boost-skill-cli 1.2.90__tar.gz → 1.2.91__tar.gz

{boost_skill_cli-1.2.90/boost_skill_cli.egg-info → boost_skill_cli-1.2.91}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: boost-skill-cli
-Version: 1.2.90
+Version: 1.2.91
 Summary: boost — Homebrew for AI coding skills
 Author: Jonathan Reyes
 License-Expression: Apache-2.0

{boost_skill_cli-1.2.90 → boost_skill_cli-1.2.91}/boost_cli/_version.py

@@ -18,7 +18,7 @@ version_tuple: tuple[int | str, ...]
 commit_id: str | None
 __commit_id__: str | None
 
-__version__ = version = '1.2.90'
-__version_tuple__ = version_tuple = (1, 2, 90)
+__version__ = version = '1.2.91'
+__version_tuple__ = version_tuple = (1, 2, 91)
 
 __commit_id__ = commit_id = None

{boost_skill_cli-1.2.90 → boost_skill_cli-1.2.91}/boost_cli/cli.py

@@ -329,6 +329,14 @@ def main(argv: list[str] | None = None) -> int:
             sys.stdout.close()
         rc = 0
         return rc
+    except SystemExit as e:
+        # argparse (--help, usage errors) exits via SystemExit, which is a
+        # BaseException and so skips the `except Exception` below entirely —
+        # left uncaught, the trail journaled the preset rc=70 for every
+        # benign --help and usage exit instead of the real 0 or 2.
+        code = e.code
+        rc = 0 if code is None else code if isinstance(code, int) else 1
+        raise
     except Exception as e:
         report = logs.write_crash_report(e, [name, *rest])
         if logs.is_debug():

{boost_skill_cli-1.2.90 → boost_skill_cli-1.2.91}/boost_cli/commands/discovery.py

@@ -1897,9 +1897,12 @@ def cmd_count(argv):
     dpath = _discovery_path()
     if dpath.exists():
         try:
-            discovery = len(json.loads(dpath.read_text(encoding="utf-8")).get("items") or [])
+            data = json.loads(dpath.read_text(encoding="utf-8"))
         except (json.JSONDecodeError, OSError):
-            discovery = None
+            data = None
+        if isinstance(data, dict):
+            items = data.get("items")
+            discovery = len(items) if isinstance(items, list) else None
     if args.as_json:
         print(json.dumps({"installed": installed_n,
                           "skills": by_kind["skill"], "rules": by_kind["rule"],

{boost_skill_cli-1.2.90 → boost_skill_cli-1.2.91}/boost_cli/commands/intelligence.py

@@ -164,8 +164,11 @@ def _write_generated(dest: Path, text: str) -> bool:
     if dest.exists() and not out.confirm("overwrite %s?" % _tilde(dest)):
         out.info("aborted — %s left untouched" % _tilde(dest))
         return False
-    dest.parent.mkdir(parents=True, exist_ok=True)
-    dest.write_text(text, encoding="utf-8")
+    try:
+        dest.parent.mkdir(parents=True, exist_ok=True)
+        dest.write_text(text, encoding="utf-8")
+    except OSError as exc:
+        raise BoostError("cannot write %s: %s" % (dest, exc)) from exc
     out.ok("wrote %s" % _tilde(dest))
     return True
 

{boost_skill_cli-1.2.90 → boost_skill_cli-1.2.91}/boost_cli/commands/team.py

@@ -595,7 +595,7 @@ def cmd_replay(argv) -> int:
     args = p.parse_args(argv)
 
     if args.action == "list":
-        history = lockfile.history_list()
+        history, skipped = lockfile.history_list(with_skipped=True)
         if args.json:
             print(json.dumps(history, indent=2))
             return 0
@@ -603,6 +603,9 @@ def cmd_replay(argv) -> int:
             print(out.empty_state(
                 "no lock history yet — every install/uninstall snapshots "
                 "the lock file", wrap=True))
+            if skipped:
+                out.dim("%d unreadable snapshot%s skipped"
+                        % (skipped, "" if skipped == 1 else "s"))
             return 0
         rows = []
         prev_items = None
@@ -631,6 +634,9 @@ def cmd_replay(argv) -> int:
                          str(h["count"]), delta))
         out.table(rows, headers=("ID", "WHEN", "ITEMS", "Δ"))
         print()
+        if skipped:
+            out.dim("%d unreadable snapshot%s skipped"
+                    % (skipped, "" if skipped == 1 else "s"))
         out.dim("inspect with `boost replay show <id>` · restore with `boost replay rollback <id>`")
         return 0
 

