@jskit-ai/agent-docs 0.1.310 → 0.1.311

package/guide/agent/app-setup/authentication.md

@@ -210,6 +210,54 @@ composition, pass the sender as `confirmationSender` to
 `resolveLocalAuthConfig()`; without one, pass
 `createLoggedConfirmationSender(logger)`.
 
+In a test copy (`SIDE_EFFECTS` is not `live`, see
+[Side effects and test copies](/guide/framework/side-effects)), local auth puts
+its own simulated sender in place of an installed
+`auth.local.confirmation-sender`, whatever that sender does: it sends nothing,
+logs each link for the person testing, and keeps the link out of the answer.
+The application's sender never runs there, so no code may depend on it having
+run, such as code that confirms a registration with the link its sender was
+given: in a test copy that code gets no link.
+
+An application that confirms new accounts at once while its email isn't set up
+says so with the optional `auth.local.confirmation-mode` capability, a function
+that receives `{ email }` for each registration that would wait for its link
+and answers `"link"` (send the link, as without the capability) or
+`"without-link"` (create the account and sign the person in at once, as a
+confirmed registration does, with the `auth.local.user.registered` hook). The
+account it creates has an address nobody proved, so answer `"without-link"`
+only when the application accepts that. Any other answer means `"link"` and
+logs a warning. Local auth asks only while email confirmation is on and the
+address isn't proven already (an invitation or the first account's setup
+code). The mode sends nothing, so a test copy keeps it and registers as the
+live copy does, while the sender is still replaced. It does not stand in for a
+sender: a production server still needs one, or
+`AUTH_LOCAL_EMAIL_CONFIRMATION=false`, and `"link"` registrations are sent
+through it. An application that never sends a link sets
+`AUTH_LOCAL_EMAIL_CONFIRMATION=false` instead.
+
+```js
+import { defineProvider } from "@jskit-ai/kernel/shared/capabilities";
+
+// Beside the application's confirmation sender, which emails the link once email is set up.
+export const ConfirmationModeProvider = defineProvider({
+  id: "app.confirmation-mode",
+  requires: { mail: "app.mail" },
+  provides: { confirmationMode: "auth.local.confirmation-mode" },
+  /** @param {{ mail: import("@local/mail/server/types").AppMail }} capabilities */
+  setup({ mail }) {
+    /** @type {import("@jskit-ai/auth-provider-local-core/server/types").AuthLocalConfirmationMode} */
+    async function confirmationMode() {
+      return (await mail.isSetUp()) ? "link" : "without-link";
+    }
+    return { confirmationMode };
+  }
+});
+```
+
+For direct library composition, pass it as `confirmationMode` to
+`createLocalAuthService()`.
+
 | Env | Default | Meaning |
 | --- | --- | --- |
 | `AUTH_LOCAL_EMAIL_CONFIRMATION` | on | `false` registers and signs in at once, without confirming the email. |

package/guide/agent/app-setup/multi-homing.md

@@ -226,7 +226,13 @@ grows with the workspace, and a lookup per row multiplies it.
 
 To send invitation email, provide the optional `workspaces.invite-mailer`
 capability from one of the application's providers. Without one, invitations
-are still created and delivery reports `mailer_unconfigured`. The mailer, typed
+are still created and delivery reports `mailer_unconfigured`. After **Send
+invite**, the Members panel's notice follows the delivery status: `sent` says
+the invite was sent; `simulated` (a test copy, whose `SIDE_EFFECTS` is not
+`live`) and `mailer_unconfigured` say no email was sent; `failed` is a warning
+that the email failed. Each of those three points to the invite link, which
+the panel shows under the form with its **Copy** button. A status the panel
+does not know says only that the invite was created. The mailer, typed
 `WorkspaceInviteMailer` in `@jskit-ai/workspaces-core/server/types`, is an
 object whose `sendWorkspaceInvite(message, options)` receives `{ inviteId,
 email, inviteUrl, workspace, inviter, roleSid, expiresAt, locale, message }`,

package/guide/agent/framework/side-effects.md

@@ -31,7 +31,11 @@ purpose: any host can set it. The host sets it; a request never chooses it.
 - The server logs once at startup whether it acts for real. A production server
   that simulates logs a warning.
 - Local-password emails (confirmation and password reset) with an installed
-  sender are logged, not sent.
+  sender are logged, not sent: local auth uses its own simulated sender in
+  place of the application's, which never runs in a test copy. An application
+  that confirms new accounts at once while its email isn't set up uses
+  `auth.local.confirmation-mode`, which a test copy keeps (see
+  [Authentication](/guide/app-setup/authentication)).
 - Workspace invitations with a provided mailer are logged. The invitation
   answers `status: "simulated"`, and the inviter copies the link.
 - Accounts-hub email is logged, not sent.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/agent-docs",
-  "version": "0.1.310",
+  "version": "0.1.311",
   "description": "Distributed JSKIT agent references, prompts, guides, and generated reference maps.",
   "type": "module",
   "files": [

