@happyvertical/smrt-cli 0.60.10 → 0.60.11

package/dist/{portability-CbMgEnD1.js → portability-sL8U5Hld.js}

@@ -1,9 +1,10 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { A as assertExternalArtifactPath, L as errorCode } from "./cli-CtRx1_yP.js";
+import { A as assertExternalArtifactPath, L as errorCode } from "./cli-DXIN1FbA.js";
 import { closeSync, constants, existsSync, fstatSync, linkSync, lstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, realpathSync, renameSync, rmSync, rmdirSync, statSync, writeFileSync } from "node:fs";
 import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { createHash, randomBytes } from "node:crypto";
+import { isLocalAssetLocator, localAssetKey, makeLocalAssetLocator } from "@happyvertical/smrt-assets/locator";
 //#region src/app/portability-assets.ts
 /**
 * Filesystem asset portability for logical export/import bundles.
@@ -102,45 +103,47 @@ function readBoundedDescriptor(descriptor, expectedSize, changedCode) {
 	if (readSync(descriptor, Buffer.allocUnsafe(1), 0, 1, null) !== 0) throw fail(changedCode);
 	return bytes;
 }
-function readRegularFileUnchecked(path, approvedRoot, onOpened) {
+function readRegularFileUnchecked(path, approvedRoot, onOpened, requireSingleLink = false) {
 	const lexicalPath = resolve(path);
 	if (!isInside(approvedRoot, lexicalPath)) throw fail("asset-outside-root");
 	const before = lstatSync(lexicalPath);
-	if (before.isSymbolicLink() || !before.isFile()) throw fail("asset-not-regular");
+	if (!before.isFile() || requireSingleLink && before.nlink !== 1) throw fail("asset-not-regular");
 	if (before.size > 67108864) throw fail("asset-too-large");
 	if (!isInside(approvedRoot, realpathSync(lexicalPath))) throw fail("asset-outside-root");
 	const noFollow = constants.O_NOFOLLOW ?? 0;
 	const descriptor = openSync(lexicalPath, constants.O_RDONLY | noFollow);
 	try {
 		const opened = fstatSync(descriptor);
-		if (!opened.isFile() || opened.size !== before.size) throw fail("asset-changed-during-read");
+		if (!opened.isFile() || opened.size !== before.size || requireSingleLink && opened.nlink !== 1) throw fail("asset-changed-during-read");
 		onOpened?.();
 		const openedPath = statSync(lexicalPath);
 		if (!isInside(approvedRoot, realpathSync(lexicalPath)) || openedPath.dev !== opened.dev || openedPath.ino !== opened.ino) throw fail("asset-changed-during-read");
 		const bytes = readBoundedDescriptor(descriptor, opened.size, "asset-changed-during-read");
 		const after = fstatSync(descriptor);
 		const afterPath = statSync(lexicalPath);
-		if (after.dev !== opened.dev || after.ino !== opened.ino || after.size !== opened.size || bytes.byteLength !== opened.size || !isInside(approvedRoot, realpathSync(lexicalPath)) || afterPath.dev !== opened.dev || afterPath.ino !== opened.ino) throw fail("asset-changed-during-read");
+		if (after.dev !== opened.dev || after.ino !== opened.ino || after.size !== opened.size || requireSingleLink && after.nlink !== 1 || bytes.byteLength !== opened.size || !isInside(approvedRoot, realpathSync(lexicalPath)) || afterPath.dev !== opened.dev || afterPath.ino !== opened.ino) throw fail("asset-changed-during-read");
 		return bytes;
 	} finally {
 		closeSync(descriptor);
 	}
 }
-function readRegularFile(path, approvedRoot, onOpened) {
+function readRegularFile(path, approvedRoot, onOpened, requireSingleLink = false) {
 	try {
-		return readRegularFileUnchecked(path, approvedRoot, onOpened);
+		return readRegularFileUnchecked(path, approvedRoot, onOpened, requireSingleLink);
 	} catch (error) {
 		if (isSanitizedFailure(error)) throw error;
 		throw fail("asset-changed-during-read");
 	}
 }
-function pathFromSourceUri(sourceUri) {
-	if (typeof sourceUri !== "string" || !sourceUri.startsWith("file://")) throw fail("unsupported-asset-source");
+function pathFromSourceUri(sourceUri, root) {
+	if (typeof sourceUri !== "string") throw fail("unsupported-asset-source");
 	try {
-		return fileURLToPath(sourceUri);
+		if (isLocalAssetLocator(sourceUri)) return join(root, localAssetKey(sourceUri));
+		if (sourceUri.startsWith("file://")) return fileURLToPath(sourceUri);
 	} catch {
 		throw fail("unsupported-asset-source");
 	}
+	throw fail("unsupported-asset-source");
 }
 function assetRows(tables) {
 	const table = tables.find((candidate) => candidate?.name === "assets");
@@ -175,7 +178,8 @@ function collectFilesystemAssets({ tables, sourceRoot, assetRoot, onSourceOpened
 		const payloadPath = payloadPathForKey(key);
 		if (payloadPaths.has(payloadPath)) throw fail("duplicate-payload-path");
 		payloadPaths.add(payloadPath);
-		const bytes = readRegularFile(pathFromSourceUri(row.source_uri), root, onSourceOpened);
+		const relativeLocator = typeof row.source_uri === "string" && isLocalAssetLocator(row.source_uri);
+		const bytes = readRegularFile(pathFromSourceUri(row.source_uri, root), root, onSourceOpened, relativeLocator);
 		totalBytes += bytes.byteLength;
 		if (totalBytes > 268435456) throw fail("asset-total-too-large");
 		const contentDigest = digestBytes(bytes);
@@ -183,7 +187,8 @@ function collectFilesystemAssets({ tables, sourceRoot, assetRoot, onSourceOpened
 			key,
 			byteLength: bytes.byteLength,
 			contentDigest,
-			payloadPath
+			payloadPath,
+			...relativeLocator ? { locator: "relative" } : {}
 		});
 		payloads.push({
 			path: payloadPath,
@@ -231,6 +236,7 @@ function verifyFilesystemAssets({ assetBundle, tables, sourceRoot, assetRoot })
 	}
 	const keys = /* @__PURE__ */ new Set();
 	const paths = /* @__PURE__ */ new Set();
+	const relativeLocators = /* @__PURE__ */ new Set();
 	const verified = [];
 	let totalBytes = 0;
 	for (const rawEntry of bundle.entries) {
@@ -239,6 +245,8 @@ function verifyFilesystemAssets({ assetBundle, tables, sourceRoot, assetRoot })
 		const payloadPath = normalizePayloadPath(entry?.payloadPath);
 		if (!key || key.length > 512 || keys.has(key)) throw fail("duplicate-asset-key");
 		if (paths.has(payloadPath)) throw fail("duplicate-payload-path");
+		if (entry?.locator === "relative") relativeLocators.add(key);
+		else if (entry?.locator !== void 0) throw fail("invalid-asset-locator");
 		keys.add(key);
 		paths.add(payloadPath);
 		const byteLength = entry?.byteLength;
@@ -270,7 +278,7 @@ function verifyFilesystemAssets({ assetBundle, tables, sourceRoot, assetRoot })
 		assetRoot,
 		allowMissing: true
 	});
-	for (const entry of verified) rowByKey.get(entry.key).source_uri = pathToFileURL(join(root, entry.relativePath)).href;
+	for (const entry of verified) rowByKey.get(entry.key).source_uri = relativeLocators.has(entry.key) ? makeLocalAssetLocator(entry.relativePath) : pathToFileURL(join(root, entry.relativePath)).href;
 	return {
 		root,
 		entries: verified

