@anytio/pspm 0.1.0 → 0.1.1

package/dist/index.js

@@ -1,33 +1,39 @@
 #!/usr/bin/env node
-import { readFileSync } from 'fs';
-import { dirname, join, basename, relative } from 'path';
-import { fileURLToPath, URL as URL$1 } from 'url';
-import { Command } from 'commander';
 import { createHash, randomBytes } from 'crypto';
 import * as semver from 'semver';
-import { stat, writeFile, readdir, mkdir, rm, rename, access as access$1, readFile, lstat, cp, unlink, readlink, symlink } from 'fs/promises';
+import { stat, writeFile, readdir, mkdir, rm, rename, access as access$1, readFile, lstat, unlink, cp, readlink, symlink } from 'fs/promises';
 import { homedir } from 'os';
+import { dirname, join, basename, relative } from 'path';
 import * as ini from 'ini';
 import { checkbox } from '@inquirer/prompts';
+import { readFileSync } from 'fs';
+import { fileURLToPath, URL as URL$1 } from 'url';
+import { Command } from 'commander';
 import { createInterface } from 'readline';
 import http from 'http';
 import open from 'open';
 import { exec as exec$1 } from 'child_process';
 import { promisify } from 'util';
 
+var __defProp = Object.defineProperty;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __esm = (fn, res) => function __init() {
+  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+};
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
 function calculateIntegrity(data) {
   const hash = createHash("sha256").update(data).digest("base64");
   return `sha256-${hash}`;
 }
+var init_integrity = __esm({
+  "../../packages/shared/pspm-types/src/integrity.ts"() {
+  }
+});
 
 // ../../packages/shared/pspm-types/src/manifest.ts
-var DEFAULT_SKILL_FILES = [
-  "SKILL.md",
-  "runtime",
-  "scripts",
-  "data"
-];
-var PSPM_SCHEMA_URL = "https://pspm.dev/schema/v1/pspm.json";
 function validateManifest(manifest) {
   if (!manifest.name) {
     return { valid: false, error: "Manifest must have a 'name' field" };
@@ -49,9 +55,20 @@ function validateManifest(manifest) {
   }
   return { valid: true };
 }
+var DEFAULT_SKILL_FILES, PSPM_SCHEMA_URL;
+var init_manifest = __esm({
+  "../../packages/shared/pspm-types/src/manifest.ts"() {
+    DEFAULT_SKILL_FILES = [
+      "SKILL.md",
+      "runtime",
+      "scripts",
+      "data"
+    ];
+    PSPM_SCHEMA_URL = "https://pspm.dev/schema/v1/pspm.json";
+  }
+});
 
 // ../../packages/shared/pspm-types/src/specifier.ts
-var SPECIFIER_PATTERN = /^@user\/([a-zA-Z0-9_-]+)\/([a-z][a-z0-9_-]*)(?:@(.+))?$/;
 function parseSkillSpecifier(specifier) {
   const match = specifier.match(SPECIFIER_PATTERN);
   if (!match) {
@@ -63,7 +80,6 @@ function parseSkillSpecifier(specifier) {
     versionRange: match[3]
   };
 }
-var GITHUB_SPECIFIER_PATTERN = /^github:([a-zA-Z0-9_-]+)\/([a-zA-Z0-9_.-]+)(\/[^@]+)?(?:@(.+))?$/;
 function parseGitHubSpecifier(specifier) {
   const match = specifier.match(GITHUB_SPECIFIER_PATTERN);
   if (!match) {
@@ -98,6 +114,13 @@ function getGitHubSkillName(spec) {
 function isGitHubSpecifier(specifier) {
   return specifier.startsWith("github:");
 }
+var SPECIFIER_PATTERN, GITHUB_SPECIFIER_PATTERN;
+var init_specifier = __esm({
+  "../../packages/shared/pspm-types/src/specifier.ts"() {
+    SPECIFIER_PATTERN = /^@user\/([a-zA-Z0-9_-]+)\/([a-z][a-z0-9_-]*)(?:@(.+))?$/;
+    GITHUB_SPECIFIER_PATTERN = /^github:([a-zA-Z0-9_-]+)\/([a-zA-Z0-9_.-]+)(\/[^@]+)?(?:@(.+))?$/;
+  }
+});
 function resolveVersion(range, availableVersions) {
   const sorted = availableVersions.filter((v) => semver.valid(v)).sort((a, b) => semver.rcompare(a, b));
   if (!range || range === "latest" || range === "*") {
@@ -105,9 +128,22 @@ function resolveVersion(range, availableVersions) {
   }
   return semver.maxSatisfying(sorted, range);
 }
+var init_version = __esm({
+  "../../packages/shared/pspm-types/src/version.ts"() {
+  }
+});
+
+// ../../packages/shared/pspm-types/src/index.ts
+var init_src = __esm({
+  "../../packages/shared/pspm-types/src/index.ts"() {
+    init_integrity();
+    init_manifest();
+    init_specifier();
+    init_version();
+  }
+});
 
 // ../../packages/sdk/src/fetchers/cli-fetcher.ts
-var config = null;
 function configure(options) {
   config = options;
 }
@@ -146,84 +182,104 @@ async function customFetch(url, options) {
     headers: response.headers
   };
 }
+var config;
+var init_cli_fetcher = __esm({
+  "../../packages/sdk/src/fetchers/cli-fetcher.ts"() {
+    config = null;
+  }
+});
 
