Read secrets from /run/secrets/ directory (HF Spaces)

src/core/config.py

@@ -1,5 +1,16 @@
 from pydantic_settings import BaseSettings
 import os
+from pathlib import Path
+
+
+def read_secret_from_file(secret_name: str) -> str:
+    """Read a secret from HuggingFace Spaces secrets directory."""
+    secrets_dir = Path("/run/secrets")
+    secret_file = secrets_dir / secret_name
+    
+    if secret_file.exists():
+        return secret_file.read_text().strip()
+    return ""
 
 
 class Settings(BaseSettings):
@@ -17,41 +28,49 @@ class Settings(BaseSettings):
 
     class Config:
         env_file = ".env"
-        # Allow reading from environment variables with different prefixes
-        env_prefix = ""
-        case_sensitive = False
 
     def __init__(self, **kwargs):
         super().__init__(**kwargs)
-        # Try multiple environment variable names
-        # HuggingFace Spaces may use HF_TOKEN, HUGGINGFACE_TOKEN, or variations
         import logging
         
         if not self.HUGGINGFACE_TOKEN:
-            # Try different possible names
-            token_sources = [
-                "HF_TOKEN",
-                "HUGGINGFACE_TOKEN", 
-                "HUGGING_FACE_HUB_TOKEN",
-                "HF_API_TOKEN"
-            ]
+            # HuggingFace Spaces stores secrets in /run/secrets/ directory
+            # Try reading from secrets files first
+            secret_names = ["HF_TOKEN", "HUGGINGFACE_TOKEN"]
             
-            for source in token_sources:
-                token = os.getenv(source)
+            for secret_name in secret_names:
+                token = read_secret_from_file(secret_name)
                 if token:
                     self.HUGGINGFACE_TOKEN = token
-                    logging.info(f"Token loaded from {source}: {token[:10]}...")
+                    logging.info(f"Token loaded from secret file {secret_name}: {token[:10]}...")
                     break
+            
+            # Fallback to environment variables
+            if not self.HUGGINGFACE_TOKEN:
+                token_env_vars = [
+                    "HF_TOKEN",
+                    "HUGGINGFACE_TOKEN", 
+                    "HUGGING_FACE_HUB_TOKEN",
+                ]
+                
+                for env_var in token_env_vars:
+                    token = os.getenv(env_var, "").strip()
+                    if token:
+                        self.HUGGINGFACE_TOKEN = token
+                        logging.info(f"Token loaded from env var {env_var}: {token[:10]}...")
+                        break
         
         # Debug: Log token status
         if self.HUGGINGFACE_TOKEN:
-            logging.info(f"Final HF Token status: Set ({len(self.HUGGINGFACE_TOKEN)} chars)")
+            logging.info(f"✓ HF Token configured ({len(self.HUGGINGFACE_TOKEN)} chars)")
         else:
-            logging.error("HF Token is empty! Available env vars:")
-            # Log all env vars that might contain tokens (for debugging)
-            for key in os.environ:
-                if 'TOKEN' in key.upper() or 'HF' in key.upper():
-                    logging.error(f"  Found env var: {key}")
+            logging.error("✗ HF Token is NOT set!")
+            logging.error("Checked /run/secrets/ and environment variables")
+            # List what's actually available
+            secrets_path = Path("/run/secrets")
+            if secrets_path.exists():
+                logging.error(f"Files in /run/secrets/: {list(secrets_path.iterdir())}")
+            logging.error(f"Env vars with TOKEN/HF: {[k for k in os.environ if 'TOKEN' in k.upper() or 'HF' in k.upper()]}")
 
 
 settings = Settings()