skills 1.5.16 → 1.5.18

package/dist/cli.mjs

@@ -9,7 +9,6 @@ import { require_dist } from "./_chunks/libs/@vercel/detect-agent.mjs";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "fs";
 import { basename, dirname, extname, isAbsolute, join, normalize, relative, resolve, sep } from "path";
 import { fileURLToPath } from "url";
-import { createHash } from "node:crypto";
 import { stripVTControlCharacters } from "node:util";
 import { homedir, platform, tmpdir } from "os";
 import * as readline from "readline";
@@ -18,7 +17,8 @@ import { promisify } from "util";
 import { execFile, execSync, spawn, spawnSync } from "child_process";
 import { access, chmod, cp, lstat, mkdir, mkdtemp, readFile, readdir, readlink, realpath, rm, stat, symlink, writeFile } from "fs/promises";
 import { parse } from "yaml";
-import { createHash as createHash$1 } from "crypto";
+import { createHash } from "crypto";
+import { createHash as createHash$1 } from "node:crypto";
 import { gunzipSync, inflateRawSync } from "node:zlib";
 var import_picocolors = /* @__PURE__ */ __toESM(require_picocolors(), 1);
 function getOwnerRepo(parsed) {
@@ -319,7 +319,7 @@ async function searchMultiselect(options) {
 					const lockedTitle = `${import_picocolors.default.bold(lockedSection.title)} ${import_picocolors.default.dim("── always included")}`;
 					lines.push(`${S_BAR}  ${S_BAR_H}${S_BAR_H} ${lockedTitle} ${S_BAR_H.repeat(12)}`);
 					for (const item of lockedSection.items) lines.push(`${S_BAR}    ${S_BULLET} ${import_picocolors.default.bold(item.label)}`);
-					if (lockedSection.hiddenCount && lockedSection.hiddenCount > 0) lines.push(`${S_BAR}    ${import_picocolors.default.dim(`...and ${lockedSection.hiddenCount} more`)}`);
+					if (lockedSection.hiddenCount && lockedSection.hiddenCount > 0) lines.push(`${S_BAR}    ${import_picocolors.default.dim(`…and ${lockedSection.hiddenCount} more`)}`);
 					lines.push(`${S_BAR}`);
 					lines.push(`${S_BAR}  ${S_BAR_H}${S_BAR_H} ${import_picocolors.default.bold("Additional agents")} ${S_BAR_H.repeat(29)}`);
 				}
@@ -492,23 +492,44 @@ function isGitHubSsoAuthError(message) {
 function isAuthFailure(message) {
 	return message.includes("Authentication failed") || message.includes("could not read Username") || message.includes("Permission denied") || message.includes("Repository not found") || message.includes("requested URL returned error: 403") || isGitHubSsoAuthError(message);
 }
-function createGitClient(extraEnv) {
-	return esm_default({
+function createGitClient(sshCommand) {
+	const git = esm_default({
 		timeout: { block: CLONE_TIMEOUT_MS },
-		env: {
-			...process.env,
-			GIT_TERMINAL_PROMPT: "0",
-			GIT_LFS_SKIP_SMUDGE: "1",
-			...extraEnv
-		},
 		config: [
 			"filter.lfs.required=false",
 			"filter.lfs.smudge=",
 			"filter.lfs.clean=",
 			"filter.lfs.process="
 		],
-		unsafe: { allowUnsafeFilter: true }
+		unsafe: {
+			allowUnsafeAlias: true,
+			allowUnsafeAskPass: true,
+			allowUnsafeConfigEnvCount: true,
+			allowUnsafeConfigPaths: true,
+			allowUnsafeCredentialHelper: true,
+			allowUnsafeDiffExternal: true,
+			allowUnsafeDiffTextConv: true,
+			allowUnsafeEditor: true,
+			allowUnsafeFilter: true,
+			allowUnsafeFsMonitor: true,
+			allowUnsafeGpgProgram: true,
+			allowUnsafeGitProxy: true,
+			allowUnsafeHooksPath: true,
+			allowUnsafeMergeDriver: true,
+			allowUnsafePack: true,
+			allowUnsafePager: true,
+			allowUnsafeProtocolOverride: true,
+			allowUnsafeSshCommand: true,
