@rayul/kordis 0.1.3 → 0.1.4

package/assets/KORDIS.md

@@ -2,7 +2,7 @@
 name: kordis
 description: Use Kordis whenever the user mentions finding, installing, sharing, or publishing skills, project-rules, custom-agents, MCP servers, or hooks; or names any `<username>/<slug>` identifier. Pushy on purpose — Claude under-triggers. Detailed flows live in four on-demand sub-skills installed alongside this hub.
 type: skill
-version: 0.1.3
+version: 0.1.4
 ---
 
 # Kordis
@@ -18,14 +18,14 @@ Trigger Kordis when the user:
 - names a `<username>/<slug>` identifier
 - asks what is trending or rising
 
-Verbs: `kordis search`, `info`, `read`, `pull`, `push`, `whoami`/`login`/`logout`.
-ALWAYS pass `--json` when parsing programmatically.
+Verbs: `kordis search`, `info`, `read`, `pull`, `push`, `comment`,
+`whoami`/`login`/`logout`. ALWAYS pass `--json` when parsing programmatically.
 
 Detail lives in four on-demand sub-skills (auto-loaded by description match):
 - `kordis-search` — find and browse packages
 - `kordis-using` — `read` vs `pull`, behaviour per package type, attribution
 - `kordis-publishing` — author and push packages
-- `kordis-social` — identity & session
+- `kordis-social` — identity, session, and posting comments
 
 If `kordis: command not found`, install with `npm i -g @rayul/kordis` and
 ensure your npm-global `bin` (commonly `~/.npm-global/bin`) is on `PATH`.

package/assets/kordis-social/SKILL.md

@@ -1,59 +1,93 @@
 ---
 name: kordis-social
-description: Use whenever the user wants to log into Kordis, log out, or check who they are logged in as. Triggers include "log into Kordis", "kordis login", "who am I logged in as on Kordis", "log me out of Kordis". Pure identity / session management — community features (comments, stars) are not yet exposed in the CLI.
+description: Use whenever the user wants to log into Kordis, log out, check identity, or post a typed comment on a Kordis package. Triggers include "log into Kordis", "kordis login", "who am I logged in as on Kordis", "log me out of Kordis", "leave a tip on <slug>", "report a bug on <slug>", "comment on <slug>".
 type: skill
 allowed-tools: ["Bash(kordis:*)"]
 ---
 
-# Kordis: Identity & Session
+# Kordis: Identity & Comments
 
 ## Goal
-Drive login state. `whoami` to inspect; `login`/`logout` to change.
+Drive the user's login state and let them post typed feedback on packages.
 
-## Commands
+## Identity commands
 
 ### `kordis whoami [--json]`
-Show the currently authenticated user (or that the CLI is anonymous).
+Show the currently authenticated user (or anonymous state).
 
 ### `kordis login [--provider <name>]`
 Opens browser device-flow pairing. `--provider` defaults to `discord`.
-Required before any authenticated action (e.g. `kordis push`).
+Required before `push` or `comment`.
 
 ### `kordis logout`
 Clears local tokens.
 
+## Comment command
+
+### `kordis comment <full_slug> --body <text> [--kind <kind>] [--title <text>] [--json]`
+Post a top-level comment on a package. Auth required.
+
+| flag           | meaning                                                          |
+| -------------- | ---------------------------------------------------------------- |
+| `--body <t>`   | required, 1–10000 chars                                          |
+| `--kind <k>`   | `comment` (default), `tip`, `report`, `praise`, `question`       |
+| `--title <t>`  | 1–140 chars; honoured for top-level posts only                   |
+
+Replies, edits, status flips (open/resolved on a `report`), and listing
+existing comments are NOT yet exposed in the CLI. Direct the user to
+`https://kordis.store/p/<full_slug>` for those interactions until verbs land.
+
 ## Steps
 
 ### 1. Inspect identity (when in doubt)
 `kordis whoami --json`. **Success criteria**: returns either a username +
-profile, or the anonymous-state error indicating the user is not logged in.
+profile, or the anonymous-state error indicating not logged in.
+
+### 2. Match command to user intent
+- "log me into Kordis" → `kordis login`. Tell the user a browser device-flow
+  page will open; they must approve on their auth provider.
+- "log me out" → `kordis logout`.
+- "leave a tip / question / praise / bug-report / comment on <slug>" → pick
+  the matching `--kind`, generate a concise `--title` if it's a top-level
+  post, and put the substantive content in `--body`.
 
