Added access to logs

main.py

@@ -1,4 +1,5 @@
 import os, asyncio, httpx
+from urllib.parse import urlparse
 from fastapi import FastAPI, Request, HTTPException, UploadFile, File, Form
 from fastapi.responses import JSONResponse, Response, StreamingResponse
 from fastapi.middleware.cors import CORSMiddleware
@@ -13,6 +14,8 @@ DEMO_FORWARD_URL   = os.getenv("DEMO_FORWARD_URL", "").rstrip("/")  # url to acc
 DATFID_DEMO_TOKEN  = os.getenv("DATFID_DEMO_TOKEN", "")             # token to access demo space
 # This Space's public URL (used to ping self while waiting so HF does not put this Space to sleep). Override with SELF_URL env if different.
 SELF_URL = os.getenv("SELF_URL", "https://datfid-org-datfid-master.hf.space").rstrip("/")
+# Admin-only endpoints: require this secret (send as X-Admin-Pass header). Secret name in HF: Admin_pass
+Admin_pass = os.getenv("Admin_pass", "")
 
 if not HF_TOKEN:
     raise RuntimeError("Missing secret 'hf_token' in public Space.")
@@ -478,6 +481,95 @@ async def secure_ping(req: Request):
         raise HTTPException(status_code=401, detail="Missing Authorization Bearer token (dt+...)")
     return await _forward("/secure-ping/", "GET", user_token=user_token)
 
+
+def _require_admin_token(request: Request) -> None:
+    """Raise 401 if Admin_pass is not set or X-Admin-Pass does not match."""
+    if not Admin_pass:
+        raise HTTPException(status_code=503, detail="Admin endpoints not configured (set Admin_pass in secrets).")
+    token = request.headers.get("X-Admin-Pass", "").strip()
+    if not token or token != Admin_pass:
+        raise HTTPException(status_code=401, detail="Invalid or missing X-Admin-Pass.")
+
+
+def _hf_space_url_to_repo(url: str) -> str | None:
+    """Derive HF repo (org/space) from a Space URL (e.g. https://....hf.space). Returns None if not derivable."""
+    if not url or ".hf.space" not in url:
+        return None
+    try:
+        host = urlparse(url).netloc
+        base = host.replace(".hf.space", "").split(".")[0]
+        parts = base.split("-")
+        if len(parts) >= 4:
+            return f"{parts[0]}-{parts[1]}/{parts[2]}-{parts[3]}"
+        if len(parts) >= 2:
+            return f"{parts[0]}/{parts[1]}"
+    except Exception:
+        pass
+    return None
+
+
+def _resolve_space_repo(space: str) -> str:
+    """Resolve space key to HF repo (org/space). space must be 'upstream'|'demo'|'self'. Uses existing URLs, no names in code."""
+    # Optional env overrides for repo (e.g. HF_LOGS_REPO_UPSTREAM=org/space_name)
+    repo = os.getenv(f"HF_LOGS_REPO_{space.upper()}") if space else ""
+    if repo:
+        return repo.strip()
+    url_map = {"upstream": UPSTREAM_URL, "demo": DEMO_FORWARD_URL, "self": SELF_URL}
+    if not space or space not in url_map:
+        raise HTTPException(
+            status_code=400,
+            detail="Invalid or missing 'space'. Use: upstream, demo, or self.",
+        )
+    url = url_map[space]
+    if not url and space == "demo":
+        raise HTTPException(status_code=400, detail="Demo not configured (DEMO_FORWARD_URL).")
+    if not url:
+        raise HTTPException(status_code=400, detail="Missing URL for this space key.")
+    repo = _hf_space_url_to_repo(url)
+    if not repo:
+        raise HTTPException(
+            status_code=400,
+            detail=f"Could not derive repo from URL. Set HF_LOGS_REPO_{space.upper()} in env.",
+        )
+    return repo
+
+
+async def _stream_hf_logs(log_type: str, space_repo: str):
+    """Stream logs from HF API (run or build). space_repo e.g. DATFID-org/datfid_api."""
+    url = f"https://huggingface.co/api/spaces/{space_repo}/logs/{log_type}"
+    headers = {"Authorization": f"Bearer {HF_TOKEN}"}
+    client = httpx.AsyncClient(timeout=60.0)
+    stream_ctx = client.stream("GET", url, headers=headers)
+
+    async def body_iter():
+        try:
+            async with stream_ctx as resp:
+                if resp.status_code != 200:
+                    body = await resp.aread()
+                    raise HTTPException(status_code=resp.status_code, detail=body[:500].decode(errors="replace"))
+                async for chunk in resp.aiter_bytes():
+                    yield chunk
+        finally:
+            await client.aclose()
+
+    return StreamingResponse(body_iter(), media_type="text/plain; charset=utf-8")
+
+
+@app.get("/admin/logs/run")
+async def admin_logs_run(req: Request, space: str = "upstream"):
+    """Admin only: stream run logs. Requires X-Admin-Pass header. Query: space=upstream|demo|self (keys for hf_url, DEMO_FORWARD_URL, SELF_URL)."""
+    _require_admin_token(req)
+    space_repo = _resolve_space_repo(space)
+    return await _stream_hf_logs("run", space_repo)
+
+
+@app.get("/admin/logs/build")
+async def admin_logs_build(req: Request, space: str = "upstream"):
+    """Admin only: stream build logs. Requires X-Admin-Pass header. Query: space=upstream|demo|self."""
+    _require_admin_token(req)
+    space_repo = _resolve_space_repo(space)
+    return await _stream_hf_logs("build", space_repo)
+
 @app.post("/modelfit/")
 async def modelfit(req: Request):
     user_token = _extract_user_token(req)