Upload 6 files

API.txt

@@ -0,0 +1,185 @@
+================================================================================
+  CODE EVALUATOR API — Usage Guide
+================================================================================
+
+BASE URL
+--------
+  https://dhyandevp-codeevaluator.hf.space
+
+
+AUTHENTICATION
+--------------
+  All protected endpoints require the header:
+    X-API-Key: <your-key>
+
+  Contact the administrator to receive a valid API key.
+
+
+--------------------------------------------------------------------------------
+ENDPOINT 1 — Submit a Python script
+--------------------------------------------------------------------------------
+
+  Method : POST
+  Path   : /submit
+  Auth   : Required (X-API-Key header)
+
+  Request body (multipart/form-data):
+    file  — the .py file to evaluate (max 100 KB)
+
+  Response (200 OK):
+    {
+      "job_id": "f47ac10b-58cc-4372-a567-0e02b2c3d479",
+      "status": "Processing"
+    }
+
+  Error responses:
+    401  { "detail": "Unauthorised: invalid or missing X-API-Key." }
+    413  { "detail": "File exceeds the 100 KB size limit." }
+
+  cURL example:
+    curl -X POST https://dhyandevp-codeevaluator.hf.space/submit \
+         -H "X-API-Key: ek-your-key" \
+         -F "file=@script.py"
+
+  Python example:
+    import requests
+
+    resp = requests.post(
+        "https://dhyandevp-codeevaluator.hf.space/submit",
+        headers={"X-API-Key": "ek-your-key"},
+        files={"file": open("script.py", "rb")},
+    )
+    job_id = resp.json()["job_id"]
+    print("Job ID:", job_id)
+
+
+--------------------------------------------------------------------------------
+ENDPOINT 2 — Retrieve the grading report
+--------------------------------------------------------------------------------
+
+  Method : GET
+  Path   : /report/{job_id}
+  Auth   : Required (X-API-Key header)
+
+  Path parameter:
+    job_id — the UUID returned by /submit
+
+  Poll this endpoint every 3–5 seconds until status is "Completed" or "Failed".
+
+  Response when still running (200):
+    {
+      "job_id": "f47ac10b-...",
+      "status": "Processing",
+      "message": "Your submission is being evaluated. Retry in a few seconds."
+    }
+
+  Response when done (200):
+    {
+      "job_id": "f47ac10b-...",
+      "status": "Completed",
+      "report": {
+        "score":       78,
+        "percentage":  81.5,
+        "mistakes": [
+          "Missing docstring on calculate(): add a description of parameters and return value.",
+          "Variable 'x' is poorly named; rename to something descriptive like 'total_count'."
+        ]
+      }
+    }
+
+  Response on failure (200):
+    {
+      "job_id": "f47ac10b-...",
+      "status": "Failed",
+      "error": {
+        "error_type":    "AuthenticationError",
+        "error_message": "Invalid API key."
+      }
+    }
+
+  Response when job not found (404):
+    { "detail": "Job 'f47ac10b-...' not found." }
+
+  cURL example:
+    curl https://dhyandevp-codeevaluator.hf.space/report/f47ac10b-58cc-4372-a567-0e02b2c3d479 \
+         -H "X-API-Key: ek-your-key"
+
+  Python polling example:
+    import time, requests
+
+    headers = {"X-API-Key": "ek-your-key"}
+    url = f"https://dhyandevp-codeevaluator.hf.space/report/{job_id}"
+
+    while True:
+        resp = requests.get(url, headers=headers)
+        data = resp.json()
+
+        if data["status"] == "Completed":
+            report = data["report"]
+            print("Score      :", report["score"])
+            print("Precision  :", report["percentage"])
+            print("Mistakes   :")
+            for m in report["mistakes"]:
+                print("  -", m)
+            break
+
+        elif data["status"] == "Failed":
+            print("Evaluation failed:", data["error"]["error_message"])
+            break
+
+        print("Still processing, retrying in 5 seconds…")
+        time.sleep(5)
+
+
+--------------------------------------------------------------------------------
+ENDPOINT 3 — Health check (no auth required)
+--------------------------------------------------------------------------------
+
+  Method : GET
+  Path   : /health
+
+  Response (200):
+    { "status": "ok" }
+
+  Use this to verify the service is running before submitting.
+
+
+--------------------------------------------------------------------------------
+REPORT FIELDS EXPLAINED
+--------------------------------------------------------------------------------
+
+  score       (integer, 0–100)
+              Overall benchmark. Combines correctness, efficiency, readability,
+              and best-practice adherence.
+
+              90–100  Near-perfect, production-ready
+              70–89   Good, minor issues only
+              50–69   Adequate, notable defects
+              30–49   Poor, significant bugs or anti-patterns
+              0–29    Critical failure, non-functional code
+
+  percentage  (float, 0.0–100.0)
+              Execution precision — how accurately the code fulfils its apparent
+              intent. May differ from score when code runs correctly but is
+              structured poorly.
+
+  mistakes    (array of strings)
+              Itemised list of every defect found: architectural issues, logic
+              errors, syntax bugs, missing optimisations, poor naming, missing
+              error handling, security vulnerabilities, or style violations.
+              Each entry names the problem and suggests a fix.
+              Empty array [] means no issues were found.
+
+
+--------------------------------------------------------------------------------
+NOTES
+--------------------------------------------------------------------------------
+
+  - Only .py files are accepted.
+  - Maximum file size: 100 KB.
+  - Typical grading time: 15–45 seconds depending on code length and server load.
+  - The service is asynchronous. Always poll /report after /submit.
+  - Keep your API key secret. Do not commit it to version control.
+  - Interactive Swagger docs: https://dhyandevp-codeevaluator.hf.space/docs
+
+================================================================================