package/patterns/minimal-foundation/example/package.json

@@ -50,7 +50,7 @@
   },
   "devDependencies": {
     "@jskit-ai/config-eslint": "0.1.251",
-    "@jskit-ai/jskit-catalog": "0.2.62",
+    "@jskit-ai/jskit-catalog": "0.2.63",
     "@playwright/test": "1.61.1",
     "@vitejs/plugin-vue": "^6.0.7",
     "eslint": "^10.8.0",

package/patterns/shell-foundation/example/package.json

@@ -51,7 +51,7 @@
   },
   "devDependencies": {
     "@jskit-ai/config-eslint": "0.1.251",
-    "@jskit-ai/jskit-catalog": "0.2.62",
+    "@jskit-ai/jskit-catalog": "0.2.63",
     "@playwright/test": "1.61.1",
     "@vitejs/plugin-vue": "^6.0.7",
     "eslint": "^10.8.0",

package/reference/autogen/PATTERN_INDEX.md

@@ -15,7 +15,7 @@ A concrete Fastify, Vue, and JSKIT application foundation for products that do n
 
 - Id: `app/minimal-foundation`
 - Keywords: `app`, `fastify`, `foundation`, `minimal`, `server`, `vite`, `vue`
-- Owner: `@jskit-ai/agent-docs@0.1.310`
+- Owner: `@jskit-ai/agent-docs@0.1.311`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/app/minimal-foundation/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/app/minimal-foundation/example/)
 - Requires: `@jskit-ai/http-runtime`, `@jskit-ai/kernel`
@@ -26,7 +26,7 @@ A concrete JSKIT web application foundation with responsive shell navigation, se
 
 - Id: `app/shell-foundation`
 - Keywords: `app`, `foundation`, `material`, `navigation`, `placements`, `shell`, `vite`, `vue`
-- Owner: `@jskit-ai/agent-docs@0.1.310`
+- Owner: `@jskit-ai/agent-docs@0.1.311`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/app/shell-foundation/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/app/shell-foundation/example/)
 - Requires: `@jskit-ai/http-runtime`, `@jskit-ai/kernel`, `@jskit-ai/shell-web`
@@ -37,7 +37,7 @@ Configure an assistant runtime for one application surface and expose its chat a
 
 - Id: `assistant/assistant-surface`
 - Keywords: `ai`, `assistant`, `chat`, `config`, `environment`, `page`, `placement`, `settings`, `surface`
-- Owner: `@jskit-ai/assistant-runtime@0.2.52`
+- Owner: `@jskit-ai/assistant-runtime@0.2.53`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/assistant/assistant-surface/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/assistant/assistant-surface/example/)
 - Requires: `@jskit-ai/assistant-runtime`, `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`, `@jskit-ai/shell-web`
@@ -48,7 +48,7 @@ Run one OpenID Connect sign-in for all of an owner's apps as its own JSKIT proje
 
 - Id: `auth/accounts-hub`
 - Keywords: `accounts hub`, `auth`, `authentication`, `issuer`, `master login`, `oidc`, `openid connect`, `single sign-on`, `sso`
-- Owner: `@jskit-ai/oidc-issuer-core@0.1.30`
+- Owner: `@jskit-ai/oidc-issuer-core@0.1.31`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/auth/accounts-hub/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/auth/accounts-hub/example/)
 - Requires: `@jskit-ai/oidc-issuer-core`
@@ -70,7 +70,7 @@ Let people sign in with the accounts they already have in an accounts hub or ano
 
 - Id: `auth/oidc-sign-in`
 - Keywords: `accounts hub`, `auth`, `authentication`, `back-channel logout`, `dynamic client registration`, `issuer`, `master login`, `oidc`, `openid connect`, `single sign-on`, `sso`
-- Owner: `@jskit-ai/auth-provider-oidc-core@0.2.34`
+- Owner: `@jskit-ai/auth-provider-oidc-core@0.2.35`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/auth/oidc-sign-in/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/auth/oidc-sign-in/example/)
 - Requires: `@jskit-ai/auth-provider-oidc-core`, `@jskit-ai/auth-web`
@@ -92,7 +92,7 @@ Resolve an administrator environment key or an individual user's grant, then use
 
