@jskit-ai/agent-docs 0.1.154 → 0.1.156

package/skills/jskit/references/pattern-index.md

@@ -15,7 +15,7 @@ A concrete Fastify, Vue, and JSKIT application foundation for products that do n
 
 - Id: `app/minimal-foundation`
 - Keywords: `app`, `fastify`, `foundation`, `minimal`, `server`, `vite`, `vue`
-- Owner: `@jskit-ai/agent-docs@0.1.154`
+- Owner: `@jskit-ai/agent-docs@0.1.156`
 - Read: [PATTERN.md](patterns/app/minimal-foundation/PATTERN.md)
 - Examples: [example/](patterns/app/minimal-foundation/example/)
 - Requires: `@jskit-ai/http-runtime`, `@jskit-ai/kernel`
@@ -26,7 +26,7 @@ A concrete JSKIT web application foundation with responsive shell navigation, se
 
 - Id: `app/shell-foundation`
 - Keywords: `app`, `foundation`, `material`, `navigation`, `placements`, `shell`, `vite`, `vue`
-- Owner: `@jskit-ai/agent-docs@0.1.154`
+- Owner: `@jskit-ai/agent-docs@0.1.156`
 - Read: [PATTERN.md](patterns/app/shell-foundation/PATTERN.md)
 - Examples: [example/](patterns/app/shell-foundation/example/)
 - Requires: `@jskit-ai/http-runtime`, `@jskit-ai/kernel`, `@jskit-ai/shell-web`
@@ -37,7 +37,7 @@ Configure an assistant runtime for one application surface and expose its chat a
 
 - Id: `assistant/assistant-surface`
 - Keywords: `ai`, `assistant`, `chat`, `config`, `environment`, `page`, `placement`, `settings`, `surface`
-- Owner: `@jskit-ai/assistant-runtime@0.1.153`
+- Owner: `@jskit-ai/assistant-runtime@0.1.155`
 - Read: [PATTERN.md](patterns/assistant/assistant-surface/PATTERN.md)
 - Examples: [example/](patterns/assistant/assistant-surface/example/)
 - Requires: `@jskit-ai/assistant-runtime`, `@jskit-ai/shell-web`
@@ -48,7 +48,7 @@ Compose JSKIT authentication routes, views, profile controls, and public surface
 
 - Id: `auth/auth-surface`
 - Keywords: `account`, `auth`, `login`, `logout`, `password`, `placement`, `profile`, `reset`, `surface`
-- Owner: `@jskit-ai/auth-web@0.1.182`
+- Owner: `@jskit-ai/auth-web@0.1.184`
 - Read: [PATTERN.md](patterns/auth/auth-surface/PATTERN.md)
 - Examples: [example/](patterns/auth/auth-surface/example/)
 - Requires: `@jskit-ai/auth-core`, `@jskit-ai/auth-web`, `@jskit-ai/shell-web`
@@ -59,18 +59,172 @@ Add Supabase authentication through normal npm composition, explicit environment
 
 - Id: `auth/supabase-auth`
 - Keywords: `auth`, `authentication`, `oauth`, `sessions`, `supabase`
-- Owner: `@jskit-ai/auth-provider-supabase-core@0.1.179`
+- Owner: `@jskit-ai/auth-provider-supabase-core@0.1.181`
 - Read: [PATTERN.md](patterns/auth/supabase-auth/PATTERN.md)
 - Examples: [example/](patterns/auth/supabase-auth/example/)
 - Requires: `@jskit-ai/auth-provider-supabase-core`
 
