reskill 1.22.0 → 1.22.1

package/dist/cli/index.js

@@ -3480,6 +3480,65 @@ ${CURSOR_BRIDGE_MARKER}
     }
 }
 // ============================================================================
+// Internal helpers
+// ============================================================================
+/**
+ * Extract a human-readable reason from an error thrown by `fetch()`.
+ *
+ * Node's undici throws a generic `TypeError: fetch failed` and stashes the
+ * real reason in `error.cause`. The chain can be deeper than one level —
+ * e.g. through a corporate proxy:
+ *   TypeError: fetch failed
+ *     → DOMException { message: 'Request was cancelled' }
+ *         → RequestAbortedError { code: 'UND_ERR_ABORTED', message: 'aborted' }
+ *
+ * Walk the `cause` chain and prefer the deepest entry that carries a `code`,
+ * since that's the actionable bit for triage. Falls back to the deepest
+ * available `message`, then to the outermost error's message.
+ *
+ * Produces strings like `UND_ERR_CONNECT_TIMEOUT: Connect Timeout Error`.
+ */ function formatFetchCause(err) {
+    // Cap traversal depth to defend against pathological self-referential chains.
+    const MAX_DEPTH = 8;
+    let bestCode;
+    let bestMessage;
+    let fallbackMessage;
+    const seen = new Set();
+    let current = err;
+    for(let depth = 0; depth < MAX_DEPTH && null != current; depth++){
+        if (seen.has(current)) break;
+        seen.add(current);
+        if ('object' != typeof current) break;
+        const node = current;
+        if ('string' == typeof node.code && node.code) {
+            // Prefer the deepest code, so keep overwriting as we descend.
+            bestCode = node.code;
+            if ('string' == typeof node.message && node.message) bestMessage = node.message;
+        } else if ('string' == typeof node.message && node.message && !fallbackMessage) // Remember the first non-empty message in case no code is ever found.
+        // Skip undici's generic outer wrapper to avoid surfacing "fetch failed".
+        {
+            if ('fetch failed' !== node.message) fallbackMessage = node.message;
+        }
+        current = node.cause;
+    }
+    if (bestCode && bestMessage) return `${bestCode}: ${bestMessage}`;
+    if (bestCode) return bestCode;
+    if (fallbackMessage) return fallbackMessage;
+    return err?.message || String(err);
+}
+/**
+ * Render a URL for inclusion in error messages without leaking the query string.
+ * Signed download URLs put the signature in the query, so we strip it.
+ * Returns `<origin><pathname>`, or `<unknown url>` if parsing fails.
+ */ function describeUrl(rawUrl) {
+    try {
+        const u = new URL(rawUrl);
+        return `${u.origin}${u.pathname}`;
+    } catch  {
+        return '<unknown url>';
+    }
+}
+// ============================================================================
 // RegistryClient Class
 // ============================================================================
 class RegistryClient {
@@ -3498,6 +3557,22 @@ class RegistryClient {
         return `${registry}/api`;
     }
     /**
+   * Wrap `fetch()` to convert undici's generic `TypeError: fetch failed`
+   * (raised on DNS / TCP / TLS / connect-timeout errors) into a
+   * {@link RegistryError} that surfaces the underlying `cause` code and
+   * the (sanitized) URL. Without this, users only see `fetch failed`,
+   * which is not actionable for support triage.
+   *
+   * HTTP-level errors (non-2xx responses) are NOT touched here — call sites
+   * still handle them as before.