-### 2. Change state on user request
-- "log me into Kordis" → `kordis login`. Tell the user a browser will open and
-  they must complete the pairing. **Success criteria**: subsequent
-  `kordis whoami --json` returns a username.
-- "log me out" → `kordis logout`. **Success criteria**: subsequent
-  `kordis whoami --json` is anonymous.
+### 3. Authenticate before posting
+If `kordis comment` returns `not_authenticated` (exit 10), run `kordis login`
+and retry. **Success criteria**: command exits 0; show returned `id` + `kind`
++ `title` (when present).
 
 ## Examples
 
 <example>
 User: "who am I logged into Kordis as?"
 - kordis whoami --json
-- show username + display_name (and primary_provider if useful)
+- show username + display_name
 </example>
 
 <example>
 User: "log into Kordis"
 - kordis login
-- explain that a browser device-flow page will open; user must approve on
-  their auth provider
-- after they confirm, run kordis whoami --json to verify
+- explain that a browser device-flow page will open
+- after they confirm, run `kordis whoami --json` to verify
+</example>
+
+<example>
+User: "leave a tip on foo/bar saying it pairs well with baz/qux"
+- kordis comment foo/bar --kind tip --title "Pairs well with baz/qux" \
+    --body "Combine baz/qux's <feature> with this skill's <step> to <outcome>." --json
+- show returned `{id, kind, title}` so the user can find their post on the web UI
+</example>
+
+<example>
+User: "report that the v0.3.0 release of foo/bar is broken on macOS"
+- kordis comment foo/bar --kind report --title "v0.3.0 broken on macOS" \
+    --body "<reproducible details>" --json
+- mention that opening/resolving the report later requires the web UI
 </example>
 
 ## Limitations
 
-The CLI does NOT yet expose `comment`, `star`/`unstar`, follow, or
-notification verbs. If the user asks for those interactions, tell them
-truthfully that those CLI verbs are not implemented yet — do not fabricate
-a command. Direct them to the web UI at `https://kordis.store` for now.
+The CLI does NOT yet expose `star`/`unstar`, follow, listing comments, replies,
+editing or moderating comments, or notifications. If the user asks for any of
+those, tell them truthfully that the CLI verb is not implemented yet — do NOT
+fabricate a command. For now direct them to `https://kordis.store`.

package/assets/kordis-using/SKILL.md

@@ -30,9 +30,9 @@ DEFAULT to `read` when you spontaneously want to consult a skill. DEFAULT to
 
 ## Commands
 
-### `kordis read <full_slug>[@<version>] [--allow-pending] [--version <semver>] [--json]`
+### `kordis read <full_slug>[@<version>] [--allow-pending] [--pin <semver>] [--json]`
 Returns the full body (Markdown) of a text-bearing package, plus an
-`attribution` string. `--version` overrides any `@suffix` on the slug.
+`attribution` string. `--pin <semver>` overrides any `@suffix` on the slug.
 
 ### `kordis pull <full_slug>[@<version>] [options]`
 Writes files into the current project.
@@ -116,7 +116,7 @@ User: "install the github MCP server from Kordis"
 
 <example>
 User: "use the v0.2.0 of <full_slug> specifically"
-- kordis read <full_slug> --version 0.2.0 --json
+- kordis read <full_slug> --pin 0.2.0 --json
   (or:  kordis read <full_slug>@0.2.0 --json)
 </example>
 

package/dist/index.js

@@ -932,7 +932,7 @@ var init_src2 = __esm({
 
 // src/index.ts
 init_src2();
-import { Command as Command10 } from "commander";
+import { Command as Command11 } from "commander";
 