+## App-owned AI connections and static model selection
+
+Resolve an administrator environment key or an individual user's grant, then use the application's chosen AI SDK directly.
+
+- Id: `connectors/ai-connections`
+- Keywords: `ai`, `api-key`, `big-pickle`, `cli`, `environment`, `free`, `models`, `ownership`, `zai`, `zen`
+- Owner: `@jskit-ai/connectors-catalog@0.1.1`
+- Read: [PATTERN.md](patterns/connectors/ai-connections/PATTERN.md)
+- Examples: [example/](patterns/connectors/ai-connections/example/)
+- Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
+
+## API-key connections with portable JSON configuration
+
+Compose provider operations, authorization and encrypted file storage from a CLI or application server.
+
+- Id: `connectors/api-key-connection`
+- Keywords: `api-key`, `clay`, `cli`, `clickhouse`, `connectors`, `dbt`, `files`, `firecrawl`, `granola`, `integrations`, `metrics`, `prestashop`, `resend`, `semantic-layer`, `semrush`, `x-twitter`
+- Owner: `@jskit-ai/connectors-catalog@0.1.1`
+- Read: [PATTERN.md](patterns/connectors/api-key-connection/PATTERN.md)
+- Examples: [example/](patterns/connectors/api-key-connection/example/)
+- Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
+
+## Assistant MCP connections with portable files
+
+Compose token-based MCP discovery and explicitly authorized tool calls using the shared connector runtime.
+
+- Id: `connectors/assistant-mcp`
+- Keywords: `assistant`, `cli`, `connectors`, `files`, `integrations`, `mcp`, `n8n`, `sanity`
+- Owner: `@jskit-ai/connectors-catalog@0.1.1`
+- Read: [PATTERN.md](patterns/connectors/assistant-mcp/PATTERN.md)
+- Examples: [example/](patterns/connectors/assistant-mcp/example/)
+- Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
+
+## Assistant MCP OAuth with portable files
+
+Configure assistant OAuth clients, then compose existing state, encrypted file grants and authorized MCP calls.
+
+- Id: `connectors/assistant-mcp-oauth`
+- Keywords: `amplitude`, `assistant`, `atlassian`, `canva`, `cli`, `client metadata`, `confidence`, `connectors`, `figma`, `files`, `granola`, `hex`, `mcp`, `miro`, `oauth`
+- Owner: `@jskit-ai/connectors-catalog@0.1.1`
+- Read: [PATTERN.md](patterns/connectors/assistant-mcp-oauth/PATTERN.md)
+- Examples: [example/](patterns/connectors/assistant-mcp-oauth/example/)
+- Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
+
+## AWS object storage and Athena queries with explicit credentials
+
+Compose signed AWS operations, file configuration and application authorization from CLI or server code.
+
+- Id: `connectors/aws-storage-queries`
+- Keywords: `athena`, `aws`, `cli`, `connectors`, `files`, `iam`, `queries`, `s3`, `storage`, `sts`
+- Owner: `@jskit-ai/connectors-catalog@0.1.1`
+- Read: [PATTERN.md](patterns/connectors/aws-storage-queries/PATTERN.md)
+- Examples: [example/](patterns/connectors/aws-storage-queries/example/)
+- Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
+
+## Google Calendar from an application-owned CLI
+
+Compose reusable connection libraries with portable configuration, application ownership and durable storage.
+
+- Id: `connectors/calendar-cli`
+- Keywords: `calendar`, `cli`, `connectors`, `google`, `integrations`, `oauth`, `permissions`
+- Owner: `@jskit-ai/connector-google-calendar@0.1.1`
+- Read: [PATTERN.md](patterns/connectors/calendar-cli/PATTERN.md)
+- Examples: [example/](patterns/connectors/calendar-cli/example/)
+- Requires: `@jskit-ai/connector-google-calendar`, `@jskit-ai/connectors-core`, `@jskit-ai/database-runtime-mysql`
+
+## Authorized Inngest event delivery with portable files
+
+Compose the shared connector runtime for event delivery while leaving workflow code and event policy with the application.
+
+- Id: `connectors/event-delivery`
+- Keywords: `cli`, `connectors`, `events`, `files`, `inngest`, `integrations`, `workflows`
+- Owner: `@jskit-ai/connectors-catalog@0.1.1`
+- Read: [PATTERN.md](patterns/connectors/event-delivery/PATTERN.md)
+- Examples: [example/](patterns/connectors/event-delivery/example/)
+- Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
+
