skilluse 0.1.10 → 0.2.1

package/dist/cli.js

@@ -50437,6 +50437,25 @@ var getInstance = (stdout, createInstance) => {
 };
 // node_modules/ink/build/components/Static.js
 var import_react14 = __toESM(require_react(), 1);
+function Static(props) {
+  const { items, children: render2, style: customStyle } = props;
+  const [index, setIndex] = import_react14.useState(0);
+  const itemsToRender = import_react14.useMemo(() => {
+    return items.slice(index);
+  }, [items, index]);
+  import_react14.useLayoutEffect(() => {
+    setIndex(items.length);
+  }, [items.length]);
+  const children = itemsToRender.map((item, itemIndex) => {
+    return render2(item, index + itemIndex);
+  });
+  const style = import_react14.useMemo(() => ({
+    position: "absolute",
+    flexDirection: "column",
+    ...customStyle
+  }), [customStyle]);
+  return import_react14.default.createElement("ink-box", { internal_static: true, style }, children);
+}
 // node_modules/ink/build/components/Transform.js
 var import_react15 = __toESM(require_react(), 1);
 // node_modules/ink/build/components/Newline.js
@@ -66561,18 +66580,63 @@ function getSkillsPath(agentId, scope) {
   }
   return join(process.cwd(), agent.localPath);
 }
+// src/services/github.ts
+function buildGitHubHeaders(token) {
+  const headers = {
+    Accept: "application/vnd.github+json",
+    "X-GitHub-Api-Version": "2022-11-28"
+  };
+  if (token) {
+    headers.Authorization = `Bearer ${token}`;
+  }
+  return headers;
+}
+function buildGitHubRawHeaders(token) {
+  const headers = {
+    Accept: "application/vnd.github.raw+json",
+    "X-GitHub-Api-Version": "2022-11-28"
+  };
+  if (token) {
+    headers.Authorization = `Bearer ${token}`;
+  }
+  return headers;
+}
+function isAuthRequired(response) {
+  return response.status === 401 || response.status === 403 && !isRateLimited(response);
+}
+function isRateLimited(response) {
+  return response.headers.get("X-RateLimit-Remaining") === "0";
+}
+function getGitHubErrorMessage(response) {
+  if (response.status === 401) {
+    return "This repository requires authentication. Run 'skilluse login' to access private repos.";
+  }
+  if (response.status === 403) {
+    if (isRateLimited(response)) {
+      return "Rate limit exceeded. Run 'skilluse login' for higher rate limits (5000 req/hr vs 60 req/hr).";
+    }
+    return "This repository requires authentication. Run 'skilluse login' to access private repos.";
+  }
+  if (response.status === 404) {
+    return "Repository not found or requires authentication.";
+  }
+  return `GitHub API error: ${response.status}`;
+}
+
 // src/services/discovery.ts
 var GITHUB_API_URL2 = "https://api.github.com";
 async function discoverSkillPaths(owner, repo, branch, token) {
   const url2 = `${GITHUB_API_URL2}/repos/${owner}/${repo}/git/trees/${branch}?recursive=1`;
   const response = await fetch(url2, {
-    headers: {
-      Accept: "application/vnd.github+json",
-      Authorization: `Bearer ${token}`,
-      "X-GitHub-Api-Version": "2022-11-28"
-    }
+    headers: buildGitHubHeaders(token)
   });
   if (!response.ok) {
+    if (isAuthRequired(response)) {
+      return {
+        authRequired: true,
+        message: getGitHubErrorMessage(response)
+      };
+    }
     if (response.status === 404) {
       throw new Error(`Repository ${owner}/${repo} not found or branch '${branch}' doesn't exist`);
     }
@@ -66677,24 +66741,23 @@ async function getRemoteSkillInfo(token, skillName, repos) {
       try {
         const apiPath = basePath ? `https://api.github.com/repos/${repo}/contents/${basePath}?ref=${branch}` : `https://api.github.com/repos/${repo}/contents?ref=${branch}`;
         const response = await fetch(apiPath, {
-          headers: {
-            Authorization: `Bearer ${token}`,
-            Accept: "application/vnd.github+json",
-            "X-GitHub-Api-Version": "2022-11-28"
-          }
+          headers: buildGitHubHeaders(token)
         });
-        if (!response.ok)
+        if (!response.ok) {
+          if (isAuthRequired(response)) {
+            return {
+              authRequired: true,
+              message: getGitHubErrorMessage(response)
+            };
+          }
           continue;
+        }
         const contents = await response.json();
         const dirs = contents.filter((item) => item.type === "dir" && item.name.toLowerCase() === skillName.toLowerCase());
         for (const dir of dirs) {
           const skillMdUrl = `https://api.github.com/repos/${repo}/contents/${dir.path}/SKILL.md?ref=${branch}`;
           const skillResponse = await fetch(skillMdUrl, {
-            headers: {
-              Authorization: `Bearer ${token}`,
-              Accept: "application/vnd.github.raw+json",
-              "X-GitHub-Api-Version": "2022-11-28"
-            }
+            headers: buildGitHubRawHeaders(token)
           });
           if (skillResponse.ok) {
             const content = await skillResponse.text();
@@ -66722,12 +66785,6 @@ function Info({ args: [skillName] }) {
   const [state, setState] = import_react31.useState({ phase: "checking" });
   import_react31.useEffect(() => {
     async function loadInfo() {
-      const credentials = await getCredentials();
-      if (!credentials) {
-        setState({ phase: "not_logged_in" });
-        exit();
-        return;
-      }
       setState({ phase: "loading" });
       const config2 = getConfig();
       const installedSkill = config2.installed.find((s) => s.name.toLowerCase() === skillName.toLowerCase());
@@ -66739,9 +66796,16 @@ function Info({ args: [skillName] }) {
           return;
         }
       }
-      const remoteInfo = await getRemoteSkillInfo(credentials.token, skillName, config2.repos);
-      if (remoteInfo) {
-        setState({ phase: "success", info: remoteInfo });
+      const credentials = await getCredentials();
+      const token = credentials?.token;
+      const remoteResult = await getRemoteSkillInfo(token, skillName, config2.repos);
+      if (remoteResult && "authRequired" in remoteResult) {
+        setState({ phase: "auth_required", message: remoteResult.message });
+        exit();
+        return;
+      }
+      if (remoteResult) {
+        setState({ phase: "success", info: remoteResult });
       } else {
         setState({ phase: "not_found", skillName });
       }
@@ -66760,20 +66824,14 @@ function Info({ args: [skillName] }) {
       return /* @__PURE__ */ jsx_dev_runtime8.jsxDEV(Spinner2, {
         text: "Initializing..."
