@rayul/kordis 0.6.4 → 0.6.6

package/assets/kordis-publishing/SKILL.md

@@ -18,6 +18,13 @@ Publish a valid, AI-review-passing version. ALWAYS dry-run first.
 - `license` — SPDX (e.g. `MIT`, `Apache-2.0`, `CC-BY-4.0`).
 - Optional: `homepage`, `tags`, `type`.
 
+**`type` auto-inference (0.6.4+):** The CLI infers `type: skill` when
+you push a directory bundle, a `.skill` ZIP, OR a single file named
+`SKILL.md` or `*.skill.md`. You don't need to write `type:` in the
+frontmatter for any of these paths. Use `--type <t>` (or write the
+field manually) only when pushing a different package type from a
+single `.md` file that doesn't match the SKILL.md filename pattern.
+
 **`version` field handling:**
 - **First publish** — used as-is (else defaults to `0.1.0`).
 - **Update** — the registry computes the next version from

package/assets/kordis-search/SKILL.md

@@ -21,6 +21,7 @@ Keyword search; `--json` for parsing.
 | `--type <t>`     | `skill`, `mcp-server`, `project-rules`, `custom-agent`, `hook`           |
 | `--tool <s>`     | filter by compatible tool (`claude-code`, `codex`, `cursor`, …)          |
 | `--tier <t>`     | filter by portability tier `A`/`B`/`C`/`D`                               |
+| `--author <u>`   | restrict to a single author. **When set, response includes exact `total`** (other filters return `total: null`). 0.6.4+. |
 | `--sort <m>`     | `relevance` (default), `stars`, `downloads`, `recent`, `updated`         |
 | `--trending`     | list packages trending in `--window` (overrides `--sort`)                |
 | `--rising`       | list rising packages by 7d acceleration (overrides `--sort`)             |
@@ -112,3 +113,11 @@ User: "show me the most-downloaded skills"
 - kordis search --type skill --sort downloads --json
 - list top results
 </example>
+
+<example>
+User: "how many packages has alice published?" / "alice가 publish한거 다 보여줘"
+- kordis search --author alice --json
+- the response carries an exact `total` field (other filters report
+  `total: null`); render "Showing N of M matches"
+- do NOT post-process with jq for author filtering — use the flag
+</example>

package/dist/index.js

@@ -1204,6 +1204,7 @@ import { join as join2 } from "path";
 var SERVICE = "kordis";
 var plaintextWarningEmitted = false;
 async function loadKeytar() {
+  if (process.env["KORDIS_NO_KEYCHAIN"] === "1") return null;
   try {
     const mod = await import("keytar");
     return mod.default ?? mod;
@@ -1583,29 +1584,53 @@ async function useClient() {
           baseUrl: cfg.apiUrl,
           userAgent: `kordis-cli/${VERSION} node/${process.version}`
         });
+        const debug = process.env["KORDIS_DEBUG"] === "1";
+        let pollResult = null;
         try {
-          const tokens = await bootstrapApi.pollDeviceFlow(pending.device_code);
-          const meClient = new KordisClient({
-            baseUrl: cfg.apiUrl,
-            userAgent: `kordis-cli/${VERSION} node/${process.version}`,
-            getAccessToken: () => tokens.access_token
-          });
-          const me = await meClient.me();
-          username = me.username;
-          currentTokens = {
-            access_token: tokens.access_token,
-            refresh_token: tokens.refresh_token,
-            session_id: tokens.session_id,
-            expires_at_epoch: Math.floor(Date.now() / 1e3) + tokens.expires_in
-          };
-          await keychain.save(username, currentTokens);
-          cfg = { ...cfg, username, sessionId: tokens.session_id };
-          await saveCliConfig(cfg);
-          await clearPending();
+          pollResult = await bootstrapApi.pollDeviceFlow(pending.device_code);
         } catch (err) {
           const code = err.code;
-          if (code && code !== "authorization_pending") {
+          if (code === "authorization_pending") {
+            if (debug) process.stderr.write("[kordis] auto-finalize: authorization_pending (keeping pending)\n");
+          } else {
             await clearPending();
+            if (debug) {
+              const msg = err instanceof Error ? err.message : String(err);
+              process.stderr.write(`[kordis] auto-finalize: poll failed (code=${code ?? "none"}): ${msg}
+`);
+            }
+          }
+        }
+        if (pollResult) {
+          try {
+            const meClient = new KordisClient({
+              baseUrl: cfg.apiUrl,
+              userAgent: `kordis-cli/${VERSION} node/${process.version}`,
+              getAccessToken: () => pollResult.access_token
+            });
+            const me = await meClient.me();
+            username = me.username;
+            currentTokens = {
+              access_token: pollResult.access_token,
+              refresh_token: pollResult.refresh_token,
+              session_id: pollResult.session_id,
+              expires_at_epoch: Math.floor(Date.now() / 1e3) + pollResult.expires_in
+            };
+            await keychain.save(username, currentTokens);
+            cfg = { ...cfg, username, sessionId: pollResult.session_id };
+            await saveCliConfig(cfg);
+            await clearPending();
+            if (debug) process.stderr.write(`[kordis] auto-finalize: persisted tokens for ${username}
+`);
+          } catch (err) {
+            await clearPending();
+            currentTokens = null;
+            username = null;
+            const msg = err instanceof Error ? err.message : String(err);
+            process.stderr.write(
+              `[kordis] auto-finalize: server issued tokens but local persistence failed (${msg}). Run \`kordis login --emit-only\` again to retry.
+`
+            );
           }
         }
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rayul/kordis",
-  "version": "0.6.4",
+  "version": "0.6.6",
   "private": false,
   "description": "Command-line client for the Kordis registry — discover, install, and publish agentic-coding packages.",
   "license": "MIT",