Upload folder using huggingface_hub

.gitignore

@@ -4,7 +4,10 @@ __pycache__/
 *$py.class
 venv/
 env/
-.env
+# Ignore all env files anywhere in the repo
+**/.env
+**/.env.*
+
 
 # Models (Keep them if they are small, but here they are large. 
 # We should probably only keep the ones we actually use if possible, 

Frontend/package.json

@@ -6,7 +6,7 @@
   "scripts": {
     "dev": "vite",
     "build": "vite build",
-    "lint": "eslint . --ext js,jsx --report-unused-disable-directives --max-warnings 0",
+    "lint": "eslint . --report-unused-disable-directives --max-warnings 0",
     "check:ai-secrets": "node ../scripts/check-frontend-secrets.mjs",
     "preview": "vite preview",
     "prepare": "husky install",

Frontend/src/admin/pages/AdminDashboard.jsx

@@ -115,7 +115,6 @@ const AdminDashboard = () => {
     const handleWsMessage = useTicketStore((s) => s.handleWsMessage);
     const setWsConnected = useTicketStore((s) => s.setWsConnected);
     const upsertTicket = useTicketStore((s) => s.upsertTicket);
-    const removeTicket = useTicketStore((s) => s.removeTicket);
 
     // Sync WebSocket connection status to store
     React.useEffect(() => {

Frontend/src/admin/pages/AdminTicketDetail.jsx

@@ -4,7 +4,7 @@ import {
     CheckCircle2, Clock, AlertCircle, User,
     Activity, ShieldCheck, Briefcase, Globe, BarChart3,
     ImageIcon, CornerUpLeft, CheckSquare, XCircle,
-    Cpu, Eye, MessageSquare, MoveRight, Loader2, Star, Eraser
+    Cpu, Eye, MessageSquare, MoveRight, Loader2, Star, Eraser, ShieldAlert
 } from 'lucide-react';
 import { supabase } from "../../lib/supabaseClient";
 import useAuthStore from "../../store/authStore";
@@ -307,6 +307,67 @@ const AdminTicketDetail = () => {
                 </div>
             </div>
 
+            {ticket.metadata?.spam_analysis?.is_spam && (
+                <div style={{
+                    background: ticket.metadata.spam_analysis.risk_level === 'high' ? '#fef2f2' : '#fffbeb',
+                    border: `1.5px solid ${ticket.metadata.spam_analysis.risk_level === 'high' ? '#fca5a5' : '#fde047'}`,
+                    borderRadius: '16px',
+                    padding: '16px 24px',
+                    color: ticket.metadata.spam_analysis.risk_level === 'high' ? '#991b1b' : '#92400e',
+                    display: 'flex',
+                    alignItems: 'flex-start',
+                    gap: '16px',
+                    boxShadow: '0 4px 12px rgba(0,0,0,0.02)'
+                }}>
+                    <ShieldAlert size={24} style={{ flexShrink: 0, marginTop: '2px', color: ticket.metadata.spam_analysis.risk_level === 'high' ? '#dc2626' : '#d97706' }} />
+                    <div style={{ display: 'flex', flexDirection: 'column', gap: '4px' }}>
+                        <h4 style={{ margin: 0, fontWeight: 800, fontSize: '13px', textTransform: 'uppercase', letterSpacing: '0.05em' }}>
+                            SECURITY PROTOCOL ALERT // POTENTIAL {ticket.metadata.spam_analysis.risk_level.toUpperCase()} RISK SPAM/PHISHING
+                        </h4>
+                        <p style={{ margin: 0, fontSize: '12px', fontWeight: 600, lineHeight: 1.5 }}>
+                            This incident contains potential phishing patterns or malicious URLs. To protect system infrastructure, support agents must not click or copy any untrusted hyperlinks below.
+                        </p>
+                        <div style={{ display: 'flex', flexWrap: 'wrap', gap: '8px', marginTop: '8px' }}>
+                            {ticket.metadata.spam_analysis.reasons.map((reason, i) => (
+                                <span key={i} style={{
+                                    fontSize: '9px',
+                                    fontWeight: 700,
+                                    textTransform: 'uppercase',
+                                    background: ticket.metadata.spam_analysis.risk_level === 'high' ? '#fee2e2' : '#fef3c7',
+                                    color: ticket.metadata.spam_analysis.risk_level === 'high' ? '#991b1b' : '#92400e',
+                                    padding: '2px 8px',
+                                    borderRadius: '100px',
+                                    border: `1px solid ${ticket.metadata.spam_analysis.risk_level === 'high' ? '#fca5a5' : '#fde047'}`
+                                }}>
+                                    {reason}
+                                </span>
+                            ))}
+                        </div>
+                        {ticket.metadata.spam_analysis.suspicious_urls?.length > 0 && (
+                            <div style={{ marginTop: '12px', display: 'flex', flexDirection: 'column', gap: '6px' }}>
+                                <span style={{ fontSize: '10px', fontWeight: 800, textTransform: 'uppercase', color: ticket.metadata.spam_analysis.risk_level === 'high' ? '#991b1b' : '#92400e' }}>Suspicious links locked:</span>
+                                <div style={{ display: 'flex', flexDirection: 'column', gap: '4px' }}>
+                                    {ticket.metadata.spam_analysis.suspicious_urls.map((url, idx) => (
+                                        <code key={idx} style={{
+                                            fontSize: '11px',
+                                            fontFamily: 'monospace',
+                                            padding: '4px 8px',
+                                            background: ticket.metadata.spam_analysis.risk_level === 'high' ? '#fee2e240' : '#fef3c740',
+                                            color: '#dc2626',
+                                            borderRadius: '6px',
+                                            border: '1.5px dashed #fca5a5',
+                                            wordBreak: 'break-all'
+                                        }}>
+                                            [LOCKED] {url}
+                                        </code>
+                                    ))}
+                                </div>
+                            </div>
+                        )}
+                    </div>
+                </div>
+            )}
+
             <div className="grid grid-cols-1 lg:grid-cols-12 gap-8">
                 {/* Primary Column */}
                 <div className="lg:col-span-8 space-y-8">