{boost_skill_cli-1.2.90 → boost_skill_cli-1.2.91}/boost_cli/core/catalogbundle.py

@@ -134,8 +134,8 @@ def export_bundle(dest: Path) -> dict:
         "entries": entries,
     }
 
-    dest.parent.mkdir(parents=True, exist_ok=True)
     try:
+        dest.parent.mkdir(parents=True, exist_ok=True)
         with tarfile.open(dest, "w:gz") as tar:
             _add_bytes(tar, MANIFEST_NAME,
                        json.dumps(manifest, indent=1).encode("utf-8"))

{boost_skill_cli-1.2.90 → boost_skill_cli-1.2.91}/boost_cli/core/lockfile.py

@@ -259,13 +259,23 @@ def all_installed() -> dict[str, dict]:
     return {kind: lock[section] for kind, section in SECTIONS}
 
 
-def history_list() -> list[dict]:
-    """[{id, path, updated, count}] oldest→newest."""
+def history_list(*, with_skipped: bool = False):
+    """[{id, path, updated, count}] oldest→newest.
+
+    An entry that exists but fails to parse is skipped rather than raised —
+    one bad snapshot must not hide the rest of the history. Pass
+    ``with_skipped=True`` to also learn how many were dropped, so a caller
+    can say so instead of the id silently vanishing; the default keeps the
+    plain-list return existing callers (and their equality assertions) rely
+    on.
+    """
     out = []
+    skipped = 0
     for p in _history_files():
         try:
             data = json.loads(p.read_text(encoding="utf-8"))
         except (json.JSONDecodeError, OSError):
+            skipped += 1
             continue
         out.append({
             "id": p.stem.replace("lock-", ""),
@@ -274,17 +284,22 @@ def history_list() -> list[dict]:
             # All three sections: a snapshot holding one rule is not empty.
             "count": sum(len(data.get(s, {})) for _k, s in SECTIONS),
         })
-    return out
+    return (out, skipped) if with_skipped else out
 
 
 def history_read(hist_id: str) -> dict:
     """Return the parsed lock snapshot for history entry ``hist_id``.
 
-    Raises BoostError (with a `boost replay` hint) if no such entry.
+    Raises BoostError (with a `boost replay` hint) if no such entry, or if
+    the entry exists but is not valid JSON.
     """
+    from ..errors import BoostError
     p = paths.lock_history_dir() / ("lock-%s.json" % hist_id)
     if not p.exists():
-        from ..errors import BoostError
         raise BoostError("no lock history entry %s" % hist_id,
                         hint="list entries with `boost replay`")
-    return json.loads(p.read_text(encoding="utf-8"))
+    try:
+        return json.loads(p.read_text(encoding="utf-8"))
+    except (json.JSONDecodeError, OSError) as exc:
+        raise BoostError("lock history entry %s is unreadable: %s" % (hist_id, exc),
+                        hint="list other entries with `boost replay`") from exc

{boost_skill_cli-1.2.90 → boost_skill_cli-1.2.91}/boost_cli/core/serve.py

@@ -928,6 +928,9 @@ def serve_http(host: str, port: int) -> None:
     """Bind and run the catalog server until interrupted (blocks)."""
     try:
         httpd = ThreadingHTTPServer((host, port), _CatalogHandler)
+    except OverflowError as e:
+        raise BoostError("invalid --port %r — must be 0-65535" % (port,),
+                        hint="pick a port in that range") from e
     except OSError as e:
         # Windows can report a bind against an already-LISTENing port as
         # WinError 10013 (WSAEACCES) rather than EADDRINUSE.

