Upload folder using huggingface_hub

web/backend/routes/auth.py

@@ -1,8 +1,5 @@
 """Login and session endpoints."""
 
-import json
-import time
-
 from fastapi import APIRouter, HTTPException, Request, status
 from pydantic import BaseModel
 
@@ -11,30 +8,6 @@ from web.backend.config import get_web_ui_password
 
 router = APIRouter(prefix="/api", tags=["auth"])
 
-# #region agent log
-_AGENT_LOG = "/Users/lehongwu/Projects/others/lyrics/.cursor/debug-5dbcbc.log"
-
-
-def _agent_log(location: str, message: str, data: dict, hypothesis_id: str) -> None:
-    payload = {
-        "sessionId": "5dbcbc",
-        "location": location,
-        "message": message,
-        "data": data,
-        "timestamp": int(time.time() * 1000),
-        "hypothesisId": hypothesis_id,
-    }
-    line = json.dumps(payload, ensure_ascii=False)
-    try:
-        with open(_AGENT_LOG, "a", encoding="utf-8") as f:
-            f.write(line + "\n")
-    except OSError:
-        pass
-    print(f"[agent-debug] {line}", flush=True)
-
-
-# #endregion
-
 
 def _auth_ok(request: Request) -> bool:
     if request.session.get("authenticated"):
@@ -44,30 +17,6 @@ def _auth_ok(request: Request) -> bool:
         return verify_auth_token(auth[7:].strip())
     return False
 
-# #region agent log
-_AGENT_LOG = "/Users/lehongwu/Projects/others/lyrics/.cursor/debug-5dbcbc.log"
-
-
-def _agent_log(location: str, message: str, data: dict, hypothesis_id: str) -> None:
-    payload = {
-        "sessionId": "5dbcbc",
-        "location": location,
-        "message": message,
-        "data": data,
-        "timestamp": int(time.time() * 1000),
-        "hypothesisId": hypothesis_id,
-    }
-    line = json.dumps(payload, ensure_ascii=False)
-    try:
-        with open(_AGENT_LOG, "a", encoding="utf-8") as f:
-            f.write(line + "\n")
-    except OSError:
-        pass
-    print(f"[agent-debug] {line}", flush=True)
-
-
-# #endregion
-
 
 class LoginBody(BaseModel):
     password: str
@@ -91,19 +40,6 @@ def login(request: Request, body: LoginBody) -> LoginResponse:
             detail="Invalid password",
         )
     request.session["authenticated"] = True
-    # #region agent log
-    _agent_log(
-        "auth.py:login",
-        "login_ok",
-        {
-            "url_scheme": request.url.scheme,
-            "fwd_proto": (request.headers.get("x-forwarded-proto") or ""),
-            "host": request.url.hostname or "",
-            "runId": "post-fix",
-        },
-        "H2",
-    )
-    # #endregion
     return LoginResponse(authenticated=True, auth_token=create_auth_token())
 
 
@@ -115,25 +51,4 @@ def logout(request: Request) -> MeResponse:
 
 @router.get("/me", response_model=MeResponse)
 def me(request: Request) -> MeResponse:
-    raw = request.headers.get("cookie") or ""
-    has_session_cookie = "session=" in raw
-    auth_hdr = request.headers.get("authorization") or ""
-    has_bearer = auth_hdr.startswith("Bearer ")
-    auth_val = _auth_ok(request)
-    # #region agent log
-    _agent_log(
-        "auth.py:me",
-        "me_response",
-        {
-            "authenticated": auth_val,
-            "has_session_cookie": has_session_cookie,
-            "has_bearer": has_bearer,
-            "url_scheme": request.url.scheme,
-            "fwd_proto": (request.headers.get("x-forwarded-proto") or ""),
-            "path": request.url.path,
-            "runId": "post-fix",
-        },
-        "H1",
-    )
-    # #endregion
-    return MeResponse(authenticated=auth_val)
+    return MeResponse(authenticated=_auth_ok(request))

