@jskit-ai/agent-docs 0.1.245 → 0.1.246

package/reference/autogen/packages/workspaces-web.md

@@ -97,8 +97,10 @@ Local functions
 - `normalizePendingInvite(entry)`
 - `reportFeedback({ message, severity = "error", channel = "", dedupeKey = "" } = {})`
 - `workspaceInitials(workspace)`
-- `workspaceAvatarStyle(workspace)`
 - `workspaceHomePath(workspaceSlug)`
+- `resolveLandingSlug()`
+- `workspaceOpenLabel(workspace)`
+- `isRespondingToInvite(invite, decision)`
 - `openWorkspace(workspaceSlug)`
 - `respondToInvite(invite, decision)`
 - `acceptInvite(invite)`
@@ -112,7 +114,6 @@ Exports
 Local functions
 - `resolveBrowserPath()`
 - `navigateToWorkspace(slug)`
-- `workspaceAvatarStyle(workspace)`
 
 ### `src/client/components/WorkspaceSettingsMenuItem.vue`
 Exports
@@ -137,6 +138,7 @@ Exports
 - `WorkspacesWebClientProvider`
 - `WorkspaceMembersClientElement`
 - `WorkspaceInviteLanding`
+- `WorkspacesClientElement`
 
 ### `src/client/lib/bootstrap.js`
 Exports
@@ -147,6 +149,15 @@ Exports
 Local functions
 - `normalizeWorkspaceSlug(value = "")`
 
+### `src/client/lib/lastWorkspace.js`
+Exports
+- `readLastWorkspaceSlug(userId, { storage } = {})`
+- `resolveWorkspaceLandingSlug({ workspaces = [], pendingInvites = [], lastWorkspaceSlug = "" } = {})`
+- `writeLastWorkspaceSlug(userId, workspaceSlug, { storage } = {})`
+Local functions
+- `resolveStorage(storage)`
+- `lastWorkspaceStorageKey(userId)`
+
 ### `src/client/lib/profileSurfaceMenuLinks.js`
 Exports
 - `resolveProfileSurfaceMenuLinks({ context, surface } = {})`
@@ -310,6 +321,14 @@ Exports
 Exports
 - None
 
+### `fixtures/workspaces-landing/main.js`
+Exports
+- None
+
+### `fixtures/workspaces-landing/vite.config.mjs`
+Exports
+- None
+
 ### patterns
 
 ### `patterns/workspace-surfaces/example/packages/main/src/client/components/AccountPendingInvitesCue.vue`
@@ -344,6 +363,10 @@ Exports
 Exports
 - None
 
+### `patterns/workspace-surfaces/example/src/pages/home/workspaces/index.vue`
+Exports
+- None
+
 ### `patterns/workspace-surfaces/example/src/pages/invite/[token].vue`
 Exports
 - None

package/skills/jskit/references/multi-homing.md

@@ -26,6 +26,70 @@ Choose whether the product is:
 Do not add workspace machinery to a product that only needs an owner id on one
 domain record.
 
+Set the model with `tenancyMode` and `tenancyPolicy` in `config/public.js`:
+
+| `tenancyMode` | Workspaces | First workspace | Creating more |
+| --- | --- | --- | --- |
+| `none` | None | None | No |
+| `personal` | One personal workspace per user | Always provisioned | No |
+| `workspaces` | Named workspaces with membership, invitations and switching | Only with `tenancyPolicy.workspace.autoProvision: true` | With `tenancyPolicy.workspace.allowSelfCreate: true` |
+
+In `workspaces` mode the product chooses one of two styles:
+
+- **Team-first** (the default, `autoProvision` unset or `false`): a new account
+  has no workspace until it creates one or accepts an invitation. Mount the
+  **Your workspaces** page (see [Browser composition](#browser-composition)) so
+  these people can do either.
+- **Personal workspace plus shared workspaces** (`autoProvision: true`): every
+  user, including people who signed up through an invitation, owns one personal
+  workspace and can also join or create others.
+
+```js
+// config/public.js
+config.tenancyMode = "workspaces";
+config.tenancyPolicy = {
+  workspace: {
+    allowSelfCreate: true,
+    autoProvision: true
+  }
+};
+```
+
+Provisioning runs in the users profile-sync lifecycle after registration and
+sign-in. The first run creates the personal workspace, its owner membership and
+its settings; later runs reuse it. The default name is the user's display name,
+or email, followed by "'s Workspace". Set `personalWorkspaceName` in
+`config/server.js` to choose another; it receives the synchronized profile
+(`id`, `displayName`, `email`, `username`), and an empty result keeps the default:
+
+```js
+// config/server.js
+config.personalWorkspaceName = (user) => `${user.displayName || user.email}'s home`;
+```
+
+### Development sign-in
+
+Development sign-in (`POST /api/dev-auth/login-as`, used by the Playwright
+`loginAsExistingUser()` helper and managed previews) signs in as an existing
+user without changing data. It does not run the profile-sync lifecycle, so
+workspace provisioning and other lifecycle contributors do not run. Create the
+workspaces that seeded users need in seed data, or sign in normally once.
+
+## Data model
+
+The package migrations create and own these tables:
+
+| Table | Columns that applications use |
+| --- | --- |
+| `workspaces` | `id`, `slug` (unique), `name`, `owner_user_id`, `is_personal`, `avatar_url`, `deleted_at` |
+| `workspace_memberships` | `workspace_id`, `user_id`, `role_sid`, `status`; one row per workspace and user |
+| `workspace_settings` | One row per workspace keyed by `workspace_id`: the eight palette colours and `invites_enabled` |
+| `workspace_invites` | `workspace_id`, `email`, `role_sid`, `status`, `token_hash`, `invited_by_user_id`, `expires_at`, `accepted_at`, `revoked_at` |
+
+Application records that belong to a workspace use a non-null `workspace_id`
+foreign key to `workspaces.id`. Read and change these tables through the
+`workspaces.core` repositories and services, not directly.
+
 ## Server composition
 
