@anytio/pspm 0.5.1 → 0.6.0

package/CHANGELOG.md

@@ -5,6 +5,17 @@ All notable changes to the PSPM CLI will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.6.0] - 2026-02-17
+
+### Changed
+
+- **Auth-free read operations**: API key is no longer required for non-write operations (`add`, `install`, `update`, `list`, `link`). Only `publish`, `unpublish`, `deprecate`, `access`, and `whoami` now require authentication.
+- Made `apiKey` parameter optional in SDK configuration, eliminating `apiKey ?? ""` workaround patterns
+
+### Fixed
+
+- `update` command no longer blocks users without a PSPM API key when they only have GitHub or public packages installed
+
 ## [0.5.1] - 2026-02-10
 
 ### Changed

package/dist/index.js

@@ -772,7 +772,7 @@ async function resolveRecursive(rootDeps, config2) {
   };
   configure2({
     registryUrl: config2.registryUrl,
-    apiKey: config2.apiKey ?? ""
+    apiKey: config2.apiKey
   });
   const rangesByPackage = /* @__PURE__ */ new Map();
   const queue = [];
@@ -2047,7 +2047,7 @@ async function validateRegistryPackage(specifier) {
     );
   }
   const { username, name, versionRange } = parsed;
-  configure2({ registryUrl, apiKey: apiKey ?? "" });
+  configure2({ registryUrl, apiKey });
   console.log(`Resolving ${specifier}...`);
   const versionsResponse = await listSkillVersions(username, name);
   if (versionsResponse.status !== 200) {
@@ -2843,7 +2843,7 @@ async function installFromLockfile(options) {
       }
       console.log(`Resolving ${missingDeps.length} new dependency(ies)...
 `);
-      configure2({ registryUrl, apiKey: apiKey ?? "" });
+      configure2({ registryUrl, apiKey });
       for (const { fullName, versionRange } of missingDeps) {
         const parsed = parseSkillSpecifier(fullName);
         if (!parsed) {
@@ -4144,8 +4144,9 @@ init_lockfile2();
 init_add();
 async function update(options) {
   try {
-    const apiKey = await requireApiKey();
-    const registryUrl = await getRegistryUrl();
+    const config2 = await resolveConfig();
+    const registryUrl = config2.registryUrl;
+    const apiKey = getTokenForRegistry(config2, registryUrl);
     const skills = await listLockfileSkills();
     if (skills.length === 0) {
       console.log("No skills installed.");