       }, undefined, false, undefined, this);
-    case "not_logged_in":
+    case "auth_required":
       return /* @__PURE__ */ jsx_dev_runtime8.jsxDEV(Box_default, {
         flexDirection: "column",
-        children: [
-          /* @__PURE__ */ jsx_dev_runtime8.jsxDEV(StatusMessage, {
-            type: "error",
-            children: "Not authenticated"
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime8.jsxDEV(Text, {
-            dimColor: true,
-            children: "Run 'skilluse login' to authenticate with GitHub"
-          }, undefined, false, undefined, this)
-        ]
-      }, undefined, true, undefined, this);
+        children: /* @__PURE__ */ jsx_dev_runtime8.jsxDEV(StatusMessage, {
+          type: "error",
+          children: state.message
+        }, undefined, false, undefined, this)
+      }, undefined, false, undefined, this);
     case "loading":
       return /* @__PURE__ */ jsx_dev_runtime8.jsxDEV(Spinner2, {
         text: `Loading info for "${skillName}"...`
@@ -67004,35 +67062,30 @@ async function findSkill(token, repos, skillName) {
       try {
         const apiPath = basePath ? `https://api.github.com/repos/${repo}/contents/${basePath}?ref=${branch}` : `https://api.github.com/repos/${repo}/contents?ref=${branch}`;
         const response = await fetch(apiPath, {
-          headers: {
-            Authorization: `Bearer ${token}`,
-            Accept: "application/vnd.github+json",
-            "X-GitHub-Api-Version": "2022-11-28"
-          }
+          headers: buildGitHubHeaders(token)
         });
-        if (!response.ok)
+        if (!response.ok) {
+          if (isAuthRequired(response)) {
+            return {
+              authRequired: true,
+              message: getGitHubErrorMessage(response)
+            };
+          }
           continue;
+        }
         const contents = await response.json();
         const dirs = contents.filter((item) => item.type === "dir" && item.name.toLowerCase() === skillName.toLowerCase());
         for (const dir of dirs) {
           const skillMdUrl = `https://api.github.com/repos/${repo}/contents/${dir.path}/SKILL.md?ref=${branch}`;
           const skillResponse = await fetch(skillMdUrl, {
-            headers: {
-              Authorization: `Bearer ${token}`,
-              Accept: "application/vnd.github.raw+json",
-              "X-GitHub-Api-Version": "2022-11-28"
-            }
+            headers: buildGitHubRawHeaders(token)
           });
           if (skillResponse.ok) {
             const content = await skillResponse.text();
             const frontmatter = parseFrontmatter2(content);
             const refUrl = `https://api.github.com/repos/${repo}/commits/${branch}`;
             const refResponse = await fetch(refUrl, {
-              headers: {
-                Authorization: `Bearer ${token}`,
-                Accept: "application/vnd.github+json",
-                "X-GitHub-Api-Version": "2022-11-28"
-              }
+              headers: buildGitHubHeaders(token)
             });
             let commitSha = branch;
             if (refResponse.ok) {
@@ -67056,18 +67109,20 @@ async function findSkill(token, repos, skillName) {
       } catch {}
     }
   }
-  return results;
+  return { results };
 }
 async function downloadSkillFiles(token, repo, skillPath, branch, targetDir, onProgress) {
   const treeUrl = `https://api.github.com/repos/${repo}/git/trees/${branch}?recursive=1`;
   const treeResponse = await fetch(treeUrl, {
-    headers: {
-      Authorization: `Bearer ${token}`,
-      Accept: "application/vnd.github+json",
-      "X-GitHub-Api-Version": "2022-11-28"
-    }
+    headers: buildGitHubHeaders(token)
   });
   if (!treeResponse.ok) {
+    if (isAuthRequired(treeResponse)) {
+      return {
+        authRequired: true,
+        message: getGitHubErrorMessage(treeResponse)
+      };
+    }
     throw new Error(`Failed to fetch repository tree: ${treeResponse.status}`);
   }
   const treeData = await treeResponse.json();
@@ -67086,13 +67141,15 @@ async function downloadSkillFiles(token, repo, skillPath, branch, targetDir, onP
     }
     const fileUrl = `https://api.github.com/repos/${repo}/contents/${file2.path}?ref=${branch}`;
     const fileResponse = await fetch(fileUrl, {
-      headers: {
-        Authorization: `Bearer ${token}`,
-        Accept: "application/vnd.github.raw+json",
-        "X-GitHub-Api-Version": "2022-11-28"
-      }
+      headers: buildGitHubRawHeaders(token)
     });
     if (!fileResponse.ok) {
+      if (isAuthRequired(fileResponse)) {
+        return {
+          authRequired: true,
+          message: getGitHubErrorMessage(fileResponse)
+        };
+      }
       throw new Error(`Failed to download file: ${file2.path}`);
     }
     const content = await fileResponse.text();
@@ -67109,13 +67166,15 @@ async function fetchGitHubSkill(token, owner, repo, path6, branch = "main") {
   try {
     const refUrl = `https://api.github.com/repos/${fullRepo}/commits/${branch}`;
     const refResponse = await fetch(refUrl, {
-      headers: {
-        Authorization: `Bearer ${token}`,
-        Accept: "application/vnd.github+json",
-        "X-GitHub-Api-Version": "2022-11-28"
-      }
+      headers: buildGitHubHeaders(token)
     });
     if (!refResponse.ok) {
+      if (isAuthRequired(refResponse)) {
+        return {
+          authRequired: true,
+          message: getGitHubErrorMessage(refResponse)
+        };
+      }
       return null;
     }
     const refData = await refResponse.json();
@@ -67123,13 +67182,15 @@ async function fetchGitHubSkill(token, owner, repo, path6, branch = "main") {
     const skillMdPath = skillPath ? `${skillPath}/SKILL.md` : "SKILL.md";
     const skillMdUrl = `https://api.github.com/repos/${fullRepo}/contents/${skillMdPath}?ref=${branch}`;
     const skillResponse = await fetch(skillMdUrl, {
-      headers: {
-        Authorization: `Bearer ${token}`,
-        Accept: "application/vnd.github.raw+json",
-        "X-GitHub-Api-Version": "2022-11-28"
-      }
+      headers: buildGitHubRawHeaders(token)
     });
     if (!skillResponse.ok) {
+      if (isAuthRequired(skillResponse)) {
+        return {
+          authRequired: true,
+          message: getGitHubErrorMessage(skillResponse)
+        };
+      }
       return null;
     }
     const content = await skillResponse.text();
@@ -67253,14 +67314,15 @@ function Install({ args: [skillName], options: opts }) {
         }
       }
       const credentials = await getCredentials();
-      if (!credentials) {
-        setState({ phase: "not_logged_in" });
-        exit();
-        return;
-      }
+      const token = credentials?.token;
       if (source.type === "github") {
         setState({ phase: "searching", repo: `${source.owner}/${source.repo}` });
-        const result = await fetchGitHubSkill(credentials.token, source.owner, source.repo, source.path);
+        const result = await fetchGitHubSkill(token, source.owner, source.repo, source.path);
+        if (result && "authRequired" in result) {
+          setState({ phase: "auth_required", message: result.message });
+          exit();
+          return;
+        }
         if (!result) {
           setState({
             phase: "not_found",
@@ -67290,7 +67352,7 @@ function Install({ args: [skillName], options: opts }) {
         });
         try {
           const skillPath = source.path || "";
