app.py: bootstrap modules from private repo at startup

app.py

@@ -5,9 +5,58 @@ Deploy on a Space (AMFORGE) so anyone can try GearCut in the browser.
 The model (gc_editor) and tokenizer are pulled from the AMFORGE HF repos at
 startup. ffmpeg is provided by packages.txt.
 
+Core modules are loaded from a private HF repo at startup using HF_TOKEN secret.
+Visitors can use the demo but cannot access the proprietary source code.
+
 Local run:  python app.py
 """
-import os, json, uuid
+import os
+import sys
+import json
+import uuid
+
+# ---- Bootstrap: download proprietary modules from private HF repo -----------
+def _bootstrap_modules():
+    """Download gearcut_* modules from private AMFORGE/gearcut-core repo."""
+    token = os.environ.get("HF_TOKEN")
+    if not token:
+        print("[GearCut] WARNING: HF_TOKEN not set — assuming modules are local.")
+        return
+
+    modules = [
+        "gearcut_compiler.py",
+        "gearcut_model.py",
+        "gearcut_infer.py",
+        "gearcut_ground.py",
+    ]
+
+    # Check if already downloaded
+    if all(os.path.exists(m) for m in modules):
+        print("[GearCut] Core modules already present.")
+        return
+
+    print("[GearCut] Downloading core modules from private repo...")
+    try:
+        from huggingface_hub import hf_hub_download
+        for fname in modules:
+            if not os.path.exists(fname):
+                path = hf_hub_download(
+                    repo_id="AMFORGE/gearcut-core",
+                    filename=fname,
+                    repo_type="dataset",
+                    token=token,
+                    local_dir=".",
+                )
+                print(f"[GearCut]   ✓ {fname} downloaded")
+            else:
+                print(f"[GearCut]   ✓ {fname} already exists")
+    except Exception as e:
+        print(f"[GearCut] ERROR downloading modules: {e}")
+        sys.exit(1)
+
+_bootstrap_modules()
+
+# ---- Now import the proprietary modules ------------------------------------
 import gearcut_compiler as gc
 
 _MODEL = None