@rayul/kordis 0.7.0 → 0.7.1

package/assets/kordis-search/SKILL.md

@@ -26,7 +26,8 @@ Keyword search; `--json` for parsing.
 | `--trending`     | list packages trending in `--window` (overrides `--sort`)                |
 | `--rising`       | list rising packages by 7d acceleration (overrides `--sort`)             |
 | `--window <w>`   | `24h` (default), `7d`, or `30d` — only honoured with `--trending`        |
-| `--limit <n>`    | max results (default 20)                                                 |
+| `--limit <n>`    | max results per page (default 20, max 100)                               |
+| `--cursor <t>`   | pagination — pass `next_cursor` from a prior response to fetch page 2+. 0.6.7+. |
 
 ### `kordis info <full_slug> --json`
 Inspect metadata (title, description, type, tier, version, author, stars,
@@ -121,3 +122,13 @@ User: "how many packages has alice published?" / "alice가 publish한거 다 보
   `total: null`); render "Showing N of M matches"
 - do NOT post-process with jq for author filtering — use the flag
 </example>
+
+<example>
+User: "show me page 2 of those results" / "다음 페이지 보여줘"
+- response from page 1 carries `next_cursor` (opaque base64 token, or
+  `null` when no more pages)
+- kordis search <q> --cursor <token> --json   # 0.6.7+
+- keep feeding `next_cursor` from each response until it comes back `null`
+- DO NOT try `--offset` for cursor-paginated endpoints — CLI passes
+  `--cursor` only
+</example>

package/dist/index.js

@@ -993,20 +993,35 @@ var init_client = __esm({
         };
         if (opts.body !== void 0) headers["content-type"] = "application/json";
         let res;
-        try {
-          const init = {
-            method: opts.method ?? "GET",
-            headers,
-            cache: "no-store"
-          };
-          if (opts.body !== void 0) init.body = JSON.stringify(opts.body);
-          res = await this.fetchImpl(url, init);
-        } catch (err) {
+        const init = {
+          method: opts.method ?? "GET",
+          headers,
+          cache: "no-store"
+        };
+        if (opts.body !== void 0) init.body = JSON.stringify(opts.body);
+        const method = (init.method ?? "GET").toUpperCase();
+        const retryable = method === "GET";
+        let lastErr;
+        for (let attempt = 0; attempt < (retryable ? 2 : 1); attempt++) {
+          try {
+            res = await this.fetchImpl(url, init);
+            lastErr = void 0;
+            break;
+          } catch (err) {
+            lastErr = err;
+            if (attempt === 0 && retryable) {
+              await new Promise((resolve2) => setTimeout(resolve2, 150));
+              continue;
+            }
+          }
+        }
+        if (lastErr !== void 0) {
           throw new KordisNetworkError(
-            `cannot reach ${url.hostname}: ${err.message}`,
-            err
+            `cannot reach ${url.hostname}: ${lastErr.message}`,
+            lastErr
           );
         }
+        res = res;
         const requestId = res.headers.get("x-request-id") ?? void 0;
         if (res.status === 204) return void 0;
         const text = await res.text();
@@ -1774,7 +1789,7 @@ async function useClient() {
             username = null;
             const msg = err instanceof Error ? err.message : String(err);
             process.stderr.write(
-              `[kordis] auto-finalize: server issued tokens but local persistence failed (${msg}). Run \`kordis login --emit-only\` again to retry.
+              `[kordis] auto-finalize: server issued tokens but local persistence failed (${msg}). Run \`kordis login --emit-only\` again to retry. If this keeps happening on macOS, the OS keychain prompt may be timing out \u2014 set \`KORDIS_NO_KEYCHAIN=1\` to fall back to a plaintext file at ~/.kordis/.tokens.json (mode 0600). Set \`KORDIS_DEBUG=1\` for full auto-finalize stage output.
 `
             );
             void reportError("auto_finalize_stage2_fail", err);
@@ -1968,7 +1983,7 @@ function requireAuth(bundle) {
     error: {
       code: "not_authenticated",
       message: "authentication required",
-      hint: "Run `kordis login --emit-only` to start browser sign-in (exits immediately, no blocking poll), then re-run this command \u2014 the next CLI call auto-claims the token. For interactive shells, plain `kordis login` (10-min poll) also works."
+      hint: "Run `kordis login --emit-only` to start browser sign-in (exits immediately, no blocking poll), then re-run this command \u2014 the next CLI call auto-claims the token. For interactive shells, plain `kordis login` (10-min poll) also works. If you DID login but auth keeps failing, run with `KORDIS_DEBUG=1` to surface auto-finalize stages (Round 12 F1 \u2014 diagnostic moment-of-need)."
     }
   });
 }
@@ -4783,7 +4798,16 @@ function buildProgram() {
   const program = new Command19("kordis").version(VERSION).description("Kordis \u2014 registry for agentic-coding packages").option("--json", "emit JSON output to stdout (default: human)", false).hook("preAction", (thisCommand) => {
     const opts = thisCommand.optsWithGlobals();
     if (opts.json) setJsonMode(true);
-  });
+  }).addHelpText("after", `
+Environment variables (see README.md "Privacy & environment variables"):
+  KORDIS_API_URL=<url>     override registry endpoint (default: https://api.kordis.store)
+  KORDIS_HOME=<dir>        override config + token fallback dir (default: ~/.kordis)
+  KORDIS_NO_CONTEXT=1      suppress personalization header even if opted in
+  KORDIS_NO_TELEMETRY=1    suppress anonymized error telemetry even if opted in
+  KORDIS_NO_KEYCHAIN=1     force plaintext token storage at ~/.kordis/.tokens.json
+                           (escape hatch for macOS keychain-prompt fatigue)
+  KORDIS_DEBUG=1           surface auto-finalize stage outcomes to stderr (diagnostic)
+`);
   program.addCommand(loginCommand());
   program.addCommand(logoutCommand());
   program.addCommand(whoamiCommand());

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rayul/kordis",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "private": false,
   "description": "Command-line client for the Kordis registry — discover, install, and publish agentic-coding packages.",
   "license": "MIT",