hngr 0.1.1 → 0.3.0

package/dist/{commands-BchmocR_.mjs → commands-BHXSZ04F.mjs}

@@ -1,4 +1,4 @@
-import { t as commandCatalog } from "./catalog-jU0-wzh3.mjs";
+import { t as commandCatalog } from "./catalog-DbGLqQ8a.mjs";
 // src/commands/commands.ts
 function run(ctx) {
 	const catalog = commandCatalog();

package/dist/{http-DpXNrkSL.mjs → http-2HWxLIOq.mjs}

@@ -161,7 +161,12 @@ async function readStoredConfig(env) {
 		});
 	}
 }
-const NO_SERVER_DETAIL = "Pass --server <url>, set HANGAR_URL, or run `hngr auth login` to store one in the config file.";
+/**
+* The instance the CLI talks to when `--server`, `HANGAR_URL` and the config
+* file are all absent. Point a deployment elsewhere with any of those.
+*/
+const DEFAULT_SERVER_URL = "http://10.199.100.24:26434";
+const INVALID_SERVER_DETAIL = "Pass --server <url>, set HANGAR_URL, or run `hngr auth login` to store one in the config file.";
 /** Parses and normalizes a server URL (no trailing slash); invalid input is a config error. */
 function normalizeServerUrl(server) {
 	let url;
@@ -171,7 +176,7 @@ function normalizeServerUrl(server) {
 		throw new HngrError({
 			type: "config",
 			title: `Invalid server URL: ${redactUrl(server)}`,
-			detail: NO_SERVER_DETAIL
+			detail: INVALID_SERVER_DETAIL
 		});
 	}
 	return url.toString().replace(/\/+$/, "");
@@ -209,16 +214,12 @@ async function deleteStoredConfig(env) {
 }
 /**
 * Resolves the server and credentials for one call: `--server` beats
-* `HANGAR_URL` beats the config file; `HANGAR_TOKEN` beats a stored token.
+* `HANGAR_URL` beats the config file beats the built-in default; `HANGAR_TOKEN`
+* beats a stored token.
 */
 async function resolveConnection(flags, env) {
 	const config = await readStoredConfig(env);
-	const server = flags.server ?? env.HANGAR_URL ?? config?.server;
-	if (!server) throw new HngrError({
-		type: "config",
-		title: "No Hangar server configured",
-		detail: NO_SERVER_DETAIL
-	});
+	const server = flags.server ?? env.HANGAR_URL ?? config?.server ?? "http://10.199.100.24:26434";
 	const token = env.HANGAR_TOKEN ?? config?.token;
 	return {
 		server: normalizeServerUrl(server),
@@ -455,4 +456,4 @@ async function apiFetch(connection, options) {
 		signal: options.signal
 	});
 }
-export { renderError as S, writeStoredConfig as _, toHngrError as a, CancelledError as b, redactUrlForDisplay as c, deleteStoredConfig as d, normalizeServerUrl as f, scrubCredentials as g, resolveConnection as h, buildRequestUrl as i, apiErrorFromResponse as l, redactUrl as m, apiGet as n, redactQuery as o, readStoredConfig as p, apiRequest as r, redactSensitive as s, apiFetch as t, configFilePath as u, writeDirectoryAtomically as v, HngrError as x, writeFileAtomically as y };
+export { renderError as C, HngrError as S, scrubCredentials as _, toHngrError as a, writeFileAtomically as b, redactUrlForDisplay as c, configFilePath as d, deleteStoredConfig as f, resolveConnection as g, redactUrl as h, buildRequestUrl as i, apiErrorFromResponse as l, readStoredConfig as m, apiGet as n, redactQuery as o, normalizeServerUrl as p, apiRequest as r, redactSensitive as s, apiFetch as t, DEFAULT_SERVER_URL as u, writeStoredConfig as v, CancelledError as x, writeDirectoryAtomically as y };

