@anytio/pspm 0.1.1 → 0.2.0

package/dist/index.js

@@ -1,20 +1,4 @@
 #!/usr/bin/env node
-import { createHash, randomBytes } from 'crypto';
-import * as semver from 'semver';
-import { stat, writeFile, readdir, mkdir, rm, rename, access as access$1, readFile, lstat, unlink, cp, readlink, symlink } from 'fs/promises';
-import { homedir } from 'os';
-import { dirname, join, basename, relative } from 'path';
-import * as ini from 'ini';
-import { checkbox } from '@inquirer/prompts';
-import { readFileSync } from 'fs';
-import { fileURLToPath, URL as URL$1 } from 'url';
-import { Command } from 'commander';
-import { createInterface } from 'readline';
-import http from 'http';
-import open from 'open';
-import { exec as exec$1 } from 'child_process';
-import { promisify } from 'util';
-
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __esm = (fn, res) => function __init() {
@@ -24,126 +8,8 @@ var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, { get: all[name], enumerable: true });
 };
-function calculateIntegrity(data) {
-  const hash = createHash("sha256").update(data).digest("base64");
-  return `sha256-${hash}`;
-}
-var init_integrity = __esm({
-  "../../packages/shared/pspm-types/src/integrity.ts"() {
-  }
-});
-
-// ../../packages/shared/pspm-types/src/manifest.ts
-function validateManifest(manifest) {
-  if (!manifest.name) {
-    return { valid: false, error: "Manifest must have a 'name' field" };
-  }
-  if (!manifest.version) {
-    return { valid: false, error: "Manifest must have a 'version' field" };
-  }
-  if (!/^[a-z][a-z0-9_-]*$/.test(manifest.name)) {
-    return {
-      valid: false,
-      error: "Name must start with a lowercase letter and contain only lowercase letters, numbers, hyphens, and underscores"
-    };
-  }
-  if (!/^\d+\.\d+\.\d+/.test(manifest.version)) {
-    return {
-      valid: false,
-      error: "Version must be a valid semantic version (e.g., 1.0.0)"
-    };
-  }
-  return { valid: true };
-}
-var DEFAULT_SKILL_FILES, PSPM_SCHEMA_URL;
-var init_manifest = __esm({
-  "../../packages/shared/pspm-types/src/manifest.ts"() {
-    DEFAULT_SKILL_FILES = [
-      "SKILL.md",
-      "runtime",
-      "scripts",
-      "data"
-    ];
-    PSPM_SCHEMA_URL = "https://pspm.dev/schema/v1/pspm.json";
-  }
-});
-
-// ../../packages/shared/pspm-types/src/specifier.ts
-function parseSkillSpecifier(specifier) {
-  const match = specifier.match(SPECIFIER_PATTERN);
-  if (!match) {
-    return null;
-  }
-  return {
-    username: match[1],
-    name: match[2],
-    versionRange: match[3]
-  };
-}
-function parseGitHubSpecifier(specifier) {
-  const match = specifier.match(GITHUB_SPECIFIER_PATTERN);
-  if (!match) {
-    return null;
-  }
-  const [, owner, repo, pathWithSlash, ref] = match;
-  return {
-    owner,
-    repo,
-    // Remove leading slash from path
-    path: pathWithSlash ? pathWithSlash.slice(1) : void 0,
-    ref: ref || void 0
-  };
-}
-function formatGitHubSpecifier(spec) {
-  let result = `github:${spec.owner}/${spec.repo}`;
-  if (spec.path) {
-    result += `/${spec.path}`;
-  }
-  if (spec.ref) {
-    result += `@${spec.ref}`;
-  }
-  return result;
-}
-function getGitHubSkillName(spec) {
-  if (spec.path) {
-    const segments = spec.path.split("/").filter(Boolean);
-    return segments[segments.length - 1];
-  }
-  return spec.repo;
-}
-function isGitHubSpecifier(specifier) {
-  return specifier.startsWith("github:");
-}
-var SPECIFIER_PATTERN, GITHUB_SPECIFIER_PATTERN;
-var init_specifier = __esm({
-  "../../packages/shared/pspm-types/src/specifier.ts"() {
-    SPECIFIER_PATTERN = /^@user\/([a-zA-Z0-9_-]+)\/([a-z][a-z0-9_-]*)(?:@(.+))?$/;
-    GITHUB_SPECIFIER_PATTERN = /^github:([a-zA-Z0-9_-]+)\/([a-zA-Z0-9_.-]+)(\/[^@]+)?(?:@(.+))?$/;
-  }
-});
-function resolveVersion(range, availableVersions) {
-  const sorted = availableVersions.filter((v) => semver.valid(v)).sort((a, b) => semver.rcompare(a, b));
-  if (!range || range === "latest" || range === "*") {
-    return sorted[0] ?? null;
-  }
-  return semver.maxSatisfying(sorted, range);
-}
-var init_version = __esm({
-  "../../packages/shared/pspm-types/src/version.ts"() {
-  }
-});
-
-// ../../packages/shared/pspm-types/src/index.ts
-var init_src = __esm({
-  "../../packages/shared/pspm-types/src/index.ts"() {
-    init_integrity();
-    init_manifest();
-    init_specifier();
-    init_version();
-  }
-});
 
-// ../../packages/sdk/src/fetchers/cli-fetcher.ts
+// src/sdk/fetcher.ts
 function configure(options) {
   config = options;
 }
@@ -183,28 +49,27 @@ async function customFetch(url, options) {
   };
 }
 var config;
-var init_cli_fetcher = __esm({
-  "../../packages/sdk/src/fetchers/cli-fetcher.ts"() {
+var init_fetcher = __esm({
+  "src/sdk/fetcher.ts"() {
+    "use strict";
     config = null;
   }
 });
 
-// ../../packages/sdk/src/generated/fetch/index.ts
+// src/sdk/generated/index.ts
 var getMeUrl, me, getListSkillVersionsUrl, listSkillVersions, getGetSkillVersionUrl, getSkillVersion, getPublishSkillUrl, publishSkill, getDeleteSkillUrl, deleteSkill, getDeleteSkillVersionUrl, deleteSkillVersion;
-var init_fetch = __esm({
-  "../../packages/sdk/src/generated/fetch/index.ts"() {
-    init_cli_fetcher();
+var init_generated = __esm({
+  "src/sdk/generated/index.ts"() {
+    "use strict";
+    init_fetcher();
     getMeUrl = () => {
-      return `/api/skills/me`;
+      return "/api/skills/me";
     };
     me = async (options) => {
-      return customFetch(
-        getMeUrl(),
-        {
-          ...options,
-          method: "GET"
-        }
-      );
+      return customFetch(getMeUrl(), {
+        ...options,
+        method: "GET"
+      });
     };
     getListSkillVersionsUrl = (username, name) => {
       return `/api/skills/@user/${username}/${name}/versions`;
@@ -231,32 +96,24 @@ var init_fetch = __esm({
       );
     };
     getPublishSkillUrl = () => {
-      return `/api/skills/publish`;
+      return "/api/skills/publish";
     };
     publishSkill = async (publishSkillInput, options) => {
-      return customFetch(
-        getPublishSkillUrl(),
-        {
-          ...options,
-          method: "POST",
-          headers: { "Content-Type": "application/json", ...options?.headers },
-          body: JSON.stringify(
-            publishSkillInput
-          )
-        }
-      );
+      return customFetch(getPublishSkillUrl(), {
+        ...options,
+        method: "POST",
+        headers: { "Content-Type": "application/json", ...options?.headers },
+        body: JSON.stringify(publishSkillInput)
+      });
     };
     getDeleteSkillUrl = (name) => {
       return `/api/skills/${name}`;
     };
     deleteSkill = async (name, options) => {
-      return customFetch(
-        getDeleteSkillUrl(name),
-        {
-          ...options,
-          method: "DELETE"
-        }
-      );
+      return customFetch(getDeleteSkillUrl(name), {
+        ...options,
+        method: "DELETE"
+      });
     };
     getDeleteSkillVersionUrl = (name, version2) => {
       return `/api/skills/${name}/${version2}`;
@@ -273,14 +130,6 @@ var init_fetch = __esm({
   }
 });
 
