stkit 17.0.2__tar.gz → 17.1.1__tar.gz

{stkit-17.0.2 → stkit-17.1.1}/CHANGELOG.md

@@ -1,5 +1,41 @@
 # Changelog
 
+## v17.1.1 (2026-10-28)
+
+No migration required.
+
+- The docs move to https://docs.stkit.dev, matching the PyPI name. An app made by an earlier `stk init` points its `CLAUDE.md` and `.claude/skills/` at docs.stk.dev: replace it with docs.stkit.dev.
+- stkit's PyPI page links to the docs, source and changelog.
+- Vendored Vue 3.5.44, Vuetify 4.3.1, axios 1.21.0 (fixes GHSA-m8m8-qj5v-23w3, GHSA-x97p-jq2g-jp4f and ten other axios advisories) and Tabler icons 3.50.0. Tabler now ships its font as unicode-range subsets in `icons/fonts/`, so the browser loads only the groups a page uses; `icons/fonts/tabler-icons.woff2` is gone. An app that preloads that file links `icons/fonts/tabler-icons.core.woff2` instead (Frontend).
+- stkit's dependency minimums no longer allow versions with known vulnerabilities: cryptography 50.0.0, aiosmtplib 5.1.2, orjson 3.11.6, python-dotenv 1.2.2. An app that pins an older one gets a resolver conflict; raise its pin.
+- CI audits the locked dependencies for known vulnerabilities with `uv audit`.
+
+## v17.1.0 (2026-10-25)
+
+No migration required.
+
+- `app_navigation()` returns the app's `app.navigation` entries alone, without stk's Dashboard, Account and Administration sections, for a layout that draws its own sidebar (Frontend, Navigation).
+- The layout ships an import map, `{{ import_map() }}`, that maps every `.js` and `.mjs` file in the app's, extensions' and stk's static folders to its versioned URL, app first. A module imported by another module is fresh after a deploy too. A layout that does not extend `stk/layout.html` calls it in its `<head>` (Frontend).
+- `build_alembic_config("myapp", url)` takes the app's import name with a URL, so a test can migrate a throwaway database before it builds its app. Passing the app still works (Models, Migrations).
+- `stk db revision` imports the module of each column type Alembic writes by its path (pgvector's `HALFVEC` and `BIT`, an app's `UserDefinedType`), then sorts the revision's imports and formats it with the app's ruff config. Before, such revisions failed with a `NameError`.
+- `stk db revision` warns about each column-level `CheckConstraint` in the columns it adds: Alembic autogenerate leaves them out. Declare checks in `__table_args__`, or add them to the revision by hand (Models, Migrations).
+- Configuration documents app paths in `settings.py` (`Path(__file__).resolve().parent.parent`) in place of the removed `Config.PROJECT_ROOT`, and `app.root_path` and `app.instance_path` at runtime.
+
+### Upgrade considerations
+
+Nothing breaks. Apps can delete what they wrote around these gaps:
+
+- A Jinja global that returns `app.navigation` (Sealbook's `rail_navigation` in `sealbook/shell/__init__.py`): call `app_navigation()` in the layout instead.
+- An app import map (Sealbook's `import_map()` and `MODULE_DIRS` in `sealbook/assets.py`): stk's `import_map()` global has the same name, so a copied layout that calls `{{ import_map() }}` keeps working. stk's map also lists minified `.js` files; they are harmless there.
+- Tests that import the module-level app only to call `build_alembic_config(app, url)`: pass `"myapp"` instead.
+- Nothing in existing revisions: hand-written imports there stay correct. New revisions import their types themselves.
+
+Paste-ready prompt for a coding agent:
+
+```text
+Upgrade this app to stkit 17.1.0 (bump the pin, `uv lock`). Then delete the workarounds 17.1.0 makes unnecessary: (1) any Jinja global returning app.navigation; call app_navigation() in the layout instead. (2) any app-built import map of versioned static modules; stk's import_map() global replaces it, so keep `{{ import_map() }}` in a copied layout and delete the app's function and its registration, plus test assertions that minified files are absent from the map. (3) in tests, `build_alembic_config(app, url, ...)` where the app was imported only for that: pass the app's import name, `build_alembic_config("<package>", url, ...)`, and drop the import. Leave existing migration revisions alone, including their hand-written imports and checks. Done when the tests, `uv run stk verify` and `uv run stk smoke` pass.
+```
+
 ## v17.0.2 (2026-10-25)
 
 No migration required.

