@rayul/kordis 0.6.2 → 0.6.4

package/assets/kordis-recommend/SKILL.md

@@ -45,17 +45,24 @@ re-ranking ONLY — never persisted (see CLAUDE.md "Telemetry / privacy").
 
 ## Personalization opt-in
 
-The user is asked ONCE — at first interactive `kordis setup` OR (if
-postinstall ran in `--silent` mode) at first `kordis recommend`. Answer
-persists in `~/.kordis/config.json` (`personalization: 'on' | 'off'`).
+The user is asked ONCE. Three paths persist the answer to
+`~/.kordis/config.json` as `personalization: 'on' | 'off'`:
 
-Override at runtime:
+1. **Interactive `kordis setup`** in a real TTY — Y/n prompt.
+2. **First `kordis recommend`** in a TTY (lazy fallback if postinstall
+   ran `--silent`).
+3. **`kordis setup --personalization on|off`** — non-interactive flag
+   (0.6.3+). The **agent-facing path**: works without a TTY, no prompt.
+   Use this when the user has confirmed consent in chat — see Step 2.5.
+
+Override at runtime (does not change the persisted answer):
 - `KORDIS_NO_CONTEXT=1` env — no header for the entire shell session
 - `--no-context` flag — no header for this single call
 
 If the response field `personalized` is `false`, the server returned
-popularity-only results — surface this to the user so they know the
-recommendations aren't tailored.
+popularity-only results — almost always because the user hasn't been
+asked yet (agent contexts have no TTY, so paths 1 and 2 never fire).
+Surface this AND ask the user before flipping the flag (Step 2.5).
 
 ## Menu envelope (one item)
 
@@ -92,8 +99,7 @@ explicitly asked you not to share their stack.)
 
 ### 2. Triage
 Filter mentally by `confidence`. If everything is `low` and `personalized`
-is `false`, tell the user personalization is off and they can enable it
-via `kordis setup` (re-asks the prompt on next interactive run).
+is `false`, follow Step 2.5 to offer the user a one-click consent path.
 
 If the response carries `capped_by_author > 0`, ALSO surface a one-line
 note to the user — e.g. "N more candidates from the same publisher were
@@ -101,6 +107,30 @@ skipped by the diversity cap" — so they understand why the list is
 shorter than the requested `--limit`. Without this hint users frequently
 mistake a short menu for a sparse or broken registry.
 
+### 2.5. Offer personalization consent (when `personalized: false`)
+
+If the response is `personalized: false` and the user is engaged in chat
+(i.e., you can ask them a question), surface this naturally:
+
+> "추천 결과가 popularity-only로 왔어요 (개인화 OFF). 익명 신호
+> (설치된 에이전트 툴, 현재 디렉토리의 언어/프레임워크 힌트)로
+> 추천을 맞춤화할 수 있는데 켜드릴까요? 서버는 신호를 저장하지
+> 않고 응답 re-ranking에만 사용해요."
+
+ONLY after the user explicitly says yes, run:
+
+```
+kordis setup --personalization on
+```
+
+Then re-run `kordis recommend --limit 10 --json` to get the personalized
+menu. **Never run `--personalization on` without the user's confirmation
+in chat** — it persists a consent flag, which is the user's choice.
+
+If the user says no (or doesn't reply), don't push it — record opt-out
+optionally via `kordis setup --personalization off` so the question
+isn't asked again.
+
 ### 3. Present
 Surface 3-5 picks max. For each, show: full_slug, one-line `why_recommended`,
 confidence wording per the table above, and the next-step
@@ -127,7 +157,9 @@ User: "any new tools I should try?"
 <example>
 User: "추천 좀 해봐"
 1. kordis recommend --limit 10 --json
-2. If personalized is false, tell the user briefly + suggest `kordis setup`
+2. If `personalized: false`, ask in chat (Step 2.5): "개인화 켜드릴까요? ..."
+   - if user says yes → `kordis setup --personalization on`, then re-run
+   - if user says no → surface popularity-only picks as-is
 3. Surface 3-5 in Korean using the why_recommended verbatim (English is fine
    — re-render the user-facing prose in Korean as needed)
 </example>

