Use HF_TOKEN for private model download

app.py

@@ -31,12 +31,18 @@ _state = {"ready": False, "msg": "idle", "pct": 0}
 _lock = threading.Lock()
 
 
+HF_TOKEN = os.environ.get("HF_TOKEN") or os.environ.get("HUGGING_FACE_HUB_TOKEN")
+
+
 def _fetch(name: str, url: str):
     dst = MODELS / name
     if dst.exists() and dst.stat().st_size > 10_000_000:
         return
     tmp = dst.with_suffix(dst.suffix + ".part")
-    req = urllib.request.Request(url, headers={"User-Agent": "pocket-zimage/1.0"})
+    hdr = {"User-Agent": "pocket-zimage/1.0"}
+    if HF_TOKEN and "huggingface.co" in url:
+        hdr["Authorization"] = "Bearer " + HF_TOKEN
+    req = urllib.request.Request(url, headers=hdr)
     with urllib.request.urlopen(req) as r, open(tmp, "wb") as f:
         total = int(r.headers.get("Content-Length") or 0)
         done = 0