+   */ async safeFetch(url, init) {
+        try {
+            return await fetch(url, init);
+        } catch (err) {
+            throw new RegistryError(`Network error contacting ${describeUrl(url)}: ${formatFetchCause(err)}`);
+        }
+    }
+    /**
    * Get authorization headers
    */ getAuthHeaders() {
         const headers = {
@@ -3511,7 +3586,7 @@ class RegistryClient {
    * Get current user info (whoami)
    */ async whoami() {
         const url = `${this.getApiBase()}/skill-auth/me`;
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'GET',
             headers: this.getAuthHeaders()
         });
@@ -3529,7 +3604,7 @@ class RegistryClient {
    * @throws RegistryError if authentication fails
    */ async loginCli() {
         const url = `${this.getApiBase()}/skill-auth/login-cli`;
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'POST',
             headers: this.getAuthHeaders()
         });
@@ -3585,7 +3660,7 @@ class RegistryClient {
    * @throws RegistryError if skill not found or request failed
    */ async getSkillInfo(skillName) {
         const url = `${this.getApiBase()}/skills/${encodeURIComponent(skillName)}`;
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'GET',
             headers: this.getAuthHeaders()
         });
@@ -3620,7 +3695,7 @@ class RegistryClient {
         if (void 0 !== options.limit) params.set('limit', String(options.limit));
         if (void 0 !== options.offset) params.set('offset', String(options.offset));
         const url = `${this.getApiBase()}/skills?${params.toString()}`;
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'GET',
             headers: this.getAuthHeaders()
         });
@@ -3654,7 +3729,7 @@ class RegistryClient {
         if (/^\d+\.\d+\.\d+/.test(version)) return version;
         // Otherwise treat it as a tag and query dist-tags
         const url = `${this.getApiBase()}/skills/${encodeURIComponent(skillName)}`;
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'GET',
             headers: this.getAuthHeaders()
         });
@@ -3692,7 +3767,7 @@ class RegistryClient {
         // Use redirect: 'manual' to capture x-integrity header from 302 responses.
         // The registry returns a 302 redirect to OSS with the integrity header,
         // which would be lost if fetch auto-follows the redirect.
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'GET',
             headers: this.getAuthHeaders(),
             redirect: 'manual'
@@ -3702,7 +3777,7 @@ class RegistryClient {
             const integrity = response.headers.get('x-integrity') || '';
             const location = response.headers.get('location');
             if (!location) throw new RegistryError('Missing redirect location in download response', response.status);
-            const downloadResponse = await fetch(location);
+            const downloadResponse = await this.safeFetch(location);
             if (!downloadResponse.ok) throw new RegistryError(`Download from storage failed: ${downloadResponse.status}`, downloadResponse.status);
             const arrayBuffer = await downloadResponse.arrayBuffer();
             const tarball = Buffer.from(arrayBuffer);
@@ -3802,7 +3877,7 @@ class RegistryClient {
         });
         formData.append('tarball', tarballBlob, `${skillName.replace('/', '-')}.tgz`);
         // Send request
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'POST',
             headers: this.getAuthHeaders(),
             body: formData
@@ -3825,7 +3900,7 @@ class RegistryClient {
             path: groupPath
         });
         const url = `${this.getApiBase()}/skill-groups/resolve?${params.toString()}`;
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'GET',
             headers: this.getAuthHeaders()
         });
@@ -3848,7 +3923,7 @@ class RegistryClient {
         if (options.flat) params.set('flat', 'true');
         const qs = params.toString();
         const url = `${this.getApiBase()}/skill-groups${qs ? `?${qs}` : ''}`;
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'GET',
             headers: this.getAuthHeaders()
         });
@@ -3866,7 +3941,7 @@ class RegistryClient {
    * @returns Created group
    */ async createGroup(input) {
         const url = `${this.getApiBase()}/skill-groups`;
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'POST',
             headers: {
                 ...this.getAuthHeaders(),
@@ -3891,7 +3966,7 @@ class RegistryClient {
         const params = dryRun ? '?dry_run=true' : '';
         const encodedGroupId = encodeURIComponent(groupId);
         const url = `${this.getApiBase()}/skill-groups/${encodedGroupId}${params}`;
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'DELETE',