 - Id: `connectors/ai-connections`
 - Keywords: `ai`, `api-key`, `cli`, `environment`, `free`, `models`, `ownership`, `zai`, `zen`
-- Owner: `@jskit-ai/connectors-catalog@0.2.29`
+- Owner: `@jskit-ai/connectors-catalog@0.2.30`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/connectors/ai-connections/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/connectors/ai-connections/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -103,7 +103,7 @@ Compose provider operations, authorization and encrypted file storage from a CLI
 
 - Id: `connectors/api-key-connection`
 - Keywords: `api-key`, `clay`, `cli`, `clickhouse`, `connectors`, `dbt`, `files`, `firecrawl`, `granola`, `integrations`, `metrics`, `prestashop`, `resend`, `semantic-layer`, `semrush`, `x-twitter`
-- Owner: `@jskit-ai/connectors-catalog@0.2.29`
+- Owner: `@jskit-ai/connectors-catalog@0.2.30`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/connectors/api-key-connection/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/connectors/api-key-connection/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -114,7 +114,7 @@ Compose token-based MCP discovery and explicitly authorized tool calls using the
 
 - Id: `connectors/assistant-mcp`
 - Keywords: `assistant`, `cli`, `connectors`, `files`, `integrations`, `mcp`, `n8n`, `sanity`
-- Owner: `@jskit-ai/connectors-catalog@0.2.29`
+- Owner: `@jskit-ai/connectors-catalog@0.2.30`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/connectors/assistant-mcp/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/connectors/assistant-mcp/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -125,7 +125,7 @@ Configure assistant OAuth clients, then compose existing state, encrypted file g
 
 - Id: `connectors/assistant-mcp-oauth`
 - Keywords: `amplitude`, `assistant`, `atlassian`, `canva`, `cli`, `client metadata`, `confidence`, `connectors`, `figma`, `files`, `granola`, `hex`, `mcp`, `miro`, `oauth`
-- Owner: `@jskit-ai/connectors-catalog@0.2.29`
+- Owner: `@jskit-ai/connectors-catalog@0.2.30`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/connectors/assistant-mcp-oauth/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/connectors/assistant-mcp-oauth/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -136,7 +136,7 @@ Compose signed AWS operations, file configuration and application authorization
 
 - Id: `connectors/aws-storage-queries`
 - Keywords: `athena`, `aws`, `cli`, `connectors`, `files`, `iam`, `queries`, `s3`, `storage`, `sts`
-- Owner: `@jskit-ai/connectors-catalog@0.2.29`
+- Owner: `@jskit-ai/connectors-catalog@0.2.30`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/connectors/aws-storage-queries/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/connectors/aws-storage-queries/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -147,7 +147,7 @@ Compose reusable connection libraries with portable configuration, application o
 
 - Id: `connectors/calendar-cli`
 - Keywords: `calendar`, `cli`, `connectors`, `google`, `integrations`, `oauth`, `permissions`
-- Owner: `@jskit-ai/connector-google-calendar@0.2.29`
+- Owner: `@jskit-ai/connector-google-calendar@0.2.30`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/connectors/calendar-cli/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/connectors/calendar-cli/example/)
 - Requires: `@jskit-ai/connector-google-calendar`, `@jskit-ai/connectors-core`, `@jskit-ai/database-runtime-mysql`
@@ -158,7 +158,7 @@ Compose the shared connector runtime for event delivery while leaving workflow c
 
 - Id: `connectors/event-delivery`
 - Keywords: `cli`, `connectors`, `events`, `files`, `inngest`, `integrations`, `workflows`
-- Owner: `@jskit-ai/connectors-catalog@0.2.29`
+- Owner: `@jskit-ai/connectors-catalog@0.2.30`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/connectors/event-delivery/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/connectors/event-delivery/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -169,7 +169,7 @@ Wire service-account grants, file storage, explicit message actions and public b
 
 - Id: `connectors/firebase-messaging`
 - Keywords: `cli`, `connectors`, `fcm`, `files`, `firebase`, `integrations`, `jwt`, `notifications`, `push`, `service-account`, `vapid`
-- Owner: `@jskit-ai/connectors-catalog@0.2.29`
+- Owner: `@jskit-ai/connectors-catalog@0.2.30`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/connectors/firebase-messaging/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/connectors/firebase-messaging/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -180,7 +180,7 @@ Compose reviewed Search campaigns with project-owned Google OAuth and portable s
 
 - Id: `connectors/google-ads-search`
 - Keywords: `ads`, `campaigns`, `cli`, `connectors`, `conversion`, `google`, `search`
-- Owner: `@jskit-ai/connectors-catalog@0.2.29`
+- Owner: `@jskit-ai/connectors-catalog@0.2.30`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/connectors/google-ads-search/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/connectors/google-ads-search/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -191,7 +191,7 @@ Compose provider consent, verification and encrypted file persistence from an ap
 
