@jskit-ai/agent-docs 0.1.207 → 0.1.209

package/skills/jskit/references/app-operations.md

@@ -38,6 +38,35 @@ their own exact versions in dependency declarations; do not replace them with
 The copied files immediately belong to the application. Do not add pattern
 receipts, generator provenance, completion ledgers, or hidden operation state.
 
+## Implement before investigating internals
+
+Use the relevant public API contract and one matching example to build the
+smallest working slice, then verify its observable result. When the documented
+contract answers the task, stop reading and implement it. Do not trace framework
+or dependency internals to confirm documented options, routing, package
+discovery, transport, or lifecycle behaviour before trying that API.
+
+Implementation source is for a concrete failure or an API question the guide
+and example cannot answer. Name that failure or question before investigating,
+inspect only the relevant owner, and return to implementation and verification
+as soon as it is resolved. Do not tour a dependency tree for confidence. This
+applies to all features and dependencies, not only CRUD screens.
+
+## Discover files before reading them
+
+Discover the file, then read it. Do not infer its location from a convention.
+Use paths identified in the current tree, installed metadata, or the relevant
+example. When inspecting an unfamiliar package, list its files with
+`rg --files <observed-package-directory>` and select the relevant paths from
+that inventory before reading or searching source. Do not try guessed source
+directories. An import subpath is an `exports` alias, not necessarily a physical
+path; resolve it through the installed `package.json#exports` or
+`import.meta.resolve()` when following an import.
+
+This applies to every package and task, including third-party dependencies.
+Use a documented option directly when it already answers the question; source
+inspection is a fallback for a concrete unresolved fact.
+
 ## Install and compose capabilities
 
 Install selected capabilities together at the exact versions in the matching

package/skills/jskit/references/crud-operations.md

@@ -79,6 +79,15 @@ const bookResource = defineCrudResource({
         create: { required: true }
       }
     }
+  },
+  searchSchema: {
+    q: {
+      type: "string",
+      oneOf: ["title"],
+      filterOperator: "like",
+      splitBy: " ",
+      matchAll: true
+    }
   }
 });
 ```
@@ -164,6 +173,90 @@ When the same create action appears in more than one visible location, choose
 one visible action deliberately; do not relax the expected label to accept an
 unrelated fallback.
 
+## Browser tests verify validation and persistence
+
+Exercise rejected and accepted input through the same form. Check the rendered
+validation message and that rejection keeps the form open; then save an accepted
+value and prove it appears in the list after reloading. Use the resource's
+configured messages, the screen's `saveLabel`, and its actual browser routes.
+Do not infer an `aria-invalid` attribute from the fact that validation exists:
+the chosen field must actually implement that attribute contract before a test
+can assert it.
+
+For the public title-only Books variant above, using the pattern's
+`saveLabel: "Save book"`, default minimum-length message, and a root public
+surface:
+
+```ts
+await page.goto("/books");
+await page.getByRole("link", { name: "Add book", exact: true }).filter({ visible: true }).first().click();
+await expect(page).toHaveURL(/\/books\/new$/);
+await page.reload();
+const title = page.getByRole("textbox", { name: "Title", exact: true });
+const save = page.getByRole("button", { name: "Save book", exact: true });
+await title.fill("");
+await save.click();
+await expect(page.getByText("Length must be at least 1 characters.", { exact: true })).toBeVisible();
+await expect(page).toHaveURL(/\/books\/new$/);
+
+await title.fill("A saved book");
+await save.click();
+await expect(page).toHaveURL(/\/books$/);
+await expect(page.getByText("A saved book", { exact: true }).filter({ visible: true })).toBeVisible();
+await page.reload();
+await expect(page.getByText("A saved book", { exact: true }).filter({ visible: true })).toBeVisible();
+```
+
+For client-side routing, a click finishing does not prove the route has changed.
+Before reloading after a navigation control, wait for the destination with
+`await expect(page).toHaveURL(...)`, as above. Otherwise reload can reopen the
+origin page and a later form or Back locator waits on the wrong screen. Use the
+actual destination URL, including required context; do not add fixed sleeps or
+increase timeouts to hide this race. For a contextual Back check, wait for the
+form route, reload, click Back, and assert the original list URL. Test direct
+entry separately against the configured fallback.
+
+Keep the application's existing browser configuration and isolated fixtures.
+Adapt the route, labels and configured error message to that application's
+contract, and retain compact, medium and expanded layout coverage. Direct API
+checks additionally prove rejected input is not persisted.
+
+## Wire list search with the initial resource
+
+`useCrudListScreen()` enables query search and the shared list renders a Search
+box. When using that screen, configure `resource.searchSchema.q` with the
+searchable fields from the start, as in the title-only Books resource above.