+			allowUnsafeTemplateDir: true
+		}
 	});
+	git.env({
+		...process.env,
+		GIT_TERMINAL_PROMPT: "0",
+		GIT_LFS_SKIP_SMUDGE: "1",
+		...sshCommand ? { GIT_SSH_COMMAND: sshCommand } : {}
+	});
+	return git;
 }
 async function resetTempDir(dir) {
 	await rm(dir, {
@@ -593,7 +614,7 @@ async function cloneRepo(url, ref) {
 			} catch {}
 			try {
 				await resetTempDir(tempDir);
-				await createGitClient({ GIT_SSH_COMMAND: process.env.GIT_SSH_COMMAND ?? "ssh -o BatchMode=yes" }).clone(repo.sshUrl, tempDir, cloneOptions);
+				await createGitClient(process.env.GIT_SSH_COMMAND ?? "ssh -o BatchMode=yes").clone(repo.sshUrl, tempDir, cloneOptions);
 				return tempDir;
 			} catch {}
 		}
@@ -721,7 +742,7 @@ async function computeSkillFolderHash(skillDir) {
 	const files = [];
 	await collectFiles(skillDir, skillDir, files);
 	files.sort((a, b) => a.relativePath.localeCompare(b.relativePath));
-	const hash = createHash$1("sha256");
+	const hash = createHash("sha256");
 	for (const file of files) {
 		hash.update(file.relativePath);
 		hash.update(file.content);
@@ -795,6 +816,9 @@ function normalizeSkillName(name) {
 function normalizeRelativePath(path) {
 	return path.split(sep).join("/").replace(/\/+/g, "/");
 }
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
 function shouldInstallInternalSkills() {
 	const envValue = process.env.INSTALL_INTERNAL_SKILLS;
 	return envValue === "1" || envValue === "true";
@@ -812,13 +836,14 @@ async function parseSkillMd(skillMdPath, options) {
 		const { data } = parseFrontmatter(content);
 		if (!data.name || !data.description) return null;
 		if (typeof data.name !== "string" || typeof data.description !== "string") return null;
-		if (data.metadata?.internal === true && !shouldInstallInternalSkills() && !options?.includeInternal) return null;
+		const metadata = isRecord(data.metadata) ? data.metadata : void 0;
+		if (metadata?.internal === true && !shouldInstallInternalSkills() && !options?.includeInternal) return null;
 		return {
 			name: sanitizeMetadata(data.name),
 			description: sanitizeMetadata(data.description),
 			path: dirname(skillMdPath),
 			rawContent: content,
-			metadata: data.metadata
+			metadata
 		};
 	} catch {
 		return null;
@@ -2680,7 +2705,7 @@ var WellKnownProvider = class {
 		}
 	}
 	computeDigest(bytes) {
-		return `sha256:${createHash("sha256").update(bytes).digest("hex")}`;
+		return `sha256:${createHash$1("sha256").update(bytes).digest("hex")}`;
 	}
 	extractArchive(bytes, artifactUrl, contentType) {
 		if (this.isZipArchive(bytes, artifactUrl, contentType)) return this.extractZip(bytes);
@@ -2849,7 +2874,7 @@ function getGitHubToken() {
 	if (process.env.GITHUB_TOKEN) return process.env.GITHUB_TOKEN;
 	if (process.env.GH_TOKEN) return process.env.GH_TOKEN;
 	if (!_ghWarningShown) {
-		process.stderr.write(`${import_picocolors.default.yellow("│")}  ${import_picocolors.default.yellow("GitHub rate limit reached")} — using your ${import_picocolors.default.cyan("gh")} login to continue.\n${import_picocolors.default.yellow("│")}  ${import_picocolors.default.dim(`Tip: set ${import_picocolors.default.cyan("GITHUB_TOKEN")} to avoid this prompt, or use ${import_picocolors.default.cyan("--full-depth")} to clone instead.\n`)}`);
+		process.stderr.write(`${import_picocolors.default.dim("│  GitHub API request limit reached; checking existing ")}${import_picocolors.default.cyan("gh")}${import_picocolors.default.dim(" authentication…\n")}`);
 		_ghWarningShown = true;
