boost-skill-cli 1.2.88__tar.gz → 1.2.89__tar.gz

{boost_skill_cli-1.2.88/boost_skill_cli.egg-info → boost_skill_cli-1.2.89}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: boost-skill-cli
-Version: 1.2.88
+Version: 1.2.89
 Summary: boost — Homebrew for AI coding skills
 Author: Jonathan Reyes
 License-Expression: Apache-2.0

{boost_skill_cli-1.2.88 → boost_skill_cli-1.2.89}/boost_cli/_version.py

@@ -18,7 +18,7 @@ version_tuple: tuple[int | str, ...]
 commit_id: str | None
 __commit_id__: str | None
 
-__version__ = version = '1.2.88'
-__version_tuple__ = version_tuple = (1, 2, 88)
+__version__ = version = '1.2.89'
+__version_tuple__ = version_tuple = (1, 2, 89)
 
 __commit_id__ = commit_id = None

{boost_skill_cli-1.2.88 → boost_skill_cli-1.2.89}/boost_cli/commands/configuration.py

@@ -394,8 +394,14 @@ def cmd_create(argv) -> int:
     journal.log("create", name, path=str(target))
     out.ok("created %s" % _tilde(skill_md))
     if args.install:
+        owner = store.existing_skill_owner(name)
+        if owner and not out.confirm(
+                "%s is already installed from %s — replace it?" % (name, owner)):
+            out.warn("not installed: %s is already installed from %s" % (name, owner))
+            out.dim("  next: edit it, then `boost import %s`" % _tilde(target))
+            return 0
         res = store.install_from_path(target, name=name)
-        out.ok("installed %s → %s" % (name, _tilde(res.dest)))
+        out.ok("%s %s → %s" % ("replaced" if owner else "installed", name, _tilde(res.dest)))
         if res.linked:
             out.info("linked: " + ", ".join(agents.display_name(a) for a in res.linked))
     else:

{boost_skill_cli-1.2.88 → boost_skill_cli-1.2.89}/boost_cli/commands/hooks.py

@@ -26,7 +26,7 @@ from __future__ import annotations
 
 from .. import cliparse
 from ..core import claude_settings as cs
-from ..core import hookhost, journal
+from ..core import hookhost, journal, util
 from ..core import output as out
 from ..errors import BoostError
 
@@ -50,7 +50,7 @@ def cmd_hooks(argv) -> int:
                    help="settings scope (default: project; list shows both)")
     p.add_argument("-m", "--matcher",
                    help="Claude matcher, e.g. 'startup|resume|clear'")
-    p.add_argument("--timeout", type=int, default=10,
+    p.add_argument("--timeout", type=util.positive_int, default=10,
                    help="hook timeout in seconds (default: 10)")
     args = p.parse_args(argv)
 

{boost_skill_cli-1.2.88 → boost_skill_cli-1.2.89}/boost_cli/commands/intelligence.py

@@ -108,6 +108,13 @@ def _save_state(fname: str, data: dict) -> None:
     (paths.state_dir() / fname).write_text(json.dumps(data, indent=2) + "\n", encoding="utf-8")
 
 
+def _save_generated_fallback(name: str, text: str, reason: str) -> None:
+    fallback = Path.cwd() / ("%s.SKILL.md" % name)
+    fallback.write_text(text, encoding="utf-8")
+    out.warn("not installed: %s" % reason)
+    out.info("generated skill saved to %s" % _tilde(fallback))
+
+
 def _install_generated(name: str, text: str) -> None:
     """Write a generated SKILL.md to a tempdir and install it as `name`.
 
@@ -115,7 +122,19 @@ def _install_generated(name: str, text: str) -> None:
     must not be allowed to propagate out of the ``with`` block and delete it —
     that would discard an LLM generation the user paid for, with nothing on disk
     to recover. On a refusal, save it beside the cwd and say where it went.
+
+    ``install_from_path`` refuses to overwrite a *pinned* name, but silently
+    replaces an unpinned one — the common case, since it doubles as the
+    ``boost import``/``reinstall`` path. Ask before doing that here, so
+    ``distill``/``infer``/``absorb --install`` don't quietly destroy an
+    existing install and relabel its lock provenance ``local``.
     """
+    owner = store.existing_skill_owner(name)
+    if owner and not out.confirm(
+            "%s is already installed from %s — replace it?" % (name, owner)):
+        _save_generated_fallback(
+            name, text, "%s is already installed from %s" % (name, owner))
+        return
     with tempfile.TemporaryDirectory(prefix="boost-gen-") as td:
         src = Path(td) / name
         src.mkdir()
@@ -123,12 +142,9 @@ def _install_generated(name: str, text: str) -> None:
         try:
             res = store.install_from_path(src, name=name, tap_label="local")
         except BoostError as err:
-            fallback = Path.cwd() / ("%s.SKILL.md" % name)
-            fallback.write_text(text, encoding="utf-8")
-            out.warn("not installed: %s" % err.message)
-            out.info("generated skill saved to %s" % _tilde(fallback))
+            _save_generated_fallback(name, text, err.message)
             return
-    out.ok("installed %s → %s" % (name, _tilde(res.dest)))
+    out.ok("%s %s → %s" % ("replaced" if owner else "installed", name, _tilde(res.dest)))
     if res.linked:
         out.info(out.role("linked into: %s" % ", ".join(res.linked), "muted"))
 
