@anytio/pspm 0.0.2 → 0.0.3

package/README.md

@@ -0,0 +1,215 @@
+# PSPM - Prompt Skill Package Manager
+
+A CLI for managing prompt skills across AI coding agents.
+
+## What is PSPM?
+
+PSPM (Prompt Skill Package Manager) is a package manager for prompt skills - small, discoverable capabilities packaged as `SKILL.md` files. Think of it as npm for AI agent skills.
+
+Skills are designed to work with any AI coding agent that supports the SKILL.md format, including Claude Code, Cursor, Windsurf, and others.
+
+## Installation
+
+```bash
+npm install -g @anytio/pspm
+```
+
+Or use with npx:
+
+```bash
+npx @anytio/pspm <command>
+```
+
+## Quick Start
+
+```bash
+# Login with your API key
+pspm login --api-key <your-api-key>
+
+# Add a skill to your project
+pspm add @user/username/skill-name
+
+# List installed skills
+pspm list
+
+# Install all skills from lockfile
+pspm install
+```
+
+## Commands
+
+### Authentication
+
+```bash
+pspm login --api-key <key>    # Authenticate with API key
+pspm logout                   # Clear stored credentials
+pspm whoami                   # Show current user info
+```
+
+### Skill Management
+
+```bash
+pspm add <specifier>          # Add and install a skill
+pspm remove <name>            # Remove an installed skill (alias: rm)
+pspm list                     # List installed skills (alias: ls)
+pspm install                  # Install all skills from lockfile (alias: i)
+pspm update                   # Update skills to latest compatible versions
+```
+
+**Specifier formats:**
+- `@user/username/skillname` - Latest version
+- `@user/username/skillname@2.0.0` - Specific version
+- `@user/username/skillname@^2.0.0` - Semver range
+
+### Publishing
+
+```bash
+pspm publish                  # Publish current directory as a skill
+pspm publish --bump patch     # Auto-bump version (major, minor, patch)
+pspm unpublish <spec> --force # Remove a published skill version
+```
+
+### Configuration
+
+```bash
+pspm config list              # List all profiles
+pspm config show              # Show resolved configuration
+pspm config add <name>        # Create a new profile
+pspm config use <name>        # Set the default profile
+pspm config set <profile> <key> <value>  # Set a profile field
+pspm config delete <name>     # Delete a profile
+pspm config init              # Create .pspmrc in current directory
+```
+
+## Configuration
+
+### User Config (`~/.pspm/config.json`)
+
+```json
+{
+  "version": 2,
+  "defaultProfile": "default",
+  "profiles": {
+    "default": {
+      "registryUrl": "https://pspm.dev/api/skills",
+      "apiKey": "sk_...",
+      "username": "myuser"
+    }
+  }
+}
+```
+
+### Project Config (`.pspmrc`)
+
+```json
+{
+  "profile": "production",
+  "registryUrl": "https://custom-registry.example.com/api/skills"
+}
+```
+
+### Lockfile (`skill-lock.json`)
+
+```json
+{
+  "lockfileVersion": 1,
+  "registryUrl": "https://pspm.dev/api/skills",
+  "skills": {
+    "@user/username/skillname": {
+      "version": "1.0.0",
+      "resolved": "https://pspm.dev/api/skills/@user/username/skillname/1.0.0/download",
+      "integrity": "sha256-..."
+    }
+  }
+}
+```
+
+## Environment Variables
+
+| Variable | Description |
+|----------|-------------|
+| `PSPM_PROFILE` | Select active profile |
+| `PSPM_REGISTRY_URL` | Override registry URL |
+| `PSPM_API_KEY` | Override API key |
+| `PSPM_DEBUG` | Enable debug logging |
+
+## Directory Structure
+
+```
+project/
+├── .pspmrc              # Project config (optional)
+├── skill-lock.json      # Lockfile
+└── .skills/             # Installed skills
+    └── username/
+        └── skillname/
+            ├── SKILL.md
+            └── ...
