npm - @anytio/pspm - Versions diffs - 0.1.1 → 0.2.0 - Mend

@anytio/pspm 0.1.1 → 0.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (8) hide show

package/LICENSE CHANGED Viewed

@@ -1,149 +1,216 @@
-# PolyForm Shield License 1.0.0
+The pspm application
+Copyright (c) anyt.io and Contributors
+Licensed on the terms of The Artistic License 2.0
-<https://polyformproject.org/licenses/shield/1.0.0>
+Node package dependencies of the pspm application
+Copyright (c) their respective copyright owners
+Licensed on their respective license terms
-Required Notice: Copyright AnyTransformer Inc. (https://pspm.dev)
-## Acceptance
+--------
-In order to get any license under these terms, you must agree
-to them as both strict obligations and conditions to all
-your licenses.
-## Copyright License
+The Artistic License 2.0
-The licensor grants you a copyright license for the
-software to do everything you might do with the software
-that would otherwise infringe the licensor's copyright
-in it for any permitted purpose.  However, you may
-only distribute the software according to [Distribution
-License](#distribution-license) and make changes or new works
-based on the software according to [Changes and New Works
-License](#changes-and-new-works-license).
+Copyright (c) 2000-2006, The Perl Foundation.
-## Distribution License
+Everyone is permitted to copy and distribute verbatim copies
+of this license document, but changing it is not allowed.
-The licensor grants you an additional copyright license
-to distribute copies of the software.  Your license
-to distribute covers distributing the software with
-changes and new works permitted by [Changes and New Works
-License](#changes-and-new-works-license).
+Preamble
-## Notices
+This license establishes the terms under which a given free software
+Package may be copied, modified, distributed, and/or redistributed.
+The intent is that the Copyright Holder maintains some artistic
+control over the development of that Package while still keeping the
+Package available as open source and free software.
-You must ensure that anyone who gets a copy of any part of
-the software from you also gets a copy of these terms or the
-URL for them above, as well as copies of any plain-text lines
-beginning with `Required Notice:` that the licensor provided
-with the software.  For example:
+You are always permitted to make arrangements wholly outside of this
+license directly with the Copyright Holder of a given Package.  If the
+terms of this license do not permit the full use that you propose to
+make of the Package, you should contact the Copyright Holder and seek
+a different licensing arrangement.
-> Required Notice: Copyright Yonder, Inc. (https://yonder.io)
+Definitions
-## Changes and New Works License
+    "Copyright Holder" means the individual(s) or organization(s)
+    named in the copyright notice for the entire Package.
-The licensor grants you an additional copyright license to
-make changes and new works based on the software for any
-permitted purpose.
+    "Contributor" means any party that has contributed code or other
+    material to the Package, in accordance with the Copyright Holder's
+    procedures.
-## Patent License
+    "You" and "your" means any person who would like to copy,
+    distribute, or modify the Package.
-The licensor grants you a patent license for the software that
-covers patent claims the licensor can license, or becomes able
-to license, that you would infringe by using the software.
+    "Package" means the collection of files distributed by the
+    Copyright Holder, and derivatives of that collection and/or of
+    those files. A given Package may consist of either the Standard
+    Version, or a Modified Version.
-## Noncompete
+    "Distribute" means providing a copy of the Package or making it
+    accessible to anyone else, or in the case of a company or
+    organization, to others outside of your company or organization.
-Any purpose is a permitted purpose, except for providing any
-product that competes with the software or any product the
-licensor or any of its affiliates provides using the software.
+    "Distributor Fee" means any fee that you charge for Distributing
+    this Package or providing support for this Package to another
+    party.  It does not mean licensing fees.
-## Competition
+    "Standard Version" refers to the Package if it has not been
+    modified, or has been modified only in ways explicitly requested
+    by the Copyright Holder.
