@numa-tech/numa 1.12.10 → 1.13.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@numa-tech/numa",
-  "version": "1.12.10",
+  "version": "1.13.0",
   "description": "Cross-platform CLI for the Numa internal developer platform with Keycloak authentication and MCP support.",
   "author": "numa-tech",
   "keywords": [
@@ -32,7 +32,7 @@
     "typecheck": "turbo run typecheck root:typecheck",
     "root:typecheck": "tsc --noEmit",
     "test": "turbo run test root:test",
-    "root:test": "node --import tsx --test src/branding.test.ts src/app-config.test.ts src/platform-profile.test.ts src/identity.test.ts src/backend.test.ts src/oauth.test.ts src/web-console.test.ts src/cli-options.test.ts src/ai-registry/client.test.ts src/ai-registry/workspace.test.ts src/ai-registry/namespace.test.ts src/ai-registry/sync.test.ts src/ai-registry/bridge.test.ts src/ai-registry/skill-installer.test.ts src/ai-registry/mcp-installer.test.ts src/media/client.test.ts src/media/commands.test.ts src/media/transfers.test.ts src/pipeline/client.test.ts src/pipeline/commands.test.ts src/application-candidates/client.test.ts src/application-candidates/commands.test.ts src/application-onboarding/client.test.ts src/application-onboarding/commands.test.ts src/application-onboarding/tui.test.ts src/chatgpt-desktop.test.ts src/codex-integration.test.ts scripts/release-all.test.mjs",
+    "root:test": "node --import tsx --test src/branding.test.ts src/app-config.test.ts src/platform-profile.test.ts src/identity.test.ts src/backend.test.ts src/oauth.test.ts src/web-console.test.ts src/cli-options.test.ts src/ai-registry/client.test.ts src/ai-registry/workspace.test.ts src/ai-registry/namespace.test.ts src/ai-registry/sync.test.ts src/ai-registry/bridge.test.ts src/ai-registry/skill-installer.test.ts src/ai-registry/mcp-installer.test.ts src/media/client.test.ts src/media/commands.test.ts src/media/transfers.test.ts src/pipeline/client.test.ts src/pipeline/commands.test.ts src/gitops/client.test.ts src/gitops/commands.test.ts src/repositories/client.test.ts src/repositories/commands.test.ts src/clusters/client.test.ts src/clusters/commands.test.ts src/clusters/kubeconfig-discovery.test.ts src/authorization/client.test.ts src/authorization/commands.test.ts src/authorization/access-request-client.test.ts src/authorization/access-request-commands.test.ts src/application-candidates/client.test.ts src/application-candidates/commands.test.ts src/application-onboarding/client.test.ts src/application-onboarding/commands.test.ts src/application-onboarding/tui.test.ts src/chatgpt-desktop.test.ts src/codex-integration.test.ts scripts/release-all.test.mjs",
     "pack:check": "turbo run pack:check root:pack:check",
     "root:pack:check": "node scripts/check-root-package.mjs",
     "boundaries": "node scripts/check-workspace-boundaries.mjs",
@@ -55,8 +55,8 @@
   "dependencies": {
     "@clack/prompts": "^1.7.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@numa-tech/cli-auth": "1.12.10",
-    "@tokensrc/codex": "1.12.10",
+    "@numa-tech/cli-auth": "1.13.0",
+    "@tokensrc/codex": "1.13.0",
     "commander": "^14.0.3",
     "ink": "^6.8.0",
     "open": "^10.2.0",

package/skills/numa-ai-registry/SKILL.md

@@ -5,7 +5,7 @@ description: Use Numa to discover, lock, sync, install, review, publish, or trou
 
 # Numa AI Registry
 
-Use `numa registry` as the typed control plane. Never request or pass a Nacos access token: Numa authenticates the user with Keycloak, the platform brokers Nacos access, and MCP clients connect only to the authorized enterprise Router.
+Use `numa registry` as the typed control plane, `numa skills` for Skill resources, and `numa mcp` for MCP resources. Never request or pass a Nacos access token: Numa authenticates the user with Keycloak, the platform brokers Nacos access, and MCP clients connect only to the authorized enterprise Router.
 
