Sync deps: Dockerfile system deps + ffmpeg, single pip flow

app.py

@@ -80,6 +80,11 @@ def main() -> None:
         else:
             st.caption("TripoSR: not found (mesh tab will show instructions)")
 
+    # In Space, Skybox and text→mesh need Hub access; disable buttons if no token to avoid 403
+    can_use_hub = bool(hf_token_env) or not IS_HF_SPACE
+    if IS_HF_SPACE and not hf_token_env:
+        st.warning("Set **HF_TOKEN** in Settings → Variables and secrets to enable Skybox and text→mesh generation.")
+
     tab_mesh, tab_skybox = st.tabs(["🟦 Text → 3D Mesh", "🌅 Text → Skybox"])
 
     with tab_mesh:
@@ -138,7 +143,7 @@ def main() -> None:
         if use_image and (selected_from_outputs and selected_from_outputs.exists() or uploaded):
             image_path_to_use = str(selected_from_outputs) if (selected_from_outputs and selected_from_outputs.exists()) else "upload"
 
-        if st.button("Generate mesh", key="btn_mesh"):
+        if st.button("Generate mesh", key="btn_mesh", disabled=(not can_use_hub and not image_path_to_use)):
             if not image_path_to_use and not prompt_mesh.strip():
                 st.warning("Enter a prompt or choose/upload an image.")
             else:
@@ -260,7 +265,7 @@ def main() -> None:
         with col2:
             check_seamless = st.checkbox("Run seamless edge check", value=True, key="seamless")
 
-        if st.button("Generate skybox", key="btn_sky"):
+        if st.button("Generate skybox", key="btn_sky", disabled=not can_use_hub):
             if not prompt_sky.strip():
                 st.warning("Enter a prompt.")
             else:

scripts/download_sd_model.py

@@ -16,17 +16,39 @@ MODEL_ID = "runwayml/stable-diffusion-v1-5"
 DEFAULT_LOCAL_DIR = ROOT / "weights" / "sd-v1-5"
 
 
+def _raise_if_403(err: Exception) -> None:
+    """Re-raise with a clear message if the error is a 403 from the Hub."""
+    if getattr(err, "response", None) is not None:
+        status = getattr(err.response, "status_code", None)
+        if status == 403:
+            raise RuntimeError(
+                "403 Forbidden from Hugging Face Hub. "
+                "Set HF_TOKEN (Settings → Variables and secrets in this Space, or env var locally). "
+                "Get a token at huggingface.co/settings/tokens (read access)."
+            ) from err
+    if "403" in str(err).lower() or "forbidden" in str(err).lower():
+        raise RuntimeError(
+            "403 Forbidden from Hugging Face Hub. "
+            "Set HF_TOKEN (Settings → Variables and secrets in this Space, or env var locally). "
+            "Get a token at huggingface.co/settings/tokens (read access)."
+        ) from err
+
+
 def download_sd_model(local_dir: str | Path | None = None, token: str | None = None) -> str:
     """Download runwayml/stable-diffusion-v1-5 to local_dir. Returns path on success, raises on failure."""
     from huggingface_hub import snapshot_download
     out_dir = Path(local_dir or DEFAULT_LOCAL_DIR)
     out_dir.mkdir(parents=True, exist_ok=True)
     tok = token or os.environ.get("HF_TOKEN") or os.environ.get("HUGGING_FACE_HUB_TOKEN")
-    snapshot_download(
-        repo_id=MODEL_ID,
-        local_dir=str(out_dir),
-        token=tok,
-    )
+    try:
+        snapshot_download(
+            repo_id=MODEL_ID,
+            local_dir=str(out_dir),
+            token=tok,
+        )
+    except Exception as e:
+        _raise_if_403(e)
+        raise
     return str(out_dir.resolve())
 
 

scripts/skybox_generator.py

@@ -59,6 +59,24 @@ def _get_hf_token():
         return None
 
 
+# Message shown when Hub returns 403 (missing/invalid token or gated model).
+HF_403_MESSAGE = (
+    "403 Forbidden from Hugging Face Hub. "
+    "Add HF_TOKEN in this Space: Settings → Variables and secrets → New secret: HF_TOKEN (get a token at huggingface.co/settings/tokens, read access). "
+    "If the model is gated, accept its license on the model page first, then restart the Space."
+)
+
+
+def _raise_if_403(err: Exception) -> None:
+    """Re-raise with a clear message if the error is a 403 from the Hub."""
+    if getattr(err, "response", None) is not None:
+        status = getattr(err.response, "status_code", None)
+        if status == 403:
+            raise RuntimeError(HF_403_MESSAGE) from err
+    if "403" in str(err).lower() or "forbidden" in str(err).lower():
+        raise RuntimeError(HF_403_MESSAGE) from err
+
+
 def _resolve_model_path_and_token():
     """Use local path if set or default weights/ folder exists, else Hub id. Token from HF_TOKEN or huggingface_hub."""
     local = os.environ.get("SD_MODEL_PATH", "").strip()
@@ -96,6 +114,8 @@ def generate_skybox(
     pretrained, token = _resolve_model_path_and_token()
     load_id = model_id or pretrained
     local_only = os.path.isdir(load_id)
+    # Use explicit token only (no token=True) so we don't rely on get_token() which can be None in Docker/Space
+    hub_token = token if token is not True else _get_hf_token()
     pipe = None
     last_error = None
 
@@ -106,12 +126,13 @@ def generate_skybox(
                 pid,
                 torch_dtype=dtype,
                 safety_checker=None,
-                token=None if local else (token or True),
+                token=None if local else hub_token,
                 local_files_only=local,
             )
             return True
         except Exception as err:
             last_error = err
+            _raise_if_403(err)
             return False
 
     if _load(load_id, local_only):

scripts/text_to_image.py

@@ -9,7 +9,12 @@ from pathlib import Path
 
 import torch
 
-from scripts.skybox_generator import _resolve_model_path_and_token, FALLBACK_MODEL_ID
+from scripts.skybox_generator import (
+    _get_hf_token,
+    _raise_if_403,
+    _resolve_model_path_and_token,
+    FALLBACK_MODEL_ID,
+)
 
 
 def get_device() -> str:
@@ -34,31 +39,36 @@ def text_to_image(
     pretrained, token = _resolve_model_path_and_token()
     load_id = model_id or pretrained
     local_only = os.path.isdir(load_id)
+    hub_token = token if token is not True else _get_hf_token()
     pipe = None
+    last_error = None
     try:
         pipe = StableDiffusionPipeline.from_pretrained(
             load_id,
             torch_dtype=dtype,
             safety_checker=None,
-            token=None if local_only else (token or True),
+            token=None if local_only else hub_token,
             local_files_only=local_only,
         )
-    except Exception:
+    except Exception as err:
+        last_error = err
+        _raise_if_403(err)
         if not local_only:
             try:
                 pipe = StableDiffusionPipeline.from_pretrained(
                     FALLBACK_MODEL_ID,
                     torch_dtype=dtype,
                     safety_checker=None,
-                    token=token or True,
+                    token=hub_token,
                 )
-            except Exception:
-                pass
+            except Exception as err2:
+                last_error = err2
+                _raise_if_403(err2)
     if pipe is None:
         raise RuntimeError(
             "Could not load Stable Diffusion. On Spaces: add HF_TOKEN in Settings → Variables and secrets "
             "(huggingface.co/settings/tokens). Locally: set HF_TOKEN or download the model first."
-        )
+        ) from last_error
     pipe = pipe.to(device)
 
     generator = None