Fixed hardcoded workspace paths and disabled Streamlit CORS/XSRF for HF iframe support

backend/api/claims_router.py

@@ -22,7 +22,9 @@ router = APIRouter(prefix="/api")
 policy_service = PolicyService()
 
 # Uploads directory
-UPLOAD_DIR = "c:/Users/swastik/Desktop/plum/uploads"
+CURRENT_DIR = os.path.dirname(os.path.abspath(__file__))
+WORKSPACE_ROOT = os.path.abspath(os.path.join(CURRENT_DIR, "..", ".."))
+UPLOAD_DIR = os.path.join(WORKSPACE_ROOT, "uploads")
 os.makedirs(UPLOAD_DIR, exist_ok=True)
 
 @router.post("/seed", status_code=200)

backend/services/policy_service.py

@@ -14,7 +14,10 @@ logging.basicConfig(level=logging.INFO)
 logger = logging.getLogger(__name__)
 
 class PolicyService:
-    def __init__(self, workspace_root: str = "c:/Users/swastik/Desktop/plum"):
+    def __init__(self, workspace_root: str = None):
+        if not workspace_root:
+            current_dir = os.path.dirname(os.path.abspath(__file__))
+            workspace_root = os.path.abspath(os.path.join(current_dir, "..", ".."))
         self.workspace_root = workspace_root
         self.policy_terms_path = os.path.join(workspace_root, "policy_terms.json")
         self.adjudication_rules_path = os.path.join(workspace_root, "adjudication_rules.md")

backend/tests/test_adjudication.py

@@ -11,8 +11,11 @@ from backend.repositories import claim_repository, member_repository
 from backend.services.policy_service import PolicyService
 from backend.services.confidence_calculator import evaluate_confidence
 
+CURRENT_DIR = os.path.dirname(os.path.abspath(__file__))
+WORKSPACE_ROOT = os.path.abspath(os.path.join(CURRENT_DIR, "..", ".."))
+
 # Use a separate test SQLite database
-TEST_DB_URL = "sqlite:///c:/Users/swastik/Desktop/plum/backend/database/test_plum.db"
+TEST_DB_URL = f"sqlite:///{os.path.join(WORKSPACE_ROOT, 'backend', 'database', 'test_plum.db')}"
 
 @pytest.fixture(scope="module")
 def test_db():
@@ -49,18 +52,19 @@ def test_db():
         db.close()
         Base.metadata.drop_all(bind=engine)
         engine.dispose()
-        if os.path.exists("c:/Users/swastik/Desktop/plum/backend/database/test_plum.db"):
+        test_db_file = os.path.join(WORKSPACE_ROOT, 'backend', 'database', 'test_plum.db')
+        if os.path.exists(test_db_file):
             try:
-                os.remove("c:/Users/swastik/Desktop/plum/backend/database/test_plum.db")
+                os.remove(test_db_file)
             except Exception:
                 pass
 
 @pytest.fixture(scope="module")
 def policy_service():
-    return PolicyService(workspace_root="c:/Users/swastik/Desktop/plum")
+    return PolicyService(workspace_root=WORKSPACE_ROOT)
 
 def load_test_cases():
-    test_cases_path = "c:/Users/swastik/Desktop/plum/test_cases.json"
+    test_cases_path = os.path.join(WORKSPACE_ROOT, "test_cases.json")
     with open(test_cases_path, "r", encoding="utf-8") as f:
         return json.load(f).get("test_cases", [])
 

backend/utils/mock_doc_generator.py

@@ -11,7 +11,9 @@ from reportlab.lib.units import inch
 logging.basicConfig(level=logging.INFO)
 logger = logging.getLogger(__name__)
 
-TEST_DATA_DIR = "c:/Users/swastik/Desktop/plum/test_data"
+CURRENT_DIR = os.path.dirname(os.path.abspath(__file__))
+WORKSPACE_ROOT = os.path.abspath(os.path.join(CURRENT_DIR, "..", ".."))
+TEST_DATA_DIR = os.path.join(WORKSPACE_ROOT, "test_data")
 os.makedirs(TEST_DATA_DIR, exist_ok=True)
 
 def generate_prescription_pdf(case_id: str, patient_name: str, date_str: str, rx_data: dict, output_path: str):
@@ -290,7 +292,7 @@ def generate_bill_pdf(case_id: str, patient_name: str, date_str: str, bill_data:
 
 def generate_all_mock_documents():
     """Reads test_cases.json and creates mock files for all cases in workspace."""
-    test_cases_path = "c:/Users/swastik/Desktop/plum/test_cases.json"
+    test_cases_path = os.path.join(WORKSPACE_ROOT, "test_cases.json")
     if not os.path.exists(test_cases_path):
         logger.error(f"Cannot generate mock documents - test_cases.json not found at {test_cases_path}")
         return

start.sh

@@ -11,5 +11,5 @@ sleep 3
 TARGET_PORT=${PORT:-7860}
 echo "Starting Streamlit frontend on port $TARGET_PORT..."
 
-# Run Streamlit in the foreground
-streamlit run frontend/streamlit_app.py --server.port $TARGET_PORT --server.address 0.0.0.0
+# Run Streamlit in the foreground with CORS and XSRF disabled for iframe hosting
+streamlit run frontend/streamlit_app.py --server.port $TARGET_PORT --server.address 0.0.0.0 --server.enableCORS=false --server.enableXsrfProtection=false