fix: 500 on delete/rerun — _list_requests never returned _path

The Space's _list_requests() returns the parsed request JSON only; unlike the worker's list_requests() it never attached the file path. model_delete() and model_rerun() both did r['_path'], so every call raised KeyError -> 500.

It now carries _path (which cannot be reconstructed reliably, since the filename encodes precision and weight_type as submitted), and both endpoints guard against its absence instead of throwing. /api/manage builds its rows explicitly, so the path is not exposed to the browser.

app.py

@@ -155,6 +155,10 @@ def _list_requests():
         except (requests.RequestException, ValueError):
             continue
         if isinstance(data, dict) and "model" in data:
+            # Carry the repo path: the manage endpoints need it to delete or
+            # rewrite the exact file, and it cannot be reconstructed reliably
+            # (the filename encodes precision/weight_type as submitted).
+            data["_path"] = path
             out.append(data)
     return out
 
@@ -296,7 +300,7 @@ def model_delete(request: Request, body: ModelRef):
     api = HfApi(token=HF_TOKEN)
     removed = []
     for r in _list_requests():
-        if r.get("model") == model:
+        if r.get("model") == model and r.get("_path"):
             try:
                 api.delete_file(path_in_repo=r["_path"], repo_id=REQUESTS_REPO,
                                 repo_type="dataset",
@@ -332,6 +336,8 @@ def model_rerun(request: Request, body: ModelRef):
             break
     if not hit:
         raise HTTPException(404, f"{model} is not in the queue.")
+    if not hit.get("_path"):
+        raise HTTPException(500, "Could not resolve the request file path.")
     payload = {k: v for k, v in hit.items() if k != "_path"}
     payload["status"] = "RERUN"
     api.upload_file(