Upload folder using huggingface_hub

app.py

@@ -17,6 +17,7 @@ place, and this app never generates randomness itself.
 from __future__ import annotations
 
 import datetime as dt
+import html
 import json
 import os
 import threading
@@ -30,7 +31,7 @@ MIN_BYTES, MAX_BYTES = 16, 512
 PER_VISITOR_DAILY = int(os.environ.get("DEMO_PER_VISITOR_DAILY", "5"))
 GLOBAL_DAILY = int(os.environ.get("DEMO_GLOBAL_DAILY", "200"))
 PUBLIC_SITE = "https://entropy.lightriderinc.com"
-BRAND = "#ef3b39"
+BUTTON_RED = "#dc2626"  # brand red, deep enough for white text (4.8:1)
 
 # Reads LR_API_KEY from the environment.
 client = lre.EntropyAPI(max_retries=1, timeout=60)
@@ -160,39 +161,119 @@ def _friendly(err: lre.EntropyAPIError, what: str) -> str:
 
 def _badge(ok: bool) -> str:
     if ok:
-        return (
-            '<div class="lr-badge lr-ok">✔ Verified: this receipt is signed by Light Rider and hasn\'t been '
-            "changed.</div>"
-        )
-    return '<div class="lr-badge lr-bad">✘ Not verified: the receipt\'s signature didn\'t match Light Rider\'s public key.</div>'
+        return '<div class="lr-badge lr-ok">✔ Verified: signed by Light Rider and unchanged.</div>'
+    return '<div class="lr-badge lr-bad">✘ Not verified: the signature didn\'t match Light Rider\'s public key.</div>'
+
+
+# --------------------------------------------------------------------- receipt view
+
+MODE_LABELS = {"single_source": "Single source", "custom_pool": "Custom pool", "multi_source": "Custom pool"}
 
 
-def generate(mode: str, source_id: str | None, custom_ids: list[str] | None, n_bytes: float, request: gr.Request | None = None):
-    """One draw. Returns (hex, badge, receipt, details, usage note)."""
+def _local_time(ns, offset_min, fmt: str = "%Y-%m-%d %H:%M:%S") -> str:
+    """A receipt time in the visitor's local time. `offset_min` is the
+    browser's getTimezoneOffset() (minutes behind UTC); UTC if unknown."""
+    try:
+        t = dt.datetime.fromtimestamp(int(ns) / 1e9, dt.timezone.utc)
+    except (TypeError, ValueError, OverflowError, OSError):
+        return "unknown"
+    try:
+        off = int(offset_min)
+    except (TypeError, ValueError):
+        off = 0
+    local = t.astimezone(dt.timezone(dt.timedelta(minutes=-off)))
+    if off == 0:
+        zone = "UTC"
+    else:
+        h, m = divmod(abs(off), 60)
+        zone = f"UTC{'+' if off < 0 else '-'}{h}" + (f":{m:02d}" if m else "")
+    return f"{local.strftime(fmt)} ({zone})"
+
+
+def receipt_view(receipt: dict, verified: bool, offset_min) -> str:
+    """Status line and a readable summary of a receipt (the signed JSON is shown below it)."""
+    e = html.escape
+
+    def mono(v) -> str:
+        return f"<code>{e(str(v))}</code>"
+
+    policy = str(receipt.get("policy", ""))
+    sig = f"{'✔ Verified' if verified else '✘ Not verified'} ({e(str(receipt.get('signature_alg', '')))})"
+    fields = [
+        ("Mode", e(MODE_LABELS.get(policy, policy.replace("_", " ").capitalize()))),
+        ("Pool", mono(receipt.get("pool_id", ""))),
+        ("Contributing sources", ", ".join(mono(s) for s in receipt.get("contributing_sources", []))),
+        ("Bytes", e(str(receipt.get("output_bytes", "")))),
+        ("Input min-entropy", e(f"{receipt.get('input_min_entropy_bits', '')} bits")),
+        ("Quality score", e(str(receipt.get("quality_score", "")))),
+        ("Extractor", e(str(receipt.get("extractor_alg", "")))),
+        ("DRBG", e(str(receipt.get("drbg_alg", "")))),
+        ("Issued at", e(_local_time(receipt.get("timestamp_unix_ns"), offset_min))),
+        ("Request ID", mono(receipt.get("request_id", ""))),
+        ("Signature", sig),
+    ]
+    grid = "".join(f'<div><span class="lr-label">{k}</span><span class="lr-value">{v}</span></div>' for k, v in fields)
+    return f'{_badge(verified)}<div class="lr-card"><div class="lr-grid">{grid}</div></div>'
+
+
+# --------------------------------------------------------------------- your draws (this browser session)
+#
+# Kept in Gradio session state only, and only what the receipt already says:
+# never the bytes. It ends with the session.
+
+HISTORY_HEADERS = ["Time", "Source", "Bytes", "Request ID"]
+
+
+def history_rows(history: list[dict], offset_min) -> list[list]:
+    return [
+        [_local_time(d["receipt"].get("timestamp_unix_ns"), offset_min, "%H:%M:%S"),
+         ", ".join(d["receipt"].get("contributing_sources", [])),
+         d["receipt"].get("output_bytes"),
+         d["receipt"].get("request_id")]
+        for d in history
+    ]
+
+
+def show_draw(history: list[dict], offset_min, evt: gr.SelectData):
+    """Clicking a row in "Your draws" shows that draw's receipt."""
+    row = evt.index[0] if isinstance(evt.index, (list, tuple)) else evt.index
+    if not history or row is None or not (0 <= row < len(history)):
+        return gr.update(), gr.update(), gr.update(), gr.update()
+    d = history[row]
+    note = "Showing an earlier draw. Its bytes were shown once and aren't kept; this is its receipt."
+    return "", receipt_view(d["receipt"], d["verified"], offset_min), d["receipt_text"], note
+
+
+def generate(mode: str, source_id: str | None, custom_ids: list[str] | None, n_bytes: float,
+             history: list[dict], offset_min, request: gr.Request | None = None):
+    """One draw. Returns (hex, receipt view, receipt JSON, message, usage note, history, history rows)."""
     visitor = visitor_id(request)
     n = int(n_bytes)
-    empty = ("", "", "")
+    history = list(history or [])
+
+    def fail(message: str):
+        return "", gr.update(), gr.update(), message, _usage(visitor), history, gr.update()
 
