Step 4A-6-C-R3.2.2 Executor Relay Integration

.gitattributes

@@ -33,3 +33,4 @@ saved_model/**/* filter=lfs diff=lfs merge=lfs -text
 *.zip filter=lfs diff=lfs merge=lfs -text
 *.zst filter=lfs diff=lfs merge=lfs -text
 *tfevents* filter=lfs diff=lfs merge=lfs -text
+core/__pycache__/pipeline_agent.cpython-313.pyc filter=lfs diff=lfs merge=lfs -text

__pycache__/desktop.ini

@@ -0,0 +1,2 @@
+[.ShellClassInfo]
+IconResource=C:\Program Files\Google\Drive File Stream\129.0.1.0\GoogleDriveFS.exe,27

core/__pycache__/desktop.ini

@@ -0,0 +1,2 @@
+[.ShellClassInfo]
+IconResource=C:\Program Files\Google\Drive File Stream\129.0.1.0\GoogleDriveFS.exe,27

core/__pycache__/pipeline_agent.cpython-313.pyc

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:185a6cfe4441c00b83aab3c8b7990c30043a17525472b3d01b78350d99d8e2b7
+size 158928

smartpaper_restore_bridge/__pycache__/desktop.ini

@@ -0,0 +1,2 @@
+[.ShellClassInfo]
+IconResource=C:\Program Files\Google\Drive File Stream\129.0.1.0\GoogleDriveFS.exe,27

task_executor.py

@@ -1,5 +1,5 @@
 # -*- coding: utf-8 -*-
-"""SmartPaper R3.2.1 independent task executor.
+"""SmartPaper R3.2.2 independent task executor.
 
 Bootstrap is intentionally lightweight: the child process validates the local
 request, claims the D1 task, writes a local claim handshake, and only then
@@ -43,6 +43,7 @@ logging.basicConfig(
 
 
 CLAIM_HANDSHAKE_FILENAME = "executor_claim.json"
+EXECUTOR_API_DEFAULT = "https://smartpaper-auth-relay-pages.pages.dev"
 
 
 def _bounded_env_float(name: str, default: float, minimum: float, maximum: float) -> float:
@@ -82,10 +83,12 @@ def _safe(value, limit=500):
 
 
 def _api_origin() -> str:
-    value = str(os.environ.get("SMARTPAPER_AUTH_API") or "").strip().rstrip("/")
+    # Executor traffic intentionally uses the Pages Service-Binding relay.
+    # Browser/auth traffic continues to use SMARTPAPER_AUTH_API elsewhere.
+    value = str(os.environ.get("SMARTPAPER_EXECUTOR_API") or EXECUTOR_API_DEFAULT).strip().rstrip("/")
     parsed = urlsplit(value)
     if parsed.scheme != "https" or not parsed.netloc or parsed.path not in ("", "/") or parsed.query or parsed.fragment:
-        raise RuntimeError("SMARTPAPER_AUTH_API_invalid")
+        raise RuntimeError("SMARTPAPER_EXECUTOR_API_invalid")
     return f"https://{parsed.netloc}"
 
 
@@ -147,12 +150,11 @@ class ExecutorApi:
             "Authorization": f"Bearer {_service_key()}",
             "Accept": "application/json",
             "Content-Type": "application/json",
-            "User-Agent": "SmartPaper-R3.2.1-Executor/1.0",
+            "User-Agent": "SmartPaper-R3.2.2-Executor/1.0",
         }
-        # HF Spaces can expose environment proxy settings that are less reliable
-        # for direct TLS handshakes to workers.dev.  Reuse the proven SmartPaper
-        # transport policy: direct networking first, environment-aware networking
-        # only as a transport fallback. Business/HTTP errors never trigger fallback.
+        # Keep direct networking first for the relay endpoint, with the ordinary
+        # environment-aware session only as a transport fallback. Business/HTTP
+        # errors never trigger fallback.
         self._direct_session = requests.Session()
         self._direct_session.trust_env = False
         self._environment_session = requests.Session()

utils/__pycache__/desktop.ini

@@ -0,0 +1,2 @@
+[.ShellClassInfo]
+IconResource=C:\Program Files\Google\Drive File Stream\129.0.1.0\GoogleDriveFS.exe,27