 // ../../packages/sdk/src/generated/fetch/index.ts
-var getMeUrl = () => {
-  return `/api/skills/me`;
-};
-var me = async (options) => {
-  return customFetch(
-    getMeUrl(),
-    {
-      ...options,
-      method: "GET"
-    }
-  );
-};
-var getListSkillVersionsUrl = (username, name) => {
-  return `/api/skills/@user/${username}/${name}/versions`;
-};
-var listSkillVersions = async (username, name, options) => {
-  return customFetch(
-    getListSkillVersionsUrl(username, name),
-    {
-      ...options,
-      method: "GET"
-    }
-  );
-};
-var getGetSkillVersionUrl = (username, name, version2) => {
-  return `/api/skills/@user/${username}/${name}/${version2}`;
-};
-var getSkillVersion = async (username, name, version2, options) => {
-  return customFetch(
-    getGetSkillVersionUrl(username, name, version2),
-    {
-      ...options,
-      method: "GET"
-    }
-  );
-};
-var getPublishSkillUrl = () => {
-  return `/api/skills/publish`;
-};
-var publishSkill = async (publishSkillInput, options) => {
-  return customFetch(
-    getPublishSkillUrl(),
-    {
-      ...options,
-      method: "POST",
-      headers: { "Content-Type": "application/json", ...options?.headers },
-      body: JSON.stringify(
-        publishSkillInput
-      )
-    }
-  );
-};
-var getDeleteSkillUrl = (name) => {
-  return `/api/skills/${name}`;
-};
-var deleteSkill = async (name, options) => {
-  return customFetch(
-    getDeleteSkillUrl(name),
-    {
-      ...options,
-      method: "DELETE"
-    }
-  );
-};
-var getDeleteSkillVersionUrl = (name, version2) => {
-  return `/api/skills/${name}/${version2}`;
-};
-var deleteSkillVersion = async (name, version2, options) => {
-  return customFetch(
-    getDeleteSkillVersionUrl(name, version2),
-    {
-      ...options,
-      method: "DELETE"
-    }
-  );
-};
+var getMeUrl, me, getListSkillVersionsUrl, listSkillVersions, getGetSkillVersionUrl, getSkillVersion, getPublishSkillUrl, publishSkill, getDeleteSkillUrl, deleteSkill, getDeleteSkillVersionUrl, deleteSkillVersion;
+var init_fetch = __esm({
+  "../../packages/sdk/src/generated/fetch/index.ts"() {
+    init_cli_fetcher();
+    getMeUrl = () => {
+      return `/api/skills/me`;
+    };
+    me = async (options) => {
+      return customFetch(
+        getMeUrl(),
+        {
+          ...options,
+          method: "GET"
+        }
+      );
+    };
+    getListSkillVersionsUrl = (username, name) => {
+      return `/api/skills/@user/${username}/${name}/versions`;
+    };
+    listSkillVersions = async (username, name, options) => {
+      return customFetch(
+        getListSkillVersionsUrl(username, name),
+        {
+          ...options,
+          method: "GET"
+        }
+      );
+    };
+    getGetSkillVersionUrl = (username, name, version2) => {
+      return `/api/skills/@user/${username}/${name}/${version2}`;
+    };
+    getSkillVersion = async (username, name, version2, options) => {
+      return customFetch(
+        getGetSkillVersionUrl(username, name, version2),
+        {
+          ...options,
+          method: "GET"
+        }
+      );
+    };
+    getPublishSkillUrl = () => {
+      return `/api/skills/publish`;
+    };
+    publishSkill = async (publishSkillInput, options) => {
+      return customFetch(
+        getPublishSkillUrl(),
+        {
+          ...options,
+          method: "POST",
+          headers: { "Content-Type": "application/json", ...options?.headers },
+          body: JSON.stringify(
+            publishSkillInput
+          )
+        }
+      );
+    };
+    getDeleteSkillUrl = (name) => {
+      return `/api/skills/${name}`;
+    };
+    deleteSkill = async (name, options) => {
+      return customFetch(
+        getDeleteSkillUrl(name),
+        {
+          ...options,
+          method: "DELETE"
+        }
+      );
+    };
+    getDeleteSkillVersionUrl = (name, version2) => {
+      return `/api/skills/${name}/${version2}`;
+    };
+    deleteSkillVersion = async (name, version2, options) => {
+      return customFetch(
+        getDeleteSkillVersionUrl(name, version2),
+        {
+          ...options,
+          method: "DELETE"
+        }
+      );
+    };
+  }
+});
+
+// ../../packages/sdk/src/index.ts
+var init_src2 = __esm({
+  "../../packages/sdk/src/index.ts"() {
+    init_cli_fetcher();
+    init_fetch();
+  }
+});
 
 // src/api-client.ts
 function registryUrlToBaseUrl(registryUrl) {
@@ -345,22 +401,13 @@ async function changeSkillAccess(skillName, input) {
     };
   }
 }
+var init_api_client = __esm({
+  "src/api-client.ts"() {
+    init_src2();
+  }
+});
 