{boost_skill_cli-1.2.90 → boost_skill_cli-1.2.91/boost_skill_cli.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: boost-skill-cli
-Version: 1.2.90
+Version: 1.2.91
 Summary: boost — Homebrew for AI coding skills
 Author: Jonathan Reyes
 License-Expression: Apache-2.0

{boost_skill_cli-1.2.90 → boost_skill_cli-1.2.91}/docs/DEBUGGING.md

@@ -53,6 +53,10 @@ line at `WARNING`, so it stands out when you scan the log:
 … WARNING boost: done: boost install missing -> rc=1 in 48ms
 ```
 
+This applies to `--help` and usage errors too, which argparse raises as a
+`SystemExit` rather than returning normally: the trail logs their *real* exit
+code (`0` for `--help`, `2` for a usage error), not a placeholder.
+
 ### Turning up console verbosity
 
 Global flags go **before** the command name (`boost --debug install foo`); a

{boost_skill_cli-1.2.90 → boost_skill_cli-1.2.91}/docs/roadmap/items/audit-drift-findings.md

@@ -2,12 +2,12 @@
 id: audit-drift-findings
 board: code
 section: health
-status: inflight
+status: shipped
 category: CLI · Bug
 complexity: S
 impact: Med
 wow: 1
-note: fix up in #719, awaiting CI + review — sandbox couldn't run the full mutation/eval/smoke gate locally (no PyPI egress)
+note: fixed in #719 — all required CI (lint, eval, full test matrix, smoke, mutation) passed and it landed in main via the train-10 batch
 order: 264
 owner: loop/drift-source-missing-hint
 pr: 719

{boost_skill_cli-1.2.90 → boost_skill_cli-1.2.91}/docs/roadmap/items/audit-five-exit-70-crashes-on-bad-paths-data-catalog-export-serve.md

@@ -2,15 +2,15 @@
 id: audit-five-exit-70-crashes-on-bad-paths-data-catalog-export-serve
 board: code
 section: dx
-status: planned
+status: shipped
 category: CLI · Bug
 complexity: M
 impact: High
 wow: 1
 note: five user-reachable bad paths/values end in exit 70 + a crash report instead of one line
 order: 204
-owner:
-pr:
+owner: loop/exit70-hardening
+pr: 721
 title: "Five exit-70 crashes on bad paths/data: <code>catalog --export</code>, <code>serve --port</code>, <code>count</code>, <code>replay</code>, <code>infer -o</code>"
 ---
 Five user-reachable conditions escape their guards and become <em>&ldquo;Error: boost hit an unexpected error: &hellip;&rdquo;</em> + <em>&ldquo;a crash report was written to &hellip;&rdquo;</em>, exit 70, where a framed BoostError belongs &mdash; the same class as the shipped two-crashes-that-should-have-been-messages item, five new sites, all verified. <code>catalog --export /nonexistent-dir-zz/b.tgz</code> &rarr; PermissionError (the <code>mkdir</code> at <code>boost_cli/core/catalogbundle.py:119</code> sits <em>before</em> the <code>except OSError</code> at <code>:127</code>). <code>serve --port 99999</code> (or <code>-1</code>) &rarr; <em>&ldquo;OverflowError: bind(): port must be 0-65535.&rdquo;</em> (<code>serve.py:931</code> catches OSError, and OverflowError is not one). <code>count</code> with a list-shaped <code>cache/discovery.json</code> &rarr; <em>&ldquo;AttributeError: 'list' object has no attribute 'get'&rdquo;</em> (<code>commands/discovery.py:1839-1841</code> guards JSONDecodeError/OSError only &mdash; and the verifier's probe <code>{"items": 3}</code> also crashes with a TypeError, so both container levels need validating). <code>replay show</code>/<code>rollback</code> on an unparseable snapshot &rarr; JSONDecodeError from <code>lockfile.py:254</code>, while <code>replay list</code> silently skips the file (<code>:226-233</code>) so the user cannot see why an id vanished. <code>infer -o /dev/null/nope/SKILL.md</code> &rarr; NotADirectoryError from the unguarded mkdir/write in <code>commands/intelligence.py:128-136</code>.

{boost_skill_cli-1.2.90 → boost_skill_cli-1.2.91}/docs/roadmap/items/audit-log-findings.md

@@ -2,15 +2,15 @@
 id: audit-log-findings
 board: code
 section: dx
-status: planned
+status: shipped
 category: CLI · Bug
 complexity: S
 impact: Med
 wow: 1
-note: every --help and usage error is journaled as rc=70 at WARNING — real exits 0 and 2
+note: fixed — cli.main() now catches SystemExit and journals the real rc for --help/usage exits
 order: 275
-owner:
-pr:
+owner: loop/cli-log-rc70
+pr: 723
