npm - @jskit-ai/agent-docs - Versions diffs - 0.1.270 → 0.1.272 - Mend

@jskit-ai/agent-docs 0.1.270 → 0.1.272

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (48) hide show

package/skills/jskit/references/patterns/auth/supabase-auth/example/package.json CHANGED Viewed

@@ -2,6 +2,6 @@
   "private": true,
   "type": "module",
   "dependencies": {
-    "@jskit-ai/auth-provider-supabase-core": "0.2.9"
+    "@jskit-ai/auth-provider-supabase-core": "0.2.11"
   }
 }

package/skills/jskit/references/patterns/connectors/calendar-cli/example/package.json CHANGED Viewed

@@ -7,10 +7,10 @@
     "db:migrate:status": "knex --knexfile ./knexfile.js migrate:list"
   },
   "dependencies": {
-    "@jskit-ai/connectors-core": "0.2.8",
-    "@jskit-ai/connector-google-calendar": "0.2.8",
-    "@jskit-ai/database-runtime": "0.1.256",
-    "@jskit-ai/database-runtime-mysql": "0.1.254",
+    "@jskit-ai/connectors-core": "0.2.10",
+    "@jskit-ai/connector-google-calendar": "0.2.10",
+    "@jskit-ai/database-runtime": "0.1.258",
+    "@jskit-ai/database-runtime-mysql": "0.1.256",
     "knex": "^3.1.0"
   }
 }

package/skills/jskit/references/patterns/crud/json-api-resource-package/PATTERN.md CHANGED Viewed

@@ -120,6 +120,17 @@ surface further; do not register unused mutation actions and routes. Use
 `routes: false` only for an internal
 capability/action surface that deliberately has no HTTP API.
+The assistant runs actions on the `automation` channel as the signed-in user,
+so an action without an HTTP route would otherwise reach records that no route
+shows the user. The actions of an `internal: true` or `routes: false` feature
+therefore stay off `automation` (the assistant cannot call them) unless their
+permission names a permission (`require: "all"` or `"any"`), as the workspace
+scope's default `crud.<namespace>.<operation>` permissions do. Give such a
+feature explicit `permissions` when the assistant should read it for the users
+who hold them; the default for other surfaces, `require: "authenticated"`,
+would admit every signed-in user. An additional action's own `channels`
+decide for it.
 Create, update, and delete publish `<namespace>.record.changed` to the
 `event_scope` realtime audience, which reaches only the room of the action's
 user, workspace, or workspace-user scope. Set `realtimeAudience` to another

package/skills/jskit/references/patterns/crud/json-api-resource-package/example/packages/books/package.json CHANGED Viewed

@@ -9,8 +9,8 @@
     "./shared": "./src/shared/index.js"
   },
   "dependencies": {
-    "@jskit-ai/crud-core": "0.2.8",
-    "@jskit-ai/resource-crud-core": "0.1.198"
+    "@jskit-ai/crud-core": "0.2.10",
+    "@jskit-ai/resource-crud-core": "0.1.200"
   },
   "jskit": {
     "kind": "runtime",

package/skills/jskit/references/patterns/database/mysql-application/example/package.json CHANGED Viewed

@@ -8,6 +8,6 @@
     "db:migrate:status": "knex --knexfile ./knexfile.js migrate:list"
   },
   "dependencies": {
-    "@jskit-ai/database-runtime-mysql": "0.1.254"
+    "@jskit-ai/database-runtime-mysql": "0.1.256"
   }
 }

package/skills/jskit/references/patterns/database/postgres-application/example/package.json CHANGED Viewed

@@ -8,6 +8,6 @@
     "db:migrate:status": "knex --knexfile ./knexfile.js migrate:list"
   },
   "dependencies": {
-    "@jskit-ai/database-runtime-postgres": "0.1.253"
+    "@jskit-ai/database-runtime-postgres": "0.1.255"
   }
 }

package/skills/jskit/references/patterns/realtime/realtime-application/example/package.json CHANGED Viewed

@@ -2,7 +2,7 @@
   "private": true,
   "type": "module",
   "dependencies": {
-    "@jskit-ai/realtime": "0.2.11",
-    "@jskit-ai/shell-web": "0.2.8"
+    "@jskit-ai/realtime": "0.2.13",
+    "@jskit-ai/shell-web": "0.2.10"
   }
 }

package/skills/jskit/references/patterns/server/feature-package/example/booking-engine/package.json CHANGED Viewed

@@ -5,7 +5,7 @@
   "private": true,
   "type": "module",
   "dependencies": {
-    "@jskit-ai/kernel": "0.2.7",
+    "@jskit-ai/kernel": "0.2.9",
     "json-rest-schema": "^1.0.17"
   },
   "exports": {

package/skills/jskit/references/patterns/users/user-administration-server/example/packages/users/package.json CHANGED Viewed

@@ -10,8 +10,8 @@
     "./shared": "./src/shared/index.js"
   },
   "dependencies": {
-    "@jskit-ai/crud-core": "0.2.8",
-    "@jskit-ai/resource-crud-core": "0.1.198"
+    "@jskit-ai/crud-core": "0.2.10",
+    "@jskit-ai/resource-crud-core": "0.1.200"
   },
   "jskit": {
     "kind": "runtime",

package/skills/jskit/references/patterns/users/user-administration-server/example/packages/users-workspace/package.json CHANGED Viewed

@@ -10,9 +10,9 @@
     "./shared": "./src/shared/index.js"
   },
   "dependencies": {
-    "@jskit-ai/crud-core": "0.2.8",
-    "@jskit-ai/resource-crud-core": "0.1.198",
-    "@jskit-ai/workspaces-core": "0.2.9"
+    "@jskit-ai/crud-core": "0.2.10",
+    "@jskit-ai/resource-crud-core": "0.1.200",
+    "@jskit-ai/workspaces-core": "0.2.11"
   },
   "jskit": {
     "kind": "runtime",

package/skills/jskit/references/typed-features.md CHANGED Viewed

@@ -730,6 +730,11 @@ for anything that reads or writes the domain.**
   `request.executeAction({ actionId: ACTION_X, input })` returns.
 - A route that bypasses actions (a provider's callback) gets its own named
   registrar. Summaries are sentences.
+- A route that repetition can abuse (sign-in, codes, sending email) declares
+  `rateLimit: { max, timeWindow }`, which the kernel enforces per client
+  address and refuses with 429, `kernel.http.rateLimited` and `Retry-After`.
+  A limit worth changing per application is read from its config, as
+  `config.auth.rateLimits` is.
 Why: an action is the one place a domain operation's policy, input and
 events are declared.