+
+~/.pspm/
+└── config.json          # User config
+```
+
+## Creating a Skill
+
+A skill is a directory containing at minimum a `package.json` and `SKILL.md`:
+
+```
+my-skill/
+├── package.json         # Required: name, version
+├── SKILL.md             # Required: skill instructions
+├── runtime/             # Optional: runtime files
+├── scripts/             # Optional: scripts
+└── data/                # Optional: data files
+```
+
+**package.json:**
+```json
+{
+  "name": "@user/myusername/my-skill",
+  "version": "1.0.0",
+  "description": "A helpful skill for...",
+  "files": ["package.json", "SKILL.md", "runtime", "scripts", "data"]
+}
+```
+
+**SKILL.md:**
+```markdown
+---
+name: my-skill
+description: A helpful skill that does X
+---
+
+# Instructions
+
+When activated, this skill helps you...
+```
+
+## CI/CD Integration
+
+```bash
+# Use environment variables
+export PSPM_API_KEY=sk_ci_key
+export PSPM_REGISTRY_URL=https://registry.example.com/api/skills
+
+# Install with frozen lockfile (fails if lockfile is outdated)
+pspm install --frozen-lockfile
+```
+
+## Multi-Registry Setup
+
+```bash
+# Create profiles for different registries
+pspm config add production --registry-url https://prod.example.com/api/skills
+pspm config add staging --registry-url https://staging.example.com/api/skills
+
+# Login to each
+pspm login --api-key sk_prod_xxx --profile production
+pspm login --api-key sk_staging_xxx --profile staging
+
+# Use specific profile for operations
+pspm add @user/bsheng/skill --profile production
+```
+
+## License
+
+See LICENSE file.

package/dist/index.js

@@ -38,7 +38,7 @@ function resolveVersion(range, availableVersions) {
   return semver.maxSatisfying(sorted, range);
 }
 
-// ../../packages/sdk/src/client.ts
+// ../../packages/sdk/src/fetcher.ts
 var config = null;
 function configure(options) {
   config = options;
@@ -49,18 +49,10 @@ function getConfig() {
   }
   return config;
 }
-var SDKError = class extends Error {
-  constructor(message, status, body) {
-    super(message);
-    this.status = status;
-    this.body = body;
-    this.name = "SDKError";
-  }
-};
-async function apiFetch(path, options = {}) {
+async function customFetch(url, options) {
   const { baseUrl, apiKey } = getConfig();
-  const url = `${baseUrl}${path}`;
-  const response = await fetch(url, {
+  const fullUrl = `${baseUrl}${url}`;
+  const response = await fetch(fullUrl, {
     ...options,
     headers: {
       ...options.headers,
@@ -68,64 +60,114 @@ async function apiFetch(path, options = {}) {
       "Content-Type": "application/json"
     }
   });
-  if (!response.ok) {
-    const errorText = await response.text();
-    let errorMessage = `API error: ${response.status}`;
+  const text = await response.text();
+  let data = null;
+  if (text) {
     try {
-      const errorJson = JSON.parse(errorText);
-      if (errorJson.message) {
-        errorMessage = errorJson.message;
-      } else if (errorJson.error) {
-        errorMessage = errorJson.error;
-      }
+      data = JSON.parse(text);
     } catch {
-      if (errorText) {
-        errorMessage = errorText;
-      }
+      data = text;
     }
-    throw new SDKError(errorMessage, response.status, errorText);
-  }
-  const text = await response.text();
-  if (!text) {
-    return null;
   }
-  return JSON.parse(text);
-}
-async function me() {
-  return apiFetch("/me", { method: "GET" });
+  return {
+    data,
+    status: response.status,
+    headers: response.headers
+  };
 }
-async function listVersions(params) {
-  return apiFetch(
-    `/@user/${params.username}/${params.name}/versions`,
-    { method: "GET" }
+
+// ../../packages/sdk/src/generated/index.ts
+var getMeUrl = () => {
+  return `/me`;
+};
+var me = async (options) => {
+  return customFetch(
+    getMeUrl(),
+    {
+      ...options,
+      method: "GET"
+    }
   );
-}
-async function getVersion(params) {
-  return apiFetch(
-    `/@user/${params.username}/${params.name}/${params.version}`,
-    { method: "GET" }
+};
+var getListSkillVersionsUrl = (username, name) => {
+  return `/@user/${username}/${name}/versions`;
+};
+var listSkillVersions = async (username, name, options) => {
