boost-skill-cli 1.0.256__tar.gz → 1.0.258__tar.gz

boost_skill_cli-1.0.258/CODE_OF_CONDUCT.md

@@ -0,0 +1,129 @@
+# Contributor Covenant Code of Conduct
+
+## Our pledge
+
+We as members, contributors, and leaders pledge to make participation in our
+community a harassment-free experience for everyone, regardless of age, body
+size, visible or invisible disability, ethnicity, sex characteristics, gender
+identity and expression, level of experience, education, socio-economic status,
+nationality, personal appearance, race, caste, color, religion, or sexual
+identity and orientation.
+
+We pledge to act and interact in ways that contribute to an open, welcoming,
+diverse, inclusive, and healthy community.
+
+## Our standards
+
+Examples of behavior that contributes to a positive environment for our
+community include:
+
+- Demonstrating empathy and kindness toward other people
+- Being respectful of differing opinions, viewpoints, and experiences
+- Giving and gracefully accepting constructive feedback
+- Accepting responsibility and apologizing to those affected by our mistakes,
+  and learning from the experience
+- Focusing on what is best not just for us as individuals, but for the overall
+  community
+
+Examples of unacceptable behavior include:
+
+- The use of sexualized language or imagery, and sexual attention or advances of
+  any kind
+- Trolling, insulting or derogatory comments, and personal or political attacks
+- Public or private harassment
+- Publishing others' private information, such as a physical or email address,
+  without their explicit permission
+- Other conduct which could reasonably be considered inappropriate in a
+  professional setting
+
+## Enforcement responsibilities
+
+Community leaders are responsible for clarifying and enforcing our standards of
+acceptable behavior and will take appropriate and fair corrective action in
+response to any behavior that they deem inappropriate, threatening, offensive,
+or harmful.
+
+Community leaders have the right and responsibility to remove, edit, or reject
+comments, commits, code, wiki edits, issues, and other contributions that are
+not aligned to this Code of Conduct, and will communicate reasons for moderation
+decisions when appropriate.
+
+## Scope
+
+This Code of Conduct applies within all community spaces, and also applies when
+an individual is officially representing the community in public spaces.
+Examples of representing our community include using an official email address,
+posting via an official social media account, or acting as an appointed
+representative at an online or offline event.
+
+## Enforcement
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be
+reported to the maintainers privately through
+[GitHub's private reporting form](https://github.com/jonnyeclectic/boost/security/advisories/new).
+That form is labeled for security reports, but it is the only private channel
+this repository has, and conduct reports sent through it reach the same people.
+Public issues are **not** the place for a conduct report.
+
+All complaints will be reviewed and investigated promptly and fairly. All
+community leaders are obligated to respect the privacy and security of the
+reporter of any incident.
+
+## Enforcement guidelines
+
+Community leaders will follow these Community Impact Guidelines in determining
+the consequences for any action they deem in violation of this Code of Conduct:
+
+### 1. Correction
+
+**Community impact**: Use of inappropriate language or other behavior deemed
+unprofessional or unwelcome in the community.
+
+**Consequence**: A private, written warning from community leaders, providing
+clarity around the nature of the violation and an explanation of why the
+behavior was inappropriate. A public apology may be requested.
+
+### 2. Warning
+
+**Community impact**: A violation through a single incident or series of
+actions.
+
+**Consequence**: A warning with consequences for continued behavior. No
+interaction with the people involved, including unsolicited interaction with
+those enforcing the Code of Conduct, for a specified period of time. This
+includes avoiding interactions in community spaces as well as external channels
+like social media. Violating these terms may lead to a temporary or permanent
+ban.
+
+### 3. Temporary ban
+
+**Community impact**: A serious violation of community standards, including
+sustained inappropriate behavior.
+
+**Consequence**: A temporary ban from any sort of interaction or public
+communication with the community for a specified period of time. No public or
+private interaction with the people involved, including unsolicited interaction
+with those enforcing the Code of Conduct, is allowed during this period.
+Violating these terms may lead to a permanent ban.
+
+### 4. Permanent ban
+
+**Community impact**: Demonstrating a pattern of violation of community
+standards, including sustained inappropriate behavior, harassment of an
+individual, or aggression toward or disparagement of classes of individuals.
+
+**Consequence**: A permanent ban from any sort of public interaction within the
+community.
+
+## Attribution
+
+This Code of Conduct is adapted from the [Contributor Covenant](https://www.contributor-covenant.org),
+version 2.1, available at
+<https://www.contributor-covenant.org/version/2/1/code_of_conduct.html>.
+
+Community Impact Guidelines were inspired by
+[Mozilla's code of conduct enforcement ladder](https://github.com/mozilla/inclusion).
+
+For answers to common questions about this code of conduct, see the FAQ at
+<https://www.contributor-covenant.org/faq>. Translations are available at
+<https://www.contributor-covenant.org/translations>.

