Update software stack and dependencies (#66)

Signed-off-by: Steve Scargall <37674041+sscargal@users.noreply.github.com>

Author: sscargal

.claude/CLAUDE.md

@@ -4,7 +4,7 @@ This file configures Claude Code for this specific project. It supplements your
 
 ## Project Summary
 
-This is the Hugo static website for [MemMachine](https://memmachine.ai/) — an open-source AI agent memory layer. The site is built with Hugo Extended ≥ 0.149.0, uses a custom `memmachine` theme, and deploys to GitHub Pages. See `AGENTS.md` for the full orientation guide.
+This is the Hugo static website for [MemMachine](https://memmachine.ai/) — an open-source AI agent memory layer. The site is built with Hugo Extended ≥ 0.161.1, uses a custom `memmachine` theme, and deploys to GitHub Pages. See `AGENTS.md` for the full orientation guide.
 
 ## Critical Rules
 
@@ -58,7 +58,7 @@ If the build fails, investigate and fix before committing. Never commit with a b
 
 ## Hugo Version
 
-Minimum: **0.149.0 Extended**. The Extended edition is required for Sass/SCSS support. Standard Hugo will fail at build time.
+Minimum: **0.161.1 Extended**. The Extended edition is required for Sass/SCSS support. Standard Hugo will fail at build time.
 
 ## Git Remotes
 

.claude/skills/hugo-chores/SKILL.md

@@ -1,12 +1,12 @@
 ---
 name: hugo-chores
-description: "Maintenance tasks for the memmachine.github.io Hugo site: upgrade Hugo version in CI/CD, verify the build, update npm dependencies. Use when the user wants to perform site maintenance."
+description: "Maintenance tasks for the memmachine.github.io Hugo site: upgrade Hugo version in CI/CD, verify the build, update npm dependencies, update vendored theme libraries. Use when the user wants to perform site maintenance."
 trigger: /hugo-chores
 ---
 
 # /hugo-chores
 
-Perform maintenance tasks on the MemMachine website repository. Subcommands handle Hugo version upgrades, build verification, and npm dependency updates.
+Perform maintenance tasks on the MemMachine website repository. Subcommands handle Hugo version upgrades, build verification, npm dependency updates, and vendored theme library updates.
 
 ## Usage
 
@@ -15,6 +15,7 @@ Perform maintenance tasks on the MemMachine website repository. Subcommands hand
 /hugo-chores upgrade-hugo       # update Hugo version in CI/CD and docs
 /hugo-chores verify-build       # run a production build and report results
 /hugo-chores update-npm         # audit and update npm dependencies
+/hugo-chores update-theme       # check and update vendored theme libraries
 ```
 
 ## Deployment Model
@@ -25,10 +26,10 @@ The site deploys automatically. Every push to `main` triggers the GitHub Actions
 
 ```yaml
 env:
-  DART_SASS_VERSION: 1.91.0
-  GO_VERSION: 1.25.0
-  HUGO_VERSION: 0.149.0
-  NODE_VERSION: 22.18.0
+  DART_SASS_VERSION: 1.99.0
+  GO_VERSION: 1.26.3
+  HUGO_VERSION: 0.161.1
+  NODE_VERSION: 22.22.3
 ```
 
 To upgrade any tool, edit the corresponding env var in `.github/workflows/hugo.yaml` and push to main.
@@ -50,41 +51,50 @@ Upgrades the Hugo version used in CI/CD and updates all version references in do
 ### Step 1 — Find the current version
 
 ```bash
-grep -n "HUGO_VERSION\|hugo-version\|hugo Extended" .github/workflows/hugo.yaml | head -10
+grep -n "HUGO_VERSION\|DART_SASS_VERSION\|GO_VERSION\|NODE_VERSION" .github/workflows/hugo.yaml | head -10
 ```
 
-Parse the current version from the workflow file (look for the version string in the Hugo setup step, typically `extended_0.149.0` or similar format).
+Parse all four pinned versions from the workflow file.
 
-### Step 2 — Find the latest Hugo release
+### Step 2 — Find the latest releases
+
+Run these in parallel:
 