 Use `workspaces/workspace-server` for role vocabulary, creation policy,
@@ -35,6 +99,103 @@ Workspace scope must reach repository queries. Parsing a workspace slug or
 hiding an admin link is not authorization. Membership and role checks happen
 before an operation discloses records or record existence.
 
+### Workspace-scoped features and routes
+
+For a standard CRUD resource owned by a workspace, give its table the
+`workspace_id` column, set the resource's `autofilter: "workspace"`, and bind
+`defineCrudJsonApiFeature()` with `ownershipFilter: "workspace"` on a workspace
+surface. JSKIT then filters `workspaceId` by the workspace in the route.
+`workspace_user` also filters by the signed-in user. See the CRUD operations
+guide.
+
+A hand-written route registers under `/api/w/:workspaceSlug/...` with
+`contextPolicy: "required"`:
+
+```js
+router.register(
+  "GET",
+  "/api/w/:workspaceSlug/projects",
+  {
+    auth: "required",
+    surface: "app",
+    contextPolicy: "required",
+    permission: "projects.view" // optional
+  },
+  async function (request, reply) {
+    const projects = await projectsService.listForWorkspace(request.workspace.id);
+    // ...
+  }
+);
+```
+
+Before the handler runs, the auth plugin resolves the slug for the signed-in
+user and sets `request.workspace`, `request.membership` (including `roleSid`
+and `status`) and `request.permissions`. An unknown slug returns 404 and a
+non-member receives 403, unless the route's `surface` uses an access policy with
+`requireWorkspaceMembership: false`. A route with `permission` returns 403 when
+the membership lacks it. Scope queries with `request.workspace.id`; never take a
+workspace id from request input.
+
+### Workspace services from another feature
+
+Declare `workspaces: "workspaces.core"` in the feature's `requires`. The
+capability provides:
+
+| Member | Use |
+| --- | --- |
+| `workspaces.services.directory` | Workspace lists, context by slug, creation and provisioning |
+| `workspaces.services.members` | Members, roles and invitations |
+| `workspaces.services.pendingInvitations` | Invitation resolution, redemption and acceptance participants |
+| `workspaces.services.settings` | Workspace settings |
+| `workspaces.repositories.workspaces`, `.workspaceMemberships`, `.workspaceSettings`, `.workspaceInvites` | Repository access inside the application's own transactions |
+| `workspaces.tenancyProfile` | The resolved tenancy mode and workspace policy |
+
+### Invitation email
+
+To send invitation email, set a mailer in `config/server.js`. Without one,
+invitations are still created and delivery reports `mailer_unconfigured`.
+`workspaceInviteMailer` is an object whose `sendWorkspaceInvite(message,
+options)` receives `{ email, inviteUrl, workspace, inviter, roleSid, expiresAt,
+message }`, where the inner `message` is the rendered `{ subject, text, html }`.
+`workspaceInviteEmailTemplate` is an optional function that renders that inner
+message; it receives `{ email, inviteUrl, workspace, inviter, roleSid,
+roleLabel, expiresAt }` (`roleLabel` only when configured). Invitation links use `/invite/:token` unless
+`workspaceInvitations.invitePath` names another path. The
+`workspaces/workspace-server` pattern includes an example renderer.
+
+### Workspace colours
+
+Each workspace stores a light and a dark palette in `workspace_settings`. On
+workspace routes, `workspaces-web` switches Vuetify to the `workspace-light` or
+`workspace-dark` theme, built from the application's own theme with `primary`,
+`secondary`, `surface` and `surface-variant` replaced by the workspace's
+colours. Other routes use the application's themes.
+
+New workspaces start from JSKIT's blue palette unless `config/server.js` sets
+the application's own. Missing fields keep JSKIT's values; an invalid colour
+stops the server at startup:
+
+```js
+// config/server.js
+config.workspaceSettings = {
+  defaults: {
+    invitesEnabled: true,
+    lightPrimaryColor: "#1C1C1C",
+    lightSecondaryColor: "#5C5C5C",
+    lightSurfaceColor: "#FFFFFF",
+    lightSurfaceVariantColor: "#424242",
+    darkPrimaryColor: "#F5F5F5",
+    darkSecondaryColor: "#BDBDBD",
+    darkSurfaceColor: "#121212",
+    darkSurfaceVariantColor: "#C8C8C8"
+  }
+};
+```
+
+Defaults apply when a workspace is created. Existing workspaces keep their
+stored colours; change them with `PATCH /api/w/:workspaceSlug/settings` or
+`workspaces.services.settings.updateWorkspaceSettings(workspace, patch)`.
+
 `workspace_authenticated` and similar policies must implement their documented
 membership semantics exactly; do not synthesize memberships to compensate for
 a policy/runtime mismatch.
@@ -265,7 +426,34 @@ placements.
 
