuth() {
+  const [user, setUser] = useState<User | null>(null);
+  const [token, setTokenState] = useState<string | null>(null);
+  const [loading, setLoading] = useState(true);
+
+  const persistToken = useCallback((t: string | null) => {
+    setTokenState(t);
+    if (t) {
+      localStorage.setItem(TOKEN_KEY, t);
+      const secure = window.location.protocol === "https:" ? "; Secure" : "";
+      document.cookie = `medos_token=${t}; path=/; max-age=${30 * 86400}; SameSite=Lax${secure}`;
+    } else {
+      localStorage.removeItem(TOKEN_KEY);
+      document.cookie = "medos_token=; path=/; max-age=0";
+    }
+  }, []);
+
+  // Restore session on mount.
+  useEffect(() => {
+    const t = localStorage.getItem(TOKEN_KEY);
+    if (!t) { setLoading(false); return; }
+    fetch("/api/auth/me", { headers: { Authorization: `Bearer ${t}` } })
+      .then((r) => (r.ok ? r.json() : null))
+      .then((data) => {
+        if (data?.user) {
+          persistToken(t);
+          setUser(data.user);
+        } else {
+          persistToken(null);
+        }
+      })
+      .catch(() => {})
+      .finally(() => setLoading(false));
+  }, [persistToken]);
+
+  const register = useCallback(
+    async (email: string, password: string, opts?: { displayName?: string }) => {
+      try {
+        const res = await fetch("/api/auth/register", {
+          method: "POST",
+          headers: { "Content-Type": "application/json" },
+          body: JSON.stringify({ email, password, displayName: opts?.displayName }),
+        });
+        const data = await res.json();
+        if (!res.ok) return { ok: false as const, error: data.error || "Registration failed" };
+        persistToken(data.token);
+        setUser(data.user);
+        return { ok: true as const, needsVerification: !data.user.emailVerified };
+      } catch {
+        return { ok: false as const, error: "Network error" };
+      }
+    },
+    [persistToken],
+  );
+
+  const login = useCallback(
+    async (email: string, password: string) => {
+      // One retry on cold-start: HF Spaces sleep, and the first request
+      // can timeout while the container wakes. The retry usually
+      // succeeds because the proxy's earlier timeout still nudged the
+      // Space into warming up.
+      const attempt = async () =>
+        fetch("/api/auth/login", {
+          method: "POST",
+          headers: { "Content-Type": "application/json" },
+          body: JSON.stringify({ email, password }),
+        });
+      try {
+        let res = await attempt();
+        let data = await res.json().catch(() => ({}));
+        if (!res.ok && data?.code === "backend_cold_start") {
+          res = await attempt();
+          data = await res.json().catch(() => ({}));
+        }
+        if (!res.ok) return { ok: false as const, error: data.error || "Login failed" };
+        persistToken(data.token);
+        setUser(data.user);
+        return { ok: true as const };
+      } catch {
+        return { ok: false as const, error: "Network error" };
+      }
+    },
+    [persistToken],
+  );
+
+  const verifyEmail = useCallback(
+    async (code: string) => {
+      try {
+        const t = localStorage.getItem(TOKEN_KEY);
+        const res = await fetch("/api/auth/verify-email", {
+          method: "POST",
+          headers: { "Content-Type": "application/json", Authorization: `Bearer ${t}` },
+          body: JSON.stringify({ code }),
+        });
+        const data = await res.json();
+        if (!res.ok) return { ok: false as const, error: data.error };
+        setUser((u) => (u ? { ...u, emailVerified: true } : u));
+        return { ok: true as const };
+      } catch {
+        return { ok: false as const, error: "Network error" };
+      }
+    },
+    [],
+  );
+
+  const resendVerification = useCallback(async () => {
+    const t = localStorage.getItem(TOKEN_KEY);
+    await fetch("/api/auth/resend-verification", {
+      method: "POST",
+      headers: { Authorization: `Bearer ${t}` },
+    }).catch(() => {});
+  }, []);
+
+  const forgotPassword = useCallback(async (email: string) => {
+    try {
+      const res = await fetch("/api/auth/forgot-password", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ email }),
+      });
+      const data = await res.json();
+      return { ok: res.ok, message: data.message || data.error };
+    } catch {
+      return { ok: false, message: "Network error" };
+    }
+  }, []);
+
+  const resetPassword = useCallback(
+    async (email: string, code: string, newPassword: string) => {
+      try {
+        const res = await fetch("/api/auth/reset-password", {
+          method: "POST",
+          headers: { "Content-Type": "application/json" },
+          body: JSON.stringify({ email, code, newPassword }),
+        });
+        const data = await res.json();
+        if (!res.ok) return { ok: false as const, error: data.error };
+        if (data.token) persistToken(data.token);
+        return { ok: true as const };
+      } catch {
+        return { ok: false as const, error: "Network error" };
+      }
+    },
+    [persistToken],
+  );
+
+  const logout = useCallback(async () => {
+    const t = localStorage.getItem(TOKEN_KEY);
+    if (t) fetch("/api/auth/logout", { method: "POST", headers: { Authorization: `Bearer ${t}` } }).catch(() => {});
+    persistToken(null);
+    setUser(null);
+  }, [persistToken]);
+
+  /**
+   * Self-service account deletion (GDPR Art. 17). The backend at
+   * DELETE /api/auth/me enforces password re-auth, email match,
+   * admin-self-delete block, and per-IP rate limiting; this hook
+   * only forwards the request and wipes local state on success
+   * (same as logout). On any non-2xx response we surface the
+   * backend's error verbatim so the user sees "Password is
+   * incorrect" / "Email confirmation does not match" / "Too many
+   * deletion attempts" rather than a generic failure.
+   */
+  const deleteMe = useCallback(
+    async (password: string, confirmEmail: string) => {
+      const t = localStorage.getItem(TOKEN_KEY);
+      if (!t) return { ok: false as const, error: "Not authenticated" };
+      try {
+        const res = await fetch("/api/auth/me", {
+          method: "DELETE",
+          headers: { "Content-Type": "application/json", Authorization: `Bearer ${t}` },
+          body: JSON.stringify({ password, confirmEmail }),
+        });
+        const data = await res.json().catch(() => ({}));
+        if (!res.ok) {
+          return { ok: false as const, error: data.error || "Account deletion failed" };
+        }
+        persistToken(null);
+        setUser(null);
+        return { ok: true as const, message: data.message };
+      } catch {
+        return { ok: false as const, error: "Network error" };
+      }
+    },
+    [persistToken],
+  );
+
+  return {
+    user,
+    token,
+    isAuthenticated: !!user,
+    isGuest: !user,
+    loading,
+    register,
+    login,
+    verifyEmail,
+    resendVerification,
+    forgotPassword,
+    resetPassword,
+    logout,
+    deleteMe,
+  };
+}
diff --git a/lib/hooks/useChat.ts b/lib/hooks/useChat.ts
new file mode 100644
index 0000000000000000000000000000000000000000..053e4845d4a2afddcc80cd831a94ce7ab199938e
--- /dev/null
+++ b/lib/hooks/useChat.ts
@@ -0,0 +1,269 @@
+"use client";
+
+import { useState, useCallback } from "react";
+import type { Provider, Preset } from "../types";
+import { buildPatientContext, buildMedicineInventoryContext, buildContactsContext } from "../health-store";
+
+export type ChatMessage = {
+  id: number;
+  role: "user" | "ai";
+  content: string;
+  timestamp: string;
+};
+
+export type SendOptions = {
+  preset?: Preset;
+  provider?: Provider;
+  model?: string;
+  apiKey?: string;
+  userHfToken?: string;
+  context?: {
+    country: string;
+    language: string;
+    emergencyNumber: string;
+    units?: "metric" | "imperial";
+  };
+};
+
+/**
+ * Providers that require the user to supply credentials client-side.
+ * Free presets route via the server's HF_TOKEN, so no key is needed.
+ */
+const BYO_KEY_PROVIDERS: Provider[] = ["openai", "gemini", "claude"];
+
+export function useChat() {
+  const [messages, setMessages] = useState<ChatMessage[]>([
+    {
+      id: 1,
+      role: "ai",
+      content:
+        "Hello! I'm your medical AI assistant. I'm here to help answer health questions and provide guidance. How can I assist you today?\n\n*Please note: I'm an AI and cannot replace professional medical advice. For emergencies, please call 911 or visit your nearest emergency room.*",
+      timestamp: new Date().toLocaleTimeString([], {
+        hour: "2-digit",
+        minute: "2-digit",
+      }),
+    },
+  ]);
+  const [isTyping, setIsTyping] = useState(false);
+  const [error, setError] = useState<string | null>(null);
+
+  const sendMessage = useCallback(
+    async (content: string, options: SendOptions) => {
+      if (!content.trim()) return;
+
+      // Only require an API key for BYO providers used directly (no preset).
+      if (
+        !options.preset &&
+        options.provider &&
+        BYO_KEY_PROVIDERS.includes(options.provider) &&
+        !options.apiKey?.trim()
+      ) {
+        setError("Please add an API key in Settings first.");
+        return;
+      }
+
+      const timestamp = new Date().toLocaleTimeString([], {
+        hour: "2-digit",
+        minute: "2-digit",
+      });
+
+      const userMessage: ChatMessage = {
+        id: Date.now(),
+        role: "user",
+        content: content.trim(),
+        timestamp,
+      };
+
+      setMessages((prev) => [...prev, userMessage]);
+      setIsTyping(true);
+      setError(null);
+
+      try {
+        // 45-second timeout — prevents infinite loading on cold starts
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), 45000);
+
+        const response = await fetch("/api/chat", {
+          method: "POST",
+          headers: { "Content-Type": "application/json" },
+          signal: controller.signal,
+          body: JSON.stringify({
+            preset: options.preset,
+            provider: options.provider,
+            model: options.model,
+            apiKey: options.apiKey,
+            userHfToken: options.userHfToken,
+            context: options.context,
+            messages: [...messages, userMessage].map((m, i) => ({
+              role: m.role === "ai" ? "assistant" : "user",
+              // Inject patient context only on the FIRST user message of
+              // the conversation — keeps it concise and avoids bloating
+              // every turn with repeated profile data.
+              content:
+                i === 0 && m.role === "user"
+                  ? m.content + buildPatientContext() + buildMedicineInventoryContext() + buildContactsContext()
+                  : m.content,
+            })),
+          }),
+        });
+
+        clearTimeout(timeout);
+
+        if (!response.ok) {
+          throw new Error(`Request failed: ${response.statusText}`);
+        }
+
+        if (!response.body) {
+          throw new Error("No response body");
+        }
+
+        const reader = response.body.getReader();
+        const decoder = new TextDecoder();
+        let aiContent = "";
+        let buffer = "";
+        const aiMessageId = Date.now() + 1;
+        let firstByteAt: number | null = null;
+        const requestStartedAt = Date.now();
+
+        // The assistant bubble is created LAZILY — only after the first real
+        // token arrives. While the stream is still flowing nothing is shown
+        // but the typing indicator (handled by the caller via isTyping). This
+        // keeps the Ask view clean: no empty MedOS card sitting above the
+        // typing dots during streaming.
+
+        while (true) {
+          const { done, value } = await reader.read();
+          if (done) break;
+
+          // SSE frames can be split across chunks — buffer until we see a
+          // double-newline separator before parsing.
+          buffer += decoder.decode(value, { stream: true });
+          const frames = buffer.split("\n\n");
+          buffer = frames.pop() || "";
+
+          for (const frame of frames) {
+            for (const line of frame.split("\n")) {
+              if (!line.startsWith("data: ")) continue;
+              const data = line.slice(6).trim();
+              if (!data) continue;
+              if (data === "[DONE]") break;
+
+              try {
+                const parsed = JSON.parse(data);
+                if (parsed.error) throw new Error(parsed.error);
+
+                // Backend providers emit the OpenAI-compatible shape:
+                //   { choices: [{ delta: { content: "..." } }], provider, model }
+                // We also accept a legacy top-level `content` field so old
+                // responses still render.
+                const chunkContent =
+                  parsed?.choices?.[0]?.delta?.content ??
+                  parsed?.content ??
+                  "";
+
+                if (chunkContent) {
+                  if (firstByteAt === null) {
+                    firstByteAt = Date.now();
+                    if (typeof console !== "undefined") {
+                      console.info(
+                        `[Chat] First token received in ${firstByteAt - requestStartedAt}ms` +
+                          (parsed?.provider ? ` via ${parsed.provider}` : "") +
+                          (parsed?.model ? ` (${parsed.model})` : ""),
+                      );
+                    }
+                  }
+                  aiContent += chunkContent;
+                  setMessages((prev) => {
+                    // First token: create the bubble. Subsequent tokens:
+                    // update its content in place.
+                    const existing = prev.find((m) => m.id === aiMessageId);
+                    if (existing) {
+                      return prev.map((m) =>
+                        m.id === aiMessageId ? { ...m, content: aiContent } : m,
+                      );
+                    }
+                    return [
+                      ...prev,
+                      {
+                        id: aiMessageId,
+                        role: "ai" as const,
+                        content: aiContent,
+                        timestamp: new Date().toLocaleTimeString([], {
+                          hour: "2-digit",
+                          minute: "2-digit",
+                        }),
+                      },
+                    ];
+                  });
+                }
+              } catch (parseErr) {
+                // Malformed frame — log once at info level so dev console
+                // can trace SSE issues without spamming for keep-alives.
+                if (typeof console !== "undefined") {
+                  console.debug("[Chat] Skipped SSE frame:", data.slice(0, 120));
+                }
+              }
+            }
+          }
+        }
+
+        // If the stream closed with zero content, surface it as an error
+        // so the user isn't left staring at an empty bubble.
+        if (!aiContent) {
+          throw new Error(
+            "The AI returned an empty response. Check Admin → LLM for provider health.",
+          );
+        }
+      } catch (err: any) {
+        const errorMessage =
+          err?.name === "AbortError"
+            ? "Response took too long. The AI service may be starting up — please try again in a moment."
+            : err?.message || "Failed to send message";
+        setError(errorMessage);
+        if (typeof console !== "undefined") {
+          console.error("[Chat] Stream failed:", errorMessage, err);
+        }
+
+        setMessages((prev) => [
+          ...prev,
+          {
+            id: Date.now() + 2,
+            role: "ai",
+            content: `⚠️ Error: ${errorMessage}\n\nPlease check your settings and try again.`,
+            timestamp: new Date().toLocaleTimeString([], {
+              hour: "2-digit",
+              minute: "2-digit",
+            }),
+          },
+        ]);
+      } finally {
+        setIsTyping(false);
+      }
+    },
+    [messages],
+  );
+
+  const clearMessages = useCallback(() => {
+    setMessages([
+      {
+        id: 1,
+        role: "ai",
+        content:
+          "Hello! I'm your medical AI assistant. How can I assist you today?",
+        timestamp: new Date().toLocaleTimeString([], {
+          hour: "2-digit",
+          minute: "2-digit",
+        }),
+      },
+    ]);
+    setError(null);
+  }, []);
+
+  return {
+    messages,
+    isTyping,
+    error,
+    sendMessage,
+    clearMessages,
+  };
+}
diff --git a/lib/hooks/useFamilyHealth.ts b/lib/hooks/useFamilyHealth.ts
new file mode 100644
index 0000000000000000000000000000000000000000..0e512b244fd0d508d0d88e62f8b1acf0c65b4c4f
--- /dev/null
+++ b/lib/hooks/useFamilyHealth.ts
@@ -0,0 +1,174 @@
+"use client";
+
+import { useCallback, useEffect, useState } from "react";
+import {
+  type FamilyMember,
+  type FamilyState,
+  type MedOSMode,
+  type MonthlyHealthRecord,
+  emptyFamilyState,
+  defaultFamily,
+  generateInviteCode,
+  nowISO,
+  SCHEMA_VERSION,
+} from "@/lib/family-health";
+
+const STORAGE_KEY = "medos.family.v1";
+const INVITE_TTL_MS = 7 * 24 * 60 * 60 * 1000;
+
+/**
+ * Persisted Family Health Tree state.
+ *
+ * Storage is local-only by default. Sharing happens via generated
+ * invite codes; nothing is sent to the backend unless an invite is
+ * accepted by another device (out of scope for this hook).
+ */
+export function useFamilyHealth() {
+  const [state, setState] = useState<FamilyState>(emptyFamilyState);
+  const [loaded, setLoaded] = useState(false);
+
+  // ---- Load on mount ----
+  useEffect(() => {
+    if (typeof window === "undefined") return;
+    try {
+      const raw = localStorage.getItem(STORAGE_KEY);
+      if (raw) {
+        const parsed = JSON.parse(raw) as FamilyState;
+        if (parsed?.schemaVersion === SCHEMA_VERSION) {
+          setState(parsed);
+        }
+      }
+    } catch {
+      // Ignore corrupted localStorage — fall back to empty state.
+    }
+    setLoaded(true);
+  }, []);
+
+  // ---- Persist on change (after first load) ----
+  useEffect(() => {
+    if (!loaded || typeof window === "undefined") return;
+    try {
+      localStorage.setItem(STORAGE_KEY, JSON.stringify(state));
+    } catch {
+      // Quota exceeded etc. — drop silently; the in-memory copy is
+      // still authoritative for this session.
+    }
+  }, [state, loaded]);
+
+  // ---- Mutators ----
+  const setMode = useCallback((mode: MedOSMode) => {
+    setState((s) => ({ ...s, mode }));
+  }, []);
+
+  const setCurrentMemberId = useCallback((memberId: string) => {
+    setState((s) => ({ ...s, currentMemberId: memberId }));
+  }, []);
+
+  const seedDefaultFamily = useCallback(() => {
+    setState((s) => {
+      if (s.members.length > 0) return s;
+      const members = defaultFamily();
+      return {
+        ...s,
+        members,
+        currentMemberId: members[0]?.id ?? null,
+        mode: "family-admin",
+      };
+    });
+  }, []);
+
+  const addMember = useCallback(
+    (input: Omit<FamilyMember, "id" | "createdAt" | "updatedAt">) => {
+      const now = nowISO();
+      const member: FamilyMember = {
+        ...input,
+        id: `member-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
+        createdAt: now,
+        updatedAt: now,
+      };
+      setState((s) => ({
+        ...s,
+        members: [...s.members, member],
+        currentMemberId: s.currentMemberId ?? member.id,
+      }));
+    },
+    [],
+  );
+
+  const updateMember = useCallback(
+    (memberId: string, patch: Partial<FamilyMember>) => {
+      setState((s) => ({
+        ...s,
+        members: s.members.map((m) =>
+          m.id === memberId ? { ...m, ...patch, updatedAt: nowISO() } : m,
+        ),
+      }));
+    },
+    [],
+  );
+
+  const upsertMonthlyRecord = useCallback(
+    (
+      input: Omit<MonthlyHealthRecord, "id" | "createdAt" | "updatedAt">,
+    ) => {
+      const now = nowISO();
+      setState((s) => {
+        const existing = s.records.find(
+          (r) => r.memberId === input.memberId && r.month === input.month,
+        );
+        if (existing) {
+          return {
+            ...s,
+            records: s.records.map((r) =>
+              r.id === existing.id ? { ...r, ...input, updatedAt: now } : r,
+            ),
+          };
+        }
+        const record: MonthlyHealthRecord = {
+          ...input,
+          id: `rec-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
+          createdAt: now,
+          updatedAt: now,
+        };
+        return { ...s, records: [...s.records, record] };
+      });
+    },
+    [],
+  );
+
+  const createInvite = useCallback(
+    (memberId: string, mode: MedOSMode) => {
+      const code = generateInviteCode();
+      const expiresAt = new Date(Date.now() + INVITE_TTL_MS).toISOString();
+      setState((s) => ({
+        ...s,
+        invites: [
+          ...s.invites.filter(
+            (i) => new Date(i.expiresAt).getTime() > Date.now(),
+          ),
+          { code, memberId, mode, expiresAt },
+        ],
+      }));
+      return { code, expiresAt };
+    },
+    [],
+  );
+
+  const exportData = useCallback(() => state, [state]);
+
+  return {
+    mode: state.mode,
+    members: state.members,
+    records: state.records,
+    currentMemberId: state.currentMemberId,
+    invites: state.invites,
+    setMode,
+    setCurrentMemberId,
+    seedDefaultFamily,
+    addMember,
+    updateMember,
+    upsertMonthlyRecord,
+    createInvite,
+    exportData,
+  };
+}
diff --git a/lib/hooks/useGeoDetect.ts b/lib/hooks/useGeoDetect.ts
new file mode 100644
index 0000000000000000000000000000000000000000..e1fd74337f88e6f76fbcc00d62db8b7a192beca8
--- /dev/null
+++ b/lib/hooks/useGeoDetect.ts
@@ -0,0 +1,51 @@
+"use client";
+
+import { useEffect, useRef } from "react";
+import type { SupportedLanguage } from "../i18n";
+
+export type GeoResult = {
+  country: string;
+  language: SupportedLanguage;
+  emergencyNumber: string;
+  source: "header" | "ipapi" | "default";
+};
+
+type Options = {
+  /** When true, the hook will NOT apply the detected value — the user has
+   *  already set a language/country explicitly and auto-detect must not
+   *  override their choice. */
+  skip: boolean;
+  onResult: (result: GeoResult) => void;
+};
+
+/**
+ * Calls `/api/geo` exactly once per mount. Silent on any failure — the
+ * existing client-side `detectLanguage()` / `detectCountry()` remain as
+ * the ultimate fallback path inside useSettings.
+ */
+export function useGeoDetect({ skip, onResult }: Options): void {
+  const fired = useRef(false);
+
+  useEffect(() => {
+    if (skip || fired.current) return;
+    fired.current = true;
+
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), 3000);
+
+    fetch("/api/geo", { signal: controller.signal })
+      .then((r) => (r.ok ? r.json() : null))
+      .then((data: GeoResult | null) => {
+        if (data && data.country) onResult(data);
+      })
+      .catch(() => {
+        /* silent — caller keeps its current values */
+      })
+      .finally(() => clearTimeout(timeout));
+
+    return () => {
+      clearTimeout(timeout);
+      controller.abort();
+    };
+  }, [skip, onResult]);
+}
diff --git a/lib/hooks/useHealthStore.ts b/lib/hooks/useHealthStore.ts
new file mode 100644
index 0000000000000000000000000000000000000000..b994a71cadc03bea4715c8a7baa45cd4929d8da7
--- /dev/null
+++ b/lib/hooks/useHealthStore.ts
@@ -0,0 +1,358 @@
+"use client";
+
+import { useState, useCallback, useEffect, useRef } from "react";
+import * as hs from "../health-store";
+
+/**
+ * Build a flat array of sync items from all localStorage entities.
+ * Used for the initial bulk sync on login.
+ */
+function buildSyncPayload(): Array<{ id: string; type: string; data: any }> {
+  const items: Array<{ id: string; type: string; data: any }> = [];
+  for (const m of hs.loadMedications()) items.push({ id: m.id, type: "medication", data: m });
+  for (const l of hs.loadMedicationLogs()) items.push({ id: l.id, type: "medication_log", data: l });
+  for (const a of hs.loadAppointments()) items.push({ id: a.id, type: "appointment", data: a });
+  for (const v of hs.loadVitals()) items.push({ id: v.id, type: "vital", data: v });
+  for (const r of hs.loadRecords()) items.push({ id: r.id, type: "record", data: r });
+  for (const m of hs.loadMedicines()) items.push({ id: m.id, type: "medicine", data: m });
+  for (const c of hs.loadHistory()) items.push({ id: c.id, type: "conversation", data: c });
+  for (const c of hs.loadContacts()) items.push({ id: c.id, type: "contact", data: c });
+  // EHR profile — stored as a single record with a fixed ID per user
+  const ehr = hs.loadEHRProfile();
+  if (ehr.completedAt) {
+    items.push({ id: "ehr-profile", type: "ehr_profile", data: ehr });
+  }
+  return items;
+}
+
+/**
+ * React hook wrapping the health-store's localStorage CRUD.
+ *
+ * When `authToken` is provided (user is logged in), mutations are
+ * also synced to the HF Space backend via /api/health-data.
+ * The initial login triggers a bulk sync of all existing localStorage
+ * data to the server (migration from guest → account).
+ *
+ * All writes are localStorage-first (offline-capable), with async
+ * server sync as a best-effort background operation.
+ */
+export function useHealthStore(authToken?: string | null) {
+  const [medications, setMedications] = useState<hs.Medication[]>([]);
+  const [medicationLogs, setMedicationLogs] = useState<hs.MedicationLog[]>([]);
+  const [appointments, setAppointments] = useState<hs.Appointment[]>([]);
+  const [vitals, setVitals] = useState<hs.VitalReading[]>([]);
+  const [records, setRecords] = useState<hs.HealthRecord[]>([]);
+  const [medicines, setMedicines] = useState<hs.MedicineItem[]>([]);
+  const [contacts, setContacts] = useState<hs.MedContact[]>([]);
+  const [ehrProfile, setEhrProfile] = useState<hs.EHRProfile>({});
+  const [history, setHistory] = useState<hs.ConversationSummary[]>([]);
+  const [loaded, setLoaded] = useState(false);
+
+  const refresh = useCallback(() => {
+    setMedications(hs.loadMedications());
+    setMedicationLogs(hs.loadMedicationLogs());
+    setAppointments(hs.loadAppointments());
+    setVitals(hs.loadVitals());
+    setRecords(hs.loadRecords());
+    setMedicines(hs.loadMedicines());
+    setContacts(hs.loadContacts());
+    setEhrProfile(hs.loadEHRProfile());
+    setHistory(hs.loadHistory());
+  }, []);
+
+  useEffect(() => {
+    refresh();
+    setLoaded(true);
+  }, [refresh]);
+
+  // --- Server sync (when authenticated) ---
+  const synced = useRef(false);
+
+  // On first login, bulk-sync all localStorage to server.
+  useEffect(() => {
+    if (!authToken || synced.current) return;
+    synced.current = true;
+    const items = buildSyncPayload();
+    if (items.length === 0) return;
+    fetch("/api/health-data/sync", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${authToken}`,
+      },
+      body: JSON.stringify({ items }),
+    }).catch(() => {});
+  }, [authToken]);
+
+  /** Best-effort server upsert — fire and forget. */
+  const syncItem = useCallback(
+    (id: string, type: string, data: any) => {
+      if (!authToken) return;
+      fetch("/api/health-data", {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          Authorization: `Bearer ${authToken}`,
+        },
+        body: JSON.stringify({ id, type, data }),
+      }).catch(() => {});
+    },
+    [authToken],
+  );
+
+  const syncDelete = useCallback(
+    (id: string) => {
+      if (!authToken) return;
+      fetch(`/api/health-data?id=${id}`, {
+        method: "DELETE",
+        headers: { Authorization: `Bearer ${authToken}` },
+      }).catch(() => {});
+    },
+    [authToken],
+  );
+
+  // --- Medications ---
+  const addMedication = useCallback(
+    (med: Omit<hs.Medication, "id">) => {
+      const saved = hs.saveMedication(med);
+      refresh();
+      syncItem(saved.id, "medication", saved);
+    },
+    [refresh, syncItem],
+  );
+  const editMedication = useCallback(
+    (id: string, patch: Partial<hs.Medication>) => {
+      hs.updateMedication(id, patch);
+      refresh();
+      const updated = hs.loadMedications().find((m) => m.id === id);
+      if (updated) syncItem(id, "medication", updated);
+    },
+    [refresh, syncItem],
+  );
+  const deleteMedication = useCallback(
+    (id: string) => {
+      hs.removeMedication(id);
+      refresh();
+      syncDelete(id);
+    },
+    [refresh, syncDelete],
+  );
+  const markMedTaken = useCallback(
+    (medicationId: string, date: string, time: string) => {
+      hs.logMedicationTaken(medicationId, date, time);
+      refresh();
+      // Sync the log entry
+      const logs = hs.loadMedicationLogs();
+      const latest = logs[logs.length - 1];
+      if (latest) syncItem(latest.id, "medication_log", latest);
+    },
+    [refresh, syncItem],
+  );
+
+  // --- Appointments ---
+  const addAppointment = useCallback(
+    (appt: Omit<hs.Appointment, "id">) => {
+      const saved = hs.saveAppointment(appt);
+      refresh();
+      syncItem(saved.id, "appointment", saved);
+    },
+    [refresh, syncItem],
+  );
+  const editAppointment = useCallback(
+    (id: string, patch: Partial<hs.Appointment>) => {
+      hs.updateAppointment(id, patch);
+      refresh();
+      const updated = hs.loadAppointments().find((a) => a.id === id);
+      if (updated) syncItem(id, "appointment", updated);
+    },
+    [refresh, syncItem],
+  );
+  const deleteAppointment = useCallback(
+    (id: string) => {
+      hs.removeAppointment(id);
+      refresh();
+      syncDelete(id);
+    },
+    [refresh, syncDelete],
+  );
+
+  // --- Vitals ---
+  const addVital = useCallback(
+    (reading: Omit<hs.VitalReading, "id">) => {
+      const saved = hs.saveVital(reading);
+      refresh();
+      syncItem(saved.id, "vital", saved);
+    },
+    [refresh, syncItem],
+  );
+  const deleteVital = useCallback(
+    (id: string) => {
+      hs.removeVital(id);
+      refresh();
+      syncDelete(id);
+    },
+    [refresh, syncDelete],
+  );
+
+  // --- Records ---
+  const addRecord = useCallback(
+    (rec: Omit<hs.HealthRecord, "id">) => {
+      const saved = hs.saveRecord(rec);
+      refresh();
+      syncItem(saved.id, "record", saved);
+    },
+    [refresh, syncItem],
+  );
+  const editRecord = useCallback(
+    (id: string, patch: Partial<hs.HealthRecord>) => {
+      hs.updateRecord(id, patch);
+      refresh();
+      const updated = hs.loadRecords().find((r) => r.id === id);
+      if (updated) syncItem(id, "record", updated);
+    },
+    [refresh, syncItem],
+  );
+  const deleteRecord = useCallback(
+    (id: string) => {
+      hs.removeRecord(id);
+      refresh();
+      syncDelete(id);
+    },
+    [refresh, syncDelete],
+  );
+
+  // --- Medicines (inventory) ---
+  const addMedicine = useCallback(
+    (med: Omit<hs.MedicineItem, "id" | "createdAt">) => {
+      const saved = hs.saveMedicine(med);
+      refresh();
+      syncItem(saved.id, "medicine", saved);
+    },
+    [refresh, syncItem],
+  );
+  const editMedicine = useCallback(
+    (id: string, patch: Partial<hs.MedicineItem>) => {
+      hs.updateMedicine(id, patch);
+      refresh();
+      const updated = hs.loadMedicines().find((m) => m.id === id);
+      if (updated) syncItem(id, "medicine", updated);
+    },
+    [refresh, syncItem],
+  );
+  const deleteMedicine = useCallback(
+    (id: string) => {
+      hs.removeMedicine(id);
+      refresh();
+      syncDelete(id);
+    },
+    [refresh, syncDelete],
+  );
+
+  // --- Contacts (address book) ---
+  const addContact = useCallback(
+    (contact: Omit<hs.MedContact, "id" | "createdAt">) => {
+      const saved = hs.saveContact(contact);
+      refresh();
+      syncItem(saved.id, "contact", saved);
+    },
+    [refresh, syncItem],
+  );
+  const editContact = useCallback(
+    (id: string, patch: Partial<hs.MedContact>) => {
+      hs.updateContact(id, patch);
+      refresh();
+      const updated = hs.loadContacts().find((c) => c.id === id);
+      if (updated) syncItem(id, "contact", updated);
+    },
+    [refresh, syncItem],
+  );
+  const deleteContact = useCallback(
+    (id: string) => {
+      hs.removeContact(id);
+      refresh();
+      syncDelete(id);
+    },
+    [refresh, syncDelete],
+  );
+
+  // --- EHR Profile ---
+  const saveEHR = useCallback(
+    (profile: hs.EHRProfile) => {
+      hs.saveEHRProfile(profile);
+      setEhrProfile(profile);
+      // Sync to server as a single record
+      if (profile.completedAt) {
+        syncItem("ehr-profile", "ehr_profile", profile);
+      }
+    },
+    [syncItem],
+  );
+
+  // --- History ---
+  const saveSession = useCallback(
+    (summary: Omit<hs.ConversationSummary, "id">) => {
+      hs.saveConversation(summary);
+      refresh();
+    },
+    [refresh],
+  );
+  const deleteSession = useCallback(
+    (id: string) => {
+      hs.removeConversation(id);
+      refresh();
+    },
+    [refresh],
+  );
+  const clearAllHistory = useCallback(() => {
+    hs.clearHistory();
+    refresh();
+  }, [refresh]);
+
+  return {
+    loaded,
+    // Data
+    medications,
+    medicationLogs,
+    appointments,
+    vitals,
+    records,
+    medicines,
+    contacts,
+    ehrProfile,
+    history,
+    // Medication actions
+    addMedication,
+    editMedication,
+    deleteMedication,
+    markMedTaken,
+    getMedStreak: hs.getMedicationStreak,
+    isMedTaken: hs.isMedicationTaken,
+    // Appointment actions
+    addAppointment,
+    editAppointment,
+    deleteAppointment,
+    // Vital actions
+    addVital,
+    deleteVital,
+    // Record actions
+    addRecord,
+    editRecord,
+    deleteRecord,
+    // Medicine inventory actions
+    addMedicine,
+    editMedicine,
+    deleteMedicine,
+    // Contact actions
+    addContact,
+    editContact,
+    deleteContact,
+    // EHR profile
+    saveEHR,
+    // History actions
+    saveSession,
+    deleteSession,
+    clearAllHistory,
+    // Export
+    downloadAll: hs.downloadHealthData,
+  };
+}
diff --git a/lib/hooks/useMedicineScanner.ts b/lib/hooks/useMedicineScanner.ts
new file mode 100644
index 0000000000000000000000000000000000000000..313a5fa0ff83caa721ad9a02c99fec09667b29c8
--- /dev/null
+++ b/lib/hooks/useMedicineScanner.ts
@@ -0,0 +1,140 @@
+"use client";
+
+import { useState, useCallback } from "react";
+import type { MedicineItem, MedicineForm } from "@/lib/health-store";
+
+/**
+ * Scan endpoint — calls the MedOS backend proxy at /api/scan,
+ * which injects the HF_TOKEN_INFERENCE server-side and forwards
+ * to the Medicine Scanner Space. No token exposed to the browser.
+ *
+ * On the Vercel frontend, /api/scan proxies to the HF backend.
+ * On the HF backend, /api/scan proxies to the Scanner Space.
+ */
+const SCAN_API = "/api/scan";
+const HEALTH_API = "/api/scan";
+
+interface ScanResult {
+  success: boolean;
+  medicine?: Omit<MedicineItem, "id" | "createdAt">;
+  error?: string;
+  model_used?: string;
+}
+
+type ScannerStatus = "idle" | "waking" | "scanning";
+
+/**
+ * Hook for scanning medicine labels via the MedOS Medicine Scanner.
+ *
+ * Full lifecycle:
+ *   1. Check if Scanner Space is awake (via backend proxy)
+ *   2. If sleeping, poll until ready (HF auto-wakes on request)
+ *   3. Send image through backend proxy (token injected server-side)
+ *   4. Return structured MedicineItem JSON
+ *
+ * Zero tokens in the browser. All auth is server-side.
+ */
+export function useMedicineScanner() {
+  const [status, setStatus] = useState<ScannerStatus>("idle");
+  const [result, setResult] = useState<ScanResult | null>(null);
+  const [error, setError] = useState<string | null>(null);
+
+  /** Check if the Scanner Space is awake via the backend health proxy. */
+  const isAwake = useCallback(async (): Promise<boolean> => {
+    try {
+      const controller = new AbortController();
+      const timeout = setTimeout(() => controller.abort(), 6000);
+      const res = await fetch(HEALTH_API, { signal: controller.signal });
+      clearTimeout(timeout);
+      if (!res.ok) return false;
+      const data = await res.json();
+      return data.status === "ok";
+    } catch {
+      return false;
+    }
+  }, []);
+
+  /** Wake the Space if sleeping. Polls until ready (max ~3 min). */
+  const wakeSpace = useCallback(async (): Promise<boolean> => {
+    if (await isAwake()) return true;
+
+    setStatus("waking");
+
+    // The GET request to the health proxy itself triggers the wake
+    // (the backend fetches from the Scanner Space URL, waking it)
+    const maxAttempts = 36; // 36 * 5s = 3 min
+    for (let i = 0; i < maxAttempts; i++) {
+      await new Promise((r) => setTimeout(r, 5000));
+      if (await isAwake()) return true;
+    }
+    return false;
+  }, [isAwake]);
+
+  const scan = useCallback(async (imageFile: File | Blob) => {
+    setStatus("waking");
+    setResult(null);
+    setError(null);
+
+    try {
+      // Step 1: Ensure Scanner Space is awake
+      const awake = await wakeSpace();
+      if (!awake) {
+        setError("Scanner is starting up. Please try again in a moment.");
+        setResult({ success: false, error: "Scanner Space is still waking up." });
+        setStatus("idle");
+        return;
+      }
+
+      // Step 2: Send scan through backend proxy (token injected server-side)
+      setStatus("scanning");
+      const formData = new FormData();
+      formData.append("image", imageFile);
+
+      const response = await fetch(SCAN_API, {
+        method: "POST",
+        body: formData,
+        // No Authorization header — the backend proxy adds it
+      });
+
+      const data = await response.json();
+
+      if (data.success && data.medicine) {
+        const validForms: MedicineForm[] = [
+          "tablet", "capsule", "syrup", "inhaler",
+          "injection", "cream", "drops", "patch", "other",
+        ];
+        if (!validForms.includes(data.medicine.form)) {
+          data.medicine.form = "other";
+        }
+        if (typeof data.medicine.quantity !== "number" || data.medicine.quantity < 1) {
+          data.medicine.quantity = 1;
+        }
+        setResult(data);
+      } else {
+        setError(data.error || "Scan failed");
+        setResult(data);
+      }
+    } catch (e: any) {
+      const msg = e?.message || "Network error — scanner unavailable";
+      setError(msg);
+      setResult({ success: false, error: msg });
+    } finally {
+      setStatus("idle");
+    }
+  }, [wakeSpace]);
+
+  const reset = useCallback(() => {
+    setResult(null);
+    setError(null);
+  }, []);
+
+  return {
+    scan,
+    scanning: status !== "idle",
+    waking: status === "waking",
+    status,
+    result,
+    error,
+    reset,
+  };
+}
diff --git a/lib/hooks/useNotifications.ts b/lib/hooks/useNotifications.ts
new file mode 100644
index 0000000000000000000000000000000000000000..c760d67364d364eeefa1cfa9b0d7dc10328fbe34
--- /dev/null
+++ b/lib/hooks/useNotifications.ts
@@ -0,0 +1,152 @@
+"use client";
+
+import { useState, useEffect, useCallback, useMemo } from "react";
+import {
+  todayISO,
+  loadMedications,
+  loadMedicationLogs,
+  loadAppointments,
+  type Medication,
+  type Appointment,
+} from "../health-store";
+
+export interface Notification {
+  id: string;
+  type: "medication" | "appointment" | "reminder" | "info";
+  title: string;
+  message: string;
+  time: string; // "HH:MM"
+  read: boolean;
+  urgent: boolean;
+}
+
+const DISMISSED_KEY = "medos_dismissed_notifications";
+
+function loadDismissed(): Set<string> {
+  try {
+    const raw = localStorage.getItem(DISMISSED_KEY);
+    return raw ? new Set(JSON.parse(raw)) : new Set();
+  } catch {
+    return new Set();
+  }
+}
+
+function saveDismissed(ids: Set<string>): void {
+  try {
+    localStorage.setItem(DISMISSED_KEY, JSON.stringify([...ids]));
+  } catch {}
+}
+
+/**
+ * Generates today's notifications from the user's health data.
+ *
+ * Notifications are derived, not stored: every time the hook runs it
+ * scans medications + appointments for today and creates reminders
+ * for anything that's due or overdue. The user can dismiss individual
+ * notifications (persisted in localStorage).
+ *
+ * This is a client-side-only system — no push notifications, no server
+ * involvement. In the future this can be upgraded to Web Push / service
+ * worker notifications.
+ */
+export function useNotifications() {
+  const [dismissed, setDismissed] = useState<Set<string>>(new Set());
+  const [tick, setTick] = useState(0);
+
+  // Refresh every minute.
+  useEffect(() => {
+    setDismissed(loadDismissed());
+    const id = setInterval(() => setTick((t) => t + 1), 60000);
+    return () => clearInterval(id);
+  }, []);
+
+  const today = todayISO();
+  const now = new Date();
+  const nowMinutes = now.getHours() * 60 + now.getMinutes();
+
+  const notifications: Notification[] = useMemo(() => {
+    const items: Notification[] = [];
+    const meds = loadMedications().filter((m) => m.active);
+    const logs = loadMedicationLogs();
+    const appts = loadAppointments().filter(
+      (a) => a.date === today && a.status === "upcoming",
+    );
+
+    // Medication reminders — for each scheduled time today.
+    for (const med of meds) {
+      for (const time of med.times) {
+        const [h, m] = time.split(":").map(Number);
+        const medMinutes = (h || 0) * 60 + (m || 0);
+        const taken = logs.some(
+          (l) =>
+            l.medicationId === med.id &&
+            l.date === today &&
+            l.time === time &&
+            l.taken,
+        );
+
+        if (taken) continue; // Already taken — no notification.
+
+        const overdue = nowMinutes > medMinutes + 30;
+        const dueSoon = !overdue && nowMinutes >= medMinutes - 15;
+
+        if (overdue || dueSoon) {
+          items.push({
+            id: `med-${med.id}-${time}-${today}`,
+            type: "medication",
+            title: overdue ? `Overdue: ${med.name}` : `Due now: ${med.name}`,
+            message: `${med.dose} scheduled at ${time}`,
+            time,
+            read: false,
+            urgent: overdue,
+          });
+        }
+      }
+    }
+
+    // Appointment reminders — 30 min before.
+    for (const appt of appts) {
+      const [h, m] = appt.time.split(":").map(Number);
+      const apptMinutes = (h || 0) * 60 + (m || 0);
+      const in30 = apptMinutes - nowMinutes <= 30 && apptMinutes >= nowMinutes;
+      const overdue = nowMinutes > apptMinutes;
+
+      if (in30 || overdue) {
+        items.push({
+          id: `appt-${appt.id}-${today}`,
+          type: "appointment",
+          title: overdue ? `Missed: ${appt.title}` : `Coming up: ${appt.title}`,
+          message: `${appt.time}${appt.doctor ? ` · ${appt.doctor}` : ""}${appt.location ? ` · ${appt.location}` : ""}`,
+          time: appt.time,
+          read: false,
+          urgent: overdue,
+        });
+      }
+    }
+
+    return items.sort((a, b) => (a.urgent === b.urgent ? 0 : a.urgent ? -1 : 1));
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [today, tick]);
+
+  const active = notifications.filter((n) => !dismissed.has(n.id));
+  const count = active.length;
+
+  const dismiss = useCallback(
+    (id: string) => {
+      const next = new Set(dismissed);
+      next.add(id);
+      setDismissed(next);
+      saveDismissed(next);
+    },
+    [dismissed],
+  );
+
+  const dismissAll = useCallback(() => {
+    const next = new Set(dismissed);
+    for (const n of notifications) next.add(n.id);
+    setDismissed(next);
+    saveDismissed(next);
+  }, [dismissed, notifications]);
+
+  return { notifications: active, count, dismiss, dismissAll };
+}
diff --git a/lib/hooks/usePasswordResetLink.ts b/lib/hooks/usePasswordResetLink.ts
new file mode 100644
index 0000000000000000000000000000000000000000..2b19964579e949d10f4063fdb5a5d1863b3328d0
--- /dev/null
+++ b/lib/hooks/usePasswordResetLink.ts
@@ -0,0 +1,48 @@
+"use client";
+
+import { useEffect, useState } from "react";
+
+/**
+ * Parses the password-reset deep-link query params on first mount.
+ *
+ * The reset email contains a link like:
+ *   ${APP_URL}?action=reset&email=…&code=…
+ *
+ * When the user clicks it the app loads with those params; this hook
+ * extracts them, validates the shape (6-digit code, non-empty email),
+ * and clears them from the URL so a back/forward/refresh doesn't keep
+ * the code visible in the address bar.
+ *
+ * Returns null when there's no reset link in the URL.
+ */
+export interface PasswordResetLink {
+  email: string;
+  code: string;
+}
+
+export function usePasswordResetLink(): PasswordResetLink | null {
+  const [link, setLink] = useState<PasswordResetLink | null>(null);
+
+  useEffect(() => {
+    if (typeof window === "undefined") return;
+    const params = new URLSearchParams(window.location.search);
+    if (params.get("action") !== "reset") return;
+
+    const email = (params.get("email") || "").trim();
+    const code = (params.get("code") || "").trim();
+    if (!email || !/^\d{6}$/.test(code)) return;
+
+    setLink({ email, code });
+
+    // Clean the URL so the code isn't sitting in browser history.
+    params.delete("action");
+    params.delete("email");
+    params.delete("code");
+    const next = params.toString();
+    const cleanUrl =
+      window.location.pathname + (next ? `?${next}` : "") + window.location.hash;
+    window.history.replaceState({}, "", cleanUrl);
+  }, []);
+
+  return link;
+}
diff --git a/lib/hooks/useSettings.ts b/lib/hooks/useSettings.ts
new file mode 100644
index 0000000000000000000000000000000000000000..689a559b00f2b399acac339837921644016b0343
--- /dev/null
+++ b/lib/hooks/useSettings.ts
@@ -0,0 +1,246 @@
+"use client";
+
+import { useState, useEffect } from "react";
+import type { Provider, Preset } from "../types";
+import {
+  detectLanguage,
+  detectCountry,
+  getEmergencyNumber,
+  type SupportedLanguage,
+} from "../i18n";
+
+export type TextSize = "small" | "medium" | "large";
+
+export function useSettings() {
+  const [preset, setPreset] = useState<Preset>("free-best");
+  const [provider, setProvider] = useState<Provider>("hf");
+  const [apiKey, setApiKey] = useState("");
+  const [hfToken, setHfToken] = useState("");
+  const [isLoaded, setIsLoaded] = useState(false);
+
+  // New patient-friendly settings
+  const [advancedMode, setAdvancedMode] = useState(false);
+  const [language, setLanguage] = useState<SupportedLanguage>("en");
+  const [country, setCountry] = useState("US");
+  const [voiceEnabled, setVoiceEnabled] = useState(true);
+  const [readAloud, setReadAloud] = useState(false);
+  const [textSize, setTextSize] = useState<TextSize>("medium");
+  const [simpleLanguage, setSimpleLanguage] = useState(true);
+  const [darkMode, setDarkMode] = useState(false);
+  const [welcomeCompleted, setWelcomeCompleted] = useState(false);
+  const [emergencyNumber, setEmergencyNumber] = useState("112");
+  // True once the user picks a language/country manually — blocks any
+  // subsequent IP-based auto-detect from overriding their choice.
+  const [explicitLanguage, setExplicitLanguage] = useState(false);
+
+  // Load from localStorage on mount
+  useEffect(() => {
+    const savedPreset = localStorage.getItem("medos_preset") as Preset;
+    const savedProvider = localStorage.getItem("medos_provider") as Provider;
+    const savedApiKey = localStorage.getItem("medos_api_key");
+    const savedHfToken = localStorage.getItem("medos_hf_token");
+    const savedAdvanced = localStorage.getItem("medos_advanced_mode");
+    const savedLanguage = localStorage.getItem("medos_language") as SupportedLanguage;
+    const savedCountry = localStorage.getItem("medos_country");
+    const savedVoice = localStorage.getItem("medos_voice");
+    const savedReadAloud = localStorage.getItem("medos_read_aloud");
+    const savedTextSize = localStorage.getItem("medos_text_size") as TextSize;
+    const savedSimple = localStorage.getItem("medos_simple_language");
+    const savedDark = localStorage.getItem("medos_dark_mode");
+    const savedWelcome = localStorage.getItem("medos_welcome_completed");
+    const savedEmergency = localStorage.getItem("medos_emergency_number");
+    const savedExplicit = localStorage.getItem("medos_explicit_language");
+
+    if (savedPreset) setPreset(savedPreset);
+    if (savedProvider) setProvider(savedProvider);
+    if (savedApiKey) setApiKey(savedApiKey);
+    if (savedHfToken) setHfToken(savedHfToken);
+    if (savedAdvanced) setAdvancedMode(savedAdvanced === "true");
+    if (savedLanguage) {
+      setLanguage(savedLanguage);
+    } else {
+      // Auto-detect language on first load
+      const detected = detectLanguage();
+      setLanguage(detected);
+    }
+    if (savedCountry) {
+      setCountry(savedCountry);
+    } else {
+      const detected = detectCountry();
+      setCountry(detected);
+    }
+    if (savedVoice !== null) setVoiceEnabled(savedVoice === "true");
+    if (savedReadAloud !== null) setReadAloud(savedReadAloud === "true");
+    if (savedTextSize) setTextSize(savedTextSize);
+    if (savedSimple !== null) setSimpleLanguage(savedSimple === "true");
+    if (savedDark !== null) setDarkMode(savedDark === "true");
+    if (savedWelcome) setWelcomeCompleted(savedWelcome === "true");
+    if (savedEmergency) {
+      setEmergencyNumber(savedEmergency);
+    } else {
+      const detectedCountry = savedCountry || detectCountry();
+      setEmergencyNumber(getEmergencyNumber(detectedCountry));
+    }
+    if (savedExplicit !== null) setExplicitLanguage(savedExplicit === "true");
+
+    setIsLoaded(true);
+  }, []);
+
+  // Save all settings to localStorage when they change
+  useEffect(() => {
+    if (!isLoaded) return;
+    localStorage.setItem("medos_preset", preset);
+  }, [preset, isLoaded]);
+
+  useEffect(() => {
+    if (!isLoaded) return;
+    localStorage.setItem("medos_provider", provider);
+  }, [provider, isLoaded]);
+
+  useEffect(() => {
+    if (!isLoaded) return;
+    localStorage.setItem("medos_api_key", apiKey);
+  }, [apiKey, isLoaded]);
+
+  useEffect(() => {
+    if (!isLoaded) return;
+    if (hfToken) {
+      localStorage.setItem("medos_hf_token", hfToken);
+    } else {
+      localStorage.removeItem("medos_hf_token");
+    }
+  }, [hfToken, isLoaded]);
+
+  useEffect(() => {
+    if (!isLoaded) return;
+    localStorage.setItem("medos_advanced_mode", String(advancedMode));
+  }, [advancedMode, isLoaded]);
+
+  useEffect(() => {
+    if (!isLoaded) return;
+    localStorage.setItem("medos_language", language);
+  }, [language, isLoaded]);
+
+  useEffect(() => {
+    if (!isLoaded) return;
+    localStorage.setItem("medos_country", country);
+    const num = getEmergencyNumber(country);
+    setEmergencyNumber(num);
+    localStorage.setItem("medos_emergency_number", num);
+  }, [country, isLoaded]);
+
+  useEffect(() => {
+    if (!isLoaded) return;
+    localStorage.setItem("medos_voice", String(voiceEnabled));
+  }, [voiceEnabled, isLoaded]);
+
+  useEffect(() => {
+    if (!isLoaded) return;
+    localStorage.setItem("medos_read_aloud", String(readAloud));
+  }, [readAloud, isLoaded]);
+
+  useEffect(() => {
+    if (!isLoaded) return;
+    localStorage.setItem("medos_text_size", textSize);
+  }, [textSize, isLoaded]);
+
+  useEffect(() => {
+    if (!isLoaded) return;
+    localStorage.setItem("medos_simple_language", String(simpleLanguage));
+  }, [simpleLanguage, isLoaded]);
+
+  useEffect(() => {
+    if (!isLoaded) return;
+    localStorage.setItem("medos_dark_mode", String(darkMode));
+  }, [darkMode, isLoaded]);
+
+  useEffect(() => {
+    if (!isLoaded) return;
+    localStorage.setItem("medos_welcome_completed", String(welcomeCompleted));
+  }, [welcomeCompleted, isLoaded]);
+
+  useEffect(() => {
+    if (!isLoaded) return;
+    localStorage.setItem("medos_explicit_language", String(explicitLanguage));
+  }, [explicitLanguage, isLoaded]);
+
+  /**
+   * Wrap setLanguage so a manual pick also flips the "user chose" flag,
+   * which in turn prevents IP geo-detection from overriding the choice.
+   */
+  const setLanguageExplicit = (lang: SupportedLanguage) => {
+    setLanguage(lang);
+    setExplicitLanguage(true);
+  };
+
+  const setCountryExplicit = (c: string) => {
+    setCountry(c);
+    setExplicitLanguage(true);
+  };
+
+  /**
+   * Applied by useGeoDetect. Only called when explicitLanguage === false,
+   * so it never clobbers a manual choice.
+   */
+  const applyGeo = (g: {
+    country: string;
+    language: SupportedLanguage;
+    emergencyNumber: string;
+  }) => {
+    if (explicitLanguage) return;
+    setCountry(g.country);
+    setLanguage(g.language);
+    setEmergencyNumber(g.emergencyNumber);
+  };
+
+  const clearApiKey = () => {
+    setApiKey("");
+    localStorage.removeItem("medos_api_key");
+  };
+
+  const clearHfToken = () => {
+    setHfToken("");
+    localStorage.removeItem("medos_hf_token");
+  };
+
+  return {
+    // Original
+    preset,
+    setPreset,
+    provider,
+    setProvider,
+    apiKey,
+    setApiKey,
+    clearApiKey,
+    hfToken,
+    setHfToken,
+    clearHfToken,
+    isLoaded,
+    // Geo / language explicit-override plumbing
+    explicitLanguage,
+    setLanguageExplicit,
+    setCountryExplicit,
+    applyGeo,
+    // New patient-friendly settings
+    advancedMode,
+    setAdvancedMode,
+    language,
+    setLanguage,
+    country,
+    setCountry,
+    voiceEnabled,
+    setVoiceEnabled,
+    readAloud,
+    setReadAloud,
+    textSize,
+    setTextSize,
+    simpleLanguage,
+    setSimpleLanguage,
+    darkMode,
+    setDarkMode,
+    welcomeCompleted,
+    setWelcomeCompleted,
+    emergencyNumber,
+    setEmergencyNumber,
+  };
+}
diff --git a/lib/hooks/useTheme.ts b/lib/hooks/useTheme.ts
new file mode 100644
index 0000000000000000000000000000000000000000..7d67a04f562b0cf6d0506b7d6490441191ceb194
--- /dev/null
+++ b/lib/hooks/useTheme.ts
@@ -0,0 +1,57 @@
+'use client';
+
+import { useState, useEffect, useCallback } from 'react';
+
+export type ThemeMode = 'light' | 'dark' | 'system';
+
+function systemPrefersDark(): boolean {
+  if (typeof window === 'undefined') return false;
+  return window.matchMedia('(prefers-color-scheme: dark)').matches;
+}
+
+function applyDomClass(dark: boolean): void {
+  const root = document.documentElement;
+  root.classList.toggle('dark', dark);
+  root.style.colorScheme = dark ? 'dark' : 'light';
+}
+
+const STORAGE_KEY = 'medos-theme';
+
+/**
+ * Lightweight theme hook for the HuggingFace Space.