 	}
 	try {
@@ -3103,7 +3128,7 @@ async function fetchSkillDownload(source, slug) {
 	}
 }
 function computeSnapshotHash(files) {
-	const hash = createHash("sha256");
+	const hash = createHash$1("sha256");
 	for (const file of [...files].sort((a, b) => a.path.localeCompare(b.path))) {
 		hash.update(file.path);
 		hash.update(file.contents);
@@ -3183,7 +3208,7 @@ async function tryBlobInstall(ownerRepo, options = {}) {
 		tree
 	};
 }
-var version$1 = "1.5.16";
+var version$1 = "1.5.18";
 const isCancelled$1 = (value) => typeof value === "symbol";
 const EVE_AGENT_LABEL = "eve agent";
 async function isSourcePrivate(source) {
@@ -3254,12 +3279,6 @@ function shortenPath$2(fullPath, cwd) {
 	if (fullPath === cwd || fullPath.startsWith(cwd + sep)) return "." + fullPath.slice(cwd.length);
 	return fullPath;
 }
-function computeSingleFileSkillHash(contents) {
-	const hash = createHash("sha256");
-	hash.update("SKILL.md");
-	hash.update(contents);
-	return hash.digest("hex");
-}
 function formatList$1(items, maxShow = 5) {
 	if (items.length <= maxShow) return items.join(", ");
 	const shown = items.slice(0, maxShow);
@@ -3409,7 +3428,7 @@ async function selectAgentsInteractive(options) {
 }
 setVersion(version$1);
 async function handleWellKnownSkills(source, url, options, spinner) {
-	spinner.start("Discovering skills from well-known endpoint...");
+	spinner.start("Discovering skills from well-known endpoint…");
 	const skills = await wellKnownProvider.fetchAllSkills(url);
 	if (skills.length === 0) {
 		spinner.stop(import_picocolors.default.red("No skills found"));
@@ -3459,7 +3478,7 @@ async function handleWellKnownSkills(source, url, options, spinner) {
 			options: skills.map((s) => ({
 				value: s,
 				label: s.installName,
-				hint: s.description.length > 60 ? s.description.slice(0, 57) + "..." : s.description
+				hint: s.description.length > 60 ? s.description.slice(0, 57) + "…" : s.description
 			})),
 			required: true
 		});
@@ -3483,7 +3502,7 @@ async function handleWellKnownSkills(source, url, options, spinner) {
 		}
 		targetAgents = options.agent;
 	} else {
-		spinner.start("Loading agents...");
+		spinner.start("Loading agents…");
 		const installedAgents = await detectInstalledAgents();
 		const totalAgents = Object.keys(agents).length;
 		spinner.stop(`${totalAgents} agents`);
@@ -3593,7 +3612,7 @@ async function handleWellKnownSkills(source, url, options, spinner) {
 	}
 	const sourceIdentifier = wellKnownProvider.getSourceIdentifier(url);
 	const wellKnownPrivacyPromise = isSourcePrivate(sourceIdentifier).catch(() => null);
-	spinner.start("Installing skills...");
+	spinner.start("Installing skills…");
 	const results = [];
 	for (const skill of selectedSkills) for (const agent of targetAgents) {
 		const result = await installWellKnownSkillForAgent(skill, agent, {
@@ -3663,9 +3682,13 @@ async function handleWellKnownSkills(source, url, options, spinner) {
 			const firstResult = skillResults[0];
 			if (firstResult.mode === "copy") {
 				resultLines.push(`${import_picocolors.default.green("✓")} ${skillName} ${import_picocolors.default.dim("(copied)")}`);
+				const shortPathsSet = /* @__PURE__ */ new Set();
 				for (const r of skillResults) {
 					const shortPath = shortenPath$2(r.path, cwd);
-					resultLines.push(`  ${import_picocolors.default.dim("→")} ${shortPath}`);
+					if (!shortPathsSet.has(shortPath)) {
+						shortPathsSet.add(shortPath);
+						resultLines.push(`  ${import_picocolors.default.dim("→")} ${shortPath}`);