 ```bash
-# Check the latest release tag from the Hugo GitHub releases page
 curl -s https://api.github.com/repos/gohugoio/hugo/releases/latest | grep '"tag_name"'
+curl -s https://api.github.com/repos/sass/dart-sass/releases/latest | grep '"tag_name"'
+curl -s https://go.dev/dl/?mode=json | python3 -c "import sys,json; data=json.load(sys.stdin); stable=[r for r in data if r.get('stable')]; print(stable[0]['version'] if stable else 'not found')"
+curl -s https://nodejs.org/dist/index.json | python3 -c "import sys,json; releases=[r for r in json.load(sys.stdin) if r['version'].startswith('v22.') and 'lts' in r and r['lts']]; print(releases[0]['version'] if releases else 'not found')"
 ```
 
-If network access is unavailable, ask the user to provide the latest version number.
+If network access is unavailable, ask the user to provide the latest version numbers.
 
 ### Step 3 — Compare versions
 
-If the current version equals the latest, tell the user: "Hugo is already at the latest version (vX.X.X). No update needed." and stop.
+If all current versions equal the latest, tell the user all tools are up to date and stop.
 
-If the latest is newer, proceed.
+If any are newer, proceed with those that need updating.
 
 ### Step 4 — Update the workflow file
 
-In `.github/workflows/hugo.yaml`, update the `HUGO_VERSION` env var at the top of the `build` job. Use the Edit tool for a targeted replacement.
+In `.github/workflows/hugo.yaml`, update the env vars that changed. Use the Edit tool for a targeted replacement of the env block.
 
-The exact line to change (no quotes around the version):
-- `HUGO_VERSION: 0.149.0` → `HUGO_VERSION: {new_version}` (without a leading `v`)
+Version format notes:
+- Hugo and Dart Sass: strip leading `v` (e.g., `v0.161.1` → `0.161.1`)
+- Go: strip leading `go` (e.g., `go1.26.3` → `1.26.3`)
+- Node.js: strip leading `v` (e.g., `v22.22.3` → `22.22.3`)
 
 ### Step 5 — Update documentation
 
 Update version references in these files (use grep first to find exact strings):
 
