~i[dZddlmZddlZddlmZddlmZddlm Z m Z ddl Z ddl m Z ddlmZeeZd2d Zd3d ZeGd d Zd4d ZdddZ d5dd d6dZ d5ddd d7dZd8dZd8dZd8dZd8dZd9dZ d:dZd;dZd;dZ d;dZ!dd(Z+d5d?d)Z,d@dAd*Z-dBdAd+Z.dBdAd,Z/dBdAd-Z0dBdAd.Z1dCd/Z2dDd0Z3dEd1Z4y)Fu~ services/peoplehub_api.py ========================== Defensive HTTP client for the People Hub upstream APIs. POST {PEOPLEHUB_BASE_URL}/login/by-accesskey/{access_key} POST {PEOPLEHUB_BASE_URL}/roleplays/by-accesskey/{access_key} POST {PEOPLEHUB_BASE_URL}/codingassessment/by-accesskey/{access_key} POST {PEOPLEHUB_BASE_URL}/coding/submit POST {PEOPLEHUB_ASSESS_BASE_URL}/test/gsonTestResponse.jsp?accesskey=… POST {PEOPLEHUB_ASSESS_BASE_URL}/test/updateAssessmentScoreApi.jsp?… All endpoints are POST per upstream contract — calling them via GET returns HTTP 405. The assess base URL is *derived* from PEOPLEHUB_BASE_URL so deployments never hardcode hostnames. Notes ───── • Response shapes are treated as opaque JSON. Extractors below read fields with safe fallbacks so the rest of the platform never KeyErrors. • All calls include a configurable timeout + retry budget. • The full response is preserved verbatim so the frontend can store it in localStorage exactly as the spec requires. • No URL or credential is ever logged in cleartext at INFO level — only the path and host are logged for audit. ) annotationsN) dataclass)Any)quoteurlparse)settings) get_loggerctjxsdjd}|syd|vr|jddSt |}|j r(|j r|j d|j dS|S)a Derive the eReKruit-assess base URL from PEOPLEHUB_BASE_URL. The two upstream surfaces live on the same host but on different application contexts: api base: https:///eReKruit/api assess base: https:///eReKruit-assess Operators only configure PEOPLEHUB_BASE_URL; we derive the assess base by replacing the /eReKruit/api context with /eReKruit-assess. Falls back to a same-host /eReKruit-assess for any non-standard base. /z /eReKruit/apiz/eReKruit-assess://)rPEOPLEHUB_BASE_URLrstripreplacerschemenetloc)baseparseds q/Users/priyanka/Documents/AI_Agent_Assessment/pepole_hub_candidate/people_hub_candidate/services/peoplehub_api.py_assess_base_urlr,sv  ' ' -2 5 5c :D $||O-?@@ d^F }}--FMM?2BCC Kc t|}|jd|j|jS#t$rYywxYw)z=Strip query string and credentials from a URL before logging.r z)rrrpath Exception)urlps r _safe_log_urlrDsC SM((3qxxj11 s14 AAcZeZdZUded<ded<ded<ded<d Zd ed <d Zded <ddZy ) ApiResultboolokint status_coderdatastrrawNz str | Noneerrorr rcv|j|j|j|j|jdS)Nr!r#r$r'rr))selfs rto_dictzApiResult.to_dictXs177++99::88   r)returndict)__name__ __module__ __qualname____annotations__r'rr+rrrrOs/ H I HE:CM rrctjxsdjd}|d|jddt |dS)Nr r safe)rrrlstripr)r access_keyrs r_urlr8dsF  ' ' -2 5 5c :DV1T[[%&ajr(B'C DDrzapplication/jsonzPeopleHub-Candidate-Portal/1.0)Acceptz User-AgentFbarec tjtjd} tj|tj dt 5}|r|j|}n|j||xsi}dddj} |j}|jrtd|j||d|Std|j||d |j|S#1swYsxYw#tj$rtdddd d |cYStj$rtdddd d |cYSwxYw#tj$r|}YwxYw) uSingle POST attempt — wrapped by `_post_with_retry`. `bare=True` sends a body-less POST (no Content-Type, zero-length body). The People Hub assess JSPs (`updateAssessmentScoreApi.jsp` and `gsonTestResponse.jsp`) accept this form — and only this form — and reject `application/json` requests with a 500 because their internal parser tries to read form parameters. Postman's default "POST with no body" mode also produces a bare POST, which is why it works there. $@connectTtimeoutverifyfollow_redirectsheaders)jsonNFrr upstream timeoutupstream network errorupstream returned HTTP httpxTimeoutrPEOPLEHUB_TIMEOUTClientPEOPLEHUB_VERIFY_TLS_DEFAULT_HEADERSpostTimeoutExceptionr RequestErrortextrEJSONDecodeError is_successr#)rbodyr;rAclientrespr&rs r_postrYosZmmH66EGL \\00!