+					}
 				}
 			} else {
 				if (firstResult.canonicalPath) {
@@ -3731,7 +3754,7 @@ async function runAdd(args, options = {}) {
 	let tempDir = null;
 	try {
 		const spinner$3 = spinner();
-		spinner$3.start("Parsing source...");
+		spinner$3.start("Parsing source…");
 		const parsed = parseSource(source);
 		spinner$3.stop(`Source: ${parsed.type === "local" ? parsed.localPath : parsed.url}${parsed.ref ? ` @ ${import_picocolors.default.yellow(parsed.ref)}` : ""}${parsed.subpath ? ` (${parsed.subpath})` : ""}${parsed.skillFilter ? ` ${import_picocolors.default.dim("@")}${import_picocolors.default.cyan(parsed.skillFilter)}` : ""}`);
 		const ownerRepoRaw = getOwnerRepo(parsed);
@@ -3753,14 +3776,14 @@ async function runAdd(args, options = {}) {
 		let skills;
 		let blobResult = null;
 		if (parsed.type === "local") {
-			spinner$3.start("Validating local path...");
+			spinner$3.start("Validating local path…");
 			if (!existsSync(parsed.localPath)) {
 				spinner$3.stop(import_picocolors.default.red("Path not found"));
 				outro(import_picocolors.default.red(`Local path does not exist: ${parsed.localPath}`));
 				process.exit(1);
 			}
 			spinner$3.stop("Local path validated");
-			spinner$3.start("Discovering skills...");
+			spinner$3.start("Discovering skills…");
 			skills = await discoverSkills(parsed.localPath, parsed.subpath, {
 				includeInternal,
 				fullDepth: options.fullDepth
@@ -3775,7 +3798,7 @@ async function runAdd(args, options = {}) {
 			const owner = ownerRepo?.split("/")[0]?.toLowerCase();
 			const isSelfHostedRepo = !!ownerRepo && Object.hasOwn(BLOB_ALLOWED_REPOS, ownerRepo.toLowerCase());
 			if (ownerRepo && owner && (isSelfHostedRepo || BLOB_ALLOWED_OWNERS.includes(owner))) {
-				spinner$3.start("Fetching skills...");
+				spinner$3.start("Fetching skills…");
 				blobResult = await tryBlobInstall(ownerRepo, {
 					subpath: parsed.subpath,
 					skillFilter: parsed.skillFilter,
@@ -3783,26 +3806,26 @@ async function runAdd(args, options = {}) {
 					getToken: getGitHubToken,
 					includeInternal
 				});
-				if (!blobResult) spinner$3.stop(import_picocolors.default.dim("Falling back to clone..."));
+				if (!blobResult) spinner$3.stop(import_picocolors.default.dim("Falling back to clone…"));
 			}
 			if (blobResult) {
 				skills = blobResult.skills;
 				spinner$3.stop(`Found ${import_picocolors.default.green(skills.length)} skill${skills.length > 1 ? "s" : ""}`);
 			} else {
-				spinner$3.start("Cloning repository...");
+				spinner$3.start("Cloning repository…");
 				tempDir = await cloneRepo(parsed.url, parsed.ref);
 				spinner$3.stop("Repository cloned");
-				spinner$3.start("Discovering skills...");
+				spinner$3.start("Discovering skills…");
 				skills = await discoverSkills(tempDir, parsed.subpath, {
 					includeInternal,
 					fullDepth: options.fullDepth
 				});
 			}
 		} else {
-			spinner$3.start("Cloning repository...");
+			spinner$3.start("Cloning repository…");
 			tempDir = await cloneRepo(parsed.url, parsed.ref);
 			spinner$3.stop("Repository cloned");
-			spinner$3.start("Discovering skills...");
+			spinner$3.start("Discovering skills…");
 			skills = await discoverSkills(tempDir, parsed.subpath, {
 				includeInternal,
 				fullDepth: options.fullDepth
@@ -3887,7 +3910,7 @@ async function runAdd(args, options = {}) {
 					grouped[groupName].push({
 						value: s,
 						label: getSkillDisplayName(s),
