boost-skill-cli 1.0.202__tar.gz → 1.0.204__tar.gz

{boost_skill_cli-1.0.202/boost_skill_cli.egg-info → boost_skill_cli-1.0.204}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: boost-skill-cli
-Version: 1.0.202
+Version: 1.0.204
 Summary: boost — Homebrew for AI coding skills
 Author: Jonathan Reyes
 License: GNU GENERAL PUBLIC LICENSE

{boost_skill_cli-1.0.202 → boost_skill_cli-1.0.204}/boost_cli/_version.py

@@ -18,7 +18,7 @@ version_tuple: tuple[int | str, ...]
 commit_id: str | None
 __commit_id__: str | None
 
-__version__ = version = '1.0.202'
-__version_tuple__ = version_tuple = (1, 0, 202)
+__version__ = version = '1.0.204'
+__version_tuple__ = version_tuple = (1, 0, 204)
 
 __commit_id__ = commit_id = None

{boost_skill_cli-1.0.202 → boost_skill_cli-1.0.204}/boost_cli/commands/pkg.py

@@ -17,8 +17,8 @@ from typing import Dict, List, Optional
 from .. import cliparse
 from ..core import (adapters, agents, catalog, config, frontmatter, gitutil,
                     injectscan, integrity, journal, lockfile, paths, projectlock,
-                    registry, scopes, secretscan, staleness, store, typosquat,
-                    updatediff, util)
+                    registry, resolve, scopes, secretscan, staleness, store,
+                    typosquat, updatediff, util)
 from ..core import output as out
 from ..errors import BoostError
 
@@ -163,6 +163,56 @@ def _boostfile_text(skills: Dict[str, dict], via: str = "boost bundle dump") ->
     return "\n".join(lines) + "\n"
 
 
+def _rel_list(meta: dict, key: str) -> List[str]:
+    """A skill's `requires:`/`conflicts:` frontmatter as a clean name list."""
+    val = (meta or {}).get(key)
+    if val in (None, "", False):
+        return []
+    if isinstance(val, list):
+        return [str(x).strip() for x in val if str(x).strip()]
+    return [s.strip() for s in str(val).split(",") if s.strip()]
+
+
+def _skill_relations(name: str, key: str) -> List[str]:
+    """`requires:`/`conflicts:` for a skill by name, from its catalog entry."""
+    matches = catalog.find(name)
+    if not matches:
+        return []
+    return _rel_list(matches[0].get("meta") or {}, key)
+
+
+def _expand_dependencies(entries: List[dict]) -> "tuple[List[dict], resolve.Resolution]":
+    """Grow the requested entries into their full `requires:` closure.
+
+    Returns ``(ordered_entries, resolution)`` — the entries to install in
+    dependency-first order (roots plus any pulled-in dependencies that are not
+    already installed), and the :class:`resolve.Resolution` carrying what was
+    added, any advisory conflicts, and unresolved (dangling) requirements.
+    """
+    installed = frozenset(lockfile.installed())
+    res = resolve.resolve(
+        [e["name"] for e in entries],
+        lambda n: _skill_relations(n, "requires"),
+        lambda n: _skill_relations(n, "conflicts"),
+        installed=installed,
+        known=lambda n: bool(catalog.find(n)),
+    )
+    by_name = {e["name"]: e for e in entries}
+    ordered: List[dict] = []
+    for name in res.order:
+        if name in by_name:
+            ordered.append(by_name[name])
+            continue
+        try:
+            ordered.append(catalog.resolve_one(name))
+        except BoostError:
+            # A dep that resolves nowhere unambiguously is reported via
+            # res.unresolved; skip it here rather than abort the whole install.
+            if name not in res.unresolved:
+                res.unresolved.append(name)
+    return ordered, res
+
+
 # ── install ──────────────────────────────────────────────────────────────
 
 def cmd_install(argv: List[str]) -> int:
@@ -186,6 +236,8 @@ def cmd_install(argv: List[str]) -> int:
                          help="into your user config (= --scope user, default)")
     ap.add_argument("--dry-run", action="store_true",
                     help="show what would happen without changing anything")
+    ap.add_argument("--no-deps", action="store_true",
+                    help="install only the named skills, not their `requires:`")
     args = ap.parse_args(argv)
     args.scope = args.scope or scopes.SCOPE_USER
     only = _check_agents(args.agent)
@@ -202,6 +254,25 @@ def cmd_install(argv: List[str]) -> int:
 