-// ../../packages/sdk/src/index.ts
-var init_src2 = __esm({
-  "../../packages/sdk/src/index.ts"() {
-    init_cli_fetcher();
-    init_fetch();
-  }
-});
-
 // src/api-client.ts
 function registryUrlToBaseUrl(registryUrl) {
   return registryUrl.replace(/\/api\/skills\/?$/, "");
@@ -403,7 +252,9 @@ async function changeSkillAccess(skillName, input) {
 }
 var init_api_client = __esm({
   "src/api-client.ts"() {
-    init_src2();
+    "use strict";
+    init_fetcher();
+    init_generated();
   }
 });
 
@@ -413,7 +264,7 @@ function extractApiErrorMessage(response, fallbackMessage) {
   if (process.env.PSPM_DEBUG) {
     console.log(`[debug] API response status: ${response.status}`);
     console.log(
-      `[debug] API response data:`,
+      "[debug] API response data:",
       JSON.stringify(errorData, null, 2)
     );
   }
@@ -445,6 +296,7 @@ ${issueMessages}`;
 var ConfigError, NotLoggedInError;
 var init_errors = __esm({
   "src/errors.ts"() {
+    "use strict";
     ConfigError = class extends Error {
       constructor(message) {
         super(message);
@@ -461,6 +313,12 @@ var init_errors = __esm({
     };
   }
 });
+
+// src/config.ts
+import { mkdir, readFile, stat, unlink, writeFile } from "fs/promises";
+import { homedir } from "os";
+import { dirname, join } from "path";
+import * as ini from "ini";
 function getConfigPath() {
   return join(homedir(), ".pspmrc");
 }
@@ -494,7 +352,7 @@ async function readUserConfig() {
     const content = await readFile(configPath, "utf-8");
     const parsed = ini.parse(content);
     if (process.env.PSPM_DEBUG) {
-      console.log(`[config] Parsed config:`, JSON.stringify(parsed, null, 2));
+      console.log("[config] Parsed config:", JSON.stringify(parsed, null, 2));
     }
     const scopedRegistries = {};
     for (const key of Object.keys(parsed)) {
@@ -655,7 +513,7 @@ async function resolveConfig() {
     apiKey = process.env.PSPM_API_KEY;
   }
   if (process.env.PSPM_DEBUG) {
-    console.log(`[config] Resolved config:`);
+    console.log("[config] Resolved config:");
     console.log(`[config]   registryUrl: ${registryUrl}`);
     console.log(`[config]   apiKey: ${apiKey ? "***" : "(not set)"}`);
     console.log(`[config]   username: ${username || "(not set)"}`);
@@ -699,8 +557,8 @@ async function setCredentials(authToken, username, registry) {
 }
 async function clearCredentials() {
   const config2 = await readUserConfig();
-  delete config2.authToken;
-  delete config2.username;
+  config2.authToken = void 0;
+  config2.username = void 0;
   await writeUserConfig(config2);
 }
 async function isLoggedIn() {
@@ -715,7 +573,7 @@ async function requireApiKey() {
   const resolved = await resolveConfig();
   if (!resolved.apiKey) {
     if (process.env.PSPM_DEBUG) {
-      console.log(`[config] requireApiKey: No API key found`);
+      console.log("[config] requireApiKey: No API key found");
     }
     throw new NotLoggedInError();
   }
@@ -733,10 +591,143 @@ async function getRegistryUrl() {
 var DEFAULT_REGISTRY_URL;
 var init_config = __esm({
   "src/config.ts"() {
+    "use strict";
     init_errors();
     DEFAULT_REGISTRY_URL = "https://pspm.dev";
   }
 });
+
+// src/lib/integrity.ts
+import { createHash } from "crypto";
+function calculateIntegrity(data) {
+  const hash = createHash("sha256").update(data).digest("base64");
+  return `sha256-${hash}`;
+}
+var init_integrity = __esm({
+  "src/lib/integrity.ts"() {
+    "use strict";
+  }
+});
+
+// src/lib/manifest.ts
+function validateManifest(manifest) {
+  if (!manifest.name) {
+    return { valid: false, error: "Manifest must have a 'name' field" };
+  }
+  if (!manifest.version) {
+    return { valid: false, error: "Manifest must have a 'version' field" };
+  }
+  if (!/^[a-z][a-z0-9_-]*$/.test(manifest.name)) {
+    return {
+      valid: false,
+      error: "Name must start with a lowercase letter and contain only lowercase letters, numbers, hyphens, and underscores"
+    };
+  }
+  if (!/^\d+\.\d+\.\d+/.test(manifest.version)) {
+    return {
+      valid: false,
+      error: "Version must be a valid semantic version (e.g., 1.0.0)"
+    };
+  }
+  return { valid: true };
+}
+var DEFAULT_SKILL_FILES, PSPM_SCHEMA_URL;
+var init_manifest = __esm({
+  "src/lib/manifest.ts"() {
+    "use strict";
+    DEFAULT_SKILL_FILES = [
+      "SKILL.md",
+      "runtime",
+      "scripts",
+      "data"
+    ];
+    PSPM_SCHEMA_URL = "https://pspm.dev/schema/v1/pspm.json";
+  }
+});
+
+// src/lib/specifier.ts
+function parseSkillSpecifier(specifier) {
+  const match = specifier.match(SPECIFIER_PATTERN);
+  if (!match) {
+    return null;
+  }
+  return {
+    username: match[1],
+    name: match[2],
+    versionRange: match[3]
+  };
+}
+function parseGitHubSpecifier(specifier) {
+  const match = specifier.match(GITHUB_SPECIFIER_PATTERN);
+  if (!match) {
+    return null;
+  }
+  const [, owner, repo, pathWithSlash, ref] = match;
+  return {
+    owner,
+    repo,
+    // Remove leading slash from path
+    path: pathWithSlash ? pathWithSlash.slice(1) : void 0,
+    ref: ref || void 0
+  };
+}
+function formatGitHubSpecifier(spec) {
+  let result = `github:${spec.owner}/${spec.repo}`;
+  if (spec.path) {
+    result += `/${spec.path}`;
+  }
+  if (spec.ref) {
+    result += `@${spec.ref}`;
+  }
+  return result;
+}
+function getGitHubSkillName(spec) {
+  if (spec.path) {
+    const segments = spec.path.split("/").filter(Boolean);
+    return segments[segments.length - 1];
+  }
+  return spec.repo;
+}
+function isGitHubSpecifier(specifier) {
+  return specifier.startsWith("github:");
+}
+var SPECIFIER_PATTERN, GITHUB_SPECIFIER_PATTERN;
+var init_specifier = __esm({
+  "src/lib/specifier.ts"() {
+    "use strict";
+    SPECIFIER_PATTERN = /^@user\/([a-zA-Z0-9_-]+)\/([a-z][a-z0-9_-]*)(?:@(.+))?$/;
+    GITHUB_SPECIFIER_PATTERN = /^github:([a-zA-Z0-9_-]+)\/([a-zA-Z0-9_.-]+)(\/[^@]+)?(?:@(.+))?$/;
+  }
+});
+
+// src/lib/version.ts
+import * as semver from "semver";
+function resolveVersion(range, availableVersions) {
+  const sorted = availableVersions.filter((v) => semver.valid(v)).sort((a, b) => semver.rcompare(a, b));
+  if (!range || range === "latest" || range === "*") {
+    return sorted[0] ?? null;
+  }
+  return semver.maxSatisfying(sorted, range);
+}
+var init_version = __esm({
+  "src/lib/version.ts"() {
+    "use strict";
+  }
+});
+
+// src/lib/index.ts
+var init_lib = __esm({
+  "src/lib/index.ts"() {
+    "use strict";
+    init_integrity();
+    init_manifest();
+    init_specifier();
+    init_version();
+  }
+});
+
+// src/agents.ts
+import { checkbox } from "@inquirer/prompts";
 function resolveAgentConfig(name, overrides) {
   if (overrides?.[name]) {
     return overrides[name];
@@ -748,7 +739,7 @@ function resolveAgentConfig(name, overrides) {
 }
 function parseAgentArg(agentArg) {
   if (!agentArg) {
-    return [...DEFAULT_AGENTS];
+    return [...ALL_AGENTS];
   }
   if (agentArg === "none") {
     return ["none"];
@@ -776,9 +767,10 @@ async function promptForAgents() {
   }
   return selected;
 }
-var AGENT_INFO, DEFAULT_AGENT_CONFIGS, ALL_AGENTS, DEFAULT_AGENTS;
+var AGENT_INFO, DEFAULT_AGENT_CONFIGS, ALL_AGENTS;
 var init_agents = __esm({
