Update model syncing

main.py

@@ -514,5 +514,65 @@ async def proxy_adjustments(rest: str, request: Request):
         return JSONResponse(status_code=502, content=proxy_error_payload("Proxy Error (Hugging Face)", exc))
 
 
+SYNC_PROXY_TIMEOUT_SECONDS = 300
+
+
+@app.api_route("/proxy_sync{rest:path}", methods=["GET", "POST"])
+async def proxy_sync(rest: str, request: Request):
+    """Forward admin sync requests to the dev backend only.
+
+    Dev remains the controller for dev<->prod sync. The browser never receives
+    production sync tokens, and this proxy never routes sync calls to prod based
+    on username.
+    """
+    target_url = f"{DEV_URL}/sync{rest}"
+    if request.url.query:
+        target_url += f"?{request.url.query}"
+    headers = {"Authorization": f"Bearer {HF_TOKEN}"}
+    content_type = request.headers.get("content-type", "")
+    files = []
+    data = {}
+    json_body = None
+    if request.method == "POST":
+        if "multipart/form-data" in content_type:
+            form = await request.form()
+            for key, value in form.multi_items():
+                if hasattr(value, "filename"):
+                    files.append((key, (value.filename, await value.read(), value.content_type)))
+                else:
+                    data[key] = str(value)
+        elif "application/json" in content_type:
+            try:
+                json_body = await request.json()
+            except Exception:
+                json_body = None
+
+    def make_request():
+        return request_with_hf_backoff(
+            getattr(requests, request.method.lower()),
+            target_url,
+            max_retries=0,
+            headers=headers,
+            files=files or None,
+            data=data or None,
+            json=json_body,
+            timeout=SYNC_PROXY_TIMEOUT_SECONDS,
+        )
+
+    try:
+        response = await run_in_threadpool(make_request)
+    except requests.exceptions.RequestException as exc:
+        return JSONResponse(status_code=502, content=proxy_error_payload("Proxy Error (Hugging Face)", exc))
+    except Exception as exc:
+        return JSONResponse(status_code=500, content={"success": False, "message": f"Proxy Error (Internal): {str(exc)}"})
+
+    media_type = response.headers.get("content-type", "application/json")
+    passthrough_headers = {}
+    disposition = response.headers.get("content-disposition")
+    if disposition:
+        passthrough_headers["content-disposition"] = disposition
+    return Response(content=response.content, status_code=response.status_code, media_type=media_type, headers=passthrough_headers)
+
+
 if __name__ == "__main__":
     uvicorn.run(app, host="0.0.0.0", port=int(os.getenv("PORT", 7860)))