Record model storage verification

docs/todo.md

@@ -14,6 +14,8 @@ from scaffold to a working Gradio app.
 - [x] Copy the validated API workflow into `workflows/voicegate_api.json`.
 - [x] Confirm SSH access to the running Space container and document the
   runbook.
+- [x] Confirm `DEEPSEEK_API_KEY` is visible in the Space without printing it.
+- [x] Download VoxCPM2 and MelBand RoFormer to persistent Space storage.
 
 ## Phase 1: Repository Hygiene
 
@@ -117,6 +119,8 @@ from scaffold to a working Gradio app.
 - [ ] Is `flash_attention_2` available and reliable in the ZeroGPU environment?
 - [ ] Does VoxCPM2 fit comfortably in ZeroGPU memory with ASR and
   MelBandRoFormer in the same run?
+- [x] Where should large model files live? `/data/voicegate_models`, with
+  symlinks into ComfyUI's expected model directories.
 - [ ] Should the first public demo disable background separation to reduce
   runtime and memory pressure?
 - [ ] What maximum uploaded audio/video duration should the first version allow?

docs/work-log.md

@@ -341,6 +341,35 @@ Override the root with:
 VOICEGATE_MODEL_ROOT
 ```
 
+On 2026-06-05, the first two explicit ComfyUI-path models were downloaded to
+persistent storage:
+
+```text
+/data/voicegate_models/voxcpm/VoxCPM2/model.safetensors
+/data/voicegate_models/voxcpm/VoxCPM2/audiovae.pth
+/data/voicegate_models/diffusion_models/MelBandRoFormer_comfy/MelBandRoformer_fp32.safetensors
+```
+
+Verified symlinks:
+
+```text
+/home/user/app/ComfyUI/models/voxcpm/VoxCPM2
+  -> /data/voicegate_models/voxcpm/VoxCPM2
+
+/home/user/app/ComfyUI/models/diffusion_models/MelBandRoFormer_comfy
+  -> /data/voicegate_models/diffusion_models/MelBandRoFormer_comfy
+```
+
+`DEEPSEEK_API_KEY` was also verified as present in the Space environment without
+printing its value.
+
+Model download pitfall:
+
+- `huggingface-cli download` is deprecated and failed in the Space.
+- `hf download` also failed because of a CLI dependency compatibility issue.
+- `scripts/bootstrap_comfy.py` now uses the `huggingface_hub` Python API
+  directly for model downloads.
+
 ## Current Known Good Commits
 
 - `683b147` Add ComfyUI runtime bootstrap scripts