   "src/agents.ts"() {
+    "use strict";
     AGENT_INFO = {
       "claude-code": {
         displayName: "Claude Code",
@@ -821,9 +813,12 @@ var init_agents = __esm({
       "kiro",
       "opencode"
     ];
-    DEFAULT_AGENTS = ALL_AGENTS;
   }
 });
+
+// src/github.ts
+import { cp, lstat, mkdir as mkdir2, readdir, rm, writeFile as writeFile2 } from "fs/promises";
+import { join as join2 } from "path";
 function getGitHubHeaders() {
   const headers = {
     Accept: "application/vnd.github+json",
@@ -838,7 +833,8 @@ function getGitHubHeaders() {
 }
 async function resolveGitHubRef(owner, repo, ref) {
   const headers = getGitHubHeaders();
-  if (!ref || ref === "latest") {
+  let resolvedRef = ref;
+  if (!resolvedRef || resolvedRef === "latest") {
     const repoUrl = `https://api.github.com/repos/${owner}/${repo}`;
     const repoResponse = await fetch(repoUrl, { headers });
     if (repoResponse.status === 404) {
@@ -854,9 +850,9 @@ async function resolveGitHubRef(owner, repo, ref) {
       throw new Error(`GitHub API error: ${repoResponse.status}`);
     }
     const repoData = await repoResponse.json();
-    ref = repoData.default_branch;
+    resolvedRef = repoData.default_branch;
   }
-  const commitUrl = `https://api.github.com/repos/${owner}/${repo}/commits/${ref}`;
+  const commitUrl = `https://api.github.com/repos/${owner}/${repo}/commits/${resolvedRef}`;
   const commitResponse = await fetch(commitUrl, { headers });
   if (commitResponse.status === 404) {
     throw new GitHubNotFoundError({ owner, repo, ref });
@@ -898,14 +894,14 @@ async function downloadGitHubPackage(spec) {
   return { buffer, commit, integrity };
 }
 async function extractGitHubPackage(spec, buffer, skillsDir) {
-  const destPath = spec.path ? join(skillsDir, "_github", spec.owner, spec.repo, spec.path) : join(skillsDir, "_github", spec.owner, spec.repo);
-  const tempDir = join(skillsDir, "_github", ".temp", `${Date.now()}`);
-  await mkdir(tempDir, { recursive: true });
-  const tempFile = join(tempDir, "archive.tgz");
+  const destPath = spec.path ? join2(skillsDir, "_github", spec.owner, spec.repo, spec.path) : join2(skillsDir, "_github", spec.owner, spec.repo);
+  const tempDir = join2(skillsDir, "_github", ".temp", `${Date.now()}`);
+  await mkdir2(tempDir, { recursive: true });
+  const tempFile = join2(tempDir, "archive.tgz");
   try {
-    await writeFile(tempFile, buffer);
-    const { exec: exec2 } = await import('child_process');
-    const { promisify: promisify2 } = await import('util');
+    await writeFile2(tempFile, buffer);
+    const { exec: exec2 } = await import("child_process");
+    const { promisify: promisify2 } = await import("util");
     const execAsync = promisify2(exec2);
     await execAsync(`tar -xzf "${tempFile}" -C "${tempDir}"`);
     const entries = await readdir(tempDir);
@@ -915,15 +911,15 @@ async function extractGitHubPackage(spec, buffer, skillsDir) {
     if (!extractedDir) {
       throw new Error("Failed to find extracted directory in tarball");
     }
-    const sourcePath = join(tempDir, extractedDir);
-    const copySource = spec.path ? join(sourcePath, spec.path) : sourcePath;
+    const sourcePath = join2(tempDir, extractedDir);
+    const copySource = spec.path ? join2(sourcePath, spec.path) : sourcePath;
     if (spec.path) {
       const pathExists = await lstat(copySource).catch(() => null);
       if (!pathExists) {
         const rootEntries = await readdir(sourcePath);
         const dirs = [];
         for (const entry of rootEntries) {
-          const stat7 = await lstat(join(sourcePath, entry)).catch(() => null);
+          const stat7 = await lstat(join2(sourcePath, entry)).catch(() => null);
           if (stat7?.isDirectory() && !entry.startsWith(".")) {
             dirs.push(entry);
           }
@@ -932,7 +928,7 @@ async function extractGitHubPackage(spec, buffer, skillsDir) {
       }
     }
     await rm(destPath, { recursive: true, force: true });
-    await mkdir(destPath, { recursive: true });
+    await mkdir2(destPath, { recursive: true });
     await cp(copySource, destPath, { recursive: true });
     return spec.path ? `.pspm/skills/_github/${spec.owner}/${spec.repo}/${spec.path}` : `.pspm/skills/_github/${spec.owner}/${spec.repo}`;
   } finally {
@@ -946,14 +942,16 @@ function getGitHubDisplayName(spec, commit) {
   }
   if (spec.ref || commit) {
     const ref = spec.ref || "HEAD";
-    name += ` (${ref}${""})`;
+    const shortCommit = commit ? commit.slice(0, 7) : "";
+    name += ` (${ref}${shortCommit ? `@${shortCommit}` : ""})`;
   }
   return name;
 }
 var GitHubRateLimitError, GitHubNotFoundError, GitHubPathNotFoundError;
 var init_github = __esm({
   "src/github.ts"() {
-    init_src();
+    "use strict";
+    init_lib();
     GitHubRateLimitError = class extends Error {
       constructor() {
         super(
@@ -985,9 +983,13 @@ Available paths in repository root:
     };
   }
 });
+
+// src/lockfile.ts
+import { mkdir as mkdir3, readFile as readFile2, stat as stat2, writeFile as writeFile3 } from "fs/promises";
+import { dirname as dirname2 } from "path";
 async function hasLegacyLockfile() {
   try {
-    await stat(getLegacyLockfilePath());
+    await stat2(getLegacyLockfilePath());
     return true;
   } catch {
     return false;
@@ -997,26 +999,26 @@ async function migrateLockfileIfNeeded() {
   const legacyPath = getLegacyLockfilePath();
   const newPath = getLockfilePath();
   try {
-    await stat(legacyPath);
+    await stat2(legacyPath);
   } catch {
     return false;
   }
   try {
-    await stat(newPath);
+    await stat2(newPath);
     return false;
   } catch {
   }
   try {
-    const content = await readFile(legacyPath, "utf-8");
+    const content = await readFile2(legacyPath, "utf-8");
     const oldLockfile = JSON.parse(content);
     const newLockfile = {
       lockfileVersion: 2,
       registryUrl: oldLockfile.registryUrl,
       packages: oldLockfile.skills ?? {}
     };
-    await writeFile(newPath, `${JSON.stringify(newLockfile, null, 2)}
+    await writeFile3(newPath, `${JSON.stringify(newLockfile, null, 2)}
 `);
-    console.log(`Migrated lockfile: skill-lock.json \u2192 pspm-lock.json`);
+    console.log("Migrated lockfile: skill-lock.json \u2192 pspm-lock.json");
     return true;
   } catch {
     return false;
@@ -1025,7 +1027,7 @@ async function migrateLockfileIfNeeded() {
 async function readLockfile() {
   const lockfilePath = getLockfilePath();
   try {
-    const content = await readFile(lockfilePath, "utf-8");
+    const content = await readFile2(lockfilePath, "utf-8");
     const lockfile = JSON.parse(content);
     if (lockfile.lockfileVersion === 1 && lockfile.skills && !lockfile.packages) {
       return {
@@ -1038,7 +1040,7 @@ async function readLockfile() {
   } catch {
     if (await hasLegacyLockfile()) {
       try {
-        const content = await readFile(getLegacyLockfilePath(), "utf-8");
+        const content = await readFile2(getLegacyLockfilePath(), "utf-8");
         const legacyLockfile = JSON.parse(content);
         return {
           lockfileVersion: 2,
@@ -1054,7 +1056,7 @@ async function readLockfile() {
 }
 async function writeLockfile(lockfile) {