package/dist/index.js

@@ -224,13 +224,13 @@ var init_user = __esm({
       bio: z5.string().max(500).nullable(),
       avatar_url: UrlSchema.nullable(),
       is_verified: z5.boolean(),
-      package_count: z5.number().int().nonnegative(),
       follower_count: z5.number().int().nonnegative(),
       created_at: IsoDateTimeSchema
     });
     SelfUserSchema = PublicUserSchema.extend({
       primary_provider: OAuthProviderSchema,
       role: UserRoleSchema,
+      package_count: z5.number().int().nonnegative(),
       following_count: z5.number().int().nonnegative(),
       last_active_at: IsoDateTimeSchema.nullable()
     });
@@ -386,7 +386,15 @@ var init_comment = __esm({
       is_edited: z7.boolean(),
       edited_at: IsoDateTimeSchema.nullable(),
       is_deleted: z7.boolean(),
-      created_at: IsoDateTimeSchema
+      created_at: IsoDateTimeSchema,
+      /**
+       * Web permalink (`https://kordis.store/p/<full_slug>#comment-<id>`). Server
+       * populates whenever it has the package slug at serialization time —
+       * always on create + list paths; absent on update/status paths that don't
+       * carry the slug. Old API responses (pre-0.6.4) omit it; new clients use
+       * it directly when present (e.g., "✓ comment posted — view: <permalink>").
+       */
+      permalink: z7.string().url().optional()
     });
     CommentTreeSchema = CommentSchema.extend({
       replies: z7.lazy(() => z7.array(CommentTreeSchema))
@@ -1887,7 +1895,7 @@ var SORT_MODES = [
 ];
 var TIME_WINDOWS = ["24h", "7d", "30d"];
 function searchCommand() {
-  return new Command3("search").description("search the Kordis registry").argument("[query...]", "keywords to match against title/description").option("--type <type>", "filter by harness type (skill|mcp-server|project-rules|custom-agent|hook)").option("--tool <tool>", "filter by compatible tool (claude-code|codex|cursor|...)").option("--tier <tier>", "filter by portability tier (A|B|C|D)").option("--sort <mode>", `sort: ${SORT_MODES.join("|")}`).option("--trending", "list trending packages (overrides --sort)", false).option("--rising", "list rising packages by 7d acceleration (overrides --sort)", false).option("--window <w>", `time window for --trending: ${TIME_WINDOWS.join("|")}`, "24h").option("--limit <n>", "max results", (v) => parseInt(v, 10), 20).action(async (query, opts) => {
+  return new Command3("search").description("search the Kordis registry").argument("[query...]", "keywords to match against title/description").option("--type <type>", "filter by harness type (skill|mcp-server|project-rules|custom-agent|hook)").option("--tool <tool>", "filter by compatible tool (claude-code|codex|cursor|...)").option("--tier <tier>", "filter by portability tier (A|B|C|D)").option("--author <username>", "filter to a single author (server returns exact total when set)").option("--sort <mode>", `sort: ${SORT_MODES.join("|")}`).option("--trending", "list trending packages (overrides --sort)", false).option("--rising", "list rising packages by 7d acceleration (overrides --sort)", false).option("--window <w>", `time window for --trending: ${TIME_WINDOWS.join("|")}`, "24h").option("--limit <n>", "max results", (v) => parseInt(v, 10), 20).action(async (query, opts) => {
     if (opts.sort && !SORT_MODES.includes(opts.sort)) {
       throw new Error(`--sort must be one of ${SORT_MODES.join(", ")}`);
     }
@@ -1913,6 +1921,7 @@ function searchCommand() {
         type: opts.type ? [opts.type] : void 0,
         tool: opts.tool ? [opts.tool] : void 0,
         tier: opts.tier,
+        ...opts.author ? { author: opts.author } : {},
         sort: opts.sort ?? "relevance",
         limit: opts.limit
       });
@@ -1944,6 +1953,14 @@ function searchCommand() {
           }
           return;
         }
+        if (typeof res.total === "number") {
+          printHuman(
+            c.gray(
+              `Showing ${res.results.length} of ${res.total} match${res.total === 1 ? "" : "es"}`
+            )
+          );
+          printHuman("");
+        }
         for (const p of res.results) {
           printHuman(
             `${c.bold(p.full_slug)} ${c.gray(`v${p.current_version}`)} ${c.cyan(`[${p.type}]`)}`
@@ -2557,6 +2574,10 @@ function pushCommand() {
         content = ensureTypeField(content, "skill");
       } else {
         content = await readFile6(abs, "utf8");
+        const isSkillFilename = abs.endsWith("/SKILL.md") || abs.endsWith(".skill.md");
+        if (isSkillFilename) {
+          content = ensureTypeField(content, "skill");