             headers: this.getAuthHeaders()
         });
@@ -3910,7 +3985,7 @@ class RegistryClient {
    */ async listGroupMembers(groupId) {
         const encodedGroupId = encodeURIComponent(groupId);
         const url = `${this.getApiBase()}/skill-groups/${encodedGroupId}/members`;
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'GET',
             headers: this.getAuthHeaders()
         });
@@ -3930,7 +4005,7 @@ class RegistryClient {
    */ async addGroupMembers(groupId, userIds, role = 'developer') {
         const encodedGroupId = encodeURIComponent(groupId);
         const url = `${this.getApiBase()}/skill-groups/${encodedGroupId}/members`;
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'POST',
             headers: {
                 ...this.getAuthHeaders(),
@@ -3957,7 +4032,7 @@ class RegistryClient {
         });
         const encodedGroupId = encodeURIComponent(groupId);
         const url = `${this.getApiBase()}/skill-groups/${encodedGroupId}/members?${params.toString()}`;
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'DELETE',
             headers: this.getAuthHeaders()
         });
@@ -3975,7 +4050,7 @@ class RegistryClient {
    */ async updateGroupMemberRole(groupId, userId, role) {
         const encodedGroupId = encodeURIComponent(groupId);
         const url = `${this.getApiBase()}/skill-groups/${encodedGroupId}/members`;
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'PATCH',
             headers: {
                 ...this.getAuthHeaders(),

package/dist/core/registry-client.d.ts

@@ -110,6 +110,17 @@ export declare class RegistryClient {
      * @returns Base URL for API calls, e.g., 'https://example.com/api'
      */
     private getApiBase;
+    /**
+     * Wrap `fetch()` to convert undici's generic `TypeError: fetch failed`
+     * (raised on DNS / TCP / TLS / connect-timeout errors) into a
+     * {@link RegistryError} that surfaces the underlying `cause` code and
+     * the (sanitized) URL. Without this, users only see `fetch failed`,
+     * which is not actionable for support triage.
+     *
+     * HTTP-level errors (non-2xx responses) are NOT touched here — call sites
+     * still handle them as before.
+     */
+    private safeFetch;
     /**
      * Get authorization headers
      */

package/dist/core/registry-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry-client.d.ts","sourceRoot":"","sources":["../../src/core/registry-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEpG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAMrD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,GAAG,EAAE,MAAM,CAAC;KACb,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE;QACL,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE;QACL,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qBAAqB;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,qBAAqB;IACrB,SAAS,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/B,wBAAwB;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,gCAAgC;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,gCAAgC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qBAAqB;IACrB,IAAI,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC1B,0BAA0B;IAC1B,IAAI,CAAC,EAAE;QACL,UAAU,CAAC,EAAE,gBAAgB,CAAC;KAC/B,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,aAAc,SAAQ,KAAK;IACtC,SAAgB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpC,SAAgB,QAAQ,CAAC,EAAE,OAAO,CAAC;gBAEvB,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO;CAMrE;AAMD,qBAAa,cAAc;IACzB,OAAO,CAAC,MAAM,CAAiB;gBAEnB,MAAM,EAAE,cAAc;IAIlC;;;;;;OAMG;IACH,OAAO,CAAC,UAAU;IAOlB;;OAEG;IACH,OAAO,CAAC,cAAc;IAatB;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC;IAqBvC;;;;;;;;OAQG;IACG,QAAQ,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAqB3C;;;;;;;OAOG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA4C5F;;;;;;;OAOG;IACG,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAoCzD;;;;;;;;;;;OAWG;IACG,MAAM,CACV,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO,GAChD,OAAO,CAAC;QAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAsCxD;;;;;;;;;;;OAWG;IACG,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAuD/E;;;;;;;;;;OAUG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAuDhF;;;;;;;;OAQG;IACH,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;IAKlD;;;;;;;;;;OAUG;IACH,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,OAAO;IAsB3E;;OAEG;IACG,OAAO,CACX,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACjD,OAAO,CAAC,eAAe,CAAC;IA0E3B;;;;;;OAMG;IACG,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAsB3D;;;;;OAKG;IACG,UAAU,CACd,OAAO,GAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAO,GACvE,OAAO,CAAC,UAAU,EAAE,CAAC;IA2BxB;;;;;OAKG;IACG,WAAW,CAAC,KAAK,EAAE;QACvB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,UAAU,CAAC;IAyBvB;;;;;;OAMG;IACG,WAAW,CACf,OAAO,EAAE,MAAM,EACf,MAAM,UAAQ,GACb,OAAO,CAAC;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAyB3D;;;;;OAKG;IACG,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAsB/D;;;;;;OAMG;IACG,eAAe,CACnB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,GAAE,SAAuB,GAC5B,OAAO,CAAC,IAAI,CAAC;IAuBhB;;;;;OAKG;IACG,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBvE;;;;;;OAMG;IACG,qBAAqB,CACzB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,SAAS,GACd,OAAO,CAAC,IAAI,CAAC;CAsBjB;AAED,eAAe,cAAc,CAAC"}