   const lockfilePath = getLockfilePath();
-  await mkdir(dirname(lockfilePath), { recursive: true });
+  await mkdir3(dirname2(lockfilePath), { recursive: true });
   const normalized = {
     lockfileVersion: 3,
     registryUrl: lockfile.registryUrl,
@@ -1063,7 +1065,7 @@ async function writeLockfile(lockfile) {
   if (lockfile.githubPackages && Object.keys(lockfile.githubPackages).length > 0) {
     normalized.githubPackages = lockfile.githubPackages;
   }
-  await writeFile(lockfilePath, `${JSON.stringify(normalized, null, 2)}
+  await writeFile3(lockfilePath, `${JSON.stringify(normalized, null, 2)}
 `);
 }
 async function createEmptyLockfile() {
@@ -1144,15 +1146,20 @@ async function listLockfileGitHubPackages() {
 }
 var init_lockfile = __esm({
   "src/lockfile.ts"() {
+    "use strict";
     init_config();
   }
 });
+
+// src/manifest.ts
+import { readFile as readFile3, writeFile as writeFile4 } from "fs/promises";
+import { join as join3 } from "path";
 function getManifestPath() {
-  return join(process.cwd(), "pspm.json");
+  return join3(process.cwd(), "pspm.json");
 }
 async function readManifest() {
   try {
-    const content = await readFile(getManifestPath(), "utf-8");
+    const content = await readFile3(getManifestPath(), "utf-8");
     return JSON.parse(content);
   } catch {
     return null;
@@ -1160,7 +1167,7 @@ async function readManifest() {
 }
 async function writeManifest(manifest) {
   const content = JSON.stringify(manifest, null, 2);
-  await writeFile(getManifestPath(), `${content}
+  await writeFile4(getManifestPath(), `${content}
 `);
 }
 async function createMinimalManifest() {
@@ -1220,8 +1227,13 @@ async function removeGitHubDependency(specifier) {
 }
 var init_manifest2 = __esm({
   "src/manifest.ts"() {
+    "use strict";
   }
 });
+
+// src/symlinks.ts
+import { lstat as lstat2, mkdir as mkdir4, readlink, rm as rm2, symlink } from "fs/promises";
+import { dirname as dirname3, join as join4, relative } from "path";
 async function createAgentSymlinks(skills, options) {
   const { agents, projectRoot, agentConfigs } = options;
   if (agents.length === 1 && agents[0] === "none") {
@@ -1233,26 +1245,26 @@ async function createAgentSymlinks(skills, options) {
       console.warn(`Warning: Unknown agent "${agentName}", skipping symlinks`);
       continue;
     }
-    const agentSkillsDir = join(projectRoot, config2.skillsDir);
-    await mkdir(agentSkillsDir, { recursive: true });
+    const agentSkillsDir = join4(projectRoot, config2.skillsDir);
+    await mkdir4(agentSkillsDir, { recursive: true });
     for (const skill of skills) {
-      const symlinkPath = join(agentSkillsDir, skill.name);
-      const targetPath = join(projectRoot, skill.sourcePath);
-      const relativeTarget = relative(dirname(symlinkPath), targetPath);
+      const symlinkPath = join4(agentSkillsDir, skill.name);
+      const targetPath = join4(projectRoot, skill.sourcePath);
+      const relativeTarget = relative(dirname3(symlinkPath), targetPath);
       await createSymlink(symlinkPath, relativeTarget, skill.name);
     }
   }
 }
 async function createSymlink(symlinkPath, target, skillName) {
   try {
-    const stats = await lstat(symlinkPath).catch(() => null);
+    const stats = await lstat2(symlinkPath).catch(() => null);
     if (stats) {
       if (stats.isSymbolicLink()) {
         const existingTarget = await readlink(symlinkPath);
         if (existingTarget === target) {
           return;
         }
-        await rm(symlinkPath);
+        await rm2(symlinkPath);
       } else {
         console.warn(
           `Warning: File exists at symlink path for "${skillName}", skipping: ${symlinkPath}`
@@ -1278,11 +1290,11 @@ async function removeAgentSymlinks(skillName, options) {
     if (!config2) {
       continue;
     }
-    const symlinkPath = join(projectRoot, config2.skillsDir, skillName);
+    const symlinkPath = join4(projectRoot, config2.skillsDir, skillName);
     try {
-      const stats = await lstat(symlinkPath).catch(() => null);
+      const stats = await lstat2(symlinkPath).catch(() => null);
       if (stats?.isSymbolicLink()) {
-        await rm(symlinkPath);
+        await rm2(symlinkPath);
       }
     } catch {
     }
@@ -1302,9 +1314,9 @@ async function getLinkedAgents(skillName, agents, projectRoot, agentConfigs) {
   for (const agentName of agents) {
     const config2 = resolveAgentConfig(agentName, agentConfigs);
     if (!config2) continue;
-    const symlinkPath = join(projectRoot, config2.skillsDir, skillName);
+    const symlinkPath = join4(projectRoot, config2.skillsDir, skillName);
     try {
-      const stats = await lstat(symlinkPath);
+      const stats = await lstat2(symlinkPath);
       if (stats.isSymbolicLink()) {
         linkedAgents.push(agentName);
       }
@@ -1315,6 +1327,7 @@ async function getLinkedAgents(skillName, agents, projectRoot, agentConfigs) {
 }
 var init_symlinks = __esm({
   "src/symlinks.ts"() {
+    "use strict";
     init_agents();
   }
 });
@@ -1324,6 +1337,8 @@ var add_exports = {};
 __export(add_exports, {
   add: () => add
 });
+import { mkdir as mkdir5, rm as rm3 } from "fs/promises";
+import { join as join5 } from "path";
 async function add(specifiers, options) {
   console.log("Resolving packages...\n");
   const resolvedPackages = [];
@@ -1514,23 +1529,23 @@ async function installRegistryPackage(resolved, options) {
     throw new Error("Checksum verification failed");
   }
   const skillsDir = getSkillsDir();
-  const destDir = join(skillsDir, username, name);
-  await mkdir(destDir, { recursive: true });
-  const { writeFile: writeFile8 } = await import('fs/promises');
-  const tempFile = join(destDir, ".temp.tgz");
+  const destDir = join5(skillsDir, username, name);
+  await mkdir5(destDir, { recursive: true });
+  const { writeFile: writeFile8 } = await import("fs/promises");
+  const tempFile = join5(destDir, ".temp.tgz");
   await writeFile8(tempFile, tarballBuffer);
-  const { exec: exec2 } = await import('child_process');
-  const { promisify: promisify2 } = await import('util');
+  const { exec: exec2 } = await import("child_process");
+  const { promisify: promisify2 } = await import("util");
   const execAsync = promisify2(exec2);
   try {
-    await rm(destDir, { recursive: true, force: true });
-    await mkdir(destDir, { recursive: true });
+    await rm3(destDir, { recursive: true, force: true });
+    await mkdir5(destDir, { recursive: true });
     await writeFile8(tempFile, tarballBuffer);
     await execAsync(
       `tar -xzf "${tempFile}" -C "${destDir}" --strip-components=1`
     );
   } finally {
-    await rm(tempFile, { force: true });
+    await rm3(tempFile, { force: true });
   }
   const fullName = `@user/${username}/${name}`;
   await addToLockfile(fullName, {
@@ -1603,22 +1618,29 @@ async function installGitHubPackage(resolved, options) {
 }
 var init_add = __esm({
   "src/commands/add.ts"() {
-    init_src();
+    "use strict";
     init_agents();
     init_api_client();
     init_config();
     init_errors();
     init_github();
+    init_lib();
     init_lockfile();
     init_manifest2();
     init_symlinks();
   }
 });
 
