Upload 6 files

CHANGELOG.md

@@ -1,10 +1,33 @@
+# v174 — Bucket run-prefix mount and robust worker bootstrap writes
+
+- Mounted the `runs/` Storage Bucket prefix explicitly into Jobs using `Volume(type="bucket", source=..., path="runs", mount_path="/output/runs")`.
+- Preserved the worker contract: `OUTPUT_ROOT=/output`, `run_dir=/output/runs/<run_id>`, and remote objects under `runs/<run_id>/`.
+- Hardened API-side `_worker.py` persistence with `HfFileSystem.write_text`, `pipe_file`, `open(..., "wb")`, and a final `sync_bucket` fallback.
+- Removed virtual-directory creation for Bucket prefixes and kept deletion/listing/document links aligned with the configurable run prefix.
+- Raised the minimum `huggingface_hub` requirement to `>=1.11.0`.
+
+# v173 — Bucket path separation fix
+
+- Reverts the v172 API-side `makedirs` workaround for fresh run prefixes.
+- Keeps a strict distinction between remote bucket object URIs (`hf://buckets/<namespace>/<bucket>/runs/<run_id>/...`) and Job mount paths (`/output/runs/<run_id>/...`).
+- Writes API-side bucket objects directly with `HfFileSystem.pipe_file(...)`, with `open(..., "w")` as a compatibility fallback.
+- Adds tests to prevent treating virtual `runs/` prefixes as directories/repositories.
+
+# v172 — fresh bucket writes and pre-scan polish
+
+- Keeps Hugging Face Space metadata at the very top of `README.md` so the app archive cannot boot with a configuration error.
+- Makes fresh Bucket run-prefix writes more robust by creating parent prefixes before writing `_worker.py`, `launch.json`, `summary.json`, `state.json`, and other API-authored artifacts.
+- Restyles the Model pre-scan card into a calmer premium status panel with compact metadata chips and less oversized success treatment.
+
 # v171 — delete Space option, ghost-run cleanup, storage polish
 
-- Added an opt-in checkbox in the premium delete modal to also delete the associated Hugging Face Space for build runs.
-- Extended the DELETE run API to accept `{ "delete_space": true }`, delete the Space repo in the authenticated user's namespace, and return an explicit Space deletion report.
-- Kept Space deletion disabled for validation runs to avoid deleting existing Spaces that were only tested.
-- Made incomplete/unknown ghost runs deletable from Run Explorer so stale bucket prefixes can be cleaned up.
-- Polished the Run Storage card error state with compact, user-readable messages instead of dumping long bucket HTTP errors into the card.
+- Added an opt-in checkbox in the premium delete modal to delete the associated generated Space for build runs.
+- Kept validation runs protected from accidental associated Space deletion.
+- Made ghost/unknown run prefixes deletable from Run Explorer.
+- Compacted the Run Storage setup error card.
 - Preserved the v170 real recursive bucket deletion behavior.
 
-Validation: `478 passed, 2 warnings`.
+# v120 — Agent recovery UI
+
+- Added the Agent recovery section to summarize Pi recovery decisions, blockers, evidence, and repair/revalidation status.
+- Kept detailed source files in Run traces instead of duplicating raw recovery logs in the summary card.

README.md

@@ -13,6 +13,25 @@ hf_oauth_scopes:
   - read-billing
 ---
 
+## v175 — Anonymous cross-run evaluation archive
+
+- Adds an optional operator-owned evaluation bucket mounted into Jobs, separate from each user's private run bucket.
+- Workers publish `eval_record.json` plus a compact event timeline with hashed run/user/Space identifiers, structured hardware/Pi/recovery/validation metrics, and no raw generated code, prompts, tokens, or private bucket paths.
+- Controlled by `ASF_EVAL_ENABLED`, `ASF_EVAL_BUCKET_SOURCE`, `ASF_EVAL_BUCKET_PATH`, `ASF_EVAL_BUCKET_MOUNT`, and `ASF_EVAL_SALT`.
+- The Run storage card now indicates whether anonymous project evaluation is enabled for the instance.
+
+## v174 — Bucket run-prefix mount and robust worker bootstrap writes
+
+- Mounts only the `runs/` bucket prefix into Jobs at `/output/runs`, while the worker still writes to `/output/runs/<run_id>/...`.
+- Keeps API-side writes on canonical `hf://buckets/<namespace>/<bucket>/runs/<run_id>/...` object URIs, with `HfFileSystem` attempts followed by a `sync_bucket` fallback for fresh prefixes.
+- Removes the v172 parent-prefix `makedirs()` workaround, because Bucket prefixes are virtual object paths rather than git-style folders.
+- Requires `huggingface_hub[oauth]>=1.11.0` so Buckets, Jobs volumes and sync helpers are available in fresh installs.
+
+## v172 — Fresh bucket writes and pre-scan polish
+
+- Keeps the Hugging Face Space metadata at the very top of `README.md`, so the app cannot boot with a configuration error after archive edits.
+- Makes Bucket writes resilient for fresh run prefixes by creating parent prefixes before writing `_worker.py`, launch metadata, state, summaries, and events.
+- Refreshes the Model pre-scan card into a calmer status panel with compact metadata chips and less oversized green treatment.
 
