7 commits

Author	SHA1	Message	Date
Daniel	46112e1221	feat: connect Nextcloud by signing in to Nextcloud ... Asking someone to find Settings → Security → Create new app password is a poor first run, and it is the step people give up on. Nextcloud has its own answer: Login Flow v2. The person enters their server address, signs in on Nextcloud the way they normally do — SSO, 2FA, a password manager — and Nextcloud generates an app password for this app. We never see their real password. Pasting an app password still works, behind "Use an app password instead". It is the fallback, not the front door. The security of this is all in what is trusted. The remote server chooses both the login URL and the poll endpoint, so both are SSRF-checked and both must be on the host the person actually typed — an endpoint pointing elsewhere would make this a request-forgery gadget aimed at whatever it named. The server Nextcloud reports at the end is re-checked before it is stored. The poll token is a credential, so polling happens server-side and the browser holds only an opaque handle bound to its own account. Flows live in memory with a 20 minute life, matching Nextcloud's own expiry: a login lasts minutes, and a restart mid-flow is a retry rather than a loss. Starting a second flow replaces the first, which is what clicking again means. The tab is opened from the click itself, before the request — opening it after an await is what a popup blocker stops. Removed with Learning Hub: the WebDAV browse path. Its field, its route and its column are gone, since nothing browses Nextcloud any more. nextcloud_folder is a different column and still in use. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Dv6sqaY6Vq3ChZHMem3cnU	2026-09-12 20:55:00 +02:00
Daniel	025290d64a	feat: retire Learning Hub ... My Resources generates better slides than Learning Hub ever did — a typed deck the model fills in, rendered by python-pptx with fit-to-slide text, figures, a vision review and themes, against Learning Hub's markdown-through-pandoc — and the articles and quizzes now live in the quiz app. Keeping a second, weaker generator and a whole CMS beside it was not earning its maintenance. Removed: three routers, the Learning Hub and Content Manager tabs, their components and frontend modules, the five database tables, the WebDAV browser, the content embedding column and its vector index. Content was exported first — every article as markdown plus a full SQL dump of all five tables — to ops-backups/learning-hub-export-*. That export is the restore path; the migration's down() can recreate the shape but never the rows, and says so. Two things this simplifies rather than merely deletes: generated_image_links existed only to record which published content an image appeared in, and it was the sole reason a generated image could be read by someone who did not make it. Images are now owner-only — the visibility rule is one WHERE clause instead of a join across two tables and a published flag. embeddings.js keeps the model discovery the admin panel uses and loses searchSimilar and generateContentEmbedding, which queried a table that no longer exists. Kept deliberately: Nextcloud connect, disconnect and export, which are how a generated note reaches a real filesystem and have nothing to do with Learning Hub; learningRetrieval, which despite its name is the clinical corpus search My Resources depends on; and the pandoc reference deck, still the fallback when the python renderer fails, moved from assets/learning to assets/deck now that the old name misleads. Tests: four Learning-Hub-only files removed, and the individual cases inside shared files that asserted its behaviour. Where a test used a Learning endpoint only as a convenient example — the account-boundary token test, the policy matrix — it now uses one that still exists, so the property it proves is unchanged. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Dv6sqaY6Vq3ChZHMem3cnU	2026-09-12 20:14:20 +02:00
Daniel	67e416c6d9	docs: merge the duplicate pairs and correct them against the running app ... Three pairs of docs described the same thing twice, and the copies had drifted apart. Merged each into one file, keeping the unique content from both: - ARCHITECTURE.md -> architecture.md (its operational map: ownership, request flow, runtime boundaries, source of truth, deployment shape) - DEVELOPMENT.md -> developer-guide.md (change workflow, Clinical Assistant high-risk areas, frontend rendering rules, deployment checks) - transcription-options.md -> speech.md (the clinic setup table, and the list of browser-Whisper paths that must stay removed) Then audited what remained against the code and the live database rather than against the previous docs. Corrected: - Google Vertex was still documented as a provider across nine files. The SDK is gone; AI_PROVIDER=vertex now logs an advisory and falls back to OpenRouter, and Gemini is reached through LiteLLM. Fixed the provider