+// src/index.ts
+import { readFileSync } from "fs";
+import { dirname as dirname4, join as join12 } from "path";
+import { fileURLToPath } from "url";
+import { Command } from "commander";
+
 // src/commands/access.ts
-init_src();
 init_api_client();
 init_config();
+init_lib();
 async function access(specifier, options) {
   try {
     const apiKey = await requireApiKey();
@@ -1643,8 +1665,8 @@ async function access(specifier, options) {
       }
       packageName = parsed.name;
     } else {
-      const { readFile: readFile7 } = await import('fs/promises');
-      const { join: join13 } = await import('path');
+      const { readFile: readFile7 } = await import("fs/promises");
+      const { join: join13 } = await import("path");
       let manifest = null;
       try {
         const content = await readFile7(
@@ -1702,11 +1724,15 @@ async function access(specifier, options) {
 
 // src/commands/index.ts
 init_add();
+
+// src/commands/config/init.ts
+import { stat as stat3, writeFile as writeFile5 } from "fs/promises";
+import { join as join6 } from "path";
 async function configInit(options) {
   try {
-    const configPath = join(process.cwd(), ".pspmrc");
+    const configPath = join6(process.cwd(), ".pspmrc");
     try {
-      await stat(configPath);
+      await stat3(configPath);
       console.error("Error: .pspmrc already exists in this directory.");
       process.exit(1);
     } catch {
@@ -1719,7 +1745,7 @@ async function configInit(options) {
       lines.push("; registry = https://custom-registry.example.com");
     }
     lines.push("");
-    await writeFile(configPath, lines.join("\n"));
+    await writeFile5(configPath, lines.join("\n"));
     console.log("Created .pspmrc");
     console.log("");
     console.log("Contents:");
@@ -1764,9 +1790,9 @@ async function configShow() {
 }
 
 // src/commands/deprecate.ts
-init_src();
 init_api_client();
 init_config();
+init_lib();
 async function deprecate(specifier, message, options) {
   try {
     const apiKey = await requireApiKey();
@@ -1831,7 +1857,10 @@ async function deprecate(specifier, message, options) {
 }
 
 // src/commands/init.ts
-init_src();
+init_lib();
+import { readFile as readFile4, stat as stat4, writeFile as writeFile6 } from "fs/promises";
+import { basename, join as join7 } from "path";
+import { createInterface } from "readline";
 function prompt(rl, question, defaultValue) {
   return new Promise((resolve) => {
     const displayDefault = defaultValue ? ` (${defaultValue})` : "";
@@ -1842,8 +1871,8 @@ function prompt(rl, question, defaultValue) {
 }
 async function readExistingPackageJson() {
   try {
-    const content = await readFile(
-      join(process.cwd(), "package.json"),
+    const content = await readFile4(
+      join7(process.cwd(), "package.json"),
       "utf-8"
     );
     const pkg = JSON.parse(content);
@@ -1860,8 +1889,8 @@ async function readExistingPackageJson() {
 }
 async function getGitAuthor() {
   try {
-    const { exec: exec2 } = await import('child_process');
-    const { promisify: promisify2 } = await import('util');
+    const { exec: exec2 } = await import("child_process");
+    const { promisify: promisify2 } = await import("util");
     const execAsync = promisify2(exec2);
     const [nameResult, emailResult] = await Promise.all([
       execAsync("git config user.name").catch(() => ({ stdout: "" })),
@@ -1892,10 +1921,10 @@ function isValidVersion(version2) {
 }
 async function init(options) {
   try {
-    const pspmJsonPath = join(process.cwd(), "pspm.json");
+    const pspmJsonPath = join7(process.cwd(), "pspm.json");
     let exists = false;
     try {
-      await stat(pspmJsonPath);
+      await stat4(pspmJsonPath);
       exists = true;
     } catch {
     }
@@ -2006,9 +2035,9 @@ async function init(options) {
         throw error;
       }
     }
-    if (!manifest.description) delete manifest.description;
-    if (!manifest.author) delete manifest.author;
-    if (manifest.capabilities?.length === 0) delete manifest.capabilities;
+    if (!manifest.description) manifest.description = void 0;
+    if (!manifest.author) manifest.author = void 0;
+    if (manifest.capabilities?.length === 0) manifest.capabilities = void 0;
     const content = JSON.stringify(manifest, null, 2);
     console.log("");
     console.log(`About to write to ${pspmJsonPath}:`);
@@ -2027,10 +2056,10 @@ async function init(options) {
         process.exit(0);
       }
     }
-    await writeFile(pspmJsonPath, `${content}
+    await writeFile6(pspmJsonPath, `${content}
 `);
     try {
-      await stat(join(process.cwd(), "SKILL.md"));
+      await stat4(join7(process.cwd(), "SKILL.md"));
     } catch {
       console.log(
         "Note: Create a SKILL.md file with your skill's prompt content."
@@ -2049,15 +2078,18 @@ async function init(options) {
 }
 
 // src/commands/install.ts
-init_src();
 init_agents();
 init_api_client();
 init_config();
 init_errors();
 init_github();
+init_lib();
 init_lockfile();
 init_manifest2();
 init_symlinks();
+import { createHash as createHash2 } from "crypto";
+import { mkdir as mkdir6, readFile as readFile5, rm as rm4, writeFile as writeFile7 } from "fs/promises";
+import { join as join8 } from "path";
 function getCacheFilePath(cacheDir, integrity) {
   const match = integrity.match(/^sha256-(.+)$/);
   if (!match) {
@@ -2065,15 +2097,15 @@ function getCacheFilePath(cacheDir, integrity) {
   }
   const base64Hash = match[1];
   const hexHash = Buffer.from(base64Hash, "base64").toString("hex");
-  return join(cacheDir, `sha256-${hexHash}.tgz`);
+  return join8(cacheDir, `sha256-${hexHash}.tgz`);
 }
 async function readFromCache(cacheDir, integrity) {
   try {
     const cachePath = getCacheFilePath(cacheDir, integrity);
-    const data = await readFile(cachePath);
-    const actualIntegrity = `sha256-${createHash("sha256").update(data).digest("base64")}`;
+    const data = await readFile5(cachePath);
+    const actualIntegrity = `sha256-${createHash2("sha256").update(data).digest("base64")}`;
     if (actualIntegrity !== integrity) {
-      await rm(cachePath, { force: true });
+      await rm4(cachePath, { force: true });
       return null;
     }
     return data;
@@ -2083,9 +2115,9 @@ async function readFromCache(cacheDir, integrity) {
 }
 async function writeToCache(cacheDir, integrity, data) {
   try {
-    await mkdir(cacheDir, { recursive: true });
+    await mkdir6(cacheDir, { recursive: true });
     const cachePath = getCacheFilePath(cacheDir, integrity);
-    await writeFile(cachePath, data);
+    await writeFile7(cachePath, data);
   } catch {
   }
 }
@@ -2328,7 +2360,7 @@ Installing ${packageCount} registry skill(s)...
             continue;
           }
           tarballBuffer = Buffer.from(await response.arrayBuffer());
-          const actualIntegrity = `sha256-${createHash("sha256").update(tarballBuffer).digest("base64")}`;
+          const actualIntegrity = `sha256-${createHash2("sha256").update(tarballBuffer).digest("base64")}`;
           if (actualIntegrity !== entry.integrity) {
             console.error(
               `  Error: Checksum verification failed for ${fullName}`
@@ -2340,20 +2372,20 @@ Installing ${packageCount} registry skill(s)...
           }
           await writeToCache(cacheDir, entry.integrity, tarballBuffer);
         }
-        const destDir = join(skillsDir, username, name);
-        await rm(destDir, { recursive: true, force: true });
-        await mkdir(destDir, { recursive: true });
-        const tempFile = join(destDir, ".temp.tgz");
-        await writeFile(tempFile, tarballBuffer);
-        const { exec: exec2 } = await import('child_process');
-        const { promisify: promisify2 } = await import('util');
+        const destDir = join8(skillsDir, username, name);
+        await rm4(destDir, { recursive: true, force: true });
+        await mkdir6(destDir, { recursive: true });
+        const tempFile = join8(destDir, ".temp.tgz");
+        await writeFile7(tempFile, tarballBuffer);
+        const { exec: exec2 } = await import("child_process");
+        const { promisify: promisify2 } = await import("util");
         const execAsync = promisify2(exec2);
         try {
           await execAsync(
             `tar -xzf "${tempFile}" -C "${destDir}" --strip-components=1`
           );
         } finally {
-          await rm(tempFile, { force: true });
+          await rm4(tempFile, { force: true });
         }
         console.log(
           `  Installed to ${destDir}${fromCache ? " (from cache)" : ""}`
@@ -2466,8 +2498,8 @@ All ${totalCount} skill(s) installed.`);
 }
 
 // src/commands/link.ts
-init_src();
 init_agents();
+init_lib();
 init_lockfile();
 init_manifest2();
 init_symlinks();
@@ -2543,11 +2575,13 @@ async function link(options) {
 }
 
