hngr 0.3.0 → 0.4.0

package/dist/index.mjs

@@ -1,6 +1,6 @@
-import { a as kebabCase, i as normalizeCommandName, n as COMMANDS, o as COMMAND_ALIASES, r as findCommand, t as commandCatalog } from "./catalog-DbGLqQ8a.mjs";
-import { C as renderError, S as HngrError, c as redactUrlForDisplay, g as resolveConnection, i as buildRequestUrl, o as redactQuery, r as apiRequest, s as redactSensitive, u as DEFAULT_SERVER_URL, x as CancelledError } from "./http-2HWxLIOq.mjs";
-import { t as collectPages } from "./pagination-BbKLKSw3.mjs";
+import { a as kebabCase, i as normalizeCommandName, n as COMMANDS, o as COMMAND_ALIASES, r as findCommand, t as commandCatalog } from "./catalog-Bv304SXJ.mjs";
+import { C as HngrError, S as CancelledError, c as redactUrlForDisplay, g as resolveConnection, i as buildRequestUrl, o as redactQuery, r as apiRequest, s as redactSensitive, u as DEFAULT_SERVER_URL, w as renderError } from "./http-DgHX7Fux.mjs";
+import { t as collectPages } from "./pagination-BXyFxGYA.mjs";
 import { createRequire } from "node:module";
 import { notStrictEqual, strictEqual } from "assert";
 import { basename, dirname, extname, join, normalize, relative, resolve } from "path";
@@ -5279,7 +5279,7 @@ function isYargsInstance(y) {
 // ../../node_modules/.pnpm/yargs@18.2.0/node_modules/yargs/index.mjs
 const Yargs = YargsFactory(esm_default);
 // package.json
-var version = "0.3.0";
+var version = "0.4.0";
 // src/generated/completion.ts
 function isCompletionShell(value) {
 	return value === "bash" || value === "zsh" || value === "fish";
@@ -6499,6 +6499,32 @@ let u$1 = class u extends y {
 		});
 	}
 };
+let n$1 = class n extends y {
+	options;
+	cursor = 0;
+	get _selectedValue() {
+		return this.options[this.cursor];
+	}
+	changeValue() {
+		const e = this._selectedValue;
+		this.value = e === void 0 ? void 0 : e.value;
+	}
+	constructor(e) {
+		super(e, false), this.options = e.options;
+		const o = this.options.findIndex(({ value: s }) => s === e.initialValue), t = o === -1 ? 0 : o;
+		this.cursor = this.options[t]?.disabled ? findCursor(t, 1, this.options) : t, this.changeValue(), this.on("cursor", (s) => {
+			switch (s) {
+				case "left":
+				case "up":
+					this.cursor = findCursor(this.cursor, -1, this.options);
+					break;
+				case "down":
+				case "right": this.cursor = findCursor(this.cursor, 1, this.options);
+			}
+			this.changeValue();
+		});
+	}
+};
 var n = class extends y {
 	get userInputWithCursor() {
 		if (this.state === "submit") return this.userInput;
@@ -6534,6 +6560,8 @@ const S_STEP_ERROR = unicodeOr("▲", "x");
 const S_STEP_SUBMIT = unicodeOr("◇", "o");
 const S_BAR = unicodeOr("│", "|");
 const S_BAR_END = unicodeOr("└", "—");
+const S_RADIO_ACTIVE = unicodeOr("●", ">");
+const S_RADIO_INACTIVE = unicodeOr("○", " ");
 const S_CHECKBOX_ACTIVE = unicodeOr("◻", "[•]");
 const S_CHECKBOX_SELECTED = unicodeOr("◼", "[+]");
 const S_CHECKBOX_INACTIVE = unicodeOr("◻", "[ ]");
@@ -6720,7 +6748,64 @@ ${r ? styleText("cyan", S_BAR_END) : ""}
 		}
 	}
 }).prompt();
-`${styleText("dim", "↑/↓")}`, `${styleText("dim", "Enter:")}`;
+const SELECT_INSTRUCTIONS = [`${styleText("dim", "↑/↓")} to navigate`, `${styleText("dim", "Enter:")} confirm`];
+const c = (t, o) => t.includes(`
+`) ? t.split(`
+`).map((d) => o(d)).join(`
+`) : o(t);
+const select = (t) => {
+	const o = (n, m) => {
+		if (n === void 0) return "";
+		const s = n.label ?? String(n.value);
