Add safe HF token validity check

app.py

@@ -1357,6 +1357,25 @@ def generate_images_and_game(html_code: str, roles: str, style_hint: str):
     return rewritten, status, gallery, build_prompt_preview(specs), build_model_report(model_rows), build_preview(rewritten)
 
 
+def check_hf_token() -> str:
+    if not HF_TOKEN:
+        return "HF_TOKEN is missing or not visible to the Space runtime."
+
+    request = Request(
+        "https://huggingface.co/api/whoami-v2",
+        headers={"Authorization": f"Bearer {HF_TOKEN}"},
+        method="GET",
+    )
+    try:
+        with urlopen(request, timeout=30) as response:
+            raw = response.read().decode("utf-8", errors="replace")
+        data = json.loads(raw)
+        name = data.get("name") or data.get("fullname") or "authenticated account"
+        return f"HF_TOKEN is visible and valid for {name}."
+    except Exception as exc:
+        return f"HF_TOKEN check failed: {short_error(exc)}"
+
+
 with gr.Blocks(title="Image Generator for HTML Games") as demo:
     gr.Markdown(
         "# Image Generator for HTML Games\n"
@@ -1379,6 +1398,8 @@ with gr.Blocks(title="Image Generator for HTML Games") as demo:
             )
             generate_btn = gr.Button("Generate Images + Embed Game", variant="primary")
             status = gr.Markdown("Ready.")
+            token_btn = gr.Button("Check HF Token")
+            token_status = gr.Markdown("")
             gallery = gr.Gallery(label="Generated assets", columns=2, height=300)
 
         with gr.Column(scale=2):
@@ -1411,6 +1432,7 @@ with gr.Blocks(title="Image Generator for HTML Games") as demo:
         inputs=[html_input, roles, style],
         outputs=[output_code, status, gallery, prompt_preview, model_report, preview],
     )
+    token_btn.click(fn=check_hf_token, inputs=None, outputs=token_status)
 
 
 if __name__ == "__main__":