 ```bash
-grep -n "0\.14[0-9]\|hugo.*version\|Hugo.*version" README.md AGENTS.md 2>/dev/null
+grep -rn "[0-9]\+\.[0-9]\+\.[0-9]\+" README.md AGENTS.md .claude/CLAUDE.md 2>/dev/null | grep -i "hugo\|sass\|go\|node"
 ```
 
+Files that reference Hugo version: `README.md`, `AGENTS.md`, `.claude/CLAUDE.md`
+Files that reference all four tool versions: `AGENTS.md`
+
 Use the Edit tool to update each occurrence found.
 
 ### Step 6 — Verify
@@ -99,9 +109,9 @@ Report the installed Hugo version. Note if it differs from the new CI version (t
 
 Tell the user:
 - What was updated (workflow file + which docs)
-- Old version → new version
-- Reminder to commit the changes: `git commit -sS -m "chore: upgrade Hugo to v{new_version}"`
-- Note that CI will use the new version on next push to main
+- Old version → new version for each tool changed
+- Reminder to commit the changes: `git commit -sS -m "chore: bump CI tool versions"`
+- Note that CI will use the new versions on next push to main
 
 ---
 
@@ -175,18 +185,150 @@ Tell the user:
 
 ---
 
+## Subcommand: update-theme
+
+Checks and updates the vendored third-party libraries used by the memmachine theme. The theme vendors libraries directly as minified files rather than using a package manager.
+
+### Theme library inventory
+
+| Library | Vendored files | How to detect version |
+|---------|---------------|----------------------|
+| Bootstrap (CSS) | `themes/memmachine/assets/css/bootstrap.min.css` | First line comment: `Bootstrap v5.3.8` |
+| Bootstrap (JS) | `themes/memmachine/assets/js/bootstrap.bundle.min.js` | First line comment: `Bootstrap v5.3.8` |
+| Lenis (CSS) | `themes/memmachine/assets/css/lenis.css` | File is unminified; version not embedded — check git blame or cross-reference JS |
+| Lenis (JS) | `themes/memmachine/assets/js/lenis.min.js` | First 200 chars contain `"1.3.23"` (bare version string, first quoted number) |
+| Font Awesome | CDN in `themes/memmachine/layouts/_partials/head.html` | `grep 'font-awesome' themes/memmachine/layouts/_partials/head.html` |
+
+**Note:** `themes/memmachine/assets/css/aos.min.css` is vendored but **not included** in the CSS bundle (`themes/memmachine/layouts/_partials/head/css.html`) and not loaded by any layout — skip it.
+
+### Step 1 — Detect current versions
+
+```bash
+# Bootstrap version (from CSS comment)
+head -2 themes/memmachine/assets/css/bootstrap.min.css | grep -o 'Bootstrap v[0-9.]*'
+
+# Lenis version (from JS string)
+python3 -c "
+import re
+with open('themes/memmachine/assets/js/lenis.min.js') as f:
+    c = f.read(300)
+m = re.search(r'[^0-9]([0-9]+\.[0-9]+\.[0-9]+)[^0-9]', c)
+print('Lenis:', m.group(1) if m else 'not found')
+"
+
+# Font Awesome version (from CDN URL)
+grep -o 'font-awesome/[0-9.]*' themes/memmachine/layouts/_partials/head.html
+```
+
+### Step 2 — Check latest versions
+
+Run these in parallel:
+
+```bash
+# Bootstrap latest
+curl -s https://api.github.com/repos/twbs/bootstrap/releases/latest | grep '"tag_name"'
+
+# Lenis latest
+curl -s https://registry.npmjs.org/lenis/latest | python3 -c "import sys,json; d=json.load(sys.stdin); print('lenis:', d['version'])"
+
+# Font Awesome latest
+curl -s https://api.github.com/repos/FortAwesome/Font-Awesome/releases/latest | grep '"tag_name"'
+```
+
+### Step 3 — Compare and decide
+
+Build a table of current vs. latest. For any library that is already up to date, skip it. For any that has a newer release, proceed to update it.
+
+### Step 4 — Update outdated libraries
+
+#### Updating Bootstrap
+
+Download new CSS and JS from jsDelivr, replacing the vendored files:
+
+```bash