 The route slug, selected workspace, query keys, and server scope stay aligned.
 Invalid workspace URLs show a deliberate not-found/forbidden state instead of
-silently selecting another workspace.
+silently selecting another workspace. The browser waits for the server's answer
+about an unknown slug before deciding, so the surface can show that state.
+
+### Surfaces and where `/` lands
+
+Workspace surfaces put the slug in their pages root, such as
+`pagesRoot: "w/[workspaceSlug]"` with `requiresWorkspace: true`, and
+`w/[workspaceSlug]/admin` for administration. Keep the default surface
+(`surfaceDefaultId`, usually `home`) free of a workspace requirement: `/`,
+invitation links and other unscoped pages belong to it. With
+`webRootAllowed: "no"`, `/` opens that surface's root.
+
+`workspaces-web` remembers the last workspace each person opened in this
+browser. The **Your workspaces** page, `WorkspacesClientElement` from
+`@jskit-ai/workspaces-web/client/components/WorkspacesClientElement`, uses it:
+
+1. With pending invitations, it shows them so the person can join or refuse.
+2. Otherwise it opens the last workspace used in this browser, if the person is
+   still a member, or their only workspace.
+3. Otherwise it lists their workspaces and, when they have none and
+   `allowSelfCreate` is on, offers to create the first one.
+
+The page sends signed-out visitors to sign in. The
+`workspaces/workspace-surfaces` pattern mounts it at `/home/workspaces`. The
+product decides where people land: keep a public landing page at `/home` that
+links signed-in people there, or mount the page at `/home` itself so everyone
+goes straight to sign-in or into their workspace. Applications may replace it
+with their own page.
 
 Loading uses skeletons; mutation errors use toasts. Warm-cache and browser
 back/forward navigation must restore the correct workspace context.

package/skills/jskit/references/pattern-index.md

@@ -15,7 +15,7 @@ A concrete Fastify, Vue, and JSKIT application foundation for products that do n
 
 - Id: `app/minimal-foundation`
 - Keywords: `app`, `fastify`, `foundation`, `minimal`, `server`, `vite`, `vue`
-- Owner: `@jskit-ai/agent-docs@0.1.245`
+- Owner: `@jskit-ai/agent-docs@0.1.246`
 - Read: [PATTERN.md](patterns/app/minimal-foundation/PATTERN.md)
 - Examples: [example/](patterns/app/minimal-foundation/example/)
 - Requires: `@jskit-ai/http-runtime`, `@jskit-ai/kernel`
@@ -26,7 +26,7 @@ A concrete JSKIT web application foundation with responsive shell navigation, se
 
 - Id: `app/shell-foundation`
 - Keywords: `app`, `foundation`, `material`, `navigation`, `placements`, `shell`, `vite`, `vue`
-- Owner: `@jskit-ai/agent-docs@0.1.245`
+- Owner: `@jskit-ai/agent-docs@0.1.246`
 - Read: [PATTERN.md](patterns/app/shell-foundation/PATTERN.md)
 - Examples: [example/](patterns/app/shell-foundation/example/)
 - Requires: `@jskit-ai/http-runtime`, `@jskit-ai/kernel`, `@jskit-ai/shell-web`
@@ -37,7 +37,7 @@ Configure an assistant runtime for one application surface and expose its chat a
 
 - Id: `assistant/assistant-surface`
 - Keywords: `ai`, `assistant`, `chat`, `config`, `environment`, `page`, `placement`, `settings`, `surface`
-- Owner: `@jskit-ai/assistant-runtime@0.1.236`
+- Owner: `@jskit-ai/assistant-runtime@0.1.237`
 - Read: [PATTERN.md](patterns/assistant/assistant-surface/PATTERN.md)
 - Examples: [example/](patterns/assistant/assistant-surface/example/)
 - Requires: `@jskit-ai/assistant-runtime`, `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`, `@jskit-ai/shell-web`
@@ -48,7 +48,7 @@ Run one OpenID Connect sign-in for all of an owner's apps as its own JSKIT proje
 