+ * Defaults to "light" on first visit. Users can toggle to dark or auto.
+ * Choice is persisted in localStorage.
+ */
+export function useTheme() {
+  const [theme, setThemeState] = useState<ThemeMode>('light');
+  const [resolved, setResolved] = useState<'light' | 'dark'>('light');
+
+  useEffect(() => {
+    const stored = (localStorage.getItem(STORAGE_KEY) as ThemeMode | null) ?? 'light';
+    setThemeState(stored);
+    const dark = stored === 'dark' || (stored === 'system' && systemPrefersDark());
+    setResolved(dark ? 'dark' : 'light');
+    applyDomClass(dark);
+  }, []);
+
+  useEffect(() => {
+    if (theme !== 'system') return;
+    const mq = window.matchMedia('(prefers-color-scheme: dark)');
+    const listener = (e: MediaQueryListEvent) => {
+      setResolved(e.matches ? 'dark' : 'light');
+      applyDomClass(e.matches);
+    };
+    mq.addEventListener('change', listener);
+    return () => mq.removeEventListener('change', listener);
+  }, [theme]);
+
+  const setTheme = useCallback((t: ThemeMode) => {
+    setThemeState(t);
+    localStorage.setItem(STORAGE_KEY, t);
+    const dark = t === 'dark' || (t === 'system' && systemPrefersDark());
+    setResolved(dark ? 'dark' : 'light');
+    applyDomClass(dark);
+  }, []);
+
+  return { theme, resolved, setTheme };
+}
diff --git a/lib/i18n.ts b/lib/i18n.ts
new file mode 100644
index 0000000000000000000000000000000000000000..f61ecaeb3b980830079b35e99a7a50e5d12a18d9
--- /dev/null
+++ b/lib/i18n.ts
@@ -0,0 +1,2965 @@
+// i18n - Internationalization support for MedOS
+// Provides translations and language/region detection
+
+export type SupportedLanguage =
+  | "en"
+  | "es"
+  | "fr"
+  | "pt"
+  | "it"
+  | "de"
+  | "ar"
+  | "hi"
+  | "sw"
+  | "zh"
+  | "ja"
+  | "ko"
+  | "ru"
+  | "tr"
+  | "vi"
+  | "th"
+  | "bn"
+  | "ur"
+  | "pl"
+  | "nl";
+
+export type RegionInfo = {
+  country: string;
+  countryCode: string;
+  emergencyNumber: string;
+  timezone: string;
+};
+
+export const LANGUAGE_NAMES: Record<SupportedLanguage, string> = {
+  en: "English",
+  es: "Español",
+  fr: "Français",
+  pt: "Português",
+  it: "Italiano",
+  de: "Deutsch",
+  ar: "العربية",
+  hi: "हिन्दी",
+  sw: "Kiswahili",
+  zh: "中文",
+  ja: "日本語",
+  ko: "한국어",
+  ru: "Русский",
+  tr: "Türkçe",
+  vi: "Tiếng Việt",
+  th: "ไทย",
+  bn: "বাংলা",
+  ur: "اردو",
+  pl: "Polski",
+  nl: "Nederlands",
+};
+
+export const EMERGENCY_NUMBERS: Record<string, string> = {
+  US: "911",
+  CA: "911",
+  GB: "999",
+  AU: "000",
+  NZ: "111",
+  EU: "112",
+  IT: "112",
+  DE: "112",
+  FR: "15",
+  ES: "112",
+  PT: "112",
+  NL: "112",
+  PL: "112",
+  IN: "112",
+  CN: "120",
+  JP: "119",
+  KR: "119",
+  BR: "192",
+  MX: "911",
+  AR: "107",
+  CO: "123",
+  ZA: "10177",
+  NG: "112",
+  KE: "999",
+  TZ: "114",
+  EG: "123",
+  MA: "15",
+  TR: "112",
+  RU: "103",
+  SA: "997",
+  AE: "998",
+  PK: "115",
+  BD: "999",
+  VN: "115",
+  TH: "1669",
+  PH: "911",
+  ID: "118",
+  MY: "999",
+  DEFAULT: "112",
+};
+
+export const COUNTRY_NAMES: Record<string, Record<string, string>> = {
+  en: {
+    US: "United States",
+    CA: "Canada",
+    GB: "United Kingdom",
+    AU: "Australia",
+    NZ: "New Zealand",
+    IT: "Italy",
+    DE: "Germany",
+    FR: "France",
+    ES: "Spain",
+    PT: "Portugal",
+    NL: "Netherlands",
+    PL: "Poland",
+    IN: "India",
+    CN: "China",
+    JP: "Japan",
+    KR: "South Korea",
+    BR: "Brazil",
+    MX: "Mexico",
+    AR: "Argentina",
+    CO: "Colombia",
+    ZA: "South Africa",
+    NG: "Nigeria",
+    KE: "Kenya",
+    TZ: "Tanzania",
+    EG: "Egypt",
+    MA: "Morocco",
+    TR: "Turkey",
+    RU: "Russia",
+    SA: "Saudi Arabia",
+    AE: "United Arab Emirates",
+    PK: "Pakistan",
+    BD: "Bangladesh",
+    VN: "Vietnam",
+    TH: "Thailand",
+    PH: "Philippines",
+    ID: "Indonesia",
+    MY: "Malaysia",
+  },
+};
+
+// Timezone to country code mapping
+const TIMEZONE_TO_COUNTRY: Record<string, string> = {
+  "America/New_York": "US",
+  "America/Chicago": "US",
+  "America/Denver": "US",
+  "America/Los_Angeles": "US",
+  "America/Anchorage": "US",
+  "Pacific/Honolulu": "US",
+  "America/Toronto": "CA",
+  "America/Vancouver": "CA",
+  "Europe/London": "GB",
+  "Europe/Paris": "FR",
+  "Europe/Berlin": "DE",
+  "Europe/Rome": "IT",
+  "Europe/Madrid": "ES",
+  "Europe/Lisbon": "PT",
+  "Europe/Amsterdam": "NL",
+  "Europe/Warsaw": "PL",
+  "Europe/Istanbul": "TR",
+  "Europe/Moscow": "RU",
+  "Asia/Tokyo": "JP",
+  "Asia/Seoul": "KR",
+  "Asia/Shanghai": "CN",
+  "Asia/Kolkata": "IN",
+  "Asia/Karachi": "PK",
+  "Asia/Dhaka": "BD",
+  "Asia/Bangkok": "TH",
+  "Asia/Ho_Chi_Minh": "VN",
+  "Asia/Jakarta": "ID",
+  "Asia/Kuala_Lumpur": "MY",
+  "Asia/Manila": "PH",
+  "Asia/Riyadh": "SA",
+  "Asia/Dubai": "AE",
+  "Australia/Sydney": "AU",
+  "Pacific/Auckland": "NZ",
+  "America/Sao_Paulo": "BR",
+  "America/Mexico_City": "MX",
+  "America/Argentina/Buenos_Aires": "AR",
+  "America/Bogota": "CO",
+  "Africa/Johannesburg": "ZA",
+  "Africa/Lagos": "NG",
+  "Africa/Nairobi": "KE",
+  "Africa/Dar_es_Salaam": "TZ",
+  "Africa/Cairo": "EG",
+  "Africa/Casablanca": "MA",
+};
+
+/**
+ * Country -> primary language used for auto-selection after IP geolocation.
+ * Only includes countries whose primary language is one of our supported set.
+ * If a country is missing, the caller should fall back to English.
+ */
+export const COUNTRY_TO_LANGUAGE: Record<string, SupportedLanguage> = {
+  // English-speaking
+  US: "en", GB: "en", CA: "en", AU: "en", NZ: "en", IE: "en", ZA: "en",
+  NG: "en", KE: "en", GH: "en", UG: "en", ZM: "en", ZW: "en", PH: "en",
+  SG: "en", MY: "en", IN: "en", PK: "en", BD: "en", LK: "en",
+  // Spanish
+  ES: "es", MX: "es", AR: "es", CO: "es", CL: "es", PE: "es", VE: "es",
+  EC: "es", GT: "es", CU: "es", BO: "es", DO: "es", HN: "es", PY: "es",
+  SV: "es", NI: "es", CR: "es", PA: "es", UY: "es", PR: "es",
+  // Portuguese
+  BR: "pt", PT: "pt", AO: "pt", MZ: "pt",
+  // French
+  FR: "fr", BE: "fr", LU: "fr", MC: "fr", SN: "fr", CI: "fr", CM: "fr",
+  CD: "fr", MG: "fr", HT: "fr", DZ: "fr", TN: "fr",
+  // German
+  DE: "de", AT: "de", CH: "de", LI: "de",
+  // Italian
+  IT: "it", SM: "it", VA: "it",
+  // Dutch
+  NL: "nl", SR: "nl",
+  // Polish
+  PL: "pl",
+  // Russian
+  RU: "ru", BY: "ru", KZ: "ru", KG: "ru",
+  // Turkish
+  TR: "tr",
+  // Arabic
+  SA: "ar", AE: "ar", EG: "ar", MA: "ar", JO: "ar", IQ: "ar", SY: "ar",
+  LB: "ar", YE: "ar", LY: "ar", OM: "ar", QA: "ar", KW: "ar", BH: "ar",
+  SD: "ar", PS: "ar",
+  // East/South Asia
+  ZH: "zh", CN: "zh", TW: "zh", HK: "zh", JP: "ja", KR: "ko",
+  TH: "th", VN: "vi",
+  // Swahili
+  TZ: "sw",
+  // Note: Indonesia (ID), Bangladesh (BD, overridden to "en" above for reach),
+  // and Hindi in India are left unmapped or English by default — users can
+  // switch manually via the language picker.
+};
+
+// Language code to likely country
+const LANGUAGE_TO_COUNTRY: Record<string, string> = {
+  en: "US",
+  es: "ES",
+  fr: "FR",
+  pt: "BR",
+  it: "IT",
+  de: "DE",
+  ar: "SA",
+  hi: "IN",
+  sw: "KE",
+  zh: "CN",
+  ja: "JP",
+  ko: "KR",
+  ru: "RU",
+  tr: "TR",
+  vi: "VN",
+  th: "TH",
+  bn: "BD",
+  ur: "PK",
+  pl: "PL",
+  nl: "NL",
+};
+
+export function detectLanguage(): SupportedLanguage {
+  if (typeof navigator === "undefined") return "en";
+  const browserLang = navigator.language || (navigator as any).userLanguage || "en";
+  const code = browserLang.split("-")[0].toLowerCase();
+  if (code in LANGUAGE_NAMES) return code as SupportedLanguage;
+  return "en";
+}
+
+export function detectCountry(): string {
+  if (typeof Intl === "undefined") return "US";
+  try {
+    const tz = Intl.DateTimeFormat().resolvedOptions().timeZone;
+    if (tz && TIMEZONE_TO_COUNTRY[tz]) return TIMEZONE_TO_COUNTRY[tz];
+  } catch {}
+
+  // Fallback: use browser language region
+  if (typeof navigator !== "undefined") {
+    const lang = navigator.language || "";
+    const parts = lang.split("-");
+    if (parts.length > 1) {
+      const region = parts[1].toUpperCase();
+      if (EMERGENCY_NUMBERS[region]) return region;
+    }
+    // Fallback from language
+    const code = parts[0].toLowerCase();
+    if (LANGUAGE_TO_COUNTRY[code]) return LANGUAGE_TO_COUNTRY[code];
+  }
+
+  return "US";
+}
+
+export function getEmergencyNumber(countryCode: string): string {
+  return EMERGENCY_NUMBERS[countryCode] || EMERGENCY_NUMBERS.DEFAULT;
+}
+
+/**
+ * Return the best supported language for a given ISO country code.
+ * Guaranteed to return a SupportedLanguage (English fallback).
+ */
+export function getLanguageForCountry(
+  countryCode: string,
+): SupportedLanguage {
+  const code = (countryCode || "").toUpperCase();
+  const lang = COUNTRY_TO_LANGUAGE[code];
+  if (lang && lang in LANGUAGE_NAMES) return lang;
+  return "en";
+}
+
+export function getCountryName(countryCode: string, lang: string = "en"): string {
+  const names = COUNTRY_NAMES[lang] || COUNTRY_NAMES.en;
+  return names[countryCode] || countryCode;
+}
+
+// Translations
+export type TranslationKey = keyof typeof translations.en;
+
+export const translations: Record<string, Record<string, string>> = {
+  en: {
+    // Welcome
+    welcome_title: "Welcome",
+    welcome_subtitle: "We can speak your language.",
+    welcome_detected: "We detected:",
+    welcome_continue: "Continue",
+    welcome_change_language: "Change language",
+    welcome_change_region: "Change region",
+    choose_language: "Choose your language",
+
+    // Home
+    home_headline: "Your medical assistant",
+    home_subheadline: "Ask in your language. Get simple health guidance.",
+    home_symptoms: "I have symptoms",
+    home_symptoms_desc: "Check fever, pain, cough, stomach problems, rash, and more",
+    home_medicine: "Medicine question",
+    home_medicine_desc: "What is this medicine for? How should I take it?",
+    home_pregnancy: "Pregnancy & child",
+    home_pregnancy_desc: "Pregnancy symptoms, newborn care, child fever, feeding",
+    home_emergency: "Emergency help",
+    home_emergency_desc: "Chest pain, trouble breathing, stroke signs, severe bleeding",
+    home_voice: "Speak instead of typing",
+    home_voice_desc: "Tap the microphone and talk",
+
+    // Quick topics
+    topic_fever: "Fever",
+    topic_cough: "Cough",
+    topic_headache: "Headache",
+    topic_blood_pressure: "Blood pressure",
+    topic_diabetes: "Diabetes",
+    topic_pregnancy: "Pregnancy",
+    topic_mental_health: "Mental health",
+    topic_diarrhea: "Diarrhea",
+    topic_malaria: "Malaria",
+    topic_children: "Children",
+    topic_hypertension: "Hypertension",
+
+    // Nav
+    nav_home: "Home",
+    nav_ask: "Ask",
+    nav_emergency: "Emergency",
+    nav_topics: "Topics",
+    nav_settings: "Settings",
+
+    // Ask / Chat
+    ask_headline: "Tell me what is happening",
+    ask_example_1: "I have chest pain",
+    ask_example_2: "My child has fever",
+    ask_example_3: "I feel dizzy",
+    ask_example_4: "Can I take this medicine?",
+    ask_type: "Type",
+    ask_speak: "Speak",
+    ask_symptom_check: "Start symptom check",
+    ask_placeholder: "Type your health question...",
+    ask_tap_speak: "Tap and speak",
+    ask_disclaimer: "Health AI provides general guidance only. Not a replacement for a doctor.",
+
+    // Symptom checker
+    symptom_who: "Who is this for?",
+    symptom_me: "Me",
+    symptom_child: "Child",
+    symptom_other: "Someone else",
+    symptom_main: "Main problem?",
+    symptom_pain: "Pain",
+    symptom_fever: "Fever",
+    symptom_cough: "Cough",
+    symptom_breathing: "Breathing",
+    symptom_stomach: "Stomach",
+    symptom_skin: "Skin",
+    symptom_mental: "Mental health",
+    symptom_duration: "How long?",
+    symptom_severity: "How severe?",
+    symptom_mild: "Mild",
+    symptom_moderate: "Moderate",
+    symptom_severe: "Severe",
+    symptom_danger: "Any danger signs?",
+    symptom_next: "Next",
+    symptom_back: "Back",
+    symptom_submit: "Get guidance",
+
+    // Emergency
+    emergency_title: "Emergency help",
+    emergency_call: "Call",
+    emergency_may_be: "This may be an emergency",
+    emergency_call_now: "Call emergency services now",
+    emergency_continue_chat: "Continue chatting",
+    emergency_heart_title: "Heart attack signs",
+    emergency_heart_1: "Chest pressure or pain",
+    emergency_heart_2: "Pain in arm, jaw, or back",
+    emergency_heart_3: "Sweating or nausea",
+    emergency_heart_4: "Trouble breathing",
+    emergency_stroke_title: "Stroke signs",
+    emergency_stroke_1: "Face drooping on one side",
+    emergency_stroke_2: "Arm weakness",
+    emergency_stroke_3: "Speech difficulty",
+    emergency_stroke_4: "Time to call emergency",
+    emergency_breathing_title: "Breathing emergency",
+    emergency_breathing_1: "Cannot catch breath",
+    emergency_breathing_2: "Lips or face turning blue",
+    emergency_breathing_3: "Chest tightness",
+    emergency_breathing_4: "Wheezing or gasping",
+    emergency_bleeding_title: "Severe bleeding",
+    emergency_bleeding_1: "Apply firm pressure",
+    emergency_bleeding_2: "Keep pressure on wound",
+    emergency_bleeding_3: "Elevate if possible",
+    emergency_bleeding_4: "Call emergency services",
+    emergency_do_now: "Do this now",
+    emergency_sit_still: "Sit down and stay still",
+    emergency_chew_aspirin: "Chew aspirin if not allergic",
+    emergency_dont_drive: "Do not drive yourself",
+
+    // Settings
+    settings_title: "Settings",
+    settings_language: "Language",
+    settings_country: "Country",
+    settings_voice: "Voice",
+    settings_read_aloud: "Read answers aloud",
+    settings_text_size: "Text size",
+    settings_text_small: "Small",
+    settings_text_medium: "Medium",
+    settings_text_large: "Large",
+    settings_simple_language: "Simple language",
+    settings_simple_language_desc: "Avoid medical jargon, give shorter instructions",
+    settings_dark_mode: "Dark mode",
+    settings_emergency_number: "Emergency number",
+    settings_privacy: "Privacy",
+    settings_privacy_desc: "Private and anonymous",
+    settings_advanced: "Advanced technical settings",
+    settings_advanced_warning: "Advanced settings are for technical users only.",
+    settings_hide_advanced: "Hide advanced settings",
+    settings_managed_mode: "Use MedOS managed mode",
+    settings_managed_desc: "Best for most people. No setup needed.",
+    settings_provider: "AI Provider",
+    settings_api_key: "API Key",
+    settings_custom_server: "Custom server",
+    settings_model: "Model",
+    settings_verify: "Verify Connection",
+    settings_clear_key: "Clear API Key",
+
+    // Trust badges
+    badge_private: "Private",
+    badge_no_signup: "No sign-up",
+    badge_free: "Free",
+    badge_your_language: "Speaks your language",
+    badge_not_doctor: "General guidance, not a replacement for a doctor",
+
+    // Topics
+    topics_title: "Health topics",
+    topics_subtitle: "Learn about common health conditions",
+
+    // Right panel
+    panel_top_topics: "Top health topics",
+    panel_emergency: "Emergency number",
+    panel_symptom_check: "Start symptom check",
+    panel_voice_help: "Voice help",
+    panel_related: "Related topics",
+    panel_danger_signs: "Danger signs to watch",
+    panel_when_care: "When to seek care",
+    panel_self_care: "Self-care tips",
+
+    // Misc
+    loading: "Loading...",
+    send: "Send",
+    close: "Close",
+    cancel: "Cancel",
+    save: "Save",
+    on: "On",
+    off: "Off",
+
+    // --- v2 UI copy: emotional, trust-first ---
+    home_hero_eyebrow: "Your worldwide medical companion",
+    home_hero_title: "Tell me what's bothering you.",
+    home_hero_subtitle:
+      "I'll help you understand it — calmly, clearly, and privately.",
+
+    ask_hero_title: "I'm listening.",
+    ask_hero_subtitle:
+      "Share your symptoms in your own words. I'll guide you through what it might be and what to do next.",
+
+    ask_placeholder_rotate_1: "I have chest pain since this morning…",
+    ask_placeholder_rotate_2: "My child has a fever of 39 °C…",
+    ask_placeholder_rotate_3: "I've had a headache for three days…",
+    ask_placeholder_rotate_4: "Is this medication safe with pregnancy?",
+    ask_placeholder_rotate_5: "I feel anxious and can't sleep…",
+    ask_suggestions: "Try one of these",
+
+    trust_reviewed: "Aligned with WHO · CDC · NHS guidelines",
+    trust_private: "Private & anonymous",
+    trust_247: "Available 24/7",
+    trust_source_chip: "Reviewed with medical guidelines",
+
+    ai_analyzing: "Analyzing your symptoms…",
+    ai_empathy_default: "I hear you. Let me help.",
+
+    emergency_quick_label: "Emergency",
+    theme_light: "Light",
+    theme_dark: "Dark",
+    theme_auto: "Auto",
+    home_quick_topics: "Quick topics",
+
+    // --- Health tracker & navigation ---
+    nav_health: "Health",
+    nav_dashboard: "Dashboard",
+    nav_medications: "Medications",
+    nav_appointments: "Appointments",
+    nav_vitals: "Vitals",
+    nav_records: "Records",
+    nav_history: "History",
+    nav_health_tracker: "Health Tracker",
+    nav_tools: "Tools",
+    nav_schedule: "Schedule",
+    nav_login: "Log in",
+    nav_profile: "Profile",
+
+    // Health Dashboard
+    health_tracker: "Health Tracker",
+    health_today_overview: "Today's overview",
+    health_meds_today: "Meds today",
+    health_upcoming: "Upcoming",
+    health_export: "Export",
+    health_export_all: "Export all health data",
+    health_todays_meds: "Today's medications",
+    health_upcoming_appts: "Upcoming appointments",
+    health_latest_vitals: "Latest vitals",
+    health_see_all: "See all",
+    health_start_tracking: "Start tracking your health",
+    health_start_desc: "Add your medications, appointments, and vital signs. Everything stays private in your browser — no account needed.",
+    health_add_med: "Add medication",
+    health_schedule_appt: "Schedule appointment",
+    health_log_vitals: "Log vitals",
+
+    // Medications
+    med_title: "Medications",
+    med_subtitle: "Track your daily medications and build a streak",
+    med_add: "Add",
+    med_cancel: "Cancel",
+    med_new: "New Medication",
+    med_name: "Name",
+    med_dose: "Dose",
+    med_frequency: "Frequency",
+    med_times: "Time(s)",
+    med_save: "Save Medication",
+    med_none: "No medications yet",
+    med_none_desc: "Tap \"Add\" to start tracking your medications",
+    med_morning: "Morning",
+    med_afternoon: "Afternoon",
+    med_evening: "Evening",
+    med_delete: "Delete medication",
+
+    // Appointments
+    appt_title: "Appointments",
+    appt_subtitle: "Doctor visits, lab tests, exams, and more",
+    appt_add: "Add",
+    appt_cancel: "Cancel",
+    appt_new: "New Appointment",
+    appt_name: "Title",
+    appt_type: "Type",
+    appt_recurring: "Recurring",
+    appt_one_time: "One-time",
+    appt_date: "Date",
+    appt_time: "Time",
+    appt_doctor: "Doctor (optional)",
+    appt_location: "Location (optional)",
+    appt_notes: "Notes (optional)",
+    appt_save: "Save Appointment",
+    appt_all: "All",
+    appt_upcoming: "Upcoming",
+    appt_completed: "Completed",
+    appt_none: "No appointments",
+    appt_none_desc: "Tap \"Add\" to schedule your first appointment",
+    appt_mark_done: "Mark completed",
+    appt_delete: "Delete",
+
+    // Vitals
+    vital_title: "Vitals",
+    vital_subtitle: "Log blood pressure, glucose, weight, temperature, and more",
+    vital_log: "Log",
+    vital_cancel: "Cancel",
+    vital_new: "Log a reading",
+    vital_type: "Vital type",
+    vital_value: "Value",
+    vital_date: "Date",
+    vital_time: "Time",
+    vital_notes: "Notes (optional)",
+    vital_save: "Save Reading",
+    vital_no_readings: "No readings yet",
+    vital_recent: "Recent readings",
+    vital_no_data: "No readings yet. Tap a vital type above or \"Log\" to start.",
+
+    // Records
+    rec_title: "Health Records",
+    rec_subtitle: "Lab results, prescriptions, clinical notes",
+    rec_add: "Add",
+    rec_cancel: "Cancel",
+    rec_new: "New Record",
+    rec_name: "Title",
+    rec_type: "Type",
+    rec_date: "Date",
+    rec_notes: "Notes",
+    rec_tags: "Tags (comma-separated)",
+    rec_save: "Save Record",
+    rec_search: "Search records...",
+    rec_none: "No records yet",
+    rec_none_desc: "Add lab results, prescriptions, and clinical notes",
+    rec_privacy: "Records are stored locally in your browser only. Nobody else can see them.",
+
+    // History
+    hist_title: "Conversation History",
+    hist_subtitle: "Your past MedOS sessions, saved locally",
+    hist_clear: "Clear all",
+    hist_none: "No conversations yet",
+    hist_none_desc: "Your past MedOS sessions will appear here automatically",
+
+    // Follow-up chips
+    followup_label: "Follow up",
+
+    // --- Nearby ---
+    nearby_title: "Nearby",
+    nearby_subtitle: "Find pharmacies and doctors near you",
+    nearby_search: "Search Nearby",
+    nearby_use_gps: "Use my location",
+    nearby_detecting: "Detecting...",
+    nearby_searching: "Searching nearby...",
+    nearby_waking: "Waking up service...",
+    nearby_places_found: "places found",
+    nearby_no_results: "No pharmacies or doctors found nearby. Try a larger area or different location.",
+    nearby_location_set: "Location set",
+    nearby_location_denied: "Location access denied. Type a city name or postal code instead.",
+    nearby_location_failed: "Could not get location. Type a city name instead.",
+    nearby_find: "Find",
+    nearby_find_nearby: "Find Nearby",
+    nearby_find_healthcare: "Find healthcare nearby",
+    nearby_find_desc: "Type a city name, postal code, or share your GPS location to find pharmacies and doctors.",
+    nearby_directions: "Directions",
+    nearby_walk_min: "min walk",
+    nearby_type_all: "All",
+    nearby_type_pharmacy: "Pharmacy",
+    nearby_type_doctor: "Doctor",
+    nearby_placeholder: "City, address, or postal code...",
+
+    // --- Contacts ---
+    contacts_title: "Contacts",
+    contacts_saved: "contacts saved",
+    contacts_contact_saved: "contact saved",
+    contacts_no_contacts: "No contacts yet",
+    contacts_no_contacts_desc: "Save your doctors and pharmacies here. Use 'Find Nearby' to discover and add them.",
+    contacts_no_matches: "No matches",
+    contacts_no_matches_desc: "Try a different search term.",
+    contacts_new: "New Contact",
+    contacts_save: "Save Contact",
+    contacts_call: "Call",
+    contacts_search: "Search contacts...",
+    contacts_filter_all: "All",
+    contacts_filter_doctors: "Doctors",
+    contacts_filter_pharmacies: "Pharmacies",
+    contacts_type_doctor: "Doctor",
+    contacts_type_pharmacy: "Pharmacy",
+    contacts_type_drugstore: "Drugstore",
+    contacts_type_hospital: "Hospital",
+    contacts_type_clinic: "Clinic",
+    contacts_type_other: "Other",
+    contacts_field_name: "Name",
+    contacts_field_type: "Type",
+    contacts_field_specialty: "Specialty",
+    contacts_field_phone: "Phone",
+    contacts_field_email: "Email",
+    contacts_field_address: "Address",
+    contacts_field_postal: "Postal code",
+    contacts_field_city: "City",
+    contacts_field_notes: "Notes",
+    contacts_remove_confirm: "Remove this contact?",
+    contacts_saved_check: "Saved",
+
+    // --- Medicine Scanner ---
+    scanner_title: "Medicine Scanner",
+    scanner_subtitle: "AI-powered label recognition",
+    scanner_scan: "Scan",
+    scanner_scan_label: "Scan Label",
+    scanner_open_camera: "Open Camera",
+    scanner_position: "Position medicine here",
+    scanner_scan_your: "Scan your medicine label",
+    scanner_scan_desc: "Point your camera at the medicine box or label. Make sure the text is clear and well-lit.",
+    scanner_supports: "Supports: Photos, screenshots, or uploaded images",
+    scanner_reading: "Reading medicine label...",
+    scanner_reading_desc: "AI is extracting drug name, dosage, and instructions",
+    scanner_waking: "Waking up scanner...",
+    scanner_waking_desc: "The scanner sleeps when idle. Starting up now.",
+    scanner_failed: "Could not read label",
+    scanner_retry: "Retry",
+    scanner_detected: "Detected",
+    scanner_add_to_medicines: "Add to Medicines",
+    scanner_rescan: "Rescan",
+
+    // --- My Medicines ---
+    medicines_title: "My Medicines",
+    medicines_items: "items in your inventory",
+    medicines_add: "Add Medicine",
+    medicines_form_tablet: "Tablet",
+    medicines_form_capsule: "Capsule",
+    medicines_form_syrup: "Syrup",
+    medicines_form_inhaler: "Inhaler",
+    medicines_form_injection: "Injection",
+    medicines_form_cream: "Cream / Ointment",
+    medicines_form_drops: "Drops",
+    medicines_form_patch: "Patch",
+    medicines_form_other: "Other",
+    medicines_status_active: "Active",
+    medicines_status_expiring: "Expiring",
+    medicines_status_expired: "Expired",
+    medicines_status_discontinued: "Discontinued",
+    medicines_stock_low: "Low stock",
+    medicines_stock_out: "Out of stock",
+    medicines_no_medicines: "No medicines yet",
+    medicines_no_matches: "No matches",
+    medicines_add_first: "Add your first medicine to start tracking",
+    medicines_try_different: "Try a different search or filter",
+
+    // --- App Drawer (mobile navigation) ---
+    drawer_new_chat: "New Chat",
+    drawer_section_main: "Main",
+    drawer_section_tools: "Tools",
+    drawer_section_account: "Account",
+    drawer_medicine_scanner: "Medicine Scanner",
+    drawer_nearby: "Nearby",
+    drawer_sign_up: "Sign up / Log in",
+    drawer_close: "Close menu",
+    drawer_signed_in: "Signed in",
+    drawer_free_private: "Free & Private",
+    drawer_logout: "Log out",
+
+    // --- Profile ---
+    profile_export_json: "Export health data (JSON)",
+    profile_export_json_desc: "Download all your data as a file",
+    profile_print: "Print health report",
+    profile_print_desc: "PDF-friendly printable page for your doctor",
+    profile_ehr: "Health Profile (EHR)",
+    profile_ehr_desc: "Set up your medical history for personalized AI advice",
+    profile_data_yours: "Your data is yours",
+    profile_data_desc: "Health data is stored locally in your browser and synced to your private account on our server. No third parties. No ads. You can export or delete everything at any time.",
+    profile_member_since: "Member since",
+    profile_email_verified: "Email verified",
+    profile_email_not_verified: "Email not verified",
+
+    // --- Admin ---
+    admin_title: "Admin Dashboard",
+    admin_subtitle: "Platform management and analytics",
+    admin_tab_overview: "Overview",
+    admin_tab_users: "Users",
+    admin_tab_llm: "LLM",
+    admin_tab_email: "Email",
+    admin_tab_server: "Server",
+    admin_total_users: "Total Users",
+    admin_verified: "Verified",
+    admin_admins: "Admins",
+    admin_health_records: "Health Records",
+    admin_chat_sessions: "Chat Sessions",
+    admin_active_sessions: "Active Sessions",
+    // Admin — LLM tab
+    admin_llm_health: "LLM Provider Health",
+    admin_llm_health_subtitle: "Tests all models in the fallback chain and discovers enterprise models",
+    admin_fetch_models: "Fetch Models",
+    admin_fetching: "Fetching...",
+    admin_test_all_providers: "Test All Providers",
+    admin_testing: "Testing...",
+    admin_total_models: "Total Models",
+    admin_online: "Online",
+    admin_offline: "Offline",
+    admin_provider_status: "Provider Status",
+    admin_discovered_models: "Discovered Models",
+    admin_how_routing_works: "How Routing Works",
+    admin_no_models_tested: "No models tested",
+    admin_click_test: "Click \"Test All Providers\" to run a health check",
+    // Admin — Server tab
+    admin_ollabridge_title: "OllaBridge Cloud Gateway",
+    admin_ollabridge_connected: "OllaBridge URL configured",
+    admin_ollabridge_not_configured: "OllaBridge not configured — chat will fall back to HF Inference",
+    admin_hf_title: "HuggingFace Inference Providers",
+    admin_hf_configured: "HF token configured",
+    admin_hf_not_configured: "HF token not set — LLM health check will fail",
+    admin_groq_title: "Groq — Free Fast Inference",
+    admin_openai_title: "OpenAI — Enterprise (Paid)",
+    admin_anthropic_title: "Anthropic Claude — Enterprise (Paid)",
+    admin_watsonx_title: "IBM WatsonX — Enterprise (Paid)",
+    admin_local_ollama: "Local Ollama (Optional)",
+    admin_application_settings: "Application Settings",
+    admin_system_info: "System Info",
+    admin_save_config: "Save Configuration",
+    admin_saving: "Saving...",
+    admin_test_connection: "Test Connection",
+    admin_connected: "Connected",
+    admin_not_configured: "Not configured",
+    admin_save_before_test: "Save your changes before testing — the server needs the new URL/key on disk.",
+
+    // --- Common / shared ---
+    common_add: "Add",
+    common_edit: "Edit",
+    common_delete: "Delete",
+    common_search: "Search",
+    common_map: "Map",
+    common_update: "Update",
+    common_confirm: "Confirm",
+    common_export: "Export",
+
+    // --- Legal disclaimers ---
+    disclaimer_not_medical_device: "This is NOT a medical device and is NOT FDA/CE approved.",
+    disclaimer_not_emergency: "Do NOT use for emergencies — call your local emergency number.",
+    disclaimer_not_diagnostic: "Results may be inaccurate and are NOT diagnostic.",
+    disclaimer_consult: "Always consult a licensed healthcare provider before making medical decisions.",
+    disclaimer_no_liability: "MedOS is not liable for any decisions made based on this AI.",
+    disclaimer_full: "Health AI provides general guidance only. Not a replacement for a doctor. Not a medical device. Not FDA approved. Do not use for emergencies. Always consult a licensed healthcare provider.",
+  },
+
+  es: {
+    // --- Admin ---
+    admin_title: "Panel de administración",
+    admin_subtitle: "Gestión y análisis de la plataforma",
+    admin_tab_overview: "Resumen",
+    admin_tab_users: "Usuarios",
+    admin_tab_llm: "LLM",
+    admin_tab_email: "Correo",
+    admin_tab_server: "Servidor",
+    admin_total_users: "Usuarios totales",
+    admin_verified: "Verificados",
+    admin_admins: "Administradores",
+    admin_health_records: "Registros médicos",
+    admin_chat_sessions: "Sesiones de chat",
+    admin_active_sessions: "Sesiones activas",
+    admin_llm_health: "Salud de proveedores LLM",
+    admin_llm_health_subtitle: "Prueba todos los modelos de la cadena de respaldo y descubre modelos empresariales",
+    admin_fetch_models: "Obtener modelos",
+    admin_fetching: "Obteniendo...",
+    admin_test_all_providers: "Probar todos los proveedores",
+    admin_testing: "Probando...",
+    admin_total_models: "Modelos totales",
+    admin_online: "En línea",
+    admin_offline: "Desconectado",
+    admin_provider_status: "Estado del proveedor",
+    admin_discovered_models: "Modelos descubiertos",
+    admin_how_routing_works: "Cómo funciona el enrutamiento",
+    admin_no_models_tested: "Ningún modelo probado",
+    admin_click_test: "Haz clic en «Probar todos los proveedores» para ejecutar una comprobación",
+    admin_ollabridge_title: "Pasarela OllaBridge Cloud",
+    admin_ollabridge_connected: "URL de OllaBridge configurada",
+    admin_ollabridge_not_configured: "OllaBridge no configurado — el chat usará HF Inference como respaldo",
+    admin_hf_title: "Proveedores de inferencia HuggingFace",
+    admin_hf_configured: "Token HF configurado",
+    admin_hf_not_configured: "Token HF no configurado — la comprobación de LLM fallará",
+    admin_groq_title: "Groq — Inferencia rápida gratuita",
+    admin_openai_title: "OpenAI — Empresarial (de pago)",
+    admin_anthropic_title: "Anthropic Claude — Empresarial (de pago)",
+    admin_watsonx_title: "IBM WatsonX — Empresarial (de pago)",
+    admin_local_ollama: "Ollama local (opcional)",
+    admin_application_settings: "Configuración de la aplicación",
+    admin_system_info: "Información del sistema",
+    admin_save_config: "Guardar configuración",
+    admin_saving: "Guardando...",
+    admin_test_connection: "Probar conexión",
+    admin_connected: "Conectado",
+    admin_not_configured: "No configurado",
+    admin_save_before_test: "Guarda los cambios antes de probar — el servidor necesita la nueva URL/clave en disco.",
+
+    welcome_title: "Bienvenido",
+    welcome_subtitle: "Podemos hablar tu idioma.",
+    welcome_detected: "Detectamos:",
+    welcome_continue: "Continuar",
+    welcome_change_language: "Cambiar idioma",
+    welcome_change_region: "Cambiar región",
+    choose_language: "Elige tu idioma",
+    home_headline: "Tu asistente médico",
+    home_subheadline: "Pregunta en tu idioma. Recibe orientación de salud simple.",
+    home_symptoms: "Tengo síntomas",
+    home_symptoms_desc: "Revisar fiebre, dolor, tos, problemas estomacales, sarpullido y más",
+    home_medicine: "Pregunta sobre medicinas",
+    home_medicine_desc: "¿Para qué es esta medicina? ¿Cómo debo tomarla?",
+    home_pregnancy: "Embarazo e hijos",
+    home_pregnancy_desc: "Síntomas de embarazo, cuidado del recién nacido, fiebre infantil",
+    home_emergency: "Ayuda de emergencia",
+    home_emergency_desc: "Dolor de pecho, dificultad para respirar, señales de derrame",
+    home_voice: "Hablar en vez de escribir",
+    home_voice_desc: "Toca el micrófono y habla",
+    topic_fever: "Fiebre",
+    topic_cough: "Tos",
+    topic_headache: "Dolor de cabeza",
+    topic_blood_pressure: "Presión arterial",
+    topic_diabetes: "Diabetes",
+    topic_pregnancy: "Embarazo",
+    topic_mental_health: "Salud mental",
+    topic_diarrhea: "Diarrea",
+    topic_malaria: "Malaria",
+    topic_children: "Niños",
+    topic_hypertension: "Hipertensión",
+    nav_home: "Inicio",
+    nav_ask: "Preguntar",
+    nav_emergency: "Emergencia",
+    nav_topics: "Temas",
+    nav_settings: "Ajustes",
+    ask_headline: "Dime qué está pasando",
+    ask_example_1: "Tengo dolor de pecho",
+    ask_example_2: "Mi hijo tiene fiebre",
+    ask_example_3: "Me siento mareado",
+    ask_example_4: "¿Puedo tomar esta medicina?",
+    ask_type: "Escribir",
+    ask_speak: "Hablar",
+    ask_symptom_check: "Iniciar revisión de síntomas",
+    ask_placeholder: "Escribe tu pregunta de salud...",
+    ask_tap_speak: "Toca y habla",
+    ask_disclaimer: "La IA de salud proporciona orientación general. No reemplaza al médico.",
+    emergency_title: "Ayuda de emergencia",
+    emergency_call: "Llamar",
+    emergency_may_be: "Esto puede ser una emergencia",
+    emergency_call_now: "Llama a servicios de emergencia ahora",
+    emergency_continue_chat: "Continuar conversación",
+    settings_title: "Ajustes",
+    settings_language: "Idioma",
+    settings_country: "País",
+    settings_voice: "Voz",
+    settings_read_aloud: "Leer respuestas en voz alta",
+    settings_text_size: "Tamaño de texto",
+    settings_text_small: "Pequeño",
+    settings_text_medium: "Mediano",
+    settings_text_large: "Grande",
+    settings_simple_language: "Lenguaje simple",
+    settings_simple_language_desc: "Evitar jerga médica, dar instrucciones más cortas",
+    settings_dark_mode: "Modo oscuro",
+    settings_emergency_number: "Número de emergencia",
+    settings_privacy: "Privacidad",
+    settings_privacy_desc: "Privado y anónimo",
+    settings_advanced: "Ajustes técnicos avanzados",
+    settings_advanced_warning: "Los ajustes avanzados son solo para usuarios técnicos.",
+    badge_private: "Privado",
+    badge_no_signup: "Sin registro",
+    badge_free: "Gratis",
+    badge_your_language: "Habla tu idioma",
+    badge_not_doctor: "Orientación general, no reemplaza al médico",
+    topics_title: "Temas de salud",
+    topics_subtitle: "Aprende sobre condiciones comunes de salud",
+    loading: "Cargando...",
+    send: "Enviar",
+    close: "Cerrar",
+    cancel: "Cancelar",
+    save: "Guardar",
+    on: "Sí",
+    off: "No",
+    symptom_who: "¿Para quién es?",
+    symptom_me: "Yo",
+    symptom_child: "Niño",
+    symptom_other: "Otra persona",
+    symptom_main: "¿Problema principal?",
+    symptom_pain: "Dolor",
+    symptom_fever: "Fiebre",
+    symptom_cough: "Tos",
+    symptom_breathing: "Respiración",
+    symptom_stomach: "Estómago",
+    symptom_skin: "Piel",
+    symptom_mental: "Salud mental",
+    symptom_duration: "¿Cuánto tiempo?",
+    symptom_severity: "¿Qué tan grave?",
+    symptom_mild: "Leve",
+    symptom_moderate: "Moderado",
+    symptom_severe: "Grave",
+    symptom_next: "Siguiente",
+    symptom_back: "Atrás",
+    symptom_submit: "Obtener orientación",
+    settings_managed_mode: "Usar modo administrado MedOS",
+    settings_managed_desc: "Mejor para la mayoría. Sin configuración necesaria.",
+    settings_provider: "Proveedor de IA",
+    settings_api_key: "Clave API",
+    settings_model: "Modelo",
+    settings_verify: "Verificar conexión",
+    settings_clear_key: "Borrar clave API",
+    settings_hide_advanced: "Ocultar ajustes avanzados",
+    settings_custom_server: "Servidor personalizado",
+    panel_top_topics: "Temas principales de salud",
+    panel_emergency: "Número de emergencia",
+    panel_symptom_check: "Iniciar revisión de síntomas",
+    panel_voice_help: "Ayuda por voz",
+    panel_related: "Temas relacionados",
+    panel_danger_signs: "Señales de peligro",
+    panel_when_care: "Cuándo buscar atención",
+    panel_self_care: "Consejos de autocuidado",
+    emergency_heart_title: "Señales de ataque al corazón",
+    emergency_heart_1: "Presión o dolor en el pecho",
+    emergency_heart_2: "Dolor en brazo, mandíbula o espalda",
+    emergency_heart_3: "Sudoración o náuseas",
+    emergency_heart_4: "Dificultad para respirar",
+    emergency_stroke_title: "Señales de derrame cerebral",
+    emergency_stroke_1: "Cara caída de un lado",
+    emergency_stroke_2: "Debilidad en el brazo",
+    emergency_stroke_3: "Dificultad para hablar",
+    emergency_stroke_4: "Hora de llamar a emergencias",
+    emergency_breathing_title: "Emergencia respiratoria",
+    emergency_bleeding_title: "Sangrado severo",
+    emergency_do_now: "Haz esto ahora",
+
+    // Health tracker
+    nav_health: "Salud",
+    nav_dashboard: "Panel",
+    nav_medications: "Medicamentos",
+    nav_appointments: "Citas",
+    nav_vitals: "Signos vitales",
+    nav_records: "Registros",
+    nav_history: "Historial",
+    nav_health_tracker: "Seguimiento de salud",
+    nav_tools: "Herramientas",
+    nav_schedule: "Agenda",
+    nav_login: "Iniciar sesión",
+    nav_profile: "Perfil",
+    health_tracker: "Seguimiento de salud",
+    health_meds_today: "Meds hoy",
+    health_upcoming: "Próximas",
+    health_export: "Exportar",
+    health_todays_meds: "Medicamentos de hoy",
+    health_upcoming_appts: "Próximas citas",
+    health_latest_vitals: "Últimos signos vitales",
+    health_see_all: "Ver todo",
+    health_start_tracking: "Comienza a seguir tu salud",
+    health_start_desc: "Agrega tus medicamentos, citas y signos vitales. Todo queda privado en tu navegador.",
+    health_add_med: "Agregar medicamento",
+    health_schedule_appt: "Agendar cita",
+    health_log_vitals: "Registrar signos vitales",
+    med_title: "Medicamentos",
+    med_subtitle: "Sigue tus medicamentos diarios",
+    med_add: "Agregar",
+    med_cancel: "Cancelar",
+    med_new: "Nuevo medicamento",
+    med_name: "Nombre",
+    med_dose: "Dosis",
+    med_frequency: "Frecuencia",
+    med_times: "Hora(s)",
+    med_save: "Guardar medicamento",
+    med_none: "Sin medicamentos aún",
+    med_none_desc: "Toca \"Agregar\" para empezar",
+    med_morning: "Mañana",
+    med_afternoon: "Tarde",
+    med_evening: "Noche",
+    appt_title: "Citas",
+    appt_subtitle: "Consultas, análisis, exámenes y más",
+    appt_add: "Agregar",
+    appt_cancel: "Cancelar",
+    appt_new: "Nueva cita",
+    appt_save: "Guardar cita",
+    appt_all: "Todas",
+    appt_upcoming: "Próximas",
+    appt_completed: "Completadas",
+    appt_none: "Sin citas",
+    appt_none_desc: "Toca \"Agregar\" para agendar tu primera cita",
+    vital_title: "Signos vitales",
+    vital_subtitle: "Registra presión, glucosa, peso, temperatura y más",
+    vital_log: "Registrar",
+    vital_new: "Registrar lectura",
+    vital_save: "Guardar lectura",
+    vital_no_readings: "Sin lecturas aún",
+    vital_recent: "Lecturas recientes",
+    rec_title: "Registros médicos",
+    rec_subtitle: "Resultados de laboratorio, recetas, notas clínicas",
+    rec_add: "Agregar",
+    rec_new: "Nuevo registro",
+    rec_save: "Guardar registro",
+    rec_search: "Buscar registros...",
+    rec_none: "Sin registros aún",
+    rec_none_desc: "Agrega resultados de laboratorio, recetas y notas",
+    rec_privacy: "Los registros se guardan solo en tu navegador. Nadie más puede verlos.",
+    hist_title: "Historial de conversaciones",
+    hist_subtitle: "Tus sesiones pasadas con MedOS",
+    hist_clear: "Borrar todo",
+    hist_none: "Sin conversaciones aún",
+    hist_none_desc: "Tus sesiones pasadas aparecerán aquí automáticamente",
+    followup_label: "Seguir preguntando",
+
+    // --- Nearby ---
+    nearby_title: "Cercano",
+    nearby_subtitle: "Encuentra farmacias y médicos cerca de ti",
+    nearby_search: "Buscar cerca",
+    nearby_use_gps: "Usar mi ubicación",
+    nearby_detecting: "Detectando...",
+    nearby_searching: "Buscando cerca...",
+    nearby_waking: "Iniciando servicio...",
+    nearby_places_found: "lugares encontrados",
+    nearby_no_results: "No se encontraron farmacias ni médicos cerca. Prueba con otra zona.",
+    nearby_location_set: "Ubicación establecida",
+    nearby_location_denied: "Acceso a ubicación denegado. Escribe un nombre de ciudad o código postal.",
+    nearby_location_failed: "No se pudo obtener la ubicación. Escribe un nombre de ciudad.",
+    nearby_find: "Buscar",
+    nearby_find_nearby: "Buscar cerca",
+    nearby_find_healthcare: "Encuentra atención médica cerca",
+    nearby_find_desc: "Escribe un nombre de ciudad, código postal o comparte tu ubicación GPS.",
+    nearby_directions: "Direcciones",
+    nearby_walk_min: "min a pie",
+    nearby_type_all: "Todos",
+    nearby_type_pharmacy: "Farmacia",
+    nearby_type_doctor: "Médico",
+    nearby_placeholder: "Ciudad, dirección o código postal...",
+
+    // --- Contacts ---
+    contacts_title: "Contactos",
+    contacts_saved: "contactos guardados",
+    contacts_contact_saved: "contacto guardado",
+    contacts_no_contacts: "Sin contactos aún",
+    contacts_no_contacts_desc: "Guarda tus médicos y farmacias aquí. Usa 'Buscar cerca' para descubrirlos.",
+    contacts_no_matches: "Sin resultados",
+    contacts_new: "Nuevo contacto",
+    contacts_save: "Guardar contacto",
+    contacts_call: "Llamar",
+    contacts_search: "Buscar contactos...",
+    contacts_filter_all: "Todos",
+    contacts_filter_doctors: "Médicos",
+    contacts_filter_pharmacies: "Farmacias",
+    contacts_type_doctor: "Médico",
+    contacts_type_pharmacy: "Farmacia",
+    contacts_type_drugstore: "Droguería",
+    contacts_type_hospital: "Hospital",
+    contacts_type_clinic: "Clínica",
+    contacts_type_other: "Otro",
+    contacts_field_name: "Nombre",
+    contacts_field_type: "Tipo",
+    contacts_field_specialty: "Especialidad",
+    contacts_field_phone: "Teléfono",
+    contacts_field_email: "Correo electrónico",
+    contacts_field_address: "Dirección",
+    contacts_field_postal: "Código postal",
+    contacts_field_city: "Ciudad",
+    contacts_field_notes: "Notas",
+    contacts_remove_confirm: "¿Eliminar este contacto?",
+    contacts_saved_check: "Guardado",
+
+    // --- Medicine Scanner ---
+    scanner_title: "Escáner de medicinas",
+    scanner_subtitle: "Reconocimiento de etiquetas con IA",
+    scanner_scan: "Escanear",
+    scanner_scan_label: "Escanear etiqueta",
+    scanner_open_camera: "Abrir cámara",
+    scanner_position: "Coloca la medicina aquí",
+    scanner_scan_your: "Escanea la etiqueta de tu medicina",
+    scanner_scan_desc: "Apunta tu cámara a la caja o etiqueta. Asegúrate de que el texto sea claro.",
+    scanner_reading: "Leyendo etiqueta...",
+    scanner_reading_desc: "La IA está extrayendo nombre, dosis e instrucciones",
+    scanner_waking: "Iniciando escáner...",
+    scanner_failed: "No se pudo leer la etiqueta",
+    scanner_retry: "Reintentar",
+    scanner_detected: "Detectado",
+    scanner_add_to_medicines: "Agregar a medicinas",
+    scanner_rescan: "Re-escanear",
+
+    // --- My Medicines ---
+    medicines_title: "Mis medicinas",
+    medicines_items: "artículos en tu inventario",
+    medicines_form_tablet: "Tableta",
+    medicines_form_capsule: "Cápsula",
+    medicines_form_syrup: "Jarabe",
+    medicines_form_inhaler: "Inhalador",
+    medicines_form_injection: "Inyección",
+    medicines_form_cream: "Crema / Ungüento",
+    medicines_form_drops: "Gotas",
+    medicines_form_patch: "Parche",
+    medicines_form_other: "Otro",
+    medicines_status_active: "Activo",
+    medicines_status_expiring: "Por vencer",
+    medicines_status_expired: "Vencido",
+    medicines_stock_low: "Stock bajo",
+    medicines_stock_out: "Sin stock",
+
+    // --- App Drawer ---
+    drawer_new_chat: "Nuevo chat",
+    drawer_section_main: "Principal",
+    drawer_section_tools: "Herramientas",
+    drawer_section_account: "Cuenta",
+    drawer_medicine_scanner: "Escáner de medicinas",
+    drawer_nearby: "Cercano",
+    drawer_sign_up: "Registrarse / Iniciar sesión",
+    drawer_close: "Cerrar menú",
+    drawer_signed_in: "Sesión iniciada",
+    drawer_free_private: "Gratis y privado",
+    drawer_logout: "Cerrar sesión",
+
+    // --- Profile ---
+    profile_export_json: "Exportar datos de salud (JSON)",
+    profile_print: "Imprimir informe de salud",
+    profile_ehr: "Perfil de salud (EHR)",
+    profile_data_yours: "Tus datos son tuyos",
+    profile_member_since: "Miembro desde",
+
+    // --- Common ---
+    common_add: "Agregar",
+    common_edit: "Editar",
+    common_delete: "Eliminar",
+    common_search: "Buscar",
+    common_map: "Mapa",
+  },
+
+  fr: {
+    // --- Admin ---
+    admin_title: "Tableau de bord administrateur",
+    admin_subtitle: "Gestion et analyse de la plateforme",
+    admin_tab_overview: "Aperçu",
+    admin_tab_users: "Utilisateurs",
+    admin_tab_llm: "LLM",
+    admin_tab_email: "E-mail",
+    admin_tab_server: "Serveur",
+    admin_total_users: "Utilisateurs totaux",
+    admin_verified: "Vérifiés",
+    admin_admins: "Administrateurs",
+    admin_health_records: "Dossiers médicaux",
+    admin_chat_sessions: "Sessions de chat",
+    admin_active_sessions: "Sessions actives",
+    admin_llm_health: "Santé des fournisseurs LLM",
+    admin_llm_health_subtitle: "Teste tous les modèles de la chaîne de secours et découvre les modèles entreprise",
+    admin_fetch_models: "Récupérer les modèles",
+    admin_fetching: "Récupération...",
+    admin_test_all_providers: "Tester tous les fournisseurs",
+    admin_testing: "Test en cours...",
+    admin_total_models: "Modèles totaux",
+    admin_online: "En ligne",
+    admin_offline: "Hors ligne",
+    admin_provider_status: "État du fournisseur",
+    admin_discovered_models: "Modèles découverts",
+    admin_how_routing_works: "Comment fonctionne le routage",
+    admin_no_models_tested: "Aucun modèle testé",
+    admin_click_test: "Cliquez sur « Tester tous les fournisseurs » pour lancer une vérification",
+    admin_ollabridge_title: "Passerelle OllaBridge Cloud",
+    admin_ollabridge_connected: "URL OllaBridge configurée",
+    admin_ollabridge_not_configured: "OllaBridge non configuré — le chat utilisera HF Inference en secours",
+    admin_hf_title: "Fournisseurs d'inférence HuggingFace",
+    admin_hf_configured: "Jeton HF configuré",
+    admin_hf_not_configured: "Jeton HF non défini — la vérification LLM échouera",
+    admin_groq_title: "Groq — Inférence rapide gratuite",
+    admin_openai_title: "OpenAI — Entreprise (payant)",
+    admin_anthropic_title: "Anthropic Claude — Entreprise (payant)",
+    admin_watsonx_title: "IBM WatsonX — Entreprise (payant)",
+    admin_local_ollama: "Ollama local (optionnel)",
+    admin_application_settings: "Paramètres de l'application",
+    admin_system_info: "Informations système",
+    admin_save_config: "Enregistrer la configuration",
+    admin_saving: "Enregistrement...",
+    admin_test_connection: "Tester la connexion",
+    admin_connected: "Connecté",
+    admin_not_configured: "Non configuré",
+    admin_save_before_test: "Enregistrez vos changements avant de tester — le serveur a besoin de la nouvelle URL/clé sur disque.",
+
+    welcome_title: "Bienvenue",
+    welcome_subtitle: "Nous pouvons parler votre langue.",
+    welcome_detected: "Nous avons détecté :",
+    welcome_continue: "Continuer",
+    welcome_change_language: "Changer de langue",
+    welcome_change_region: "Changer de région",
+    choose_language: "Choisissez votre langue",
+    home_headline: "Votre assistant médical",
+    home_subheadline: "Posez vos questions dans votre langue. Obtenez des conseils de santé simples.",
+    home_symptoms: "J'ai des symptômes",
+    home_symptoms_desc: "Vérifier fièvre, douleur, toux, problèmes d'estomac, éruption cutanée",
+    home_medicine: "Question sur un médicament",
+    home_medicine_desc: "À quoi sert ce médicament ? Comment le prendre ?",
+    home_pregnancy: "Grossesse et enfant",
+    home_pregnancy_desc: "Symptômes de grossesse, soins du nouveau-né, fièvre de l'enfant",
+    home_emergency: "Aide d'urgence",
+    home_emergency_desc: "Douleur thoracique, difficulté à respirer, signes d'AVC",
+    home_voice: "Parler au lieu de taper",
+    home_voice_desc: "Appuyez sur le micro et parlez",
+    nav_home: "Accueil",
+    nav_ask: "Demander",
+    nav_emergency: "Urgence",
+    nav_topics: "Sujets",
+    nav_settings: "Paramètres",
+    ask_headline: "Dites-moi ce qui se passe",
+    ask_placeholder: "Tapez votre question de santé...",
+    ask_disclaimer: "L'IA de santé fournit des conseils généraux. Ne remplace pas un médecin.",
+    settings_title: "Paramètres",
+    settings_language: "Langue",
+    settings_country: "Pays",
+    settings_voice: "Voix",
+    settings_read_aloud: "Lire les réponses à voix haute",
+    settings_text_size: "Taille du texte",
+    settings_simple_language: "Langage simple",
+    settings_advanced: "Paramètres techniques avancés",
+    badge_private: "Privé",
+    badge_no_signup: "Sans inscription",
+    badge_free: "Gratuit",
+    emergency_title: "Aide d'urgence",
+    emergency_call: "Appeler",
+    emergency_may_be: "Ceci peut être une urgence",
+    topics_title: "Sujets de santé",
+    loading: "Chargement...",
+    send: "Envoyer",
+    close: "Fermer",
+    topic_fever: "Fièvre",
+    topic_cough: "Toux",
+    topic_headache: "Mal de tête",
+    topic_blood_pressure: "Tension artérielle",
+    topic_diabetes: "Diabète",
+    topic_pregnancy: "Grossesse",
+    topic_mental_health: "Santé mentale",
+    nav_health: "Santé",
+    nav_dashboard: "Tableau de bord",
+    nav_schedule: "Agenda",
+    nav_medications: "Médicaments",
+    nav_appointments: "Rendez-vous",
+    nav_vitals: "Constantes",
+    nav_records: "Dossiers",
+    nav_history: "Historique",
+    nav_health_tracker: "Suivi santé",
+    nav_tools: "Outils",
+    nav_login: "Connexion",
+    nav_profile: "Profil",
+    home_hero_title: "Dites-moi ce qui vous préoccupe.",