-          await downloadSkillFiles(credentials.token, `${source.owner}/${source.repo}`, skillPath, "main", installPath2, (downloaded, total) => {
+          const downloadResult = await downloadSkillFiles(token, `${source.owner}/${source.repo}`, skillPath, "main", installPath2, (downloaded, total) => {
             const downloadProgress = 25 + downloaded / total * 50;
             setState((prev) => {
               if (prev.phase !== "installing")
@@ -67298,6 +67360,11 @@ function Install({ args: [skillName], options: opts }) {
               return { ...prev, progress: Math.round(downloadProgress) };
             });
           });
+          if (downloadResult && "authRequired" in downloadResult) {
+            setState({ phase: "auth_required", message: downloadResult.message });
+            exit();
+            return;
+          }
           steps2[1].status = "done";
           steps2[2].status = "in_progress";
           setState((prev) => {
@@ -67342,7 +67409,13 @@ function Install({ args: [skillName], options: opts }) {
       for (const repo of allRepos) {
         setState({ phase: "searching", repo: repo.repo });
       }
-      const results = await findSkill(credentials.token, allRepos, source.name);
+      const findResult = await findSkill(token, allRepos, source.name);
+      if ("authRequired" in findResult) {
+        setState({ phase: "auth_required", message: findResult.message });
+        exit();
+        return;
+      }
+      const { results } = findResult;
       if (results.length === 0) {
         setState({ phase: "not_found", skillName: source.name });
         exit();
@@ -67382,7 +67455,7 @@ function Install({ args: [skillName], options: opts }) {
       try {
         const repoConfig = config2.repos.find((r) => r.repo === skill.repo);
         const branch = repoConfig?.branch || "main";
-        await downloadSkillFiles(credentials.token, skill.repo, skill.path, branch, installPath, (downloaded, total) => {
+        const downloadResult = await downloadSkillFiles(token, skill.repo, skill.path, branch, installPath, (downloaded, total) => {
           const downloadProgress = 25 + downloaded / total * 50;
           setState((prev) => {
             if (prev.phase !== "installing")
@@ -67390,6 +67463,11 @@ function Install({ args: [skillName], options: opts }) {
             return { ...prev, progress: Math.round(downloadProgress) };
           });
         });
+        if (downloadResult && "authRequired" in downloadResult) {
+          setState({ phase: "auth_required", message: downloadResult.message });
+          exit();
+          return;
+        }
         steps[1].status = "done";
         steps[2].status = "in_progress";
         setState((prev) => {
@@ -67449,20 +67527,14 @@ function Install({ args: [skillName], options: opts }) {
       return /* @__PURE__ */ jsx_dev_runtime9.jsxDEV(Spinner2, {
         text: "Initializing..."
       }, undefined, false, undefined, this);
-    case "not_logged_in":
+    case "auth_required":
       return /* @__PURE__ */ jsx_dev_runtime9.jsxDEV(Box_default, {
         flexDirection: "column",
-        children: [
-          /* @__PURE__ */ jsx_dev_runtime9.jsxDEV(StatusMessage, {
-            type: "error",
-            children: "Not authenticated"
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime9.jsxDEV(Text, {
-            dimColor: true,
-            children: "Run 'skilluse login' to authenticate with GitHub"
-          }, undefined, false, undefined, this)
-        ]
-      }, undefined, true, undefined, this);
+        children: /* @__PURE__ */ jsx_dev_runtime9.jsxDEV(StatusMessage, {
+          type: "error",
+          children: state.message
+        }, undefined, false, undefined, this)
+      }, undefined, false, undefined, this);
     case "no_repos":
       return /* @__PURE__ */ jsx_dev_runtime9.jsxDEV(Box_default, {
         flexDirection: "column",
@@ -67669,13 +67741,15 @@ async function checkForUpdate(token, skill, repoConfig) {
   try {
     const refUrl = `https://api.github.com/repos/${repo}/commits/${branch}`;
     const refResponse = await fetch(refUrl, {
-      headers: {
-        Authorization: `Bearer ${token}`,
-        Accept: "application/vnd.github+json",
-        "X-GitHub-Api-Version": "2022-11-28"
-      }
+      headers: buildGitHubHeaders(token)
     });
     if (!refResponse.ok) {
+      if (isAuthRequired(refResponse)) {
+        return {
+          authRequired: true,
+          message: getGitHubErrorMessage(refResponse)
+        };
+      }
       return { ...skill, hasUpdate: false };
     }
     const refData = await refResponse.json();
@@ -67685,11 +67759,7 @@ async function checkForUpdate(token, skill, repoConfig) {
     }
     const skillMdUrl = `https://api.github.com/repos/${repo}/contents/${skill.repoPath}/SKILL.md?ref=${branch}`;
     const skillResponse = await fetch(skillMdUrl, {
-      headers: {
-        Authorization: `Bearer ${token}`,
-        Accept: "application/vnd.github.raw+json",
-        "X-GitHub-Api-Version": "2022-11-28"
-      }
+      headers: buildGitHubRawHeaders(token)
     });
     let latestVersion = skill.version;
     if (skillResponse.ok) {
@@ -67712,14 +67782,9 @@ async function checkForUpdate(token, skill, repoConfig) {
 function List({ options: opts }) {
   const { exit } = use_app_default();
   const [state, setState] = import_react33.useState({ phase: "checking" });
+  const [outputItems, setOutputItems] = import_react33.useState([]);
   import_react33.useEffect(() => {
     async function loadSkills() {
-      const credentials = await getCredentials();
-      if (!credentials) {
-        setState({ phase: "not_logged_in" });
-        exit();
-        return;
-      }
       const config2 = getConfig();
       const currentAgent = getCurrentAgent();
       const skills = opts.all ? config2.installed : config2.installed.filter((s) => s.agent === currentAgent || !s.agent);
@@ -67731,9 +67796,10 @@ function List({ options: opts }) {
           currentAgent,
           showingAll: opts.all
         });
-        exit();
         return;
       }
+      const credentials = await getCredentials();
+      const token = credentials?.token;
       const skillsWithUpdates = [];
       for (let i = 0;i < skills.length; i++) {
         setState({
@@ -67744,9 +67810,16 @@ function List({ options: opts }) {
         const skill = skills[i];
         const repoConfig = config2.repos.find((r) => r.repo === skill.repo);
         if (repoConfig) {
-          const skillWithUpdate = await checkForUpdate(credentials.token, skill, repoConfig);
-          if (skillWithUpdate.hasUpdate) {
-            skillsWithUpdates.push(skillWithUpdate);
+          const result = await checkForUpdate(token, skill, repoConfig);
+          if ("authRequired" in result) {
+            setState({
+              phase: "auth_required",
+              message: result.message
+            });
+            return;
+          }
+          if (result.hasUpdate) {
+            skillsWithUpdates.push(result);
           }
         }
       }
@@ -67757,48 +67830,44 @@ function List({ options: opts }) {
         currentAgent,
         showingAll: opts.all
       });
-      exit();
     }
     loadSkills();
-  }, [opts.outdated, opts.all, exit]);
-  switch (state.phase) {
-    case "checking":
-      return /* @__PURE__ */ jsx_dev_runtime10.jsxDEV(Spinner2, {
-        text: "Loading..."