 - Id: `auth/accounts-hub`
 - Keywords: `accounts hub`, `auth`, `authentication`, `issuer`, `master login`, `oidc`, `openid connect`, `single sign-on`, `sso`
-- Owner: `@jskit-ai/oidc-issuer-core@0.1.2`
+- Owner: `@jskit-ai/oidc-issuer-core@0.1.3`
 - Read: [PATTERN.md](patterns/auth/accounts-hub/PATTERN.md)
 - Examples: [example/](patterns/auth/accounts-hub/example/)
 - Requires: `@jskit-ai/oidc-issuer-core`
@@ -59,7 +59,7 @@ Compose JSKIT authentication routes, views, profile controls, and public surface
 
 - Id: `auth/auth-surface`
 - Keywords: `account`, `auth`, `login`, `logout`, `password`, `placement`, `profile`, `reset`, `surface`
-- Owner: `@jskit-ai/auth-web@0.1.249`
+- Owner: `@jskit-ai/auth-web@0.1.250`
 - Read: [PATTERN.md](patterns/auth/auth-surface/PATTERN.md)
 - Examples: [example/](patterns/auth/auth-surface/example/)
 - Requires: `@jskit-ai/auth-core`, `@jskit-ai/auth-web`, `@jskit-ai/shell-web`
@@ -70,7 +70,7 @@ Let people sign in with the accounts they already have in an accounts hub or ano
 
 - Id: `auth/oidc-sign-in`
 - Keywords: `accounts hub`, `auth`, `authentication`, `back-channel logout`, `dynamic client registration`, `issuer`, `master login`, `oidc`, `openid connect`, `single sign-on`, `sso`
-- Owner: `@jskit-ai/auth-provider-oidc-core@0.1.3`
+- Owner: `@jskit-ai/auth-provider-oidc-core@0.1.4`
 - Read: [PATTERN.md](patterns/auth/oidc-sign-in/PATTERN.md)
 - Examples: [example/](patterns/auth/oidc-sign-in/example/)
 - Requires: `@jskit-ai/auth-provider-oidc-core`, `@jskit-ai/auth-web`
@@ -81,7 +81,7 @@ Add Supabase authentication through normal npm composition, explicit environment
 
 - Id: `auth/supabase-auth`
 - Keywords: `auth`, `authentication`, `oauth`, `sessions`, `supabase`
-- Owner: `@jskit-ai/auth-provider-supabase-core@0.1.243`
+- Owner: `@jskit-ai/auth-provider-supabase-core@0.1.244`
 - Read: [PATTERN.md](patterns/auth/supabase-auth/PATTERN.md)
 - Examples: [example/](patterns/auth/supabase-auth/example/)
 - Requires: `@jskit-ai/auth-provider-supabase-core`
@@ -92,7 +92,7 @@ Resolve an administrator environment key or an individual user's grant, then use
 
 - Id: `connectors/ai-connections`
 - Keywords: `ai`, `api-key`, `cli`, `environment`, `free`, `models`, `ownership`, `zai`, `zen`
-- Owner: `@jskit-ai/connectors-catalog@0.1.65`
+- Owner: `@jskit-ai/connectors-catalog@0.1.66`
 - Read: [PATTERN.md](patterns/connectors/ai-connections/PATTERN.md)
 - Examples: [example/](patterns/connectors/ai-connections/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -103,7 +103,7 @@ Compose provider operations, authorization and encrypted file storage from a CLI
 
 - Id: `connectors/api-key-connection`
 - Keywords: `api-key`, `clay`, `cli`, `clickhouse`, `connectors`, `dbt`, `files`, `firecrawl`, `granola`, `integrations`, `metrics`, `prestashop`, `resend`, `semantic-layer`, `semrush`, `x-twitter`
-- Owner: `@jskit-ai/connectors-catalog@0.1.65`
+- Owner: `@jskit-ai/connectors-catalog@0.1.66`
 - Read: [PATTERN.md](patterns/connectors/api-key-connection/PATTERN.md)
 - Examples: [example/](patterns/connectors/api-key-connection/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -114,7 +114,7 @@ Compose token-based MCP discovery and explicitly authorized tool calls using the
 
 - Id: `connectors/assistant-mcp`
 - Keywords: `assistant`, `cli`, `connectors`, `files`, `integrations`, `mcp`, `n8n`, `sanity`
-- Owner: `@jskit-ai/connectors-catalog@0.1.65`
+- Owner: `@jskit-ai/connectors-catalog@0.1.66`
 - Read: [PATTERN.md](patterns/connectors/assistant-mcp/PATTERN.md)
 - Examples: [example/](patterns/connectors/assistant-mcp/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -125,7 +125,7 @@ Configure assistant OAuth clients, then compose existing state, encrypted file g
 
 - Id: `connectors/assistant-mcp-oauth`
 - Keywords: `amplitude`, `assistant`, `atlassian`, `canva`, `cli`, `client metadata`, `confidence`, `connectors`, `figma`, `files`, `granola`, `hex`, `mcp`, `miro`, `oauth`
-- Owner: `@jskit-ai/connectors-catalog@0.1.65`
+- Owner: `@jskit-ai/connectors-catalog@0.1.66`
 - Read: [PATTERN.md](patterns/connectors/assistant-mcp-oauth/PATTERN.md)
 - Examples: [example/](patterns/connectors/assistant-mcp-oauth/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -136,7 +136,7 @@ Compose signed AWS operations, file configuration and application authorization
 