+## Firebase messaging from a CLI or application backend
+
+Wire service-account grants, file storage, explicit message actions and public browser settings without generating an application.
+
+- Id: `connectors/firebase-messaging`
+- Keywords: `cli`, `connectors`, `fcm`, `files`, `firebase`, `integrations`, `jwt`, `notifications`, `push`, `service-account`, `vapid`
+- Owner: `@jskit-ai/connectors-catalog@0.1.1`
+- Read: [PATTERN.md](patterns/connectors/firebase-messaging/PATTERN.md)
+- Examples: [example/](patterns/connectors/firebase-messaging/example/)
+- Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
+
+## Existing-account Google Ads Search
+
+Compose reviewed Search campaigns with project-owned Google OAuth and portable saved plans.
+
+- Id: `connectors/google-ads-search`
+- Keywords: `ads`, `campaigns`, `cli`, `connectors`, `conversion`, `google`, `search`
+- Owner: `@jskit-ai/connectors-catalog@0.1.1`
+- Read: [PATTERN.md](patterns/connectors/google-ads-search/PATTERN.md)
+- Examples: [example/](patterns/connectors/google-ads-search/example/)
+- Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
+
+## OAuth connections with portable files
+
+Compose provider consent, verification and encrypted file persistence from an application server or CLI.
+
+- Id: `connectors/oauth-connection`
+- Keywords: `accounting`, `assistant permissions`, `books`, `cli`, `client credentials`, `connectors`, `consent`, `crm`, `databricks`, `developer token`, `fabric`, `files`, `gaql`, `google ads`, `graphql`, `integrations`, `linkedin`, `microsoft`, `oauth`, `powerpoint`, `salesforce`, `service principal`, `shopify`, `soql`, `staffing`, `tiktok`, `twitch`, `wave`, `word`, `wordpress`, `workday`, `xero`, `zoho`
+- Owner: `@jskit-ai/connectors-catalog@0.1.1`
+- Read: [PATTERN.md](patterns/connectors/oauth-connection/PATTERN.md)
+- Examples: [example/](patterns/connectors/oauth-connection/example/)
+- Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
+
+## Create Paddle products with prices
+
+Compose a sequential catalogue batch and preserve partial success for application-owned recovery.
+
+- Id: `connectors/paddle-catalogue`
+- Keywords: `batch`, `paddle`, `payments`, `prices`, `products`
+- Owner: `@jskit-ai/connectors-catalog@0.1.1`
+- Read: [PATTERN.md](patterns/connectors/paddle-catalogue/PATTERN.md)
+- Examples: [example/](patterns/connectors/paddle-catalogue/example/)
+- Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
+
+## Public logo images from portable integration configuration
+
+Resolve a publishable image key deliberately and use the shared URL library in a browser, backend or CLI.
+
+- Id: `connectors/public-image`
+- Keywords: `cli`, `connectors`, `files`, `images`, `integrations`, `logo-dev`, `public-key`
+- Owner: `@jskit-ai/connectors-catalog@0.1.1`
+- Read: [PATTERN.md](patterns/connectors/public-image/PATTERN.md)
+- Examples: [example/](patterns/connectors/public-image/example/)
+- Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
+
+## Redshift queries with shared AWS credentials
+
+Compose file configuration, Redshift Data API operations and application query ownership.
+
+- Id: `connectors/redshift-queries`
+- Keywords: `aws`, `cli`, `connectors`, `files`, `iam`, `provisioned`, `redshift`, `serverless`, `sql`, `warehouse`
+- Owner: `@jskit-ai/connectors-catalog@0.1.1`
+- Read: [PATTERN.md](patterns/connectors/redshift-queries/PATTERN.md)
+- Examples: [example/](patterns/connectors/redshift-queries/example/)
+- Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
+
+## Authorised project source scans with Wiz
+
+Use the shared scanner runtime from a CLI or a host worker with portable configuration and explicit source ownership.
+
+- Id: `connectors/source-scanning`
+- Keywords: `cancellation`, `cli`, `connectors`, `integrations`, `scanning`, `security`, `source`, `wiz`, `worker`
+- Owner: `@jskit-ai/connectors-catalog@0.1.1`
+- Read: [PATTERN.md](patterns/connectors/source-scanning/PATTERN.md)
+- Examples: [example/](patterns/connectors/source-scanning/example/)
+- Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
+
 ## Owner console surface
 