-Goods and services compete even when they provide functionality
-through different kinds of interfaces or for different technical
-platforms.  Applications can compete with services, libraries
-with plugins, frameworks with development tools, and so on,
-even if they're written in different programming languages
-or for different computer architectures.  Goods and services
-compete even when provided free of charge.  If you market a
-product as a practical substitute for the software or another
-product, it definitely competes.
+    "Modified Version" means the Package, if it has been changed, and
+    such changes were not explicitly requested by the Copyright
+    Holder.
-## New Products
+    "Original License" means this Artistic License as Distributed with
+    the Standard Version of the Package, in its current version or as
+    it may be modified by The Perl Foundation in the future.
-If you are using the software to provide a product that does
-not compete, you may continue doing so even if the licensor or
-any of its affiliates later provides a competing product.
+    "Source" form means the source code, documentation source, and
+    configuration files for the Package.
-## Discontinued Products
+    "Compiled" form means the compiled bytecode, object code, binary,
+    or any other form resulting from mechanical transformation or
+    translation of the Source form.
-You may begin using the software to provide a product that
-competes with one the licensor or any of its affiliates has
-stopped providing, unless the licensor or any of its affiliates
-began providing that product again within one year of your
-starting to compete.
-## Sales of Business
+Permission for Use and Modification Without Distribution
-If the licensor or any of its affiliates sells a line of
-business developing the software or using the software
-to provide a product, the buyer can also enforce
-[Noncompete](#noncompete) for that product.
+(1)  You are permitted to use the Standard Version and create and use
+Modified Versions for any purpose without restriction, provided that
+you do not Distribute the Modified Version.
-## No Other Rights
-These terms do not allow you to sublicense or transfer any of
-your licenses to anyone else, or prevent the licensor from
-granting licenses to anyone else.  These terms do not imply
-any other licenses.
+Permissions for Redistribution of the Standard Version
-## Patent Defense
+(2)  You may Distribute verbatim copies of the Source form of the
+Standard Version of this Package in any medium without restriction,
+either gratis or for a Distributor Fee, provided that you duplicate
+all of the original copyright notices and associated disclaimers.  At
+your discretion, such verbatim copies may or may not include a
+Compiled form of the Package.
-If you make any written claim that the software infringes or
-contributes to infringement of any patent, your patent license
-for the software granted under these terms ends immediately.  If
-your company makes such a claim, your patent license ends
-immediately for work on behalf of your company.
+(3)  You may apply any bug fixes, portability changes, and other
+modifications made available from the Copyright Holder.  The resulting
+Package will still be considered the Standard Version, and as such
+will be subject to the Original License.
-## Violations
-The first time you are notified in writing that you have
-violated any of these terms, or done anything with the software
-not covered by your licenses, your licenses can nonetheless
-continue if you come into full compliance with these terms,
-and take practical steps to correct past violations, within
-32 days of receiving notice.  Otherwise, all your licenses
-end immediately.
+Distribution of Modified Versions of the Package as Source
-## No Liability
+(4)  You may Distribute your Modified Version as Source (either gratis
+or for a Distributor Fee, and with or without a Compiled form of the
+Modified Version) provided that you clearly document how it differs
+from the Standard Version, including, but not limited to, documenting
+any non-standard features, executables, or modules, and provided that
+you do at least ONE of the following:
-***As far as the law allows, the software comes as is, without
-any warranty or condition, and the licensor will not be liable
-to you for any damages arising out of these terms or the use
-or nature of the software, under any kind of legal claim.***
+    (a)  make the Modified Version available to the Copyright Holder
+    of the Standard Version, under the Original License, so that the
+    Copyright Holder may include your modifications in the Standard
+    Version.
-## Definitions
+    (b)  ensure that installation of your Modified Version does not
+    prevent the user installing or running the Standard Version. In
+    addition, the Modified Version must bear a name that is different
+    from the name of the Standard Version.
-The **licensor** is the entity offering these terms, and the
-**software** is the software the licensor makes available under
-these terms, including any portion of it.
+    (c)  allow anyone who receives a copy of the Modified Version to
+    make the Source form of the Modified Version available to others
+    under
-**you** refers to the individual or entity agreeing to these
-terms.