     _warn_confusions(entries)
 
+    # Grow the request into its `requires:` closure (deps installed first),
+    # unless the caller opted out. Only skills carry dependency frontmatter;
+    # rules/workflows pass through unchanged.
+    if not args.no_deps and entries:
+        entries, dep_res = _expand_dependencies(entries)
+        if dep_res.added:
+            out.info("pulling in %s required by your selection: %s"
+                     % (_plural(len(dep_res.added), "dependency"),
+                        ", ".join(dep_res.added)))
+        for name in dep_res.unresolved:
+            out.warn("required skill %r is in no tap — skipped "
+                     "(install it manually or `boost tap` its source)" % name)
+        for skill, clash in dep_res.conflicts:
+            out.warn("%s declares a conflict with %s (also present)" % (skill, clash))
+        # Pulling in dependencies can turn a single-name request into a multi-item
+        # install (per-item headings); it must never *lower* multi (e.g. when an
+        # unknown co-requested name was dropped), so OR rather than reassign.
+        multi = multi or len(entries) > 1
+
     if args.dry_run:
         targets = [a for a in agents.enabled_agents() if not only or a in only]
         pbase = scopes.resolve_base(args.scope)

boost_skill_cli-1.0.204/boost_cli/core/resolve.py

@@ -0,0 +1,136 @@
+"""Skill dependency resolution — turn a set of requested skills into the full,
+correctly-ordered install list by following each skill's ``requires:`` closure.
+
+boost skills declare relationships in frontmatter (``requires:`` /
+``conflicts:``); until now those were only *displayed* (``boost info`` /
+``boost deps``). This module is the resolver that makes ``boost install`` act on
+them — the "Homebrew installs dependencies" behavior — as a pure, dependency-
+injected function so it is unit- and mutation-testable with no catalog or
+filesystem access.
+
+The caller supplies two lookups so the core stays I/O-free:
+
+* ``requires_of(name) -> list[str]`` — the skills ``name`` declares it needs.
+* ``conflicts_of(name) -> list[str]`` — the skills ``name`` declares it clashes
+  with (optional; defaults to none).
+
+and, optionally, ``known(name) -> bool`` to tell a resolvable dependency from a
+dangling one (a ``requires:`` naming a skill in no tap). Everything else is
+plain graph work.
+"""
+from __future__ import annotations
+
+from dataclasses import dataclass, field
+from typing import Callable, FrozenSet, List, Optional, Sequence, Tuple
+
+__all__ = ["Resolution", "resolve"]
+
+
+@dataclass
+class Resolution:
+    """The outcome of resolving a set of requested skills.
+
+    * ``order`` — the install order, dependencies before dependents, with
+      already-installed skills that were only pulled in as dependencies dropped.
+      A *requested* skill stays in ``order`` even when already installed (so an
+      explicit ``boost install x`` still reinstalls/upgrades it, matching the
+      pre-resolver behavior).
+    * ``added`` — the transitive dependencies that were pulled in (``order``
+      minus the requested roots), in install order — what to tell the user got
+      added on their behalf.
+    * ``conflicts`` — ``(skill, clashes_with)`` pairs where a skill in the plan
+      declares a ``conflicts:`` against something already installed or also
+      being installed. Advisory (a warning), never a hard failure.
+    * ``unresolved`` — required skill names with no known source (a dangling
+      ``requires:``); surfaced so the caller can warn rather than crash.
+    """
+
+    order: List[str] = field(default_factory=list)
+    added: List[str] = field(default_factory=list)
+    conflicts: List[Tuple[str, str]] = field(default_factory=list)
+    unresolved: List[str] = field(default_factory=list)
+
+