 Add a protected administration surface, settings shell, and semantic navigation through JSKIT console and shell APIs.
 
 - Id: `console/console-surface`
 - Keywords: `admin`, `console`, `navigation`, `owner`, `placement`, `settings`, `surface`
-- Owner: `@jskit-ai/console-web@0.1.150`
+- Owner: `@jskit-ai/console-web@0.1.152`
 - Read: [PATTERN.md](patterns/console/console-surface/PATTERN.md)
 - Examples: [example/](patterns/console/console-surface/example/)
 - Requires: `@jskit-ai/console-core`, `@jskit-ai/console-web`, `@jskit-ai/shell-web`
@@ -81,7 +235,7 @@ Build a routed CRUD user interface as thin application pages over JSKIT's shared
 
 - Id: `crud/crud-screen-set`
 - Keywords: `actions`, `add`, `crud`, `delete`, `edit`, `filters`, `list`, `material`, `routes`, `view`, `vue`
-- Owner: `@jskit-ai/http-web@0.1.27`
+- Owner: `@jskit-ai/http-web@0.1.29`
 - Read: [PATTERN.md](patterns/crud/crud-screen-set/PATTERN.md)
 - Examples: [example/](patterns/crud/crud-screen-set/example/)
 - Requires: `@jskit-ai/http-web`, `@jskit-ai/resource-crud-core`
@@ -92,7 +246,7 @@ Build a complete application-owned CRUD server package from a migration, resourc
 
 - Id: `crud/json-api-resource-package`
 - Keywords: `actions`, `crud`, `database`, `json-api`, `migration`, `permissions`, `provider`, `repository`, `routes`, `service`
-- Owner: `@jskit-ai/crud-core@0.1.193`
+- Owner: `@jskit-ai/crud-core@0.1.195`
 - Read: [PATTERN.md](patterns/crud/json-api-resource-package/PATTERN.md)
 - Examples: [example/](patterns/crud/json-api-resource-package/example/)
 - Requires: `@jskit-ai/crud-core`, `@jskit-ai/resource-crud-core`
@@ -103,7 +257,7 @@ Define an authenticated application resource whose records belong to the current
 
 - Id: `crud/resource-contract`
 - Keywords: `authenticated`, `crud`, `database`, `owner-scoped`, `resource`, `user`
-- Owner: `@jskit-ai/resource-crud-core@0.1.124`
+- Owner: `@jskit-ai/resource-crud-core@0.1.126`
 - Read: [PATTERN.md](patterns/crud/resource-contract/PATTERN.md)
 - Examples: [example/](patterns/crud/resource-contract/example/)
 - Requires: `@jskit-ai/resource-crud-core`
@@ -114,7 +268,7 @@ Configure a JSKIT application for MySQL with a fixed driver, ordinary environmen
 
 - Id: `database/mysql-application`
 - Keywords: `database`, `knex`, `mariadb`, `migrations`, `mysql`, `mysql2`
-- Owner: `@jskit-ai/database-runtime-mysql@0.1.180`
+- Owner: `@jskit-ai/database-runtime-mysql@0.1.182`
 - Read: [PATTERN.md](patterns/database/mysql-application/PATTERN.md)
 - Examples: [example/](patterns/database/mysql-application/example/)
 - Requires: `@jskit-ai/database-runtime-mysql`
@@ -125,7 +279,7 @@ Configure a JSKIT application for PostgreSQL with a fixed driver, ordinary envir
 
 - Id: `database/postgres-application`
 - Keywords: `database`, `knex`, `migrations`, `pg`, `postgres`, `postgresql`
-- Owner: `@jskit-ai/database-runtime-postgres@0.1.179`
+- Owner: `@jskit-ai/database-runtime-postgres@0.1.181`
 - Read: [PATTERN.md](patterns/database/postgres-application/PATTERN.md)
 - Examples: [example/](patterns/database/postgres-application/example/)
 - Requires: `@jskit-ai/database-runtime-postgres`
@@ -136,7 +290,7 @@ Wrap a JSKIT web application in a Capacitor Android shell using native Capacitor
 
 - Id: `mobile/android-application`
 - Keywords: `android`, `capacitor`, `device`, `mobile`, `native`, `shell`, `webview`
-- Owner: `@jskit-ai/mobile-capacitor@0.1.117`
+- Owner: `@jskit-ai/mobile-capacitor@0.1.119`
 - Read: [PATTERN.md](patterns/mobile/android-application/PATTERN.md)
 - Examples: [example/](patterns/mobile/android-application/example/)
 - Requires: `@capacitor/android`, `@capacitor/app`, `@capacitor/cli`, `@jskit-ai/mobile-capacitor`
@@ -147,18 +301,29 @@ Add JSKIT realtime events with an optional Redis backplane and an explicit shell
 
 - Id: `realtime/realtime-application`
 - Keywords: `realtime`, `redis`, `socket.io`, `sockets`, `status`, `websocket`
-- Owner: `@jskit-ai/realtime@0.1.179`
+- Owner: `@jskit-ai/realtime@0.1.181`
 - Read: [PATTERN.md](patterns/realtime/realtime-application/PATTERN.md)
 - Examples: [example/](patterns/realtime/realtime-application/example/)
 - Requires: `@jskit-ai/realtime`, `@jskit-ai/shell-web`
 