+    home_hero_subtitle: "Je vous aiderai à comprendre — calmement, clairement et en privé.",
+    ask_suggestions: "Essayez l'un de ceux-ci",
+    trust_reviewed: "Conforme aux directives OMS · CDC · NHS",
+    trust_private: "Privé et anonyme",
+    trust_247: "Disponible 24h/24",
+    badge_not_doctor: "Aide générale, ne remplace pas un médecin",
+    nearby_title: "À proximité",
+    nearby_subtitle: "Trouvez des pharmacies et des médecins près de chez vous",
+    nearby_search: "Rechercher à proximité",
+    nearby_use_gps: "Utiliser ma position",
+    nearby_type_all: "Tous",
+    nearby_type_pharmacy: "Pharmacie",
+    nearby_type_doctor: "Médecin",
+    nearby_directions: "Itinéraire",
+    nearby_placeholder: "Ville, adresse ou code postal...",
+    nearby_find: "Chercher",
+    nearby_find_nearby: "Chercher à proximité",
+    nearby_find_healthcare: "Trouvez des soins à proximité",
+    nearby_find_desc: "Saisissez un nom de ville, un code postal ou partagez votre position GPS.",
+    nearby_walk_min: "min à pied",
+    contacts_title: "Contacts",
+    contacts_saved: "contacts enregistrés",
+    contacts_no_contacts: "Aucun contact",
+    contacts_no_contacts_desc: "Enregistrez vos médecins et pharmacies ici.",
+    contacts_new: "Nouveau contact",
+    contacts_save: "Enregistrer",
+    contacts_call: "Appeler",
+    contacts_search: "Rechercher des contacts...",
+    contacts_filter_all: "Tous",
+    contacts_filter_doctors: "Médecins",
+    contacts_filter_pharmacies: "Pharmacies",
+    scanner_title: "Scanner de médicaments",
+    scanner_scan: "Scanner",
+    scanner_open_camera: "Ouvrir la caméra",
+    scanner_detected: "Détecté",
+    scanner_add_to_medicines: "Ajouter aux médicaments",
+    drawer_new_chat: "Nouvelle conversation",
+    drawer_section_main: "Principal",
+    drawer_section_tools: "Outils",
+    drawer_section_account: "Compte",
+    drawer_sign_up: "S'inscrire / Connexion",
+    drawer_logout: "Déconnexion",
+    common_add: "Ajouter",
+    common_map: "Carte",
+  },
+
+  it: {
+    // --- Admin ---
+    admin_title: "Pannello di amministrazione",
+    admin_subtitle: "Gestione e analisi della piattaforma",
+    admin_tab_overview: "Panoramica",
+    admin_tab_users: "Utenti",
+    admin_tab_llm: "LLM",
+    admin_tab_email: "Email",
+    admin_tab_server: "Server",
+    admin_total_users: "Utenti totali",
+    admin_verified: "Verificati",
+    admin_admins: "Amministratori",
+    admin_health_records: "Cartelle cliniche",
+    admin_chat_sessions: "Sessioni chat",
+    admin_active_sessions: "Sessioni attive",
+    admin_llm_health: "Salute dei provider LLM",
+    admin_llm_health_subtitle: "Testa tutti i modelli nella catena di fallback e scopre modelli enterprise",
+    admin_fetch_models: "Recupera modelli",
+    admin_fetching: "Recupero...",
+    admin_test_all_providers: "Testa tutti i provider",
+    admin_testing: "Test in corso...",
+    admin_total_models: "Modelli totali",
+    admin_online: "Online",
+    admin_offline: "Offline",
+    admin_provider_status: "Stato del provider",
+    admin_discovered_models: "Modelli rilevati",
+    admin_how_routing_works: "Come funziona il routing",
+    admin_no_models_tested: "Nessun modello testato",
+    admin_click_test: "Clicca «Testa tutti i provider» per eseguire un controllo",
+    admin_ollabridge_title: "Gateway OllaBridge Cloud",
+    admin_ollabridge_connected: "URL OllaBridge configurato",
+    admin_ollabridge_not_configured: "OllaBridge non configurato — il chat userà HF Inference come fallback",
+    admin_hf_title: "Provider di inferenza HuggingFace",
+    admin_hf_configured: "Token HF configurato",
+    admin_hf_not_configured: "Token HF non impostato — il controllo LLM fallirà",
+    admin_groq_title: "Groq — Inferenza rapida gratuita",
+    admin_openai_title: "OpenAI — Enterprise (a pagamento)",
+    admin_anthropic_title: "Anthropic Claude — Enterprise (a pagamento)",
+    admin_watsonx_title: "IBM WatsonX — Enterprise (a pagamento)",
+    admin_local_ollama: "Ollama locale (opzionale)",
+    admin_application_settings: "Impostazioni dell'applicazione",
+    admin_system_info: "Informazioni di sistema",
+    admin_save_config: "Salva configurazione",
+    admin_saving: "Salvataggio...",
+    admin_test_connection: "Testa connessione",
+    admin_connected: "Connesso",
+    admin_not_configured: "Non configurato",
+    admin_save_before_test: "Salva le modifiche prima di testare — il server ha bisogno della nuova URL/chiave su disco.",
+
+    welcome_title: "Benvenuto",
+    welcome_subtitle: "Possiamo parlare la tua lingua.",
+    welcome_detected: "Abbiamo rilevato:",
+    welcome_continue: "Continua",
+    welcome_change_language: "Cambia lingua",
+    welcome_change_region: "Cambia regione",
+    choose_language: "Scegli la tua lingua",
+    home_headline: "Il tuo assistente medico",
+    home_subheadline: "Chiedi nella tua lingua. Ricevi orientamento sanitario semplice.",
+    home_symptoms: "Ho dei sintomi",
+    home_symptoms_desc: "Controlla febbre, dolore, tosse, problemi di stomaco, eruzioni cutanee",
+    home_medicine: "Domanda sui farmaci",
+    home_medicine_desc: "A cosa serve questo farmaco? Come devo prenderlo?",
+    home_pregnancy: "Gravidanza e bambino",
+    home_pregnancy_desc: "Sintomi di gravidanza, cura del neonato, febbre del bambino",
+    home_emergency: "Aiuto di emergenza",
+    home_emergency_desc: "Dolore al petto, difficoltà a respirare, segni di ictus",
+    home_voice: "Parla invece di scrivere",
+    home_voice_desc: "Tocca il microfono e parla",
+    nav_home: "Home",
+    nav_ask: "Chiedi",
+    nav_emergency: "Emergenza",
+    nav_topics: "Argomenti",
+    nav_settings: "Impostazioni",
+    ask_headline: "Dimmi cosa sta succedendo",
+    ask_placeholder: "Scrivi la tua domanda sulla salute...",
+    ask_disclaimer: "L'IA sanitaria fornisce orientamento generale. Non sostituisce il medico.",
+    settings_title: "Impostazioni",
+    settings_language: "Lingua",
+    settings_country: "Paese",
+    settings_voice: "Voce",
+    settings_read_aloud: "Leggi le risposte ad alta voce",
+    settings_text_size: "Dimensione testo",
+    settings_simple_language: "Linguaggio semplice",
+    settings_advanced: "Impostazioni tecniche avanzate",
+    badge_private: "Privato",
+    badge_no_signup: "Senza registrazione",
+    badge_free: "Gratuito",
+    emergency_title: "Aiuto di emergenza",
+    emergency_call: "Chiama",
+    emergency_may_be: "Questa potrebbe essere un'emergenza",
+    topics_title: "Argomenti di salute",
+    loading: "Caricamento...",
+    send: "Invia",
+    close: "Chiudi",
+    topic_fever: "Febbre",
+    topic_cough: "Tosse",
+    topic_headache: "Mal di testa",
+    topic_blood_pressure: "Pressione sanguigna",
+    topic_diabetes: "Diabete",
+    topic_pregnancy: "Gravidanza",
+    topic_mental_health: "Salute mentale",
+    nav_health: "Salute",
+    nav_dashboard: "Pannello",
+    nav_schedule: "Programma",
+    nav_medications: "Farmaci",
+    nav_appointments: "Appuntamenti",
+    nav_vitals: "Parametri vitali",
+    nav_records: "Cartella clinica",
+    nav_history: "Cronologia",
+    nav_health_tracker: "Monitoraggio salute",
+    nav_tools: "Strumenti",
+    nav_login: "Accedi",
+    nav_profile: "Profilo",
+    home_hero_title: "Dimmi cosa ti preoccupa.",
+    home_hero_subtitle: "Ti aiuterò a capire — con calma, chiarezza e riservatezza.",
+    ask_suggestions: "Prova uno di questi",
+    trust_reviewed: "Conforme alle linee guida OMS · CDC · NHS",
+    trust_private: "Privato e anonimo",
+    trust_247: "Disponibile 24/7",
+    badge_not_doctor: "Guida generale, non sostituisce un medico",
+    nearby_title: "Vicino a te",
+    nearby_subtitle: "Trova farmacie e medici vicini",
+    nearby_search: "Cerca nelle vicinanze",
+    nearby_use_gps: "Usa la mia posizione",
+    nearby_type_all: "Tutti",
+    nearby_type_pharmacy: "Farmacia",
+    nearby_type_doctor: "Medico",
+    nearby_directions: "Indicazioni",
+    nearby_placeholder: "Città, indirizzo o CAP...",
+    nearby_find: "Cerca",
+    nearby_find_nearby: "Cerca vicino",
+    nearby_find_healthcare: "Trova assistenza sanitaria vicino",
+    nearby_find_desc: "Inserisci il nome di una città, un CAP o condividi la tua posizione GPS.",
+    nearby_walk_min: "min a piedi",
+    contacts_title: "Contatti",
+    contacts_saved: "contatti salvati",
+    contacts_no_contacts: "Nessun contatto",
+    contacts_new: "Nuovo contatto",
+    contacts_save: "Salva contatto",
+    contacts_call: "Chiama",
+    contacts_search: "Cerca contatti...",
+    contacts_filter_all: "Tutti",
+    contacts_filter_doctors: "Medici",
+    contacts_filter_pharmacies: "Farmacie",
+    scanner_title: "Scanner farmaci",
+    scanner_scan: "Scansiona",
+    scanner_open_camera: "Apri fotocamera",
+    scanner_detected: "Rilevato",
+    scanner_add_to_medicines: "Aggiungi ai farmaci",
+    drawer_new_chat: "Nuova chat",
+    drawer_section_main: "Principale",
+    drawer_section_tools: "Strumenti",
+    drawer_section_account: "Account",
+    drawer_sign_up: "Registrati / Accedi",
+    drawer_logout: "Esci",
+    common_add: "Aggiungi",
+    common_map: "Mappa",
+  },
+
+  pt: {
+    // --- Admin ---
+    admin_title: "Painel de administração",
+    admin_subtitle: "Gestão e análises da plataforma",
+    admin_tab_overview: "Visão geral",
+    admin_tab_users: "Usuários",
+    admin_tab_llm: "LLM",
+    admin_tab_email: "E-mail",
+    admin_tab_server: "Servidor",
+    admin_total_users: "Usuários totais",
+    admin_verified: "Verificados",
+    admin_admins: "Administradores",
+    admin_health_records: "Registros médicos",
+    admin_chat_sessions: "Sessões de chat",
+    admin_active_sessions: "Sessões ativas",
+    admin_llm_health: "Saúde dos provedores LLM",
+    admin_llm_health_subtitle: "Testa todos os modelos na cadeia de fallback e descobre modelos empresariais",
+    admin_fetch_models: "Buscar modelos",
+    admin_fetching: "Buscando...",
+    admin_test_all_providers: "Testar todos os provedores",
+    admin_testing: "Testando...",
+    admin_total_models: "Modelos totais",
+    admin_online: "Online",
+    admin_offline: "Offline",
+    admin_provider_status: "Status do provedor",
+    admin_discovered_models: "Modelos descobertos",
+    admin_how_routing_works: "Como funciona o roteamento",
+    admin_no_models_tested: "Nenhum modelo testado",
+    admin_click_test: "Clique em «Testar todos os provedores» para executar uma verificação",
+    admin_ollabridge_title: "Gateway OllaBridge Cloud",
+    admin_ollabridge_connected: "URL do OllaBridge configurada",
+    admin_ollabridge_not_configured: "OllaBridge não configurado — o chat usará HF Inference como fallback",
+    admin_hf_title: "Provedores de inferência HuggingFace",
+    admin_hf_configured: "Token HF configurado",
+    admin_hf_not_configured: "Token HF não definido — a verificação LLM falhará",
+    admin_groq_title: "Groq — Inferência rápida gratuita",
+    admin_openai_title: "OpenAI — Enterprise (pago)",
+    admin_anthropic_title: "Anthropic Claude — Enterprise (pago)",
+    admin_watsonx_title: "IBM WatsonX — Enterprise (pago)",
+    admin_local_ollama: "Ollama local (opcional)",
+    admin_application_settings: "Configurações da aplicação",
+    admin_system_info: "Informações do sistema",
+    admin_save_config: "Salvar configuração",
+    admin_saving: "Salvando...",
+    admin_test_connection: "Testar conexão",
+    admin_connected: "Conectado",
+    admin_not_configured: "Não configurado",
+    admin_save_before_test: "Salve as alterações antes de testar — o servidor precisa da nova URL/chave no disco.",
+
+    welcome_title: "Bem-vindo",
+    welcome_subtitle: "Podemos falar o seu idioma.",
+    welcome_detected: "Detectamos:",
+    welcome_continue: "Continuar",
+    welcome_change_language: "Mudar idioma",
+    welcome_change_region: "Mudar região",
+    home_headline: "Seu assistente médico",
+    home_subheadline: "Pergunte no seu idioma. Receba orientação de saúde simples.",
+    home_symptoms: "Tenho sintomas",
+    home_symptoms_desc: "Verificar febre, dor, tosse, problemas estomacais, erupção cutânea",
+    home_medicine: "Pergunta sobre remédios",
+    home_medicine_desc: "Para que serve este remédio? Como devo tomá-lo?",
+    home_pregnancy: "Gravidez e criança",
+    home_pregnancy_desc: "Sintomas de gravidez, cuidados com recém-nascido, febre infantil",
+    home_emergency: "Ajuda de emergência",
+    home_emergency_desc: "Dor no peito, dificuldade para respirar, sinais de AVC",
+    home_voice: "Falar em vez de digitar",
+    home_voice_desc: "Toque no microfone e fale",
+    nav_home: "Início",
+    nav_ask: "Perguntar",
+    nav_emergency: "Emergência",
+    nav_topics: "Tópicos",
+    nav_settings: "Configurações",
+    ask_headline: "Me diga o que está acontecendo",
+    ask_placeholder: "Digite sua pergunta de saúde...",
+    settings_title: "Configurações",
+    badge_private: "Privado",
+    badge_no_signup: "Sem cadastro",
+    badge_free: "Grátis",
+    emergency_title: "Ajuda de emergência",
+    emergency_call: "Ligar",
+    topics_title: "Tópicos de saúde",
+    loading: "Carregando...",
+    send: "Enviar",
+    topic_fever: "Febre",
+    topic_cough: "Tosse",
+    topic_headache: "Dor de cabeça",
+    nav_health: "Saúde",
+    nav_dashboard: "Painel",
+    nav_schedule: "Agenda",
+    nav_medications: "Medicamentos",
+    nav_appointments: "Consultas",
+    nav_vitals: "Sinais vitais",
+    nav_records: "Registros",
+    nav_history: "Histórico",
+    nav_health_tracker: "Acompanhamento de saúde",
+    nav_tools: "Ferramentas",
+    nav_login: "Entrar",
+    nav_profile: "Perfil",
+    home_hero_title: "Diga-me o que está te incomodando.",
+    home_hero_subtitle: "Vou ajudá-lo a entender — com calma, clareza e privacidade.",
+    trust_reviewed: "De acordo com as diretrizes da OMS · CDC · NHS",
+    trust_private: "Privado e anônimo",
+    trust_247: "Disponível 24/7",
+    badge_not_doctor: "Orientação geral, não substitui um médico",
+    nearby_title: "Próximo",
+    nearby_subtitle: "Encontre farmácias e médicos perto de você",
+    nearby_search: "Buscar próximo",
+    nearby_use_gps: "Usar minha localização",
+    nearby_type_all: "Todos",
+    nearby_type_pharmacy: "Farmácia",
+    nearby_type_doctor: "Médico",
+    nearby_directions: "Direções",
+    nearby_placeholder: "Cidade, endereço ou CEP...",
+    nearby_find: "Buscar",
+    nearby_walk_min: "min a pé",
+    contacts_title: "Contatos",
+    contacts_call: "Ligar",
+    contacts_search: "Buscar contatos...",
+    scanner_title: "Scanner de medicamentos",
+    scanner_scan: "Escanear",
+    drawer_new_chat: "Nova conversa",
+    drawer_section_main: "Principal",
+    drawer_section_tools: "Ferramentas",
+    drawer_section_account: "Conta",
+    drawer_sign_up: "Registrar / Entrar",
+    drawer_logout: "Sair",
+    common_add: "Adicionar",
+    common_map: "Mapa",
+  },
+
+  ar: {
+    // --- Admin ---
+    admin_title: "لوحة تحكم المسؤول",
+    admin_subtitle: "إدارة المنصة والتحليلات",
+    admin_tab_overview: "نظرة عامة",
+    admin_tab_users: "المستخدمون",
+    admin_tab_llm: "نموذج اللغة",
+    admin_tab_email: "البريد",
+    admin_tab_server: "الخادم",
+    admin_total_users: "إجمالي المستخدمين",
+    admin_verified: "مُتحقَّق منهم",
+    admin_admins: "المسؤولون",
+    admin_health_records: "السجلات الصحية",
+    admin_chat_sessions: "جلسات المحادثة",
+    admin_active_sessions: "الجلسات النشطة",
+    admin_llm_health: "حالة مزوّدي نماذج اللغة",
+    admin_llm_health_subtitle: "يختبر جميع النماذج في سلسلة التراجع ويكتشف نماذج المؤسسات",
+    admin_fetch_models: "جلب النماذج",
+    admin_fetching: "جارٍ الجلب...",
+    admin_test_all_providers: "اختبار كل المزوّدين",
+    admin_testing: "جارٍ الاختبار...",
+    admin_total_models: "إجمالي النماذج",
+    admin_online: "متصل",
+    admin_offline: "غير متصل",
+    admin_provider_status: "حالة المزوّد",
+    admin_discovered_models: "النماذج المكتشفة",
+    admin_how_routing_works: "كيفية عمل التوجيه",
+    admin_no_models_tested: "لم تُختبَر أي نماذج",
+    admin_click_test: "اضغط على «اختبار كل المزوّدين» لتشغيل فحص الصحة",
+    admin_ollabridge_title: "بوابة OllaBridge Cloud",
+    admin_ollabridge_connected: "تم تكوين عنوان OllaBridge",
+    admin_ollabridge_not_configured: "لم يُكوَّن OllaBridge — ستستخدم المحادثة HF Inference كبديل",
+    admin_hf_title: "مزوّدو استدلال HuggingFace",
+    admin_hf_configured: "تم تكوين رمز HF",
+    admin_hf_not_configured: "لم يُعيَّن رمز HF — سيفشل فحص حالة نموذج اللغة",
+    admin_groq_title: "Groq — استدلال سريع مجاني",
+    admin_openai_title: "OpenAI — مؤسسي (مدفوع)",
+    admin_anthropic_title: "Anthropic Claude — مؤسسي (مدفوع)",
+    admin_watsonx_title: "IBM WatsonX — مؤسسي (مدفوع)",
+    admin_local_ollama: "Ollama المحلي (اختياري)",
+    admin_application_settings: "إعدادات التطبيق",
+    admin_system_info: "معلومات النظام",
+    admin_save_config: "حفظ الإعدادات",
+    admin_saving: "جارٍ الحفظ...",
+    admin_test_connection: "اختبار الاتصال",
+    admin_connected: "متصل",
+    admin_not_configured: "غير مكوَّن",
+    admin_save_before_test: "احفظ التغييرات قبل الاختبار — الخادم يحتاج إلى عنوان/مفتاح جديد على القرص.",
+
+    welcome_title: "مرحباً",
+    welcome_subtitle: "يمكننا التحدث بلغتك.",
+    welcome_detected: "اكتشفنا:",
+    welcome_continue: "متابعة",
+    welcome_change_language: "تغيير اللغة",
+    welcome_change_region: "تغيير المنطقة",
+    home_headline: "مساعدك الطبي",
+    home_subheadline: "اسأل بلغتك. احصل على إرشادات صحية بسيطة.",
+    home_symptoms: "لدي أعراض",
+    home_symptoms_desc: "فحص الحمى والألم والسعال ومشاكل المعدة والطفح الجلدي",
+    home_medicine: "سؤال عن الدواء",
+    home_medicine_desc: "ما فائدة هذا الدواء؟ كيف أتناوله؟",
+    home_pregnancy: "الحمل والطفل",
+    home_pregnancy_desc: "أعراض الحمل، رعاية المولود، حمى الطفل",
+    home_emergency: "مساعدة طوارئ",
+    home_emergency_desc: "ألم في الصدر، صعوبة في التنفس، علامات السكتة الدماغية",
+    home_voice: "تحدث بدلاً من الكتابة",
+    home_voice_desc: "اضغط على الميكروفون وتحدث",
+    nav_home: "الرئيسية",
+    nav_ask: "اسأل",
+    nav_emergency: "طوارئ",
+    nav_topics: "مواضيع",
+    nav_settings: "الإعدادات",
+    ask_headline: "أخبرني ماذا يحدث",
+    ask_placeholder: "اكتب سؤالك الصحي...",
+    settings_title: "الإعدادات",
+    badge_private: "خاص",
+    badge_no_signup: "بدون تسجيل",
+    badge_free: "مجاني",
+    emergency_title: "مساعدة الطوارئ",
+    emergency_call: "اتصل",
+    topics_title: "مواضيع صحية",
+    loading: "جارٍ التحميل...",
+    send: "إرسال",
+    topic_fever: "حمى",
+    topic_cough: "سعال",
+    topic_headache: "صداع",
+    nav_health: "الصحة",
+    nav_dashboard: "لوحة التحكم",
+    nav_schedule: "الجدول",
+    nav_medications: "الأدوية",
+    nav_appointments: "المواعيد",
+    nav_vitals: "العلامات الحيوية",
+    nav_records: "السجلات",
+    nav_history: "السجل",
+    nav_health_tracker: "متابعة الصحة",
+    nav_tools: "الأدوات",
+    nav_login: "تسجيل الدخول",
+    nav_profile: "الملف الشخصي",
+    home_hero_title: "أخبرني بما يزعجك.",
+    home_hero_subtitle: "سأساعدك على فهم ذلك — بهدوء ووضوح وخصوصية.",
+    trust_reviewed: "متوافق مع إرشادات منظمة الصحة العالمية",
+    trust_private: "خاص ومجهول",
+    trust_247: "متاح على مدار الساعة",
+    badge_not_doctor: "إرشادات عامة، لا تحل محل الطبيب",
+    nearby_title: "بالقرب منك",
+    nearby_subtitle: "ابحث عن صيدليات وأطباء بالقرب منك",
+    nearby_search: "بحث قريب",
+    nearby_use_gps: "استخدم موقعي",
+    nearby_type_all: "الكل",
+    nearby_type_pharmacy: "صيدلية",
+    nearby_type_doctor: "طبيب",
+    nearby_directions: "اتجاهات",
+    nearby_placeholder: "مدينة أو عنوان أو رمز بريدي...",
+    nearby_find: "بحث",
+    nearby_walk_min: "دقيقة سيرًا",
+    contacts_title: "جهات الاتصال",
+    contacts_call: "اتصل",
+    contacts_search: "بحث في جهات الاتصال...",
+    scanner_title: "ماسح الأدوية",
+    scanner_scan: "مسح",
+    drawer_new_chat: "محادثة جديدة",
+    drawer_section_main: "الرئيسي",
+    drawer_section_tools: "أدوات",
+    drawer_section_account: "الحساب",
+    drawer_sign_up: "تسجيل / دخول",
+    drawer_logout: "تسجيل الخروج",
+    common_add: "إضافة",
+    common_map: "خريطة",
+  },
+
+  hi: {
+    // --- Admin ---
+    admin_title: "एडमिन डैशबोर्ड",
+    admin_subtitle: "प्लेटफ़ॉर्म प्रबंधन और विश्लेषण",
+    admin_tab_overview: "अवलोकन",
+    admin_tab_users: "उपयोगकर्ता",
+    admin_tab_llm: "LLM",
+    admin_tab_email: "ईमेल",
+    admin_tab_server: "सर्वर",
+    admin_total_users: "कुल उपयोगकर्ता",
+    admin_verified: "सत्यापित",
+    admin_admins: "एडमिन",
+    admin_health_records: "स्वास्थ्य रिकॉर्ड",
+    admin_chat_sessions: "चैट सत्र",
+    admin_active_sessions: "सक्रिय सत्र",
+    admin_llm_health: "LLM प्रदाता स्वास्थ्य",
+    admin_llm_health_subtitle: "फ़ॉलबैक श्रृंखला के सभी मॉडलों का परीक्षण करता है और एंटरप्राइज़ मॉडल खोजता है",
+    admin_fetch_models: "मॉडल प्राप्त करें",
+    admin_fetching: "प्राप्त कर रहे हैं...",
+    admin_test_all_providers: "सभी प्रदाताओं का परीक्षण करें",
+    admin_testing: "परीक्षण हो रहा है...",
+    admin_total_models: "कुल मॉडल",
+    admin_online: "ऑनलाइन",
+    admin_offline: "ऑफ़लाइन",
+    admin_provider_status: "प्रदाता स्थिति",
+    admin_discovered_models: "खोजे गए मॉडल",
+    admin_how_routing_works: "रूटिंग कैसे काम करती है",
+    admin_no_models_tested: "कोई मॉडल परीक्षण नहीं किया गया",
+    admin_click_test: "स्वास्थ्य जाँच चलाने के लिए «सभी प्रदाताओं का परीक्षण करें» पर क्लिक करें",
+    admin_ollabridge_title: "OllaBridge Cloud गेटवे",
+    admin_ollabridge_connected: "OllaBridge URL कॉन्फ़िगर किया गया",
+    admin_ollabridge_not_configured: "OllaBridge कॉन्फ़िगर नहीं है — चैट HF Inference पर फ़ॉलबैक करेगा",
+    admin_hf_title: "HuggingFace इन्फ़रेंस प्रदाता",
+    admin_hf_configured: "HF टोकन कॉन्फ़िगर किया गया",
+    admin_hf_not_configured: "HF टोकन सेट नहीं — LLM स्वास्थ्य जाँच विफल होगी",
+    admin_groq_title: "Groq — मुफ़्त तेज़ इन्फ़रेंस",
+    admin_openai_title: "OpenAI — एंटरप्राइज़ (भुगतान)",
+    admin_anthropic_title: "Anthropic Claude — एंटरप्राइज़ (भुगतान)",
+    admin_watsonx_title: "IBM WatsonX — एंटरप्राइज़ (भुगतान)",
+    admin_local_ollama: "लोकल Ollama (वैकल्पिक)",
+    admin_application_settings: "एप्लिकेशन सेटिंग्स",
+    admin_system_info: "सिस्टम जानकारी",
+    admin_save_config: "कॉन्फ़िगरेशन सहेजें",
+    admin_saving: "सहेजा जा रहा है...",
+    admin_test_connection: "कनेक्शन परीक्षण",
+    admin_connected: "कनेक्टेड",
+    admin_not_configured: "कॉन्फ़िगर नहीं",
+    admin_save_before_test: "परीक्षण से पहले बदलाव सहेजें — सर्वर को डिस्क पर नया URL/कुंजी चाहिए।",
+
+    welcome_title: "स्वागत है",
+    welcome_subtitle: "हम आपकी भाषा बोल सकते हैं।",
+    welcome_detected: "हमने पाया:",
+    welcome_continue: "जारी रखें",
+    welcome_change_language: "भाषा बदलें",
+    welcome_change_region: "क्षेत्र बदलें",
+    home_headline: "आपका चिकित्सा सहायक",
+    home_subheadline: "अपनी भाषा में पूछें। सरल स्वास्थ्य मार्गदर्शन पाएं।",
+    home_symptoms: "मुझे लक्षण हैं",
+    home_symptoms_desc: "बुखार, दर्द, खांसी, पेट की समस्या, दाने की जांच करें",
+    home_medicine: "दवाई का सवाल",
+    home_medicine_desc: "यह दवाई किसलिए है? मैं इसे कैसे लूं?",
+    home_pregnancy: "गर्भावस्था और बच्चा",
+    home_pregnancy_desc: "गर्भावस्था के लक्षण, नवजात की देखभाल, बच्चे का बुखार",
+    home_emergency: "आपातकालीन मदद",
+    home_emergency_desc: "सीने में दर्द, सांस लेने में कठिनाई, स्ट्रोक के संकेत",
+    home_voice: "टाइप करने के बजाय बोलें",
+    home_voice_desc: "माइक्रोफोन पर टैप करें और बोलें",
+    nav_home: "होम",
+    nav_ask: "पूछें",
+    nav_emergency: "आपातकाल",
+    nav_topics: "विषय",
+    nav_settings: "सेटिंग्स",
+    ask_headline: "मुझे बताएं क्या हो रहा है",
+    ask_placeholder: "अपना स्वास्थ्य प्रश्न लिखें...",
+    settings_title: "सेटिंग्स",
+    badge_private: "निजी",
+    badge_no_signup: "साइन-अप नहीं",
+    badge_free: "मुफ्त",
+    emergency_title: "आपातकालीन मदद",
+    emergency_call: "कॉल करें",
+    topics_title: "स्वास्थ्य विषय",
+    loading: "लोड हो रहा है...",
+    send: "भेजें",
+    topic_fever: "बुखार",
+    topic_cough: "खांसी",
+    topic_headache: "सिरदर्द",
+    nav_health: "स्वास्थ्य",
+    nav_dashboard: "डैशबोर्ड",
+    nav_schedule: "अनुसूची",
+    nav_medications: "दवाइयाँ",
+    nav_appointments: "अपॉइंटमेंट",
+    nav_vitals: "जीवन संकेत",
+    nav_records: "रिकॉर्ड",
+    nav_history: "इतिहास",
+    nav_health_tracker: "स्वास्थ्य ट्रैकर",
+    nav_tools: "उपकरण",
+    nav_login: "लॉग इन",
+    nav_profile: "प्रोफ़ाइल",
+    home_hero_title: "बताइए क्या तकलीफ़ है।",
+    home_hero_subtitle: "मैं आपको शांति से, स्पष्ट रूप से और निजी तौर पर समझने में मदद करूँगा।",
+    trust_reviewed: "WHO · CDC · NHS दिशानिर्देशों के अनुसार",
+    trust_private: "निजी और गुमनाम",
+    trust_247: "24/7 उपलब्ध",
+    badge_not_doctor: "सामान्य मार्गदर्शन, डॉक्टर का विकल्प नहीं",
+    nearby_title: "आस-पास",
+    nearby_subtitle: "अपने पास फार्मेसी और डॉक्टर खोजें",
+    nearby_search: "आस-पास खोजें",
+    nearby_use_gps: "मेरी लोकेशन उपयोग करें",
+    nearby_type_all: "सभी",
+    nearby_type_pharmacy: "फार्मेसी",
+    nearby_type_doctor: "डॉक्टर",
+    nearby_directions: "दिशा-निर्देश",
+    nearby_placeholder: "शहर, पता या पिन कोड...",
+    nearby_find: "खोजें",
+    nearby_walk_min: "मिनट पैदल",
+    contacts_title: "संपर्क",
+    contacts_call: "कॉल करें",
+    contacts_search: "संपर्क खोजें...",
+    scanner_title: "दवा स्कैनर",
+    scanner_scan: "स्कैन",
+    drawer_new_chat: "नई चैट",
+    drawer_section_main: "मुख्य",
+    drawer_section_tools: "उपकरण",
+    drawer_section_account: "खाता",
+    drawer_sign_up: "साइन अप / लॉग इन",
+    drawer_logout: "लॉग आउट",
+    common_add: "जोड़ें",
+    common_map: "नक्शा",
+  },
+
+  de: {
+    // --- Admin ---
+    admin_title: "Admin-Dashboard",
+    admin_subtitle: "Plattformverwaltung und Analyse",
+    admin_tab_overview: "Übersicht",
+    admin_tab_users: "Benutzer",
+    admin_tab_llm: "LLM",
+    admin_tab_email: "E-Mail",
+    admin_tab_server: "Server",
+    admin_total_users: "Benutzer gesamt",
+    admin_verified: "Verifiziert",
+    admin_admins: "Administratoren",
+    admin_health_records: "Gesundheitsakten",
+    admin_chat_sessions: "Chat-Sitzungen",
+    admin_active_sessions: "Aktive Sitzungen",
+    admin_llm_health: "Zustand der LLM-Anbieter",
+    admin_llm_health_subtitle: "Testet alle Modelle in der Fallback-Kette und findet Enterprise-Modelle",
+    admin_fetch_models: "Modelle abrufen",
+    admin_fetching: "Abruf läuft...",
+    admin_test_all_providers: "Alle Anbieter testen",
+    admin_testing: "Test läuft...",
+    admin_total_models: "Modelle gesamt",
+    admin_online: "Online",
+    admin_offline: "Offline",
+    admin_provider_status: "Anbieter-Status",
+    admin_discovered_models: "Gefundene Modelle",
+    admin_how_routing_works: "So funktioniert das Routing",
+    admin_no_models_tested: "Keine Modelle getestet",
+    admin_click_test: "Klicken Sie auf „Alle Anbieter testen“ zur Durchführung einer Prüfung",
+    admin_ollabridge_title: "OllaBridge Cloud Gateway",
+    admin_ollabridge_connected: "OllaBridge-URL konfiguriert",
+    admin_ollabridge_not_configured: "OllaBridge nicht konfiguriert — Chat nutzt HF Inference als Fallback",
+    admin_hf_title: "HuggingFace Inference-Anbieter",
+    admin_hf_configured: "HF-Token konfiguriert",
+    admin_hf_not_configured: "HF-Token nicht gesetzt — LLM-Prüfung schlägt fehl",
+    admin_groq_title: "Groq — Kostenlose schnelle Inferenz",
+    admin_openai_title: "OpenAI — Enterprise (kostenpflichtig)",
+    admin_anthropic_title: "Anthropic Claude — Enterprise (kostenpflichtig)",
+    admin_watsonx_title: "IBM WatsonX — Enterprise (kostenpflichtig)",
+    admin_local_ollama: "Lokales Ollama (optional)",
+    admin_application_settings: "Anwendungseinstellungen",
+    admin_system_info: "Systeminformationen",
+    admin_save_config: "Konfiguration speichern",
+    admin_saving: "Speichern...",
+    admin_test_connection: "Verbindung testen",
+    admin_connected: "Verbunden",
+    admin_not_configured: "Nicht konfiguriert",
+    admin_save_before_test: "Änderungen vor dem Test speichern — der Server benötigt die neue URL/den Schlüssel auf der Festplatte.",
+
+    welcome_title: "Willkommen",
+    welcome_subtitle: "Wir können Ihre Sprache sprechen.",
+    welcome_detected: "Erkannt:",
+    welcome_continue: "Weiter",
+    home_headline: "Ihr medizinischer Assistent",
+    home_subheadline: "Fragen Sie in Ihrer Sprache. Erhalten Sie einfache Gesundheitsberatung.",
+    home_symptoms: "Ich habe Symptome",
+    home_medicine: "Frage zu Medikamenten",
+    home_pregnancy: "Schwangerschaft & Kind",
+    home_emergency: "Notfallhilfe",
+    home_voice: "Sprechen statt tippen",
+    nav_home: "Start",
+    nav_ask: "Fragen",
+    nav_emergency: "Notfall",
+    nav_topics: "Themen",
+    nav_settings: "Einstellungen",
+    ask_headline: "Sagen Sie mir, was passiert",
+    ask_placeholder: "Geben Sie Ihre Gesundheitsfrage ein...",
+    settings_title: "Einstellungen",
+    badge_private: "Privat",
+    badge_no_signup: "Keine Anmeldung",
+    badge_free: "Kostenlos",
+    emergency_title: "Notfallhilfe",
+    emergency_call: "Anrufen",
+    topics_title: "Gesundheitsthemen",
+    loading: "Laden...",
+    send: "Senden",
+    topic_fever: "Fieber",
+    topic_cough: "Husten",
+    topic_headache: "Kopfschmerzen",
+    nav_health: "Gesundheit",
+    nav_dashboard: "Übersicht",
+    nav_schedule: "Zeitplan",
+    nav_medications: "Medikamente",
+    nav_appointments: "Termine",
+    nav_vitals: "Vitalwerte",
+    nav_records: "Dokumente",
+    nav_history: "Verlauf",
+    nav_health_tracker: "Gesundheitstracker",
+    nav_tools: "Werkzeuge",
+    nav_login: "Anmelden",
+    nav_profile: "Profil",
+    home_hero_title: "Sagen Sie mir, was Sie bedrückt.",
+    home_hero_subtitle: "Ich helfe Ihnen, es zu verstehen — ruhig, klar und privat.",
+    trust_reviewed: "Gemäß WHO · CDC · NHS Richtlinien",
+    trust_private: "Privat und anonym",
+    trust_247: "Rund um die Uhr verfügbar",
+    badge_not_doctor: "Allgemeine Beratung, kein Arzt-Ersatz",
+    nearby_title: "In der Nähe",
+    nearby_subtitle: "Finden Sie Apotheken und Ärzte in Ihrer Nähe",
+    nearby_search: "In der Nähe suchen",
+    nearby_use_gps: "Meinen Standort verwenden",
+    nearby_type_all: "Alle",
+    nearby_type_pharmacy: "Apotheke",
+    nearby_type_doctor: "Arzt",
+    nearby_directions: "Wegbeschreibung",
+    nearby_placeholder: "Stadt, Adresse oder PLZ...",
+    nearby_find: "Suchen",
+    nearby_walk_min: "Min. zu Fuß",
+    contacts_title: "Kontakte",
+    contacts_call: "Anrufen",
+    contacts_search: "Kontakte suchen...",
+    scanner_title: "Medikamenten-Scanner",
+    scanner_scan: "Scannen",
+    drawer_new_chat: "Neuer Chat",
+    drawer_section_main: "Hauptmenü",
+    drawer_section_tools: "Werkzeuge",
+    drawer_section_account: "Konto",
+    drawer_sign_up: "Registrieren / Anmelden",
+    drawer_logout: "Abmelden",
+    common_add: "Hinzufügen",
+    common_map: "Karte",
+  },
+
+  sw: {
+    // --- Admin ---
+    admin_title: "Dashibodi ya Msimamizi",
+    admin_subtitle: "Usimamizi na uchanganuzi wa jukwaa",
+    admin_tab_overview: "Muhtasari",
+    admin_tab_users: "Watumiaji",
+    admin_tab_llm: "LLM",
+    admin_tab_email: "Barua pepe",
+    admin_tab_server: "Seva",
+    admin_total_users: "Watumiaji wote",
+    admin_verified: "Waliothibitishwa",
+    admin_admins: "Wasimamizi",
+    admin_health_records: "Rekodi za afya",
+    admin_chat_sessions: "Vikao vya mazungumzo",
+    admin_active_sessions: "Vikao vinavyoendelea",
+    admin_llm_health: "Afya ya watoa huduma wa LLM",
+    admin_llm_health_subtitle: "Hujaribu mifano yote katika mnyororo wa kurudi nyuma na hugundua mifano ya biashara",
+    admin_fetch_models: "Pata mifano",
+    admin_fetching: "Inapata...",
+    admin_test_all_providers: "Jaribu watoa huduma wote",
+    admin_testing: "Inajaribu...",
+    admin_total_models: "Jumla ya mifano",
+    admin_online: "Mtandaoni",
+    admin_offline: "Nje ya mtandao",
+    admin_provider_status: "Hali ya mtoa huduma",
+    admin_discovered_models: "Mifano iliyogunduliwa",
+    admin_how_routing_works: "Jinsi upeleka unavyofanya kazi",
+    admin_no_models_tested: "Hakuna mifano iliyojaribiwa",
+    admin_click_test: "Bofya «Jaribu watoa huduma wote» kuendesha ukaguzi",
+    admin_ollabridge_title: "Lango la OllaBridge Cloud",
+    admin_ollabridge_connected: "URL ya OllaBridge imesanidiwa",
+    admin_ollabridge_not_configured: "OllaBridge haijasanidiwa — mazungumzo yatatumia HF Inference",
+    admin_hf_title: "Watoa huduma wa HuggingFace Inference",
+    admin_hf_configured: "Tokeni ya HF imesanidiwa",
+    admin_hf_not_configured: "Tokeni ya HF haijawekwa — ukaguzi wa LLM utashindwa",
+    admin_groq_title: "Groq — Inference ya haraka ya bure",
+    admin_openai_title: "OpenAI — Biashara (lipwa)",
+    admin_anthropic_title: "Anthropic Claude — Biashara (lipwa)",
+    admin_watsonx_title: "IBM WatsonX — Biashara (lipwa)",
+    admin_local_ollama: "Ollama ya ndani (hiari)",
+    admin_application_settings: "Mipangilio ya programu",
+    admin_system_info: "Taarifa za mfumo",
+    admin_save_config: "Hifadhi usanidi",
+    admin_saving: "Inahifadhi...",
+    admin_test_connection: "Jaribu muunganisho",
+    admin_connected: "Imeunganishwa",
+    admin_not_configured: "Haijasanidiwa",
+    admin_save_before_test: "Hifadhi mabadiliko kabla ya kujaribu — seva inahitaji URL/ufunguo mpya kwenye diski.",
+
+    welcome_title: "Karibu",
+    welcome_subtitle: "Tunaweza kuzungumza lugha yako.",
+    welcome_detected: "Tumegundua:",
+    welcome_continue: "Endelea",
+    home_headline: "Msaidizi wako wa afya",
+    home_subheadline: "Uliza kwa lugha yako. Pata mwongozo wa afya rahisi.",
+    home_symptoms: "Nina dalili",
+    home_medicine: "Swali kuhusu dawa",
+    home_pregnancy: "Ujauzito na mtoto",
+    home_emergency: "Msaada wa dharura",
+    home_voice: "Sema badala ya kuandika",
+    nav_home: "Nyumbani",
+    nav_ask: "Uliza",
+    nav_emergency: "Dharura",
+    nav_topics: "Mada",
+    nav_settings: "Mipangilio",
+    ask_headline: "Niambie kinachoendelea",
+    ask_placeholder: "Andika swali lako la afya...",
+    settings_title: "Mipangilio",
+    emergency_title: "Msaada wa dharura",
+    emergency_call: "Piga simu",
+    topics_title: "Mada za afya",
+    loading: "Inapakia...",
+    send: "Tuma",
+    topic_fever: "Homa",
+    topic_cough: "Kikohozi",
+    topic_headache: "Maumivu ya kichwa",
+    nav_health: "Afya",
+    nav_dashboard: "Dashibodi",
+    nav_schedule: "Ratiba",
+    nav_medications: "Dawa",
+    nav_appointments: "Miadi",
+    nav_vitals: "Dalili za afya",
+    nav_records: "Kumbukumbu",
+    nav_history: "Historia",
+    nav_health_tracker: "Ufuatiliaji wa afya",
+    nav_tools: "Zana",
+    nav_login: "Ingia",
+    nav_profile: "Wasifu",
+  },
+
+  zh: {
+    // --- Admin ---
+    admin_title: "管理员仪表板",
+    admin_subtitle: "平台管理与分析",
+    admin_tab_overview: "概览",
+    admin_tab_users: "用户",
+    admin_tab_llm: "LLM",
+    admin_tab_email: "邮件",
+    admin_tab_server: "服务器",
+    admin_total_users: "用户总数",
+    admin_verified: "已验证",
+    admin_admins: "管理员",
+    admin_health_records: "健康记录",
+    admin_chat_sessions: "聊天会话",
+    admin_active_sessions: "活跃会话",
+    admin_llm_health: "LLM 提供商健康状态",
+    admin_llm_health_subtitle: "测试回退链中的所有模型并发现企业级模型",
+    admin_fetch_models: "获取模型",
+    admin_fetching: "获取中...",
+    admin_test_all_providers: "测试所有提供商",
+    admin_testing: "测试中...",
+    admin_total_models: "模型总数",
+    admin_online: "在线",
+    admin_offline: "离线",
+    admin_provider_status: "提供商状态",
+    admin_discovered_models: "已发现的模型",
+    admin_how_routing_works: "路由工作原理",
+    admin_no_models_tested: "尚未测试任何模型",
+    admin_click_test: "点击「测试所有提供商」以运行健康检查",
+    admin_ollabridge_title: "OllaBridge Cloud 网关",
+    admin_ollabridge_connected: "已配置 OllaBridge URL",
+    admin_ollabridge_not_configured: "OllaBridge 未配置 — 聊天将使用 HF Inference 作为回退",
+    admin_hf_title: "HuggingFace 推理提供商",
+    admin_hf_configured: "HF 令牌已配置",
+    admin_hf_not_configured: "HF 令牌未设置 — LLM 健康检查将失败",
+    admin_groq_title: "Groq — 免费快速推理",
+    admin_openai_title: "OpenAI — 企业版(付费)",
+    admin_anthropic_title: "Anthropic Claude — 企业版(付费)",
+    admin_watsonx_title: "IBM WatsonX — 企业版(付费)",
+    admin_local_ollama: "本地 Ollama(可选)",
+    admin_application_settings: "应用程序设置",
+    admin_system_info: "系统信息",
+    admin_save_config: "保存配置",
+    admin_saving: "保存中...",
+    admin_test_connection: "测试连接",
+    admin_connected: "已连接",
+    admin_not_configured: "未配置",
+    admin_save_before_test: "测试前请保存更改 — 服务器需要新的 URL/密钥写入磁盘。",
+
+    welcome_title: "欢迎",
+    welcome_subtitle: "我们可以用您的语言交流。",
+    welcome_continue: "继续",
+    welcome_change_language: "更改语言",
+    home_hero_title: "告诉我哪里不舒服。",
+    home_hero_subtitle: "我会帮助您平静、清晰、私密地了解情况。",
+    home_symptoms: "我有症状",
+    home_medicine: "药物问题",
+    home_pregnancy: "怀孕和儿童",
+    nav_home: "首页",
+    nav_ask: "咨询",
+    nav_emergency: "紧急",
+    nav_topics: "主题",
+    nav_settings: "设置",
+    nav_health: "健康",
+    nav_dashboard: "仪表板",
+    nav_schedule: "日程",
+    nav_medications: "药物",
+    nav_appointments: "预约",
+    nav_vitals: "生命体征",
+    nav_records: "记录",
+    nav_history: "历史",
+    nav_health_tracker: "健康追踪",
+    nav_tools: "工具",
+    nav_login: "登录",
+    nav_profile: "个人资料",
+    ask_disclaimer: "健康AI仅提供一般指导。不能替代医生。",
+    settings_title: "设置",
+    settings_language: "语言",
+    settings_country: "国家",
+    badge_private: "私密",
+    badge_free: "免费",
+    emergency_title: "紧急帮助",
+    emergency_call: "拨打",
+    loading: "加载中...",
+    send: "发送",
+    close: "关闭",
+    trust_reviewed: "符合WHO · CDC · NHS指南",
+    trust_private: "私密且匿名",
+    trust_247: "全天候可用",
+    badge_not_doctor: "一般指导，不能替代医生",
+    nearby_title: "附近",
+    nearby_subtitle: "查找附近的药店和医生",
+    nearby_search: "附近搜索",
+    nearby_use_gps: "使用我的位置",
+    nearby_type_all: "全部",
+    nearby_type_pharmacy: "药店",
+    nearby_type_doctor: "医生",
+    nearby_directions: "导航",
+    nearby_placeholder: "城市、地址或邮编...",
+    nearby_find: "查找",
+    nearby_walk_min: "分钟步行",
+    contacts_title: "通讯录",
+    contacts_call: "拨打",
+    contacts_search: "搜索联系人...",
+    scanner_title: "药品扫描仪",
+    scanner_scan: "扫描",
+    drawer_new_chat: "新对话",
+    drawer_section_main: "主要",
+    drawer_section_tools: "工具",
+    drawer_section_account: "账户",
+    drawer_sign_up: "注册 / 登录",
+    drawer_logout: "退出登录",
+    common_add: "添加",
+    common_map: "地图",
+  },
+
+  ja: {
+    // --- Admin ---
+    admin_title: "管理ダッシュボード",
+    admin_subtitle: "プラットフォーム管理と分析",
+    admin_tab_overview: "概要",
+    admin_tab_users: "ユーザー",
+    admin_tab_llm: "LLM",
+    admin_tab_email: "メール",
+    admin_tab_server: "サーバー",
+    admin_total_users: "総ユーザー数",
+    admin_verified: "認証済み",
+    admin_admins: "管理者",
+    admin_health_records: "健康記録",
+    admin_chat_sessions: "チャットセッション",
+    admin_active_sessions: "アクティブセッション",
+    admin_llm_health: "LLMプロバイダーの稼働状況",
+    admin_llm_health_subtitle: "フォールバックチェーンの全モデルをテストし、エンタープライズモデルを検出します",
+    admin_fetch_models: "モデルを取得",
+    admin_fetching: "取得中...",
+    admin_test_all_providers: "全プロバイダーをテスト",
+    admin_testing: "テスト中...",
+    admin_total_models: "総モデル数",
+    admin_online: "オンライン",
+    admin_offline: "オフライン",
+    admin_provider_status: "プロバイダーのステータス",
+    admin_discovered_models: "検出されたモデル",
+    admin_how_routing_works: "ルーティングの仕組み",
+    admin_no_models_tested: "テスト済みのモデルはありません",
+    admin_click_test: "「全プロバイダーをテスト」をクリックしてヘルスチェックを実行してください",
+    admin_ollabridge_title: "OllaBridge Cloud ゲートウェイ",
+    admin_ollabridge_connected: "OllaBridge URL が設定済み",
+    admin_ollabridge_not_configured: "OllaBridge 未設定 — チャットは HF Inference にフォールバックします",
+    admin_hf_title: "HuggingFace 推論プロバイダー",
+    admin_hf_configured: "HF トークンが設定済み",
+    admin_hf_not_configured: "HF トークン未設定 — LLM ヘルスチェックが失敗します",
+    admin_groq_title: "Groq — 無料高速推論",
+    admin_openai_title: "OpenAI — エンタープライズ(有料)",
+    admin_anthropic_title: "Anthropic Claude — エンタープライズ(有料)",
+    admin_watsonx_title: "IBM WatsonX — エンタープライズ(有料)",
+    admin_local_ollama: "ローカル Ollama(任意)",
+    admin_application_settings: "アプリケーション設定",
+    admin_system_info: "システム情報",
+    admin_save_config: "設定を保存",
+    admin_saving: "保存中...",
+    admin_test_connection: "接続テスト",
+    admin_connected: "接続済み",
+    admin_not_configured: "未設定",
+    admin_save_before_test: "テスト前に変更を保存してください — サーバーはディスク上の新しい URL/キーを必要とします。",
+
+    welcome_title: "ようこそ",
+    welcome_subtitle: "あなたの言語で話せます。",
+    welcome_continue: "続ける",
+    welcome_change_language: "言語を変更",
+    home_hero_title: "どこが気になりますか？",
+    home_hero_subtitle: "穏やかに、明確に、プライベートに理解をお手伝いします。",
+    home_symptoms: "症状があります",
+    home_medicine: "薬について質問",
+    home_pregnancy: "妊娠と子供",
+    nav_home: "ホーム",
+    nav_ask: "相談",
+    nav_emergency: "緊急",
+    nav_topics: "トピック",
+    nav_settings: "設定",
+    nav_health: "健康",
+    nav_dashboard: "ダッシュボード",
+    nav_schedule: "スケジュール",
+    nav_medications: "薬",
+    nav_appointments: "予約",
+    nav_vitals: "バイタル",
+    nav_records: "記録",
+    nav_history: "履歴",
+    nav_health_tracker: "健康トラッカー",
+    nav_tools: "ツール",
+    nav_login: "ログイン",
+    nav_profile: "プロフィール",
+    ask_disclaimer: "健康AIは一般的なガイダンスのみを提供します。医師の代わりにはなりません。",
+    settings_title: "設定",
+    settings_language: "言語",
+    settings_country: "国",
+    badge_private: "プライベート",
+    badge_free: "無料",
+    emergency_title: "緊急ヘルプ",
+    emergency_call: "電話する",
+    loading: "読み込み中...",
+    send: "送信",
+    close: "閉じる",
+    trust_reviewed: "WHO・CDC・NHSガイドラインに準拠",
+    trust_private: "プライベートで匿名",
+    trust_247: "24時間対応",
+    badge_not_doctor: "一般的なガイダンスであり、医師の代わりではありません",
+    nearby_title: "近くを検索",
+    nearby_subtitle: "近くの薬局と医師を見つける",
+    nearby_search: "近くを検索",
+    nearby_use_gps: "現在地を使用",
+    nearby_type_all: "すべて",
+    nearby_type_pharmacy: "薬局",
+    nearby_type_doctor: "医師",
+    nearby_directions: "経路案内",
+    nearby_placeholder: "都市、住所、郵便番号...",
+    nearby_find: "検索",
+    nearby_walk_min: "分（徒歩）",
+    contacts_title: "連絡先",
+    contacts_call: "電話",
+    contacts_search: "連絡先を検索...",
+    scanner_title: "薬スキャナー",
+    scanner_scan: "スキャン",
+    drawer_new_chat: "新しいチャット",
+    drawer_section_main: "メイン",
+    drawer_section_tools: "ツール",
+    drawer_section_account: "アカウント",
+    drawer_sign_up: "登録 / ログイン",
+    drawer_logout: "ログアウト",
+    common_add: "追加",
+    common_map: "地図",
+  },
+
+  ko: {
+    // --- Admin ---
+    admin_title: "관리자 대시보드",
+    admin_subtitle: "플랫폼 관리 및 분석",
+    admin_tab_overview: "개요",
+    admin_tab_users: "사용자",
+    admin_tab_llm: "LLM",
+    admin_tab_email: "이메일",
+    admin_tab_server: "서버",
+    admin_total_users: "총 사용자",
+    admin_verified: "인증됨",
+    admin_admins: "관리자",
+    admin_health_records: "건강 기록",
+    admin_chat_sessions: "채팅 세션",
+    admin_active_sessions: "활성 세션",
+    admin_llm_health: "LLM 공급자 상태",
+    admin_llm_health_subtitle: "폴백 체인의 모든 모델을 테스트하고 엔터프라이즈 모델을 검색합니다",
+    admin_fetch_models: "모델 가져오기",
+    admin_fetching: "가져오는 중...",
+    admin_test_all_providers: "모든 공급자 테스트",
+    admin_testing: "테스트 중...",
+    admin_total_models: "총 모델 수",
+    admin_online: "온라인",
+    admin_offline: "오프라인",
+    admin_provider_status: "공급자 상태",
+    admin_discovered_models: "발견된 모델",
+    admin_how_routing_works: "라우팅 작동 방식",
+    admin_no_models_tested: "테스트된 모델 없음",
+    admin_click_test: "상태 확인을 실행하려면 「모든 공급자 테스트」를 클릭하세요",
+    admin_ollabridge_title: "OllaBridge Cloud 게이트웨이",
+    admin_ollabridge_connected: "OllaBridge URL 구성됨",
+    admin_ollabridge_not_configured: "OllaBridge 미구성 — 채팅은 HF Inference로 폴백됩니다",
+    admin_hf_title: "HuggingFace 추론 공급자",
+    admin_hf_configured: "HF 토큰 구성됨",
+    admin_hf_not_configured: "HF 토큰 미설정 — LLM 상태 확인이 실패합니다",
+    admin_groq_title: "Groq — 무료 빠른 추론",
+    admin_openai_title: "OpenAI — 엔터프라이즈(유료)",
+    admin_anthropic_title: "Anthropic Claude — 엔터프라이즈(유료)",
+    admin_watsonx_title: "IBM WatsonX — 엔터프라이즈(유료)",
+    admin_local_ollama: "로컬 Ollama(선택)",
+    admin_application_settings: "애플리케이션 설정",
+    admin_system_info: "시스템 정보",
+    admin_save_config: "구성 저장",
+    admin_saving: "저장 중...",
+    admin_test_connection: "연결 테스트",
+    admin_connected: "연결됨",
+    admin_not_configured: "미구성",
+    admin_save_before_test: "테스트 전에 변경 사항을 저장하세요 — 서버는 디스크의 새 URL/키가 필요합니다.",
+
+    welcome_title: "환영합니다",
+    welcome_subtitle: "당신의 언어로 대화할 수 있습니다.",
+    welcome_continue: "계속",
+    welcome_change_language: "언어 변경",
+    home_hero_title: "어디가 불편하신가요?",
+    home_hero_subtitle: "차분하고 명확하게 개인적으로 이해를 도와드리겠습니다.",
+    home_symptoms: "증상이 있어요",
+    home_medicine: "약에 대한 질문",
+    home_pregnancy: "임신 및 아동",
+    nav_home: "홈",
+    nav_ask: "상담",
+    nav_emergency: "응급",
+    nav_topics: "주제",
+    nav_settings: "설정",
+    nav_health: "건강",
+    nav_dashboard: "대시보드",
+    nav_schedule: "일정",
+    nav_medications: "약물",
+    nav_appointments: "예약",
+    nav_vitals: "활력 징후",
+    nav_records: "기록",
+    nav_history: "기록",
+    nav_health_tracker: "건강 추적",
+    nav_tools: "도구",
+    nav_login: "로그인",
+    nav_profile: "프로필",
+    ask_disclaimer: "건강 AI는 일반적인 안내만 제공합니다. 의사를 대체하지 않습니다.",
+    settings_title: "설정",
+    settings_language: "언어",
+    settings_country: "국가",
+    badge_private: "비공개",
+    badge_free: "무료",
+    emergency_title: "응급 도움",
+    emergency_call: "전화하기",
+    loading: "로딩 중...",
+    send: "보내기",
+    close: "닫기",
+    trust_reviewed: "WHO · CDC · NHS 지침 준수",
+    trust_private: "비공개 및 익명",
+    trust_247: "연중무휴 이용 가능",
+    badge_not_doctor: "일반 안내이며 의사를 대체하지 않습니다",
+    nearby_title: "주변",
+    nearby_subtitle: "근처 약국과 의사 찾기",
+    nearby_search: "주변 검색",
+    nearby_use_gps: "내 위치 사용",
+    nearby_type_all: "전체",
+    nearby_type_pharmacy: "약국",
+    nearby_type_doctor: "의사",
+    nearby_directions: "길안내",
+    nearby_placeholder: "도시, 주소 또는 우편번호...",
+    nearby_find: "검색",
+    nearby_walk_min: "분 도보",
+    contacts_title: "연락처",
+    contacts_call: "전화",
+    contacts_search: "연락처 검색...",
+    scanner_title: "약 스캐너",
+    scanner_scan: "스캔",
+    drawer_new_chat: "새 대화",
+    drawer_section_main: "메인",
+    drawer_section_tools: "도구",
+    drawer_section_account: "계정",
+    drawer_sign_up: "가입 / 로그인",
+    drawer_logout: "로그아웃",
+    common_add: "추가",
+    common_map: "지도",
+  },
+
+  ru: {
+    // --- Admin ---
+    admin_title: "Панель администратора",
+    admin_subtitle: "Управление платформой и аналитика",
+    admin_tab_overview: "Обзор",
+    admin_tab_users: "Пользователи",
+    admin_tab_llm: "LLM",
+    admin_tab_email: "Почта",
+    admin_tab_server: "Сервер",
+    admin_total_users: "Всего пользователей",
+    admin_verified: "Подтверждённые",
+    admin_admins: "Администраторы",
+    admin_health_records: "Медицинские записи",
+    admin_chat_sessions: "Сеансы чата",
+    admin_active_sessions: "Активные сеансы",
+    admin_llm_health: "Состояние LLM-провайдеров",
+    admin_llm_health_subtitle: "Проверяет все модели в резервной цепочке и находит корпоративные модели",
+    admin_fetch_models: "Загрузить модели",
+    admin_fetching: "Загрузка...",
+    admin_test_all_providers: "Проверить всех провайдеров",
+    admin_testing: "Проверка...",
+    admin_total_models: "Всего моделей",
+    admin_online: "В сети",
+    admin_offline: "Не в сети",
+    admin_provider_status: "Состояние провайдера",
+    admin_discovered_models: "Найденные модели",
+    admin_how_routing_works: "Как работает маршрутизация",
+    admin_no_models_tested: "Модели не проверялись",
+    admin_click_test: "Нажмите «Проверить всех провайдеров» для запуска проверки",
+    admin_ollabridge_title: "Шлюз OllaBridge Cloud",
+    admin_ollabridge_connected: "URL OllaBridge настроен",
+    admin_ollabridge_not_configured: "OllaBridge не настроен — чат будет использовать HF Inference",
+    admin_hf_title: "Провайдеры вывода HuggingFace",
+    admin_hf_configured: "Токен HF настроен",
+    admin_hf_not_configured: "Токен HF не задан — проверка LLM завершится ошибкой",
+    admin_groq_title: "Groq — Бесплатный быстрый вывод",
+    admin_openai_title: "OpenAI — Корпоративный (платно)",
+    admin_anthropic_title: "Anthropic Claude — Корпоративный (платно)",
+    admin_watsonx_title: "IBM WatsonX — Корпоративный (платно)",
+    admin_local_ollama: "Локальный Ollama (опционально)",
+    admin_application_settings: "Настройки приложения",
+    admin_system_info: "Информация о системе",
+    admin_save_config: "Сохранить конфигурацию",
+    admin_saving: "Сохранение...",
+    admin_test_connection: "Проверить соединение",
+    admin_connected: "Подключено",
+    admin_not_configured: "Не настроено",
+    admin_save_before_test: "Сохраните изменения перед проверкой — серверу нужен новый URL/ключ на диске.",
+
+    welcome_title: "Добро пожаловать",
+    welcome_subtitle: "Мы можем говорить на вашем языке.",
+    welcome_continue: "Продолжить",
+    welcome_change_language: "Изменить язык",
+    home_hero_title: "Расскажите, что вас беспокоит.",
+    home_hero_subtitle: "Я помогу вам разобраться — спокойно, понятно и конфиденциально.",
+    home_symptoms: "У меня есть симптомы",
+    home_medicine: "Вопрос о лекарстве",
+    home_pregnancy: "Беременность и дети",
+    nav_home: "Главная",
+    nav_ask: "Спросить",
+    nav_emergency: "Экстренная помощь",
+    nav_topics: "Темы",
+    nav_settings: "Настройки",
+    nav_health: "Здоровье",
+    nav_dashboard: "Панель",
+    nav_schedule: "Расписание",
+    nav_medications: "Лекарства",
+    nav_appointments: "Записи",
+    nav_vitals: "Показатели",
+    nav_records: "Документы",
+    nav_history: "История",
+    nav_health_tracker: "Трекер здоровья",
+    nav_tools: "Инструменты",
+    nav_login: "Войти",
+    nav_profile: "Профиль",
+    ask_disclaimer: "ИИ предоставляет общие рекомендации. Не заменяет врача.",
+    settings_title: "Настройки",
+    settings_language: "Язык",
+    settings_country: "Страна",
+    badge_private: "Конфиденциально",
+    badge_free: "Бесплатно",
+    emergency_title: "Экстренная помощь",
+    emergency_call: "Позвонить",
+    loading: "Загрузка...",
+    send: "Отправить",
+    close: "Закрыть",
+    trust_reviewed: "Соответствует рекомендациям ВОЗ · CDC · NHS",
+    trust_private: "Конфиденциально и анонимно",
+    trust_247: "Доступно круглосуточно",
+    badge_not_doctor: "Общие рекомендации, не заменяет врача",
+    nearby_title: "Рядом",
+    nearby_subtitle: "Найдите аптеки и врачей рядом",
+    nearby_search: "Поиск рядом",
+    nearby_use_gps: "Моё местоположение",
+    nearby_type_all: "Все",
+    nearby_type_pharmacy: "Аптека",
+    nearby_type_doctor: "Врач",
+    nearby_directions: "Маршрут",
+    nearby_placeholder: "Город, адрес или индекс...",
+    nearby_find: "Найти",
+    nearby_walk_min: "мин. пешком",
+    contacts_title: "Контакты",
+    contacts_call: "Позвонить",
+    contacts_search: "Поиск контактов...",
+    scanner_title: "Сканер лекарств",
+    scanner_scan: "Сканировать",
+    drawer_new_chat: "Новый чат",
+    drawer_section_main: "Основное",
+    drawer_section_tools: "Инструменты",
+    drawer_section_account: "Аккаунт",
+    drawer_sign_up: "Регистрация / Вход",
+    drawer_logout: "Выйти",
+    common_add: "Добавить",
+    common_map: "Карта",
+  },
+
+  // --- Partial blocks for languages declared in SupportedLanguage.
