@rayul/kordis 0.10.0 → 0.10.1

package/assets/kordis-publishing/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: kordis-publishing
-description: Use whenever the user wants to publish, share, or push a package to Kordis — phrases like "publish this", "share this skill to Kordis", "push this rule", "release a new version of <slug>", "bump the version", "semver", "버전 올리기", "yank", "withdraw a version", "unpublish a release", "철회". Covers dry-run flow, frontmatter requirements, version bump strategies, semver rules, yank/unyank for retracting bad releases, and the AI review pipeline.
+description: Use whenever the user wants to publish, share, or push a package to Kordis — phrases like "publish this", "share this skill to Kordis", "push this rule", "release a new version of <slug>", "bump the version", "semver", "버전 올리기". Also covers retracting a bad or compromised release — "yank", "withdraw a version", "unpublish a release", "kill a release", "nuke a version", "take down a version", "recall a release", "we leaked a key in <version>", "compromised", "철회", "내리기". Covers dry-run flow, frontmatter requirements, version bump strategies, semver rules, yank/unyank for retracting bad releases, and the AI review pipeline.
 type: skill
 allowed-tools: ["Bash(kordis:*)", "Read", "Edit"]
 ---
@@ -41,8 +41,18 @@ single `.md` file that doesn't match the SKILL.md filename pattern.
 When a single release goes wrong — leaked secret, broken on platform X,
 superseded by an urgent fix — use **yank**, not delete.
 
-### `kordis yank <full_slug>@<version> [--reason <text>] [--force]`
+### `kordis yank <full_slug>[@<version>] [--reason <text>] [--force]`
 Soft-marks the specific version as "unrecommended". Author-only.
+
+**0.10.1+ — omit `@<version>` to yank the package's current version.**
+Panic-mode shortcut: `kordis yank user/slug --reason "leaked AWS key"
+--force` yanks whichever version is currently installed by bare-slug pulls
+without needing a prior `kordis versions <slug>` round-trip. The CLI
+displays `(current)` next to the resolved version in the confirmation
+banner so you know what got picked. Explicit pins (`@1.2.3`) still
+override.
+
+
 Versions yanked this way:
 - Disappear from `kordis pull <slug>` (bare slug) and from `@^X.Y` /
   `@X.x` / `@*` range resolution

package/dist/index.js

@@ -4720,35 +4720,37 @@ import prompts3 from "prompts";
 function yankCommand() {
   return new Command13("yank").description("soft-mark a specific version of your package as yanked").argument(
     "<full_slug>",
-    'package identifier with explicit version, e.g. "user/slug@1.2.3"'
+    'package identifier; omit @version to yank the current version, or pin like "user/slug@1.2.3"'
   ).option("--reason <text>", "optional reason shown to consumers (\u2264280 chars)").option("--force", "skip the confirmation prompt").action(
     async (fullSlugArg, opts) => {
       const parsed = parseSlugAtVersion(fullSlugArg);
-      if (!parsed.version) {
+      if (parsed.range) {
         throw new Error(
-          'yank requires an explicit version pin \u2014 use the form "user/slug@1.2.3" (range syntax not allowed)'
+          "yank requires either no version (yanks current) or an explicit pin \u2014 range syntax not allowed"
         );
       }
       const bundle = await useClient();
       const detail = await bundle.api.getPackage(parsed.username, parsed.slug);
+      const targetVersion = parsed.version ?? detail.current_version;
+      const isImplicitCurrent = !parsed.version;
       if (!opts.force) {
         printHuman(c.yellow("  \u26A0  You are about to yank:"));
         printHuman(
-          `     ${c.bold(detail.full_slug)}  v${parsed.version}`
+          `     ${c.bold(detail.full_slug)}  v${targetVersion}${isImplicitCurrent ? c.gray("  (current)") : ""}`
         );
         if (opts.reason) {
           printHuman(`     reason: ${opts.reason}`);
         }
         printHuman(
           c.gray(
-            "  Yanked versions disappear from range/`*` resolution. Pinned installs (`@" + parsed.version + "`) still work. Reversible with `kordis unyank`."
+            "  Yanked versions disappear from range/`*` resolution. Pinned installs (`@" + targetVersion + "`) still work. Reversible with `kordis unyank`."
           )
         );
         printHuman("");
         const { confirmed } = await prompts3({
           type: "confirm",
           name: "confirmed",
-          message: `Yank ${c.bold(`${parsed.fullSlug}@${parsed.version}`)}?`,
+          message: `Yank ${c.bold(`${parsed.fullSlug}@${targetVersion}`)}?`,
           initial: false
         });
         if (!confirmed) {
@@ -4757,7 +4759,7 @@ function yankCommand() {
         }
       }
       const res = await bundle.authedRequest(
-        (api) => api.yankVersion(parsed.username, parsed.slug, parsed.version, {
+        (api) => api.yankVersion(parsed.username, parsed.slug, targetVersion, {
           ...opts.reason ? { reason: opts.reason } : {}
         })
       );
@@ -4766,16 +4768,16 @@ function yankCommand() {
         human: () => {
           printHuman(
             c.green(
-              `\u2713 Yanked ${c.bold(parsed.fullSlug)}@${parsed.version}`
+              `\u2713 Yanked ${c.bold(parsed.fullSlug)}@${targetVersion}`
             )
           );
           if (res.yank_reason) {
             printHuman(c.gray(`  reason: ${res.yank_reason}`));
           }
-          if (res.effective_current_version !== parsed.version) {
+          if (res.effective_current_version !== targetVersion) {
             printHuman(
               c.gray(
-                `  current_version is now ${c.bold(res.effective_current_version)} (was ${parsed.version})`
+                `  current_version is now ${c.bold(res.effective_current_version)} (was ${targetVersion})`
               )
             );
           } else {
@@ -4787,7 +4789,7 @@ function yankCommand() {
           }
           printHuman(
             c.gray(
-              `  \u2192 Reverse with: kordis unyank ${parsed.fullSlug}@${parsed.version}`
+              `  \u2192 Reverse with: kordis unyank ${parsed.fullSlug}@${targetVersion}`
             )
           );
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rayul/kordis",
-  "version": "0.10.0",
+  "version": "0.10.1",
   "private": false,
   "description": "Command-line client for the Kordis registry — discover, install, and publish agentic-coding packages.",
   "license": "MIT",