+## Google rewarded delivery
+
+Compose application-owned Google Publisher Tag delivery with the generic rewarded workflow.
+
+- Id: `rewards/google-rewarded`
+- Keywords: `ads`, `google`, `publisher tag`, `rewarded`, `unlock`
+- Owner: `@jskit-ai/rewarded-web@0.1.120`
+- Read: [PATTERN.md](patterns/rewards/google-rewarded/PATTERN.md)
+- Examples: [example/](patterns/rewards/google-rewarded/example/)
+- Requires: `@jskit-ai/rewarded-web`
+
 ## App-local server feature package
 
 Define a server feature through explicit capabilities and first-class actions, adding services or repositories only when its domain earns them.
 
 - Id: `server/feature-package`
 - Keywords: `actions`, `feature`, `json-rest`, `knex`, `orchestration`, `package`, `provider`, `repository`, `routes`, `server`
-- Owner: `@jskit-ai/agent-docs@0.1.154`
+- Owner: `@jskit-ai/agent-docs@0.1.156`
 - Read: [PATTERN.md](patterns/server/feature-package/PATTERN.md)
 - Examples: [example/](patterns/server/feature-package/example/)
 - Requires: `@jskit-ai/kernel`
@@ -169,7 +334,7 @@ Compose the JSKIT responsive shell, semantic placements, settings navigation, an
 
 - Id: `shell/application-shell`
 - Keywords: `adaptive`, `app`, `layout`, `navigation`, `placement`, `responsive`, `settings`, `shell`
-- Owner: `@jskit-ai/shell-web@0.1.186`
+- Owner: `@jskit-ai/shell-web@0.1.188`
 - Read: [PATTERN.md](patterns/shell/application-shell/PATTERN.md)
 - Examples: [example/](patterns/shell/application-shell/example/)
 - Requires: `@jskit-ai/kernel`, `@jskit-ai/shell-web`
@@ -180,7 +345,7 @@ Add product routes and shell extensions through file routing, semantic placement
 
 - Id: `ui/page-and-placement`
 - Keywords: `component`, `navigation`, `outlet`, `page`, `placement`, `routes`, `section`, `shell`, `subpages`, `vue`
-- Owner: `@jskit-ai/shell-web@0.1.186`
+- Owner: `@jskit-ai/shell-web@0.1.188`
 - Read: [PATTERN.md](patterns/ui/page-and-placement/PATTERN.md)
 - Examples: [example/](patterns/ui/page-and-placement/example/)
 - Requires: `@jskit-ai/kernel`, `@jskit-ai/shell-web`
@@ -191,7 +356,7 @@ Compose an account settings route and profile, preference, and notification sect
 
 - Id: `users/account-settings`
 - Keywords: `account`, `notifications`, `preferences`, `profile`, `settings`, `user`, `vue`
-- Owner: `@jskit-ai/users-web@0.1.200`
+- Owner: `@jskit-ai/users-web@0.1.202`
 - Read: [PATTERN.md](patterns/users/account-settings/PATTERN.md)
 - Examples: [example/](patterns/users/account-settings/example/)
 - Requires: `@jskit-ai/shell-web`, `@jskit-ai/users-core`, `@jskit-ai/users-web`
@@ -202,7 +367,7 @@ Expose user administration and workspace-scoped member operations through app-ow
 
 - Id: `users/user-administration-server`
 - Keywords: `account`, `admin`, `member`, `repository`, `resource`, `routes`, `service`, `user`, `workspace`
-- Owner: `@jskit-ai/users-core@0.1.195`
+- Owner: `@jskit-ai/users-core@0.1.197`
 - Read: [PATTERN.md](patterns/users/user-administration-server/PATTERN.md)
 - Examples: [example/](patterns/users/user-administration-server/example/)
 - Requires: `@jskit-ai/crud-core`, `@jskit-ai/users-core`
@@ -213,7 +378,7 @@ Configure roles, workspace access policy, invitations, and app-owned invitation
 
