diffusers-workflow 0.4.0a10__tar.gz → 0.4.0a12__tar.gz

{diffusers_workflow-0.4.0a10/diffusers_workflow.egg-info → diffusers_workflow-0.4.0a12}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: diffusers-workflow
-Version: 0.4.0a10
+Version: 0.4.0a12
 Summary: Declarative workflow engine and web UI for Hugging Face Diffusers
 Author: dkackman
 License: Apache-2.0
@@ -79,6 +79,8 @@ Dynamic: license-file
 
 A declarative workflow engine and web UI for the [Hugging Face Diffusers library](https://github.com/huggingface/diffusers). Define image/video generation pipelines in JSON — with full access to the configuration diffusers exposes — and run them from the command line, an interactive REPL, or a browser.
 
+A workflow JSON file is portable and easy to hand off — but that same flexibility means loading one can execute arbitrary Python (dynamic imports are how it reaches any diffusers pipeline or quantization backend without a bespoke adapter for each). Treat a workflow file from someone else the way you'd treat a `.py` script: see [Trust model](docs/SECURITY.md#trust-model) before running one you didn't write.
+
 **Python 3.10-3.14 | CUDA (NVIDIA) | MPS (Apple Silicon) | CPU**
 
 <picture>
@@ -92,7 +94,7 @@ A declarative workflow engine and web UI for the [Hugging Face Diffusers library
 - **MCP server** — a stdio server that lets an MCP client (Claude Code first) author, validate, save, run and diagnose workflows against a running `dw.serve`. `dw-mcp`. See [MCP Server](docs/MCP.md).
 - **Declarative JSON workflows** with variable substitution and cross-step data flow
 - **Multi-step pipelines** — chain text-to-image, image-to-video, inpainting, ControlNet
-- **Reproducible by construction** — outputs embed their full workflow definition and seed; any image in the gallery reopens as the exact workflow that made it
+- **Reproducible by construction** — outputs embed their full workflow definition and seed; any image in the gallery reopens as the exact workflow that made it (see [Trust model](docs/SECURITY.md#trust-model) before reopening one someone else sent you)
 - **Long-video chaining** — run a video pipeline once per segment and stitch the segments into one clip, with audio-driven length and frame-to-frame continuity
 - **Quantization** — BitsAndBytes, TorchAO, GGUF, SDNQ, optimum-quanto
 - **Inference acceleration** — TeaCache, FirstBlockCache, FasterCache, MagCache, TaylorSeerCache
@@ -153,15 +155,26 @@ Jobs queue, stream progress live (per denoising step), cancel cooperatively, and
 
 ### Run a Workflow
 
+`workflows/sd15.json` is the smallest, fastest starting point — a small, ungated model and a literal prompt, so the first run needs no Hugging Face login and downloads only a few GB:
+
 ```bash
+python -m dw.run workflows/sd15.json
+python -m dw.run workflows/sd15.json prompt="a cat" num_images_per_prompt=4
+```
+
+Most of the workflows under `workflows/` (Flux, LTX-2, MiniMax...) use **gated** Hugging Face models — the repo owner has to approve your account before you can download them. Before running one of those, request access on the model's Hugging Face page (e.g. [black-forest-labs/FLUX.1-dev](https://huggingface.co/black-forest-labs/FLUX.1-dev)) and log in locally:
+
+```bash
+huggingface-cli login
 python -m dw.run workflows/flux/FluxDev.json
-python -m dw.run workflows/flux/FluxDev.json prompt="a cat" num_images_per_prompt=4
 ```
 
+Without this, the run fails partway through with an HTTP 401/403 from the Hub.
+
 ### Validate a Workflow
 
 ```bash
-python -m dw.validate workflows/flux/FluxDev.json
+python -m dw.validate workflows/sd15.json
 ```
 
 ### Interactive REPL

{diffusers_workflow-0.4.0a10 → diffusers_workflow-0.4.0a12}/README.md

@@ -4,6 +4,8 @@
 
 A declarative workflow engine and web UI for the [Hugging Face Diffusers library](https://github.com/huggingface/diffusers). Define image/video generation pipelines in JSON — with full access to the configuration diffusers exposes — and run them from the command line, an interactive REPL, or a browser.
 
