boost-skill-cli 1.0.119__tar.gz → 1.0.120__tar.gz

{boost_skill_cli-1.0.119 → boost_skill_cli-1.0.120}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: boost-skill-cli
-Version: 1.0.119
+Version: 1.0.120
 Summary: boost — Homebrew for AI coding skills
 Author: Jonathan Reyes
 License: GNU GENERAL PUBLIC LICENSE

{boost_skill_cli-1.0.119 → boost_skill_cli-1.0.120}/boost_cli/_version.py

@@ -18,7 +18,7 @@ version_tuple: tuple[int | str, ...]
 commit_id: str | None
 __commit_id__: str | None
 
-__version__ = version = '1.0.119'
-__version_tuple__ = version_tuple = (1, 0, 119)
+__version__ = version = '1.0.120'
+__version_tuple__ = version_tuple = (1, 0, 120)
 
 __commit_id__ = commit_id = None

{boost_skill_cli-1.0.119 → boost_skill_cli-1.0.120}/boost_cli/commands/quality.py

@@ -286,12 +286,19 @@ def cmd_doctor(argv):
     enabled = agents.enabled_agents()
     skill_issues = 0
     for name, entry in sorted(skills.items()):
-        if not store.skill_store_dir(name).is_dir():
+        sdir = store.skill_store_dir(name)
+        if not sdir.is_dir():
             bad("skill %s missing from store — run `boost heal`" % name)
             skill_issues += 1
             continue
         if entry.get("quarantined"):
             continue
+        # tamper detection: the lock file records a sha256 at install time, but
+        # only `boost verify` ever re-checked it — surface content drift here too.
+        locked = entry.get("sha256")
+        if locked and util.sha256_dir(sdir) != locked:
+            bad("skill %s modified since install — run `boost verify`" % name)
+            skill_issues += 1
         for agent in entry.get("agents", []):
             adir = enabled.get(agent)
             if adir is None:

{boost_skill_cli-1.0.119 → boost_skill_cli-1.0.120}/boost_skill_cli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: boost-skill-cli
-Version: 1.0.119
+Version: 1.0.120
 Summary: boost — Homebrew for AI coding skills
 Author: Jonathan Reyes
 License: GNU GENERAL PUBLIC LICENSE

{boost_skill_cli-1.0.119 → boost_skill_cli-1.0.120}/docs/roadmap/items/integrity-verification-boost-verify.md

@@ -2,15 +2,15 @@
 id: integrity-verification-boost-verify
 board: code
 section: trust
-status: planned
+status: shipped
 category: Security · Integrity
 complexity: S
 impact: High
 wow: 4
 note: reuses sha256_dir
 order: 2
-owner:
-pr:
+owner: loop/doctor-integrity
+pr: 139
 title: Integrity verification — <code>boost verify</code>
 ---
 The lockfile already records a <code>sha256</code> per install via

{boost_skill_cli-1.0.119 → boost_skill_cli-1.0.120}/docs/roadmap.html

@@ -1663,7 +1663,7 @@ and the work stays visible.</p>
       </article>
 
       <article class="cap rcard">
-        <div class="head"><span class="pill planned">Planned</span><span class="cat">Security · Integrity</span></div>
+        <div class="head"><span class="pill shipped">Shipped</span><span class="cat">Security · Integrity</span></div>
         <h3>Integrity verification — <code>boost verify</code></h3>
         <p>The lockfile already records a <code>sha256</code> per install via
            <code>util.sha256_dir</code>, but nothing ever re-checks it. A

{boost_skill_cli-1.0.119 → boost_skill_cli-1.0.120}/tests/functional/test_cli_quality.py

@@ -82,6 +82,14 @@ class TestDoctor:
         assert "no taps configured — add one with `boost tap owner/repo`" in r.out
         assert "0 skills installed · 0 taps synced · 0 broken links" in r.out
 
+    def test_tampered_content_rc1(self, boost, installed):
+        # doctor must re-hash installed skills, not just check they exist:
+        # editing SKILL.md content after install is drift from the lock digest.
+        _tamper("brainstorming")
+        r = boost("doctor", expect=1)
+        assert "skill brainstorming modified since install — run `boost verify`" in r.out
+        assert "need attention" in r.out
+
 
 # ── lint ─────────────────────────────────────────────────────────────────