# HealthSherpa ONE Vibe Coding Prompts

> Copy secure HealthSherpa API prompts into app builders without exposing API keys.

## What This Page Provides

- Static instructions only. It does not ship a runnable demo app or local API proxy.
- Tool-specific prompts for Google AI Studio, Lovable, Replit, Claude, and Codex.
- Secure API key guidance for server-side secrets and environment variables.
- Example screenshots that show the kind of quote workflow users can build.

## Start Here

1. Register through `https://one.healthsherpa.com/register.html`.
2. Confirm your email and generate an API key in the developer portal.
3. Pick a builder.
4. Copy the matching prompt.
5. Store the key only as a server-side secret or environment variable named `HEALTHSHERPA_API_KEY`.
6. Test ZIP-to-county lookup before quote submission.

## Security Rules

- Never paste a HealthSherpa API key into a builder chat.
- Never expose the key in frontend code, public environment variables, localStorage, screenshots, logs, or browser bundles.
- Browser code should call only your own backend.
- Your backend should call `https://api.one.healthsherpa.com` with `/v1/...` paths.
- HealthSherpa API authentication uses the `x-api-key` header.
- Rotate the key if it is ever pasted, committed, logged, or shared.

## Prompt Files

Each prompt tells builders to check the current developer site at `https://one.healthsherpa.com/docs.html` and the OpenAPI contract at `https://one.healthsherpa.com/openapi.json` before relying on generated code.

- Google AI Studio: `https://one.healthsherpa.com/prompts/google-ai-studio-healthquote-pro.md`
- Lovable: `https://one.healthsherpa.com/prompts/lovable-healthquote-pro.md`
- Replit: `https://one.healthsherpa.com/prompts/replit-healthquote-pro.md`
- Claude: `https://one.healthsherpa.com/prompts/claude-hs-one.skill`
- Codex: `https://one.healthsherpa.com/prompts/codex-healthquote-pro.md`

## Builder Links

- Google AI Studio: `https://aistudio.google.com/apps`
- Lovable: `https://lovable.dev/`
- Replit: `https://replit.com/ai`
- Claude: `https://claude.ai/new`
- Codex: `https://chatgpt.com/codex`

## API Facts Included In The Prompts

- API origin: `https://api.one.healthsherpa.com`
- Authentication header: `x-api-key`
- County lookup path: `GET /v1/reference/counties?zip_code=33145`
- Issuer lookup path: `GET /v1/reference/issuers?state=FL` (optional `&plan_year=YYYY`; defaults to the current ACA plan year)
- Quotes path: `POST /v1/quotes`
- Quote workflow: resolve ZIP to county and FIPS code before submitting a quote request.
- Quote rendering: use plan issuer, pricing, metal level, plan type, and document URL fields defensively.

## Human-Readable Page

Use `https://one.healthsherpa.com/vibe-coders.html` for the browser page with copy buttons and showcase examples.