Use existing HF token for private agent requests

.env.example

@@ -7,8 +7,6 @@ ANALYSIS_PROXY_SECRET=replace-with-a-random-secret-of-at-least-32-characters
 # Deploy the stateless Agent service separately and use its private URL/key here.
 AGENT_API_URL=https://shoraky-sporalize-agent.hf.space
 AGENT_API_KEY=replace-with-the-Agent-service-secret
-# Read-scoped Hugging Face token for the private Agent Space.
-AGENT_HF_TOKEN=hf_read_token_for_the_private_Agent_Space
 # Optional: use the same random secret in the Colab notebook to register its worker.
 # COLAB_WORKER_SECRET=replace-with-a-different-random-secret-of-at-least-32-characters
 SUPABASE_URL=https://your-project.supabase.co
@@ -16,7 +14,7 @@ SUPABASE_ANON_KEY=your-publishable-or-anon-key
 SUPABASE_SERVICE_ROLE_KEY=your-service-role-or-secret-key
 CORE_REPO_ID=your-account/sporalize-core
 STORAGE_REPO_ID=your-account/sporalize-application-storage
-HF_TOKEN=
+HF_TOKEN=hf_token_with_access_to_private_spaces_and_storage_repositories
 # Per-video upload ceiling; raise only if the Space has enough disk and memory.
 MAX_VIDEO_SIZE_MB=2048
 # CORE_REVISION=optional-pinned-revision

src/agent-session.ts

@@ -78,7 +78,7 @@ export async function generateSessionFeedback(db: SupabaseClient, sessionId: str
     "x-api-key": env.AGENT_API_KEY,
     "x-user-id": userId,
   };
-  if (env.AGENT_HF_TOKEN) agentHeaders.authorization = `Bearer ${env.AGENT_HF_TOKEN}`;
+  if (env.HF_TOKEN) agentHeaders.authorization = `Bearer ${env.HF_TOKEN}`;
   const response = await fetch(new URL("/api/session/generate", env.AGENT_API_URL), {
     method: "POST",
     headers: agentHeaders,

src/config.ts

@@ -10,7 +10,7 @@ const envSchema = z.object({
   ANALYSIS_API_URL: z.string().url().default("http://127.0.0.1:8000"),
   AGENT_API_URL: z.string().url().optional(),
   AGENT_API_KEY: z.string().min(16).optional(),
-  AGENT_HF_TOKEN: z.string().optional(),
+  HF_TOKEN: z.string().optional(),
   ANALYSIS_PROXY_SECRET: z.string().min(32),
   COLAB_WORKER_SECRET: z.string().optional(),
   SUPABASE_URL: z.string().url(),

src/server.ts

@@ -791,7 +791,7 @@ app.post("/api/agent/chat", async (req, res, next) => {
       context.player = player;
     }
     const agentHeaders: Record<string, string> = { "content-type": "application/json", "x-api-key": env.AGENT_API_KEY, "x-user-id": current.user.id };
-    if (env.AGENT_HF_TOKEN) agentHeaders.authorization = `Bearer ${env.AGENT_HF_TOKEN}`;
+    if (env.HF_TOKEN) agentHeaders.authorization = `Bearer ${env.HF_TOKEN}`;
     const upstream = await fetch(new URL("/api/chat", env.AGENT_API_URL), {
       method: "POST", headers: agentHeaders,
       body: JSON.stringify({ actions: [], context, message: input.message, history: input.history }),