@@ -560,7 +576,7 @@ def cmd_absorb(argv: list[str]) -> int:
         description="Turn recurring chat-history patterns into a skill")
     ap.add_argument("--history", metavar="PATH",
                     help="history .jsonl file or directory of them")
-    ap.add_argument("--limit", type=int, default=5, metavar="N",
+    ap.add_argument("--limit", type=util.positive_int, default=5, metavar="N",
                     help="max patterns to absorb (default: 5)")
     ap.add_argument("--install", action="store_true",
                     help="install the generated skill")
@@ -1195,7 +1211,7 @@ def cmd_chat(argv: list[str]) -> int:
         description="Ask about skills in plain language")
     ap.add_argument("question", nargs="*", metavar="QUESTION",
                     help="ask once and exit; omit for an interactive session")
-    ap.add_argument("-k", "--limit", type=int, default=chat_engine.TOP_K,
+    ap.add_argument("-k", "--limit", type=util.positive_int, default=chat_engine.TOP_K,
                     metavar="N", help="candidate skills to consider (default %d)"
                                       % chat_engine.TOP_K)
     ap.add_argument("--no-sources", action="store_true",

{boost_skill_cli-1.2.88 → boost_skill_cli-1.2.89}/boost_cli/commands/quality.py

@@ -758,8 +758,8 @@ def cmd_lint(argv):
                     help="installed skill name(s), or a path to a skill "
                          "directory / its SKILL.md")
     ap.add_argument("--tap", metavar="TAP", help="lint every skill in a tap's clone")
-    ap.add_argument("--min", type=int, default=40, dest="min_score", metavar="N",
-                    help="minimum passing score (default 40)")
+    ap.add_argument("--min", type=util.score_int, default=40, dest="min_score", metavar="N",
+                    help="minimum passing score, 0-100 (default 40)")
     ap.add_argument("--json", action="store_true")
     args = ap.parse_args(argv)
 
@@ -1205,7 +1205,7 @@ def cmd_changelog(argv):
         prog="boost changelog",
         description="Show a skill's upstream change history")
     ap.add_argument("name", metavar="NAME")
-    ap.add_argument("-n", type=int, default=20, metavar="N",
+    ap.add_argument("-n", type=util.positive_int, default=20, metavar="N",
                     help="number of entries (default 20)")
     args = ap.parse_args(argv)
 

{boost_skill_cli-1.2.88 → boost_skill_cli-1.2.89}/boost_cli/commands/taps.py

@@ -129,7 +129,7 @@ def cmd_tap(argv) -> int:
     p.add_argument("--type", choices=("skill", "rule", "workflow"),
                    help="with --catalog: restrict to one item type")
     p.add_argument("--category", help="with --catalog: restrict to one category")
-    p.add_argument("--limit", type=int, metavar="N",
+    p.add_argument("--limit", type=util.positive_int, metavar="N",
                    help="with --catalog: only the top N registries by est. size")
     p.add_argument("--include-lists", action="store_true",
                    help="with --catalog: also tap awesome-list/index repos")

{boost_skill_cli-1.2.88 → boost_skill_cli-1.2.89}/boost_cli/core/store.py

@@ -1250,6 +1250,23 @@ def install_from_path(src_dir: Path, name: str | None = None,
     return res
 
 
+def existing_skill_owner(name: str) -> str | None:
+    """Tap label of the skill already installed as ``name``, else None.
+
+    For the generated-install paths (``create``/``distill``/``infer``/``absorb``
+    ``--install``) to warn before silently replacing an *unpinned* install and
+    flipping its lock provenance to ``local`` — the loss ``list`` would
+    otherwise never show. ``install_from_path``'s own gate only refuses a
+    *pinned* name (its docstring: that refusal is deliberately not extended to
+    the unpinned case, since this is also the re-import path for ``boost
+    import`` / ``boost reinstall``). Callers that generate a brand-new skill,
+    rather than re-importing an existing one, use this to catch that gap
+    themselves.
+    """
+    existing = lockfile.get_skill(name)
+    return existing.get("tap") if existing else None
+
+
 def uninstall(name: str) -> dict:
     """Uninstall ``name`` whatever its kind (skill, rule, workflow).
 