+Showing a Search box alone does not implement storage filtering. Keep the
+mapping in the resource; do not add page-local filtering or duplicate request
+code. The full Books source example maps `q` to title, author and notes; narrow
+it when adapting the example to fewer fields.
+
+The browser page's route query and internal CRUD query use plain `q`. The
+JSON:API HTTP transport uses `filter[q]`. Shared CRUD clients encode and decode
+this automatically. Raw HTTP/API tests must send the transport key themselves:
+
+```ts
+const headers = { Accept: "application/vnd.api+json" };
+const matches = await request.get("/api/books", {
+  headers, params: { "filter[q]": "A saved book" }
+});
+expect(matches.status()).toBe(200);
+expect((await matches.json()).data.some(book => book.attributes.title === "A saved book")).toBe(true);
+
+const noMatches = await request.get("/api/books", {
+  headers, params: { "filter[q]": "no-matching-fixture-title" }
+});
+expect(noMatches.status()).toBe(200);
+expect((await noMatches.json()).data).toEqual([]);
+```
+
+Use controlled fixtures with a known matching and nonmatching value. A matching
+row alone does not prove search works: an unfiltered response also includes it.
+In the browser, fill Search, assert the expected visible rows and excluded rows,
+then clear it and assert the list returns. Verify route/reload behaviour when
+the screen synchronizes search to the route. Add these checks to the initial
+create/list flow rather than discovering an unwired control at final review.
+
 ## Direct API tests use JSON:API documents
 
 JSKIT's CRUD screens and HTTP client apply the resource's JSON:API transport
@@ -210,6 +303,13 @@ decision. Use `CrudDeleteAction` and `useCrudDeleteAction()` through the view
 actions slot; do not rebuild their confirmation, request, invalidation, and
 navigation flow.
 
+The delete action resolves its HTTP client from the resource's `apiAccess`, just
+like the list, view and form helpers. For `apiAccess: "public"`, DELETE requests
+skip session CSRF discovery; no `/api/session` endpoint or page-local client
+wiring is required. Authenticated resources retain the configured client's CSRF
+behavior. An explicit `client` override is supported and receives the same
+resource-aware public request options. This does not change server authorization.
+
 For custom form actions, see
 [record form actions](https://mobily-enterprises.github.io/jskit-ai/guide/framework/crud-form-actions).
 

package/skills/jskit/references/pattern-index.md

@@ -15,7 +15,7 @@ A concrete Fastify, Vue, and JSKIT application foundation for products that do n
 
 - Id: `app/minimal-foundation`
 - Keywords: `app`, `fastify`, `foundation`, `minimal`, `server`, `vite`, `vue`
-- Owner: `@jskit-ai/agent-docs@0.1.207`
+- Owner: `@jskit-ai/agent-docs@0.1.209`
 - Read: [PATTERN.md](patterns/app/minimal-foundation/PATTERN.md)
 - Examples: [example/](patterns/app/minimal-foundation/example/)
 - Requires: `@jskit-ai/http-runtime`, `@jskit-ai/kernel`
@@ -26,7 +26,7 @@ A concrete JSKIT web application foundation with responsive shell navigation, se
 
 - Id: `app/shell-foundation`
 - Keywords: `app`, `foundation`, `material`, `navigation`, `placements`, `shell`, `vite`, `vue`
-- Owner: `@jskit-ai/agent-docs@0.1.207`
+- Owner: `@jskit-ai/agent-docs@0.1.209`
 - Read: [PATTERN.md](patterns/app/shell-foundation/PATTERN.md)
 - Examples: [example/](patterns/app/shell-foundation/example/)
 - Requires: `@jskit-ai/http-runtime`, `@jskit-ai/kernel`, `@jskit-ai/shell-web`
@@ -37,7 +37,7 @@ Configure an assistant runtime for one application surface and expose its chat a
 
 - Id: `assistant/assistant-surface`
 - Keywords: `ai`, `assistant`, `chat`, `config`, `environment`, `page`, `placement`, `settings`, `surface`
-- Owner: `@jskit-ai/assistant-runtime@0.1.206`
+- Owner: `@jskit-ai/assistant-runtime@0.1.208`
 - Read: [PATTERN.md](patterns/assistant/assistant-surface/PATTERN.md)
 - Examples: [example/](patterns/assistant/assistant-surface/example/)
 - Requires: `@jskit-ai/assistant-runtime`, `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`, `@jskit-ai/shell-web`