 // src/errors.ts
-var ConfigError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "ConfigError";
-  }
-};
-var NotLoggedInError = class extends ConfigError {
-  constructor() {
-    super(
-      "Not logged in. Run 'pspm login --api-key <key>' first, or set PSPM_API_KEY env var."
-    );
-    this.name = "NotLoggedInError";
-  }
-};
 function extractApiErrorMessage(response, fallbackMessage) {
   const errorData = response.data;
   if (process.env.PSPM_DEBUG) {
@@ -395,9 +442,25 @@ ${issueMessages}`;
   }
   return errorMessage;
 }
-
-// src/config.ts
-var DEFAULT_REGISTRY_URL = "https://pspm.dev";
+var ConfigError, NotLoggedInError;
+var init_errors = __esm({
+  "src/errors.ts"() {
+    ConfigError = class extends Error {
+      constructor(message) {
+        super(message);
+        this.name = "ConfigError";
+      }
+    };
+    NotLoggedInError = class extends ConfigError {
+      constructor() {
+        super(
+          "Not logged in. Run 'pspm login --api-key <key>' first, or set PSPM_API_KEY env var."
+        );
+        this.name = "NotLoggedInError";
+      }
+    };
+  }
+});
 function getConfigPath() {
   return join(homedir(), ".pspmrc");
 }
@@ -667,131 +730,13 @@ async function getRegistryUrl() {
   const resolved = await resolveConfig();
   return resolved.registryUrl;
 }
-
-// src/commands/access.ts
-async function access(specifier, options) {
-  try {
-    const apiKey = await requireApiKey();
-    const registryUrl = await getRegistryUrl();
-    if (options.public && options.private) {
-      console.error("Error: Cannot specify both --public and --private");
-      process.exit(1);
-    }
-    if (!options.public && !options.private) {
-      console.error("Error: Must specify either --public or --private");
-      process.exit(1);
-    }
-    const visibility = options.public ? "public" : "private";
-    let packageName;
-    if (specifier) {
-      const parsed = parseSkillSpecifier(specifier);
-      if (!parsed) {
-        console.error(
-          `Error: Invalid skill specifier "${specifier}". Use format: @user/{username}/{name}`
-        );
-        process.exit(1);
-      }
-      packageName = parsed.name;
-    } else {
-      const { readFile: readFile7 } = await import('fs/promises');
-      const { join: join13 } = await import('path');
-      let manifest = null;
-      try {
-        const content = await readFile7(
-          join13(process.cwd(), "pspm.json"),
-          "utf-8"
-        );
-        manifest = JSON.parse(content);
-      } catch {
-        try {
-          const content = await readFile7(
-            join13(process.cwd(), "package.json"),
-            "utf-8"
-          );
-          manifest = JSON.parse(content);
-        } catch {
-          console.error(
-            "Error: No pspm.json or package.json found in current directory"
-          );
-          console.error(
-            "Either run this command in a package directory or specify a package name"
-          );
-          process.exit(1);
-        }
-      }
-      if (!manifest?.name) {
-        console.error("Error: Package manifest is missing 'name' field");
-        process.exit(1);
-      }
-      packageName = manifest.name;
-    }
-    configure2({ registryUrl, apiKey });
-    console.log(`Setting ${packageName} to ${visibility}...`);
-    const response = await changeSkillAccess(packageName, { visibility });
-    if (response.status !== 200 || !response.data) {
-      const errorMessage = response.error ?? "Failed to change visibility";
-      console.error(`Error: ${errorMessage}`);
-      process.exit(1);
-    }
-    const result = response.data;
-    console.log(
-      `+ @user/${result.username}/${result.name} is now ${result.visibility}`
-    );
-    if (visibility === "public") {
-      console.log("");
-      console.log(
-        "Note: This action is irreversible. Public packages cannot be made private."
-      );
-    }
-  } catch (error) {
-    const message = error instanceof Error ? error.message : "Unknown error";
-    console.error(`Error: ${message}`);
-    process.exit(1);
-  }
-}
-var AGENT_INFO = {
-  "claude-code": {
-    displayName: "Claude Code",
-    skillsDir: ".claude/skills"
-  },
-  codex: {
-    displayName: "Codex",
-    skillsDir: ".codex/skills"
-  },
-  cursor: {
-    displayName: "Cursor",
-    skillsDir: ".cursor/skills"
-  },
-  gemini: {
-    displayName: "Gemini CLI",
-    skillsDir: ".gemini/skills"
-  },
-  kiro: {
-    displayName: "Kiro CLI",
-    skillsDir: ".kiro/skills"
-  },
-  opencode: {
-    displayName: "OpenCode",
-    skillsDir: ".opencode/skills"
+var DEFAULT_REGISTRY_URL;
+var init_config = __esm({
+  "src/config.ts"() {
+    init_errors();
+    DEFAULT_REGISTRY_URL = "https://pspm.dev";
   }
-};
-var DEFAULT_AGENT_CONFIGS = {
-  "claude-code": { skillsDir: AGENT_INFO["claude-code"].skillsDir },
-  codex: { skillsDir: AGENT_INFO.codex.skillsDir },
-  cursor: { skillsDir: AGENT_INFO.cursor.skillsDir },
-  gemini: { skillsDir: AGENT_INFO.gemini.skillsDir },
-  kiro: { skillsDir: AGENT_INFO.kiro.skillsDir },
-  opencode: { skillsDir: AGENT_INFO.opencode.skillsDir }
-};
-var DEFAULT_AGENT = "claude-code";
-var ALL_AGENTS = [
-  "claude-code",
-  "codex",
-  "cursor",
-  "gemini",
-  "kiro",
-  "opencode"
-];
+});
 function resolveAgentConfig(name, overrides) {
   if (overrides?.[name]) {
     return overrides[name];
@@ -803,7 +748,7 @@ function resolveAgentConfig(name, overrides) {
 }
 function parseAgentArg(agentArg) {
   if (!agentArg) {
-    return [DEFAULT_AGENT];
+    return [...DEFAULT_AGENTS];
   }
   if (agentArg === "none") {
     return ["none"];
@@ -831,35 +776,54 @@ async function promptForAgents() {
   }
   return selected;
 }
-var GitHubRateLimitError = class extends Error {
-  constructor() {
-    super(
-      "GitHub API rate limit exceeded. Set GITHUB_TOKEN environment variable for higher limits."
-    );
-    this.name = "GitHubRateLimitError";
-  }
-};
-var GitHubNotFoundError = class extends Error {
-  constructor(spec) {
-    const path = spec.path ? `/${spec.path}` : "";
-    const ref = spec.ref ? `@${spec.ref}` : "";
-    super(
-      `GitHub repository not found: ${spec.owner}/${spec.repo}${path}${ref}`
-    );
-    this.name = "GitHubNotFoundError";
-  }
-};
-var GitHubPathNotFoundError = class extends Error {
-  constructor(spec, availablePaths) {
-    const pathInfo = availablePaths?.length ? `
-Available paths in repository root:
-  ${availablePaths.join("\n  ")}` : "";
-    super(
-      `Path "${spec.path}" not found in ${spec.owner}/${spec.repo}${pathInfo}`
-    );
-    this.name = "GitHubPathNotFoundError";
+var AGENT_INFO, DEFAULT_AGENT_CONFIGS, ALL_AGENTS, DEFAULT_AGENTS;
+var init_agents = __esm({
+  "src/agents.ts"() {
+    AGENT_INFO = {
+      "claude-code": {
+        displayName: "Claude Code",
+        skillsDir: ".claude/skills"
+      },
+      codex: {
+        displayName: "Codex",
+        skillsDir: ".codex/skills"
+      },
+      cursor: {
+        displayName: "Cursor",
+        skillsDir: ".cursor/skills"
+      },
+      gemini: {
+        displayName: "Gemini CLI",
+        skillsDir: ".gemini/skills"
+      },
+      kiro: {
+        displayName: "Kiro CLI",
+        skillsDir: ".kiro/skills"
+      },
+      opencode: {
+        displayName: "OpenCode",
+        skillsDir: ".opencode/skills"
+      }
+    };
+    DEFAULT_AGENT_CONFIGS = {
+      "claude-code": { skillsDir: AGENT_INFO["claude-code"].skillsDir },
+      codex: { skillsDir: AGENT_INFO.codex.skillsDir },
+      cursor: { skillsDir: AGENT_INFO.cursor.skillsDir },
+      gemini: { skillsDir: AGENT_INFO.gemini.skillsDir },
+      kiro: { skillsDir: AGENT_INFO.kiro.skillsDir },
+      opencode: { skillsDir: AGENT_INFO.opencode.skillsDir }
+    };
+    ALL_AGENTS = [
+      "claude-code",
+      "codex",
+      "cursor",
+      "gemini",
+      "kiro",
+      "opencode"
+    ];
+    DEFAULT_AGENTS = ALL_AGENTS;
   }
-};
+});
 function getGitHubHeaders() {
   const headers = {
     Accept: "application/vnd.github+json",
@@ -986,6 +950,41 @@ function getGitHubDisplayName(spec, commit) {
   }
   return name;
 }
+var GitHubRateLimitError, GitHubNotFoundError, GitHubPathNotFoundError;
+var init_github = __esm({
+  "src/github.ts"() {
+    init_src();
+    GitHubRateLimitError = class extends Error {
+      constructor() {
+        super(
+          "GitHub API rate limit exceeded. Set GITHUB_TOKEN environment variable for higher limits."
+        );
+        this.name = "GitHubRateLimitError";
+      }
+    };
+    GitHubNotFoundError = class extends Error {
+      constructor(spec) {
+        const path = spec.path ? `/${spec.path}` : "";
+        const ref = spec.ref ? `@${spec.ref}` : "";
+        super(
+          `GitHub repository not found: ${spec.owner}/${spec.repo}${path}${ref}`
+        );
+        this.name = "GitHubNotFoundError";
+      }
+    };
+    GitHubPathNotFoundError = class extends Error {
+      constructor(spec, availablePaths) {
+        const pathInfo = availablePaths?.length ? `
+Available paths in repository root:
+  ${availablePaths.join("\n  ")}` : "";
+        super(
+          `Path "${spec.path}" not found in ${spec.owner}/${spec.repo}${pathInfo}`
+        );
+        this.name = "GitHubPathNotFoundError";
+      }
+    };
+  }
+});
 async function hasLegacyLockfile() {
   try {
     await stat(getLegacyLockfilePath());
@@ -1143,6 +1142,11 @@ async function listLockfileGitHubPackages() {
     entry
   }));
 }
+var init_lockfile = __esm({
+  "src/lockfile.ts"() {
+    init_config();
+  }
+});
 function getManifestPath() {
   return join(process.cwd(), "pspm.json");
 }
@@ -1214,6 +1218,10 @@ async function removeGitHubDependency(specifier) {
   await writeManifest(manifest);
   return true;
 }
+var init_manifest2 = __esm({
+  "src/manifest.ts"() {
+  }
+});
 async function createAgentSymlinks(skills, options) {
   const { agents, projectRoot, agentConfigs } = options;
   if (agents.length === 1 && agents[0] === "none") {
@@ -1305,9 +1313,47 @@ async function getLinkedAgents(skillName, agents, projectRoot, agentConfigs) {
   }
   return linkedAgents;
 }
+var init_symlinks = __esm({
+  "src/symlinks.ts"() {
+    init_agents();
+  }
+});
 
