@anytio/pspm 0.0.5 → 0.1.0

package/LICENSE

@@ -0,0 +1,149 @@
+# PolyForm Shield License 1.0.0
+
+<https://polyformproject.org/licenses/shield/1.0.0>
+
+Required Notice: Copyright AnyTransformer Inc. (https://pspm.dev)
+
+## Acceptance
+
+In order to get any license under these terms, you must agree
+to them as both strict obligations and conditions to all
+your licenses.
+
+## Copyright License
+
+The licensor grants you a copyright license for the
+software to do everything you might do with the software
+that would otherwise infringe the licensor's copyright
+in it for any permitted purpose.  However, you may
+only distribute the software according to [Distribution
+License](#distribution-license) and make changes or new works
+based on the software according to [Changes and New Works
+License](#changes-and-new-works-license).
+
+## Distribution License
+
+The licensor grants you an additional copyright license
+to distribute copies of the software.  Your license
+to distribute covers distributing the software with
+changes and new works permitted by [Changes and New Works
+License](#changes-and-new-works-license).
+
+## Notices
+
+You must ensure that anyone who gets a copy of any part of
+the software from you also gets a copy of these terms or the
+URL for them above, as well as copies of any plain-text lines
+beginning with `Required Notice:` that the licensor provided
+with the software.  For example:
+
+> Required Notice: Copyright Yonder, Inc. (https://yonder.io)
+
+## Changes and New Works License
+
+The licensor grants you an additional copyright license to
+make changes and new works based on the software for any
+permitted purpose.
+
+## Patent License
+
+The licensor grants you a patent license for the software that
+covers patent claims the licensor can license, or becomes able
+to license, that you would infringe by using the software.
+
+## Noncompete
+
+Any purpose is a permitted purpose, except for providing any
+product that competes with the software or any product the
+licensor or any of its affiliates provides using the software.
+
+## Competition
+
+Goods and services compete even when they provide functionality
+through different kinds of interfaces or for different technical
+platforms.  Applications can compete with services, libraries
+with plugins, frameworks with development tools, and so on,
+even if they're written in different programming languages
+or for different computer architectures.  Goods and services
+compete even when provided free of charge.  If you market a
+product as a practical substitute for the software or another
+product, it definitely competes.
+
+## New Products
+
+If you are using the software to provide a product that does
+not compete, you may continue doing so even if the licensor or
+any of its affiliates later provides a competing product.
+
+## Discontinued Products
+
+You may begin using the software to provide a product that
+competes with one the licensor or any of its affiliates has
+stopped providing, unless the licensor or any of its affiliates
+began providing that product again within one year of your
+starting to compete.
+
+## Sales of Business
+
+If the licensor or any of its affiliates sells a line of
+business developing the software or using the software
+to provide a product, the buyer can also enforce
+[Noncompete](#noncompete) for that product.
+
+## No Other Rights
+
+These terms do not allow you to sublicense or transfer any of
+your licenses to anyone else, or prevent the licensor from
+granting licenses to anyone else.  These terms do not imply
+any other licenses.
+
+## Patent Defense
+
+If you make any written claim that the software infringes or
+contributes to infringement of any patent, your patent license
+for the software granted under these terms ends immediately.  If
+your company makes such a claim, your patent license ends
+immediately for work on behalf of your company.
+
+## Violations
+
+The first time you are notified in writing that you have
+violated any of these terms, or done anything with the software
+not covered by your licenses, your licenses can nonetheless
+continue if you come into full compliance with these terms,
+and take practical steps to correct past violations, within
+32 days of receiving notice.  Otherwise, all your licenses
+end immediately.
+
+## No Liability
+
+***As far as the law allows, the software comes as is, without
+any warranty or condition, and the licensor will not be liable
+to you for any damages arising out of these terms or the use
+or nature of the software, under any kind of legal claim.***
+
+## Definitions
+
+The **licensor** is the entity offering these terms, and the
+**software** is the software the licensor makes available under
+these terms, including any portion of it.
+
+**you** refers to the individual or entity agreeing to these
+terms.
+
+**your company** is any legal entity, sole proprietorship,
+or other kind of organization that you work for, plus all
+organizations that have control over, are under the control of,
+or are under common control with that organization.  **control**
+means ownership of substantially all the assets of an entity,
+or the power to direct its management and policies by vote,
+contract, or otherwise.  Control can be direct or indirect.
+
+**your licenses** are all the licenses granted to you for the
+software under these terms.
+
+**use** means anything you do with the software requiring one
+of your licenses.
+
+**trademark** means trademarks, service marks, and similar
+rights.

package/README.md

@@ -26,14 +26,17 @@ npx @anytio/pspm <command>
 # Login with your API key
 pspm login --api-key <your-api-key>
 
-# Add a skill to your project
+# Add a skill from the registry
 pspm add @user/username/skill-name
 
+# Add a skill from GitHub
+pspm add github:owner/repo/path@main
+
 # List installed skills
 pspm list
 
