Rebuild on shared BYOK template: user-supplied API key, v3 API, Python 3.11

Dockerfile

@@ -1,14 +1,16 @@
-FROM python:3.10-slim
-
-WORKDIR /app
-
-COPY requirements.txt .
-RUN pip install --no-cache-dir -r requirements.txt
-
-COPY app.py .
-
-EXPOSE 7860
-ENV GRADIO_SERVER_NAME="0.0.0.0"
-ENV GRADIO_SERVER_PORT="7860"
-
-CMD ["python", "app.py"]
+FROM python:3.11-slim
+
+WORKDIR /app
+
+COPY requirements.txt .
+RUN pip install --no-cache-dir -r requirements.txt
+
+COPY . .
+
+EXPOSE 7860
+ENV GRADIO_SERVER_NAME="0.0.0.0" \
+    GRADIO_SERVER_PORT="7860" \
+    GRADIO_ANALYTICS_ENABLED="False" \
+    HF_HUB_DISABLE_TELEMETRY="1"
+
+CMD ["python", "app.py"]

README.md

@@ -1,10 +1,34 @@
----
-title: Image Expand
-emoji: 🖼️
-colorFrom: blue
-colorTo: purple
-sdk: docker
-pinned: false
-license: mit
-short_description: AI-powered image expansion
----
+---
+title: Image Expand
+emoji: 🖼️
+colorFrom: blue
+colorTo: purple
+sdk: docker
+pinned: false
+license: mit
+short_description: Extend an image beyond its original frame (outpainting).
+---
+
+# Image Expand
+
+Extend an image beyond its original frame (outpainting).
+
+Runs [`bria/expand`](https://wavespeed.ai/models/bria/expand) through the
+[WaveSpeed](https://wavespeed.ai) v3 API.
+
+## Bring your own API key
+
+This Space does not ship an API key. Paste your own in the field at the top —
+create one in the [WaveSpeed dashboard](https://wavespeed.ai/dashboard).
+
+Your key is sent only to `api.wavespeed.ai` to run the model. It is not stored,
+not logged, and not written to disk; it is stripped out of error messages
+before they are displayed, and Gradio's flagging and API-page features (both of
+which would otherwise record or republish inputs) are disabled. Generations are
+billed to your own account.
+
+## Development
+
+Source of truth is `_shared/` in the working repo, not this copy:
+
+    python3 _shared/build_apps.py

app.py

@@ -1,524 +1,50 @@
-"""
-Bria AI x WaveSpeed AI - Image Expand
-Clean Light Theme for Gradio 3.x
-"""
-
-import gradio as gr
-import requests
-import time
-from typing import Dict, Any
-
-# ============ API Configuration ============
-WAVESPEED_API_BASE = "https://api.wavespeed.ai/api/v3"
-UPLOAD_ENDPOINT = "https://api.wavespeed.ai/api/v3/media/upload/binary"
-MODEL_ENDPOINT = "bria/expand"
-POLL_INTERVAL = 1.5
-POLL_MAX_SECONDS = 120
-
-# ============ Aspect Ratios ============
-ASPECT_RATIOS = ["1:1", "3:2", "2:3", "4:3", "3:4", "16:9", "9:16"]
-
-# ============ Enhanced Light Theme CSS ============
-CUSTOM_CSS = """
-/* ===== Base Styles ===== */
-html, body, .gradio-container {
-    background: linear-gradient(145deg, #f5f3ff 0%, #ede9fe 50%, #e0e7ff 100%) !important;
-    font-family: 'Inter', -apple-system, BlinkMacSystemFont, sans-serif !important;
-}
-
-.gradio-container {
-    max-width: 960px !important;
-    margin: 0 auto !important;
-    padding: 24px !important;
-}
-
-/* ===== Hero Section ===== */
-.hero-container {
-    text-align: center;
-    padding: 48px 20px 36px;
-}
-
-.hero-badge {
-    display: inline-block;
-    background: linear-gradient(135deg, #8b5cf6, #7c3aed);
-    padding: 10px 24px;
-    border-radius: 50px;
-    font-size: 0.7rem;
-    color: #fff;
-    font-weight: 700;
-    letter-spacing: 1.5px;
-    margin-bottom: 20px;
-    box-shadow: 0 4px 20px rgba(139, 92, 246, 0.35);
-}
-
-.hero-title {
-    font-size: 3rem;
-    font-weight: 800;
-    margin: 0 0 16px 0;
-    background: linear-gradient(135deg, #6d28d9 0%, #8b5cf6 50%, #a78bfa 100%);
-    -webkit-background-clip: text;
-    -webkit-text-fill-color: transparent;
-    background-clip: text;
-    letter-spacing: -0.5px;
-}
-
-.hero-desc {
-    font-size: 1.05rem;
-    color: #64748b;
-    max-width: 100%;
-    margin: 0 auto 20px;
-    line-height: 1.6;
-}
-
-.hero-badges {
-    display: flex;
-    gap: 28px;
-    justify-content: center;
-    flex-wrap: wrap;
-}
-
-.hero-badges span {
-    display: flex;
-    align-items: center;
-    gap: 8px;
-    color: #475569;
-    font-size: 0.9rem;
-    font-weight: 600;
-}
-
-/* ===== Main Card ===== */
-.main-card {
-    background: #ffffff;
-    border: 1px solid rgba(139, 92, 246, 0.1);
-    border-radius: 20px;
-    padding: 28px;
-    margin-bottom: 20px;
-    box-shadow: 0 4px 24px rgba(139, 92, 246, 0.08), 0 1px 3px rgba(0, 0, 0, 0.04);
-    transition: box-shadow 0.3s ease;
