@lythos/skill-deck 0.9.51 → 0.11.0

package/README.md

@@ -8,16 +8,16 @@
 
 ```bash
 # Add a skill from skills.sh (owner/repo syntax — no conversion needed)
-bunx @lythos/skill-deck@0.9.51 add vercel-labs/agent-skills
+bunx @lythos/skill-deck@0.11.0 add vercel-labs/agent-skills
 
 # Or with @skill filter (same as npx skills add):
-bunx @lythos/skill-deck@0.9.51 add mattpocock/skills@tdd
+bunx @lythos/skill-deck@0.11.0 add mattpocock/skills@tdd
 
 # Or FQ locator:
-bunx @lythos/skill-deck@0.9.51 add github.com/anthropics/skills/skills/frontend-design
+bunx @lythos/skill-deck@0.11.0 add github.com/anthropics/skills/skills/frontend-design
 
 # Sync working set (deny-by-default):
-bunx @lythos/skill-deck@0.9.51 link
+bunx @lythos/skill-deck@0.11.0 link
 ```
 
 ## For AI Agents
@@ -25,7 +25,7 @@ bunx @lythos/skill-deck@0.9.51 link
 This package exposes a **CLI**. Invoke via:
 
 ```bash
-bunx @lythos/skill-deck@0.9.51 <command> [options]
+bunx @lythos/skill-deck@0.11.0 <command> [options]
 ```
 
 No installation required. `bunx` auto-downloads the package.
@@ -73,15 +73,15 @@ prompt = "Search for latest info, then generate professional document with diagr
 
 | Situation | Command |
 |-----------|---------|
-| Sync working set with `skill-deck.toml` | `bunx @lythos/skill-deck@0.9.51 link` |
-| Validate `skill-deck.toml` before committing | `bunx @lythos/skill-deck@0.9.51 validate` |
-| Download a skill to cold pool and add to deck | `bunx @lythos/skill-deck@0.9.51 add owner/repo` |
-| Pull latest versions of declared skills | `bunx @lythos/skill-deck@0.9.51 refresh` |
-| Refresh a single skill by alias | `bunx @lythos/skill-deck@0.9.51 refresh tdd` |
-| Remove a skill from deck and working set | `bunx @lythos/skill-deck@0.9.51 remove tdd` |
-| Switch skill to symlink mode (live) | `bunx @lythos/skill-deck@0.9.51 to-symlink tdd` |
-| Switch skill to snapshot mode (pinned) | `bunx @lythos/skill-deck@0.9.51 to-snapshot tdd` |
-| Use a custom deck file or working dir | `bunx @lythos/skill-deck@0.9.51 link --deck ./my-deck.toml --workdir /path/to/project` |
+| Sync working set with `skill-deck.toml` | `bunx @lythos/skill-deck@0.11.0 link` |
+| Validate `skill-deck.toml` before committing | `bunx @lythos/skill-deck@0.11.0 validate` |
+| Download a skill to cold pool and add to deck | `bunx @lythos/skill-deck@0.11.0 add owner/repo` |
+| Pull latest versions of declared skills | `bunx @lythos/skill-deck@0.11.0 refresh` |
+| Refresh a single skill by alias | `bunx @lythos/skill-deck@0.11.0 refresh tdd` |
+| Remove a skill from deck and working set | `bunx @lythos/skill-deck@0.11.0 remove tdd` |
+| Switch skill to symlink mode (live) | `bunx @lythos/skill-deck@0.11.0 to-symlink tdd` |
+| Switch skill to snapshot mode (pinned) | `bunx @lythos/skill-deck@0.11.0 to-snapshot tdd` |
+| Use a custom deck file or working dir | `bunx @lythos/skill-deck@0.11.0 link --deck ./my-deck.toml --workdir /path/to/project` |
 
 ### Commands
 
@@ -143,7 +143,7 @@ source = "https://github.com/lythos-labs/lythoskill/blob/HEAD/skills/lythoskill-
 EOF
 
