Boot safely when HF token secret is missing

server/config.py

@@ -48,10 +48,15 @@ LOG_LEVEL = os.getenv("LOG_LEVEL", "INFO")
 HF_STORAGE_LABEL = "HF"
 
 
-def _required_env(name: str, default: str | None = None) -> str:
+def _optional_env(name: str, default: str | None = None) -> str | None:
     value = os.getenv(name, "").strip()
     if not value and default is not None:
         value = default.strip()
+    return value or None
+
+
+def _required_env(name: str, default: str | None = None) -> str:
+    value = _optional_env(name, default)
     if not value:
         raise RuntimeError(f"Missing required environment variable: {name}")
     return value
@@ -64,7 +69,7 @@ if STORAGE_MODE != HF_STORAGE_LABEL:
         f"DocVault is production-configured for STORAGE_MODE={HF_STORAGE_LABEL} only."
     )
 
-HF_TOKEN = _required_env("HF_TOKEN")
+HF_TOKEN = _optional_env("HF_TOKEN") or _optional_env("HUGGING_FACE_HUB_TOKEN") or _optional_env("HF_API_TOKEN")
 HF_REPO_ID = _required_env("HF_REPO_ID")
 HF_REPO_TYPE = _required_env("HF_REPO_TYPE", "dataset")
 if HF_REPO_TYPE not in {"dataset", "model", "space"}:

server/storage/hf.py

@@ -27,12 +27,22 @@ class HuggingFaceStorageManager(StorageInterface):
     """Stores all files and folders in a Hugging Face dataset repository."""
 
     def __init__(self) -> None:
-        self.api = HfApi(token=config.HF_TOKEN)
-        self._ensure_repo_exists()
+        self.api = HfApi(token=config.HF_TOKEN) if config.HF_TOKEN else HfApi()
+        self._repo_ready = False
+        if config.HF_TOKEN:
+            self._ensure_repo_exists()
+
+    def _ensure_token(self) -> None:
+        if not config.HF_TOKEN:
+            raise RuntimeError(
+                "HF_TOKEN is required for write operations. Set HF_TOKEN or HUGGING_FACE_HUB_TOKEN in the Space secrets."
+            )
 
     def _ensure_repo_exists(self) -> None:
+        self._ensure_token()
         try:
             self.api.repo_info(repo_id=config.HF_REPO_ID, repo_type=config.HF_REPO_TYPE)
+            self._repo_ready = True
         except Exception:
             self.api.create_repo(
                 repo_id=config.HF_REPO_ID,
@@ -40,6 +50,7 @@ class HuggingFaceStorageManager(StorageInterface):
                 private=True,
                 exist_ok=True,
             )
+            self._repo_ready = True
 
     def _timestamp(self) -> str:
         return datetime.now(timezone.utc).isoformat()
@@ -60,10 +71,13 @@ class HuggingFaceStorageManager(StorageInterface):
         return "/".join([repo_folder, config.FOLDER_MARKER]) if repo_folder else config.FOLDER_MARKER
 
     def _list_repo_files(self) -> List[str]:
-        return self.api.list_repo_files(
-            repo_id=config.HF_REPO_ID,
-            repo_type=config.HF_REPO_TYPE,
-        )
+        try:
+            return self.api.list_repo_files(
+                repo_id=config.HF_REPO_ID,
+                repo_type=config.HF_REPO_TYPE,
+            )
+        except Exception:
+            return []
 
     def _file_exists(self, repo_path: str, repo_files: List[str] | None = None) -> bool:
         repo_files = repo_files if repo_files is not None else self._list_repo_files()
@@ -115,6 +129,7 @@ class HuggingFaceStorageManager(StorageInterface):
             counter += 1
 
     def create_folder(self, user_id: str, folder_path: str) -> Dict[str, Any]:
+        self._ensure_token()
         folder_path = self._validate_relative_path(folder_path, "folder_path")
         if not folder_path:
             return {"success": False, "error": "folder_path is required", "code": "INVALID_FOLDER"}
@@ -147,6 +162,7 @@ class HuggingFaceStorageManager(StorageInterface):
     def upload_file(
         self, user_id: str, folder_path: str, filename: str, file_obj: Any
     ) -> Dict[str, Any]:
+        self._ensure_token()
         folder_path = self._validate_relative_path(folder_path, "folder_path")
 
         relative_path, repo_path = self._next_available_file_path(user_id, folder_path, filename)
@@ -185,6 +201,7 @@ class HuggingFaceStorageManager(StorageInterface):
         }
 
     def delete_file(self, user_id: str, file_path: str) -> Dict[str, Any]:
+        self._ensure_token()
         file_path = self._validate_relative_path(file_path, "file_path")
         repo_path = self._user_repo_path(user_id, file_path)
         if not self._file_exists(repo_path):
@@ -199,6 +216,7 @@ class HuggingFaceStorageManager(StorageInterface):
         return {"success": True, "message": f"Deleted file: {file_path}"}
 
     def rename_file(self, user_id: str, file_path: str, new_name: str) -> Dict[str, Any]:
+        self._ensure_token()
         file_path = self._validate_relative_path(file_path, "file_path")
         new_name = sanitize_filename(new_name)
         if not PathValidator.is_valid_filename(new_name):
@@ -235,6 +253,7 @@ class HuggingFaceStorageManager(StorageInterface):
         }
 
     def delete_folder(self, user_id: str, folder_path: str) -> Dict[str, Any]:
+        self._ensure_token()
         folder_path = self._validate_relative_path(folder_path, "folder_path")
         repo_folder_path = self._user_repo_path(user_id, folder_path)
         repo_files = self._list_repo_files()
@@ -259,6 +278,7 @@ class HuggingFaceStorageManager(StorageInterface):
     def rename_folder(
         self, user_id: str, folder_path: str, new_name: str
     ) -> Dict[str, Any]:
+        self._ensure_token()
         folder_path = self._validate_relative_path(folder_path, "folder_path")
         new_name = sanitize_filename(new_name)
         if not PathValidator.is_valid_filename(new_name):
@@ -418,6 +438,7 @@ class HuggingFaceStorageManager(StorageInterface):
         }
 
     def get_history(self, user_id: str, path: str) -> List[Dict[str, Any]]:
+        self._ensure_token()
         repo_path = self._user_repo_path(user_id, path)
         commits = self.api.list_repo_commits(
             repo_id=config.HF_REPO_ID,
@@ -441,6 +462,7 @@ class HuggingFaceStorageManager(StorageInterface):
     def restore(
         self, user_id: str, path: str, revision: str, as_copy: bool = False
     ) -> Dict[str, Any]:
+        self._ensure_token()
         path = self._validate_relative_path(path)
         source_repo_path = self._user_repo_path(user_id, path)
         destination_repo_path = source_repo_path