Frontend/src/admin/pages/AdminTickets.jsx

@@ -168,7 +168,7 @@ const AdminTickets = () => {
 
     const categories = ['All', 'Network', 'Hardware', 'Software', 'Access', 'Account'];
     const priorities = ['All', 'Low', 'Medium', 'High'];
-    const statuses = ['All', 'Open', 'In Progress', 'Resolved', 'Closed'];
+    const statuses = ['All', 'Open', 'In Progress', 'Resolved', 'Closed', 'Spam'];
     const teams = ['All', 'Software Team', 'Hardware Support', 'Network Ops', 'Security Unit', 'General Support'];
 
     const filteredTickets = useMemo(() => {
@@ -333,9 +333,21 @@ const AdminTickets = () => {
                                     {/* Subject */}
                                     <td className="px-6 py-6">
                                         <div className="flex flex-col">
-                                            <span className="text-xs font-bold text-slate-700 truncate max-w-[200px]" title={ticket.summary || ticket.subject}>
-                                                {ticket.summary || ticket.subject}
-                                            </span>
+                                            <div className="flex items-center gap-2">
+                                                <span className="text-xs font-bold text-slate-700 truncate max-w-[200px]" title={ticket.summary || ticket.subject}>
+                                                    {ticket.summary || ticket.subject}
+                                                </span>
+                                                {ticket.metadata?.spam_analysis?.is_spam && (
+                                                    <span className={`px-2 py-0.5 rounded text-[8px] font-black uppercase tracking-wider flex items-center gap-1 ${
+                                                        ticket.metadata.spam_analysis.risk_level === 'high' 
+                                                            ? 'bg-red-100 text-red-700 border border-red-200' 
+                                                            : 'bg-amber-100 text-amber-700 border border-amber-200'
+                                                    }`}>
+                                                        <ShieldAlert size={10} />
+                                                        {ticket.metadata.spam_analysis.risk_level} Risk
+                                                    </span>
+                                                )}
+                                            </div>
                                             <span className="text-[10px] font-black text-slate-400 uppercase tracking-widest flex items-center gap-2">
                                                 {ticket.category} 
                                                 <span className="text-[9px] font-medium text-slate-300">• {formatTimelineDate(ticket.created_at)}</span>
@@ -420,7 +432,13 @@ const AdminTickets = () => {
                                     {/* Status (Editable) */}
                                     <td className="px-6 py-6">
                                         <div className="flex items-center gap-2">
-                                            <div className={`w-1.5 h-1.5 rounded-full ${ticket.status?.toLowerCase() === 'resolved' || ticket.status?.toLowerCase() === 'closed' ? 'bg-emerald-400' : 'bg-amber-500 animate-pulse'}`}></div>
+                                            <div className={`w-1.5 h-1.5 rounded-full ${
+                                                ticket.status?.toLowerCase() === 'resolved' || ticket.status?.toLowerCase() === 'closed' 
+                                                    ? 'bg-emerald-400' 
+                                                    : ticket.status?.toLowerCase() === 'spam'
+                                                        ? 'bg-slate-400 border border-slate-500'
+                                                        : 'bg-amber-500 animate-pulse'
+                                            }`}></div>
                                             <Select
                                                 value={String(ticket.status || 'open').toLowerCase()}
                                                 onChange={(e) => handleUpdateTicket(ticket.id, { status: e.target.value })}