 title: "boost log: CLI audit findings (2026-08)"
 ---
 The diagnostic trail journals a crash code for exits that were fine. After

{boost_skill_cli-1.2.90 → boost_skill_cli-1.2.91}/docs/roadmap.html

@@ -6666,8 +6666,9 @@ excerpts at <code>:159-164</code>) to match. Found by the 2026-08 CLI audit (clu
       </article>
 
       <article class="cap rcard" id="audit-drift-findings">
-        <div class="head"><span class="pill inflight">In flight</span><span class="cat">CLI · Bug</span></div>
+        <div class="head"><span class="pill shipped">Shipped</span><span class="cat">CLI · Bug</span></div>
         <h3>boost drift: CLI audit findings (2026-08)</h3>
+        <details class="cardbody"><summary>Write-up</summary>
         <p><b>drift hints <code>boost update</code> for source-missing items whose tap was untapped — a
 guaranteed no-op.</b> After <code>untap Aaronontheweb/dotnet-cursor-rules</code>, drift reports
 <em>"dotnet-build (rule)&nbsp; source-missing&nbsp; boost update"</em>; running
@@ -6685,12 +6686,12 @@ entry's tap into <code>_drift_hint</code> (<code>quality.py:255-258</code>) and
 <code>boost tap &lt;tap&gt;</code> when that tap is not among the configured registries, keeping
 <code>boost update</code> only for a configured-but-uncloned tap. No flag changes, so
 <code>docs/commands.html</code> is untouched. Found by the 2026-08 CLI audit (cluster
-<code>drift-source-missing-hint</code>); repro in the audit log.</p>
+<code>drift-source-missing-hint</code>); repro in the audit log.</p></details>
         <div class="meta">
           <span class="m">Complexity <b>S</b></span>
           <span class="m">Impact <b>Med</b></span>
           <span class="m">Wow <b class="wow">★</b></span>
-          <span class="m">fix up in</span>
+          <span class="m">fixed in</span>
         </div>
       </article>
 
@@ -11658,15 +11659,16 @@ Found by the 2026-08 CLI audit (cluster <code>corrupt-json-clobbered</code>); re
       </article>
 
       <article class="cap rcard" id="audit-five-exit-70-crashes-on-bad-paths-data-catalog-export-serve">
-        <div class="head"><span class="pill planned">Planned</span><span class="cat">CLI · Bug</span></div>
+        <div class="head"><span class="pill shipped">Shipped</span><span class="cat">CLI · Bug</span></div>
         <h3>Five exit-70 crashes on bad paths/data: <code>catalog --export</code>, <code>serve --port</code>, <code>count</code>, <code>replay</code>, <code>infer -o</code></h3>
+        <details class="cardbody"><summary>Write-up</summary>
         <p>Five user-reachable conditions escape their guards and become <em>&ldquo;Error: boost hit an unexpected error: &hellip;&rdquo;</em> + <em>&ldquo;a crash report was written to &hellip;&rdquo;</em>, exit 70, where a framed BoostError belongs &mdash; the same class as the shipped two-crashes-that-should-have-been-messages item, five new sites, all verified. <code>catalog --export /nonexistent-dir-zz/b.tgz</code> &rarr; PermissionError (the <code>mkdir</code> at <code>boost_cli/core/catalogbundle.py:119</code> sits <em>before</em> the <code>except OSError</code> at <code>:127</code>). <code>serve --port 99999</code> (or <code>-1</code>) &rarr; <em>&ldquo;OverflowError: bind(): port must be 0-65535.&rdquo;</em> (<code>serve.py:931</code> catches OSError, and OverflowError is not one). <code>count</code> with a list-shaped <code>cache/discovery.json</code> &rarr; <em>&ldquo;AttributeError: 'list' object has no attribute 'get'&rdquo;</em> (<code>commands/discovery.py:1839-1841</code> guards JSONDecodeError/OSError only &mdash; and the verifier's probe <code>{"items": 3}</code> also crashes with a TypeError, so both container levels need validating). <code>replay show</code>/<code>rollback</code> on an unparseable snapshot &rarr; JSONDecodeError from <code>lockfile.py:254</code>, while <code>replay list</code> silently skips the file (<code>:226-233</code>) so the user cannot see why an id vanished. <code>infer -o /dev/null/nope/SKILL.md</code> &rarr; NotADirectoryError from the unguarded mkdir/write in <code>commands/intelligence.py:128-136</code>.
 
