@anytio/pspm 0.6.0 → 0.7.0

package/CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to the PSPM CLI will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.7.0] - 2026-02-25
+
+### Changed
+
+- **BREAKING: `--access` is now required for `pspm publish`** — You must explicitly specify `--access public` or `--access private` when publishing. Previously, omitting `--access` would default to public (free users) or private (pro users). This prevents accidental public publishes.
+
 ## [0.6.0] - 2026-02-17
 
 ### Changed

package/README.md

@@ -125,13 +125,15 @@ pspm version patch --dry-run  # Preview changes without writing
 ### Publishing
 
 ```bash
-pspm publish                  # Publish current directory as a skill
-pspm publish --bump patch     # Auto-bump version (major, minor, patch)
-pspm publish --access public  # Publish and make public in one step
-pspm unpublish <spec> --force # Remove a published skill version
-pspm deprecate <spec> [msg]   # Mark a version as deprecated
+pspm publish --access private    # Publish as private (requires Pro)
+pspm publish --access public     # Publish as public (irreversible)
+pspm publish --access private --bump patch  # Bump version and publish
+pspm unpublish <spec> --force    # Remove a published skill version
+pspm deprecate <spec> [msg]      # Mark a version as deprecated
 ```
 
+**`--access` is required.** You must specify `--access public` or `--access private` every time you publish. Private skills require a Pro subscription.
+
 **Publish preview:** Before uploading, `pspm publish` shows a preview of included files, package size, and requires confirmation. Max package size is **10MB**.
 
 
@@ -310,3 +312,5 @@ pspm install --frozen-lockfile
 ## License
 
 This project is licensed under [The Artistic License 2.0](LICENSE), the same license used by npm.
+
+<!-- @doc-sync: 17484e41aef17ad72e470bb5511876ce0bdfcbb4 | 2026-02-20 15:00 -->

package/dist/index.js

@@ -4381,11 +4381,19 @@ program.command("version <bump>").description("Bump package version (major, mino
     dryRun: options.dryRun
   });
 });
-program.command("publish").description("Publish current directory as a skill").option("--bump <level>", "Bump version (major, minor, patch)").option("--tag <tag>", "Tag for the release").option("--access <level>", "Set package visibility (public or private)").action(async (options) => {
+program.command("publish").description("Publish current directory as a skill").option("--bump <level>", "Bump version (major, minor, patch)").option("--tag <tag>", "Tag for the release").requiredOption(
+  "--access <level>",
+  "Set package visibility (public or private)"
+).action(async (options) => {
+  const access3 = options.access;
+  if (access3 !== "public" && access3 !== "private") {
+    console.error('Error: --access must be "public" or "private"');
+    process.exit(1);
+  }
   await publishCommand({
     bump: options.bump,
     tag: options.tag,
-    access: options.access
+    access: access3
   });
 });
 program.command("unpublish <specifier>").description(