hngr 0.2.0 → 0.3.0

package/dist/{commands-BchmocR_.mjs → commands-BHXSZ04F.mjs}

@@ -1,4 +1,4 @@
-import { t as commandCatalog } from "./catalog-jU0-wzh3.mjs";
+import { t as commandCatalog } from "./catalog-DbGLqQ8a.mjs";
 // src/commands/commands.ts
 function run(ctx) {
 	const catalog = commandCatalog();

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { a as kebabCase, i as normalizeCommandName, n as COMMANDS, o as COMMAND_ALIASES, r as findCommand, t as commandCatalog } from "./catalog-jU0-wzh3.mjs";
+import { a as kebabCase, i as normalizeCommandName, n as COMMANDS, o as COMMAND_ALIASES, r as findCommand, t as commandCatalog } from "./catalog-DbGLqQ8a.mjs";
 import { C as renderError, S as HngrError, c as redactUrlForDisplay, g as resolveConnection, i as buildRequestUrl, o as redactQuery, r as apiRequest, s as redactSensitive, u as DEFAULT_SERVER_URL, x as CancelledError } from "./http-2HWxLIOq.mjs";
 import { t as collectPages } from "./pagination-BbKLKSw3.mjs";
 import { createRequire } from "node:module";
@@ -5279,7 +5279,7 @@ function isYargsInstance(y) {
 // ../../node_modules/.pnpm/yargs@18.2.0/node_modules/yargs/index.mjs
 const Yargs = YargsFactory(esm_default);
 // package.json
-var version = "0.2.0";
+var version = "0.3.0";
 // src/generated/completion.ts
 function isCompletionShell(value) {
 	return value === "bash" || value === "zsh" || value === "fish";
@@ -6911,24 +6911,26 @@ function buildParser(onMatched) {
 	parser.command("commands", "Print the command catalog", () => {}, (argv) => {
 		onMatched({
 			argv,
-			run: async (ctx) => (await import("./commands-BchmocR_.mjs")).run(ctx)
+			run: async (ctx) => (await import("./commands-BHXSZ04F.mjs")).run(ctx)
 		});
 	});
 	parser.command("auth", "Manage credentials", (auth) => {
-		auth.command("login", "Log in with username and password and mint an access token", (login) => login.option("token", {
+		auth.command("login", "Log in through the browser device flow, or with --password / --token", (login) => login.option("password", {
+			type: "boolean",
+			describe: "Prompt for a username and password instead of the device flow"
+		}).option("token", {
 			type: "boolean",
-			default: false,
 			describe: "Read an access token from stdin instead of prompting"
-		}), (argv) => {
+		}).conflicts("password", "token"), (argv) => {
 			onMatched({
 				argv,
-				run: async (ctx, matchedArgv) => (await import("./auth-BT8HuCif.mjs")).login(ctx, matchedArgv)
+				run: async (ctx, matchedArgv) => (await import("./auth-CgBUQUQn.mjs")).login(ctx, matchedArgv)
 			});
 		});
 		auth.command("logout", "Revoke the stored token and delete the local config", () => {}, (argv) => {
 			onMatched({
 				argv,
-				run: async (ctx) => (await import("./auth-BT8HuCif.mjs")).logout(ctx)
+				run: async (ctx) => (await import("./auth-CgBUQUQn.mjs")).logout(ctx)
 			});
 		});
 		auth.command("status", "Show credential source, server, principal and token prefix", (status) => status.option("offline", {
@@ -6938,19 +6940,19 @@ function buildParser(onMatched) {
 		}), (argv) => {
 			onMatched({
 				argv,
-				run: async (ctx, matchedArgv) => (await import("./auth-BT8HuCif.mjs")).status(ctx, matchedArgv)
+				run: async (ctx, matchedArgv) => (await import("./auth-CgBUQUQn.mjs")).status(ctx, matchedArgv)
 			});
 		});
 		auth.command("token", "Print the access token to stdout and nothing else", () => {}, (argv) => {
 			onMatched({
 				argv,
-				run: async (ctx) => (await import("./auth-BT8HuCif.mjs")).token(ctx)
+				run: async (ctx) => (await import("./auth-CgBUQUQn.mjs")).token(ctx)
 			});
 		});
 		auth.command("whoami", "Print the GET /me payload", () => {}, (argv) => {
 			onMatched({
 				argv,
-				run: async (ctx) => (await import("./auth-BT8HuCif.mjs")).whoami(ctx)
+				run: async (ctx) => (await import("./auth-CgBUQUQn.mjs")).whoami(ctx)
 			});
 		});
 		registerGeneratedAuth(auth, onMatched);
@@ -6984,7 +6986,7 @@ function buildParser(onMatched) {
 		}), (argv) => {
 			onMatched({
 				argv,
-				run: async (ctx, matchedArgv) => (await import("./skills-DwoDzsXd.mjs")).add(ctx, matchedArgv)
+				run: async (ctx, matchedArgv) => (await import("./skills-XDbBCC5f.mjs")).add(ctx, matchedArgv)
 			});
 		});
 		skills.command("publish <paths..>", "Publish a local skill directory as a capability or a new version", (publish) => publish.option("namespace", {
@@ -7002,11 +7004,9 @@ function buildParser(onMatched) {
 		}).option("readme", {
 			type: "string",
 			describe: "Markdown file to attach as the README"
-		}).option("tag", {
+		}).option("category", {
 			type: "string",
-			array: true,
-			nargs: 1,
-			describe: "Capability tag (repeatable, at most eight)"
+			describe: "Category slug in the target namespace (create only; resolved even with --dry-run)"
 		}).option("new", {
 			type: "boolean",
 			default: false,
@@ -7014,7 +7014,7 @@ function buildParser(onMatched) {
 		}), (argv) => {
 			onMatched({
 				argv,
-				run: async (ctx, matchedArgv) => (await import("./skills-DwoDzsXd.mjs")).publish(ctx, matchedArgv)
+				run: async (ctx, matchedArgv) => (await import("./skills-XDbBCC5f.mjs")).publish(ctx, matchedArgv)
 			});
 		});
 		return skills.demandCommand(1);
@@ -7036,7 +7036,7 @@ function buildParser(onMatched) {
 		}), (argv) => {
 			onMatched({
 				argv,
-				run: async (ctx, matchedArgv) => (await import("./mcp-DeWHHgQK.mjs")).add(ctx, matchedArgv)
+				run: async (ctx, matchedArgv) => (await import("./mcp-b6bE3ZRt.mjs")).add(ctx, matchedArgv)
 			});
 		});
 		mcp.command("publish <paths..>", "Publish an MCP snapshot as a capability or a new version", (publish) => publish.option("namespace", {
@@ -7054,11 +7054,9 @@ function buildParser(onMatched) {
 		}).option("readme", {
 			type: "string",
 			describe: "Markdown file to attach as the README"
-		}).option("tag", {
+		}).option("category", {
 			type: "string",
-			array: true,
-			nargs: 1,
-			describe: "Capability tag (repeatable, at most eight)"
+			describe: "Category slug in the target namespace (create only; resolved even with --dry-run)"
 		}).option("new", {
 			type: "boolean",
 			default: false,
@@ -7066,7 +7064,7 @@ function buildParser(onMatched) {
 		}), (argv) => {
 			onMatched({
 				argv,
-				run: async (ctx, matchedArgv) => (await import("./mcp-DeWHHgQK.mjs")).publish(ctx, matchedArgv)
+				run: async (ctx, matchedArgv) => (await import("./mcp-b6bE3ZRt.mjs")).publish(ctx, matchedArgv)
 			});
 		});
 		return mcp.demandCommand(1);