 # 2. Link — creates symlinks in .claude/skills/
-bunx @lythos/skill-deck@0.9.51 link
+bunx @lythos/skill-deck@0.11.0 link
 ```
 
 ### Key Concepts
@@ -229,7 +229,7 @@ Caution: deck's deny-by-default will remove any skills not declared in your deck
 
 | Symptom | Cause | Fix |
 |---------|-------|-----|
-| `❌ Skill not found: <name>` | Skill declared in deck but not in cold pool | `bunx @lythos/skill-deck@0.9.51 add github.com/owner/repo/skill` or clone manually into cold pool |
+| `❌ Skill not found: <name>` | Skill declared in deck but not in cold pool | `bunx @lythos/skill-deck@0.11.0 add github.com/owner/repo/skill` or clone manually into cold pool |
 | `link` skips entries with warnings | Real files/directories exist in working set (not symlinks) | Delete the real directories in `working_set` and re-run `link`. Never create directories manually there |
 | `refresh` reports "Not a git repository" | Skill was copied (not cloned) into cold pool | Re-clone with `git clone` or use `deck add` which clones by default |
 | `deck update` prints deprecation warning | `update` was renamed to `refresh` in v0.8+ | Use `deck refresh` instead |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lythos/skill-deck",
-  "version": "0.9.51",
+  "version": "0.11.0",
   "description": "Declarative skill deck governance — cold pool, working set, deny-by-default",
   "keywords": [
     "ai-agent",
@@ -31,7 +31,8 @@
   ],
   "dependencies": {
     "@iarna/toml": "^2.2.5",
-    "@lythos/cold-pool": "^0.9.25",
+    "@lythos/cold-pool": "workspace:*",
+    "@lythos/infra": "workspace:*",
     "yaml": "^2.8.3",
     "zod": "^4.3.6"
   },

package/src/add.test.ts

@@ -107,6 +107,24 @@ describe('normalizeSkillsSh', () => {
       .toBe('github.com/mattpocock/skills')
   })
 
+  // baoyu-skills @skill syntax (largest personal skill pack, 17,900+ stars)
+  it('normalizes JimLiu/baoyu-skills@baoyu-image-cards', () => {
+    const r = normalizeSkillsSh('JimLiu/baoyu-skills@baoyu-image-cards')
+    expect(r.fq).toBe('github.com/JimLiu/baoyu-skills')
+    expect(r.skillFilter).toBe('baoyu-image-cards')
+  })
+
+  it('normalizes jimliu/baoyu-skills@baoyu-infographic (case insensitive)', () => {
+    const r = normalizeSkillsSh('jimliu/baoyu-skills@baoyu-infographic')
+    expect(r.fq).toBe('github.com/jimliu/baoyu-skills')
+    expect(r.skillFilter).toBe('baoyu-infographic')
+  })
+
+  it('normalizes baoyu-skills subpath form', () => {
+    expect(normalizeSkillsSh('JimLiu/baoyu-skills/skills/baoyu-diagram').fq)
+      .toBe('github.com/JimLiu/baoyu-skills/skills/baoyu-diagram')
+  })
+
   // subpath
   it('normalizes owner/repo/subpath', () => {
     expect(normalizeSkillsSh('anthropics/skills/skills/frontend-design').fq)

package/src/refresh-plan.ts

@@ -78,7 +78,12 @@ export function detectGitRoot(skillDir: string, coldPool: string): { gitRoot?: s
         (resolvedRoot === resolvedPool || resolvedRoot.startsWith(resolvedPool + '/'))) {
       return { gitRoot: out, type: 'git' }
     }
-  } catch {}
+  } catch (e: any) {
+    // git rev-parse fails for non-git dirs (expected) — log unexpected failures
+    if (!e.message?.includes('not a git repository')) {
+      console.warn(`detectGitRoot: git rev-parse failed for ${skillDir}: ${e.message}`)
+    }
+  }
 
   return { type: 'not-git' }
 }

package/src/resolve-deck.test.ts

@@ -0,0 +1,45 @@
+import { describe, expect, test, beforeEach } from 'bun:test'
+import { fetchDeckUrl, type FetchDeckIO } from './resolve-deck.js'
+
+describe('fetchDeckUrl', () => {
+  const written: Array<{ path: string; content: string }> = []
+
+  function createMockIO(partial?: Partial<FetchDeckIO>): FetchDeckIO {