+A workflow JSON file is portable and easy to hand off — but that same flexibility means loading one can execute arbitrary Python (dynamic imports are how it reaches any diffusers pipeline or quantization backend without a bespoke adapter for each). Treat a workflow file from someone else the way you'd treat a `.py` script: see [Trust model](docs/SECURITY.md#trust-model) before running one you didn't write.
+
 **Python 3.10-3.14 | CUDA (NVIDIA) | MPS (Apple Silicon) | CPU**
 
 <picture>
@@ -17,7 +19,7 @@ A declarative workflow engine and web UI for the [Hugging Face Diffusers library
 - **MCP server** — a stdio server that lets an MCP client (Claude Code first) author, validate, save, run and diagnose workflows against a running `dw.serve`. `dw-mcp`. See [MCP Server](docs/MCP.md).
 - **Declarative JSON workflows** with variable substitution and cross-step data flow
 - **Multi-step pipelines** — chain text-to-image, image-to-video, inpainting, ControlNet
-- **Reproducible by construction** — outputs embed their full workflow definition and seed; any image in the gallery reopens as the exact workflow that made it
+- **Reproducible by construction** — outputs embed their full workflow definition and seed; any image in the gallery reopens as the exact workflow that made it (see [Trust model](docs/SECURITY.md#trust-model) before reopening one someone else sent you)
 - **Long-video chaining** — run a video pipeline once per segment and stitch the segments into one clip, with audio-driven length and frame-to-frame continuity
 - **Quantization** — BitsAndBytes, TorchAO, GGUF, SDNQ, optimum-quanto
 - **Inference acceleration** — TeaCache, FirstBlockCache, FasterCache, MagCache, TaylorSeerCache
@@ -78,15 +80,26 @@ Jobs queue, stream progress live (per denoising step), cancel cooperatively, and
 
 ### Run a Workflow
 
+`workflows/sd15.json` is the smallest, fastest starting point — a small, ungated model and a literal prompt, so the first run needs no Hugging Face login and downloads only a few GB:
+
 ```bash
+python -m dw.run workflows/sd15.json
+python -m dw.run workflows/sd15.json prompt="a cat" num_images_per_prompt=4
+```
+
+Most of the workflows under `workflows/` (Flux, LTX-2, MiniMax...) use **gated** Hugging Face models — the repo owner has to approve your account before you can download them. Before running one of those, request access on the model's Hugging Face page (e.g. [black-forest-labs/FLUX.1-dev](https://huggingface.co/black-forest-labs/FLUX.1-dev)) and log in locally:
+
+```bash
+huggingface-cli login
 python -m dw.run workflows/flux/FluxDev.json
-python -m dw.run workflows/flux/FluxDev.json prompt="a cat" num_images_per_prompt=4
 ```
 
+Without this, the run fails partway through with an HTTP 401/403 from the Hub.
+
 ### Validate a Workflow
 
 ```bash
-python -m dw.validate workflows/flux/FluxDev.json
+python -m dw.validate workflows/sd15.json
 ```
 
 ### Interactive REPL

{diffusers_workflow-0.4.0a10 → diffusers_workflow-0.4.0a12/diffusers_workflow.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: diffusers-workflow
-Version: 0.4.0a10
+Version: 0.4.0a12
 Summary: Declarative workflow engine and web UI for Hugging Face Diffusers
 Author: dkackman
 License: Apache-2.0
@@ -79,6 +79,8 @@ Dynamic: license-file
 
 A declarative workflow engine and web UI for the [Hugging Face Diffusers library](https://github.com/huggingface/diffusers). Define image/video generation pipelines in JSON — with full access to the configuration diffusers exposes — and run them from the command line, an interactive REPL, or a browser.
 
+A workflow JSON file is portable and easy to hand off — but that same flexibility means loading one can execute arbitrary Python (dynamic imports are how it reaches any diffusers pipeline or quantization backend without a bespoke adapter for each). Treat a workflow file from someone else the way you'd treat a `.py` script: see [Trust model](docs/SECURITY.md#trust-model) before running one you didn't write.
+
 **Python 3.10-3.14 | CUDA (NVIDIA) | MPS (Apple Silicon) | CPU**
 