 - Id: `workspaces/workspace-server`
 - Keywords: `access`, `invite`, `membership`, `multitenancy`, `policy`, `role`, `tenancy`, `workspace`
-- Owner: `@jskit-ai/workspaces-core@0.1.160`
+- Owner: `@jskit-ai/workspaces-core@0.1.162`
 - Read: [PATTERN.md](patterns/workspaces/workspace-server/PATTERN.md)
 - Examples: [example/](patterns/workspaces/workspace-server/example/)
 - Requires: `@jskit-ai/users-core`, `@jskit-ai/workspaces-core`
@@ -224,7 +389,7 @@ Compose workspace selection, invitation, member administration, settings, and re
 
 - Id: `workspaces/workspace-surfaces`
 - Keywords: `admin`, `invite`, `member`, `navigation`, `settings`, `surface`, `switcher`, `workspace`
-- Owner: `@jskit-ai/workspaces-web@0.1.161`
+- Owner: `@jskit-ai/workspaces-web@0.1.163`
 - Read: [PATTERN.md](patterns/workspaces/workspace-surfaces/PATTERN.md)
 - Examples: [example/](patterns/workspaces/workspace-surfaces/example/)
 - Requires: `@jskit-ai/shell-web`, `@jskit-ai/workspaces-core`, `@jskit-ai/workspaces-web`

package/skills/jskit/references/patterns/app/minimal-foundation/example/package.json

@@ -34,7 +34,7 @@
   "dependencies": {
     "@local/main": "0.1.0",
     "@fastify/static": "^10.1.3",
-    "@jskit-ai/kernel": "0.1.182",
+    "@jskit-ai/kernel": "0.1.184",
     "@tanstack/vue-query": "^5.101.0",
     "fastify": "^5.8.5",
     "json-rest-schema": "^1.0.17",
@@ -42,11 +42,11 @@
     "vue": "^3.5.38",
     "vue-router": "^5.1.0",
     "vuetify": "^4.1.2",
-    "@jskit-ai/http-runtime": "0.1.180"
+    "@jskit-ai/http-runtime": "0.1.182"
   },
   "devDependencies": {
-    "@jskit-ai/config-eslint": "0.1.179",
-    "@jskit-ai/jskit-catalog": "0.1.207",
+    "@jskit-ai/config-eslint": "0.1.181",
+    "@jskit-ai/jskit-catalog": "0.1.209",
     "@playwright/test": "1.61.1",
     "@vitejs/plugin-vue": "^6.0.7",
     "eslint": "^10.8.0",

package/skills/jskit/references/patterns/app/shell-foundation/example/package.json

@@ -34,7 +34,7 @@
   "dependencies": {
     "@local/main": "0.1.0",
     "@fastify/static": "^10.1.3",
-    "@jskit-ai/kernel": "0.1.182",
+    "@jskit-ai/kernel": "0.1.184",
     "@tanstack/vue-query": "^5.101.0",
     "fastify": "^5.8.5",
     "json-rest-schema": "^1.0.17",
@@ -42,13 +42,13 @@
     "vue": "^3.5.38",
     "vue-router": "^5.1.0",
     "vuetify": "^4.1.2",
-    "@jskit-ai/http-runtime": "0.1.180",
+    "@jskit-ai/http-runtime": "0.1.182",
     "@mdi/js": "^7.4.47",
-    "@jskit-ai/shell-web": "0.1.186"
+    "@jskit-ai/shell-web": "0.1.188"
   },
   "devDependencies": {
-    "@jskit-ai/config-eslint": "0.1.179",
-    "@jskit-ai/jskit-catalog": "0.1.207",
+    "@jskit-ai/config-eslint": "0.1.181",
+    "@jskit-ai/jskit-catalog": "0.1.209",
     "@playwright/test": "1.61.1",
     "@vitejs/plugin-vue": "^6.0.7",
     "eslint": "^10.8.0",

package/skills/jskit/references/patterns/app/shell-foundation/example/packages/main/package.json

@@ -9,7 +9,7 @@
   },
   "description": "App-local runtime composition and lightweight glue.",
   "dependencies": {
-    "@jskit-ai/kernel": "0.1.182"
+    "@jskit-ai/kernel": "0.1.184"
   },
   "jskit": {
     "kind": "runtime",

package/skills/jskit/references/patterns/auth/supabase-auth/PATTERN.md

@@ -40,6 +40,31 @@ Use `@jskit-ai/auth-provider-supabase-core` for the provider and
 `@jskit-ai/auth-core` policy contracts. Configure `config.auth` through the
 application's ordinary server configuration.
 