+		switch (m) {
+			case "disabled": return `${styleText("gray", S_RADIO_INACTIVE)} ${c(s, (i) => styleText("gray", i))}${n.hint ? ` ${styleText("dim", `(${n.hint ?? "disabled"})`)}` : ""}`;
+			case "selected": return `${c(s, (i) => styleText("dim", i))}`;
+			case "active": return `${styleText("green", S_RADIO_ACTIVE)} ${s}${n.hint ? ` ${styleText("dim", `(${n.hint})`)}` : ""}`;
+			case "cancelled": return `${c(s, (i) => styleText(["strikethrough", "dim"], i))}`;
+			default: return `${styleText("dim", S_RADIO_INACTIVE)} ${c(s, (i) => styleText("dim", i))}`;
+		}
+	}, d = t.showInstructions ?? true;
+	return new n$1({
+		options: t.options,
+		signal: t.signal,
+		input: t.input,
+		output: t.output,
+		initialValue: t.initialValue,
+		render() {
+			const n = t.withGuide ?? settings.withGuide, m = `${symbol(this.state)}  `, s = `${symbolBar(this.state)}  `, i = wrapTextWithPrefix(t.output, t.message, s, m), u = `${n ? `${styleText("gray", S_BAR)}
+` : ""}${i}
+`;
+			switch (this.state) {
+				case "submit": {
+					const r = n ? `${styleText("gray", S_BAR)}  ` : "";
+					return `${u}${wrapTextWithPrefix(t.output, o(this.options[this.cursor], "selected"), r)}`;
+				}
+				case "cancel": {
+					const r = n ? `${styleText("gray", S_BAR)}  ` : "";
+					return `${u}${wrapTextWithPrefix(t.output, o(this.options[this.cursor], "cancelled"), r)}${n ? `
+${styleText("gray", S_BAR)}` : ""}`;
+				}
+				default: {
+					const r = n ? `${styleText("cyan", S_BAR)}  ` : "", a = u.split(`
+`).length, p = d ? formatInstructionFooter(SELECT_INSTRUCTIONS, n) : n ? [styleText("cyan", S_BAR_END)] : [], f = p.join(`
+`), b = p.length + 1;
+					return `${u}${r}${limitOptions({
+						output: t.output,
+						cursor: this.cursor,
+						options: this.options,
+						maxItems: t.maxItems,
+						columnPadding: r.length,
+						rowPadding: a + b,
+						style: (g, x) => o(g, g.disabled ? "disabled" : x ? "active" : "inactive")
+					}).join(`
+${r}`)}
+${f}
+`;
+				}
+			}
+		}
+	}).prompt();
+};
 `${styleText("gray", S_BAR)}`;
 const text = (t) => new n({
 	validate: t.validate,
@@ -6804,6 +6889,15 @@ function clackPrompter(streams = {}) {
 				}
 			}));
 		},
+		async select(message, options, initialValue) {
+			return unwrapPrompt(await select({
+				message,
+				input,
+				output,
+				options,
+				initialValue
+			}));
+		},
 		async multiselect(message, options, initialValues = []) {
 			return unwrapPrompt(await multiselect({
 				message,
@@ -6846,7 +6940,7 @@ const GLOBAL_OPTIONS = {
 	force: {
 		type: "boolean",
 		default: false,
-		describe: "Overwrite existing targets; the only way to skip destructive confirmations",
+		describe: "Skip destructive confirmations",
 		global: true
 	},
 	"dry-run": {
@@ -6911,7 +7005,7 @@ function buildParser(onMatched) {
 	parser.command("commands", "Print the command catalog", () => {}, (argv) => {
 		onMatched({
 			argv,
-			run: async (ctx) => (await import("./commands-BHXSZ04F.mjs")).run(ctx)
+			run: async (ctx) => (await import("./commands-CLqLwQHY.mjs")).run(ctx)
 		});
 	});
 	parser.command("auth", "Manage credentials", (auth) => {
@@ -6924,35 +7018,40 @@ function buildParser(onMatched) {
 		}).conflicts("password", "token"), (argv) => {
 			onMatched({
 				argv,
-				run: async (ctx, matchedArgv) => (await import("./auth-CgBUQUQn.mjs")).login(ctx, matchedArgv)