 # Install all skills from lockfile
-pspm install
+pspm install --agent claude-code,cursor
 ```
 
 ## Commands
@@ -53,22 +56,48 @@ pspm add <specifier>          # Add and install a skill
 pspm remove <name>            # Remove an installed skill (alias: rm)
 pspm list                     # List installed skills (alias: ls)
 pspm install                  # Install all skills from lockfile (alias: i)
+pspm link                     # Recreate agent symlinks without reinstalling
 pspm update                   # Update skills to latest compatible versions
 ```
 
-**Specifier formats:**
+**Registry specifier formats:**
 - `@user/username/skillname` - Latest version
 - `@user/username/skillname@2.0.0` - Specific version
 - `@user/username/skillname@^2.0.0` - Semver range
 
+**GitHub specifier formats:**
+- `github:owner/repo` - Entire repository (default branch)
+- `github:owner/repo@main` - Entire repository (specific branch/tag)
+- `github:owner/repo/path/to/skill` - Subdirectory within repo
+- `github:owner/repo/path/to/skill@v1.0.0` - Subdirectory with tag
+
+**Agent symlink options:**
+```bash
+pspm add <specifier> --agent claude-code,cursor  # Link to multiple agents
+pspm install --agent none                        # Skip symlink creation
+pspm link --agent codex                          # Recreate symlinks for specific agent
+```
+
+Default agent is `claude-code` (creates symlinks in `.claude/skills/`).
+
 ### Publishing
 
 ```bash
 pspm publish                  # Publish current directory as a skill
 pspm publish --bump patch     # Auto-bump version (major, minor, patch)
+pspm publish --access public  # Publish and make public in one step
 pspm unpublish <spec> --force # Remove a published skill version
 ```
 
+### Visibility
+
+```bash
+pspm access --public          # Make current package public
+pspm access <spec> --public   # Make specific package public
+```
+
+**Note:** Making a package public is irreversible (like npm). Public packages cannot be made private again.
+
 **Publish Output:**
 
 When publishing, PSPM displays detailed package information similar to npm:
@@ -112,6 +141,13 @@ PSPM uses a simple npm-like INI configuration format.
 registry = https://pspm.dev
 authToken = sk_...
 username = myuser
+
+; Multi-registry: Scope mappings
+@myorg:registry = https://corp.pspm.io
+
+; Multi-registry: Per-registry tokens
+//pspm.dev:authToken = sk_public_token
+//corp.pspm.io:authToken = sk_corp_token
 ```
 
 ### Project Config (`.pspmrc`)
@@ -123,18 +159,27 @@ Project-specific configuration (optional):
 registry = https://custom-registry.example.com
 ```
 
-### Lockfile (`skill-lock.json`)
+### Lockfile (`pspm-lock.json`)
 
 ```json
 {
-  "lockfileVersion": 1,
+  "lockfileVersion": 3,
   "registryUrl": "https://pspm.dev",
-  "skills": {
+  "packages": {
     "@user/username/skillname": {
       "version": "1.0.0",
-      "resolved": "https://pspm.dev/api/skills/@user/username/skillname/1.0.0/download",
+      "resolved": "https://pspm.dev/...",
       "integrity": "sha256-..."
     }
+  },
+  "githubPackages": {
+    "github:owner/repo/path": {
+      "version": "abc1234",
+      "resolved": "https://github.com/owner/repo",
+      "integrity": "sha256-...",
+      "gitCommit": "abc1234567890...",
+      "gitRef": "main"
+    }
   }
 }
 ```
@@ -155,6 +200,7 @@ Configuration is resolved in priority order:
 | `PSPM_REGISTRY_URL` | Override registry URL |
 | `PSPM_API_KEY` | Override API key |
 | `PSPM_DEBUG` | Enable debug logging |
+| `GITHUB_TOKEN` | GitHub token for private repos and higher rate limits |
 
 ## Error Handling
 
@@ -184,12 +230,25 @@ Error: Not logged in. Run 'pspm login --api-key <key>' first, or set PSPM_API_KE
 ```
 project/
 ├── .pspmrc              # Project config (optional)
-├── skill-lock.json      # Lockfile
-└── .skills/             # Installed skills
-    └── username/
-        └── skillname/
-            ├── SKILL.md
-            └── ...
+├── pspm.json            # Manifest with dependencies
+├── pspm-lock.json       # Lockfile
+├── .pspm/
+│   ├── skills/          # Installed skills
+│   │   ├── username/    # Registry skills
+│   │   │   └── skillname/
+│   │   │       └── SKILL.md
+│   │   └── _github/     # GitHub skills
+│   │       └── owner/
+│   │           └── repo/
+│   │               └── path/
+│   │                   └── SKILL.md
+│   └── cache/           # Tarball cache
+├── .claude/
+│   └── skills/          # Symlinks for claude-code agent
+│       ├── skillname -> ../../.pspm/skills/username/skillname
+│       └── repo -> ../../.pspm/skills/_github/owner/repo
+└── .cursor/
+    └── skills/          # Symlinks for cursor agent (if configured)
 
 ~/
 └── .pspmrc              # User config