 <picture>
@@ -92,7 +94,7 @@ A declarative workflow engine and web UI for the [Hugging Face Diffusers library
 - **MCP server** — a stdio server that lets an MCP client (Claude Code first) author, validate, save, run and diagnose workflows against a running `dw.serve`. `dw-mcp`. See [MCP Server](docs/MCP.md).
 - **Declarative JSON workflows** with variable substitution and cross-step data flow
 - **Multi-step pipelines** — chain text-to-image, image-to-video, inpainting, ControlNet
-- **Reproducible by construction** — outputs embed their full workflow definition and seed; any image in the gallery reopens as the exact workflow that made it
+- **Reproducible by construction** — outputs embed their full workflow definition and seed; any image in the gallery reopens as the exact workflow that made it (see [Trust model](docs/SECURITY.md#trust-model) before reopening one someone else sent you)
 - **Long-video chaining** — run a video pipeline once per segment and stitch the segments into one clip, with audio-driven length and frame-to-frame continuity
 - **Quantization** — BitsAndBytes, TorchAO, GGUF, SDNQ, optimum-quanto
 - **Inference acceleration** — TeaCache, FirstBlockCache, FasterCache, MagCache, TaylorSeerCache
@@ -153,15 +155,26 @@ Jobs queue, stream progress live (per denoising step), cancel cooperatively, and
 
 ### Run a Workflow
 
+`workflows/sd15.json` is the smallest, fastest starting point — a small, ungated model and a literal prompt, so the first run needs no Hugging Face login and downloads only a few GB:
+
 ```bash
+python -m dw.run workflows/sd15.json
+python -m dw.run workflows/sd15.json prompt="a cat" num_images_per_prompt=4
+```
+
+Most of the workflows under `workflows/` (Flux, LTX-2, MiniMax...) use **gated** Hugging Face models — the repo owner has to approve your account before you can download them. Before running one of those, request access on the model's Hugging Face page (e.g. [black-forest-labs/FLUX.1-dev](https://huggingface.co/black-forest-labs/FLUX.1-dev)) and log in locally:
+
+```bash
+huggingface-cli login
 python -m dw.run workflows/flux/FluxDev.json
-python -m dw.run workflows/flux/FluxDev.json prompt="a cat" num_images_per_prompt=4
 ```
 
+Without this, the run fails partway through with an HTTP 401/403 from the Hub.
+
 ### Validate a Workflow
 
 ```bash
-python -m dw.validate workflows/flux/FluxDev.json
+python -m dw.validate workflows/sd15.json
 ```
 
 ### Interactive REPL

{diffusers_workflow-0.4.0a10 → diffusers_workflow-0.4.0a12}/diffusers_workflow.egg-info/SOURCES.txt