-}
-
-.main-card:hover {
-    box-shadow: 0 8px 32px rgba(139, 92, 246, 0.12), 0 2px 6px rgba(0, 0, 0, 0.04);
-}
-
-/* ===== API Key Section ===== */
-.api-key-row {
-    display: flex;
-    align-items: center;
-    justify-content: space-between;
-    margin-bottom: 12px;
-}
-
-.api-key-label {
-    display: flex;
-    align-items: center;
-    gap: 10px;
-    color: #1e293b;
-    font-weight: 700;
-    font-size: 1rem;
-}
-
-.get-key-btn {
-    padding: 10px 20px;
-    background: linear-gradient(135deg, #8b5cf6, #7c3aed);
-    border: none;
-    border-radius: 10px;
-    color: #fff !important;
-    text-decoration: none;
-    font-weight: 600;
-    font-size: 0.85rem;
-    transition: all 0.25s ease;
-    box-shadow: 0 4px 12px rgba(139, 92, 246, 0.3);
-}
-
-.get-key-btn:hover {
-    transform: translateY(-2px);
-    box-shadow: 0 6px 20px rgba(139, 92, 246, 0.4);
-    color: #fff;
-}
-
-/* ===== Section Title ===== */
-.section-title {
-    color: #1e293b;
-    font-weight: 700;
-    font-size: 1rem;
-    display: flex;
-    align-items: center;
-    gap: 10px;
-    margin-bottom: 16px;
-}
-
-/* ===== Image Upload Styling ===== */
-.upload-area {
-    border: 2px dashed rgba(139, 92, 246, 0.3) !important;
-    border-radius: 16px !important;
-    background: linear-gradient(145deg, #faf5ff 0%, #f5f3ff 100%) !important;
-    transition: all 0.3s ease !important;
-    min-height: 220px !important;
-}
-
-.upload-area:hover {
-    border-color: rgba(139, 92, 246, 0.5) !important;
-    background: linear-gradient(145deg, #f5f3ff 0%, #ede9fe 100%) !important;
-}
-
-/* ===== Result Area ===== */
-.result-area {
-    border: 2px solid rgba(139, 92, 246, 0.15) !important;
-    border-radius: 16px !important;
-    background: #fafafa !important;
-    min-height: 220px !important;
-}
-
-/* ===== Radio Button Styling ===== */
-.aspect-ratio-group {
-    margin-top: 16px;
-}
-
-.aspect-ratio-group .wrap {
-    gap: 8px !important;
-}
-
-.aspect-ratio-group label {
-    padding: 10px 16px !important;
-    border-radius: 10px !important;
-    border: 2px solid #e2e8f0 !important;
-    background: #fff !important;
-    font-weight: 600 !important;
-    font-size: 0.85rem !important;
-    color: #64748b !important;
-    transition: all 0.2s ease !important;
-    cursor: pointer !important;
-}
-
-.aspect-ratio-group label:hover {
-    border-color: #a78bfa !important;
-    color: #7c3aed !important;
-}
-
-.aspect-ratio-group label.selected {
-    background: linear-gradient(135deg, #8b5cf6, #7c3aed) !important;
-    border-color: transparent !important;
-    color: #fff !important;
-}
-
-/* ===== Button Styling ===== */
-.primary-btn {
-    width: 100%;
-    margin-top: 20px !important;
-    background: linear-gradient(135deg, #8b5cf6, #7c3aed) !important;
-    border: none !important;
-    color: #fff !important;
-    font-weight: 700 !important;
-    font-size: 1rem !important;
-    padding: 14px 28px !important;
-    border-radius: 12px !important;
-    box-shadow: 0 4px 16px rgba(139, 92, 246, 0.35) !important;
-    transition: all 0.25s ease !important;
-    cursor: pointer !important;
-}
-
-.primary-btn:hover {
-    transform: translateY(-2px) !important;
-    box-shadow: 0 8px 24px rgba(139, 92, 246, 0.45) !important;
-}
-
-.primary-btn:active {
-    transform: translateY(0) !important;
-}
-
-/* ===== CTA Section ===== */
-.cta-container {
-    text-align: center;
-    padding: 44px 32px;
-    background: linear-gradient(135deg, #8b5cf6 0%, #7c3aed 50%, #6d28d9 100%);
-    border-radius: 20px;
-    margin-top: 8px;
-    box-shadow: 0 8px 32px rgba(139, 92, 246, 0.35);
-    position: relative;
-    overflow: hidden;
-}
-
-.cta-container::before {
-    content: '';
-    position: absolute;
-    top: -50%;
-    right: -50%;
-    width: 100%;
-    height: 100%;
-    background: radial-gradient(circle, rgba(255,255,255,0.1) 0%, transparent 60%);
-    pointer-events: none;
-}
-
-.cta-title {
-    color: #fff;
-    font-size: 1.5rem;
-    font-weight: 800;
-    margin: 0 0 8px 0;
-    position: relative;
-}
-
-.cta-desc {
-    color: rgba(255, 255, 255, 0.9);
-    font-size: 1rem;
-    margin: 0 0 24px 0;
-    position: relative;
-}
-
-.cta-btn {
-    display: inline-block;
-    padding: 14px 36px;
-    background: #fff;
-    border-radius: 12px;
-    color: #7c3aed !important;