{stkit-17.0.2 → stkit-17.1.1}/PKG-INFO

@@ -1,28 +1,31 @@
 Metadata-Version: 2.5
 Name: stkit
-Version: 17.0.2
+Version: 17.1.1
 Summary: An async Quart framework optimized for AI-assisted development workflows
+Project-URL: Documentation, https://docs.stkit.dev
+Project-URL: Source, https://github.com/level09/stk
+Project-URL: Changelog, https://github.com/level09/stk/blob/master/CHANGELOG.md
 Author-email: Level09 <hello@level09.com>
 License: MIT
 License-File: LICENSE
 Requires-Python: >=3.11
-Requires-Dist: aiosmtplib>=5.0.0
+Requires-Dist: aiosmtplib>=5.1.2
 Requires-Dist: aiosqlite>=0.20.0
 Requires-Dist: alembic>=1.16.0
 Requires-Dist: authlib<2,>=1.9.1
 Requires-Dist: bcrypt>=4.3.0
 Requires-Dist: blinker>=1.9.0
 Requires-Dist: click>=8.3.1
-Requires-Dist: cryptography>=45.0.5
+Requires-Dist: cryptography>=50.0.0
 Requires-Dist: email-validator>=2.2.0
 Requires-Dist: httpx2>=2.16.0
 Requires-Dist: jinja2>=3.1.6
 Requires-Dist: joserfc<2,>=1.7.1
 Requires-Dist: libpass>=1.9.0
-Requires-Dist: orjson>=3.10.18
+Requires-Dist: orjson>=3.11.6
 Requires-Dist: pillow>=13.0.0
 Requires-Dist: psycopg2-binary>=2.9.10
-Requires-Dist: python-dotenv>=1.1.1
+Requires-Dist: python-dotenv>=1.2.2
 Requires-Dist: qrcode>=8.2
 Requires-Dist: quart-security<3,>=2.0.3
 Requires-Dist: quart-session>=3.0.0
@@ -66,8 +69,8 @@ Description-Content-Type: text/markdown
 </p>
 
 <p align="center">
-  <a href="https://docs.stk.dev">Docs</a> &middot;
-  <a href="https://docs.stk.dev/llms.txt">llms.txt</a> &middot;
+  <a href="https://docs.stkit.dev">Docs</a> &middot;
+  <a href="https://docs.stkit.dev/llms.txt">llms.txt</a> &middot;
   <a href="https://github.com/level09/stk/wiki">Tutorials</a>
 </p>
 
@@ -126,8 +129,8 @@ stk ships what actually matters:
 
 ## Documentation
 
-Everything else lives at [docs.stk.dev](https://docs.stk.dev), and in this repo at `docs/src/content/docs/`:
-[quick start](https://docs.stk.dev/getting-started/), [build loop](https://docs.stk.dev/build-loop/), [models](https://docs.stk.dev/models/), [frontend](https://docs.stk.dev/frontend/), [authentication](https://docs.stk.dev/authentication/), [configuration](https://docs.stk.dev/configuration/), [CLI reference](https://docs.stk.dev/cli/), [deployment](https://docs.stk.dev/deployment/), and [working with agents](https://docs.stk.dev/ai-coding/). Upgrade notes are in `CHANGELOG.md`; the production security contract is `SECURITY.md`.
+Everything else lives at [docs.stkit.dev](https://docs.stkit.dev), and in this repo at `docs/src/content/docs/`:
+[quick start](https://docs.stkit.dev/getting-started/), [build loop](https://docs.stkit.dev/build-loop/), [models](https://docs.stkit.dev/models/), [frontend](https://docs.stkit.dev/frontend/), [authentication](https://docs.stkit.dev/authentication/), [configuration](https://docs.stkit.dev/configuration/), [CLI reference](https://docs.stkit.dev/cli/), [deployment](https://docs.stkit.dev/deployment/), and [working with agents](https://docs.stkit.dev/ai-coding/). Upgrade notes are in `CHANGELOG.md`; the production security contract is `SECURITY.md`.
 