+				run: async (ctx, matchedArgv) => (await import("./auth-ByGgd_Yn.mjs")).login(ctx, matchedArgv)
 			});
 		});
 		auth.command("logout", "Revoke the stored token and delete the local config", () => {}, (argv) => {
 			onMatched({
 				argv,
-				run: async (ctx) => (await import("./auth-CgBUQUQn.mjs")).logout(ctx)
+				run: async (ctx) => (await import("./auth-ByGgd_Yn.mjs")).logout(ctx)
 			});
 		});
-		auth.command("status", "Show credential source, server, principal and token prefix", (status) => status.option("offline", {
+		auth.command("status", "Show credential source, server, principal, token prefix and audience", (status) => status.option("offline", {
 			type: "boolean",
 			default: false,
 			describe: "Skip the live GET /me check"
 		}), (argv) => {
 			onMatched({
 				argv,
-				run: async (ctx, matchedArgv) => (await import("./auth-CgBUQUQn.mjs")).status(ctx, matchedArgv)
+				run: async (ctx, matchedArgv) => (await import("./auth-ByGgd_Yn.mjs")).status(ctx, matchedArgv)
 			});
 		});
-		auth.command("token", "Print the access token to stdout and nothing else", () => {}, (argv) => {
+		auth.command("token", "Print the access token to stdout and nothing else", (token) => token.option("audience", {
+			type: "string",
+			choices: ["management", "mcp"],
+			default: "management",
+			describe: "management prints the stored token; mcp mints a new MCP token that can read and write the catalog content you have access to, without changing the stored credential"
+		}), (argv) => {
 			onMatched({
 				argv,
-				run: async (ctx) => (await import("./auth-CgBUQUQn.mjs")).token(ctx)
+				run: async (ctx, matchedArgv) => (await import("./auth-ByGgd_Yn.mjs")).token(ctx, matchedArgv)
 			});
 		});
 		auth.command("whoami", "Print the GET /me payload", () => {}, (argv) => {
 			onMatched({
 				argv,
-				run: async (ctx) => (await import("./auth-CgBUQUQn.mjs")).whoami(ctx)
+				run: async (ctx) => (await import("./auth-ByGgd_Yn.mjs")).whoami(ctx)
 			});
 		});
 		registerGeneratedAuth(auth, onMatched);
@@ -6986,7 +7085,7 @@ function buildParser(onMatched) {
 		}), (argv) => {
 			onMatched({
 				argv,
-				run: async (ctx, matchedArgv) => (await import("./skills-XDbBCC5f.mjs")).add(ctx, matchedArgv)
+				run: async (ctx, matchedArgv) => (await import("./skills-CxMeJ5PF.mjs")).add(ctx, matchedArgv)
 			});
 		});
 		skills.command("publish <paths..>", "Publish a local skill directory as a capability or a new version", (publish) => publish.option("namespace", {
@@ -7014,7 +7113,7 @@ function buildParser(onMatched) {
 		}), (argv) => {
 			onMatched({
 				argv,
-				run: async (ctx, matchedArgv) => (await import("./skills-XDbBCC5f.mjs")).publish(ctx, matchedArgv)
+				run: async (ctx, matchedArgv) => (await import("./skills-CxMeJ5PF.mjs")).publish(ctx, matchedArgv)
 			});
 		});
 		return skills.demandCommand(1);
@@ -7036,7 +7135,7 @@ function buildParser(onMatched) {
 		}), (argv) => {
 			onMatched({
 				argv,
-				run: async (ctx, matchedArgv) => (await import("./mcp-b6bE3ZRt.mjs")).add(ctx, matchedArgv)
+				run: async (ctx, matchedArgv) => (await import("./mcp-DWF_ELDU.mjs")).add(ctx, matchedArgv)
 			});
 		});
 		mcp.command("publish <paths..>", "Publish an MCP snapshot as a capability or a new version", (publish) => publish.option("namespace", {
@@ -7064,7 +7163,7 @@ function buildParser(onMatched) {
 		}), (argv) => {
 			onMatched({
 				argv,