package/dist/index.mjs

@@ -1,6 +1,6 @@
-import { a as kebabCase, i as normalizeCommandName, n as COMMANDS, o as COMMAND_ALIASES, r as findCommand, t as commandCatalog } from "./catalog-jU0-wzh3.mjs";
-import { S as renderError, b as CancelledError, c as redactUrlForDisplay, h as resolveConnection, i as buildRequestUrl, o as redactQuery, r as apiRequest, s as redactSensitive, x as HngrError } from "./http-DpXNrkSL.mjs";
-import { t as collectPages } from "./pagination-DYIwy5ZX.mjs";
+import { a as kebabCase, i as normalizeCommandName, n as COMMANDS, o as COMMAND_ALIASES, r as findCommand, t as commandCatalog } from "./catalog-DbGLqQ8a.mjs";
+import { C as renderError, S as HngrError, c as redactUrlForDisplay, g as resolveConnection, i as buildRequestUrl, o as redactQuery, r as apiRequest, s as redactSensitive, u as DEFAULT_SERVER_URL, x as CancelledError } from "./http-2HWxLIOq.mjs";
+import { t as collectPages } from "./pagination-BbKLKSw3.mjs";
 import { createRequire } from "node:module";
 import { notStrictEqual, strictEqual } from "assert";
 import { basename, dirname, extname, join, normalize, relative, resolve } from "path";
@@ -5279,7 +5279,7 @@ function isYargsInstance(y) {
 // ../../node_modules/.pnpm/yargs@18.2.0/node_modules/yargs/index.mjs
 const Yargs = YargsFactory(esm_default);
 // package.json
-var version = "0.1.1";
+var version = "0.3.0";
 // src/generated/completion.ts
 function isCompletionShell(value) {
 	return value === "bash" || value === "zsh" || value === "fish";
@@ -6822,7 +6822,7 @@ const USAGE_HINT = "Run 'hngr --help' to list available commands.";
 const GLOBAL_OPTIONS = {
 	server: {
 		type: "string",
-		describe: "Override HANGAR_URL and the configured server for this call",
+		describe: `Override HANGAR_URL and the configured server for this call (default: ${DEFAULT_SERVER_URL})`,
 		global: true
 	},
 	json: {
@@ -6911,24 +6911,26 @@ function buildParser(onMatched) {
 	parser.command("commands", "Print the command catalog", () => {}, (argv) => {
 		onMatched({
 			argv,
-			run: async (ctx) => (await import("./commands-BchmocR_.mjs")).run(ctx)
+			run: async (ctx) => (await import("./commands-BHXSZ04F.mjs")).run(ctx)
 		});
 	});
 	parser.command("auth", "Manage credentials", (auth) => {
-		auth.command("login", "Log in with username and password and mint an access token", (login) => login.option("token", {
+		auth.command("login", "Log in through the browser device flow, or with --password / --token", (login) => login.option("password", {
+			type: "boolean",
+			describe: "Prompt for a username and password instead of the device flow"
+		}).option("token", {
 			type: "boolean",
-			default: false,
 			describe: "Read an access token from stdin instead of prompting"
-		}), (argv) => {
+		}).conflicts("password", "token"), (argv) => {
 			onMatched({
 				argv,
-				run: async (ctx, matchedArgv) => (await import("./auth-Bf4n5qaq.mjs")).login(ctx, matchedArgv)
+				run: async (ctx, matchedArgv) => (await import("./auth-CgBUQUQn.mjs")).login(ctx, matchedArgv)
 			});
 		});
 		auth.command("logout", "Revoke the stored token and delete the local config", () => {}, (argv) => {
 			onMatched({
 				argv,
-				run: async (ctx) => (await import("./auth-Bf4n5qaq.mjs")).logout(ctx)
+				run: async (ctx) => (await import("./auth-CgBUQUQn.mjs")).logout(ctx)
 			});
 		});
 		auth.command("status", "Show credential source, server, principal and token prefix", (status) => status.option("offline", {