{boost_skill_cli-1.0.256 → boost_skill_cli-1.0.258}/CONTRIBUTING.md

@@ -97,6 +97,12 @@ list, and neither should be added to it.
 | `refurb boost_cli` | modernization smells the ruff families miss, zero findings |
 | `scripts/lock_toolchain.py --check` | the hash-pinned toolchain matches its `.in` declarations |
 
+## Code of conduct
+
+Participation is governed by the [Code of Conduct](CODE_OF_CONDUCT.md)
+(Contributor Covenant 2.1). Conduct reports go through the private reporting
+form linked there, never a public issue.
+
 ## Ground rules
 
 - **Stdlib only** at runtime. No third-party imports in `boost_cli/`.
@@ -147,6 +153,10 @@ also keeps line-adjacent conflicts rare.
 Branch from `main`, keep PRs focused, and write the PR description in the
 commit message (it becomes the release notes via release-drafter).
 
+[`.github/PULL_REQUEST_TEMPLATE.md`](.github/PULL_REQUEST_TEMPLATE.md)
+pre-fills the checklist — chiefly `make check` and the generated-file
+regeneration, which are the two things that most often send a PR back.
+
 ## Release safety — require branches be up to date
 
 Every merge to `main` cuts a PyPI release, and two PRs that are each green in

{boost_skill_cli-1.0.256 → boost_skill_cli-1.0.258}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: boost-skill-cli
-Version: 1.0.256
+Version: 1.0.258
 Summary: boost — Homebrew for AI coding skills
 Author: Jonathan Reyes
 License: GNU GENERAL PUBLIC LICENSE

{boost_skill_cli-1.0.256 → boost_skill_cli-1.0.258}/boost_cli/_version.py

@@ -18,7 +18,7 @@ version_tuple: tuple[int | str, ...]
 commit_id: str | None
 __commit_id__: str | None
 
-__version__ = version = '1.0.256'
-__version_tuple__ = version_tuple = (1, 0, 256)
+__version__ = version = '1.0.258'
+__version_tuple__ = version_tuple = (1, 0, 258)
 
 __commit_id__ = commit_id = None

{boost_skill_cli-1.0.256 → boost_skill_cli-1.0.258}/boost_skill_cli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: boost-skill-cli
-Version: 1.0.256
+Version: 1.0.258
 Summary: boost — Homebrew for AI coding skills
 Author: Jonathan Reyes
 License: GNU GENERAL PUBLIC LICENSE

{boost_skill_cli-1.0.256 → boost_skill_cli-1.0.258}/boost_skill_cli.egg-info/SOURCES.txt

@@ -9,6 +9,7 @@
 .stylelintrc.json
 .vale.ini
 CLAUDE.md
+CODE_OF_CONDUCT.md
 CONTRIBUTING.md
 LICENSE
 MANIFEST.in
@@ -428,6 +429,7 @@ tests/unit/test_check_anchors.py
 tests/unit/test_claude_settings.py
 tests/unit/test_cliparse.py
 tests/unit/test_command_reference_fresh.py
+tests/unit/test_community_health_files.py
 tests/unit/test_config.py
 tests/unit/test_dense.py
 tests/unit/test_dense_fallback.py

{boost_skill_cli-1.0.256 → boost_skill_cli-1.0.258}/setup.cfg

@@ -10,6 +10,8 @@ also_copy =
 	index.html
 	README.md
 	.github/
+	CONTRIBUTING.md
+	CODE_OF_CONDUCT.md
 
