@anytio/pspm 0.9.2 → 0.10.0

package/CHANGELOG.md

@@ -5,6 +5,18 @@ All notable changes to the PSPM CLI will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.10.0] - 2026-03-14
+
+### Added
+
+- **Organization publishing**: Publish skills under an org namespace with `pspm publish --org <orgname>`
+  - `pspm publish --access team --org myorg` — publish as team-visible under `@org/myorg/skill-name`
+  - `pspm publish --access public --org myorg` — publish as public under org namespace
+- **Team visibility**: New `--access team` option restricts package access to org members only
+- **Org namespace resolution**: `@org/` namespace fully supported in dependency resolution
+  - Install org-scoped packages: `pspm add @org/myorg/skill-name`
+  - Recursive dependency resolution for org packages
+
 ## [0.9.2] - 2026-03-10
 
 ### Changed

package/README.md

@@ -9,7 +9,7 @@ Supports **Claude Code**, **Cursor**, **Codex**, **Gemini CLI**, **Windsurf**, a
 ## Install a Skill
 
 ```bash
-npx @anytio/pspm add vercel-labs/agent-skills
+npx @anytio/pspm add @user/anyt/youtube-downloader
 ```
 
 ### Source Formats
@@ -351,10 +351,11 @@ pspm version patch --dry-run      # Preview without writing
 ```bash
 pspm publish --access public      # Publish as public (irreversible)
 pspm publish --access private     # Publish as private (requires Pro)
+pspm publish --access team --org myorg       # Publish under org (team-only)
 pspm publish --access private --bump patch   # Bump and publish
 ```
 
-`--access` is required. Before uploading, `pspm publish` shows a preview of included files and package size. Max package size is **10MB**.
+`--access` is required (`public`, `private`, or `team`). Use `--org <orgname>` to publish under an organization namespace. `--access team` requires `--org`. Before uploading, `pspm publish` shows a preview of included files and package size. Max package size is **10MB**.
 
 ### Managing Published Skills
 

package/dist/index.js

@@ -74,7 +74,7 @@ var init_fetcher = __esm({
 });
 
 // src/sdk/generated/index.ts
-var getMeUrl, me, getExplorePublicSkillsUrl, explorePublicSkills, getDeleteSkillUrl, deleteSkill, getListSkillVersionsUrl, listSkillVersions, getGetSkillVersionUrl, getSkillVersion, getDeleteSkillVersionUrl, deleteSkillVersion, getPublishSkillUrl, publishSkill;
+var getMeUrl, me, getExplorePublicSkillsUrl, explorePublicSkills, getDeleteSkillUrl, deleteSkill, getListSkillVersionsUrl, listSkillVersions, getGetSkillVersionUrl, getSkillVersion, getDeleteSkillVersionUrl, deleteSkillVersion, getPublishSkillUrl, publishSkill, getListOrgSkillVersionsUrl, listOrgSkillVersions, getGetOrgSkillVersionUrl, getOrgSkillVersion, getPublishOrgSkillUrl, publishOrgSkill;
 var init_generated = __esm({
   "src/sdk/generated/index.ts"() {
     init_fetcher();
@@ -173,6 +173,46 @@ var init_generated = __esm({
         }
       );
     };
+    getListOrgSkillVersionsUrl = (orgname, name) => {
+      return `/api/skills/@org/${orgname}/${name}/versions`;
+    };
+    listOrgSkillVersions = async (orgname, name, options) => {
+      return customFetch(
+        getListOrgSkillVersionsUrl(orgname, name),
+        {
+          ...options,
+          method: "GET"
+        }
+      );
+    };
+    getGetOrgSkillVersionUrl = (orgname, name, version3) => {
+      return `/api/skills/@org/${orgname}/${name}/versions/${version3}`;
+    };
+    getOrgSkillVersion = async (orgname, name, version3, options) => {
+      return customFetch(
+        getGetOrgSkillVersionUrl(orgname, name, version3),
+        {
+          ...options,
+          method: "GET"
+        }
+      );
+    };
+    getPublishOrgSkillUrl = (orgname) => {
+      return `/api/skills/@org/${orgname}/publish`;
+    };
+    publishOrgSkill = async (orgname, publishSkillInput, options) => {
+      return customFetch(
+        getPublishOrgSkillUrl(orgname),
+        {
+          ...options,
+          method: "POST",
+          headers: { "Content-Type": "application/json", ...options?.headers },
+          body: JSON.stringify(
+            publishSkillInput
+          )
+        }
+      );
+    };
   }
 });
 