-    text-decoration: none;
-    font-weight: 700;
-    font-size: 1rem;
-    transition: all 0.25s ease;
-    box-shadow: 0 4px 16px rgba(0, 0, 0, 0.1);
-    position: relative;
-}
-
-.cta-btn:hover {
-    transform: translateY(-3px);
-    box-shadow: 0 8px 24px rgba(0, 0, 0, 0.15);
-    color: #6d28d9 !important;
-}
-
-/* ===== Hide Elements ===== */
-footer { display: none !important; }
-
-.hide-label > .label-wrap {
-    display: none !important;
-}
-
-.hide-label span.svelte-1gfkn6j {
-    display: none !important;
-}
-
-/* ===== Input Styling ===== */
-.gradio-container input[type="password"],
-.gradio-container input[type="text"] {
-    border: 2px solid #e2e8f0 !important;
-    border-radius: 12px !important;
-    padding: 14px 16px !important;
-    font-size: 0.95rem !important;
-    transition: all 0.2s ease !important;
-}
-
-.gradio-container input[type="password"]:focus,
-.gradio-container input[type="text"]:focus {
-    border-color: #8b5cf6 !important;
-    box-shadow: 0 0 0 3px rgba(139, 92, 246, 0.15) !important;
-    outline: none !important;
-}
-
-/* ===== Divider ===== */
-.divider {
-    width: 1px;
-    background: linear-gradient(180deg, transparent 0%, #e2e8f0 20%, #e2e8f0 80%, transparent 100%);
-    margin: 0 24px;
-    align-self: stretch;
-}
-"""
-
-
-# ============ API Functions ============
-def upload_image(api_key: str, file_path: str) -> str:
-    headers = {"Authorization": f"Bearer {api_key.strip()}"}
-    with open(file_path, "rb") as f:
-        resp = requests.post(UPLOAD_ENDPOINT, headers=headers, files={"file": f}, timeout=60)
-    if resp.status_code == 401:
-        raise Exception("Invalid API Key")
-    elif resp.status_code >= 400:
-        raise Exception(f"Upload failed: {resp.status_code}")
-    data = resp.json()
-    if data.get("code") != 200:
-        raise Exception(data.get("message", "Upload failed"))
-    return data.get("data", {}).get("download_url")
-
-
-def call_api(api_key: str, endpoint: str, payload: Dict[str, Any]) -> Dict[str, Any]:
-    headers = {"Authorization": f"Bearer {api_key.strip()}", "Content-Type": "application/json"}
-    resp = requests.post(f"{WAVESPEED_API_BASE}/{endpoint}", json=payload, headers=headers, timeout=30)
-    if resp.status_code == 401:
-        raise Exception("Invalid API Key")
-    elif resp.status_code == 429:
-        raise Exception("Quota exceeded")
-    elif resp.status_code >= 400:
-        raise Exception(f"API error: {resp.status_code}")
-    data = resp.json()
-    if data.get("code") != 200:
-        raise Exception(data.get("message", "Unknown error"))
-    return data.get("data", {})
-
-
-def poll_result(api_key: str, request_id: str) -> Dict[str, Any]:
-    headers = {"Authorization": f"Bearer {api_key.strip()}"}
-    url = f"{WAVESPEED_API_BASE}/predictions/{request_id}/result"
-    start_time = time.time()
-    while time.time() - start_time < POLL_MAX_SECONDS:
-        resp = requests.get(url, headers=headers, timeout=30)
-        if resp.status_code >= 400:
-            raise Exception("Failed to get result")
-        result = resp.json().get("data", {})
-        status = result.get("status", "")
-        if status == "completed":
-            return result
-        elif status == "failed":
-            raise Exception("Generation failed")
-        time.sleep(POLL_INTERVAL)
-    raise Exception("Timeout")
-
-
-def expand_image(api_key: str, image_path: str, aspect_ratio: str):
-    if not api_key or not api_key.strip():
-        gr.Warning("Please enter your API Key")
-        return None
-    if not image_path:
-        gr.Warning("Please upload an image")
-        return None
-
-    try:
-        gr.Info("Uploading image...")
-        image_url = upload_image(api_key, image_path)
-
-        gr.Info("AI is expanding your image...")
-        payload = {
-            "image": image_url,
-            "aspect_ratio": aspect_ratio,
-            "enable_base64_output": False,
-            "enable_sync_mode": False,
-        }
-        result = call_api(api_key, MODEL_ENDPOINT, payload)
-        request_id = result.get("id")
-        if not request_id:
-            gr.Warning("Failed to start")
-            return None
-
-        final_result = poll_result(api_key, request_id)
-        outputs = final_result.get("outputs", [])
-        if outputs:
-            gr.Info("Done!")