web/backend/static/assets/index-BtA7oISf.css

@@ -0,0 +1 @@
+*,:before,:after{--tw-border-spacing-x: 0;--tw-border-spacing-y: 0;--tw-translate-x: 0;--tw-translate-y: 0;--tw-rotate: 0;--tw-skew-x: 0;--tw-skew-y: 0;--tw-scale-x: 1;--tw-scale-y: 1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness: proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width: 0px;--tw-ring-offset-color: #fff;--tw-ring-color: rgb(59 130 246 / .5);--tw-ring-offset-shadow: 0 0 #0000;--tw-ring-shadow: 0 0 #0000;--tw-shadow: 0 0 #0000;--tw-shadow-colored: 0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }::backdrop{--tw-border-spacing-x: 0;--tw-border-spacing-y: 0;--tw-translate-x: 0;--tw-translate-y: 0;--tw-rotate: 0;--tw-skew-x: 0;--tw-skew-y: 0;--tw-scale-x: 1;--tw-scale-y: 1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness: proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width: 0px;--tw-ring-offset-color: #fff;--tw-ring-color: rgb(59 130 246 / .5);--tw-ring-offset-shadow: 0 0 #0000;--tw-ring-shadow: 0 0 #0000;--tw-shadow: 0 0 #0000;--tw-shadow-colored: 0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }*,:before,:after{box-sizing:border-box;border-width:0;border-style:solid;border-color:#e5e7eb}:before,:after{--tw-content: ""}html,:host{line-height:1.5;-webkit-text-size-adjust:100%;-moz-tab-size:4;-o-tab-size:4;tab-size:4;font-family:DM Sans,system-ui,sans-serif;font-feature-settings:normal;font-variation-settings:normal;-webkit-tap-highlight-color:transparent}body{margin:0;line-height:inherit}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,samp,pre{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace;font-feature-settings:normal;font-variation-settings:normal;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{text-indent:0;border-color:inherit;border-collapse:collapse}button,input,optgroup,select,textarea{font-family:inherit;font-feature-settings:inherit;font-variation-settings:inherit;font-size:100%;font-weight:inherit;line-height:inherit;letter-spacing:inherit;color:inherit;margin:0;padding:0}button,select{text-transform:none}button,input:where([type=button]),input:where([type=reset]),input:where([type=submit]){-webkit-appearance:button;background-color:transparent;background-image:none}:-moz-focusring{outline:auto}:-moz-ui-invalid{box-shadow:none}progress{vertical-align:baseline}::-webkit-inner-spin-button,::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}summary{display:list-item}blockquote,dl,dd,h1,h2,h3,h4,h5,h6,hr,figure,p,pre{margin:0}fieldset{margin:0;padding:0}legend{padding:0}ol,ul,menu{list-style:none;margin:0;padding:0}dialog{padding:0}textarea{resize:vertical}input::-moz-placeholder,textarea::-moz-placeholder{opacity:1;color:#9ca3af}input::placeholder,textarea::placeholder{opacity:1;color:#9ca3af}button,[role=button]{cursor:pointer}:disabled{cursor:default}img,svg,video,canvas,audio,iframe,embed,object{display:block;vertical-align:middle}img,video{max-width:100%;height:auto}[hidden]:where(:not([hidden=until-found])){display:none}.sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border-width:0}.order-1{order:1}.order-2{order:2}.m-0{margin:0}.mx-auto{margin-left:auto;margin-right:auto}.mb-1{margin-bottom:.25rem}.mb-2{margin-bottom:.5rem}.mb-3{margin-bottom:.75rem}.mb-4{margin-bottom:1rem}.mb-6{margin-bottom:1.5rem}.mb-8{margin-bottom:2rem}.mt-0\.5{margin-top:.125rem}.mt-1{margin-top:.25rem}.mt-1\.5{margin-top:.375rem}.mt-10{margin-top:2.5rem}.mt-2{margin-top:.5rem}.mt-3{margin-top:.75rem}.mt-4{margin-top:1rem}.mt-auto{margin-top:auto}.line-clamp-3{overflow:hidden;display:-webkit-box;-webkit-box-orient:vertical;-webkit-line-clamp:3}.block{display:block}.flex{display:flex}.inline-flex{display:inline-flex}.grid{display:grid}.hidden{display:none}.h-10{height:2.5rem}.h-2{height:.5rem}.h-20{height:5rem}.max-h-64{max-height:16rem}.max-h-\[360px\]{max-height:360px}.max-h-\[min\(70vh\,52rem\)\]{max-height:min(70vh,52rem)}.min-h-\[100px\]{min-height:100px}.min-h-\[120px\]{min-height:120px}.min-h-screen{min-height:100vh}.w-16{width:4rem}.w-20{width:5rem}.w-\[17\.5rem\]{width:17.5rem}.w-full{width:100%}.min-w-0{min-width:0px}.min-w-\[140px\]{min-width:140px}.min-w-\[15rem\]{min-width:15rem}.max-w-3xl{max-width:48rem}.max-w-4xl{max-width:56rem}.max-w-5xl{max-width:64rem}.max-w-7xl{max-width:80rem}.max-w-full{max-width:100%}.max-w-md{max-width:28rem}.flex-1{flex:1 1 0%}.shrink-0{flex-shrink:0}.cursor-crosshair{cursor:crosshair}.cursor-pointer{cursor:pointer}.select-none{-webkit-user-select:none;-moz-user-select:none;user-select:none}.resize{resize:both}.list-disc{list-style-type:disc}.appearance-none{-webkit-appearance:none;-moz-appearance:none;appearance:none}.grid-cols-1{grid-template-columns:repeat(1,minmax(0,1fr))}.grid-cols-3{grid-template-columns:repeat(3,minmax(0,1fr))}.flex-col{flex-direction:column}.flex-wrap{flex-wrap:wrap}.items-start{align-items:flex-start}.items-center{align-items:center}.justify-center{justify-content:center}.justify-between{justify-content:space-between}.gap-1{gap:.25rem}.gap-2{gap:.5rem}.gap-3{gap:.75rem}.gap-4{gap:1rem}.gap-5{gap:1.25rem}.gap-7{gap:1.75rem}.space-y-1>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(.25rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.25rem * var(--tw-space-y-reverse))}.space-y-14>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(3.5rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(3.5rem * var(--tw-space-y-reverse))}.space-y-2>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(.5rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.5rem * var(--tw-space-y-reverse))}.space-y-3>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(.75rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.75rem * var(--tw-space-y-reverse))}.space-y-4>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(1rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1rem * var(--tw-space-y-reverse))}.space-y-5>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(1.25rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1.25rem * var(--tw-space-y-reverse))}.space-y-6>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(1.5rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1.5rem * var(--tw-space-y-reverse))}.space-y-8>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(2rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(2rem * var(--tw-space-y-reverse))}.overflow-auto{overflow:auto}.overflow-hidden{overflow:hidden}.whitespace-pre-wrap{white-space:pre-wrap}.break-all{word-break:break-all}.rounded{border-radius:.25rem}.rounded-2xl{border-radius:1rem}.rounded-full{border-radius:9999px}.rounded-lg{border-radius:.5rem}.rounded-none{border-radius:0}.rounded-xl{border-radius:.75rem}.border{border-width:1px}.border-0{border-width:0px}.border-r{border-right-width:1px}.border-t{border-top-width:1px}.border-amber-200\/80{border-color:#fde68acc}.border-ink{--tw-border-opacity: 