+  }, [opts.outdated, opts.all]);
+  import_react33.useEffect(() => {
+    const isFinalState = state.phase === "success" || state.phase === "error" || state.phase === "auth_required";
+    if (isFinalState && outputItems.length === 0) {
+      setOutputItems([{ id: "output" }]);
+    }
+  }, [state.phase, outputItems.length]);
+  import_react33.useEffect(() => {
+    if (outputItems.length > 0) {
+      process.nextTick(() => exit());
+    }
+  }, [outputItems.length, exit]);
+  const renderContent = () => {
+    if (state.phase === "auth_required") {
+      return /* @__PURE__ */ jsx_dev_runtime10.jsxDEV(StatusMessage, {
+        type: "error",
+        children: state.message
       }, undefined, false, undefined, this);
-    case "not_logged_in":
-      return /* @__PURE__ */ jsx_dev_runtime10.jsxDEV(Box_default, {
-        flexDirection: "column",
-        children: [
-          /* @__PURE__ */ jsx_dev_runtime10.jsxDEV(StatusMessage, {
-            type: "error",
-            children: "Not authenticated"
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime10.jsxDEV(Text, {
-            dimColor: true,
-            children: "Run 'skilluse login' to authenticate with GitHub"
-          }, undefined, false, undefined, this)
-        ]
-      }, undefined, true, undefined, this);
-    case "checking_updates":
-      return /* @__PURE__ */ jsx_dev_runtime10.jsxDEV(Spinner2, {
-        text: `Checking for updates (${state.current}/${state.total})...`
+    }
+    if (state.phase === "error") {
+      return /* @__PURE__ */ jsx_dev_runtime10.jsxDEV(StatusMessage, {
+        type: "error",
+        children: state.message
       }, undefined, false, undefined, this);
-    case "success": {
+    }
+    if (state.phase === "success") {
       const agentInfo = getAgent(state.currentAgent);
       const agentName = agentInfo?.name || state.currentAgent;
       if (state.skills.length === 0) {
         if (state.showingOutdated) {
-          return /* @__PURE__ */ jsx_dev_runtime10.jsxDEV(Box_default, {
-            flexDirection: "column",
-            children: /* @__PURE__ */ jsx_dev_runtime10.jsxDEV(StatusMessage, {
-              type: "success",
-              children: "All skills are up to date"
-            }, undefined, false, undefined, this)
+          return /* @__PURE__ */ jsx_dev_runtime10.jsxDEV(StatusMessage, {
+            type: "success",
+            children: "All skills are up to date"
           }, undefined, false, undefined, this);
         }
-        return /* @__PURE__ */ jsx_dev_runtime10.jsxDEV(Box_default, {
-          flexDirection: "column",
+        return /* @__PURE__ */ jsx_dev_runtime10.jsxDEV(jsx_dev_runtime10.Fragment, {
           children: [
             /* @__PURE__ */ jsx_dev_runtime10.jsxDEV(Box_default, {
               children: [
@@ -67840,8 +67909,7 @@ function List({ options: opts }) {
         }, undefined, true, undefined, this);
       }
       if (state.showingOutdated) {
-        return /* @__PURE__ */ jsx_dev_runtime10.jsxDEV(Box_default, {
-          flexDirection: "column",
+        return /* @__PURE__ */ jsx_dev_runtime10.jsxDEV(jsx_dev_runtime10.Fragment, {
           children: [
             /* @__PURE__ */ jsx_dev_runtime10.jsxDEV(Box_default, {
               children: [
@@ -67921,8 +67989,7 @@ function List({ options: opts }) {
           ]
         }, undefined, true, undefined, this);
       }
-      return /* @__PURE__ */ jsx_dev_runtime10.jsxDEV(Box_default, {
-        flexDirection: "column",
+      return /* @__PURE__ */ jsx_dev_runtime10.jsxDEV(jsx_dev_runtime10.Fragment, {
         children: [
           /* @__PURE__ */ jsx_dev_runtime10.jsxDEV(Box_default, {
             children: [
@@ -68003,12 +68070,22 @@ function List({ options: opts }) {
         ]
       }, undefined, true, undefined, this);
     }
-    case "error":
-      return /* @__PURE__ */ jsx_dev_runtime10.jsxDEV(StatusMessage, {
-        type: "error",
-        children: state.message
-      }, undefined, false, undefined, this);
-  }
+    return null;
+  };
+  return /* @__PURE__ */ jsx_dev_runtime10.jsxDEV(jsx_dev_runtime10.Fragment, {
+    children: [
+      (state.phase === "checking" || state.phase === "checking_updates") && /* @__PURE__ */ jsx_dev_runtime10.jsxDEV(Spinner2, {
+        text: state.phase === "checking_updates" ? `Checking for updates (${state.current}/${state.total})...` : "Loading..."
+      }, undefined, false, undefined, this),
+      /* @__PURE__ */ jsx_dev_runtime10.jsxDEV(Static, {
+        items: outputItems,
+        children: (item) => /* @__PURE__ */ jsx_dev_runtime10.jsxDEV(Box_default, {
+          flexDirection: "column",
+          children: renderContent()
+        }, item.id, false, undefined, this)
+      }, undefined, false, undefined, this)
+    ]
+  }, undefined, true, undefined, this);
 }
 
 // src/commands/login.tsx
@@ -68331,12 +68408,6 @@ function RepoAdd({ args: [repoArg], options: opts }) {
   const [state, setState] = import_react36.useState({ phase: "checking" });
   import_react36.useEffect(() => {
     async function checkAndAdd() {
-      const credentials = await getCredentials();
-      if (!credentials) {
-        setState({ phase: "not_logged_in" });
-        exit();
-        return;
-      }
       if (!repoArg.match(/^[a-zA-Z0-9_.-]+\/[a-zA-Z0-9_.-]+$/)) {
         setState({ phase: "invalid_repo" });
         exit();
@@ -68371,15 +68442,22 @@ function RepoAdd({ args: [repoArg], options: opts }) {
       }
       setState({ phase: "discovering", repo: repoArg });
       try {
+        const credentials = await getCredentials();
+        const token = credentials?.token;
         const [owner, repo] = repoArg.split("/");
-        const discovery = await discoverSkillPaths(owner, repo, opts.branch, credentials.token);
-        if (discovery.totalSkills === 0) {
+        const result = await discoverSkillPaths(owner, repo, opts.branch, token);
+        if ("authRequired" in result) {
+          setState({ phase: "auth_required", message: result.message });
+          exit();
+          return;
+        }
+        if (result.totalSkills === 0) {
           setState({ phase: "no_skills_found", repo: repoArg });
         } else {
           setState({
             phase: "select_paths",
             repo: repoArg,
-            discovery
+            discovery: result
           });
         }
       } catch (error46) {
@@ -68485,20 +68563,14 @@ function RepoAdd({ args: [repoArg], options: opts }) {
       return /* @__PURE__ */ jsx_dev_runtime13.jsxDEV(Spinner2, {
         text: "Checking..."