@@ -48,7 +48,7 @@ Compose JSKIT authentication routes, views, profile controls, and public surface
 
 - Id: `auth/auth-surface`
 - Keywords: `account`, `auth`, `login`, `logout`, `password`, `placement`, `profile`, `reset`, `surface`
-- Owner: `@jskit-ai/auth-web@0.1.235`
+- Owner: `@jskit-ai/auth-web@0.1.237`
 - Read: [PATTERN.md](patterns/auth/auth-surface/PATTERN.md)
 - Examples: [example/](patterns/auth/auth-surface/example/)
 - Requires: `@jskit-ai/auth-core`, `@jskit-ai/auth-web`, `@jskit-ai/shell-web`
@@ -59,7 +59,7 @@ Add Supabase authentication through normal npm composition, explicit environment
 
 - Id: `auth/supabase-auth`
 - Keywords: `auth`, `authentication`, `oauth`, `sessions`, `supabase`
-- Owner: `@jskit-ai/auth-provider-supabase-core@0.1.232`
+- Owner: `@jskit-ai/auth-provider-supabase-core@0.1.234`
 - Read: [PATTERN.md](patterns/auth/supabase-auth/PATTERN.md)
 - Examples: [example/](patterns/auth/supabase-auth/example/)
 - Requires: `@jskit-ai/auth-provider-supabase-core`
@@ -70,7 +70,7 @@ Resolve an administrator environment key or an individual user's grant, then use
 
 - Id: `connectors/ai-connections`
 - Keywords: `ai`, `api-key`, `big-pickle`, `cli`, `environment`, `free`, `models`, `ownership`, `zai`, `zen`
-- Owner: `@jskit-ai/connectors-catalog@0.1.52`
+- Owner: `@jskit-ai/connectors-catalog@0.1.54`
 - Read: [PATTERN.md](patterns/connectors/ai-connections/PATTERN.md)
 - Examples: [example/](patterns/connectors/ai-connections/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -81,7 +81,7 @@ Compose provider operations, authorization and encrypted file storage from a CLI
 
 - Id: `connectors/api-key-connection`
 - Keywords: `api-key`, `clay`, `cli`, `clickhouse`, `connectors`, `dbt`, `files`, `firecrawl`, `granola`, `integrations`, `metrics`, `prestashop`, `resend`, `semantic-layer`, `semrush`, `x-twitter`
-- Owner: `@jskit-ai/connectors-catalog@0.1.52`
+- Owner: `@jskit-ai/connectors-catalog@0.1.54`
 - Read: [PATTERN.md](patterns/connectors/api-key-connection/PATTERN.md)
 - Examples: [example/](patterns/connectors/api-key-connection/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -92,7 +92,7 @@ Compose token-based MCP discovery and explicitly authorized tool calls using the
 
 - Id: `connectors/assistant-mcp`
 - Keywords: `assistant`, `cli`, `connectors`, `files`, `integrations`, `mcp`, `n8n`, `sanity`
-- Owner: `@jskit-ai/connectors-catalog@0.1.52`
+- Owner: `@jskit-ai/connectors-catalog@0.1.54`
 - Read: [PATTERN.md](patterns/connectors/assistant-mcp/PATTERN.md)
 - Examples: [example/](patterns/connectors/assistant-mcp/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -103,7 +103,7 @@ Configure assistant OAuth clients, then compose existing state, encrypted file g
 
 - Id: `connectors/assistant-mcp-oauth`
 - Keywords: `amplitude`, `assistant`, `atlassian`, `canva`, `cli`, `client metadata`, `confidence`, `connectors`, `figma`, `files`, `granola`, `hex`, `mcp`, `miro`, `oauth`
-- Owner: `@jskit-ai/connectors-catalog@0.1.52`
+- Owner: `@jskit-ai/connectors-catalog@0.1.54`
 - Read: [PATTERN.md](patterns/connectors/assistant-mcp-oauth/PATTERN.md)
 - Examples: [example/](patterns/connectors/assistant-mcp-oauth/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -114,7 +114,7 @@ Compose signed AWS operations, file configuration and application authorization
 
 - Id: `connectors/aws-storage-queries`
 - Keywords: `athena`, `aws`, `cli`, `connectors`, `files`, `iam`, `queries`, `s3`, `storage`, `sts`
-- Owner: `@jskit-ai/connectors-catalog@0.1.52`
+- Owner: `@jskit-ai/connectors-catalog@0.1.54`
 - Read: [PATTERN.md](patterns/connectors/aws-storage-queries/PATTERN.md)
 - Examples: [example/](patterns/connectors/aws-storage-queries/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -125,7 +125,7 @@ Compose reusable connection libraries with portable configuration, application o
 
 - Id: `connectors/calendar-cli`
 - Keywords: `calendar`, `cli`, `connectors`, `google`, `integrations`, `oauth`, `permissions`
-- Owner: `@jskit-ai/connector-google-calendar@0.1.52`
+- Owner: `@jskit-ai/connector-google-calendar@0.1.54`