 ## License
 

{stkit-17.0.2 → stkit-17.1.1}/README.md

@@ -20,8 +20,8 @@
 </p>
 
 <p align="center">
-  <a href="https://docs.stk.dev">Docs</a> &middot;
-  <a href="https://docs.stk.dev/llms.txt">llms.txt</a> &middot;
+  <a href="https://docs.stkit.dev">Docs</a> &middot;
+  <a href="https://docs.stkit.dev/llms.txt">llms.txt</a> &middot;
   <a href="https://github.com/level09/stk/wiki">Tutorials</a>
 </p>
 
@@ -80,8 +80,8 @@ stk ships what actually matters:
 
 ## Documentation
 
-Everything else lives at [docs.stk.dev](https://docs.stk.dev), and in this repo at `docs/src/content/docs/`:
-[quick start](https://docs.stk.dev/getting-started/), [build loop](https://docs.stk.dev/build-loop/), [models](https://docs.stk.dev/models/), [frontend](https://docs.stk.dev/frontend/), [authentication](https://docs.stk.dev/authentication/), [configuration](https://docs.stk.dev/configuration/), [CLI reference](https://docs.stk.dev/cli/), [deployment](https://docs.stk.dev/deployment/), and [working with agents](https://docs.stk.dev/ai-coding/). Upgrade notes are in `CHANGELOG.md`; the production security contract is `SECURITY.md`.
+Everything else lives at [docs.stkit.dev](https://docs.stkit.dev), and in this repo at `docs/src/content/docs/`:
+[quick start](https://docs.stkit.dev/getting-started/), [build loop](https://docs.stkit.dev/build-loop/), [models](https://docs.stkit.dev/models/), [frontend](https://docs.stkit.dev/frontend/), [authentication](https://docs.stkit.dev/authentication/), [configuration](https://docs.stkit.dev/configuration/), [CLI reference](https://docs.stkit.dev/cli/), [deployment](https://docs.stkit.dev/deployment/), and [working with agents](https://docs.stkit.dev/ai-coding/). Upgrade notes are in `CHANGELOG.md`; the production security contract is `SECURITY.md`.
 
 ## License
 

{stkit-17.0.2 → stkit-17.1.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "stkit"
-version = "17.0.2"
+version = "17.1.1"
 description = "An async Quart framework optimized for AI-assisted development workflows"
 authors = [
     {name = "Level09", email = "hello@level09.com"}
@@ -11,22 +11,22 @@ requires-python = ">=3.11"
 
 dependencies = [
     "alembic>=1.16.0",
-    "aiosmtplib>=5.0.0",
+    "aiosmtplib>=5.1.2",
     "aiosqlite>=0.20.0",
     "authlib>=1.9.1,<2",
     "bcrypt>=4.3.0",
     "blinker>=1.9.0",
     "click>=8.3.1",
-    "cryptography>=45.0.5",
+    "cryptography>=50.0.0",
     "email-validator>=2.2.0",
     "httpx2>=2.16.0",
     "jinja2>=3.1.6",
     "joserfc>=1.7.1,<2",
     "libpass>=1.9.0",
-    "orjson>=3.10.18",
+    "orjson>=3.11.6",
     "pillow>=13.0.0",
     "psycopg2-binary>=2.9.10",
-    "python-dotenv>=1.1.1",
+    "python-dotenv>=1.2.2",
     "qrcode>=8.2",
     "quart>=0.20.0",
     "quart-security>=2.0.3,<3",
@@ -39,6 +39,11 @@ dependencies = [
 ]
 