 ## Start safely
 
@@ -19,16 +19,16 @@ Use `numa registry` as the typed control plane. Never request or pass a Nacos ac
 
 For Skills, list and inspect the exact name. For MCP Servers, inspect the exact version, tools, and transport before installing. Summarize the resolved namespace/instance, resource/version, lifecycle state, Router status, and intended client before a write.
 
-Use the command forms in [command-contract.md](references/command-contract.md). Run `numa registry --help` if the installed CLI differs from the reference.
+Use the command forms in [command-contract.md](references/command-contract.md). Run `numa registry --help`, `numa skills --help`, or `numa mcp --help` if the installed CLI differs from the reference.
 
 ## Lock and install
 
 - Prefer a committed `.numa/registry.json`: run `registry init`, edit resource targets, then `registry lock` and `registry sync`. Commit both manifest and lock when repository policy permits.
 - Treat `.numa/registry.lock.json` as authoritative during `sync`. Resolve labels only on first install/`lock` or explicit `upgrade`; never turn `sync` into an implicit upgrade.
 - Verify exact version, Nacos source binding, and SHA-256 before install. Stop on a namespace/instance mismatch or integrity failure.
-- Install Skills with `registry skill install` for one-off additions. Default to project scope; use user scope only for capabilities intentionally shared across workspaces.
-- Install MCP with `registry mcp install`. Require a `READY` namespace Router and a successful health check. Install the Router endpoint, never a direct Nacos/downstream endpoint.
-- Use Remote Streamable HTTP OAuth for ChatGPT and other capable clients. Use `registry mcp bridge` only for stdio clients; it reuses Numa login/refresh and sends the user token only to the Router.
+- Install Skills with `numa skills install` for one-off additions. Default to project scope; use user scope only for capabilities intentionally shared across workspaces.
+- Install MCP with `numa mcp install`. Require a `READY` namespace Router and a successful health check. Install the Router endpoint, never a direct Nacos/downstream endpoint.
+- Use Remote Streamable HTTP OAuth for ChatGPT and other capable clients. Use `numa mcp bridge` only for stdio clients; it reuses Numa login/refresh and sends the user token only to the Router.
 - Reject literal credentials in Nacos definitions. Sensitive downstream configuration must use secret/environment references and must not enter manifest, lock, logs, or output.
 - Do not use `--force` automatically. Explain the collision, then use it only after the user authorizes replacement. Numa preserves a backup for JSON/Skill replacements where supported.
 - ChatGPT Skill installation targets the ChatGPT/Codex coding workspace. ChatGPT MCP uses the Router's remote HTTPS OAuth resource and guided App setup; it cannot launch the local stdio bridge. Do not claim that Numa edited ChatGPT workspace settings.

package/skills/numa-ai-registry/evals/evals.json

@@ -28,7 +28,7 @@
       "expectations": [
         "Inspects the MCP definition before installation, checks for literal credentials, and verifies Router health.",
         "Does not expose or install the direct Nacos/downstream endpoint and does not claim ChatGPT settings were changed.",
-        "Uses the remote HTTPS OAuth Router for ChatGPT and offers registry mcp bridge for the Claude stdio adapter."
+        "Uses the remote HTTPS OAuth Router for ChatGPT and offers numa mcp bridge for the Claude stdio adapter."
       ]
     }
   ]

