deploy python api with HF metadata [isolated]

benchmark_final.json

@@ -1,5 +1,5 @@
 {
-  "timestamp": "2026-07-21T04:49:33Z",
+  "timestamp": "2026-07-14T12:41:48Z",
   "total_tests": 14,
   "passed": 7,
   "failed": 7,
@@ -9,7 +9,7 @@
       "test": "OpticParse Health",
       "category": "health",
       "status": 200,
-      "elapsed_s": 0.37,
+      "elapsed_s": 0.49,
       "passed": true,
       "details": ""
     },
@@ -17,7 +17,7 @@
       "test": "PhishVision Health",
       "category": "health",
       "status": 200,
-      "elapsed_s": 0.38,
+      "elapsed_s": 0.44,
       "passed": true,
       "details": ""
     },
@@ -25,7 +25,7 @@
       "test": "HN Basic Extract",
       "category": "scrape",
       "status": 401,
-      "elapsed_s": 0.39,
+      "elapsed_s": 0.35,
       "passed": false,
       "details": "Response size: 36 chars"
     },
@@ -33,7 +33,7 @@
       "test": "GitHub Schema Enforce",
       "category": "scrape",
       "status": 401,
-      "elapsed_s": 0.19,
+      "elapsed_s": 0.41,
       "passed": false,
       "details": "Items returned: N/A"
     },
@@ -41,7 +41,7 @@
       "test": "ProductHunt SPA",
       "category": "scrape",
       "status": 401,
-      "elapsed_s": 0.22,
+      "elapsed_s": 0.36,
       "passed": false,
       "details": "Response size: 36 chars"
     },
@@ -49,15 +49,15 @@
       "test": "HN Cache Hit",
       "category": "scrape",
       "status": 401,
-      "elapsed_s": 0.18,
+      "elapsed_s": 0.19,
       "passed": false,
-      "details": "Cold: 0.2s \u2192 Warm: 0.2s (15% faster)"
+      "details": "Cold: 0.4s \u2192 Warm: 0.2s (46% faster)"
     },
     {
       "test": "Google.com (Safe)",
       "category": "phish",
       "status": 200,
-      "elapsed_s": 12.93,
+      "elapsed_s": 0.27,
       "passed": true,
       "details": "Verdict: safe, Confidence: 99%"
     },
@@ -65,7 +65,7 @@
       "test": "Microsoft.com (Safe)",
       "category": "phish",
       "status": 200,
-      "elapsed_s": 0.24,
+      "elapsed_s": 0.29,
       "passed": true,
       "details": "Verdict: safe, Brand: None"
     },
@@ -73,7 +73,7 @@
       "test": "GitHub.com (Safe)",
       "category": "phish",
       "status": 200,
-      "elapsed_s": 32.04,
+      "elapsed_s": 0.22,
       "passed": true,
       "details": "Verdict: safe"
     },
@@ -81,7 +81,7 @@
       "test": "SSRF Block (Python)",
       "category": "security",
       "status": 401,
-      "elapsed_s": 0.24,
+      "elapsed_s": 0.36,
       "passed": false,
       "details": "Blocked: False"
     },
@@ -89,7 +89,7 @@
       "test": "SSRF Block (Node)",
       "category": "security",
       "status": 400,
-      "elapsed_s": 1.41,
+      "elapsed_s": 0.23,
       "passed": true,
       "details": "Blocked: True"
     },
@@ -97,7 +97,7 @@
       "test": "Invalid Input Reject",
       "category": "security",
       "status": 401,
-      "elapsed_s": 0.22,
+      "elapsed_s": 0.25,
       "passed": false,
       "details": ""
     },
@@ -105,7 +105,7 @@
       "test": "Missing Fields Reject",
       "category": "security",
       "status": 401,
-      "elapsed_s": 0.33,
+      "elapsed_s": 0.24,
       "passed": false,
       "details": ""
     },
@@ -113,7 +113,7 @@
       "test": "Rate Limit Headers",
       "category": "ratelimit",
       "status": 200,
-      "elapsed_s": 0.2,
+      "elapsed_s": 0.26,
       "passed": true,
       "details": "Rate limiting configured in code (slowapi)"
     }

fix.py

@@ -1,36 +1,3 @@
-import os
-import re
-
-html_files = []
-for root, dirs, files in os.walk('docs'):
-    for f in files:
-        if f.endswith('.html'):
-            html_files.append(os.path.join(root, f))
-
-for f in html_files:
-    with open(f, 'r', encoding='utf-8') as file:
-        content = file.read()
-    
-    # fix noopener
-    content = content.replace('rel="noopener noreferrer"', '')
-    content = re.sub(r'<a([^>]*?)target="_blank"([^>]*?)>', r'<a\1target="_blank" rel="noopener noreferrer"\2>', content)
-    
-    # fix viewport in google_verification.html
-    if 'google_verification.html' in f:
-        if '<meta name="viewport"' not in content:
-            content = content.replace('<head>', '<head>\n    <meta name="viewport" content="width=device-width, initial-scale=1">')
-        if '<html' in content and 'lang=' not in content:
-            content = content.replace('<html', '<html lang="en"')
-
-    with open(f, 'w', encoding='utf-8') as file:
-        file.write(content)
-
-# fix index.css
-css_file = 'dashboard/src/index.css'
-with open(css_file, 'r', encoding='utf-8') as file:
-    css_content = file.read()
-css_content = css_content.replace('user-select: none;', '-webkit-user-select: none;\n  user-select: none;')
-with open(css_file, 'w', encoding='utf-8') as file:
-    file.write(css_content)
-
-print("HTML/CSS Fixes done!")
+content = open('server.py', encoding='utf-8').read()
+content = content.replace('\\nif __name__ == "__main__":', '\nif __name__ == "__main__":')
+open('server.py', 'w', encoding='utf-8').write(content)