{boost_skill_cli-1.2.88 → boost_skill_cli-1.2.89}/boost_cli/core/util.py

@@ -167,6 +167,25 @@ def positive_int(s: str) -> int:
     return v
 
 
+def score_int(s: str) -> int:
+    """argparse ``type=`` for ``lint --min``: an int in [0, 100].
+
+    Scores are capped at 100 (``score_skill``), so a bare ``type=int`` let
+    ``--min 500`` through and failed every skill, and a negative ``--min``
+    passed every skill silently rather than being rejected as meaningless.
+    Unlike :func:`positive_int`, 0 is a legitimate value here — "fail nobody".
+    """
+    import argparse
+
+    try:
+        v = int(s)
+    except (TypeError, ValueError):
+        raise argparse.ArgumentTypeError("invalid int value: %r" % s) from None
+    if not 0 <= v <= 100:
+        raise argparse.ArgumentTypeError("must be between 0 and 100")
+    return v
+
+
 def now_iso() -> str:
     """Return UTC now as ``'2026-07-16T01:00:00Z'`` (what ``rel_time`` parses)."""
     return datetime.now(UTC).strftime("%Y-%m-%dT%H:%M:%SZ")

{boost_skill_cli-1.2.88 → boost_skill_cli-1.2.89/boost_skill_cli.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: boost-skill-cli
-Version: 1.2.88
+Version: 1.2.89
 Summary: boost — Homebrew for AI coding skills
 Author: Jonathan Reyes
 License-Expression: Apache-2.0

{boost_skill_cli-1.2.88 → boost_skill_cli-1.2.89}/docs/commands.html

@@ -835,7 +835,7 @@
         <div class="args-h">Options</div>
         <div class="args">
           <div class="arg"><code>--tap TAP</code><span>lint every skill in a tap&#x27;s clone</span></div>
-          <div class="arg"><code>--min N</code><span>minimum passing score (default 40)</span></div>
+          <div class="arg"><code>--min N</code><span>minimum passing score, 0-100 (default 40)</span></div>
           <div class="arg"><code>--json</code><span></span></div>
         </div>
       </section>

boost_skill_cli-1.2.89/docs/roadmap/items/audit-create-distill-infer-absorb-install-silently-replace-an-inst.md