Frontend/src/hooks/useWebSocket.js

@@ -47,7 +47,6 @@ export default function useWebSocket(companyId) {
   const companyIdRef = useRef(companyId);
 
   // Keep a ref to latest companyId so the effect closure always has it
-  companyIdRef.current = companyId;
 
   // ---- Cleanup helpers ---------------------------------------------------
 
@@ -89,7 +88,26 @@ export default function useWebSocket(companyId) {
     }, PING_INTERVAL_MS);
   }, []);
 
-  // ---- WebSocket lifecycle -----------------------------------------------
+  // ---- WebSocket lifecycle & Reconnection ---------------------------------
+
+  const connectRef = useRef(null);
+
+  const scheduleReconnect = useCallback(() => {
+    if (!mountedRef.current || !companyIdRef.current) return;
+
+    const attempt = reconnectAttemptRef.current;
+    const delay = Math.min(
+      INITIAL_RECONNECT_DELAY_MS * Math.pow(2, attempt),
+      MAX_RECONNECT_DELAY_MS
+    );
+    reconnectAttemptRef.current = attempt + 1;
+
+    setConnectionError(`Reconnecting in ${Math.round(delay / 1000)}s...`);
+
+    reconnectTimerRef.current = setTimeout(() => {
+      if (mountedRef.current && connectRef.current) connectRef.current();
+    }, delay);
+  }, []);
 
   const connect = useCallback(() => {
     cleanup();
@@ -153,25 +171,10 @@ export default function useWebSocket(companyId) {
     socket.onerror = () => {
       // onclose fires immediately after onerror, so reconnect is handled there
     };
-  }, [cleanup, clearTimers, startHeartbeat]);
+  }, [cleanup, clearTimers, startHeartbeat, scheduleReconnect]);
 
-  // ---- Reconnection with exponential backoff -----------------------------
-
-  const scheduleReconnect = useCallback(() => {
-    if (!mountedRef.current || !companyIdRef.current) return;
-
-    const attempt = reconnectAttemptRef.current;
-    const delay = Math.min(
-      INITIAL_RECONNECT_DELAY_MS * Math.pow(2, attempt),
-      MAX_RECONNECT_DELAY_MS
-    );
-    reconnectAttemptRef.current = attempt + 1;
-
-    setConnectionError(`Reconnecting in ${Math.round(delay / 1000)}s...`);
-
-    reconnectTimerRef.current = setTimeout(() => {
-      if (mountedRef.current) connect();
-    }, delay);
+  useEffect(() => {
+    connectRef.current = connect;
   }, [connect]);
 
   // ---- Send helper -------------------------------------------------------

backend/main.py

@@ -212,6 +212,26 @@ def calculate_sla_response_at(priority: str) -> datetime.datetime:
     return datetime.datetime.now(datetime.timezone.utc) + datetime.timedelta(hours=hours)
 
 
+def classify_sla_status(sla_breach_at: str | None) -> str:
+    """Return 'BREACHED', 'WARNING', or 'ACTIVE' based on the breach time."""
+    if not sla_breach_at:
+        return "ACTIVE"
+    try:
+        clean_val = str(sla_breach_at).replace("Z", "+00:00")
+        deadline = datetime.datetime.fromisoformat(clean_val)
+        if deadline.tzinfo is None:
+            deadline = deadline.replace(tzinfo=datetime.timezone.utc)
+    except Exception:
+        return "ACTIVE"
+
+    now = datetime.datetime.now(datetime.timezone.utc)
+    if deadline <= now:
+        return "BREACHED"
+    if deadline - now <= datetime.timedelta(hours=1):
+        return "WARNING"
+    return "ACTIVE"
+
+
 # ---------------------------------------------------------------------------
 # Request / Response models
 # ---------------------------------------------------------------------------

backend/services/gemini_service.py

@@ -3,11 +3,19 @@ import base64
 import io
 import re
 import json
-from PIL import Image
-from google import genai
 from dotenv import load_dotenv
 from pathlib import Path
 
+try:
+    from PIL import Image
+    from google import genai
+    _HAS_GEMINI_DEPS = True
+except ImportError:
+    Image = None
+    genai = None
+    _HAS_GEMINI_DEPS = False
+
+
 # Load environment variables from backend/.env
 env_path = Path(__file__).parent.parent / '.env'
 load_dotenv(dotenv_path=env_path)
@@ -18,7 +26,7 @@ class GeminiService:
         self._initialized = False
         self.model_name = 'gemini-2.5-flash'
         