 // src/commands/add.ts
-async function add(specifier, options) {
+var add_exports = {};
+__export(add_exports, {
+  add: () => add
+});
+async function add(specifiers, options) {
+  console.log("Resolving packages...\n");
+  const resolvedPackages = [];
+  const validationErrors = [];
+  for (const specifier of specifiers) {
+    try {
+      if (isGitHubSpecifier(specifier)) {
+        const resolved = await validateGitHubPackage(specifier);
+        resolvedPackages.push(resolved);
+      } else {
+        const resolved = await validateRegistryPackage(specifier);
+        resolvedPackages.push(resolved);
+      }
+    } catch (error) {
+      const message = error instanceof Error ? error.message : "Unknown error";
+      validationErrors.push({ specifier, error: message });
+      console.error(`Failed to resolve ${specifier}: ${message}
+`);
+    }
+  }
+  if (resolvedPackages.length === 0) {
+    console.error("No packages could be resolved.");
+    process.exit(1);
+  }
+  if (validationErrors.length > 0) {
+    console.log(
+      `Resolved ${resolvedPackages.length} of ${specifiers.length} packages.
+`
+    );
+  }
   let agents;
   const manifest = await readManifest();
   if (options.agent) {
@@ -1319,211 +1365,343 @@ async function add(specifier, options) {
   } else {
     console.log("No pspm.json found. Let's set up your project.\n");
     agents = await promptForAgents();
+    console.log();
   }
-  if (isGitHubSpecifier(specifier)) {
-    await addGitHub(specifier, { ...options, resolvedAgents: agents });
-  } else {
-    await addRegistry(specifier, { ...options, resolvedAgents: agents });
+  const results = [];
+  for (const resolved of resolvedPackages) {
+    try {
+      if (resolved.type === "github") {
+        await installGitHubPackage(resolved, {
+          ...options,
+          resolvedAgents: agents
+        });
+      } else {
+        await installRegistryPackage(resolved, {
+          ...options,
+          resolvedAgents: agents
+        });
+      }
+      results.push({ specifier: resolved.specifier, success: true });
+    } catch (error) {
+      const message = error instanceof Error ? error.message : "Unknown error";
+      results.push({
+        specifier: resolved.specifier,
+        success: false,
+        error: message
+      });
+      console.error(`Failed to install ${resolved.specifier}: ${message}
+`);
+    }
+  }
+  if (specifiers.length > 1) {
+    const succeeded = results.filter((r) => r.success).length;
+    const failed = results.filter((r) => !r.success).length + validationErrors.length;
+    console.log(`
+Summary: ${succeeded} added, ${failed} failed`);
+    if (failed > 0) {
+      process.exit(1);
+    }
   }
 }
-async function addRegistry(specifier, options) {
-  try {
-    const config2 = await resolveConfig();
-    const registryUrl = config2.registryUrl;
-    const apiKey = getTokenForRegistry(config2, registryUrl);
-    const parsed = parseSkillSpecifier(specifier);
-    if (!parsed) {
-      console.error(
-        `Error: Invalid skill specifier "${specifier}". Use format: @user/{username}/{name}[@{version}]`
+async function validateRegistryPackage(specifier) {
+  const config2 = await resolveConfig();
+  const registryUrl = config2.registryUrl;
+  const apiKey = getTokenForRegistry(config2, registryUrl);
+  const parsed = parseSkillSpecifier(specifier);
+  if (!parsed) {
+    throw new Error(
+      `Invalid skill specifier "${specifier}". Use format: @user/{username}/{name}[@{version}]`
+    );
+  }
+  const { username, name, versionRange } = parsed;
+  configure2({ registryUrl, apiKey: apiKey ?? "" });
+  console.log(`Resolving ${specifier}...`);
+  const versionsResponse = await listSkillVersions(username, name);
+  if (versionsResponse.status !== 200) {
+    if (versionsResponse.status === 401) {
+      if (!apiKey) {
+        throw new Error(
+          `Package @user/${username}/${name} requires authentication. Please run 'pspm login' to authenticate`
+        );
+      }
+      throw new Error(
+        `Access denied to @user/${username}/${name}. You may not have permission to access this private package.`
       );
+    }
+    const errorMessage = extractApiErrorMessage(
+      versionsResponse,
+      `Skill @user/${username}/${name} not found`
+    );
+    throw new Error(errorMessage);
+  }
+  const versions = versionsResponse.data;
+  if (versions.length === 0) {
+    throw new Error(`Skill @user/${username}/${name} not found`);
+  }
+  const versionStrings = versions.map((v) => v.version);
+  const resolvedVersion = resolveVersion(versionRange || "*", versionStrings);
+  if (!resolvedVersion) {
+    throw new Error(
+      `No version matching "${versionRange || "latest"}" found for @user/${username}/${name}. Available versions: ${versionStrings.join(", ")}`
+    );
+  }
+  const versionResponse = await getSkillVersion(
+    username,
+    name,
+    resolvedVersion
+  );
+  if (versionResponse.status !== 200 || !versionResponse.data) {
+    const errorMessage = extractApiErrorMessage(
+      versionResponse,
+      `Version ${resolvedVersion} not found`
+    );
+    throw new Error(errorMessage);
+  }
+  console.log(`Resolved @user/${username}/${name}@${resolvedVersion}`);
+  return {
+    type: "registry",
+    specifier,
+    username,
+    name,
+    versionRange,
+    resolvedVersion,
+    versionInfo: {
+      downloadUrl: versionResponse.data.downloadUrl,
+      checksum: versionResponse.data.checksum
+    }
+  };
+}
+async function validateGitHubPackage(specifier) {
+  const parsed = parseGitHubSpecifier(specifier);
+  if (!parsed) {
+    throw new Error(
+      `Invalid GitHub specifier "${specifier}". Use format: github:{owner}/{repo}[/{path}][@{ref}]`
+    );
+  }
+  const ref = parsed.ref || "HEAD";
+  console.log(`Resolving ${getGitHubDisplayName(parsed)}...`);
+  const result = await downloadGitHubPackage(parsed);
+  console.log(`Resolved ${specifier} (${ref}@${result.commit.slice(0, 7)})`);
+  return {
+    type: "github",
+    specifier,
+    parsed,
+    ref,
+    downloadResult: result
+  };
+}
+async function installRegistryPackage(resolved, options) {
+  const { username, name, versionRange, resolvedVersion, versionInfo } = resolved;
+  console.log(`Installing @user/${username}/${name}@${resolvedVersion}...`);
+  const config2 = await resolveConfig();
+  const apiKey = getTokenForRegistry(config2, config2.registryUrl);
+  const isPresignedUrl = versionInfo.downloadUrl.includes(".r2.cloudflarestorage.com") || versionInfo.downloadUrl.includes("X-Amz-Signature");
+  const downloadHeaders = {};
+  if (!isPresignedUrl && apiKey) {
+    downloadHeaders.Authorization = `Bearer ${apiKey}`;
+  }
+  const tarballResponse = await fetch(versionInfo.downloadUrl, {
+    headers: downloadHeaders,
