fix(policy): replace deprecated HuggingFace inference endpoint in preset

[latenighthackathon]

Summary

Replace api-inference.huggingface.co with router.huggingface.co in the HuggingFace policy preset. The old endpoint returns HTTP 410 Gone — HuggingFace migrated their Inference Providers API to router.huggingface.co.

Sandbox agents using the HuggingFace preset for inference would have their requests routed to a dead endpoint.

Testing

Confirm the issue (before the fix)

1. Verify the preset references the deprecated endpoint:

grep "api-inference" nemoclaw-blueprint/policies/presets/huggingface.yaml
# Expected on main: api-inference.huggingface.co

2. Verify the endpoint is dead:

curl -sI https://api-inference.huggingface.co | head -1
# Expected: HTTP/1.1 410 Gone

3. Verify the replacement endpoint is live:

curl -sI https://router.huggingface.co/v1/models | head -1
# Expected: HTTP/1.1 200 OK

Confirm the fix

4. Verify the preset now uses the new endpoint:

grep "router.huggingface" nemoclaw-blueprint/policies/presets/huggingface.yaml
# Expected: router.huggingface.co

5. Verify no reference to the deprecated endpoint remains:

grep "api-inference" nemoclaw-blueprint/policies/presets/huggingface.yaml
# Expected: no output

Run the test suite

npm install --include=dev && npx vitest run test/policies.test.js
# Expected: 54 tests pass

Closes #1453

Signed-off-by: latenighthackathon latenighthackathon@users.noreply.github.com

Summary by CodeRabbit

• Chores
  • Updated Hugging Face inference service endpoint configuration. The network policy for Hugging Face integration has been modified to route API requests through an updated endpoint. All security protocols (TLS/HTTPS), port settings, and access permissions for GET and POST requests remain unchanged to ensure service continuity.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 95379934-7bbb-40a1-9fb6-96df1fbfce2d

📥 Commits

Reviewing files that changed from the base of the PR and between f4a01cf and 69fcd76.

📒 Files selected for processing (1)

• nemoclaw-blueprint/policies/presets/huggingface.yaml

---

📝 Walkthrough

Walkthrough

The HuggingFace network policy preset updates the inference API endpoint from the deprecated api-inference.huggingface.co (HTTP 410 Gone) to the current router.huggingface.co. All other policy configuration details remain unchanged.

Changes

Cohort / File(s)	Summary
HuggingFace Policy Preset nemoclaw-blueprint/policies/presets/huggingface.yaml	Updated network policy endpoint host from deprecated api-inference.huggingface.co to active router.huggingface.co

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Poem

🐰 Hops and cheers for the endpoint update so true,
Old api-inference gone, router comes through!
No more HTTP 410 to make agents weep,
HuggingFace inference now runs deep! 🚀✨

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately reflects the main change: replacing a deprecated HuggingFace endpoint in the policy preset with the current working endpoint.
Linked Issues check	✅ Passed	The pull request directly addresses issue #1453 by replacing the deprecated api-inference.huggingface.co endpoint with router.huggingface.co in the HuggingFace policy preset.
Out of Scope Changes check	✅ Passed	All changes are scoped to the single file modification (huggingface.yaml) and directly address the endpoint deprecation issue without introducing unrelated changes.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[wscurran]

✨ Thanks for submitting this pull request, which proposes a way to fix the HuggingFace policy preset by replacing the deprecated inference endpoint. I also see you opened a fix for this — thanks for the quick follow-up.

---

Possibly related open issues:

• #1453 fix(policy): HuggingFace preset references deprecated api-inference.huggingface.co endpoint