@@ -64,45 +64,45 @@ dw/server/ui/assets/csharp-BKxtCVv1.js
 dw/server/ui/assets/csp-bTuwJoIa.js
 dw/server/ui/assets/css-DIMkf-bt.js
 dw/server/ui/assets/css.worker-B3ciXF_0.js
-dw/server/ui/assets/cssMode-DBf-T_da.js
+dw/server/ui/assets/cssMode-CRm5Fmld.js
 dw/server/ui/assets/cypher-CVaqCwHa.js
 dw/server/ui/assets/dart-onAF5SnQ.js
 dw/server/ui/assets/dockerfile-DZFCIeNp.js
 dw/server/ui/assets/ecl-D05T4iGw.js
 dw/server/ui/assets/editor-jjEx9u7D.css
-dw/server/ui/assets/editor.api-B0D5Ygq7.js
+dw/server/ui/assets/editor.api-CArwgKCZ.js
 dw/server/ui/assets/editor.worker-q-txB4vs.js
 dw/server/ui/assets/elixir-6RTg0lbw.js
 dw/server/ui/assets/flow9-C5_-GSwl.js
-dw/server/ui/assets/freemarker2-Br8g4G1T.js
+dw/server/ui/assets/freemarker2-B42MpbWP.js
 dw/server/ui/assets/fsharp-C8Ef5oNN.js
 dw/server/ui/assets/go-C-y9NEjX.js
 dw/server/ui/assets/graphql-fmXr3nnJ.js
-dw/server/ui/assets/handlebars-BKo1TaOF.js
+dw/server/ui/assets/handlebars-BhleeD_A.js
 dw/server/ui/assets/hcl-CpzslTdj.js
-dw/server/ui/assets/html-Bis1seyM.js
+dw/server/ui/assets/html-Bi_v7qEe.js
 dw/server/ui/assets/html.worker-C93Ht9o9.js
-dw/server/ui/assets/htmlMode-D2SOD2MF.js
-dw/server/ui/assets/index-D7eWnTCB.css
-dw/server/ui/assets/index-JyFxgIR9.js
+dw/server/ui/assets/htmlMode-c39yjrZR.js
+dw/server/ui/assets/index-CKHZ9ZUD.css
+dw/server/ui/assets/index-Do_ZJ3yS.js
 dw/server/ui/assets/ini-sBoK_t0W.js
 dw/server/ui/assets/java-BEtHBSE6.js
-dw/server/ui/assets/javascript-CkEbVb78.js
+dw/server/ui/assets/javascript-BTuzJzdO.js
 dw/server/ui/assets/json.worker-B2V3pomh.js
-dw/server/ui/assets/jsonMode-dVJbYwxg.js
+dw/server/ui/assets/jsonMode-DY2FmMCP.js
 dw/server/ui/assets/julia-Bri6UV-V.js
 dw/server/ui/assets/kotlin-BOotOW0E.js
 dw/server/ui/assets/less-B9JPFI3C.js
 dw/server/ui/assets/lexon-CfSJPG6W.js
-dw/server/ui/assets/liquid-Btak-6uF.js
-dw/server/ui/assets/lspLanguageFeatures-BfeZZQbb.js
+dw/server/ui/assets/liquid-iXwDEnQP.js
+dw/server/ui/assets/lspLanguageFeatures-CVXyTq9V.js
 dw/server/ui/assets/lua-CsQS60Ue.js
 dw/server/ui/assets/m3-D-oSqn_W.js
 dw/server/ui/assets/markdown-Cimd5fb3.js
-dw/server/ui/assets/mdx-D9KXK7-s.js
+dw/server/ui/assets/mdx-QE70XlV0.js
 dw/server/ui/assets/mips-CIPQ_RoX.js
 dw/server/ui/assets/monaco--ixms01u.css
-dw/server/ui/assets/monaco-ZMCk_MWf.js
+dw/server/ui/assets/monaco-CzCru1EC.js
 dw/server/ui/assets/msdax-DauUninz.js
 dw/server/ui/assets/mysql-SOo6toE5.js
 dw/server/ui/assets/objective-c-FvmIjYaQ.js
@@ -117,10 +117,10 @@ dw/server/ui/assets/powerquery-D3hlyOfw.js
 dw/server/ui/assets/powershell-DmHpPYUd.js
 dw/server/ui/assets/protobuf-C531GsRP.js
 dw/server/ui/assets/pug-Z5eAx3Zn.js
-dw/server/ui/assets/python-0FnO4xGM.js
+dw/server/ui/assets/python-DxHS-kHp.js
 dw/server/ui/assets/qsharp-DkqhCAOL.js
 dw/server/ui/assets/r-BwWrilGY.js
-dw/server/ui/assets/razor-B6PMzeY4.js
+dw/server/ui/assets/razor-CT5Qrhwg.js
 dw/server/ui/assets/redis-ClamHrr6.js
 dw/server/ui/assets/redshift-DT7zqm-g.js
 dw/server/ui/assets/restructuredtext-BYgofb2h.js
@@ -140,15 +140,15 @@ dw/server/ui/assets/swift-Bxkupp3x.js
 dw/server/ui/assets/systemverilog-Bz4Y3fRF.js
 dw/server/ui/assets/tcl-DISqw1ZD.js
 dw/server/ui/assets/ts.worker-D7T1-Ig5.js
-dw/server/ui/assets/tsMode-nxyvZH1t.js
+dw/server/ui/assets/tsMode-qXdDdnF1.js
 dw/server/ui/assets/twig-De2hgUGE.js
-dw/server/ui/assets/typescript-BhBe8aGf.js
+dw/server/ui/assets/typescript-BWfJagji.js
 dw/server/ui/assets/typespec-B8J7ngcE.js
 dw/server/ui/assets/vb-DV3o63ZY.js
 dw/server/ui/assets/wgsl-DpFanUEy.js
-dw/server/ui/assets/workers-ChAf-t8A.js
-dw/server/ui/assets/xml-z2r9dHSO.js
-dw/server/ui/assets/yaml-DrcHrz7f.js
+dw/server/ui/assets/workers-C9vxrwoC.js
+dw/server/ui/assets/xml-DhJEwsDK.js
+dw/server/ui/assets/yaml-CiixMxAq.js
 dw/tasks/audio_utils.py
 dw/tasks/background_remover.py
 dw/tasks/borders.py
@@ -254,8 +254,10 @@ tests/test_tensor_image.py
 tests/test_text_generation.py
 tests/test_text_sections.py
 tests/test_type_helpers.py
+tests/test_updater.py
 tests/test_variables.py
 tests/test_video_utils.py
 tests/test_worker.py
 tests/test_worker_execute.py
-tests/test_workflow.py
+tests/test_workflow.py
+tests/test_workflow_trust.py