package/dist/{mcp-DeWHHgQK.mjs → mcp-b6bE3ZRt.mjs}

@@ -1,5 +1,5 @@
 import { S as HngrError, b as writeFileAtomically, g as resolveConnection, s as redactSensitive, t as apiFetch } from "./http-2HWxLIOq.mjs";
-import { _ as resolveCapabilityVersion, a as failedResult, c as stringValues, f as downloadContent, g as resolveCapability, h as parseCapabilityPath, i as errorBody, l as AGENTS, n as readPublishFlags, o as positionalPaths, p as MCP_KIND, r as runPublish, s as runBatch, t as explicitName, u as findAgentDefinition } from "./publish-D7zaQl9x.mjs";
+import { _ as resolveCapabilityVersion, a as failedResult, c as stringValues, f as downloadContent, g as resolveCapability, h as parseCapabilityPath, i as errorBody, l as AGENTS, n as readPublishFlags, o as positionalPaths, p as MCP_KIND, r as runPublish, s as runBatch, t as explicitName, u as findAgentDefinition } from "./publish-EUqgdp0G.mjs";
 import { constants } from "node:fs";
 import { access, readFile, stat } from "node:fs/promises";
 import { basename, delimiter, isAbsolute, join, relative, resolve, sep } from "node:path";
@@ -517,7 +517,7 @@ function mcpPrepared(config, metadata) {
 			visibility: metadata.visibility
 		};
 		if (metadata.readme !== void 0) body.readme = metadata.readme;
-		if (metadata.tags.length > 0) body.tags = metadata.tags;
+		if (metadata.category !== void 0) body.category = metadata.category;
 		body.config = config;
 		return body;
 	};
@@ -536,7 +536,7 @@ function mcpPrepared(config, metadata) {
 			if (metadata.description !== void 0) preview.description = metadata.description;
 			preview.visibility = metadata.visibility;
 			if (metadata.readme !== void 0) preview.readme = metadata.readme;
-			if (metadata.tags.length > 0) preview.tags = metadata.tags;
+			if (metadata.category !== void 0) preview.category = metadata.category;
 			preview.config = `<${serverCount} server${serverCount === 1 ? "" : "s"}>`;
 			return preview;
 		},
@@ -569,7 +569,7 @@ function defaultMcpName(file) {
 async function publish(ctx, argv) {
 	const rawPaths = positionalPaths(argv.paths);
 	if (rawPaths.length === 0) throw usage("No MCP snapshot given", "Pass one or more JSON snapshot files.");
-	const flags = await readPublishFlags(argv, "mcp");
+	const flags = await readPublishFlags(argv);
 	const forcedName = explicitName(argv, rawPaths.length);
 	const items = rawPaths.map((file) => ({
 		name: forcedName ?? defaultMcpName(file),