+    redirect: "follow"
+  });
+  if (!tarballResponse.ok) {
+    throw new Error(`Failed to download tarball (${tarballResponse.status})`);
+  }
+  const tarballBuffer = Buffer.from(await tarballResponse.arrayBuffer());
+  const integrity = calculateIntegrity(tarballBuffer);
+  const expectedIntegrity = `sha256-${Buffer.from(versionInfo.checksum, "hex").toString("base64")}`;
+  if (integrity !== expectedIntegrity) {
+    throw new Error("Checksum verification failed");
+  }
+  const skillsDir = getSkillsDir();
+  const destDir = join(skillsDir, username, name);
+  await mkdir(destDir, { recursive: true });
+  const { writeFile: writeFile8 } = await import('fs/promises');
+  const tempFile = join(destDir, ".temp.tgz");
+  await writeFile8(tempFile, tarballBuffer);
+  const { exec: exec2 } = await import('child_process');
+  const { promisify: promisify2 } = await import('util');
+  const execAsync = promisify2(exec2);
+  try {
+    await rm(destDir, { recursive: true, force: true });
+    await mkdir(destDir, { recursive: true });
+    await writeFile8(tempFile, tarballBuffer);
+    await execAsync(
+      `tar -xzf "${tempFile}" -C "${destDir}" --strip-components=1`
+    );
+  } finally {
+    await rm(tempFile, { force: true });
+  }
+  const fullName = `@user/${username}/${name}`;
+  await addToLockfile(fullName, {
+    version: resolvedVersion,
+    resolved: versionInfo.downloadUrl,
+    integrity
+  });
+  const dependencyRange = versionRange || `^${resolvedVersion}`;
+  await addDependency(fullName, dependencyRange);
+  const agents = options.resolvedAgents;
+  if (agents[0] !== "none") {
+    const skillManifest = await readManifest();
+    const skillInfo = {
+      name,
+      sourcePath: getRegistrySkillPath(username, name)
+    };
+    await createAgentSymlinks([skillInfo], {
+      agents,
+      projectRoot: process.cwd(),
+      agentConfigs: skillManifest?.agents
+    });
+  }
+  console.log(`Installed @user/${username}/${name}@${resolvedVersion}`);
+  console.log(`Location: ${destDir}`);
+}
+async function installGitHubPackage(resolved, options) {
+  const { specifier, parsed, ref, downloadResult } = resolved;
+  console.log(
+    `Installing ${specifier} (${ref}@${downloadResult.commit.slice(0, 7)})...`
+  );
+  const skillsDir = getSkillsDir();
+  const destPath = await extractGitHubPackage(
+    parsed,
+    downloadResult.buffer,
+    skillsDir
+  );
+  const lockfileSpecifier = formatGitHubSpecifier({
+    owner: parsed.owner,
+    repo: parsed.repo,
+    path: parsed.path
+    // Don't include ref in the specifier key, it's stored in gitRef
+  });
+  const entry = {
+    version: downloadResult.commit.slice(0, 7),
+    resolved: `https://github.com/${parsed.owner}/${parsed.repo}`,
+    integrity: downloadResult.integrity,
+    gitCommit: downloadResult.commit,
+    gitRef: ref
+  };
+  await addGitHubToLockfile(lockfileSpecifier, entry);
+  await addGitHubDependency(lockfileSpecifier, ref);
+  const agents = options.resolvedAgents;
+  if (agents[0] !== "none") {
+    const manifest = await readManifest();
+    const skillName = getGitHubSkillName(parsed);
+    const skillInfo = {
+      name: skillName,
+      sourcePath: getGitHubSkillPath(parsed.owner, parsed.repo, parsed.path)
+    };
+    await createAgentSymlinks([skillInfo], {
+      agents,
+      projectRoot: process.cwd(),
+      agentConfigs: manifest?.agents
+    });
+  }
+  console.log(
+    `Installed ${specifier} (${ref}@${downloadResult.commit.slice(0, 7)})`
+  );
+  console.log(`Location: ${destPath}`);
+}
+var init_add = __esm({
+  "src/commands/add.ts"() {
+    init_src();
+    init_agents();
+    init_api_client();
+    init_config();
+    init_errors();
+    init_github();
+    init_lockfile();
+    init_manifest2();
+    init_symlinks();
+  }
+});
+
+// src/commands/access.ts
+init_src();
+init_api_client();
+init_config();
+async function access(specifier, options) {
+  try {
+    const apiKey = await requireApiKey();
+    const registryUrl = await getRegistryUrl();
+    if (options.public && options.private) {
+      console.error("Error: Cannot specify both --public and --private");
       process.exit(1);
     }
-    const { username, name, versionRange } = parsed;
-    configure2({ registryUrl, apiKey: apiKey ?? "" });
-    console.log(`Resolving ${specifier}...`);
-    const versionsResponse = await listSkillVersions(username, name);
-    if (versionsResponse.status !== 200) {
-      if (versionsResponse.status === 401) {
-        if (!apiKey) {
+    if (!options.public && !options.private) {
+      console.error("Error: Must specify either --public or --private");
+      process.exit(1);
+    }
+    const visibility = options.public ? "public" : "private";
+    let packageName;
+    if (specifier) {
+      const parsed = parseSkillSpecifier(specifier);
+      if (!parsed) {
+        console.error(
+          `Error: Invalid skill specifier "${specifier}". Use format: @user/{username}/{name}`
+        );
+        process.exit(1);
+      }
+      packageName = parsed.name;
+    } else {
+      const { readFile: readFile7 } = await import('fs/promises');
+      const { join: join13 } = await import('path');
+      let manifest = null;
+      try {
+        const content = await readFile7(
+          join13(process.cwd(), "pspm.json"),
+          "utf-8"
+        );
+        manifest = JSON.parse(content);
+      } catch {
+        try {
+          const content = await readFile7(
+            join13(process.cwd(), "package.json"),
+            "utf-8"
+          );
+          manifest = JSON.parse(content);
+        } catch {
           console.error(
-            `Error: Package @user/${username}/${name} requires authentication`
+            "Error: No pspm.json or package.json found in current directory"
           );
-          console.error("Please run 'pspm login' to authenticate");
-        } else {
           console.error(
-            `Error: Access denied to @user/${username}/${name}. You may not have permission to access this private package.`
+            "Either run this command in a package directory or specify a package name"
           );
+          process.exit(1);
         }
+      }
+      if (!manifest?.name) {
+        console.error("Error: Package manifest is missing 'name' field");
         process.exit(1);
       }
-      const errorMessage = extractApiErrorMessage(
-        versionsResponse,
-        `Skill @user/${username}/${name} not found`
-      );
-      console.error(`Error: ${errorMessage}`);
-      process.exit(1);
-    }
-    const versions = versionsResponse.data;
-    if (versions.length === 0) {
-      console.error(`Error: Skill @user/${username}/${name} not found`);
-      process.exit(1);
-    }
-    const versionStrings = versions.map((v) => v.version);