 // src/commands/list.ts
-init_src();
 init_agents();
+init_lib();
 init_lockfile();
 init_manifest2();
 init_symlinks();
+import { access as access2 } from "fs/promises";
+import { join as join9 } from "path";
 async function list(options) {
   try {
     const registrySkills = await listLockfileSkills();
@@ -2562,10 +2596,10 @@ async function list(options) {
       if (!match) continue;
       const [, username, skillName] = match;
       const sourcePath = getRegistrySkillPath(username, skillName);
-      const absolutePath = join(projectRoot, sourcePath);
+      const absolutePath = join9(projectRoot, sourcePath);
       let status = "installed";
       try {
-        await access$1(absolutePath);
+        await access2(absolutePath);
       } catch {
         status = "missing";
       }
@@ -2595,10 +2629,10 @@ async function list(options) {
         parsed.repo,
         parsed.path
       );
-      const absolutePath = join(projectRoot, sourcePath);
+      const absolutePath = join9(projectRoot, sourcePath);
       let status = "installed";
       try {
-        await access$1(absolutePath);
+        await access2(absolutePath);
       } catch {
         status = "missing";
       }
@@ -2665,13 +2699,17 @@ Total: ${skills.length} skill(s) (${parts.join(", ")})`);
 // src/commands/login.ts
 init_api_client();
 init_config();
+import { randomBytes } from "crypto";
+import http from "http";
+import { URL as URL2 } from "url";
+import open from "open";
 var DEFAULT_WEB_APP_URL = "https://pspm.dev";
 function getWebAppUrl(registryUrl) {
   if (process.env.PSPM_WEB_URL) {
     return process.env.PSPM_WEB_URL.replace(/\/$/, "");
   }
   try {
-    const url = new URL$1(registryUrl);
+    const url = new URL2(registryUrl);
     return `${url.protocol}//${url.host}`;
   } catch {
     return DEFAULT_WEB_APP_URL;
@@ -2679,7 +2717,7 @@ function getWebAppUrl(registryUrl) {
 }
 function getServerUrl(registryUrl) {
   try {
-    const url = new URL$1(registryUrl);
+    const url = new URL2(registryUrl);
     return `${url.protocol}//${url.host}`;
   } catch {
     return DEFAULT_WEB_APP_URL;
@@ -2711,7 +2749,7 @@ function startCallbackServer(expectedState) {
       rejectToken = reject;
     });
     const server = http.createServer((req, res) => {
-      const url = new URL$1(req.url || "/", `http://localhost`);
+      const url = new URL2(req.url || "/", "http://localhost");
       if (url.pathname === "/callback") {
         const token = url.searchParams.get("token");
         const state = url.searchParams.get("state");
@@ -2798,7 +2836,7 @@ async function browserLogin() {
   console.log("Starting browser-based login...");
   const { port, tokenPromise, cleanup } = await startCallbackServer(state);
   const loginUrl = `${webAppUrl}/cli/login?port=${port}&state=${encodeURIComponent(state)}`;
-  console.log(`Opening browser to authenticate...`);
+  console.log("Opening browser to authenticate...");
   console.log(`If the browser doesn't open, visit: ${loginUrl}`);
   try {
     await open(loginUrl);
@@ -2862,6 +2900,7 @@ async function logout() {
 // src/commands/migrate.ts
 init_config();
 init_lockfile();
+import { mkdir as mkdir7, readdir as readdir2, rename, rm as rm5, stat as stat5 } from "fs/promises";
 async function migrate(options) {
   try {
     const legacySkillsDir = getLegacySkillsDir();
@@ -2872,26 +2911,26 @@ async function migrate(options) {
     let migrationNeeded = false;
     const actions = [];
     try {
-      const legacyStats = await stat(legacySkillsDir);
+      const legacyStats = await stat5(legacySkillsDir);
       if (legacyStats.isDirectory()) {
-        const contents = await readdir(legacySkillsDir);
+        const contents = await readdir2(legacySkillsDir);
         if (contents.length > 0) {
           migrationNeeded = true;
-          actions.push(`Move .skills/ \u2192 .pspm/skills/`);
+          actions.push("Move .skills/ \u2192 .pspm/skills/");
         }
       }
     } catch {
     }
     try {
-      await stat(legacyLockfilePath);
+      await stat5(legacyLockfilePath);
       try {
-        await stat(newLockfilePath);
+        await stat5(newLockfilePath);
         actions.push(
-          `Note: Both skill-lock.json and pspm-lock.json exist. Manual merge may be needed.`
+          "Note: Both skill-lock.json and pspm-lock.json exist. Manual merge may be needed."
         );
       } catch {
         migrationNeeded = true;
-        actions.push(`Migrate skill-lock.json \u2192 pspm-lock.json`);
+        actions.push("Migrate skill-lock.json \u2192 pspm-lock.json");
       }
     } catch {
     }
@@ -2917,21 +2956,21 @@ async function migrate(options) {
       console.log("  \u2713 Migrated skill-lock.json \u2192 pspm-lock.json");
     }
     try {
-      const legacyStats = await stat(legacySkillsDir);
+      const legacyStats = await stat5(legacySkillsDir);
       if (legacyStats.isDirectory()) {
-        const contents = await readdir(legacySkillsDir);
+        const contents = await readdir2(legacySkillsDir);
         if (contents.length > 0) {
-          await mkdir(pspmDir, { recursive: true });
+          await mkdir7(pspmDir, { recursive: true });
           try {
-            const newStats = await stat(newSkillsDir);
+            const newStats = await stat5(newSkillsDir);
             if (newStats.isDirectory()) {
-              const newContents = await readdir(newSkillsDir);
+              const newContents = await readdir2(newSkillsDir);
               if (newContents.length > 0) {
                 console.log(
                   "  ! Both .skills/ and .pspm/skills/ have content. Manual merge required."
                 );
               } else {
-                await rm(newSkillsDir, { recursive: true, force: true });
+                await rm5(newSkillsDir, { recursive: true, force: true });
                 await rename(legacySkillsDir, newSkillsDir);
                 console.log("  \u2713 Moved .skills/ \u2192 .pspm/skills/");
               }
@@ -2963,23 +3002,28 @@ async function migrate(options) {
 }
 
