update oauth

ui/src/app/api/auth/hf/callback/route.ts

@@ -86,25 +86,35 @@ export async function GET(request: NextRequest) {
     const namespace = profile?.preferred_username || profile?.name || 'user';
 
     const script = `
-      window.opener && window.opener.postMessage({
-        type: 'HF_OAUTH_SUCCESS',
-        payload: {
-          token: ${JSON.stringify(accessToken)},
-          namespace: ${JSON.stringify(namespace)},
+      (function() {
+        const target = window.opener || window.parent || window;
+        if (target) {
+          target.postMessage({
+            type: 'HF_OAUTH_SUCCESS',
+            payload: {
+              token: ${JSON.stringify(accessToken)},
+              namespace: ${JSON.stringify(namespace)},
+            }
+          }, '${origin}');
         }
-      }, '${origin}');
-      window.close();
+        window.close();
+      })();
     `;
 
     return htmlResponse(script.trim());
   } catch (error: any) {
     const message = error?.message || 'OAuth flow failed';
     const script = `
-      window.opener && window.opener.postMessage({
-        type: 'HF_OAUTH_ERROR',
-        payload: { message: ${JSON.stringify(message)} }
-      }, '${origin}');
-      window.close();
+      (function() {
+        const target = window.opener || window.parent || window;
+        if (target) {
+          target.postMessage({
+            type: 'HF_OAUTH_ERROR',
+            payload: { message: ${JSON.stringify(message)} }
+          }, '${origin}');
+        }
+        window.close();
+      })();
     `;
 
     return htmlResponse(script.trim());

ui/src/app/api/auth/hf/login/route.ts

@@ -18,7 +18,7 @@ export async function GET(request: NextRequest) {
   authorizeUrl.searchParams.set('response_type', 'code');
   authorizeUrl.searchParams.set('client_id', clientId);
   authorizeUrl.searchParams.set('redirect_uri', redirectUri);
-  authorizeUrl.searchParams.set('scope', 'openid profile read-repos');
+  authorizeUrl.searchParams.set('scope', 'openid profile read-repos write-repos manage-repos jobs');
   authorizeUrl.searchParams.set('state', state);
 
   const response = NextResponse.redirect(authorizeUrl.toString(), { status: 302 });

ui/src/app/dashboard/page.tsx

@@ -22,7 +22,7 @@ export default function Dashboard() {
         <div className="border border-gray-800 rounded-xl bg-gray-900 p-6 flex flex-col gap-4">
           <div>
             <h2 className="text-xl font-semibold text-gray-100">
-              {isAuthenticated ? `Welcome back, ${namespace || 'creator'}!` : 'Welcome to Ostris AI Toolkit on Hugging Face Spaces'}
+              {isAuthenticated ? `Welcome back, ${namespace || 'creator'}!` : 'Welcome to Ostris AI Toolkit'}
             </h2>
             <p className="text-sm text-gray-400 mt-2">
               {isAuthenticated