Metadata-Version: 2.4
Name: healthcare-mcp
Version: 0.2.1
Summary: Local-first personal health management with evidence-linked records and scoped MCP tools
License: Apache-2.0
Requires-Python: >=3.11
Description-Content-Type: text/markdown
License-File: LICENSE
Requires-Dist: cryptography>=42
Requires-Dist: jsonschema>=4.0
Requires-Dist: mcp<2,>=1.26
Provides-Extra: mcp-legacy
Requires-Dist: mcp<2,>=1.26; extra == "mcp-legacy"
Provides-Extra: advisor
Requires-Dist: mcp<2,>=1.26; extra == "advisor"
Provides-Extra: mcp-v2
Requires-Dist: mcp==2.0.0; extra == "mcp-v2"
Dynamic: license-file

# healthCare

Local-first personal health management with evidence-linked records and scoped MCP tools.

All health data lives in an encrypted Vault (AES-GCM, passphrase-derived key) on the
user's own machine. Agents never touch the Vault directly: they connect to an
authenticated local IPC daemon over a unix socket with a paired-agent token that lives
only in the macOS Keychain. Every mutation is audit-chained; deletions keep a snapshot
behind an approval grant.

- **MCP tools (28)**: vitals, medications, activities, emotions, sleep, encounters,
  diagnosis mentions, medication plans, reminders, trend summaries, timelines,
  visit-summary preparation, source evidence — all scoped per person and per agent.
- **Zero network by default.** An optional, user-configured LLM endpoint
  (`HEALTHCARE_LLM_API_KEY` / `HEALTHCARE_LLM_ENDPOINT`) exists for assisted report
  import; it is off unless explicitly configured.
- **Zero-config Hermes mode**: `healthcare-hermes` bootstraps Vault, daemon and agent
  pairing automatically under `HEALTHCARE_HOME` (the Hermes plugin data directory),
  then serves stdio MCP.
- macOS only (agent pairing uses the macOS Keychain). Python ≥ 3.11.

## Quick start (Hermes plugin)

Install the `healthcare` Hermes plugin — no manual setup needed. Or standalone:

```sh
uvx --from healthCare==0.2.0 healthcare-hermes
```

State layout under `HEALTHCARE_HOME` (default `~/.local/share/healthcare`):

| Path | What |
| --- | --- |
| `family.vault` | encrypted Vault (AES-GCM) |
| `.vault-passphrase` | generated random passphrase, 0600 |
| `daemon.sock` | local IPC socket |
| `agent.json` | non-secret pairing profile (agent_id / host_id / person_id) |

The agent token never touches disk — macOS Keychain only.

## CLI (operator use)

`healthcare init / record-vital / record-medication / record-activity / record-sleep /
record-emotion / record-encounter / record-diagnosis-mention / create-medication-plan /
create-reminder / edit-record / delete-record / export / backup / restore / daemon /
pair-agent / grant-consent / verify-audit …` — see `healthcare --help`.

## License

Apache-2.0. This repository is the public engine extract of a private monorepo;
`src/` and `tests/` are carried over unchanged.