 - Id: `connectors/aws-storage-queries`
 - Keywords: `athena`, `aws`, `cli`, `connectors`, `files`, `iam`, `queries`, `s3`, `storage`, `sts`
-- Owner: `@jskit-ai/connectors-catalog@0.1.65`
+- Owner: `@jskit-ai/connectors-catalog@0.1.66`
 - Read: [PATTERN.md](patterns/connectors/aws-storage-queries/PATTERN.md)
 - Examples: [example/](patterns/connectors/aws-storage-queries/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -147,7 +147,7 @@ Compose reusable connection libraries with portable configuration, application o
 
 - Id: `connectors/calendar-cli`
 - Keywords: `calendar`, `cli`, `connectors`, `google`, `integrations`, `oauth`, `permissions`
-- Owner: `@jskit-ai/connector-google-calendar@0.1.63`
+- Owner: `@jskit-ai/connector-google-calendar@0.1.64`
 - Read: [PATTERN.md](patterns/connectors/calendar-cli/PATTERN.md)
 - Examples: [example/](patterns/connectors/calendar-cli/example/)
 - Requires: `@jskit-ai/connector-google-calendar`, `@jskit-ai/connectors-core`, `@jskit-ai/database-runtime-mysql`
@@ -158,7 +158,7 @@ Compose the shared connector runtime for event delivery while leaving workflow c
 
 - Id: `connectors/event-delivery`
 - Keywords: `cli`, `connectors`, `events`, `files`, `inngest`, `integrations`, `workflows`
-- Owner: `@jskit-ai/connectors-catalog@0.1.65`
+- Owner: `@jskit-ai/connectors-catalog@0.1.66`
 - Read: [PATTERN.md](patterns/connectors/event-delivery/PATTERN.md)
 - Examples: [example/](patterns/connectors/event-delivery/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -169,7 +169,7 @@ Wire service-account grants, file storage, explicit message actions and public b
 
 - Id: `connectors/firebase-messaging`
 - Keywords: `cli`, `connectors`, `fcm`, `files`, `firebase`, `integrations`, `jwt`, `notifications`, `push`, `service-account`, `vapid`
-- Owner: `@jskit-ai/connectors-catalog@0.1.65`
+- Owner: `@jskit-ai/connectors-catalog@0.1.66`
 - Read: [PATTERN.md](patterns/connectors/firebase-messaging/PATTERN.md)
 - Examples: [example/](patterns/connectors/firebase-messaging/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -180,7 +180,7 @@ Compose reviewed Search campaigns with project-owned Google OAuth and portable s
 
 - Id: `connectors/google-ads-search`
 - Keywords: `ads`, `campaigns`, `cli`, `connectors`, `conversion`, `google`, `search`
-- Owner: `@jskit-ai/connectors-catalog@0.1.65`
+- Owner: `@jskit-ai/connectors-catalog@0.1.66`
 - Read: [PATTERN.md](patterns/connectors/google-ads-search/PATTERN.md)
 - Examples: [example/](patterns/connectors/google-ads-search/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -191,7 +191,7 @@ Compose provider consent, verification and encrypted file persistence from an ap
 
 - Id: `connectors/oauth-connection`
 - Keywords: `accounting`, `assistant permissions`, `books`, `cli`, `client credentials`, `connectors`, `consent`, `crm`, `databricks`, `developer token`, `fabric`, `files`, `gaql`, `google ads`, `graphql`, `integrations`, `linkedin`, `microsoft`, `oauth`, `powerpoint`, `salesforce`, `service principal`, `shopify`, `soql`, `staffing`, `tiktok`, `twitch`, `wave`, `word`, `wordpress`, `workday`, `xero`, `zoho`
-- Owner: `@jskit-ai/connectors-catalog@0.1.65`
+- Owner: `@jskit-ai/connectors-catalog@0.1.66`
 - Read: [PATTERN.md](patterns/connectors/oauth-connection/PATTERN.md)
 - Examples: [example/](patterns/connectors/oauth-connection/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -202,7 +202,7 @@ Compose a sequential catalogue batch and preserve partial success for applicatio
 
 - Id: `connectors/paddle-catalogue`
 - Keywords: `batch`, `paddle`, `payments`, `prices`, `products`
-- Owner: `@jskit-ai/connectors-catalog@0.1.65`
+- Owner: `@jskit-ai/connectors-catalog@0.1.66`
 - Read: [PATTERN.md](patterns/connectors/paddle-catalogue/PATTERN.md)
 - Examples: [example/](patterns/connectors/paddle-catalogue/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -213,7 +213,7 @@ Resolve a publishable image key deliberately and use the shared URL library in a
 