+  // Only the admin keys are translated for now; every other key falls back
+  // to English via the t() helper. This gives admins of these locales a
+  // localized admin panel immediately, and leaves room to expand later.
+
+  tr: {
+    admin_title: "Yönetici Paneli",
+    admin_subtitle: "Platform yönetimi ve analiz",
+    admin_tab_overview: "Genel Bakış",
+    admin_tab_users: "Kullanıcılar",
+    admin_tab_llm: "LLM",
+    admin_tab_email: "E-posta",
+    admin_tab_server: "Sunucu",
+    admin_total_users: "Toplam Kullanıcı",
+    admin_verified: "Doğrulanmış",
+    admin_admins: "Yöneticiler",
+    admin_health_records: "Sağlık Kayıtları",
+    admin_chat_sessions: "Sohbet Oturumları",
+    admin_active_sessions: "Aktif Oturumlar",
+    admin_llm_health: "LLM Sağlayıcı Sağlığı",
+    admin_llm_health_subtitle: "Yedek zincirdeki tüm modelleri test eder ve kurumsal modelleri keşfeder",
+    admin_fetch_models: "Modelleri Getir",
+    admin_fetching: "Getiriliyor...",
+    admin_test_all_providers: "Tüm Sağlayıcıları Test Et",
+    admin_testing: "Test ediliyor...",
+    admin_total_models: "Toplam Model",
+    admin_online: "Çevrimiçi",
+    admin_offline: "Çevrimdışı",
+    admin_provider_status: "Sağlayıcı Durumu",
+    admin_discovered_models: "Bulunan Modeller",
+    admin_how_routing_works: "Yönlendirme Nasıl Çalışır",
+    admin_no_models_tested: "Test edilmiş model yok",
+    admin_click_test: "Sağlık kontrolü için «Tüm Sağlayıcıları Test Et» düğmesine basın",
+    admin_ollabridge_title: "OllaBridge Cloud Ağ Geçidi",
+    admin_ollabridge_connected: "OllaBridge URL yapılandırıldı",
+    admin_ollabridge_not_configured: "OllaBridge yapılandırılmadı — sohbet HF Inference'a geri dönecek",
+    admin_hf_title: "HuggingFace Inference Sağlayıcıları",
+    admin_hf_configured: "HF token yapılandırıldı",
+    admin_hf_not_configured: "HF token ayarlanmadı — LLM sağlık kontrolü başarısız olacak",
+    admin_groq_title: "Groq — Ücretsiz Hızlı Çıkarım",
+    admin_openai_title: "OpenAI — Kurumsal (Ücretli)",
+    admin_anthropic_title: "Anthropic Claude — Kurumsal (Ücretli)",
+    admin_watsonx_title: "IBM WatsonX — Kurumsal (Ücretli)",
+    admin_local_ollama: "Yerel Ollama (İsteğe bağlı)",
+    admin_application_settings: "Uygulama Ayarları",
+    admin_system_info: "Sistem Bilgisi",
+    admin_save_config: "Yapılandırmayı Kaydet",
+    admin_saving: "Kaydediliyor...",
+    admin_test_connection: "Bağlantıyı Test Et",
+    admin_connected: "Bağlı",
+    admin_not_configured: "Yapılandırılmadı",
+    admin_save_before_test: "Test etmeden önce değişiklikleri kaydedin — sunucu diskte yeni URL/anahtara ihtiyaç duyar.",
+  },
+
+  vi: {
+    admin_title: "Bảng điều khiển quản trị",
+    admin_subtitle: "Quản lý nền tảng và phân tích",
+    admin_tab_overview: "Tổng quan",
+    admin_tab_users: "Người dùng",
+    admin_tab_llm: "LLM",
+    admin_tab_email: "Email",
+    admin_tab_server: "Máy chủ",
+    admin_total_users: "Tổng người dùng",
+    admin_verified: "Đã xác minh",
+    admin_admins: "Quản trị viên",
+    admin_health_records: "Hồ sơ sức khỏe",
+    admin_chat_sessions: "Phiên trò chuyện",
+    admin_active_sessions: "Phiên đang hoạt động",
+    admin_llm_health: "Tình trạng nhà cung cấp LLM",
+    admin_llm_health_subtitle: "Kiểm tra tất cả các mô hình trong chuỗi dự phòng và phát hiện các mô hình doanh nghiệp",
+    admin_fetch_models: "Lấy danh sách mô hình",
+    admin_fetching: "Đang lấy...",
+    admin_test_all_providers: "Kiểm tra tất cả nhà cung cấp",
+    admin_testing: "Đang kiểm tra...",
+    admin_total_models: "Tổng số mô hình",
+    admin_online: "Trực tuyến",
+    admin_offline: "Ngoại tuyến",
+    admin_provider_status: "Trạng thái nhà cung cấp",
+    admin_discovered_models: "Mô hình đã phát hiện",
+    admin_how_routing_works: "Cách định tuyến hoạt động",
+    admin_no_models_tested: "Chưa kiểm tra mô hình nào",
+    admin_click_test: "Nhấn «Kiểm tra tất cả nhà cung cấp» để chạy kiểm tra tình trạng",
+    admin_ollabridge_title: "Cổng OllaBridge Cloud",
+    admin_ollabridge_connected: "Đã cấu hình URL OllaBridge",
+    admin_ollabridge_not_configured: "OllaBridge chưa cấu hình — chat sẽ sử dụng HF Inference làm dự phòng",
+    admin_hf_title: "Nhà cung cấp suy luận HuggingFace",
+    admin_hf_configured: "Đã cấu hình token HF",
+    admin_hf_not_configured: "Chưa đặt token HF — kiểm tra LLM sẽ thất bại",
+    admin_groq_title: "Groq — Suy luận nhanh miễn phí",
+    admin_openai_title: "OpenAI — Doanh nghiệp (Trả phí)",
+    admin_anthropic_title: "Anthropic Claude — Doanh nghiệp (Trả phí)",
+    admin_watsonx_title: "IBM WatsonX — Doanh nghiệp (Trả phí)",
+    admin_local_ollama: "Ollama cục bộ (Tùy chọn)",
+    admin_application_settings: "Cài đặt ứng dụng",
+    admin_system_info: "Thông tin hệ thống",
+    admin_save_config: "Lưu cấu hình",
+    admin_saving: "Đang lưu...",
+    admin_test_connection: "Kiểm tra kết nối",
+    admin_connected: "Đã kết nối",
+    admin_not_configured: "Chưa cấu hình",
+    admin_save_before_test: "Lưu thay đổi trước khi kiểm tra — máy chủ cần URL/khóa mới trên đĩa.",
+  },
+
+  th: {
+    admin_title: "แดชบอร์ดผู้ดูแลระบบ",
+    admin_subtitle: "การจัดการและการวิเคราะห์แพลตฟอร์ม",
+    admin_tab_overview: "ภาพรวม",
+    admin_tab_users: "ผู้ใช้",
+    admin_tab_llm: "LLM",
+    admin_tab_email: "อีเมล",
+    admin_tab_server: "เซิร์ฟเวอร์",
+    admin_total_users: "ผู้ใช้ทั้งหมด",
+    admin_verified: "ได้รับการยืนยัน",
+    admin_admins: "ผู้ดูแลระบบ",
+    admin_health_records: "บันทึกสุขภาพ",
+    admin_chat_sessions: "เซสชันแชท",
+    admin_active_sessions: "เซสชันที่ใช้งานอยู่",
+    admin_llm_health: "สถานะผู้ให้บริการ LLM",
+    admin_llm_health_subtitle: "ทดสอบโมเดลทั้งหมดในห่วงโซ่สำรองและค้นพบโมเดลระดับองค์กร",
+    admin_fetch_models: "ดึงโมเดล",
+    admin_fetching: "กำลังดึง...",
+    admin_test_all_providers: "ทดสอบผู้ให้บริการทั้งหมด",
+    admin_testing: "กำลังทดสอบ...",
+    admin_total_models: "โมเดลทั้งหมด",
+    admin_online: "ออนไลน์",
+    admin_offline: "ออฟไลน์",
+    admin_provider_status: "สถานะผู้ให้บริการ",
+    admin_discovered_models: "โมเดลที่พบ",
+    admin_how_routing_works: "การกำหนดเส้นทางทำงานอย่างไร",
+    admin_no_models_tested: "ไม่มีโมเดลที่ทดสอบ",
+    admin_click_test: "คลิก «ทดสอบผู้ให้บริการทั้งหมด» เพื่อตรวจสอบสถานะ",
+    admin_ollabridge_title: "เกตเวย์ OllaBridge Cloud",
+    admin_ollabridge_connected: "กำหนดค่า URL OllaBridge แล้ว",
+    admin_ollabridge_not_configured: "ยังไม่ได้กำหนดค่า OllaBridge — แชทจะใช้ HF Inference แทน",
+    admin_hf_title: "ผู้ให้บริการ HuggingFace Inference",
+    admin_hf_configured: "กำหนดค่า HF token แล้ว",
+    admin_hf_not_configured: "ยังไม่ได้ตั้ง HF token — การตรวจสอบ LLM จะล้มเหลว",
+    admin_groq_title: "Groq — การอนุมานที่รวดเร็วฟรี",
+    admin_openai_title: "OpenAI — องค์กร (มีค่าใช้จ่าย)",
+    admin_anthropic_title: "Anthropic Claude — องค์กร (มีค่าใช้จ่าย)",
+    admin_watsonx_title: "IBM WatsonX — องค์กร (มีค่าใช้จ่าย)",
+    admin_local_ollama: "Ollama ในเครื่อง (ไม่บังคับ)",
+    admin_application_settings: "การตั้งค่าแอปพลิเคชัน",
+    admin_system_info: "ข้อมูลระบบ",
+    admin_save_config: "บันทึกการกำหนดค่า",
+    admin_saving: "กำลังบันทึก...",
+    admin_test_connection: "ทดสอบการเชื่อมต่อ",
+    admin_connected: "เชื่อมต่อแล้ว",
+    admin_not_configured: "ยังไม่ได้กำหนดค่า",
+    admin_save_before_test: "บันทึกการเปลี่ยนแปลงก่อนทดสอบ — เซิร์ฟเวอร์ต้องการ URL/คีย์ใหม่บนดิสก์",
+  },
+
+  bn: {
+    admin_title: "অ্যাডমিন ড্যাশবোর্ড",
+    admin_subtitle: "প্ল্যাটফর্ম পরিচালনা এবং বিশ্লেষণ",
+    admin_tab_overview: "ওভারভিউ",
+    admin_tab_users: "ব্যবহারকারী",
+    admin_tab_llm: "LLM",
+    admin_tab_email: "ইমেল",
+    admin_tab_server: "সার্ভার",
+    admin_total_users: "মোট ব্যবহারকারী",
+    admin_verified: "যাচাইকৃত",
+    admin_admins: "অ্যাডমিন",
+    admin_health_records: "স্বাস্থ্য রেকর্ড",
+    admin_chat_sessions: "চ্যাট সেশন",
+    admin_active_sessions: "সক্রিয় সেশন",
+    admin_llm_health: "LLM সরবরাহকারীর অবস্থা",
+    admin_llm_health_subtitle: "ফলব্যাক চেইনের সব মডেল পরীক্ষা করে এবং এন্টারপ্রাইজ মডেল খুঁজে পায়",
+    admin_fetch_models: "মডেল আনুন",
+    admin_fetching: "আনা হচ্ছে...",
+    admin_test_all_providers: "সব সরবরাহকারী পরীক্ষা করুন",
+    admin_testing: "পরীক্ষা করা হচ্ছে...",
+    admin_total_models: "মোট মডেল",
+    admin_online: "অনলাইন",
+    admin_offline: "অফলাইন",
+    admin_provider_status: "সরবরাহকারীর অবস্থা",
+    admin_discovered_models: "আবিষ্কৃত মডেল",
+    admin_how_routing_works: "রাউটিং কীভাবে কাজ করে",
+    admin_no_models_tested: "কোনো মডেল পরীক্ষা করা হয়নি",
+    admin_click_test: "স্বাস্থ্য পরীক্ষা চালাতে «সব সরবরাহকারী পরীক্ষা করুন» ক্লিক করুন",
+    admin_ollabridge_title: "OllaBridge Cloud গেটওয়ে",
+    admin_ollabridge_connected: "OllaBridge URL কনফিগার করা হয়েছে",
+    admin_ollabridge_not_configured: "OllaBridge কনফিগার করা নেই — চ্যাট HF Inference-এ ফলব্যাক করবে",
+    admin_hf_title: "HuggingFace ইনফারেন্স সরবরাহকারী",
+    admin_hf_configured: "HF টোকেন কনফিগার করা হয়েছে",
+    admin_hf_not_configured: "HF টোকেন সেট করা নেই — LLM স্বাস্থ্য পরীক্ষা ব্যর্থ হবে",
+    admin_groq_title: "Groq — বিনামূল্যে দ্রুত ইনফারেন্স",
+    admin_openai_title: "OpenAI — এন্টারপ্রাইজ (পেইড)",
+    admin_anthropic_title: "Anthropic Claude — এন্টারপ্রাইজ (পেইড)",
+    admin_watsonx_title: "IBM WatsonX — এন্টারপ্রাইজ (পেইড)",
+    admin_local_ollama: "লোকাল Ollama (ঐচ্ছিক)",
+    admin_application_settings: "অ্যাপ্লিকেশন সেটিংস",
+    admin_system_info: "সিস্টেম তথ্য",
+    admin_save_config: "কনফিগারেশন সংরক্ষণ",
+    admin_saving: "সংরক্ষণ হচ্ছে...",
+    admin_test_connection: "সংযোগ পরীক্ষা",
+    admin_connected: "সংযুক্ত",
+    admin_not_configured: "কনফিগার করা নেই",
+    admin_save_before_test: "পরীক্ষার আগে পরিবর্তনগুলি সংরক্ষণ করুন — সার্ভারের ডিস্কে নতুন URL/কী প্রয়োজন।",
+  },
+
+  ur: {
+    admin_title: "ایڈمن ڈیش بورڈ",
+    admin_subtitle: "پلیٹ فارم کا انتظام اور تجزیہ",
+    admin_tab_overview: "جائزہ",
+    admin_tab_users: "صارفین",
+    admin_tab_llm: "LLM",
+    admin_tab_email: "ای میل",
+    admin_tab_server: "سرور",
+    admin_total_users: "کل صارفین",
+    admin_verified: "تصدیق شدہ",
+    admin_admins: "ایڈمنز",
+    admin_health_records: "صحت کے ریکارڈ",
+    admin_chat_sessions: "چیٹ سیشنز",
+    admin_active_sessions: "فعال سیشنز",
+    admin_llm_health: "LLM فراہم کنندہ کی صحت",
+    admin_llm_health_subtitle: "فال بیک زنجیر کے تمام ماڈلز کا ٹیسٹ کرتا ہے اور انٹرپرائز ماڈلز تلاش کرتا ہے",
+    admin_fetch_models: "ماڈلز حاصل کریں",
+    admin_fetching: "حاصل ہو رہا ہے...",
+    admin_test_all_providers: "تمام فراہم کنندگان کا ٹیسٹ کریں",
+    admin_testing: "ٹیسٹ ہو رہا ہے...",
+    admin_total_models: "کل ماڈلز",
+    admin_online: "آن لائن",
+    admin_offline: "آف لائن",
+    admin_provider_status: "فراہم کنندہ کی حالت",
+    admin_discovered_models: "دریافت شدہ ماڈلز",
+    admin_how_routing_works: "روٹنگ کیسے کام کرتی ہے",
+    admin_no_models_tested: "کوئی ماڈل ٹیسٹ نہیں کیا گیا",
+    admin_click_test: "ہیلتھ چیک چلانے کے لیے «تمام فراہم کنندگان کا ٹیسٹ کریں» پر کلک کریں",
+    admin_ollabridge_title: "OllaBridge Cloud گیٹ وے",
+    admin_ollabridge_connected: "OllaBridge URL ترتیب دیا گیا",
+    admin_ollabridge_not_configured: "OllaBridge ترتیب نہیں دیا گیا — چیٹ HF Inference پر منتقل ہو جائے گا",
+    admin_hf_title: "HuggingFace انفرنس فراہم کنندگان",
+    admin_hf_configured: "HF ٹوکن ترتیب دیا گیا",
+    admin_hf_not_configured: "HF ٹوکن سیٹ نہیں — LLM ہیلتھ چیک ناکام ہو جائے گا",
+    admin_groq_title: "Groq — مفت تیز انفرنس",
+    admin_openai_title: "OpenAI — انٹرپرائز (ادائیگی)",
+    admin_anthropic_title: "Anthropic Claude — انٹرپرائز (ادائیگی)",
+    admin_watsonx_title: "IBM WatsonX — انٹرپرائز (ادائیگی)",
+    admin_local_ollama: "مقامی Ollama (اختیاری)",
+    admin_application_settings: "ایپلی کیشن کی ترتیبات",
+    admin_system_info: "سسٹم کی معلومات",
+    admin_save_config: "ترتیب محفوظ کریں",
+    admin_saving: "محفوظ ہو رہا ہے...",
+    admin_test_connection: "کنکشن ٹیسٹ کریں",
+    admin_connected: "منسلک",
+    admin_not_configured: "ترتیب نہیں دیا گیا",
+    admin_save_before_test: "ٹیسٹ سے پہلے تبدیلیاں محفوظ کریں — سرور کو ڈسک پر نیا URL/کلید درکار ہے۔",
+  },
+
+  pl: {
+    admin_title: "Panel administratora",
+    admin_subtitle: "Zarządzanie platformą i analityka",
+    admin_tab_overview: "Przegląd",
+    admin_tab_users: "Użytkownicy",
+    admin_tab_llm: "LLM",
+    admin_tab_email: "E-mail",
+    admin_tab_server: "Serwer",
+    admin_total_users: "Wszyscy użytkownicy",
+    admin_verified: "Zweryfikowani",
+    admin_admins: "Administratorzy",
+    admin_health_records: "Dokumentacja medyczna",
+    admin_chat_sessions: "Sesje czatu",
+    admin_active_sessions: "Aktywne sesje",
+    admin_llm_health: "Stan dostawców LLM",
+    admin_llm_health_subtitle: "Testuje wszystkie modele w łańcuchu awaryjnym i wykrywa modele klasy enterprise",
+    admin_fetch_models: "Pobierz modele",
+    admin_fetching: "Pobieranie...",
+    admin_test_all_providers: "Przetestuj wszystkich dostawców",
+    admin_testing: "Testowanie...",
+    admin_total_models: "Łączna liczba modeli",
+    admin_online: "Online",
+    admin_offline: "Offline",
+    admin_provider_status: "Stan dostawcy",
+    admin_discovered_models: "Wykryte modele",
+    admin_how_routing_works: "Jak działa routowanie",
+    admin_no_models_tested: "Brak przetestowanych modeli",
+    admin_click_test: "Kliknij «Przetestuj wszystkich dostawców», aby uruchomić sprawdzenie",
+    admin_ollabridge_title: "Brama OllaBridge Cloud",
+    admin_ollabridge_connected: "Skonfigurowano URL OllaBridge",
+    admin_ollabridge_not_configured: "OllaBridge nie skonfigurowany — czat wróci do HF Inference",
+    admin_hf_title: "Dostawcy inferencji HuggingFace",
+    admin_hf_configured: "Token HF skonfigurowany",
+    admin_hf_not_configured: "Token HF nie ustawiony — sprawdzenie LLM zakończy się niepowodzeniem",
+    admin_groq_title: "Groq — Bezpłatna szybka inferencja",
+    admin_openai_title: "OpenAI — Enterprise (płatne)",
+    admin_anthropic_title: "Anthropic Claude — Enterprise (płatne)",
+    admin_watsonx_title: "IBM WatsonX — Enterprise (płatne)",
+    admin_local_ollama: "Lokalny Ollama (opcjonalnie)",
+    admin_application_settings: "Ustawienia aplikacji",
+    admin_system_info: "Informacje o systemie",
+    admin_save_config: "Zapisz konfigurację",
+    admin_saving: "Zapisywanie...",
+    admin_test_connection: "Testuj połączenie",
+    admin_connected: "Połączono",
+    admin_not_configured: "Nie skonfigurowano",
+    admin_save_before_test: "Zapisz zmiany przed testowaniem — serwer potrzebuje nowego URL/klucza na dysku.",
+  },
+
+  nl: {
+    admin_title: "Beheerdersdashboard",
+    admin_subtitle: "Platformbeheer en analyse",
+    admin_tab_overview: "Overzicht",
+    admin_tab_users: "Gebruikers",
+    admin_tab_llm: "LLM",
+    admin_tab_email: "E-mail",
+    admin_tab_server: "Server",
+    admin_total_users: "Totaal gebruikers",
+    admin_verified: "Geverifieerd",
+    admin_admins: "Beheerders",
+    admin_health_records: "Gezondheidsdossiers",
+    admin_chat_sessions: "Chatsessies",
+    admin_active_sessions: "Actieve sessies",
+    admin_llm_health: "Gezondheid van LLM-providers",
+    admin_llm_health_subtitle: "Test alle modellen in de terugvalketen en ontdekt enterprise-modellen",
+    admin_fetch_models: "Modellen ophalen",
+    admin_fetching: "Ophalen...",
+    admin_test_all_providers: "Alle providers testen",
+    admin_testing: "Testen...",
+    admin_total_models: "Totaal modellen",
+    admin_online: "Online",
+    admin_offline: "Offline",
+    admin_provider_status: "Providerstatus",
+    admin_discovered_models: "Gevonden modellen",
+    admin_how_routing_works: "Hoe routering werkt",
+    admin_no_models_tested: "Geen modellen getest",
+    admin_click_test: "Klik op «Alle providers testen» om een gezondheidscontrole uit te voeren",
+    admin_ollabridge_title: "OllaBridge Cloud Gateway",
+    admin_ollabridge_connected: "OllaBridge-URL geconfigureerd",
+    admin_ollabridge_not_configured: "OllaBridge niet geconfigureerd — chat valt terug op HF Inference",
+    admin_hf_title: "HuggingFace Inference-providers",
+    admin_hf_configured: "HF-token geconfigureerd",
+    admin_hf_not_configured: "HF-token niet ingesteld — LLM-gezondheidscontrole zal mislukken",
+    admin_groq_title: "Groq — Gratis snelle inferentie",
+    admin_openai_title: "OpenAI — Enterprise (betaald)",
+    admin_anthropic_title: "Anthropic Claude — Enterprise (betaald)",
+    admin_watsonx_title: "IBM WatsonX — Enterprise (betaald)",
+    admin_local_ollama: "Lokale Ollama (optioneel)",
+    admin_application_settings: "Applicatie-instellingen",
+    admin_system_info: "Systeeminformatie",
+    admin_save_config: "Configuratie opslaan",
+    admin_saving: "Opslaan...",
+    admin_test_connection: "Verbinding testen",
+    admin_connected: "Verbonden",
+    admin_not_configured: "Niet geconfigureerd",
+    admin_save_before_test: "Sla wijzigingen op voordat je test — de server heeft de nieuwe URL/sleutel op schijf nodig.",
+  },
+};
+
+export function t(key: string, lang: string): string {
+  const langTranslations = translations[lang] || translations.en;
+  return langTranslations[key] || translations.en[key] || key;
+}
+
+// Emergency keywords for auto-detection (multi-language)
+export const EMERGENCY_KEYWORDS: Record<string, string[]> = {
+  en: ["chest pain", "cannot breathe", "can't breathe", "face drooping", "severe bleeding", "unconscious", "suicidal", "suicide", "heart attack", "stroke", "choking", "not breathing", "overdose"],
+  es: ["dolor de pecho", "no puedo respirar", "sangrado severo", "inconsciente", "suicida", "ataque al corazón", "derrame cerebral"],
+  fr: ["douleur thoracique", "ne peut pas respirer", "saignement sévère", "inconscient", "suicidaire", "crise cardiaque", "AVC"],
+  it: ["dolore al petto", "non riesco a respirare", "emorragia grave", "incosciente", "suicidio", "infarto", "ictus"],
+  pt: ["dor no peito", "não consigo respirar", "sangramento grave", "inconsciente", "suicídio", "infarto", "AVC"],
+  ar: ["ألم في الصدر", "لا أستطيع التنفس", "نزيف حاد", "فاقد الوعي", "انتحار", "نوبة قلبية", "سكتة دماغية"],
+  hi: ["सीने में दर्द", "सांस नहीं ले पा रहा", "गंभीर रक्तस्राव", "बेहोश", "आत्महत्या", "दिल का दौरा", "स्ट्रोक"],
+  de: ["Brustschmerzen", "kann nicht atmen", "starke Blutung", "bewusstlos", "Suizid", "Herzinfarkt", "Schlaganfall"],
+  zh: ["胸痛", "无法呼吸", "严重出血", "失去意识", "自杀", "心脏病发作", "中风"],
+  ja: ["胸の痛み", "息ができない", "大量出血", "意識不明", "自殺", "心臓発作", "脳卒中"],
+  ko: ["가슴 통증", "숨을 쉴 수 없다", "심한 출혈", "의식 불명", "자살", "심장마비", "뇌졸중"],
+  ru: ["боль в груди", "не могу дышать", "сильное кровотечение", "без сознания", "суицид", "сердечный приступ", "инсульт"],
+};
+
+export function detectEmergencyKeywords(text: string, lang: string): boolean {
+  const keywords = [
+    ...(EMERGENCY_KEYWORDS[lang] || []),
+    ...(EMERGENCY_KEYWORDS.en || []),
+  ];
+  const lower = text.toLowerCase();
+  return keywords.some((kw) => lower.includes(kw.toLowerCase()));
+}
diff --git a/lib/medical-knowledge.ts b/lib/medical-knowledge.ts
new file mode 100644
index 0000000000000000000000000000000000000000..566b7041dd97938aaee6b9404f57c6cbf9a9b289
--- /dev/null
+++ b/lib/medical-knowledge.ts
@@ -0,0 +1,129 @@
+/**
+ * MedOS — universal medical knowledge scaffold (deployed-Space edition).
+ *
+ * Pure, dependency-free module. Provides a structured system prompt that
+ * grounds the model in WHO/CDC/NHS-aligned guidance and localizes every
+ * response to the user's language, country, and emergency number.
+ *
+ * Pairs with `lib/rag/medical-kb.ts` (retrieval) and `lib/safety/triage.ts`
+ * (red-flag routing) — this module handles prompt-level grounding only.
+ */
+
+export type MeasurementSystem = 'metric' | 'imperial';
+
+export interface MedicalContext {
+  country: string;
+  language: string;
+  emergencyNumber: string;
+  units?: MeasurementSystem;
+}
+
+/** US, Liberia, and Myanmar are the only countries still on imperial. */
+const IMPERIAL_COUNTRIES = new Set(['US', 'LR', 'MM']);
+
+export function defaultUnits(country: string): MeasurementSystem {
+  return IMPERIAL_COUNTRIES.has(country.toUpperCase()) ? 'imperial' : 'metric';
+}
+
+export const GLOBAL_SOURCES = [
+  'World Health Organization (WHO) guidelines and fact sheets',
+  'U.S. Centers for Disease Control and Prevention (CDC)',
+  'National Health Service (NHS UK) patient guidance',
+  'National Institutes of Health (NIH) / MedlinePlus',
+  'International Classification of Diseases (ICD-11)',
+  'British National Formulary (BNF) for medications',
+  'European Medicines Agency (EMA)',
+  'Mayo Clinic patient education',
+  'PubMed / Cochrane systematic reviews',
+  'Società Italiana di Endocrinologia (SIE) for endocrine disorders',
+  'Società Italiana di Diabetologia (SID) for diabetes management',
+  'American Diabetes Association (ADA) Standards of Care',
+  'European Thyroid Association (ETA) guidelines',
+  'Endocrine Society clinical practice guidelines',
+] as const;
+
+export const MEDICAL_SCOPE = [
+  'General symptom triage and education',
+  'Medication information (uses, common side effects, interactions)',
+  'Preventive health, nutrition, physical activity, sleep',
+  'Maternal, pediatric, and geriatric general guidance',
+  'Mental health first-aid and crisis signposting',
+  'Chronic disease self-management education',
+  'Travel and tropical-disease awareness',
+  'Vaccination schedules at a general level',
+];
+
+export const REFUSAL_POLICY = [
+  'Never provide definitive diagnoses — offer possibilities and next steps.',
+  'Never prescribe medication or specific dosages; refer to a clinician or pharmacist.',
+  'Do not interpret personal lab results, imaging, or ECGs as a substitute for a clinician.',
+  'Do not provide instructions that could enable self-harm, abuse of medication, or illicit drug synthesis.',
+  'When red-flag symptoms are present, interrupt the normal flow and direct the user to emergency services.',
+];
+
+export const OUTPUT_CONTRACT = [
+  '1. **Summary** — one or two sentences restating the user concern.',
+  '2. **What it could be** — short, plain-language differential (most-likely first).',
+  '3. **Self-care** — what can be safely done at home, if appropriate.',
+  '4. **When to seek care** — routine vs urgent vs emergency thresholds.',
+  '5. **Red flags** — symptoms that require immediate emergency care.',
+  '6. **Disclaimer** — one line reminding that this is not a diagnosis.',
+];
+
+// Common language-code → language-name map (kept short; full i18n lives
+// in `lib/i18n/`). Used only to include a human-readable language name in
+// the system prompt for stronger model compliance.
+const LANGUAGE_NAMES: Record<string, string> = {
+  en: 'English',  es: 'Español',    fr: 'Français',  pt: 'Português',
+  it: 'Italiano', de: 'Deutsch',    ar: 'العربية',   hi: 'हिन्दी',
+  sw: 'Kiswahili',zh: '中文',       ja: '日本語',    ko: '한국어',
+  ru: 'Русский',  tr: 'Türkçe',    vi: 'Tiếng Việt',th: 'ไทย',
+  bn: 'বাংলা',    ur: 'اردو',      pl: 'Polski',    nl: 'Nederlands',
+  id: 'Bahasa Indonesia', ms: 'Bahasa Melayu', fil: 'Filipino',
+};
+
+/**
+ * Build a system prompt tailored to the user's country/language/units.
+ * Pure function: identical inputs always produce identical output.
+ */
+export function buildMedicalSystemPrompt(ctx: MedicalContext): string {
+  const units = ctx.units ?? defaultUnits(ctx.country);
+  const languageName = LANGUAGE_NAMES[ctx.language] ?? 'English';
+  const sources = GLOBAL_SOURCES.map((s) => `  - ${s}`).join('\n');
+  const scope = MEDICAL_SCOPE.map((s) => `  - ${s}`).join('\n');
+  const refusals = REFUSAL_POLICY.map((s) => `  - ${s}`).join('\n');
+  const contract = OUTPUT_CONTRACT.map((s) => `  ${s}`).join('\n');
+
+  return `You are MedOS, a caring, professional, worldwide medical AI assistant.
+
+# Identity & tone
+- Warm, empathetic, plain language, culturally neutral.
+- You serve patients in every country; adapt examples and units to the user's region.
+- Always open with one short empathy sentence before structured advice.
+
+# Language & locale
+- ALWAYS respond in ${languageName} (language code: ${ctx.language}).
+- The user is in country: ${ctx.country}.
+- Use the ${units} measurement system (°${units === 'imperial' ? 'F' : 'C'}, ${units === 'imperial' ? 'lb / in' : 'kg / cm'}).
+- Local emergency number: ${ctx.emergencyNumber}. Use this exact number whenever telling the user to call emergency services.
+- If the user writes in a different language, switch to that language for the reply.
+
+# Knowledge grounding
+Align your answers with these authoritative sources:
+${sources}
+When recommendations differ between regions, prefer WHO guidance and mention local variation.
+
+# Scope of assistance
+${scope}
+
+# Refusal & safety policy
+${refusals}
+
+# Output format
+Respond using this structure whenever the user asks a clinical question:
+${contract}
+
+For non-clinical chit-chat, reply naturally in one short paragraph and skip the structure.
+
+Remember: patient safety is paramount. When in doubt, recommend consulting a licensed healthcare provider in the user's country.`;
+}
diff --git a/lib/mobile/offline-cache.ts b/lib/mobile/offline-cache.ts
new file mode 100644
index 0000000000000000000000000000000000000000..098c535f0da3ab4d844ee56ef1d305cb82c6ab60
--- /dev/null
+++ b/lib/mobile/offline-cache.ts
@@ -0,0 +1,84 @@
+'use client';
+
+/**
+ * Offline cache management for PWA.
+ * Manages the medical FAQ cache for offline access.
+ */
+
+const CACHE_KEY = 'medos-offline-faq';
+const CACHE_VERSION = 1;
+
+interface CachedData {
+  version: number;
+  timestamp: number;
+  faqs: Array<{ question: string; answer: string }>;
+}
+
+export function saveFAQToCache(
+  faqs: Array<{ question: string; answer: string }>
+): void {
+  if (typeof localStorage === 'undefined') return;
+
+  const data: CachedData = {
+    version: CACHE_VERSION,
+    timestamp: Date.now(),
+    faqs,
+  };
+
+  try {
+    localStorage.setItem(CACHE_KEY, JSON.stringify(data));
+  } catch {
+    // Storage full — clear old data and retry
+    try {
+      localStorage.removeItem(CACHE_KEY);
+      localStorage.setItem(CACHE_KEY, JSON.stringify(data));
+    } catch {
+      // Silently fail if storage is completely full
+    }
+  }
+}
+
+export function loadFAQFromCache(): Array<{
+  question: string;
+  answer: string;
+}> | null {
+  if (typeof localStorage === 'undefined') return null;
+
+  try {
+    const raw = localStorage.getItem(CACHE_KEY);
+    if (!raw) return null;
+
+    const data: CachedData = JSON.parse(raw);
+    if (data.version !== CACHE_VERSION) return null;
+
+    // Cache is valid for 30 days
+    const thirtyDays = 30 * 24 * 60 * 60 * 1000;
+    if (Date.now() - data.timestamp > thirtyDays) return null;
+
+    return data.faqs;
+  } catch {
+    return null;
+  }
+}
+
+export function isOnline(): boolean {
+  if (typeof navigator === 'undefined') return true;
+  return navigator.onLine;
+}
+
+export function onConnectivityChange(
+  callback: (online: boolean) => void
+): () => void {
+  if (typeof window === 'undefined') return () => {};
+
+  const handleOnline = () => callback(true);
+  const handleOffline = () => callback(false);
+
+  window.addEventListener('online', handleOnline);
+  window.addEventListener('offline', handleOffline);
+
+  return () => {
+    window.removeEventListener('online', handleOnline);
+    window.removeEventListener('offline', handleOffline);
+  };
+}
diff --git a/lib/mobile/pwa.ts b/lib/mobile/pwa.ts
new file mode 100644
index 0000000000000000000000000000000000000000..94b4969c6e22b9cbb2bc46824c1cd7e247fd9522
--- /dev/null
+++ b/lib/mobile/pwa.ts
@@ -0,0 +1,48 @@
+'use client';
+
+/**
+ * PWA utilities: install prompt, registration, update detection.
+ */
+
+let deferredPrompt: BeforeInstallPromptEvent | null = null;
+
+interface BeforeInstallPromptEvent extends Event {
+  prompt(): Promise<void>;
+  userChoice: Promise<{ outcome: 'accepted' | 'dismissed' }>;
+}
+
+export function initPWA(): void {
+  if (typeof window === 'undefined') return;
+
+  window.addEventListener('beforeinstallprompt', (e: Event) => {
+    e.preventDefault();
+    deferredPrompt = e as BeforeInstallPromptEvent;
+    window.dispatchEvent(new CustomEvent('pwa-installable'));
+  });
+
+  window.addEventListener('appinstalled', () => {
+    deferredPrompt = null;
+    window.dispatchEvent(new CustomEvent('pwa-installed'));
+  });
+}
+
+export function canInstallPWA(): boolean {
+  return deferredPrompt !== null;
+}
+
+export async function installPWA(): Promise<boolean> {
+  if (!deferredPrompt) return false;
+
+  await deferredPrompt.prompt();
+  const { outcome } = await deferredPrompt.userChoice;
+  deferredPrompt = null;
+  return outcome === 'accepted';
+}
+
+export function isPWAInstalled(): boolean {
+  if (typeof window === 'undefined') return false;
+  return (
+    window.matchMedia('(display-mode: standalone)').matches ||
+    (window.navigator as Navigator & { standalone?: boolean }).standalone === true
+  );
+}
diff --git a/lib/mobile/touch.ts b/lib/mobile/touch.ts
new file mode 100644
index 0000000000000000000000000000000000000000..d786a6dfc7d6c33c152c762b02fc40b247b51712
--- /dev/null
+++ b/lib/mobile/touch.ts
@@ -0,0 +1,75 @@
+'use client';
+
+/**
+ * Touch gesture utilities for mobile interactions.
+ */
+
+export function hapticFeedback(
+  style: 'light' | 'medium' | 'heavy' = 'light'
+): void {
+  if (typeof navigator === 'undefined') return;
+  if (!('vibrate' in navigator)) return;
+
+  const patterns: Record<string, number> = {
+    light: 10,
+    medium: 20,
+    heavy: 40,
+  };
+
+  navigator.vibrate(patterns[style] || 10);
+}
+
+export interface SwipeResult {
+  direction: 'up' | 'down' | 'left' | 'right';
+  distance: number;
+}
+
+/**
+ * Create a swipe detector for an element.
+ */
+export function createSwipeDetector(
+  element: HTMLElement,
+  onSwipe: (result: SwipeResult) => void,
+  threshold: number = 50
+): () => void {
+  let startX = 0;
+  let startY = 0;
+
+  function handleTouchStart(e: TouchEvent) {
+    startX = e.touches[0].clientX;
+    startY = e.touches[0].clientY;
+  }
+
+  function handleTouchEnd(e: TouchEvent) {
+    const endX = e.changedTouches[0].clientX;
+    const endY = e.changedTouches[0].clientY;
+
+    const diffX = endX - startX;
+    const diffY = endY - startY;
+
+    const absDiffX = Math.abs(diffX);
+    const absDiffY = Math.abs(diffY);
+
+    if (absDiffX < threshold && absDiffY < threshold) return;
+
+    if (absDiffX > absDiffY) {
+      onSwipe({
+        direction: diffX > 0 ? 'right' : 'left',
+        distance: absDiffX,
+      });
+    } else {
+      onSwipe({
+        direction: diffY > 0 ? 'down' : 'up',
+        distance: absDiffY,
+      });
+    }
+  }
+
+  element.addEventListener('touchstart', handleTouchStart, { passive: true });
+  element.addEventListener('touchend', handleTouchEnd, { passive: true });
+
+  return () => {
+    element.removeEventListener('touchstart', handleTouchStart);
+    element.removeEventListener('touchend', handleTouchEnd);
+  };
+}
diff --git a/lib/mobile/viewport.ts b/lib/mobile/viewport.ts
new file mode 100644
index 0000000000000000000000000000000000000000..00d36fcb312772ea8aa6289a16fd606bfdf940f1
--- /dev/null
+++ b/lib/mobile/viewport.ts
@@ -0,0 +1,51 @@
+'use client';
+
+/**
+ * Mobile viewport utilities.
+ * Fixes iOS Safari 100vh issue and handles keyboard.