$  {{3'{{3djb{: $ ))C t//dCHH  t !$"2"2!34c =    ! !F4-?EE   L4-EsKKL   sA+C<,C0>C<E 0C95C<<#E!"EE E! E!) max_retriesr;c|tj}tdt|dz}d}t d|dzD]}t |||}|}|j r|cS|jdk(xs|jdk\}|r||k\r0tjdt||j|||cStjdt||j|||S)uGRetry transient failures (timeouts, 5xx) up to N times. `bare=True` sends a body-less POST every attempt (used for the assess JSP endpoints — see `_post.bare` for why). `max_retries` defaults to `settings.PEOPLEHUB_RETRIES`. Pass 0 to disable retries. Connect failures and 5xx are treated as transient. Nr:r%[PeopleHub] %s → %s (attempt %d/%d)2[PeopleHub] %s → %s (attempt %d/%d) — retrying) rPEOPLEHUB_RETRIESmaxr"rangerYr!r#logwarningrr'info) rrVrZr;attemptslastiresult transients r_post_with_retryrks00 1c+&*+H!D 1hl #sDt, 99M''1,L&2D2D2K AM KK7c"FLL!X M  @ #  a $( Krcntd|}tjdt|t |S)z%POST /login/by-accesskey/{access_key}zlogin/by-accesskeyu[PeopleHub] login → %sr8rcrerrkr7rs rloginros. #Z 0CHH 's);< C  rcntd|}tjdt|t |S)z)POST /roleplays/by-accesskey/{access_key}zroleplays/by-accesskeyu[PeopleHub] roleplays → %srmrns r roleplaysrqs. ' 4CHH +]3-?@ C  rcntd|}tjdt|t |S)z0POST /codingassessment/by-accesskey/{access_key}zcodingassessment/by-accesskeyu[PeopleHub] coding → %srmrns rcoding_assessmentrss. . ;CHH (-*<= C  rct}|stddddddS|dt|d}tj dt |t |d S) uf POST {assess_base}/test/gsonTestResponse.jsp?accesskey={access_key} Sent as a *bare* POST (no body, no Content-Type) — the JSP rejects application/json with a 500 because its internal parser tries to read form parameters from the body. GET also returns 405. Postman's default "POST with no body" call matches our request exactly. FrNr $PEOPLEHUB_BASE_URL is not configuredz%/test/gsonTestResponse.jsp?accesskey=r4u![PeopleHub] get_assessment → %sTr:)rrrrcrerrk)r7rrs rget_assessmentrvsj  D 4-SUWXX &JR01 3HH 0-2DE Cd ++rc t}|stddddddS|dtt|ddtt|d}tj d t |t|d S) uPOST {assess_base}/test/updateAssessmentScoreApi.jsp?accesskey=…&testid=… Sent as a *bare* POST (no body, no Content-Type). Sending JSON here causes the JSP to throw 500. With a bare POST it returns: {"status":"success","accesskey":"…","testid":N,"attempt_id":…, "totalScore":…,"resultStatus":…,"message":"Test submitted successfully"} This call is the *final* submit only — it must NOT be invoked once per question. Per-question saves go through `update_assessment_answer`. FrNr ruz-/test/updateAssessmentScoreApi.jsp?accesskey=r4z&testid=u*[PeopleHub] submit_assessment_score → %sTr:)rrrr%rcrerrk)r7testidrrs rsubmit_assessment_scorerys  D 4-SUWXX &C O"56 5V2./ 1 HH 9=;MN Cd ++rc 4t}|stddddddS|d}tjdt |t |t |t |t |t ||dn t |t |d} t || S) uPOST {assess_base}/test/updateAssessmentApi.jsp Per-question save called on every Next click. The upstream JSP expects its parameters as application/x-www-form-urlencoded — sending JSON causes a 500. We pass them as form fields via httpx's `data=` kwarg. Expected response (loose contract — extracted defensively by callers): { "status": "success", "message": "", "answerUpdated": true, "timerUpdated": false, "isFinalSectionSubmit": false, "data": { "counter": "2865", "sectionid": "1", "questionid": "1551", "case_questionid": "0", "question_flag": "0" } } FrNr ruz/test/updateAssessmentApi.jspu+[PeopleHub] update_assessment_answer → %s) accesskey sectionid questionid question_flagcounterAnswerrx)rrrcrerr%_post_form_with_retry) r7r|r}r~ranswerrxrrforms rupdate_assessment_answerrs@  D 4-SUWXX F/ 0CHH :M#", "received_at": "", "request": { "access_key": "", "candidate_id": "", "question_id": , "question_text": "...", "language": "python|java|...", "code": "", "submitted_at": "" } } Response body (loose): { "status": true, "message": "Coding submission saved successfully", "data": { "id": , "kind": "coding_submit", "accessKey": "...", "receivedAt": "...", "candidateId": "...", "questionId": , "questionText": "...", ... } } r r FrNruz/coding/submitu [PeopleHub] submit_coding → %sr7kind coding_submit rrrrrcrerr-r% setdefaultrkr7payloadrrrVs r submit_codingrEs@  ' ' -2 5 5c :D 4-SUWXX F. !CHH /s1CD  2 DZDOOFO, C &&rc*tjxsdjd}|stddddddS|d}tj dt |t|xsi}t||d <|jd d t||S) a-POST {PEOPLEHUB_BASE_URL}/roleplay/save Accepts a JSON body in the form documented by the upstream contract: { "kind": "roleplay", "access_key": "", "received_at": "", "request": { "scenario": { "id": "...", "title": "..." }, "session_id": "...", "duration_seconds": 0, "turns_completed": 0, "mode": "voice|video|text", "end_reason": "completed|time_expired|abandoned" } } Response body (loose): { "status": "success", "message": "...", "saved": true } The access_key is included in the body per the upstream sample, but we also pass it as a query string for backward compatibility with older builds of the upstream service. r r FrNruz/roleplay/saveu [PeopleHub] save_roleplay → %sr7rroleplayrrs r save_roleplayrts2  ' ' -2 5 5c :D 4-SUWXX F. !CHH /s1CD  2 DZDOOFJ' C &&rc*tjxsdjd}|stddddddS|d}tj dt |t|xsi}t||d <|jd d t||S) aUPOST {PEOPLEHUB_BASE_URL}/roleplay/report Called once the role play report has been generated on the candidate side. The body mirrors the upstream contract: { "kind": "roleplay", "access_key": "", "received_at": "", "request": { "scenario": { "id": "...", "title": "...", "description": "...", "context": "...", "category": "...", "cat_label": "...", "learner_role": "...", "learner_emoji": "...", "ai_character": "...", "ai_emoji": "...", "ai_personality": "...", "difficulty": "...", "turns": 8 }, "session_id": "...", "duration_seconds": 0, "turns_completed": 0, "mode": "voice|video|text", "end_reason": "completed|time_expired|abandoned", "report": { ... full generated report payload ... } } } Response body (loose): { "status": "success", "message": "...", "saved": true } r r FrNruz/roleplay/reportu'[PeopleHub] save_roleplay_report → %sr7rrrrs rsave_roleplay_reportrs8  ' ' -2 5 5c :D 4-SUWXX F" #CHH 6 c8JK  2 DZDOOFJ' C &&rc tjtjd} tj|tj dt 5}|j||}dddj} |j}|jrtd|j||d|Std|j||d |j|S#1swYsxYw#tj$rtdddd d |cYStj$rtdddd d |cYSwxYw#tj$r|}YwxYw) z.Single attempt POST with form-urlencoded body.r=r>Tr@)r$NFrr rFrGrHrI)rrrArWrXr&rs r _post_formrs?mmH66EG L \\00!