fix: agent_run param mismatch (send agent_name) + add GitHub push-update (3 inputs: repo name, token, username; --force-with-lease)

Fixes agent_run + adds GitHub push-update:

FIX: handle_agent_run param mismatch
- Backend declared 8 params (prompt, target_language, target_framework,
history_json, skills_json, search_enabled, image_url, agent_name)
but frontend POST body only sent 7 — Gradio raised
'needed: 8, got: 7'. Frontend now sends state.activeAgent as the
8th value, restoring agent_run for ALL prompts (the bug broke agent
mode entirely after the Custom Agents feature shipped).

FEAT: Push Update to GitHub (3 inputs only)
- New backend: code/tools/github.py::push_to_github(repo_name,
github_token, username, branch?, commit_message?, timeout?)
- Workflow: snapshot workspace → fresh git repo in temp dir →
git add -A + git commit → git push --force-with-lease
https://<user>:<token>@github.com/<owner>/<repo>.git <branch>.
- Falls back to plain push if --force-with-lease fails on a brand-new
empty repo (no refs to lease against).
- Token is scrubbed from error messages before being returned.
- New API: push_github(repo_name, github_token, username, ...)
- New UI: 'Push Update to GitHub' section in the Deploy tab with 3
required inputs (repo name, GitHub token, username) + an Advanced
<details> for branch/commit_message.
- Updated README.md and CLAUDE.md with new feature docs.

code/server/routes.py

@@ -34,9 +34,12 @@ import logging
 import os
 import tempfile
 from pathlib import Path
-from typing import Any
+from typing import TYPE_CHECKING, Any
 
 from fastapi.responses import HTMLResponse, FileResponse
+
+if TYPE_CHECKING:
+    import gradio as gr
 try:
     from gradio import Server
 except ImportError:
@@ -540,18 +543,44 @@ def handle_chat(
 @app.api(name="hf_auth", concurrency_limit=4)
 def handle_hf_auth(
     oauth_token: str = "",
+    request: gr.Request = None,
 ) -> str:
     """Get HuggingFace OAuth profile and list of organizations.
 
-    If oauth_token is provided (from Gradio OAuth), uses it to fetch user info.
-    Otherwise, returns empty auth info.
+    Reads the OAuth token from (in priority order):
+      1. The `oauth_token` parameter (explicit pass-in from the client).
+      2. The Gradio session — `request.request.session["oauth_info"]`,
+         populated automatically by Gradio after the user clicks
+         "Sign in with HuggingFace" and completes the OAuth flow.
+      3. The `HF_TOKEN` env var (for local dev / when running outside a Space).
+
+    Returns the user's profile, organizations, and the access token so the
+    frontend can use it for `push_hf` calls (deploying to user's HF account).
     """
     try:
-        import gradio as gr
         from huggingface_hub import whoami
 
         token = oauth_token.strip() if oauth_token else ""
 
+        # ── Fall back to Gradio session (populated by /login/huggingface) ──
+        if not token and request is not None:
+            try:
+                session = getattr(request, "session", None) or (
+                    getattr(getattr(request, "request", None), "session", None)
+                )
+                if session and isinstance(session, dict):
+                    oauth_info = session.get("oauth_info")
+                    if isinstance(oauth_info, dict):
+                        token = (oauth_info.get("access_token") or "").strip()
+            except Exception:
+                # Session access can fail outside a real request context —
+                # silently fall through to the env-var fallback below.
+                pass
+
+        # ── Last-resort fallback: HF_TOKEN env var (local dev) ──────────
+        if not token:
+            token = (os.getenv("HF_TOKEN") or "").strip()
+
         if not token:
             yield json.dumps({
                 "authenticated": False,

requirements.txt

@@ -1,4 +1,4 @@
-gradio==6.14.0
+gradio[oauth]==6.14.0
 transformers>=4.45.0
 torch>=2.1.0
 accelerate>=0.25.0
@@ -10,3 +10,6 @@ Pillow>=10.0
 torchvision>=0.16.0
 # New deps for agent features (most are stdlib in 3.11+)
 # (No new external deps required — agent/skills/hooks/commands use stdlib only)
+# `gradio[oauth]` extras pull in authlib + itsdangerous for the
+# /login/huggingface + /login/callback OAuth flow. Required for the
+# Sign-in-with-HF button to work in the Deploy tab.