+        (i)  the Original License or
-**your company** is any legal entity, sole proprietorship,
-or other kind of organization that you work for, plus all
-organizations that have control over, are under the control of,
-or are under common control with that organization.  **control**
-means ownership of substantially all the assets of an entity,
-or the power to direct its management and policies by vote,
-contract, or otherwise.  Control can be direct or indirect.
+        (ii)  a license that permits the licensee to freely copy,
+        modify and redistribute the Modified Version using the same
+        licensing terms that apply to the copy that the licensee
+        received, and requires that the Source form of the Modified
+        Version, and of any works derived from it, be made freely
+        available in that license fees are prohibited but Distributor
+        Fees are allowed.
-**your licenses** are all the licenses granted to you for the
-software under these terms.
-**use** means anything you do with the software requiring one
-of your licenses.
+Distribution of Compiled Forms of the Standard Version
+or Modified Versions without the Source
-**trademark** means trademarks, service marks, and similar
-rights.
+(5)  You may Distribute Compiled forms of the Standard Version without
+the Source, provided that you include complete instructions on how to
+get the Source of the Standard Version.  Such instructions must be
+valid at the time of your distribution.  If these instructions, at any
+time while you are carrying out such distribution, become invalid, you
+must provide new instructions on demand or cease further distribution.
+If you provide valid instructions or cease distribution within thirty
+days after you become aware that the instructions are invalid, then
+you do not forfeit any of your rights under this license.
+(6)  You may Distribute a Modified Version in Compiled form without
+the Source, provided that you comply with Section 4 with respect to
+the Source of the Modified Version.
+Aggregating or Linking the Package
+(7)  You may aggregate the Package (either the Standard Version or
+Modified Version) with other packages and Distribute the resulting
+aggregation provided that you do not charge a licensing fee for the
+Package.  Distributor Fees are permitted, and licensing fees for other
+components in the aggregation are permitted. The terms of this license
+apply to the use and Distribution of the Standard or Modified Versions
+as included in the aggregation.
+(8) You are permitted to link Modified and Standard Versions with
+other works, to embed the Package in a larger work of your own, or to
+build stand-alone binary or bytecode versions of applications that
+include the Package, and Distribute the result without restriction,
+provided the result does not expose a direct interface to the Package.
+Items That are Not Considered Part of a Modified Version
+(9) Works (including, but not limited to, modules and scripts) that
+merely extend or make use of the Package, do not, by themselves, cause
+the Package to be a Modified Version.  In addition, such works are not
+considered parts of the Package itself, and are not subject to the
+terms of this license.
+General Provisions
+(10)  Any use, modification, and distribution of the Standard or
+Modified Versions is governed by this Artistic License. By using,
+modifying or distributing the Package, you accept this license. Do not
+use, modify, or distribute the Package, if you do not accept this
+license.
+(11)  If your Modified Version has been derived from a Modified
+Version made by someone other than you, you are nevertheless required
+to ensure that your Modified Version complies with the requirements of
+this license.
+(12)  This license does not grant you the right to use any trademark,
+service mark, tradename, or logo of the Copyright Holder.
+(13)  This license includes the non-exclusive, worldwide,
+free-of-charge patent license to make, have made, use, offer to sell,
+sell, import and otherwise transfer the Package with respect to any
+patent claims licensable by the Copyright Holder that are necessarily
+infringed by the Package. If you institute patent litigation
+(including a cross-claim or counterclaim) against any party alleging
+that the Package constitutes direct or contributory patent
+infringement, then this Artistic License to you shall terminate on the
+date that such litigation is filed.