+def _norm(names: Sequence[str]) -> List[str]:
+    """De-dupe a name sequence preserving first-seen order."""
+    seen: List[str] = []
+    for n in names:
+        if n and n not in seen:
+            seen.append(n)
+    return seen
+
+
+def resolve(
+    roots: Sequence[str],
+    requires_of: Callable[[str], Sequence[str]],
+    conflicts_of: Optional[Callable[[str], Sequence[str]]] = None,
+    *,
+    installed: FrozenSet[str] = frozenset(),
+    known: Optional[Callable[[str], bool]] = None,
+) -> Resolution:
+    """Resolve ``roots`` plus their ``requires:`` closure into an install plan.
+
+    Post-order depth-first traversal yields dependencies before the skills that
+    need them. The traversal is cycle-safe (a skill on the current DFS stack is
+    not re-entered) and each skill is visited once. A dependency that is already
+    ``installed`` is not re-added; a *requested* root is always kept so an
+    explicit reinstall/upgrade still happens. Unknown dependencies (per
+    ``known``) are recorded in ``unresolved`` and not traversed further.
+    """
+    conflicts_of = conflicts_of or (lambda _n: [])
+    known = known or (lambda _n: True)
+    roots = _norm(roots)
+    root_set = set(roots)
+
+    order: List[str] = []
+    done: set = set()      # fully-processed (post-order emitted)
+    on_stack: set = set()  # currently being visited — cycle guard
+    unresolved: List[str] = []
+
+    def visit(name: str, is_root: bool) -> None:
+        if name in done or name in on_stack:
+            return  # already emitted, or a cycle — stop
+        # An already-installed skill pulled in only as a dependency is assumed
+        # satisfied — don't re-traverse or re-emit its subtree. (A requested root
+        # is still walked so an explicit reinstall re-checks its deps; gap-filling
+        # of a broken installed skill is `boost heal`'s job, not install's.)
+        if name in installed and not is_root:
+            done.add(name)
+            return
+        on_stack.add(name)
+        for dep in _norm(list(requires_of(name) or [])):
+            if dep == name:
+                continue  # a self-require is a no-op, never a cycle error
+            if not known(dep):
+                if dep not in unresolved:
+                    unresolved.append(dep)
+                continue
+            visit(dep, is_root=False)
+        on_stack.discard(name)
+        done.add(name)
+        # Emit unless it is an already-installed skill pulled in only as a dep;
+        # a requested root is always emitted (reinstall/upgrade semantics).
+        if is_root or name not in installed:
+            order.append(name)
+
+    for r in roots:
+        visit(r, is_root=True)
+
+    added = [n for n in order if n not in root_set]
+
+    # Conflict scan: anything in the plan (being installed) OR already installed
+    # is a live presence; flag a declared conflict against any live presence.
+    live = set(order) | set(installed)
+    conflicts: List[Tuple[str, str]] = []
+    seen_pairs: set = set()
+    for skill in order:
+        for clash in _norm(list(conflicts_of(skill) or [])):
+            if clash == skill or clash not in live:
+                continue
+            key = (skill, clash)
+            if key not in seen_pairs:
+                seen_pairs.add(key)
+                conflicts.append(key)
+
+    return Resolution(order=order, added=added,
+                      conflicts=conflicts, unresolved=unresolved)

{boost_skill_cli-1.0.202 → boost_skill_cli-1.0.204/boost_skill_cli.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: boost-skill-cli
-Version: 1.0.202
+Version: 1.0.204
 Summary: boost — Homebrew for AI coding skills
 Author: Jonathan Reyes
 License: GNU GENERAL PUBLIC LICENSE

{boost_skill_cli-1.0.202 → boost_skill_cli-1.0.204}/boost_skill_cli.egg-info/SOURCES.txt

