@agentskillshub/cli 0.2.3 → 0.2.5

package/README.md

@@ -1,4 +1,4 @@
-# `ash` — AgentSkillsHub CLI
+# AgentSkillsHub CLI
 
 Search, audit, and install open-source AI agent skills & MCP servers from your terminal. Every result is **security-graded** and **quality-scored** by [AgentSkillsHub](https://agentskillshub.top).
 
@@ -8,7 +8,7 @@ npx @agentskillshub/cli search "scrape a website" --safe
 
 ## Why
 
-Discovering a skill is easy. Knowing whether it's safe to run against your credentials is not. `ash` puts the trust signal *before* the install:
+Discovering a skill is easy. Knowing whether it's safe to run against your credentials is not. It puts the trust signal *before* the install:
 
 ```
 $ npx @agentskillshub/cli search postgres --category mcp-server --limit 2
@@ -24,9 +24,7 @@ sgaunet/postgresql-mcp  5★  ⚪ UNAUDITED  ~23.0k tok
 
 ## Commands
 
-Run via `npx @agentskillshub/cli <command>`. (A global `npm i -g` also exposes an
-`ash` shorthand — but `ash` is the Almquist shell on Alpine/BusyBox, so the `npx`
-form is the recommended, collision-free way to invoke it.)
+Run via `npx @agentskillshub/cli <command>`:
 
 | | |
 |---|---|
@@ -39,7 +37,7 @@ Add `--json` to any of `search` / `audit` / `install` for machine-readable outpu
 
 ## How it works
 
-The catalog (~20K quality skills, stars ≥ 5) is a single static file (~1.7MB gzipped) served from the CDN. `ash` downloads it once, caches it at `~/.cache/agentskillshub/`, and refreshes every ~8h. **All searching is local** — fast, works offline, and puts zero load on the backend.
+The catalog (~20K quality skills, stars ≥ 5) is a single static file (~1.7MB gzipped) served from the CDN. The CLI downloads it once, caches it at `~/.cache/agentskillshub/`, and checks for a newer index with a cheap 77B probe (re-downloading the full file only when it actually changed, so a freshly-deployed index reaches you within minutes). **All searching is local** — fast, works offline, and puts zero load on the backend.
 
 ## Security grades
 

package/SKILL.md

@@ -7,7 +7,7 @@ description: Use when the user wants to find, evaluate, audit, or install an ope
 
 Discover → audit → install open-source AI agent skills and MCP servers without leaving the terminal. Backed by [AgentSkillsHub](https://agentskillshub.top): ~106K indexed skills, of which ~20K (stars ≥ 5) are in the searchable catalog, each carrying a **quality score** and a **security grade**.
 
-The catalog is a static index downloaded once and cached locally (`~/.cache/agentskillshub/`, refreshed every ~8h). Every search after the first is **instant, offline, and puts zero load on the Hub backend**.
+The catalog is a static index downloaded once and cached locally (`~/.cache/agentskillshub/`), with a cheap 77B freshness probe that re-downloads only when the index actually changes. Every search after the first is **instant, offline, and puts zero load on the Hub backend**.
 
 ## When to use
 
@@ -17,22 +17,22 @@ The catalog is a static index downloaded once and cached locally (`~/.cache/agen
 
 ## How to use
 
-The CLI is `bin/ash.mjs` (Node ≥ 18, zero dependencies). Run it with `node`:
+Zero-dependency Node CLI (Node ≥ 18). Run it with `npx`:
 
 ```bash
 # Search (local fuzzy ranking over name/desc/tags; quality + popularity tiebreak)
-node bin/ash.mjs search "scrape a website" --safe --limit 5
-node bin/ash.mjs search postgres --category mcp-server
+npx @agentskillshub/cli search "scrape a website" --safe --limit 5
+npx @agentskillshub/cli search postgres --category mcp-server
 #   filters: --category <c> --platform <p> --min-stars <n> --safe --limit <n>
 
 # Audit — free basic trust check (security grade + plain-English verdict)
-node bin/ash.mjs audit owner/repo
+npx @agentskillshub/cli audit owner/repo
 
 # Install — install commands + a "check before you install" safety line
-node bin/ash.mjs install owner/repo
+npx @agentskillshub/cli install owner/repo
 
 # Force-refresh the cached index
-node bin/ash.mjs update
+npx @agentskillshub/cli update
 ```
 
 Add `--json` to `search`, `audit`, or `install` for structured output to parse programmatically.

package/bin/ash.mjs

@@ -26,12 +26,18 @@ import { join } from "node:path";
 const BASE = process.env.AGENTSKILLSHUB_BASE || "https://agentskillshub.top";
 const META_URL = `${BASE}/search-index-meta.json`;
 const INDEX_URL = `${BASE}/search-index.json.gz`;
-const HUB_SKILL = (full) => `${BASE}/skill/${full}/`;
+// ?ref=cli lets web analytics attribute clickthroughs that originate in the CLI
+// (anonymous, no in-CLI telemetry). Query comes before any #audit fragment.
+const HUB_SKILL = (full) => `${BASE}/skill/${full}/?ref=cli`;
 
 const CACHE_DIR = join(process.env.AGENTSKILLSHUB_CACHE || join(homedir(), ".cache", "agentskillshub"));
 const CACHE_INDEX = join(CACHE_DIR, "search-index.json");
 const CACHE_META = join(CACHE_DIR, "search-index-meta.json");
-const TTL_MS = 8 * 60 * 60 * 1000; // refresh at most every 8h (matches sync cadence)
+// Within this window we serve the cached index without even probing the CDN.
+// Kept short so a freshly-deployed index reaches users within minutes — the
+// probe is a cheap 77B meta fetch; the 1.7MB index re-downloads only when
+// generated_at actually changed.
+const TTL_MS = 15 * 60 * 1000; // 15 min
 
 // security_grade → display
 const GRADE = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentskillshub/cli",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "description": "Search, audit, and install open-source AI agent skills & MCP servers from the terminal — security-graded, quality-scored.",
   "type": "module",
   "bin": {