+## Provider login policy and prerelease migration
+
+Provider-specific login query parameters belong to the application. For example,
+an application choosing Google's account picker can configure:
+
+```js
+const config = {
+  auth: {
+    oauth: {
+      providers: ["google"],
+      defaultProvider: "google",
+      queryParams: { google: { prompt: "select_account" } }
+    }
+  }
+};
+```
+
+Pre-release applications that relied on the previous implicit Google
+`select_account` parameter must add this configuration if they want to retain
+that behavior. The runtime no longer supplies it automatically. This is a manual
+V0 migration; there is no fallback to the old policy. These values control the
+Supabase login flow. They do not configure a Gmail API connection or confer
+mailbox permissions. The application still owns its identity and account-linking
+policy, while connectors manage separately authorized provider access.
+
 ## Example files
 
 `example/package.json` declares the selected provider. `example/.env.example`

package/skills/jskit/references/patterns/auth/supabase-auth/example/package.json

@@ -2,6 +2,6 @@
   "private": true,
   "type": "module",
   "dependencies": {
-    "@jskit-ai/auth-provider-supabase-core": "0.1.179"
+    "@jskit-ai/auth-provider-supabase-core": "0.1.181"
   }
 }

package/skills/jskit/references/patterns/connectors/ai-connections/PATTERN.md

@@ -0,0 +1,84 @@
+---
+id: connectors/ai-connections
+title: App-owned AI connections and static model selection
+summary: Resolve an administrator environment key or an individual user's grant, then use the application's chosen AI SDK directly.
+keywords: ai, models, free, big-pickle, zen, zai, environment, api-key, ownership, cli
+requires: @jskit-ai/connectors-core, @jskit-ai/connectors-catalog
+---
+
+# App-owned AI connections and static model selection
+
+## Use when
+
+Use the [AI guide](https://github.com/mobily-enterprises/jskit-ai/blob/main/packages/connectors-catalog/docs/ai.md) to choose the model, account owner and
+framework SDK before wiring requests. The shared catalogue is a deliberate
+static extraction, not an OpenCode runtime integration. The default Big Pickle
+route needs no account, user key or environment setup.
+
+## Framework APIs
+
+The imported library validates configuration and resolves authorized server-side
+parameters. The example only composes those parameters with an **app-supplied**
+model factory. It does not implement inference or install an SDK. Pass a factory
+for the returned provider/protocol; do not treat every model as chat completions.
+
+## Product decisions
+
+For a CLI app, read and validate `integrations.json`, use a trusted local
+operator policy and your normal private environment. For a web app, derive
+identity from its authenticated server session and explicitly authorize shared
+account use. Never adapt a permissive CLI policy into a public HTTP endpoint.
+
+## Invariants
+
+Administrator keys use `env:APP_AI_API_KEY`; the existing environment resolver
+is the default. Individual keys use an app-owned reference and a resolver scoped
+to authorized application, user, provider and integration. The application owns
+key-entry and disconnect screens. Never return connection parameters to a
+browser or share coding-agent subscription credentials.
+
+## Do not use when
+
+Frameworks outside Node follow their own configuration and AI client patterns.
+These provider facts and the text file are portable; this JavaScript example is
+not a dependency that Laravel or another framework must install.
+
+## Example files
+
+- `example/ai-model.js` composes the connection resolver with an app-owned SDK factory.
+
+## Variation points
+
+Choose shared Env or an authenticated individual-key resolver, then provide the
+SDK factory for the selected provider. The application owns prompts, request
+limits, streaming, tools and user-visible provider failures.
+
+## Verification
+
+Verify with controlled SDK factories and private test keys. Do not call live
+inference or generate/deploy a sample application to prove configuration wiring.
+
+## Avoid
+
+Do not add a runtime catalogue fetch, token billing, an inference proxy, a
+cross-language runtime or a silent paid fallback. Never infer that a model
+marked free can be used without the authentication its provider requires.
+
+## Existing Perplexity connector slots
+
+Use `example/perplexity-answer.js` when configuration already has provider
+`perplexity`. It reads that exact slot, authorizes the caller, resolves its private
+reference and passes it to an app-supplied OpenAI-compatible SDK factory.
+It neither creates another `ai` slot nor stores another copy of the key.
+The app installs its own native SDK, for example `openai`, and supplies
+`createClient: options => new OpenAI(options)`. No SDK is a dependency of this
+connector package. Call the returned function with context, integrationId,
+question, current provider model name and optional stream/signal.
+For a normal result render choices[0].message.content with citations and
+search_results. For stream=true consume the async iterator, rendering deltas
+and retaining final citations/search_results; cancel with AbortSignal.
+Allow only safe HTTP(S) links in rendered citations. Never send the API key/client
+to a browser. A public route must sanitize SDK failures and enforce app budgets.
+This is direct app-to-provider traffic, with no Vibe64 token sales or proxy.
+A trusted CLI operator can use the same JSON/Env and factory. Other frameworks
+use their own native Perplexity/OpenAI-compatible clients and the same slot.