 
+[project.urls]
+Documentation = "https://docs.stkit.dev"
+Source = "https://github.com/level09/stk"
+Changelog = "https://github.com/level09/stk/blob/master/CHANGELOG.md"
+
 [project.scripts]
 stk = "stk.cli.main:main"
 

{stkit-17.0.2 → stkit-17.1.1}/stk/__init__.py

@@ -3,7 +3,7 @@ stk Framework
 A modern Python web framework optimized for AI-assisted development.
 """
 
-__version__ = "17.0.2"
+__version__ = "17.1.1"
 
 
 def __getattr__(name):

{stkit-17.0.2 → stkit-17.1.1}/stk/app.py

@@ -4,11 +4,20 @@ import hashlib
 import importlib
 import importlib.util
 import inspect
+import json
 import os
 from pathlib import Path
 
 from jinja2 import ChoiceLoader, FileSystemLoader, PrefixLoader
-from quart import Quart, g, render_template, request, send_from_directory
+from markupsafe import Markup
+from quart import (
+    Quart,
+    g,
+    render_template,
+    request,
+    send_from_directory,
+    url_for,
+)
 from quart_security import Security, SQLAlchemyUserDatastore
 from quart_security.views import _ensure_csrf_token
 from sqlalchemy.ext.asyncio import async_sessionmaker, create_async_engine
@@ -232,6 +241,26 @@ def register_static_versioning(app):
             )
         return response
 
+    def import_map():
+        """Map each module's plain URL to its versioned one, so a module imported by
+        another module (`import "./x.js"`) is fresh after a deploy too."""
+        names = sorted(
+            {
+                path.relative_to(folder).as_posix()
+                for folder in app.static_folders
+                for path in folder.rglob("*")
+                if path.suffix in (".js", ".mjs")
+            }
+        )
+        imports = {
+            f"{app.static_url_path}/{name}": url_for("static", filename=name)
+            for name in names
+        }
+        body = json.dumps({"imports": imports}).replace("</", "<\\/")
+        return Markup(f'<script type="importmap">{body}</script>')
+
+    app.jinja_env.globals["import_map"] = import_map
+
 
 CORE_NAVIGATION_START = [
     {"heading": "Main"},
@@ -267,6 +296,8 @@ def register_navigation(app):
         *app.navigation,
         *CORE_NAVIGATION_END,
     ]
+    # The app's entries alone, for a layout that draws its own sidebar.
+    app.jinja_env.globals["app_navigation"] = lambda: app.navigation
 
 
 def register_errorhandlers(app):

{stkit-17.0.2 → stkit-17.1.1}/stk/cli/database.py

@@ -79,6 +79,44 @@ def build_migration_drift_report(app=None, database_url=None):
     return [_describe_diff(diff) for diff in _flatten(diffs)]
 
 
+def _column_checks(op):
+    """`table.column` for each column an autogenerated op adds with its own check."""
+    from sqlalchemy import CheckConstraint, Column
+
+    for child in getattr(op, "ops", ()):
+        yield from _column_checks(child)
+    columns = [*getattr(op, "columns", ()), getattr(op, "column", None)]
+    for column in columns:
+        if isinstance(column, Column) and any(
+            isinstance(c, CheckConstraint) for c in column.constraints
+        ):
+            yield f"{column.table.name}.{column.name}"
+
+
+def _warn_column_checks(context, revision, directives):
+    # Alembic renders table-level checks only; a column's own check is left out.
+    for name in _column_checks(directives[0].upgrade_ops):
+        console.print(
+            f"[yellow]{name}: autogenerate leaves out a column-level CheckConstraint."
+            " Move it to __table_args__, or add it to this revision by hand.[/]"
+        )
+
+
+def _tidy_revision(path):
+    """Sort the revision's imports and format it with the app's own ruff config."""
+    import importlib.util
+    import subprocess
+    import sys
+
+    if importlib.util.find_spec("ruff") is None:
+        console.print("[yellow]ruff is not installed: revision imports are unsorted[/]")
+        return
+    for args in (["check", "--fix", "--select", "I"], ["format"]):
+        subprocess.run(
+            [sys.executable, "-m", "ruff", *args, "--quiet", path], check=True
+        )
+
+
 def generate_revision(app, message, *, autogenerate=True, head=None, quiet=False):
     """Write a revision in the app's lineage, or in `head`'s when given.
 
@@ -89,35 +127,29 @@ def generate_revision(app, message, *, autogenerate=True, head=None, quiet=False
 
     config = build_alembic_config(app, quiet=quiet)
     if head is not None:
-        return run_alembic(
-            command.revision,
-            config,
-            message=message,
-            autogenerate=autogenerate,
-            head=head,
-        )
-    script = ScriptDirectory.from_config(config)
-    label = app_label(app)
-    started = any(label in rev.branch_labels for rev in script.walk_revisions())
-    core_head = script.get_revision(f"{CORE_LABEL}@head").revision
-    options = (
-        {"head": f"{label}@head"}
-        if started
-        else {
-            "head": "base",
-            "branch_label": label,
-            "version_path": str(app_versions(app)),
-        }
-    )
-    app_versions(app).mkdir(exist_ok=True)
-    return run_alembic(
+        options = {"head": head}
+    else:
+        script = ScriptDirectory.from_config(config)
+        label = app_label(app)
+        started = any(label in rev.branch_labels for rev in script.walk_revisions())
+        options = {"depends_on": script.get_revision(f"{CORE_LABEL}@head").revision}
+        if started:
+            options["head"] = f"{label}@head"
+        else:
+            options.update(
+                head="base", branch_label=label, version_path=str(app_versions(app))
+            )
+        app_versions(app).mkdir(exist_ok=True)
+    revision = run_alembic(
         command.revision,
         config,
         message=message,
         autogenerate=autogenerate,
-        depends_on=core_head,
+        process_revision_directives=_warn_column_checks,
         **options,
     )
+    _tidy_revision(revision.path)
+    return revision
 
 
 @click.command()

{stkit-17.0.2 → stkit-17.1.1}/stk/cli/doctor.py

@@ -168,7 +168,7 @@ def _check_assets():
             "js/vuetify.min.js",
             "css/vuetify.min.css",
             "icons/tabler-icons.min.css",
-            "icons/fonts/tabler-icons.woff2",
+            "icons/fonts/tabler-icons.core.woff2",
         )
     ]
     missing = [path.name for path in expected if not path.exists()]

{stkit-17.0.2 → stkit-17.1.1}/stk/migrations/__init__.py

@@ -7,6 +7,7 @@ label; an app's carry its package name and live in `<package>/migrations/`.
 from __future__ import annotations
 
 import importlib
+import importlib.util
 import os
 import pkgutil
 import tempfile
@@ -55,6 +56,17 @@ def include_object(obj, name, type_, reflected, compare_to):
     return not (type_ == "table" and name in EXTENSION_TABLES)
 