-            return outputs[0]
-        return None
-
-    except Exception as e:
-        error_msg = str(e).lower()
-        if "invalid" in error_msg or "401" in error_msg:
-            gr.Warning("Invalid API Key")
-        elif "quota" in error_msg or "429" in error_msg:
-            gr.Warning("Quota exceeded")
-        elif "timeout" in error_msg:
-            gr.Warning("Timeout - please try again")
-        else:
-            gr.Warning(str(e))
-        return None
-
-
-# ============ Gradio UI ============
-with gr.Blocks(css=CUSTOM_CSS, title="Image Expand - Bria AI x WaveSpeed") as demo:
-
-    # Hero Section
-    gr.HTML("""
-        <div class="hero-container">
-            <div class="hero-badge">BRIA AI x WAVESPEED</div>
-            <h1 class="hero-title">Image Expand</h1>
-            <p class="hero-desc">
-                Transform your images with AI-powered expansion. Intelligently extend any image to your desired aspect ratio.
-            </p>
-            <div class="hero-badges">
-                <span>
-                    <svg width="18" height="18" fill="#10b981" viewBox="0 0 20 20"><path fill-rule="evenodd" d="M10 18a8 8 0 100-16 8 8 0 000 16zm3.707-9.293a1 1 0 00-1.414-1.414L9 10.586 7.707 9.293a1 1 0 00-1.414 1.414l2 2a1 1 0 001.414 0l4-4z"/></svg>
-                    Fast Processing
-                </span>
-                <span>
-                    <svg width="18" height="18" fill="#10b981" viewBox="0 0 20 20"><path fill-rule="evenodd" d="M10 18a8 8 0 100-16 8 8 0 000 16zm3.707-9.293a1 1 0 00-1.414-1.414L9 10.586 7.707 9.293a1 1 0 00-1.414 1.414l2 2a1 1 0 001.414 0l4-4z"/></svg>
-                    High Quality Output
-                </span>
-                <span>
-                    <svg width="18" height="18" fill="#10b981" viewBox="0 0 20 20"><path fill-rule="evenodd" d="M10 18a8 8 0 100-16 8 8 0 000 16zm3.707-9.293a1 1 0 00-1.414-1.414L9 10.586 7.707 9.293a1 1 0 00-1.414 1.414l2 2a1 1 0 001.414 0l4-4z"/></svg>
-                    Easy to Use
-                </span>
-            </div>
-        </div>
-    """)
-
-    # API Key Card
-    with gr.Group(elem_classes="main-card"):
-        gr.HTML("""
-            <div class="api-key-row">
-                <span class="api-key-label">
-                    <svg width="20" height="20" fill="#8b5cf6" viewBox="0 0 20 20"><path fill-rule="evenodd" d="M18 8a6 6 0 01-7.743 5.743L10 14l-1 1-1 1H6v2H2v-4l4.257-4.257A6 6 0 1118 8zm-6-4a1 1 0 100 2 2 2 0 012 2 1 1 0 102 0 4 4 0 00-4-4z" clip-rule="evenodd"/></svg>
-                    API Key
-                </span>
-                <a href="https://wavespeed.ai/accesskey" target="_blank" class="get-key-btn">Get API Key</a>
-            </div>
-        """)
-        api_key_input = gr.Textbox(
-            placeholder="Enter your WaveSpeed API key",
-            type="password",
-            show_label=False
-        )
-
-    # Main Content Card
-    with gr.Group(elem_classes="main-card"):
-        with gr.Row():
-            # Left Column - Input
-            with gr.Column(scale=1):
-                gr.HTML("""
-                    <div class="section-title">
-                        <svg width="20" height="20" fill="#8b5cf6" viewBox="0 0 20 20"><path fill-rule="evenodd" d="M4 3a2 2 0 00-2 2v10a2 2 0 002 2h12a2 2 0 002-2V5a2 2 0 00-2-2H4zm12 12H4l4-8 3 6 2-4 3 6z" clip-rule="evenodd"/></svg>
-                        Upload Image
-                    </div>
-                """)
-                image_input = gr.Image(
-                    label="",
-                    type="filepath",
-
-                    elem_classes=["hide-label", "upload-area"]
-                )
-                aspect_ratio_input = gr.Radio(
-                    label="Aspect Ratio",
-                    choices=ASPECT_RATIOS,
-                    value="16:9",
-                    elem_classes="aspect-ratio-group"
-                )
-                submit_btn = gr.Button("Expand Image", variant="primary", elem_classes="primary-btn")
-
-            # Right Column - Output
-            with gr.Column(scale=1):
-                gr.HTML("""
-                    <div class="section-title">
-                        <svg width="20" height="20" fill="#8b5cf6" viewBox="0 0 20 20"><path d="M10 12a2 2 0 100-4 2 2 0 000 4z"/><path fill-rule="evenodd" d="M.458 10C1.732 5.943 5.522 3 10 3s8.268 2.943 9.542 7c-1.274 4.057-5.064 7-9.542 7S1.732 14.057.458 10zM14 10a4 4 0 11-8 0 4 4 0 018 0z" clip-rule="evenodd"/></svg>
-                        Result
-                    </div>
-                """)
-                output_image = gr.Image(
-                    label="",
-                    type="filepath",
-                    interactive=False,
-                    elem_classes=["hide-label", "result-area"]
-                )
-
-    # CTA Section
-    gr.HTML("""
-        <div class="cta-container">
-            <h3 class="cta-title">Want More Features?</h3>
-            <p class="cta-desc">Higher resolutions, batch processing, and 700+ AI models</p>
-            <a href="https://wavespeed.ai/models" target="_blank" class="cta-btn">
-                Explore WaveSpeed.ai
-            </a>
-        </div>
-    """)
-
-    # Event binding
-    submit_btn.click(
-        fn=expand_image,
-        inputs=[api_key_input, image_input, aspect_ratio_input],
-        outputs=output_image,
-    )
-
-
-if __name__ == "__main__":
-    demo.launch(server_name="0.0.0.0", server_port=7860)
+"""Image Expand — powered by WaveSpeed AI.
