hngr 0.8.0 → 0.10.0

package/README.md

@@ -13,13 +13,13 @@ hngr --version
 ## Authenticate
 
 ```sh
-# Interactive: username and password against http://10.199.100.24:26434 (the
+# Interactive: username and password against https://hangar.paykka.com (the
 # built-in default), then an access token is written to
 # ~/.config/hngr/config.json (0600).
 hngr auth login
 
-# A different deployment. The built-in default is plain http on a private
-# network; any other host needs https:// (or an explicit --insecure).
+# A different deployment. Any non-local host needs https:// (or an explicit
+# --insecure).
 hngr auth login --server https://hangar.example.com
 
 # CI or containers: read an existing access token from stdin.
@@ -79,6 +79,26 @@ also install `system/find-capabilities` (the catalog's discovery skill, which fi
 Skills and MCP servers) for the same scope and agents; it is skipped silently when a copy
 already exists in either scope, and a failed follow-up install only prints a warning.
 
+### Lock files
+
+`hngr skills add` also updates the lock file `npx skills` reads: `skills-lock.json` (v2)
+for a project install, and `$XDG_STATE_HOME/skills/.skill-lock.json` or
+`~/.agents/.skill-lock.json` (v3) for a global one. An entry records the downloaded
+Content URL, `SKILL.md`'s path in the archive and the portable content hash, so either
+CLI can list, remove or update the install. Other entries and unknown top-level fields
+are preserved; a lock file another schema version owns is left alone with a warning.
+`--dir` installs are not tracked.
+
+Reinstall what a lock records on a fresh checkout:
+
+```sh
+hngr skills restore --agent claude-code
+hngr skills restore --global --all
+```
+
+Only entries whose source is the configured server are restored; entries another tool
+installed are reported and skipped.
+
 MCP installs ask for the same scope and then for the MCP targets to write, with an
 `All targets` entry; targets whose config already exists are preselected, and Claude
 Code's `.mcp.json` is preselected for project installs. Without a terminal, pass
@@ -110,6 +130,22 @@ hngr schema capabilities list
 hngr completion bash        # or zsh / fish
 ```
 
+## Manage sync tasks
+
+Platform Admins can mirror the `seek` Skill source into a Namespace. Tasks are
+created disabled; run a dry-run first, then enable. The target Namespace is
+immutable after creation, and deleting a task never deletes its Capabilities.
+
+```sh
+hngr sync list
+hngr sync create --namespace team-a --interval 1h
+hngr sync run <task-id> --dry-run --wait
+hngr sync update <task-id> --enable
+hngr sync runs list <task-id>
+hngr sync runs show <task-id> <run-id>
+hngr sync items <task-id> --state conflict
+```
+
 ## Output contract
 
 stdout carries the payload only (JSON, 2-space indent). Progress, summaries, warnings and

package/dist/{auth-ByGgd_Yn.mjs → auth-CQkOtVxv.mjs}

@@ -1,4 +1,4 @@
-import { C as HngrError, d as configFilePath, f as deleteStoredConfig, g as resolveConnection, h as redactUrl, m as readStoredConfig, n as apiGet, p as normalizeServerUrl, t as apiFetch, v as storedAudience, y as writeStoredConfig } from "./http-DgHX7Fux.mjs";
+import { C as HngrError, d as configFilePath, f as deleteStoredConfig, g as resolveConnection, h as redactUrl, m as readStoredConfig, n as apiGet, p as normalizeServerUrl, t as apiFetch, v as storedAudience, y as writeStoredConfig } from "./http-CLG2jrIE.mjs";
 import { hostname } from "node:os";
 import { randomUUID } from "node:crypto";
 import { spawn } from "node:child_process";
@@ -60,8 +60,8 @@ function canPrompt(ctx) {
 	return ctx.io.stdin.isTTY && ctx.io.stdout.isTTY && ctx.io.prompts !== void 0;
 }
 /**
-* Enforces https everywhere; http only for localhost, 127.0.0.1, [::1], the
-* built-in default, or with an explicit --insecure.
+* Enforces https everywhere; http only for localhost, 127.0.0.1, [::1], or
+* with an explicit --insecure.
 */
 function assertServerUrlAllowed(raw, insecure) {
 	const server = normalizeServerUrl(raw);
@@ -72,7 +72,7 @@ function assertServerUrlAllowed(raw, insecure) {
 			"localhost",
 			"127.0.0.1",
 			"[::1]"
-		].includes(url.hostname) || insecure || server === "http://10.199.100.24:26434") return server;
+		].includes(url.hostname) || insecure) return server;
 		throw new HngrError({
 			type: "config",
 			title: `Refusing insecure server URL ${redactUrl(server)}`,
@@ -114,7 +114,7 @@ async function revokePreviousToken(ctx, stored) {
 async function login(ctx, argv) {
 	if (ctx.env.HANGAR_TOKEN) throw envTokenRefusal();
 	const stored = await readStoredConfig(ctx.env);
-	const server = assertServerUrlAllowed(ctx.flags.server ?? ctx.env.HANGAR_URL ?? stored?.server ?? "http://10.199.100.24:26434", ctx.flags.insecure);
+	const server = assertServerUrlAllowed(ctx.flags.server ?? ctx.env.HANGAR_URL ?? stored?.server ?? "https://hangar.paykka.com", ctx.flags.insecure);
 	if (stored?.token && !ctx.flags.force) try {
 		const me = asStoredPrincipal(await apiGet({
 			server,