Update app.py

app.py

@@ -1,123 +1,215 @@
-# app.py — ultra-minimal Gradio Space with 3 API endpoints (in-memory)
+import os
 import time
-import gradio as gr
-from collections import deque
-
-UI_TITLE = "Central Cards — Sanity Feed (In-Memory)"
-STORE = deque(maxlen=500)  # [(id, kind, text, payload_json, ts)]
-ID = 0
-
-def now(): return int(time.time())
-
-def push(kind, text, payload=None):
-    global ID
-    ID += 1
-    STORE.appendleft((ID, kind, text, payload, now()))
-    return ID
-
-# === API functions (visible via /api/predict/<name>) ===
-def api_ingest(text: str):
-    text = (text or "").strip()
-    if not text:
-        raise gr.Error("'text' is required")
-    mid = push("text", text)
+import json
+import sqlite3
+from typing import Optional, Dict, Any, List
+
+from fastapi import FastAPI, Request, HTTPException, status, Depends
+from fastapi.middleware.cors import CORSMiddleware
+from pydantic import BaseModel, Field
+from starlette.responses import HTMLResponse
+
+# =========================
+# Config
+# =========================
+DB_PATH = os.getenv("DB_PATH", "messages.db")
+API_KEY = os.getenv("API_KEY", "").strip()   # set in Space Secrets for auth
+TITLE   = "Central Cards — Orders Feed (FastAPI)"
+
+# =========================
+# DB helpers (SQLite)
+# =========================
+def init_db():
+    con = sqlite3.connect(DB_PATH)
+    cur = con.cursor()
+    cur.execute(
+        """
+        CREATE TABLE IF NOT EXISTS messages (
+            id INTEGER PRIMARY KEY AUTOINCREMENT,
+            kind TEXT NOT NULL,           -- "order" | "suggestion" | "text"
+            text TEXT NOT NULL,           -- human-readable / markdown summary
+            payload TEXT,                 -- raw JSON string (optional)
+            ts INTEGER NOT NULL           -- epoch seconds
+        )
+        """
+    )
+    con.commit()
+    con.close()
+
+def db() -> sqlite3.Connection:
+    return sqlite3.connect(DB_PATH)
+
+def insert_message(kind: str, text: str, payload_json: Optional[str] = None) -> int:
+    con = db()
+    cur = con.cursor()
+    cur.execute(
+        "INSERT INTO messages(kind, text, payload, ts) VALUES(?, ?, ?, ?)",
+        (kind, text, payload_json or None, int(time.time())),
+    )
+    con.commit()
+    mid = cur.lastrowid
+    con.close()
+    return mid
+
+def list_messages(limit: int = 300) -> List[tuple]:
+    con = db()
+    cur = con.cursor()
+    cur.execute("SELECT id, kind, text, payload, ts FROM messages ORDER BY id DESC LIMIT ?", (limit,))
+    rows = cur.fetchall()
+    con.close()
+    return rows
+
+def clear_messages():
+    con = db()
+    cur = con.cursor()
+    cur.execute("DELETE FROM messages")
+    con.commit()
+    con.close()
+
+init_db()
+
+# =========================
+# API models
+# =========================
+class IngestText(BaseModel):
+    text: str = Field(..., min_length=1)
+
+class StudentInfo(BaseModel):
+    name: str
+    room: str
+    email: str
+
+class DrawnCard(BaseModel):
+    name: str
+    role: Optional[str] = ""
+    rarity: str
+    power: int
+    bio: Optional[str] = ""
+    powers: Optional[list[str]] = []
+    weaknesses: Optional[list[str]] = []
+
+class OrderSummary(BaseModel):
+    counts: Dict[str, int]
+    v100: int
+    valueSum: int
+
+class OrderPayload(BaseModel):
+    season: int
+    info: StudentInfo
+    picked: list[DrawnCard]
+    summary: OrderSummary
+    ts: Optional[int] = None
+
+class SuggestionPayload(BaseModel):
+    name: str
+    role: str
+    why: str
+    powers: list[str] = []
+    weaknesses: list[str] = []
+    ts: Optional[int] = None
+
+# =========================
+# FastAPI app
+# =========================
+app = FastAPI(title=TITLE, version="1.0.0")
+
+# CORS so your static site can call this
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins=["*"],             # lock this down to your site if you want
+    allow_methods=["GET", "POST", "OPTIONS"],
+    allow_headers=["*"],
+)
+
+def require_api_key(request: Request):
+    """If API_KEY is set, require X-API-Key to match."""
+    if not API_KEY:
+        return True
+    if request.headers.get("X-API-Key") != API_KEY:
+        raise HTTPException(status_code=status.HTTP_401_UNAUTHORIZED, detail="Invalid API key")
+    return True
+
+# ---------- Utility ----------
+def fmt_ts(ts: int) -> str:
+    return time.strftime("%Y-%m-%d %H:%M:%S", time.localtime(ts))
+
+# ---------- Routes ----------
+@app.get("/", response_class=HTMLResponse)
+def root():
+    return f"""
+    <html><head><meta charset="utf-8"/><title>{TITLE}</title></head>
+    <body style="font-family: ui-sans-serif, system-ui; max-width: 920px; margin: 40px auto; line-height:1.5">
+      <h1>{TITLE}</h1>
+      <p>Use the JSON endpoints from your frontend.</p>
+      <ul>
+        <li><code>GET /health</code></li>
+        <li><code>GET /messages</code></li>
+        <li><code>POST /ingest</code> &mdash; <code>{"{ text: string }"}</code></li>
+        <li><code>POST /orders</code> &mdash; order object</li>
+        <li><code>POST /suggestions</code> &mdash; suggestion object</li>
+      </ul>
+      <p>If <code>API_KEY</code> is set, include header <code>X-API-Key: &lt;key&gt;</code> on POSTs.</p>
+    </body></html>
+    """
+
+@app.get("/health")
+def health():
+    return {"ok": True, "time": int(time.time())}
+
+@app.get("/messages")
+def get_messages(limit: int = 500):
+    rows = list_messages(limit=limit)
+    return {
+        "messages": [
+            {"id": r[0], "kind": r[1], "text": r[2], "payload": r[3], "ts": r[4], "ts_readable": fmt_ts(r[4])}
+            for r in rows
+        ]
+    }
+
+@app.post("/ingest")
+def ingest_text(payload: IngestText, _: bool = Depends(require_api_key)):
+    mid = insert_message("text", payload.text.strip())
     return {"ok": True, "id": mid}
 