@@ -6938,19 +6940,19 @@ function buildParser(onMatched) {
 		}), (argv) => {
 			onMatched({
 				argv,
-				run: async (ctx, matchedArgv) => (await import("./auth-Bf4n5qaq.mjs")).status(ctx, matchedArgv)
+				run: async (ctx, matchedArgv) => (await import("./auth-CgBUQUQn.mjs")).status(ctx, matchedArgv)
 			});
 		});
 		auth.command("token", "Print the access token to stdout and nothing else", () => {}, (argv) => {
 			onMatched({
 				argv,
-				run: async (ctx) => (await import("./auth-Bf4n5qaq.mjs")).token(ctx)
+				run: async (ctx) => (await import("./auth-CgBUQUQn.mjs")).token(ctx)
 			});
 		});
 		auth.command("whoami", "Print the GET /me payload", () => {}, (argv) => {
 			onMatched({
 				argv,
-				run: async (ctx) => (await import("./auth-Bf4n5qaq.mjs")).whoami(ctx)
+				run: async (ctx) => (await import("./auth-CgBUQUQn.mjs")).whoami(ctx)
 			});
 		});
 		registerGeneratedAuth(auth, onMatched);
@@ -6984,7 +6986,7 @@ function buildParser(onMatched) {
 		}), (argv) => {
 			onMatched({
 				argv,
-				run: async (ctx, matchedArgv) => (await import("./skills-By449rb4.mjs")).add(ctx, matchedArgv)
+				run: async (ctx, matchedArgv) => (await import("./skills-XDbBCC5f.mjs")).add(ctx, matchedArgv)
 			});
 		});
 		skills.command("publish <paths..>", "Publish a local skill directory as a capability or a new version", (publish) => publish.option("namespace", {
@@ -7002,11 +7004,9 @@ function buildParser(onMatched) {
 		}).option("readme", {
 			type: "string",
 			describe: "Markdown file to attach as the README"
-		}).option("tag", {
+		}).option("category", {
 			type: "string",
-			array: true,
-			nargs: 1,
-			describe: "Capability tag (repeatable, at most eight)"
+			describe: "Category slug in the target namespace (create only; resolved even with --dry-run)"
 		}).option("new", {
 			type: "boolean",
 			default: false,
@@ -7014,7 +7014,7 @@ function buildParser(onMatched) {
 		}), (argv) => {
 			onMatched({
 				argv,
-				run: async (ctx, matchedArgv) => (await import("./skills-By449rb4.mjs")).publish(ctx, matchedArgv)
+				run: async (ctx, matchedArgv) => (await import("./skills-XDbBCC5f.mjs")).publish(ctx, matchedArgv)
 			});
 		});
 		return skills.demandCommand(1);
@@ -7036,7 +7036,7 @@ function buildParser(onMatched) {
 		}), (argv) => {
 			onMatched({
 				argv,
-				run: async (ctx, matchedArgv) => (await import("./mcp-bi4OOz5J.mjs")).add(ctx, matchedArgv)
+				run: async (ctx, matchedArgv) => (await import("./mcp-b6bE3ZRt.mjs")).add(ctx, matchedArgv)
 			});
 		});
 		mcp.command("publish <paths..>", "Publish an MCP snapshot as a capability or a new version", (publish) => publish.option("namespace", {
@@ -7054,11 +7054,9 @@ function buildParser(onMatched) {
 		}).option("readme", {
 			type: "string",
 			describe: "Markdown file to attach as the README"
-		}).option("tag", {
+		}).option("category", {
 			type: "string",
-			array: true,
-			nargs: 1,
-			describe: "Capability tag (repeatable, at most eight)"
+			describe: "Category slug in the target namespace (create only; resolved even with --dry-run)"
 		}).option("new", {
 			type: "boolean",
 			default: false,
@@ -7066,7 +7064,7 @@ function buildParser(onMatched) {
 		}), (argv) => {
 			onMatched({
 				argv,
-				run: async (ctx, matchedArgv) => (await import("./mcp-bi4OOz5J.mjs")).publish(ctx, matchedArgv)
+				run: async (ctx, matchedArgv) => (await import("./mcp-b6bE3ZRt.mjs")).publish(ctx, matchedArgv)
 			});
 		});
 		return mcp.demandCommand(1);