1;border-color:rgb(15 23 42 / var(--tw-border-opacity, 1))}.border-line\/80{border-color:#c8d3e6cc}.border-line\/90{border-color:#c8d3e6e6}.border-red-200{--tw-border-opacity: 1;border-color:rgb(254 202 202 / var(--tw-border-opacity, 1))}.border-slate-200{--tw-border-opacity: 1;border-color:rgb(226 232 240 / var(--tw-border-opacity, 1))}.border-slate-200\/80{border-color:#e2e8f0cc}.border-slate-200\/90{border-color:#e2e8f0e6}.border-slate-300{--tw-border-opacity: 1;border-color:rgb(203 213 225 / var(--tw-border-opacity, 1))}.border-slate-300\/80{border-color:#cbd5e1cc}.bg-amber-50{--tw-bg-opacity: 1;background-color:rgb(255 251 235 / var(--tw-bg-opacity, 1))}.bg-black{--tw-bg-opacity: 1;background-color:rgb(0 0 0 / var(--tw-bg-opacity, 1))}.bg-black\/5{background-color:#0000000d}.bg-ink{--tw-bg-opacity: 1;background-color:rgb(15 23 42 / var(--tw-bg-opacity, 1))}.bg-neutral-200{--tw-bg-opacity: 1;background-color:rgb(229 229 229 / var(--tw-bg-opacity, 1))}.bg-panel\/95{background-color:#e4eaf5f2}.bg-red-50{--tw-bg-opacity: 1;background-color:rgb(254 242 242 / var(--tw-bg-opacity, 1))}.bg-slate-100{--tw-bg-opacity: 1;background-color:rgb(241 245 249 / var(--tw-bg-opacity, 1))}.bg-slate-200{--tw-bg-opacity: 1;background-color:rgb(226 232 240 / var(--tw-bg-opacity, 1))}.bg-slate-50\/90{background-color:#f8fafce6}.bg-white{--tw-bg-opacity: 1;background-color:rgb(255 255 255 / var(--tw-bg-opacity, 1))}.bg-white\/60{background-color:#fff9}.bg-white\/80{background-color:#fffc}.bg-white\/85{background-color:#ffffffd9}.bg-gradient-to-br{background-image:linear-gradient(to bottom right,var(--tw-gradient-stops))}.from-paper{--tw-gradient-from: #eef1f8 var(--tw-gradient-from-position);--tw-gradient-to: rgb(238 241 248 / 0) var(--tw-gradient-to-position);--tw-gradient-stops: var(--tw-gradient-from), var(--tw-gradient-to)}.via-indigo-50\/35{--tw-gradient-to: rgb(238 242 255 / 0) var(--tw-gradient-to-position);--tw-gradient-stops: var(--tw-gradient-from), rgb(238 242 255 / .35) var(--tw-gradient-via-position), var(--tw-gradient-to)}.to-violet-100\/45{--tw-gradient-to: rgb(237 233 254 / .45) var(--tw-gradient-to-position)}.object-contain{-o-object-fit:contain;object-fit:contain}.object-cover{-o-object-fit:cover;object-fit:cover}.p-0{padding:0}.p-10{padding:2.5rem}.p-3{padding:.75rem}.p-4{padding:1rem}.p-6{padding:1.5rem}.p-8{padding:2rem}.px-1{padding-left:.25rem;padding-right:.25rem}.px-2{padding-left:.5rem;padding-right:.5rem}.px-3{padding-left:.75rem;padding-right:.75rem}.px-4{padding-left:1rem;padding-right:1rem}.px-5{padding-left:1.25rem;padding-right:1.25rem}.py-1{padding-top:.25rem;padding-bottom:.25rem}.py-1\.5{padding-top:.375rem;padding-bottom:.375rem}.py-2{padding-top:.5rem;padding-bottom:.5rem}.py-2\.5{padding-top:.625rem;padding-bottom:.625rem}.py-3{padding-top:.75rem;padding-bottom:.75rem}.pl-0\.5{padding-left:.125rem}.pl-5{padding-left:1.25rem}.pt-6{padding-top:1.5rem}.pt-8{padding-top:2rem}.text-left{text-align:left}.font-mono{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace}.text-2xl{font-size:1.625rem;line-height:2rem}.text-3xl{font-size:2rem;line-height:2.25rem}.text-base{font-size:1.0625rem;line-height:1.5rem}.text-lg{font-size:1.1875rem;line-height:1.625rem}.text-sm{font-size:.9375rem;line-height:1.375rem}.text-xl{font-size:1.3125rem;line-height:1.75rem}.text-xs{font-size:.8125rem;line-height:1.125rem}.font-medium{font-weight:500}.font-normal{font-weight:400}.tabular-nums{--tw-numeric-spacing: tabular-nums;font-variant-numeric:var(--tw-ordinal) var(--tw-slashed-zero) var(--tw-numeric-figure) var(--tw-numeric-spacing) var(--tw-numeric-fraction)}.leading-relaxed{line-height:1.625}.leading-snug{line-height:1.375}.tracking-wide{letter-spacing:.025em}.text-amber-800{--tw-text-opacity: 1;color:rgb(146 64 14 / var(--tw-text-opacity, 1))}.text-amber-900{--tw-text-opacity: 1;color:rgb(120 53 15 / var(--tw-text-opacity, 1))}.text-ink{--tw-text-opacity: 1;color:rgb(15 23 42 / var(--tw-text-opacity, 1))}.text-ink\/70{color:#0f172ab3}.text-ink\/80{color:#0f172acc}.text-ink\/85{color:#0f172ad9}.text-ink\/90{color:#0f172ae6}.text-ink\/95{color:#0f172af2}.text-mist{--tw-text-opacity: 1;color:rgb(100 116 139 / var(--tw-text-opacity, 1))}.text-mist\/80{color:#64748bcc}.text-mist\/90{color:#64748be6}.text-paper{--tw-text-opacity: 1;color:rgb(238 241 248 / var(--tw-text-opacity, 1))}.text-red-700{--tw-text-opacity: 1;color:rgb(185 28 28 / var(--tw-text-opacity, 1))}.text-red-800{--tw-text-opacity: 1;color:rgb(153 27 27 / var(--tw-text-opacity, 1))}.text-slate-500{--tw-text-opacity: 1;color:rgb(100 116 139 / var(--tw-text-opacity, 1))}.text-white{--tw-text-opacity: 1;color:rgb(255 255 255 / var(--tw-text-opacity, 1))}.underline{text-decoration-line:underline}.underline-offset-2{text-underline-offset:2px}.accent-ink{accent-color:#0f172a}.opacity-80{opacity:.8}.shadow-lg{--tw-shadow: 0 10px 15px -3px rgb(0 0 0 / .1), 0 4px 6px -4px rgb(0 0 0 / .1);--tw-shadow-colored: 0 10px 15px -3px var(--tw-shadow-color), 0 4px 6px -4px var(--tw-shadow-color);box-shadow:var(--tw-ring-offset-shadow, 0 0 #0000),var(--tw-ring-shadow, 0 0 #0000),var(--tw-shadow)}.shadow-md{--tw-shadow: 0 4px 6px -1px rgb(0 0 0 / .1), 0 2px 4px -2px rgb(0 0 0 / .1);--tw-shadow-colored: 0 4px 6px -1px var(--tw-shadow-color), 0 2px 4px -2px var(--tw-shadow-color);box-shadow:var(--tw-ring-offset-shadow, 0 0 #0000),var(--tw-ring-shadow, 0 0 #0000),var(--tw-shadow)}.shadow-sm{--tw-shadow: 0 1px 2px 0 rgb(0 0 0 / .05);--tw-shadow-colored: 0 1px 2px 0 var(--tw-shadow-color);box-shadow:var(--tw-ring-offset-shadow, 0 0 #0000),var(--tw-ring-shadow, 0 0 #0000),var(--tw-shadow)}.shadow-xl{--tw-shadow: 0 20px 25px -5px rgb(0 0 0 / .1), 0 8px 10px -6px rgb(0 0 0 / .1);--tw-shadow-colored: 0 20px 25px -5px var(--tw-shadow-color), 0 8px 10px -6px var(--tw-shadow-color);box-shadow:var(--tw-ring-offset-shadow, 0 0 #0000),var(--tw-ring-shadow, 0 0 #0000),var(--tw-shadow)}.shadow-indigo-950\/10{--tw-shadow-color: rgb(30 27 75 / .1);--tw-shadow: var(--tw-shadow-colored)}.filter{filter:var(--tw-blur) var(--tw-brightness) var(--tw-contrast) var(--tw-grayscale) var(--tw-hue-rotate) var(--tw-invert) var(--tw-saturate) var(--tw-sepia) var(--tw-drop-shadow)}.backdrop-blur-sm{--tw-backdrop-blur: blur(4px);-webkit-backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-invert) var(--tw-backdrop-opacity) var(--tw-backdrop-saturate) var(--tw-backdrop-sepia);backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-invert) var(--tw-backdrop-opacity) var(--tw-backdrop-saturate) var(--tw-backdrop-sepia)}.transition-colors{transition-property:color,background-color,border-color,text-decoration-color,fill,stroke;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}html{font-size:100%}html[data-font-size=compact]{font-size:75%}html[data-font-size=small]{font-size:90%}html[data-font-size=standard]{font-size:105%}html[data-font-size=large]{font-size:120%}html[data-font-size=xlarge]{font-size:135%}body{min-height:100vh;--tw-bg-opacity: 