Update app.py

app.py

@@ -273,6 +273,91 @@ Return ONLY valid JSON with keys: assistant_reply, patientDetails, conversationS
 
     return jsonify(response_payload)
 
+@app.route("/upload_reports", methods=["POST"])
+def upload_reports():
+    """
+    Upload one or more files for a patient.
+
+    Expects multipart/form-data with:
+      - patient_id (form field)
+      - files (one or multiple files; use the same field name 'files' for each file)
+
+    Example curl:
+    curl -X POST http://localhost:7860/upload_reports \
+      -F "patient_id=12345" \
+      -F "files[]=@/path/to/report1.pdf" \
+      -F "files[]=@/path/to/report2.pdf"
+    """
+    try:
+        # patient id can be in form or args (for convenience)
+        patient_id = request.form.get("patient_id") or request.args.get("patient_id")
+        if not patient_id:
+            return jsonify({"error": "patient_id form field required"}), 400
+
+        # get uploaded files (support both files and files[] naming)
+        uploaded_files = request.files.getlist("files")
+        if not uploaded_files:
+            # fallback: single file under name 'file'
+            single = request.files.get("file")
+            if single:
+                uploaded_files = [single]
+
+        if not uploaded_files:
+            return jsonify({"error": "no files uploaded (use form field 'files')"}), 400
+
+        # create patient folder under REPORTS_ROOT/<patient_id>
+        patient_folder = REPORTS_ROOT / str(patient_id)
+        patient_folder.mkdir(parents=True, exist_ok=True)
+
+        saved = []
+        skipped = []
+
+        for file_storage in uploaded_files:
+            orig_name = getattr(file_storage, "filename", "") or ""
+            filename = secure_filename(orig_name)
+            if not filename:
+                skipped.append({"filename": orig_name, "reason": "invalid filename"})
+                continue
+
+            # extension check
+            ext = filename.rsplit(".", 1)[1].lower() if "." in filename else ""
+            if ext not in ALLOWED_EXTENSIONS:
+                skipped.append({"filename": filename, "reason": f"extension '{ext}' not allowed"})
+                continue
+
+            # avoid overwriting: if collision, add numeric suffix
+            dest = patient_folder / filename
+            if dest.exists():
+                base, dot, extension = filename.rpartition(".")
+                # if no base (e.g. ".bashrc") fallback
+                base = base or filename
+                i = 1
+                while True:
+                    candidate = f"{base}__{i}.{extension}" if extension else f"{base}__{i}"
+                    dest = patient_folder / candidate
+                    if not dest.exists():
+                        filename = candidate
+                        break
+                    i += 1
+
+            try:
+                file_storage.save(str(dest))
+                saved.append(filename)
+            except Exception as e:
+                logger.exception("Failed to save uploaded file %s: %s", filename, e)
+                skipped.append({"filename": filename, "reason": f"save failed: {e}"})
+
+        return jsonify({
+            "patient_id": str(patient_id),
+            "saved": saved,
+            "skipped": skipped,
+            "patient_folder": str(patient_folder)
+        }), 200
+
+    except Exception as exc:
+        logger.exception("Upload failed: %s", exc)
+        return jsonify({"error": "upload failed", "detail": str(exc)}), 500
+
 @app.route("/ping", methods=["GET"])
 def ping():
     return jsonify({"status": "ok"})