selection order to match src/utils/ai.js, which starts from LITELLM_API_BASE. - promptSafe was documented on 8 routes; it is on 13. - Node 20 -> 24, "24 vanilla JS modules" -> no fixed count, and transcribe.js/tts.js -> sttProvider.js/ttsProvider.js, which is what exists. - STT/TTS are LiteLLM-only; README listed direct Google, AWS Transcribe and ElevenLabs paths that are not in the runtime. - Learning Hub PPTX export was documented as pptxgenjs, which is not a dependency. It is pandoc against a reference deck. - POST /api/admin/milestones/seed does not exist; it is /bulk-import. - NEXTCLOUD_URL and NTFY_TOPIC are not read anywhere. Nextcloud is per-user in the users table, and the ntfy topic is derived as pedscribe-{userId}. - A prose paragraph sat inside the Clinical Assistant settings table, so half the rows rendered as text. Filled the gaps the audit exposed: - database.md was missing 12 of 29 tables, including user_resources, personal_notes, login_codes, registration_invites and generated_image_jobs. - developer-guide.md was missing 11 routers and 10 frontend modules. - api-reference.md detailed 121 of 244 endpoints and said so, but whole features were absent. Added an endpoint index covering Clinical Assistant, My Resources, Notes, Diagrams, ED Encounters, invites and sign-in codes. - configuration.md was missing METRICS_TOKEN, REDIS_URL, API_RATE_LIMIT_MAX, the LITELLM_* model variables, the DB_* ones maintenance.js reads, and the per-purpose S3 resolution scheme. - clinical-assistant.md documented 2 of its 17 environment variables. - features-explained.md had no entry for My Resources or Clinical Assistant. Renamed the three remaining SHOUTING filenames to kebab-case, which is what the docs viewer's prettyName() was working around, and rewrote README's index, which listed architecture.md twice and omitted nine files. Noted but not changed: the Turnstile site key is hardcoded in index.html rather than read from TURNSTILE_SITE_KEY, and /api/health/detailed can report tts: 'elevenlabs' though no ElevenLabs path exists. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Dv6sqaY6Vq3ChZHMem3cnU	2026-09-12 04:57:35 +02:00
Daniel	1b3ea569b7	simplify speech and embeddings through litellm	2026-05-09 05:09:02 +02:00
Daniel	416fff624a	feat: add patient education handouts	2026-05-08 22:26:53 +02:00
Daniel	a08524d95f	harden logging and observability	2026-05-08 19:08:19 +02:00
Daniel	b53aa34248	feat: ED multi-stage UX, extensions polish, docs viewer + application-logic docs ... Three concurrent themes from this session: ═══════════════════════════════════════════════════════════════════ ED ENCOUNTERS — per-stage cards + consolidate→MDM finalize ═══════════════════════════════════════════════════════════════════ UX redesign per Daniel's feedback ("every stage note should be shown, if AI is told to modify that particular note then the modified version is used in final mdm"): - Each generated stage stays on screen as its own editable card with its own embedded "Don't Miss" panel. No more single rolling note element that gets replaced on each generation. - gatherCurrentNotes() reads contenteditable text from each stage card before any operation (advance, finalize, persist) so inline edits flow into the next AI call and the final consolidate. - Stage badge is now state-accurate. "Stage N (recording)" with yellow background after Add-more before generation; "Stage N" with gray after generation. Fixes the bug where the badge flipped to Stage 2 the moment Add-more was clicked. - Save & Done now runs TWO server-side AI calls in /finalize: 1. edConsolidate (new prompt) → polished single final note that integrates every stage chronologically (HPI / ROS / PE / ED Course / A&P with disposition). 2. edFinalize (rewritten with full inline 2023 AMA E/M element rubric — problems / data / risk definitions, level mapping with concrete examples) → MDM JSON. - Two new cards render after finalize: blue-bordered Final Consolidated Note + green-bordered MDM. Stage cards become read-only. - partial_data on the saved row now stores {stages, finalNote, mdm, finalized} so resume re-renders the full state. Why two-call finalize: a single combined prompt makes the model cut corners on one task. Two focused calls cost ~2× latency at the very end of an encounter — acceptable since finalize is a one-time terminal action, not a per-stage hot path. Files: public/components/ed-encounter.html, public/js/ed-encounters.js, src/routes/edEncounters.js, src/utils/prompts.js (edConsolidate added, edFinalize rewritten). ═══════════════════════════════════════════════════════════════════ EXTENSIONS / PAGERS — visual polish ═══════════════════════════════════════════════════════════════════ Multiple iterations based on Daniel's feedback: - Layout: align-items:flex-start so action buttons stay pinned top-right when long numbers wrap (was align-items:center → buttons drifted into the text area, causing visible overlap). - Number: word-break:break-all + min-width:0 + font-feature-settings:tnum so long numbers wrap within their column instead of pushing under the buttons. Click-to-copy with a 0.55s green flash + ✓ copied badge. - Phone/pager Font Awesome icon next to the number in the type color — at-a-glance type signal (replacing an earlier 3px left stripe that Daniel found visually bulky). - Name: font-weight 700, font-size 14.5px, color g900, letter-spacing -0.012em — scan-target headline typography for long lists. - Alternating subtle backgrounds by index (white vs #fafbfc) so a long list reads as distinct rows. - Hover: card lifts 1px with a soft shadow; action buttons fade from 55% to 100% opacity. Cubic-bezier transition on transform. - Entrance: staggered fade-up animation per card (35ms × index, capped at 12). prefers-reduced-motion media query disables motion. - Empty state: 48px FA icon + heading instead of plain gray text. Files: public/js/extensions.js, public/css/styles.css. ═══════════════════════════════════════════════════════════════════ DOCS REORGANIZATION + APPLICATION-LOGIC DOCS + ADMIN VIEWER ═══════════════════════════════════════════════════════════════════ Document moves (preserving git history via git mv): BROWSER_WHISPER_SETUP.md → docs/browser-whisper-setup.md BROWSER_WHISPER_TROUBLESHOOTING.md → docs/browser-whisper-troubleshooting.md DEVELOPER_GUIDE.md → docs/developer-guide-extended.md EMBEDDINGS_SETUP.md → docs/embeddings-setup.md FEATURES_EXPLAINED.md → docs/features-explained.md IMPROVEMENTS.md → docs/improvements.md OPENID_SETUP.md → docs/openid-setup.md TRANSCRIPTION_OPTIONS.md → docs/transcription-options.md README.md updated with the new paths + a Documentation section that links to docs/logic/ at the top. New application-logic doc series (~8,300 lines total) at docs/logic/. Built with 5 parallel doc-writing agents per Daniel's "use multiple agents" directive. Each doc explains how a part of the app actually works — application logic, data flow, design decisions, sacred zones, how-to-extend recipes — at a depth that lets a new dev (or an AI assistant) modify the code confidently. docs/logic/README.md — index + recommended reading order docs/logic/architecture.md (2166 L) — frontend IIFE pattern, lazy tab load, backend route convention, schema, encryption, deployment docs/logic/clinical-notes.md (1546L) — every note tab + helper trio docs/logic/bedside-and-calculators.md (1373L) — bedside ES module pocket + calculators + PE Guide + suture selector docs/logic/auth-admin-learning.md (1281L) — auth (local+OIDC+2FA) + admin panel + Learning Hub (Quiz engine logic at sub-detail only — TODO follow-up) docs/logic/ai-and-voice.md (1128 L) — callAI 5-provider routing, prompts, voice/STT, helper trio docs/logic/ed-encounters.md (821 L) — multi-stage ED + MDM (this session's worked example) Admin-only docs viewer: - New route /api/admin/docs/{tree,file}: recursively walks docs/, returns the tree as JSON; /file?path=X validates path stays inside docs/ and renders markdown via marked. Both gated by req.user.role==='admin'. - New tab "Docs" (book icon) in the sidebar, hidden by default and revealed in auth.js when user.role==='admin' (same pattern as the existing Admin and CMS tabs). - New component public/components/admin-docs.html: split-pane layout with a tree sidebar + filter input + a markdown reader pane. - New module public/js/admin-docs.js: lazy-loads the tree on first tab activation, renders collapsible folders, persists expanded state and last-opened path via UIState. Server-rendered HTML so no client markdown parser needed. - CSS for the viewer (responsive split-pane, code-block styling, table scrolling, etc.). - Mounted at /api/admin/docs (NOT /api) — important: mounting a router with router.use(authMiddleware) at /api accidentally 401s every other /api/* path (caught and fixed during testing — /api/health was 401'ing). Files: docs/* (moved + new), README.md, public/components/admin-docs.html (new), public/js/admin-docs.js (new), src/routes/adminDocs.js (new), public/index.html (tab + section + script), public/js/auth.js (admin gate + logout cleanup), public/css/styles.css (viewer styles), server.js (mount). ═══════════════════════════════════════════════════════════════════ KNOWN GAPS (TODO follow-ups) ═══════════════════════════════════════════════════════════════════ - Learning Hub quiz engine (MCQ / multi-select / T-F scoring + attempt tracking + progress dashboard) is covered at the architectural level in docs/logic/auth-admin-learning.md but not drilled into the quiz data model and scoring flow. Worth a focused follow-up doc. - ED finalize: if MDM step JSON parse fails, server returns 502 with the consolidated finalNote in the error payload, but client doesn't surface the partial result. Add a "MDM failed, retry" affordance. - No e2e Playwright coverage for ED encounters or the new docs viewer.	2026-04-28 03:09:38 +02:00

Renamed from FEATURES_EXPLAINED.md (Browse further)