@@ -0,0 +1,81 @@
+---
+id: audit-create-distill-infer-absorb-install-silently-replace-an-inst
+board: code
+section: dx
+status: inflight
+category: Safety · Bug
+complexity: S
+impact: High
+wow: 2
+note: a tap skill becomes the TODO scaffold, lock flips to local — and the message says installed
+order: 206
+owner: loop/generated-install-overwrite
+pr: 716
+title: "create/distill/infer/absorb <code>--install</code> silently replace an installed (unpinned) skill and flip its lock provenance to local"
+---
+The generated-skill install path never checks whether the name is already taken. Verified: after
+<code>install brainstorming</code> (sickn33 tap), <code>create brainstorming --install</code>
+printed <em>"&#10003; installed brainstorming &rarr; ~/.agents/skills/brainstorming"</em> and the
+store SKILL.md became the TODO scaffold (<code>description: "TODO: describe when this skill should
+trigger"</code>), lock now <code>tap=local v0.1.0</code>. <code>distill --install -o
+brainstorming &hellip;</code> likewise: lock <code>tap=local v1.0.0</code> with
+<code>source_dir</code> pointing at a deleted <code>/tmp/&hellip;/boost-gen-&hellip;</code>
+tempdir. Exit 0, no warning either time, and repeating any <code>--install</code> run re-copies
+over the store with no notice. Only a <b>pinned</b> skill is protected — the unpinned default is
+silently destroyed, with provenance flipped so the loss is invisible to <code>list</code>.
+
+The gate belongs in the callers, not the store: <code>store.install_from_path</code>'s docstring
+(<code>store.py:1175-1177</code>) deliberately omits the already-installed refusal because it
+serves re-import/reinstall. Neither <code>_install_generated</code>
+(<code>intelligence.py:103-123</code>) nor <code>cmd_create</code>
+(<code>configuration.py:370-371</code>) checks <code>lockfile.get_skill</code>.
+
+Fix: in <code>_install_generated</code> and <code>cmd_create</code>, check
+<code>lockfile.get_skill(name)</code> before <code>store.install_from_path</code>: refuse with a
+hint ("already installed from &lt;tap&gt;; <code>boost uninstall</code> first, pass
+<code>--force</code>, or pick another name") or <code>out.confirm</code>; print "replaced" rather
+than "installed" when overwriting is confirmed. Keep <code>install_from_path</code> itself
+unchanged. Regenerate <code>docs/commands.html</code> if a <code>--force</code> flag is added to
+create/distill/infer/absorb.
+
+Found by the 2026-08 CLI audit (cluster <code>generated-install-overwrites</code>); repro in the
+audit log.
+
+<br><br><b>Fixed, per the verified recommendation.</b> Added <code>store.existing_skill_owner(name)</code>
+(a thin <code>lockfile.get_skill</code> lookup returning the owning tap, core-level so both callers
+and any future one share it) and used it in <code>_install_generated</code>
+(<code>intelligence.py</code>, shared by distill/infer/absorb) and <code>cmd_create</code>
+(<code>configuration.py</code>): when a name is already installed, ask with <code>out.confirm</code>
+before replacing (mirrors the existing <code>_write_generated</code> overwrite-confirm for the
+non-<code>--install</code> path) rather than adding a new <code>--force</code> flag, print
+&ldquo;replaced&rdquo; instead of &ldquo;installed&rdquo; when confirmed, and on refusal save the
+generated skill to cwd exactly as the existing policy-refusal branch already did (factored into one
+<code>_save_generated_fallback</code> helper). <code>install_from_path</code> itself is unchanged, as
+specified. No CLI surface changed, so <code>docs/commands.html</code> needed no regeneration
+(confirmed via <code>build_command_reference.py --check</code>). New unit tests cover
+<code>existing_skill_owner</code> directly; new functional tests cover the confirmed-replace and
+declined-decline paths for both <code>create --install</code> and
+<code>distill/infer/absorb --install</code>, verified manually end-to-end against a disposable
+<code>BOOST_HOME</code> in both the declined and <code>BOOST_ASSUME_YES</code> branches.
+
+<b>Gate status: implementation verified locally short of the full <code>make check</code>.</b> This
+session's sandbox has no PyPI network access (pip/uv both get 403 from the index), so the
+hash-pinned toolchain in <code>requirements/*.txt</code> could not be installed and
+<code>mutmut</code>/<code>vulture</code>/<code>xenon</code>/<code>interrogate</code>/<code>refurb</code>/<code>codespell</code>/<code>actionlint</code>/<code>zizmor</code>/<code>import-linter</code>
+are unavailable here. Verified instead with what the image does carry: <code>ruff check</code>,
+<code>mypy</code> and <code>pyright</code> clean on every changed file (mypy's two pre-existing
+<code>pkg.py</code> errors are untouched by this change); the full <code>tests/unit</code> +
+<code>tests/functional</code> suite passes under Python 3.12 (three failures are pre-existing and
+unrelated — two <code>test_catalog.py</code> permission tests and one <code>doctor</code> log-write
+test all rely on a non-root <code>chmod</code> denial, which does not hold running as root here).
+CI carries real network access and should run the full gate on the PR; left <code>inflight</code>
+rather than <code>shipped</code> until that's confirmed green.
+
+<b>CI confirmed green on <code>dc5582b</code>.</b> All 41 checks passed, including <code>lint</code>,
+all six <code>mutation-shard</code> jobs plus the aggregating <code>mutation</code> check,
+<code>evals</code>, the full <code>tests</code> matrix (Linux/macOS/Windows ×
+3.12/3.13/3.14, plus the 3.14 free-threaded canary), <code>install-smoke</code>,
+<code>patch-coverage</code> and <code>branch-current</code>. No merge conflicts
+(<code>mergeable_state: clean</code>), no open review threads. Left <code>inflight</code> rather than
+<code>shipped</code> since it still isn't merged — a human reviews and merges per the run's
+instructions.

