+
+## Popular libraries using 🧨 Diffusers
+
+- https://github.com/microsoft/TaskMatrix
+- https://github.com/invoke-ai/InvokeAI
+- https://github.com/InstantID/InstantID
+- https://github.com/apple/ml-stable-diffusion
+- https://github.com/Sanster/lama-cleaner
+- https://github.com/IDEA-Research/Grounded-Segment-Anything
+- https://github.com/ashawkey/stable-dreamfusion
+- https://github.com/deep-floyd/IF
+- https://github.com/bentoml/BentoML
+- https://github.com/bmaltais/kohya_ss
+- +14,000 other amazing GitHub repositories 💪
+
+Thank you for using us ❤️.
+
+## Credits
+
+This library concretizes previous work by many different authors and would not have been possible without their great research and implementations. We'd like to thank, in particular, the following implementations which have helped us in our development and without which the API could not have been as polished today:
+
+- @CompVis' latent diffusion models library, available [here](https://github.com/CompVis/latent-diffusion)
+- @hojonathanho original DDPM implementation, available [here](https://github.com/hojonathanho/diffusion) as well as the extremely useful translation into PyTorch by @pesser, available [here](https://github.com/pesser/pytorch_diffusion)
+- @ermongroup's DDIM implementation, available [here](https://github.com/ermongroup/ddim)
+- @yang-song's Score-VE and Score-VP implementations, available [here](https://github.com/yang-song/score_sde_pytorch)
+
+We also want to thank @heejkoo for the very helpful overview of papers, code and resources on diffusion models, available [here](https://github.com/heejkoo/Awesome-Diffusion-Models) as well as @crowsonkb and @rromb for useful discussions and insights.
+
+## Citation
+
+```bibtex
+@misc{von-platen-etal-2022-diffusers,
+ author = {Patrick von Platen and Suraj Patil and Anton Lozhkov and Pedro Cuenca and Nathan Lambert and Kashif Rasul and Mishig Davaadorj and Dhruv Nair and Sayak Paul and William Berman and Yiyi Xu and Steven Liu and Thomas Wolf},
+ title = {Diffusers: State-of-the-art diffusion models},
+ year = {2022},
+ publisher = {GitHub},
+ journal = {GitHub repository},
+ howpublished = {\url{https://github.com/huggingface/diffusers}}
+}
+```
diff --git a/.slim/clonedeps/repos/huggingface__diffusers/SECURITY.md b/.slim/clonedeps/repos/huggingface__diffusers/SECURITY.md
new file mode 100644
index 0000000000000000000000000000000000000000..6212e94050e3faf40f6dc431547d2dd43f10d3b8
--- /dev/null
+++ b/.slim/clonedeps/repos/huggingface__diffusers/SECURITY.md
@@ -0,0 +1,106 @@
+# Security Policy
+
+## Supported Versions
+
+We ship security fixes in the latest release. Please reproduce on the current released version before reporting — we do not backport fixes to older releases.
+
+## Reporting a Vulnerability
+
+Report privately — **do not open a public issue or PR for a suspected vulnerability.**
+
+- **Preferred:** GitHub private vulnerability reporting — the **"Report a vulnerability"** button under this repo's **Security** tab. This routes to the maintainers, keeps the report private until a fix is ready, and lets us issue a CVE through GitHub if warranted.
+- **Email:** security@huggingface.co
+
+We acknowledge valid, in-scope reports and will keep you updated on remediation. Please give us a reasonable window to fix before any public disclosure.
+
+## Recognition
+
+We do not offer a monetary bounty. For a valid, in-scope report we credit you on the published GitHub Security Advisory and name you as the reporter in the associated CVE. Let us know how you'd like to be credited (name or handle).
+
+## What your report must include
+
+We receive a high volume of reports. To be triaged, a report **must** follow the structure below. Copy this block into your submission and fill in every field. Reports missing the version, the proof of concept, or the impact are returned as incomplete and are not investigated until provided.
+
+```markdown
+### Summary
+One sentence: what the vulnerability is and where.
+
+### Affected version / commit
+Exact released version or commit SHA you reproduced on (e.g. v4.57.0 / a1b2c3d).
+Not "latest" or "main".
+
+### Affected component
+The public API, module, or entry point involved (e.g. `DiffusionPipeline.from_pretrained`, `AutoModel.from_pretrained`).