@@ -74,6 +74,7 @@ boost_cli/core/projectlock.py
 boost_cli/core/provenance.py
 boost_cli/core/rag.py
 boost_cli/core/registry.py
+boost_cli/core/resolve.py
 boost_cli/core/rules.py
 boost_cli/core/scopes.py
 boost_cli/core/secretscan.py
@@ -149,6 +150,7 @@ docs/roadmap/items/coverage-dashboard-codecov-free-for-oss.md
 docs/roadmap/items/coverage-guided-fuzzing-atheris-oss-fuzz.md
 docs/roadmap/items/crash-recorder-error-paths-core-logs-py.md
 docs/roadmap/items/dependency-cve-gate-pip-audit.md
+docs/roadmap/items/docsite-chrome-and-content-audit.md
 docs/roadmap/items/docstring-coverage-interrogate.md
 docs/roadmap/items/doctor-checks-rules-and-workflows.md
 docs/roadmap/items/end-of-options-guard-on-git-commands.md
@@ -165,7 +167,9 @@ docs/roadmap/items/github-pages-deploy-is-broken-every-push.md
 docs/roadmap/items/golden-set-statistical-power.md
 docs/roadmap/items/hash-pinned-reproducible-toolchain-uv-lock.md
 docs/roadmap/items/html-validation-html-validate.md
+docs/roadmap/items/install-resolves-skill-dependencies.md
 docs/roadmap/items/install-scope-user-or-project.md
+docs/roadmap/items/installed-skill-trust-audit.md
 docs/roadmap/items/integrity-verification-boost-verify.md
 docs/roadmap/items/invocation-pid-logging-for-crash-correlation.md
 docs/roadmap/items/layering-guard-import-linter.md
@@ -177,6 +181,7 @@ docs/roadmap/items/log-timestamps-mislabeled-utc.md
 docs/roadmap/items/lowest-version-resolution-uv-resolution-lowest-d.md
 docs/roadmap/items/make-the-roadmaps-discoverable.md
 docs/roadmap/items/markdown-consistency-markdownlint-cli2.md
+docs/roadmap/items/mcp-aware-skills.md
 docs/roadmap/items/mcp-hub-diagram-node-text-overflow.md
 docs/roadmap/items/mcp-launch-objc-fork-safety.md
 docs/roadmap/items/mcp-register-names-server-before-env.md
@@ -321,6 +326,7 @@ tests/unit/test_config.py
 tests/unit/test_dense.py
 tests/unit/test_dense_fallback.py
 tests/unit/test_docs_pages_linked.py
+tests/unit/test_docsite_chrome.py
 tests/unit/test_ed25519.py
 tests/unit/test_embed.py
 tests/unit/test_errors_and_cli_table.py
@@ -352,6 +358,7 @@ tests/unit/test_provenance.py
 tests/unit/test_rag.py
 tests/unit/test_registries_fresh.py
 tests/unit/test_registry.py
+tests/unit/test_resolve.py
 tests/unit/test_roadmap_fresh.py
 tests/unit/test_rules.py
 tests/unit/test_scopes.py

{boost_skill_cli-1.0.202 → boost_skill_cli-1.0.204}/docs/adapters.html

@@ -65,7 +65,23 @@
 </head>
 <body>
 
-<main>
+<header>
+  <div class="wrap site-nav">
+    <a class="logo" href="index.html"><b>boost</b><span>Adapters</span></a>
+    <ul>
+      <li><a href="index.html">Guide</a></li>
+      <li><a href="commands.html">Commands</a></li>
+      <li><a href="roadmap.html">Roadmap</a></li>
+      <li><a href="design-roadmap.html">Design</a></li>
+      <li><a href="mcp-hub.html">MCP Hub</a></li>
+      <li><a href="eval.html">Evaluation</a></li>
+      <li><a href="#top" aria-current="page">Adapters</a></li>
+      <li><a href="https://github.com/jonnyeclectic/boost">GitHub</a></li>
+    </ul>
+  </div>
+</header>
+
+<main id="top">
   <!-- ===== hero ===== -->
   <div class="wrap hero">
     <p class="crumbs"><a href="index.html">boost</a> / docs / adapters · <span class="mono">boost adapt</span></p>
@@ -327,16 +343,31 @@ python3 -m venv /tmp/crew &amp;&amp; /tmp/crew/bin/pip install <span class="s">"
     </div>
   </section>
 