{diffusers_workflow-0.4.0a10 → diffusers_workflow-0.4.0a12}/dw/__init__.py

@@ -29,8 +29,20 @@ warnings.filterwarnings("ignore", category=FutureWarning)
 warnings.filterwarnings("ignore", category=UserWarning)
 warnings.filterwarnings("ignore", category=DeprecationWarning)
 
-# Lazy import torch to avoid import errors when torch isn't available
-# (e.g., when using system Python instead of venv)
+# Eager (but guarded) import of torch. This module's own top-level code needs
+# torch's exceptions/types unconditionally to detect its absence gracefully
+# (see _TORCH_AVAILABLE below) rather than deferring the try/except to first
+# use everywhere torch is touched. It would be nice for a torch-free path like
+# `python -m dw.validate` (pure JSON schema validation) to skip this multi-
+# second import, but that isn't achievable by changing dw/__init__.py alone:
+# dw/validate.py imports dw/workflow.py, which does its own unconditional
+# `import torch` at module scope (Workflow.run() uses torch.Generator() for
+# seeding) - so torch loads regardless of what this module does. Making the
+# import here lazy without also restructuring dw/workflow.py's random-seed
+# handling would just move the cost around, not remove it, and touching
+# dw/workflow.py's import structure is a larger, riskier change than this
+# fix pass is meant to make. Left eager on purpose; see the audit notes for
+# why a real fix needs to start in dw/workflow.py, not here.
 try:
     import torch
     import diffusers

{diffusers_workflow-0.4.0a10 → diffusers_workflow-0.4.0a12}/dw/events.py

@@ -27,6 +27,10 @@ class RunContext:
     def __init__(self, on_event=None):
         self._on_event = on_event
         self._cancel = threading.Event()
+        # The most recent phase this run reported (see emit_phase/PHASES) -
+        # cancel() reads it to tell a client whether the cancel takes effect
+        # right away or has to wait out an in-flight, non-interruptible phase
+        self._current_phase = None
         # Pipeline cache keys this run resolved - the worker evicts entries a
         # run no longer touches, so an edited workflow drops stale models
         self.touched_pipelines = set()
@@ -40,8 +44,18 @@ class RunContext:
             # A broken sink must not kill a run that is otherwise fine
             logger.warning(f"Progress event sink failed on '{event_type}': {e}")
 
+    def note_phase(self, phase):
+        """Record the run's latest phase - called by emit_phase, read by
+        cancel() to judge whether the current phase can be interrupted."""
+        self._current_phase = phase
+
     def cancel(self):
         self._cancel.set()
+        if self._current_phase in NON_INTERRUPTIBLE_PHASES:
+            # A model load or a task step has no checkpoint to catch this
+            # flag until it finishes - say so, or the client sees the cancel
+            # request go silent for however long that takes
+            self.emit("cancel_pending", phase=self._current_phase)
 
     @property
     def cancelled(self):
@@ -82,6 +96,11 @@ def deactivate_context(token):
 # the run is waiting on, not what any one library is doing internally
 PHASES = ("loading", "cached", "generating", "decoding", "saving", "task")
 
+# Phases with no checkpoint of their own: nothing inside a from_pretrained()
+# call or a task handler consults the cancel flag, so a cancel requested
+# during one of these can only take effect once the phase finishes on its own
+NON_INTERRUPTIBLE_PHASES = ("loading", "task")
+
 
 def emit_phase(phase, detail=None):
     """Report a coarse phase change on the active run.
@@ -92,4 +111,6 @@ def emit_phase(phase, detail=None):
     enough (a handful per step) to carry a free-text detail alongside, which
     is what makes 'loading' readable as 'which model'.
     """
-    get_context().emit("phase", phase=phase, detail=detail)
+    context = get_context()
+    context.note_phase(phase)
+    context.emit("phase", phase=phase, detail=detail)