-				run: async (ctx, matchedArgv) => (await import("./mcp-b6bE3ZRt.mjs")).publish(ctx, matchedArgv)
+				run: async (ctx, matchedArgv) => (await import("./mcp-DWF_ELDU.mjs")).publish(ctx, matchedArgv)
 			});
 		});
 		return mcp.demandCommand(1);

package/dist/{mcp-b6bE3ZRt.mjs → mcp-DWF_ELDU.mjs}

@@ -1,5 +1,5 @@
-import { S as HngrError, b as writeFileAtomically, g as resolveConnection, s as redactSensitive, t as apiFetch } from "./http-2HWxLIOq.mjs";
-import { _ as resolveCapabilityVersion, a as failedResult, c as stringValues, f as downloadContent, g as resolveCapability, h as parseCapabilityPath, i as errorBody, l as AGENTS, n as readPublishFlags, o as positionalPaths, p as MCP_KIND, r as runPublish, s as runBatch, t as explicitName, u as findAgentDefinition } from "./publish-EUqgdp0G.mjs";
+import { C as HngrError, g as resolveConnection, s as redactSensitive, t as apiFetch, x as writeFileAtomically } from "./http-DgHX7Fux.mjs";
+import { _ as resolveCapability, a as errorBody, c as runBatch, d as findAgentDefinition, g as parseCapabilityPath, i as runPublish, l as stringValues, m as MCP_KIND, n as explicitName, o as failedResult, p as downloadContent, r as readPublishFlags, s as positionalPaths, t as resolveInstallScope, u as AGENTS, v as resolveCapabilityVersion } from "./scope-Ch6wZCgE.mjs";
 import { constants } from "node:fs";
 import { access, readFile, stat } from "node:fs/promises";
 import { basename, delimiter, isAbsolute, join, relative, resolve, sep } from "node:path";
@@ -98,31 +98,24 @@ async function userServerState(executable, name, env) {
 /**
 * Installs one user-scope server through Claude Code itself.
 * `~/.claude.json` is never edited directly: Claude Code owns that file and may
-* hold live session state. A conflicting user-scope server fails without
-* `force`; with `force` it is removed through the CLI before the new entry is
-* added, so every write still goes through Claude Code.
+* hold live session state. Re-installing replaces an existing user-scope
+* server through the CLI before the new entry is added, so every write still
+* goes through Claude Code.
 */
-async function addJsonWithClaude(env, name, config, force) {
+async function addJsonWithClaude(env, name, config) {
 	const executable = await findExecutable(EXECUTABLE, env);
 	if (!executable) throw new HngrError({
 		type: "config",
 		title: "Claude Code CLI not found",
 		detail: "`claude` must be on PATH to install user-level MCP servers; install Claude Code or use project-level (no --global) installation."
 	});
-	if (await userServerState(executable, name, env) === "present") {
-		if (!force) throw new HngrError({
-			type: "io",
-			title: `MCP server ${JSON.stringify(name)} already exists in Claude Code's user config`,
-			detail: "Pass --force to replace it."
-		});
-		await runChecked(executable, [
-			"mcp",
-			"remove",
-			"--scope",
-			"user",
-			name
-		], env, name);
-	}
+	if (await userServerState(executable, name, env) === "present") await runChecked(executable, [
+		"mcp",
+		"remove",
+		"--scope",
+		"user",
+		name
+	], env, name);
 	await runChecked(executable, [
 		"mcp",
 		"add-json",
@@ -202,8 +195,8 @@ function readTargetDocument(raw, label) {
 }
 /**
 * Merges the incoming servers into the document's `mcpServers`. Existing
-* servers and other top-level keys survive. A name collision fails unless
-* `force`, which replaces only the colliding entries.