 - Id: `connectors/public-image`
 - Keywords: `cli`, `connectors`, `files`, `images`, `integrations`, `logo-dev`, `public-key`
-- Owner: `@jskit-ai/connectors-catalog@0.1.65`
+- Owner: `@jskit-ai/connectors-catalog@0.1.66`
 - Read: [PATTERN.md](patterns/connectors/public-image/PATTERN.md)
 - Examples: [example/](patterns/connectors/public-image/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -224,7 +224,7 @@ Compose file configuration, Redshift Data API operations and application query o
 
 - Id: `connectors/redshift-queries`
 - Keywords: `aws`, `cli`, `connectors`, `files`, `iam`, `provisioned`, `redshift`, `serverless`, `sql`, `warehouse`
-- Owner: `@jskit-ai/connectors-catalog@0.1.65`
+- Owner: `@jskit-ai/connectors-catalog@0.1.66`
 - Read: [PATTERN.md](patterns/connectors/redshift-queries/PATTERN.md)
 - Examples: [example/](patterns/connectors/redshift-queries/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -235,7 +235,7 @@ Use the shared scanner runtime from a CLI or a host worker with portable configu
 
 - Id: `connectors/source-scanning`
 - Keywords: `cancellation`, `cli`, `connectors`, `integrations`, `scanning`, `security`, `source`, `wiz`, `worker`
-- Owner: `@jskit-ai/connectors-catalog@0.1.65`
+- Owner: `@jskit-ai/connectors-catalog@0.1.66`
 - Read: [PATTERN.md](patterns/connectors/source-scanning/PATTERN.md)
 - Examples: [example/](patterns/connectors/source-scanning/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -246,7 +246,7 @@ Add a protected administration surface, settings shell, and semantic navigation
 
 - Id: `console/console-surface`
 - Keywords: `admin`, `console`, `navigation`, `owner`, `placement`, `settings`, `surface`
-- Owner: `@jskit-ai/console-web@0.1.217`
+- Owner: `@jskit-ai/console-web@0.1.218`
 - Read: [PATTERN.md](patterns/console/console-surface/PATTERN.md)
 - Examples: [example/](patterns/console/console-surface/example/)
 - Requires: `@jskit-ai/console-core`, `@jskit-ai/console-web`, `@jskit-ai/shell-web`
@@ -257,7 +257,7 @@ Build a routed CRUD user interface as thin application pages over JSKIT's shared
 
 - Id: `crud/crud-screen-set`
 - Keywords: `actions`, `add`, `crud`, `delete`, `edit`, `filters`, `list`, `material`, `routes`, `view`, `vue`
-- Owner: `@jskit-ai/http-web@0.1.94`
+- Owner: `@jskit-ai/http-web@0.1.95`
 - Read: [PATTERN.md](patterns/crud/crud-screen-set/PATTERN.md)
 - Examples: [example/](patterns/crud/crud-screen-set/example/)
 - Requires: `@jskit-ai/http-web`, `@jskit-ai/resource-crud-core`
@@ -268,7 +268,7 @@ Build a complete application-owned CRUD server package from a migration, resourc
 
 - Id: `crud/json-api-resource-package`
 - Keywords: `actions`, `crud`, `database`, `json-api`, `migration`, `permissions`, `provider`, `repository`, `routes`, `service`
-- Owner: `@jskit-ai/crud-core@0.1.257`
+- Owner: `@jskit-ai/crud-core@0.1.258`
 - Read: [PATTERN.md](patterns/crud/json-api-resource-package/PATTERN.md)
 - Examples: [example/](patterns/crud/json-api-resource-package/example/)
 - Requires: `@jskit-ai/crud-core`, `@jskit-ai/resource-crud-core`
@@ -279,7 +279,7 @@ Define an authenticated application resource whose records belong to the current
 
 - Id: `crud/resource-contract`
 - Keywords: `authenticated`, `crud`, `database`, `owner-scoped`, `resource`, `user`
-- Owner: `@jskit-ai/resource-crud-core@0.1.188`
+- Owner: `@jskit-ai/resource-crud-core@0.1.189`
 - Read: [PATTERN.md](patterns/crud/resource-contract/PATTERN.md)
 - Examples: [example/](patterns/crud/resource-contract/example/)
 - Requires: `@jskit-ai/resource-crud-core`
@@ -290,7 +290,7 @@ Configure a JSKIT application for MySQL with a fixed driver, ordinary environmen
 
 - Id: `database/mysql-application`
 - Keywords: `database`, `knex`, `mariadb`, `migrations`, `mysql`, `mysql2`
-- Owner: `@jskit-ai/database-runtime-mysql@0.1.244`
+- Owner: `@jskit-ai/database-runtime-mysql@0.1.245`
 - Read: [PATTERN.md](patterns/database/mysql-application/PATTERN.md)
 - Examples: [example/](patterns/database/mysql-application/example/)
 - Requires: `@jskit-ai/database-runtime-mysql`
@@ -301,7 +301,7 @@ Configure a JSKIT application for PostgreSQL with a fixed driver, ordinary envir
 