+ */
+
+export function initViewport(): (() => void) | undefined {
+  if (typeof window === 'undefined') return;
+
+  function setVH() {
+    const vh = window.innerHeight * 0.01;
+    document.documentElement.style.setProperty('--vh', `${vh}px`);
+  }
+
+  function handleResize() {
+    setVH();
+  }
+
+  function handleVisualViewport() {
+    if (window.visualViewport) {
+      const vh = window.visualViewport.height * 0.01;
+      document.documentElement.style.setProperty('--vh', `${vh}px`);
+    }
+  }
+
+  setVH();
+  window.addEventListener('resize', handleResize);
+
+  if (window.visualViewport) {
+    window.visualViewport.addEventListener('resize', handleVisualViewport);
+  }
+
+  return () => {
+    window.removeEventListener('resize', handleResize);
+    if (window.visualViewport) {
+      window.visualViewport.removeEventListener('resize', handleVisualViewport);
+    }
+  };
+}
+
+/**
+ * Detect if virtual keyboard is open (heuristic).
+ */
+export function isKeyboardOpen(): boolean {
+  if (typeof window === 'undefined') return false;
+  if (window.visualViewport) {
+    return window.visualViewport.height < window.innerHeight * 0.75;
+  }
+  return false;
+}
diff --git a/lib/patient-context.server.ts b/lib/patient-context.server.ts
new file mode 100644
index 0000000000000000000000000000000000000000..0061a5af1c3066b46c375741ecc5cb4f7d0ca735
--- /dev/null
+++ b/lib/patient-context.server.ts
@@ -0,0 +1,115 @@
+/**
+ * Server-side patient-context builder.
+ *
+ * Mirrors the compact format produced by the legacy client function
+ * `buildPatientContext()` in lib/health-store.ts, but reads from the
+ * SQLite database scoped to ONE authenticated user. This is the
+ * cross-user-leak fix: the client is never trusted to ship its own
+ * EHR — the server looks it up by user_id at chat time.
+ *
+ * Output (kept identical so the LLM behaviour is unchanged):
+ *   '\n[Patient: 47/M | Dx: Diabetes | Allergies: Penicillin | Meds: Metformin 500mg | smoker]'
+ *
+ * Returns '' when:
+ *   - userId is empty (guest chat)
+ *   - the user has no EHR profile and no active medications
+ *
+ * Server-only module: imports better-sqlite3 (native, Node-only).
+ */
+
+import { getDb } from './db';
+import { getUserSettings } from './user-settings';
+import { decodeHealthPayload } from './health-data-repo';
+
+export function buildPatientContextForUser(userId: string | null | undefined): string {
+  if (!userId) return '';
+
+  const settings = getUserSettings(userId);
+  const ehr = (settings.ehr || {}) as Record<string, any>;
+
+  const db = getDb();
+  const medRows = db
+    .prepare(
+      `SELECT data FROM health_data
+       WHERE user_id = ? AND type = 'medication'
+       ORDER BY updated_at DESC`,
+    )
+    .all(userId) as Array<{ data: string }>;
+
+  const meds = medRows
+    .map((r) => {
+      try {
+        return decodeHealthPayload<Record<string, any>>(r.data);
+      } catch {
+        return null;
+      }
+    })
+    .filter((m) => m && typeof m === 'object' && (m as any).active !== false);
+
+  const bits: string[] = [];
+
+  // Demographics (age + gender initial).
+  const demo: string[] = [];
+  if (ehr.dateOfBirth) {
+    const t = new Date(ehr.dateOfBirth).getTime();
+    if (Number.isFinite(t)) {
+      const age = Math.floor((Date.now() - t) / (365.25 * 86400000));
+      if (age >= 0 && age < 130) demo.push(`${age}y`);
+    }
+  }
+  if (ehr.gender && ehr.gender !== 'prefer-not-to-say') {
+    demo.push(String(ehr.gender)[0].toUpperCase());
+  }
+  if (demo.length) bits.push(demo.join('/'));
+
+  // Chronic conditions — most important for clinical context.
+  if (Array.isArray(ehr.chronicConditions) && ehr.chronicConditions.length) {
+    bits.push(`Dx: ${ehr.chronicConditions.join(', ')}`);
+  }
+
+  // Allergies — safety-critical.
+  if (
+    Array.isArray(ehr.allergies) &&
+    ehr.allergies.length &&
+    !ehr.allergies.includes('None known')
+  ) {
+    bits.push(`Allergies: ${ehr.allergies.join(', ')}`);
+  }
+
+  // Active medications — abbreviated to name + dose.
+  if (meds.length > 0) {
+    bits.push(
+      `Meds: ${meds
+        .map((m: any) => `${m.name || '?'} ${m.dose || ''}`.trim())
+        .join(', ')}`,
+    );
+  }
+
+  // Lifestyle — compact.
+  const life: string[] = [];
+  if (ehr.smokingStatus === 'current') life.push('smoker');
+  if (ehr.smokingStatus === 'former') life.push('ex-smoker');
+  if (ehr.alcoholUse === 'heavy') life.push('heavy alcohol');
+  if (life.length) bits.push(life.join(', '));
+
+  if (bits.length === 0) return '';
+  return `\n[Patient: ${bits.join(' | ')}]`;
+}
+
+/**
+ * Defence-in-depth: strip any client-provided `[Patient: ...]` block
+ * from a user message before it hits the LLM. Even if a malicious or
+ * stale client tries to smuggle EHR claims, the server's own
+ * buildPatientContextForUser() output is the only one that reaches
+ * the model.
+ *
+ * Matches the bracketed token at the start of a line (with optional
+ * leading newline) and trims one trailing newline if present.
+ */
+export function stripInjectedPatientContext(content: string): string {
+  if (!content) return '';
+  // Multi-line, case-sensitive, non-greedy until newline or end.
+  return content
+    .replace(/(^|\n)\s*\[Patient:[^\]\n]*\](?=\n|$)/g, '')
+    .replace(/^\n+/, '');
+}
diff --git a/lib/providers/cached-faq.ts b/lib/providers/cached-faq.ts
new file mode 100644
index 0000000000000000000000000000000000000000..97c47c81d31ae339ed85cea853402c3dd8d5390e
--- /dev/null
+++ b/lib/providers/cached-faq.ts
@@ -0,0 +1,120 @@
+/**
+ * Cached FAQ responses for offline/fallback use.
+ * When all LLM providers are unavailable, this provides
+ * basic medical guidance from pre-cached Q&A pairs.
+ */
+
+interface FAQEntry {
+  keywords: string[];
+  response: string;
+}
+
+const MEDICAL_FAQ: FAQEntry[] = [
+  {
+    keywords: ['headache', 'head pain', 'migraine'],
+    response:
+      'Headaches can have many causes including tension, dehydration, lack of sleep, or eye strain. Try resting in a quiet, dark room, drinking water, and taking over-the-counter pain relief if appropriate. If you experience sudden severe headache ("worst headache of your life"), headache with fever and stiff neck, or headache after head injury, please seek immediate medical attention.',
+  },
+  {
+    keywords: ['fever', 'temperature', 'hot'],
+    response:
+      'Fever is your body\'s natural response to infection. For adults, a temperature above 38°C (100.4°F) is considered a fever. Rest, stay hydrated, and consider over-the-counter fever reducers. Seek medical attention if fever exceeds 39.4°C (103°F), lasts more than 3 days, or is accompanied by severe symptoms. For infants under 3 months, ANY fever requires immediate medical evaluation.',
+  },
+  {
+    keywords: ['cough', 'cold', 'flu', 'influenza'],
+    response:
+      'Most coughs and colds are caused by viruses and resolve within 7-10 days. Rest, drink plenty of fluids, and use honey for cough relief (not for children under 1 year). Antibiotics do NOT work against viruses. See a doctor if cough persists beyond 3 weeks, you cough up blood, or experience difficulty breathing.',
+  },
+  {
+    keywords: ['diabetes', 'blood sugar', 'glucose'],
+    response:
+      'Diabetes is a chronic condition affecting how your body processes blood sugar. Type 2 diabetes can often be managed with diet, exercise, and medication. Monitor your blood sugar regularly, maintain a healthy diet, stay physically active, and take prescribed medications consistently. Regular check-ups with your healthcare provider are essential.',
+  },
+  {
+    keywords: ['blood pressure', 'hypertension', 'high bp'],
+    response:
+      'High blood pressure (hypertension) is often called the "silent killer" because it usually has no symptoms. Normal blood pressure is below 120/80 mmHg. Manage it through regular exercise, reducing salt intake, maintaining a healthy weight, limiting alcohol, and taking prescribed medications consistently. Regular monitoring is key.',
+  },
+  {
+    keywords: ['anxiety', 'anxious', 'panic', 'worry', 'stressed'],
+    response:
+      'Anxiety is a common and treatable condition. Techniques that may help include deep breathing exercises (breathe in for 4 counts, hold for 4, out for 4), regular physical activity, adequate sleep, and limiting caffeine. If anxiety significantly impacts your daily life, please consider speaking with a mental health professional. You are not alone.',
+  },
+  {
+    keywords: ['depression', 'sad', 'hopeless', 'depressed'],
+    response:
+      'Depression is a medical condition, not a sign of weakness. Symptoms include persistent sadness, loss of interest, fatigue, and changes in sleep or appetite. If you are experiencing these symptoms, please reach out to a healthcare professional. Treatment including therapy and/or medication can be very effective. If you are having thoughts of self-harm, please contact your local emergency services immediately.',
+  },
+  {
+    keywords: ['pregnancy', 'pregnant', 'prenatal'],
+    response:
+      'During pregnancy, prenatal care is essential. Take folic acid supplements, eat a balanced diet, stay hydrated, and attend all prenatal appointments. Danger signs that require immediate medical attention include: heavy bleeding, severe headache with vision changes, severe abdominal pain, reduced fetal movement, and seizures.',
+  },
+  {
+    keywords: ['diarrhea', 'diarrhoea', 'loose stool'],
+    response:
+      'Most diarrhea resolves within a few days. The most important treatment is staying hydrated. Use Oral Rehydration Solution (ORS): mix 1 liter of clean water with 6 teaspoons of sugar and 1/2 teaspoon of salt. Seek medical attention if diarrhea lasts more than 3 days, contains blood, or is accompanied by high fever or signs of dehydration.',
+  },
+  {
+    keywords: ['malaria', 'mosquito'],
+    response:
+      'Malaria is transmitted by mosquito bites and can be life-threatening. Prevention includes sleeping under insecticide-treated bed nets, using mosquito repellent, and taking prophylactic medication when recommended. If you have fever in a malaria-endemic area, seek testing and treatment immediately. Early treatment saves lives.',
+  },
+  {
+    keywords: ['chest pain', 'heart attack', 'heart'],
+    response:
+      'Chest pain can have many causes, but it should always be taken seriously. If you experience sudden chest pain or pressure, especially with pain radiating to your arm/jaw, shortness of breath, sweating, or nausea, call your local emergency number IMMEDIATELY. This could be a heart attack. Time is critical — do not wait.',
+  },
+  {
+    keywords: ['stroke', 'face drooping', 'arm weakness', 'speech'],
+    response:
+      'Remember FAST for stroke: Face drooping, Arm weakness, Speech difficulty, Time to call emergency services. Stroke is a medical emergency — every minute counts. If you or someone shows these signs, call your local emergency number immediately. Quick treatment can save lives and reduce disability.',
+  },
+  {
+    keywords: ['asthma', 'breathing', 'wheeze', 'inhaler'],
+    response:
+      'Asthma management includes: using your controller inhaler daily as prescribed, keeping your rescue inhaler with you, avoiding known triggers, and following your asthma action plan. Seek emergency care if you have severe difficulty breathing, your rescue inhaler doesn\'t help, or you cannot speak in full sentences.',
+  },
+  {
+    keywords: ['snake', 'snakebite', 'bite'],
+    response:
+      'For snakebite: Stay calm and still (movement spreads venom faster). Remove jewelry/tight clothing near the bite. Immobilize the affected limb. Get to the nearest hospital IMMEDIATELY for antivenom. Do NOT cut the wound, suck out venom, apply a tourniquet, or apply ice. Take a photo of the snake if safe to do so.',
+  },
+  {
+    keywords: ['vaccine', 'vaccination', 'immunization'],
+    response:
+      'Vaccines are one of the most effective ways to prevent serious diseases. They work by training your immune system to recognize and fight specific infections. Side effects are usually mild (sore arm, low fever) and temporary. Follow your country\'s recommended vaccination schedule. Vaccines do not cause autism — this has been thoroughly studied and debunked.',
+  },
+];
+
+const DEFAULT_RESPONSE =
+  'I\'m currently operating in offline mode with limited capabilities. For your question, I recommend consulting a healthcare professional who can provide personalized medical advice. If you are experiencing an emergency, please call your local emergency services immediately.\n\nYou can try again later when the connection is restored for a more detailed response.';
+
+/**
+ * Search cached FAQ entries by keyword matching.
+ */
+export function getCachedFAQResponse(query: string): string {
+  const queryLower = query.toLowerCase();
+
+  let bestMatch: FAQEntry | null = null;
+  let bestScore = 0;
+
+  for (const entry of MEDICAL_FAQ) {
+    let score = 0;
+    for (const keyword of entry.keywords) {
+      if (queryLower.includes(keyword)) {
+        score += keyword.length; // Longer keyword matches are more specific
+      }
+    }
+    if (score > bestScore) {
+      bestScore = score;
+      bestMatch = entry;
+    }
+  }
+
+  if (bestMatch && bestScore > 0) {
+    return bestMatch.response;
+  }
+
+  return DEFAULT_RESPONSE;
+}
diff --git a/lib/providers/huggingface-direct.ts b/lib/providers/huggingface-direct.ts
new file mode 100644
index 0000000000000000000000000000000000000000..3080581db990c8bee5a9a45a6d1c457f50b41c9c
--- /dev/null
+++ b/lib/providers/huggingface-direct.ts
@@ -0,0 +1,222 @@
+import type { ChatMessage, ProviderResponse } from './index';
+import { loadConfig } from '@/lib/server-config';
+
+/**
+ * HuggingFace Inference Providers router — OpenAI-compatible endpoint.
+ *
+ * Uses router.huggingface.co with a deep fallback chain of verified
+ * working models (tested 2026-04-07). Provider pinning via :suffix
+ * syntax routes to specific backends (sambanova, together, etc.).
+ *
+ * Token resolution: admin-configured token (via Admin → Server → HuggingFace)
+ * takes precedence over the HF_TOKEN env var, so admins can fix bad tokens
+ * without redeploying the Space.
+ */
+const HF_BASE_URL = 'https://router.huggingface.co/v1';
+
+function getHfToken(): string {
+  try {
+    const cfg = loadConfig();
+    if (cfg.llm.hfToken) return cfg.llm.hfToken;
+  } catch {
+    // config file unreadable; fall through to env
+  }
+  return process.env.HF_TOKEN || '';
+}
+
+function getAdminDefaultModel(): string {
+  try {
+    const cfg = loadConfig();
+    if (cfg.llm.hfDefaultModel) return cfg.llm.hfDefaultModel;
+  } catch {
+    // ignore
+  }
+  return '';
+}
+
+/** Ordered fallback chain — all verified working on free tier. */
+const BASE_MODEL_CHAIN = [
+  'meta-llama/Llama-3.3-70B-Instruct:sambanova',
+  'meta-llama/Llama-3.3-70B-Instruct:together',
+  'meta-llama/Llama-3.3-70B-Instruct',       // auto-route
+  'Qwen/Qwen2.5-72B-Instruct',
+  'Qwen/Qwen3-235B-A22B',
+  'google/gemma-3-27b-it',
+  'meta-llama/Llama-3.1-70B-Instruct',
+  'Qwen/Qwen3-32B',
+  'deepseek-ai/DeepSeek-V3-0324',
+];
+
+/**
+ * Resolve the model chain at request time so admin-configured default
+ * models take effect without a redeploy. The admin value is inserted at
+ * the TOP of the chain (duplicates removed) so it's tried first.
+ */
+function getModelChain(): string[] {
+  const adminDefault = getAdminDefaultModel();
+  if (!adminDefault) return BASE_MODEL_CHAIN;
+  return [adminDefault, ...BASE_MODEL_CHAIN.filter((m) => m !== adminDefault)];
+}
+
+async function callHF(
+  messages: ChatMessage[],
+  model: string,
+  stream: boolean,
+): Promise<Response> {
+  const token = getHfToken();
+  return fetch(`${HF_BASE_URL}/chat/completions`, {
+    method: 'POST',
+    headers: {
+      Authorization: `Bearer ${token}`,
+      'Content-Type': 'application/json',
+    },
+    body: JSON.stringify({
+      model,
+      messages: messages.map((m) => ({ role: m.role, content: m.content })),
+      max_tokens: 1000,
+      temperature: 0.7,
+      stream,
+    }),
+  });
+}
+
+export async function streamWithHuggingFace(
+  messages: ChatMessage[],
+): Promise<ReadableStream> {
+  const encoder = new TextEncoder();
+
+  const token = getHfToken();
+  if (!token) {
+    console.error('[Chat] provider.huggingface.no-token — admin must set HF token');
+    throw new Error(
+      'HF token not configured — set it in Admin → Server → HuggingFace',
+    );
+  }
+
+  // Try each model in the chain until one succeeds. Every attempt is
+  // logged with latency + status so a developer can reconstruct the
+  // cascade from the HF Space run logs. The chain starts with the
+  // admin-configured default model (if any), so UI changes take effect
+  // without a redeploy.
+  const chain = getModelChain();
+  let response: Response | null = null;
+  let activeModel = chain[0];
+  for (const model of chain) {
+    const start = Date.now();
+    const res = await callHF(messages, model, true);
+    const latencyMs = Date.now() - start;
+    if (res.ok) {
+      console.log(
+        `[Chat] provider.huggingface.attempt ${JSON.stringify({
+          model,
+          status: res.status,
+          latencyMs,
+          result: 'ok',
+        })}`,
+      );
+      response = res;
+      activeModel = model;
+      break;
+    }
+    console.warn(
+      `[Chat] provider.huggingface.attempt ${JSON.stringify({
+        model,
+        status: res.status,
+        latencyMs,
+        result: 'fallback',
+      })}`,
+    );
+  }
+  if (!response || !response.ok) {
+    throw new Error('All HF Inference models unavailable');
+  }
+
+  const reader = response.body?.getReader();
+  if (!reader) throw new Error('No response body');
+
+  return new ReadableStream({
+    async start(controller) {
+      try {
+        const decoder = new TextDecoder();
+        while (true) {
+          const { done, value } = await reader.read();
+          if (done) break;
+
+          const chunk = decoder.decode(value, { stream: true });
+          const lines = chunk.split('\n');
+
+          for (const line of lines) {
+            if (line.startsWith('data: ') && line !== 'data: [DONE]') {
+              try {
+                const parsed = JSON.parse(line.slice(6));
+                const content = parsed.choices?.[0]?.delta?.content;
+                if (content) {
+                  const data = JSON.stringify({
+                    choices: [{ delta: { content } }],
+                    provider: 'huggingface',
+                    model: activeModel,
+                  });
+                  controller.enqueue(encoder.encode(`data: ${data}\n\n`));
+                }
+              } catch {
+                // skip malformed chunks
+              }
+            }
+          }
+        }
+        controller.enqueue(encoder.encode('data: [DONE]\n\n'));
+        controller.close();
+      } catch (error) {
+        controller.error(error);
+      }
+    },
+  });
+}
+
+export async function chatWithHuggingFace(
+  messages: ChatMessage[],
+): Promise<ProviderResponse> {
+  if (!getHfToken()) {
+    console.error('[Chat] provider.huggingface.no-token.nonstream');
+    throw new Error('HF token not configured');
+  }
+  const chain = getModelChain();
+  let response: Response | null = null;
+  let activeModel = chain[0];
+  for (const model of chain) {
+    const start = Date.now();
+    const res = await callHF(messages, model, false);
+    const latencyMs = Date.now() - start;
+    if (res.ok) {
+      console.log(
+        `[Chat] provider.huggingface.attempt.nonstream ${JSON.stringify({
+          model,
+          status: res.status,
+          latencyMs,
+          result: 'ok',
+        })}`,
+      );
+      response = res;
+      activeModel = model;
+      break;
+    }
+    console.warn(
+      `[Chat] provider.huggingface.attempt.nonstream ${JSON.stringify({
+        model,
+        status: res.status,
+        latencyMs,
+        result: 'fallback',
+      })}`,
+    );
+  }
+  if (!response || !response.ok) {
+    throw new Error('All HF Inference models unavailable');
+  }
+
+  const data = await response.json();
+  return {
+    content: data.choices?.[0]?.message?.content || '',
+    provider: 'huggingface',
+    model: activeModel,
+  };
+}
diff --git a/lib/providers/index.ts b/lib/providers/index.ts
new file mode 100644
index 0000000000000000000000000000000000000000..d6d533cdc0b49cbb3fe0306593f8a7ce683d47fd
--- /dev/null
+++ b/lib/providers/index.ts
@@ -0,0 +1,167 @@
+import {
+  streamWithOllaBridge,
+  chatWithOllaBridge,
+  isOllaBridgeConfigured,
+} from './ollabridge';
+import {
+  streamWithHuggingFace,
+  chatWithHuggingFace,
+} from './huggingface-direct';
+import { getCachedFAQResponse } from './cached-faq';
+
+export interface ChatMessage {
+  role: 'system' | 'user' | 'assistant';
+  content: string;
+}
+
+export interface ProviderResponse {
+  content: string;
+  provider: string;
+  model: string;
+}
+
+/**
+ * Structured logger that prefixes every line with `[Chat]` so the HF Space
+ * logs API can be grepped for a single request end-to-end.
+ */
+function log(stage: string, details?: Record<string, unknown>) {
+  const payload = details ? ` ${JSON.stringify(details)}` : '';
+  console.log(`[Chat] ${stage}${payload}`);
+}
+
+/**
+ * Stream chat completion with automatic fallback chain:
+ * 1. OllaBridge-Cloud — only if admin has set OllaBridge URL
+ * 2. Direct HuggingFace Inference API — 12-model cascade
+ * 3. Cached FAQ response — always works, even offline
+ *
+ * Each step logs its decision so the workflow can be traced from the
+ * HF Space run logs. On failure, the NEXT step is tried automatically.
+ */
+export async function streamWithFallback(
+  messages: ChatMessage[],
+  model: string = 'qwen2.5:1.5b'
+): Promise<ReadableStream> {
+  const requestId = Math.random().toString(36).slice(2, 10);
+  const startedAt = Date.now();
+  const userTurn = messages.filter((m) => m.role === 'user').pop();
+  log('request.start', {
+    requestId,
+    model,
+    turns: messages.length,
+    userChars: userTurn?.content.length ?? 0,
+  });
+
+  // Step 1 — OllaBridge (only when the admin has set OLLABRIDGE_URL).
+  // Skipping the try when unconfigured avoids burning latency on a
+  // default URL that may not correspond to the user's gateway.
+  if (isOllaBridgeConfigured()) {
+    const t0 = Date.now();
+    try {
+      const stream = await streamWithOllaBridge(messages, model);
+      log('provider.ollabridge.ok', {
+        requestId,
+        latencyMs: Date.now() - t0,
+        totalMs: Date.now() - startedAt,
+      });
+      return stream;
+    } catch (error: any) {
+      log('provider.ollabridge.fail', {
+        requestId,
+        latencyMs: Date.now() - t0,
+        error: String(error?.message || error).slice(0, 200),
+      });
+    }
+  } else {
+    log('provider.ollabridge.skipped', { requestId, reason: 'not configured' });
+  }
+
+  // Step 2 — HuggingFace Inference (cascades internally through 12 models).
+  const t1 = Date.now();
+  try {
+    const stream = await streamWithHuggingFace(messages);
+    log('provider.huggingface.ok', {
+      requestId,
+      latencyMs: Date.now() - t1,
+      totalMs: Date.now() - startedAt,
+    });
+    return stream;
+  } catch (error: any) {
+    log('provider.huggingface.fail', {
+      requestId,
+      latencyMs: Date.now() - t1,
+      error: String(error?.message || error).slice(0, 200),
+    });
+  }
+
+  // Step 3 — Cached FAQ (always succeeds).
+  const faqResponse = getCachedFAQResponse(userTurn?.content || '');
+  log('provider.cached-faq.used', {
+    requestId,
+    totalMs: Date.now() - startedAt,
+    faqChars: faqResponse.length,
+  });
+
+  return new ReadableStream({
+    start(controller) {
+      const encoder = new TextEncoder();
+      controller.enqueue(
+        encoder.encode(
+          `data: ${JSON.stringify({
+            choices: [{ delta: { content: faqResponse } }],
+            provider: 'cached-faq',
+            model: 'offline',
+          })}\n\n`,
+        ),
+      );
+      controller.enqueue(encoder.encode('data: [DONE]\n\n'));
+      controller.close();
+    },
+  });
+}
+
+/**
+ * Non-streaming chat completion with fallback chain.
+ * Mirrors streamWithFallback — same decisions, same logs.
+ */
+export async function chatWithFallback(
+  messages: ChatMessage[],
+  model: string = 'qwen2.5:1.5b'
+): Promise<ProviderResponse> {
+  const requestId = Math.random().toString(36).slice(2, 10);
+  log('request.start.nonstream', { requestId, model });
+
+  if (isOllaBridgeConfigured()) {
+    try {
+      const resp = await chatWithOllaBridge(messages, model);
+      log('provider.ollabridge.ok.nonstream', { requestId });
+      return resp;
+    } catch (error: any) {
+      log('provider.ollabridge.fail.nonstream', {
+        requestId,
+        error: String(error?.message || error).slice(0, 200),
+      });
+    }
+  } else {
+    log('provider.ollabridge.skipped.nonstream', { requestId });
+  }
+
+  try {
+    const resp = await chatWithHuggingFace(messages);
+    log('provider.huggingface.ok.nonstream', { requestId });
+    return resp;
+  } catch (error: any) {
+    log('provider.huggingface.fail.nonstream', {
+      requestId,
+      error: String(error?.message || error).slice(0, 200),
+    });
+  }
+
+  const lastUserMessage = messages.filter((m) => m.role === 'user').pop();
+  log('provider.cached-faq.used.nonstream', { requestId });
+  return {
+    content: getCachedFAQResponse(lastUserMessage?.content || ''),
+    provider: 'cached-faq',
+    model: 'offline',
+  };
+}
diff --git a/lib/providers/ollabridge-models.ts b/lib/providers/ollabridge-models.ts
new file mode 100644
index 0000000000000000000000000000000000000000..5c6fa298301fb8d1b31b6d13c13b7d05bcc611d3
--- /dev/null
+++ b/lib/providers/ollabridge-models.ts
@@ -0,0 +1,92 @@
+/**
+ * Fetch available models from OllaBridge-Cloud.
+ * These include model aliases (free-best, free-fast, etc.)
+ * and any connected local/remote models.
+ *
+ * Prefers admin-configured credentials (via Admin UI) over env vars.
+ */
+
+import { loadConfig } from '@/lib/server-config';
+
+export interface OllaBridgeModel {
+  id: string;
+  name: string;
+  description: string;
+  category: 'free' | 'cheap' | 'local';
+}
+
+const DEFAULT_MODELS: OllaBridgeModel[] = [
+  {
+    id: 'free-best',
+    name: 'Best Free Model',
+    description: 'Routes to best available free provider (Gemini, Groq, etc.)',
+    category: 'free',
+  },
+  {
+    id: 'free-fast',
+    name: 'Fastest Free Model',
+    description: 'Routes to fastest free provider (Groq)',
+    category: 'free',
+  },
+  {
+    id: 'free-flex',
+    name: 'Flexible Free Model',
+    description: 'Routes to OpenRouter free models',
+    category: 'free',
+  },
+  {
+    id: 'cheap-reasoning',
+    name: 'Advanced Reasoning',
+    description: 'Routes to DeepSeek for complex medical reasoning',
+    category: 'cheap',
+  },
+];
+
+export async function fetchAvailableModels(): Promise<OllaBridgeModel[]> {
+  let configUrl = '';
+  let configKey = '';
+  try {
+    const cfg = loadConfig();
+    configUrl = cfg.llm.ollabridgeUrl;
+    configKey = cfg.llm.ollabridgeApiKey;
+  } catch {
+    // ignore
+  }
+  const baseURL =
+    configUrl ||
+    process.env.OLLABRIDGE_URL ||
+    'https://ruslanmv-ollabridge.hf.space';
+  const apiKey = configKey || process.env.OLLABRIDGE_API_KEY || '';
+
+  try {
+    const response = await fetch(`${baseURL}/v1/models`, {
+      headers: {
+        Authorization: `Bearer ${apiKey}`,
+      },
+      signal: AbortSignal.timeout(10000),
+    });
+
+    if (!response.ok) {
+      throw new Error(`Failed to fetch models: ${response.status}`);
+    }
+
+    const data = await response.json();
+
+    if (data?.data && Array.isArray(data.data)) {
+      return data.data.map((m: { id: string; owned_by?: string }) => ({
+        id: m.id,
+        name: m.id,
+        description: m.owned_by || 'Available model',
+        category: m.id.startsWith('free-')
+          ? 'free'
+          : m.id.startsWith('cheap-')
+            ? 'cheap'
+            : 'local',
+      }));
+    }
+
+    return DEFAULT_MODELS;
+  } catch {
+    return DEFAULT_MODELS;
+  }
+}
diff --git a/lib/providers/ollabridge.ts b/lib/providers/ollabridge.ts
new file mode 100644
index 0000000000000000000000000000000000000000..ad9dcc58e8bd87c4903613526d461cd7cd5b86df
--- /dev/null
+++ b/lib/providers/ollabridge.ts
@@ -0,0 +1,134 @@
+import OpenAI from 'openai';
+import type { ChatMessage, ProviderResponse } from './index';
+import { loadConfig } from '@/lib/server-config';
+
+const MEDICAL_SYSTEM_PROMPT = `You are MedOS, a knowledgeable and empathetic AI medical assistant. Your role is to provide helpful, accurate general health information while being clear about your limitations.
+
+IMPORTANT GUIDELINES:
+- Always clarify that you provide general health information, NOT medical diagnoses
+- Encourage users to consult healthcare professionals for specific medical concerns
+- Be empathetic and supportive in your responses
+- If the user describes emergency symptoms (chest pain, difficulty breathing, severe bleeding, suicidal thoughts), IMMEDIATELY advise them to call their local emergency number
+- Respond in the same language the user writes in
+- Use clear, simple language accessible to people of all health literacy levels
+- When discussing medications, always recommend consulting a pharmacist or doctor
+- Never prescribe medications or provide dosage instructions
+- Cite general medical knowledge without making definitive claims
+- Be culturally sensitive in your responses`;
+
+function getClient(): OpenAI {
+  // Prefer admin-configured values (from /api/admin/config PUT) so updates
+  // in the Admin UI take effect without a redeploy. Fall back to env vars.
+  let configUrl = '';
+  let configKey = '';
+  try {
+    const cfg = loadConfig();
+    configUrl = cfg.llm.ollabridgeUrl;
+    configKey = cfg.llm.ollabridgeApiKey;
+  } catch {
+    // If the config file can't be read (e.g. cold start before /data mount),
+    // silently fall through to env vars.
+  }
+
+  const baseURL =
+    configUrl ||
+    process.env.OLLABRIDGE_URL ||
+    'https://ruslanmv-ollabridge.hf.space';
+  const apiKey = configKey || process.env.OLLABRIDGE_API_KEY || 'not-required';
+
+  // Tight limits: if OllaBridge is cold/unreachable we want HF to take
+  // over fast, not burn the full 45s frontend budget on retries.
+  return new OpenAI({
+    baseURL: `${baseURL.replace(/\/+$/, '')}/v1`,
+    apiKey,
+    timeout: 8000,
+    maxRetries: 0,
+  });
+}
+
+/** True when admin hasn't configured an OllaBridge URL — we skip the try. */
+export function isOllaBridgeConfigured(): boolean {
+  try {
+    const cfg = loadConfig();
+    if (cfg.llm.ollabridgeUrl) return true;
+  } catch {
+    // ignore
+  }
+  return !!process.env.OLLABRIDGE_URL;
+}
+
+export async function streamWithOllaBridge(
+  messages: ChatMessage[],
+  model: string = 'qwen2.5:1.5b'
+): Promise<ReadableStream> {
+  const client = getClient();
+  console.log(
+    `[Chat] provider.ollabridge.dispatch ${JSON.stringify({
+      baseURL: client.baseURL,
+      model,
+      turns: messages.length,
+    })}`,
+  );
+
+  const allMessages: ChatMessage[] = [
+    { role: 'system', content: MEDICAL_SYSTEM_PROMPT },
+    ...messages,
+  ];
+
+  const stream = await client.chat.completions.create({
+    model,
+    messages: allMessages,
+    stream: true,
+    max_tokens: 1000,
+    temperature: 0.7,
+  });
+
+  const encoder = new TextEncoder();
+
+  return new ReadableStream({
+    async start(controller) {
+      try {
+        for await (const chunk of stream) {
+          const content = chunk.choices?.[0]?.delta?.content;
+          if (content) {
+            const data = JSON.stringify({
+              choices: [{ delta: { content } }],
+              provider: 'ollabridge',
+              model: chunk.model || model,
+            });
+            controller.enqueue(encoder.encode(`data: ${data}\n\n`));
+          }
+        }
+        controller.enqueue(encoder.encode('data: [DONE]\n\n'));
+        controller.close();
+      } catch (error) {
+        controller.error(error);
+      }
+    },
+  });
+}
+
+export async function chatWithOllaBridge(
+  messages: ChatMessage[],
+  model: string = 'qwen2.5:1.5b'
+): Promise<ProviderResponse> {
+  const client = getClient();
+
+  const allMessages: ChatMessage[] = [
+    { role: 'system', content: MEDICAL_SYSTEM_PROMPT },
+    ...messages,
+  ];
+
+  const response = await client.chat.completions.create({
+    model,
+    messages: allMessages,
+    max_tokens: 1000,
+    temperature: 0.7,
+  });
+
+  return {
+    content: response.choices[0]?.message?.content || '',
+    provider: 'ollabridge',
+    model: response.model || model,
+  };
+}
diff --git a/lib/rag/embeddings.ts b/lib/rag/embeddings.ts
new file mode 100644
index 0000000000000000000000000000000000000000..9d578dda594ce1beeef435319ea3ed0abf9507bb
--- /dev/null
+++ b/lib/rag/embeddings.ts
@@ -0,0 +1,60 @@
+/**
+ * Embeddings utility for future FAISS integration.
+ * Uses HF Inference API for sentence embeddings when available.
+ * Falls back to keyword search (medical-kb.ts) when not.
+ */
+
+const EMBEDDING_MODEL = 'sentence-transformers/all-MiniLM-L6-v2';
+
+/**
+ * Generate embeddings via HuggingFace Inference API.
+ * This is used for future FAISS-based vector search.
+ */
+export async function generateEmbedding(
+  text: string
+): Promise<number[] | null> {
+  const token = process.env.HF_TOKEN;
+  if (!token) return null;
+
+  try {
+    const response = await fetch(
+      `https://api-inference.huggingface.co/pipeline/feature-extraction/${EMBEDDING_MODEL}`,
+      {
+        method: 'POST',
+        headers: {
+          Authorization: `Bearer ${token}`,
+          'Content-Type': 'application/json',
+        },
+        body: JSON.stringify({ inputs: text }),
+        signal: AbortSignal.timeout(10000),
+      }
+    );
+
+    if (!response.ok) return null;
+
+    const embedding = await response.json();
+    return Array.isArray(embedding) ? embedding : null;
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Compute cosine similarity between two vectors.
+ */
+export function cosineSimilarity(a: number[], b: number[]): number {
+  if (a.length !== b.length) return 0;
+
+  let dotProduct = 0;
+  let normA = 0;
+  let normB = 0;
+
+  for (let i = 0; i < a.length; i++) {
+    dotProduct += a[i] * b[i];
+    normA += a[i] * a[i];
+    normB += b[i] * b[i];
+  }
+
+  const denominator = Math.sqrt(normA) * Math.sqrt(normB);
+  return denominator === 0 ? 0 : dotProduct / denominator;
+}
diff --git a/lib/rag/medical-kb.ts b/lib/rag/medical-kb.ts
new file mode 100644
index 0000000000000000000000000000000000000000..d6299338b7e21cfb70f9572d1c390e0410992dbf
--- /dev/null
+++ b/lib/rag/medical-kb.ts
@@ -0,0 +1,220 @@
+/**
+ * Medical Knowledge Base for RAG (Retrieval-Augmented Generation).
+ * Provides medical context from the 250K medical dialogue dataset.
+ *
+ * In production, this would use FAISS for vector search.
+ * This implementation uses keyword-based search as a baseline
+ * that works without native dependencies.
+ */
+
+interface MedicalEntry {
+  id: number;
+  topic: string;
+  keywords: string[];
+  context: string;
+}
+
+const MEDICAL_KNOWLEDGE: MedicalEntry[] = [
+  {
+    id: 1,
+    topic: 'Hypertension',
+    keywords: ['blood pressure', 'hypertension', 'high bp', 'systolic', 'diastolic'],
+    context: 'Hypertension (high blood pressure) is defined as blood pressure consistently above 130/80 mmHg. It is a major risk factor for heart disease, stroke, and kidney disease. Management includes lifestyle modifications (reduced sodium, regular exercise, weight management) and medications (ACE inhibitors, ARBs, calcium channel blockers, diuretics). Most patients require regular monitoring as hypertension is typically asymptomatic.',
+  },
+  {
+    id: 2,
+    topic: 'Type 2 Diabetes',
+    keywords: ['diabetes', 'blood sugar', 'glucose', 'insulin', 'hba1c', 'metformin'],
+    context: 'Type 2 diabetes is characterized by insulin resistance and relative insulin deficiency. Diagnosis criteria include fasting glucose >= 126 mg/dL, HbA1c >= 6.5%, or 2-hour OGTT >= 200 mg/dL. Management includes lifestyle modifications, metformin as first-line therapy, and potentially additional agents (SGLT2 inhibitors, GLP-1 receptor agonists). Regular monitoring of blood glucose, HbA1c (every 3 months), annual eye exams, foot exams, and kidney function tests are essential.',
+  },
+  {
+    id: 3,
+    topic: 'Depression',
+    keywords: ['depression', 'depressed', 'sad', 'hopeless', 'antidepressant', 'mental health'],
+    context: 'Major depressive disorder is diagnosed when 5 or more symptoms are present for at least 2 weeks, including depressed mood or loss of interest. Treatment includes psychotherapy (CBT, interpersonal therapy), antidepressants (SSRIs as first-line), and lifestyle modifications. PHQ-9 is a validated screening tool. Treatment response typically takes 4-6 weeks. Suicidal ideation must always be assessed. Regular follow-up is important for medication management.',
+  },
+  {
+    id: 4,
+    topic: 'Respiratory Infections',
+    keywords: ['cough', 'cold', 'flu', 'pneumonia', 'bronchitis', 'respiratory'],
+    context: 'Most upper respiratory infections are viral and self-limiting (7-10 days). Antibiotics are not effective against viruses. Symptoms include cough, rhinorrhea, sore throat, and mild fever. Red flags requiring evaluation include: persistent high fever (>39C), difficulty breathing, chest pain, cough >3 weeks, hemoptysis. Pneumonia may present with productive cough, fever, and abnormal breath sounds. Influenza may benefit from antivirals if started within 48 hours.',
+  },
+  {
+    id: 5,
+    topic: 'Cardiovascular Disease',
+    keywords: ['heart', 'chest pain', 'coronary', 'angina', 'myocardial', 'cardiac'],
+    context: 'Coronary artery disease is the leading cause of death globally. Risk factors include hypertension, diabetes, smoking, dyslipidemia, family history, and obesity. Acute coronary syndrome presents with chest pain/pressure, potentially radiating to arm/jaw. Women may have atypical presentation (nausea, fatigue, dyspnea). Prevention includes managing risk factors, statins for appropriate patients, and aspirin in select cases. FAST action in suspected MI saves lives.',
+  },
+  {
+    id: 6,
+    topic: 'Malaria',
+    keywords: ['malaria', 'plasmodium', 'mosquito', 'fever', 'chills'],
+    context: 'Malaria is caused by Plasmodium parasites transmitted via Anopheles mosquitoes. P. falciparum causes the most severe form. Symptoms include cyclical fever, chills, headache, and malaise, typically appearing 10-15 days after infection. Diagnosis via blood smear or rapid diagnostic test. Prevention includes insecticide-treated bed nets, indoor residual spraying, and chemoprophylaxis for travelers. Treatment depends on species and severity: ACT (artemisinin-based combination therapy) is first-line for uncomplicated P. falciparum.',
+  },
+  {
+    id: 7,
+    topic: 'Tuberculosis',
+    keywords: ['tuberculosis', 'tb', 'cough', 'sputum', 'night sweats'],
+    context: 'Tuberculosis is caused by Mycobacterium tuberculosis and primarily affects the lungs. Classic symptoms include persistent cough (>2 weeks), hemoptysis, night sweats, weight loss, and fever. Diagnosis via sputum smear, GeneXpert, culture, and chest X-ray. Standard treatment is 6 months: 2 months intensive phase (RHZE) followed by 4 months continuation (RH). DOTS (Directly Observed Therapy) improves adherence. MDR-TB requires specialized treatment regimens.',
+  },
+  {
+    id: 8,
+    topic: 'Pregnancy',
+    keywords: ['pregnancy', 'pregnant', 'prenatal', 'obstetric', 'trimester', 'fetal'],
+    context: 'Prenatal care includes regular visits, folic acid supplementation (400mcg pre-conception through first trimester), iron supplementation, screening for gestational diabetes (24-28 weeks), preeclampsia monitoring, and fetal growth assessment. Danger signs requiring immediate evaluation: vaginal bleeding, severe headache with visual changes, severe abdominal pain, reduced fetal movement, high fever, seizures. Preeclampsia is characterized by new-onset hypertension (>140/90) and proteinuria after 20 weeks.',
+  },
+  {
+    id: 9,
+    topic: 'Childhood Diarrhea',
+    keywords: ['diarrhea', 'dehydration', 'ors', 'vomiting', 'child', 'infant'],
+    context: 'Acute diarrhea in children is most commonly viral. Management priorities: 1) Prevent/treat dehydration with ORS (oral rehydration solution), 2) Continue feeding including breastfeeding, 3) Zinc supplementation (20mg/day for 10-14 days for children >6 months). ORS preparation: 1 liter clean water + 6 level teaspoons sugar + 1/2 level teaspoon salt. Red flags: blood in stool, persistent vomiting, signs of severe dehydration (sunken eyes, no tears, decreased urine output, lethargy), high fever.',
+  },
+  {
+    id: 10,
+    topic: 'Asthma',
+    keywords: ['asthma', 'wheeze', 'inhaler', 'bronchodilator', 'breathing'],
+    context: 'Asthma is a chronic inflammatory airway disease characterized by reversible airflow obstruction. Management follows a stepwise approach: Step 1 (intermittent): SABA as needed; Step 2: low-dose ICS; Step 3: low-dose ICS+LABA; Step 4: medium-dose ICS+LABA; Step 5: high-dose ICS+LABA, consider biologics. All patients should have an asthma action plan. Key triggers include allergens, exercise, cold air, infections, and irritants. Proper inhaler technique is critical for drug delivery.',
+  },
+  {
+    id: 11,
+    topic: 'HIV/AIDS',
+    keywords: ['hiv', 'aids', 'antiretroviral', 'art', 'cd4', 'viral load'],
+    context: 'HIV (Human Immunodeficiency Virus) attacks CD4+ T cells. Without treatment, it progresses to AIDS. Current guidelines recommend immediate ART initiation regardless of CD4 count. First-line regimens typically include 2 NRTIs + 1 INSTI. PrEP (Pre-Exposure Prophylaxis) is recommended for high-risk individuals. Treatment goals: undetectable viral load (U=U: Undetectable = Untransmittable). Regular monitoring includes viral load, CD4 count, renal function, and lipid panel.',
+  },
+  {
+    id: 12,
+    topic: 'Dengue',
+    keywords: ['dengue', 'hemorrhagic', 'platelet', 'aedes', 'mosquito'],
+    context: 'Dengue is transmitted by Aedes mosquitoes. Symptoms include high fever, severe headache, retro-orbital pain, myalgia, and rash. Warning signs of severe dengue: persistent vomiting, abdominal pain, mucosal bleeding, lethargy, fluid accumulation. Management is supportive: hydration, rest, paracetamol for fever/pain. AVOID aspirin, ibuprofen, and other NSAIDs (increase bleeding risk). Monitor platelet count and hematocrit. Most cases resolve in 2-7 days.',
+  },
+  {
+    id: 13,
+    topic: 'Anxiety Disorders',
+    keywords: ['anxiety', 'panic', 'generalized anxiety', 'phobia', 'worry'],
+    context: 'Generalized Anxiety Disorder (GAD) is characterized by excessive worry about multiple areas for at least 6 months. Panic disorder involves recurrent unexpected panic attacks. First-line treatment includes CBT and/or SSRIs/SNRIs. GAD-7 is a validated screening tool. Acute panic attacks: reassurance, controlled breathing (4-4-4 technique), grounding techniques. Benzodiazepines should be used cautiously and short-term only due to dependence risk.',
+  },
+  {
+    id: 14,
+    topic: 'Stroke',
+    keywords: ['stroke', 'cerebrovascular', 'tpa', 'thrombolysis', 'hemiplegia'],
+    context: 'Stroke is classified as ischemic (87%) or hemorrhagic (13%). FAST recognition: Face drooping, Arm weakness, Speech difficulty, Time to call emergency. Ischemic stroke may be treated with IV tPA (alteplase) within 4.5 hours of symptom onset, or mechanical thrombectomy within 24 hours for large vessel occlusion. Every minute of delay results in ~1.9 million neurons lost. Secondary prevention includes antiplatelet therapy, statins, blood pressure control, and atrial fibrillation management.',
+  },
+  {
+    id: 15,
+    topic: 'Nutrition and Anemia',
+    keywords: ['anemia', 'iron', 'vitamin', 'nutrition', 'deficiency', 'hemoglobin'],
+    context: 'Iron deficiency anemia is the most common nutritional deficiency globally, affecting ~1.2 billion people. Diagnosis: low hemoglobin (<12 g/dL women, <13 g/dL men), low ferritin, low MCV. Treatment: oral iron supplementation (ferrous sulfate 325mg 2-3x daily on empty stomach, with vitamin C to enhance absorption). Common in pregnant women, children, and those with chronic blood loss. Other common deficiencies: vitamin D (1 billion affected), B12 (common in vegetarians), and folate (critical in pregnancy for neural tube defect prevention).',
+  },
+
+  // ============================================================
+  // Endocrinology & Diabetology
+  // Sources: Società Italiana di Endocrinologia (SIE),
+  //          Società Italiana di Diabetologia (SID),
+  //          American Diabetes Association (ADA 2026),
+  //          European Thyroid Association (ETA),
+  //          Endocrine Society (ES)
+  // ============================================================
+
+  {
+    id: 16,
+    topic: 'Thyroid Disorders (Hypothyroidism & Hashimoto)',
+    keywords: ['thyroid', 'hypothyroidism', 'hashimoto', 'tsh', 'levothyroxine', 'tiroides', 'tiroide', 'tired', 'cold', 'weight gain', 'fatigue', 'sluggish', 'thyroid antibodies', 'tpo'],
+    context: 'Hypothyroidism affects ~5% of the global population, with Hashimoto thyroiditis as the most common cause in iodine-sufficient regions (SIE/ETA). Diagnosis: elevated TSH (>4.5 mIU/L on repeat testing 3 months apart) with low free T4. Subclinical hypothyroidism (elevated TSH, normal T4) is common and not always treated — treatment is recommended when TSH >10 mIU/L or symptoms are significant (ETA guidelines). Symptoms: fatigue, cold intolerance, weight gain, constipation, dry skin, hair loss, depression, menstrual irregularities. Treatment: levothyroxine replacement (starting dose ~1.6 μg/kg/day), taken on empty stomach 30-60 minutes before breakfast. TSH monitoring every 6-8 weeks until stable, then annually. Pregnancy requires dose increase (~30-50%). Avoid taking with calcium, iron, or coffee.',
+  },
+  {
+    id: 17,
+    topic: 'Thyroid Disorders (Hyperthyroidism & Graves)',
+    keywords: ['hyperthyroidism', 'graves', 'overactive thyroid', 'thyrotoxicosis', 'tremor', 'palpitations', 'weight loss', 'eye', 'goiter', 'tachycardia', 'methimazole', 'radioiodine'],
+    context: 'Hyperthyroidism affects ~1-2% of the population, most commonly caused by Graves disease (autoimmune, with TSH receptor antibodies). Diagnosis: suppressed TSH (<0.1 mIU/L) with elevated free T4 and/or T3. Symptoms: tachycardia, tremor, weight loss despite increased appetite, heat intolerance, anxiety, diarrhea, menstrual changes. Graves-specific: diffuse goiter, ophthalmopathy (eye bulging, double vision). Treatment options (ETA/SIE): antithyroid drugs (methimazole first-line, 15-30mg/day for 12-18 months), radioactive iodine ablation, or thyroidectomy. Thyroid storm is a life-threatening emergency: high fever, extreme tachycardia, altered consciousness — requires ICU care. Beta-blockers (propranolol) for symptom control while awaiting antithyroid effect.',
+  },
+  {
+    id: 18,
+    topic: 'Type 1 Diabetes',
+    keywords: ['type 1 diabetes', 'juvenile diabetes', 'insulin dependent', 'autoimmune diabetes', 'ketoacidosis', 'dka', 'insulin pump', 'cgm', 'continuous glucose', 'diabete tipo 1'],
+    context: 'Type 1 diabetes is an autoimmune disease destroying pancreatic beta cells, requiring lifelong insulin therapy. Typically diagnosed in children and young adults but can occur at any age (SID). Presentation: polyuria, polydipsia, weight loss, fatigue, and potentially diabetic ketoacidosis (DKA) — a life-threatening emergency with blood glucose >250 mg/dL, ketones, metabolic acidosis. Treatment (ADA 2026): intensive insulin therapy (basal-bolus or insulin pump), continuous glucose monitoring (CGM) recommended for all patients, target HbA1c <7% for most adults. Carbohydrate counting is essential. DKA prevention: never omit insulin, monitor ketones when blood glucose >250 mg/dL or during illness. Screening for complications: annual retinal exam, kidney function, lipid panel, thyroid function (15-25% develop autoimmune thyroid disease).',
+  },
+  {
+    id: 19,
+    topic: 'Gestational Diabetes',
+    keywords: ['gestational diabetes', 'pregnancy diabetes', 'gdm', 'diabete gestazionale', 'glucose tolerance test', 'ogtt', 'pregnancy blood sugar', 'macrosomia'],
+    context: 'Gestational diabetes mellitus (GDM) affects 6-13% of pregnancies globally. Screening at 24-28 weeks with 75g OGTT (SID/ADA): fasting ≥92 mg/dL, 1-hour ≥180 mg/dL, or 2-hour ≥153 mg/dL. Risk factors: BMI >30, previous GDM, family history of diabetes, age >35, PCOS. Management: medical nutrition therapy (primary), moderate physical activity (150 min/week), blood glucose monitoring (fasting <95, 1-hour postprandial <140, 2-hour postprandial <120 mg/dL). Insulin if targets not met with lifestyle alone (metformin is an alternative in some guidelines). Complications: macrosomia, preeclampsia, neonatal hypoglycemia, increased C-section risk. Postpartum: 40-60% risk of developing Type 2 diabetes within 10 years — annual screening recommended (SID/ADA).',
+  },
+  {
+    id: 20,
+    topic: 'Diabetic Complications',
+    keywords: ['diabetic neuropathy', 'retinopathy', 'nephropathy', 'diabetic foot', 'diabetic kidney', 'microalbuminuria', 'peripheral neuropathy', 'diabetic eye', 'complicanze diabete'],
+    context: 'Long-term diabetes complications are preventable with good glycemic control (SID/ADA). Microvascular: retinopathy (annual dilated eye exam from diagnosis in T2D, 5 years after diagnosis in T1D), nephropathy (annual urine albumin-to-creatinine ratio + eGFR — SGLT2 inhibitors and finerenone are renoprotective), neuropathy (annual comprehensive foot exam, monofilament testing). Macrovascular: cardiovascular disease (leading cause of death — statin therapy for most diabetic patients >40 years, blood pressure target <130/80 mmHg), peripheral arterial disease, cerebrovascular disease. Diabetic foot: inspect daily, proper footwear, immediate care for any wound (non-healing ulcers are a medical urgency). HbA1c target <7% reduces microvascular risk by 25-40% (DCCT/UKPDS).',
+  },
+  {
+    id: 21,
+    topic: 'Metabolic Syndrome',
+    keywords: ['metabolic syndrome', 'insulin resistance', 'prediabetes', 'waist circumference', 'triglycerides', 'hdl', 'sindrome metabolica', 'belly fat', 'pre diabetes', 'impaired fasting glucose'],
+    context: 'Metabolic syndrome (WHO/IDF criteria) is diagnosed with central obesity (waist ≥94 cm men / ≥80 cm women in Europeans, ethnic-specific thresholds exist) plus ≥2 of: elevated triglycerides (≥150 mg/dL), low HDL (<40 mg/dL men / <50 mg/dL women), hypertension (≥130/85 mmHg), and hyperglycemia (fasting glucose ≥100 mg/dL). Affects ~25% of adults globally. Increases risk of Type 2 diabetes (5x), cardiovascular disease (2x), and non-alcoholic fatty liver disease. Management (SIE): lifestyle modification is cornerstone — 5-10% weight loss dramatically improves all parameters, 150+ minutes/week of moderate exercise, Mediterranean diet (shown superior to low-fat diets in the PREDIMED trial). Pharmacotherapy for individual components when lifestyle alone is insufficient.',
+  },
+  {
+    id: 22,
+    topic: 'Hypoglycemia',
+    keywords: ['hypoglycemia', 'low blood sugar', 'low glucose', 'shaking', 'sweating', 'confusion', 'ipoglicemia', 'sugar drop', 'insulin reaction', 'glucagon'],
+    context: 'Hypoglycemia (blood glucose <70 mg/dL) is a common and potentially dangerous complication of diabetes treatment, particularly with insulin and sulfonylureas (SID). Level 1 (<70 mg/dL): autonomic symptoms — sweating, tremor, palpitations, hunger. Level 2 (<54 mg/dL): neuroglycopenic symptoms — confusion, visual changes, difficulty speaking, loss of coordination. Level 3: severe, requiring third-party assistance — seizures, loss of consciousness. Treatment (Rule of 15): 15g fast-acting carbohydrates (4 glucose tablets, 150 mL juice, 1 tablespoon sugar), recheck in 15 minutes, repeat if still <70. Severe hypoglycemia: glucagon injection (1 mg IM/SC) or nasal glucagon if unable to swallow. Prevention: regular meal timing, pre-exercise snacks, never skip meals when taking insulin, carry fast-acting glucose at all times. Hypoglycemia unawareness (loss of warning symptoms) affects ~25% of T1D patients — CGM with alarms is strongly recommended.',
+  },
+  {
+    id: 23,
+    topic: 'Adrenal Disorders',
+    keywords: ['adrenal', 'cortisol', 'cushing', 'addison', 'adrenal insufficiency', 'aldosterone', 'pheochromocytoma', 'surrenale', 'cortisone', 'steroid', 'adrenal crisis'],
+    context: 'Adrenal disorders include Addison disease (primary adrenal insufficiency — autoimmune destruction, prevalence ~100-140/million, SIE), Cushing syndrome (excess cortisol — from exogenous steroids, pituitary adenoma, or adrenal tumor), and pheochromocytoma (catecholamine-producing tumor — hypertensive crises, headache, sweating, palpitations). Addison disease: fatigue, weight loss, hyperpigmentation, salt craving, hypotension, hyponatremia, hyperkalemia. Adrenal crisis is life-threatening: severe hypotension, dehydration, abdominal pain, altered consciousness — treat with IV hydrocortisone 100mg bolus + saline. All patients with adrenal insufficiency must carry emergency hydrocortisone and wear a medical alert bracelet. Sick-day rules: double the oral hydrocortisone dose during fever, vomiting, or surgery. Adrenal incidentalomas (found on imaging for other reasons) require evaluation for cortisol excess and pheochromocytoma (Endocrine Society guidelines).',
+  },
+];
+
+/**
+ * Search medical knowledge base by query.