 // src/commands/publish.ts
-init_src();
 init_api_client();
 init_config();
 init_errors();
-var exec = promisify(exec$1);
+init_lib();
+import { exec as execCb } from "child_process";
+import { createHash as createHash3 } from "crypto";
+import { readdir as readdir3, readFile as readFile6, stat as stat6 } from "fs/promises";
+import { join as join10, relative as relative2 } from "path";
+import { promisify } from "util";
+var exec = promisify(execCb);
 async function detectManifest() {
   const cwd = process.cwd();
-  const pspmJsonPath = join(cwd, "pspm.json");
+  const pspmJsonPath = join10(cwd, "pspm.json");
   try {
-    const content = await readFile(pspmJsonPath, "utf-8");
+    const content = await readFile6(pspmJsonPath, "utf-8");
     const manifest = JSON.parse(content);
     return { type: "pspm.json", manifest, path: pspmJsonPath };
   } catch {
   }
-  const packageJsonPath = join(cwd, "package.json");
+  const packageJsonPath = join10(cwd, "package.json");
   try {
-    const content = await readFile(packageJsonPath, "utf-8");
+    const content = await readFile6(packageJsonPath, "utf-8");
     const packageJson2 = JSON.parse(content);
     const manifest = {
       name: packageJson2.name,
@@ -3002,10 +3046,10 @@ function formatBytes(bytes) {
 async function getFilesWithSizes(dir, baseDir) {
   const results = [];
   try {
-    const entries = await readdir(dir, { withFileTypes: true });
+    const entries = await readdir3(dir, { withFileTypes: true });
     for (const entry of entries) {
-      const fullPath = join(dir, entry.name);
-      const relativePath = relative(baseDir, fullPath);
+      const fullPath = join10(dir, entry.name);
+      const relativePath = relative2(baseDir, fullPath);
       if (entry.name === "node_modules" || entry.name === ".git") {
         continue;
       }
@@ -3013,7 +3057,7 @@ async function getFilesWithSizes(dir, baseDir) {
         const subFiles = await getFilesWithSizes(fullPath, baseDir);
         results.push(...subFiles);
       } else {
-        const fileStat = await stat(fullPath);
+        const fileStat = await stat6(fullPath);
         results.push({ path: relativePath, size: fileStat.size });
       }
     }
@@ -3046,7 +3090,7 @@ async function publishCommand(options) {
       files: manifest.files
     };
     if (options.bump) {
-      const semver2 = await import('semver');
+      const semver2 = await import("semver");
       const newVersion = semver2.default.inc(packageJson2.version, options.bump);
       if (!newVersion) {
         console.error(
@@ -3059,7 +3103,7 @@ async function publishCommand(options) {
     }
     const safeName = packageJson2.name.replace(/[@/]/g, "-").replace(/^-+/, "");
     const tarballName = `${safeName}-${packageJson2.version}.tgz`;
-    const tempDir = join(process.cwd(), ".pspm-publish");
+    const tempDir = join10(process.cwd(), ".pspm-publish");
     try {
       await exec(`rm -rf "${tempDir}" && mkdir -p "${tempDir}"`);
       const files = packageJson2.files || [...DEFAULT_SKILL_FILES];
@@ -3075,7 +3119,7 @@ async function publishCommand(options) {
       if (detection.type === "pspm.json") {
         await exec(`cp pspm.json "${tempDir}/package/"`);
         try {
-          await stat(join(process.cwd(), "package.json"));
+          await stat6(join10(process.cwd(), "package.json"));
           await exec(
             `cp package.json "${tempDir}/package/" 2>/dev/null || true`
           );
@@ -3084,30 +3128,30 @@ async function publishCommand(options) {
       } else {
         await exec(`cp package.json "${tempDir}/package/"`);
       }
-      const packageDir = join(tempDir, "package");
+      const packageDir = join10(tempDir, "package");
       const tarballContents = await getFilesWithSizes(packageDir, packageDir);
       const unpackedSize = tarballContents.reduce((acc, f) => acc + f.size, 0);
-      const tarballPath = join(tempDir, tarballName);
+      const tarballPath = join10(tempDir, tarballName);
       await exec(
         `tar -czf "${tarballPath}" -C "${tempDir}" --exclude='node_modules' --exclude='.git' package`
       );
-      const tarballBuffer = await readFile(tarballPath);
+      const tarballBuffer = await readFile6(tarballPath);
       const tarballBase64 = tarballBuffer.toString("base64");
       const tarballSize = tarballBuffer.length;
-      const shasum = createHash("sha1").update(tarballBuffer).digest("hex");
-      const integrityHash = createHash("sha512").update(tarballBuffer).digest("base64");
+      const shasum = createHash3("sha1").update(tarballBuffer).digest("hex");
+      const integrityHash = createHash3("sha512").update(tarballBuffer).digest("base64");
       const integrity = `sha512-${integrityHash}`;
       console.log("");
-      console.log(`pspm notice`);
+      console.log("pspm notice");
       console.log(`pspm notice \u{1F4E6}  ${packageJson2.name}@${packageJson2.version}`);
-      console.log(`pspm notice Tarball Contents`);
+      console.log("pspm notice Tarball Contents");
       tarballContents.sort((a, b) => b.size - a.size);
       for (const file of tarballContents) {
         console.log(
           `pspm notice ${formatBytes(file.size).padStart(8)} ${file.path}`
         );
       }
-      console.log(`pspm notice Tarball Details`);
+      console.log("pspm notice Tarball Details");
       console.log(`pspm notice name:          ${packageJson2.name}`);
       console.log(`pspm notice version:       ${packageJson2.version}`);
       console.log(`pspm notice filename:      ${tarballName}`);
@@ -3118,7 +3162,7 @@ async function publishCommand(options) {
         `pspm notice integrity:     ${integrity.substring(0, 50)}...`
       );
       console.log(`pspm notice total files:   ${tarballContents.length}`);
-      console.log(`pspm notice`);
+      console.log("pspm notice");
       console.log(`pspm notice Publishing to ${registryUrl} with tag latest`);
       configure2({ registryUrl, apiKey });
       const response = await publishSkill({
@@ -3128,7 +3172,7 @@ async function publishCommand(options) {
       if (response.status !== 200) {
         const errorMessage = extractApiErrorMessage(response, "Publish failed");
         if (errorMessage.includes("must be greater than") || errorMessage.includes("already exists")) {
-          console.error(`pspm error code E403`);
+          console.error("pspm error code E403");
           console.error(
             `pspm error 403 403 Forbidden - You cannot publish over the previously published versions: ${packageJson2.version}.`
           );
@@ -3174,12 +3218,14 @@ Setting visibility to ${options.access}...`);
 }
 
 // src/commands/remove.ts
-init_src();
 init_agents();
 init_config();
+init_lib();
 init_lockfile();
 init_manifest2();
 init_symlinks();
+import { rm as rm6 } from "fs/promises";
+import { join as join11 } from "path";
 async function remove(nameOrSpecifier) {
   try {
     const manifest = await readManifest();
@@ -3220,9 +3266,9 @@ async function removeRegistry(specifier, agents, agentConfigs) {
     agentConfigs
   });
   const skillsDir = getSkillsDir();
-  const destDir = join(skillsDir, username, name);
+  const destDir = join11(skillsDir, username, name);
   try {
-    await rm(destDir, { recursive: true, force: true });
+    await rm6(destDir, { recursive: true, force: true });
   } catch {
   }
   console.log(`Removed ${fullName}`);
@@ -3249,9 +3295,9 @@ async function removeGitHub(specifier, agents, agentConfigs) {
   });
   const skillsDir = getSkillsDir();
   const destPath = getGitHubSkillPath(parsed.owner, parsed.repo, parsed.path);
-  const destDir = join(skillsDir, "..", destPath);
+  const destDir = join11(skillsDir, "..", destPath);
   try {
-    await rm(destDir, { recursive: true, force: true });
+    await rm6(destDir, { recursive: true, force: true });
   } catch {
   }
   console.log(`Removed ${lockfileKey}`);
@@ -3281,10 +3327,10 @@ async function removeByShortName(shortName, agents, agentConfigs) {
 }
 
 // src/commands/unpublish.ts
-init_src();
 init_api_client();
 init_config();
 init_errors();
+init_lib();
 async function unpublish(specifier, options) {
   try {
     const apiKey = await requireApiKey();
@@ -3343,10 +3389,10 @@ async function unpublish(specifier, options) {
 }
 
 // src/commands/update.ts
-init_src();
 init_api_client();
 init_config();
 init_errors();
+init_lib();
 init_lockfile();
 init_add();
 async function update(options) {
@@ -3448,13 +3494,13 @@ async function whoami() {
 }
 
 // src/index.ts
-var __dirname$1 = dirname(fileURLToPath(import.meta.url));
+var __dirname = dirname4(fileURLToPath(import.meta.url));
 var packageJson = JSON.parse(
-  readFileSync(join(__dirname$1, "..", "package.json"), "utf-8")
+  readFileSync(join12(__dirname, "..", "package.json"), "utf-8")
 );
 var version = packageJson.version;
 var program = new Command();
-program.name("pspm").description("Prompt Skill Package Manager for AnyT").version(version);
+program.name("pspm").description("Prompt Skill Package Manager for AI coding agents").version(version);
 var configCmd = program.command("config").description("Manage PSPM configuration");
 configCmd.command("show").description("Show resolved configuration").action(async () => {
   await configShow();
@@ -3554,5 +3600,4 @@ program.command("deprecate <specifier> [message]").description(
   await deprecate(specifier, message, { undo: options.undo });
 });
 program.parse();
-//# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map