-def api_orders(order: dict):
-    # expect: {season, info:{name,room,email}, picked:[{name,rarity,power}], summary:{counts,v100,valueSum}}
-    season = order.get("season")
-    info = order.get("info") or {}
-    picked = order.get("picked") or []
-    summary = order.get("summary") or {}
-
+@app.post("/orders")
+def ingest_order(order: OrderPayload, _: bool = Depends(require_api_key)):
+    # server-side markdown-style summary for the feed
     lines = []
-    lines.append(f"# 📦 Season {season} Order")
-    lines.append(f"**Name:** {info.get('name','')}")
-    lines.append(f"**Class:** {info.get('room','')}")
-    lines.append(f"**Email:** {info.get('email','')}")
+    lines.append(f"# 📦 Season {order.season} Order")
+    lines.append(f"**Name:** {order.info.name}")
+    lines.append(f"**Class:** {order.info.room}")
+    lines.append(f"**Email:** {order.info.email}")
     lines.append("")
     lines.append("## Results (x10)")
-    for i, c in enumerate(picked, 1):
-        lines.append(f"{i}. **{c.get('name','')}** — _{c.get('rarity','')}_, Power **{c.get('power','')}**")
-    counts = summary.get("counts", {})
+    for i, c in enumerate(order.picked, 1):
+        lines.append(f"{i}. **{c.name}** — _{c.rarity}_, Power **{c.power}**")
+    counts = order.summary.counts
     lines.append("")
-    lines.append(f"**Rarity Breakdown:** C:{counts.get('Common',0)} • U:{counts.get('Uncommon',0)} • R:{counts.get('Rare',0)} • UR:{counts.get('Ultra Rare',0)} • L:{counts.get('Legendary',0)}")
-    lines.append(f"**Value Score:** {summary.get('v100',0)}/100 (raw {summary.get('valueSum',0)})")
-    md = "\n".join(lines)
-
-    import json
-    mid = push("order", md, json.dumps(order, ensure_ascii=False))
+    lines.append(
+        f"**Rarity Breakdown:** C:{counts.get('Common',0)} • U:{counts.get('Uncommon',0)} • "
+        f"R:{counts.get('Rare',0)} • UR:{counts.get('Ultra Rare',0)} • L:{counts.get('Legendary',0)}"
+    )
+    lines.append(f"**Value Score:** {order.summary.v100}/100 (raw {order.summary.valueSum})")
+    summary_md = "\n".join(lines)
+
+    mid = insert_message("order", summary_md, json.dumps(order.dict(), ensure_ascii=False))
     return {"ok": True, "id": mid}
 