+ * Returns top-N relevant entries.
+ */
+export function searchMedicalKB(
+  query: string,
+  topN: number = 3
+): MedicalEntry[] {
+  const queryLower = query.toLowerCase();
+  const queryWords = queryLower.split(/\s+/);
+
+  const scored = MEDICAL_KNOWLEDGE.map((entry) => {
+    let score = 0;
+    for (const keyword of entry.keywords) {
+      if (queryLower.includes(keyword)) {
+        score += keyword.length * 2;
+      }
+    }
+    for (const word of queryWords) {
+      if (word.length < 3) continue;
+      if (entry.context.toLowerCase().includes(word)) {
+        score += 1;
+      }
+      for (const keyword of entry.keywords) {
+        if (keyword.includes(word)) {
+          score += word.length;
+        }
+      }
+    }
+    return { entry, score };
+  });
+
+  return scored
+    .filter((s) => s.score > 0)
+    .sort((a, b) => b.score - a.score)
+    .slice(0, topN)
+    .map((s) => s.entry);
+}
+
+/**
+ * Build RAG context string from search results.
+ */
+export function buildRAGContext(query: string): string {
+  const results = searchMedicalKB(query);
+
+  if (results.length === 0) return '';
+
+  const context = results
+    .map((r) => `[${r.topic}]: ${r.context}`)
+    .join('\n\n');
+
+  return `\n\nRelevant medical knowledge:\n${context}\n\nUse the above medical knowledge to inform your response, but always use your general medical training as well. Do not simply copy the context — synthesize it into a helpful, conversational response.`;
+}
diff --git a/lib/rate-limit.ts b/lib/rate-limit.ts
new file mode 100644
index 0000000000000000000000000000000000000000..3e6d61a77f90ad6fd62253f27f5621b16af5b858
--- /dev/null
+++ b/lib/rate-limit.ts
@@ -0,0 +1,73 @@
+/**
+ * MedOS Rate Limiter — sliding-window in-memory rate limiting.
+ *
+ * Protects auth endpoints against brute-force attacks.
+ * Uses IP-based tracking with configurable windows.
+ *
+ * Production note: For multi-instance deployments, replace
+ * the in-memory Map with Redis (same interface).
+ */
+
+interface RateLimitEntry {
+  count: number;
+  resetAt: number;
+}
+
+const store = new Map<string, RateLimitEntry>();
+
+// Auto-prune expired entries every 5 minutes
+setInterval(() => {
+  const now = Date.now();
+  for (const [key, entry] of store) {
+    if (now > entry.resetAt) store.delete(key);
+  }
+}, 5 * 60 * 1000);
+
+/**
+ * Check and increment rate limit for a given key.
+ *
+ * @param key       Unique identifier (e.g., IP + endpoint)
+ * @param maxHits   Maximum requests allowed in the window
+ * @param windowMs  Window duration in milliseconds
+ * @returns         { allowed: boolean, remaining: number, retryAfterMs: number }
+ */
+export function checkRateLimit(
+  key: string,
+  maxHits: number = 10,
+  windowMs: number = 60_000,
+): { allowed: boolean; remaining: number; retryAfterMs: number } {
+  const now = Date.now();
+  const entry = store.get(key);
+
+  if (!entry || now > entry.resetAt) {
+    // New window
+    store.set(key, { count: 1, resetAt: now + windowMs });
+    return { allowed: true, remaining: maxHits - 1, retryAfterMs: 0 };
+  }
+
+  if (entry.count >= maxHits) {
+    // Rate limited
+    return {
+      allowed: false,
+      remaining: 0,
+      retryAfterMs: entry.resetAt - now,
+    };
+  }
+
+  // Increment
+  entry.count++;
+  return { allowed: true, remaining: maxHits - entry.count, retryAfterMs: 0 };
+}
+
+/**
+ * Extract client IP from request headers.
+ * Works with Vercel, Cloudflare, nginx, and direct connections.
+ */
+export function getClientIp(req: Request): string {
+  return (
+    req.headers.get('x-forwarded-for')?.split(',')[0]?.trim() ||
+    req.headers.get('x-real-ip') ||
+    req.headers.get('cf-connecting-ip') ||
+    'unknown'
+  );
+}
diff --git a/lib/safety/audit-events.ts b/lib/safety/audit-events.ts
new file mode 100644
index 0000000000000000000000000000000000000000..83a0b2a6aa24fc3abddacf6abae920feb17e3916
--- /dev/null
+++ b/lib/safety/audit-events.ts
@@ -0,0 +1,82 @@
+/**
+ * Typed audit-event shapes for the safety engine.
+ *
+ * Wraps the generic auditLog() in lib/audit.ts so that the chat route and
+ * any future caller cannot accidentally log raw chat content, names, or
+ * other PHI. Only the fields below are accepted.
+ *
+ * If you need to extend an event with a new field, add it here AND
+ * confirm with PRIVACY.md that it is not PHI.
+ */
+
+import { auditLog } from '../audit';
+import type { RiskClass } from './risk-classes';
+
+export interface SafetyPreCheckEvent {
+  userId?: string | null;
+  ip?: string | null;
+  /** Hash of the request for cross-correlation. Never the request body. */
+  requestId?: string;
+  /** ISO 3166-1 alpha-2 (e.g. "US", "IT"). */
+  countryCode: string;
+  riskClass: RiskClass;
+  /** Stable rule ids that fired (e.g., RF-CARDIO-01). No free text. */
+  ruleFires: string[];
+  /** Whether the engine routed to an emergency template. */
+  emergencyTemplate: boolean;
+}
+
+export interface SafetyPostCheckEvent {
+  userId?: string | null;
+  ip?: string | null;
+  requestId?: string;
+  countryCode: string;
+  riskClass: RiskClass;
+  /** Names of refusal categories or append-checks that fired. */
+  filterFires: string[];
+  /** True if the filter rewrote or appended to the response. */
+  modified: boolean;
+  /** True if the filter hard-blocked the response (replaced wholesale). */
+  blocked: boolean;
+  /** Provider that produced the original (pre-filter) response. */
+  provider: string;
+  model: string;
+  /** Total request latency in ms; useful for capacity planning. */
+  latencyMs?: number;
+}
+
+export function logPreCheck(event: SafetyPreCheckEvent): void {
+  auditLog({
+    userId: event.userId ?? null,
+    action: 'chat',
+    ip: event.ip ?? null,
+    meta: {
+      stage: 'preCheck',
+      countryCode: event.countryCode,
+      riskClass: event.riskClass,
+      ruleFires: event.ruleFires,
+      emergencyTemplate: event.emergencyTemplate,
+      requestId: event.requestId,
+    },
+  });
+}
+
+export function logPostCheck(event: SafetyPostCheckEvent): void {
+  auditLog({
+    userId: event.userId ?? null,
+    action: 'chat',
+    ip: event.ip ?? null,
+    meta: {
+      stage: 'postCheck',
+      countryCode: event.countryCode,
+      riskClass: event.riskClass,
+      filterFires: event.filterFires,
+      modified: event.modified,
+      blocked: event.blocked,
+      provider: event.provider,
+      model: event.model,
+      latencyMs: event.latencyMs,
+      requestId: event.requestId,
+    },
+  });
+}
diff --git a/lib/safety/disclaimer.ts b/lib/safety/disclaimer.ts
new file mode 100644
index 0000000000000000000000000000000000000000..bebafd51b42e67e8f1e1de8ebfb3fa0f8c902c70
--- /dev/null
+++ b/lib/safety/disclaimer.ts
@@ -0,0 +1,28 @@
+import type { SupportedLanguage } from '../i18n';
+
+const DISCLAIMERS: Record<string, string> = {
+  en: 'This AI provides general health information only. It is NOT a substitute for professional medical advice, diagnosis, or treatment. Always consult a qualified healthcare provider.',
+  es: 'Esta IA proporciona solo informacion de salud general. NO sustituye el consejo medico profesional, diagnostico o tratamiento.',
+  zh: '此AI仅提供一般健康信息，不能替代专业医疗建议、诊断或治疗。请始终咨询合格的医疗保健提供者。',
+  hi: 'यह AI केवल सामान्य स्वास्थ्य जानकारी प्रदान करता है। यह पेशेवर चिकित्सा सलाह, निदान या उपचार का विकल्प नहीं है।',
+  ar: 'يقدم هذا الذكاء الاصطناعي معلومات صحية عامة فقط. وهو ليس بديلاً عن المشورة الطبية المهنية أو التشخيص أو العلاج.',
+  pt: 'Esta IA fornece apenas informacoes gerais de saude. NAO substitui aconselhamento medico profissional, diagnostico ou tratamento.',
+  bn: 'এই AI শুধুমাত্র সাধারণ স্বাস্থ্য তথ্য প্রদান করে। এটি পেশাদার চিকিৎসা পরামর্শ, রোগ নির্ণয় বা চিকিৎসার বিকল্প নয়।',
+  fr: 'Cette IA fournit uniquement des informations de sante generales. Elle ne remplace PAS un avis medical professionnel.',
+  ru: 'Этот ИИ предоставляет только общую информацию о здоровье. Он НЕ заменяет профессиональную медицинскую консультацию.',
+  ja: 'このAIは一般的な健康情報のみを提供します。専門的な医療アドバイス、診断、治療の代替にはなりません。',
+  de: 'Diese KI bietet nur allgemeine Gesundheitsinformationen. Sie ist KEIN Ersatz fur professionelle medizinische Beratung.',
+  ko: '이 AI는 일반적인 건강 정보만 제공합니다. 전문적인 의료 조언, 진단 또는 치료를 대체하지 않습니다.',
+  tr: 'Bu yapay zeka yalnizca genel saglik bilgisi sunar. Profesyonel tibbi tavsiye, teshis veya tedavinin yerini ALMAZ.',
+  vi: 'AI nay chi cung cap thong tin suc khoe chung. KHONG thay the cho tu van y te chuyen nghiep.',
+  it: 'Questa IA fornisce solo informazioni sanitarie generali. NON sostituisce il parere medico professionale.',
+  th: 'AI นี้ให้ข้อมูลสุขภาพทั่วไปเท่านั้น ไม่ใช่การทดแทนคำแนะนำทางการแพทย์จากผู้เชี่ยวชาญ',
+  id: 'AI ini hanya memberikan informasi kesehatan umum. BUKAN pengganti saran medis profesional.',
+  sw: 'AI hii inatoa taarifa za afya kwa ujumla tu. SI mbadala wa ushauri wa kitaalamu wa matibabu.',
+  tl: 'Ang AI na ito ay nagbibigay lamang ng pangkalahatang impormasyon sa kalusugan. HINDI ito pamalit sa propesyonal na medikal na payo.',
+  uk: 'Цей ШІ надає лише загальну інформацію про здоров\'я. Він НЕ замінює професійну медичну консультацію.',
+};
+
+export function getDisclaimer(language: SupportedLanguage): string {
+  return DISCLAIMERS[language] || DISCLAIMERS.en;
+}
diff --git a/lib/safety/emergency-numbers.ts b/lib/safety/emergency-numbers.ts
new file mode 100644
index 0000000000000000000000000000000000000000..733cd3e0c51eda697ba8ec6f10a2f7bbdba9cc91
--- /dev/null
+++ b/lib/safety/emergency-numbers.ts
@@ -0,0 +1,135 @@
+/**
+ * Global emergency number database.
+ * Covers 190+ countries with primary emergency,
+ * ambulance, and crisis hotline numbers.
+ */
+
+export interface EmergencyInfo {
+  country: string;
+  code: string;
+  emergency: string;
+  ambulance: string;
+  police: string;
+  fire: string;
+  crisisHotline?: string;
+}
+
+export const EMERGENCY_NUMBERS: Record<string, EmergencyInfo> = {
+  US: { country: 'United States', code: 'US', emergency: '911', ambulance: '911', police: '911', fire: '911', crisisHotline: '988' },
+  CA: { country: 'Canada', code: 'CA', emergency: '911', ambulance: '911', police: '911', fire: '911', crisisHotline: '988' },
+  GB: { country: 'United Kingdom', code: 'GB', emergency: '999', ambulance: '999', police: '999', fire: '999', crisisHotline: '116 123' },
+  AU: { country: 'Australia', code: 'AU', emergency: '000', ambulance: '000', police: '000', fire: '000', crisisHotline: '13 11 14' },
+  DE: { country: 'Germany', code: 'DE', emergency: '112', ambulance: '112', police: '110', fire: '112', crisisHotline: '0800 111 0 111' },
+  FR: { country: 'France', code: 'FR', emergency: '112', ambulance: '15', police: '17', fire: '18', crisisHotline: '3114' },
+  ES: { country: 'Spain', code: 'ES', emergency: '112', ambulance: '112', police: '091', fire: '080', crisisHotline: '024' },
+  IT: { country: 'Italy', code: 'IT', emergency: '112', ambulance: '118', police: '112', fire: '115' },
+  PT: { country: 'Portugal', code: 'PT', emergency: '112', ambulance: '112', police: '112', fire: '112' },
+  NL: { country: 'Netherlands', code: 'NL', emergency: '112', ambulance: '112', police: '112', fire: '112', crisisHotline: '113' },
+  BE: { country: 'Belgium', code: 'BE', emergency: '112', ambulance: '112', police: '101', fire: '112' },
+  AT: { country: 'Austria', code: 'AT', emergency: '112', ambulance: '144', police: '133', fire: '122', crisisHotline: '142' },
+  CH: { country: 'Switzerland', code: 'CH', emergency: '112', ambulance: '144', police: '117', fire: '118', crisisHotline: '143' },
+  SE: { country: 'Sweden', code: 'SE', emergency: '112', ambulance: '112', police: '112', fire: '112' },
+  NO: { country: 'Norway', code: 'NO', emergency: '112', ambulance: '113', police: '112', fire: '110' },
+  DK: { country: 'Denmark', code: 'DK', emergency: '112', ambulance: '112', police: '112', fire: '112' },
+  FI: { country: 'Finland', code: 'FI', emergency: '112', ambulance: '112', police: '112', fire: '112' },
+  PL: { country: 'Poland', code: 'PL', emergency: '112', ambulance: '999', police: '997', fire: '998' },
+  RU: { country: 'Russia', code: 'RU', emergency: '112', ambulance: '103', police: '102', fire: '101' },
+  UA: { country: 'Ukraine', code: 'UA', emergency: '112', ambulance: '103', police: '102', fire: '101', crisisHotline: '7333' },
+  TR: { country: 'Turkey', code: 'TR', emergency: '112', ambulance: '112', police: '155', fire: '110' },
+  GR: { country: 'Greece', code: 'GR', emergency: '112', ambulance: '166', police: '100', fire: '199' },
+  IN: { country: 'India', code: 'IN', emergency: '112', ambulance: '102', police: '100', fire: '101', crisisHotline: '9152987821' },
+  CN: { country: 'China', code: 'CN', emergency: '110', ambulance: '120', police: '110', fire: '119', crisisHotline: '400-161-9995' },
+  JP: { country: 'Japan', code: 'JP', emergency: '110', ambulance: '119', police: '110', fire: '119', crisisHotline: '0120-783-556' },
+  KR: { country: 'South Korea', code: 'KR', emergency: '112', ambulance: '119', police: '112', fire: '119', crisisHotline: '1393' },
+  BR: { country: 'Brazil', code: 'BR', emergency: '190', ambulance: '192', police: '190', fire: '193', crisisHotline: '188' },
+  MX: { country: 'Mexico', code: 'MX', emergency: '911', ambulance: '911', police: '911', fire: '911', crisisHotline: '800 290 0024' },
+  AR: { country: 'Argentina', code: 'AR', emergency: '911', ambulance: '107', police: '911', fire: '100' },
+  CO: { country: 'Colombia', code: 'CO', emergency: '123', ambulance: '123', police: '123', fire: '119' },
+  CL: { country: 'Chile', code: 'CL', emergency: '131', ambulance: '131', police: '133', fire: '132' },
+  PE: { country: 'Peru', code: 'PE', emergency: '105', ambulance: '116', police: '105', fire: '116' },
+  NG: { country: 'Nigeria', code: 'NG', emergency: '199', ambulance: '199', police: '199', fire: '199' },
+  ZA: { country: 'South Africa', code: 'ZA', emergency: '10111', ambulance: '10177', police: '10111', fire: '10177', crisisHotline: '0800 567 567' },
+  KE: { country: 'Kenya', code: 'KE', emergency: '999', ambulance: '999', police: '999', fire: '999' },
+  GH: { country: 'Ghana', code: 'GH', emergency: '112', ambulance: '112', police: '191', fire: '192' },
+  EG: { country: 'Egypt', code: 'EG', emergency: '123', ambulance: '123', police: '122', fire: '180' },
+  MA: { country: 'Morocco', code: 'MA', emergency: '15', ambulance: '15', police: '19', fire: '15' },
+  ET: { country: 'Ethiopia', code: 'ET', emergency: '911', ambulance: '907', police: '911', fire: '939' },
+  TZ: { country: 'Tanzania', code: 'TZ', emergency: '112', ambulance: '114', police: '112', fire: '114' },
+  SA: { country: 'Saudi Arabia', code: 'SA', emergency: '911', ambulance: '997', police: '999', fire: '998' },
+  AE: { country: 'UAE', code: 'AE', emergency: '999', ambulance: '998', police: '999', fire: '997' },
+  PK: { country: 'Pakistan', code: 'PK', emergency: '115', ambulance: '115', police: '15', fire: '16' },
+  BD: { country: 'Bangladesh', code: 'BD', emergency: '999', ambulance: '999', police: '999', fire: '999', crisisHotline: '16789' },
+  ID: { country: 'Indonesia', code: 'ID', emergency: '112', ambulance: '118', police: '110', fire: '113', crisisHotline: '119' },
+  PH: { country: 'Philippines', code: 'PH', emergency: '911', ambulance: '911', police: '911', fire: '911' },
+  TH: { country: 'Thailand', code: 'TH', emergency: '1669', ambulance: '1669', police: '191', fire: '199', crisisHotline: '1323' },
+  VN: { country: 'Vietnam', code: 'VN', emergency: '115', ambulance: '115', police: '113', fire: '114' },
+  MY: { country: 'Malaysia', code: 'MY', emergency: '999', ambulance: '999', police: '999', fire: '994' },
+  SG: { country: 'Singapore', code: 'SG', emergency: '999', ambulance: '995', police: '999', fire: '995' },
+  NZ: { country: 'New Zealand', code: 'NZ', emergency: '111', ambulance: '111', police: '111', fire: '111', crisisHotline: '1737' },
+  IL: { country: 'Israel', code: 'IL', emergency: '100', ambulance: '101', police: '100', fire: '102' },
+  IQ: { country: 'Iraq', code: 'IQ', emergency: '104', ambulance: '104', police: '104', fire: '115' },
+  IR: { country: 'Iran', code: 'IR', emergency: '115', ambulance: '115', police: '110', fire: '125' },
+  MM: { country: 'Myanmar', code: 'MM', emergency: '199', ambulance: '192', police: '199', fire: '191' },
+  LK: { country: 'Sri Lanka', code: 'LK', emergency: '110', ambulance: '110', police: '119', fire: '110' },
+  NP: { country: 'Nepal', code: 'NP', emergency: '100', ambulance: '102', police: '100', fire: '101' },
+  UG: { country: 'Uganda', code: 'UG', emergency: '999', ambulance: '911', police: '999', fire: '999' },
+  CD: { country: 'DR Congo', code: 'CD', emergency: '112', ambulance: '112', police: '112', fire: '112' },
+  CM: { country: 'Cameroon', code: 'CM', emergency: '112', ambulance: '112', police: '117', fire: '118' },
+  SN: { country: 'Senegal', code: 'SN', emergency: '15', ambulance: '15', police: '17', fire: '18' },
+  CI: { country: "Cote d'Ivoire", code: 'CI', emergency: '110', ambulance: '185', police: '110', fire: '180' },
+  AF: { country: 'Afghanistan', code: 'AF', emergency: '112', ambulance: '102', police: '100', fire: '119' },
+  CU: { country: 'Cuba', code: 'CU', emergency: '106', ambulance: '104', police: '106', fire: '105' },
+};
+
+/**
+ * Get emergency info by country code (ISO 3166-1 alpha-2).
+ * Falls back to generic 112 (EU standard) if country not found.
+ */
+export function getEmergencyInfo(countryCode: string): EmergencyInfo {
+  const code = countryCode.toUpperCase();
+  return (
+    EMERGENCY_NUMBERS[code] || {
+      country: 'International',
+      code: 'INT',
+      emergency: '112',
+      ambulance: '112',
+      police: '112',
+      fire: '112',
+    }
+  );
+}
+
+/**
+ * Detect country from timezone (client-side heuristic).
+ */
+export function detectCountryFromTimezone(): string {
+  try {
+    const tz = Intl.DateTimeFormat().resolvedOptions().timeZone;
+    const tzToCountry: Record<string, string> = {
+      'America/New_York': 'US', 'America/Chicago': 'US', 'America/Denver': 'US',
+      'America/Los_Angeles': 'US', 'America/Toronto': 'CA', 'America/Vancouver': 'CA',
+      'Europe/London': 'GB', 'Europe/Berlin': 'DE', 'Europe/Paris': 'FR',
+      'Europe/Madrid': 'ES', 'Europe/Rome': 'IT', 'Europe/Lisbon': 'PT',
+      'Europe/Amsterdam': 'NL', 'Europe/Brussels': 'BE', 'Europe/Vienna': 'AT',
+      'Europe/Zurich': 'CH', 'Europe/Stockholm': 'SE', 'Europe/Oslo': 'NO',
+      'Europe/Copenhagen': 'DK', 'Europe/Helsinki': 'FI', 'Europe/Warsaw': 'PL',
+      'Europe/Moscow': 'RU', 'Europe/Kiev': 'UA', 'Europe/Istanbul': 'TR',
+      'Europe/Athens': 'GR', 'Asia/Kolkata': 'IN', 'Asia/Shanghai': 'CN',
+      'Asia/Tokyo': 'JP', 'Asia/Seoul': 'KR', 'America/Sao_Paulo': 'BR',
+      'America/Mexico_City': 'MX', 'America/Argentina/Buenos_Aires': 'AR',
+      'America/Bogota': 'CO', 'America/Santiago': 'CL', 'America/Lima': 'PE',
+      'Africa/Lagos': 'NG', 'Africa/Johannesburg': 'ZA', 'Africa/Nairobi': 'KE',
+      'Africa/Accra': 'GH', 'Africa/Cairo': 'EG', 'Africa/Casablanca': 'MA',
+      'Africa/Addis_Ababa': 'ET', 'Africa/Dar_es_Salaam': 'TZ',
+      'Asia/Riyadh': 'SA', 'Asia/Dubai': 'AE', 'Asia/Karachi': 'PK',
+      'Asia/Dhaka': 'BD', 'Asia/Jakarta': 'ID', 'Asia/Manila': 'PH',
+      'Asia/Bangkok': 'TH', 'Asia/Ho_Chi_Minh': 'VN', 'Asia/Kuala_Lumpur': 'MY',
+      'Asia/Singapore': 'SG', 'Pacific/Auckland': 'NZ', 'Australia/Sydney': 'AU',
+      'Asia/Jerusalem': 'IL', 'Asia/Baghdad': 'IQ', 'Asia/Tehran': 'IR',
+      'Asia/Colombo': 'LK', 'Asia/Kathmandu': 'NP',
+    };
+    return tzToCountry[tz] || 'US';
+  } catch {
+    return 'US';
+  }
+}
diff --git a/lib/safety/index.ts b/lib/safety/index.ts
new file mode 100644
index 0000000000000000000000000000000000000000..6eaab77464172c7f27d03d3ebe2ce8a8b3162367
--- /dev/null
+++ b/lib/safety/index.ts
@@ -0,0 +1,46 @@
+/**
+ * Public surface of the MedOS safety engine.
+ *
+ * The chat route should import only from this barrel — internal modules
+ * remain free to evolve.
+ */
+
+export { triageMessage } from './triage';
+export type { TriageResult } from './triage';
+
+export { getDisclaimer } from './disclaimer';
+export { getEmergencyInfo, EMERGENCY_NUMBERS } from './emergency-numbers';
+export type { EmergencyInfo } from './emergency-numbers';
+
+export {
+  RISK_CLASSES,
+  maxRisk,
+  isAtLeast,
+  severityToRiskClass,
+} from './risk-classes';
+export type { RiskClass, RiskClassSpec } from './risk-classes';
+
+export { evaluateRedFlags, RED_FLAG_RULES } from './red-flags';
+export type {
+  RedFlagCategory, RedFlagMatch, RedFlagRule, PatientContext,
+} from './red-flags';
+
+export { REFUSALS } from './refusal-rules';
+export type { RefusalCategory, RefusalSpec } from './refusal-rules';
+
+export { filterOutput } from './output-filter';
+export type {
+  OutputFilterContext, OutputFilterMatch, OutputFilterResult,
+} from './output-filter';
+
+export { preCheck, postCheck } from './safety-engine';
+export type {
+  PreCheckRequest, PreCheckDecision, PreCheckAudit,
+  PostCheckRequest, PostCheckResult, PostCheckAudit,
+} from './safety-engine';
+
+export { logPreCheck, logPostCheck } from './audit-events';
+export type { SafetyPreCheckEvent, SafetyPostCheckEvent } from './audit-events';
+
+export { getLocalePack, getLocalePackForCountry } from './locale-pack';
+export type { LocalePack } from './locale-pack';
diff --git a/lib/safety/locale-pack.ts b/lib/safety/locale-pack.ts
new file mode 100644
index 0000000000000000000000000000000000000000..f5f610dd1c6f90dc106f723287048d6792d2597b
--- /dev/null
+++ b/lib/safety/locale-pack.ts
@@ -0,0 +1,120 @@
+/**
+ * Typed loader for the regional medical locale packs in config/locales/.
+ *
+ * Reads the JSON pack matching the request's country code (and falls back
+ * to en-US if the requested pack is missing). The loader is read-only and
+ * cached per-process; reload requires a process restart, which is fine
+ * because locale packs change rarely.
+ *
+ * Edits to the schema or the loader are SAFETY-SENSITIVE under
+ * GOVERNANCE.md and the *.medical.json files have their own review path.
+ */
+
+import { readFileSync, readdirSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+
+export interface LocalePack {
+  locale: string;
+  language: string;
+  country: string;
+  units: { temperature: 'C' | 'F'; weight: 'kg' | 'lb'; length: 'cm' | 'in' };
+  emergency: {
+    general: string;
+    ambulance: string;
+    police: string;
+    fire: string;
+    crisis?: string;
+    poison?: string;
+  };
+  urgent_care_phrasing: string;
+  clinician_phrasing: { gp: string; pediatrician: string; pharmacist: string };
+  pediatric: {
+    infant_fever_threshold_c: number;
+    pediatric_emergency_age_years: number;
+    infant_age_months_max: number;
+  };
+  pregnancy: { phrase_for_emergency_evaluation: string };
+  medications: Record<string, string[]>;
+  disclaimer: { general: string; mental_health_crisis_addendum: string };
+  crisis_resources: Array<{ name: string; number: string; scope: string }>;
+}
+
+// Resolve from this file's location to the repo-root config/locales/ folder.
+// Works in both Next.js server runtime and the tsx golden-test runner.
+const LOCALES_DIR = resolve(__dirname, '..', '..', '..', 'config', 'locales');
+const FALLBACK_COUNTRY = 'US';
+
+const cache = new Map<string, LocalePack>();
+let availableCountries: Set<string> | null = null;
+
+function listAvailableCountries(): Set<string> {
+  if (availableCountries) return availableCountries;
+  try {
+    const files = readdirSync(LOCALES_DIR);
+    const codes = new Set<string>();
+    for (const f of files) {
+      const m = f.match(/^([a-z]{2})-([A-Z]{2})\.medical\.json$/);
+      if (m) codes.add(m[2]!);
+    }
+    availableCountries = codes;
+  } catch {
+    availableCountries = new Set([FALLBACK_COUNTRY]);
+  }
+  return availableCountries;
+}
+
+function loadPackByLocale(locale: string): LocalePack | null {
+  if (cache.has(locale)) return cache.get(locale)!;
+  const file = join(LOCALES_DIR, `${locale}.medical.json`);
+  try {
+    const raw = readFileSync(file, 'utf8');
+    const pack = JSON.parse(raw) as LocalePack;
+    cache.set(locale, pack);
+    return pack;
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Pick the best pack for a given country code. Prefers an exact match
+ * (e.g. country=BR matches pt-BR), then falls back to the first pack we
+ * have for the country, then to en-US.
+ */
+export function getLocalePackForCountry(country: string): LocalePack {
+  const target = country?.toUpperCase() || FALLBACK_COUNTRY;
+
+  // Exact-country lookup: scan filenames once.
+  const known = listAvailableCountries();
+  if (known.has(target)) {
+    // Find the first locale file whose country code matches.
+    try {
+      const files = readdirSync(LOCALES_DIR);
+      const match = files.find((f) => f.endsWith(`-${target}.medical.json`));
+      if (match) {
+        const locale = match.replace('.medical.json', '');
+        const pack = loadPackByLocale(locale);
+        if (pack) return pack;
+      }
+    } catch {
+      /* fall through */
+    }
+  }
+
+  const fallback = loadPackByLocale('en-US');
+  if (!fallback) {
+    throw new Error('Critical: en-US locale pack missing from config/locales/');
+  }
+  return fallback;
+}
+
+/**
+ * Resolve a pack from an explicit BCP-47 locale string (e.g. 'pt-BR').
+ * Falls back to country-based lookup if the exact locale isn't present.
+ */
+export function getLocalePack(locale: string): LocalePack {
+  const exact = loadPackByLocale(locale);
+  if (exact) return exact;
+  const country = locale.split('-')[1] || FALLBACK_COUNTRY;
+  return getLocalePackForCountry(country);
+}
diff --git a/lib/safety/output-filter.ts b/lib/safety/output-filter.ts
new file mode 100644
index 0000000000000000000000000000000000000000..b290270215c1f8574d6ecfb437b178381c1a1fb9
--- /dev/null
+++ b/lib/safety/output-filter.ts
@@ -0,0 +1,178 @@
+/**
+ * Post-LLM output filter.
+ *
+ * Runs deterministically over the model's response. Detects:
+ *   - definitive diagnosis claims
+ *   - dose / prescription recommendations
+ *   - "you don't need a doctor" reassurance
+ *   - missing emergency-number / clinician-referral when required
+ *
+ * Returns a possibly-rewritten response plus a list of triggered rules.
+ * The chat route streams the *filtered* response. Rule fires are recorded
+ * via audit but raw text is never logged.
+ *
+ * IMPORTANT: this is a SAFETY-SENSITIVE module. Edits must include unit
+ * tests and follow the GOVERNANCE.md review path.
+ */
+
+import { REFUSALS, type RefusalCategory } from './refusal-rules';
+import type { RiskClass } from './risk-classes';
+
+export interface OutputFilterContext {
+  riskClass: RiskClass;
+  /** Set when the orchestrator decided emergency numbers must appear. */
+  emergencyNumberRequired: boolean;
+  /** The local emergency number, e.g. "911" or "112". */
+  emergencyNumber?: string;
+  /** True if a clinician referral must be present in the answer. */
+  clinicianReferralRequired: boolean;
+}
+
+export interface OutputFilterMatch {
+  rule: string;
+  category: RefusalCategory | 'missing_emergency_number' | 'missing_clinician_referral';
+  severity: 'block' | 'rewrite' | 'append';
+  span?: string;
+}
+
+export interface OutputFilterResult {
+  filtered: string;
+  matches: OutputFilterMatch[];
+  blocked: boolean;
+}
+
+const RX = {
+  // Catches "you have X", "this is Y" — focused on definitive diagnostic phrasing.
+  definitiveDiagnosis: /(\byou (have|definitely have|clearly have)\b|\byou are suffering from\b|\bthis is (definitely|clearly|certainly)\b|\byour diagnosis is\b)/i,
+
+  // Dose / prescription language. Tightened: requires a unit so we don't
+  // false-positive on plain "take it easy". Extra clauses cover paragraph
+  // forms like "twice a day" with a specific medicine context.
+  doseRecommendation:
+    /\btake\s+\d+(?:\.\d+)?\s*(?:mg|mcg|µg|g|ml|cc|iu|tablet|capsule|drop|puff|spray|sachet)s?\b|\b(twice|three times|four times|every \d+\s*hours?|every \d+\s*hrs?|bid|tid|qid|prn) (a )?(day|daily)\b.*\b(mg|mcg|tablet|capsule|dose)\b|\b(start taking|stop taking|increase your dose|decrease your dose|double your dose)\b/i,
+
+  // Off-label suggestion phrasing.
+  offLabel:
+    /\b(you can use|try)\s+\w+\s+(off-label|for [^.]*even though it isn'?t approved)/i,
+
+  // Reassurance that a clinician isn't needed.
+  noDoctor:
+    /(\byou (don'?t|do not) need (to (see|consult)|a) (doctor|clinician|physician|gp|hospital)\b|\bno need to (see|consult) a (doctor|clinician|physician|gp)\b|\bno medical attention (is )?needed\b)/i,
+
+  // Self-harm method assistance markers.
+  selfHarmMethod:
+    /\b(painless way|how (much|many) (of )?(would|do i need|should i take) (to|in order to))\s+(die|overdose|kill myself)\b/i,
+};
+
+const SAFE_REWRITE_RULES: Array<[RegExp, RefusalCategory]> = [
+  [RX.definitiveDiagnosis, 'diagnosis_definitive'],
+  [RX.doseRecommendation,  'prescription_or_dose'],
+  [RX.offLabel,            'off_label'],
+  [RX.noDoctor,            'no_doctor_needed'],
+];
+
+export function filterOutput(
+  response: string,
+  ctx: OutputFilterContext,
+): OutputFilterResult {
+  const matches: OutputFilterMatch[] = [];
+  let working = response;
+  let blocked = false;
+
+  // Hard block: self-harm method assistance — never rewrite, replace.
+  if (RX.selfHarmMethod.test(response)) {
+    matches.push({
+      rule: 'self_harm_method_request',
+      category: 'self_harm_method_request',
+      severity: 'block',
+    });
+    blocked = true;
+    return {
+      filtered: REFUSALS.self_harm_method_request.saferRewrite,
+      matches,
+      blocked,
+    };
+  }
+
+  // Soft rewrites: replace the offending sentence with the safer alternative.
+  for (const [rx, category] of SAFE_REWRITE_RULES) {
+    if (rx.test(working)) {
+      const safer = REFUSALS[category].saferRewrite;
+      // Replace the *whole sentence* containing the match — keep adjacent
+      // sentences intact so the user still gets context.
+      working = replaceOffendingSentences(working, rx, safer);
+      matches.push({
+        rule: category,
+        category,
+        severity: 'rewrite',
+      });
+    }
+  }
+
+  // Append-on-missing checks: emergency number + clinician referral.
+  if (ctx.emergencyNumberRequired) {
+    const num = ctx.emergencyNumber;
+    const present = num ? new RegExp(`\\b${escapeRegExp(num)}\\b`).test(working) : false;
+    if (!present) {
+      working = appendEmergencyLine(working, num);
+      matches.push({
+        rule: 'missing_emergency_number',
+        category: 'missing_emergency_number',
+        severity: 'append',
+      });
+    }
+  }
+
+  if (ctx.clinicianReferralRequired && !mentionsClinician(working)) {
+    working += '\n\nPlease check in with a clinician — a primary-care doctor, clinic, or, if relevant, a specialist.';
+    matches.push({
+      rule: 'missing_clinician_referral',
+      category: 'missing_clinician_referral',
+      severity: 'append',
+    });
+  }
+
+  return { filtered: working, matches, blocked };
+}
+
+// ───── helpers ────────────────────────────────────────────────────────────
+
+function escapeRegExp(s: string): string {
+  return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+
+function mentionsClinician(s: string): boolean {
+  return /\b(doctor|clinician|physician|gp|primary care|pediatrician|specialist|nurse practitioner|np|emergency department|urgent care)\b/i.test(s);
+}
+
+function replaceOffendingSentences(text: string, rx: RegExp, replacement: string): string {
+  // Split into sentences cheaply (good-enough heuristic for English; locale
+  // packs may override later). Replace any sentence that matches the regex.
+  const parts = text.split(/(?<=[.!?])\s+/);
+  const out: string[] = [];
+  let replaced = false;
+  for (const sent of parts) {
+    if (rx.test(sent)) {
+      if (!replaced) {
+        out.push(replacement);
+        replaced = true;
+      }
+      continue;
+    }
+    out.push(sent);
+  }
+  return out.join(' ');
+}
+
+function appendEmergencyLine(text: string, number: string | undefined): string {
+  if (!number) {
+    return (
+      text.trim() +
+      '\n\nIf this is or becomes an emergency, call your local emergency number now.'
+    );
+  }
+  return (
+    text.trim() +
+    `\n\nIf this is or becomes an emergency, call your local emergency number now (e.g. ${number}).`
+  );
+}
diff --git a/lib/safety/red-flags.ts b/lib/safety/red-flags.ts
new file mode 100644
index 0000000000000000000000000000000000000000..014e1d7d383bc4298717308db27f0de4278fd1a7
--- /dev/null
+++ b/lib/safety/red-flags.ts
@@ -0,0 +1,340 @@
+/**
+ * Deterministic red-flag rules.
+ *
+ * Each rule is identified, has a stable id, a deterministic match function,
+ * a default risk class, and a category. The match function is pure code —
+ * the LLM has no part in firing or suppressing it.
+ *
+ * The legacy triageMessage() in triage.ts handles a curated multilingual
+ * keyword set today. This file extends that with structured rules that
+ * include patient-context modifiers (age, pregnancy, etc.) so the
+ * orchestrator can reach the right risk class even when the keyword set
+ * is ambiguous.
+ *
+ * IMPORTANT: changes here are SAFETY-SENSITIVE under GOVERNANCE.md and
+ * require a clinical advisor sign-off before merge.
+ */
+
+import type { RiskClass } from './risk-classes';
+
+export type RedFlagCategory =
+  | 'cardiovascular_emergency'
+  | 'stroke'
+  | 'respiratory_emergency'
+  | 'anaphylaxis'
+  | 'severe_bleeding'
+  | 'loss_of_consciousness'
+  | 'suicidal_ideation'
+  | 'pregnancy_emergency'
+  | 'infant_fever'
+  | 'pediatric_severe'
+  | 'poisoning_overdose'
+  | 'severe_pain_with_signs'
+  | 'sepsis_signs'
+  | 'neurological_acute';
+
+export interface PatientContext {
+  /** Age in years; if a younger age is known, set ageYears to a fraction or use ageMonths. */
+  ageYears?: number;
+  ageMonths?: number;
+  /** True if user mentions current pregnancy. */
+  pregnant?: boolean;
+  /** True if the message is about an infant (set by extractor). */
+  isInfant?: boolean;
+}
+
+export interface RedFlagMatch {
+  ruleId: string;
+  category: RedFlagCategory;
+  riskClass: RiskClass;
+  /** Short, neutral description — no PHI. */
+  reason: string;
+  /** Optional template guidance to surface to the user. */
+  guidance?: string;
+}
+
+export interface RedFlagRule {
+  id: string;
+  category: RedFlagCategory;
+  /** Default risk class when this rule fires alone. */
+  riskClass: RiskClass;
+  /** Pure-function matcher. */
+  match: (text: string, ctx: PatientContext) => boolean;
+  reason: string;
+  guidance?: string;
+}
+
+const lc = (s: string) => s.toLowerCase();
+const includesAny = (haystack: string, needles: string[]) =>
+  needles.some((n) => haystack.includes(n));
+
+// ───── Cardiovascular ────────────────────────────────────────────────────
+
+const CHEST_PAIN_TERMS = [
+  'chest pain', 'crushing chest', 'tight chest', 'pressure in my chest',
+  'pressure in chest', 'chest pressure', 'chest squeezing',
+  'left arm pain', 'pain in my left arm', 'jaw pain shortness',
+  'heart attack', 'mi symptoms',
+];
+
+const CARDIO_RULE: RedFlagRule = {
+  id: 'RF-CARDIO-01',
+  category: 'cardiovascular_emergency',
+  riskClass: 'R5',
+  reason: 'Cardiovascular emergency keywords detected.',
+  guidance:
+    'This may be a heart attack. Call your local emergency number immediately. ' +
+    'While waiting: sit upright, stay calm, loosen tight clothing. ' +
+    'Chew aspirin only if you are not allergic and a clinician has previously advised it.',
+  match: (text) => includesAny(lc(text), CHEST_PAIN_TERMS),
+};
+
+// ───── Stroke ────────────────────────────────────────────────────────────
+
+const STROKE_TERMS = [
+  'face drooping', 'one side of my face', 'arm weakness', 'arm went numb',
+  'slurred speech', 'sudden confusion', 'sudden severe headache',
+  'worst headache of my life', 'can\'t move one side', 'cant move one side',
+  'stroke symptoms',
+];
+
+const STROKE_RULE: RedFlagRule = {
+  id: 'RF-STROKE-01',
+  category: 'stroke',
+  riskClass: 'R5',
+  reason: 'Stroke / FAST symptoms detected.',
+  guidance:
+    'Stroke symptoms — Face droop, Arm weakness, Speech difficulty. Call your ' +
+    'local emergency number immediately. Note the exact time symptoms started.',
+  match: (text) => includesAny(lc(text), STROKE_TERMS),
+};
+
+// ───── Respiratory ──────────────────────────────────────────────────────
+
+const RESP_TERMS = [
+  'can\'t breathe', 'cant breathe', 'cannot breathe', 'severe shortness of breath',
+  'choking', 'turning blue', 'lips blue', 'gasping for air',
+];
+
+const RESP_RULE: RedFlagRule = {
+  id: 'RF-RESP-01',
+  category: 'respiratory_emergency',
+  riskClass: 'R5',
+  reason: 'Severe respiratory distress detected.',
+  guidance: 'Severe breathing difficulty is a medical emergency. Call your local emergency number now.',
+  match: (text) => includesAny(lc(text), RESP_TERMS),
+};
+
+// ───── Anaphylaxis ──────────────────────────────────────────────────────
+
+const ANAPHYLAXIS_TERMS = [
+  'throat swelling', 'tongue swelling', 'allergic reaction with breathing',
+  'hives all over', 'anaphylaxis', 'epipen',
+];
+
+const ANAPH_RULE: RedFlagRule = {
+  id: 'RF-ANAPH-01',
+  category: 'anaphylaxis',
+  riskClass: 'R5',
+  reason: 'Possible anaphylaxis (airway involvement).',
+  guidance:
+    'Anaphylaxis is a medical emergency. If an epinephrine auto-injector ' +
+    '(EpiPen) is available, use it now. Call your local emergency number.',
+  match: (text) => includesAny(lc(text), ANAPHYLAXIS_TERMS),
+};
+
+// ───── Severe bleeding / LOC ────────────────────────────────────────────
+
+const BLEED_RULE: RedFlagRule = {
+  id: 'RF-BLEED-01',
+  category: 'severe_bleeding',
+  riskClass: 'R5',
+  reason: 'Uncontrolled / severe bleeding mentioned.',
+  guidance:
+    'Apply firm pressure with a clean cloth. Elevate the limb if possible. ' +
+    'Call your local emergency number now.',
+  match: (text) =>
+    includesAny(lc(text), [
+      'severe bleeding', 'heavy bleeding', 'bleeding wont stop',
+      'bleeding will not stop', 'uncontrolled bleeding', 'spurting blood',
+    ]),
+};
+
+const LOC_RULE: RedFlagRule = {
+  id: 'RF-LOC-01',
+  category: 'loss_of_consciousness',
+  riskClass: 'R5',
+  reason: 'Loss of consciousness / unresponsive person.',
+  guidance:
+    'If a person is unresponsive, call your local emergency number. Check breathing. ' +
+    'If trained, begin CPR. Place on their side if breathing.',
+  match: (text) =>
+    includesAny(lc(text), [
+      'unconscious', 'unresponsive', 'passed out', 'fainted and not waking',
+      'not breathing',
+    ]),
+};
+
+// ───── Mental health crisis ─────────────────────────────────────────────
+
+const SUICIDE_RULE: RedFlagRule = {
+  id: 'RF-MH-01',
+  category: 'suicidal_ideation',
+  riskClass: 'R5',
+  reason: 'Suicidal ideation or self-harm intent.',
+  guidance:
+    'You are not alone. Help is available right now. Please call your local emergency ' +
+    'number or a crisis line. If you have a trusted person nearby, reach out to them.',
+  match: (text) =>
+    includesAny(lc(text), [
+      'kill myself', 'want to die', 'end my life', 'suicide', 'suicidal',
+      'no reason to live', 'better off dead',
+    ]),
+};
+
+// ───── Pregnancy emergency ──────────────────────────────────────────────
+
+const PREGNANCY_RULE: RedFlagRule = {
+  id: 'RF-PREG-01',
+  category: 'pregnancy_emergency',
+  riskClass: 'R4',
+  reason: 'Pregnancy with concerning symptoms.',
+  guidance:
+    'Pregnancy with bleeding, severe abdominal pain, severe headache or visual changes, ' +
+    'or decreased fetal movement is a reason to be evaluated urgently. Contact your ' +
+    'maternity provider now or go to an emergency department.',
+  match: (text, ctx) => {
+    const t = lc(text);
+    const isPregContext = ctx.pregnant === true || /\bpregnan/.test(t);
+    if (!isPregContext) return false;
+    return includesAny(t, [
+      'bleeding', 'severe abdominal', 'severe headache', 'vision changes',
+      'no fetal movement', 'baby not moving', 'leaking fluid', 'contractions',
+    ]);
+  },
+};
+
+// ───── Infant fever ─────────────────────────────────────────────────────
+
+const INFANT_FEVER_RULE: RedFlagRule = {
+  id: 'RF-INFANT-01',
+  category: 'infant_fever',
+  riskClass: 'R4',
+  reason: 'Infant under 3 months with fever.',
+  guidance:
+    'Any fever (≥ 38.0 °C / 100.4 °F) in an infant under 3 months is an urgent reason ' +
+    'for medical evaluation. Contact your pediatric emergency line or go to an emergency ' +
+    'department now.',
+  match: (text, ctx) => {
+    const t = lc(text);
+    const ageMonths = ctx.ageMonths ?? (ctx.ageYears != null ? ctx.ageYears * 12 : undefined);
+    const isInfant =
+      ctx.isInfant === true ||
+      (ageMonths != null && ageMonths < 3) ||
+      /\b(newborn|2 month old|two month old|six week old|6 week old|8 week old|eight week old)\b/.test(t);
+    if (!isInfant) return false;
+    return /(fever|temperature|hot|burning up|38(\.\d)?\s*c|100(\.\d)?\s*f|39\s*c|40\s*c)/.test(t);
+  },
+};
+
+// ───── Pediatric severe ─────────────────────────────────────────────────
+
+const PEDIATRIC_RULE: RedFlagRule = {
+  id: 'RF-PEDS-01',
+  category: 'pediatric_severe',
+  riskClass: 'R4',
+  reason: 'Severe pediatric symptoms.',
+  guidance:
+    'Severe symptoms in a child — breathing trouble, repeated seizures, very few wet diapers, ' +
+    'a non-blanching rash, or unresponsiveness — require urgent evaluation. Call your local ' +
+    'emergency number or go to a pediatric emergency department.',
+  match: (text, ctx) => {
+    const ageYears = ctx.ageYears;
+    const t = lc(text);
+    const isChild =
+      (ageYears != null && ageYears < 18) ||
+      ctx.isInfant === true ||
+      /\b(child|baby|infant|toddler|my son|my daughter|my kid)\b/.test(t);
+    if (!isChild) return false;
+    return includesAny(t, [
+      'non-blanching rash', 'purple spots', 'seizure', 'no wet diapers',
+      'unresponsive', 'lethargic', 'limp', 'stiff neck',
+    ]);
+  },
+};
+
+// ───── Poisoning / overdose ─────────────────────────────────────────────
+
+const POISON_RULE: RedFlagRule = {
+  id: 'RF-POISON-01',
+  category: 'poisoning_overdose',
+  riskClass: 'R5',
+  reason: 'Poisoning or overdose mentioned.',
+  guidance:
+    'Call your local emergency number or poison-control line immediately. Do not induce ' +
+    'vomiting unless explicitly told to. Have the substance container ready to describe.',
+  match: (text) =>
+    includesAny(lc(text), [
+      'overdose', 'overdosed', 'took too many', 'swallowed bleach', 'swallowed pesticide',
+      'drank chemicals', 'poisoned',
+    ]),
+};
+
+// ───── Sepsis signs (adult) ─────────────────────────────────────────────
+
+const SEPSIS_RULE: RedFlagRule = {
+  id: 'RF-SEPSIS-01',
+  category: 'sepsis_signs',
+  riskClass: 'R4',
+  reason: 'Constellation of features concerning for sepsis.',
+  guidance:
+    'High fever with confusion, very fast breathing, mottled skin, or severe lethargy can ' +
+    'indicate sepsis — a medical emergency. Seek urgent evaluation now.',
+  match: (text) => {
+    const t = lc(text);
+    return /(\bfever\b|\bvery hot\b)/.test(t) && includesAny(t, ['confusion', 'mottled', 'very fast breathing', 'severely lethargic']);
+  },
+};
+
+export const RED_FLAG_RULES: RedFlagRule[] = [
+  CARDIO_RULE,
+  STROKE_RULE,
+  RESP_RULE,
+  ANAPH_RULE,
+  BLEED_RULE,
+  LOC_RULE,
+  SUICIDE_RULE,
+  PREGNANCY_RULE,
+  INFANT_FEVER_RULE,
+  PEDIATRIC_RULE,
+  POISON_RULE,
+  SEPSIS_RULE,
+];
+
+/**
+ * Run all rules. Returns every match (so audit can record overlapping fires)
+ * along with the highest risk class.
+ */
+export function evaluateRedFlags(
+  text: string,
+  ctx: PatientContext = {},
+): { matches: RedFlagMatch[]; topRisk: RiskClass } {
+  const matches: RedFlagMatch[] = [];
+  for (const rule of RED_FLAG_RULES) {
+    if (rule.match(text, ctx)) {
+      matches.push({
+        ruleId: rule.id,
+        category: rule.category,
+        riskClass: rule.riskClass,
+        reason: rule.reason,
+        guidance: rule.guidance,
+      });
+    }
+  }
+  let topRisk: RiskClass = 'R0';
+  const order = ['R0', 'R1', 'R2', 'R3', 'R4', 'R5'] as const;
+  for (const m of matches) {
+    if (order.indexOf(m.riskClass) > order.indexOf(topRisk)) topRisk = m.riskClass;
+  }
+  return { matches, topRisk };
+}
diff --git a/lib/safety/refusal-rules.ts b/lib/safety/refusal-rules.ts
new file mode 100644
index 0000000000000000000000000000000000000000..5e0f179a49b62e3540a04fd4c1fda699681cced4
--- /dev/null
+++ b/lib/safety/refusal-rules.ts
@@ -0,0 +1,99 @@
+/**
+ * Refusal taxonomy.
+ *
+ * Categories of user request that the model must not satisfy. Used by the
+ * output filter to detect when a model has drifted into one of these
+ * categories, and to produce a safe rewrite.
+ *
+ * Categories are stable identifiers; copy lives in disclaimers / locale
+ * packs (Phase 2A).