1;background-color:rgb(238 241 248 / var(--tw-bg-opacity, 1));--tw-text-opacity: 1;color:rgb(15 23 42 / var(--tw-text-opacity, 1));-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;font-family:DM Sans,system-ui,sans-serif;line-height:1.55}::-moz-selection{background-color:#6366f138}::selection{background-color:#6366f138}h1,h2,h3,.font-display{font-family:"Source Serif 4",Georgia,serif}.file\:mr-3::file-selector-button{margin-right:.75rem}.file\:rounded-lg::file-selector-button{border-radius:.5rem}.file\:border-0::file-selector-button{border-width:0px}.file\:bg-slate-200::file-selector-button{--tw-bg-opacity: 1;background-color:rgb(226 232 240 / var(--tw-bg-opacity, 1))}.file\:px-3::file-selector-button{padding-left:.75rem;padding-right:.75rem}.file\:py-1\.5::file-selector-button{padding-top:.375rem;padding-bottom:.375rem}.file\:text-sm::file-selector-button{font-size:.9375rem;line-height:1.375rem}.file\:text-ink::file-selector-button{--tw-text-opacity: 1;color:rgb(15 23 42 / var(--tw-text-opacity, 1))}.placeholder\:text-slate-400::-moz-placeholder{--tw-text-opacity: 1;color:rgb(148 163 184 / var(--tw-text-opacity, 1))}.placeholder\:text-slate-400::placeholder{--tw-text-opacity: 1;color:rgb(148 163 184 / var(--tw-text-opacity, 1))}.hover\:border-clay\/80:hover{border-color:#6366f1cc}.hover\:bg-slate-50:hover{--tw-bg-opacity: 1;background-color:rgb(248 250 252 / var(--tw-bg-opacity, 1))}.hover\:bg-slate-800:hover{--tw-bg-opacity: 1;background-color:rgb(30 41 59 / var(--tw-bg-opacity, 1))}.hover\:bg-white\/60:hover{background-color:#fff9}.hover\:text-ink:hover{--tw-text-opacity: 1;color:rgb(15 23 42 / var(--tw-text-opacity, 1))}.focus\:outline-none:focus{outline:2px solid transparent;outline-offset:2px}.focus\:ring-2:focus{--tw-ring-offset-shadow: var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow: var(--tw-ring-inset) 0 0 0 calc(2px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow, 0 0 #0000)}.focus\:ring-clay\/40:focus{--tw-ring-color: rgb(99 102 241 / .4)}.focus\:ring-clay\/50:focus{--tw-ring-color: rgb(99 102 241 / .5)}.disabled\:pointer-events-none:disabled{pointer-events:none}.disabled\:opacity-40:disabled{opacity:.4}.disabled\:opacity-50:disabled{opacity:.5}.disabled\:opacity-60:disabled{opacity:.6}.disabled\:opacity-\[0\.92\]:disabled{opacity:.92}@media (min-width: 640px){.sm\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.sm\:grid-cols-3{grid-template-columns:repeat(3,minmax(0,1fr))}.sm\:p-10{padding:2.5rem}.sm\:p-12{padding:3rem}.sm\:p-7{padding:1.75rem}}@media (min-width: 768px){.md\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}}@media (min-width: 1024px){.lg\:sticky{position:sticky}.lg\:top-4{top:1rem}.lg\:order-1{order:1}.lg\:order-2{order:2}.lg\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.lg\:grid-cols-\[1fr_minmax\(200px\,260px\)\]{grid-template-columns:1fr minmax(200px,260px)}.lg\:p-12{padding:3rem}}@media (min-width: 1280px){.xl\:max-w-\[96rem\]{max-width:96rem}}@media (min-width: 1536px){.\32xl\:max-w-\[min\(104rem\,calc\(100vw-3rem\)\)\]{max-width:min(104rem,calc(100vw - 3rem))}}