package/skills/numa-ai-registry/references/command-contract.md

@@ -36,17 +36,17 @@ Instance JSON configures separate `READER` and `MAINTAINER` credentials (OIDC cl
 ## Skills
 
 ```bash
-numa registry skill list --namespace NAMESPACE --search TEXT --json
-numa registry skill inspect NAME --namespace NAMESPACE --json
-numa registry skill draft NAME --from-version 1.0.0 --json
-numa registry skill install NAME --namespace NAMESPACE --agent AGENT --scope project --label latest --json
-numa registry skill upload ./skill.zip --namespace NAMESPACE --target-version 1.0.0 --json
-numa registry skill online NAME --namespace NAMESPACE --json
-numa registry skill offline NAME --namespace NAMESPACE --json
-numa registry skill scope NAME PRIVATE --namespace NAMESPACE --json
-numa registry skill tags NAME deploy java --namespace NAMESPACE --json
-numa registry skill labels NAME latest stable --version 1.2.0 --json
-numa registry skill delete NAME --namespace NAMESPACE --yes --json
+numa skills list --namespace NAMESPACE --search TEXT --json
+numa skills inspect NAME --namespace NAMESPACE --json
+numa skills draft NAME --from-version 1.0.0 --json
+numa skills install NAME --namespace NAMESPACE --agent AGENT --scope project --label latest --json
+numa skills upload ./skill.zip --namespace NAMESPACE --target-version 1.0.0 --json
+numa skills online NAME --namespace NAMESPACE --json
+numa skills offline NAME --namespace NAMESPACE --json
+numa skills scope NAME PRIVATE --namespace NAMESPACE --json
+numa skills tags NAME deploy java --namespace NAMESPACE --json
+numa skills labels NAME latest stable --version 1.2.0 --json
+numa skills delete NAME --namespace NAMESPACE --yes --json
 ```
 
 Skill agents: `chatgpt`, `codex`, `claude`, `cursor`, `workbuddy`, `openclaw`, `agents`, or `custom`. A custom target also needs `--custom-root`.
@@ -54,17 +54,17 @@ Skill agents: `chatgpt`, `codex`, `claude`, `cursor`, `workbuddy`, `openclaw`, `
 ## MCP Servers
 
 ```bash
-numa registry mcp list --namespace NAMESPACE --search TEXT --json
-numa registry mcp inspect NAME --namespace NAMESPACE --version 1.0.0 --json
-numa registry mcp install NAME --namespace NAMESPACE --agent AGENT --scope project --transport remote --json
-numa registry mcp bridge --namespace NAMESPACE
-numa registry mcp create ./mcp.json --namespace NAMESPACE --json
-numa registry mcp update NAME ./mcp.json --namespace NAMESPACE --json
-numa registry mcp online NAME --version 1.0.0 --json
-numa registry mcp offline NAME --version 1.0.0 --json
-numa registry mcp tags NAME internal search --json
-numa registry mcp tool disable NAME TOOL --version 3 --json
-numa registry mcp delete NAME --namespace NAMESPACE --version 1.0.0 --yes --json
+numa mcp list --namespace NAMESPACE --search TEXT --json
+numa mcp inspect NAME --namespace NAMESPACE --version 1.0.0 --json
+numa mcp install NAME --namespace NAMESPACE --agent AGENT --scope project --transport remote --json
+numa mcp bridge --namespace NAMESPACE
+numa mcp create ./mcp.json --namespace NAMESPACE --json
+numa mcp update NAME ./mcp.json --namespace NAMESPACE --json
+numa mcp online NAME --version 1.0.0 --json
+numa mcp offline NAME --version 1.0.0 --json
+numa mcp tags NAME internal search --json
+numa mcp tool disable NAME TOOL --version 3 --json
+numa mcp delete NAME --namespace NAMESPACE --version 1.0.0 --yes --json
 ```
 
 MCP agents: `chatgpt`, `codex`, `claude`, `cursor`, `workbuddy`, `openclaw`, or `custom`. A custom target also needs `--custom-config`. All clients receive the enterprise Router, never the Nacos/downstream endpoint. ChatGPT uses remote HTTPS OAuth; stdio clients may use the bridge. Codex and OpenClaw are user-scoped.