acess to ml-agent-explorers

README.md

@@ -9,9 +9,10 @@ hf_oauth: true
 hf_oauth_scopes:
   - read-repos
   - write-repos
+  - contribute-repos
   - manage-repos
-  - inference-api
   - jobs
+  - write-discussions
 ---
 
 # HF Agent
@@ -50,8 +51,10 @@ ANTHROPIC_API_KEY=<one-key-to-rule-them-all>
 HF_TOKEN=<hf-token-to-access-the-hub>
 GITHUB_TOKEN=<gh-pat-key-for-not-reinventing-the-wheel>
 HF_NAMESPACE=<hf-namespace-to-use>
+HF_OAUTH_ORG_ID=<org-id-for-oauth-org-access>
 ```
 
+
 ## Architecture
 
 ### Component Overview

agent/tools/jobs_tool.py

@@ -283,6 +283,7 @@ class HfJobsTool:
         namespace: Optional[str] = None,
         log_callback: Optional[Callable[[str], Awaitable[None]]] = None,
     ):
+        self.hf_token = hf_token
         self.api = HfApi(token=hf_token)
         self.namespace = namespace
         self.log_callback = log_callback

backend/routes/auth.py

@@ -72,6 +72,11 @@ async def oauth_login(request: Request) -> RedirectResponse:
         "response_type": "code",
         "state": state,
     }
+    # Request access to org resources (jobs, repos) so the user's token
+    # is scoped to the org.
+    org_id = os.environ.get("HF_OAUTH_ORG_ID", "698dbf55845d85df163175f1")  # ml-agent-explorers
+    if org_id:
+        params["orgIds"] = org_id
     auth_url = f"{OPENID_PROVIDER_URL}/oauth/authorize?{urlencode(params)}"
 
     return RedirectResponse(url=auth_url)