# INFRASI HealthOps Platform
> Enterprise Multi-Tenant Healthcare Infrastructure Command & Clinical IoT Intelligence System.

INFRASI HealthOps is a unified operational platform designed for hospital healthcare facilities, biomedical engineering, and critical clinical IoT device fleets. It delivers real-time asset telemetry, automated CMMS work order generation, uninterruptible power supply (UPS) monitoring, cellular failover orchestration, and role-based access control (RBAC).

## Core Capabilities & Subsystems
- **Clinical IoT Fleet Telemetry**: Real-time operational monitoring, battery health, RSSI signal strength, firmware versioning, and floor location tracking for patient monitors, infusion pumps, neonatal incubators, and smart beds.
- **Emergency Power & Smart PDU Control**: Continuous AC load monitoring, battery degradation tracking, runtime autonomy estimation, and remote switched PDU power-cycling.
- **5G Network Failover Orchestration**: Continuous primary WAN link health checks, sub-second cellular failover to FirstNet Band 14, and remote diagnostics (speed test, latency telemetry, packet loss auditing).
- **Maintastic CMMS Automation**: Automated anomaly-to-work-order translation with priority assignment, SLA countdowns, technician dispatch, and timestamped audit logs.
- **Enterprise Security & RBAC**: Domain-enforced Google authentication limited strictly to `@infrasi.com` accounts, governing 5 operational roles (Super Admin, BioMed Lead, Power Specialist, Network Admin, Clinical Auditor).

## Primary HTTP Endpoints for LLM & Autonomous Agents
- `GET /api/tenants` - List active hospital tenant environments (St. Jude Children's, Mayo Clinic, Johns Hopkins).
- `GET /api/devices` - Retrieve complete clinical IoT inventory with live vitals and telemetry.
- `GET /api/auth/session` - Check current operator authentication state, domain verification, and RBAC permissions.
- `GET /api/llm-info` - Machine-readable JSON summary of system architecture, active entities, and compliance policies.
- `POST /api/ai/diagnose` - Submit an incident payload for Gemini-powered root cause analysis and prescriptive remediation steps.
- `POST /api/actions/pdu-outlet` - Power-cycle or toggle a switched PDU outlet (requires Super Admin or Power Specialist).
- `POST /api/actions/router-command` - Run network diagnostics or simulate cellular failover (requires Super Admin or Network Admin).

## Data Models & Entity Schemas
- **IoTDevice**: `{ id, name, type, tenantId, status, batteryLevel, signalDbm, location: { building, floor, room, wing }, metrics, telemetryHistory, lastCalibration }`
- **CyberPowerUPS**: `{ id, model, tenantId, status, batteryPct, loadPct, runtimeMinutes, temperatureC, outlets: [{ id, name, state, priority }] }`
- **CradlepointRouter**: `{ id, model, tenantId, status, primaryWan, cellular: { carrier, signalDbm, snrDb, modemState, band }, lanClients }`
- **MaintasticWorkOrder**: `{ id, tenantId, title, description, category, priority, status, slaDeadline, linkedAsset, assignedTechnician, workLogs }`

## Regulatory & Standards Compliance
- **HIPAA Privacy & Security Rules**: Audit logs maintained for all telemetry queries and remote device operations.
- **IEC 60601-1**: Biomedical electrical isolation and safety protocols.
- **FDA 21 CFR Part 11**: Cryptographic integrity and immutable audit trails for maintenance logs.
- **FirstNet / Band 14**: Priority public safety cellular failover channel support.

## Extended Documentation
For the comprehensive technical specification, entity schemas, and API examples, refer to:
- Full LLM Manifest: `/llms-full.txt`
- AI Agent Context API: `/api/llm-info`
- Canonical Site: `https://infrasi.com`