+* servers and other top-level keys survive; a name collision is replaced, so
+* re-installing a capability is idempotent.
 */
 function mergeSnapshot(document, incoming, options) {
 	const existing = document.mcpServers;
@@ -211,21 +204,13 @@ function mergeSnapshot(document, incoming, options) {
 		if (existing === null || typeof existing !== "object" || Array.isArray(existing)) throw ioError(`"mcpServers" in ${options.label} is not an object`, "Fix the target file before installing MCP servers.");
 	}
 	const servers = { ...existing ?? {} };
-	const conflicts = [];
 	const added = [];
 	const replaced = [];
-	for (const [name, entry] of Object.entries(incoming)) if (Object.hasOwn(servers, name)) {
-		if (!options.force) {
-			conflicts.push(name);
-			continue;
-		}
+	for (const [name, entry] of Object.entries(incoming)) {
+		if (Object.hasOwn(servers, name)) replaced.push(name);
+		else added.push(name);
 		servers[name] = entry;
-		replaced.push(name);
-	} else {
-		servers[name] = entry;
-		added.push(name);
 	}
-	if (conflicts.length > 0) throw ioError(`MCP ${conflicts.length === 1 ? "server" : "servers"} already configured in ${options.label}: ${conflicts.join(", ")}`, "Pass --force to replace only the conflicting entries.");
 	return {
 		document: {
 			...document,
@@ -381,11 +366,8 @@ async function readExisting(path, label) {
 * redacted. The file is never written by dry-run, so this only affects the
 * preview.
 */
-function previewJsonTarget(plan, existing, servers, force) {
-	const merged = mergeSnapshot(readTargetDocument(existing, plan.path), servers, {
-		force,
-		label: plan.path
-	});
+function previewJsonTarget(plan, existing, servers) {
+	const merged = mergeSnapshot(readTargetDocument(existing, plan.path), servers, { label: plan.path });
 	return serializeTargetDocument(redactSensitive(merged.document));
 }
 /** Reports one target's failure without aborting the remaining targets. */
@@ -393,16 +375,13 @@ function reportTargetFailure(ctx, plan, err) {
 	const body = errorBody(err);
 	ctx.summary(`error: ${plan.agent} ${plan.path}: ${body.title}`);
 }
-async function installJsonTarget(plan, servers, force) {
+async function installJsonTarget(plan, servers) {
 	const filePath = plan.filePath;
 	if (!filePath) throw new HngrError({
 		type: "io",
 		title: `No file path configured for ${plan.agent}`
 	});
-	const merged = mergeSnapshot(readTargetDocument(await readExisting(filePath, plan.path), plan.path), servers, {
-		force,
-		label: plan.path
-	});
+	const merged = mergeSnapshot(readTargetDocument(await readExisting(filePath, plan.path), plan.path), servers, { label: plan.path });
 	await writeFileAtomically(filePath, serializeTargetDocument(merged.document), { label: plan.path });
 }
 async function addOne(ctx, connection, parsed, targets, state) {
@@ -419,7 +398,7 @@ async function addOne(ctx, connection, parsed, targets, state) {
 		let failure = null;
 		for (const plan of targets) try {
 			if (plan.kind === "json") {
-				const preview = previewJsonTarget(plan, plan.filePath ? await readExisting(plan.filePath, plan.path) : void 0, snapshot.servers, ctx.flags.force);
+				const preview = previewJsonTarget(plan, plan.filePath ? await readExisting(plan.filePath, plan.path) : void 0, snapshot.servers);
 				ctx.detail(`dry-run: would write ${plan.path}\n${preview}`);
 			} else for (const [name, entry] of Object.entries(snapshot.servers)) ctx.detail(`dry-run: claude mcp add-json --scope user ${name} ${JSON.stringify(redactSensitive(entry))}`);