     if mode == "Custom pool":
         ids = list(custom_ids or [])
         if not (2 <= len(ids) <= 8):
-            return *empty, "Pick **2 to 8** sources for a custom pool.", _usage(visitor)
+            return fail("Pick **2 to 8** sources for a custom pool.")
         what, kwargs = "One of the picked sources", {"sources": ids}
     else:
         if not source_id:
-            return *empty, "Pick a source first (use **Refresh sources** if the list is empty).", _usage(visitor)
+            return fail("Pick a source first (use **Refresh sources** if the list is empty).")
         what, kwargs = source_id, {"source": source_id}
     if not (MIN_BYTES <= n <= MAX_BYTES):
-        return *empty, f"Choose {MIN_BYTES} to {MAX_BYTES} bytes.", _usage(visitor)
+        return fail(f"Choose {MIN_BYTES} to {MAX_BYTES} bytes.")
 
     refusal = limits.reserve(visitor)
     if refusal:
-        return *empty, refusal, _usage(visitor)
+        return fail(refusal)
     try:
         result = client.get(n, **kwargs)
     except lre.EntropyAPIError as err:
         limits.release(visitor)  # a failed draw is never charged
-        return *empty, _friendly(err, what), _usage(visitor)
+        return fail(_friendly(err, what))
 
     try:
         verified = client.verify(result.receipt)
@@ -202,11 +283,10 @@ def generate(mode: str, source_id: str | None, custom_ids: list[str] | None, n_b
     # Exact text, built in Python: a browser JSON viewer would round the
     # 64-bit timestamp, and a rounded receipt no longer verifies.
     receipt_text = json.dumps(receipt, indent=2, ensure_ascii=False)
-    details = (
-        f"**{len(result.data)} bytes** from **{', '.join(result.sources)}** · request `{result.request_id}` · "
-        f"policy `{receipt.get('policy')}` · signed {receipt.get('signature_alg')}"
-    )
-    return result.hex, _badge(verified), receipt_text, details, _usage(visitor)
+    history.insert(0, {"receipt": receipt, "receipt_text": receipt_text, "verified": verified})
+    message = f"**{len(result.data)} bytes** from **{', '.join(result.sources)}**."
+    return (result.hex, receipt_view(receipt, verified, offset_min), receipt_text, message, _usage(visitor),
+            history, history_rows(history, offset_min))
 
 
 def _usage(visitor: str) -> str:
@@ -244,17 +324,29 @@ CODE_TABS = {
 
 CODE_FOOTER = 'Create your API key at [entropy.lightriderinc.com/developers](https://entropy.lightriderinc.com/developers). It gives full access to your account, so keep it out of public code. Sources: `anu`, `cisco`, `qispace`, `rigetti`, `iqm`, `iqm-qec`. Price: 1 credit ($0.01) per 256 bytes.'
 
