Extend diagnose_runtime: whoami + Pro tier check

app.py

@@ -518,10 +518,32 @@ def diagnose_runtime() -> dict:
         import spaces  # type: ignore
 
         info["spaces_sdk_available"] = True
-        info["spaces_sdk_attrs"] = [a for a in dir(spaces) if not a.startswith("_")][:20]
     except ImportError:
         info["spaces_sdk_available"] = False
 
+    # Authenticate the token against HF Hub to see which user it resolves to
+    # and whether Pro is recognized. This is the actual auth ZeroGPU does.
+    token_value = next((os.environ.get(v) for v in token_vars if os.environ.get(v)), None)
+    if token_value:
+        import urllib.request, json as _json
+        try:
+            req = urllib.request.Request(
+                "https://huggingface.co/api/whoami-v2",
+                headers={"Authorization": f"Bearer {token_value}"},
+            )
+            with urllib.request.urlopen(req, timeout=15) as resp:
+                whoami = _json.loads(resp.read().decode("utf-8"))
+            # Cherry-pick non-sensitive fields.
+            info["whoami_name"] = whoami.get("name")
+            info["whoami_type"] = whoami.get("type")
+            info["whoami_isPro"] = whoami.get("isPro")
+            info["whoami_canPay"] = whoami.get("canPay")
+            info["whoami_periodEnd"] = whoami.get("periodEnd")
+            info["whoami_auth_type"] = (whoami.get("auth") or {}).get("type")
+            info["whoami_auth_role"] = (whoami.get("auth") or {}).get("accessToken", {}).get("role")
+        except Exception as exc:
+            info["whoami_error"] = str(exc)
+
     return info