+{"version":3,"file":"registry-client.d.ts","sourceRoot":"","sources":["../../src/core/registry-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEpG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAMrD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,GAAG,EAAE,MAAM,CAAC;KACb,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE;QACL,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE;QACL,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qBAAqB;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,qBAAqB;IACrB,SAAS,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/B,wBAAwB;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,gCAAgC;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,gCAAgC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qBAAqB;IACrB,IAAI,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC1B,0BAA0B;IAC1B,IAAI,CAAC,EAAE;QACL,UAAU,CAAC,EAAE,gBAAgB,CAAC;KAC/B,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,aAAc,SAAQ,KAAK;IACtC,SAAgB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpC,SAAgB,QAAQ,CAAC,EAAE,OAAO,CAAC;gBAEvB,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO;CAMrE;AAgFD,qBAAa,cAAc;IACzB,OAAO,CAAC,MAAM,CAAiB;gBAEnB,MAAM,EAAE,cAAc;IAIlC;;;;;;OAMG;IACH,OAAO,CAAC,UAAU;IAOlB;;;;;;;;;OASG;YACW,SAAS;IAUvB;;OAEG;IACH,OAAO,CAAC,cAAc;IAatB;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC;IAqBvC;;;;;;;;OAQG;IACG,QAAQ,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAqB3C;;;;;;;OAOG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA4C5F;;;;;;;OAOG;IACG,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAoCzD;;;;;;;;;;;OAWG;IACG,MAAM,CACV,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO,GAChD,OAAO,CAAC;QAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAsCxD;;;;;;;;;;;OAWG;IACG,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAuD/E;;;;;;;;;;OAUG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAuDhF;;;;;;;;OAQG;IACH,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;IAKlD;;;;;;;;;;OAUG;IACH,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,OAAO;IAsB3E;;OAEG;IACG,OAAO,CACX,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACjD,OAAO,CAAC,eAAe,CAAC;IA0E3B;;;;;;OAMG;IACG,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAsB3D;;;;;OAKG;IACG,UAAU,CACd,OAAO,GAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAO,GACvE,OAAO,CAAC,UAAU,EAAE,CAAC;IA2BxB;;;;;OAKG;IACG,WAAW,CAAC,KAAK,EAAE;QACvB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,UAAU,CAAC;IAyBvB;;;;;;OAMG;IACG,WAAW,CACf,OAAO,EAAE,MAAM,EACf,MAAM,UAAQ,GACb,OAAO,CAAC;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAyB3D;;;;;OAKG;IACG,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAsB/D;;;;;;OAMG;IACG,eAAe,CACnB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,GAAE,SAAuB,GAC5B,OAAO,CAAC,IAAI,CAAC;IAuBhB;;;;;OAKG;IACG,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBvE;;;;;;OAMG;IACG,qBAAqB,CACzB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,SAAS,GACd,OAAO,CAAC,IAAI,CAAC;CAsBjB;AAED,eAAe,cAAc,CAAC"}

package/dist/index.js

@@ -3804,6 +3804,65 @@ const SNIPPET_MAX_LENGTH = 120;
     }
 }
 // ============================================================================
+// Internal helpers
+// ============================================================================
+/**
+ * Extract a human-readable reason from an error thrown by `fetch()`.
+ *
+ * Node's undici throws a generic `TypeError: fetch failed` and stashes the
+ * real reason in `error.cause`. The chain can be deeper than one level —
+ * e.g. through a corporate proxy:
+ *   TypeError: fetch failed
+ *     → DOMException { message: 'Request was cancelled' }
+ *         → RequestAbortedError { code: 'UND_ERR_ABORTED', message: 'aborted' }
+ *
+ * Walk the `cause` chain and prefer the deepest entry that carries a `code`,
+ * since that's the actionable bit for triage. Falls back to the deepest
+ * available `message`, then to the outermost error's message.
+ *
+ * Produces strings like `UND_ERR_CONNECT_TIMEOUT: Connect Timeout Error`.