package/dist/{resolveIdentity-j2WFuKDT-DZTwcb-u.js → resolveIdentity-j2WFuKDT-BieMIOLz.js}

@@ -1,10 +1,10 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { m as withSystemContext } from "./dist-B00KCyNE.js";
+import { m as withSystemContext } from "./dist-CivxAJ6C.js";
 import { a as verifyAuthEvent, n as __exportAll$1, t as NostrIdentity } from "./NostrIdentity-RJaATTCt-BbRHWyee.js";
 import { t as ApiKey } from "./ApiKey-9YuYcpWy-BdrXOe-N.js";
-import { t as OidcIdentity } from "./OidcIdentity-COeMidoC-BDr8b6iW.js";
-import { c as normalizeIdentityEmail, o as coordinateOidcProvisioning, s as isOidcProvisioningRaceConflict } from "./ProfileCollection-CmRaiE9U-n8apgXIh.js";
-import { n as insertOidcProvisioningIdentity, t as createOidcProvisioningPerson } from "./oidcProvisioningPrimitives-KpIiLmG4-Csnh1ENp.js";
+import { t as OidcIdentity } from "./OidcIdentity-COeMidoC-ETkpZbIS.js";
+import { c as normalizeIdentityEmail, o as coordinateOidcProvisioning, s as isOidcProvisioningRaceConflict } from "./ProfileCollection-CmRaiE9U-BYvpJg0y.js";
+import { n as insertOidcProvisioningIdentity, t as createOidcProvisioningPerson } from "./oidcProvisioningPrimitives-KpIiLmG4-D5-0dAY3.js";
 import { resolveDatabase } from "@happyvertical/smrt-core";
 //#region ../profiles/dist/chunks/resolveIdentity-j2WFuKDT.js
 var resolveIdentity_j2WFuKDT_exports = /* @__PURE__ */ __exportAll({
@@ -72,13 +72,13 @@ async function resolveIdentity(context) {
 	};
 }
 async function findProfileByExternalId(provider, externalId, options) {
-	const { OidcIdentityCollection } = await import("./OidcIdentityCollection-D4DIZv0K-BvsaDTZY.js").then((n) => n.r).then((n) => n.r);
+	const { OidcIdentityCollection } = await import("./OidcIdentityCollection-D4DIZv0K-Do3bwRuw.js").then((n) => n.r).then((n) => n.r);
 	const identities = await (await OidcIdentityCollection.create(options)).findByProvider(provider);
 	for (const identity of identities) if (identity.subject === externalId || identity.email?.includes(externalId)) {
 		const profile = await identity.getProfile();
 		if (profile) return profile;
 	}
-	const { ProfileCollection } = await import("./ProfileCollection-CmRaiE9U-n8apgXIh.js").then((n) => n.i).then((n) => n.r);
+	const { ProfileCollection } = await import("./ProfileCollection-CmRaiE9U-BYvpJg0y.js").then((n) => n.i).then((n) => n.r);
 	const profiles = await (await ProfileCollection.create(options)).list({
 		where: { email: `${externalId}@users.noreply.github.com` },
 		limit: 1
@@ -99,7 +99,7 @@ async function reuseExistingOidcIdentityForProfile(profileId, claims, provider,
 		createConcurrencyError: (cause) => new Error("Concurrent exact OIDC identity reuse did not converge.", cause === void 0 ? void 0 : { cause }),
 		rebindRootResult: rebindOidcProfileResult,
 		provision: (tx) => withSystemContext(async () => {
-			const { OidcIdentityCollection } = await import("./OidcIdentityCollection-D4DIZv0K-BvsaDTZY.js").then((n) => n.r).then((n) => n.r);
+			const { OidcIdentityCollection } = await import("./OidcIdentityCollection-D4DIZv0K-Do3bwRuw.js").then((n) => n.r).then((n) => n.r);
 			const identity = await (await OidcIdentityCollection.create({ db: tx })).findBySubject(normalizedClaims.iss, normalizedClaims.sub);