-    const resolved = resolveVersion(versionRange || "*", versionStrings);
-    if (!resolved) {
-      console.error(
-        `Error: No version matching "${versionRange || "latest"}" found for @user/${username}/${name}`
-      );
-      console.error(`Available versions: ${versionStrings.join(", ")}`);
-      process.exit(1);
+      packageName = manifest.name;
     }
-    console.log(`Installing @user/${username}/${name}@${resolved}...`);
-    const versionResponse = await getSkillVersion(username, name, resolved);
-    if (versionResponse.status !== 200 || !versionResponse.data) {
-      const errorMessage = extractApiErrorMessage(
-        versionResponse,
-        `Version ${resolved} not found`
-      );
+    configure2({ registryUrl, apiKey });
+    console.log(`Setting ${packageName} to ${visibility}...`);
+    const response = await changeSkillAccess(packageName, { visibility });
+    if (response.status !== 200 || !response.data) {
+      const errorMessage = response.error ?? "Failed to change visibility";
       console.error(`Error: ${errorMessage}`);
       process.exit(1);
     }
-    const versionInfo = versionResponse.data;
-    const isPresignedUrl = versionInfo.downloadUrl.includes(".r2.cloudflarestorage.com") || versionInfo.downloadUrl.includes("X-Amz-Signature");
-    const downloadHeaders = {};
-    if (!isPresignedUrl && apiKey) {
-      downloadHeaders.Authorization = `Bearer ${apiKey}`;
-    }
-    const tarballResponse = await fetch(versionInfo.downloadUrl, {
-      headers: downloadHeaders,
-      redirect: "follow"
-    });
-    if (!tarballResponse.ok) {
-      console.error(
-        `Error: Failed to download tarball (${tarballResponse.status})`
-      );
-      process.exit(1);
-    }
-    const tarballBuffer = Buffer.from(await tarballResponse.arrayBuffer());
-    const integrity = calculateIntegrity(tarballBuffer);
-    const expectedIntegrity = `sha256-${Buffer.from(versionInfo.checksum, "hex").toString("base64")}`;
-    if (integrity !== expectedIntegrity) {
-      console.error("Error: Checksum verification failed");
-      process.exit(1);
-    }
-    const skillsDir = getSkillsDir();
-    const destDir = join(skillsDir, username, name);
-    await mkdir(destDir, { recursive: true });
-    const { writeFile: writeFile8 } = await import('fs/promises');
-    const tempFile = join(destDir, ".temp.tgz");
-    await writeFile8(tempFile, tarballBuffer);
-    const { exec: exec2 } = await import('child_process');
-    const { promisify: promisify2 } = await import('util');
-    const execAsync = promisify2(exec2);
-    try {
-      await rm(destDir, { recursive: true, force: true });
-      await mkdir(destDir, { recursive: true });
-      await writeFile8(tempFile, tarballBuffer);
-      await execAsync(
-        `tar -xzf "${tempFile}" -C "${destDir}" --strip-components=1`
+    const result = response.data;
+    console.log(
+      `+ @user/${result.username}/${result.name} is now ${result.visibility}`
+    );
+    if (visibility === "public") {
+      console.log("");
+      console.log(
+        "Note: This action is irreversible. Public packages cannot be made private."
       );
-    } finally {
-      await rm(tempFile, { force: true });
-    }
-    const fullName = `@user/${username}/${name}`;
-    await addToLockfile(fullName, {
-      version: resolved,
-      resolved: versionInfo.downloadUrl,
-      integrity
-    });
-    const dependencyRange = versionRange || `^${resolved}`;
-    await addDependency(fullName, dependencyRange);
-    const agents = options.resolvedAgents;
-    if (agents[0] !== "none") {
-      const skillManifest = await readManifest();
-      const skillInfo = {
-        name,
-        sourcePath: getRegistrySkillPath(username, name)
-      };
-      await createAgentSymlinks([skillInfo], {
-        agents,
-        projectRoot: process.cwd(),
-        agentConfigs: skillManifest?.agents
-      });
     }
-    console.log(`Installed @user/${username}/${name}@${resolved}`);
-    console.log(`Location: ${destDir}`);
   } catch (error) {
     const message = error instanceof Error ? error.message : "Unknown error";
     console.error(`Error: ${message}`);
     process.exit(1);
   }
 }
-async function addGitHub(specifier, options) {
-  try {
-    const parsed = parseGitHubSpecifier(specifier);
-    if (!parsed) {
-      console.error(
-        `Error: Invalid GitHub specifier "${specifier}". Use format: github:{owner}/{repo}[/{path}][@{ref}]`
-      );
-      process.exit(1);
-    }
-    const ref = parsed.ref || "HEAD";
-    console.log(`Resolving ${getGitHubDisplayName(parsed)}...`);
-    const result = await downloadGitHubPackage(parsed);
-    console.log(
-      `Installing ${specifier} (${ref}@${result.commit.slice(0, 7)})...`
-    );
-    const skillsDir = getSkillsDir();
-    const destPath = await extractGitHubPackage(
-      parsed,
-      result.buffer,
-      skillsDir
-    );
-    const lockfileSpecifier = formatGitHubSpecifier({
-      owner: parsed.owner,
-      repo: parsed.repo,
-      path: parsed.path
-      // Don't include ref in the specifier key, it's stored in gitRef
-    });
-    const entry = {
-      version: result.commit.slice(0, 7),
-      resolved: `https://github.com/${parsed.owner}/${parsed.repo}`,
-      integrity: result.integrity,
-      gitCommit: result.commit,
-      gitRef: ref
-    };
-    await addGitHubToLockfile(lockfileSpecifier, entry);
-    await addGitHubDependency(lockfileSpecifier, ref);
-    const agents = options.resolvedAgents;
-    if (agents[0] !== "none") {
-      const manifest = await readManifest();
-      const skillName = getGitHubSkillName(parsed);
-      const skillInfo = {
-        name: skillName,
-        sourcePath: getGitHubSkillPath(parsed.owner, parsed.repo, parsed.path)
-      };
-      await createAgentSymlinks([skillInfo], {
-        agents,
-        projectRoot: process.cwd(),
-        agentConfigs: manifest?.agents
-      });
-    }
-    console.log(`Installed ${specifier} (${ref}@${result.commit.slice(0, 7)})`);
-    console.log(`Location: ${destPath}`);
-  } catch (error) {
-    if (error instanceof GitHubRateLimitError) {
-      console.error(`Error: ${error.message}`);
-    } else if (error instanceof GitHubPathNotFoundError) {
-      console.error(`Error: ${error.message}`);
-    } else if (error instanceof GitHubNotFoundError) {
-      console.error(`Error: ${error.message}`);
-    } else {
-      const message = error instanceof Error ? error.message : "Unknown error";
-      console.error(`Error: ${message}`);
-    }
-    process.exit(1);
-  }
-}
+
+// src/commands/index.ts
+init_add();
 async function configInit(options) {
   try {
     const configPath = join(process.cwd(), ".pspmrc");
@@ -1556,6 +1734,7 @@ async function configInit(options) {
 }
 