+
+Generated from _shared/apps.py — edit the spec there, not this file.
+"""
+
+import os
+
+# Set before gradio is imported: its telemetry client reads these at import time.
+os.environ.setdefault("GRADIO_ANALYTICS_ENABLED", "False")
+os.environ.setdefault("HF_HUB_DISABLE_TELEMETRY", "1")
+
+from pathlib import Path  # noqa: E402
+
+import spaceui  # noqa: E402
+
+SPEC = {
+    "title": "Image Expand",
+    "model": "bria/expand",
+    "output": "image",
+    "tagline": "Extend an image beyond its original frame (outpainting).",
+    "fields": [
+        {
+            "kind": "image",
+            "key": "image",
+            "label": "Input image"
+        },
+        {
+            "kind": "choice",
+            "key": "aspect_ratio",
+            "label": "Target aspect ratio",
+            "choices": [
+                "16:9",
+                "9:16",
+                "1:1",
+                "4:3",
+                "3:4"
+            ],
+            "default": "16:9"
+        }
+    ],
+    "extra": {
+        "enable_base64_output": False,
+        "enable_sync_mode": False
+    }
+}
+
+SPEC["css"] = Path(__file__).with_name("style.css").read_text(encoding="utf-8")
+
+if __name__ == "__main__":
+    spaceui.launch(spaceui.build(SPEC), SPEC["css"])

requirements.txt

@@ -1,9 +1,2 @@
-gradio>=6.0,<7.0
-gradio_client>=2.0,<3.0
-huggingface_hub>=1.0,<2.0
-jinja2>=3.1,<4.0
-starlette>=1.0,<2.0
-fastapi>=0.115,<1.0
-pydub>=0.25
-requests>=2.28.0
-uvicorn>=0.30
+gradio>=6.22,<7
+requests>=2.31

spaceui.py

@@ -0,0 +1,240 @@
+"""Builds a Space UI from a declarative spec.
+
+Shared verbatim by every Space in the wavespeed org. Generated from
+_shared/spaceapp/ — edit there and re-run _shared/build_apps.py.
+
+Handling of the user's API key
+------------------------------
+The key is typed into the browser and travels to this server on each request.
+Keeping it from leaking takes more than masking the textbox, because Gradio has
+several features that will happily persist or republish an input:
+
+  * `type="password"`          - not echoed back into the DOM.
+  * `api_visibility="private"` - Gradio 6 otherwise documents this event on the
+                                 app's public API page, generating client
+                                 snippets that include every input, the key
+                                 among them.
+  * `analytics_enabled=False`  - on Blocks, plus the env vars set in app.py
+                                 before gradio is imported.
+  * no `gr.State`/`gr.Examples` ever holds the key, so it is not serialised
+    into the page or cached to disk.
+  * every error is passed through `wavespeed.redact` before display, because a
+    requests exception can stringify the Authorization header.
+
+Gradio's flagging feature (which writes raw inputs to a CSV) belongs to
+gr.Interface; this UI is built from gr.Blocks, which has no flagging, so there
+is nothing to switch off there.
+
+The key is a plain function argument: it lives for the duration of one request
+and is not retained between them.
+"""
+
+from __future__ import annotations
+
+import gradio as gr
+
+import wavespeed as ws
+
+DASH = "https://wavespeed.ai/dashboard"
+
+
+def _model_link(model: str) -> str:
+    return f"https://wavespeed.ai/models/{model}"
+
+
+def _collect(spec, key, values, progress):
+    """Turn UI values into an API payload, uploading any local files first."""
+    payload = dict(spec.get("extra", {}))
+    for field, value in zip(spec["fields"], values):
+        kind, api_key_name = field["kind"], field["key"]
+
+        if kind in ("image", "audio", "video"):
+            if not value:
+                if field.get("required", True):
+                    raise ws.WaveSpeedError(f"{field['label']} is required.")
+                continue
+            progress(0.1, desc=f"Uploading {field['label'].lower()}…")
+            payload[api_key_name] = ws.upload(key, value)
+
+        elif kind == "images":
+            if not value:
+                if field.get("required", True):
+                    raise ws.WaveSpeedError(f"{field['label']} is required.")