package/dist/{mcp-bi4OOz5J.mjs → mcp-b6bE3ZRt.mjs}

@@ -1,5 +1,5 @@
-import { h as resolveConnection, s as redactSensitive, t as apiFetch, x as HngrError, y as writeFileAtomically } from "./http-DpXNrkSL.mjs";
-import { _ as resolveCapabilityVersion, a as failedResult, c as stringValues, f as downloadContent, g as resolveCapability, h as parseCapabilityPath, i as errorBody, l as AGENTS, n as readPublishFlags, o as positionalPaths, p as MCP_KIND, r as runPublish, s as runBatch, t as explicitName, u as findAgentDefinition } from "./publish-DHAZ9BB_.mjs";
+import { S as HngrError, b as writeFileAtomically, g as resolveConnection, s as redactSensitive, t as apiFetch } from "./http-2HWxLIOq.mjs";
+import { _ as resolveCapabilityVersion, a as failedResult, c as stringValues, f as downloadContent, g as resolveCapability, h as parseCapabilityPath, i as errorBody, l as AGENTS, n as readPublishFlags, o as positionalPaths, p as MCP_KIND, r as runPublish, s as runBatch, t as explicitName, u as findAgentDefinition } from "./publish-EUqgdp0G.mjs";
 import { constants } from "node:fs";
 import { access, readFile, stat } from "node:fs/promises";
 import { basename, delimiter, isAbsolute, join, relative, resolve, sep } from "node:path";
@@ -517,7 +517,7 @@ function mcpPrepared(config, metadata) {
 			visibility: metadata.visibility
 		};
 		if (metadata.readme !== void 0) body.readme = metadata.readme;
-		if (metadata.tags.length > 0) body.tags = metadata.tags;
+		if (metadata.category !== void 0) body.category = metadata.category;
 		body.config = config;
 		return body;
 	};
@@ -536,7 +536,7 @@ function mcpPrepared(config, metadata) {
 			if (metadata.description !== void 0) preview.description = metadata.description;
 			preview.visibility = metadata.visibility;
 			if (metadata.readme !== void 0) preview.readme = metadata.readme;
-			if (metadata.tags.length > 0) preview.tags = metadata.tags;
+			if (metadata.category !== void 0) preview.category = metadata.category;
 			preview.config = `<${serverCount} server${serverCount === 1 ? "" : "s"}>`;
 			return preview;
 		},
@@ -569,7 +569,7 @@ function defaultMcpName(file) {
 async function publish(ctx, argv) {
 	const rawPaths = positionalPaths(argv.paths);
 	if (rawPaths.length === 0) throw usage("No MCP snapshot given", "Pass one or more JSON snapshot files.");
-	const flags = await readPublishFlags(argv, "mcp");
+	const flags = await readPublishFlags(argv);
 	const forcedName = explicitName(argv, rawPaths.length);
 	const items = rawPaths.map((file) => ({
 		name: forcedName ?? defaultMcpName(file),

package/dist/{pagination-DYIwy5ZX.mjs → pagination-BbKLKSw3.mjs}

@@ -1,4 +1,4 @@
-import { x as HngrError } from "./http-DpXNrkSL.mjs";
+import { S as HngrError } from "./http-2HWxLIOq.mjs";
 // src/pagination.ts
 function asCursorPage(body, path) {
 	if (body === null || typeof body !== "object" || !Array.isArray(body.items) || !("next_cursor" in body)) throw new HngrError({