 [egg_info]
 tag_build = 

boost_skill_cli-1.0.258/tests/unit/test_community_health_files.py

@@ -0,0 +1,90 @@
+"""Unit test: the GitHub community-health files exist and are wired up.
+
+A malformed issue form does not error anywhere a human will see — GitHub just
+silently falls back to a blank issue, and the template quietly stops existing.
+Same for a PR template GitHub cannot find because it was moved. These are the
+cheap structural checks that catch that class of breakage.
+
+Read by hand rather than with PyYAML, which is not a dependency of this repo;
+``scripts/check_required_checks.py`` sets the same precedent for workflow YAML.
+"""
+from __future__ import annotations
+
+import re
+from pathlib import Path
+
+import pytest
+
+ROOT = Path(__file__).resolve().parents[2]
+TEMPLATES = ROOT / ".github" / "ISSUE_TEMPLATE"
+
+pytestmark = pytest.mark.skipif(
+    not (ROOT / ".github").is_dir(),
+    reason="repo-root .github not reachable (e.g. mutation sandbox)")
+
+# The set GitHub actually renders. A typo here ("textbox", "check") is accepted
+# by no parser and reported by nothing — the field just vanishes from the form.
+FIELD_TYPES = {"markdown", "input", "textarea", "dropdown", "checkboxes"}
+
+FORMS = ["bug_report.yml", "feature_request.yml"]
+
+
+def form_text(name: str) -> str:
+    return (TEMPLATES / name).read_text(encoding="utf-8")
+
+
+@pytest.mark.parametrize("name", FORMS)
+def test_each_issue_form_exists_and_is_named(name):
+    text = form_text(name)
+    # GitHub requires both at the top level; without them the file is ignored.
+    assert re.search(r"^name:\s*\S", text, re.M), "%s has no name:" % name
+    assert re.search(r"^description:\s*\S", text, re.M), "%s has no description:" % name
+    assert re.search(r"^body:\s*$", text, re.M), "%s has no body:" % name
+
+
+@pytest.mark.parametrize("name", FORMS)
+def test_every_field_declares_a_type_github_renders(name):
+    types = re.findall(r"^  - type:\s*(\S+)\s*$", form_text(name), re.M)
+    assert types, "%s declares no fields" % name
+    assert set(types) <= FIELD_TYPES, "unknown field type in %s: %s" % (
+        name, sorted(set(types) - FIELD_TYPES))
+
+
+@pytest.mark.parametrize("name", FORMS)
+def test_field_ids_are_unique(name):
+    # Duplicate ids make GitHub drop one of the fields, silently.
+    ids = re.findall(r"^    id:\s*(\S+)\s*$", form_text(name), re.M)
+    assert len(ids) == len(set(ids)), "duplicate field id in %s" % name
+
+
+def test_the_bug_form_asks_for_the_diagnostics_that_make_a_bug_reproducible():
+    # The whole point of the form over a blank issue: `boost doctor` and the
+    # exact command are required, so triage does not start with two questions.
+    text = form_text("bug_report.yml")
+    assert "boost doctor" in text
+    assert "boost log --crashes" in text
+    assert text.count("required: true") >= 4
+
+
+def test_security_reports_are_routed_away_from_public_issues():
+    advisory = "security/advisories/new"
+    assert advisory in form_text("bug_report.yml"), \
+        "the bug form must say where a vulnerability goes instead"
+    assert advisory in (TEMPLATES / "config.yml").read_text(encoding="utf-8")
+
+
+def test_the_pr_template_is_where_github_looks_for_it():
+    template = ROOT / ".github" / "PULL_REQUEST_TEMPLATE.md"
+    assert template.is_file(), "GitHub only auto-fills from this exact path"
+    text = template.read_text(encoding="utf-8")
+    assert "make check" in text
+    # The generated-file checklist is the item that most often sends a PR back.
+    for generated in ("build_roadmap.py", "build_command_reference.py",
+                      "build_registries.py"):
+        assert generated in text
+
+
+def test_the_code_of_conduct_is_linked_from_contributing():
+    assert (ROOT / "CODE_OF_CONDUCT.md").is_file()
+    assert "CODE_OF_CONDUCT.md" in (ROOT / "CONTRIBUTING.md").read_text(
+        encoding="utf-8"), "an unlinked code of conduct is one nobody reads"