+                continue
+            progress(0.1, desc=f"Uploading {field['label'].lower()}…")
+            payload[api_key_name] = [ws.upload(key, value)]
+
+        elif kind == "prompt":
+            text = (value or "").strip()
+            if not text and field.get("required", True):
+                raise ws.WaveSpeedError("Enter a prompt.")
+            if text:
+                payload[api_key_name] = text
+
+        elif kind == "seed":
+            # -1 means "let the service choose"; sending it would pin the seed.
+            if value is not None and int(value) >= 0:
+                payload[api_key_name] = int(value)
+
+        elif value is not None and value != "":
+            payload[api_key_name] = value
+
+    return payload
+
+
+def build(spec):
+    """Return a configured gr.Blocks for this Space."""
+    css = spec["css"]
+    outputs_are_video = spec["output"] == "video"
+
+    with gr.Blocks(
+        title=f"{spec['title']} - WaveSpeed AI",
+        analytics_enabled=False,
+    ) as demo:
+        gr.HTML(
+            f"""
+            <div class="hero-container">
+              <div class="hero-badge">WAVESPEED AI</div>
+              <h1 class="hero-title">{spec['title']}</h1>
+              <p class="hero-desc">{spec['tagline']}</p>
+            </div>
+            """
+        )
+
+        with gr.Row(elem_classes="api-key-row"):
+            api_key = gr.Textbox(
+                label="WaveSpeed API key",
+                placeholder="Paste your API key — it is used for this request only",
+                type="password",          # never echoed back to the page
+                show_label=False,
+                container=False,
+                scale=4,
+            )
+            gr.HTML(
+                f'<a class="get-key-btn" href="{DASH}" target="_blank" '
+                'rel="noopener">Get a key</a>'
+            )
+        gr.Markdown(
+            "Your key is sent only to `api.wavespeed.ai` to run this model. "
+            "It is not stored, logged, or shared, and generations are billed to "
+            "your own account.",
+            elem_classes="key-note",
+        )
+
+        controls = []
+        with gr.Row():
+            with gr.Column(scale=1):
+                for f in spec["fields"]:
+                    controls.append(_make_control(f))
+                run_btn = gr.Button(
+                    spec.get("button", "Generate"),
+                    variant="primary",
+                    elem_classes="primary-btn",
+                )
+            with gr.Column(scale=1):
+                if spec["output"] == "compare":
+                    outs = [
+                        gr.Image(label=m["label"], type="filepath")
+                        for m in spec["compare"]
+                    ]
+                elif outputs_are_video:
+                    outs = [gr.Video(label="Result")]
+                else:
+                    outs = [gr.Image(label="Result", type="filepath")]
+
+        gr.HTML(
+            f"""
+            <div class="cta-container">
+              <p class="cta-desc">Model:
+                <a href="{_model_link(spec['model'])}" target="_blank" rel="noopener">
+                  <code>{spec['model']}</code></a>
+                &middot; <a href="https://wavespeed.ai/docs" target="_blank"
+                  rel="noopener">API docs</a>
+              </p>
+            </div>
+            """
+        )
+
+        def _run(key, *values, progress=gr.Progress()):
+            blank = [None] * len(outs)
+            if not key or not key.strip():
+                gr.Warning("Enter your WaveSpeed API key first.")
+                return blank[0] if len(blank) == 1 else tuple(blank)
+            try:
+                payload = _collect(spec, key, values, progress)
+                progress(0.3, desc="Submitting…")
+                if spec["output"] == "compare":
+                    models = spec["compare"]
+                    results = []
+                    for i, m in enumerate(models):
+                        progress(
+                            0.3 + 0.6 * i / len(models),
+                            desc=f"Running {m['label']}…",
+                        )
+                        merged = dict(payload, **m.get("extra", {}))
+                        results.append(ws.run(key, m["model"], merged)[0])
+                    return tuple(results)
+                outputs = ws.run(
+                    key, spec["model"], payload,
+                    on_tick=lambda s: progress(0.6, desc=f"Generating ({s})…"),
+                )
+                return outputs[0]
+            except ws.WaveSpeedError as e:
+                # Message is already redacted by the client.
+                gr.Warning(str(e))
+            except Exception as e:  # noqa: BLE001 - never surface a raw trace
+                gr.Warning(ws.redact(f"Unexpected error: {e}", key))
+            return blank[0] if len(blank) == 1 else tuple(blank)
+
+        run_btn.click(
+            _run,
+            inputs=[api_key, *controls],
+            outputs=outs,
+            # Keep this event off the public API page — its generated snippets
+            # would include the api_key input.
+            api_visibility="private",
+        )
+
+    return demo
+
+
+def _make_control(f):
+    # seed fields carry no explicit label; they get the default below.
