happyskills 0.37.0 → 0.38.0

package/CHANGELOG.md

@@ -7,6 +7,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
 
 ## [Unreleased]
 
+## [0.38.0] - 2026-05-01
+
+### Changed
+- **BREAKING:** Make `--limit` required for the `search` command — there is no default. Running `happyskills search ...` without `--limit` now returns a usage error (exit code 2). The previous hidden default of 10 caused AI-agent callers to miss results without realizing a limit was being applied. Affects both smart-search and `--exact` keyword modes. Update help text and all examples to show `--limit` explicitly.
+
+### Fixed
+- Fix `search --workspace <slug>` (in browse mode with no query, and in `--exact` keyword mode) silently excluding private skills the caller has access to. The CLI was omitting the auth token when only `--workspace` was specified without `--mine` or `--personal`, causing the API to fall back to public-only results. The auth token is now always attached when one is available, regardless of the search mode.
+
 ## [0.37.0] - 2026-04-25
 
 ### Added

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "happyskills",
-	"version": "0.37.0",
+	"version": "0.38.0",
 	"description": "Package manager for AI agent skills",
 	"license": "SEE LICENSE IN LICENSE",
 	"author": "Nicolas Dao <nic@cloudlesslabs.com> (https://cloudlesslabs.com)",

package/src/api/repos.js

@@ -10,8 +10,7 @@ const search = (query, options = {}) => catch_errors('Search failed', async () =
 	if (options.workspace) params.set('workspace', options.workspace)
 	if (options.tags) params.set('tags', options.tags)
 	if (options.type) params.set('type', options.type)
-	const needs_auth = options.scope && options.scope !== 'public'
-	const [errors, data] = await client.get(`/repos/search?${params}`, { auth: needs_auth || false })
+	const [errors, data] = await client.get(`/repos/search?${params}`)
 	if (errors) throw errors[errors.length - 1]
 	return data
 })

package/src/commands/search.js

@@ -23,21 +23,21 @@ Options:
   --tags <tags>           Filter by tags (comma-separated)
   --type <type>           Filter by type (skill, kit)
   --exact                 Use keyword-only matching instead of smart search
-  --limit <n>             Max results (default: 10, max: 50)
+  --limit <n>             Max results (required, 1-50)
   --min-quality <n>       Minimum quality score 0-100
   --json                  Output as JSON
 
 Aliases: s
 
 Examples:
-  happyskills search deploy
-  happyskills search "REST API with Node.js"
-  happyskills search --mine
-  happyskills search deploy --workspace acme
-  happyskills search --type kit
-  happyskills s --personal --json
+  happyskills search deploy --limit 10
+  happyskills search "REST API with Node.js" --limit 10
+  happyskills search --mine --limit 20
+  happyskills search deploy --workspace acme --limit 50
+  happyskills search --type kit --limit 10
+  happyskills s --personal --json --limit 20
   happyskills search "deploy to AWS" --limit 5
-  happyskills search deploy --exact`
+  happyskills search deploy --exact --limit 10`
 
 const QUALITY_TIERS = [
 	{ min: 80, label: 'High quality', color: cyan },
@@ -95,7 +95,7 @@ const format_smart_result = (item, index) => {
 }
 
 const run_smart_search = (args, query, options) => catch_errors('Smart search failed', async () => {
-	const limit = args.flags.limit ? parseInt(args.flags.limit) : 10
+	const limit = parseInt(args.flags.limit)
 	const capped_limit = Math.min(Math.max(limit, 1), 50)
 	const min_quality = args.flags['min-quality'] != null ? parseInt(args.flags['min-quality']) : null
 
@@ -230,6 +230,10 @@ const run = (args) => catch_errors('Search failed', async () => {
 		throw new UsageError('Please provide a search query or use --mine, --personal, or --workspace.')
 	}
 
+	if (!args.flags.limit) {
+		throw new UsageError('--limit is required. Specify the number of results you want (e.g. --limit 10).')
+	}
+
 	if (type && !VALID_SKILL_TYPES.includes(type)) {
 		throw new UsageError(`--type must be one of: ${VALID_SKILL_TYPES.join(', ')}`)
 	}

package/src/integration/cli.test.js

@@ -276,8 +276,9 @@ describe('CLI — --json: stdout is always valid JSON', () => {
 	})
 
 	it('network error produces JSON with code NETWORK_ERROR', () => {
-		// search requires a network call; localhost:0 always fails
-		const { stdout, code } = run(['search', 'anything', '--json'])
+		// search requires a network call; localhost:0 always fails.
+		// --limit is required, so it must be passed to reach the network call.
+		const { stdout, code } = run(['search', 'anything', '--json', '--limit', '10'])
 		assert.strictEqual(code, 4)
 		const out = parse_json_output(stdout, 'search --json network failure')
 		assert.strictEqual(out.error.code, 'NETWORK_ERROR')