@@ -1020,6 +1060,10 @@ async function resolveRecursive(rootDeps, config2) {
         );
         versionsStatus = resp.status;
         versionsData = resp.data;
+      } else if (parsed.namespace === "org") {
+        const resp = await listOrgSkillVersions(parsed.owner, parsed.name);
+        versionsStatus = resp.status;
+        versionsData = resp.status === 200 ? resp.data : void 0;
       } else {
         const resp = await listSkillVersions(parsed.owner, parsed.name);
         versionsStatus = resp.status;
@@ -1065,6 +1109,15 @@ async function resolveRecursive(rootDeps, config2) {
         if (resp.status === 200 && resp.data) {
           versionData = resp.data;
         }
+      } else if (parsed.namespace === "org") {
+        const resp = await getOrgSkillVersion(
+          parsed.owner,
+          parsed.name,
+          resolvedVersion
+        );
+        if (resp.status === 200 && resp.data) {
+          versionData = resp.data;
+        }
       } else {
         const resp = await getSkillVersion(
           parsed.owner,
@@ -1133,6 +1186,9 @@ async function resolveRecursive(rootDeps, config2) {
           p2Parsed.subname
         );
         p2Versions = resp.status === 200 ? resp.data : void 0;
+      } else if (p2Parsed.namespace === "org") {
+        const resp = await listOrgSkillVersions(p2Parsed.owner, p2Parsed.name);
+        p2Versions = resp.status === 200 ? resp.data : void 0;
       } else {
         const resp = await listSkillVersions(p2Parsed.owner, p2Parsed.name);
         p2Versions = resp.status === 200 ? resp.data : void 0;
@@ -1168,6 +1224,15 @@ async function resolveRecursive(rootDeps, config2) {
           if (resp.status === 200 && resp.data) {
             p2VersionData = resp.data;
           }
+        } else if (p2Parsed.namespace === "org") {
+          const resp = await getOrgSkillVersion(
+            p2Parsed.owner,
+            p2Parsed.name,
+            finalVersion
+          );
+          if (resp.status === 200 && resp.data) {
+            p2VersionData = resp.data;
+          }
         } else {
           const resp = await getSkillVersion(
             p2Parsed.owner,
@@ -5348,13 +5413,25 @@ async function publishCommand(options) {
       console.log("");
       console.log(`pspm notice Publishing to ${registryUrl} with tag latest`);
       configure2({ registryUrl, apiKey });
-      const response = await publishSkill({
-        manifest: packageJson2,
-        tarballBase64,
-        visibility: options.access
-      });
+      let response;
+      if (options.org) {
+        response = await publishOrgSkill(options.org, {
+          manifest: packageJson2,
+          tarballBase64,
+          visibility: options.access
+        });
+      } else {
+        response = await publishSkill({
+          manifest: packageJson2,
+          tarballBase64,
+          visibility: options.access
+        });
+      }
       if (response.status !== 200) {
-        const errorMessage = extractApiErrorMessage(response, "Publish failed");
+        const errorMessage = extractApiErrorMessage(
+          { status: response.status, data: response.data },
+          "Publish failed"
+        );
         if (errorMessage.includes("must be greater than") || errorMessage.includes("already exists")) {
           console.error("pspm error code E403");
           console.error(
@@ -5365,9 +5442,11 @@ async function publishCommand(options) {
       }
       const result = response.data;
       const visibility = result.skill.visibility;
-      const visibilityIcon = visibility === "public" ? "\u{1F310}" : "\u{1F512}";
+      const visibilityIcon = visibility === "public" ? "\u{1F310}" : visibility === "team" ? "\u{1F465}" : "\u{1F512}";
+      const namespace = options.org ? "org" : result.skill.namespace ?? "user";
+      const owner = options.org ?? result.skill.username;
       console.log(
-        `+ @${result.skill.namespace ?? "user"}/${result.skill.username}/${result.skill.name}@${result.version.version}`
+        `+ @${namespace}/${owner}/${result.skill.name}@${result.version.version}`
       );
       console.log(`Checksum: ${result.version.checksum}`);
       console.log(`Visibility: ${visibilityIcon} ${visibility}`);
@@ -6070,19 +6149,24 @@ program.command("version <bump>").description("Bump package version (major, mino
     dryRun: options.dryRun
   });
 });
-program.command("publish").description("Publish current directory as a skill").option("--bump <level>", "Bump version (major, minor, patch)").option("--tag <tag>", "Tag for the release").requiredOption(
+program.command("publish").description("Publish current directory as a skill").option("--bump <level>", "Bump version (major, minor, patch)").option("--tag <tag>", "Tag for the release").option("--org <orgname>", "Publish under an organization namespace").requiredOption(
   "--access <level>",
-  "Set package visibility (public or private)"
+  "Set package visibility (public, private, or team)"
 ).action(async (options) => {
   const access3 = options.access;
-  if (access3 !== "public" && access3 !== "private") {
-    console.error('Error: --access must be "public" or "private"');
+  if (access3 !== "public" && access3 !== "private" && access3 !== "team") {
+    console.error('Error: --access must be "public", "private", or "team"');
+    process.exit(1);
+  }
+  if (access3 === "team" && !options.org) {
+    console.error("Error: --access team requires --org <orgname>");
     process.exit(1);
   }
   await publishCommand({
     bump: options.bump,
     tag: options.tag,
-    access: access3
+    access: access3,
+    org: options.org
   });
 });
 program.command("unpublish <specifier>").description(