+  return customFetch(
+    getListSkillVersionsUrl(username, name),
+    {
+      ...options,
+      method: "GET"
+    }
   );
-}
-async function publish(body) {
-  return apiFetch("/publish", {
-    method: "POST",
-    body: JSON.stringify(body)
-  });
-}
-async function deleteSkill(params) {
-  return apiFetch(`/${params.name}`, { method: "DELETE" });
-}
-async function deleteVersion(params) {
-  return apiFetch(`/${params.name}/${params.version}`, {
-    method: "DELETE"
-  });
-}
+};
+var getGetSkillVersionUrl = (username, name, version2) => {
+  return `/@user/${username}/${name}/${version2}`;
+};
+var getSkillVersion = async (username, name, version2, options) => {
+  return customFetch(
+    getGetSkillVersionUrl(username, name, version2),
+    {
+      ...options,
+      method: "GET"
+    }
+  );
+};
+var getPublishSkillUrl = () => {
+  return `/publish`;
+};
+var publishSkill = async (publishSkillBody, options) => {
+  return customFetch(
+    getPublishSkillUrl(),
+    {
+      ...options,
+      method: "POST",
+      headers: { "Content-Type": "application/json", ...options?.headers },
+      body: JSON.stringify(
+        publishSkillBody
+      )
+    }
+  );
+};
+var getDeleteSkillUrl = (name) => {
+  return `/${name}`;
+};
+var deleteSkill = async (name, deleteSkillBody, options) => {
+  return customFetch(
+    getDeleteSkillUrl(name),
+    {
+      ...options,
+      method: "DELETE",
+      headers: { "Content-Type": "application/json", ...options?.headers },
+      body: JSON.stringify(
+        deleteSkillBody
+      )
+    }
+  );
+};
+var getDeleteSkillVersionUrl = (name, version2) => {
+  return `/${name}/${version2}`;
+};
+var deleteSkillVersion = async (name, version2, deleteSkillVersionBody, options) => {
+  return customFetch(
+    getDeleteSkillVersionUrl(name, version2),
+    {
+      ...options,
+      method: "DELETE",
+      headers: { "Content-Type": "application/json", ...options?.headers },
+      body: JSON.stringify(
+        deleteSkillVersionBody
+      )
+    }
+  );
+};
 
 // src/api-client.ts
 async function whoamiRequest(registryUrl, apiKey) {
   try {
-    configure({ baseUrl: `${registryUrl}/rpc`, apiKey });
-    const user = await me();
+    configure({ baseUrl: registryUrl, apiKey });
+    const response = await me();
+    const user = response.data;
     if (!user) {
       return null;
     }
@@ -492,9 +534,10 @@ async function add(specifier, _options, globalOptions) {
       process.exit(1);
     }
     const { username, name, versionRange } = parsed;
-    configure({ baseUrl: `${registryUrl}/rpc`, apiKey });
+    configure({ baseUrl: registryUrl, apiKey });
     console.log(`Resolving ${specifier}...`);
-    const versions = await listVersions({ username, name });
+    const versionsResponse = await listSkillVersions(username, name);
+    const versions = versionsResponse.data;
     if (versions.length === 0) {
       console.error(`Error: Skill @user/${username}/${name} not found`);
       process.exit(1);
@@ -509,11 +552,8 @@ async function add(specifier, _options, globalOptions) {
       process.exit(1);
     }
     console.log(`Installing @user/${username}/${name}@${resolved}...`);
-    const versionInfo = await getVersion({
-      username,
-      name,
-      version: resolved
-    });
+    const versionResponse = await getSkillVersion(username, name, resolved);
+    const versionInfo = versionResponse.data;
     if (!versionInfo) {
       console.error(`Error: Version ${resolved} not found`);
       process.exit(1);
@@ -924,9 +964,9 @@ function getServerUrl(registryUrl) {
     return DEFAULT_WEB_APP_URL;
   }
 }
-async function exchangeCliToken(registryUrl, token) {
+async function exchangeCliToken2(registryUrl, token) {
   const serverUrl = getServerUrl(registryUrl);
-  const rpcUrl = `${serverUrl}/api/api-keys/rpc/exchangeCliToken`;
+  const rpcUrl = `${serverUrl}/api/api-keys/cli-token-exchange`;
   const response = await fetch(rpcUrl, {
     method: "POST",
     headers: {
@@ -1050,7 +1090,7 @@ async function browserLogin(globalOptions) {
   const token = await tokenPromise;
   cleanup();
   console.log("Received token, exchanging for API key...");