+ */ function formatFetchCause(err) {
+    // Cap traversal depth to defend against pathological self-referential chains.
+    const MAX_DEPTH = 8;
+    let bestCode;
+    let bestMessage;
+    let fallbackMessage;
+    const seen = new Set();
+    let current = err;
+    for(let depth = 0; depth < MAX_DEPTH && null != current; depth++){
+        if (seen.has(current)) break;
+        seen.add(current);
+        if ('object' != typeof current) break;
+        const node = current;
+        if ('string' == typeof node.code && node.code) {
+            // Prefer the deepest code, so keep overwriting as we descend.
+            bestCode = node.code;
+            if ('string' == typeof node.message && node.message) bestMessage = node.message;
+        } else if ('string' == typeof node.message && node.message && !fallbackMessage) // Remember the first non-empty message in case no code is ever found.
+        // Skip undici's generic outer wrapper to avoid surfacing "fetch failed".
+        {
+            if ('fetch failed' !== node.message) fallbackMessage = node.message;
+        }
+        current = node.cause;
+    }
+    if (bestCode && bestMessage) return `${bestCode}: ${bestMessage}`;
+    if (bestCode) return bestCode;
+    if (fallbackMessage) return fallbackMessage;
+    return err?.message || String(err);
+}
+/**
+ * Render a URL for inclusion in error messages without leaking the query string.
+ * Signed download URLs put the signature in the query, so we strip it.
+ * Returns `<origin><pathname>`, or `<unknown url>` if parsing fails.
+ */ function describeUrl(rawUrl) {
+    try {
+        const u = new URL(rawUrl);
+        return `${u.origin}${u.pathname}`;
+    } catch  {
+        return '<unknown url>';
+    }
+}
+// ============================================================================
 // RegistryClient Class
 // ============================================================================
 class RegistryClient {
@@ -3822,6 +3881,22 @@ class RegistryClient {
         return `${registry}/api`;
     }
     /**
+   * Wrap `fetch()` to convert undici's generic `TypeError: fetch failed`
+   * (raised on DNS / TCP / TLS / connect-timeout errors) into a
+   * {@link RegistryError} that surfaces the underlying `cause` code and
+   * the (sanitized) URL. Without this, users only see `fetch failed`,
+   * which is not actionable for support triage.
+   *
+   * HTTP-level errors (non-2xx responses) are NOT touched here — call sites
+   * still handle them as before.
+   */ async safeFetch(url, init) {
+        try {
+            return await fetch(url, init);
+        } catch (err) {
+            throw new RegistryError(`Network error contacting ${describeUrl(url)}: ${formatFetchCause(err)}`);
+        }
+    }
+    /**
    * Get authorization headers
    */ getAuthHeaders() {
         const headers = {
@@ -3835,7 +3910,7 @@ class RegistryClient {
    * Get current user info (whoami)
    */ async whoami() {
         const url = `${this.getApiBase()}/skill-auth/me`;
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'GET',
             headers: this.getAuthHeaders()
         });
@@ -3853,7 +3928,7 @@ class RegistryClient {
    * @throws RegistryError if authentication fails
    */ async loginCli() {
         const url = `${this.getApiBase()}/skill-auth/login-cli`;
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'POST',
             headers: this.getAuthHeaders()
         });
@@ -3909,7 +3984,7 @@ class RegistryClient {
    * @throws RegistryError if skill not found or request failed
    */ async getSkillInfo(skillName) {
         const url = `${this.getApiBase()}/skills/${encodeURIComponent(skillName)}`;
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'GET',
             headers: this.getAuthHeaders()
         });
@@ -3944,7 +4019,7 @@ class RegistryClient {
         if (void 0 !== options.limit) params.set('limit', String(options.limit));
         if (void 0 !== options.offset) params.set('offset', String(options.offset));
         const url = `${this.getApiBase()}/skills?${params.toString()}`;
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'GET',
             headers: this.getAuthHeaders()
         });
@@ -3978,7 +4053,7 @@ class RegistryClient {
         if (/^\d+\.\d+\.\d+/.test(version)) return version;
         // Otherwise treat it as a tag and query dist-tags
         const url = `${this.getApiBase()}/skills/${encodeURIComponent(skillName)}`;
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'GET',
             headers: this.getAuthHeaders()
         });
@@ -4016,7 +4091,7 @@ class RegistryClient {
         // Use redirect: 'manual' to capture x-integrity header from 302 responses.