index.html

@@ -0,0 +1,267 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>Code Evaluator</title>
+  <style>
+    * { box-sizing: border-box; margin: 0; padding: 0; }
+    body {
+      font-family: system-ui, sans-serif;
+      background: #0f1117;
+      color: #e2e8f0;
+      min-height: 100vh;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      padding: 24px;
+    }
+    .box {
+      background: #1a1f2e;
+      border: 1px solid #2d3748;
+      border-radius: 12px;
+      padding: 36px;
+      width: 100%;
+      max-width: 520px;
+    }
+    h1 { font-size: 1.4rem; font-weight: 700; margin-bottom: 6px; }
+    .sub { color: #64748b; font-size: 0.875rem; margin-bottom: 28px; }
+    label {
+      display: block;
+      font-size: 0.78rem;
+      font-weight: 600;
+      color: #94a3b8;
+      text-transform: uppercase;
+      letter-spacing: 0.05em;
+      margin-bottom: 6px;
+    }
+    input, .file-area {
+      width: 100%;
+      background: #0f1117;
+      border: 1px solid #2d3748;
+      border-radius: 8px;
+      color: #e2e8f0;
+      font-size: 0.875rem;
+      padding: 10px 14px;
+      outline: none;
+      margin-bottom: 16px;
+      font-family: monospace;
+    }
+    input:focus { border-color: #7c3aed; }
+    .file-area {
+      cursor: pointer;
+      text-align: center;
+      padding: 24px;
+      border-style: dashed;
+      color: #64748b;
+      transition: border-color 0.2s, color 0.2s;
+      position: relative;
+    }
+    .file-area:hover, .file-area.drag { border-color: #7c3aed; color: #a78bfa; }
+    .file-area input[type=file] {
+      position: absolute; inset: 0; opacity: 0; cursor: pointer;
+      width: 100%; height: 100%; margin: 0; padding: 0; border: none;
+      background: none;
+    }
+    #fileName { font-size: 0.82rem; color: #a78bfa; margin-top: 6px; }
+    button {
+      width: 100%;
+      background: #7c3aed;
+      color: #fff;
+      border: none;
+      border-radius: 8px;
+      padding: 12px;
+      font-size: 0.95rem;
+      font-weight: 600;
+      cursor: pointer;
+      transition: background 0.2s;
+    }
+    button:hover:not(:disabled) { background: #6d28d9; }
+    button:disabled { opacity: 0.5; cursor: not-allowed; }
+    #status {
+      margin-top: 20px;
+      padding: 14px;
+      border-radius: 8px;
+      font-size: 0.875rem;
+      display: none;
+      background: #0f1117;
+      border: 1px solid #2d3748;
+    }
+    .tag {
+      display: inline-block;
+      padding: 2px 10px;
+      border-radius: 99px;
+      font-size: 0.75rem;
+      font-weight: 700;
+      margin-bottom: 8px;
+    }
+    .tag-processing { background: rgba(245,158,11,0.15); color: #f59e0b; }
+    .tag-completed  { background: rgba(16,185,129,0.15); color: #10b981; }
+    .tag-failed     { background: rgba(244,63,94,0.15);  color: #f43f5e; }
+    .score-row { display: flex; gap: 16px; margin: 12px 0; }
+    .score-block { flex: 1; background: #1a1f2e; border: 1px solid #2d3748; border-radius: 8px; padding: 12px; text-align: center; }
+    .score-num { font-size: 1.8rem; font-weight: 700; }
+    .score-lbl { font-size: 0.7rem; color: #64748b; text-transform: uppercase; }
+    .mistakes { margin-top: 12px; }
+    .mistake { padding: 8px 12px; background: rgba(244,63,94,0.06); border: 1px solid rgba(244,63,94,0.15); border-radius: 6px; font-size: 0.82rem; color: #cbd5e1; margin-bottom: 6px; line-height: 1.5; }
+    .no-mistakes { color: #10b981; font-size: 0.875rem; }
+    .spinner { display: inline-block; width: 12px; height: 12px; border: 2px solid rgba(255,255,255,0.2); border-top-color: #fff; border-radius: 50%; animation: spin 0.7s linear infinite; vertical-align: middle; margin-right: 6px; }
+    @keyframes spin { to { transform: rotate(360deg); } }
+    .job-id { font-family: monospace; font-size: 0.72rem; color: #475569; margin-top: 8px; word-break: break-all; }
+  </style>
+</head>
+<body>
+<div class="box">
+  <h1>⚡ Code Evaluator</h1>
+  <p class="sub">Upload a Python script and receive an AI grading report.</p>
+
+  <label>API Base URL</label>
+  <input type="text" id="apiUrl" placeholder="https://dhyandevp-codeevaluator.hf.space" />
+
+  <label>X-API-Key</label>
+  <input type="password" id="apiKey" placeholder="ek-..." />
+
+  <label>Python File (.py)</label>
+  <div class="file-area" id="dropZone">
+    <input type="file" id="fileInput" accept=".py" onchange="onFile(this)" />
+    📂 Click to choose a .py file or drag it here
+    <div id="fileName"></div>
+  </div>
+
+  <button id="submitBtn" onclick="submit()" disabled>Submit for Evaluation</button>
+
+  <div id="status"></div>
+</div>
+
+<script>
+  let pollTimer = null;
+
+  // Auto-fill URL if the page is served from the Space itself
+  window.onload = () => {