 
+def render_item(type_, obj, autogen_context):
+    """Import the module of a type Alembic renders by its path (pgvector's, the app's).
+
+    Alembic writes such a type as `pgvector.sqlalchemy.halfvec.HALFVEC(dim=3)` and
+    imports only SQLAlchemy dialects, so the revision would not run.
+    """
+    if type_ == "type" and not type(obj).__module__.startswith("sqlalchemy."):
+        autogen_context.imports.add(f"import {type(obj).__module__}")
+    return False
+
+
 def sync_url(database_url: str) -> str:
     """Convert an async driver URL to the sync driver Alembic uses."""
     url = make_url(database_url)
@@ -71,11 +83,20 @@ def app_label(app) -> str:
 
 
 def app_versions(app) -> Path:
+    """The app's migrations directory; `app` is the app or its import name."""
+    if isinstance(app, str):
+        return Path(importlib.util.find_spec(app).origin).parent / "migrations"
     return Path(app.root_path) / "migrations"
 
 
 def build_alembic_config(app=None, url=None, *, quiet=False) -> AlembicConfig:
-    """Build an Alembic config for stk's lineage plus the app's, if given."""
+    """Build an Alembic config for stk's lineage plus the app's, if given.
+
+    `app` is the app, or its import name (`"myapp"`) with an explicit `url`, so a
+    test can migrate a throwaway database before it builds the app.
+    """
+    if isinstance(app, str) and url is None:
+        raise ValueError("pass url when app is an import name")
     config = AlembicConfig()
     config.set_main_option("script_location", str(SCRIPT_DIR))
     config.set_main_option("path_separator", "os")

{stkit-17.0.2 → stkit-17.1.1}/stk/migrations/env.py

@@ -5,7 +5,7 @@ import logging
 from alembic import context
 from sqlalchemy import engine_from_config, pool
 
-from stk.migrations import get_target_metadata, include_object
+from stk.migrations import get_target_metadata, include_object, render_item
 
 config = context.config
 
@@ -25,6 +25,7 @@ def run_migrations_offline() -> None:
         compare_type=True,
         compare_server_default=True,
         include_object=include_object,
+        render_item=render_item,
         render_as_batch=url.startswith("sqlite"),
     )
 
@@ -44,6 +45,7 @@ def run_migrations_online() -> None:
             compare_type=True,
             compare_server_default=True,
             include_object=include_object,
+            render_item=render_item,
             # SQLite alters tables by copying them; batch mode does that for us.
             render_as_batch=connection.dialect.name == "sqlite",
         )

{stkit-17.0.2 → stkit-17.1.1}/stk/scaffold/app/CLAUDE.md

@@ -11,7 +11,7 @@ same path in `__app__/templates/` or `__app__/static/`; `stk/<name>` is the orig
 ## Where truth lives
 
 1. **The running app.** Ask it before reading files: `uv run stk inspect context --json` (routes with auth, models), `uv run stk inspect commands --json` (every command and option), `uv run stk doctor` (app state, each problem with its fix). `uv run stk new <module>` writes the canonical CRUD extension; copy its patterns.
-2. **stk's docs** at https://docs.stk.dev, indexed for agents at https://docs.stk.dev/llms.txt. Read the page for your task before writing code.
+2. **stk's docs** at https://docs.stkit.dev, indexed for agents at https://docs.stkit.dev/llms.txt. Read the page for your task before writing code.
 3. **Skills** in `.claude/skills/` (mirrored at `.agents/skills/`): `stk-blueprint`, `stk-api`, `stk-migrate`, `stk-deploy`, and `stk-lessons` (when a gotcha the docs missed costs you time, log one line in `.stk/lessons.md`).
 
 ## Commands
@@ -48,6 +48,7 @@ Backend:
 
 Frontend:
 - Vue Options API (`data()`, `methods`, `mounted()`), never Composition API. Delimiters are `${}`. Every page uses `mixins: [layoutMixin]` and calls `registerStkComponents(app)` before mount.
+- Jinja output inside `#app` is compiled by Vue: user text there runs as code. Pass it as data, or put `v-pre` on its element.
 - Server data JSON `<script>` tags go in `{% block js %}`, never `{% block content %}`: Vue strips scripts inside `#app`.
 - Template expressions cannot see page globals: `app.config.globalProperties.name = value` before mount. The production build fails silently, so look at the rendered page.
 - Vuetify 4 uses MD3 type classes (`text-title-large`, not `text-h6`); MD2 classes do nothing. Icons are Tabler (`ti ti-*`), never MDI.