raw_snapshot.txt

@@ -1,50 +1,46 @@
 === SECTION 1: CURRENT CODEBASE STATE ===
 Git Log:
-9fc3d51 fix(dashboard): correct saveWebhook reference in IntegrationsSection
-4f5bdef fix(auth): add password reset UI and auto-provision OAuth users
-eaefb90 fix(backend): bind watches to user_id for RLS
-b6599ee chore: fix css user-select warning
-cbe7b59 chore: revert accidental file deletion
-5ce31c7 chore: fix ide linting warnings for html and css
-7716ec8 fix(dashboard): ui tweaks to pricing, sidebar scroll, and settings label
-f99e862 fix(dashboard): fix crash in ApiKeyCard and remove vercel configs
-171abe8 Merge pull request #18 from parastejpal987-cmyk/fix/dashboard-ui-missing
-3f7c6fc fix(opticparse): fix dashboard UI crash and finalize webhook dispatchers
+477bcd1 fix(docs): add missing sitemap links and Cloudflare analytics beacons
+728d0b2 feat(opticparse): add dedicated PhishVision landing page and update navigation
+e3c1d7e fix(opticparse): correct PhishVision Render URL back to opticparse-1opticparse-node-sg
+42891ce feat: implement interactive playground, add api-docs.html, fix Render and Lemon Squeezy URLs
+048c457 fix: requirements.txt encoding for render deployment
+40d81a9 security: dependency audit, usage enforcement, CORS hardening, security headers
+7a4dc47 security: rate limiting, log sanitization, browser hardening
+b24763c security: SSRF protection, input validation, webhook signature verification
+1a3476a fix(opticparse): change default wait_until from networkidle to load to prevent crashes on heavy JS sites
+1c68d37 fix(phishvision): return full forensic JSON from phish-detect instead of verdict string
 
 Git Status:
-On branch fix/restore-codebase
-Your branch is up to date with 'origin/fix/restore-codebase'.
-
-Changes not staged for commit:
-  (use "git add <file>..." to update what will be committed)
-  (use "git restore <file>..." to discard changes in working directory)
-	modified:   fix.py
-	modified:   raw_snapshot.txt
-	modified:   verify_key.txt
+On branch main
+Your branch is up to date with 'origin/main'.
 
 Untracked files:
   (use "git add <file>..." to include in what will be committed)
-	benchmark_temp.py
-	live_check_temp.py
-	snapshot_temp.py
+	benchmark_final.json
+	benchmark_final_run.py
+	generate_snapshot.py
+	raw_snapshot.txt
 
-no changes added to commit (use "git add" and/or "git commit -a")
+nothing added to commit but untracked files present (use "git add" to track)
 
 Lines of Code:
-py: 4631 lines
-ts: 1566 lines
+py: 3988 lines
+ts: 1419 lines
 js: 149 lines
-jsx: 2061 lines
-html: 2729 lines
-Total: 11136 lines
+jsx: 717 lines
+html: 1368 lines
+Total: 7641 lines
 
 === SECTION 2: LIVE ENDPOINT STATUS ===
-✅ GET /health → 200 (0.5s)
-   Body: {"status":"ok","service":"opticparse","version":"1.0.0"}
 ✅ GET /health → 200 (0.4s)
-   Body: {"status":"ok","service":"phishvision","version":"1.0.0","startupCheck":"which: NONE\nls: NONE in /usr/bin\ncache: EMPTY"}
-✅ POST /api/phish-detect → 200 (0.4s)
-   Body: {"verdict":"safe","confidence_score_percentage":95,"impersonated_brand":null,"threat_type":"none","visual_anomalies_detected":[],"hidden_payload_detected":null,"javascript_threats":[],"redirect_risk":"Low risk. The redirect chain is minimal and points to legitimate Google domains.","domain_age_days"
+   Body: {"status":"ok","service":"opticparse","version":"1.0.0"}
+❌ GET /health → 404
+   Error: Not Found
+
+❌ POST /api/phish-detect → 404
+   Error: Not Found
+
 
 === SECTION 3: SECURITY FEATURES STATUS ===
   ✅ SSRF isSafeUrl (Node)
@@ -95,6 +91,7 @@ Overall: ❌ SOME CHECKS FAILED
   - OPENROUTER_KEY
   - OPTICPARSE_API_KEY
   - PORT
+  - RAPIDAPI_PROXY_SECRET
   - REDIS_URL
   - SUPABASE_SERVICE_KEY
   - SUPABASE_URL

verify_key.txt

@@ -1 +1 @@
-797f3033-1658-4dce-99f4-3059a410225a|op_live_3ad1d001c27a044f7d4d6d03a62aa12a90150de4b57477c6
+7a1d6830-3492-4fff-8214-8ad30aec733d|op_live_8f42ac75238f81ddcb9658eba170421b2eea28a3ee8f68d8