Create loader.py

loader.py

@@ -0,0 +1,56 @@
+# loader.py — Public proxy loader for private static Hugging Face Space
+import os
+from fastapi import FastAPI, Request
+from fastapi.responses import Response, HTMLResponse, PlainTextResponse
+import httpx
+
+app = FastAPI()
+
+# ========= CONFIG =========
+PRIVATE_STATIC_URL = os.getenv("PRIVATE_STATIC_URL")
+HF_TOKEN = os.getenv("HF_TOKEN")
+
+if not PRIVATE_STATIC_URL:
+    raise RuntimeError(
+        "❌ PRIVATE_STATIC_URL is not set.\n"
+        "Go to your Hugging Face Space → Settings → Repository secrets\n"
+        "and add PRIVATE_STATIC_URL=https://cheekeong2025-iip-grading.static.hf.space"
+    )
+
+if not HF_TOKEN:
+    print("[loader] ⚠️  Warning: HF_TOKEN not set — attempting anonymous access.")
+
+HEADERS = {"Authorization": f"Bearer {HF_TOKEN}"} if HF_TOKEN else {}
+# ===========================
+
+
+@app.get("/")
+async def root():
+    """Serve the index.html from the private static Space."""
+    async with httpx.AsyncClient(timeout=None) as client:
+        try:
+            r = await client.get(PRIVATE_STATIC_URL, headers=HEADERS)
+            r.raise_for_status()
+        except Exception as e:
+            return PlainTextResponse(f"Error fetching root: {e}", status_code=500)
+    return HTMLResponse(r.text, status_code=r.status_code)
+
+
+@app.get("/{path:path}")
+async def proxy(path: str, request: Request):
+    """Proxy all static assets (CSS, JS, images, etc.) from the private Space."""
+    url = f"{PRIVATE_STATIC_URL.rstrip('/')}/{path}"
+    try:
+        async with httpx.AsyncClient(timeout=None) as client:
+            r = await client.get(url, headers=HEADERS)
+            r.raise_for_status()
+    except Exception as e:
+        return PlainTextResponse(f"Error fetching {url}: {e}", status_code=500)
+
+    content_type = r.headers.get("content-type", "text/plain")
+    return Response(content=r.content, media_type=content_type, status_code=r.status_code)
+
+
+@app.get("/health")
+async def health():
+    return {"status": "ok", "source": PRIVATE_STATIC_URL}