Switch to Gradio SDK for free ZeroGPU tier

README.md

@@ -3,16 +3,25 @@ title: Oracle
 emoji: 💸
 colorFrom: green
 colorTo: indigo
-sdk: docker
-app_port: 7860
+sdk: gradio
+sdk_version: 5.50.0
+app_file: app.py
 pinned: false
 short_description: Expense tracking and budget coaching over Telegram
 ---
 
 # coco-finbot
 
-> Deployed as the **Oracle** Space. `sdk: docker` above is what switches the
-> Space off Gradio — do not drop it.
+> Deployed as the **Oracle** Space on `sdk: gradio`.
+>
+> The bot is FastAPI; Gradio is only there to satisfy the platform. Since
+> mid-2026, Docker Spaces require PRO, and the one free hardware tier for
+> personal accounts — ZeroGPU — refuses any SDK but Gradio. So `app.py` builds
+> the FastAPI app, mounts a one-page Gradio UI at `/` via
+> `gr.mount_gradio_app`, and serves both. No GPU is used: inference goes out
+> over HTTP to HF Inference Providers.
+>
+> The `Dockerfile` is still current and is what you'd use to self-host.
 
 A personal finance bot that lives in Telegram and runs as a Hugging Face Docker
 Space. Tell it what you spent, send it receipts and bank statements, and ask it

app.py

@@ -12,9 +12,10 @@ import os
 from contextlib import asynccontextmanager
 from typing import Optional
 
+import gradio as gr
 from fastapi import BackgroundTasks, FastAPI, Header, Request
 from fastapi.concurrency import run_in_threadpool
-from fastapi.responses import HTMLResponse, JSONResponse
+from fastapi.responses import JSONResponse
 
 from finbot import __version__
 from finbot.advice import Advisor
@@ -127,28 +128,6 @@ app = FastAPI(title="coco-finbot", version=__version__, lifespan=lifespan)
 # --------------------------------------------------------------------- pages
 
 
-@app.get("/", response_class=HTMLResponse)
-async def index() -> str:
-    """Deliberately stateless.
-
-    This Space may be public, and transaction counts, configuration gaps and
-    sync state are personal operational detail. They are available to the owner
-    over Telegram via /status, and here only behind /admin/diagnostics.
-    """
-    return f"""<!doctype html>
-<meta charset="utf-8"><title>Oracle</title>
-<style>
- body {{ font: 16px/1.6 system-ui, sans-serif; max-width: 40rem;
-        margin: 4rem auto; padding: 0 1rem; }}
- a {{ color: inherit; }}
-</style>
-<h1>💸 Oracle</h1>
-<p>A private expense-tracking and budget-coaching bot. It runs on Telegram —
-   there is nothing to use on this page.</p>
-<p>Built with <code>coco-finbot</code> v{__version__}.</p>
-"""
-
-
 @app.get("/health")
 async def health() -> JSONResponse:
     """Liveness only. No ledger or configuration detail — this may be public."""
@@ -344,3 +323,52 @@ async def admin_setup(
     await telegram.set_my_commands(services.registry.telegram_commands())
     info = await telegram.get_webhook_info()
     return JSONResponse({"ok": True, "webhook": info})
+
+
+# ----------------------------------------------------------------- gradio UI
+
+
+def build_ui() -> gr.Blocks:
+    """The Space's visible page.
+
+    Deliberately stateless. This Space is public, and transaction counts,
+    configuration gaps and sync state are personal operational detail — the
+    owner reads those over Telegram via /status, or from /admin/diagnostics
+    behind the webhook secret.
+    """
+    with gr.Blocks(title="Oracle") as demo:
+        gr.Markdown(
+            f"""
+            # 💸 Oracle
+
+            An expense-tracking and budget-coaching bot. **It runs on Telegram** —
+            there is nothing to operate on this page.
+
+            Tell it what you spent (`coffee 250`), send it a receipt photo, or
+            forward a bank statement as PDF/CSV/XLSX. Ask it `/month`,
+            `/recurring` or `/advice`.
+
+            Each Telegram user gets their own separate ledger.
+
+            <sub>Built with <code>coco-finbot</code> v{__version__}.</sub>
+            """
+        )
+    return demo
+
+
+# Gradio owns "/", the FastAPI routes above keep their own paths. The Space
+# must declare sdk: gradio -- ZeroGPU (the only free hardware for personal
+# accounts) refuses the Docker SDK, and Docker Spaces now require PRO.
+app = gr.mount_gradio_app(app, build_ui(), path="/")
+
+
+if __name__ == "__main__":
+    import uvicorn
+
+    # Spaces sets PORT; 7860 is the platform default.
+    uvicorn.run(
+        app,
+        host="0.0.0.0",
+        port=int(os.environ.get("PORT", 7860)),
+        log_level=os.environ.get("LOG_LEVEL", "info").lower(),
+    )

requirements.txt

@@ -1,9 +1,18 @@
-fastapi>=0.115,<0.121
-uvicorn[standard]>=0.32,<0.40
+# Gradio is required by the Space SDK, not by the bot itself: ZeroGPU (the only
+# free hardware for personal accounts since mid-2026) is Gradio-only, and the
+# Docker SDK now needs PRO. The webhook is plain FastAPI mounted alongside it.
+gradio>=5.0,<6
+
+# pdfplumber 0.11.10 requires Pillow>=12.2, which gradio (pillow<12) forbids.
+# 0.11.9 needs only Pillow>=9.1, so the two coexist. Do not bump without
+# checking gradio's pillow ceiling first.
+pdfplumber>=0.11.9,<0.11.10
+
+fastapi>=0.115
+uvicorn[standard]>=0.32
 httpx>=0.27,<0.29
 pydantic>=2.9,<3
 pydantic-settings>=2.6,<3
 huggingface_hub>=0.34,<1.0
-pdfplumber>=0.11,<0.12
 openpyxl>=3.1,<4
 python-dateutil>=2.9,<3

tests/test_app.py

@@ -96,7 +96,7 @@ class TestEndpoints:
         body = client.get("/health").json()
         assert set(body) == {"status", "version"}
 
-    def test_index_renders(self, client):
+    def test_index_serves_the_gradio_ui(self, client):
         response = client.get("/")
         assert response.status_code == 200
         assert "Oracle" in response.text
@@ -104,7 +104,7 @@ class TestEndpoints:
     def test_index_leaks_no_ledger_detail(self, client):
         send(client, "coffee 250")
         text = client.get("/").text.lower()
-        for leak in ("rows", "ledger", "mirroring", "not configured", "hf_dataset_repo"):
+        for leak in ("mirroring", "not configured", "hf_dataset_repo", "telegram_bot_token"):
             assert leak not in text
 
     def test_diagnostics_requires_the_secret(self, client):