{stkit-17.0.2 → stkit-17.1.1}/stk/scaffold/app/claude/skills/stk-api/SKILL.md

@@ -26,7 +26,7 @@ Existing API routes:
    - `POST /api/<singular>/<id>` — Update (POST, not PUT — stk convention)
    - `DELETE /api/<singular>/<id>` — Delete
 
-3. **Follow the conventions** in https://docs.stk.dev/api/: blueprint-level auth, `{item: {...}}`
+3. **Follow the conventions** in https://docs.stkit.dev/api/: blueprint-level auth, `{item: {...}}`
    payloads, `{items, total, perPage}` list responses via `orjson`, `Activity.register` on
    every mutation, rollback plus `log.exception` on failure, and `{"message": ...}` with
    400/404/412. The reference implementation is what `uv run stk new` writes

{stkit-17.0.2 → stkit-17.1.1}/stk/scaffold/app/claude/skills/stk-blueprint/SKILL.md

@@ -34,8 +34,8 @@ It never edits a stk file. Then:
 ## Conventions
 
 The generated files already follow every stk convention. When you change them, the rules
-are in `CLAUDE.md` and the details in https://docs.stk.dev/models/, https://docs.stk.dev/api/, and
-https://docs.stk.dev/frontend/. Read the page before editing that layer.
+are in `CLAUDE.md` and the details in https://docs.stkit.dev/models/, https://docs.stkit.dev/api/, and
+https://docs.stkit.dev/frontend/. Read the page before editing that layer.
 
 ## Before you report done
 

{stkit-17.0.2 → stkit-17.1.1}/stk/scaffold/app/claude/skills/stk-deploy/SKILL.md

@@ -26,7 +26,7 @@ wget -qO /tmp/deploy.sh https://raw.githubusercontent.com/level09/stk/master/dep
 sudo DOMAIN=example.com REPO=<github-user>/<repo> bash /tmp/deploy.sh
 ```
 
-Every variable and what the script installs: https://docs.stk.dev/deployment/.
+Every variable and what the script installs: https://docs.stkit.dev/deployment/.
 
 Ends at a live `https://<domain>` with an admin login. Credentials are saved
 on the server at `/home/<app-user>/.credentials`.

{stkit-17.0.2 → stkit-17.1.1}/stk/scaffold/app/claude/skills/stk-lessons/SKILL.md

@@ -27,7 +27,7 @@ most three per run. Append and continue the task; never stop it to log.
 
 Input: `.stk/lessons.md`, or the path the user gives.
 
-1. **Drop what is covered.** Search the docs (https://docs.stk.dev), `CLAUDE.md`, the skills, and
+1. **Drop what is covered.** Search the docs (https://docs.stkit.dev), `CLAUDE.md`, the skills, and
    `stk/checks.py`. A lesson that recurs despite an existing rule means the rule sits too low:
    move it up the ladder below instead of repeating it.
 2. **Drop one-offs**: a single occurrence with no general cause.

{stkit-17.0.2 → stkit-17.1.1}/stk/scaffold/app/claude/skills/stk-migrate/SKILL.md

@@ -58,7 +58,7 @@ Models with tables:
 ## Before you trust it
 
 Model conventions and the three SQLite traps (non-transactional DDL, NOT NULL needs
-`server_default`, named constraints) are in https://docs.stk.dev/models/. Check each exit code;
+`server_default`, named constraints) are in https://docs.stkit.dev/models/. Check each exit code;
 never pipe a migration command to `tail`, and never delete a revision file before
 `uv run stk db downgrade <target>` has succeeded.
 

stkit-17.1.1/stk/static/VERSIONS.txt

@@ -0,0 +1,4 @@
+vue 3.5.44
+vuetify 4.3.1
+axios 1.21.0
+@tabler/icons-webfont 3.50.0