         // The registry returns a 302 redirect to OSS with the integrity header,
         // which would be lost if fetch auto-follows the redirect.
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'GET',
             headers: this.getAuthHeaders(),
             redirect: 'manual'
@@ -4026,7 +4101,7 @@ class RegistryClient {
             const integrity = response.headers.get('x-integrity') || '';
             const location = response.headers.get('location');
             if (!location) throw new RegistryError('Missing redirect location in download response', response.status);
-            const downloadResponse = await fetch(location);
+            const downloadResponse = await this.safeFetch(location);
             if (!downloadResponse.ok) throw new RegistryError(`Download from storage failed: ${downloadResponse.status}`, downloadResponse.status);
             const arrayBuffer = await downloadResponse.arrayBuffer();
             const tarball = Buffer.from(arrayBuffer);
@@ -4126,7 +4201,7 @@ class RegistryClient {
         });
         formData.append('tarball', tarballBlob, `${skillName.replace('/', '-')}.tgz`);
         // Send request
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'POST',
             headers: this.getAuthHeaders(),
             body: formData
@@ -4149,7 +4224,7 @@ class RegistryClient {
             path: groupPath
         });
         const url = `${this.getApiBase()}/skill-groups/resolve?${params.toString()}`;
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'GET',
             headers: this.getAuthHeaders()
         });
@@ -4172,7 +4247,7 @@ class RegistryClient {
         if (options.flat) params.set('flat', 'true');
         const qs = params.toString();
         const url = `${this.getApiBase()}/skill-groups${qs ? `?${qs}` : ''}`;
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'GET',
             headers: this.getAuthHeaders()
         });
@@ -4190,7 +4265,7 @@ class RegistryClient {
    * @returns Created group
    */ async createGroup(input) {
         const url = `${this.getApiBase()}/skill-groups`;
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'POST',
             headers: {
                 ...this.getAuthHeaders(),
@@ -4215,7 +4290,7 @@ class RegistryClient {
         const params = dryRun ? '?dry_run=true' : '';
         const encodedGroupId = encodeURIComponent(groupId);
         const url = `${this.getApiBase()}/skill-groups/${encodedGroupId}${params}`;
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'DELETE',
             headers: this.getAuthHeaders()
         });
@@ -4234,7 +4309,7 @@ class RegistryClient {
    */ async listGroupMembers(groupId) {
         const encodedGroupId = encodeURIComponent(groupId);
         const url = `${this.getApiBase()}/skill-groups/${encodedGroupId}/members`;
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'GET',
             headers: this.getAuthHeaders()
         });
@@ -4254,7 +4329,7 @@ class RegistryClient {
    */ async addGroupMembers(groupId, userIds, role = 'developer') {
         const encodedGroupId = encodeURIComponent(groupId);
         const url = `${this.getApiBase()}/skill-groups/${encodedGroupId}/members`;
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'POST',
             headers: {
                 ...this.getAuthHeaders(),
@@ -4281,7 +4356,7 @@ class RegistryClient {
         });
         const encodedGroupId = encodeURIComponent(groupId);
         const url = `${this.getApiBase()}/skill-groups/${encodedGroupId}/members?${params.toString()}`;
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'DELETE',
             headers: this.getAuthHeaders()
         });
@@ -4299,7 +4374,7 @@ class RegistryClient {
    */ async updateGroupMemberRole(groupId, userId, role) {
         const encodedGroupId = encodeURIComponent(groupId);
         const url = `${this.getApiBase()}/skill-groups/${encodedGroupId}/members`;
-        const response = await fetch(url, {
+        const response = await this.safeFetch(url, {
             method: 'PATCH',
             headers: {
                 ...this.getAuthHeaders(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "reskill",
-  "version": "1.22.0",
+  "version": "1.22.1",
   "description": "AI Skills Package Manager - Git-based skills management for AI agents",
   "type": "module",
   "main": "./dist/index.js",