$  ;;s;.D   ))C t//dCHH  t !$"2"2!34c )    ! !F4-?EE   L4-EsKKL   sA+C$C&C$;D1C!C$$#D. "D.-D.1E E ctdttjdz}d}t d|dzD]}t ||}|}|j r|cS|jdk(xs|jdk\}|r||k\r0tjdt||j|||cStjdt||j|||S)Nr\rr]r^r_) rar"rr`rbrr!r#rcrdrr're)rrrfrgrhrirjs rrrs1c(4459:H!D 1hl #C& 99M''1,L&2D2D2K AM KK7c"FLL!X M  @ #  a $ Kr) current_stage currentStagestageinterview_stageinterviewStagestage_nostageNo active_stage activeStage) namecandidate_name candidateName full_namefullName display_name displayName first_name firstName)emailcandidate_emailcandidateEmailemail_idemailId)id candidate_id candidateIdparticipant_id participantIduser_iduserIduuid)phonemobile phone_number phoneNumbercontactcontact_number contactNumber)position_appliedpositionAppliedposition role_applied roleAppliedjob_rolejobRole) skill_setskillSetskills skill_list skillListc|dkDs|yt|trH|D]}||vs||dvs||cS|jD]}t|||dz}|dvs|cSyt|tr|rt|d||dzSy)z;Recursively look for any of the given keys in nested dicts.N)Nr r\r) isinstancer-values_walk_for_keyslist)r$keysdepthkvfounds rrr s qyDL$ADyT!WJ6AwA"1dEAI6EJ&   D$ Dd1gtUQY77 rct|t}||S t|j}|s|St |}|dk\r|S|S#t t f$r|cYSwxYw)uPull current_stage from anywhere in the response. Returns the integer stage if the API explicitly provided one (>=1). Returns None when the value is missing, empty, zero, or non-numeric — the frontend then routes the candidate to the "no interview scheduled" page rather than fabricating a stage. Pass an explicit `fallback` if a caller actually wants a default. r\)r _STAGE_KEYSr%stripr" ValueError TypeError)rfallbackr&sns rextract_current_stagersj + .C { HNN O FFq((  "sAAAAAc\t|t}|rt|jS|SN)r _NAME_KEYSr%rrdefaultr&s rextract_candidate_namer5s& * -C"3s8>> //rc\t|t}|rt|jS|Sr)r _EMAIL_KEYSr%rrs rextract_candidate_emailr:& + .C"3s8>> //rc\t|t}|rt|jS|Sr)r_ID_KEYSr%rrs rextract_candidate_idr?s& ( +C"3s8>> //rc\t|t}|rt|jS|Sr)r _PHONE_KEYSr%rrs rextract_candidate_phonerDrrc\t|t}|rt|jS|Sr)r_POSITION_KEYSr%rrs rextract_position_appliedrIs& . 1C"3s8>> //rc0t|t}|gSt|tr|Dcgc] }t |c}St|tr>|j dDcgc]#}|j s|j %c}SgScc}wcc}w)N,)r _SKILLS_KEYSrrr%splitr)rr&rs rextract_skill_setrNs} , /C { #t #$1A$$#s#&99S>?>aQWWY >?? I%?sB!B7Bc t|t|t|t|t |t |t |dS)zSingle-stop dict the frontend can show on profile / toolbar. `current_stage` is None when the API has no stage assigned for this candidate; the frontend treats that as "no interview scheduled". )rrrrrrr)rrrrrrr)rs rextract_candidate_summaryrYsF1927;3G<3G<4W=-g61': rc X|yt|tttfrt |dk(ryt|trhdD]c}||vst||tttfs't ||dk(s9|j Dcgc]}||ddddfvs |}}|rcyycc}w) zATrue if payload is None / empty list / empty dict / empty string.Tr)r$itemsrqresultsrstatusmessager!successF)rrr-r%lenr)rrkkothers ris_empty_responserjs'D$,-#g,!2C'4 BAG| 71:dC7H IcRYZ[R\oabNb&-llnln1hPY[_ajBk8knl C ms B'B')r,r%)rr%r,r%)rr%r7r%r,r%r)rr%rV dict | Noner;r r,r) rr%rVrrZ int | Noner;r r,r)r7r%r,r)r7r%rxrr,r)r7r%r|rr}rr~rrrrr%rxrr,r)r7r%rr-r,r)rr%rr-r,r)r)r$rrztuple[str, ...]rr"r,r)rrrrr,r) Candidate)rrrr%r,r%)r )rrr,z list[str])rrr,r-)rrr,r )5__doc__ __future__rrE dataclassesrtypingr urllib.parserrrJconfigr utils.loggerr r.rcrrrr8rOrYrkrorqrsrvryrrrrrrrrrrrrrrrrrrrrrrrr2rrr s4# !( # 0     (E !23 3 3 3  3  3p(# ( ( ( (  (  (Z!!!,(,.0,0,0, 0,  0,  0, 0, 0,0,f,'^#'L&'R<4  T ,2 8M ".0 0 0 0 0 "r