-						hint: s.description.length > 60 ? s.description.slice(0, 57) + "..." : s.description
+						hint: s.description.length > 60 ? s.description.slice(0, 57) + "…" : s.description
 					});
 				}
 				selected = await groupMultiselect({
@@ -3900,7 +3923,7 @@ async function runAdd(args, options = {}) {
 				options: sortedSkills.map((s) => ({
 					value: s,
 					label: getSkillDisplayName(s),
-					hint: s.description.length > 60 ? s.description.slice(0, 57) + "..." : s.description
+					hint: s.description.length > 60 ? s.description.slice(0, 57) + "…" : s.description
 				})),
 				required: true
 			});
@@ -3928,7 +3951,7 @@ async function runAdd(args, options = {}) {
 			}
 			targetAgents = options.agent;
 		} else {
-			spinner$3.start("Loading agents...");
+			spinner$3.start("Loading agents…");
 			const installedAgents = await detectInstalledAgents();
 			const totalAgents = Object.keys(agents).length;
 			spinner$3.stop(`${totalAgents} agents`);
@@ -4131,7 +4154,7 @@ async function runAdd(args, options = {}) {
 				process.exit(0);
 			}
 		}
-		spinner$3.start("Installing skills...");
+		spinner$3.start("Installing skills…");
 		const results = [];
 		for (const skill of selectedSkills) for (const target of installTargets) {
 			const { agent, subagent } = target;
@@ -4146,17 +4169,7 @@ async function runAdd(args, options = {}) {
 					mode: installMode,
 					eveSubagent: subagent
 				});
-			} else if (tempDir && skill.path === tempDir && skill.rawContent) result = await installBlobSkillForAgent({
-				installName: skill.name,
-				files: [{
-					path: "SKILL.md",
-					contents: skill.rawContent
-				}]
-			}, agent, {
-				global: installGlobally,
-				mode: installMode
-			});
-			else result = await installSkillForAgent(skill, agent, {
+			} else result = await installSkillForAgent(skill, agent, {
 				global: installGlobally,
 				mode: installMode,
 				eveSubagent: subagent
@@ -4237,7 +4250,7 @@ async function runAdd(args, options = {}) {
 			for (const skill of selectedSkills) {
 				const skillDisplayName = getSkillDisplayName(skill);
 				if (successfulSkillNames.has(skillDisplayName)) try {
-					const computedHash = blobResult && "snapshotHash" in skill ? skill.snapshotHash : tempDir && skill.path === tempDir && skill.rawContent ? computeSingleFileSkillHash(skill.rawContent) : await computeSkillFolderHash(skill.path);
+					const computedHash = blobResult && "snapshotHash" in skill ? skill.snapshotHash : await computeSkillFolderHash(skill.path);
 					const skillPathValue = skillFiles[skill.name];
 					await addSkillToLocalLock(skill.name, {
 						source: lockSource || parsed.url,
@@ -4275,9 +4288,13 @@ async function runAdd(args, options = {}) {
 					const firstResult = skillResults[0];
 					if (firstResult.mode === "copy") {
 						resultLines.push(`${import_picocolors.default.green("✓")} ${entry.skill} ${import_picocolors.default.dim("(copied)")}`);
+						const shortPathsSet = /* @__PURE__ */ new Set();
 						for (const r of skillResults) {
 							const shortPath = shortenPath$2(r.path, cwd);
-							resultLines.push(`  ${import_picocolors.default.dim("→")} ${shortPath}`);
+							if (!shortPathsSet.has(shortPath)) {
+								shortPathsSet.add(shortPath);
+								resultLines.push(`  ${import_picocolors.default.dim("→")} ${shortPath}`);
+							}
 						}
 					} else {
 						if (firstResult.canonicalPath) {
@@ -4355,7 +4372,7 @@ async function promptForFindSkills(options, targetAgents) {