 			if (!identity) throw new Error("OidcIdentity.findOrCreate() no longer creates authentication links; use UserCollection.getOrCreateFromOidc() or createProfileFromOidc().");
 			if (identity.profileId !== profileId) throw new Error(`OIDC identity ${normalizedClaims.iss} subject ${normalizedClaims.sub} belongs to a different Profile.`);
@@ -133,7 +133,7 @@ async function coordinateProfileOidcProvisioning(claims, provider, options) {
 	});
 }
 async function provisionOidcProfile(claims, provider, options) {
-	const { OidcIdentityCollection } = await import("./OidcIdentityCollection-D4DIZv0K-BvsaDTZY.js").then((n) => n.r).then((n) => n.r);
+	const { OidcIdentityCollection } = await import("./OidcIdentityCollection-D4DIZv0K-Do3bwRuw.js").then((n) => n.r).then((n) => n.r);
 	const existingIdentity = await (await OidcIdentityCollection.create(options)).findBySubject(claims.iss, claims.sub);
 	if (existingIdentity) {
 		const profile2 = await existingIdentity.getProfile();
@@ -148,7 +148,7 @@ async function provisionOidcProfile(claims, provider, options) {
 			created: false
 		};
 	}
-	const { ProfileCollection } = await import("./ProfileCollection-CmRaiE9U-n8apgXIh.js").then((n) => n.i).then((n) => n.r);
+	const { ProfileCollection } = await import("./ProfileCollection-CmRaiE9U-BYvpJg0y.js").then((n) => n.i).then((n) => n.r);
 	const profileCollection = await ProfileCollection.create(options);
 	if (claims.email) {
 		if (await profileCollection.findUniqueGlobalPersonByEmail(claims.email)) {
@@ -175,8 +175,8 @@ async function provisionOidcProfile(claims, provider, options) {
 	};
 }
 async function rebindOidcProfileResult(result, rootDb) {
-	const { OidcIdentityCollection } = await import("./OidcIdentityCollection-D4DIZv0K-BvsaDTZY.js").then((n) => n.r).then((n) => n.r);
-	const { ProfileCollection } = await import("./ProfileCollection-CmRaiE9U-n8apgXIh.js").then((n) => n.i).then((n) => n.r);
+	const { OidcIdentityCollection } = await import("./OidcIdentityCollection-D4DIZv0K-Do3bwRuw.js").then((n) => n.r).then((n) => n.r);
+	const { ProfileCollection } = await import("./ProfileCollection-CmRaiE9U-BYvpJg0y.js").then((n) => n.i).then((n) => n.r);
 	const profileId = requireOidcProfileId(result.profile.id);
 	const identityId = requireOidcProfileId(result.oidcIdentity.id);
 	const [profile, oidcIdentity] = await withSystemContext(async () => {
@@ -225,11 +225,11 @@ async function createProfileFromNostr(email, nostrData, options) {
 			created: false
 		};
 	}
-	const { Person } = await import("./oidcProvisioningPrimitives-KpIiLmG4-Csnh1ENp.js").then((n) => n.r).then((n) => n.o);
-	const { ProfileTypeCollection } = await import("./ProfileTypeCollection-BRLK8cHS-COCy6yqF.js").then((n) => n.n).then((n) => n.n);
+	const { Person } = await import("./oidcProvisioningPrimitives-KpIiLmG4-D5-0dAY3.js").then((n) => n.r).then((n) => n.o);
+	const { ProfileTypeCollection } = await import("./ProfileTypeCollection-BRLK8cHS-BKuh_ajh.js").then((n) => n.n).then((n) => n.n);
 	let personType = await (await ProfileTypeCollection.create(options)).getBySlug("person");
 	if (!personType) {
-		const { ProfileType } = await import("./ProfileCollection-CmRaiE9U-n8apgXIh.js").then((n) => n.i).then((n) => n.h);
+		const { ProfileType } = await import("./ProfileCollection-CmRaiE9U-BYvpJg0y.js").then((n) => n.i).then((n) => n.h);
 		personType = new ProfileType({
 			...options,
 			slug: "person",

package/dist/smrt-knowledge.okf.md

@@ -5,10 +5,10 @@ description: "Developer CLI for SMRT framework - introspection, testing, and pro
 status: "stable"
 generated:
   by: "smrt/scripts/generate-knowledge-okf.ts"
-  at: "2026-11-05T15:48:19Z"
+  at: "2026-11-06T00:45:47Z"
 audience: "internal"
 evidence_level: "manifest-described"
-source_revision: "sha256:e494edabb8dbcb1cf016e06866ef282fab8b8dd0dc253a9164e0160a782b0a52"
+source_revision: "sha256:b70ca522a45af095ce1b1dca4c56923bcf8aa16ffa38f9932c87c1e63b0761d1"
 sources:
   - id: "manifest"
     resource: "https://github.com/happyvertical/smrt/blob/main/packages/cli/package.json"
@@ -35,6 +35,7 @@ sources:
 
 - [smrt-agents](/components/smrt-agents.md)
 - [smrt-app-runtime](/components/smrt-app-runtime.md)
+- [smrt-assets](/components/smrt-assets.md)
 - [smrt-config](/components/smrt-config.md)
 - [smrt-core](/components/smrt-core.md)
 - [smrt-dev-mcp](/components/smrt-dev-mcp.md)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@happyvertical/smrt-cli",
-  "version": "0.60.10",
+  "version": "0.60.11",
   "description": "Developer CLI for SMRT framework - introspection, testing, and project management",
   "type": "module",
   "main": "./dist/index.js",
@@ -33,15 +33,16 @@
     "@happyvertical/ai": "^0.111.5",
     "@happyvertical/files": "^0.111.5",
     "@happyvertical/logger": "^0.111.5",
-    "@happyvertical/smrt-agents": "0.60.10",
-    "@happyvertical/smrt-app-runtime": "0.60.10",
-    "@happyvertical/smrt-config": "0.60.10",
-    "@happyvertical/smrt-core": "0.60.10",
-    "@happyvertical/smrt-dev-mcp": "0.60.10",
-    "@happyvertical/smrt-ledgers": "0.60.10",
-    "@happyvertical/smrt-playground": "0.60.10",
-    "@happyvertical/smrt-types": "0.60.10",
-    "@happyvertical/smrt-users": "0.60.10",
+    "@happyvertical/smrt-agents": "0.60.11",
+    "@happyvertical/smrt-app-runtime": "0.60.11",
+    "@happyvertical/smrt-assets": "0.60.11",
+    "@happyvertical/smrt-config": "0.60.11",
+    "@happyvertical/smrt-core": "0.60.11",
+    "@happyvertical/smrt-dev-mcp": "0.60.11",
+    "@happyvertical/smrt-ledgers": "0.60.11",
+    "@happyvertical/smrt-playground": "0.60.11",
+    "@happyvertical/smrt-types": "0.60.11",
+    "@happyvertical/smrt-users": "0.60.11",
     "@happyvertical/sql": "^0.111.5",
     "@happyvertical/utils": "^0.111.5",
     "@modelcontextprotocol/server": "2.3.1",