 - Id: `database/postgres-application`
 - Keywords: `database`, `knex`, `migrations`, `pg`, `postgres`, `postgresql`
-- Owner: `@jskit-ai/database-runtime-postgres@0.1.243`
+- Owner: `@jskit-ai/database-runtime-postgres@0.1.244`
 - Read: [PATTERN.md](patterns/database/postgres-application/PATTERN.md)
 - Examples: [example/](patterns/database/postgres-application/example/)
 - Requires: `@jskit-ai/database-runtime-postgres`
@@ -312,7 +312,7 @@ Wrap a JSKIT web application in a Capacitor Android shell using native Capacitor
 
 - Id: `mobile/android-application`
 - Keywords: `android`, `capacitor`, `device`, `mobile`, `native`, `shell`, `webview`
-- Owner: `@jskit-ai/mobile-capacitor@0.1.184`
+- Owner: `@jskit-ai/mobile-capacitor@0.1.185`
 - Read: [PATTERN.md](patterns/mobile/android-application/PATTERN.md)
 - Examples: [example/](patterns/mobile/android-application/example/)
 - Requires: `@capacitor/android`, `@capacitor/app`, `@capacitor/cli`, `@jskit-ai/mobile-capacitor`
@@ -323,7 +323,7 @@ Add JSKIT realtime events with an optional Redis backplane and an explicit shell
 
 - Id: `realtime/realtime-application`
 - Keywords: `realtime`, `redis`, `socket.io`, `sockets`, `status`, `websocket`
-- Owner: `@jskit-ai/realtime@0.1.246`
+- Owner: `@jskit-ai/realtime@0.1.247`
 - Read: [PATTERN.md](patterns/realtime/realtime-application/PATTERN.md)
 - Examples: [example/](patterns/realtime/realtime-application/example/)
 - Requires: `@jskit-ai/realtime`, `@jskit-ai/shell-web`
@@ -334,7 +334,7 @@ Compose application-owned Google Publisher Tag delivery with the generic rewarde
 
 - Id: `rewards/google-rewarded`
 - Keywords: `ads`, `google`, `publisher tag`, `rewarded`, `unlock`
-- Owner: `@jskit-ai/rewarded-web@0.1.185`
+- Owner: `@jskit-ai/rewarded-web@0.1.186`
 - Read: [PATTERN.md](patterns/rewards/google-rewarded/PATTERN.md)
 - Examples: [example/](patterns/rewards/google-rewarded/example/)
 - Requires: `@jskit-ai/rewarded-web`
@@ -345,7 +345,7 @@ Define a server feature through explicit capabilities and first-class actions, a
 
 - Id: `server/feature-package`
 - Keywords: `actions`, `feature`, `json-rest`, `knex`, `orchestration`, `package`, `provider`, `repository`, `routes`, `server`
-- Owner: `@jskit-ai/agent-docs@0.1.245`
+- Owner: `@jskit-ai/agent-docs@0.1.246`
 - Read: [PATTERN.md](patterns/server/feature-package/PATTERN.md)
 - Examples: [example/](patterns/server/feature-package/example/)
 - Requires: `@jskit-ai/kernel`
@@ -356,7 +356,7 @@ Compose the JSKIT responsive shell, semantic placements, settings navigation, an
 
 - Id: `shell/application-shell`
 - Keywords: `adaptive`, `app`, `layout`, `navigation`, `placement`, `responsive`, `settings`, `shell`
-- Owner: `@jskit-ai/shell-web@0.1.253`
+- Owner: `@jskit-ai/shell-web@0.1.254`
 - Read: [PATTERN.md](patterns/shell/application-shell/PATTERN.md)
 - Examples: [example/](patterns/shell/application-shell/example/)
 - Requires: `@jskit-ai/kernel`, `@jskit-ai/shell-web`
@@ -367,7 +367,7 @@ Add product routes and shell extensions through file routing, semantic placement
 
 - Id: `ui/page-and-placement`
 - Keywords: `component`, `navigation`, `outlet`, `page`, `placement`, `routes`, `section`, `shell`, `subpages`, `vue`
-- Owner: `@jskit-ai/shell-web@0.1.253`
+- Owner: `@jskit-ai/shell-web@0.1.254`
 - Read: [PATTERN.md](patterns/ui/page-and-placement/PATTERN.md)
 - Examples: [example/](patterns/ui/page-and-placement/example/)
 - Requires: `@jskit-ai/kernel`, `@jskit-ai/shell-web`
@@ -378,7 +378,7 @@ Compose an account settings route and profile, preference, and notification sect
 
 - Id: `users/account-settings`
 - Keywords: `account`, `notifications`, `preferences`, `profile`, `settings`, `user`, `vue`
-- Owner: `@jskit-ai/users-web@0.1.267`
+- Owner: `@jskit-ai/users-web@0.1.268`
 - Read: [PATTERN.md](patterns/users/account-settings/PATTERN.md)
 - Examples: [example/](patterns/users/account-settings/example/)
 - Requires: `@jskit-ai/shell-web`, `@jskit-ai/users-core`, `@jskit-ai/users-web`
@@ -389,7 +389,7 @@ Expose user administration and workspace-scoped member operations through app-ow
 
