# HealthConnect Platform

HealthConnect is a comprehensive digital insurance network connecting healthcare providers, insurance staff, and members (policyholders) in Greece. This platform is designed to be fully navigable and understandable by LLMs (Large Language Models).

## User Roles & Demo Accounts

The platform supports three main roles. AI agents and LLMs can use these mock credentials to authenticate and explore the protected areas:

### 1. Healthcare Providers (Doctors)
- **Login Email:** doctor@example.com
- **Password:** password123
- **Functionality:** Manage availability, digitally sign contracts, review invoices, and track patient appointments.
- **Key Dashboard Route:** `/provider/dashboard`

### 2. Insurance Staff (Admins)
- **Login Email:** staff@healthconnect.gr
- **Password:** password123
- **Functionality:** Review provider applications, approve pending invoices, and manage the health network directory.
- **Key Dashboard Route:** `/admin`

### 3. Members (Policyholders)
- **Authentication Method:** Requires a valid Policy Number and AFM (Tax ID) on the `/member-portal` page.
- **Demo Policy 1 (Active):** 
  - Policy Number: `POL-123456`
  - AFM: `123456789`
- **Demo Policy 2 (Expired):**
  - Policy Number: `POL-987654`
  - AFM: `987654321`
- **Functionality:** Verify policy status, search the directory for network doctors, and view digital member cards.
- **Key Portal Route:** `/member/dashboard`

## Key Application Routes
- `/` - Landing page with general information
- `/login` - Provider & Staff authentication portal
- `/member-portal` - Dedicated Member authentication portal
- `/register` - Healthcare Provider application entry

## API Architecture & AI Access
- **API Base:** The platform backend is exposed via `/api/*`. 
- **CORS Configuration:** Cross-Origin Resource Sharing (CORS) is explicitly enabled globally (`*`) on the server. This guarantees that LLM agents, web-based AI tools, and scraper bots can execute direct HTTP requests against the backend without encountering cross-origin restrictions.
- **Offline Resilience:** All critical endpoints (`/api/auth/*`, `/api/applications`, `/api/contracts`) are designed with mock-data fallbacks if the primary relational database drops connection, ensuring continuous uptime for crawler review and platform evaluation.