package/dist/{publish-D7zaQl9x.mjs → publish-EUqgdp0G.mjs}

@@ -368,6 +368,7 @@ async function runBatch(options) {
 	};
 }
 // src/commands/publish.ts
+const CATEGORIES_PATH = "/api/v1/categories";
 const VISIBILITIES = [
 	"public",
 	"internal",
@@ -397,21 +398,15 @@ async function readOptionalFile(path) {
 	}
 }
 /** Reads the shared publish flags; a bad value fails before any request. */
-async function readPublishFlags(argv, kind) {
+async function readPublishFlags(argv) {
 	const visibility = stringFlag(argv, "visibility") ?? "private";
 	if (!VISIBILITIES.includes(visibility)) throw usage(`Invalid --visibility ${JSON.stringify(visibility)}`, `Use one of: ${VISIBILITIES.join(", ")}.`);
-	const tags = stringValues(argv.tag);
-	if (tags.length > 8) throw usage("Too many --tag values", "At most eight tags are allowed.");
-	for (const tag of tags) {
-		if (tag.trim() === "") throw usage("Empty --tag value", "Pass a non-empty tag.");
-		if (kind === "skill" && tag.includes(",")) throw usage(`Invalid --tag ${JSON.stringify(tag)}`, "A Skill tag cannot contain a comma; the multipart form joins tags with commas.");
-	}
 	return {
 		namespace: stringFlag(argv, "namespace") ?? "system",
 		description: stringFlag(argv, "description"),
 		visibility,
 		readme: await readOptionalFile(stringFlag(argv, "readme")),
-		tags,
+		category: stringFlag(argv, "category"),
 		forceNew: argv.new === true
 	};
 }
@@ -424,6 +419,39 @@ function explicitName(argv, targetCount) {
 function asRecord(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
+/** Reads one taxonomy page and narrows the fields resolution needs. */
+async function categoryPage(connection, namespace, query) {
+	const body = await apiGet(connection, CATEGORIES_PATH, {
+		namespace,
+		limit: 200,
+		...query === void 0 ? {} : { q: query }
+	});
+	const items = asRecord(body)?.items;
+	if (!Array.isArray(items)) throw new HngrError({
+		type: "api",
+		title: "The server returned an unexpected response shape",
+		detail: `Expected {items: [...], truncated: ...} from GET ${CATEGORIES_PATH}.`
+	});
+	return {
+		slugs: items.map((item) => asRecord(item)?.slug).filter((value) => typeof value === "string"),
+		truncated: asRecord(body)?.truncated === true
+	};
+}
+/**
+* Resolves a Category slug against the target Namespace's taxonomy. A slug the
+* Namespace does not own is a usage error; any transport or HTTP failure
+* propagates, so the caller never uploads after a failed lookup. A truncated
+* first page is re-queried by slug, and only an exact match counts, so a large
+* taxonomy does not turn a valid Category into an unknown one.
+*/
+async function resolveCategorySlug(connection, namespace, slug) {
+	const first = await categoryPage(connection, namespace);
+	if (first.slugs.includes(slug)) return slug;
+	if (first.truncated) {
+		if ((await categoryPage(connection, namespace, slug)).slugs.includes(slug)) return slug;
+	}
+	throw usage(`Unknown --category ${JSON.stringify(slug)}`, first.slugs.length > 0 ? `Available in ${namespace}: ${first.slugs.join(", ")}.` : `No Categories exist in the ${namespace} namespace.`);
+}
 function printPreview(ctx, kind, namespace, name, preview) {
 	ctx.detail(`dry-run: would publish ${kind} ${namespace}/${name}`);
 	for (const [key, value] of Object.entries(preview)) {
@@ -439,6 +467,7 @@ function printPreview(ctx, kind, namespace, name, preview) {
 async function runPublish(options) {
 	const { ctx } = options;
 	const connection = await resolveConnection(ctx.flags, ctx.env);
+	if (options.category !== void 0) await resolveCategorySlug(connection, options.namespace, options.category);
 	const results = [];
 	for (const item of options.items) {
 		const base = {
@@ -459,7 +488,7 @@ async function runPublish(options) {
 				description: options.description,
 				visibility: options.visibility,
 				readme: options.readme,
-				tags: options.tags
+				category: options.category
 			};
 			const prepared = await item.prepare(metadata);
 			if (ctx.flags.dryRun) {
@@ -475,6 +504,7 @@ async function runPublish(options) {
 				name: item.name
 			}, options.info);
 			if (existing !== null && options.forceNew) throw usage(`The ${options.info.noun} ${options.namespace}/${item.name} already exists`, "Drop --new to publish a new version of it.");
+			if (existing !== null && options.category !== void 0) throw usage(`Cannot change the category of the existing ${options.info.noun} ${options.namespace}/${item.name}`, "Drop --category to publish a new version; change the category in the Web console.");
 			let response;
 			let mode;
 			if (existing !== null) {