{diffusers_workflow-0.4.0a10 → diffusers_workflow-0.4.0a12}/dw/pipeline_processors/pipeline.py

@@ -16,6 +16,10 @@ from .remote import remote_text_encoder
 from ..cache_blocks import register_cache_blocks
 from ..teacache import teacache_context
 from ..type_helpers import has_method
+from ..security import (
+    require_trusted_from_pretrained_arguments,
+    require_trusted_pre_load_modules,
+)
 from .. import empty_device_cache, get_device_type, resolve_device
 from diffusers import attention_backend
 
@@ -23,6 +27,7 @@ from diffusers import attention_backend
 # imported where they are used - at module scope they add seconds to every startup
 
 from ..events import WorkflowCancelled, emit_phase, get_context
+from huggingface_hub.errors import HfHubHTTPError
 
 logger = logging.getLogger("dw")
 
@@ -224,8 +229,12 @@ class Pipeline:
         logger.debug(f"Loading pipeline: {self.name}")
 
         # Import modules that need to register with diffusers/transformers before loading
-        # (e.g., sdnq registers its quantization method on import)
-        for module_name in self.configuration.get("pre_load_modules", []):
+        # (e.g., sdnq registers its quantization method on import). This runs
+        # arbitrary python at import time, so an untrusted workflow is refused
+        # here unless --trust-workflows was passed - see docs/SECURITY.md
+        pre_load_modules = self.configuration.get("pre_load_modules", [])
+        require_trusted_pre_load_modules(pre_load_modules)
+        for module_name in pre_load_modules:
             logger.info(f"Pre-loading module: {module_name}")
             importlib.import_module(module_name)
 
@@ -1509,6 +1518,10 @@ def load_component(
     component_type = configuration["component_type"]
     component = None
 
+    # Refused before anything reaches the Hub: an untrusted workflow must not
+    # be able to have diffusers fetch and run code on its behalf
+    require_trusted_from_pretrained_arguments(from_pretrained_arguments, component_name)
+
     # A standard pipeline takes a component as a constructor argument. A modular one
     # cannot: it is built from the component specs in its own index and given the
     # objects afterwards, which is also what keeps load_components() from pulling a
@@ -1537,6 +1550,7 @@ def load_component(
             f"Consider changing torch_dtype from float16 to float32 for {component_name} "
         )
 
+    model_name = None
     try:
         with loading_device(configuration):
             # Load from model name
@@ -1600,12 +1614,44 @@ def load_component(
         )
 
     except Exception as e:
-        # One log line with the full traceback - every error class was logged
-        # and re-raised identically
+        # 401/403 from the Hub means the account behind whatever token (or
+        # lack of one) HfApi is using cannot read this repo - almost always
+        # a gated model the user has not requested access to, or has not
+        # logged in for. A whole-pipeline load raises the HfHubHTTPError
+        # itself; a per-component load gets it wrapped in an EnvironmentError
+        # by diffusers' _get_model_file / transformers' cached_file, so the
+        # cause chain is searched. Every other error (a real outage, a bad
+        # repo id) is logged once with its traceback and re-raised unchanged
+        if _hub_auth_status(e) is not None:
+            repo = model_name or component_name
+            logger.error(
+                f"Hugging Face authentication required loading {component_name} "
+                f"({repo}): {e}",
+                exc_info=True,
+            )
+            raise RuntimeError(
+                f"Model '{repo}' requires Hugging Face authentication - run "
+                f"'huggingface-cli login', or request access at "
+                f"https://huggingface.co/{repo}"
+            ) from e
         logger.error(f"{type(e).__name__} loading {component_name}: {e}", exc_info=True)
         raise
 
 
+def _hub_auth_status(error):
+    """The 401/403 status an exception (or anything in its cause/context
+    chain) carries from the Hub, else None."""
+    seen = set()
+    while error is not None and id(error) not in seen:
+        seen.add(id(error))
+        if isinstance(error, HfHubHTTPError):
+            status = getattr(getattr(error, "response", None), "status_code", None)
+            if status in (401, 403):
+                return status
+        error = error.__cause__ or error.__context__
+    return None
+
+
 def apply_sdnq_optimizations(pipeline, component_names):
     """Apply SDNQ quantized matmul optimization to pipeline components.
 

