Add image tag command

[chruffins]

summary

Adds hypeman tag SOURCE TARGET for the local image-tag API in kernel/hypeman#453.

• Sends POST /images/{source}/tag with { "target": "..." }.
• URL-escapes source references so repository paths work correctly.
• Keeps server errors, including missing and not-ready images, visible to callers.
• Makes one-argument hypeman push TARGET use a matching local Docker image when present, then fall back to a ready Hypeman image or Docker staging.
• Keeps hypeman push SOURCE TARGET for pushing a cached image to a different remote reference.

new UX

hypeman tag alpine:latest 123456789.dkr.ecr.us-east-1.amazonaws.com/myapp:v1
hypeman push 123456789.dkr.ecr.us-east-1.amazonaws.com/myapp:v1

The tag operation does not pull or reconvert image content. It creates a local alias through the server-side API. --format, --transform, and --debug continue to work with the command.

validation

• go test ./...

Depends on the image tag API in kernel/hypeman#453.

[cursor]

Cached push skips newer Docker image

High Severity

A successful Images.Get now short-circuits staging, so one-arg hypeman push TARGET never reloads Docker when that tag already exists in Hypeman. Rebuilds that retag the same name and push again keep shipping the previous cached digest, including when the cached record is failed and waitForImageReady errors out. The still-documented docker tag then hypeman push TARGET loop is the common path this breaks.

 

^{Reviewed by Cursor Bugbot for commit 5010e06. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

There are 2 total unresolved issues (including 1 from previous review).

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 61d1aca. Configure here.}

[cursor]

Tag errors claim image not found

Low Severity

Every stageDockerImage failure is wrapped as if the image was missing. Upload, wait, and follow-up GET errors are reported as not found in Hypeman or Docker for tag, and as a failed local Docker load for one-argument push, including cases where Docker load already succeeded.

Additional Locations (1)

• pkg/cmd/pushcmd.go#L108-L111

 

^{Reviewed by Cursor Bugbot for commit 61d1aca. Configure here.}

[chruffins]

note on the raw client.Post in pkg/cmd/tag.go: it's a stopgap — hypeman-go v0.24.0 has no typed Images.Tag yet. once the tag API from kernel/hypeman#453 is generated into hypeman-go, switch handleTag to the typed method and drop the hand-rolled path (tracked with a TODO at the call site). nothing here blocks on that; the wire format won't change.