 // src/commands/config/show.ts
+init_config();
 async function configShow() {
   try {
     const resolved = await resolveConfig();
@@ -1585,6 +1764,9 @@ async function configShow() {
 }
 
 // src/commands/deprecate.ts
+init_src();
+init_api_client();
+init_config();
 async function deprecate(specifier, message, options) {
   try {
     const apiKey = await requireApiKey();
@@ -1647,6 +1829,9 @@ async function deprecate(specifier, message, options) {
     process.exit(1);
   }
 }
+
+// src/commands/init.ts
+init_src();
 function prompt(rl, question, defaultValue) {
   return new Promise((resolve) => {
     const displayDefault = defaultValue ? ` (${defaultValue})` : "";
@@ -1862,6 +2047,17 @@ async function init(options) {
     process.exit(1);
   }
 }
+
+// src/commands/install.ts
+init_src();
+init_agents();
+init_api_client();
+init_config();
+init_errors();
+init_github();
+init_lockfile();
+init_manifest2();
+init_symlinks();
 function getCacheFilePath(cacheDir, integrity) {
   const match = integrity.match(/^sha256-(.+)$/);
   if (!match) {
@@ -1893,26 +2089,25 @@ async function writeToCache(cacheDir, integrity, data) {
   } catch {
   }
 }
-async function install(options) {
+async function install(specifiers, options) {
+  if (specifiers.length > 0) {
+    const { add: add2 } = await Promise.resolve().then(() => (init_add(), add_exports));
+    await add2(specifiers, {
+      save: true,
+      agent: options.agent,
+      yes: options.yes
+    });
+    return;
+  }
+  await installFromLockfile(options);
+}
+async function installFromLockfile(options) {
   try {
     const config2 = await resolveConfig();
     const registryUrl = config2.registryUrl;
     const apiKey = getTokenForRegistry(config2, registryUrl);
     const skillsDir = options.dir || getSkillsDir();
     const cacheDir = getCacheDir();
-    const manifest = await readManifest();
-    const agentConfigs = manifest?.agents;
-    let agents;
-    if (options.agent) {
-      agents = parseAgentArg(options.agent);
-    } else if (manifest) {
-      agents = parseAgentArg(void 0);
-    } else if (options.yes) {
-      agents = parseAgentArg(void 0);
-    } else {
-      console.log("No pspm.json found. Let's set up your project.\n");
-      agents = await promptForAgents();
-    }
     await migrateLockfileIfNeeded();
     let lockfile = await readLockfile();
     const manifestDeps = await getDependencies();
@@ -2069,6 +2264,20 @@ Resolving ${missingGitHubDeps.length} GitHub dependency(ies)...
       }
       lockfile = await readLockfile();
     }
+    const manifest = await readManifest();
+    const agentConfigs = manifest?.agents;
+    let agents;
+    if (options.agent) {
+      agents = parseAgentArg(options.agent);
+    } else if (manifest) {
+      agents = parseAgentArg(void 0);
+    } else if (options.yes) {
+      agents = parseAgentArg(void 0);
+    } else {
+      console.log("\nNo pspm.json found. Let's set up your project.\n");
+      agents = await promptForAgents();
+      console.log();
+    }
     const packages = lockfile?.packages ?? lockfile?.skills ?? {};
     const packageCount = Object.keys(packages).length;
     if (packageCount > 0) {
@@ -2257,6 +2466,11 @@ All ${totalCount} skill(s) installed.`);
 }
 