-  <footer>
-    <div class="wrap">
-      <p>boost · <b>Framework adapters</b> — <code class="mono">boost adapt &lt;skill&gt; --to &lt;framework&gt;</code> ·
-        <a href="index.html">docs home</a> ·
-        <a href="mcp-hub.html">RAG &amp; MCP hub</a><br>
-        Styled with the shared <a href="../style/boost.css">Aurora</a> design system.</p>
-    </div>
-  </footer>
 </main>
 
+<footer>
+  <div class="wrap">
+    <p class="foot-brand"><b>boost</b> — a package manager for AI coding skills</p>
+    <p class="foot-note">Install with <code>pip install boost-skill-cli</code> · requires Python 3.9+ and <code>git</code></p>
+    <nav class="foot-links" aria-label="Documentation">
+      <a href="index.html">Guide</a>
+      <a href="commands.html">Commands</a>
+      <a href="roadmap.html">Roadmap</a>
+      <a href="design-roadmap.html">Design</a>
+      <a href="mcp-hub.html">MCP Hub</a>
+      <a href="eval.html">Evaluation</a>
+      <a href="#top" aria-current="page">Adapters</a>
+    </nav>
+    <p class="foot-legal">
+      <a href="https://github.com/jonnyeclectic/boost">GitHub</a> ·
+      <a href="https://pypi.org/project/boost-skill-cli/">PyPI</a> ·
+      <a href="https://jonnyeclectic.github.io/portfolio/">Portfolio</a> ·
+      Released under the GPL-3.0 license
+    </p>
+  </div>
+</footer>
+
+
 <script src="../style/boost.js" defer></script>
 </body>
 </html>