+(14)  Disclaimer of Warranty:
+THE PACKAGE IS PROVIDED BY THE COPYRIGHT HOLDER AND CONTRIBUTORS "AS
+IS' AND WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES. THE IMPLIED
+WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR
+NON-INFRINGEMENT ARE DISCLAIMED TO THE EXTENT PERMITTED BY YOUR LOCAL
+LAW. UNLESS REQUIRED BY LAW, NO COPYRIGHT HOLDER OR CONTRIBUTOR WILL
+BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES ARISING IN ANY WAY OUT OF THE USE OF THE PACKAGE, EVEN IF
+ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+--------

package/README.md CHANGED Viewed

@@ -2,12 +2,22 @@
 A CLI for managing prompt skills across AI coding agents.
+**Website:** [https://pspm.dev](https://pspm.dev)
 ## What is PSPM?
 PSPM (Prompt Skill Package Manager) is a package manager for prompt skills - small, discoverable capabilities packaged as `SKILL.md` files. Think of it as npm for AI agent skills.
 Skills are designed to work with any AI coding agent that supports the SKILL.md format, including Claude Code, Cursor, Windsurf, and others.
+## Why PSPM?
+**Easy Sharing** - Share your prompt skills with teammates or the community. Publish to the registry and let others install with a single command.
+**Version Control** - Full semver support just like npm. Pin exact versions, use ranges (`^1.0.0`, `~1.2.0`), or reference GitHub tags directly. Lock versions with `pspm-lock.json` for reproducible installations.
+**Public & Private Skills** - Keep proprietary skills private within your organization, or publish them publicly for anyone to use. Private skills require authentication to download.
 ## Installation
 ```bash
@@ -24,7 +34,10 @@ npx @anytio/pspm <command>
 ```bash
 # Login with your API key
-pspm login --api-key <your-api-key>
+pspm login
+# Initialize a new skill project
+pspm init
 # Add a skill from the registry
 pspm add @user/username/skill-name
@@ -36,7 +49,7 @@ pspm add github:owner/repo/path@main
 pspm list
 # Install all skills from lockfile
-pspm install --agent claude-code,cursor
+pspm install
 ```
 ## Commands
@@ -45,10 +58,19 @@ pspm install --agent claude-code,cursor
 ```bash
 pspm login --api-key <key>    # Authenticate with API key
+pspm login                    # Authenticate via browser
 pspm logout                   # Clear stored credentials
 pspm whoami                   # Show current user info
 ```
+### Project Initialization
+```bash
+pspm init                     # Create pspm.json manifest (interactive)
+pspm init -y                  # Create pspm.json with defaults
+pspm migrate                  # Migrate from old directory structure
+```
 ### Skill Management
 ```bash
@@ -94,6 +116,7 @@ pspm publish                  # Publish current directory as a skill
 pspm publish --bump patch     # Auto-bump version (major, minor, patch)
 pspm publish --access public  # Publish and make public in one step
 pspm unpublish <spec> --force # Remove a published skill version
+pspm deprecate <spec> [msg]   # Mark a version as deprecated
 ```
 ### Visibility
@@ -105,31 +128,6 @@ pspm access <spec> --public   # Make specific package public
 **Note:** Making a package public is irreversible (like npm). Public packages cannot be made private again.
-**Publish Output:**
-When publishing, PSPM displays detailed package information similar to npm:
-```
-pspm notice
-pspm notice 📦  my-skill@1.0.0
-pspm notice Tarball Contents
-pspm notice   5.1kB SKILL.md
-pspm notice   1.5kB package.json
-pspm notice Tarball Details
-pspm notice name:          my-skill
-pspm notice version:       1.0.0
-pspm notice filename:      my-skill-1.0.0.tgz
-pspm notice package size:  2.3kB
-pspm notice unpacked size: 6.6kB
-pspm notice shasum:        4bb744fcfa90b8b033feed3deaeeb00f3a4503e5
-pspm notice integrity:     sha512-DqQJaugblfE5A...
-pspm notice total files:   2
-pspm notice
-pspm notice Publishing to https://pspm.dev with tag latest
-+ @user/username/my-skill@1.0.0
-Checksum: abc123...
