Self-contained startup and first-party private HF recovery

RELEASE_MANIFEST.json

@@ -10,11 +10,11 @@
     "assets/formula_template.json": "80f745df82bb7be45af52785fd582460bcddc63c5a4e1d8375d85b3122db4c6b",
     "bin/altd-sim": "2f2f2144ae14b0ef599ca8510f95712da00243c6875881491d384b394e7499f7",
     "bin/extract_saved_track": "3a7733c45b4301a786fcbfe92660a1c484749272da5f608d62f34878bd4ff31a",
-    "client.js": "46db301e913e1dd495ea453624d4111965344b7df27770672c4d416ce5c99c64",
+    "client.js": "b2a1c68bf50aae0acfeccb7ee0947e9aceb0d90c5c92d241f8b42fbdaec445f9",
     "delivery.py": "4f5a4e45df92e5cbfdef6eb449ede9ba26217fe24da376fafddae5cbbb73847a",
-    "index.html": "cf4c0670c81184f8ea2726041457ae3cecc6c79b9030a41fe545b1bc503f0a47",
+    "index.html": "caeafcd208a638cd8c4235ca282b5b6451b81eb0e363fcfbb2ee02ed021a4db0",
     "requirements.txt": "dbdedd8a6f30e16dc41bc3e210c1a936f679655420075f8f89bdd40bdd03f91b",
-    "server.py": "df0f3d22c55653de9216da2443d17cd098cf5552f66a0fafb742160b5b29eefe",
+    "server.py": "6375fb9f0a6ed39be0d7ce3cbe5c4c820e412e91417f424ad10a1b5f6f94062f",
     "worker.py": "3370c812e1a48b7b7f09deaca769bb1a5c7ec30ca776dc97e484181e6bcec7c3"
   },
   "hosted_verified": false,

client.js

@@ -101,11 +101,23 @@ setInterval(()=>{
   if(!remaining && !busy){job=null; buttons(); say('Result access has expired. Server cleanup runs independently of this browser.');}
 },1000);
 buttons();
-(async()=>{
+async function connect(){
+  $('retry').disabled=true;
+  $('backendNote').textContent='Checking available backends…';
+  const controller=new AbortController();
+  const timeout=setTimeout(()=>controller.abort(),10000);
   try {
-    const capabilities=await (await request('/api/capabilities')).json();
+    const capabilities=await (await request('/api/capabilities',{signal:controller.signal})).json();
+    if(capabilities.cpu!==true)throw new Error('CPU unavailable');
     $('gpuOption').disabled=!capabilities.gpu;
     $('backendNote').textContent=capabilities.gpu?'CPU uses no GPU allowance. GPU requires available allowance. No automatic switching.':'CPU available. GPU is not connected on this deployment; no GPU allowance is needed for CPU.';
     capabilitiesReady=true; buttons();
-  } catch(error) {say('Cannot connect to the service. Open the hosted app, not a downloaded HTML file.');}
-})();
+    say('Connected. Choose your track and network, then run the test.');
+  } catch(error) {
+    capabilitiesReady=false; buttons();
+    $('backendNote').textContent='Connection unavailable — training is disabled.';
+    say('Private HF access may be blocked inside the embedded page. Use “Open app in its own tab” above, or retry. No run was started.');
+  } finally {clearTimeout(timeout);$('retry').disabled=false;}
+}
+$('retry').onclick=()=>{if(!busy&&!job)connect();};
+connect();

index.html

@@ -7,8 +7,10 @@
 <p>Game by ActivationFunction · <a href="https://store.steampowered.com/app/3312030/AI_Learns_To_Drive/">Steam store</a></p>
 <p>Simulator by <a href="https://github.com/Zorro909/driving_sim_rs">Zorro909</a> · UI and HF implementation by <a href="https://github.com/seeker-cyber-maker/driving_sim_rs">TiGa (seeker-cyber-maker)</a></p>
 <p class="hint">Private release integration · bounded training test. No app account needed; private hosting may require access.</p>
+<p><a id="standalone" href="" target="_blank" rel="noopener noreferrer">Open app in its own tab — recommended for private HF access</a><br><small>Uses this page’s existing HF access link. No privacy-setting changes needed. Select files again in the new tab; do not share private access links.</small></p>
 <div class="grid"><section class="card"><h2>Simulation</h2><p>4 vehicles · 1 generation · 60 requested ticks. Formula networks, steering and acceleration; speed and raycast sensors. This is not yet the full trainer.</p>
 <p><label for="backend">Compute</label><select id="backend" disabled><option value="cpu">CPU — no GPU allowance</option><option id="gpuOption" value="gpu" disabled>GPU — uses GPU allowance</option></select></p><p id="backendNote" class="hint">Checking available backends…</p>
+<button id="retry" type="button">Retry connection</button>
 <p><label>Track (.track) <input id="track" type="file" accept=".track"></label></p>
 <p><label>Formula network (.evolution) <input id="network" type="file" accept=".evolution"></label></p>
 <p><label><input id="automatic" type="checkbox" checked> Automatically delete server-side job data after receiving the result</label></p>

server.py

@@ -4,7 +4,7 @@ import json
 from pathlib import Path
 import threading
 from fastapi import HTTPException, Request
-from fastapi.responses import FileResponse, Response
+from fastapi.responses import FileResponse, Response, HTMLResponse
 from starlette.concurrency import run_in_threadpool
 from delivery import create_api, CapacityExceeded
 from worker import run_reported
@@ -18,7 +18,12 @@ def create_app(worker=run_reported,store=None,gpu_worker=None):
     def capabilities():
         return {'cpu':True,'gpu':gpu_worker is not None,'default':'cpu'}
     @app.get('/')
-    def index(): return FileResponse(ROOT/'index.html',media_type='text/html')
+    def index():
+        # Deliver the bootstrap with the authenticated document: private HF
+        # iframe subresource access can fail before an external script runs.
+        script=(ROOT/'client.js').read_text().replace('</script','<\\/script')
+        return HTMLResponse((ROOT/'index.html').read_text().replace(
+            '<script src="/client.js"></script>','<script>'+script+'</script>'))
     @app.get('/client.js')
     def script(): return FileResponse(ROOT/'client.js',media_type='text/javascript')
     @app.get('/policy')