Deploy simready-assets run 20260928-ed4eb73 (GPU variant)

Dockerfile

@@ -62,11 +62,19 @@
 ARG OPENSEARCH_VERSION=3.8.0
 ARG NEO4J_VERSION=5.23.0-community
 ARG TRITONSERVER_BASE_IMAGE=nvcr.io/nvidia/tritonserver:26.05-py3
+ARG PYTHON_IMAGE=python:3.12-bookworm
 
 FROM opensearchproject/opensearch:${OPENSEARCH_VERSION} AS opensearch-src
 
 FROM neo4j:${NEO4J_VERSION} AS neo4j-src
 
+# hf-storage-api gRPC stubs — see docker/Dockerfile.hf-space's copy of this stage.
+FROM ${PYTHON_IMAGE} AS hf-storage-api-stubs
+COPY docker/hf-space/wheels/constraints.txt /build/constraints.txt
+COPY docker/hf-space/hf-storage-api/schema /build/schema
+COPY docker/hf-space/generate_hf_storage_api_stubs.sh /build/generate_stubs.sh
+RUN bash /build/generate_stubs.sh /build/constraints.txt /build/schema /generated
+
 FROM ${TRITONSERVER_BASE_IMAGE}
 
 WORKDIR /workspace
@@ -170,7 +178,7 @@ RUN python3.12 -m venv /app/.venv \
 # for the full explanation (identical here; this variant serves the same
 # corpus/storage backend, just with a different SigLIP2 backend).
 COPY docker/hf-space/hf-storage-api/hf_storage_api /app/hf-storage-api/src/hf_storage_api
-COPY docker/hf-space/hf-storage-api/generated /app/hf-storage-api/generated
+COPY --from=hf-storage-api-stubs /generated /app/hf-storage-api/generated
 RUN GRPCIO_VERSION=$(/app/.venv/bin/pip show grpcio | sed -n 's/^Version: //p') \
     && env -u PYTHONPATH /app/.venv/bin/pip install --no-cache-dir "grpcio-health-checking==${GRPCIO_VERSION}" \
     && chown -R 1000:1000 /app/hf-storage-api

docker/hf-space/generate_hf_storage_api_stubs.sh

@@ -0,0 +1,55 @@
+#!/usr/bin/env bash
+# Compiles hf-storage-api's gRPC stubs from the committed schema, at the exact
+# protobuf/grpcio versions the Space's venv installs — run in a throwaway
+# build stage of docker/Dockerfile.hf-space and docker/Dockerfile.hf-space-gpu.
+#
+# Why build-time, not committed: the stubs have to match the venv's protobuf
+# runtime (gencode newer than runtime fails on import), and that runtime is
+# whatever docker/hf-space/wheels/constraints.txt pins. Generating them here
+# from those same pins keeps the two in lockstep automatically; only a schema
+# change in hf-storage-api itself needs scripts/extract_hf_storage_api.sh.
+#
+# Usage: generate_hf_storage_api_stubs.sh <constraints.txt> <schema dir> <output dir>
+#   <schema dir> holds all.protoset (a FileDescriptorSet) and proto_files.txt
+#   (the top-level .proto names to generate) — both written by
+#   scripts/extract_hf_storage_api.sh.
+set -euo pipefail
+
+CONSTRAINTS=$1
+SCHEMA=$2
+OUT=$3
+
+# Case-insensitive: constraints.txt mixes casing (e.g. PyYAML==...).
+PROTOBUF=$(grep -iE '^protobuf==' "$CONSTRAINTS" | head -1 | cut -d= -f3)
+GRPCIO=$(grep -iE '^grpcio==' "$CONSTRAINTS" | head -1 | cut -d= -f3)
+if [ -z "$PROTOBUF" ] || [ -z "$GRPCIO" ]; then
+    echo "FATAL: no protobuf/grpcio pin in $CONSTRAINTS" >&2
+    exit 1
+fi
+
+# grpcio-tools is released in lockstep with grpcio; pinning it to the grpcio
+# pin keeps its bundled protoc (and so the stamped gencode version) fixed, so
+# a new grpcio-tools release can't start emitting stubs the pinned runtime
+# rejects.
+pip install --quiet --no-cache-dir "grpcio-tools==$GRPCIO" "protobuf==$PROTOBUF"
+
+mkdir -p "$OUT"
+# shellcheck disable=SC2046  # one proto path per word, intentionally split
+python -m grpc_tools.protoc \
+    --descriptor_set_in="$SCHEMA/all.protoset" \
+    --python_out="$OUT" \
+    --grpc_python_out="$OUT" \
+    --pyi_out="$OUT" \
+    $(cat "$SCHEMA/proto_files.txt")
+
+# Fail the build here, not at Space startup, if the stubs don't import against
+# the pinned runtime.
+PYTHONDONTWRITEBYTECODE=1 PYTHONPATH="$OUT" python - "$SCHEMA/proto_files.txt" <<'PYEOF'
+import importlib, sys
+names = [l.strip() for l in open(sys.argv[1]) if l.strip()]
+for n in names:
+    base = n[:-len(".proto")].replace("/", ".")
+    importlib.import_module(base + "_pb2")
+    importlib.import_module(base + "_pb2_grpc")
+print(f"generated and imported {len(names)} proto module(s)")
+PYEOF

docker/hf-space/hf-storage-api/SOURCE.txt

@@ -1,6 +1,3 @@
 # Generated by scripts/extract_hf_storage_api.sh — do not hand-edit.
 source_image=nvcr.io/m3sujtetvf5w/usdsearch/hf-storage-api:71b7537
-regenerated_against_protobuf=6.33.6
-regenerated_against_grpcio_tools=1.80.0
-regenerated_from_constraints=docker/hf-space/wheels/constraints.txt
-extracted_at=2026-09-29T13:00:16Z
+extracted_at=2026-09-30T07:11:27Z

docker/hf-space/hf-storage-api/schema/proto_files.txt

@@ -0,0 +1,12 @@
+nvidia/omniverse/notifications/consumer/v1beta/event_consumer.proto
+nvidia/omniverse/storage/capabilities/v1alpha/capabilities.proto
+nvidia/omniverse/storage/capabilities/v1beta/capabilities.proto
+nvidia/omniverse/storage/filefolder/v1alpha/filefolder_service.proto
+nvidia/omniverse/storage/filefolder/v1beta/filefolder_service.proto
+nvidia/omniverse/storage/fileobject/v1alpha/fileobject.proto
+nvidia/omniverse/storage/fileobject/v1alpha/fileobject_service.proto
+nvidia/omniverse/storage/fileobject/v1beta/fileobject.proto
+nvidia/omniverse/storage/fileobject/v1beta/fileobject_service.proto
+nvidia/omniverse/storage/metadata/v1alpha/metadata.proto
+nvidia/omniverse/storage/versioning/v1alpha/versioning.proto
+nvidia/omniverse/storage/versioning/v1beta/versioning.proto