@se-studio/skills 1.7.1 → 1.7.3

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @se-studio/skills
 
+## 1.7.3
+
+### Patch Changes
+
+- Document `supportedArchitectures` so macOS lockfiles include linux-x64/glibc optional natives for hoisted frozen cms-edit installs.
+
+## 1.7.2
+
+### Patch Changes
+
+- 2b1e79c: Portless local URLs: require `portless service install` for HTTPS 443; document unique last-segment worktree hosts. Refuse local `cms-edit` content commands (hosted MCP only). Smoke/revalidation use `start:dev` so `PORT` is not swallowed by portless.
+
 ## 1.7.1
 
 ### Patch Changes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@se-studio/skills",
-  "version": "1.7.1",
+  "version": "1.7.3",
   "description": "SE Studio agent skills for marketing site development with Contentful CMS",
   "repository": {
     "type": "git",

package/references/lockfile-sync/README.md

@@ -30,6 +30,17 @@ See [`validate-workflow-snippet.yml`](validate-workflow-snippet.yml). Customer m
 | Marketing app (monorepo root install) | `cd ../.. && pnpm install --frozen-lockfile` |
 | cms-edit host | `cd ../.. && pnpm install --frozen-lockfile --config.node-linker=hoisted` |
 
+## Linux optional natives (`supportedArchitectures`)
+
+cms-edit Vercel and `check-lockfile-sync.sh` (full) run `pnpm install --frozen-lockfile --config.node-linker=hoisted`. That path requires lockfile snapshots for **linux-x64/glibc** optional binaries even when you generate the lockfile on macOS.
+
+Every consumer `pnpm-workspace.yaml` must include `supportedArchitectures` (current + linux, current + x64, current + glibc). Canonical copy: skill `site-workflows-deps-update` Step 3. After adding it, run `pnpm install` (not frozen) so the lockfile gains those snapshots, then verify:
+
+```bash
+pnpm install --frozen-lockfile --config.node-linker=hoisted
+pnpm install   # restore isolated linker for local workspace packages
+```
+
 ## After dependency changes
 
 ```bash

package/skills/contentful-cms-core/SKILL.md

@@ -1,11 +1,13 @@
 ---
 name: contentful-cms-core
-description: "Use cms-edit CLI to read/edit Contentful content (open → snapshot → read → set/rtf → diff → save)."
+description: "Edit Contentful drafts via hosted cms-edit MCP (open → snapshot → read → set/rtf → diff → save). Local CLI content commands are disabled."
 ---
 
-# Skill: contentful-cms CLI
+# Skill: contentful-cms (hosted MCP)
 
-Use this skill when you need to read or edit content in Contentful CMS using the `cms-edit` CLI tool.
+Use this skill when you need to read or edit content in Contentful using **hosted cms-edit MCP** (`cms_edit` with an `args` array). Command names match the old CLI (`open` → `snapshot` → `read` → `set`/`rtf` → `diff` → `save`).
+
+**Do not** run the local `cms-edit` binary for content. It refuses `open`, `save`, `set`, and other content commands. Local CLI is only for `host`, `editor-pack`, `project`, `schema`, and `guide`.
 
 **Before editing:** use skill **`contentful-cms-editor-tasks`** to read `tasks-index` and the matching capability playbook for this site (hosted MCP or local `cms-edit/<site>/editor-pack/`).
 
@@ -31,7 +33,6 @@ All `save` operations create **draft** versions. A human must review and publish
 
 **Assets:** Upload **is** supported (`asset upload`). Default workflow: **search and reuse** existing assets first (`index sync` → `asset search`). When uploading:
 - **Hosted MCP:** always `cms_edit_request_staged_upload` → curl → `asset upload --staged` (never `--base64`)
-- **Local CLI:** `--base64` or `--url` when user approves local CLI
 - Use a **sensible fileName** and **descriptive title** (and alt text where the site uses it)
 - Avoid oversized images — width over **2000px** is usually wasteful for web (exact limits vary by project; check `asset audit` / media review guidance)
 - Prefer `--if-exists-by-filename` to avoid duplicates

package/skills/se-marketing-sites-smoke-test-setup/SKILL.md

@@ -26,10 +26,10 @@ Preview / `DRAFT_ONLY` Contentful access in local dev is expected and not a smok
 | `pnpm smoke-test:run` | Smoke only (server already up) |
 | `pnpm smoke-test:preview` | Smoke against Vercel preview (`runPreviewStaticSmokeTest`; no local server) |
 | `pnpm smoke-test:audit` | Functional smoke + server log cache audit |
-| `pnpm smoke-test:cache` | `build` + `start` + double-pass `x-nextjs-cache` verify |
-| `pnpm smoke-test:deploy-check` | Post-build gate: `start` (no rebuild) + functional smoke — use in Vercel `buildCommand` |
+| `pnpm smoke-test:cache` | `build` + `start:dev` + double-pass `x-nextjs-cache` verify |
+| `pnpm smoke-test:deploy-check` | Post-build gate: `start:dev` (no rebuild) + functional smoke — use in Vercel `buildCommand` |
 | `pnpm smoke-test:live` | Live deployment URL smoke — GitHub Action + Vercel Deployment Checks |
-| `pnpm revalidation-test` | `build` + `start` + revalidation matrix (warm → invalidate → cold → warm); see `revalidation.cases.json` and [CONTENTFUL_WEBHOOK_REVALIDATION.md](../../../../docs/CONTENTFUL_WEBHOOK_REVALIDATION.md) |
+| `pnpm revalidation-test` | `build` + `start:dev` + revalidation matrix (warm → invalidate → cold → warm); see `revalidation.cases.json` and [CONTENTFUL_WEBHOOK_REVALIDATION.md](../../../../docs/CONTENTFUL_WEBHOOK_REVALIDATION.md) |
 
 Example `package.json` entries:
 
@@ -38,7 +38,7 @@ Example `package.json` entries:
 "smoke-test:run": "tsx scripts/smoke-test-run.ts",
 "smoke-test:preview": "bash -c 'set -a && [ -f .env.local ] && . ./.env.local; set +a && exec tsx scripts/smoke-test-preview.ts'",
 "smoke-test:audit": "SMOKE_TEST_AUDIT_CACHE_LOGS=true smoke-test-one 3012",
-"smoke-test:cache": "SMOKE_TEST_SERVER_SCRIPT=start SMOKE_TEST_VERIFY_CACHE=true smoke-test-one 3012",
+"smoke-test:cache": "SMOKE_TEST_SERVER_SCRIPT=start:dev SMOKE_TEST_VERIFY_CACHE=true smoke-test-one 3012",
 "smoke-test:deploy-check": "smoke-test-deploy-check",
 "smoke-test:live": "smoke-test-live",
 "revalidation-test": "node ../../scripts/revalidation-matrix-test.mjs 3012"
@@ -182,7 +182,7 @@ vercel env add VERCEL_FORCE_NO_BUILD_CACHE production --value 1 --yes
 
 ### 1. Confirm port
 
-Read `package.json` — e.g. `next dev -p 3012` → port **3012**.
+Read `package.json` — smoke still uses a localhost port (`smoke-test-one 3012`). `pnpm dev` is portless (`https://<name>.localhost`) and is **not** the smoke server. Confirm `dev:dev` has no `-p` flag so `PORT` from `smoke-test-one` is honoured.
 
 ### 2. Fetch sitemap (production first)
 

package/skills/site-workflows-agent-session/SKILL.md

@@ -166,6 +166,14 @@ cd <worktreesRoot>/<feature-slug>
 
 **Manifest gate:** set `worktree:` to the worktree path before coding. Do all edits, installs, tests, and commits from that path. Do not leave the primary checkout on a feature branch.
 
+### Portless URLs in worktrees
+
+`pnpm dev` uses [portless](https://github.com/vercel-labs/portless). Install **`portless service install`** once so `https://<name>.localhost` works on 443.
+
+Portless prefixes the hostname with the **last segment of the branch name**. `feature/om1/hero-redesign` → `https://hero-redesign.om1.localhost`. Two parallel features that share that last slug collide (both claim `hero.om1.localhost`). **Make the last path segment unique** (include the ticket id: `feature/om1/mktg-5117-hero`). The app `--name` (`om1`, `example`) does not disambiguate two worktrees of the same last slug.
+
+Without the OS service, agents may get `https://<name>.localhost:1355` from an ad-hoc proxy — do not hardcode `:1355` in docs or cms-edit `devBaseUrl`.
+
 ### Gate — refuse primary-checkout feature work
 
 If you are about to implement a feature and `worktree` is null without `worktree_opt_out: true`:

package/skills/site-workflows-deps-update/SKILL.md

@@ -105,6 +105,24 @@ overrides:
   '@types/node': ^24.13.2
 ```
 
+Every repo that runs **hoisted frozen install** (cms-edit host on Vercel, `check-lockfile-sync.sh` hoisted job) **must** also record Linux optional natives in the lockfile. Generate the lockfile on macOS with:
+
+```yaml
+# Record linux-x64/glibc optional natives (cms-edit Vercel + hoisted frozen install).
+supportedArchitectures:
+  os:
+    - current
+    - linux
+  cpu:
+    - current
+    - x64
+  libc:
+    - current
+    - glibc
+```
+
+Without this, isolated `pnpm install` on darwin can omit snapshots such as `@rollup/rollup-linux-x64-gnu`. Hoisted `--frozen-lockfile` then fails even though default-linker install succeeded. Vitest/Rollup sites (Brightline) hit this first; Sharp and other optional natives fail the same way on Vercel linux.
+
 - **`minimumReleaseAge: 1440`** — do not install packages published in the last 24 hours (supply-chain guard).
 - **`@se-studio/*` exclude** — our own packages may update immediately after npm publish.
 - **Keep repo-specific additional excludes** when present (e.g. vitest pins in se-core-product, `@emnapi/runtime` in se-website-2026, PointMe `mapbox-gl` / `react-day-picker` overrides).