       }, undefined, false, undefined, this);
-    case "not_logged_in":
+    case "auth_required":
       return /* @__PURE__ */ jsx_dev_runtime13.jsxDEV(Box_default, {
         flexDirection: "column",
-        children: [
-          /* @__PURE__ */ jsx_dev_runtime13.jsxDEV(StatusMessage, {
-            type: "error",
-            children: "Not authenticated"
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime13.jsxDEV(Text, {
-            dimColor: true,
-            children: "Run 'skilluse login' to authenticate with GitHub"
-          }, undefined, false, undefined, this)
-        ]
-      }, undefined, true, undefined, this);
+        children: /* @__PURE__ */ jsx_dev_runtime13.jsxDEV(StatusMessage, {
+          type: "error",
+          children: state.message
+        }, undefined, false, undefined, this)
+      }, undefined, false, undefined, this);
     case "invalid_repo":
       return /* @__PURE__ */ jsx_dev_runtime13.jsxDEV(Box_default, {
         flexDirection: "column",
@@ -68705,13 +68777,7 @@ function RepoEdit({ args: [repoArg], options: opts }) {
   const { exit } = use_app_default();
   const [state, setState] = import_react37.useState({ phase: "checking" });
   import_react37.useEffect(() => {
-    async function checkAndEdit() {
-      const credentials = await getCredentials();
-      if (!credentials) {
-        setState({ phase: "not_logged_in" });
-        exit();
-        return;
-      }
+    function checkAndEdit() {
       const config2 = getConfig();
       const existingConfig = config2.repos.find((r) => r.repo === repoArg);
       if (!existingConfig) {
@@ -68784,20 +68850,6 @@ function RepoEdit({ args: [repoArg], options: opts }) {
       return /* @__PURE__ */ jsx_dev_runtime14.jsxDEV(Spinner2, {
         text: "Checking..."
       }, undefined, false, undefined, this);
-    case "not_logged_in":
-      return /* @__PURE__ */ jsx_dev_runtime14.jsxDEV(Box_default, {
-        flexDirection: "column",
-        children: [
-          /* @__PURE__ */ jsx_dev_runtime14.jsxDEV(StatusMessage, {
-            type: "error",
-            children: "Not authenticated"
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime14.jsxDEV(Text, {
-            dimColor: true,
-            children: "Run 'skilluse login' to authenticate with GitHub"
-          }, undefined, false, undefined, this)
-        ]
-      }, undefined, true, undefined, this);
     case "not_found":
       return /* @__PURE__ */ jsx_dev_runtime14.jsxDEV(Box_default, {
         flexDirection: "column",
@@ -69071,71 +69123,58 @@ var options9 = exports_external.object({});
 function RepoList(_props) {
   const { exit } = use_app_default();
   const [state, setState] = import_react39.useState({ phase: "checking" });
+  const [outputItems, setOutputItems] = import_react39.useState([]);
   import_react39.useEffect(() => {
-    async function loadRepos() {
-      const credentials = await getCredentials();
-      if (!credentials) {
-        setState({ phase: "not_logged_in" });
-        exit();
-        return;
-      }
-      const config2 = getConfig();
-      setState({
-        phase: "success",
-        defaultRepo: config2.defaultRepo,
-        repos: config2.repos
-      });
-      exit();
+    const config2 = getConfig();
+    setState({
+      phase: "success",
+      defaultRepo: config2.defaultRepo,
+      repos: config2.repos
+    });
+  }, []);
+  import_react39.useEffect(() => {
+    if (state.phase !== "checking" && outputItems.length === 0) {
+      setOutputItems([{ id: "output" }]);
     }
-    loadRepos();
-  }, [exit]);
-  switch (state.phase) {
-    case "checking":
-      return /* @__PURE__ */ jsx_dev_runtime16.jsxDEV(Spinner2, {
-        text: "Loading..."
+  }, [state.phase, outputItems.length]);
+  import_react39.useEffect(() => {
+    if (outputItems.length > 0) {
+      process.nextTick(() => exit());
+    }
+  }, [outputItems.length, exit]);
+  const renderContent = () => {
+    if (state.phase === "error") {
+      return /* @__PURE__ */ jsx_dev_runtime16.jsxDEV(StatusMessage, {
+        type: "error",
+        children: state.message
       }, undefined, false, undefined, this);
-    case "not_logged_in":
-      return /* @__PURE__ */ jsx_dev_runtime16.jsxDEV(Box_default, {
-        flexDirection: "column",
+    }
+    if (state.phase === "success" && state.repos.length === 0) {
+      return /* @__PURE__ */ jsx_dev_runtime16.jsxDEV(jsx_dev_runtime16.Fragment, {
         children: [
-          /* @__PURE__ */ jsx_dev_runtime16.jsxDEV(StatusMessage, {
-            type: "error",
-            children: "Not authenticated"
-          }, undefined, false, undefined, this),
           /* @__PURE__ */ jsx_dev_runtime16.jsxDEV(Text, {
-            dimColor: true,
-            children: "Run 'skilluse login' to authenticate with GitHub"
+            bold: true,
+            children: "Configured Repositories"
+          }, undefined, false, undefined, this),
+          /* @__PURE__ */ jsx_dev_runtime16.jsxDEV(Box_default, {
+            marginTop: 1,
+            children: /* @__PURE__ */ jsx_dev_runtime16.jsxDEV(Text, {
+              dimColor: true,
+              children: "(no repositories configured)"
+            }, undefined, false, undefined, this)
+          }, undefined, false, undefined, this),
+          /* @__PURE__ */ jsx_dev_runtime16.jsxDEV(Box_default, {
+            marginTop: 1,
+            children: /* @__PURE__ */ jsx_dev_runtime16.jsxDEV(Text, {
+              dimColor: true,
+              children: "Run 'skilluse repo add owner/repo' to add one."
+            }, undefined, false, undefined, this)
           }, undefined, false, undefined, this)
         ]
       }, undefined, true, undefined, this);
-    case "success":
-      if (state.repos.length === 0) {
-        return /* @__PURE__ */ jsx_dev_runtime16.jsxDEV(Box_default, {
-          flexDirection: "column",
-          children: [
-            /* @__PURE__ */ jsx_dev_runtime16.jsxDEV(Text, {
-              bold: true,
-              children: "Configured Repositories"
-            }, undefined, false, undefined, this),
-            /* @__PURE__ */ jsx_dev_runtime16.jsxDEV(Box_default, {
-              marginTop: 1,
-              children: /* @__PURE__ */ jsx_dev_runtime16.jsxDEV(Text, {
-                dimColor: true,
-                children: "(no repositories configured)"
-              }, undefined, false, undefined, this)
-            }, undefined, false, undefined, this),
-            /* @__PURE__ */ jsx_dev_runtime16.jsxDEV(Box_default, {
-              marginTop: 1,
-              children: /* @__PURE__ */ jsx_dev_runtime16.jsxDEV(Text, {
-                dimColor: true,
-                children: "Run 'skilluse repo add owner/repo' to add one."
