Refactor Hugging Face authentication in push command

- Removed dependency on `HF_TOKEN` environment variable for Hugging Face authentication.
- Updated `_ensure_hf_authenticated` function to handle login without requiring a token.
- Modified README.md to reflect changes in authentication process.
- Adjusted tests to verify initialization of `HfApi` without token parameter.

Author: zkwentz

src/openenv_cli/commands/push.py

@@ -8,7 +8,6 @@
 
 from __future__ import annotations
 
-import os
 import shutil
 import tempfile
 from pathlib import Path
@@ -64,12 +63,9 @@ def _ensure_hf_authenticated() -> str:
     Returns:
         Username of authenticated user
     """
-    # Check for HF_TOKEN environment variable
-    token = os.getenv("HF_TOKEN")
-    
     try:
         # Try to get current user
-        user_info = whoami(token=token)
+        user_info = whoami()
         # Handle both dict and object return types
         if isinstance(user_info, dict):
             username = user_info.get("name") or user_info.get("fullname") or user_info.get("username")
@@ -84,14 +80,10 @@ def _ensure_hf_authenticated() -> str:
         return username
     except Exception:
         # Not authenticated, prompt for login
-        if token:
-            # Token might be invalid
-            console.print("[bold yellow]HF_TOKEN is set but invalid. Please login...[/bold yellow]")
-        else:
-            console.print("[bold yellow]Not authenticated with Hugging Face. Please login...[/bold yellow]")
+        console.print("[bold yellow]Not authenticated with Hugging Face. Please login...[/bold yellow]")
 
         try:
-            login(token=token)
+            login()
             # Verify login worked
             user_info = whoami()
             # Handle both dict and object return types
@@ -108,7 +100,7 @@ def _ensure_hf_authenticated() -> str:
         except Exception as e:
             raise typer.BadParameter(
                 f"Hugging Face authentication failed: {e}. "
-                "Please set HF_TOKEN environment variable or run login manually."
+                "Please run login manually."
             ) from e
 
 
@@ -353,8 +345,7 @@ def push(
         )
 
     # Initialize Hugging Face API
-    token = os.getenv("HF_TOKEN")
-    api = HfApi(token=token)
+    api = HfApi()
 
     # Prepare staging directory
     console.print("[bold cyan]Preparing files for Hugging Face deployment...[/bold cyan]")

src/openenv_cli/templates/openenv_env/README.md

@@ -79,7 +79,7 @@ The `openenv push` command will:
 
 ### Prerequisites
 
-- Authenticate with Hugging Face: Set `HF_TOKEN` environment variable or the command will prompt for login
+- Authenticate with Hugging Face: The command will prompt for login if not already authenticated
 
 ### Options
 

tests/test_cli/test_push.py

@@ -371,31 +371,31 @@ def test_push_handles_missing_readme(tmp_path: Path) -> None:
         assert mock_api.upload_folder.called
 
 
-def test_push_uses_hf_token_from_env(tmp_path: Path) -> None:
-    """Test that push uses HF_TOKEN from environment if available."""
+def test_push_initializes_hf_api_without_token(tmp_path: Path) -> None:
+    """Test that push initializes HfApi without token parameter."""
     _create_test_openenv_env(tmp_path)
 
-    with patch.dict(os.environ, {"HF_TOKEN": "test-token-123"}):
-        with patch("openenv_cli.commands.push.whoami") as mock_whoami, \
-             patch("openenv_cli.commands.push.login") as mock_login, \
-             patch("openenv_cli.commands.push.HfApi") as mock_hf_api_class:
-            
-            mock_whoami.return_value = {"name": "testuser"}
-            mock_login.return_value = None  # Prevent actual login prompt
-            mock_api = MagicMock()
-            mock_hf_api_class.return_value = mock_api
-            
-            old_cwd = os.getcwd()
-            try:
-                os.chdir(str(tmp_path))
-                result = runner.invoke(app, ["push"])
-            finally:
-                os.chdir(old_cwd)
-            
-            # Verify HfApi was initialized with token
-            mock_hf_api_class.assert_called_once()
-            call_args = mock_hf_api_class.call_args
-            assert call_args.kwargs.get("token") == "test-token-123"
+    with patch("openenv_cli.commands.push.whoami") as mock_whoami, \
+         patch("openenv_cli.commands.push.login") as mock_login, \
+         patch("openenv_cli.commands.push.HfApi") as mock_hf_api_class:
+        
+        mock_whoami.return_value = {"name": "testuser"}
+        mock_login.return_value = None  # Prevent actual login prompt
+        mock_api = MagicMock()
+        mock_hf_api_class.return_value = mock_api
+        
+        old_cwd = os.getcwd()
+        try:
+            os.chdir(str(tmp_path))
+            result = runner.invoke(app, ["push"])
+        finally:
+            os.chdir(old_cwd)
+        
+        # Verify HfApi was initialized without token parameter
+        mock_hf_api_class.assert_called_once()
+        call_args = mock_hf_api_class.call_args
+        # Should not have token in kwargs
+        assert "token" not in (call_args.kwargs or {})
 
 
 def test_push_validates_repo_id_format(tmp_path: Path) -> None: