@happyvertical/smrt-cli 0.60.10 → 0.60.12

package/AGENTS.md

@@ -296,6 +296,7 @@ skipping it: agents/db-drop-framework-base-tables.md.
 - `src/discovery/manifest-discovery.ts` — manifest auto-discovery
 - `src/commands/docs-claude.ts` — downstream AGENTS.md generation + Claude alias; no object scanning
 - `src/commands/docs-knowledge-bundle.ts` — knowledge-bundle half of `docs:agents`
+- `src/commands/docs-skills-install.ts` — skill-installation half of `docs:agents` (#4708)
 
 ## docs:agents knowledge bundle (consumer contract)
 
@@ -309,6 +310,12 @@ artifacts — `scripts/ship-knowledge-pages.mjs` (root `pnpm build`, `prepack-pa
 runs fall back to `docs/knowledge`). Links to uninstalled packages' pages dangle by design. The shape lives in
 `@happyvertical/smrt-dev-mcp/knowledge` (`okf-bundle.ts`); `dev:knowledge-check` reads it (`stale-okf-bundle`).
 
+Skill install (#4708): unless `--no-install-skills`, `docs:agents` also writes the `smrt-catalog` skill from
+`@happyvertical/smrt-dev-mcp` to `.claude/skills/smrt-catalog/SKILL.md` and `.agents/skills/smrt-catalog/SKILL.md`
+under the working directory (skipped on `--dry-run`). The copy carries a `<!-- smrt-generated: … smrt-dev-mcp@<version> … -->`
+marker after the frontmatter: a rerun replaces a marked copy, a copy without the marker is left alone with a warning.
+The shipped text names `.agents/smrt-knowledge/`; the installer substitutes the real bundle dir (`docs:claude`, custom `--output`). Only the smrt repository itself (root `package.json` name `@happyvertical/smrt`, not any pnpm monorepo) also gets `smrt-contribute`; an unmarked copy byte-identical to the shipped skill (the repo's own `.agents/skills/smrt-contribute`) counts as current. Destinations go through `containedPath` and are refused when any path segment is a symlink, before any write.
+
 ## Gotchas
 
 - **Test mode detection**: checks `NODE_ENV=test`, `VITEST=true`, `global.it`/`describe` — may conflict with other test runners

package/README.md

@@ -186,6 +186,11 @@ alias supports the same flag and retains its historical output path.
 Regenerate snapshots after moving the project or updating dependencies so the
 local source paths remain current.
 
+`docs:agents` also installs the `smrt-catalog` agent skill into
+`.claude/skills/` and `.agents/skills/` so an agent consults the knowledge
+catalog before hand-rolling infrastructure. Pass `--no-install-skills` to skip
+it. A copy you edited (the generated marker removed) is never overwritten.
+
 Review and architecture prompt bundles include package guidance and modules
 matched by file or focus hints. Add `--complete` to either context command to
 include every module for the selected packages. These commands still build the

package/agents/app-commands.md

@@ -97,6 +97,8 @@ config loading; `bin/smrt.js` imports `dist/` in-process so SIGTERM reaches
   publishes via `link()` (never replaces); import requires a 0600 regular
   bundle for the same app, an exactly matching manifest schema, and an empty
   target; deployed import requires `SMRT_MAINTENANCE_MODE=true`.
+  Local relative asset locators resolve against the approved asset root during
+  export and stay relative after import. Legacy file URLs import as file URLs.
 - **Process identity**: `app.pid` is trusted only when the live command
   line's last two tokens are a path with basename `smrt-web.mjs` and exactly
   `--smrt-instance=<record instance>` (an app started by the template's former

package/dist/{AuditLogCollection-BBbvr8Qc-DU-QXhH5.js → AuditLogCollection-BBbvr8Qc-vKb0VQnR.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { i as tenantId, r as TenantScoped } from "./dist-B00KCyNE.js";
+import { i as tenantId, r as TenantScoped } from "./dist-BN2kcmgm.js";
 import { n as __exportAll$1 } from "./NostrIdentity-RJaATTCt-BbRHWyee.js";
 import { SmrtCollection, SmrtObject, field, foreignKey, smrt } from "@happyvertical/smrt-core";
 //#region ../profiles/dist/chunks/AuditLogCollection-BBbvr8Qc.js

package/dist/{OidcIdentity-COeMidoC-BDr8b6iW.js → OidcIdentity-COeMidoC-ou8ulS56.js}

@@ -42,7 +42,7 @@ var OidcIdentity = class extends SmrtObject {
 	* Find identity by issuer and subject
 	*/
 	static async findBySubject(issuer, subject, options = {}) {
-		const { OidcIdentityCollection } = await import("./OidcIdentityCollection-D4DIZv0K-BvsaDTZY.js").then((n) => n.r).then((n) => n.r);
+		const { OidcIdentityCollection } = await import("./OidcIdentityCollection-D4DIZv0K-CDtom8IP.js").then((n) => n.r).then((n) => n.r);
 		return await (await OidcIdentityCollection.create(options)).findBySubject(issuer, subject);
 	}
 	/** Build the collision-free natural key for one OIDC issuer subject. */
@@ -65,7 +65,7 @@ var OidcIdentity = class extends SmrtObject {
 	static async findOrCreate(profile, oidcData, options = {}) {
 		const profileId = profile.id;
 		if (typeof profileId !== "string" || !profileId) throw new Error("OidcIdentity.findOrCreate() requires a saved Profile.");
-		const { reuseExistingOidcIdentityForProfile } = await import("./resolveIdentity-j2WFuKDT-DZTwcb-u.js").then((n) => n.t).then((n) => n.i);
+		const { reuseExistingOidcIdentityForProfile } = await import("./resolveIdentity-j2WFuKDT-C2w7Bklk.js").then((n) => n.t).then((n) => n.i);
 		const profileOptions = profile.options ?? {};
 		return (await reuseExistingOidcIdentityForProfile(profileId, {
 			email: oidcData.email,

package/dist/{OidcIdentityCollection-D4DIZv0K-BvsaDTZY.js → OidcIdentityCollection-D4DIZv0K-CDtom8IP.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
 import { n as __exportAll$1 } from "./NostrIdentity-RJaATTCt-BbRHWyee.js";
-import { t as OidcIdentity } from "./OidcIdentity-COeMidoC-BDr8b6iW.js";
+import { t as OidcIdentity } from "./OidcIdentity-COeMidoC-ou8ulS56.js";
 import { SmrtCollection } from "@happyvertical/smrt-core";
 //#region ../profiles/dist/chunks/OidcIdentityCollection-D4DIZv0K.js
 var OidcIdentityCollection_D4DIZv0K_exports = /* @__PURE__ */ __exportAll({