-              }, undefined, false, undefined, this)
-            }, undefined, false, undefined, this)
-          ]
-        }, undefined, true, undefined, this);
-      }
-      return /* @__PURE__ */ jsx_dev_runtime16.jsxDEV(Box_default, {
-        flexDirection: "column",
+    }
+    if (state.phase === "success") {
+      return /* @__PURE__ */ jsx_dev_runtime16.jsxDEV(jsx_dev_runtime16.Fragment, {
         children: [
           /* @__PURE__ */ jsx_dev_runtime16.jsxDEV(Text, {
             bold: true,
@@ -69185,12 +69224,23 @@ function RepoList(_props) {
           })
         ]
       }, undefined, true, undefined, this);
-    case "error":
-      return /* @__PURE__ */ jsx_dev_runtime16.jsxDEV(StatusMessage, {
-        type: "error",
-        children: state.message
-      }, undefined, false, undefined, this);
-  }
+    }
+    return null;
+  };
+  return /* @__PURE__ */ jsx_dev_runtime16.jsxDEV(jsx_dev_runtime16.Fragment, {
+    children: [
+      state.phase === "checking" && /* @__PURE__ */ jsx_dev_runtime16.jsxDEV(Spinner2, {
+        text: "Loading..."
+      }, undefined, false, undefined, this),
+      /* @__PURE__ */ jsx_dev_runtime16.jsxDEV(Static, {
+        items: outputItems,
+        children: (item) => /* @__PURE__ */ jsx_dev_runtime16.jsxDEV(Box_default, {
+          flexDirection: "column",
+          children: renderContent()
+        }, item.id, false, undefined, this)
+      }, undefined, false, undefined, this)
+    ]
+  }, undefined, true, undefined, this);
 }
 
 // src/commands/repo/remove.tsx
@@ -69206,13 +69256,7 @@ function RepoRemove({ args: [repoArg], options: opts }) {
   const { exit } = use_app_default();
   const [state, setState] = import_react40.useState({ phase: "checking" });
   import_react40.useEffect(() => {
-    async function checkAndRemove() {
-      const credentials = await getCredentials();
-      if (!credentials) {
-        setState({ phase: "not_logged_in" });
-        exit();
-        return;
-      }
+    function checkAndRemove() {
       const config2 = getConfig();
       if (!config2.repos.find((r) => r.repo === repoArg)) {
         setState({ phase: "not_found", repo: repoArg });
@@ -69249,20 +69293,6 @@ function RepoRemove({ args: [repoArg], options: opts }) {
       return /* @__PURE__ */ jsx_dev_runtime17.jsxDEV(Spinner2, {
         text: "Checking..."
       }, undefined, false, undefined, this);
-    case "not_logged_in":
-      return /* @__PURE__ */ jsx_dev_runtime17.jsxDEV(Box_default, {
-        flexDirection: "column",
-        children: [
-          /* @__PURE__ */ jsx_dev_runtime17.jsxDEV(StatusMessage, {
-            type: "error",
-            children: "Not authenticated"
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime17.jsxDEV(Text, {
-            dimColor: true,
-            children: "Run 'skilluse login' to authenticate with GitHub"
-          }, undefined, false, undefined, this)
-        ]
-      }, undefined, true, undefined, this);
     case "not_found":
       return /* @__PURE__ */ jsx_dev_runtime17.jsxDEV(Box_default, {
         flexDirection: "column",
@@ -69335,94 +69365,92 @@ var options11 = exports_external.object({});
 function RepoUse({ args: [repoArg], options: _opts }) {
   const { exit } = use_app_default();
   const [state, setState] = import_react41.useState({ phase: "checking" });
+  const [outputItems, setOutputItems] = import_react41.useState([]);
   import_react41.useEffect(() => {
-    async function setDefault() {
-      const credentials = await getCredentials();
-      if (!credentials) {
-        setState({ phase: "not_logged_in" });
-        exit();
-        return;
-      }
-      const config2 = getConfig();
-      if (!config2.repos.find((r) => r.repo === repoArg)) {
-        setState({ phase: "not_found", repo: repoArg });
-        exit();
-        return;
-      }
-      if (config2.defaultRepo === repoArg) {
-        setState({ phase: "already_default", repo: repoArg });
-        exit();
-        return;
-      }
-      setDefaultRepo(repoArg);
-      setState({ phase: "success", repo: repoArg });
-      exit();
+    const config2 = getConfig();
+    if (!config2.repos.find((r) => r.repo === repoArg)) {
+      setState({ phase: "not_found", repo: repoArg });
+      return;
     }
-    setDefault();
-  }, [repoArg, exit]);
-  switch (state.phase) {
-    case "checking":
-      return /* @__PURE__ */ jsx_dev_runtime18.jsxDEV(Spinner2, {
+    if (config2.defaultRepo === repoArg) {
+      setState({ phase: "already_default", repo: repoArg });
+      return;
+    }
+    setDefaultRepo(repoArg);
+    setState({ phase: "success", repo: repoArg });
+  }, [repoArg]);
+  import_react41.useEffect(() => {
+    if (state.phase !== "checking" && outputItems.length === 0) {
+      setOutputItems([{ id: "output" }]);
+    }
+  }, [state.phase, outputItems.length]);
+  import_react41.useEffect(() => {
+    if (outputItems.length > 0) {
+      process.nextTick(() => exit());
+    }
+  }, [outputItems.length, exit]);
+  const renderContent = () => {
+    switch (state.phase) {
+      case "not_found":
+        return /* @__PURE__ */ jsx_dev_runtime18.jsxDEV(jsx_dev_runtime18.Fragment, {
+          children: [
+            /* @__PURE__ */ jsx_dev_runtime18.jsxDEV(StatusMessage, {
+              type: "error",
+              children: [
+                "Repository ",
+                state.repo,
+                " not found in config"
+              ]
+            }, undefined, true, undefined, this),
+            /* @__PURE__ */ jsx_dev_runtime18.jsxDEV(Text, {
+              dimColor: true,
+              children: [
+                "Run 'skilluse repo add ",
+                state.repo,
+                "' to add it first."
+              ]
+            }, undefined, true, undefined, this)
+          ]
+        }, undefined, true, undefined, this);
+      case "already_default":
+        return /* @__PURE__ */ jsx_dev_runtime18.jsxDEV(StatusMessage, {
+          type: "success",
+          children: [
+            state.repo,
+            " is already the default"
+          ]
+        }, undefined, true, undefined, this);
+      case "success":
+        return /* @__PURE__ */ jsx_dev_runtime18.jsxDEV(StatusMessage, {
+          type: "success",
+          children: [
+            "Default repo set to ",
+            state.repo
+          ]
+        }, undefined, true, undefined, this);
+      case "error":
+        return /* @__PURE__ */ jsx_dev_runtime18.jsxDEV(StatusMessage, {
+          type: "error",
+          children: state.message
+        }, undefined, false, undefined, this);
+      default:
+        return null;
+    }
+  };
+  return /* @__PURE__ */ jsx_dev_runtime18.jsxDEV(jsx_dev_runtime18.Fragment, {
+    children: [
+      state.phase === "checking" && /* @__PURE__ */ jsx_dev_runtime18.jsxDEV(Spinner2, {
         text: "Setting default..."