 - Id: `users/user-administration-server`
 - Keywords: `account`, `admin`, `member`, `repository`, `resource`, `routes`, `service`, `user`, `workspace`
-- Owner: `@jskit-ai/users-core@0.1.259`
+- Owner: `@jskit-ai/users-core@0.1.260`
 - Read: [PATTERN.md](patterns/users/user-administration-server/PATTERN.md)
 - Examples: [example/](patterns/users/user-administration-server/example/)
 - Requires: `@jskit-ai/crud-core`, `@jskit-ai/users-core`
@@ -400,7 +400,7 @@ Configure roles, workspace access policy, invitations, and app-owned invitation
 
 - Id: `workspaces/workspace-server`
 - Keywords: `access`, `invite`, `membership`, `multitenancy`, `policy`, `role`, `tenancy`, `workspace`
-- Owner: `@jskit-ai/workspaces-core@0.1.224`
+- Owner: `@jskit-ai/workspaces-core@0.1.225`
 - Read: [PATTERN.md](patterns/workspaces/workspace-server/PATTERN.md)
 - Examples: [example/](patterns/workspaces/workspace-server/example/)
 - Requires: `@jskit-ai/users-core`, `@jskit-ai/workspaces-core`
@@ -411,7 +411,7 @@ Compose workspace selection, invitation, member administration, settings, and re
 
 - Id: `workspaces/workspace-surfaces`
 - Keywords: `admin`, `invite`, `member`, `navigation`, `settings`, `surface`, `switcher`, `workspace`
-- Owner: `@jskit-ai/workspaces-web@0.1.228`
+- Owner: `@jskit-ai/workspaces-web@0.1.229`
 - Read: [PATTERN.md](patterns/workspaces/workspace-surfaces/PATTERN.md)
 - Examples: [example/](patterns/workspaces/workspace-surfaces/example/)
 - Requires: `@jskit-ai/shell-web`, `@jskit-ai/workspaces-core`, `@jskit-ai/workspaces-web`

package/skills/jskit/references/patterns/app/minimal-foundation/example/package.json

@@ -34,7 +34,7 @@
   "dependencies": {
     "@local/main": "0.1.0",
     "@fastify/static": "^10.1.3",
-    "@jskit-ai/kernel": "0.1.246",
+    "@jskit-ai/kernel": "0.1.247",
     "@tanstack/vue-query": "^5.101.0",
     "fastify": "^5.8.5",
     "json-rest-schema": "^1.0.17",
@@ -42,13 +42,13 @@
     "vue": "^3.5.44",
     "vue-router": "^5.3.1",
     "vuetify": "^4.1.2",
-    "@jskit-ai/http-runtime": "0.1.244",
+    "@jskit-ai/http-runtime": "0.1.245",
     "@fastify/fast-json-stringify-compiler": "^5.1.0",
     "@vue/devtools-api": "^8.2.1"
   },
   "devDependencies": {
     "@jskit-ai/config-eslint": "0.1.241",
-    "@jskit-ai/jskit-catalog": "0.1.298",
+    "@jskit-ai/jskit-catalog": "0.1.299",
     "@playwright/test": "1.61.1",
     "@vitejs/plugin-vue": "^6.0.7",
     "eslint": "^10.8.0",

package/skills/jskit/references/patterns/app/shell-foundation/example/package.json

@@ -34,7 +34,7 @@
   "dependencies": {
     "@local/main": "0.1.0",
     "@fastify/static": "^10.1.3",
-    "@jskit-ai/kernel": "0.1.246",
+    "@jskit-ai/kernel": "0.1.247",
     "@tanstack/vue-query": "^5.101.0",
     "fastify": "^5.8.5",
     "json-rest-schema": "^1.0.17",
@@ -42,15 +42,15 @@
     "vue": "^3.5.44",
     "vue-router": "^5.3.1",
     "vuetify": "^4.1.2",
-    "@jskit-ai/http-runtime": "0.1.244",
+    "@jskit-ai/http-runtime": "0.1.245",
     "@mdi/js": "^7.4.47",
-    "@jskit-ai/shell-web": "0.1.253",
+    "@jskit-ai/shell-web": "0.1.254",
     "@fastify/fast-json-stringify-compiler": "^5.1.0",
     "@vue/devtools-api": "^8.2.1"
   },
   "devDependencies": {
     "@jskit-ai/config-eslint": "0.1.241",
-    "@jskit-ai/jskit-catalog": "0.1.298",
+    "@jskit-ai/jskit-catalog": "0.1.299",
     "@playwright/test": "1.61.1",
     "@vitejs/plugin-vue": "^6.0.7",
     "eslint": "^10.8.0",

package/skills/jskit/references/patterns/app/shell-foundation/example/packages/main/package.json

@@ -9,7 +9,7 @@
   },
   "description": "App-local runtime composition and lightweight glue.",
   "dependencies": {
-    "@jskit-ai/kernel": "0.1.246"
+    "@jskit-ai/kernel": "0.1.247"
   },
   "jskit": {
     "kind": "runtime",