+
+### Vulnerability class
+Type and CWE if known (e.g. deserialization / CWE-502, path traversal / CWE-22).
+
+### Attack vector & preconditions
+- How is the vulnerable code reached? (which API call / input / config)
+- Who is the attacker and what do they control?
+- What must be true for the attack to work? (auth, a user action, a non-default
+ setting, a malicious file being loaded, etc.)
+
+### Proof of concept
+A minimal, self-contained script or step sequence that runs on a clean install
+of the version above. Include:
+- the exact commands / code to run,
+- any input files needed (attach them, or give a script that generates them),
+- the **expected** behavior vs. the **actual** behavior you observed.
+A snippet showing that a function *exists* or *could* be misused is not a PoC.
+
+### Impact
+What an attacker gains in a realistic deployment. "Could theoretically…"
+without a working chain is not an impact.
+
+### Scope
+Which trust boundary (see below) does this cross? If your finding touches
+anything in the "Out of scope" list, name which item and explain why it is
+nonetheless a violation of a guarantee we make.
+
+### Suggested severity (optional)
+We assign the final severity. Include a CVSS v3.1 vector only if you have one.
+
+### Suggested fix (optional)
+```
+
+> The bar is a **reproducible PoC against a supported version, with a concrete impact that crosses a trust boundary we actually defend** (see scope below). Reports that are theoretical, auto-generated by a scanner or LLM, or that restate documented behavior will be closed without detailed review.
+
+## Threat model & trust boundaries
+
+Understanding these saves everyone time — most of what we close as not-a-vulnerability falls inside one of them.
+
+**Loading artifacts you did not create is a trust decision.** Models, tokenizers, and configuration files can carry code or instructions that run when loaded. That a maliciously crafted artifact can execute code, read local files, or otherwise act when you load it is the **documented risk of loading untrusted content** — not a vulnerability in this library. Protect yourself by:
+- preferring the `safetensors` format over pickle-based formats (`use_safetensors=True`),
+- pinning a specific, reviewed `revision`,
+- setting `trust_remote_code=True` only for repositories whose modeling files you have inspected.
+
+We *will* treat as a vulnerability anything that breaks one of these protections — e.g. code executing despite `safetensors`-only loading, or a pinned revision being bypassed.
+
+**Conversion, CLI, and developer utilities are operator tools.** Scripts you run yourself against inputs you chose (format converters, training/utility CLIs, dev helpers) are not a library API attack surface. Behaviors such as a conversion script deserializing a checkpoint you pointed it at are within the operator's trust.
+
+## In scope
+
+We treat as vulnerabilities issues in the **published package code** — the library's own API surface — that an attacker can trigger without the victim having opted into a documented risk. For example:
+
+- code execution, memory corruption, or file access reachable through a normal API call on input that is **not** an untrusted model/artifact the user chose to load;
+- a control we advertise being bypassed (e.g. code running despite `safetensors`-only loading, or a pinned revision being ignored);
+- exposure or mishandling of credentials, tokens, or another user's data by the library;
+- CI/CD or supply-chain issues in this repository.
+
+## Out of scope
+
+The following are **not** treated as vulnerabilities in transformers. If your finding touches one of these, the report must explain why it is nonetheless a violation of a guarantee we make — otherwise it will be closed.
+
+- Issues that require loading an untrusted artifact and amount to the documented load-time risk above (code execution / file access on load of a malicious model, config, or pickle).
+- Executable code or class references declared in a model's own configuration or metadata and resolved when that model is loaded — loading a repository that sets these is the same documented load-time trust decision, not a library flaw. (A control we advertise being bypassed — for example remote or config-declared code running without the `trust_remote_code` gate — remains in scope.)
+- Findings in documentation, tests, or other non-packaged reference material.
+- Local denial-of-service from feeding pathological input to a function on your own machine (high memory, slow parse, panic), absent a multi-tenant or remote-service impact.
+- Model behavior: jailbreaks, alignment failures, prompt injection, or harmful generations. Model weights are authored by their uploaders; report these to the model owner. This includes indirect prompt injection — transformers is a modeling library with no agent- or tool-execution code path, so there is no orchestration layer here to inject into.
+- Vulnerabilities in third-party dependencies we do not vendor — report upstream (we'll bump once fixed).