 Why it matters: each is an expected condition &mdash; a typo'd path, an out-of-range flag, one stale derived cache file &mdash; and each currently costs a crash log and exit 70. <code>count</code> is the quick always-safe summary and must not crash on one derived cache; a corrupt <code>discovery.json</code> that is invalid JSON already degrades correctly to <code>discovery: null</code>, so valid-JSON-wrong-shape crashing is pure guard-shape accident.
 
 Fix as one hardening sweep, per the verified recommendation: move the mkdir inside catalogbundle's OSError guard; validate <code>--port</code> in argparse (an ArgumentTypeError converter, exit 2) or catch OverflowError beside OSError in <code>serve_http</code>; in <code>cmd_count</code> check <code>isinstance(data, dict)</code> and <code>isinstance(items, list)</code> &rarr; discovery None; wrap <code>history_read</code>'s <code>json.loads</code> in a BoostError (<em>&ldquo;lock history entry &hellip; is unreadable&rdquo;</em>) and have <code>replay list</code> print one dim <em>&ldquo;N unreadable snapshot(s) skipped&rdquo;</em> line; wrap <code>_write_generated</code>'s mkdir/write_text in <code>except OSError</code> &rarr; BoostError. Unit-test each site. Docs: regenerate <code>docs/commands.html</code> (no flag/summary change).
 
-Found by the 2026-08 CLI audit (cluster <code>crashes-should-be-messages</code>); repro in the audit log. Verified 2026-08-31: all five reproduced with exit 70 and a crash report.</p>
+Found by the 2026-08 CLI audit (cluster <code>crashes-should-be-messages</code>); repro in the audit log. Verified 2026-08-31: all five reproduced with exit 70 and a crash report.</p></details>
         <div class="meta">
           <span class="m">Complexity <b>M</b></span>
           <span class="m hi">Impact <b>High</b></span>
@@ -13813,8 +13815,9 @@ covers three distinct look-alikes. Found by the 2026-08 CLI audit (cluster
       </article>
 
       <article class="cap rcard" id="audit-log-findings">
-        <div class="head"><span class="pill planned">Planned</span><span class="cat">CLI · Bug</span></div>
+        <div class="head"><span class="pill shipped">Shipped</span><span class="cat">CLI · Bug</span></div>
         <h3>boost log: CLI audit findings (2026-08)</h3>
+        <details class="cardbody"><summary>Write-up</summary>
         <p>The diagnostic trail journals a crash code for exits that were fine. After
 <code>boost edit --help</code> (real exit 0) and <code>boost edit</code> (a usage error, real exit 2),
 <code>boost log --diagnostics</code> shows <em>&ldquo;WARNING boost: done: boost edit --help -&gt; rc=70 in
@@ -13831,12 +13834,12 @@ journal for real crashes wades through a WARNING per <code>--help</code>. Fix: i
 <code>_run</code>, add <code>except SystemExit as e: rc = e.code if isinstance(e.code, int) else 1;
 raise</code> before the <code>finally</code>, so completion logs the real exit and WARNING stays meaningful.
 Update <code>docs/DEBUGGING.md</code> where it describes the trail. Found by the 2026-08 CLI audit
-(cluster <code>log-records-rc70</code>); repro in the audit log.</p>
+(cluster <code>log-records-rc70</code>); repro in the audit log.</p></details>
         <div class="meta">
           <span class="m">Complexity <b>S</b></span>
           <span class="m">Impact <b>Med</b></span>
           <span class="m">Wow <b class="wow">★</b></span>
-          <span class="m">every --help and usage error is journaled as rc=70 at WARNING — real exits 0 and 2</span>
+          <span class="m">fixed — cli.main() now catches SystemExit and journals the real rc for --help/usage exits</span>
         </div>
       </article>
 

{boost_skill_cli-1.2.90 → boost_skill_cli-1.2.91}/tests/functional/test_cli_discovery.py

@@ -1553,6 +1553,23 @@ class TestCount:
                                      "workflows": 0, "available": 0,
                                      "taps": 0, "discovery": None}
 
+    def test_list_shaped_discovery_json_counts_as_missing(self, boost, sandbox):
+        # Valid JSON, wrong top-level shape: the old code called .get("items")
+        # straight off the parsed value, so a top-level list crashed with
+        # AttributeError instead of degrading like the corrupt-JSON case above.