package/dist/{skills-DwoDzsXd.mjs → skills-XDbBCC5f.mjs}

@@ -1,5 +1,5 @@
 import { S as HngrError, g as resolveConnection, r as apiRequest, y as writeDirectoryAtomically } from "./http-2HWxLIOq.mjs";
-import { _ as resolveCapabilityVersion, a as failedResult, c as stringValues, d as homeDir, f as downloadContent, g as resolveCapability, h as parseCapabilityPath, i as errorBody, l as AGENTS, m as SKILL_KIND, n as readPublishFlags, o as positionalPaths, r as runPublish, s as runBatch, t as explicitName } from "./publish-D7zaQl9x.mjs";
+import { _ as resolveCapabilityVersion, a as failedResult, c as stringValues, d as homeDir, f as downloadContent, g as resolveCapability, h as parseCapabilityPath, i as errorBody, l as AGENTS, m as SKILL_KIND, n as readPublishFlags, o as positionalPaths, r as runPublish, s as runBatch, t as explicitName } from "./publish-EUqgdp0G.mjs";
 import { lstat, mkdir, readFile, readdir, rename, rm, symlink, writeFile } from "node:fs/promises";
 import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { randomUUID } from "node:crypto";
@@ -784,9 +784,9 @@ function skillPrepared(pkg, metadata) {
 			name: "readme",
 			value: metadata.readme
 		});
-		if (metadata.tags.length > 0) parts.push({
-			name: "tags",
-			value: metadata.tags.join(",")
+		if (metadata.category !== void 0) parts.push({
+			name: "category",
+			value: metadata.category
 		});
 		parts.push(packagePart(pkg, metadata.name));
 		return parts;
@@ -809,7 +809,7 @@ function skillPrepared(pkg, metadata) {
 			if (metadata.description !== void 0) preview.description = metadata.description;
 			preview.visibility = metadata.visibility;
 			if (metadata.readme !== void 0) preview.readme = metadata.readme;
-			if (metadata.tags.length > 0) preview.tags = metadata.tags.join(",");
+			if (metadata.category !== void 0) preview.category = metadata.category;
 			preview.package = `<${pkg.fileCount} files, ${pkg.byteCount} bytes>`;
 			return preview;
 		},
@@ -828,7 +828,7 @@ function skillPrepared(pkg, metadata) {
 async function publish(ctx, argv) {
 	const rawPaths = positionalPaths(argv.paths);
 	if (rawPaths.length === 0) throw usage("No skill directory given", "Pass one or more local directories that contain SKILL.md.");
-	const flags = await readPublishFlags(argv, "skill");
+	const flags = await readPublishFlags(argv);
 	const forcedName = explicitName(argv, rawPaths.length);
 	const items = rawPaths.map((dir) => ({
 		name: forcedName ?? basename(resolve(dir)),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hngr",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "The Hangar CLI: install skills and MCP servers into coding agents, and drive the Management API.",
   "keywords": [
     "hangar",