GeezerVison

Summary

• Directory creation: Replaced .ok() on create_dir_all for .socket/ and blobs/ with proper error handling that returns exit 1 with descriptive message.
• Blob write failures: Replaced .ok() on tokio::fs::write with error handling. A write failure now sets a patch_failed flag, breaks out of the file loop, and skips manifest insertion for that patch.
• Base64 decode failures: Replaced if let Ok(decoded) with match that reports decode errors and skips the patch.
• Exit code: Changed from always returning 0 to returning 1 when patches_failed > 0 or auto-apply fails.
• JSON accuracy: "status" now returns "partial_failure" when downloads fail. "applied" field now reflects actual apply outcome instead of always reporting patches_added.
• One-off mode: Applied the same error handling patterns to save_and_apply_patch.

Addresses findings HIGH-1 (blob write .ok()), HIGH-2 (base64 decode silently skipped), HIGH-4 (directory creation .ok()), HIGH-5 (always exit 0), and HIGH-6 (get --json overstates applied count).

Test plan

• cargo check -p socket-patch-cli compiles
• cargo test -p socket-patch-cli passes
• Manual: run get on a read-only filesystem — should exit 1 with directory creation error
• Manual: run get --json when apply partially fails — "applied" should be 0, "status" should be "partial_failure"

🤖 Generated with Claude Code