+# Theme variables and translucent tints only, so every custom block reads in
+# both the light and the dark theme.
 CSS = f"""
-.lr-badge {{ padding: 10px 14px; border-radius: 8px; font-weight: 600; }}
-.lr-ok {{ background: #e8f5e9; color: #1b5e20; border: 1px solid #a5d6a7; }}
-.lr-bad {{ background: #fdecea; color: #b71c1c; border: 1px solid #f5c2c0; }}
-#lr-generate {{ background: {BRAND}; color: white; }}
+.lr-badge {{ padding: 10px 14px; border-radius: 8px; font-weight: 600; border: 1px solid;
+  color: var(--body-text-color); margin-bottom: 10px; }}
+.lr-ok {{ background: rgba(34, 197, 94, 0.14); border-color: rgba(34, 197, 94, 0.6); }}
+.lr-bad {{ background: rgba(239, 68, 68, 0.14); border-color: rgba(239, 68, 68, 0.6); }}
+.lr-card {{ border: 1px solid var(--border-color-primary); border-radius: 8px; padding: 12px 14px;
+  background: var(--background-fill-secondary); }}
+.lr-grid {{ display: grid; grid-template-columns: repeat(auto-fill, minmax(190px, 1fr)); gap: 10px 18px; }}
+.lr-label {{ display: block; font-size: 12px; color: var(--body-text-color); opacity: 0.75; }}
+.lr-value {{ color: var(--body-text-color); overflow-wrap: anywhere; }}
+.lr-value code {{ font-family: var(--font-mono); background: none; padding: 0; color: inherit; }}
+#lr-generate {{ background: {BUTTON_RED}; color: white; }}
 """
 
 
 def build() -> gr.Blocks:
     with gr.Blocks(title="Light Rider Quantum Entropy") as demo:
         gr.Markdown(INTRO)
+        history = gr.State([])
+        # Browser-side value (a State lives on the server, out of reach of the page's JS).
+        tz_offset = gr.Number(value=0, visible=False)
         with gr.Tab("Generate"):
             with gr.Row():
                 with gr.Column(scale=1):
@@ -270,9 +362,12 @@ def build() -> gr.Blocks:
                 with gr.Column(scale=2):
                     message = gr.Markdown()
                     out_hex = gr.Textbox(label="Entropy (hex)", lines=4, buttons=["copy"], interactive=False)
-                    badge = gr.HTML()
-                    with gr.Accordion("Signed receipt (JSON)", open=False):
-                        receipt = gr.Code(language="json", interactive=False, show_label=False)
+                    view = gr.HTML()
+                    receipt = gr.Code(language="json", interactive=False, label="Signed receipt (JSON)",
+                                      buttons=["copy", "download"])
+            gr.Markdown("### Your draws\nThis browser session only. Click a draw to see its receipt.")
+            history_table = gr.Dataframe(headers=HISTORY_HEADERS, value=[], interactive=False, show_label=False,
+                                         wrap=True)
         with gr.Tab("Use in your code"):
             with gr.Tabs():
                 for label, text in CODE_TABS.items():
@@ -283,13 +378,17 @@ def build() -> gr.Blocks:
         mode.change(toggle_mode, mode, [source, custom], api_visibility="private")
         refresh.click(load_sources, None, [source, custom, status], api_visibility="private")
         demo.load(load_sources, None, [source, custom, status], api_visibility="private")
+        # The visitor's UTC offset, so receipt times show in their local time.
+        demo.load(None, None, tz_offset, js="() => new Date().getTimezoneOffset()", api_visibility="private")
         go.click(
             generate,
-            [mode, source, custom, n_bytes],
-            [out_hex, badge, receipt, message, usage],
+            [mode, source, custom, n_bytes, history, tz_offset],
+            [out_hex, view, receipt, message, usage, history, history_table],
             api_visibility="private",
             concurrency_limit=4,
         )
+        history_table.select(show_draw, [history, tz_offset], [out_hex, view, receipt, message],
+                             api_visibility="private")
     return demo