 			dryTargets.push({
@@ -449,8 +428,8 @@ async function addOne(ctx, connection, parsed, targets, state) {
 	const installedTargets = [];
 	let failure = null;
 	for (const plan of targets) try {
-		if (plan.kind === "json") await installJsonTarget(plan, snapshot.servers, ctx.flags.force);
-		else for (const [name, entry] of Object.entries(snapshot.servers)) await addJsonWithClaude(ctx.env, name, entry, ctx.flags.force);
+		if (plan.kind === "json") await installJsonTarget(plan, snapshot.servers);
+		else for (const [name, entry] of Object.entries(snapshot.servers)) await addJsonWithClaude(ctx.env, name, entry);
 		installedTargets.push({
 			agent: plan.agent,
 			path: plan.path,
@@ -587,7 +566,7 @@ async function add(ctx, argv) {
 	const rawPaths = positionalPaths(argv.paths);
 	if (rawPaths.length === 0) throw usage("No capability path given", "Pass one or more `<name>` or `<namespace>/<name>` arguments.");
 	const parsedPaths = rawPaths.map(parseMcpPath);
-	const scope = argv.global === true ? "global" : "project";
+	const scope = await resolveInstallScope(ctx, argv.global === true);
 	const targets = selectMcpTargets(stringValues(argv.agent), argv.all === true, scope, process.cwd(), ctx.env);
 	const connection = await resolveConnection(ctx.flags, ctx.env);
 	let approvalHintShown = false;

package/dist/{pagination-BbKLKSw3.mjs → pagination-BXyFxGYA.mjs}

@@ -1,4 +1,4 @@
-import { S as HngrError } from "./http-2HWxLIOq.mjs";
+import { C as HngrError } from "./http-DgHX7Fux.mjs";
 // src/pagination.ts
 function asCursorPage(body, path) {
 	if (body === null || typeof body !== "object" || !Array.isArray(body.items) || !("next_cursor" in body)) throw new HngrError({

package/dist/{publish-EUqgdp0G.mjs → scope-Ch6wZCgE.mjs}

@@ -1,5 +1,5 @@
-import { S as HngrError, _ as scrubCredentials, a as toHngrError, g as resolveConnection, h as redactUrl, i as buildRequestUrl, l as apiErrorFromResponse, n as apiGet } from "./http-2HWxLIOq.mjs";
-import { t as collectPages } from "./pagination-BbKLKSw3.mjs";
+import { C as HngrError, _ as scrubCredentials, a as toHngrError, g as resolveConnection, h as redactUrl, i as buildRequestUrl, l as apiErrorFromResponse, n as apiGet } from "./http-DgHX7Fux.mjs";
+import { t as collectPages } from "./pagination-BXyFxGYA.mjs";
 import { readFile } from "node:fs/promises";
 import { homedir } from "node:os";
 import { join, resolve } from "node:path";
@@ -539,4 +539,25 @@ async function runPublish(options) {
 	ctx.writePayload({ results });
 	return results.some((result) => result.status === "failed") ? 1 : 0;
 }
-export { resolveCapabilityVersion as _, failedResult as a, stringValues as c, homeDir as d, downloadContent as f, resolveCapability as g, parseCapabilityPath as h, errorBody as i, AGENTS as l, SKILL_KIND as m, readPublishFlags as n, positionalPaths as o, MCP_KIND as p, runPublish as r, runBatch as s, explicitName as t, findAgentDefinition as u };
+// src/commands/scope.ts
+const SCOPE_OPTIONS = [{
+	value: "project",
+	label: "Project",
+	hint: "install into the current directory"
+}, {
+	value: "global",
+	label: "Global",
+	hint: "install for the current user"
+}];
+/**
+* Resolves project vs global install scope. `--global` wins without asking.
+* Without an interactive prompter the current-directory default is kept, so
+* scripts, pipes and `--json` runs never block on a prompt.
