Update app.py

app.py

@@ -392,7 +392,7 @@ class TokenManager:
     def initialize_user(self, username: str):
         """Initialize new user with monthly credits (or infinite for owner)"""
         if not username:
-            username = "anonymous"
+            return  # DO NOT initialize anonymous users
         
         if username not in self.user_tokens:
             # Owner gets infinite tokens
@@ -438,7 +438,7 @@ class TokenManager:
     def charge_usage(self, username: str, duration_ms: float) -> bool:
         """Charge user for inference time. Returns True if successful. Owner never charged."""
         if not username:
-            username = "anonymous"
+            return False  # DO NOT charge anonymous users
         
         self.initialize_user(username)
         self.check_monthly_reset(username)
@@ -574,7 +574,7 @@ class TokenManager:
     def get_balance(self, username: str) -> float:
         """Get user's current token balance"""
         if not username:
-            username = "anonymous"
+            return 0.0  # Anonymous users get 0 balance
         
         self.initialize_user(username)
         self.check_monthly_reset(username)
@@ -590,7 +590,7 @@ class TokenManager:
     def get_purchases(self, username: str) -> dict:
         """Get user's current purchases"""
         if not username:
-            username = "anonymous"
+            return {"batch_size": 512, "max_tokens": 2048}  # Anonymous users get defaults
         
         self.initialize_user(username)
         return self.user_tokens[username]["purchases"]
@@ -1049,6 +1049,14 @@ class ZeroEngine:
 
     def inference_generator(self, prompt: str, history: List[Dict], ghost_context: str, repo: str, quant: str, profile: gr.OAuthProfile | None) -> Generator:
         username = profile.username if profile else "anonymous"
+        
+        # COMPLETELY BLOCK ANONYMOUS USERS
+        if not profile or not profile.username:
+            error_message = "🚫 Oops, you are not logged in!\n\nPlease log in to use ZeroEngine. Anonymous access is not allowed."
+            history.append({"role": "assistant", "content": error_message})
+            yield history
+            return
+        
         # Update activity timestamp
         self.update_activity()