skillfish 1.0.6 → 1.0.8

package/dist/commands/add.js

@@ -9,7 +9,7 @@ import pc from 'picocolors';
 import { trackInstall } from '../telemetry.js';
 import { isValidPath, parseFrontmatter, deriveSkillName, toTitleCase, truncate, batchMap, createJsonOutput, isInputTTY, isTTY, } from '../utils.js';
 import { getDetectedAgents, AGENT_CONFIGS } from '../lib/agents.js';
-import { findAllSkillMdFiles, fetchSkillMdContent, SKILL_FILENAME, RateLimitError, RepoNotFoundError, NetworkError, GitHubApiError, } from '../lib/github.js';
+import { findAllSkillMdFiles, fetchSkillMdContent, fetchDefaultBranch, SKILL_FILENAME, RateLimitError, RepoNotFoundError, NetworkError, GitHubApiError, } from '../lib/github.js';
 import { installSkill } from '../lib/installer.js';
 import { EXIT_CODES, isValidName } from '../lib/constants.js';
 // === Command Definition ===
@@ -113,9 +113,21 @@ Examples:
         exitWithError('Invalid repository format. Use: owner/repo', EXIT_CODES.INVALID_ARGS);
     }
     // 1. Discover or select skills
-    const discoveryResult = explicitPath
-        ? { paths: [explicitPath], branch: undefined }
-        : await discoverSkillPaths(owner, repo, installAll, jsonMode, jsonOutput, skillNameArg);
+    let discoveryResult;
+    if (explicitPath) {
+        // For explicit paths, we still need to fetch the default branch for degit
+        try {
+            const branch = await fetchDefaultBranch(owner, repo);
+            discoveryResult = { paths: [explicitPath], branch };
+        }
+        catch (err) {
+            // If we can't fetch the branch, let degit try its own detection
+            discoveryResult = { paths: [explicitPath], branch: undefined };
+        }
+    }
+    else {
+        discoveryResult = await discoverSkillPaths(owner, repo, installAll, jsonMode, jsonOutput, skillNameArg);
+    }
     if (!discoveryResult || discoveryResult.paths.length === 0) {
         if (jsonMode) {
             outputJsonAndExit(EXIT_CODES.NOT_FOUND);

package/dist/lib/installer.d.ts

@@ -21,7 +21,7 @@ export interface InstallResult {
 export interface InstallOptions {
     force: boolean;
     baseDir: string;
-    /** Branch to clone from. If not specified, degit will use default branch detection. */
+    /** Branch to clone from. If not specified, giget will use the repository's default branch. */
     branch?: string;
 }
 export interface CopyResult {

package/dist/lib/installer.js

@@ -6,18 +6,18 @@ import { existsSync, mkdirSync, cpSync, rmSync, lstatSync, readdirSync, } from '
 import { homedir } from 'os';
 import { join } from 'path';
 import { randomUUID } from 'crypto';
-import degit from 'degit';
+import { downloadTemplate } from 'giget';
 import { SKILL_FILENAME } from './github.js';
 /**
- * Validates a branch name for safe use in degit paths.
+ * Validates a branch name for safe use in giget source strings.
  * Git branch names can contain alphanumerics, dots, hyphens, underscores, and slashes.
- * We explicitly reject '#' which is used as a delimiter in degit syntax.
+ * We explicitly reject '#' which is used as a delimiter in giget syntax.
  */
 function isValidBranchName(branch) {
     if (!branch || branch.length > 255)
         return false;
     // Allow alphanumerics, dots, hyphens, underscores, and slashes (for feature branches)
-    // Reject anything else, especially '#' which would break degit parsing
+    // Reject anything else, especially '#' which would break giget parsing
     return /^[\w./-]+$/.test(branch) && !branch.includes('#');
 }
 // === Error Types ===
@@ -102,20 +102,24 @@ export async function installSkill(owner, repo, skillPath, skillName, agents, op
     const tmpDir = join(homedir(), '.cache', 'skillfish', `${owner}-${repo}-${randomUUID()}`);
     mkdirSync(tmpDir, { recursive: true, mode: 0o700 });
     try {
-        // Download skill
-        // Build degit path: owner/repo[/subpath][#branch]
+        // Download skill using giget (tarball-based, works reliably on all repo sizes)
+        // Build giget source: github:owner/repo[/subpath][#branch]
         const downloadPath = skillPath === SKILL_FILENAME ? '' : skillPath;
-        let degitPath = downloadPath ? `${owner}/${repo}/${downloadPath}` : `${owner}/${repo}`;
+        let source = downloadPath
+            ? `github:${owner}/${repo}/${downloadPath}`
+            : `github:${owner}/${repo}`;
         // Append branch if specified (critical for repos with non-standard default branches like 'canary')
         // Validate branch name to prevent injection attacks via malformed branch names
         if (branch) {
             if (!isValidBranchName(branch)) {
                 throw new Error(`Invalid branch name: ${branch}`);
             }
-            degitPath = `${degitPath}#${branch}`;
+            source = `${source}#${branch}`;
         }
-        const emitter = degit(degitPath, { cache: false, force: true });
-        await emitter.clone(tmpDir);
+        await downloadTemplate(source, {
+            dir: tmpDir,
+            forceClean: true,
+        });
         // Validate download
         const skillMdPath = join(tmpDir, SKILL_FILENAME);
         if (!existsSync(skillMdPath)) {
@@ -154,11 +158,8 @@ export async function installSkill(owner, repo, skillPath, skillName, agents, op
         }
         else {
             const errMsg = err instanceof Error ? err.message : String(err);
-            // Provide more helpful error messages for common degit failures
-            if (errMsg.includes('could not find commit hash for HEAD')) {
-                result.failureReason = `Could not clone repository. The branch or path may not exist, or there may be a network issue. Tried: ${owner}/${repo}${skillPath !== SKILL_FILENAME ? `/${skillPath}` : ''}`;
-            }
-            else if (errMsg.includes('404')) {
+            // Provide more helpful error messages for common failures
+            if (errMsg.includes('404') || errMsg.includes('Not Found')) {
                 result.failureReason = `Repository or path not found: ${owner}/${repo}${skillPath !== SKILL_FILENAME ? `/${skillPath}` : ''}`;
             }
             else {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skillfish",
-  "version": "1.0.6",
+  "version": "1.0.8",
   "description": "Install AI agent skills from GitHub with a single command",
   "type": "module",
   "bin": {
@@ -57,7 +57,7 @@
   "dependencies": {
     "@clack/prompts": "^0.11.0",
     "commander": "^14.0.2",
-    "degit": "^2.8.4",
+    "giget": "^3.1.1",
     "picocolors": "^1.1.1"
   },
   "devDependencies": {