+*/
+async function resolveInstallScope(ctx, global) {
+	if (global) return "global";
+	const select = ctx.io.prompts?.select;
+	if (!select || !ctx.io.stdin.isTTY || !ctx.io.stdout.isTTY) return "project";
+	return await select("Install scope", SCOPE_OPTIONS, "project") === "global" ? "global" : "project";
+}
+export { resolveCapability as _, errorBody as a, runBatch as c, findAgentDefinition as d, homeDir as f, parseCapabilityPath as g, SKILL_KIND as h, runPublish as i, stringValues as l, MCP_KIND as m, explicitName as n, failedResult as o, downloadContent as p, readPublishFlags as r, positionalPaths as s, resolveInstallScope as t, AGENTS as u, resolveCapabilityVersion as v };

package/dist/{skills-XDbBCC5f.mjs → skills-CxMeJ5PF.mjs}

@@ -1,5 +1,5 @@
-import { S as HngrError, g as resolveConnection, r as apiRequest, y as writeDirectoryAtomically } from "./http-2HWxLIOq.mjs";
-import { _ as resolveCapabilityVersion, a as failedResult, c as stringValues, d as homeDir, f as downloadContent, g as resolveCapability, h as parseCapabilityPath, i as errorBody, l as AGENTS, m as SKILL_KIND, n as readPublishFlags, o as positionalPaths, r as runPublish, s as runBatch, t as explicitName } from "./publish-EUqgdp0G.mjs";
+import { C as HngrError, b as writeDirectoryAtomically, g as resolveConnection, r as apiRequest } from "./http-DgHX7Fux.mjs";
+import { _ as resolveCapability, a as errorBody, c as runBatch, f as homeDir, g as parseCapabilityPath, h as SKILL_KIND, i as runPublish, l as stringValues, n as explicitName, o as failedResult, p as downloadContent, r as readPublishFlags, s as positionalPaths, t as resolveInstallScope, u as AGENTS, v as resolveCapabilityVersion } from "./scope-Ch6wZCgE.mjs";
 import { lstat, mkdir, readFile, readdir, rename, rm, symlink, writeFile } from "node:fs/promises";
 import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { randomUUID } from "node:crypto";
@@ -92,13 +92,6 @@ function downloadSkillPackage(connection, capabilityId, version, signal) {
 async function pathExists(path) {
 	return lstat(path).then(() => true, () => false);
 }
-function targetExistsError(path) {
-	return new HngrError({
-		type: "io",
-		title: `Target already exists: ${path}`,
-		detail: "Pass --force to replace it."
-	});
-}
 async function writeEntries(dest, entries) {
 	await mkdir(dest, { recursive: true });
 	for (const entry of entries) {
@@ -114,25 +107,22 @@ async function writeEntries(dest, entries) {
 }
 /**
 * Writes a skill through "temp directory → validate → rename": the target is
-* either absent or complete, never half-written. `--force` moves the old
-* directory aside before the rename so a failed swap puts it back.
+* either absent or complete, never half-written. Re-installing replaces the
+* previous directory, with the old one moved aside so a failed swap puts it
+* back.
 */
-async function installAtomically(dest, entries, force) {
-	await writeDirectoryAtomically(dest, (temp) => writeEntries(temp, entries), {
-		force,
-		existsError: () => targetExistsError(dest)
-	});
+async function installAtomically(dest, entries) {
+	await writeDirectoryAtomically(dest, (temp) => writeEntries(temp, entries));
 }
 /**
 * Creates a relative symlink to the canonical directory, falling back to a
 * copy when the platform refuses the link (Windows without Developer Mode).
 * Windows prefers a junction, which does not need elevated privileges; its
 * target must be absolute. A temp link plus rename replaces an existing link
-* atomically.
+* atomically; re-installing replaces an existing directory or link.
