saas/gradio/SPACE_README.example.md

metadata

title: JackAILocal Builder
emoji: 🔒
colorFrom: green
colorTo: gray
sdk: gradio
app_file: app.py
pinned: false
hf_oauth: true
hf_oauth_scopes:
  - inference-api

JackAILocal Builder (Hugging Face Space)

Copy this frontmatter into the README.md of the Space repository. The hf_oauth block enables "Sign in with Hugging Face": each visitor's Gemma 4 configuration review runs through the HF Inference API on their own account (scope inference-api), never on the Space owner's token.

Token precedence used by the app for the configuration agent:

1. Visitor OAuth token (sign-in button) — per-session, billed to the visitor.
2. HF_TOKEN Space secret — billed to the OWNER; set it only if you want to sponsor all visitors' usage.
3. MODAL_BASE_URL + MODAL_API_KEY — your own vLLM endpoint.
4. Local console only: a key pasted in the API panel (hidden on hosted Spaces because it is process-wide, not per-session).

The hosted Space only exports packages (Windows/macOS/appliance ZIPs and the PC analyzer); it never claims to run a local runtime for the visitor.