{boost_skill_cli-1.2.88 → boost_skill_cli-1.2.89}/docs/roadmap/items/audit-name-miss-errors-unknown-tap-qualifier-unnamed-no-close-matc.md

@@ -2,7 +2,7 @@
 id: audit-name-miss-errors-unknown-tap-qualifier-unnamed-no-close-matc
 board: code
 section: dx
-status: inflight
+status: shipped
 category: CLI · UX
 complexity: S
 impact: Med

{boost_skill_cli-1.2.88 → boost_skill_cli-1.2.89}/docs/roadmap/items/audit-six-count-flags-tap-chat-absorb-lint-changelog-hooks-skip-ut.md

@@ -2,15 +2,15 @@
 id: audit-six-count-flags-tap-chat-absorb-lint-changelog-hooks-skip-ut
 board: code
 section: dx
-status: planned
+status: inflight
 category: CLI · Bug
 complexity: S
 impact: Med
 wow: 1
 note: chat -k 0 fabricates "nothing matches"; hooks --timeout -5 lands in settings.json
 order: 234
-owner:
-pr:
+owner: loop/count-flags-reject-zero-negative
+pr: 717
 title: "Six count flags (<code>tap</code>/<code>chat</code>/<code>absorb</code>/<code>lint</code>/<code>changelog</code>/<code>hooks</code>) accept 0 and negatives"
 ---
 The same defect class the shipped negative-limit-inverts-log-pulse-output card fixed, at six sites

{boost_skill_cli-1.2.88 → boost_skill_cli-1.2.89}/docs/roadmap.html

@@ -11707,7 +11707,7 @@ log.</p></details>
       </article>
 
       <article class="cap rcard" id="audit-create-distill-infer-absorb-install-silently-replace-an-inst">
-        <div class="head"><span class="pill planned">Planned</span><span class="cat">Safety · Bug</span></div>
+        <div class="head"><span class="pill inflight">In flight</span><span class="cat">Safety · Bug</span></div>
         <h3>create/distill/infer/absorb <code>--install</code> silently replace an installed (unpinned) skill and flip its lock provenance to local</h3>
         <p>The generated-skill install path never checks whether the name is already taken. Verified: after
 <code>install brainstorming</code> (sickn33 tap), <code>create brainstorming --install</code>
@@ -11735,7 +11735,46 @@ unchanged. Regenerate <code>docs/commands.html</code> if a <code>--force</code>
 create/distill/infer/absorb.
 
 Found by the 2026-08 CLI audit (cluster <code>generated-install-overwrites</code>); repro in the
-audit log.</p>
+audit log.
+
+<br><br><b>Fixed, per the verified recommendation.</b> Added <code>store.existing_skill_owner(name)</code>
+(a thin <code>lockfile.get_skill</code> lookup returning the owning tap, core-level so both callers
+and any future one share it) and used it in <code>_install_generated</code>
+(<code>intelligence.py</code>, shared by distill/infer/absorb) and <code>cmd_create</code>
+(<code>configuration.py</code>): when a name is already installed, ask with <code>out.confirm</code>
+before replacing (mirrors the existing <code>_write_generated</code> overwrite-confirm for the
+non-<code>--install</code> path) rather than adding a new <code>--force</code> flag, print
+&ldquo;replaced&rdquo; instead of &ldquo;installed&rdquo; when confirmed, and on refusal save the
+generated skill to cwd exactly as the existing policy-refusal branch already did (factored into one
+<code>_save_generated_fallback</code> helper). <code>install_from_path</code> itself is unchanged, as
+specified. No CLI surface changed, so <code>docs/commands.html</code> needed no regeneration
+(confirmed via <code>build_command_reference.py --check</code>). New unit tests cover
+<code>existing_skill_owner</code> directly; new functional tests cover the confirmed-replace and
+declined-decline paths for both <code>create --install</code> and
+<code>distill/infer/absorb --install</code>, verified manually end-to-end against a disposable
+<code>BOOST_HOME</code> in both the declined and <code>BOOST_ASSUME_YES</code> branches.
+
+<b>Gate status: implementation verified locally short of the full <code>make check</code>.</b> This
+session's sandbox has no PyPI network access (pip/uv both get 403 from the index), so the
+hash-pinned toolchain in <code>requirements/*.txt</code> could not be installed and
+<code>mutmut</code>/<code>vulture</code>/<code>xenon</code>/<code>interrogate</code>/<code>refurb</code>/<code>codespell</code>/<code>actionlint</code>/<code>zizmor</code>/<code>import-linter</code>
+are unavailable here. Verified instead with what the image does carry: <code>ruff check</code>,
+<code>mypy</code> and <code>pyright</code> clean on every changed file (mypy's two pre-existing
+<code>pkg.py</code> errors are untouched by this change); the full <code>tests/unit</code> +
+<code>tests/functional</code> suite passes under Python 3.12 (three failures are pre-existing and
+unrelated — two <code>test_catalog.py</code> permission tests and one <code>doctor</code> log-write
+test all rely on a non-root <code>chmod</code> denial, which does not hold running as root here).
+CI carries real network access and should run the full gate on the PR; left <code>inflight</code>
+rather than <code>shipped</code> until that's confirmed green.
+
+<b>CI confirmed green on <code>dc5582b</code>.</b> All 41 checks passed, including <code>lint</code>,
+all six <code>mutation-shard</code> jobs plus the aggregating <code>mutation</code> check,
+<code>evals</code>, the full <code>tests</code> matrix (Linux/macOS/Windows ×
+3.12/3.13/3.14, plus the 3.14 free-threaded canary), <code>install-smoke</code>,
+<code>patch-coverage</code> and <code>branch-current</code>. No merge conflicts
+(<code>mergeable_state: clean</code>), no open review threads. Left <code>inflight</code> rather than
+<code>shipped</code> since it still isn't merged — a human reviews and merges per the run's
+instructions.</p>
         <div class="meta">
           <span class="m">Complexity <b>S</b></span>
           <span class="m hi">Impact <b>High</b></span>
@@ -12424,8 +12463,9 @@ CLI audit (cluster <code>missing-json-flags</code>); repro in the audit log.</p>
       </article>
 