package/dist/{publish-DHAZ9BB_.mjs → publish-EUqgdp0G.mjs}

@@ -1,5 +1,5 @@
-import { a as toHngrError, g as scrubCredentials, h as resolveConnection, i as buildRequestUrl, l as apiErrorFromResponse, m as redactUrl, n as apiGet, x as HngrError } from "./http-DpXNrkSL.mjs";
-import { t as collectPages } from "./pagination-DYIwy5ZX.mjs";
+import { S as HngrError, _ as scrubCredentials, a as toHngrError, g as resolveConnection, h as redactUrl, i as buildRequestUrl, l as apiErrorFromResponse, n as apiGet } from "./http-2HWxLIOq.mjs";
+import { t as collectPages } from "./pagination-BbKLKSw3.mjs";
 import { readFile } from "node:fs/promises";
 import { homedir } from "node:os";
 import { join, resolve } from "node:path";
@@ -368,6 +368,7 @@ async function runBatch(options) {
 	};
 }
 // src/commands/publish.ts
+const CATEGORIES_PATH = "/api/v1/categories";
 const VISIBILITIES = [
 	"public",
 	"internal",
@@ -397,21 +398,15 @@ async function readOptionalFile(path) {
 	}
 }
 /** Reads the shared publish flags; a bad value fails before any request. */
-async function readPublishFlags(argv, kind) {
+async function readPublishFlags(argv) {
 	const visibility = stringFlag(argv, "visibility") ?? "private";
 	if (!VISIBILITIES.includes(visibility)) throw usage(`Invalid --visibility ${JSON.stringify(visibility)}`, `Use one of: ${VISIBILITIES.join(", ")}.`);
-	const tags = stringValues(argv.tag);
-	if (tags.length > 8) throw usage("Too many --tag values", "At most eight tags are allowed.");
-	for (const tag of tags) {
-		if (tag.trim() === "") throw usage("Empty --tag value", "Pass a non-empty tag.");
-		if (kind === "skill" && tag.includes(",")) throw usage(`Invalid --tag ${JSON.stringify(tag)}`, "A Skill tag cannot contain a comma; the multipart form joins tags with commas.");
-	}
 	return {
 		namespace: stringFlag(argv, "namespace") ?? "system",
 		description: stringFlag(argv, "description"),
 		visibility,
 		readme: await readOptionalFile(stringFlag(argv, "readme")),
-		tags,
+		category: stringFlag(argv, "category"),
 		forceNew: argv.new === true
 	};
 }
@@ -424,6 +419,39 @@ function explicitName(argv, targetCount) {
 function asRecord(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
+/** Reads one taxonomy page and narrows the fields resolution needs. */
+async function categoryPage(connection, namespace, query) {
+	const body = await apiGet(connection, CATEGORIES_PATH, {
+		namespace,
+		limit: 200,
+		...query === void 0 ? {} : { q: query }
+	});
+	const items = asRecord(body)?.items;
+	if (!Array.isArray(items)) throw new HngrError({
+		type: "api",
+		title: "The server returned an unexpected response shape",
+		detail: `Expected {items: [...], truncated: ...} from GET ${CATEGORIES_PATH}.`
+	});
+	return {
+		slugs: items.map((item) => asRecord(item)?.slug).filter((value) => typeof value === "string"),
+		truncated: asRecord(body)?.truncated === true
+	};
+}
+/**
+* Resolves a Category slug against the target Namespace's taxonomy. A slug the
+* Namespace does not own is a usage error; any transport or HTTP failure
+* propagates, so the caller never uploads after a failed lookup. A truncated
+* first page is re-queried by slug, and only an exact match counts, so a large
+* taxonomy does not turn a valid Category into an unknown one.
+*/
+async function resolveCategorySlug(connection, namespace, slug) {
+	const first = await categoryPage(connection, namespace);
+	if (first.slugs.includes(slug)) return slug;
+	if (first.truncated) {
+		if ((await categoryPage(connection, namespace, slug)).slugs.includes(slug)) return slug;
+	}
+	throw usage(`Unknown --category ${JSON.stringify(slug)}`, first.slugs.length > 0 ? `Available in ${namespace}: ${first.slugs.join(", ")}.` : `No Categories exist in the ${namespace} namespace.`);
+}
 function printPreview(ctx, kind, namespace, name, preview) {
 	ctx.detail(`dry-run: would publish ${kind} ${namespace}/${name}`);
 	for (const [key, value] of Object.entries(preview)) {
@@ -439,6 +467,7 @@ function printPreview(ctx, kind, namespace, name, preview) {
 async function runPublish(options) {
 	const { ctx } = options;
 	const connection = await resolveConnection(ctx.flags, ctx.env);
+	if (options.category !== void 0) await resolveCategorySlug(connection, options.namespace, options.category);
 	const results = [];
 	for (const item of options.items) {
 		const base = {
@@ -459,7 +488,7 @@ async function runPublish(options) {
 				description: options.description,
 				visibility: options.visibility,
 				readme: options.readme,
-				tags: options.tags
+				category: options.category
 			};
 			const prepared = await item.prepare(metadata);
 			if (ctx.flags.dryRun) {
@@ -475,6 +504,7 @@ async function runPublish(options) {
 				name: item.name
 			}, options.info);
 			if (existing !== null && options.forceNew) throw usage(`The ${options.info.noun} ${options.namespace}/${item.name} already exists`, "Drop --new to publish a new version of it.");
+			if (existing !== null && options.category !== void 0) throw usage(`Cannot change the category of the existing ${options.info.noun} ${options.namespace}/${item.name}`, "Drop --category to publish a new version; change the category in the Web console.");
 			let response;
 			let mode;
 			if (existing !== null) {