+ */
+
+export type RefusalCategory =
+  | 'diagnosis_definitive'
+  | 'prescription_or_dose'
+  | 'off_label'
+  | 'no_doctor_needed'
+  | 'self_harm_method_request'
+  | 'minor_unconsented'
+  | 'illegal_action_in_health_context';
+
+export interface RefusalSpec {
+  code: RefusalCategory;
+  label: string;
+  description: string;
+  /** Default replacement for the user-facing answer. */
+  saferRewrite: string;
+}
+
+export const REFUSALS: Record<RefusalCategory, RefusalSpec> = {
+  diagnosis_definitive: {
+    code: 'diagnosis_definitive',
+    label: 'Definitive diagnosis',
+    description:
+      'A statement that asserts the user has condition X. MedOS describes possibilities, ' +
+      'not diagnoses.',
+    saferRewrite:
+      "I can't tell you what condition you have — that requires a clinician. " +
+      'I can describe what your symptoms could fit and help you decide what kind of care to seek.',
+  },
+  prescription_or_dose: {
+    code: 'prescription_or_dose',
+    label: 'Prescription or dose recommendation',
+    description:
+      'Telling the user to start, stop, or change a medication, or to take a specific dose. ' +
+      'Forbidden in all cases. Discussing what a medicine is or general indications is fine.',
+    saferRewrite:
+      "I can't recommend a medication or a specific dose. Please ask a pharmacist or your " +
+      'clinician — they can review your full history and any other medicines you take.',
+  },
+  off_label: {
+    code: 'off_label',
+    label: 'Off-label use suggestion',
+    description:
+      'Suggesting using an approved medicine for an indication it is not approved for. Forbidden.',
+    saferRewrite:
+      "I can't suggest off-label use of any medicine. A clinician can discuss whether " +
+      'an approved option is appropriate for your situation.',
+  },
+  no_doctor_needed: {
+    code: 'no_doctor_needed',
+    label: '"You don\'t need a doctor" reassurance',
+    description:
+      'Phrases that imply a clinician visit is unnecessary in the face of symptoms. The model ' +
+      'is allowed to say care is not urgent; it is not allowed to say no clinician is needed.',
+    saferRewrite:
+      'For symptoms that are persistent, worsening, or unfamiliar to you, it is reasonable ' +
+      'to check in with a clinician — even if the situation is not urgent.',
+  },
+  self_harm_method_request: {
+    code: 'self_harm_method_request',
+    label: 'Self-harm method request',
+    description:
+      'Any request for methods, doses, or means of self-harm. Always refused. Always offers ' +
+      'a crisis line.',
+    saferRewrite:
+      "I'm not going to help with that. If you are thinking of hurting yourself, please " +
+      "reach out — your local emergency number, a crisis line, or someone you trust. You don't have to figure this out alone.",
+  },
+  minor_unconsented: {
+    code: 'minor_unconsented',
+    label: 'Medical advice for a minor without guardian framing',
+    description:
+      'Advice tailored to a specific minor when the requester is not in a guardian role. ' +
+      'MedOS describes information generally and routes to a guardian-managed surface.',
+    saferRewrite:
+      "For decisions about a child's health, a parent, legal guardian, or pediatrician should " +
+      'be involved. I can share general information; for specific guidance please contact a clinician.',
+  },
+  illegal_action_in_health_context: {
+    code: 'illegal_action_in_health_context',
+    label: 'Illegal action in a health context',
+    description:
+      'Acquiring controlled substances without a prescription, performing a procedure ' +
+      'on someone else, etc. Always refused.',
+    saferRewrite:
+      "I can't help with that. If there is a clinical question behind it, I'm happy to discuss " +
+      'the underlying topic in general terms.',
+  },
+};
diff --git a/lib/safety/risk-classes.ts b/lib/safety/risk-classes.ts
new file mode 100644
index 0000000000000000000000000000000000000000..91e7d4e6f46ef19513af697ab53625ef4d2906ed
--- /dev/null
+++ b/lib/safety/risk-classes.ts
@@ -0,0 +1,144 @@
+/**
+ * R0–R5 risk classes for MedOS.
+ *
+ * Definitions, defaults, and hard rules for what the LLM is allowed to do
+ * at each level. The deterministic safety engine uses this taxonomy; the
+ * LLM is allowed to *describe* a risk class but never to *downgrade* it.
+ *
+ * See SAFETY.md and GOVERNANCE.md at the repo root.
+ */
+
+export type RiskClass = 'R0' | 'R1' | 'R2' | 'R3' | 'R4' | 'R5';
+
+export interface RiskClassSpec {
+  code: RiskClass;
+  label: string;
+  description: string;
+  /**
+   * Whether the LLM may answer at all. R5 always uses a deterministic
+   * template; the LLM may add a brief empathic preamble that the output
+   * filter then re-validates.
+   */
+  llmAllowed: boolean;
+  /**
+   * Whether the response must include the local emergency number.
+   */
+  emergencyNumberRequired: boolean;
+  /**
+   * Whether the response must explicitly route the user to a clinician.
+   */
+  clinicianReferralRequired: boolean;
+  /**
+   * Whether self-care / over-the-counter wording is allowed.
+   * Forbidden at R2 and above.
+   */
+  selfCareAllowed: boolean;
+}
+
+export const RISK_CLASSES: Record<RiskClass, RiskClassSpec> = {
+  R0: {
+    code: 'R0',
+    label: 'General wellness / low risk',
+    description:
+      'General health information, lifestyle questions, definitions, education. ' +
+      'No symptoms requiring action.',
+    llmAllowed: true,
+    emergencyNumberRequired: false,
+    clinicianReferralRequired: false,
+    selfCareAllowed: true,
+  },
+  R1: {
+    code: 'R1',
+    label: 'Mild symptoms, self-care guidance allowed',
+    description:
+      'Mild, time-limited symptoms with no red flags. Common cold, mild headache, ' +
+      'minor abrasion. Self-care wording is allowed; user is reminded that ' +
+      'persistent or worsening symptoms warrant clinician contact.',
+    llmAllowed: true,
+    emergencyNumberRequired: false,
+    clinicianReferralRequired: false,
+    selfCareAllowed: true,
+  },
+  R2: {
+    code: 'R2',
+    label: 'Needs non-urgent professional care',
+    description:
+      'Symptoms or situations that warrant a non-urgent clinician visit ' +
+      '(GP, pharmacist, dentist, specialist) within days. No self-treatment ' +
+      'recommendations beyond very low-risk supportive measures.',
+    llmAllowed: true,
+    emergencyNumberRequired: false,
+    clinicianReferralRequired: true,
+    selfCareAllowed: false,
+  },
+  R3: {
+    code: 'R3',
+    label: 'Urgent care recommended',
+    description:
+      'Same-day or within-24h care recommended (urgent care, GP same-day, ' +
+      'after-hours line). Symptoms that could escalate.',
+    llmAllowed: true,
+    emergencyNumberRequired: false,
+    clinicianReferralRequired: true,
+    selfCareAllowed: false,
+  },
+  R4: {
+    code: 'R4',
+    label: 'Emergency care recommended',
+    description:
+      'Symptoms that warrant going to an emergency department now. ' +
+      'Includes infants under 3 months with fever, pregnancy emergencies, ' +
+      'severe pediatric presentations, suspected serious infections.',
+    llmAllowed: true,
+    emergencyNumberRequired: true,
+    clinicianReferralRequired: true,
+    selfCareAllowed: false,
+  },
+  R5: {
+    code: 'R5',
+    label: 'Immediate emergency / crisis handling',
+    description:
+      'Life-threatening or crisis situations. Cardiovascular emergency, ' +
+      'stroke, anaphylaxis, severe bleeding, loss of consciousness, ' +
+      'suicidal ideation, poisoning/overdose. Response is template-driven; ' +
+      'the LLM cannot soften or override.',
+    llmAllowed: false,
+    emergencyNumberRequired: true,
+    clinicianReferralRequired: true,
+    selfCareAllowed: false,
+  },
+};
+
+/**
+ * Order risk classes from lowest to highest severity. Useful for taking
+ * the max of multiple signals.
+ */
+const ORDER: RiskClass[] = ['R0', 'R1', 'R2', 'R3', 'R4', 'R5'];
+
+export function maxRisk(...classes: RiskClass[]): RiskClass {
+  let max = 'R0' as RiskClass;
+  for (const c of classes) {
+    if (ORDER.indexOf(c) > ORDER.indexOf(max)) max = c;
+  }
+  return max;
+}
+
+export function isAtLeast(actual: RiskClass, threshold: RiskClass): boolean {
+  return ORDER.indexOf(actual) >= ORDER.indexOf(threshold);
+}
+
+/**
+ * Map the legacy triage severity strings to the R0–R5 taxonomy. Used by
+ * the orchestrator to bridge the existing triageMessage() output until
+ * the deeper red-flag rules in red-flags.ts replace it.
+ */
+export function severityToRiskClass(
+  severity: 'critical' | 'urgent' | 'moderate' | 'low',
+): RiskClass {
+  switch (severity) {
+    case 'critical': return 'R5';
+    case 'urgent':   return 'R4';
+    case 'moderate': return 'R3';
+    case 'low':      return 'R0';
+  }
+}
diff --git a/lib/safety/safety-engine.ts b/lib/safety/safety-engine.ts
new file mode 100644
index 0000000000000000000000000000000000000000..7055b93b1053891a93b256a614b74a4156418166
--- /dev/null
+++ b/lib/safety/safety-engine.ts
@@ -0,0 +1,188 @@
+/**
+ * Safety engine — the orchestrator.
+ *
+ * preCheck()  is called BEFORE the LLM. It returns a decision: either an
+ *             emergency template response (LLM not called), or a green
+ *             light with a risk class + system-prompt instructions.
+ * postCheck() is called AFTER the LLM. It runs the deterministic output
+ *             filter and applies missing-section rules.
+ *
+ * Both calls produce structured metadata suitable for the existing
+ * audit-log writer (lib/audit.ts) — no PHI, only ids, counts, and codes.
+ */
+
+import { triageMessage, type TriageResult } from './triage';
+import { evaluateRedFlags, type PatientContext, type RedFlagMatch } from './red-flags';
+import { RISK_CLASSES, severityToRiskClass, maxRisk, type RiskClass } from './risk-classes';
+import { filterOutput, type OutputFilterMatch } from './output-filter';
+import { getEmergencyInfo, type EmergencyInfo } from './emergency-numbers';
+
+export interface PreCheckRequest {
+  /** Sanitised user prose (already stripped of injected patient context). */
+  text: string;
+  /** ISO 3166-1 alpha-2 country code, e.g. "US", "IT". */
+  countryCode: string;
+  /** Optional patient context extracted from the request. */
+  patientContext?: PatientContext;
+}
+
+export type PreCheckDecision =
+  | {
+      kind: 'emergency_template';
+      riskClass: 'R5';
+      reason: string;
+      template: string;
+      emergency: EmergencyInfo;
+      audit: PreCheckAudit;
+    }
+  | {
+      kind: 'allow_llm';
+      riskClass: RiskClass;
+      systemInstructions: string;
+      emergency: EmergencyInfo;
+      audit: PreCheckAudit;
+    };
+
+export interface PreCheckAudit {
+  riskClass: RiskClass;
+  triageCategory: string | null;
+  ruleFires: string[];
+  countryCode: string;
+}
+
+/**
+ * Run the pre-LLM safety check.
+ */
+export function preCheck(req: PreCheckRequest): PreCheckDecision {
+  const ctx = req.patientContext ?? {};
+  const triage: TriageResult = triageMessage(req.text);
+  const flags = evaluateRedFlags(req.text, ctx);
+
+  const triageRisk: RiskClass = triage.isEmergency
+    ? severityToRiskClass(triage.severity)
+    : 'R0';
+  const topRisk: RiskClass = maxRisk(triageRisk, flags.topRisk);
+
+  const emergency = getEmergencyInfo(req.countryCode);
+  const ruleFires = [
+    ...(triage.isEmergency && triage.category ? [`triage:${triage.category}`] : []),
+    ...flags.matches.map((m: RedFlagMatch) => m.ruleId),
+  ];
+
+  // R5: emergency template path. The LLM does NOT generate the body.
+  if (topRisk === 'R5') {
+    const guidance =
+      flags.matches[0]?.guidance ||
+      triage.guidance ||
+      'This may be a medical emergency. Please call your local emergency number now.';
+
+    const template = [
+      `**Emergency**`,
+      ``,
+      guidance,
+      ``,
+      `**Call now:**`,
+      `- Emergency: **${emergency.emergency}** (${emergency.country})`,
+      `- Ambulance: **${emergency.ambulance}**`,
+      emergency.crisisHotline ? `- Crisis line: **${emergency.crisisHotline}**` : '',
+      ``,
+      `Please don't wait. Every minute matters.`,
+    ]
+      .filter(Boolean)
+      .join('\n');
+
+    return {
+      kind: 'emergency_template',
+      riskClass: 'R5',
+      reason: flags.matches[0]?.reason || triage.category || 'critical',
+      template,
+      emergency,
+      audit: {
+        riskClass: 'R5',
+        triageCategory: triage.category,
+        ruleFires,
+        countryCode: req.countryCode,
+      },
+    };
+  }
+
+  // Build system-prompt augmentation that is ALWAYS appended before the LLM
+  // generates. The post-filter is the second line of defence; this is the first.
+  const spec = RISK_CLASSES[topRisk];
+  const systemInstructions = [
+    `[MedOS safety policy — ${spec.code}: ${spec.label}]`,
+    `- Do NOT diagnose. Describe possibilities only.`,
+    `- Do NOT recommend a specific medication or dose. Suggest a clinician or pharmacist.`,
+    `- ${spec.selfCareAllowed ? 'Self-care suggestions are allowed for low-risk supportive measures.' : 'Do NOT recommend self-care; this situation needs professional input.'}`,
+    `- ${spec.clinicianReferralRequired ? 'Recommend a clinician visit explicitly.' : 'You may suggest a clinician check-in if symptoms persist or worsen.'}`,
+    `- ${spec.emergencyNumberRequired ? `Mention the local emergency number (${emergency.emergency}) explicitly.` : ''}`,
+    `- Never say "you don't need a doctor".`,
+    `- Stay grounded in retrieved reference material; do not invent guidelines.`,
+  ]
+    .filter((line) => line.trim().length > 0)
+    .join('\n');
+
+  return {
+    kind: 'allow_llm',
+    riskClass: topRisk,
+    systemInstructions,
+    emergency,
+    audit: {
+      riskClass: topRisk,
+      triageCategory: triage.category,
+      ruleFires,
+      countryCode: req.countryCode,
+    },
+  };
+}
+
+// ───── postCheck ─────────────────────────────────────────────────────────
+
+export interface PostCheckRequest {
+  response: string;
+  riskClass: RiskClass;
+  emergency: EmergencyInfo;
+}
+
+export interface PostCheckResult {
+  filtered: string;
+  matches: OutputFilterMatch[];
+  blocked: boolean;
+  audit: PostCheckAudit;
+}
+
+export interface PostCheckAudit {
+  riskClass: RiskClass;
+  filterFires: string[];
+  blocked: boolean;
+  /** Whether the filter actually changed the text (rewrite or append). */
+  modified: boolean;
+}
+
+/**
+ * Run the post-LLM safety filter on a complete model response.
+ *
+ * NOTE: this is the *non-streaming* form. The streaming form runs the
+ * filter on the assembled response after the model finishes — it does NOT
+ * try to filter mid-stream. Streaming integration lives in the chat route.
+ */
+export function postCheck(req: PostCheckRequest): PostCheckResult {
+  const spec = RISK_CLASSES[req.riskClass];
+  const result = filterOutput(req.response, {
+    riskClass: req.riskClass,
+    emergencyNumberRequired: spec.emergencyNumberRequired,
+    emergencyNumber: req.emergency.emergency,
+    clinicianReferralRequired: spec.clinicianReferralRequired,
+  });
+  return {
+    filtered: result.filtered,
+    matches: result.matches,
+    blocked: result.blocked,
+    audit: {
+      riskClass: req.riskClass,
+      filterFires: result.matches.map((m) => m.rule),
+      blocked: result.blocked,
+      modified: result.filtered !== req.response,
+    },
+  };
+}
diff --git a/lib/safety/triage.ts b/lib/safety/triage.ts
new file mode 100644
index 0000000000000000000000000000000000000000..ae17758d1f13a842e1a81e4b85d1a8464373b2f4
--- /dev/null
+++ b/lib/safety/triage.ts
@@ -0,0 +1,231 @@
+/**
+ * Emergency symptom triage system.
+ * Detects emergency keywords in any supported language
+ * and immediately escalates to local emergency services.
+ */
+
+export interface TriageResult {
+  isEmergency: boolean;
+  category: string | null;
+  guidance: string | null;
+  severity: 'critical' | 'urgent' | 'moderate' | 'low';
+}
+
+interface EmergencyPattern {
+  keywords: string[];
+  category: string;
+  guidance: string;
+  severity: 'critical' | 'urgent';
+}
+
+const EMERGENCY_PATTERNS: EmergencyPattern[] = [
+  {
+    keywords: [
+      'chest pain', 'dolor de pecho', 'douleur poitrine', 'brustschmerzen',
+      'dolore al petto', 'dor no peito', 'боль в груди', 'ألم في الصدر',
+      'nyeri dada', 'maumivu ya kifua', 'sakit dada', 'ngực đau',
+      'heart attack', 'ataque al corazón', 'infarto', 'herzinfarkt',
+      '心脏病', '胸痛', '心臓発作', '가슴 통증', '심장마비',
+    ],
+    category: 'cardiovascular',
+    guidance:
+      'This could be a heart attack. Call emergency services IMMEDIATELY. While waiting: sit upright, stay calm, loosen tight clothing. Chew aspirin if available and not allergic.',
+    severity: 'critical',
+  },
+  {
+    keywords: [
+      'cant breathe', "can't breathe", 'difficulty breathing', 'no puedo respirar',
+      'ne peut pas respirer', 'kann nicht atmen', 'non riesco a respirare',
+      'não consigo respirar', 'не могу дышать', 'لا أستطيع التنفس',
+      'tidak bisa bernapas', 'siwezi kupumua', 'hindi makahinga',
+      '呼吸困難', '呼吸できない', '숨을 못 쉬겠', 'khó thở',
+      'choking', 'suffocating', 'gasping',
+    ],
+    category: 'respiratory',
+    guidance:
+      'Severe breathing difficulty is a medical emergency. Call emergency services IMMEDIATELY. Sit upright, try to stay calm, and loosen any tight clothing around the neck and chest.',
+    severity: 'critical',
+  },
+  {
+    keywords: [
+      'suicide', 'kill myself', 'want to die', 'end my life',
+      'suicidio', 'matarme', 'me matar', 'suicide', 'selbstmord',
+      'suicidio', 'самоубийство', 'انتحار', 'bunuh diri', 'kujiua',
+      '自杀', '自殺', '자살', 'tự tử',
+      'suicidal', 'self-harm', 'cutting myself',
+    ],
+    category: 'mental_health_crisis',
+    guidance:
+      'You are not alone, and help is available right now. Please call your local emergency number or a crisis hotline immediately. Your life matters, and trained professionals are ready to help you through this.',
+    severity: 'critical',
+  },
+  {
+    keywords: [
+      'stroke', 'face drooping', 'arm weakness', 'speech difficulty',
+      'derrame', 'ACV', 'ictus', 'schlaganfall', 'инсульт', 'سكتة دماغية',
+      'strok', 'kiharusi', 'đột quỵ', '中风', '脳卒中', '뇌졸중',
+      'face numb', 'slurred speech', 'sudden confusion',
+    ],
+    category: 'stroke',
+    guidance:
+      'Remember FAST: Face drooping, Arm weakness, Speech difficulty, Time to call emergency. Every minute counts. Call emergency services IMMEDIATELY.',
+    severity: 'critical',
+  },
+  {
+    keywords: [
+      'severe bleeding', 'heavy bleeding', 'sangrado severo',
+      'hémorragie', 'starke blutung', 'сильное кровотечение', 'نزيف شديد',
+      'pendarahan hebat', 'kutoka damu', '大出血', '大量出血',
+      'uncontrolled bleeding', 'bleeding wont stop',
+    ],
+    category: 'trauma',
+    guidance:
+      'Apply firm, direct pressure to the wound with a clean cloth. Keep pressure on. Call emergency services IMMEDIATELY. Do NOT remove the cloth — add more on top if needed.',
+    severity: 'critical',
+  },
+  {
+    keywords: [
+      'seizure', 'convulsion', 'convulsión', 'convulsion',
+      'krampfanfall', 'convulsione', 'convulsão', 'судороги', 'تشنج',
+      'kejang', 'kifafa', '抽搐', '痙攣', '발작', 'co giật',
+    ],
+    category: 'neurological',
+    guidance:
+      'During a seizure: clear the area of hard objects, do NOT put anything in the mouth, do NOT restrain the person, turn them on their side. Call emergency services if seizure lasts more than 5 minutes or if it is a first seizure.',
+    severity: 'urgent',
+  },
+  {
+    keywords: [
+      'snakebite', 'snake bite', 'mordedura de serpiente', 'morsure de serpent',
+      'schlangenbiss', 'morso di serpente', 'mordida de cobra', 'укус змеи',
+      'لدغة ثعبان', 'gigitan ular', 'kuumwa na nyoka', '蛇咬', 'ヘビに噛まれた',
+      '뱀에 물렸', 'rắn cắn',
+    ],
+    category: 'envenomation',
+    guidance:
+      'Snakebite emergency: Stay calm and still. Remove jewelry near the bite. Immobilize the affected limb below heart level. Get to the nearest hospital IMMEDIATELY for antivenom. Do NOT cut, suck, tourniquet, or apply ice to the wound.',
+    severity: 'critical',
+  },
+  {
+    keywords: [
+      'anaphylaxis', 'allergic reaction severe', 'throat swelling',
+      'anafilaxia', 'anaphylaxie', 'анафилаксия', 'حساسية شديدة',
+      'anafilaksis', 'アナフィラキシー', '过敏性休克', '아나필락시스',
+      'epipen', 'tongue swelling', 'lips swelling',
+    ],
+    category: 'allergic',
+    guidance:
+      'Severe allergic reaction (anaphylaxis) is life-threatening. Use EpiPen if available. Call emergency services IMMEDIATELY. Lie down with legs elevated (unless difficulty breathing — then sit upright).',
+    severity: 'critical',
+  },
+  {
+    keywords: [
+      'poisoning', 'overdose', 'envenenamiento', 'empoisonnement',
+      'vergiftung', 'avvelenamento', 'envenenamento', 'отравление', 'تسمم',
+      'keracunan', 'sumu', '中毒', '中毒', '중독', 'ngộ độc',
+    ],
+    category: 'toxicology',
+    guidance:
+      'Call emergency services or your local poison control center IMMEDIATELY. Do NOT induce vomiting unless specifically told to by a medical professional. If possible, identify what was consumed and how much.',
+    severity: 'critical',
+  },
+  {
+    keywords: [
+      'baby not breathing', 'infant not breathing', 'child not breathing',
+      'bebé no respira', 'bébé ne respire pas', 'baby atmet nicht',
+      'ребёнок не дышит', 'الطفل لا يتنفس', 'bayi tidak bernapas',
+      'mtoto hapumui', '赤ちゃんが息をしない', '아기가 숨을 안 쉬어',
+    ],
+    category: 'pediatric_emergency',
+    guidance:
+      'This is an emergency. Call emergency services IMMEDIATELY. If trained: begin infant CPR (30 chest compressions, 2 rescue breaths). Use 2 fingers for chest compressions on infants.',
+    severity: 'critical',
+  },
+  {
+    keywords: [
+      'pregnancy bleeding', 'bleeding pregnant', 'sangrado embarazo',
+      'saignement grossesse', 'blutung schwangerschaft',
+      'кровотечение при беременности', 'نزيف أثناء الحمل',
+      'pendarahan kehamilan', 'kutoka damu wakati wa ujauzito',
+      '妊娠出血', '임신 출혈',
+    ],
+    category: 'obstetric_emergency',
+    guidance:
+      'Vaginal bleeding during pregnancy can be serious. Lie on your left side, do not insert anything vaginally, and go to the nearest hospital or call emergency services IMMEDIATELY.',
+    severity: 'critical',
+  },
+  {
+    keywords: [
+      'diabetic ketoacidosis', 'dka', 'fruity breath', 'vomiting diabetes',
+      'cetoacidosis', 'acidocétose', 'ketoazidose', 'chetoacidosi',
+      'cetoacidose', 'الحماض الكيتوني', 'कीटोएसिडोसिस', '糖尿病ケトアシドーシス',
+      '당뇨병성 케톤산증', 'ketoacidosis', 'kussmaul breathing',
+    ],
+    category: 'endocrine_emergency',
+    guidance:
+      'Diabetic ketoacidosis (DKA) is life-threatening. Symptoms: vomiting, fruity-smelling breath, rapid deep breathing, confusion, extreme thirst. Call emergency services IMMEDIATELY. If you have insulin, do NOT stop taking it. Drink water if able. This requires urgent IV fluids and insulin in a hospital.',
+    severity: 'critical',
+  },
+  {
+    keywords: [
+      'severe hypoglycemia', 'seizure diabetes', 'unconscious diabetes',
+      'sugar very low', 'cannot wake up diabetes', 'glucagon',
+      'hipoglicemia severa', 'hypoglycémie sévère', 'schwere hypoglykämie',
+      'ipoglicemia grave', 'hipoglicemia grave', 'نقص السكر الحاد',
+      'गंभीर हाइपोग्लाइसीमिया', '重度低血糖', '重症低血糖',
+    ],
+    category: 'endocrine_emergency',
+    guidance:
+      'Severe hypoglycemia (very low blood sugar) is an emergency. If the person is conscious: give 15g fast-acting sugar (juice, glucose tablets, sugar water). If unconscious or seizing: do NOT put anything in their mouth, use glucagon injection if available, place in recovery position, and call emergency services IMMEDIATELY.',
+    severity: 'critical',
+  },
+  {
+    keywords: [
+      'thyroid storm', 'thyroid crisis', 'tormenta tiroidea',
+      'crise thyréotoxique', 'thyreotoxische krise', 'crisi tireotossica',
+      'عاصفة الغدة الدرقية', 'थायराइड तूफान', '甲状腺クリーゼ',
+    ],
+    category: 'endocrine_emergency',
+    guidance:
+      'Thyroid storm is a rare but life-threatening emergency. Symptoms: very high fever (>40°C), extreme rapid heartbeat, agitation, confusion, delirium, vomiting, diarrhea. Call emergency services IMMEDIATELY. This requires ICU care with IV medications to block thyroid hormone.',
+    severity: 'critical',
+  },
+  {
+    keywords: [
+      'adrenal crisis', 'addisonian crisis', 'crisis suprarrenal',
+      'crise surrénalienne', 'nebennierenkrise', 'crisi surrenalica',
+      'أزمة الغدة الكظرية', 'एड्रेनल क्राइसिस', '副腎クリーゼ',
+    ],
+    category: 'endocrine_emergency',
+    guidance:
+      'Adrenal crisis is a life-threatening emergency in people with adrenal insufficiency (Addison disease). Symptoms: severe weakness, vomiting, low blood pressure, confusion, collapse. If the person has emergency hydrocortisone, administer 100mg IM injection IMMEDIATELY. Call emergency services. Give IV fluids if possible.',
+    severity: 'critical',
+  },
+];
+
+/**
+ * Analyze user message for emergency symptoms.
+ */
+export function triageMessage(message: string): TriageResult {
+  const messageLower = message.toLowerCase();
+
+  for (const pattern of EMERGENCY_PATTERNS) {
+    for (const keyword of pattern.keywords) {
+      if (messageLower.includes(keyword.toLowerCase())) {
+        return {
+          isEmergency: true,
+          category: pattern.category,
+          guidance: pattern.guidance,
+          severity: pattern.severity,
+        };
+      }
+    }
+  }
+
+  return {
+    isEmergency: false,
+    category: null,
+    guidance: null,
+    severity: 'low',
+  };
+}
diff --git a/lib/server-config.ts b/lib/server-config.ts
new file mode 100644
index 0000000000000000000000000000000000000000..bc97a2acc6c3a71b4efec968331a93017cb4b005
--- /dev/null
+++ b/lib/server-config.ts
@@ -0,0 +1,137 @@
+/**
+ * Shared server configuration loader.
+ *
+ * Reads admin-editable settings from a JSON file on disk with environment
+ * variable fallbacks. Used by both /api/admin/config (GET/PUT) and by other
+ * admin routes that need to read provider credentials.
+ *
+ * Why a shared module instead of importing from the route file?
+ *   Next.js App Router only allows HTTP method exports from route.ts files,
+ *   so helpers must live in a separate module.
+ */
+
+import fs from 'fs';
+import path from 'path';
+
+export const CONFIG_PATH = path.join(
+  process.env.PERSISTENT_DIR || '/data',
+  'medos-config.json',
+);
+
+export interface ServerConfig {
+  smtp: {
+    host: string;
+    port: number;
+    user: string;
+    pass: string;
+    fromEmail: string;
+    recoveryEmail: string;
+  };
+  llm: {
+    defaultPreset: string;
+    ollamaUrl: string;
+    hfDefaultModel: string;
+    hfToken: string;
+    /**
+     * Hugging Face token with "Make calls to Inference Providers" permission.
+     * Used SERVER-SIDE ONLY by the medicine-scanner proxy at /api/scan.
+     * Never leaves the backend, never appears in any HTTP response body.
+     */
+    hfTokenInference: string;
+    ollabridgeUrl: string;
+    ollabridgeApiKey: string;
+    openaiApiKey: string;
+    anthropicApiKey: string;
+    groqApiKey: string;
+    watsonxApiKey: string;
+    watsonxProjectId: string;
+    watsonxUrl: string;
+    // Additional providers (v3). Purely additive — routes that don't know
+    // about these fields continue to work unchanged because loadConfig()
+    // merges defaults for any missing key.
+    geminiApiKey: string;
+    openrouterApiKey: string;
+    togetherApiKey: string;
+    mistralApiKey: string;
+    /** Public URL of the Medicine-Scanner HF Space. */
+    scannerUrl: string;
+    /** Public URL of the MetaEngine-Nearby HF Space. */
+    nearbyUrl: string;
+  };
+  app: {
+    appUrl: string;
+    allowedOrigins: string;
+  };
+}
+
+export function getDefaultConfig(): ServerConfig {
+  return {
+    smtp: {
+      host: process.env.SMTP_HOST || '',
+      port: parseInt(process.env.SMTP_PORT || '587', 10),
+      user: process.env.SMTP_USER || '',
+      pass: process.env.SMTP_PASS || '',
+      fromEmail: process.env.FROM_EMAIL || 'MedOS <noreply@medos.health>',
+      recoveryEmail: process.env.RECOVERY_EMAIL || '',
+    },
+    llm: {
+      defaultPreset: process.env.DEFAULT_PRESET || 'free-best',
+      ollamaUrl: process.env.OLLAMA_BASE_URL || 'http://localhost:11434',
+      hfDefaultModel:
+        process.env.HF_DEFAULT_MODEL || 'meta-llama/Llama-3.3-70B-Instruct',
+      // Secrets hold the REAL env value — routes using this loader get the
+      // actual token. Admin GET responses pass through a redact() filter.
+      hfToken: process.env.HF_TOKEN || '',
+      hfTokenInference: process.env.HF_TOKEN_INFERENCE || '',
+      ollabridgeUrl: process.env.OLLABRIDGE_URL || '',
+      ollabridgeApiKey: process.env.OLLABRIDGE_API_KEY || '',
+      openaiApiKey: process.env.OPENAI_API_KEY || '',
+      anthropicApiKey: process.env.ANTHROPIC_API_KEY || '',
+      groqApiKey: process.env.GROQ_API_KEY || '',
+      watsonxApiKey: process.env.WATSONX_API_KEY || '',
+      watsonxProjectId: process.env.WATSONX_PROJECT_ID || '',
+      watsonxUrl: process.env.WATSONX_URL || 'https://us-south.ml.cloud.ibm.com',
+      geminiApiKey: process.env.GEMINI_API_KEY || process.env.GOOGLE_API_KEY || '',
+      openrouterApiKey: process.env.OPENROUTER_API_KEY || '',
+      togetherApiKey: process.env.TOGETHER_API_KEY || '',
+      mistralApiKey: process.env.MISTRAL_API_KEY || '',
+      scannerUrl:
+        process.env.SCANNER_URL || 'https://ruslanmv-medicine-scanner.hf.space',
+      nearbyUrl:
+        process.env.NEARBY_URL || 'https://ruslanmv-metaengine-nearby.hf.space',
+    },
+    app: {
+      appUrl: process.env.APP_URL || 'https://ruslanmv-medibot.hf.space',
+      allowedOrigins: process.env.ALLOWED_ORIGINS || '',
+    },
+  };
+}
+
+export function loadConfig(): ServerConfig {
+  try {
+    if (fs.existsSync(CONFIG_PATH)) {
+      const raw = fs.readFileSync(CONFIG_PATH, 'utf-8');
+      const saved = JSON.parse(raw);
+      const defaults = getDefaultConfig();
+      return {
+        smtp: { ...defaults.smtp, ...saved.smtp },
+        llm: { ...defaults.llm, ...saved.llm },
+        app: { ...defaults.app, ...saved.app },
+      };
+    }
+  } catch (e) {
+    console.error('[Config] Failed to load config file:', e);
+  }
+  return getDefaultConfig();
+}
+
+export function saveConfig(config: ServerConfig): void {
+  try {
+    const dir = path.dirname(CONFIG_PATH);
+    if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
+    fs.writeFileSync(CONFIG_PATH, JSON.stringify(config, null, 2), 'utf-8');
+  } catch (e) {
+    console.error('[Config] Failed to save config file:', e);
+    throw new Error('Failed to save configuration');
+  }
+}
diff --git a/lib/share.ts b/lib/share.ts
new file mode 100644
index 0000000000000000000000000000000000000000..e6aeac16c7d1bcef7e78499768d16c86647dbe31
--- /dev/null
+++ b/lib/share.ts
@@ -0,0 +1,92 @@
+/**
+ * Client-side helpers for shareable, viral-friendly URLs.
+ *
+ * Every AI answer can be turned into a link of the form
+ * `https://<host>/?q=<question>` that, when opened, pre-fills the hero
+ * input and auto-sends. The same URL's OG image is generated dynamically
+ * via `/api/og?q=...` so the link previews as a branded card on every
+ * major social platform and messenger.
+ */
+
+/** Build a canonical share URL for a given question. */
+export function buildShareUrl(question: string, lang?: string): string {
+  if (typeof window === 'undefined') return '';
+  const url = new URL(window.location.origin);
+  url.searchParams.set('q', question);
+  if (lang) url.searchParams.set('lang', lang);
+  return url.toString();
+}
+
+/** Build the dynamic OG preview URL for a given question. */
+export function buildOgUrl(question: string, lang?: string): string {
+  if (typeof window === 'undefined') return '';
+  const url = new URL('/api/og', window.location.origin);
+  if (question) url.searchParams.set('q', question);
+  if (lang) url.searchParams.set('lang', lang);
+  return url.toString();
+}
+
+/**
+ * Share a message using the platform's native share sheet when available
+ * (mobile), falling back to clipboard-copy on desktop. Returns true if
+ * the share/copy succeeded.
+ */
+export async function shareMessage(
+  question: string,
+  lang?: string,
+): Promise<'shared' | 'copied' | 'failed'> {
+  const url = buildShareUrl(question, lang);
+  if (!url) return 'failed';
+
+  const shareData: ShareData = {
+    title: 'MedOS — free AI medical assistant',
+    text: question,
+    url,
+  };
+
+  try {
+    if (
+      typeof navigator !== 'undefined' &&
+      typeof navigator.share === 'function' &&
+      navigator.canShare?.(shareData) !== false
+    ) {
+      await navigator.share(shareData);
+      return 'shared';
+    }
+  } catch {
+    // User dismissed or share failed — fall through to clipboard.
+  }
+
+  try {
+    if (navigator?.clipboard?.writeText) {
+      await navigator.clipboard.writeText(url);
+      return 'copied';
+    }
+  } catch {
+    // ignore
+  }
+
+  return 'failed';
+}
+
+/** Read an incoming `?q=` parameter on page load for prefill. */
+export function readPrefillQuery(): string | null {
+  if (typeof window === 'undefined') return null;
+  const params = new URLSearchParams(window.location.search);
+  const q = params.get('q');
+  return q && q.trim().length > 0 ? q.trim().slice(0, 500) : null;
+}
+
+/**
+ * Generic follow-up suggestions after an AI answer. Intentionally
+ * language-neutral (uses symbols and short English phrases) — the model
+ * itself will respond in the user's language once the chip is clicked.
+ * Keeping them static is a deliberate choice: deterministic, zero parsing
+ * risk, and always-relevant for the medical domain.
+ */
+export const FOLLOW_UP_PROMPTS = [
+  'Tell me more',
+  'What causes this?',
+  'Should I see a doctor?',
+  'How can I prevent it?',
+] as const;
diff --git a/lib/storage-namespace.ts b/lib/storage-namespace.ts
new file mode 100644
index 0000000000000000000000000000000000000000..b044e1b8c2230cfe481c166b53518577f8ae5de7
--- /dev/null
+++ b/lib/storage-namespace.ts
@@ -0,0 +1,267 @@
+/**
+ * Client-side storage namespacing — per-user isolation for localStorage.
+ *
+ * Every MedOS health-store read/write goes through `scopedKey(suffix)`.
+ * The prefix is owned by this module and derived from the active user:
+ *
+ *   logged-in user "u_abc"   →  "medos:u:u_abc:<suffix>"
+ *   anonymous (guest/kiosk)  →  "medos:anon:<random>:<suffix>"
+ *
+ * Why this exists:
+ *   Before Batch 6, keys were global (`medos_medications`, `medos_ehr_profile`,
+ *   …). On a shared device (family laptop, kiosk, clinic workstation) the
+ *   second user would read and overwrite the first user's EHR, meds and chat
+ *   history — and those values were then concatenated into the LLM prompt
+ *   via buildPatientContext(), producing clinically unsafe replies.
+ *
+ * Guarantees:
+ *   - Switching user context wipes the *previous* user's scoped keys from
+ *     local/sessionStorage, so account-switch on a shared browser is safe.
+ *   - Anonymous sessions live only in sessionStorage and are isolated per
+ *     tab; they are wiped on logout and never survive a browser restart.
+ *   - Any legacy un-namespaced `medos_*` keys are migrated once on first
+ *     scoped read and then removed, so existing users do not lose data.
+ */
+
+const SCOPED_PREFIX = 'medos:u:';
+const ANON_PREFIX = 'medos:anon:';
+const LEGACY_PREFIX = 'medos_';
+const CONTEXT_KEY = 'medos:__context__'; // tracks the last-seen userId
+
+type Ctx =
+  | { kind: 'user'; userId: string; prefix: string }
+  | { kind: 'anon'; anonId: string; prefix: string };
+
+let currentCtx: Ctx | null = null;
+
+function hasLocalStorage(): boolean {
+  return typeof window !== 'undefined' && typeof window.localStorage !== 'undefined';
+}
+
+function hasSessionStorage(): boolean {
+  return typeof window !== 'undefined' && typeof window.sessionStorage !== 'undefined';
+}
+
+function randomId(): string {
+  // Not security-sensitive — just unique-enough per tab.
+  return (
+    Date.now().toString(36) +
+    Math.random().toString(36).slice(2, 10)
+  );
+}
+
+function getOrCreateAnonCtx(): Ctx {
+  if (!hasSessionStorage()) {
+    return { kind: 'anon', anonId: 'ssr', prefix: `${ANON_PREFIX}ssr:` };
+  }
+  const existing = sessionStorage.getItem('medos:__anon_id__');
+  const anonId = existing || randomId();
+  if (!existing) sessionStorage.setItem('medos:__anon_id__', anonId);
+  return { kind: 'anon', anonId, prefix: `${ANON_PREFIX}${anonId}:` };
+}
+
+function getCtx(): Ctx {
+  if (currentCtx) return currentCtx;
+  // Lazy init — on first access, try to pick up a previously-stored context
+  // so a page reload inside an authenticated session keeps reading the same
+  // scoped keys without an explicit setStorageUserContext() call.
+  if (hasLocalStorage()) {
+    try {
+      const raw = localStorage.getItem(CONTEXT_KEY);
+      if (raw) {
+        const parsed = JSON.parse(raw) as { userId?: string };
+        if (parsed.userId) {
+          currentCtx = {
+            kind: 'user',
+            userId: parsed.userId,
+            prefix: `${SCOPED_PREFIX}${parsed.userId}:`,
+          };
+          return currentCtx;
+        }
+      }
+    } catch {
+      /* fall through to anon */
+    }
+  }
+  currentCtx = getOrCreateAnonCtx();
+  return currentCtx;
+}
+
+/**
+ * Migrate any legacy `medos_<suffix>` key to the current scoped key, then
+ * remove the legacy one. Idempotent and safe to call on every read.
+ *
+ * We only migrate into a *user* context — anonymous context must not inherit
+ * data that belonged to a previously logged-in user on the same device.
+ */
+function migrateLegacyIfNeeded(suffix: string, scoped: string): void {
+  if (!hasLocalStorage()) return;
+  const ctx = getCtx();
+  if (ctx.kind !== 'user') return;
+  const legacyKey = `${LEGACY_PREFIX}${suffix}`;
+  try {
+    const legacyVal = localStorage.getItem(legacyKey);
+    if (legacyVal == null) return;
+    // Only migrate when the scoped slot is empty — don't clobber real data.
+    if (localStorage.getItem(scoped) == null) {
+      localStorage.setItem(scoped, legacyVal);
+    }
+    localStorage.removeItem(legacyKey);
+  } catch {
+    /* storage may be full/disabled — ignore */
+  }
+}
+
+/**
+ * Return the current scoped storage key for the given suffix (e.g. passing
+ * `"medications"` returns `"medos:u:<userId>:medications"`).
+ */
+export function scopedKey(suffix: string): string {
+  const ctx = getCtx();
+  const scoped = `${ctx.prefix}${suffix}`;
+  migrateLegacyIfNeeded(suffix, scoped);
+  return scoped;
+}
+
+/**
+ * Returns true if the current context is a real authenticated user. Callers
+ * that write clinical data to the server should check this before syncing.
+ */
+export function isAuthenticatedContext(): boolean {
+  return getCtx().kind === 'user';
+}
+
+/**
+ * Wipe every scoped key belonging to `userId` (or every `medos:u:*` + legacy
+ * `medos_*` key if no userId is given). Call this on logout.
+ *
+ * Anonymous (`medos:anon:*`) keys live in sessionStorage and are wiped too.
+ */
+export function wipeUserScopedStorage(userId?: string): void {
+  if (hasLocalStorage()) {
+    const victim = userId ? `${SCOPED_PREFIX}${userId}:` : SCOPED_PREFIX;
+    const toDelete: string[] = [];
+    for (let i = 0; i < localStorage.length; i++) {
+      const k = localStorage.key(i);
+      if (!k) continue;
+      if (k.startsWith(victim) || k.startsWith(LEGACY_PREFIX)) toDelete.push(k);
+    }
+    toDelete.forEach((k) => localStorage.removeItem(k));
+  }
+  if (hasSessionStorage()) {
+    const toDelete: string[] = [];
+    for (let i = 0; i < sessionStorage.length; i++) {
+      const k = sessionStorage.key(i);
+      if (!k) continue;
+      if (k.startsWith(ANON_PREFIX) || k.startsWith('medos:')) toDelete.push(k);
+    }
+    toDelete.forEach((k) => sessionStorage.removeItem(k));
+  }
+}
+
+/**
+ * Wipe literally every MedOS key (scoped, anonymous, and legacy). Intended
+ * for hard resets / delete-account flows, not routine logouts.
+ */
+export function wipeAllMedosStorage(): void {
+  if (hasLocalStorage()) {
+    const toDelete: string[] = [];
+    for (let i = 0; i < localStorage.length; i++) {
+      const k = localStorage.key(i);
+      if (!k) continue;
+      if (
+        k.startsWith(SCOPED_PREFIX) ||
+        k.startsWith(ANON_PREFIX) ||
+        k.startsWith(LEGACY_PREFIX) ||
+        k.startsWith('medos:')
+      ) {
+        toDelete.push(k);
+      }
+    }
+    toDelete.forEach((k) => localStorage.removeItem(k));
+  }
+  if (hasSessionStorage()) {
+    const toDelete: string[] = [];
+    for (let i = 0; i < sessionStorage.length; i++) {
+      const k = sessionStorage.key(i);
+      if (!k) continue;
+      if (k.startsWith('medos:')) toDelete.push(k);
+    }
+    toDelete.forEach((k) => sessionStorage.removeItem(k));
+  }
+}
+
+/**
+ * Switch the active storage context.
+ *
+ *   setStorageUserContext("u_abc")  — login / session restore
+ *   setStorageUserContext(null)     — logout (falls back to anonymous)
+ *
+ * If the incoming userId differs from the previously-active one, the
+ * previous user's scoped keys are wiped so the new user starts clean on a
+ * shared browser. Anonymous keys are always wiped on a context switch.
+ */
+export function setStorageUserContext(userId: string | null | undefined): void {
+  const prev = currentCtx;
+  const prevUserId = prev && prev.kind === 'user' ? prev.userId : null;
+
+  if (userId) {
+    if (prevUserId && prevUserId !== userId) {
+      // Different user on the same browser — blow away the previous scope.
+      wipeUserScopedStorage(prevUserId);
+    }
+    // Always wipe anon keys on promotion to an authenticated session.
+    if (hasSessionStorage()) {
+      const toDelete: string[] = [];
+      for (let i = 0; i < sessionStorage.length; i++) {
+        const k = sessionStorage.key(i);
+        if (!k) continue;
+        if (k.startsWith(ANON_PREFIX) || k === 'medos:__anon_id__') toDelete.push(k);
+      }
+      toDelete.forEach((k) => sessionStorage.removeItem(k));
+    }
+    currentCtx = {
+      kind: 'user',
+      userId,
+      prefix: `${SCOPED_PREFIX}${userId}:`,
+    };
+    if (hasLocalStorage()) {
+      try {
+        localStorage.setItem(CONTEXT_KEY, JSON.stringify({ userId }));
+      } catch {
+        /* non-fatal */
+      }
+    }
+    return;
+  }
+
+  // Logout — wipe the user's scope and drop back to a fresh anon context.
+  if (prevUserId) wipeUserScopedStorage(prevUserId);
+  if (hasLocalStorage()) {
+    try {
+      localStorage.removeItem(CONTEXT_KEY);
+    } catch {
+      /* non-fatal */
+    }
+  }
+  // Force a brand-new anon id so the previous anonymous browsing session
+  // does not leak into the next one.
+  if (hasSessionStorage()) {
+    try {
+      sessionStorage.removeItem('medos:__anon_id__');
+    } catch {
+      /* non-fatal */
+    }
+  }
+  currentCtx = getOrCreateAnonCtx();
+}
+
+/**
+ * Test-only helper — reset the in-memory context so unit tests can simulate
+ * a fresh page load without polluting real storage.
+ *
+ * @internal
+ */
+export function __resetStorageNamespaceForTests(): void {
+  currentCtx = null;
+}
diff --git a/lib/symptoms.ts b/lib/symptoms.ts
new file mode 100644
index 0000000000000000000000000000000000000000..97e4ad62b80bea85507e5bdce06677127e614c78
--- /dev/null
+++ b/lib/symptoms.ts
@@ -0,0 +1,355 @@
+/**
+ * Static symptom catalog used by the SEO landing pages at
+ * `/symptoms/[slug]`. Each entry is pre-rendered as its own HTML page
+ * at build time, with FAQPage JSON-LD embedded for Google rich results.
+ *
+ * All content is general patient education aligned with WHO, CDC, and
+ * NHS public guidance. Nothing here is a diagnosis; every page ends
+ * with a clear "not a substitute for a clinician" disclaimer and a CTA
+ * pointing users into the live MedOS chatbot.
+ *
+ * IMPORTANT — DO NOT add clinical dosing, prescription instructions, or
+ * definitive diagnoses to this file. Keep it educational.