 			const findSkillsAgents = targetAgents?.filter((a) => a !== "replit");
 			if (!findSkillsAgents || findSkillsAgents.length === 0) return;
 			console.log();
-			log.step("Installing find-skills skill...");
+			log.step("Installing find-skills skill…");
 			try {
 				await runAdd(["vercel-labs/skills"], {
 					skill: ["find-skills"],
@@ -4528,7 +4545,7 @@ async function runSearchPrompt(initialQuery = "", owner) {
 		lines.push(`${TEXT$2}Search skills:${RESET$3} ${query}${cursor}`);
 		lines.push("");
 		if (!query || query.length < 2) lines.push(`${DIM$3}Start typing to search (min 2 chars)${RESET$3}`);
-		else if (results.length === 0 && loading) lines.push(`${DIM$3}Searching...${RESET$3}`);
+		else if (results.length === 0 && loading) lines.push(`${DIM$3}Searching…${RESET$3}`);
 		else if (results.length === 0) lines.push(`${DIM$3}No skills found${RESET$3}`);
 		else {
 			const visible = results.slice(0, 8);
@@ -4540,7 +4557,7 @@ async function runSearchPrompt(initialQuery = "", owner) {
 				const source = skill.source ? ` ${DIM$3}${skill.source}${RESET$3}` : "";
 				const installs = formatInstalls(skill.installs);
 				const installsBadge = installs ? ` ${CYAN$1}${installs}${RESET$3}` : "";
-				const loadingIndicator = loading && i === 0 ? ` ${DIM$3}...${RESET$3}` : "";
+				const loadingIndicator = loading && i === 0 ? ` ${DIM$3}…${RESET$3}` : "";
 				lines.push(`  ${arrow} ${name}${source}${installsBadge}${loadingIndicator}`);
 			}
 		}
@@ -4694,7 +4711,7 @@ ${DIM$3}  2) npx skills add <owner/repo@skill>${RESET$3}`;
 	const pkg = selected.source || selected.slug;
 	const skillName = selected.name;
 	console.log();
-	console.log(`${TEXT$2}Installing ${BOLD$3}${skillName}${RESET$3} from ${DIM$3}${pkg}${RESET$3}...`);
+	console.log(`${TEXT$2}Installing ${BOLD$3}${skillName}${RESET$3} from ${DIM$3}${pkg}${RESET$3}…`);
 	console.log();
 	const { source, options: addOptions } = parseAddOptions([
 		pkg,
@@ -4797,7 +4814,7 @@ async function runSync(args, options = {}) {
 	if (!agentResult.isAgent) intro(import_picocolors.default.bgCyan(import_picocolors.default.black(" skills experimental_sync ")));
 	if (agentResult.isAgent) log.info(import_picocolors.default.bgCyan(import_picocolors.default.black(import_picocolors.default.bold(` ${agentResult.agent.name} `))) + " Agent detected — installing non-interactively");
 	const spinner$2 = spinner();
-	spinner$2.start("Scanning node_modules for skills...");
+	spinner$2.start("Scanning node_modules for skills…");
 	const discoveredSkills = await discoverNodeModuleSkills(cwd);
 	if (discoveredSkills.length === 0) {
 		spinner$2.stop(import_picocolors.default.yellow("No skills found"));
@@ -4850,7 +4867,7 @@ async function runSync(args, options = {}) {
 		}
 		targetAgents = options.agent;
 	} else {
-		spinner$2.start("Loading agents...");
+		spinner$2.start("Loading agents…");
 		const installedAgents = await detectInstalledAgents();
 		const totalAgents = Object.keys(agents).length;
 		spinner$2.stop(`${totalAgents} agents`);
@@ -4924,7 +4941,7 @@ async function runSync(args, options = {}) {
 			process.exit(0);
 		}
 	}
-	spinner$2.start("Syncing skills...");
+	spinner$2.start("Syncing skills…");
 	const results = [];
 	for (const skill of toInstall) for (const agent of targetAgents) {
 		const result = await installSkillForAgent(skill, agent, {
@@ -5261,7 +5278,7 @@ async function removeCommand(skillNames, options) {
 	const isGlobal = options.global ?? false;
 	const cwd = process.cwd();
