skillfish 1.0.7 → 1.0.8

package/dist/lib/installer.d.ts

@@ -21,7 +21,7 @@ export interface InstallResult {
 export interface InstallOptions {
     force: boolean;
     baseDir: string;
-    /** Branch to clone from. If not specified, degit will use default branch detection. */
+    /** Branch to clone from. If not specified, giget will use the repository's default branch. */
     branch?: string;
 }
 export interface CopyResult {

package/dist/lib/installer.js

@@ -6,18 +6,18 @@ import { existsSync, mkdirSync, cpSync, rmSync, lstatSync, readdirSync, } from '
 import { homedir } from 'os';
 import { join } from 'path';
 import { randomUUID } from 'crypto';
-import degit from 'degit';
+import { downloadTemplate } from 'giget';
 import { SKILL_FILENAME } from './github.js';
 /**
- * Validates a branch name for safe use in degit paths.
+ * Validates a branch name for safe use in giget source strings.
  * Git branch names can contain alphanumerics, dots, hyphens, underscores, and slashes.
- * We explicitly reject '#' which is used as a delimiter in degit syntax.
+ * We explicitly reject '#' which is used as a delimiter in giget syntax.
  */
 function isValidBranchName(branch) {
     if (!branch || branch.length > 255)
         return false;
     // Allow alphanumerics, dots, hyphens, underscores, and slashes (for feature branches)
-    // Reject anything else, especially '#' which would break degit parsing
+    // Reject anything else, especially '#' which would break giget parsing
     return /^[\w./-]+$/.test(branch) && !branch.includes('#');
 }
 // === Error Types ===
@@ -102,20 +102,24 @@ export async function installSkill(owner, repo, skillPath, skillName, agents, op
     const tmpDir = join(homedir(), '.cache', 'skillfish', `${owner}-${repo}-${randomUUID()}`);
     mkdirSync(tmpDir, { recursive: true, mode: 0o700 });
     try {
-        // Download skill
-        // Build degit path: owner/repo[/subpath][#branch]
+        // Download skill using giget (tarball-based, works reliably on all repo sizes)
+        // Build giget source: github:owner/repo[/subpath][#branch]
         const downloadPath = skillPath === SKILL_FILENAME ? '' : skillPath;
-        let degitPath = downloadPath ? `${owner}/${repo}/${downloadPath}` : `${owner}/${repo}`;
+        let source = downloadPath
+            ? `github:${owner}/${repo}/${downloadPath}`
+            : `github:${owner}/${repo}`;
         // Append branch if specified (critical for repos with non-standard default branches like 'canary')
         // Validate branch name to prevent injection attacks via malformed branch names
         if (branch) {
             if (!isValidBranchName(branch)) {
                 throw new Error(`Invalid branch name: ${branch}`);
             }
-            degitPath = `${degitPath}#${branch}`;
+            source = `${source}#${branch}`;
         }
-        const emitter = degit(degitPath, { cache: false, force: true });
-        await emitter.clone(tmpDir);
+        await downloadTemplate(source, {
+            dir: tmpDir,
+            forceClean: true,
+        });
         // Validate download
         const skillMdPath = join(tmpDir, SKILL_FILENAME);
         if (!existsSync(skillMdPath)) {
@@ -154,13 +158,8 @@ export async function installSkill(owner, repo, skillPath, skillName, agents, op
         }
         else {
             const errMsg = err instanceof Error ? err.message : String(err);
-            // Provide more helpful error messages for common degit failures
-            // Match "could not find commit hash for HEAD" or "could not find commit hash for <branch>"
-            if (errMsg.includes('could not find commit hash')) {
-                const branchInfo = branch ? ` (branch: ${branch})` : '';
-                result.failureReason = `Could not clone repository. The branch or path may not exist, or there may be a network issue. Tried: ${owner}/${repo}${skillPath !== SKILL_FILENAME ? `/${skillPath}` : ''}${branchInfo}`;
-            }
-            else if (errMsg.includes('404')) {
+            // Provide more helpful error messages for common failures
+            if (errMsg.includes('404') || errMsg.includes('Not Found')) {
                 result.failureReason = `Repository or path not found: ${owner}/${repo}${skillPath !== SKILL_FILENAME ? `/${skillPath}` : ''}`;
             }
             else {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skillfish",
-  "version": "1.0.7",
+  "version": "1.0.8",
   "description": "Install AI agent skills from GitHub with a single command",
   "type": "module",
   "bin": {
@@ -57,7 +57,7 @@
   "dependencies": {
     "@clack/prompts": "^0.11.0",
     "commander": "^14.0.2",
-    "degit": "^2.8.4",
+    "giget": "^3.1.1",
     "picocolors": "^1.1.1"
   },
   "devDependencies": {