+ */
+
+export interface SymptomFaq {
+  q: string;
+  a: string;
+}
+
+export interface Symptom {
+  slug: string;
+  title: string;
+  metaDescription: string;
+  headline: string;
+  summary: string;
+  redFlags: string[];
+  selfCare: string[];
+  whenToSeekCare: string[];
+  faqs: SymptomFaq[];
+}
+
+export const SYMPTOMS: Symptom[] = [
+  {
+    slug: 'headache',
+    title: 'Headache — causes, self-care, when to worry | MedOS',
+    metaDescription:
+      'What a headache can mean, how to relieve it safely at home, and the red flags that need urgent medical care. Free guidance aligned with WHO, CDC, and NHS.',
+    headline: 'Headache',
+    summary:
+      'Most headaches are benign tension-type or migraine and resolve with rest, hydration, and over-the-counter analgesics. A small minority are signals of something serious and need urgent assessment — this page helps you tell the difference.',
+    redFlags: [
+      'Sudden "worst headache of your life", often described as thunderclap.',
+      'Headache with fever, stiff neck, or rash.',
+      'Headache with new weakness, numbness, vision loss, or speech changes.',
+      'Headache after a head injury.',
+      'Headache that progressively worsens over days or weeks.',
+    ],
+    selfCare: [
+      'Drink water — mild dehydration is a common headache trigger.',
+      'Rest in a dark, quiet room for 30–60 minutes.',
+      'Apply a cool cloth to your forehead or the back of your neck.',
+      'Consider an over-the-counter analgesic only if you have taken it safely before; do not exceed the package dose.',
+      'Limit screen time and avoid skipping meals.',
+    ],
+    whenToSeekCare: [
+      'Your headache is the worst you have ever had or came on in seconds.',
+      'Headaches are becoming more frequent or more severe.',
+      'Over-the-counter medicine is not helping after 2–3 days.',
+      'You are pregnant and develop a new, severe headache.',
+    ],
+    faqs: [
+      {
+        q: 'Is a daily headache normal?',
+        a: 'No. Chronic daily headache (more than 15 days a month) is worth discussing with a clinician — common causes include medication overuse, stress, tension, poor sleep, or dehydration, but persistent headaches should always be evaluated.',
+      },
+      {
+        q: 'Can dehydration really cause a headache?',
+        a: 'Yes. Even mild dehydration can trigger a dull, throbbing headache in many people. Rehydrating and resting in a quiet environment typically helps within an hour.',
+      },
+      {
+        q: 'What is a thunderclap headache?',
+        a: 'A thunderclap headache reaches peak intensity within 60 seconds and is one of the strongest red flags in medicine. It can indicate a brain bleed and needs emergency assessment immediately.',
+      },
+      {
+        q: 'Are migraines the same as bad headaches?',
+        a: 'No. Migraines are a distinct neurological condition that usually involve throbbing pain on one side of the head, sensitivity to light and sound, and sometimes nausea or visual aura.',
+      },
+    ],
+  },
+
+  {
+    slug: 'fever',
+    title: 'Fever in adults and children — what to do | MedOS',
+    metaDescription:
+      'When a fever is safe to manage at home and when it becomes an emergency. Free, WHO-aligned guidance for adults, children, and infants.',
+    headline: 'Fever',
+    summary:
+      'Fever is a normal immune response, not a disease by itself. For most adults a temperature under 39 °C (102 °F) can be managed at home with rest and fluids. In infants under 3 months, any fever is an emergency.',
+    redFlags: [
+      'Any fever in an infant under 3 months old.',
+      'Fever with a stiff neck, severe headache, or rash that does not fade under pressure.',
+      'Fever with confusion, difficulty breathing, chest pain, or seizures.',
+      'Fever above 40 °C (104 °F) that is not coming down with paracetamol or ibuprofen.',
+      'Fever lasting more than 3 days in an adult or more than 24 hours in a young child.',
+    ],
+    selfCare: [
+      'Rest and drink plenty of fluids (water, oral rehydration solution, clear broth).',
+      'Dress in light layers — overwrapping can trap heat.',
+      'Consider paracetamol or ibuprofen at standard dosing if you have taken them safely before.',
+      'Monitor temperature every 2–4 hours and note any new symptoms.',
+    ],
+    whenToSeekCare: [
+      'The person is very young, elderly, pregnant, or immunocompromised.',
+      'Fever is accompanied by shortness of breath, chest pain, or confusion.',
+      'There are red-flag symptoms listed above.',
+    ],
+    faqs: [
+      {
+        q: 'At what temperature is it officially a fever?',
+        a: 'In adults and older children, a fever is generally defined as a body temperature of 38 °C (100.4 °F) or higher measured orally. In infants the threshold is the same but any fever under 3 months is urgent.',
+      },
+      {
+        q: 'Can I give paracetamol and ibuprofen together?',
+        a: 'They can be alternated in certain situations, but it depends on age, weight, and other medications. Do not combine them without guidance from a clinician or pharmacist.',
+      },
+      {
+        q: 'Does a high fever cause brain damage?',
+        a: 'Brain damage from fever itself is extremely rare. Most concerning fevers are signals of an underlying infection that needs evaluation — the fever number alone is not the danger.',
+      },
+      {
+        q: 'Should I use a cold bath to bring a fever down?',
+        a: 'No. Cold baths can cause shivering, which actually raises core temperature. Lukewarm sponging and light clothing are safer.',
+      },
+    ],
+  },
+
+  {
+    slug: 'chest-pain',
+    title: 'Chest pain — is it serious? | MedOS',
+    metaDescription:
+      'How to assess chest pain, when to call emergency services, and common non-cardiac causes. Free patient guidance aligned with WHO, CDC, and NHS.',
+    headline: 'Chest pain',
+    summary:
+      'Chest pain can come from the heart, lungs, muscles, or digestive system. Some causes are life-threatening and need emergency care within minutes. Any new, severe, or persistent chest pain should be taken seriously.',
+    redFlags: [
+      'Crushing, squeezing, or heavy chest pain lasting more than a few minutes.',
+      'Chest pain radiating to the jaw, neck, shoulder, or left arm.',
+      'Chest pain with shortness of breath, sweating, nausea, or dizziness.',
+      'Chest pain after recent surgery, long travel, or a leg that is painful and swollen (possible blood clot).',
+      'Chest pain with fainting.',
+    ],
+    selfCare: [
+      'Only if you are confident the pain is muscular or from a known condition: rest, gentle stretching, and paracetamol may help.',
+      'Avoid heavy meals if the pain seems related to reflux.',
+      'Do not drive yourself to the hospital if you suspect a heart attack — call emergency services.',
+    ],
+    whenToSeekCare: [
+      'ANY new severe chest pain — call your local emergency number now.',
+      'Chest pain with any of the red flags above.',
+      'Recurring chest pain even if mild, over several days.',
+    ],
+    faqs: [
+      {
+        q: 'Is chest pain always a heart attack?',
+        a: 'No. Chest pain has many causes — muscle strain, acid reflux, anxiety, lung conditions, and more. But because heart attacks can present subtly, any new or severe chest pain should be evaluated urgently.',
+      },
+      {
+        q: 'What does a heart attack feel like?',
+        a: 'Classic symptoms include heavy, squeezing chest pressure lasting more than a few minutes, often radiating to the arm or jaw, with sweating, nausea, and shortness of breath. Women, older adults, and people with diabetes may have more subtle symptoms.',
+      },
+      {
+        q: 'Can anxiety cause real chest pain?',
+        a: 'Yes. Panic attacks commonly cause sharp, tight chest pain with shortness of breath and tingling. But because the symptoms can mimic cardiac causes, a first episode should still be evaluated by a clinician.',
+      },
+    ],
+  },
+
+  {
+    slug: 'cough',
+    title: 'Cough — when to worry, how to soothe it | MedOS',
+    metaDescription:
+      'Dry vs. wet cough, how long it should last, and the red flags that mean you should be seen. Free guidance aligned with WHO, CDC, and NHS.',
+    headline: 'Cough',
+    summary:
+      'Most coughs are caused by viral infections and resolve in 1–3 weeks. Antibiotics do not help a viral cough. Warning signs include blood in the sputum, weight loss, high fever, or breathlessness.',
+    redFlags: [
+      'Coughing up blood.',
+      'Shortness of breath at rest.',
+      'Chest pain with coughing.',
+      'Cough lasting more than 3 weeks.',
+      'Unintentional weight loss or night sweats.',
+    ],
+    selfCare: [
+      'Drink warm fluids — water, tea with honey, or broth.',
+      'Use a humidifier or inhale steam from a bowl of hot water.',
+      'Honey (not for infants under 12 months) can ease nighttime cough.',
+      'Rest and avoid smoke exposure.',
+    ],
+    whenToSeekCare: [
+      'Cough is getting worse after 5–7 days instead of better.',
+      'High fever persists beyond 3 days.',
+      'Any of the red flags above.',
+    ],
+    faqs: [
+      {
+        q: 'Should I take antibiotics for a cough?',
+        a: 'Usually no. Most coughs are viral, and antibiotics do not work against viruses. A clinician will consider antibiotics only if there are signs of a bacterial infection like pneumonia.',
+      },
+      {
+        q: 'How long should a cough last?',
+        a: 'A typical viral cough can last 1–3 weeks. A cough that lasts more than 3 weeks, or that comes with weight loss or blood, should be evaluated.',
+      },
+    ],
+  },
+
+  {
+    slug: 'sore-throat',
+    title: 'Sore throat — viral, bacterial, or something else | MedOS',
+    metaDescription:
+      'How to tell a viral sore throat from strep, what actually helps, and when to see a clinician. Free guidance aligned with WHO, CDC, and NHS.',
+    headline: 'Sore throat',
+    summary:
+      'Most sore throats are viral and improve in 3–7 days without antibiotics. Bacterial strep throat is less common and usually needs evaluation. Rest, fluids, and simple pain relief are the mainstay of self-care.',
+    redFlags: [
+      'Difficulty breathing or swallowing saliva.',
+      'Drooling (especially in children) or a muffled voice.',
+      'Neck swelling or stiff neck.',
+      'Fever above 39 °C (102 °F) with severe throat pain.',
+      'Sore throat lasting more than 1 week.',
+    ],
+    selfCare: [
+      'Drink plenty of fluids and eat soft, soothing foods.',
+      'Gargle with warm salt water several times a day.',
+      'Throat lozenges or honey can help (no honey under 12 months).',
+      'Consider paracetamol or ibuprofen for pain if previously tolerated.',
+    ],
+    whenToSeekCare: [
+      'Pain is severe or preventing you from eating and drinking.',
+      'You have a rash along with the sore throat.',
+      'You suspect strep throat — sudden severe pain without cough, with fever and swollen neck glands.',
+    ],
+    faqs: [
+      {
+        q: 'Do I need antibiotics for strep throat?',
+        a: 'Possibly. Strep is a bacterial infection confirmed by a rapid test or throat culture. If confirmed, antibiotics shorten symptoms and prevent complications. Viral sore throats do not benefit from antibiotics.',
+      },
+      {
+        q: 'Is a sore throat a sign of COVID-19?',
+        a: 'It can be. Sore throat is one of many possible COVID-19 symptoms along with cough, fever, fatigue, and loss of taste or smell. Home antigen tests and clinical evaluation help clarify.',
+      },
+    ],
+  },
+
+  {
+    slug: 'back-pain',
+    title: 'Back pain — causes, relief, and red flags | MedOS',
+    metaDescription:
+      'Common causes of back pain, how to relieve it safely at home, and the signs that mean you need imaging or urgent care. Free, WHO-aligned guidance.',
+    headline: 'Back pain',
+    summary:
+      'Most acute back pain is muscular and improves within 2–6 weeks with gentle movement, pain relief, and avoiding prolonged bed rest. Imaging is usually not needed in the first 6 weeks unless red flags are present.',
+    redFlags: [
+      'Numbness, tingling, or weakness in the legs.',
+      'Loss of bladder or bowel control (this is a medical emergency).',
+      'Unexplained fever or weight loss.',
+      'Back pain after significant trauma.',
+      'History of cancer with new back pain.',
+    ],
+    selfCare: [
+      'Stay gently active — prolonged bed rest makes back pain worse.',
+      'Apply heat or cold packs for 15–20 minutes at a time.',
+      'Simple stretching and walking when tolerated.',
+      'Over-the-counter pain relief if previously safe.',
+    ],
+    whenToSeekCare: [
+      'Pain is severe and not improving after a week of self-care.',
+      'Any red flag symptoms above.',
+      'Numbness or weakness in the legs is a reason to be seen urgently.',
+    ],
+    faqs: [
+      {
+        q: 'Do I need an MRI for back pain?',
+        a: 'Usually not in the first 6 weeks of acute back pain unless red flags are present. Imaging often finds incidental changes that are not the source of pain, which can delay proper management.',
+      },
+      {
+        q: 'Is bed rest good for back pain?',
+        a: 'No. Extended bed rest actually delays recovery. Gentle, regular movement within pain limits is the modern evidence-based recommendation.',
+      },
+    ],
+  },
+  {
+    slug: 'diabetes',
+    title: 'Diabetes — types, symptoms, management | MedOS',
+    metaDescription:
+      'What diabetes is, how to recognize it, how to manage blood sugar, and when to seek care. Aligned with ADA, SID, and WHO guidelines.',
+    headline: 'Diabetes',
+    summary:
+      'Diabetes is a chronic condition where the body cannot properly regulate blood sugar. Type 1 is autoimmune (requires insulin from diagnosis). Type 2 is the most common form (managed with lifestyle, oral medications, and sometimes insulin). Both types require regular monitoring to prevent complications.',
+    redFlags: [
+      'Diabetic ketoacidosis (DKA): vomiting, fruity-smelling breath, rapid breathing, confusion — call emergency services.',
+      'Severe hypoglycemia: seizures, loss of consciousness — use glucagon if available, call emergency.',
+      'Blood glucose above 300 mg/dL despite medication.',
+      'New onset of blurred vision or sudden vision loss.',
+      'Non-healing foot wound or ulcer.',
+    ],
+    selfCare: [
+      'Monitor blood glucose regularly.',
+      'Follow a balanced diet — reduce refined sugars, increase fiber.',
+      'Aim for 150 minutes of moderate exercise per week.',
+      'Take medications as prescribed — never skip insulin.',
+      'Check feet daily for cuts, blisters, or redness.',
+      'Carry fast-acting glucose at all times if on insulin.',
+    ],
+    whenToSeekCare: [
+      'Blood sugar consistently above 250 mg/dL or below 70 mg/dL.',
+      'Signs of DKA (vomiting, fruity breath, confusion).',
+      'New numbness or tingling in hands or feet.',
+      'A foot wound that does not heal.',
+    ],
+    faqs: [
+      { q: 'What is the difference between Type 1 and Type 2 diabetes?', a: 'Type 1 is autoimmune — the body destroys insulin-producing cells. Type 2 is insulin resistance. Type 2 is more common (90%) and often linked to lifestyle factors.' },
+      { q: 'What is a normal HbA1c?', a: 'Normal is below 5.7%. Prediabetes 5.7–6.4%. Diabetes ≥6.5%. Most patients target below 7%.' },
+      { q: 'What is the Rule of 15 for hypoglycemia?', a: 'If blood sugar <70: eat 15g fast-acting carbs, wait 15 min, recheck. Repeat if still low.' },
+    ],
+  },
+  {
+    slug: 'thyroid',
+    title: 'Thyroid problems — symptoms, types, when to worry | MedOS',
+    metaDescription:
+      'Hypothyroidism, hyperthyroidism, Hashimoto, Graves — symptoms and when to see a doctor. Aligned with SIE and ETA guidelines.',
+    headline: 'Thyroid problems',
+    summary:
+      'The thyroid gland controls metabolism, energy, and body temperature. When it produces too little hormone (hypothyroidism) or too much (hyperthyroidism), it affects nearly every organ. Most thyroid conditions are treatable.',
+    redFlags: [
+      'Thyroid storm: very high fever, extreme rapid heartbeat, confusion — call emergency.',
+      'Myxedema coma: hypothermia, extreme drowsiness, slowed breathing — emergency.',
+      'Sudden severe neck swelling or difficulty breathing.',
+    ],
+    selfCare: [
+      'Take thyroid medication consistently, on empty stomach for levothyroxine.',
+      'Avoid taking with calcium, iron, or coffee — wait 30–60 min.',
+      'Attend regular follow-up for TSH blood tests.',
+    ],
+    whenToSeekCare: [
+      'Persistent fatigue, unexplained weight changes.',
+      'A lump or swelling in the neck.',
+      'Palpitations, tremor, or anxiety worsening.',
+      'Pregnant with known or suspected thyroid issues.',
+    ],
+    faqs: [
+      { q: 'What is the difference between hypo and hyperthyroidism?', a: 'Hypothyroidism (underactive) = too little hormone → fatigue, weight gain, cold. Hyperthyroidism (overactive) = too much → weight loss, rapid heart, anxiety.' },
+      { q: 'What is Hashimoto disease?', a: 'Autoimmune condition where the immune system attacks the thyroid. Most common cause of hypothyroidism. Managed with levothyroxine replacement.' },
+      { q: 'Can thyroid affect pregnancy?', a: 'Yes. Both hypo and hyperthyroidism affect fertility and pregnancy. Levothyroxine dose increases 30–50% during pregnancy. Monitor TSH every 4 weeks.' },
+    ],
+  },
+];
+
+/** Constant-time lookup by slug. */
+export function getSymptomBySlug(slug: string): Symptom | undefined {
+  return SYMPTOMS.find((s) => s.slug === slug);
+}
+
+export function getAllSymptomSlugs(): string[] {
+  return SYMPTOMS.map((s) => s.slug);
+}
diff --git a/lib/types.ts b/lib/types.ts
new file mode 100644
index 0000000000000000000000000000000000000000..fffc112e0a1f90775514efb3187932e1f78a936e
--- /dev/null
+++ b/lib/types.ts
@@ -0,0 +1,108 @@
+export type Provider =
+  | "hf"
+  | "ollabridge"
+  | "ollama"
+  | "openai"
+  | "gemini"
+  | "claude";
+
+export type ChatMessage = {
+  role: "user" | "assistant" | "system";
+  content: string;
+};
+
+/**
+ * High-level, user-facing presets. These map to a concrete
+ * (provider, model) pair — plus an optional ordered fallback
+ * chain — via `lib/providers/presets.ts`.
+ */
+export type Preset =
+  | "free-best"
+  | "free-fastest"
+  | "free-flexible"
+  | "deep-reasoning"
+  | "local"
+  | "ollabridge";
+
+export type MedicalContextPayload = {
+  country: string;
+  language: string;
+  emergencyNumber: string;
+  units?: "metric" | "imperial";
+};
+
+export type ChatRequest = {
+  preset?: Preset;
+  provider?: Provider;
+  model?: string;
+  apiKey?: string;
+  userHfToken?: string;
+  context?: MedicalContextPayload;
+  messages: ChatMessage[];
+  stream?: boolean;
+};
+
+export type ProviderConfig = {
+  name: string;
+  displayName: string;
+  requiresApiKey: boolean;
+  models: {
+    id: string;
+    name: string;
+  }[];
+};
+
+export const PROVIDER_CONFIGS: Record<Provider, ProviderConfig> = {
+  hf: {
+    name: "hf",
+    displayName: "HuggingFace Inference (Free)",
+    requiresApiKey: false,
+    models: [
+      { id: "meta-llama/Llama-3.3-70B-Instruct", name: "Llama 3.3 70B (default)" },
+      { id: "Qwen/Qwen2.5-72B-Instruct", name: "Qwen 2.5 72B" },
+      { id: "deepseek-ai/DeepSeek-R1", name: "DeepSeek R1 (reasoning)" },
+    ],
+  },
+  ollabridge: {
+    name: "ollabridge",
+    displayName: "OllaBridge (Custom Gateway)",
+    requiresApiKey: true,
+    models: [{ id: "free-best", name: "Auto (free-best)" }],
+  },
+  ollama: {
+    name: "ollama",
+    displayName: "Ollama (Local)",
+    requiresApiKey: false,
+    models: [
+      { id: "qwen2.5:7b", name: "Qwen 2.5 7B" },
+      { id: "llama3.2", name: "Llama 3.2" },
+    ],
+  },
+  openai: {
+    name: "openai",
+    displayName: "OpenAI (GPT-4)",
+    requiresApiKey: true,
+    models: [
+      { id: "gpt-4o", name: "GPT-4o" },
+      { id: "gpt-4o-mini", name: "GPT-4o Mini" },
+    ],
+  },
+  gemini: {
+    name: "gemini",
+    displayName: "Google (Gemini 1.5)",
+    requiresApiKey: true,
+    models: [
+      { id: "gemini-1.5-pro", name: "Gemini 1.5 Pro" },
+      { id: "gemini-1.5-flash", name: "Gemini 1.5 Flash" },
+    ],
+  },
+  claude: {
+    name: "claude",
+    displayName: "Anthropic (Claude 3.5)",
+    requiresApiKey: true,
+    models: [
+      { id: "claude-3-5-sonnet-latest", name: "Claude 3.5 Sonnet" },
+      { id: "claude-3-5-haiku-latest", name: "Claude 3.5 Haiku" },
+    ],
+  },
+};
diff --git a/lib/user-settings.ts b/lib/user-settings.ts
new file mode 100644
index 0000000000000000000000000000000000000000..b77edf7838d98ec5ceb3930f2f8b85b8c5fec9ac
--- /dev/null
+++ b/lib/user-settings.ts
@@ -0,0 +1,123 @@
+/**
+ * Per-user settings store.
+ *
+ * Single source of truth for everything that belongs to ONE user but is
+ * NOT raw clinical data:
+ *   - UI preferences   (language, country, units, theme)
+ *   - LLM preferences  (defaultModel — overrides admin default at chat time)
+ *   - EHR profile      (the structured wizard data: demographics, conditions,
+ *                       allergies, lifestyle). NOT free-form chat history.
+ *   - BYO Hugging Face token (encrypted at rest with lib/crypto)
+ *
+ * Why a dedicated table instead of overloading `health_data`?
+ *   - There is exactly one settings row per user: PK on user_id makes upsert
+ *     trivial and read O(1) without sorting.
+ *   - The encrypted token field is sensitive enough that it should not share
+ *     a row with arbitrary JSON blobs that the chat API will read.
+ *
+ * Server-only module: never import from a client component.
+ */
+
+import { getDb } from './db';
+import { decryptString, encryptString } from './crypto';
+
+export interface UserSettings {
+  language?: string;
+  country?: string;
+  units?: 'metric' | 'imperial';
+  defaultModel?: string;
+  theme?: 'light' | 'dark' | 'auto';
+  /** EHR wizard data (demographics, conditions, allergies, lifestyle, ...). */
+  ehr?: Record<string, any>;
+  /** Plaintext BYO Hugging Face token. Always encrypted at rest. */
+  hfToken?: string;
+}
+
+export function getUserSettings(userId: string): UserSettings {
+  if (!userId) return {};
+  const db = getDb();
+  const row = db
+    .prepare(
+      `SELECT language, country, units, default_model, theme, ehr, hf_token_encrypted
+       FROM user_settings WHERE user_id = ?`,
+    )
+    .get(userId) as any;
+  if (!row) return { ehr: {} };
+  return {
+    language: row.language || undefined,
+    country: row.country || undefined,
+    units: (row.units as 'metric' | 'imperial' | null) || undefined,
+    defaultModel: row.default_model || undefined,
+    theme: (row.theme as 'light' | 'dark' | 'auto' | null) || undefined,
+    ehr: row.ehr ? safeJson(row.ehr, {}) : {},
+    hfToken: row.hf_token_encrypted ? decryptString(row.hf_token_encrypted) : undefined,
+  };
+}
+
+/**
+ * Merge `patch` into the existing settings row and persist.
+ *
+ * Special handling:
+ *   - Pass `hfToken: ''` to clear a previously stored BYO token.
+ *   - Pass `hfToken: undefined` (or omit) to leave it untouched.
+ *   - `ehr` is shallow-merged so the wizard can patch step by step.
+ */
+export function upsertUserSettings(
+  userId: string,
+  patch: Partial<UserSettings>,
+): void {
+  if (!userId) throw new Error('upsertUserSettings: userId required');
+
+  const cur = getUserSettings(userId);
+
+  const merged: UserSettings = {
+    language: pick(patch.language, cur.language),
+    country: pick(patch.country, cur.country),
+    units: pick(patch.units, cur.units),
+    defaultModel: pick(patch.defaultModel, cur.defaultModel),
+    theme: pick(patch.theme, cur.theme),
+    ehr: patch.ehr ? { ...(cur.ehr || {}), ...patch.ehr } : cur.ehr || {},
+    // Token rotation: only touch column if caller passed the field.
+    hfToken: patch.hfToken === undefined ? cur.hfToken : patch.hfToken || undefined,
+  };
+
+  const ehrJson = JSON.stringify(merged.ehr || {});
+  const tokenEnc = merged.hfToken ? encryptString(merged.hfToken) : null;
+
+  const db = getDb();
+  db.prepare(
+    `INSERT INTO user_settings
+       (user_id, language, country, units, default_model, theme, ehr, hf_token_encrypted, updated_at)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, datetime('now'))
+     ON CONFLICT(user_id) DO UPDATE SET
+       language           = excluded.language,
+       country            = excluded.country,
+       units              = excluded.units,
+       default_model      = excluded.default_model,
+       theme              = excluded.theme,
+       ehr                = excluded.ehr,
+       hf_token_encrypted = excluded.hf_token_encrypted,
+       updated_at         = datetime('now')`,
+  ).run(
+    userId,
+    merged.language || null,
+    merged.country || null,
+    merged.units || null,
+    merged.defaultModel || null,
+    merged.theme || null,
+    ehrJson,
+    tokenEnc,
+  );
+}
+
+function pick<T>(next: T | undefined, prev: T | undefined): T | undefined {
+  return next === undefined ? prev : next;
+}
+
+function safeJson<T>(raw: string, fallback: T): T {
+  try {
+    return JSON.parse(raw) as T;
+  } catch {
+    return fallback;
+  }
+}
diff --git a/lib/utils.ts b/lib/utils.ts
new file mode 100644
index 0000000000000000000000000000000000000000..981ec404f4780dda13a0883236f598735ef18795
--- /dev/null
+++ b/lib/utils.ts
@@ -0,0 +1,31 @@
+import { type ClassValue, clsx } from "clsx";
+
+export function cn(...inputs: ClassValue[]) {
+  return clsx(inputs);
+}
+
+export function formatTimestamp(date: Date = new Date()): string {
+  return date.toLocaleTimeString([], {
+    hour: "2-digit",
+    minute: "2-digit",
+  });
+}
+
+export function exportConversation(messages: any[]): void {
+  const content = messages
+    .map(
+      (m) =>
+        `[${m.timestamp}] ${m.role.toUpperCase()}: ${m.content}\n`
+    )
+    .join("\n");
+
+  const blob = new Blob([content], { type: "text/plain" });
+  const url = URL.createObjectURL(blob);
+  const a = document.createElement("a");
+  a.href = url;
+  a.download = `medos-conversation-${new Date().toISOString().split("T")[0]}.txt`;
+  document.body.appendChild(a);
+  a.click();
+  document.body.removeChild(a);
+  URL.revokeObjectURL(url);
+}
diff --git a/next-env.d.ts b/next-env.d.ts
new file mode 100644
index 0000000000000000000000000000000000000000..40c3d68096c270ef976f3db4e9eb42b05c7067bb
--- /dev/null
+++ b/next-env.d.ts
@@ -0,0 +1,5 @@
+/// <reference types="next" />
+/// <reference types="next/image-types/global" />
+
+// NOTE: This file should not be edited
+// see https://nextjs.org/docs/app/building-your-application/configuring/typescript for more information.
diff --git a/next.config.js b/next.config.js
new file mode 100644
index 0000000000000000000000000000000000000000..348d5c400e5f4208fe51d27ada21fdf7a8c8107c
--- /dev/null
+++ b/next.config.js
@@ -0,0 +1,119 @@
+/** @type {import('next').NextConfig} */
+const nextConfig = {
+  output: 'standalone',
+  reactStrictMode: true,
+  swcMinify: true,
+
+  // better-sqlite3 is a native module — exclude from bundling.
+  experimental: {
+    serverComponentsExternalPackages: ['better-sqlite3'],
+  },
+
+  // Security + CORS headers
+  async headers() {
+    // Allow the Vercel frontend (and localhost for dev) to call our API.
+    const allowedOrigins = (process.env.ALLOWED_ORIGINS || '')
+      .split(',')
+      .map((o) => o.trim())
+      .filter(Boolean);
+
+    const corsHeaders = [
+      {
+        key: 'Access-Control-Allow-Methods',
+        value: 'GET, POST, PUT, DELETE, OPTIONS',
+      },
+      {
+        key: 'Access-Control-Allow-Headers',
+        value: 'Content-Type, Authorization',
+      },
+      {
+        key: 'Access-Control-Allow-Credentials',
+        value: 'true',
+      },
+      // If no ALLOWED_ORIGINS env, allow all (open API for dev/HF iframe).
+      {
+        key: 'Access-Control-Allow-Origin',
+        value: allowedOrigins[0] || '*',
+      },
+    ];
+
+    return [
+      // CORS preflight for all /api/ routes
+      {
+        source: '/api/:path*',
+        headers: corsHeaders,
+      },
+      {
+        source: '/(.*)',
+        headers: [
+          { key: 'X-Content-Type-Options', value: 'nosniff' },
+          // Note: HF Spaces renders apps inside an iframe — SAMEORIGIN blocks it.
+          // Use CSP frame-ancestors instead (more flexible, same security).
+          // { key: 'X-Frame-Options', value: 'SAMEORIGIN' },
+          { key: 'X-XSS-Protection', value: '1; mode=block' },
+          { key: 'Referrer-Policy', value: 'strict-origin-when-cross-origin' },
+          // HSTS — only in production. Using includeSubDomains without
+          // `preload` so operators can opt into the HSTS preload list
+          // explicitly once they've confirmed every subdomain serves HTTPS.
+          // Gated on NODE_ENV so local `next dev` over http still works.
+          ...(process.env.NODE_ENV === 'production'
+            ? [
+                {
+                  key: 'Strict-Transport-Security',
+                  value: 'max-age=63072000; includeSubDomains',
+                },
+              ]
+            : []),
+          {
+            key: 'Content-Security-Policy',
+            value: [
+              "default-src 'self'",
+              "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com",
+              "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com",
+              "font-src 'self' https://fonts.gstatic.com data:",
+              "img-src 'self' https: data: blob:",
+              "connect-src 'self' https://router.huggingface.co https://api-inference.huggingface.co https://overpass-api.de https://nominatim.openstreetmap.org https://*.hf.space wss:",
+              "frame-src 'self' https://www.openstreetmap.org",
+              "frame-ancestors 'self' https://huggingface.co https://*.hf.space",
+              "media-src 'self' blob:",
+              "worker-src 'self' blob:",
+            ].join('; '),
+          },
+          {
+            key: 'Permissions-Policy',
+            value: 'microphone=(self), camera=(self), geolocation=*',
+          },
+        ],
+      },
+      {
+        source: '/sw.js',
+        headers: [
+          { key: 'Cache-Control', value: 'no-cache, no-store, must-revalidate' },
+          { key: 'Service-Worker-Allowed', value: '/' },
+        ],
+      },
+      {
+        source: '/manifest.json',
+        headers: [
+          { key: 'Content-Type', value: 'application/manifest+json' },
+        ],
+      },
+    ];
+  },
+
+  // Image optimization
+  images: {
+    formats: ['image/avif', 'image/webp'],
+    remotePatterns: [
+      { protocol: 'https', hostname: '*.huggingface.co' },
+    ],
+  },
+
+  // Disable powered-by header
+  poweredByHeader: false,
+
+  // Compress responses
+  compress: true,
+};
+
+module.exports = nextConfig;
diff --git a/package.json b/package.json
new file mode 100644
index 0000000000000000000000000000000000000000..af2c6404c4b3360ecb930144e21c532f41c7db88
--- /dev/null
+++ b/package.json
@@ -0,0 +1,43 @@
+{
+  "name": "medos-global",
+  "version": "1.0.0",
+  "description": "MedOS Global - Free AI Medical Assistant for Everyone. 20 languages. No sign-up. Works offline.",
+  "private": true,
+  "scripts": {
+    "dev": "next dev -p 7860",
+    "build": "next build",
+    "start": "next start -p 7860",
+    "lint": "next lint",
+    "type-check": "tsc --noEmit"
+  },
+  "dependencies": {
+    "next": "^14.2.0",
+    "react": "^18.3.0",
+    "react-dom": "^18.3.0",
+    "openai": "^4.52.0",
+    "@huggingface/inference": "^2.7.0",
+    "zod": "^3.23.0",
+    "lucide-react": "^0.394.0",
+    "better-sqlite3": "^11.0.0",
+    "bcryptjs": "^2.4.3",
+    "nodemailer": "^6.9.0",
+    "clsx": "^2.1.0"
+  },
+  "devDependencies": {
+    "typescript": "^5.4.0",
+    "@types/node": "^20.12.0",
+    "@types/react": "^18.3.0",
+    "@types/react-dom": "^18.3.0",
+    "tailwindcss": "^3.4.0",
+    "postcss": "^8.4.0",
+    "autoprefixer": "^10.4.0",
+    "eslint": "^8.57.0",
+    "eslint-config-next": "^14.2.0",
+    "@types/better-sqlite3": "^7.6.0",
+    "@types/bcryptjs": "^2.4.0",
+    "@types/nodemailer": "^6.4.0"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  }
+}
diff --git a/postcss.config.js b/postcss.config.js
new file mode 100644
index 0000000000000000000000000000000000000000..12a703d900da8159c30e75acbd2c4d87ae177f62
--- /dev/null
+++ b/postcss.config.js
@@ -0,0 +1,6 @@
+module.exports = {
+  plugins: {
+    tailwindcss: {},
+    autoprefixer: {},
+  },
+};
diff --git a/public/favicon.svg b/public/favicon.svg
new file mode 100644
index 0000000000000000000000000000000000000000..8a24b73237486a5a13d7ca1429c3c39ecd702608
--- /dev/null
+++ b/public/favicon.svg
@@ -0,0 +1,7 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" width="64" height="64">
+  <rect width="64" height="64" rx="14" fill="#0f172a"/>
+  <rect x="8" y="8" width="48" height="48" rx="10" fill="#1e293b"/>
+  <path d="M32 16 C24 16 18 22 18 30 C18 42 32 50 32 50 C32 50 46 42 46 30 C46 22 40 16 32 16Z" fill="#3b82f6" opacity="0.9"/>
+  <path d="M28 28 L28 36 M24 32 L32 32" stroke="white" stroke-width="2.5" stroke-linecap="round"/>
+  <path d="M36 28 L36 36 M32 32 L40 32" stroke="white" stroke-width="2.5" stroke-linecap="round"/>
+</svg>
diff --git a/public/icons/icon-128x128.png b/public/icons/icon-128x128.png
new file mode 100644
index 0000000000000000000000000000000000000000..c891fe5b6e52b7ba22b20c8af599225d80883414
Binary files /dev/null and b/public/icons/icon-128x128.png differ
diff --git a/public/icons/icon-144x144.png b/public/icons/icon-144x144.png
new file mode 100644
index 0000000000000000000000000000000000000000..c891fe5b6e52b7ba22b20c8af599225d80883414
Binary files /dev/null and b/public/icons/icon-144x144.png differ
diff --git a/public/icons/icon-152x152.png b/public/icons/icon-152x152.png
new file mode 100644
index 0000000000000000000000000000000000000000..c891fe5b6e52b7ba22b20c8af599225d80883414
Binary files /dev/null and b/public/icons/icon-152x152.png differ
diff --git a/public/icons/icon-192x192.png b/public/icons/icon-192x192.png
new file mode 100644
index 0000000000000000000000000000000000000000..c891fe5b6e52b7ba22b20c8af599225d80883414
Binary files /dev/null and b/public/icons/icon-192x192.png differ
diff --git a/public/icons/icon-384x384.png b/public/icons/icon-384x384.png
new file mode 100644
index 0000000000000000000000000000000000000000..c891fe5b6e52b7ba22b20c8af599225d80883414
Binary files /dev/null and b/public/icons/icon-384x384.png differ
diff --git a/public/icons/icon-512x512.png b/public/icons/icon-512x512.png
new file mode 100644
index 0000000000000000000000000000000000000000..c891fe5b6e52b7ba22b20c8af599225d80883414
Binary files /dev/null and b/public/icons/icon-512x512.png differ
diff --git a/public/icons/icon-72x72.png b/public/icons/icon-72x72.png
new file mode 100644
index 0000000000000000000000000000000000000000..c891fe5b6e52b7ba22b20c8af599225d80883414
Binary files /dev/null and b/public/icons/icon-72x72.png differ
diff --git a/public/icons/icon-96x96.png b/public/icons/icon-96x96.png
new file mode 100644
index 0000000000000000000000000000000000000000..c891fe5b6e52b7ba22b20c8af599225d80883414
Binary files /dev/null and b/public/icons/icon-96x96.png differ
diff --git a/public/manifest.json b/public/manifest.json
new file mode 100644
index 0000000000000000000000000000000000000000..c007394029ea1bb396d1370120b5c44f8e33df0b
--- /dev/null
+++ b/public/manifest.json
@@ -0,0 +1,59 @@
+{
+  "name": "MedOS — free AI medical assistant",
+  "short_name": "MedOS",
+  "description": "Ask any health question in your own language. Free, private, instant guidance aligned with WHO, CDC, and NHS. No sign-up, no paywall.",
+  "start_url": "/?source=pwa",
+  "scope": "/",
+  "display": "standalone",
+  "display_override": ["window-controls-overlay", "standalone"],
+  "orientation": "portrait-primary",
+  "theme_color": "#0B1220",
+  "background_color": "#0B1220",
+  "categories": ["health", "medical", "lifestyle", "education"],
+  "lang": "en",
+  "dir": "auto",
+  "id": "medos",
+  "shortcuts": [
+    {
+      "name": "Ask a new question",
+      "short_name": "Ask",
+      "description": "Start a fresh conversation",
+      "url": "/?source=shortcut&new=1",
+      "icons": [{ "src": "/icons/icon-192x192.png", "sizes": "192x192" }]
+    },
+    {
+      "name": "Emergency numbers",
+      "short_name": "Emergency",
+      "description": "Local emergency contacts",
+      "url": "/?view=emergency",
+      "icons": [{ "src": "/icons/icon-192x192.png", "sizes": "192x192" }]
+    },
+    {
+      "name": "Health topics",
+      "short_name": "Topics",
+      "description": "Browse curated health topics",
+      "url": "/?view=topics",
+      "icons": [{ "src": "/icons/icon-192x192.png", "sizes": "192x192" }]
+    }
+  ],
+  "screenshots": [
+    {
+      "src": "/api/og",
+      "sizes": "1200x630",
+      "type": "image/png",
+      "form_factor": "wide",
+      "label": "MedOS — worldwide medical AI assistant"
+    }
+  ],
+  "icons": [
+    { "src": "/icons/icon-72x72.png",  "sizes": "72x72",   "type": "image/png", "purpose": "any" },
+    { "src": "/icons/icon-96x96.png",  "sizes": "96x96",   "type": "image/png", "purpose": "any" },
+    { "src": "/icons/icon-128x128.png","sizes": "128x128", "type": "image/png", "purpose": "any" },
+    { "src": "/icons/icon-144x144.png","sizes": "144x144", "type": "image/png", "purpose": "any" },
+    { "src": "/icons/icon-152x152.png","sizes": "152x152", "type": "image/png", "purpose": "any" },
+    { "src": "/icons/icon-192x192.png","sizes": "192x192", "type": "image/png", "purpose": "any maskable" },
+    { "src": "/icons/icon-384x384.png","sizes": "384x384", "type": "image/png", "purpose": "any" },
+    { "src": "/icons/icon-512x512.png","sizes": "512x512", "type": "image/png", "purpose": "any maskable" }
+  ],
+  "prefer_related_applications": false
+}
diff --git a/public/sw.js b/public/sw.js
new file mode 100644
index 0000000000000000000000000000000000000000..5822b377178dcfc888f8abb92d58507370cc1f4f
--- /dev/null
+++ b/public/sw.js
@@ -0,0 +1,97 @@
+/**
+ * MedOS Global - Service Worker
+ * Provides offline support via caching strategies:
+ * 1. App Shell: cache-first (HTML, CSS, JS)
+ * 2. API calls: network-first, fallback to cached FAQ
+ * 3. Static assets: cache-first
+ */
+
+const CACHE_NAME = 'medos-v1';
+const APP_SHELL_CACHE = 'medos-shell-v1';
+const FAQ_CACHE = 'medos-faq-v1';
+
+const APP_SHELL_URLS = [
+  '/',
+  '/manifest.json',
+];
+
+// Install: cache app shell
+self.addEventListener('install', (event) => {
+  event.waitUntil(
+    caches.open(APP_SHELL_CACHE).then((cache) => {
+      return cache.addAll(APP_SHELL_URLS);
+    })
+  );
+  self.skipWaiting();
+});
+
+// Activate: clean old caches
+self.addEventListener('activate', (event) => {
+  event.waitUntil(
+    caches.keys().then((cacheNames) => {
+      return Promise.all(
+        cacheNames
+          .filter(
+            (name) =>
+              name !== APP_SHELL_CACHE &&
+              name !== FAQ_CACHE &&
+              name !== CACHE_NAME
+          )
+          .map((name) => caches.delete(name))
+      );
+    })
+  );
+  self.clients.claim();
+});
+
+// Fetch: network-first for API, cache-first for static
+self.addEventListener('fetch', (event) => {
+  const { request } = event;
+  const url = new URL(request.url);
+
+  // API calls: network-first
+  if (url.pathname.startsWith('/api/')) {
+    event.respondWith(
+      fetch(request)
+        .then((response) => {
+          // Cache successful GET responses
+          if (request.method === 'GET' && response.ok) {
+            const cloned = response.clone();
+            caches.open(CACHE_NAME).then((cache) => cache.put(request, cloned));
+          }
+          return response;
+        })
+        .catch(() => {
+          // Return cached version if network fails
+          return caches.match(request).then((cached) => {
+            if (cached) return cached;
+            return new Response(
+              JSON.stringify({
+                error: 'offline',
+                message: 'You are currently offline. Please try again when connected.',
+              }),
+              {
+                status: 503,
+                headers: { 'Content-Type': 'application/json' },
+              }
+            );
+          });
+        })
+    );
+    return;
+  }
+
+  // Static assets: cache-first
+  event.respondWith(
+    caches.match(request).then((cached) => {
+      if (cached) return cached;
+      return fetch(request).then((response) => {
+        if (response.ok && request.method === 'GET') {
+          const cloned = response.clone();
+          caches.open(CACHE_NAME).then((cache) => cache.put(request, cloned));
+        }
+        return response;
+      });
+    })
+  );
+});
diff --git a/scripts/deploy-hf.sh b/scripts/deploy-hf.sh
new file mode 100755
index 0000000000000000000000000000000000000000..c4b48ce6d05542d7ac4307c22d71975d5c4e1f5a
--- /dev/null
+++ b/scripts/deploy-hf.sh
@@ -0,0 +1,110 @@
+#!/bin/bash
+# ============================================================
+# deploy-hf.sh — Zero-duplication HuggingFace Space deployer
+#
+# Assembles a complete Next.js app from:
+#   web/                    → frontend (single source of truth)
+#   9-HuggingFace-Global/   → backend (API routes, DB, safety, RAG)
+#
+# Rewrites /api/proxy/ → /api/ and force-pushes to HF Space.
+#
+# Usage:
+#   HF_TOKEN=hf_xxx bash 9-HuggingFace-Global/scripts/deploy-hf.sh
+# ============================================================
+
+set -e
+
+REPO_ROOT="$(cd "$(dirname "$0")/../.." && pwd)"
+HF_DIR="$REPO_ROOT/9-HuggingFace-Global"
+WEB_DIR="$REPO_ROOT/web"
+BUILD_DIR="/tmp/medos-hf-deploy"
+
+if [ -z "$HF_TOKEN" ]; then
+  echo "ERROR: Set HF_TOKEN environment variable" && exit 1
+fi
+if [ ! -d "$WEB_DIR" ]; then
+  echo "ERROR: web/ not found at $WEB_DIR" && exit 1
+fi
+
+echo "[deploy] Assembling from web/ + 9-HuggingFace-Global/..."
+rm -rf "$BUILD_DIR" && mkdir -p "$BUILD_DIR"
+
+# --- Step 1: Start with HF backend as the base ---
+# This brings Dockerfile, package.json, next.config.js, tsconfig,
+# all /app/api routes, /app/admin, /app/symptoms, /app/stats,
+# lib/db, lib/safety, lib/rag, lib/providers, data/, public/, etc.
+cp -r "$HF_DIR/"* "$BUILD_DIR/"
+cp "$HF_DIR/.gitignore" "$BUILD_DIR/" 2>/dev/null || true
+cp "$HF_DIR/.env.example" "$BUILD_DIR/" 2>/dev/null || true
+rm -f "$BUILD_DIR/tsconfig.tsbuildinfo"
+
+# --- Step 2: Overlay web/ frontend (source of truth) ---
+# Components
+for dir in views chat ui; do
+  rm -rf "$BUILD_DIR/components/$dir"
+  mkdir -p "$BUILD_DIR/components/$dir"
+  cp -r "$WEB_DIR/components/$dir/"* "$BUILD_DIR/components/$dir/" 2>/dev/null || true
+done
+
+# Root components
+for f in MedOSApp.tsx ThemeProvider.tsx ThemeToggle.tsx WelcomeScreen.tsx; do
+  [ -f "$WEB_DIR/components/$f" ] && cp "$WEB_DIR/components/$f" "$BUILD_DIR/components/"
+done
+
+# Hooks. The list is explicit (not a wildcard) on purpose: HF has its
+# own backend-flavored hooks under 9-HuggingFace-Global/lib/hooks that
+# we DON'T want overwritten silently. When you add a new web/ hook
+# that MedOSApp imports, add it here too — otherwise the HF build
+# breaks with "Module not found: @/lib/hooks/<your-hook>".
+mkdir -p "$BUILD_DIR/lib/hooks"
+for f in \
+  useChat.ts \
+  useSettings.ts \
+  useAuth.ts \
+  useHealthStore.ts \
+  useNotifications.ts \
+  useGeoDetect.ts \
+  useMedicineScanner.ts \
+  usePasswordResetLink.ts \
+; do
+  [ -f "$WEB_DIR/lib/hooks/$f" ] && cp "$WEB_DIR/lib/hooks/$f" "$BUILD_DIR/lib/hooks/"
+done
+
+# Shared libs
+for f in health-store.ts i18n.ts types.ts utils.ts; do
+  [ -f "$WEB_DIR/lib/$f" ] && cp "$WEB_DIR/lib/$f" "$BUILD_DIR/lib/"
+done
+
+# Styles + config
+cp "$WEB_DIR/app/globals.css" "$BUILD_DIR/app/"
+cp "$WEB_DIR/app/layout.tsx" "$BUILD_DIR/app/"
+cp "$WEB_DIR/tailwind.config.ts" "$BUILD_DIR/"
+[ -f "$WEB_DIR/app/icon.svg" ] && cp "$WEB_DIR/app/icon.svg" "$BUILD_DIR/app/"
+[ -f "$WEB_DIR/app/manifest.ts" ] && cp "$WEB_DIR/app/manifest.ts" "$BUILD_DIR/app/"
+
+# Page shell
+cat > "$BUILD_DIR/app/page.tsx" << 'EOF'
+import MedOSApp from "@/components/MedOSApp";
+export default function HomePage() { return <MedOSApp />; }
+EOF
+
+# Remove Vercel-only proxy route if it leaked in
+rm -rf "$BUILD_DIR/app/api/proxy" 2>/dev/null || true
+
+# --- Step 3: Rewrite /api/proxy/ → /api/ ---
+echo "[deploy] Rewriting API paths..."
+find "$BUILD_DIR/lib/hooks" "$BUILD_DIR/components" \
+  \( -name "*.ts" -o -name "*.tsx" \) 2>/dev/null | while read f; do
+  sed -i 's|/api/proxy/|/api/|g' "$f"
+done
+
+# --- Step 4: Push to HuggingFace ---
+echo "[deploy] Pushing to HuggingFace Space..."
+cd "$BUILD_DIR"
+git init && git branch -M main
+git add -A
+git -c commit.gpgsign=false commit -m "Deploy: web/ frontend + HF backend (zero duplication)"
+git remote add hf "https://ruslanmv:${HF_TOKEN}@huggingface.co/spaces/ruslanmv/MediBot"
+git push hf main --force 2>&1 | tail -5
+
+echo "[deploy] ✓ Done — https://huggingface.co/spaces/ruslanmv/MediBot"
diff --git a/scripts/sync-frontend.sh b/scripts/sync-frontend.sh
new file mode 100755
index 0000000000000000000000000000000000000000..42c45eebeb66fd8cc93f11084309f68d777c3228
--- /dev/null
+++ b/scripts/sync-frontend.sh
@@ -0,0 +1,73 @@
+#!/bin/bash
+# ============================================================
+# sync-frontend.sh — Enterprise single-source-of-truth builder
+#
+# Copies web/ frontend into 9-HuggingFace-Global/ and rewrites
+# /api/proxy/* → /api/* for same-origin.
+#
+# Run this BEFORE deploying to HF Space:
+#   cd ai-medical-chatbot
+#   bash 9-HuggingFace-Global/scripts/sync-frontend.sh
+#   # then push 9-HuggingFace-Global/ to HF
+#
+# web/ is the SINGLE SOURCE OF TRUTH for all frontend code.
+# ============================================================
+
+set -e
+
+REPO_ROOT="$(cd "$(dirname "$0")/../.." && pwd)"
+HF_DIR="$REPO_ROOT/9-HuggingFace-Global"
+WEB_DIR="$REPO_ROOT/web"
+
+if [ ! -d "$WEB_DIR" ]; then
+  echo "[sync] ERROR: web/ not found at $WEB_DIR"
+  exit 1
+fi
+
+echo "[sync] Source: $WEB_DIR"
+echo "[sync] Target: $HF_DIR"
+
+# 1. Components
+rm -rf "$HF_DIR/components/views/"* "$HF_DIR/components/chat/"* "$HF_DIR/components/ui/"*
+mkdir -p "$HF_DIR/components/views" "$HF_DIR/components/chat" "$HF_DIR/components/ui"
+
+cp -r "$WEB_DIR/components/views/"* "$HF_DIR/components/views/"
+cp -r "$WEB_DIR/components/chat/"* "$HF_DIR/components/chat/"
+cp -r "$WEB_DIR/components/ui/"* "$HF_DIR/components/ui/"
+cp "$WEB_DIR/components/MedOSApp.tsx" "$HF_DIR/components/"
+cp "$WEB_DIR/components/ThemeProvider.tsx" "$HF_DIR/components/"
+cp "$WEB_DIR/components/ThemeToggle.tsx" "$HF_DIR/components/"
+cp "$WEB_DIR/components/WelcomeScreen.tsx" "$HF_DIR/components/" 2>/dev/null || true
+
+# 2. Hooks
+mkdir -p "$HF_DIR/lib/hooks"
+for f in useChat.ts useSettings.ts useAuth.ts useHealthStore.ts useNotifications.ts useGeoDetect.ts; do
+  cp "$WEB_DIR/lib/hooks/$f" "$HF_DIR/lib/hooks/" 2>/dev/null || true
+done
+
+# 3. Shared libs
+for f in health-store.ts i18n.ts types.ts utils.ts; do
+  cp "$WEB_DIR/lib/$f" "$HF_DIR/lib/" 2>/dev/null || true
+done
+
+# 4. Styles + config
+cp "$WEB_DIR/app/globals.css" "$HF_DIR/app/"
+cp "$WEB_DIR/tailwind.config.ts" "$HF_DIR/"
+cp "$WEB_DIR/app/icon.svg" "$HF_DIR/app/" 2>/dev/null || true
+cp "$WEB_DIR/app/manifest.ts" "$HF_DIR/app/" 2>/dev/null || true
+cp "$WEB_DIR/app/layout.tsx" "$HF_DIR/app/"
+
+# 5. Page shell
+cat > "$HF_DIR/app/page.tsx" << 'EOF'
+import MedOSApp from "@/components/MedOSApp";
+export default function HomePage() { return <MedOSApp />; }
+EOF
+
+# 6. Path rewrite: /api/proxy/* → /api/*
+echo "[sync] Rewriting API paths for same-origin..."
+find "$HF_DIR/lib/hooks" "$HF_DIR/components" -name "*.ts" -o -name "*.tsx" | while read f; do
+  sed -i 's|/api/proxy/|/api/|g' "$f"
+done
+
+VIEWS=$(ls "$HF_DIR/components/views/" | wc -l)
+echo "[sync] ✓ Done: $VIEWS views synced, API paths rewritten"
diff --git a/tailwind.config.ts b/tailwind.config.ts
new file mode 100644
index 0000000000000000000000000000000000000000..b9cbc9439266fe33cec710c0702018e946e610e3
--- /dev/null
+++ b/tailwind.config.ts
@@ -0,0 +1,156 @@
+import type { Config } from "tailwindcss";
+
+export default {
+  darkMode: "class",
+  content: [
+    "./app/**/*.{ts,tsx}",
+    "./components/**/*.{ts,tsx}",
+  ],
+  theme: {
+    extend: {
+      fontFamily: {
+        sans: [
+          "var(--font-sans)",
+          "Inter",
+          /* CJK (Chinese, Japanese, Korean) */
+          "Noto Sans CJK SC",
+          "PingFang SC",
+          "Hiragino Sans",
+          "Apple SD Gothic Neo",
+          "Malgun Gothic",
+          /* Arabic + Devanagari */
+          "Noto Sans Arabic",
+          "Noto Sans Devanagari",
+          /* System fallbacks */
+          "ui-sans-serif",
+          "system-ui",
+          "-apple-system",
+          "Segoe UI",
+          "Roboto",
+          "sans-serif",
+        ],
+        display: [
+          "var(--font-display)",
+          "Inter",
+          "ui-sans-serif",
+          "system-ui",
+          "sans-serif",
+        ],
+      },
+      colors: {
+        // Brand — clinical blue → calming teal
+        brand: {
+          50:  "#EFF6FF",
+          100: "#DBEAFE",
+          200: "#BFDBFE",
+          300: "#93C5FD",
+          400: "#60A5FA",
+          500: "#3B82F6", // primary
+          600: "#2563EB",
+          700: "#1D4ED8",
+          800: "#1E40AF",
+          900: "#1E3A8A",
+        },
+        accent: {
+          50:  "#F0FDFA",
+          100: "#CCFBF1",
+          200: "#99F6E4",
+          300: "#5EEAD4",
+          400: "#2DD4BF",
+          500: "#14B8A6", // teal
+          600: "#0D9488",
+          700: "#0F766E",
+        },
+        // Semantic
+        success: { 500: "#22C55E", 600: "#16A34A" },
+        warning: { 500: "#F59E0B", 600: "#D97706" },
+        danger:  { 500: "#EF4444", 600: "#DC2626" },
+        // Surface tiers (driven by CSS vars so they flip with dark mode)
+        surface: {
+          0:  "rgb(var(--surface-0) / <alpha-value>)",
+          1:  "rgb(var(--surface-1) / <alpha-value>)",
+          2:  "rgb(var(--surface-2) / <alpha-value>)",
+          3:  "rgb(var(--surface-3) / <alpha-value>)",
+        },
+        ink: {
+          base:    "rgb(var(--ink-base) / <alpha-value>)",
+          muted:   "rgb(var(--ink-muted) / <alpha-value>)",
+          subtle:  "rgb(var(--ink-subtle) / <alpha-value>)",
+          inverse: "rgb(var(--ink-inverse) / <alpha-value>)",
+        },
+        line: "rgb(var(--line) / <alpha-value>)",
+        slate: {
+          50:  "#F8FAFC",
+          100: "#F1F5F9",
+          200: "#E2E8F0",
+          300: "#CBD5E1",
+          400: "#94A3B8",
+          500: "#64748B",
+          600: "#475569",
+          700: "#334155",
+          800: "#1E293B",
+          900: "#0F172A",
+          950: "#0B1220",
+        },
+      },
+      backgroundImage: {
+        "brand-gradient":
+          "linear-gradient(135deg, #3B82F6 0%, #14B8A6 100%)",
+        "brand-gradient-soft":
+          "linear-gradient(135deg, rgba(59,130,246,0.12) 0%, rgba(20,184,166,0.12) 100%)",
+        "dark-app":
+          "radial-gradient(1200px 800px at 10% -10%, rgba(59,130,246,0.12), transparent 60%), radial-gradient(1000px 600px at 110% 10%, rgba(20,184,166,0.10), transparent 60%), linear-gradient(180deg, #0B1220 0%, #0E1627 100%)",
+        "light-app":
+          "radial-gradient(1200px 800px at 10% -10%, rgba(59,130,246,0.08), transparent 60%), radial-gradient(1000px 600px at 110% 10%, rgba(20,184,166,0.06), transparent 60%), linear-gradient(180deg, #F7F9FB 0%, #F1F5F9 100%)",
+      },
+      boxShadow: {
+        "soft":    "0 1px 2px rgba(15,23,42,0.04), 0 4px 16px rgba(15,23,42,0.06)",
+        "card":    "0 1px 3px rgba(15,23,42,0.06), 0 8px 24px rgba(15,23,42,0.08)",
+        "glow":    "0 0 0 1px rgba(59,130,246,0.24), 0 12px 40px -12px rgba(59,130,246,0.45)",
+        "danger-glow": "0 0 0 1px rgba(239,68,68,0.28), 0 8px 32px -8px rgba(239,68,68,0.55)",
+      },
+      animation: {
+        "bounce":       "bounce 1s infinite",
+        "fade-up":      "fadeUp 0.45s cubic-bezier(0.16, 1, 0.3, 1) both",
+        "fade-in":      "fadeIn 0.4s ease-out both",
+        "shimmer":      "shimmer 2.2s linear infinite",
+        "pulse-ring":   "pulseRing 1.8s cubic-bezier(0.4, 0, 0.6, 1) infinite",
+        "pulse-soft":   "pulseSoft 2.2s ease-in-out infinite",
+      },
+      keyframes: {
+        fadeUp: {
+          "0%":   { opacity: "0", transform: "translateY(12px)" },
+          "100%": { opacity: "1", transform: "translateY(0)" },
+        },
+        fadeIn: {
+          "0%":   { opacity: "0" },
+          "100%": { opacity: "1" },
+        },
+        shimmer: {
+          "0%":   { backgroundPosition: "-200% 0" },
+          "100%": { backgroundPosition: "200% 0" },
+        },
+        pulseRing: {
+          "0%":   { boxShadow: "0 0 0 0 rgba(239,68,68,0.55)" },
+          "70%":  { boxShadow: "0 0 0 14px rgba(239,68,68,0)" },
+          "100%": { boxShadow: "0 0 0 0 rgba(239,68,68,0)" },
+        },
+        pulseSoft: {
+          "0%, 100%": { opacity: "1" },
+          "50%":      { opacity: "0.7" },
+        },
+        bounce: {
+          "0%, 100%": {
+            transform: "translateY(-25%)",
+            animationTimingFunction: "cubic-bezier(0.8, 0, 1, 1)",
+          },
+          "50%": {
+            transform: "translateY(0)",
+            animationTimingFunction: "cubic-bezier(0, 0, 0.2, 1)",
+          },
+        },
+      },
+    },
+  },
+  plugins: [],
+} satisfies Config;
diff --git a/tsconfig.json b/tsconfig.json
new file mode 100644
index 0000000000000000000000000000000000000000..9f361a023f8ada51039c9316812d0361abad4483
--- /dev/null
+++ b/tsconfig.json
@@ -0,0 +1,23 @@
+{
+  "compilerOptions": {
+    "target": "es2017",
+    "lib": ["dom", "dom.iterable", "esnext"],
+    "allowJs": true,
+    "skipLibCheck": true,
+    "strict": true,
+    "noEmit": true,
+    "esModuleInterop": true,
+    "module": "esnext",
+    "moduleResolution": "bundler",
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "jsx": "preserve",
+    "incremental": true,
+    "plugins": [{ "name": "next" }],
+    "paths": {
+      "@/*": ["./*"]
+    }
+  },
+  "include": ["next-env.d.ts", "**/*.ts", "**/*.tsx", ".next/types/**/*.ts", "types/**/*.d.ts"],
+  "exclude": ["node_modules"]
+}
diff --git a/types/web-speech.d.ts b/types/web-speech.d.ts
new file mode 100644
index 0000000000000000000000000000000000000000..6bf2a3fa91330f43d2a0b1d95345f58964f0cb2d
--- /dev/null
+++ b/types/web-speech.d.ts
@@ -0,0 +1,48 @@
+/**
+ * Web Speech API type declarations.
+ * These are not included in the default TypeScript DOM lib.
+ */
+
+interface SpeechRecognitionEvent extends Event {
+  readonly results: SpeechRecognitionResultList;
+  readonly resultIndex: number;
+}
+
+interface SpeechRecognitionResultList {
+  readonly length: number;
+  item(index: number): SpeechRecognitionResult;
+  [index: number]: SpeechRecognitionResult;
+}
+
+interface SpeechRecognitionResult {
+  readonly length: number;
+  readonly isFinal: boolean;
+  item(index: number): SpeechRecognitionAlternative;
+  [index: number]: SpeechRecognitionAlternative;
+}
+
+interface SpeechRecognitionAlternative {
+  readonly transcript: string;
+  readonly confidence: number;
+}
+
+interface SpeechRecognition extends EventTarget {
+  continuous: boolean;
+  interimResults: boolean;
+  lang: string;
+  onresult: ((event: SpeechRecognitionEvent) => void) | null;
+  onend: (() => void) | null;
+  onerror: ((event: Event) => void) | null;
+  start(): void;
+  stop(): void;
+  abort(): void;
+}
+
+interface SpeechRecognitionConstructor {
+  new (): SpeechRecognition;
+}
+
+interface Window {
+  SpeechRecognition?: SpeechRecognitionConstructor;
+  webkitSpeechRecognition?: SpeechRecognitionConstructor;
+}