-def api_suggestions(s: dict):
-    name = (s.get("name") or "").strip()
-    role = (s.get("role") or "").strip()
-    why  = (s.get("why")  or "").strip()
-    if not name or not role or not why:
-        raise gr.Error("name, role, and why are required")
-
-    pw = s.get("powers") or []
-    wk = s.get("weaknesses") or []
-
+@app.post("/suggestions")
+def ingest_suggestion(s: SuggestionPayload, _: bool = Depends(require_api_key)):
     lines = []
     lines.append("# 💡 New Card Suggestion")
-    lines.append(f"**Name:** {name}")
-    lines.append(f"**Role:** {role}")
-    lines.append(f"**Why:** {why}")
-    lines.append(f"**Powers:** {', '.join(pw) if pw else '—'}")
-    lines.append(f"**Weaknesses:** {', '.join(wk) if wk else '—'}")
-    md = "\n".join(lines)
-
-    import json
-    mid = push("suggestion", md, json.dumps(s, ensure_ascii=False))
+    lines.append(f"**Name:** {s.name}")
+    lines.append(f"**Role:** {s.role}")
+    lines.append(f"**Why:** {s.why}")
+    lines.append(f"**Powers:** {', '.join(s.powers) if s.powers else '—'}")
+    lines.append(f"**Weaknesses:** {', '.join(s.weaknesses) if s.weaknesses else '—'}")
+    summary_md = "\n".join(lines)
+
+    mid = insert_message("suggestion", summary_md, json.dumps(s.dict(), ensure_ascii=False))
     return {"ok": True, "id": mid}
 
-# === UI (simple feed) ===
-CSS = """
-.card-grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(280px, 1fr)); gap: 14px; }
-.card { border: 1px solid #e5e7eb; border-radius: 14px; padding: 14px; background: #fff; box-shadow: 0 1px 2px rgba(0,0,0,.05); }
-.card h4 { margin: 0 0 6px; font-size: 14px; color: #6b7280; }
-.card pre { background:#0b1020; color:#d7e6ff; padding:10px; border-radius:10px; overflow:auto; }
-.badge { display:inline-block; font-size:11px; padding:2px 8px; border:1px solid #ddd; border-radius:999px; margin-left:6px; }
-"""
-
-def render(limit: int = 200, kind: str = ""):
-    items = []
-    for (mid, k, text, payload, ts) in list(STORE)[:limit]:
-        if kind and k != kind: continue
-        tstr = time.strftime("%Y-%m-%d %H:%M:%S", time.localtime(ts))
-        safe = gr.utils.sanitize_html(text)
-        payload_block = ""
-        if payload:
-            payload_block = f"<details><summary>Payload</summary><pre>{gr.utils.sanitize_html(payload)}</pre></details>"
-        items.append(f"<div class='card'><h4>#{mid} • {tstr} <span class='badge'>{k}</span></h4><div>{safe}</div>{payload_block}</div>")
-    html = "<div class='card-grid'>" + "".join(items) + "</div>" if items else "<p>No items yet.</p>"
-    return f"<style>{CSS}</style>{html}"
-
-with gr.Blocks(title=UI_TITLE, css=CSS) as demo:
-    gr.Markdown(f"# {UI_TITLE}\nPOST to `/api/predict/orders`, `/api/predict/suggestions`, `/api/predict/ingest`.")
-    with gr.Row():
-        kind = gr.Dropdown(choices=["", "order", "suggestion", "text"], value="", label="Filter", scale=2)
-        limit = gr.Slider(20, 500, value=200, step=20, label="Max items", scale=3)
-        btn = gr.Button("Refresh", variant="primary")
-        wipe = gr.Button("Wipe (in-memory)")
-    out = gr.HTML(render())
-    btn.click(render, inputs=[kind, limit], outputs=[out])
-    wipe.click(lambda: (STORE.clear(), render())[1], outputs=[out])
-    gr.Timer(2.0).tick(render, inputs=[kind, limit], outputs=[out])
-
-    # Hidden API endpoints
-    _ing_in = gr.Textbox(visible=False, label="text")
-    _ing_out = gr.JSON(visible=False)
-    gr.Button(visible=False).click(api_ingest, inputs=[_ing_in], outputs=[_ing_out], api_name="ingest")
-
-    _ord_in = gr.JSON(visible=False)
-    _ord_out = gr.JSON(visible=False)
-    gr.Button(visible=False).click(api_orders, inputs=[_ord_in], outputs=[_ord_out], api_name="orders")
-
-    _sug_in = gr.JSON(visible=False)
-    _sug_out = gr.JSON(visible=False)
-    gr.Button(visible=False).click(api_suggestions, inputs=[_sug_in], outputs=[_sug_out], api_name="suggestions")
-
-# IMPORTANT: expose Gradio app at module scope
-app = demo
+@app.post("/admin/wipe")
+def admin_wipe(_: bool = Depends(require_api_key)):
+    clear_messages()
+    return {"ok": True}