Update app.py

app.py

@@ -1,42 +1,30 @@
-import os
-
-# ✅ Set Hugging Face cache to a writable path
-os.environ["TRANSFORMERS_CACHE"] = "/tmp/huggingface_cache"
-
 from fastapi import FastAPI, Request
 from fastapi.responses import JSONResponse, FileResponse
-from fastapi.middleware.cors import CORSMiddleware
 from transformers import pipeline
+from huggingface_hub import login
+import os
 
-# ✅ Read token from secret env (set in Space)
+# 🛠️ Fix write permission issue
+os.environ["HF_HOME"] = "/data"  # ✅ Hugging Face model cache path
+
+# 🔐 Login with token from Hugging Face Secrets (don't hardcode!)
 hf_token = os.getenv("HF_TOKEN")
-model_id = os.getenv("MODEL_ID", "mistralai/Mistral-7B-Instruct-v0.2")
+if hf_token:
+    login(token=hf_token)
 
-# ✅ Load the gated Mistral model
-pipe = pipeline(
-    "text-generation",
-    model=model_id,
-    device=0,
-    use_auth_token=hf_token
-)
+# ✅ Load the model pipeline (CPU-friendly)
+model_id = os.getenv("MODEL_ID", "mistralai/Mistral-7B-Instruct-v0.2")
+pipe = pipeline("text-generation", model=model_id, trust_remote_code=True)
 
-# ✅ Setup FastAPI app
+# 🚀 FastAPI app
 app = FastAPI()
 
-# ✅ CORS (allow frontend to access API)
-app.add_middleware(
-    CORSMiddleware,
-    allow_origins=["*"],
-    allow_methods=["*"],
-    allow_headers=["*"],
-)
-
 @app.get("/")
 async def serve_index():
     return FileResponse("index.html")
 
 @app.get("/script.js")
-async def serve_js():
+async def serve_script():
     return FileResponse("script.js")
 
 @app.post("/api")