telemetry relay

Dockerfile

@@ -0,0 +1,10 @@
+FROM python:3.11-slim
+RUN useradd -m -u 1000 user
+WORKDIR /app
+COPY requirements.txt .
+RUN pip install --no-cache-dir -r requirements.txt
+COPY app.py .
+USER user
+ENV HOME=/home/user
+EXPOSE 7860
+CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]

README.md

@@ -1,10 +1,20 @@
 ---
 title: ReverseBass Beta Relay
-emoji: ⚡
+emoji: 📡
 colorFrom: green
-colorTo: yellow
+colorTo: gray
 sdk: docker
+app_port: 7860
 pinned: false
 ---
 
-Check out the configuration reference at https://huggingface.co/docs/hub/spaces-config-reference
+# SA3 Sampler beta telemetry relay
+
+Receives the performance log the SA3 Sampler beta uploads automatically and stores it in a
+private dataset repository. The plugin carries no credential; this service holds the write
+token as a Space secret (`HF_TOKEN`).
+
+- `GET /` health and counters
+- `POST /logs/<install-id>/<YYYYMMDD>` body: the day's JSON-lines log (max 1 MB)
+
+The log contains hardware facts, timings and errors only. See the beta privacy note.

app.py

@@ -0,0 +1,92 @@
+"""SA3 Sampler beta telemetry relay.
+
+The plugin POSTs its daily performance log here without any credential. This service holds
+the Hugging Face token (Space secret HF_TOKEN) and writes the file into the private dataset
+repo. Nothing else is exposed: one route, one file per (installation id, day), size-capped,
+rate-limited per client address.
+"""
+import os
+import re
+import threading
+import time
+
+from fastapi import FastAPI, Request
+from fastapi.responses import JSONResponse
+from huggingface_hub import HfApi
+
+REPO = os.environ.get("TELEMETRY_REPO", "VortexSamples/ReverseBass-Beta-Telemetry")
+TOKEN = os.environ.get("HF_TOKEN", "")
+MAX_BYTES = 1_000_000            # a day of events is a few KB; anything bigger is not ours
+PER_HOUR = 120                   # uploads per client address per hour
+ID_RE = re.compile(r"^[0-9a-zA-Z-]{6,64}$")
+DAY_RE = re.compile(r"^\d{8}$")
+
+app = FastAPI(docs_url=None, redoc_url=None, openapi_url=None)
+api = HfApi(token=TOKEN or None)
+commit_lock = threading.Lock()
+recent: dict[str, list[float]] = {}
+recent_lock = threading.Lock()
+stats = {"accepted": 0, "rejected": 0, "started": int(time.time())}
+
+
+def client_ip(request: Request) -> str:
+    fwd = request.headers.get("x-forwarded-for", "")
+    return (fwd.split(",")[0].strip() if fwd else (request.client.host if request.client else "?"))
+
+
+def rate_limited(ip: str) -> bool:
+    now = time.time()
+    with recent_lock:
+        hits = [t for t in recent.get(ip, []) if now - t < 3600]
+        if len(hits) >= PER_HOUR:
+            recent[ip] = hits
+            return True
+        hits.append(now)
+        recent[ip] = hits
+        if len(recent) > 10000:      # keep the table bounded
+            for k in [k for k, v in recent.items() if not v or now - v[-1] > 3600]:
+                recent.pop(k, None)
+    return False
+
+
+def reject(status: int, why: str):
+    stats["rejected"] += 1
+    return JSONResponse({"ok": False, "why": why}, status_code=status)
+
+
+@app.get("/")
+def root():
+    return {"ok": True, "service": "sa3-telemetry-relay", "repo": REPO, **stats}
+
+
+@app.post("/logs/{install_id}/{day}")
+async def put_log(install_id: str, day: str, request: Request):
+    if not TOKEN:
+        return reject(503, "relay has no token configured")
+    if not ID_RE.match(install_id) or not DAY_RE.match(day):
+        return reject(400, "bad id or day")
+    if rate_limited(client_ip(request)):
+        return reject(429, "too many uploads")
+    body = await request.body()
+    if not body or len(body) > MAX_BYTES:
+        return reject(413 if body else 400, "bad size")
+    try:
+        text = body.decode("utf-8")
+    except UnicodeDecodeError:
+        return reject(400, "not utf-8")
+    if not text.lstrip().startswith("{"):
+        return reject(400, "not a log")
+
+    path = f"logs/{install_id}/{day}.jsonl"
+    try:
+        with commit_lock:
+            api.upload_file(path_or_fileobj=body, path_in_repo=path, repo_id=REPO, repo_type="dataset",
+                            commit_message=f"telemetry {install_id[:8]} {day}")
+    except Exception as e:   # noqa: BLE001
+        msg = str(e)
+        if "No files have been modified" in msg or "no changes" in msg.lower():
+            stats["accepted"] += 1
+            return {"ok": True, "bytes": len(body), "unchanged": True}
+        return reject(502, "upload failed: " + msg[:200])
+    stats["accepted"] += 1
+    return {"ok": True, "bytes": len(body)}

requirements.txt

@@ -0,0 +1,3 @@
+fastapi==0.115.6
+uvicorn==0.34.0
+huggingface_hub==0.36.0