 // src/commands/link.ts
+init_src();
+init_agents();
+init_lockfile();
+init_manifest2();
+init_symlinks();
 async function link(options) {
   try {
     const manifest = await readManifest();
@@ -2327,6 +2541,13 @@ async function link(options) {
     process.exit(1);
   }
 }
+
+// src/commands/list.ts
+init_src();
+init_agents();
+init_lockfile();
+init_manifest2();
+init_symlinks();
 async function list(options) {
   try {
     const registrySkills = await listLockfileSkills();
@@ -2440,6 +2661,10 @@ Total: ${skills.length} skill(s) (${parts.join(", ")})`);
     process.exit(1);
   }
 }
+
+// src/commands/login.ts
+init_api_client();
+init_config();
 var DEFAULT_WEB_APP_URL = "https://pspm.dev";
 function getWebAppUrl(registryUrl) {
   if (process.env.PSPM_WEB_URL) {
@@ -2617,6 +2842,7 @@ async function login(options) {
 }
 
 // src/commands/logout.ts
+init_config();
 async function logout() {
   try {
     const loggedIn = await isLoggedIn();
@@ -2632,6 +2858,10 @@ async function logout() {
     process.exit(1);
   }
 }
+
+// src/commands/migrate.ts
+init_config();
+init_lockfile();
 async function migrate(options) {
   try {
     const legacySkillsDir = getLegacySkillsDir();
@@ -2731,6 +2961,12 @@ async function migrate(options) {
     process.exit(1);
   }
 }
+
+// src/commands/publish.ts
+init_src();
+init_api_client();
+init_config();
+init_errors();
 var exec = promisify(exec$1);
 async function detectManifest() {
   const cwd = process.cwd();
@@ -2936,6 +3172,14 @@ Setting visibility to ${options.access}...`);
     process.exit(1);
   }
 }
+
+// src/commands/remove.ts
+init_src();
+init_agents();
+init_config();
+init_lockfile();
+init_manifest2();
+init_symlinks();
 async function remove(nameOrSpecifier) {
   try {
     const manifest = await readManifest();
@@ -3037,6 +3281,10 @@ async function removeByShortName(shortName, agents, agentConfigs) {
 }
 
 // src/commands/unpublish.ts
+init_src();
+init_api_client();
+init_config();
+init_errors();
 async function unpublish(specifier, options) {
   try {
     const apiKey = await requireApiKey();
@@ -3095,6 +3343,12 @@ async function unpublish(specifier, options) {
 }
 
 // src/commands/update.ts
+init_src();
+init_api_client();
+init_config();
+init_errors();
+init_lockfile();
+init_add();
 async function update(options) {
   try {
     const apiKey = await requireApiKey();
@@ -3156,7 +3410,7 @@ async function update(options) {
       if (!match) continue;
       const [, username, skillName] = match;
       const specifier = `@user/${username}/${skillName}@${latest}`;
-      await add(specifier, {});
+      await add([specifier], {});
     }
     console.log("\nAll skills updated.");
   } catch (error) {
@@ -3167,6 +3421,8 @@ async function update(options) {
 }
 
 // src/commands/whoami.ts
+init_api_client();
+init_config();
 async function whoami() {
   try {
     const resolved = await resolveConfig();
@@ -3234,13 +3490,13 @@ program.command("migrate").description(
 ).option("--dry-run", "Show what would be migrated without making changes").action(async (options) => {
   await migrate({ dryRun: options.dryRun });
 });
-program.command("add <specifier>").description(
-  "Add a skill (e.g., @user/bsheng/vite_slides@^2.0.0 or github:owner/repo/path@ref)"
+program.command("add <specifiers...>").description(
+  "Add one or more skills (e.g., @user/bsheng/vite_slides@^2.0.0 or github:owner/repo/path@ref)"
 ).option("--save", "Save to lockfile (default)").option(
   "--agent <agents>",
-  'Comma-separated agents for symlinks (default: "claude-code", use "none" to skip)'
-).option("-y, --yes", "Skip agent selection prompt and use defaults").action(async (specifier, options) => {
-  await add(specifier, {
+  'Comma-separated agents for symlinks (default: all agents, use "none" to skip)'
+).option("-y, --yes", "Skip agent selection prompt and use defaults").action(async (specifiers, options) => {
+  await add(specifiers, {
     save: options.save ?? true,
     agent: options.agent,
     yes: options.yes
@@ -3252,11 +3508,13 @@ program.command("remove <name>").alias("rm").description("Remove an installed sk
 program.command("list").alias("ls").description("List installed skills").option("--json", "Output as JSON").action(async (options) => {
   await list({ json: options.json });
 });
-program.command("install").alias("i").description("Install all skills from lockfile").option("--frozen-lockfile", "Fail if lockfile is missing or outdated").option("--dir <path>", "Install skills to a specific directory").option(
+program.command("install [specifiers...]").alias("i").description(
+  "Install skills from lockfile, or add and install specific packages"
+).option("--frozen-lockfile", "Fail if lockfile is missing or outdated").option("--dir <path>", "Install skills to a specific directory").option(
   "--agent <agents>",
-  'Comma-separated agents for symlinks (default: "claude-code", use "none" to skip)'
-).option("-y, --yes", "Skip agent selection prompt and use defaults").action(async (options) => {
-  await install({
+  'Comma-separated agents for symlinks (default: all agents, use "none" to skip)'
+).option("-y, --yes", "Skip agent selection prompt and use defaults").action(async (specifiers, options) => {
+  await install(specifiers, {
     frozenLockfile: options.frozenLockfile,
     dir: options.dir,
     agent: options.agent,
@@ -3265,7 +3523,7 @@ program.command("install").alias("i").description("Install all skills from lockf
 });
 program.command("link").description("Recreate agent symlinks without reinstalling").option(
   "--agent <agents>",
-  'Comma-separated agents for symlinks (default: "claude-code", use "none" to skip)'
+  'Comma-separated agents for symlinks (default: all agents, use "none" to skip)'
 ).option("-y, --yes", "Skip agent selection prompt and use defaults").action(async (options) => {
   await link({ agent: options.agent, yes: options.yes });
 });