+        paths.ensure_dirs()
+        (paths.cache_dir() / "discovery.json").write_text("[1, 2, 3]", encoding="utf-8")
+        r = boost("count", "--json")
+        assert json.loads(r.out)["discovery"] is None
+
+    def test_non_list_items_field_counts_as_missing(self, boost, sandbox):
+        # {"items": 3}: "3 or []" evaluates truthy, so len(3) raised TypeError.
+        paths.ensure_dirs()
+        (paths.cache_dir() / "discovery.json").write_text(
+            json.dumps({"items": 3}), encoding="utf-8")
+        r = boost("count", "--json")
+        assert json.loads(r.out)["discovery"] is None
+
     def test_counts_rules_and_workflows_with_labels(self, boost, installed):
         # "installed 1" with a rule in the lock was a false total; the
         # breakdown appears once a non-skill kind is present.

{boost_skill_cli-1.2.90 → boost_skill_cli-1.2.91}/tests/functional/test_cli_intelligence.py

@@ -311,6 +311,17 @@ class TestInfer:
         r = boost("infer", "--path", "/nope/nowhere", expect=1)
         assert "is not a directory" in r.err
 
+    def test_unwritable_output_path_is_framed_not_a_crash(
+            self, boost, sandbox, py_project, tmp_path):
+        # -o pointed through a path component that is a file, not a
+        # directory: the mkdir/write used to run unguarded, so this escaped
+        # as a raw NotADirectoryError -> exit 70 crash report.
+        blocker = tmp_path / "not-a-dir"
+        blocker.write_text("", encoding="utf-8")
+        out_file = blocker / "nope" / "SKILL.md"
+        r = boost("infer", "--path", py_project, "-o", out_file, expect=1)
+        assert str(out_file) in r.err
+
 
 # ---------------------------------------------------------------- absorb
 

{boost_skill_cli-1.2.90 → boost_skill_cli-1.2.91}/tests/functional/test_cli_team.py

@@ -602,6 +602,27 @@ class TestReplay:
         r = boost("replay", "rollback", snap_id)
         assert "brainstorming is gone from every tap — cannot restore" in r.out
 
+    def test_corrupt_snapshot_is_framed_not_raw_and_list_names_it(
+            self, boost, tapped, tick_clock):
+        # Two installs (no uninstall) is enough to produce one snapshot.
+        boost("install", "brainstorming")
+        boost("install", "tdd-workflow")
+        history = lockfile.history_list()
+        corrupt_id = history[0]["id"]
+        (paths.lock_history_dir() / ("lock-%s.json" % corrupt_id)).write_text(
+            "not json", encoding="utf-8")
+
+        # show/rollback on the now-corrupt entry: a framed BoostError, not a
+        # raw JSONDecodeError traceback and exit 70.
+        r = boost("replay", "show", corrupt_id, expect=1)
+        assert "unreadable" in r.err
+
+        # list: the id doesn't just vanish — one line says how many were
+        # dropped, alongside the entries that still parse.
+        r = boost("replay", "list")
+        assert "1 unreadable snapshot skipped" in r.out
+        assert corrupt_id not in r.out
+
     def test_unknown_and_missing_id(self, boost, sandbox):
         r = boost("replay", "show", "99999999", expect=1)
         assert "no lock history entry 99999999" in r.err

{boost_skill_cli-1.2.90 → boost_skill_cli-1.2.91}/tests/unit/test_catalogbundle.py

@@ -460,6 +460,23 @@ class TestTheErrorPathsAreReachable:
             catalogbundle.export_bundle(blocked)
         assert "taken.tgz" in str(caught.value)
 
+    def test_an_uncreatable_parent_directory_names_the_path(
+            self, sandbox, tmp_path):
+        # The parent-dir mkdir used to run BEFORE the try/except OSError block,
+        # so a bad --export path (an intermediate path component that is a
+        # file, not a directory — the same PermissionError/NotADirectoryError
+        # shape a nonexistent-parent path on a read-only filesystem hits) blew
+        # past the guard as a raw OSError -> exit 70 crash report instead of a
+        # framed BoostError.
+        _tapped("acme/skills")
+        _cache("acme/skills")
+        blocker = tmp_path / "not-a-dir"
+        blocker.write_text("", encoding="utf-8")
+        dest = blocker / "sub" / "c.tgz"
+        with pytest.raises(BoostError) as caught:
+            catalogbundle.export_bundle(dest)
+        assert str(dest) in str(caught.value)
+
     def test_a_manifest_that_is_not_json_is_reported_as_malformed(
             self, sandbox, tmp_path):
         # A truncated download is still a valid gzip of a valid tar.

{boost_skill_cli-1.2.90 → boost_skill_cli-1.2.91}/tests/unit/test_errors_and_cli_table.py

@@ -110,6 +110,29 @@ def run_main(argv):
 VERSION_LINE = re.compile(r"^boost \S+$")
 
 
+class TestSystemExitLoggedWithRealRc:
+    """argparse raises SystemExit for --help and usage errors, which used to
+    skip every except clause in cli.main (SystemExit derives from
+    BaseException, not Exception) and leave the trail's preset rc=70 in the
+    `done:` line even though the real exit was 0 or 2."""
+
+    def test_subcommand_help_logs_rc_0_not_70(self, boost):
+        from boost_cli.core import logs
+        boost("install", "--help", expect=0)
+        line = logs.log_path().read_text(encoding="utf-8")
+        assert "done: boost install --help -> rc=0 in" in line
+        assert "rc=70" not in line
+        assert "WARNING" not in line  # clean exit stays at INFO
+
+    def test_subcommand_usage_error_logs_rc_2_not_70(self, boost):
+        from boost_cli.core import logs
+        boost("install", expect=2)  # missing required NAME positional
+        line = logs.log_path().read_text(encoding="utf-8")
+        assert "done: boost install -> rc=2 in" in line
+        assert "rc=70" not in line
+        assert "WARNING" in line  # non-zero rc still stands out
+
+
 class TestMainDispatch:
     def test_version_flag(self, sandbox, capsys):
         assert cli.main(["--version"]) == 0

{boost_skill_cli-1.2.90 → boost_skill_cli-1.2.91}/tests/unit/test_lockfile.py

@@ -233,6 +233,25 @@ class TestHistory:
         assert ei.value.message == "no lock history entry 20990101T000000Z"
         assert ei.value.hint == "list entries with `boost replay`"
 
+    def test_history_read_corrupt_entry_raises_boosterror_not_raw_jsonerror(self, sandbox):
+        # The entry exists (unlike the miss case above) but fails to parse —
+        # this used to escape as a raw JSONDecodeError, exit 70.
+        self._seed_history()
+        with pytest.raises(BoostError) as ei:
+            lockfile.history_read("19990101T000000Z")
+        assert "19990101T000000Z" in ei.value.message
+        assert "unreadable" in ei.value.message
+
+    def test_history_list_with_skipped_counts_unparseable_entries(self, sandbox):
+        self._seed_history()  # one corrupt entry alongside two valid ones
+        history, skipped = lockfile.history_list(with_skipped=True)
+        assert len(history) == 2
+        assert skipped == 1
+
+    def test_history_list_default_return_is_unchanged_by_with_skipped(self, sandbox):
+        self._seed_history()
+        assert lockfile.history_list() == lockfile.history_list(with_skipped=False)
+
     def test_history_list_skips_corrupt_without_stopping(self, sandbox):
         # a corrupt snapshot that sorts BEFORE a valid one must be skipped, not
         # halt the scan — pins the `continue` (a `break` would drop the later

{boost_skill_cli-1.2.90 → boost_skill_cli-1.2.91}/tests/unit/test_serve.py

@@ -258,6 +258,17 @@ class TestServeHttp:
             serve.serve_http("127.0.0.1", 1234)
         assert "cannot bind 127.0.0.1:1234" in ei.value.message
 
+    def test_out_of_range_port_is_framed_not_a_crash(self, monkeypatch):
+        # `--port 99999` (or -1) reaches the real socket.bind() as an
+        # OverflowError, not an OSError, so the OSError-only guard used to
+        # miss it entirely -> an unhandled OverflowError, exit 70.
+        monkeypatch.setattr(serve, "ThreadingHTTPServer",
+                            self._boom(OverflowError("bind(): port must be 0-65535.")))
+        with pytest.raises(BoostError) as ei:
+            serve.serve_http("127.0.0.1", 99999)
+        assert "99999" in ei.value.message
+        assert "0-65535" in ei.value.message
+
     def test_other_oserror_is_generic(self, monkeypatch):
         e = OSError(13, "Permission denied")
         monkeypatch.setattr(serve, "ThreadingHTTPServer", self._boom(e))