 - Read: [PATTERN.md](patterns/connectors/calendar-cli/PATTERN.md)
 - Examples: [example/](patterns/connectors/calendar-cli/example/)
 - Requires: `@jskit-ai/connector-google-calendar`, `@jskit-ai/connectors-core`, `@jskit-ai/database-runtime-mysql`
@@ -136,7 +136,7 @@ Compose the shared connector runtime for event delivery while leaving workflow c
 
 - Id: `connectors/event-delivery`
 - Keywords: `cli`, `connectors`, `events`, `files`, `inngest`, `integrations`, `workflows`
-- Owner: `@jskit-ai/connectors-catalog@0.1.52`
+- Owner: `@jskit-ai/connectors-catalog@0.1.54`
 - Read: [PATTERN.md](patterns/connectors/event-delivery/PATTERN.md)
 - Examples: [example/](patterns/connectors/event-delivery/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -147,7 +147,7 @@ Wire service-account grants, file storage, explicit message actions and public b
 
 - Id: `connectors/firebase-messaging`
 - Keywords: `cli`, `connectors`, `fcm`, `files`, `firebase`, `integrations`, `jwt`, `notifications`, `push`, `service-account`, `vapid`
-- Owner: `@jskit-ai/connectors-catalog@0.1.52`
+- Owner: `@jskit-ai/connectors-catalog@0.1.54`
 - Read: [PATTERN.md](patterns/connectors/firebase-messaging/PATTERN.md)
 - Examples: [example/](patterns/connectors/firebase-messaging/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -158,7 +158,7 @@ Compose reviewed Search campaigns with project-owned Google OAuth and portable s
 
 - Id: `connectors/google-ads-search`
 - Keywords: `ads`, `campaigns`, `cli`, `connectors`, `conversion`, `google`, `search`
-- Owner: `@jskit-ai/connectors-catalog@0.1.52`
+- Owner: `@jskit-ai/connectors-catalog@0.1.54`
 - Read: [PATTERN.md](patterns/connectors/google-ads-search/PATTERN.md)
 - Examples: [example/](patterns/connectors/google-ads-search/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -169,7 +169,7 @@ Compose provider consent, verification and encrypted file persistence from an ap
 
 - Id: `connectors/oauth-connection`
 - Keywords: `accounting`, `assistant permissions`, `books`, `cli`, `client credentials`, `connectors`, `consent`, `crm`, `databricks`, `developer token`, `fabric`, `files`, `gaql`, `google ads`, `graphql`, `integrations`, `linkedin`, `microsoft`, `oauth`, `powerpoint`, `salesforce`, `service principal`, `shopify`, `soql`, `staffing`, `tiktok`, `twitch`, `wave`, `word`, `wordpress`, `workday`, `xero`, `zoho`
-- Owner: `@jskit-ai/connectors-catalog@0.1.52`
+- Owner: `@jskit-ai/connectors-catalog@0.1.54`
 - Read: [PATTERN.md](patterns/connectors/oauth-connection/PATTERN.md)
 - Examples: [example/](patterns/connectors/oauth-connection/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -180,7 +180,7 @@ Compose a sequential catalogue batch and preserve partial success for applicatio
 
 - Id: `connectors/paddle-catalogue`
 - Keywords: `batch`, `paddle`, `payments`, `prices`, `products`
-- Owner: `@jskit-ai/connectors-catalog@0.1.52`
+- Owner: `@jskit-ai/connectors-catalog@0.1.54`
 - Read: [PATTERN.md](patterns/connectors/paddle-catalogue/PATTERN.md)
 - Examples: [example/](patterns/connectors/paddle-catalogue/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -191,7 +191,7 @@ Resolve a publishable image key deliberately and use the shared URL library in a
 
 - Id: `connectors/public-image`
 - Keywords: `cli`, `connectors`, `files`, `images`, `integrations`, `logo-dev`, `public-key`
-- Owner: `@jskit-ai/connectors-catalog@0.1.52`
+- Owner: `@jskit-ai/connectors-catalog@0.1.54`
 - Read: [PATTERN.md](patterns/connectors/public-image/PATTERN.md)
 - Examples: [example/](patterns/connectors/public-image/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -202,7 +202,7 @@ Compose file configuration, Redshift Data API operations and application query o
 
 - Id: `connectors/redshift-queries`
 - Keywords: `aws`, `cli`, `connectors`, `files`, `iam`, `provisioned`, `redshift`, `serverless`, `sql`, `warehouse`
-- Owner: `@jskit-ai/connectors-catalog@0.1.52`
+- Owner: `@jskit-ai/connectors-catalog@0.1.54`
 - Read: [PATTERN.md](patterns/connectors/redshift-queries/PATTERN.md)
