ci: remove CI config before sync

.cnb.yml

@@ -1,66 +0,0 @@
-
-$:
-  vscode:
-    - runner:
-        cpus: 4
-        tags: cnb:arch:amd64
-      docker: 
-        image: cnbcool/default-dev-env:latest
-      imports:
-        - https://cnb.cool/maikebuke/Tools/Huggingface/AccessToken/-/blob/main/key.yml
-      env: 
-        HF_SPACE_URL: "https://huggingface.co/spaces/ServiceX/PDF"
-      services:
-        - vscode
-        - docker
-      stages:
-        - name: vscode go
-          type: vscode:go
-
-main:
-  push:
-    - runner:
-        cpus: 1
-      docker: 
-        image: cnbcool/default-dev-env:latest
-      imports:
-          - https://cnb.cool/maikebuke/Tools/Huggingface/AccessToken/-/blob/main/key.yml
-      env: 
-        HF_SPACE_URL: "https://huggingface.co/spaces/ServiceX/PDF"
-        HF_SPACE_SECRET_KEY: "BASIC_AUTH_USERS"
-        BASIC_AUTH_FILE: "basic_auth_users.txt"
-        HF_EXCLUDE_FILES: ".cnb.yml basic_auth_users.txt src/scripts"
-      stages:
-        - name: Update HF Space Secret
-          script: |
-            set -euo pipefail
-
-            HF_TOKEN="${HF_TOKEN_FULL}" uvx --from huggingface_hub hf auth whoami >/dev/null
-            HF_TOKEN_FULL="${HF_TOKEN_FULL}" \
-            HF_SPACE_URL="${HF_SPACE_URL}" \
-            HF_SPACE_SECRET_KEY="${HF_SPACE_SECRET_KEY}" \
-            BASIC_AUTH_FILE="${BASIC_AUTH_FILE}" \
-            uvx --from huggingface_hub python src/scripts/update_space_secret.py
-
-        - name: Push Git To Huggingface Spaces
-          script: |
-            set -euo pipefail
-
-            # 从 HF_SPACE_URL 提取 owner/repo 路径用于构造带认证的 git remote
-            HF_REPO_PATH=$(echo "$HF_SPACE_URL" | sed 's|https://huggingface.co/spaces/||')
-            HF_REMOTE="https://user:${HF_TOKEN_FULL}@huggingface.co/spaces/${HF_REPO_PATH}"
-
-            # 删除不应同步到 Spaces 的文件（空格分隔）
-            for exclude in ${HF_EXCLUDE_FILES}; do
-              rm -rf "$exclude"
-            done
-
-            git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
-            git config user.name "github-actions[bot]"
-
-            # 将删除操作提交（基于当前 HEAD）
-            git add -A
-            git diff --cached --quiet || git commit -m "ci: remove CI config before sync"
-
-            # 强制推送到 Huggingface Space
-            git push "$HF_REMOTE" HEAD:main --force

basic_auth_users.txt

@@ -1,3 +0,0 @@
-# 每行一个账号，格式：username:password
-alice:change_me_please
-bob:change_me_too

src/scripts/update_space_secret.py

@@ -1,58 +0,0 @@
-#!/usr/bin/env python3
-"""Update Hugging Face Space secret from a local credential file."""
-
-from __future__ import annotations
-
-import os
-from pathlib import Path
-from urllib.parse import urlparse
-
-from huggingface_hub import HfApi
-
-
-def _require_env(name: str) -> str:
-    value = os.environ.get(name, "").strip()
-    if not value:
-        raise SystemExit(f"[ERROR] Missing required environment variable: {name}")
-    return value
-
-
-def _parse_space_repo_id(space_url: str) -> str:
-    prefix = "https://huggingface.co/spaces/"
-    if space_url.startswith(prefix):
-        repo_id = space_url[len(prefix) :].strip("/")
-    else:
-        parsed = urlparse(space_url)
-        parts = [part for part in parsed.path.split("/") if part]
-        # 期望路径格式: /spaces/{owner}/{repo}
-        if len(parts) >= 3 and parts[0] == "spaces":
-            repo_id = f"{parts[1]}/{parts[2]}"
-        else:
-            raise SystemExit(f"[ERROR] Invalid HF_SPACE_URL: {space_url}")
-
-    if "/" not in repo_id:
-        raise SystemExit(f"[ERROR] Invalid Space repo id: {repo_id}")
-    return repo_id
-
-
-def main() -> None:
-    token = _require_env("HF_TOKEN_FULL")
-    space_url = _require_env("HF_SPACE_URL")
-    secret_key = os.environ.get("HF_SPACE_SECRET_KEY", "BASIC_AUTH_USERS").strip()
-    auth_file = os.environ.get("BASIC_AUTH_FILE", "basic_auth_users.txt").strip()
-
-    auth_path = Path(auth_file)
-    if not auth_path.is_file():
-        raise SystemExit(f"[ERROR] Auth file not found: {auth_file}")
-
-    secret_value = auth_path.read_text(encoding="utf-8").strip()
-    if not secret_value:
-        raise SystemExit(f"[ERROR] Auth file is empty: {auth_file}")
-
-    repo_id = _parse_space_repo_id(space_url)
-    HfApi(token=token).add_space_secret(repo_id=repo_id, key=secret_key, value=secret_value)
-    print(f"[INFO] Updated Space secret '{secret_key}' for '{repo_id}'.")
-
-
-if __name__ == "__main__":
-    main()