Serve Crello corpus aafdb0e86816 from the mounted bucket

Dockerfile

@@ -32,6 +32,8 @@ RUN if [ -f corpus-manifest.json ]; then \
         --validation ${PACK_VALIDATION} --test ${PACK_TEST} && rm -rf /tmp/hf; \
     fi
 COPY docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh
+# an upload to the Hub does not keep the executable bit
+RUN chmod 0755 /usr/local/bin/docker-entrypoint.sh
 
 # The server only reads /app and /data; no chown, which would copy both into a new layer.
 RUN useradd --create-home --uid 1000 user

scripts/loadtest.py

@@ -36,6 +36,25 @@ except ImportError:  # run from the package directory
     from design_canvas.core.pack import load_pack
 
 
+def authorize(token: str) -> None:
+    """Send an HF token with every request the OpenEnv client makes (a private Space needs it). The client has no
+    option for headers, so its WebSocket connect and its HTTP client are wrapped here, in this script only."""
+    import functools
+
+    import httpx
+    import openenv.core.env_client as ec
+
+    auth = {"Authorization": f"Bearer {token}"}
+    ec.ws_connect = functools.partial(ec.ws_connect, additional_headers=auth)
+    base = httpx.AsyncClient.__init__
+
+    def init(self, *a, **kw):
+        kw["headers"] = {**auth, **(kw.get("headers") or {})}
+        base(self, *a, **kw)
+
+    httpx.AsyncClient.__init__ = init
+
+
 def pct(xs: list[float], q: float) -> float | None:
     if not xs:
         return None
@@ -96,7 +115,12 @@ def main(argv=None) -> int:
     ap.add_argument("--concurrency", type=int, default=16)
     ap.add_argument("--steps", type=int, default=5, help="gui: screenshot+click+key rounds per episode")
     ap.add_argument("--json", default=None, help="write the results here")
+    ap.add_argument("--hf-token-env", default=None, help="env var holding an HF token, for a private Space")
     a = ap.parse_args(argv)
+    if a.hf_token_env:
+        import os
+
+        authorize(os.environ[a.hf_token_env])
 
     pack = load_pack()
     tasks = [pack.at(a.split, i % pack.count(a.split)) for i in range(a.episodes)]