remove streamlit from config

app.py

@@ -1,5 +1,7 @@
 # app.py (for Hugging Face Docker space)
 
+
+import jwt
 from fastapi import FastAPI, Header, HTTPException
 from pydantic import BaseModel
 from typing import Optional
@@ -29,47 +31,41 @@ async def chat_send(
     body: ChatRequest,
     authorization: Optional[str] = Header(default=None),
 ):
-    """
-    Main endpoint used by the mobile app.
-    For now:
-      - Use username to find user_id + profile in Supabase.
-      - Ignore JWT verification (authorization header) or just log it.
-    Later:
-      - Verify JWT, extract user_id directly from token.
-    """
-
-    message = body.message.strip()
-    username = body.username.strip()
-
-    if not message:
+    # 1) get user_id from the JWT
+    user_id = get_user_id_from_jwt(authorization)
+
+    # 2) simple test reply for now
+    msg = body.message.strip()
+    if not msg:
         raise HTTPException(status_code=400, detail="Empty message")
 
-    # TODO (later): parse/verify JWT if you want:
-    # if authorization and authorization.startswith("Bearer "):
-    #     token = authorization.split(" ", 1)[1]
-    #     user_id = verify_and_get_user_id_from_token(token)
-    # else:
-    #     ...
+    short_id = user_id[:8]
+
+    return {
+        "reply": f"Socrates (user_id={short_id}…) says: {msg[::-1]}",
+    }
+
+def get_user_id_from_jwt(authorization: Optional[str]) -> str:
+    if not authorization or not authorization.startswith("Bearer "):
+        raise HTTPException(status_code=401, detail="Missing or invalid Authorization header")
+
+    token = authorization.split(" ", 1)[1]
 
-    # For now, derive user_id from username via Supabase (simple helper)
     try:
-        # You can write this helper to look up user_profiles where username == body.username
-        profile, user_id = get_user_profile_by_username(username)
-    except Exception as e:
-        # fallback: use username as id if lookup fails (dev only)
-        user_id = username
-        profile = {}
-
-    # Call the core Socrates pipeline
-    reply_text = socrates_reply(
-        user_id=user_id,
-        username=username,
-        user_msg=message,
-        profile=profile,
-        ui_lang="en",  # or from profile / user_ui_language table later
-    )
-
-    return {"reply": reply_text}
+        payload = jwt.decode(
+            token,
+            SUPABASE_JWT_SECRET,
+            algorithms=["HS256"],
+            options={"verify_aud": False},  # keep simple for now
+        )
+    except jwt.InvalidTokenError:
+        raise HTTPException(status_code=401, detail="Invalid token")
+
+    user_id = payload.get("sub")
+    if not user_id:
+        raise HTTPException(status_code=401, detail="Token missing subject (user id)")
+
+    return user_id
 
 
 

config.py

@@ -1,17 +1,8 @@
 import os
 import re
-import streamlit as st
 
 def _get(name: str, required: bool = True, default=None):
-    # 1) Environment variables (HF / Render)
     val = os.getenv(name)
-    if val is None:
-        # 2) Optional Streamlit Cloud fallback
-        try:
-            import streamlit as st
-            val = st.secrets.get(name)
-        except Exception:
-            val = None
     if val is None:
         if required:
             raise RuntimeError(f"Missing required secret: {name}")
@@ -56,32 +47,6 @@ def username_from_email(email: str | None) -> str:
     safe = _USERNAME_SAFE_RE.sub("-", local).strip("-")
     return safe or "user"
 
-# ── Session → globals refresh (no external deps) ───────────────────────────────
-def refresh_user_context() -> None:
-    """
-    Re-sync legacy globals from Streamlit session after login.
-    """
-    user_id   = st.session_state.get("uuid")
-    email = st.session_state.get("email")
-    username = st.session_state.get("username") or username_from_email(email)
-
-# ── Public getters used across the app ────────────────────────────────────────
-def get_uuid() -> str | None:
-    """
-    Preferred source: st.session_state['uuid'].
-    """
-    return st.session_state.get("uuid")
 
-def get_username() -> str | None:
-    """
-    Preferred: st.session_state['username'] (email-derived).
-    Fallbacks (in order):
-      - derive from st.session_state['email']
-    """
-    return (
-        st.session_state.get("username")
-        or username_from_email(st.session_state.get("email"))
-    )
 
-# Reusable headers for PostgREST / RPC calls