wealthbox-cli 2.4.0__tar.gz → 2.4.1__tar.gz

{wealthbox_cli-2.4.0 → wealthbox_cli-2.4.1}/.github/workflows/ci.yml

@@ -50,6 +50,27 @@ jobs:
       - run: uv sync --extra dev
       - run: uv run mypy src/
 
+  smoke:
+    # Install the built wheel in isolation WITHOUT dev dependencies and run the
+    # entrypoint, so a missing runtime dependency (e.g. a module-level import of
+    # a package typer no longer pulls in) is caught before publish. The normal
+    # test job always has dev deps present and cannot catch this.
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-latest, windows-latest]
+    steps:
+      - uses: actions/checkout@v6
+      - uses: astral-sh/setup-uv@v8.1.0
+        with:
+          python-version: "3.12"
+      - name: Build and smoke-test clean install
+        shell: bash
+        run: |
+          uv build
+          uv run --isolated --no-project --with "$(ls dist/*.whl)" wbox --version
+          uv run --isolated --no-project --with "$(ls dist/*.whl)" wbox notes --help
+
   skill-ref-drift:
     needs: [lint, test]
     runs-on: ubuntu-latest
@@ -63,7 +84,7 @@ jobs:
       - run: git diff --exit-code -- src/wealthbox_tools/skills/wealthbox-crm/references/
 
   publish:
-    needs: [lint, test, typecheck, skill-ref-drift]
+    needs: [lint, test, typecheck, smoke, skill-ref-drift]
     if: startsWith(github.ref, 'refs/tags/v')
     runs-on: ubuntu-latest
     permissions:

{wealthbox_cli-2.4.0 → wealthbox_cli-2.4.1}/CHANGELOG.md

@@ -4,6 +4,28 @@ All notable changes to `wealthbox-cli` are documented here. The format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project
 adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.4.1] - 2026-06-12
+
+Patch release fixing a startup crash in 2.4.0. The `cli/_factory.py` module
+(introduced in the 2.4.0 refactor) imported `click` at module level to
+annotate a `TyperGroup` subclass, but `click` is only referenced in type
+annotations. On installs where `typer` (>=0.26) does not pull in `click` as a
+transitive dependency, `wbox` crashed on launch with
+`ModuleNotFoundError: No module named 'click'` — the same failure class fixed
+for `skill_ref_gen` in 2.3.1. This was not caught by CI because the test
+environment always has `click` present via the dev dependencies.
+
+### Fixed
+- `wbox` startup crash (`ModuleNotFoundError: click`) on clean installs that
+  lack `click`. The `import click` in `cli/_factory.py` is now guarded by
+  `TYPE_CHECKING` (it is only used in annotations, which are not evaluated at
+  runtime under `from __future__ import annotations`).
+
+### Internal
+- CI gains a `smoke` job that installs the built wheel in isolation **without
+  dev dependencies** and runs `wbox --version`, so a missing-runtime-dependency
+  startup crash can no longer reach PyPI. The `publish` job now depends on it.
+
 ## [2.4.0] - 2026-06-12
 
 The notable user-facing change in this release is **differentiated CLI exit

{wealthbox_cli-2.4.0 → wealthbox_cli-2.4.1}/CONTRIBUTING.md

@@ -167,9 +167,10 @@ Pull requests and pushes to `main` run GitHub Actions CI:
 - **Lint:** `ruff check src/ tests/`
 - **Test:** `pytest` across Python 3.11, 3.12, 3.13 (ubuntu) + 3.12 (windows); coverage gate `--cov-fail-under=91` on ubuntu
 - **Typecheck:** `mypy src/` (strict)
+- **Smoke:** installs the built wheel in isolation (no dev deps) and runs `wbox --version` / `wbox notes --help`, catching missing-runtime-dependency startup crashes
 - **Skill-ref drift:** regenerates refs and asserts no git diff
 
-All four jobs must pass before merging.
+All jobs must pass before merging; `publish` (on `v*` tags) additionally gates on lint, test, typecheck, and smoke.
 
 ---
 

{wealthbox_cli-2.4.0 → wealthbox_cli-2.4.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: wealthbox-cli
-Version: 2.4.0
+Version: 2.4.1
 Summary: CLI and client library for the Wealthbox CRM API
 Project-URL: Homepage, https://github.com/massive-value/wealthbox-cli
 Project-URL: Documentation, https://massive-value.github.io/wealthbox-cli/

{wealthbox_cli-2.4.0 → wealthbox_cli-2.4.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "wealthbox-cli"
-version = "2.4.0"
+version = "2.4.1"
 description = "CLI and client library for the Wealthbox CRM API"
 readme = "README.md"
 requires-python = ">=3.11"

{wealthbox_cli-2.4.0 → wealthbox_cli-2.4.1}/src/wealthbox_tools/cli/_factory.py

@@ -3,9 +3,8 @@ from __future__ import annotations
 import inspect
 from collections.abc import Callable
 from dataclasses import dataclass, field
-from typing import Any
+from typing import TYPE_CHECKING, Any
 
-import click
 import typer
 from typer.core import TyperGroup
 
@@ -14,6 +13,12 @@ from wealthbox_tools.models import CategoryListQuery, CategoryType
 from ._client import handle_errors, run_client, run_client_with_comments
 from ._format import OutputFormat, output_get_result, output_result
 
+if TYPE_CHECKING:
+    # click is only referenced in type annotations below; importing it at
+    # runtime would crash on installs where typer (>=0.26) does not pull in
+    # click. Keep it type-only. See the 2.3.1 fix for the same class of bug.
+    import click
+
 
 class _GetShortcutGroup(TyperGroup):
     """Typer Group that routes numeric first arguments to the ``get`` subcommand."""

{wealthbox_cli-2.4.0 → wealthbox_cli-2.4.1}/uv.lock

@@ -783,7 +783,7 @@ wheels = [
 
 [[package]]
 name = "wealthbox-cli"
-version = "2.4.0"
+version = "2.4.1"
 source = { editable = "." }
 dependencies = [
     { name = "httpx" },