-  const { apiKey, username } = await exchangeCliToken(registryUrl, token);
+  const { apiKey, username } = await exchangeCliToken2(registryUrl, token);
   await setProfileCredentials(
     resolved.profileName,
     apiKey,
@@ -1175,11 +1215,17 @@ async function publishCommand(options, globalOptions) {
       );
       const tarballBuffer = await readFile(tarballPath);
       const tarballBase64 = tarballBuffer.toString("base64");
-      configure({ baseUrl: `${registryUrl}/rpc`, apiKey });
-      const result = await publish({
+      configure({ baseUrl: registryUrl, apiKey });
+      const response = await publishSkill({
         manifest: packageJson2,
         tarballBase64
       });
+      if (response.status !== 200) {
+        const errorData = response.data;
+        const errorMessage = errorData?.error || errorData?.message || "Publish failed";
+        throw new Error(errorMessage);
+      }
+      const result = response.data;
       console.log(
         `
 Published @user/${result.skill.username}/${result.skill.name}@${result.version.version}`
@@ -1295,7 +1341,7 @@ async function unpublish(specifier, options, globalOptions) {
       process.exit(1);
     }
     const { username, name, versionRange } = parsed;
-    configure({ baseUrl: `${registryUrl}/rpc`, apiKey });
+    configure({ baseUrl: registryUrl, apiKey });
     if (versionRange) {
       console.log(`Unpublishing ${specifier}...`);
       if (!options.force) {
@@ -1304,16 +1350,14 @@ async function unpublish(specifier, options, globalOptions) {
         );
         process.exit(1);
       }
-      const result = await deleteVersion({
-        name,
-        version: versionRange
-      });
-      if (result.success) {
-        console.log(`Unpublished @user/${username}/${name}@${versionRange}`);
-      } else {
-        console.error(`Error: Failed to unpublish. Version may not exist.`);
+      const response = await deleteSkillVersion(name, versionRange);
+      if (response.status !== 200) {
+        const errorData = response.data;
+        const errorMessage = errorData?.error || errorData?.message || "Failed to unpublish. Version may not exist.";
+        console.error(`Error: ${errorMessage}`);
         process.exit(1);
       }
+      console.log(`Unpublished @user/${username}/${name}@${versionRange}`);
     } else {
       console.log(`Unpublishing all versions of @user/${username}/${name}...`);
       if (!options.force) {
@@ -1322,13 +1366,14 @@ async function unpublish(specifier, options, globalOptions) {
         );
         process.exit(1);
       }
-      const result = await deleteSkill({ name });
-      if (result.success) {
-        console.log(`Unpublished @user/${username}/${name} (all versions)`);
-      } else {
-        console.error(`Error: Failed to unpublish. Skill may not exist.`);
+      const response = await deleteSkill(name);
+      if (response.status !== 200) {
+        const errorData = response.data;
+        const errorMessage = errorData?.error || errorData?.message || "Failed to unpublish. Skill may not exist.";
+        console.error(`Error: ${errorMessage}`);
         process.exit(1);
       }
+      console.log(`Unpublished @user/${username}/${name} (all versions)`);
     }
   } catch (error) {
     const message = error instanceof Error ? error.message : "Unknown error";
@@ -1347,7 +1392,7 @@ async function update(options, globalOptions) {
       console.log("No skills installed.");
       return;
     }
-    configure({ baseUrl: `${registryUrl}/rpc`, apiKey });
+    configure({ baseUrl: registryUrl, apiKey });
     const updates = [];
     console.log("Checking for updates...\n");
     for (const { name, entry } of skills) {
@@ -1355,10 +1400,8 @@ async function update(options, globalOptions) {
       if (!match) continue;
       const [, username, skillName] = match;
       try {
-        const versions = await listVersions({
-          username,
-          name: skillName
-        });
+        const versionsResponse = await listSkillVersions(username, skillName);
+        const versions = versionsResponse.data;
         if (versions.length === 0) continue;
         const versionStrings = versions.map(
           (v) => v.version