 - Examples: [example/](patterns/connectors/redshift-queries/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -213,7 +213,7 @@ Use the shared scanner runtime from a CLI or a host worker with portable configu
 
 - Id: `connectors/source-scanning`
 - Keywords: `cancellation`, `cli`, `connectors`, `integrations`, `scanning`, `security`, `source`, `wiz`, `worker`
-- Owner: `@jskit-ai/connectors-catalog@0.1.52`
+- Owner: `@jskit-ai/connectors-catalog@0.1.54`
 - Read: [PATTERN.md](patterns/connectors/source-scanning/PATTERN.md)
 - Examples: [example/](patterns/connectors/source-scanning/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -224,7 +224,7 @@ Add a protected administration surface, settings shell, and semantic navigation
 
 - Id: `console/console-surface`
 - Keywords: `admin`, `console`, `navigation`, `owner`, `placement`, `settings`, `surface`
-- Owner: `@jskit-ai/console-web@0.1.203`
+- Owner: `@jskit-ai/console-web@0.1.205`
 - Read: [PATTERN.md](patterns/console/console-surface/PATTERN.md)
 - Examples: [example/](patterns/console/console-surface/example/)
 - Requires: `@jskit-ai/console-core`, `@jskit-ai/console-web`, `@jskit-ai/shell-web`
@@ -235,7 +235,7 @@ Build a routed CRUD user interface as thin application pages over JSKIT's shared
 
 - Id: `crud/crud-screen-set`
 - Keywords: `actions`, `add`, `crud`, `delete`, `edit`, `filters`, `list`, `material`, `routes`, `view`, `vue`
-- Owner: `@jskit-ai/http-web@0.1.80`
+- Owner: `@jskit-ai/http-web@0.1.82`
 - Read: [PATTERN.md](patterns/crud/crud-screen-set/PATTERN.md)
 - Examples: [example/](patterns/crud/crud-screen-set/example/)
 - Requires: `@jskit-ai/http-web`, `@jskit-ai/resource-crud-core`
@@ -246,7 +246,7 @@ Build a complete application-owned CRUD server package from a migration, resourc
 
 - Id: `crud/json-api-resource-package`
 - Keywords: `actions`, `crud`, `database`, `json-api`, `migration`, `permissions`, `provider`, `repository`, `routes`, `service`
-- Owner: `@jskit-ai/crud-core@0.1.246`
+- Owner: `@jskit-ai/crud-core@0.1.248`
 - Read: [PATTERN.md](patterns/crud/json-api-resource-package/PATTERN.md)
 - Examples: [example/](patterns/crud/json-api-resource-package/example/)
 - Requires: `@jskit-ai/crud-core`, `@jskit-ai/resource-crud-core`
@@ -257,7 +257,7 @@ Define an authenticated application resource whose records belong to the current
 
 - Id: `crud/resource-contract`
 - Keywords: `authenticated`, `crud`, `database`, `owner-scoped`, `resource`, `user`
-- Owner: `@jskit-ai/resource-crud-core@0.1.177`
+- Owner: `@jskit-ai/resource-crud-core@0.1.179`
 - Read: [PATTERN.md](patterns/crud/resource-contract/PATTERN.md)
 - Examples: [example/](patterns/crud/resource-contract/example/)
 - Requires: `@jskit-ai/resource-crud-core`
@@ -268,7 +268,7 @@ Configure a JSKIT application for MySQL with a fixed driver, ordinary environmen
 
 - Id: `database/mysql-application`
 - Keywords: `database`, `knex`, `mariadb`, `migrations`, `mysql`, `mysql2`
-- Owner: `@jskit-ai/database-runtime-mysql@0.1.233`
+- Owner: `@jskit-ai/database-runtime-mysql@0.1.235`
 - Read: [PATTERN.md](patterns/database/mysql-application/PATTERN.md)
 - Examples: [example/](patterns/database/mysql-application/example/)
 - Requires: `@jskit-ai/database-runtime-mysql`
@@ -279,7 +279,7 @@ Configure a JSKIT application for PostgreSQL with a fixed driver, ordinary envir
 
 - Id: `database/postgres-application`
 - Keywords: `database`, `knex`, `migrations`, `pg`, `postgres`, `postgresql`
-- Owner: `@jskit-ai/database-runtime-postgres@0.1.232`
+- Owner: `@jskit-ai/database-runtime-postgres@0.1.234`
 - Read: [PATTERN.md](patterns/database/postgres-application/PATTERN.md)
 - Examples: [example/](patterns/database/postgres-application/example/)
 - Requires: `@jskit-ai/database-runtime-postgres`
@@ -290,7 +290,7 @@ Wrap a JSKIT web application in a Capacitor Android shell using native Capacitor
 
 - Id: `mobile/android-application`
 - Keywords: `android`, `capacitor`, `device`, `mobile`, `native`, `shell`, `webview`
-- Owner: `@jskit-ai/mobile-capacitor@0.1.170`
+- Owner: `@jskit-ai/mobile-capacitor@0.1.172`
 - Read: [PATTERN.md](patterns/mobile/android-application/PATTERN.md)