-      }, undefined, false, undefined, this);
-    case "not_logged_in":
-      return /* @__PURE__ */ jsx_dev_runtime18.jsxDEV(Box_default, {
-        flexDirection: "column",
-        children: [
-          /* @__PURE__ */ jsx_dev_runtime18.jsxDEV(StatusMessage, {
-            type: "error",
-            children: "Not authenticated"
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime18.jsxDEV(Text, {
-            dimColor: true,
-            children: "Run 'skilluse login' to authenticate with GitHub"
-          }, undefined, false, undefined, this)
-        ]
-      }, undefined, true, undefined, this);
-    case "not_found":
-      return /* @__PURE__ */ jsx_dev_runtime18.jsxDEV(Box_default, {
-        flexDirection: "column",
-        children: [
-          /* @__PURE__ */ jsx_dev_runtime18.jsxDEV(StatusMessage, {
-            type: "error",
-            children: [
-              "Repository ",
-              state.repo,
-              " not found in config"
-            ]
-          }, undefined, true, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime18.jsxDEV(Text, {
-            dimColor: true,
-            children: [
-              "Run 'skilluse repo add ",
-              state.repo,
-              "' to add it first."
-            ]
-          }, undefined, true, undefined, this)
-        ]
-      }, undefined, true, undefined, this);
-    case "already_default":
-      return /* @__PURE__ */ jsx_dev_runtime18.jsxDEV(StatusMessage, {
-        type: "success",
-        children: [
-          state.repo,
-          " is already the default"
-        ]
-      }, undefined, true, undefined, this);
-    case "success":
-      return /* @__PURE__ */ jsx_dev_runtime18.jsxDEV(StatusMessage, {
-        type: "success",
-        children: [
-          "Default repo set to ",
-          state.repo
-        ]
-      }, undefined, true, undefined, this);
-    case "error":
-      return /* @__PURE__ */ jsx_dev_runtime18.jsxDEV(StatusMessage, {
-        type: "error",
-        children: state.message
-      }, undefined, false, undefined, this);
-  }
+      }, undefined, false, undefined, this),
+      /* @__PURE__ */ jsx_dev_runtime18.jsxDEV(Static, {
+        items: outputItems,
+        children: (item) => /* @__PURE__ */ jsx_dev_runtime18.jsxDEV(Box_default, {
+          flexDirection: "column",
+          children: renderContent()
+        }, item.id, false, undefined, this)
+      }, undefined, false, undefined, this)
+    ]
+  }, undefined, true, undefined, this);
 }
 
 // src/commands/agent/index.tsx
@@ -69633,13 +69661,15 @@ async function fetchSkillsFromRepo(token, repoConfig) {
     try {
       const apiPath = basePath ? `https://api.github.com/repos/${repo}/contents/${basePath}?ref=${branch}` : `https://api.github.com/repos/${repo}/contents?ref=${branch}`;
       const response = await fetch(apiPath, {
-        headers: {
-          Authorization: `Bearer ${token}`,
-          Accept: "application/vnd.github+json",
-          "X-GitHub-Api-Version": "2022-11-28"
-        }
+        headers: buildGitHubHeaders(token)
       });
       if (!response.ok) {
+        if (isAuthRequired(response)) {
+          return {
+            authRequired: true,
+            message: getGitHubErrorMessage(response)
+          };
+        }
         continue;
       }
       const contents = await response.json();
@@ -69647,11 +69677,7 @@ async function fetchSkillsFromRepo(token, repoConfig) {
       for (const dir of dirs) {
         const skillMdUrl = `https://api.github.com/repos/${repo}/contents/${dir.path}/SKILL.md?ref=${branch}`;
         const skillResponse = await fetch(skillMdUrl, {
-          headers: {
-            Authorization: `Bearer ${token}`,
-            Accept: "application/vnd.github.raw+json",
-            "X-GitHub-Api-Version": "2022-11-28"
-          }
+          headers: buildGitHubRawHeaders(token)
         });
         if (skillResponse.ok) {
           const content = await skillResponse.text();
@@ -69693,12 +69719,6 @@ function Search({ args: [keyword], options: opts }) {
   const [state, setState] = import_react44.useState({ phase: "checking" });
   import_react44.useEffect(() => {
     async function search() {
-      const credentials = await getCredentials();
-      if (!credentials) {
-        setState({ phase: "not_logged_in" });
-        exit();
-        return;
-      }
       const config2 = getConfig();
       let reposToSearch = [];
       if (opts.all) {
@@ -69716,11 +69736,18 @@ function Search({ args: [keyword], options: opts }) {
         exit();
         return;
       }
+      const credentials = await getCredentials();
+      const token = credentials?.token;
       const allSkills = [];
       for (const repoConfig of reposToSearch) {
         setState({ phase: "searching", repo: repoConfig.repo });
-        const skills = await fetchSkillsFromRepo(credentials.token, repoConfig);
-        allSkills.push(...skills);
+        const result = await fetchSkillsFromRepo(token, repoConfig);
+        if ("authRequired" in result) {
+          setState({ phase: "auth_required", message: result.message });
+          exit();
+          return;
+        }
+        allSkills.push(...result);
       }
       const matchingSkills = filterSkills(allSkills, keyword);
       setState({ phase: "success", skills: matchingSkills, keyword });
@@ -69739,20 +69766,14 @@ function Search({ args: [keyword], options: opts }) {
       return /* @__PURE__ */ jsx_dev_runtime21.jsxDEV(Spinner2, {
         text: "Initializing..."
