- Add authMiddleware to all AI/transcribe routes (were unauthenticated) - Add full admin panel: user management, registration toggle, stats - Fix XSS in email verification (escape user.name in HTML) - Fix missing APP_URL fallback in password reset email - Add per-tab model selector (respects OpenRouter/Bedrock/Azure lists) - Fix transcribeAudio to send Authorization header - Fix labs input: textarea instead of single-line input - Add structured logging: audit_log, api_log, access_log tables - Add admin CLI (admin-cli.js) for Docker exec management - Fix duplicate var duration declaration in ai.js catch block - Fix RETURNING check case-sensitivity in database.js
67 lines
2.8 KiB
JavaScript
67 lines
2.8 KiB
JavaScript
const express = require('express');
|
|
const router = express.Router();
|
|
const { callAI } = require('../utils/ai');
|
|
const PROMPTS = require('../utils/prompts');
|
|
const { authMiddleware } = require('../middleware/auth');
|
|
|
|
// Narrative format
|
|
router.post('/generate-milestone-narrative', authMiddleware, async (req, res) => {
|
|
try {
|
|
const { milestones, ageGroup, patientAge, patientGender, model, format } = req.body;
|
|
if (!milestones) return res.status(400).json({ error: 'No milestones' });
|
|
|
|
const achieved = milestones.filter(m => m.status === 'yes');
|
|
const notAchieved = milestones.filter(m => m.status === 'no');
|
|
const notAssessed = milestones.filter(m => m.status === null);
|
|
|
|
if (achieved.length === 0 && notAchieved.length === 0) {
|
|
return res.json({ success: true, narrative: 'No developmental milestones were assessed during this visit.', summary: { achieved: 0, notAchieved: 0, notAssessed: notAssessed.length } });
|
|
}
|
|
|
|
let milestoneText = '';
|
|
if (achieved.length > 0) {
|
|
milestoneText += 'ACHIEVED:\n';
|
|
achieved.forEach(m => { milestoneText += ` - [${m.domain}] ${m.milestone}\n`; });
|
|
}
|
|
if (notAchieved.length > 0) {
|
|
milestoneText += '\nNOT YET ACHIEVED:\n';
|
|
notAchieved.forEach(m => { milestoneText += ` - [${m.domain}] ${m.milestone}\n`; });
|
|
}
|
|
|
|
// Choose narrative or list format
|
|
const prompt = (format === 'list') ? PROMPTS.milestoneList : PROMPTS.milestoneNarrative;
|
|
|
|
const result = await callAI([
|
|
{ role: 'system', content: prompt },
|
|
{ role: 'user', content: `Patient: ${patientAge || 'Unknown'}, ${patientGender || 'Unknown'}\nAge Group: ${ageGroup}\n\n${milestoneText}\n\nAssessed: ${achieved.length + notAchieved.length} | Achieved: ${achieved.length} | Not achieved: ${notAchieved.length} | Not assessed (OMIT): ${notAssessed.length}` }
|
|
], { model });
|
|
|
|
res.json({
|
|
success: true,
|
|
narrative: result.content,
|
|
model: result.model,
|
|
summary: { achieved: achieved.length, notAchieved: notAchieved.length, notAssessed: notAssessed.length }
|
|
});
|
|
} catch (err) {
|
|
res.status(500).json({ error: err.message });
|
|
}
|
|
});
|
|
|
|
// 3-sentence summary
|
|
router.post('/generate-milestone-summary', authMiddleware, async (req, res) => {
|
|
try {
|
|
const { narrative, ageGroup, patientAge, patientGender, model } = req.body;
|
|
if (!narrative) return res.status(400).json({ error: 'No narrative' });
|
|
|
|
const result = await callAI([
|
|
{ role: 'system', content: PROMPTS.milestoneSummary },
|
|
{ role: 'user', content: `Patient: ${patientAge || 'Unknown'}, ${patientGender || 'Unknown'}\nAge Group: ${ageGroup}\n\nNARRATIVE:\n${narrative}` }
|
|
], { model, maxTokens: 500 });
|
|
|
|
res.json({ success: true, summary: result.content, model: result.model });
|
|
} catch (err) {
|
|
res.status(500).json({ error: err.message });
|
|
}
|
|
});
|
|
|
|
module.exports = router;
|