 - Examples: [example/](patterns/mobile/android-application/example/)
 - Requires: `@capacitor/android`, `@capacitor/app`, `@capacitor/cli`, `@jskit-ai/mobile-capacitor`
@@ -301,7 +301,7 @@ Add JSKIT realtime events with an optional Redis backplane and an explicit shell
 
 - Id: `realtime/realtime-application`
 - Keywords: `realtime`, `redis`, `socket.io`, `sockets`, `status`, `websocket`
-- Owner: `@jskit-ai/realtime@0.1.232`
+- Owner: `@jskit-ai/realtime@0.1.234`
 - Read: [PATTERN.md](patterns/realtime/realtime-application/PATTERN.md)
 - Examples: [example/](patterns/realtime/realtime-application/example/)
 - Requires: `@jskit-ai/realtime`, `@jskit-ai/shell-web`
@@ -312,7 +312,7 @@ Compose application-owned Google Publisher Tag delivery with the generic rewarde
 
 - Id: `rewards/google-rewarded`
 - Keywords: `ads`, `google`, `publisher tag`, `rewarded`, `unlock`
-- Owner: `@jskit-ai/rewarded-web@0.1.171`
+- Owner: `@jskit-ai/rewarded-web@0.1.173`
 - Read: [PATTERN.md](patterns/rewards/google-rewarded/PATTERN.md)
 - Examples: [example/](patterns/rewards/google-rewarded/example/)
 - Requires: `@jskit-ai/rewarded-web`
@@ -323,7 +323,7 @@ Define a server feature through explicit capabilities and first-class actions, a
 
 - Id: `server/feature-package`
 - Keywords: `actions`, `feature`, `json-rest`, `knex`, `orchestration`, `package`, `provider`, `repository`, `routes`, `server`
-- Owner: `@jskit-ai/agent-docs@0.1.207`
+- Owner: `@jskit-ai/agent-docs@0.1.209`
 - Read: [PATTERN.md](patterns/server/feature-package/PATTERN.md)
 - Examples: [example/](patterns/server/feature-package/example/)
 - Requires: `@jskit-ai/kernel`
@@ -334,7 +334,7 @@ Compose the JSKIT responsive shell, semantic placements, settings navigation, an
 
 - Id: `shell/application-shell`
 - Keywords: `adaptive`, `app`, `layout`, `navigation`, `placement`, `responsive`, `settings`, `shell`
-- Owner: `@jskit-ai/shell-web@0.1.239`
+- Owner: `@jskit-ai/shell-web@0.1.241`
 - Read: [PATTERN.md](patterns/shell/application-shell/PATTERN.md)
 - Examples: [example/](patterns/shell/application-shell/example/)
 - Requires: `@jskit-ai/kernel`, `@jskit-ai/shell-web`
@@ -345,7 +345,7 @@ Add product routes and shell extensions through file routing, semantic placement
 
 - Id: `ui/page-and-placement`
 - Keywords: `component`, `navigation`, `outlet`, `page`, `placement`, `routes`, `section`, `shell`, `subpages`, `vue`
-- Owner: `@jskit-ai/shell-web@0.1.239`
+- Owner: `@jskit-ai/shell-web@0.1.241`
 - Read: [PATTERN.md](patterns/ui/page-and-placement/PATTERN.md)
 - Examples: [example/](patterns/ui/page-and-placement/example/)
 - Requires: `@jskit-ai/kernel`, `@jskit-ai/shell-web`
@@ -356,7 +356,7 @@ Compose an account settings route and profile, preference, and notification sect
 
 - Id: `users/account-settings`
 - Keywords: `account`, `notifications`, `preferences`, `profile`, `settings`, `user`, `vue`
-- Owner: `@jskit-ai/users-web@0.1.253`
+- Owner: `@jskit-ai/users-web@0.1.255`
 - Read: [PATTERN.md](patterns/users/account-settings/PATTERN.md)
 - Examples: [example/](patterns/users/account-settings/example/)
 - Requires: `@jskit-ai/shell-web`, `@jskit-ai/users-core`, `@jskit-ai/users-web`
@@ -367,7 +367,7 @@ Expose user administration and workspace-scoped member operations through app-ow
 
 - Id: `users/user-administration-server`
 - Keywords: `account`, `admin`, `member`, `repository`, `resource`, `routes`, `service`, `user`, `workspace`
-- Owner: `@jskit-ai/users-core@0.1.248`
+- Owner: `@jskit-ai/users-core@0.1.250`
 - Read: [PATTERN.md](patterns/users/user-administration-server/PATTERN.md)
 - Examples: [example/](patterns/users/user-administration-server/example/)
 - Requires: `@jskit-ai/crud-core`, `@jskit-ai/users-core`
@@ -378,7 +378,7 @@ Configure roles, workspace access policy, invitations, and app-owned invitation
 
 - Id: `workspaces/workspace-server`
 - Keywords: `access`, `invite`, `membership`, `multitenancy`, `policy`, `role`, `tenancy`, `workspace`
-- Owner: `@jskit-ai/workspaces-core@0.1.213`
+- Owner: `@jskit-ai/workspaces-core@0.1.215`