 */
-async function linkAtomically(canonical, target, entries, force, options = {}) {
+async function linkAtomically(canonical, target, entries, options = {}) {
 	const exists = await pathExists(target);
-	if (exists && !force) throw targetExistsError(target);
 	await mkdir(dirname(target), { recursive: true });
 	const temp = resolve(dirname(target), `.hngr-${basename(target)}-${randomUUID()}.link`);
 	const windows = (options.platform ?? process.platform) === "win32";
@@ -150,7 +140,7 @@ async function linkAtomically(canonical, target, entries, force, options = {}) {
 		return { mode: "symlink" };
 	} catch {
 		await rm(temp, { force: true }).catch(() => {});
-		await installAtomically(target, entries, false);
+		await installAtomically(target, entries);
 		return {
 			mode: "copy",
 			warning: `warning: could not create a link at ${target}; copied instead`
@@ -158,8 +148,8 @@ async function linkAtomically(canonical, target, entries, force, options = {}) {
 	}
 }
 /** Copies one target directory atomically, without a canonical store. */
-async function copyAtomically(target, entries, force) {
-	await installAtomically(target, entries, force);
+async function copyAtomically(target, entries) {
+	await installAtomically(target, entries);
 }
 // src/skills/resolve.ts
 /** Parses `<name>` or `<namespace>/<name>`, with an optional `@YYYY.MM.DD.N`. */
@@ -657,16 +647,12 @@ function planInstall(cwd, env, destName, agents, options) {
 async function install(ctx, plan, entries) {
 	const cwd = process.cwd();
 	const display = (path) => displayPath(path, cwd);
-	const destinations = [plan.canonical, ...plan.targets.map((target) => target.path)].filter((path) => path !== null);
-	if (!ctx.flags.force) {
-		for (const path of destinations) if (await pathExists(path)) throw targetExistsError(display(path));
-	}
-	if (plan.canonical) await installAtomically(plan.canonical, entries, ctx.flags.force);
+	if (plan.canonical) await installAtomically(plan.canonical, entries);
 	const installed = [];
 	let failure = null;
 	for (const target of plan.targets) try {
 		if (target.mode === "copy" || !plan.canonical) {
-			await copyAtomically(target.path, entries, ctx.flags.force);
+			await copyAtomically(target.path, entries);
 			installed.push({
 				agent: target.agent,
 				path: display(target.path),
@@ -675,7 +661,7 @@ async function install(ctx, plan, entries) {
 			});
 			continue;
 		}
-		const result = await linkAtomically(plan.canonical, target.path, entries, ctx.flags.force);
+		const result = await linkAtomically(plan.canonical, target.path, entries);
 		if (result.warning) ctx.summary(result.warning);
 		installed.push({
 			agent: target.agent,
@@ -708,9 +694,6 @@ async function addOne(ctx, connection, parsed, destName, agents, dir, global, co
 	});
 	const canonicalPath = plan.canonical ? displayPath(plan.canonical, process.cwd()) : null;
 	if (ctx.flags.dryRun) {
-		if (!ctx.flags.force) {
-			for (const path of [plan.canonical, ...plan.targets.map((target) => target.path)]) if (path && await pathExists(path)) throw targetExistsError(displayPath(path, process.cwd()));
-		}
 		ctx.summary(`resolved ${parsed.namespace}/${parsed.name} to version ${version}`);
 		return { result: {
 			name: capability.name,
@@ -849,12 +832,13 @@ async function add(ctx, argv) {
 	const dir = stringFlag(argv, "dir");
 	const as = stringFlag(argv, "as");
 	if (as !== void 0 && (as.includes("/") || as.includes("\\") || as === "." || as === "..")) throw usage(`Invalid --as name ${JSON.stringify(as)}`, "Pass a single directory name.");
-	const global = argv.global === true;
+	const requestedGlobal = argv.global === true;
 	const copy = argv.copy === true;
-	if (dir !== void 0 && global) throw usage("--dir cannot be combined with --global");
+	if (dir !== void 0 && requestedGlobal) throw usage("--dir cannot be combined with --global");
 	if (dir !== void 0 && (stringValues(argv.agent).length > 0 || argv.all === true)) throw usage("--dir cannot be combined with --agent or --all");
 	if (as !== void 0) assertNotReserved(as);
 	for (const parsed of parsedPaths) assertNotReserved(as ?? parsed.name);
+	const global = dir === void 0 ? await resolveInstallScope(ctx, requestedGlobal) === "global" : false;
 	const agents = dir === void 0 ? await selectAgents(ctx, argv, rawPaths[0] ?? "", global) : [];
 	const connection = await resolveConnection(ctx.flags, ctx.env);
 	const { results, failed } = await runBatch({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hngr",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "The Hangar CLI: install skills and MCP servers into coding agents, and drive the Management API.",
   "keywords": [
     "hangar",