Integrate intakeScribe

# 1. Define a template (once)
curl -X POST https://intakescribe-api-production.up.railway.app/templates \
  -H "X-API-Key: $INTAKESCRIBE_KEY" -H "Content-Type: application/json" \
  -d '{ "name": "New Patient Intake",
        "fields": [
          { "id": "full_name", "prompt": "the patient's full name", "type": "text" },
          { "id": "dob", "prompt": "date of birth", "type": "date" },
          { "id": "reason", "prompt": "reason for visit", "type": "text" } ] }'

# 2. Start a session
curl -X POST https://intakescribe-api-production.up.railway.app/sessions \
  -H "X-API-Key: $INTAKESCRIBE_KEY" -H "Content-Type: application/json" \
  -d '{ "template_id": "tmpl_..." }'

# 3. Send a turn (repeat until completed)
curl -X POST https://intakescribe-api-production.up.railway.app/sessions/SESSION_ID/turn \
  -H "X-API-Key: $INTAKESCRIBE_KEY" -H "Content-Type: application/json" \
  -d '{ "message": "Jane Doe" }'

# 4. Fetch the completed intake
curl https://intakescribe-api-production.up.railway.app/intakes/INTAKE_ID -H "X-API-Key: $INTAKESCRIBE_KEY"

# (npm package "@intakescribe/sdk" coming soon — not on npm yet)
# Build the SDK from the repo and link it locally:
git clone https://github.com/Abhisg5/intakeScribe.git
cd intakeScribe/sdk
npm install && npm run build
npm link          # then `npm link @intakescribe/sdk` in your project

# Prefer zero dependencies? Skip the SDK and call the REST API with fetch
# (see the REST API quickstart above).

import { createClient } from "@intakescribe/sdk";

const client = createClient({
  publishableKey: "pk_live_...",          // browser-safe; origin-restricted
  baseUrl: "https://intakescribe-api-production.up.railway.app",
});

// Start a session — returns the first question
const session = await client.startSession("tmpl_...");
console.log(session.message);

// Send answers turn by turn until the intake is complete
let result = await client.sendTurn(session.session_id, "Jane Doe");
while (!result.completed) {
  const userInput = await yourUI.prompt(result.message);
  result = await client.sendTurn(session.session_id, userInput);
}
// Done. On the publishable (browser) path the completed record is NOT returned
// here for PHI safety — result.intake_id is undefined. Receive the finished
// intake on your server via the completion webhook, or fetch it with your
// secret key. (The server/secret-key path does return result.intake_id.)

// Or stream the bot reply token by token:
await client.streamTurn(session.session_id, "Jane Doe", (delta) => {
  appendToChat(delta);
});

import { createClient } from "@intakescribe/sdk";

const client = createClient({
  secretKey: process.env.INTAKESCRIBE_KEY,   // isk_... — server-side only
  baseUrl: "https://intakescribe-api-production.up.railway.app",
});

// Same API surface as the browser client
const session = await client.startSession("tmpl_...");
const result  = await client.sendTurn(session.session_id, "Jane Doe");
// On the secret-key path, result.intake_id is populated once completed —
// fetch the structured record with GET /intakes/:id.

<!-- Drop this anywhere in your page -->
<script
  src="https://intakescribe.abhix-ai.com/widget/v1.js"
  data-pk="pk_live_..."
  data-template="tmpl_...">
</script>

<!-- Inline (embedded in a container instead of a floating bubble): -->
<div id="intake-widget"></div>
<script
  src="https://intakescribe.abhix-ai.com/widget/v1.js"
  data-pk="pk_live_..."
  data-template="tmpl_..."
  data-target="#intake-widget">
</script>

<!-- Enable voice mode by default: -->
<script
  src="https://intakescribe.abhix-ai.com/widget/v1.js"
  data-pk="pk_live_..."
  data-template="tmpl_..."
  data-voice="1">
</script>

https://intakescribe.abhix-ai.com/i/<your-slug>

<!-- Widget with voice enabled by default -->
<script
  src="https://intakescribe.abhix-ai.com/widget/v1.js"
  data-pk="pk_live_..."
  data-template="tmpl_..."
  data-voice="1">
</script>

# (PyPI release coming soon.) Install directly from the repo:
pip install "intakescribe-mcp @ git+https://github.com/Abhisg5/intakeScribe.git#subdirectory=mcp"

# Or, from a local checkout of the mcp/ directory:
#   pip install -e .
# Either way you get the `intakescribe-mcp` console command (used in the config below).

{
  "mcpServers": {
    "intakescribe": {
      "command": "intakescribe-mcp",
      "env": {
        "INTAKESCRIBE_API_KEY": "isk_live_...",
        "INTAKESCRIBE_API_URL": "https://intakescribe-api-production.up.railway.app"
      }
    }
  }
}

POST https://intakescribe-api-production.up.railway.app/sessions/SESSION_ID/turn/stream
→ Content-Type: text/event-stream

event: message
data: {"delta": "What is "}

event: message
data: {"delta": "your date of birth?"}

event: done
data: {"session_id": "...", "status": "in_progress", "completed": false, "intake_id": null}

import crypto from "node:crypto";

function verify(rawBody, signature, secret) {
  const expected =
    "sha256=" + crypto.createHmac("sha256", secret).update(rawBody).digest("hex");
  return crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(signature));
}

// Express handler (use the RAW body, not the parsed JSON):
app.post("/hook", express.raw({ type: "*/*" }), (req, res) => {
  const sig = req.header("X-IntakeScribe-Signature");
  if (!verify(req.body, sig, process.env.WEBHOOK_SECRET)) return res.status(401).end();
  const event = JSON.parse(req.body.toString());
  // event.payload is the completed intake
  res.json({ ok: true });
});

import hmac, hashlib

def verify(raw_body: bytes, signature: str, secret: str) -> bool:
    expected = "sha256=" + hmac.new(secret.encode(), raw_body, hashlib.sha256).hexdigest()
    return hmac.compare_digest(expected, signature)

# FastAPI:
@app.post("/hook")
async def hook(request: Request):
    raw = await request.body()
    sig = request.headers.get("X-IntakeScribe-Signature", "")
    if not verify(raw, sig, WEBHOOK_SECRET):
        raise HTTPException(401)
    event = json.loads(raw)  # event["payload"] = completed intake
    return {"ok": True}