🚀 FINAL COMPLIANCE: Added callback authentication, expanded intelligence mapping, and centralized GUVI_API_KEY

app/config.py

@@ -12,6 +12,7 @@ class Settings(BaseSettings):
     APP_NAME: str = "Scam Honeypot API"
     VERSION: str = "2.0.0"
     DEBUG: bool = False
+    GUVI_API_KEY: str = "GUVI_HACKATHON_V2"
     
     # LLM Configuration
     LLM_PROVIDER: str = "groq"

app/utils/callback_client.py

@@ -5,6 +5,8 @@ from typing import Dict, List
 from tenacity import retry, stop_after_attempt, wait_exponential
 from app.utils.logger import AgentLogger
 
+from app.config import settings
+
 logger = AgentLogger("callback_client")
 GUVI_CALLBACK_URL = "https://hackathon.guvi.in/api/updateHoneyPotFinalResult"
 
@@ -53,14 +55,24 @@ class GUVIMandatoryCallback:
                 response = await client.post(
                     GUVI_CALLBACK_URL,
                     json=payload,
-                    headers={"Content-Type": "application/json"}
+                    headers={
+                        "Content-Type": "application/json",
+                        "x-api-key": settings.GUVI_API_KEY
+                    }
                 )
                 
                 if response.status_code in [200, 201]:
                     logger.info("GUVI callback successful", session_id=session_id)
                     return True
                 else:
-                    logger.error("GUVI callback failed", status=response.status_code, session_id=session_id)
+                    try:
+                        resp_body = response.json()
+                    except:
+                        resp_body = response.text
+                    logger.error("GUVI callback failed", 
+                                 status=response.status_code, 
+                                 session_id=session_id,
+                                 response=resp_body)
                     return False
                     
         except Exception as e:

app/utils/guvi_handler.py

@@ -16,6 +16,11 @@ class GUVIHandler:
             "upiIds": internal_intel.get("upi_ids", []),
             "phishingLinks": internal_intel.get("urls", []),
             "phoneNumbers": internal_intel.get("phone_numbers", []),
+            "ifscCodes": internal_intel.get("ifsc_codes", []),
+            "emailAddresses": internal_intel.get("emails", []),
+            "panCards": internal_intel.get("pan_cards", []),
+            "aadharNumbers": internal_intel.get("aadhar_numbers", []),
+            "amountsExtracted": internal_intel.get("amounts", []),
             "suspiciousKeywords": internal_intel.get("keywords", [])
         }
     

reproduce_guvi_call.py

@@ -0,0 +1,69 @@
+
+import httpx
+import asyncio
+import json
+
+async def test_guvi_api():
+    url = "https://avinashanalytics-sentinel-scam-honeypo.hf.space/api/guvi/analyze"
+    headers = {
+        "x-api-key": "GUVI_HACKATHON_V2",
+        "Content-Type": "application/json"
+    }
+    
+    # 1. First Message
+    payload1 = {
+        "sessionId": "local-repro-123",
+        "message": {
+            "sender": "scammer",
+            "text": "Hello, your bank account is suspended. Update KYC at http://fake.com",
+            "timestamp": "2026-01-28T10:15:30Z"
+        },
+        "conversationHistory": [],
+        "metadata": {"channel": "SMS"}
+    }
+    
+    print("\n[Test 1] Sending First Message...")
+    async with httpx.AsyncClient(timeout=30.0) as client:
+        try:
+            resp1 = await client.post(url, json=payload1, headers=headers)
+            print(f"Status: {resp1.status_code}")
+            print(f"Response: {json.dumps(resp1.json(), indent=2)}")
+            
+            if resp1.status_code != 200:
+                return
+
+            # 2. Second Message (Follow-up)
+            payload2 = {
+                "sessionId": "local-repro-123",
+                "message": {
+                    "sender": "scammer",
+                    "text": "Please provide your UPI ID to verify.",
+                    "timestamp": "2026-01-28T10:17:10Z"
+                },
+                "conversationHistory": [
+                    {
+                        "sender": "scammer",
+                        "text": "Hello, your bank account is suspended. Update KYC at http://fake.com",
+                        "timestamp": "2026-01-28T10:15:30Z"
+                    },
+                    {
+                        "sender": "user",
+                        "text": "Why is it suspended?",
+                        "timestamp": "2026-01-28T10:16:10Z"
+                    }
+                ],
+                "metadata": {"channel": "SMS"}
+            }
+            
+            print("\n[Test 2] Sending Second Message (with History)...")
+            resp2 = await client.post(url, json=payload2, headers=headers)
+            print(f"Status: {resp2.status_code}")
+            print(f"Response: {json.dumps(resp2.json(), indent=2)}")
+            
+        except Exception as e:
+            print(f"Error: {e}")
+
+if __name__ == "__main__":
+    # Ensure server is running before executing this
+    # uvicorn app.main:app --host 0.0.0.0 --port 8000
+    asyncio.run(test_guvi_api())