       }, undefined, false, undefined, this);
-    case "not_logged_in":
+    case "auth_required":
       return /* @__PURE__ */ jsx_dev_runtime21.jsxDEV(Box_default, {
         flexDirection: "column",
-        children: [
-          /* @__PURE__ */ jsx_dev_runtime21.jsxDEV(StatusMessage, {
-            type: "error",
-            children: "Not authenticated"
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime21.jsxDEV(Text, {
-            dimColor: true,
-            children: "Run 'skilluse login' to authenticate with GitHub"
-          }, undefined, false, undefined, this)
-        ]
-      }, undefined, true, undefined, this);
+        children: /* @__PURE__ */ jsx_dev_runtime21.jsxDEV(StatusMessage, {
+          type: "error",
+          children: state.message
+        }, undefined, false, undefined, this)
+      }, undefined, false, undefined, this);
     case "no_repos":
       return /* @__PURE__ */ jsx_dev_runtime21.jsxDEV(Box_default, {
         flexDirection: "column",
@@ -70104,14 +70125,17 @@ async function checkForUpdate2(token, skill, repoConfig) {
   try {
     const refUrl = `https://api.github.com/repos/${repo}/commits/${branch}`;
     const refResponse = await fetch(refUrl, {
-      headers: {
-        Authorization: `Bearer ${token}`,
-        Accept: "application/vnd.github+json",
-        "X-GitHub-Api-Version": "2022-11-28"
-      }
+      headers: buildGitHubHeaders(token)
     });
-    if (!refResponse.ok)
+    if (!refResponse.ok) {
+      if (isAuthRequired(refResponse)) {
+        return {
+          authRequired: true,
+          message: getGitHubErrorMessage(refResponse)
+        };
+      }
       return null;
+    }
     const refData = await refResponse.json();
     const latestSha = refData.sha;
     if (latestSha === skill.commitSha) {
@@ -70119,11 +70143,7 @@ async function checkForUpdate2(token, skill, repoConfig) {
     }
     const skillMdUrl = `https://api.github.com/repos/${repo}/contents/${skill.repoPath}/SKILL.md?ref=${branch}`;
     const skillResponse = await fetch(skillMdUrl, {
-      headers: {
-        Authorization: `Bearer ${token}`,
-        Accept: "application/vnd.github.raw+json",
-        "X-GitHub-Api-Version": "2022-11-28"
-      }
+      headers: buildGitHubRawHeaders(token)
     });
     let latestVersion = skill.version;
     if (skillResponse.ok) {
@@ -70146,13 +70166,15 @@ async function checkForUpdate2(token, skill, repoConfig) {
 async function downloadSkillFiles2(token, repo, skillPath, branch, targetDir) {
   const treeUrl = `https://api.github.com/repos/${repo}/git/trees/${branch}?recursive=1`;
   const treeResponse = await fetch(treeUrl, {
-    headers: {
-      Authorization: `Bearer ${token}`,
-      Accept: "application/vnd.github+json",
-      "X-GitHub-Api-Version": "2022-11-28"
-    }
+    headers: buildGitHubHeaders(token)
   });
   if (!treeResponse.ok) {
+    if (isAuthRequired(treeResponse)) {
+      return {
+        authRequired: true,
+        message: getGitHubErrorMessage(treeResponse)
+      };
+    }
     throw new Error(`Failed to fetch repository tree: ${treeResponse.status}`);
   }
   const treeData = await treeResponse.json();
@@ -70171,13 +70193,15 @@ async function downloadSkillFiles2(token, repo, skillPath, branch, targetDir) {
     }
     const fileUrl = `https://api.github.com/repos/${repo}/contents/${file2.path}?ref=${branch}`;
     const fileResponse = await fetch(fileUrl, {
-      headers: {
-        Authorization: `Bearer ${token}`,
-        Accept: "application/vnd.github.raw+json",
-        "X-GitHub-Api-Version": "2022-11-28"
-      }
+      headers: buildGitHubRawHeaders(token)
     });
     if (!fileResponse.ok) {
+      if (isAuthRequired(fileResponse)) {
+        return {
+          authRequired: true,
+          message: getGitHubErrorMessage(fileResponse)
+        };
+      }
       throw new Error(`Failed to download file: ${file2.path}`);
     }
     const content = await fileResponse.text();
@@ -70189,12 +70213,6 @@ function Upgrade({ args: [skillName] }) {
   const [state, setState] = import_react46.useState({ phase: "checking" });
   import_react46.useEffect(() => {
     async function upgrade() {
-      const credentials = await getCredentials();
-      if (!credentials) {
-        setState({ phase: "not_logged_in" });
-        exit();
-        return;
-      }
       const config2 = getConfig();
       let skillsToCheck = [];
       if (skillName) {
@@ -70213,6 +70231,8 @@ function Upgrade({ args: [skillName] }) {
         exit();
         return;
       }
+      const credentials = await getCredentials();
+      const token = credentials?.token;
       const upgrades = [];
       for (let i = 0;i < skillsToCheck.length; i++) {
         setState({
@@ -70224,9 +70244,14 @@ function Upgrade({ args: [skillName] }) {
         const repoConfig = config2.repos.find((r) => r.repo === skill.repo);
         if (!repoConfig)
           continue;
-        const update = await checkForUpdate2(credentials.token, skill, repoConfig);
-        if (update) {
-          upgrades.push(update);
+        const result = await checkForUpdate2(token, skill, repoConfig);
+        if (result && "authRequired" in result) {
+          setState({ phase: "auth_required", message: result.message });
+          exit();
+          return;
+        }
+        if (result) {
+          upgrades.push(result);
         }
       }
       if (upgrades.length === 0) {
@@ -70247,7 +70272,15 @@ function Upgrade({ args: [skillName] }) {
           const repoConfig = config2.repos.find((r) => r.repo === skill.repo);
           if (!repoConfig)
             continue;
-          await downloadSkillFiles2(credentials.token, skill.repo, skill.repoPath, repoConfig.branch, skill.installedPath);
+          const downloadResult = await downloadSkillFiles2(token, skill.repo, skill.repoPath, repoConfig.branch, skill.installedPath);
+          if (downloadResult && "authRequired" in downloadResult) {
+            setState({
+              phase: "auth_required",
+              message: downloadResult.message
+            });
+            exit();
+            return;
+          }
           const updatedSkill = {
             ...skill,
             commitSha: latestSha,
@@ -70277,20 +70310,14 @@ function Upgrade({ args: [skillName] }) {
       return /* @__PURE__ */ jsx_dev_runtime23.jsxDEV(Spinner2, {
         text: "Initializing..."
       }, undefined, false, undefined, this);
-    case "not_logged_in":
+    case "auth_required":
       return /* @__PURE__ */ jsx_dev_runtime23.jsxDEV(Box_default, {
         flexDirection: "column",
-        children: [
-          /* @__PURE__ */ jsx_dev_runtime23.jsxDEV(StatusMessage, {
-            type: "error",
-            children: "Not authenticated"
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsx_dev_runtime23.jsxDEV(Text, {
-            dimColor: true,
-            children: "Run 'skilluse login' to authenticate with GitHub"
-          }, undefined, false, undefined, this)
-        ]
-      }, undefined, true, undefined, this);
+        children: /* @__PURE__ */ jsx_dev_runtime23.jsxDEV(StatusMessage, {
+          type: "error",
+          children: state.message
+        }, undefined, false, undefined, this)
+      }, undefined, false, undefined, this);
     case "not_found":
       return /* @__PURE__ */ jsx_dev_runtime23.jsxDEV(Box_default, {
         flexDirection: "column",
@@ -70409,7 +70436,7 @@ function Upgrade({ args: [skillName] }) {
 // package.json
 var package_default = {
   name: "skilluse",
-  version: "0.1.10",
+  version: "0.2.1",
   description: "CLI tool for managing and installing AI Coding Agent Skills",
   main: "dist/cli.js",
   bin: {