+BOOTSTRAP_VERSION=5.3.8   # use the actual latest version
+
+curl -sL "https://cdn.jsdelivr.net/npm/bootstrap@${BOOTSTRAP_VERSION}/dist/css/bootstrap.min.css" \
+  -o themes/memmachine/assets/css/bootstrap.min.css
+
+curl -sL "https://cdn.jsdelivr.net/npm/bootstrap@${BOOTSTRAP_VERSION}/dist/js/bootstrap.bundle.min.js" \
+  -o themes/memmachine/assets/js/bootstrap.bundle.min.js
+```
+
+Verify the download by checking the version comment:
+```bash
+head -2 themes/memmachine/assets/css/bootstrap.min.css | grep -o 'Bootstrap v[0-9.]*'
+```
+
+#### Updating Lenis
+
+Download new CSS and JS from jsDelivr:
+
+```bash
+LENIS_VERSION=1.3.23   # use the actual latest version
+
+curl -sL "https://cdn.jsdelivr.net/npm/lenis@${LENIS_VERSION}/dist/lenis.css" \
+  -o themes/memmachine/assets/css/lenis.css
+
+curl -sL "https://cdn.jsdelivr.net/npm/lenis@${LENIS_VERSION}/dist/lenis.min.js" \
+  -o themes/memmachine/assets/js/lenis.min.js
+```
+
+Verify by checking the version string in the new JS:
+```bash
+python3 -c "
+import re
+with open('themes/memmachine/assets/js/lenis.min.js') as f:
+    c = f.read(300)
+m = re.search(r'[^0-9]([0-9]+\.[0-9]+\.[0-9]+)[^0-9]', c)
+print('Lenis:', m.group(1) if m else 'not found')
+"
+```
+
+#### Updating Font Awesome
+
+Edit the CDN URL in `themes/memmachine/layouts/_partials/head.html`. The line looks like:
+
+```html
+<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/7.0.0/css/all.min.css" ...>
+```
+
+Use the Edit tool to replace only the version number in the URL. Do not change any other attributes.
+
+### Step 5 — Verify build
+
+```bash
+hugo --gc --minify 2>&1
+```
+
+If the build fails, the most likely causes are:
+- A Lenis API change requiring a JS update in `themes/memmachine/assets/js/custom.js`
+- A Bootstrap breaking change in CSS class names
+
+If the build fails, revert the specific failing library and report the issue to the user.
+
+### Step 6 — Report
+
+Tell the user:
+- Which libraries were updated (old → new version)
+- Which were already up to date
+- Build result
+- Reminder to commit: `git commit -sS -m "chore: update vendored theme libraries"`
+
+---
+
 ## Evaluations
 
 ### Evaluation 1: upgrade-hugo with newer version available
 
-**Setup:** Current workflow has `extended_0.149.0`. Latest GitHub release is `v0.151.0`.
+**Setup:** Current workflow has `HUGO_VERSION: 0.149.0`. Latest GitHub release is `v0.161.1`.
 
 **Expected behavior:**
-- Detects current version as `0.149.0`
-- Detects latest as `0.151.0`
-- Updates `.github/workflows/hugo.yaml` to `extended_0.151.0`
-- Updates version references in `README.md` and `AGENTS.md`
-- Reports: "Updated Hugo from 0.149.0 to 0.151.0 in 3 files"
+- Detects current versions from workflow file
+- Fetches latest from GitHub/Go/Node APIs
+- Updates `.github/workflows/hugo.yaml` env block
+- Updates version references in `README.md`, `AGENTS.md`, `.claude/CLAUDE.md`
+- Reports: "Updated Hugo from 0.149.0 to 0.161.1"
 
 **Pass criteria:** All files updated with correct version string; no other files modified.
 
@@ -203,3 +345,19 @@ Tell the user:
 - Does not commit or push anything
 
 **Pass criteria:** Build passes; only read-only operations and the hugo command are run; `public/` is not staged for commit.
+
+---
+
+### Evaluation 3: update-theme with Bootstrap and Lenis outdated
+
+**Setup:** `bootstrap.min.css` first line shows `Bootstrap v5.3.2`. Lenis JS has `"1.1.14"`. Font Awesome CDN shows `7.0.0`. Latest Bootstrap is `v5.3.8`, Lenis is `1.3.23`, Font Awesome is `7.2.0`.
+
+**Expected behavior:**
+- Detects all three as outdated
+- Downloads Bootstrap 5.3.8 CSS and JS from jsDelivr
