Spaces:
Sleeping
Sleeping
| #!/usr/bin/env python3 | |
| """Create a NEW private ZeroGPU Space. Uses existing Hub authentication only.""" | |
| import argparse | |
| from datetime import datetime, timezone | |
| import json | |
| from pathlib import Path | |
| import re | |
| import subprocess | |
| import sys | |
| from huggingface_hub import HfApi, get_token | |
| from huggingface_hub.errors import HfHubHTTPError | |
| ROOT = Path(__file__).resolve().parents[1] | |
| ALLOWLIST = ["app.py", "settings.py", "style.css", "requirements.txt", "README.md", | |
| "NOTICE", "LICENSE-QWEN", ".gitignore", "scripts/*.py", "reports/*.md", | |
| "reports/sources.json", "evidence/**", "frontend/**", "package.json", "package-lock.json"] | |
| def main(): | |
| parser = argparse.ArgumentParser(description=__doc__) | |
| parser.add_argument("--name", default="qwen-21-image-" + datetime.now(timezone.utc).strftime("%Y%m%d-%H%M%S")) | |
| args = parser.parse_args() | |
| if not re.fullmatch(r"[a-zA-Z0-9][a-zA-Z0-9._-]{1,80}", args.name): | |
| parser.error("Use a valid Space name, without a namespace or slash.") | |
| token = get_token() | |
| if not token: | |
| sys.exit("BLOCKED: No existing Hugging Face authentication. Run hf auth login securely in this environment.") | |
| api = HfApi(token=token) | |
| who = api.whoami() | |
| namespace = who["name"] | |
| repo_id = f"{namespace}/{args.name}" | |
| # Commit identity is an audit requirement, not a credential or remote action. | |
| if subprocess.check_output(["git", "status", "--porcelain"], cwd=ROOT, text=True).strip(): | |
| sys.exit("Commit the reproducible source before deployment; the working tree is not clean.") | |
| source_commit = subprocess.check_output(["git", "rev-parse", "HEAD"], cwd=ROOT, text=True).strip() | |
| print(json.dumps({"namespace": namespace, "is_pro": who.get("isPro"), | |
| "requested_hardware": "zero-a10g", "private": True, | |
| "source_commit": source_commit})) | |
| # exist_ok=False guarantees we do not overwrite an unrelated Space. | |
| url = api.create_repo( | |
| repo_id=repo_id, repo_type="space", space_sdk="gradio", private=True, | |
| space_hardware="zero-a10g", exist_ok=False, | |
| space_variables=[{"key": "GRADIO_SSR_MODE", "value": "false"}, | |
| {"key": "STILL_SOURCE_COMMIT", "value": source_commit}], | |
| ) | |
| # Persist identity before upload so a failed upload can be resumed safely. | |
| state = {"repo_id": repo_id, "url": str(url), "private": True, | |
| "hardware_requested": "zero-a10g", "source_commit": source_commit, | |
| "created_at": datetime.now(timezone.utc).isoformat(), "uploaded": False} | |
| state_path = ROOT / "deployment.json" | |
| state_path.write_text(json.dumps(state, indent=2) + "\n") | |
| commit = api.upload_folder( | |
| repo_id=repo_id, repo_type="space", folder_path=str(ROOT), allow_patterns=ALLOWLIST, | |
| commit_message="Add Qwen 2.1 Image with direct Qwen-Image 2.1 ZeroGPU inference", | |
| ) | |
| state.update(uploaded=True, hub_commit=commit.oid) | |
| state_path.write_text(json.dumps(state, indent=2) + "\n") | |
| info = api.space_info(repo_id) | |
| if not info.private: | |
| sys.exit("Unexpected privacy state: stop and inspect the newly created Space.") | |
| print(f"Created private Space: {url}") | |
| print(f"Hub source commit: {commit.oid}") | |
| print("Deployment is not accepted until actual generation and browser verification pass.") | |
| print(f"hf spaces logs {repo_id} --build --follow") | |
| print(f"hf spaces logs {repo_id} --follow") | |
| if __name__ == "__main__": | |
| try: | |
| main() | |
| except HfHubHTTPError as exc: | |
| # No credentials, request headers, or full server responses in logs. | |
| code = exc.response.status_code if exc.response is not None else "unknown" | |
| hint = str(getattr(exc, "server_message", None) or type(exc).__name__) | |
| hint = re.sub(r"hf_[A-Za-z0-9]+", "[redacted]", hint) | |
| sys.exit(f"BLOCKED: Hub HTTP {code}: {hint}. No dedicated hardware was requested.") | |