-        if self.api_key:
+        if self.api_key and _HAS_GEMINI_DEPS:
             try:
                 self.client = genai.Client(api_key=self.api_key)
                 self._initialized = True
@@ -26,15 +34,18 @@ class GeminiService:
             except Exception as e:
                 print(f"[GeminiService] Initialization Error: {e}")
         else:
-            print("[GeminiService] WARNING: GEMINI_API_KEY not found in environment.")
+            if not _HAS_GEMINI_DEPS:
+                print("[GeminiService] WARNING: PIL or google-genai package is not installed. Gemini service is disabled.")
+            else:
+                print("[GeminiService] WARNING: GEMINI_API_KEY not found in environment.")
 
     def analyze_image(self, image_base64: str, context_text: str = None) -> dict:
         """
         Perform OCR and image analysis using Gemini logic.
         """
-        if not self._initialized:
+        if not self._initialized or not _HAS_GEMINI_DEPS:
             return {
-                "image_description": "[Gemini API Key Missing] Could not analyze image.",
+                "image_description": "[Gemini Service Offline] Could not analyze image.",
                 "ocr_text": "",
                 "detected_problem": ""
             }

backend/services/slack_notifier.py

@@ -175,4 +175,3 @@ def notify_sla_breach(ticket: dict[str, Any]) -> bool:
 
     return sent
 
-# PR diff placeholder

backend/services/spam_detector_service.py

@@ -0,0 +1,126 @@
+import re
+import urllib.parse
+
+# Whitelist of trusted domains
+SAFE_DOMAINS = {
+    "google.com", "github.com", "microsoft.com", "apple.com", 
+    "supabase.com", "helpdesk.ai", "gssoc.org.in", "vercel.app", 
+    "wikipedia.org", "yahoo.com", "outlook.com", "gmail.com",
+    "facebook.com", "linkedin.com", "twitter.com", "x.com"
+}
+
+# Suspicious top-level domains (TLDs)
+SUSPICIOUS_TLDS = {
+    ".xyz", ".ru", ".su", ".zip", ".mov", ".click", ".link", 
+    ".top", ".info", ".cc", ".biz", ".icu", ".club", ".work", ".gq", ".cf", ".ml"
+}
+
+# Phishing indicators / social engineering keywords
+PHISHING_KEYWORDS = [
+    "verify your account", "immediate action required", "confirm your password", 
+    "security alert login", "suspend your account", "billing update required", 
+    "bank login", "login attempt from", "unauthorized login", "security verification", 
+    "urgent action", "confirm your identity", "reset your security", "compromised"
+]
+
+# Spam indicators / marketing bot keywords
+SPAM_KEYWORDS = [
+    "seo services", "crypto trading", "casino bonus", "lottery winner", 
+    "cash prize", "viagra", "buy cheap", "guaranteed profit", "double your money", 
+    "make money fast", "free investment", "gift card", "work from home", "bitcoin profit"
+]
+
+# URL Extraction Regex
+URL_REGEX = re.compile(r'https?://[^\s<>"]+|www\.[^\s<>"]+')
+
+def is_domain_safe(domain: str) -> bool:
+    """Check if the domain or its parent domain is in the safe list."""
+    domain = domain.lower()
+    if domain in SAFE_DOMAINS:
+        return True
+    
+    # Check subdomains (e.g. sub.google.com -> google.com)
+    for safe in SAFE_DOMAINS:
+        if domain.endswith("." + safe):
+            return True
+    return False
+
+def analyze_spam_phishing(text: str, ocr_text: str = "") -> dict:
+    """
+    Analyze text and OCR text for spam and phishing elements.
+    Returns analysis results including spam flag, risk level, reasons, and URLs.
+    """
+    combined_text = f"{text}\n{ocr_text}"
+    lower_text = combined_text.lower()
+    
+    reasons = []
+    detected_urls = []
+    suspicious_urls = []
+    
+    # 1. URL Scanning
+    urls = URL_REGEX.findall(combined_text)
+    for url in urls:
+        # Strip trailing punctuation commonly matched by regex
+        clean_url = url.rstrip('.,;:-?!()[]{}')
+        if clean_url not in detected_urls:
+            detected_urls.append(clean_url)
+            
+        # Parse host
+        try:
+            parsed = urllib.parse.urlparse(clean_url if "://" in clean_url else "http://" + clean_url)
+            host = parsed.netloc.split(':')[0] # strip port
+            
+            # Check TLD
+            has_suspicious_tld = any(host.endswith(tld) for tld in SUSPICIOUS_TLDS)
+            if has_suspicious_tld:
+                suspicious_urls.append(clean_url)
+                reasons.append(f"Suspicious TLD in link: {clean_url}")
+                continue
+                
+            # Check if domain is untrusted AND has suspicious path keywords
+            if not is_domain_safe(host):
+                path_lower = parsed.path.lower()
+                query_lower = parsed.query.lower()
+                suspicious_path_keywords = ["login", "signin", "verify", "secure", "update", "account", "billing"]
+                
+                if any(kw in path_lower or kw in query_lower or kw in host for kw in suspicious_path_keywords):
+                    suspicious_urls.append(clean_url)
+                    reasons.append(f"Untrusted URL containing security/account keywords: {clean_url}")
+        except Exception:
+            pass
+
+    # 2. Phishing Keyword Scanning
+    matched_phishing = [kw for kw in PHISHING_KEYWORDS if kw in lower_text]
+    if matched_phishing:
+        reasons.append(f"Detected phishing keyword patterns: {', '.join(matched_phishing[:3])}")
+        
+    # 3. Spam Keyword Scanning
+    matched_spam = [kw for kw in SPAM_KEYWORDS if kw in lower_text]
+    if matched_spam:
+        reasons.append(f"Detected spam/marketing keyword patterns: {', '.join(matched_spam[:3])}")
+        
+    # 4. Multi-Link bot check
+    if len(detected_urls) >= 5:
+        reasons.append(f"High link density ({len(detected_urls)} URLs detected)")
+        
+    # 5. Risk Assessment
+    risk_level = "none"
+    is_spam = False
+    
+    if len(suspicious_urls) > 0 or len(matched_phishing) >= 2:
+        risk_level = "high"
+        is_spam = True
+    elif len(matched_phishing) == 1 or len(matched_spam) >= 2 or len(detected_urls) >= 3:
+        risk_level = "medium"
+        is_spam = True
+    elif len(matched_spam) == 1 or len(detected_urls) > 0:
+        risk_level = "low"
+        is_spam = True
+        
+    return {
+        "is_spam": is_spam,
+        "risk_level": risk_level,
+        "reasons": reasons,
+        "detected_urls": detected_urls,
+        "suspicious_urls": suspicious_urls
+    }