+- Downloads Lenis 1.3.23 CSS and JS from jsDelivr
+- Edits Font Awesome version in `head.html`
+- Verifies build passes
+- Reports all three updated
+
+**Pass criteria:** All three libraries at new versions; build passes; no other files modified.

.github/workflows/hugo.yaml

@@ -18,10 +18,10 @@ jobs:
   build:
     runs-on: ubuntu-latest
     env:
-      DART_SASS_VERSION: 1.91.0
-      GO_VERSION: 1.25.0
-      HUGO_VERSION: 0.149.0
-      NODE_VERSION: 22.18.0
+      DART_SASS_VERSION: 1.99.0
+      GO_VERSION: 1.26.3
+      HUGO_VERSION: 0.161.1
+      NODE_VERSION: 22.22.3
       TZ: UTC
     steps:
       - name: Checkout

AGENTS.md

@@ -14,9 +14,9 @@ This repository is the source for [memmachine.ai](https://memmachine.ai/), the p
 
 | Component | Version | Notes |
 |-----------|---------|-------|
-| Hugo | ≥ 0.149.0 **Extended** | Must be Extended edition (Sass support); pinned via `HUGO_VERSION` in workflow |
-| Dart Sass | 1.91.0 | CSS compilation; pinned via `DART_SASS_VERSION` in workflow |
-| Go | ≥ 1.25.0 | Hugo module dependency; pinned via `GO_VERSION` in workflow |
+| Hugo | ≥ 0.161.1 **Extended** | Must be Extended edition (Sass support); pinned via `HUGO_VERSION` in workflow |
+| Dart Sass | 1.99.0 | CSS compilation; pinned via `DART_SASS_VERSION` in workflow |
+| Go | ≥ 1.26.3 | Hugo module dependency; pinned via `GO_VERSION` in workflow |
 | Node.js | ≥ 22.x | PostCSS / Autoprefixer; pinned via `NODE_VERSION` in workflow |
 | npm | bundled with Node.js | Dependency management |
 | Theme | `memmachine` (custom) | Lives in `themes/memmachine/` |
@@ -90,7 +90,7 @@ brew install hugo
 
 # Verify Extended edition and correct version
 hugo version
-# Expected: hugo v0.149.0+extended ...
+# Expected: hugo v0.161.1+extended ...
 
 # 2. Install Go (Hugo module dependency)
 #    Download from https://go.dev/dl/ or use your package manager
@@ -176,10 +176,10 @@ All tool versions are pinned as `env:` vars at the top of the `build` job:
 
 | Variable | Current value |
 |----------|--------------|
-| `HUGO_VERSION` | `0.149.0` |
-| `DART_SASS_VERSION` | `1.91.0` |
-| `GO_VERSION` | `1.25.0` |
-| `NODE_VERSION` | `22.18.0` |
+| `HUGO_VERSION` | `0.161.1` |
+| `DART_SASS_VERSION` | `1.99.0` |
+| `GO_VERSION` | `1.26.3` |
+| `NODE_VERSION` | `22.22.3` |
 
 To upgrade any tool, edit its variable and push. The download URLs in the workflow derive the version from these vars automatically.
 

README.md

@@ -19,13 +19,13 @@ This repository contains the source code and content for the MemMachine website,
 
 ### Prerequisites
 
-- [Hugo](https://gohugo.io/getting-started/installing/) **Extended** edition, version 0.149.0 or newer (the Extended edition is required for Sass support)
-- [Go](https://go.dev/dl/) 1.25.0 or newer (Hugo module dependency)
+- [Hugo](https://gohugo.io/getting-started/installing/) **Extended** edition, version 0.161.1 or newer (the Extended edition is required for Sass support)
+- [Go](https://go.dev/dl/) 1.26.3 or newer (Hugo module dependency)
 - [Node.js](https://nodejs.org/) 22.x or newer (for asset building)
 
 ### Installation
 
-1. Install Hugo **Extended** (version 0.149.0 or newer):
+1. Install Hugo **Extended** (version 0.161.1 or newer):
 
    See the [official Hugo installation guide](https://gohugo.io/getting-started/installing/) for your platform, or use Homebrew (macOS/Linux):
 
@@ -40,7 +40,7 @@ This repository contains the source code and content for the MemMachine website,
 
    ```bash
    hugo version
-   # Should show: hugo v0.149.0+extended ...
+   # Should show: hugo v0.161.1+extended ...
    ```
 
 2. Install Go (required as a Hugo module dependency):