 // src/commands/login.ts
 import { Command } from "commander";
@@ -2229,12 +2229,12 @@ async function detectTool(root) {
 // src/commands/read.ts
 import { Command as Command6 } from "commander";
 function readCommand() {
-  return new Command6("read").description("fetch a package body into the agent context (no install)").argument("<full_slug>", "package identifier {username}/{slug} or {username}/{slug}@{version}").option("--allow-pending", "allow versions whose AI review has not passed", false).option("--version <semver>", "pin to an exact version (overrides @suffix)").action(
+  return new Command6("read").description("fetch a package body into the agent context (no install)").argument("<full_slug>", "package identifier {username}/{slug} or {username}/{slug}@{version}").option("--allow-pending", "allow versions whose AI review has not passed", false).option("--pin <semver>", "pin to an exact version (overrides @suffix)").action(
     async (rawSlug, opts) => {
       const atIdx = rawSlug.lastIndexOf("@");
       const fullSlug = atIdx > 0 ? rawSlug.slice(0, atIdx) : rawSlug;
       const inlineVersion = atIdx > 0 ? rawSlug.slice(atIdx + 1) : void 0;
-      const version = opts.version ?? inlineVersion;
+      const version = opts.pin ?? inlineVersion;
       const [username, slug] = fullSlug.split("/");
       if (!username || !slug) {
         throw new Error('full_slug must be "{username}/{slug}" (optional "@version")');
@@ -2509,9 +2509,55 @@ function setupCommand() {
   });
 }
 
+// src/commands/comment.ts
+import { Command as Command10 } from "commander";
+var KINDS = [
+  "comment",
+  "tip",
+  "report",
+  "praise",
+  "question"
+];
+function commentCommand() {
+  return new Command10("comment").description("post a comment on a package").argument("<full_slug>", "package identifier {username}/{slug}").requiredOption("--body <text>", "comment body (1\u201310000 chars)").option("--kind <kind>", `top-level kind: ${KINDS.join("|")}`, "comment").option("--title <text>", "top-level post title (1\u2013140 chars)").action(
+    async (rawSlug, opts) => {
+      if (!KINDS.includes(opts.kind)) {
+        throw new Error(`--kind must be one of ${KINDS.join(", ")}`);
+      }
+      const [username, slug] = rawSlug.split("/");
+      if (!username || !slug) {
+        throw new Error('full_slug must be "{username}/{slug}"');
+      }
+      const bundle = await useClient();
+      if (!bundle.username) {
+        printHuman(c.yellow("Not logged in. Run `kordis login`."));
+        process.exitCode = 10;
+        return;
+      }
+      const res = await bundle.authedRequest(
+        (api) => api.createComment(username, slug, {
+          kind: opts.kind,
+          ...opts.title ? { title: opts.title } : {},
+          body: opts.body
+        })
+      );
+      printDual({
+        json: res,
+        human: () => {
+          printHuman(c.green("\u2713 comment posted"));
+          printHuman(c.gray(`  id: ${res.id}`));
+          const meta = [`kind: ${res.kind}`];
+          if (res.title) meta.push(`title: "${res.title}"`);
+          printHuman(`  ${meta.join(" \xB7 ")}`);
+        }
+      });
+    }
+  );
+}
+
 // src/index.ts
 function buildProgram() {
-  const program = new Command10("kordis").version(VERSION).description("Kordis \u2014 registry for agentic-coding packages").option("--json", "emit JSON output to stdout (default: human)", false).hook("preAction", (thisCommand) => {
+  const program = new Command11("kordis").version(VERSION).description("Kordis \u2014 registry for agentic-coding packages").option("--json", "emit JSON output to stdout (default: human)", false).hook("preAction", (thisCommand) => {
     const opts = thisCommand.optsWithGlobals();
     if (opts.json) setJsonMode(true);
   });
@@ -2523,6 +2569,7 @@ function buildProgram() {
   program.addCommand(pullCommand());
   program.addCommand(readCommand());
   program.addCommand(infoCommand());
+  program.addCommand(commentCommand());
   program.addCommand(setupCommand());
   return program;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rayul/kordis",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "private": false,
   "description": "Command-line client for the Kordis registry — discover, install, and publish agentic-coding packages.",
   "license": "MIT",