{boost_skill_cli-1.0.202 → boost_skill_cli-1.0.204}/docs/commands.html

@@ -70,6 +70,25 @@
     border-right: none; border-bottom: 1px solid var(--line); }
     .arg { grid-template-columns: 1fr; gap: 2px; }
   }
+
+  /* Site footer — same content as every other docs page. This page is
+     self-contained (its sidebar layout owns .wrap), so the rules are local. */
+  footer { border-top: 1px solid var(--line); padding: 30px 20px 40px; text-align: center; }
+  footer .foot-brand { font-size: 14.5px; color: var(--text-2); }
+  footer .foot-brand b { font-family: var(--mono); font-weight: 700; color: var(--amber); }
+  footer .foot-note { margin-top: 9px; font-size: 13px; color: var(--text-2); opacity: .8; }
+  footer .foot-note code { font-size: .92em; color: var(--amber);
+    background: rgba(34,211,238,.08); border: 1px solid var(--line);
+    border-radius: 6px; padding: 2px 8px; }
+  footer .foot-links { display: flex; flex-wrap: wrap; justify-content: center;
+    gap: 4px 6px; margin-top: 16px; }
+  footer .foot-links a { display: flex; align-items: center; min-height: 40px;
+    padding: 5px 11px; border-radius: 8px; font-size: 13px;
+    color: var(--text-2); text-decoration: none; }
+  footer .foot-links a:hover,
+  footer .foot-links a[aria-current="page"] { color: var(--text); background: var(--panel); }
+  footer .foot-legal { margin-top: 13px; font-size: 12.5px; color: var(--text-2); opacity: .75; }
+  footer .foot-legal a { color: var(--text-2); text-decoration: underline; }
 </style>
 </head>
 <body>
@@ -80,7 +99,7 @@
     <input id="q" type="search" placeholder="Filter 78 commands…" autocomplete="off" aria-label="Filter commands">
     <div class="group" data-group="pkg">
       <div class="group-h">Install &amp; lifecycle</div>
-      <a class="cmd-link" href="#cmd-install" data-search="install install a skill from a tap registry  --force --agent a --scope {user,project} --local --global --dry-run name">install</a>
+      <a class="cmd-link" href="#cmd-install" data-search="install install a skill from a tap registry  --force --agent a --scope {user,project} --local --global --dry-run --no-deps name">install</a>
       <a class="cmd-link" href="#cmd-uninstall" data-search="uninstall remove an installed skill, rule, workflow, or config  --local name">uninstall</a>
       <a class="cmd-link" href="#cmd-sync" data-search="sync reconcile installed skills &amp; symlinks against the lock file  --diff --prune --json">sync</a>
       <a class="cmd-link" href="#cmd-update" data-search="update sync taps or update installed skills  --taps-only tap">update</a>
@@ -182,15 +201,15 @@
     </div>
     <div id="nohits">No commands match.</div>
   </aside>
-  <main>
+  <main id="top">
     <h1>boost <b>command reference</b></h1>
     <p class="lead">All <b>78</b> commands, generated from the CLI itself —
        run <code>boost &lt;command&gt; --help</code> for the same in your terminal.</p>
       <h2 class="group-h" id="grp-pkg">Install &amp; lifecycle</h2>
-      <section class="cmd" id="cmd-install" data-search="install install a skill from a tap registry  --force --agent a --scope {user,project} --local --global --dry-run name">
+      <section class="cmd" id="cmd-install" data-search="install install a skill from a tap registry  --force --agent a --scope {user,project} --local --global --dry-run --no-deps name">
         <h3><span class="cname">install</span><span class="gtag">pkg</span></h3>
         <p class="summary">Install a skill from a tap registry</p>
-        <pre class="syn">boost install [--force] [--agent A] [--scope {user,project}] [--local] [--global] [--dry-run] NAME [NAME ...]</pre>
+        <pre class="syn">boost install [--force] [--agent A] [--scope {user,project}] [--local] [--global] [--dry-run] [--no-deps] NAME [NAME ...]</pre>
         <div class="args-h">Arguments</div>
         <div class="args">
           <div class="arg"><code>NAME</code><span>skill name, optionally qualified as tap:skill</span></div>
@@ -203,6 +222,7 @@
           <div class="arg"><code>--local</code><span>into this repo, committable (= --scope project)</span></div>
           <div class="arg"><code>--global</code><span>into your user config (= --scope user, default)</span></div>
           <div class="arg"><code>--dry-run</code><span>show what would happen without changing anything</span></div>
+          <div class="arg"><code>--no-deps</code><span>install only the named skills, not their `requires:`</span></div>
         </div>
       </section>
       <section class="cmd" id="cmd-uninstall" data-search="uninstall remove an installed skill, rule, workflow, or config  --local name">
@@ -1148,6 +1168,26 @@
       </section>
   </main>
 </div>
+
+<footer>
+  <p class="foot-brand"><b>boost</b> &mdash; a package manager for AI coding skills</p>
+  <p class="foot-note">Install with <code>pip install boost-skill-cli</code> &middot; requires Python 3.9+ and <code>git</code></p>
+  <nav class="foot-links" aria-label="Documentation">
+    <a href="index.html">Guide</a>
+    <a href="#top" aria-current="page">Commands</a>
+    <a href="roadmap.html">Roadmap</a>
+    <a href="design-roadmap.html">Design</a>
+    <a href="mcp-hub.html">MCP Hub</a>
+    <a href="eval.html">Evaluation</a>
+    <a href="adapters.html">Adapters</a>
+  </nav>
+  <p class="foot-legal">
+    <a href="https://github.com/jonnyeclectic/boost">GitHub</a> &middot;
+    <a href="https://pypi.org/project/boost-skill-cli/">PyPI</a> &middot;
+    <a href="https://jonnyeclectic.github.io/portfolio/">Portfolio</a> &middot;
+    Released under the GPL-3.0 license
+  </p>
+</footer>
 <script>
   (function () {
     var q = document.getElementById('q');