backend/tests/test_spam_detector.py

@@ -0,0 +1,43 @@
+import unittest
+from backend.services.spam_detector_service import analyze_spam_phishing, is_domain_safe
+
+class TestSpamDetector(unittest.TestCase):
+    def test_benign_text(self):
+        text = "Hello, I am having trouble logging into my email account. Can you please help me reset it?"
+        res = analyze_spam_phishing(text)
+        self.assertFalse(res["is_spam"])
+        self.assertEqual(res["risk_level"], "none")
+
+    def test_domain_safety(self):
+        self.assertTrue(is_domain_safe("google.com"))
+        self.assertTrue(is_domain_safe("sub.google.com"))
+        self.assertTrue(is_domain_safe("github.com"))
+        self.assertFalse(is_domain_safe("phish-login-update.ru"))
+        self.assertFalse(is_domain_safe("google-security.xyz"))
+
+    def test_phishing_by_url(self):
+        text = "Immediate action required: please update your profile here: http://phish-secure-login.xyz/verify"
+        res = analyze_spam_phishing(text)
+        self.assertTrue(res["is_spam"])
+        self.assertEqual(res["risk_level"], "high")
+        self.assertTrue(any("verify" in r.lower() or "tld" in r.lower() for r in res["reasons"]))
+        self.assertEqual(len(res["suspicious_urls"]), 1)
+
+    def test_spam_by_keywords(self):
+        text = "Get rich quick with our brand new crypto trading scheme! Double your money within 24 hours guaranteed!"
+        res = analyze_spam_phishing(text)
+        self.assertTrue(res["is_spam"])
+        self.assertEqual(res["risk_level"], "medium") # medium because of 2+ matched spam keywords
+        self.assertTrue(any("spam" in r.lower() or "marketing" in r.lower() for r in res["reasons"]))
+
+    def test_ocr_phishing_scan(self):
+        # Benign text but suspicious URL in OCR text
+        text = "Please see the attached document for invoice details."
+        ocr = "To verify your account credentials click: http://untrusted-bank-update.info/login"
+        res = analyze_spam_phishing(text, ocr)
+        self.assertTrue(res["is_spam"])
+        self.assertEqual(res["risk_level"], "high")
+        self.assertEqual(len(res["suspicious_urls"]), 1)
+
+if __name__ == "__main__":
+    unittest.main()