+        }
       }
       let nameFromFm = null;
       try {
@@ -3642,9 +3663,33 @@ async function copyBundledSkill(filePath, content, dryRun) {
   return existing === null ? "injected" : "updated";
 }
 function setupCommand() {
-  return new Command9("setup").description("inject kordis usage guide into global agent instruction files").option("--silent", "suppress errors \u2014 safe for postinstall").option("--dry-run", "detect installed tools without writing any files").action(async (opts) => {
+  return new Command9("setup").description("inject kordis usage guide into global agent instruction files").option("--silent", "suppress errors \u2014 safe for postinstall").option("--dry-run", "detect installed tools without writing any files").option(
+    "--personalization <choice>",
+    "record opt-in non-interactively: 'on' | 'off' (skips the Y/n prompt; safe for agents that just received user consent in chat)"
+  ).action(async (opts) => {
     const home = homedir7();
     const dryRun = opts.dryRun ?? false;
+    if (opts.personalization !== void 0) {
+      const v = opts.personalization.toLowerCase();
+      if (v !== "on" && v !== "off") {
+        throw new Error("--personalization must be 'on' or 'off'");
+      }
+      if (!dryRun) {
+        const cfg = await loadCliConfig();
+        await saveCliConfig({ ...cfg, personalization: v });
+      }
+      if (!opts.silent) {
+        if (v === "on") {
+          printHuman(
+            c.green("\u2713 personalization on") + c.gray(" \u2014 disable any time: `KORDIS_NO_CONTEXT=1` env, `--no-context` flag, or `kordis setup --personalization off`")
+          );
+        } else {
+          printHuman(
+            c.gray("\u2192 personalization off \u2014 recommendations use popularity only.")
+          );
+        }
+      }
+    }
     let hubContent;
     let subSkillContents;
     try {
@@ -3790,6 +3835,9 @@ function commentCommand() {
           const meta = [`kind: ${res.kind}`];
           if (res.title) meta.push(`title: "${res.title}"`);
           printHuman(`  ${meta.join(" \xB7 ")}`);
+          if (res.permalink) {
+            printHuman(c.gray(`  view: ${res.permalink}`));
+          }
         }
       });
     }
@@ -4287,7 +4335,7 @@ function recommendCommand() {
       if (!enable) {
         printHuman(
           c.gray(
-            "\u2192 recommendations will use popularity only. Re-enable later: `kordis setup` (re-asks the opt-in)."
+            "\u2192 recommendations will use popularity only. Re-enable later: `kordis setup --personalization on`."
           )
         );
       }
@@ -4306,11 +4354,24 @@ function recommendCommand() {
       human: () => {
         if (res.items.length === 0) {
           printHuman(c.yellow("(no recommendations available right now)"));
-          printHuman(
-            c.gray(
-              "  \u2192 registry may be sparse; try `kordis search --trending` for broader discovery"
-            )
-          );
+          if (!res.personalized) {
+            printHuman(
+              c.gray(
+                "  \u2192 personalization is OFF, so the server ranks on popularity alone \u2014 likely empty pool."
+              )
+            );
+            printHuman(
+              c.gray(
+                "  \u2192 enable for stack-aware matches: `kordis setup --personalization on` (no Y/n prompt \u2014 agent-friendly; confirm with the user first)"
+              )
+            );
+          } else {
+            printHuman(
+              c.gray(
+                "  \u2192 personalization is ON but no matches for your stack \u2014 registry may be sparse for this profile. Try `kordis search <topic>` or `kordis search --trending`."
+              )
+            );
+          }
           return;
         }
         printHuman(
@@ -4335,7 +4396,7 @@ function recommendCommand() {
         if (!res.personalized) {
           printHuman(
             c.gray(
-              "\u2192 enable personalization for tailored picks: `kordis setup` (re-asks the opt-in)"
+              "\u2192 enable personalization for tailored picks: `kordis setup --personalization on` (no Y/n prompt \u2014 agent-friendly; confirm with the user in chat first)"
             )
           );
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rayul/kordis",
-  "version": "0.6.2",
+  "version": "0.6.4",
   "private": false,
   "description": "Command-line client for the Kordis registry — discover, install, and publish agentic-coding packages.",
   "license": "MIT",