 - Read: [PATTERN.md](patterns/workspaces/workspace-server/PATTERN.md)
 - Examples: [example/](patterns/workspaces/workspace-server/example/)
 - Requires: `@jskit-ai/users-core`, `@jskit-ai/workspaces-core`
@@ -389,7 +389,7 @@ Compose workspace selection, invitation, member administration, settings, and re
 
 - Id: `workspaces/workspace-surfaces`
 - Keywords: `admin`, `invite`, `member`, `navigation`, `settings`, `surface`, `switcher`, `workspace`
-- Owner: `@jskit-ai/workspaces-web@0.1.214`
+- Owner: `@jskit-ai/workspaces-web@0.1.216`
 - Read: [PATTERN.md](patterns/workspaces/workspace-surfaces/PATTERN.md)
 - Examples: [example/](patterns/workspaces/workspace-surfaces/example/)
 - Requires: `@jskit-ai/shell-web`, `@jskit-ai/workspaces-core`, `@jskit-ai/workspaces-web`

package/skills/jskit/references/patterns/app/minimal-foundation/example/package.json

@@ -34,7 +34,7 @@
   "dependencies": {
     "@local/main": "0.1.0",
     "@fastify/static": "^10.1.3",
-    "@jskit-ai/kernel": "0.1.235",
+    "@jskit-ai/kernel": "0.1.237",
     "@tanstack/vue-query": "^5.101.0",
     "fastify": "^5.8.5",
     "json-rest-schema": "^1.0.17",
@@ -42,13 +42,13 @@
     "vue": "^3.5.43",
     "vue-router": "^5.3.1",
     "vuetify": "^4.1.2",
-    "@jskit-ai/http-runtime": "0.1.233",
+    "@jskit-ai/http-runtime": "0.1.235",
     "@fastify/fast-json-stringify-compiler": "^5.1.0",
     "@vue/devtools-api": "^8.2.1"
   },
   "devDependencies": {
-    "@jskit-ai/config-eslint": "0.1.232",
-    "@jskit-ai/jskit-catalog": "0.1.260",
+    "@jskit-ai/config-eslint": "0.1.234",
+    "@jskit-ai/jskit-catalog": "0.1.262",
     "@playwright/test": "1.61.1",
     "@vitejs/plugin-vue": "^6.0.7",
     "eslint": "^10.8.0",

package/skills/jskit/references/patterns/app/shell-foundation/example/package.json

@@ -34,7 +34,7 @@
   "dependencies": {
     "@local/main": "0.1.0",
     "@fastify/static": "^10.1.3",
-    "@jskit-ai/kernel": "0.1.235",
+    "@jskit-ai/kernel": "0.1.237",
     "@tanstack/vue-query": "^5.101.0",
     "fastify": "^5.8.5",
     "json-rest-schema": "^1.0.17",
@@ -42,15 +42,15 @@
     "vue": "^3.5.43",
     "vue-router": "^5.3.1",
     "vuetify": "^4.1.2",
-    "@jskit-ai/http-runtime": "0.1.233",
+    "@jskit-ai/http-runtime": "0.1.235",
     "@mdi/js": "^7.4.47",
-    "@jskit-ai/shell-web": "0.1.239",
+    "@jskit-ai/shell-web": "0.1.241",
     "@fastify/fast-json-stringify-compiler": "^5.1.0",
     "@vue/devtools-api": "^8.2.1"
   },
   "devDependencies": {
-    "@jskit-ai/config-eslint": "0.1.232",
-    "@jskit-ai/jskit-catalog": "0.1.260",
+    "@jskit-ai/config-eslint": "0.1.234",
+    "@jskit-ai/jskit-catalog": "0.1.262",
     "@playwright/test": "1.61.1",
     "@vitejs/plugin-vue": "^6.0.7",
     "eslint": "^10.8.0",

package/skills/jskit/references/patterns/app/shell-foundation/example/packages/main/package.json

@@ -9,7 +9,7 @@
   },
   "description": "App-local runtime composition and lightweight glue.",
   "dependencies": {
-    "@jskit-ai/kernel": "0.1.235"
+    "@jskit-ai/kernel": "0.1.237"
   },
   "jskit": {
     "kind": "runtime",

package/skills/jskit/references/patterns/auth/supabase-auth/example/package.json

@@ -2,6 +2,6 @@
   "private": true,
   "type": "module",
   "dependencies": {
-    "@jskit-ai/auth-provider-supabase-core": "0.1.232"
+    "@jskit-ai/auth-provider-supabase-core": "0.1.234"
   }
 }

package/skills/jskit/references/patterns/connectors/calendar-cli/example/package.json

@@ -7,10 +7,10 @@
     "db:migrate:status": "knex --knexfile ./knexfile.js migrate:list"
   },
   "dependencies": {
-    "@jskit-ai/connectors-core": "0.1.52",
-    "@jskit-ai/connector-google-calendar": "0.1.52",
-    "@jskit-ai/database-runtime": "0.1.235",
-    "@jskit-ai/database-runtime-mysql": "0.1.233",
+    "@jskit-ai/connectors-core": "0.1.54",
+    "@jskit-ai/connector-google-calendar": "0.1.54",
+    "@jskit-ai/database-runtime": "0.1.237",
+    "@jskit-ai/database-runtime-mysql": "0.1.235",
     "knex": "^3.1.0"
   }
 }

package/skills/jskit/references/patterns/crud/json-api-resource-package/PATTERN.md

@@ -49,9 +49,42 @@ contracts, access policy, and HTTP routes.