+- Theoretical issues without a working proof of concept, and reports auto-generated from scanners or LLMs without a verified, reproducible chain.
+- Best-practice or hardening suggestions with no demonstrated impact — missing email-authentication or transport records (MTA-STS, TLS-RPT, DMARC/SPF tuning), missing HTTP security headers, TLS configuration preferences, and similar scanner or config-checker output presented without a working exploit chain.
+
+## Safe harbor
+
+Good-faith research that respects these guidelines, avoids privacy violations and service disruption, and gives us a reasonable disclosure window will not be pursued by us. Do not access data that isn't yours and do not run tests against Hugging Face production infrastructure.
diff --git a/.slim/clonedeps/repos/huggingface__diffusers/_typos.toml b/.slim/clonedeps/repos/huggingface__diffusers/_typos.toml
new file mode 100644
index 0000000000000000000000000000000000000000..9c373e6722607ad5134915cf1ec15379bda4dc7b
--- /dev/null
+++ b/.slim/clonedeps/repos/huggingface__diffusers/_typos.toml
@@ -0,0 +1,13 @@
+# Files for typos
+# Instruction: https://github.com/marketplace/actions/typos-action#getting-started
+
+[default.extend-identifiers]
+
+[default.extend-words]
+NIN="NIN" # NIN is used in scripts/convert_ncsnpp_original_checkpoint_to_diffusers.py
+nd="np" # nd may be np (numpy)
+parms="parms" # parms is used in scripts/convert_original_stable_diffusion_to_diffusers.py
+
+
+[files]
+extend-exclude = ["_typos.toml"]
diff --git a/.slim/clonedeps/repos/huggingface__diffusers/pyproject.toml b/.slim/clonedeps/repos/huggingface__diffusers/pyproject.toml
new file mode 100644
index 0000000000000000000000000000000000000000..4fd1ad75360c19b884cb92d1d5b93cc1ab578aab
--- /dev/null
+++ b/.slim/clonedeps/repos/huggingface__diffusers/pyproject.toml
@@ -0,0 +1,32 @@
+[tool.ruff]
+line-length = 119
+extend-exclude = [
+ "src/diffusers/pipelines/flux2/system_messages.py",
+]
+
+[tool.ruff.lint]
+# Never enforce `E501` (line length violations).
+ignore = ["C901", "E501", "E721", "E741", "F402", "F823"]
+select = ["C", "E", "F", "I", "W"]
+
+# Ignore import violations in all `__init__.py` files.
+[tool.ruff.lint.per-file-ignores]
+"__init__.py" = ["E402", "F401", "F403", "F811"]
+"src/diffusers/utils/dummy_*.py" = ["F401"]
+
+[tool.ruff.lint.isort]
+lines-after-imports = 2
+known-first-party = ["diffusers"]
+
+[tool.ruff.format]
+# Like Black, use double quotes for strings.
+quote-style = "double"
+
+# Like Black, indent with spaces, rather than tabs.
+indent-style = "space"
+
+# Like Black, respect magic trailing commas.
+skip-magic-trailing-comma = false
+
+# Like Black, automatically detect the appropriate line ending.
+line-ending = "auto"
diff --git a/.slim/clonedeps/repos/huggingface__diffusers/setup.py b/.slim/clonedeps/repos/huggingface__diffusers/setup.py
new file mode 100644
index 0000000000000000000000000000000000000000..787c4dd0ceac82b73e34c4328f0b9427d172638f
--- /dev/null
+++ b/.slim/clonedeps/repos/huggingface__diffusers/setup.py
@@ -0,0 +1,305 @@
+# Copyright 2026 The HuggingFace Team. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""
+Simple check list from AllenNLP repo: https://github.com/allenai/allennlp/blob/main/setup.py
+
+To create the package for PyPI.
+
+1. Run `make pre-release` (or `make pre-patch` for a patch release) then run `make fix-copies` to fix the index of the
+ documentation.
+
+ If releasing on a special branch, copy the updated README.md on the main branch for the commit you will make
+ for the post-release and run `make fix-copies` on the main branch as well.
+
+2. Unpin specific versions from setup.py that use a git install.
+
+3. Checkout the release branch (v
+ 
+ 
+ 
+ 
+
. We discuss the hottest trends about diffusion models, help each other with contributions, personal projects or just hang out ☕.
+
+
+## Popular Tasks & Pipelines
+
+