fix(import[common]) Reject --skip-group values containing '/'

why: A value like "bots/subteam" is added to skip_set as-is, but
filter_repo splits repo.owner on "/" and compares individual segments,
so slash-containing values silently have no effect on filtering.
what:
- Validate skip_groups_list before ImportOptions construction in _run_import
- Return 1 with a clear error for any group value containing "/"
- Add test_run_import_rejects_skip_group_with_slash in test_import_repos.py

Author: tony

src/vcspull/cli/import_cmd/_common.py

@@ -355,6 +355,19 @@ def _run_import(
 
     skip_groups_list: list[str] = skip_groups or []
 
+    # Validate skip_groups: each value must be a single path segment.
+    # A slash inside a value like "bots/subteam" would never match any
+    # owner segment (filter_repo splits repo.owner on "/" and compares
+    # individual parts), so it silently has no effect.
+    for group in skip_groups_list:
+        if "/" in group:
+            log.error(
+                "--skip-group values must be single path segments; "
+                "'/' is not allowed: %r",
+                group,
+            )
+            return 1
+
     try:
         options = ImportOptions(
             mode=import_mode,

tests/cli/test_import_repos.py

@@ -2024,6 +2024,52 @@ def test_codecommit_target_is_optional() -> None:
     assert args.target == "myprefix"
 
 
+def test_run_import_rejects_skip_group_with_slash(
+    tmp_path: pathlib.Path,
+    monkeypatch: pytest.MonkeyPatch,
+    caplog: pytest.LogCaptureFixture,
+) -> None:
+    """_run_import returns 1 when a --skip-group value contains a slash.
+
+    A value like 'bots/subteam' can never match any single owner path segment
+    (filter_repo splits repo.owner on '/' and compares segments individually),
+    so such values silently have no effect.  The early validation catches
+    this and returns a non-zero exit code.
+    """
+    import logging
+
+    caplog.set_level(logging.ERROR)
+    monkeypatch.setenv("HOME", str(tmp_path))
+
+    workspace = tmp_path / "repos"
+    workspace.mkdir()
+
+    result = _run_import(
+        MockImporter(),
+        service_name="gitlab",
+        target="my-group",
+        workspace=str(workspace),
+        mode="org",
+        language=None,
+        topics=None,
+        min_stars=0,
+        include_archived=False,
+        include_forks=False,
+        limit=100,
+        config_path_str=str(tmp_path / "config.yaml"),
+        dry_run=False,
+        yes=True,
+        output_json=False,
+        output_ndjson=False,
+        color="never",
+        skip_groups=["bots/subteam"],
+    )
+
+    assert result == 1
+    assert "bots/subteam" in caplog.text
+    assert "'/' is not allowed" in caplog.text
+
+
 def test_run_import_forwards_with_shared_and_skip_groups(
     tmp_path: pathlib.Path,
     monkeypatch: MonkeyPatch,