web/backend/static/index.html

@@ -43,8 +43,8 @@
         }
       })();
     </script>
-    <script type="module" crossorigin src="/assets/index-C88-5FI5.js"></script>
-    <link rel="stylesheet" crossorigin href="/assets/index-BIkuBov8.css">
+    <script type="module" crossorigin src="/assets/index-DBzsMZeq.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/index-BtA7oISf.css">
   </head>
   <body>
     <div id="root"></div>

web/frontend/src/api.ts

@@ -10,10 +10,19 @@ export function apiFetch(input: RequestInfo | URL, init: RequestInit = {}): Prom
   return fetch(input, { ...init, credentials: "include", headers });
 }
 
+const ME_TIMEOUT_MS = 15_000;
+
+/** Session check; sends Bearer token when present (HF Space / no cookie). Aborts if the server never responds. */
 export async function fetchMe(): Promise<{ authenticated: boolean }> {
-  const r = await apiFetch(`${API}/api/me`);
-  if (!r.ok) throw new Error("me failed");
-  return r.json();
+  const c = new AbortController();
+  const id = setTimeout(() => c.abort(), ME_TIMEOUT_MS);
+  try {
+    const r = await apiFetch(`${API}/api/me`, { signal: c.signal });
+    if (!r.ok) throw new Error("me failed");
+    return r.json();
+  } finally {
+    clearTimeout(id);
+  }
 }
 
 export async function login(password: string): Promise<void> {

web/frontend/src/pages/Layout.tsx

@@ -1,6 +1,6 @@
 import { useEffect, useState } from "react";
 import { Link, Navigate, Outlet, useLocation, useNavigate } from "react-router-dom";
-import { logout } from "../api";
+import { fetchMe, logout } from "../api";
 import { GenerationOptionsProvider } from "../context/GenerationOptionsContext";
 import { type FontSizePreset, useUiSettings } from "../context/UiSettingsContext";
 
@@ -55,46 +55,11 @@ export function Layout() {
 
   useEffect(() => {
     let alive = true;
-    const API = "";
-    fetch(`${API}/api/me`, { credentials: "include" })
-      .then(async (r) => {
-        const body = (await r.json().catch(() => ({}))) as { authenticated?: boolean };
-        // #region agent log
-        fetch("http://127.0.0.1:7652/ingest/692f60b3-7dab-426d-b02c-27324872a983", {
-          method: "POST",
-          headers: { "Content-Type": "application/json", "X-Debug-Session-Id": "5dbcbc" },
-          body: JSON.stringify({
-            sessionId: "5dbcbc",
-            location: "Layout.tsx:me",
-            message: "layout_me",
-            data: {
-              ok: r.ok,
-              status: r.status,
-              authenticated: !!body.authenticated,
-            },
-            timestamp: Date.now(),
-            hypothesisId: "H4",
-          }),
-        }).catch(() => {});
-        // #endregion
-        if (!r.ok) throw new Error("me failed");
-        if (alive) setOk(!!body.authenticated);
+    fetchMe()
+      .then((r) => {
+        if (alive) setOk(r.authenticated);
       })
       .catch(() => {
-        // #region agent log
-        fetch("http://127.0.0.1:7652/ingest/692f60b3-7dab-426d-b02c-27324872a983", {
-          method: "POST",
-          headers: { "Content-Type": "application/json", "X-Debug-Session-Id": "5dbcbc" },
-          body: JSON.stringify({
-            sessionId: "5dbcbc",
-            location: "Layout.tsx:me",
-            message: "layout_me_err",
-            data: {},
-            timestamp: Date.now(),
-            hypothesisId: "H5",
-          }),
-        }).catch(() => {});
-        // #endregion
         if (alive) setOk(false);
       });
     return () => {

web/frontend/src/pages/Login.tsx

@@ -12,20 +12,6 @@ export function Login() {
   useEffect(() => {
     fetchMe()
       .then((r) => {
-        // #region agent log
-        fetch("http://127.0.0.1:7652/ingest/692f60b3-7dab-426d-b02c-27324872a983", {
-          method: "POST",
-          headers: { "Content-Type": "application/json", "X-Debug-Session-Id": "5dbcbc" },
-          body: JSON.stringify({
-            sessionId: "5dbcbc",
-            location: "Login.tsx:mount",
-            message: "login_mount_me",
-            data: { authenticated: r.authenticated },
-            timestamp: Date.now(),
-            hypothesisId: "H5",
-          }),
-        }).catch(() => {});
-        // #endregion
         if (r.authenticated) nav("/image", { replace: true });
       })
       .catch(() => {})
@@ -38,20 +24,6 @@ export function Login() {
     setLoading(true);
     try {
       await login(password);
-      // #region agent log
-      fetch("http://127.0.0.1:7652/ingest/692f60b3-7dab-426d-b02c-27324872a983", {
-        method: "POST",
-        headers: { "Content-Type": "application/json", "X-Debug-Session-Id": "5dbcbc" },
-        body: JSON.stringify({
-          sessionId: "5dbcbc",
-          location: "Login.tsx:onSubmit",
-          message: "login_resolved_before_nav",
-          data: {},
-          timestamp: Date.now(),
-          hypothesisId: "H3",
-        }),
-      }).catch(() => {});
-      // #endregion
       // Go straight to /image — avoid / → /image redirect racing Layout’s /api/me checks.
       nav("/image", { replace: true });
     } catch (e: unknown) {