+    const origin = location.origin;
+    document.getElementById('apiUrl').value =
+      (origin.startsWith('http') && !origin.includes('localhost') && !origin.includes('file:'))
+        ? origin
+        : 'https://dhyandevp-codeevaluator.hf.space';
+  };
+
+  function onFile(input) {
+    const f = input.files[0];
+    document.getElementById('fileName').textContent = f ? f.name : '';
+    document.getElementById('submitBtn').disabled = !f;
+  }
+
+  // Drag-and-drop styling
+  const dz = document.getElementById('dropZone');
+  dz.addEventListener('dragover',  e => { e.preventDefault(); dz.classList.add('drag'); });
+  dz.addEventListener('dragleave', ()  => dz.classList.remove('drag'));
+  dz.addEventListener('drop',      e  => {
+    e.preventDefault(); dz.classList.remove('drag');
+    const f = e.dataTransfer.files[0];
+    if (f) {
+      document.getElementById('fileInput').files = e.dataTransfer.files;
+      onFile(document.getElementById('fileInput'));
+    }
+  });
+
+  async function submit() {
+    const url    = document.getElementById('apiUrl').value.trim().replace(/\/$/, '');
+    const apiKey = document.getElementById('apiKey').value.trim();
+    const file   = document.getElementById('fileInput').files[0];
+
+    if (!url || !apiKey || !file) return;
+    if (pollTimer) clearInterval(pollTimer);
+
+    document.getElementById('submitBtn').disabled = true;
+    showStatus('processing', null, null, null, 'Submitting…');
+
+    const form = new FormData();
+    form.append('file', file);
+
+    try {
+      const res  = await fetch(`${url}/submit`, { method: 'POST', headers: { 'X-API-Key': apiKey }, body: form });
+      const data = await res.json();
+      if (!res.ok) { showError(`Error ${res.status}: ${data.detail}`); return; }
+
+      const jobId = data.job_id;
+      showStatus('processing', jobId, null, null, 'Evaluating your code…');
+      pollTimer = setInterval(() => poll(url, apiKey, jobId), 3000);
+    } catch (e) {
+      showError('Cannot reach the API. Check the URL and your internet connection.');
+    }
+  }
+
+  async function poll(url, apiKey, jobId) {
+    try {
+      const res  = await fetch(`${url}/report/${jobId}`, { headers: { 'X-API-Key': apiKey } });
+      const data = await res.json();
+      if (data.status === 'Processing') return;
+      clearInterval(pollTimer);
+      document.getElementById('submitBtn').disabled = false;
+      if (data.status === 'Completed') {
+        showStatus('completed', jobId, data.report.score, data.report.percentage, null, data.report.mistakes);
+      } else {
+        showError(`Failed: ${data.error?.error_message || 'Unknown error'}`);
+      }
+    } catch (_) { /* keep polling */ }
+  }
+
+  function showStatus(state, jobId, score, pct, message, mistakes) {
+    const el = document.getElementById('status');
+    el.style.display = 'block';
+
+    const tagClass = { processing: 'tag-processing', completed: 'tag-completed', failed: 'tag-failed' }[state];
+    const tagLabel = { processing: '⏳ Processing', completed: '✅ Completed', failed: '❌ Failed' }[state];
+
+    let html = `<span class="tag ${tagClass}">${tagLabel}</span>`;
+
+    if (state === 'processing') {
+      html += `<br/><span class="spinner"></span>${message || 'Working…'}`;
+    }
+
+    if (state === 'completed') {
+      const sc = colorFor(score), pc = colorFor(pct);
+      html += `
+        <div class="score-row">
+          <div class="score-block">
+            <div class="score-num" style="color:${sc}">${score}</div>
+            <div class="score-lbl">Score / 100</div>
+          </div>
+          <div class="score-block">
+            <div class="score-num" style="color:${pc}">${pct.toFixed(1)}%</div>
+            <div class="score-lbl">Precision</div>
+          </div>
+        </div>
+        <div class="mistakes">`;
+      if (!mistakes || mistakes.length === 0) {
+        html += '<div class="no-mistakes">✅ No issues found — excellent code!</div>';
+      } else {
+        mistakes.forEach(m => { html += `<div class="mistake">• ${esc(m)}</div>`; });
+      }
+      html += '</div>';
+    }
+
+    if (jobId) html += `<div class="job-id">job: ${jobId}</div>`;
+    el.innerHTML = html;
+  }
+
+  function showError(msg) {
+    clearInterval(pollTimer);
+    document.getElementById('submitBtn').disabled = false;
+    const el = document.getElementById('status');
+    el.style.display = 'block';
+    el.innerHTML = `<span class="tag tag-failed">❌ Failed</span><br/>${esc(msg)}`;
+  }
+
+  function colorFor(v) {
+    if (v >= 70) return '#10b981';
+    if (v >= 40) return '#f59e0b';
+    return '#f43f5e';
+  }
+
+  function esc(s) {
+    return String(s).replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;');
+  }
+</script>
+</body>
+</html>