+    kind, label = f["kind"], f.get("label", "")
+    if kind == "prompt":
+        return gr.Textbox(
+            label=label, placeholder=f.get("placeholder", ""),
+            lines=f.get("lines", 3),
+        )
+    if kind == "image":
+        return gr.Image(label=label, type="filepath")
+    if kind == "images":
+        return gr.Image(label=label, type="filepath")
+    if kind == "audio":
+        return gr.Audio(label=label, type="filepath")
+    if kind == "video":
+        return gr.Video(label=label)
+    if kind == "choice":
+        return gr.Dropdown(
+            label=label, choices=f["choices"], value=f.get("default", f["choices"][0])
+        )
+    if kind == "bool":
+        return gr.Checkbox(label=label, value=f.get("default", False))
+    if kind == "seed":
+        return gr.Number(label=f.get("label", "Seed (-1 = random)"), value=-1, precision=0)
+    if kind == "slider":
+        return gr.Slider(
+            label=label, minimum=f["min"], maximum=f["max"],
+            step=f.get("step", 1), value=f["default"],
+        )
+    raise ValueError(f"unknown field kind: {kind}")
+
+
+def launch(demo, css):
+    """Launch the app. Gradio 6 takes css here rather than on Blocks."""
+    demo.launch(
+        server_name="0.0.0.0",
+        server_port=7860,
+        css=css,
+        quiet=True,
+    )

style.css

@@ -0,0 +1,131 @@
+/* Shared Space styling. Generated from _shared/spaceapp/ — do not edit in place. */
+
+.gradio-container {
+	max-width: 1080px !important;
+	margin: 0 auto !important;
+	font-family: "Inter", -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto,
+		"Noto Sans", "PingFang SC", "Microsoft YaHei", sans-serif !important;
+}
+
+/* --- hero ---------------------------------------------------------------- */
+
+.hero-container {
+	text-align: center;
+	padding: 40px 16px 24px;
+}
+
+.hero-badge {
+	display: inline-block;
+	background: linear-gradient(135deg, #4f46e5, #2563eb);
+	color: #fff;
+	font-size: 0.66rem;
+	font-weight: 700;
+	letter-spacing: 0.14em;
+	padding: 7px 18px;
+	border-radius: 999px;
+	margin-bottom: 16px;
+}
+
+.hero-title {
+	font-size: 2.4rem;
+	font-weight: 800;
+	letter-spacing: -0.025em;
+	margin: 0 0 10px;
+	background: linear-gradient(135deg, #4338ca 0%, #2563eb 55%, #7c3aed 100%);
+	-webkit-background-clip: text;
+	background-clip: text;
+	-webkit-text-fill-color: transparent;
+}
+
+.hero-desc {
+	font-size: 1rem;
+	line-height: 1.6;
+	color: var(--body-text-color-subdued, #64748b);
+	max-width: 62ch;
+	margin: 0 auto;
+}
+
+@media (max-width: 620px) {
+	.hero-title {
+		font-size: 1.8rem;
+	}
+}
+
+/* --- api key row --------------------------------------------------------- */
+
+.api-key-row {
+	align-items: center;
+	gap: 10px;
+	margin-bottom: 4px;
+}
+
+.get-key-btn {
+	display: inline-block;
+	white-space: nowrap;
+	padding: 9px 16px;
+	border-radius: 8px;
+	border: 1px solid var(--border-color-primary, #d2d6de);
+	font-size: 0.86rem;
+	font-weight: 600;
+	text-decoration: none;
+	color: var(--body-text-color, #14161a);
+}
+
+.get-key-btn:hover {
+	background: var(--background-fill-secondary, #f4f5f7);
+}
+
+.key-note {
+	font-size: 0.82rem !important;
+	line-height: 1.55;
+	color: var(--body-text-color-subdued, #6b7280) !important;
+	margin: 2px 2px 18px !important;
+}
+
+.key-note code {
+	font-size: 0.95em;
+}
+
+/* --- controls ------------------------------------------------------------ */
+
+.primary-btn {
+	background: linear-gradient(135deg, #4f46e5, #2563eb) !important;
+	border: 0 !important;
+	color: #fff !important;
+	font-weight: 650 !important;
+	border-radius: 9px !important;
+	margin-top: 8px;
+}
+
+.primary-btn:hover {
+	filter: brightness(1.08);
+}
+
+/* --- footer -------------------------------------------------------------- */
+
+.cta-container {
+	text-align: center;
+	padding: 22px 16px 8px;
+	margin-top: 18px;
+	border-top: 1px solid var(--border-color-primary, #e4e6eb);
+}
+
+.cta-desc {
+	font-size: 0.86rem;
+	color: var(--body-text-color-subdued, #6b7280);
+	margin: 0;
+}
+
+.cta-desc a {
+	color: #4f46e5;
+	text-decoration: none;
+	font-weight: 600;
+}
+
+.cta-desc a:hover {
+	text-decoration: underline;
+}
+
+.cta-desc code {
+	font-size: 0.95em;
+}

wavespeed.py

@@ -0,0 +1,151 @@
+"""Minimal WaveSpeed v3 API client.
+
+Shared verbatim by every Space in the wavespeed org. Generated from
+_shared/spaceapp/ — edit there and re-run _shared/build_apps.py, never edit the
+copy inside a Space.
+
+The user supplies their own API key through the UI. It is used to sign requests
+to api.wavespeed.ai and nothing else: it is never logged, never written to
+disk, never placed in a Gradio component value, and is stripped out of every
+error message before that message can reach a browser (see `redact`). An
+exception raised by `requests` can carry the full request headers in its text,
+which is exactly how a key ends up in a user-visible traceback, so every raise
+in this module goes through `redact` first.