       <article class="cap rcard" id="audit-name-miss-errors-unknown-tap-qualifier-unnamed-no-close-matc">
-        <div class="head"><span class="pill inflight">In flight</span><span class="cat">CLI · UX</span></div>
+        <div class="head"><span class="pill shipped">Shipped</span><span class="cat">CLI · UX</span></div>
         <h3>Name-miss errors: unknown tap qualifier never named, no close-match hint, tap tokens pollute suggestions</h3>
+        <details class="cardbody"><summary>Write-up</summary>
         <p>Three gaps in one resolver make name misses unhelpful across <code>install</code>, <code>info</code>,
 <code>cat</code>, <code>preview</code>, <code>deps</code>, <code>log</code>, <code>home</code>,
 <code>explain</code> and <code>changelog</code>. First: <code>install nosuch/tap:brainstorming</code>
@@ -12455,7 +12495,7 @@ the bare name; otherwise run <code>search(bare)</code> (optionally tap-restricte
 search comes back empty. In <code>_common</code>'s not-installed error, append
 <code>get_close_matches</code> over <code>lockfile.all_installed()</code> names. No flag or summary
 changes, so no doc regeneration. Found by the 2026-08 CLI audit (cluster
-<code>name-miss-error-hints</code>); repro in the audit log.</p>
+<code>name-miss-error-hints</code>); repro in the audit log.</p></details>
         <div class="meta">
           <span class="m">Complexity <b>S</b></span>
           <span class="m">Impact <b>Med</b></span>
@@ -12465,7 +12505,7 @@ changes, so no doc regeneration. Found by the 2026-08 CLI audit (cluster
       </article>
 
       <article class="cap rcard" id="audit-six-count-flags-tap-chat-absorb-lint-changelog-hooks-skip-ut">
-        <div class="head"><span class="pill planned">Planned</span><span class="cat">CLI · Bug</span></div>
+        <div class="head"><span class="pill inflight">In flight</span><span class="cat">CLI · Bug</span></div>
         <h3>Six count flags (<code>tap</code>/<code>chat</code>/<code>absorb</code>/<code>lint</code>/<code>changelog</code>/<code>hooks</code>) accept 0 and negatives</h3>
         <p>The same defect class the shipped negative-limit-inverts-log-pulse-output card fixed, at six sites
 that kept bare <code>type=int</code> although <code>util.positive_int</code> exists and sibling

{boost_skill_cli-1.2.88 → boost_skill_cli-1.2.89}/tests/functional/test_cli_chat.py

@@ -108,3 +108,11 @@ class TestLimit:
     def test_limit_bounds_the_candidates(self, boost, tapped):
         payload = json.loads(boost("chat", "--json", "-k", "2", "skills").out)
         assert len(payload["skills"]) <= 2
+
+    def test_limit_must_be_positive_int(self, boost, tapped):
+        # -k 0 used to slice every retrieved hit to nothing and fabricate
+        # "Nothing in the tapped catalogue matches that" for a real query.
+        r = boost("chat", "-k", "0", "skills", expect=2)
+        assert "must be >= 1" in r.err
+        r = boost("chat", "-k", "-1", "skills", expect=2)
+        assert "must be >= 1" in r.err

{boost_skill_cli-1.2.88 → boost_skill_cli-1.2.89}/tests/functional/test_cli_configuration.py

@@ -255,6 +255,26 @@ class TestCreate:
         assert lock["skills"]["inst-skill"]["tap"] == "local"
         assert lock["skills"]["inst-skill"]["version"] == "0.1.0"
 