-```
 ### Configuration
 ```bash
@@ -148,13 +146,6 @@ PSPM uses a simple npm-like INI configuration format.
 registry = https://pspm.dev
 authToken = sk_...
 username = myuser
-; Multi-registry: Scope mappings
-@myorg:registry = https://corp.pspm.io
-; Multi-registry: Per-registry tokens
-//pspm.dev:authToken = sk_public_token
-//corp.pspm.io:authToken = sk_corp_token
 ```
 ### Project Config (`.pspmrc`)
@@ -191,47 +182,14 @@ registry = https://custom-registry.example.com
 }
 ```
-### Configuration Resolution
-Configuration is resolved in priority order:
-1. **Environment Variables** (`PSPM_REGISTRY_URL`, `PSPM_API_KEY`) - Highest
-2. **Project Config** (`.pspmrc` in project directory)
-3. **User Config** (`~/.pspmrc`)
-4. **Defaults** - Lowest
 ## Environment Variables
 | Variable | Description |
 |----------|-------------|
-| `PSPM_REGISTRY_URL` | Override registry URL |
 | `PSPM_API_KEY` | Override API key |
 | `PSPM_DEBUG` | Enable debug logging |
 | `GITHUB_TOKEN` | GitHub token for private repos and higher rate limits |
-## Error Handling
-PSPM provides clear, actionable error messages:
-**Version Conflict:**
-```
-pspm error code E403
-pspm error 403 403 Forbidden - You cannot publish over the previously published versions: 1.0.0.
-Error: [BAD_REQUEST] Version 1.0.0 must be greater than existing version 1.0.0
-```
-**Validation Errors:**
-```
-Error: Validation failed:
-  - name: Skill name must start with a letter and contain only lowercase letters, numbers, and hyphens
-  - version: Invalid semver version
-```
-**Authentication Errors:**
-```
-Error: Not logged in. Run 'pspm login --api-key <key>' first, or set PSPM_API_KEY env var.
-```
 ## Directory Structure
 ```
@@ -263,24 +221,24 @@ project/
 ## Creating a Skill
-A skill is a directory containing at minimum a `package.json` and `SKILL.md`:
+A skill is a directory containing at minimum a `pspm.json` and `SKILL.md`:
 ```
 my-skill/
-├── package.json         # Required: name, version
+├── pspm.json            # Required: name, version
 ├── SKILL.md             # Required: skill instructions
 ├── runtime/             # Optional: runtime files
 ├── scripts/             # Optional: scripts
 └── data/                # Optional: data files
 ```
-**package.json:**
+**pspm.json** (created with `pspm init`):
 ```json
 {
   "name": "@user/myusername/my-skill",
   "version": "1.0.0",
   "description": "A helpful skill for...",
-  "files": ["package.json", "SKILL.md", "runtime", "scripts", "data"]
+  "files": ["pspm.json", "SKILL.md", "runtime", "scripts", "data"]
 }
 ```
@@ -299,33 +257,13 @@ When activated, this skill helps you...
 ## CI/CD Integration
 ```bash
-# Use environment variables
+# Use environment variable for authentication
 export PSPM_API_KEY=sk_ci_key
-export PSPM_REGISTRY_URL=https://registry.example.com/api/skills
 # Install with frozen lockfile (fails if lockfile is outdated)
 pspm install --frozen-lockfile
 ```
-## Using Different Registries
-Use environment variables to switch between registries:
-```bash
-# Development
-PSPM_REGISTRY_URL=https://staging.example.com pspm add @user/bsheng/skill
-# Production
-PSPM_REGISTRY_URL=https://prod.example.com pspm publish
-```
-Or set the registry in your project's `.pspmrc`:
-```ini
-; .pspmrc
-registry = https://custom-registry.example.com
-```
 ## License
-See LICENSE file.
+This project is licensed under [The Artistic License 2.0](LICENSE), the same license used by npm.

package/bin/pspm.js ADDED Viewed

	@@ -0,0 +1,2 @@
1	+ #!/usr/bin/env node
2	+ import "../dist/index.js";