latest deployment

app.py

@@ -246,7 +246,6 @@ def scan_vulnerabilities(text: str):
 # AI ENGINE
 # =========================================================
 async def ai_enrich(text: str, findings):
-    # 🔒 No API key fallback
     if not HF_API_KEY:
         return {
             "explanation": "AI disabled",
@@ -262,19 +261,24 @@ async def ai_enrich(text: str, findings):
                     "inputs": f"""
 You are a cybersecurity expert.
 
+Analyze this code and return ONLY valid JSON.
+
+Format:
+{{ "explanation": "string", "fixes": ["string"] }}
+
+Do not include markdown.
+Do not include text outside JSON.
+
 Findings:
 {findings}
 
-Return STRICT JSON ONLY:
-{{ "explanation": "", "fixes": [] }}
-
 Code:
-{text[:2000]}
+{text[:1500]}
 """
                 }
             )
 
-        # 🔥 STEP 1: SAFE PARSE
+        # SAFE PARSE
         try:
             data = res.json()
         except Exception as e:
@@ -282,15 +286,15 @@ Code:
             print("RAW RESPONSE:", res.text)
 
             return {
-                "explanation": "AI returned invalid response",
+                "explanation": res.text[:500],
                 "fixes": []
             }
 
-        # 🔥 STEP 2: HANDLE HF FORMAT
+        # HANDLE HF FORMAT
         if isinstance(data, list):
             data = data[0]
 
-        # 🔥 STEP 3: HANDLE STRING OUTPUT (VERY COMMON)
+        # HANDLE GENERATED TEXT
         if isinstance(data, dict) and "generated_text" in data:
             text_output = data["generated_text"]
 
@@ -300,15 +304,13 @@ Code:
                 return parsed
             except:
                 return {
-                    "explanation": text_output,
+                    "explanation": text_output[:500],
                     "fixes": []
                 }
 
-        # 🔥 STEP 4: VALID DICT
         if isinstance(data, dict):
             return data
 
-        # 🔥 STEP 5: FALLBACK
         return {
             "explanation": str(data),
             "fixes": []
@@ -316,7 +318,6 @@ Code:
 
     except Exception as e:
         print("🔥 AI REQUEST ERROR:", str(e))
-
         return {
             "explanation": "AI request failed",
             "fixes": []
@@ -341,16 +342,7 @@ async def analyze(req: AnalyzeRequest, auth=Depends(get_user)):
 
         findings = scan_vulnerabilities(req.text)
 
-        # SAFE AI
-        ai_raw = await ai_enrich(req.text, findings)
-
-        if isinstance(ai_raw, dict):
-            ai = ai_raw
-        else:
-            ai = {
-                "explanation": str(ai_raw),
-                "fixes": []
-            }
+        ai = await ai_enrich(req.text, findings)
 
         analysis_id = str(uuid.uuid4())
 
@@ -400,6 +392,14 @@ def usage(auth=Depends(get_user)):
 def home():
     return {"status": "SafeAIScan running on Hugging Face Spaces"}
 
+@app.get("/api/me")
+def get_me(auth=Depends(get_user)):
+    user = auth["user"]
+
+    return {
+        "plan": user.get("plan", "free")
+    }
+
 @app.get("/api/history")
 def history(auth=Depends(get_user)):
     user = auth["user"]

frontend/api.js

@@ -1,11 +1,5 @@
-// =========================
-// CONFIG
-// =========================
 const BASE_URL = "https://rathious-safeaiscan.hf.space";
 
-// =========================
-// TOKEN HELPERS
-// =========================
 function getToken() {
   return localStorage.getItem("access_token");
 }
@@ -19,9 +13,6 @@ function clearAuth() {
   window.location.replace("login.html");
 }
 
-// =========================
-// CORE REQUEST WRAPPER
-// =========================
 async function apiRequest(endpoint, options = {}) {
   const res = await fetch(BASE_URL + endpoint, {
     ...options,
@@ -36,7 +27,6 @@ async function apiRequest(endpoint, options = {}) {
   });
 
   if (res.status === 401) {
-    console.warn("Session expired");
     clearAuth();
     return null;
   }
@@ -44,9 +34,18 @@ async function apiRequest(endpoint, options = {}) {
   return res;
 }
 
-// =========================
-// API FUNCTIONS
-// =========================
+// SAFE JSON PARSE
+async function safeJson(res) {
+  const text = await res.text();
+  try {
+    return JSON.parse(text);
+  } catch {
+    console.error("RAW ERROR:", text);
+    throw new Error("Server error: " + text);
+  }
+}
+
+// API CALLS
 async function analyzeCode(text) {
   const res = await apiRequest("/api/analyze", {
     method: "POST",
@@ -65,10 +64,15 @@ async function analyzeCode(text) {
 
 async function getUsage() {
   const res = await apiRequest("/api/usage");
-  return res.json();
+  return safeJson(res);
 }
 
 async function getHistory() {
   const res = await apiRequest("/api/history");
-  return res.json();
+  return safeJson(res);
+}
+
+async function getMe() {
+  const res = await apiRequest("/api/me");
+  return safeJson(res);
 }

frontend/app.js

@@ -1,7 +1,3 @@
-// =========================
-// UI ACTIONS
-// =========================
-
 async function scan() {
   const code = document.getElementById("code").value;
 
@@ -11,6 +7,11 @@ async function scan() {
     document.getElementById("result").innerText =
       JSON.stringify(data, null, 2);
 
+    // ✅ LIVE USAGE UPDATE
+    if (data.usage_today !== undefined) {
+      document.getElementById("usage").innerText = data.usage_today;
+    }
+
   } catch (err) {
     console.error(err);
     alert("Scan failed");
@@ -38,17 +39,26 @@ async function loadHistory() {
   try {
     const data = await getHistory();
 
-    const historyList = document.getElementById("history");
-    historyList.innerHTML = "";
+    const list = document.getElementById("history");
+    list.innerHTML = "";
 
     data.forEach(item => {
       const li = document.createElement("li");
       li.innerText = item.risk + " (" + item.score + ")";
-      historyList.appendChild(li);
+      list.appendChild(li);
     });
 
   } catch (err) {
-    console.error("History failed", err);
+    console.error(err);
+  }
+}
+
+async function loadPlan() {
+  try {
+    const data = await getMe();
+    document.getElementById("plan").innerText = data.plan;
+  } catch {
+    document.getElementById("plan").innerText = "Free";
   }
 }
 
@@ -56,12 +66,12 @@ function copyKey() {
   const key = localStorage.getItem("api_key");
 
   if (!key) {
-    alert("No API key found");
+    alert("No API key");
     return;
   }
 
   navigator.clipboard.writeText(key);
-  alert("API key copied!");
+  alert("Copied!");
 }
 
 function logout() {
@@ -69,24 +79,19 @@ function logout() {
   window.location.replace("login.html");
 }
 
-// =========================
 // INIT
-// =========================
 async function init() {
-  // Show API key
-  const apiKey = localStorage.getItem("api_key");
   document.getElementById("apiKey").innerText =
-    apiKey || "Not available";
+    localStorage.getItem("api_key") || "Not available";
 
   await loadUsage();
   await loadHistory();
+  await loadPlan();
 }
 
 init();
 
-// =========================
-// MAKE FUNCTIONS GLOBAL (IMPORTANT)
-// =========================
+// 🔥 REQUIRED FOR BUTTONS
 window.scan = scan;
 window.copyKey = copyKey;
 window.logout = logout;