{diffusers_workflow-0.4.0a10 → diffusers_workflow-0.4.0a12}/dw/repl.py

@@ -278,8 +278,26 @@ def main():
         default="INFO",
         help="Set the logging level (DEBUG, INFO, WARNING, ERROR, CRITICAL)",
     )
+    parser.add_argument(
+        "--trust-workflows",
+        action="store_true",
+        default=False,
+        help="Trust every workflow loaded this session to execute arbitrary "
+        "Python: allow pre_load_modules and any dotted "
+        "*_type/*_dtype/dtype/config_type value, not just ones inside the "
+        "diffusers/torch/transformers/quantization-backend ecosystem the "
+        "tool already depends on. Off by default - see docs/SECURITY.md's "
+        "Trust model.",
+    )
     args = parser.parse_args()
 
+    # Set before the worker subprocess is ever spawned - 'spawn' launches a
+    # fresh interpreter that inherits this environment variable, so
+    # 'workflow load/run' in the worker sees the same trust choice
+    from .security import set_trust_workflows
+
+    set_trust_workflows(args.trust_workflows)
+
     # Initialize logging
     startup(args.log_level)
 

{diffusers_workflow-0.4.0a10 → diffusers_workflow-0.4.0a12}/dw/run.py

@@ -7,6 +7,7 @@ from .security import (
     validate_output_path,
     validate_variable_name,
     validate_string_input,
+    set_trust_workflows,
     SecurityError,
     MAX_VARIABLE_VALUE_LENGTH,
 )
@@ -44,6 +45,17 @@ def main():
         "DW_PROMPT_DIR, else ./prompts if it exists, else the nearest "
         "prompts/ above the workflow file)",
     )
+    parser.add_argument(
+        "--trust-workflows",
+        action="store_true",
+        default=False,
+        help="Trust this workflow file to execute arbitrary Python: allow "
+        "pre_load_modules and any dotted *_type/*_dtype/dtype/config_type "
+        "value, not just ones inside the diffusers/torch/transformers/"
+        "quantization-backend ecosystem the tool already depends on. Off "
+        "by default - see docs/SECURITY.md's Trust model. Only pass this "
+        "for a workflow file whose source you trust.",
+    )
     # parse_intermixed_args, not parse_args: argparse splits positionals into
     # groups around an option, and with a nargs='*' positional that means
     # 'dw-run wf.json -o outputs prompt=cat' - an option between the file
@@ -53,6 +65,8 @@ def main():
     if args.prompt_dir:
         os.environ["DW_PROMPT_DIR"] = os.path.abspath(args.prompt_dir)
 
+    set_trust_workflows(args.trust_workflows)
+
     # Parse key-value pairs with validation
     variables = {}
     for variable in args.variables:

diffusers_workflow-0.4.0a12/dw/schema.py

@@ -0,0 +1,43 @@
+import json
+import os
+from jsonschema import validate, ValidationError
+
+
+def validate_data(data, schema):
+    try:
+        validate(instance=data, schema=schema)
+        return True, "Validation successful"
+
+    except ValidationError as ve:
+        path = json_path(ve.absolute_path)
+        location = f" at {path}" if path else ""
+        return False, f"Validation error{location}: {ve.message}"
+    except json.JSONDecodeError as je:
+        return False, f"JSON parsing error: {str(je)}"
+    except Exception as e:
+        return False, f"Unexpected error: {str(e)}"
+
+
+def json_path(absolute_path):
+    """Render a jsonschema ValidationError's absolute_path (a deque of dict
+    keys and list indices) as a dotted/bracket path, e.g.
+    steps[0].pipeline.arguments.prompt. None if the error is at the root."""
+    if not absolute_path:
+        return None
+    parts = []
+    for element in absolute_path:
+        if isinstance(element, int):
+            parts.append(f"[{element}]")
+        elif not parts:
+            parts.append(str(element))
+        else:
+            parts.append(f".{element}")
+    return "".join(parts)
+
+
+def load_schema(schema_name):
+    file_spec = os.path.join(
+        os.path.dirname(os.path.abspath(__file__)), f"{schema_name}_schema.json"
+    )
+    with open(file_spec, "r") as file:
+        return json.load(file)