package/skills/jskit/references/patterns/connectors/ai-connections/example/ai-model.js

@@ -0,0 +1,11 @@
+import { createAiConnectionResolver } from "@jskit-ai/connectors-catalog/server/ai";
+
+// App-owned composition. Supply the authenticated authorization policy and the
+// SDK model factory used by this application. Omit resolveReference for Env.
+export function createConfiguredAiModel({ configuration, authorize, resolveReference, createModel }) {
+  const connections = createAiConnectionResolver({ configuration, authorize, resolveReference });
+  return async ({ context, integrationId }) => {
+    const parameters = await connections.resolve({ context, integrationId });
+    return createModel(parameters); // Backend only; the app owns subsequent inference.
+  };
+}

package/skills/jskit/references/patterns/connectors/ai-connections/example/perplexity-answer.js

@@ -0,0 +1,29 @@
+import { ConnectorError, createEnvironmentReferenceResolver } from "@jskit-ai/connectors-core/server";
+import { validateIntegrationConfiguration } from "@jskit-ai/connectors-core/shared/configuration";
+import { perplexityProvider } from "@jskit-ai/connectors-catalog/server/perplexity";
+
+// App-owned composition, not an inference service. Supply the application's native
+// OpenAI-compatible client factory. Credentials and the returned client stay server-side.
+export function createPerplexityAnswers({ configuration, authorize, createClient,
+  resolveReference = createEnvironmentReferenceResolver() }) {
+  if (typeof authorize !== "function" || typeof createClient !== "function") throw new TypeError("Supply application authorization and its native client factory.");
+  const config = validateIntegrationConfiguration(configuration, { providers: [perplexityProvider], allowUnknownProviders: true });
+  return async ({ context, integrationId, question, model, stream = false, signal }) => {
+    const slot = Object.hasOwn(config.integrations, integrationId) ? config.integrations[integrationId] : null;
+    if (slot?.provider !== "perplexity") throw new ConnectorError("connector_not_found", "Configure a Perplexity slot.", { statusCode: 404 });
+    const owner = await authorize(context, { integrationId, accountMode: slot.accountMode, operation: "perplexity.answer", input: { question, model, stream } });
+    if (!owner?.applicationId || !owner?.subjectId) throw new ConnectorError("connector_access_denied", "Perplexity access was denied.", { statusCode: 403 });
+    if (typeof question !== "string" || !question.trim() || question.length > 20000 || typeof model !== "string" || !model.trim() || model.length > 200 || typeof stream !== "boolean")
+      throw new ConnectorError("connector_input_invalid", "Supply a question, provider model name and boolean stream flag.", { statusCode: 422 });
+    signal?.throwIfAborted();
+    let apiKey;
+    try {
+      apiKey = await resolveReference(slot.authentication.secretRef, owner, { integrationId, accountMode: slot.accountMode, providerId: "perplexity" });
+      if (typeof apiKey !== "string" || !apiKey.trim() || apiKey.trim() === "MISSING" || /[\r\n\0]/.test(apiKey) || apiKey.length > 16384) throw new Error();
+    } catch { throw new ConnectorError("connector_binding_missing", "Set this Perplexity credential in the application's private Env.", { statusCode: 422 }); }
+    const client = createClient({ apiKey, baseURL: "https://api.perplexity.ai", maxRetries: 0, timeout: 60000 });
+    // Preserve citations/search_results/usage and streaming chunks. The application
+    // renders them, accounts for usage and sanitizes failures at its HTTP boundary.
+    return client.chat.completions.create({ model, messages: [{ role: "user", content: question }], stream }, { signal });
+  };
+}