+
+API reference: https://wavespeed.ai/docs/rest-api
+"""
+
+from __future__ import annotations
+
+import time
+from typing import Any
+
+import requests
+
+API_BASE = "https://api.wavespeed.ai/api/v3"
+UPLOAD_URL = f"{API_BASE}/media/upload/binary"
+
+# The docs ask for >= 2s between polls of the same task, easing toward 5-10s
+# for long jobs. Anything faster risks being throttled.
+POLL_START = 2.0
+POLL_MAX = 8.0
+POLL_GROWTH = 1.25
+POLL_TIMEOUT = 600
+
+TERMINAL_OK = "completed"
+TERMINAL_BAD = ("failed", "cancelled", "timeout")
+
+
+class WaveSpeedError(Exception):
+    """User-facing error. The message is always key-free."""
+
+
+def redact(text: Any, key: str | None) -> str:
+    """Remove the API key (and any bearer token) from text headed for a user."""
+    s = str(text)
+    if key:
+        k = key.strip()
+        if k:
+            s = s.replace(k, "***")
+            # Defend against a partially-quoted key in a repr.
+            if len(k) > 12:
+                s = s.replace(k[:12], "***")
+    # Catch any Authorization header echoed by a library.
+    import re
+
+    s = re.sub(r"(?i)(bearer\s+)[A-Za-z0-9._\-]+", r"\1***", s)
+    s = re.sub(r"(?i)('authorization':\s*')[^']*", r"\1***", s)
+    return s
+
+
+def _headers(key: str, json: bool = False) -> dict:
+    h = {"Authorization": f"Bearer {key.strip()}"}
+    if json:
+        h["Content-Type"] = "application/json"
+    return h
+
+
+def _check(resp: requests.Response, key: str) -> dict:
+    if resp.status_code == 401:
+        raise WaveSpeedError("Invalid API key. Check the key and try again.")
+    if resp.status_code == 402:
+        raise WaveSpeedError("This account is out of credit.")
+    if resp.status_code == 429:
+        raise WaveSpeedError("Rate limit or quota exceeded. Wait and retry.")
+    if resp.status_code >= 400:
+        raise WaveSpeedError(
+            redact(f"API error {resp.status_code}: {resp.text[:300]}", key)
+        )
+    try:
+        body = resp.json()
+    except ValueError:
+        raise WaveSpeedError("API returned a non-JSON response.") from None
+    if body.get("code") != 200:
+        raise WaveSpeedError(redact(body.get("message", "Unknown API error"), key))
+    return body.get("data", {}) or {}
+
+
+def upload(key: str, path: str) -> str:
+    """Upload a local file, returning the URL to reference it by."""
+    try:
+        with open(path, "rb") as fh:
+            resp = requests.post(
+                UPLOAD_URL, headers=_headers(key), files={"file": fh}, timeout=120
+            )
+    except requests.RequestException as e:
+        raise WaveSpeedError(redact(f"Upload failed: {e}", key)) from None
+    data = _check(resp, key)
+    url = data.get("download_url") or data.get("url")
+    if not url:
+        raise WaveSpeedError("Upload succeeded but returned no URL.")
+    return url
+
+
+def submit(key: str, model: str, payload: dict) -> str:
+    """Start a job and return its request id.
+
+    Deliberately not retried: the docs warn that repeating a POST can bill the
+    caller twice. Only the GET poll below is safe to retry.
+    """
+    try:
+        resp = requests.post(
+            f"{API_BASE}/{model}", headers=_headers(key, json=True), json=payload, timeout=60
+        )
+    except requests.RequestException as e:
+        raise WaveSpeedError(redact(f"Could not reach the API: {e}", key)) from None
+    data = _check(resp, key)
+    rid = data.get("id")
+    if not rid:
+        raise WaveSpeedError("API accepted the request but returned no task id.")
+    return rid
+
+
+def poll(key: str, request_id: str, on_tick=None) -> list[str]:
+    """Poll a task to completion and return its output URLs."""
+    url = f"{API_BASE}/predictions/{request_id}/result"
+    deadline = time.time() + POLL_TIMEOUT
+    delay = POLL_START
+    while time.time() < deadline:
+        time.sleep(delay)
+        delay = min(delay * POLL_GROWTH, POLL_MAX)
+        try:
+            resp = requests.get(url, headers=_headers(key), timeout=60)
+        except requests.RequestException:
+            continue  # transient; a GET is safe to repeat
+        data = _check(resp, key)
+        status = data.get("status", "")
+        if status == TERMINAL_OK:
+            outputs = data.get("outputs") or []
+            if not outputs:
+                raise WaveSpeedError("Generation finished but produced no output.")
+            return outputs
+        if status in TERMINAL_BAD:
+            detail = redact(data.get("error") or status, key)
+            raise WaveSpeedError(f"Generation {status}: {detail}")
+        if on_tick:
+            on_tick(status)
+    raise WaveSpeedError("Timed out waiting for the result. The job may still finish.")
+
+
+def run(key: str, model: str, payload: dict, on_tick=None) -> list[str]:
+    return poll(key, submit(key, model, payload), on_tick=on_tick)