main.py

@@ -42,25 +42,24 @@ if not YOUR_CUSTOM_API_KEY:
         "Add it to your deployment secrets and restart."
     )
 
-# LLM provider API key — set as an environment secret, never hardcoded.
-HUGGINGFACE_API_KEY: str | None = os.getenv("HUGGINGFACE_API_KEY")
+# LLM provider API key — loaded from the OPENROUTER_API_KEY environment secret.
+# Set this in your deployment's secrets panel. Never hardcode it here.
+OPENROUTER_API_KEY: str | None = os.getenv("OPENROUTER_API_KEY")
 
-if not HUGGINGFACE_API_KEY:
+if not OPENROUTER_API_KEY:
     logger.warning(
-        "HUGGINGFACE_API_KEY is not set. "
+        "OPENROUTER_API_KEY is not set. "
         "All /submit requests will fail during LLM inference. "
         "Add the secret in your deployment environment and restart."
     )
 
-# AsyncOpenAI client pointed at the HuggingFace OpenAI-compatible gateway.
-# Swap base_url and api_key env var to switch providers (e.g. OpenRouter)
-# without touching any other part of the code.
+# AsyncOpenAI client pointed at OpenRouter's OpenAI-compatible gateway.
 openai_client = AsyncOpenAI(
-    api_key=HUGGINGFACE_API_KEY or "missing-key",
-    base_url="https://api-inference.huggingface.co/v1/",
+    api_key=OPENROUTER_API_KEY or "missing-key",
+    base_url="https://openrouter.ai/api/v1",
 )
 
-MODEL_ID: str = "Qwen/Qwen2.5-Coder-32B-Instruct"
+MODEL_ID: str = "qwen/qwen-2.5-coder-32b-instruct"
 
 # ---------------------------------------------------------------------------
 # Database