Upload folder using huggingface_hub

handler.py

@@ -19,10 +19,10 @@ except ImportError:
     sys.path.append('.')
     from text_features import TextFeatureExtractor
 
-# Initialize global extractor
-print("[INFO] Initializing Global TextFeatureExtractor...")
-# Preload models to avoid first-request latency in the Space runtime.
-extractor = TextFeatureExtractor(use_intent_model=True, preload=True)
+# Initialize global extractor
+print("[INFO] Initializing Global TextFeatureExtractor...")
+# Preload models to avoid first-request latency in the Space runtime.
+extractor = TextFeatureExtractor(use_intent_model=True, preload=True)
 
 
 # ──────────────────────────────────────────────────────────────────────── #
@@ -36,6 +36,7 @@ from pydantic import BaseModel
 from typing import Optional, List, Dict
 import traceback
 import numpy as np
+import os
 
 # ──────────────────────────────────────────────────────────────────────── #
 # Constants & Defaults
@@ -50,9 +51,21 @@ DEFAULT_TEXT_FEATURES = {
 }
 
 app = FastAPI(title="Text Feature Extraction API", version="1.0.0")
+
+
+def _cors_origins_from_env() -> list[str]:
+    raw = (os.getenv("ALLOWED_ORIGINS") or "").strip()
+    if not raw:
+        return ["*"]
+    return [o.strip() for o in raw.split(",") if o.strip()]
+
+
+_cors_origins = _cors_origins_from_env()
 app.add_middleware(
     CORSMiddleware,
-    allow_origins=["*"], allow_credentials=True,
+    allow_origins=_cors_origins,
+    # Browsers reject: Access-Control-Allow-Origin="*" with credentials=true.
+    allow_credentials=("*" not in _cors_origins),
     allow_methods=["*"], allow_headers=["*"],
 )
 
@@ -83,13 +96,13 @@ async def root():
     }
 
 
-@app.get("/health")
-async def health():
-    return {
-        "status": "healthy",
-        "intent_model_loaded": extractor.use_intent_model,
-        "models_preloaded": True,
-    }
+@app.get("/health")
+async def health():
+    return {
+        "status": "healthy",
+        "intent_model_loaded": extractor.use_intent_model,
+        "models_preloaded": True,
+    }
 
 
 @app.post("/extract-text-features")