package/dist/{skills-By449rb4.mjs → skills-XDbBCC5f.mjs}

@@ -1,5 +1,5 @@
-import { h as resolveConnection, r as apiRequest, v as writeDirectoryAtomically, x as HngrError } from "./http-DpXNrkSL.mjs";
-import { _ as resolveCapabilityVersion, a as failedResult, c as stringValues, d as homeDir, f as downloadContent, g as resolveCapability, h as parseCapabilityPath, i as errorBody, l as AGENTS, m as SKILL_KIND, n as readPublishFlags, o as positionalPaths, r as runPublish, s as runBatch, t as explicitName } from "./publish-DHAZ9BB_.mjs";
+import { S as HngrError, g as resolveConnection, r as apiRequest, y as writeDirectoryAtomically } from "./http-2HWxLIOq.mjs";
+import { _ as resolveCapabilityVersion, a as failedResult, c as stringValues, d as homeDir, f as downloadContent, g as resolveCapability, h as parseCapabilityPath, i as errorBody, l as AGENTS, m as SKILL_KIND, n as readPublishFlags, o as positionalPaths, r as runPublish, s as runBatch, t as explicitName } from "./publish-EUqgdp0G.mjs";
 import { lstat, mkdir, readFile, readdir, rename, rm, symlink, writeFile } from "node:fs/promises";
 import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { randomUUID } from "node:crypto";
@@ -784,9 +784,9 @@ function skillPrepared(pkg, metadata) {
 			name: "readme",
 			value: metadata.readme
 		});
-		if (metadata.tags.length > 0) parts.push({
-			name: "tags",
-			value: metadata.tags.join(",")
+		if (metadata.category !== void 0) parts.push({
+			name: "category",
+			value: metadata.category
 		});
 		parts.push(packagePart(pkg, metadata.name));
 		return parts;
@@ -809,7 +809,7 @@ function skillPrepared(pkg, metadata) {
 			if (metadata.description !== void 0) preview.description = metadata.description;
 			preview.visibility = metadata.visibility;
 			if (metadata.readme !== void 0) preview.readme = metadata.readme;
-			if (metadata.tags.length > 0) preview.tags = metadata.tags.join(",");
+			if (metadata.category !== void 0) preview.category = metadata.category;
 			preview.package = `<${pkg.fileCount} files, ${pkg.byteCount} bytes>`;
 			return preview;
 		},
@@ -828,7 +828,7 @@ function skillPrepared(pkg, metadata) {
 async function publish(ctx, argv) {
 	const rawPaths = positionalPaths(argv.paths);
 	if (rawPaths.length === 0) throw usage("No skill directory given", "Pass one or more local directories that contain SKILL.md.");
-	const flags = await readPublishFlags(argv, "skill");
+	const flags = await readPublishFlags(argv);
 	const forcedName = explicitName(argv, rawPaths.length);
 	const items = rawPaths.map((dir) => ({
 		name: forcedName ?? basename(resolve(dir)),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hngr",
-  "version": "0.1.1",
+  "version": "0.3.0",
   "description": "The Hangar CLI: install skills and MCP servers into coding agents, and drive the Management API.",
   "keywords": [
     "hangar",