 	const spinner$1 = spinner();
-	spinner$1.start("Scanning for installed skills...");
+	spinner$1.start("Scanning for installed skills…");
 	const skillNamesSet = /* @__PURE__ */ new Set();
 	const scanDir = async (dir) => {
 		try {
@@ -5335,7 +5352,7 @@ async function removeCommand(skillNames, options) {
 			process.exit(0);
 		}
 	}
-	spinner$1.start("Removing skills...");
+	spinner$1.start("Removing skills…");
 	const results = [];
 	for (const skillName of selectedSkills) try {
 		const canonicalPath = getCanonicalPath(skillName, {
@@ -5586,7 +5603,7 @@ async function checkAndPromptForDeletions(source, allLockedForSource, lockSkills
 		else {
 			const confirmed = await confirm({ message: `Would you like to remove the local copies of these deleted skills?` });
 			if (confirmed && !isCancel(confirmed)) for (const s of deletedSkills) {
-				console.log(`${DIM$1}Removing${RESET$1} ${s}...`);
+				console.log(`${DIM$1}Removing${RESET$1} ${s}…`);
 				await removeCommand([s], {
 					yes: true,
 					global: isGlobal
@@ -5720,7 +5737,7 @@ async function updateGlobalSkills(options = {}) {
 	console.log();
 	for (const update of updates) {
 		const safeName = sanitizeMetadata(update.name);
-		console.log(`${TEXT$1}Updating ${safeName}...${RESET$1}`);
+		console.log(`${TEXT$1}Updating ${safeName}…${RESET$1}`);
 		const installUrl = buildUpdateInstallSource(update.entry);
 		if (!installUrl) {
 			failCount++;
@@ -5801,7 +5818,7 @@ async function updateProjectSkills(options = {}) {
 	if (hasUniversal) targetParts.push("Universal");
 	targetParts.push(...targetAgentNames);
 	if (targetParts.length > 0) console.log(`${TEXT$1}Updating for: ${targetParts.join(", ")}${RESET$1}`);
-	console.log(`${TEXT$1}Refreshing ${updatable.length} skill(s)...${RESET$1}`);
+	console.log(`${TEXT$1}Refreshing ${updatable.length} skill(s)…${RESET$1}`);
 	console.log();
 	const bySource = /* @__PURE__ */ new Map();
 	for (const skill of updatable) {
@@ -5846,7 +5863,7 @@ async function updateProjectSkills(options = {}) {
 		const remainingSkills = skillsForSource.filter((s) => !deletedSkills.includes(s.name));
 		for (const skill of remainingSkills) {
 			const safeName = sanitizeMetadata(skill.name);
-			console.log(`${TEXT$1}Updating ${safeName}...${RESET$1}`);
+			console.log(`${TEXT$1}Updating ${safeName}…${RESET$1}`);
 			const installUrl = buildLocalUpdateSource(skill.entry);
 			if (!installUrl) {
 				failCount++;
@@ -5900,8 +5917,8 @@ function printLegacyProjectSkills(legacy) {
 async function runUpdate(args = []) {
 	const options = parseUpdateOptions(args);
 	const scope = await resolveUpdateScope(options);
-	if (options.skills) console.log(`${TEXT$1}Updating ${options.skills.join(", ")}...${RESET$1}`);
-	else console.log(`${TEXT$1}Checking for skill updates...${RESET$1}`);
+	if (options.skills) console.log(`${TEXT$1}Updating ${options.skills.join(", ")}…${RESET$1}`);
+	else console.log(`${TEXT$1}Checking for skill updates…${RESET$1}`);
 	console.log();
 	let totalSuccess = 0;
 	let totalFail = 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skills",
-  "version": "1.5.16",
+  "version": "1.5.18",
   "description": "The open agent skills ecosystem",
   "type": "module",
   "bin": {
@@ -130,7 +130,7 @@
     "obuild": "^0.4.22",
     "picocolors": "^1.1.1",
     "prettier": "^3.8.1",
-    "simple-git": "^3.27.0",
+    "simple-git": "^3.36.0",
     "typescript": "^5.9.3",
     "vitest": "^4.0.17",
     "xdg-basedir": "^5.1.0"