+    def test_install_flag_replaces_confirmed_overwrite(self, boost, installed,
+                                                        tmp_path):
+        # `installed` already put brainstorming on disk from the fixture tap —
+        # `create brainstorming --install` must not silently clobber it and
+        # relabel its lock provenance `local`.
+        r = boost("create", "brainstorming", "--dir", tmp_path, "--install")
+        assert "replaced brainstorming" in r.out
+        lock = json.loads(paths.lockfile_path().read_text(encoding="utf-8"))
+        assert lock["skills"]["brainstorming"]["tap"] == "local"
+        assert lock["skills"]["brainstorming"]["version"] == "0.1.0"
+
+    def test_install_flag_declined_overwrite_leaves_it_installed(
+            self, boost, installed, tmp_path, monkeypatch):
+        monkeypatch.delenv("BOOST_ASSUME_YES")
+        r = boost("create", "brainstorming", "--dir", tmp_path, "--install")
+        assert "not installed: brainstorming is already installed from fixture-tap" in r.out
+        assert (tmp_path / "brainstorming" / "SKILL.md").is_file()
+        lock = json.loads(paths.lockfile_path().read_text(encoding="utf-8"))
+        assert lock["skills"]["brainstorming"]["tap"] == "fixture-tap"
+
 
 # ---------------------------------------------------------------- policy
 

{boost_skill_cli-1.2.88 → boost_skill_cli-1.2.89}/tests/functional/test_cli_hooks.py

@@ -82,3 +82,14 @@ class TestHooksErrors:
     def test_list_empty(self, boost, sandbox):
         r = boost("hooks", "list")
         assert "no boost-managed hooks" in r.out
+
+    def test_timeout_must_be_positive_int(self, boost, sandbox):
+        # --timeout -5 used to write a negative timeout straight into
+        # settings.json; --timeout 0 is no better (Gemini's is milliseconds,
+        # fed to setTimeout — a hook that expires before it runs).
+        r = boost("hooks", "add", "SessionStart", "-c", "x", "-n", "y",
+                  "-s", "global", "--timeout", "-5", expect=2)
+        assert "must be >= 1" in r.err
+        r = boost("hooks", "add", "SessionStart", "-c", "x", "-n", "y",
+                  "-s", "global", "--timeout", "0", expect=2)
+        assert "must be >= 1" in r.err

{boost_skill_cli-1.2.88 → boost_skill_cli-1.2.89}/tests/functional/test_cli_intelligence.py

@@ -114,6 +114,31 @@ class TestDistill:
         assert entry["tap"] == "local"
         assert entry["version"] == "1.0.0"
 
+    def test_install_replaces_an_existing_unpinned_skill_when_confirmed(
+            self, boost, installed):
+        # `installed` already put brainstorming on disk from the fixture tap —
+        # BOOST_ASSUME_YES (the sandbox default) auto-confirms the replace.
+        r = boost("distill", "tdd-workflow", "commit-messages", "-o",
+                  "brainstorming", "--install")
+        assert "replaced brainstorming" in r.out
+        lock = json.loads(paths.lockfile_path().read_text(encoding="utf-8"))
+        entry = lock["skills"]["brainstorming"]
+        assert entry["tap"] == "local"
+        assert entry["version"] == "1.0.0"
+
+    def test_install_declined_leaves_the_existing_skill_and_saves_the_generation(
+            self, boost, installed, tmp_path, monkeypatch):
+        monkeypatch.chdir(tmp_path)
+        monkeypatch.delenv("BOOST_ASSUME_YES")
+        r = boost("distill", "tdd-workflow", "commit-messages", "-o",
+                  "brainstorming", "--install")
+        assert "not installed: brainstorming is already installed from fixture-tap" in r.out
+        assert "generated skill saved to" in r.out
+        fallback = tmp_path / "brainstorming.SKILL.md"
+        assert fallback.is_file()
+        lock = json.loads(paths.lockfile_path().read_text(encoding="utf-8"))
+        assert lock["skills"]["brainstorming"]["tap"] == "fixture-tap"
+
     def test_refused_install_saves_the_generation_instead_of_losing_it(
             self, boost, tapped, tmp_path, monkeypatch):
         """A refused install must leave the generated skill on disk.
@@ -299,6 +324,14 @@ class TestAbsorb:
         assert "no chat history found under ~/.claude — nothing to absorb" in r.out
         assert "--history PATH" in r.out
 