 ## v170 — Real bucket recursive run deletion
 
@@ -27,21 +46,6 @@ hf_oauth_scopes:
 - **v165** fixes fresh-install recovery failures, README metadata preservation, timeline failure anchoring, premium pre-scan/progress polish, and broader Pi assistant model choices.
 - **v161** fixes duplicate delete modal triggers and stuck `Deleting…` states with single-flight delete guards.
 
----
-title: Agentic Space Factory
-sdk: docker
-hf_oauth: true
-hf_oauth_expiration_minutes: 480
-hf_oauth_scopes:
-  - read-repos
-  - write-repos
-  - manage-repos
-  - gated-repos
-  - inference-api
-  - jobs
-  - read-billing
----
-
 # Agentic Space Factory
 
 Agentic Space Factory turns a Hugging Face model card into a **private, testable Gradio Space** using a Hugging Face Job, Pi, a coding model through Hugging Face Inference Providers, and a private Storage Bucket for run state, traces, reports, generated files, and validation artifacts.

app.py

@@ -250,6 +250,14 @@ def register_custom_routes(fastapi_app: FastAPI) -> None:
                 "user": {"username": ctx["username"], "missing_scopes": ctx.get("missing_scopes", []), "warnings": ctx.get("warnings", [])} if ctx else None,
                 "login_url": "/oauth/huggingface/login",
                 "logout_url": "/oauth/huggingface/logout",
+                "anonymous_eval": {
+                    "enabled": bool(settings.eval_enabled and settings.eval_bucket_source),
+                    "bucket_source": settings.eval_bucket_source if settings.eval_enabled else "",
+                    "bucket_path": settings.eval_bucket_path if settings.eval_enabled else "",
+                    "job_mount_path": settings.eval_bucket_mount if settings.eval_enabled else "",
+                    "stores_generated_code": False,
+                    "stores_raw_prompts": False,
+                },
             }
         )
 
@@ -269,6 +277,14 @@ def register_custom_routes(fastapi_app: FastAPI) -> None:
                 "scopes": ctx.get("scopes", []),
                 "missing_scopes": ctx.get("missing_scopes", []),
                 "warnings": ctx.get("warnings", []),
+                "anonymous_eval": {
+                    "enabled": bool(settings.eval_enabled and settings.eval_bucket_source),
+                    "bucket_source": settings.eval_bucket_source if settings.eval_enabled else "",
+                    "bucket_path": settings.eval_bucket_path if settings.eval_enabled else "",
+                    "job_mount_path": settings.eval_bucket_mount if settings.eval_enabled else "",
+                    "stores_generated_code": False,
+                    "stores_raw_prompts": False,
+                },
                 "expires_at": ctx.get("expires_at"),
                 "login_url": "/oauth/huggingface/login",
                 "logout_url": "/oauth/huggingface/logout",
@@ -686,7 +702,8 @@ def _safe_url(url: str | None) -> str:
 def _run_artifacts_url(run_id: str | None, bucket_source: str | None) -> str:
     if not run_id or not bucket_source:
         return ""
-    return f"https://huggingface.co/buckets/{bucket_source}/tree/runs/{run_id}"
+    prefix = settings.bucket_runs_prefix.strip().strip("/") or "runs"
+    return f"https://huggingface.co/buckets/{bucket_source}/tree/{prefix}/{run_id}"
 
 
 def _button_link(label: str, url: str | None):

pyproject.toml

@@ -5,7 +5,7 @@ description = "Public-preview Hugging Face-native Agentic Space Factory"
 requires-python = ">=3.11"
 dependencies = [
   "gradio>=5.0.0",
-  "huggingface_hub>=1.0.0",
+  "huggingface_hub[oauth]>=1.11.0",
   "pydantic>=2.0.0",
   "python-dateutil>=2.9.0",
 ]

requirements.txt

@@ -1,5 +1,5 @@
 gradio>=5.0.0
-huggingface_hub[oauth]>=1.0.0
+huggingface_hub[oauth]>=1.11.0
 pydantic>=2.0.0
 python-dateutil>=2.9.0
 uvicorn>=0.30.0