{boost_skill_cli-1.0.256 → boost_skill_cli-1.0.258}/tests/unit/test_logs.py

@@ -378,3 +378,96 @@ class TestUtcTimestamps:
         finally:
             monkeypatch.delenv("TZ", raising=False)
             time.tzset()
+
+
+# ── `boost log --crashes`, the listing branch ────────────────────────────────
+#
+# Only the empty state was covered. Everything below it — the glob's reverse
+# sort, the `command:` summary extraction, the OSError fallback and the --limit
+# cut — could regress without a single test noticing.
+
+def _seed_crash(stamp: str, command: str = "boost install foo") -> pathlib.Path:
+    """Write a crash report shaped like the real one logs.py produces."""
+    paths.logs_dir().mkdir(parents=True, exist_ok=True)
+    report = paths.logs_dir() / ("crash-%s.log" % stamp)
+    report.write_text(
+        "boost crash report\n"
+        "version:  0.0.0\n"
+        "command:  %s\n"
+        "\ntraceback:\nRuntimeError: boom\n" % command,
+        encoding="utf-8")
+    return report
+
+
+def test_log_crashes_lists_each_report_with_its_command(boost):
+    _seed_crash("20260101-101010", "boost install foo")
+    _seed_crash("20260102-202020", "boost tap o/r")
+    res = boost("log", "--crashes")
+
+    assert "crash reports in" in res.out
+    assert "crash-20260101-101010.log  command:  boost install foo" in res.out
+    assert "crash-20260102-202020.log  command:  boost tap o/r" in res.out
+    assert "view one with:  cat " in res.out
+    assert "no crash reports" not in res.out
+
+
+def test_log_crashes_lists_newest_first(boost):
+    _seed_crash("20260101-101010")
+    _seed_crash("20260303-303030")
+    out_lines = [ln for ln in boost("log", "--crashes").out.splitlines()
+                 if "crash-2026" in ln]
+    assert [ln.split()[0] for ln in out_lines] == [
+        "crash-20260303-303030.log", "crash-20260101-101010.log"]
+
+
+def test_log_crashes_honours_the_limit(boost):
+    for stamp in ("20260101-010101", "20260202-020202", "20260303-030303"):
+        _seed_crash(stamp)
+    res = boost("log", "--crashes", "-n", "2")
+    assert res.out.count("crash-2026") == 2
+    # The two kept are the newest, not simply the first two the glob returned.
+    assert "crash-20260303-030303.log" in res.out
+    assert "crash-20260202-020202.log" in res.out
+    assert "crash-20260101-010101.log" not in res.out
+
+
+def test_log_crashes_tolerates_a_report_with_no_command_line(boost):
+    paths.logs_dir().mkdir(parents=True, exist_ok=True)
+    (paths.logs_dir() / "crash-20260404-040404.log").write_text(
+        "truncated before the command line got written\n", encoding="utf-8")
+    res = boost("log", "--crashes")
+    assert "crash-20260404-040404.log" in res.out
+
+
+def test_log_crashes_survives_an_unreadable_report(boost):
+    # A directory where a file should be: read_text raises IsADirectoryError on
+    # POSIX and PermissionError on Windows — both OSError, which is exactly the
+    # fallback's contract. It must still list the entry, not abort the command.
+    _seed_crash("20260505-050505")
+    (paths.logs_dir() / "crash-20260606-060606.log").mkdir(parents=True)
+    res = boost("log", "--crashes")
+    assert "crash-20260606-060606.log" in res.out
+    assert "crash-20260505-050505.log  command:  boost install foo" in res.out
+
+
+def test_a_real_crash_shows_up_in_the_listing(boost, monkeypatch):
+    # End-to-end across the writer and the reader: whatever logs.py records is
+    # what `--crashes` has to be able to parse back out.
+    from boost_cli import cli
+    real_dispatch = cli._dispatch
+    crashed = []
+
+    def crash_once(name, argv, soft=False):
+        # Only the first invocation blows up; `log --crashes` still has to run
+        # for real. monkeypatch.undo() is not an option here — it would also
+        # revert the sandbox fixture's $HOME and read the developer's own logs.
+        if not crashed:
+            crashed.append(name)
+            raise RuntimeError("boom")
+        return real_dispatch(name, argv, soft=soft)
+
+    monkeypatch.setattr(cli, "_dispatch", crash_once)
+    boost("count", expect=70)
+    res = boost("log", "--crashes")
+    assert crashed == ["count"]
+    assert "command:  boost count" in res.out