+    return {
+      existsSync: () => false,
+      writeFileSync: (path: string, content: string) => {
+        written.push({ path, content })
+      },
+      fetch: async () => new Response('deck content'),
+      ...partial,
+    }
+  }
+
+  beforeEach(() => {
+    written.length = 0
+  })
+
+  test('fetch happy path: writes file on success', async () => {
+    const io = createMockIO()
+    await fetchDeckUrl('https://example.com/deck.toml', io)
+    expect(written).toHaveLength(1)
+    expect(written[0].content).toBe('deck content')
+  })
+
+  test('with proxy: intercepts through fetch deps', async () => {
+    const io = createMockIO({
+      fetch: async () => new Response('proxy deck content'),
+    })
+    await fetchDeckUrl('https://example.com/deck.toml', io)
+    expect(written).toHaveLength(1)
+    expect(written[0].content).toBe('proxy deck content')
+  })
+
+  test('file already exists: refuses to overwrite', async () => {
+    const io = createMockIO({ existsSync: () => true })
+    await expect(fetchDeckUrl('https://example.com/deck.toml', io)).rejects.toThrow(
+      /Refusing to overwrite/,
+    )
+  })
+
+})

package/src/resolve-deck.ts

@@ -8,10 +8,18 @@
  * T1 of EPIC-20260508082810062 (Everything-from-URL).
  */
 
-import { existsSync, writeFileSync } from 'node:fs'
+import { existsSync as _existsSync, writeFileSync as _writeFileSync } from 'node:fs'
 import { resolve } from 'node:path'
+import { fetchWithProxy } from '@lythos/infra'
+import { mirrorUrls } from '../../lythoskill-cold-pool/src/mirror.js'
 import { findDeckToml } from './link.js'
 
+export interface FetchDeckIO {
+  fetch?: typeof fetchWithProxy
+  existsSync?: typeof _existsSync
+  writeFileSync?: typeof _writeFileSync
+}
+
 export interface ResolvedDeck {
   path: string
   source: 'url' | 'local' | 'default'
@@ -41,10 +49,14 @@ export function resolveDeckPathSync(cliArg?: string): ResolvedDeck {
 }
 
 /** Async: fetch URL deck, save to cwd, return local path. */
-export async function fetchDeckUrl(url: string): Promise<string> {
+export async function fetchDeckUrl(url: string, io?: FetchDeckIO): Promise<string> {
+  const fetchFn = io?.fetch ?? fetchWithProxy
+  const existsFn = io?.existsSync ?? _existsSync
+  const writeFn = io?.writeFileSync ?? _writeFileSync
+
   const normalized = normalizeUrl(url)
   const dest = resolve(process.cwd(), 'skill-deck.toml')
-  if (existsSync(dest)) {
+  if (existsFn(dest)) {
     throw new Error(
       `Refusing to overwrite existing ${dest}.\n` +
       `  A skill-deck.toml already exists in this directory.\n` +
@@ -53,11 +65,27 @@ export async function fetchDeckUrl(url: string): Promise<string> {
     )
   }
   console.log(`📥 Fetching deck: ${normalized}`)
-  const res = await fetch(normalized, { signal: AbortSignal.timeout(30_000) })
-  if (!res.ok) {
-    throw new Error(`Failed to fetch deck (HTTP ${res.status}): ${normalized}`)
+
+  let res: Response | undefined
+  try {
+    res = await fetchFn(normalized, { signal: AbortSignal.timeout(30_000) })
+  } catch {}
+
+  if (!res?.ok) {
+    for (const mirrorUrl of mirrorUrls(normalized)) {
+      try {
+        console.log(`   ↳ trying mirror: ${mirrorUrl}`)
+        const r = await fetchFn(mirrorUrl, { signal: AbortSignal.timeout(30_000) })
+        if (r.ok) { res = r; break }
+      } catch {}
+    }
   }
-  writeFileSync(dest, await res.text())
+
+  if (!res?.ok) {
+    throw new Error(`Failed to fetch deck: ${normalized}\n   All mirrors exhausted. Set LYTHOSKILL_GH_MIRROR to use a custom mirror, or LYTHOS_SOCKS_PROXY for SOCKS5.`)
+  }
+
+  writeFn(dest, await res.text())
   console.log(`   → saved to ${dest}`)
   return dest
 }