 ## Example files
 
 `example/` contains a complete books package plus a source-controlled migration.
+Paths below are relative to this pattern directory:
+
+```text
+example/migrations/20260815000000_books.cjs
+example/packages/books/package.json
+example/packages/books/src/server/BooksFeature.js
+example/packages/books/src/shared/bookResource.js
+example/packages/books/src/shared/index.js
+```
+
+The example's migration belongs to the application root (`example/migrations/`)
+and is a `.cjs` file. The books package does not declare a migration directory.
+For a package-owned migration instead, declare its actual directory in
+`package.json#jskit.migrations.directories`, as described in the database-layer
+guide.
+
 `BooksFeature.js` is deliberately tiny: it binds the readable resource contract
 to the framework module and exports the resulting provider.
 
+## List search is part of the initial composition
+
+The shared `useCrudListScreen()` enables a query-backed Search box. Its server
+mapping belongs in `bookResource.searchSchema.q`, as the example demonstrates.
+When narrowing the resource, retain that mapping and update `oneOf` to the
+fields that remain; a title-only resource searches `["title"]`. Do this before
+the first list test, alongside the fields and validation.
+
+Keep the query layers distinct: the page route and internal CRUD query use
+`q`, while JSON:API HTTP requests use `filter[q]`. Shared CRUD clients handle
+that transport automatically. A raw API test uses, for example,
+`request.get("/api/books", { params: { "filter[q]": "Kindred" } })` with
+JSON:API Accept headers and the application's actual API base/scope. Do not use
+`/api/books?q=Kindred` to test the JSON:API search contract. Assert a matching
+result, a nonmatching query returning no rows, and clearing the UI query;
+an unfiltered collection can satisfy a matching-row-only assertion.
+
 ## Variation points
 
 Change the package name, resource fields, table, surface, ownership filter,

package/skills/jskit/references/patterns/crud/json-api-resource-package/example/packages/books/package.json

@@ -8,8 +8,8 @@
     "./shared": "./src/shared/index.js"
   },
   "dependencies": {
-    "@jskit-ai/crud-core": "0.1.246",
-    "@jskit-ai/resource-crud-core": "0.1.177"
+    "@jskit-ai/crud-core": "0.1.248",
+    "@jskit-ai/resource-crud-core": "0.1.179"
   },
   "jskit": {
     "kind": "runtime",

package/skills/jskit/references/patterns/database/mysql-application/example/package.json

@@ -8,6 +8,6 @@
     "db:migrate:status": "knex --knexfile ./knexfile.js migrate:list"
   },
   "dependencies": {
-    "@jskit-ai/database-runtime-mysql": "0.1.233"
+    "@jskit-ai/database-runtime-mysql": "0.1.235"
   }
 }

package/skills/jskit/references/patterns/database/postgres-application/example/package.json

@@ -8,6 +8,6 @@
     "db:migrate:status": "knex --knexfile ./knexfile.js migrate:list"
   },
   "dependencies": {
-    "@jskit-ai/database-runtime-postgres": "0.1.232"
+    "@jskit-ai/database-runtime-postgres": "0.1.234"
   }
 }

package/skills/jskit/references/patterns/realtime/realtime-application/example/package.json

@@ -2,7 +2,7 @@
   "private": true,
   "type": "module",
   "dependencies": {
-    "@jskit-ai/realtime": "0.1.232",
-    "@jskit-ai/shell-web": "0.1.239"
+    "@jskit-ai/realtime": "0.1.234",
+    "@jskit-ai/shell-web": "0.1.241"
   }
 }

package/skills/jskit/references/patterns/server/feature-package/example/booking-engine/package.json

@@ -5,7 +5,7 @@
   "private": true,
   "type": "module",
   "dependencies": {
-    "@jskit-ai/kernel": "0.1.235",
+    "@jskit-ai/kernel": "0.1.237",
     "json-rest-schema": "^1.0.17"
   },
   "exports": {