+    def test_limit_must_be_positive_int(self, boost, sandbox):
+        # --limit 0 used to slice every recurring pattern away and fabricate
+        # "no recurring patterns" even when some were found.
+        r = boost("absorb", "--limit", "0", expect=2)
+        assert "must be >= 1" in r.err
+        r = boost("absorb", "--limit", "-1", expect=2)
+        assert "must be >= 1" in r.err
+
     def test_pattern_surfaced_from_projects_dir(self, boost, sandbox):
         hist = sandbox / ".claude" / "projects" / "proj"
         hist.mkdir(parents=True)

{boost_skill_cli-1.2.88 → boost_skill_cli-1.2.89}/tests/functional/test_cli_quality.py

@@ -336,6 +336,13 @@ class TestLint:
         r = boost("lint", "--min", "0")
         assert "1 skill passes lint (min 0)" in r.out
 
+    def test_min_out_of_0_to_100_range_is_rejected(self, boost, sandbox):
+        # --min 500 used to fail every skill outright since scores cap at 100.
+        r = boost("lint", "--min", "500", expect=2)
+        assert "must be between 0 and 100" in r.err
+        r = boost("lint", "--min", "-1", expect=2)
+        assert "must be between 0 and 100" in r.err
+
     def test_missing_fields_error_rc1_and_json(self, boost, sandbox, tmp_path):
         d = tmp_path / "noname"
         d.mkdir()
@@ -1173,6 +1180,16 @@ class TestChangelog:
         r = boost("changelog", "local-one")
         assert "no upstream history — local-one was imported locally" in r.out
 
+    def test_n_must_be_positive_int(self, boost, installed):
+        # -n 0 used to print no log lines and claim "no history found" even
+        # when history exists; -n -1 is passed straight to `git log -n -1`,
+        # which git treats as "unlimited" — a surprise the flag's own help
+        # ("number of entries") never suggested.
+        r = boost("changelog", "brainstorming", "-n", "0", expect=2)
+        assert "must be >= 1" in r.err
+        r = boost("changelog", "brainstorming", "-n", "-1", expect=2)
+        assert "must be >= 1" in r.err
+
 
 # ── attest ───────────────────────────────────────────────────────────────
 

{boost_skill_cli-1.2.88 → boost_skill_cli-1.2.89}/tests/functional/test_cli_taps.py

@@ -200,6 +200,14 @@ class TestTapCatalog:
                   expect=1)
         assert "no catalog registries match" in r.out
 
+    def test_limit_must_be_positive_int(self, boost, sandbox):
+        # --limit -1 used to silently drop the last registry (entries[:-1])
+        # rather than being rejected as meaningless.
+        r = boost("tap", "--catalog", "--limit", "-1", "--dry-run", expect=2)
+        assert "must be >= 1" in r.err
+        r = boost("tap", "--catalog", "--limit", "0", "--dry-run", expect=2)
+        assert "must be >= 1" in r.err
+
     def test_real_tap_from_catalog(self, boost, sandbox, fixture_tap_src,
                                    monkeypatch):
         from boost_cli.core import registry

{boost_skill_cli-1.2.88 → boost_skill_cli-1.2.89}/tests/unit/test_store.py

@@ -735,6 +735,35 @@ class TestInstallFromPath:
         assert ei.value.message == "%s has no SKILL.md" % empty
 
 
+class TestExistingSkillOwner:
+    """`install_from_path` refuses to overwrite a *pinned* name but silently
+    replaces an unpinned one — deliberately, since it doubles as the
+    `boost import`/`reinstall` path. The generated-install callers
+    (create/distill/infer/absorb --install) use this to catch the unpinned
+    case themselves before calling in, since `install_from_path` won't.
+    """
+
+    def test_none_when_nothing_installed(self, sandbox):
+        assert store.existing_skill_owner("nobody-home") is None
+
+    def test_returns_the_installed_tap(self, sandbox, tmp_path):
+        src = tmp_path / "dir-name-skill"
+        src.mkdir()
+        (src / "SKILL.md").write_text(
+            "---\nname: owned\nversion: 1.0.0\n---\n\nBody\n", encoding="utf-8")
+        store.install_from_path(src, tap_label="acme/repo")
+        assert store.existing_skill_owner("owned") == "acme/repo"
+
+    def test_none_after_uninstall(self, sandbox, tmp_path):
+        src = tmp_path / "dir-name-skill"
+        src.mkdir()
+        (src / "SKILL.md").write_text(
+            "---\nname: transient\nversion: 1.0.0\n---\n\nBody\n", encoding="utf-8")
+        store.install_from_path(src)
+        store.uninstall("transient")
+        assert store.existing_skill_owner("transient") is None
+
+
 class TestUninstall:
     def test_uninstall_removes_everything(self, brainstorming):
         result = store.uninstall("brainstorming")