 - Id: `connectors/oauth-connection`
 - Keywords: `accounting`, `assistant permissions`, `books`, `cli`, `client credentials`, `connectors`, `consent`, `crm`, `databricks`, `developer token`, `fabric`, `files`, `gaql`, `google ads`, `graphql`, `integrations`, `linkedin`, `microsoft`, `oauth`, `powerpoint`, `salesforce`, `service principal`, `shopify`, `soql`, `staffing`, `tiktok`, `twitch`, `wave`, `word`, `wordpress`, `workday`, `xero`, `zoho`
-- Owner: `@jskit-ai/connectors-catalog@0.2.29`
+- Owner: `@jskit-ai/connectors-catalog@0.2.30`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/connectors/oauth-connection/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/connectors/oauth-connection/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -202,7 +202,7 @@ Compose a sequential catalogue batch and preserve partial success for applicatio
 
 - Id: `connectors/paddle-catalogue`
 - Keywords: `batch`, `paddle`, `payments`, `prices`, `products`
-- Owner: `@jskit-ai/connectors-catalog@0.2.29`
+- Owner: `@jskit-ai/connectors-catalog@0.2.30`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/connectors/paddle-catalogue/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/connectors/paddle-catalogue/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -213,7 +213,7 @@ Resolve a publishable image key deliberately and use the shared URL library in a
 
 - Id: `connectors/public-image`
 - Keywords: `cli`, `connectors`, `files`, `images`, `integrations`, `logo-dev`, `public-key`
-- Owner: `@jskit-ai/connectors-catalog@0.2.29`
+- Owner: `@jskit-ai/connectors-catalog@0.2.30`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/connectors/public-image/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/connectors/public-image/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -224,7 +224,7 @@ Compose file configuration, Redshift Data API operations and application query o
 
 - Id: `connectors/redshift-queries`
 - Keywords: `aws`, `cli`, `connectors`, `files`, `iam`, `provisioned`, `redshift`, `serverless`, `sql`, `warehouse`
-- Owner: `@jskit-ai/connectors-catalog@0.2.29`
+- Owner: `@jskit-ai/connectors-catalog@0.2.30`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/connectors/redshift-queries/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/connectors/redshift-queries/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -235,7 +235,7 @@ Use the shared scanner runtime from a CLI or a host worker with portable configu
 
 - Id: `connectors/source-scanning`
 - Keywords: `cancellation`, `cli`, `connectors`, `integrations`, `scanning`, `security`, `source`, `wiz`, `worker`
-- Owner: `@jskit-ai/connectors-catalog@0.2.29`
+- Owner: `@jskit-ai/connectors-catalog@0.2.30`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/connectors/source-scanning/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/connectors/source-scanning/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -246,7 +246,7 @@ Add a protected administration surface, settings shell, and semantic navigation
 
 - Id: `console/console-surface`
 - Keywords: `admin`, `console`, `navigation`, `owner`, `placement`, `settings`, `surface`
-- Owner: `@jskit-ai/console-web@0.1.261`
+- Owner: `@jskit-ai/console-web@0.1.262`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/console/console-surface/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/console/console-surface/example/)
 - Requires: `@jskit-ai/console-core`, `@jskit-ai/console-web`, `@jskit-ai/shell-web`
@@ -268,7 +268,7 @@ Build a complete application-owned CRUD server package from a migration, a table
 
 - Id: `crud/crud-feature-package`
 - Keywords: `actions`, `crud`, `database`, `defineCrudFeature`, `json-api`, `migration`, `owns`, `permissions`, `repository`, `routes`, `service`, `table resource`
-- Owner: `@jskit-ai/crud-core@0.2.29`
+- Owner: `@jskit-ai/crud-core@0.2.30`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/crud/crud-feature-package/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/crud/crud-feature-package/example/)
 - Requires: `@jskit-ai/crud-core`, `@jskit-ai/resource-core`, `@jskit-ai/resource-crud-core`
@@ -279,7 +279,7 @@ Build a routed CRUD user interface as thin application pages over JSKIT's shared
 
 - Id: `crud/crud-screen-set`
 - Keywords: `actions`, `add`, `crud`, `delete`, `edit`, `filters`, `list`, `material`, `routes`, `view`, `vue`
-- Owner: `@jskit-ai/http-web@0.2.35`
+- Owner: `@jskit-ai/http-web@0.2.36`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/crud/crud-screen-set/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/crud/crud-screen-set/example/)
 - Requires: `@jskit-ai/http-web`, `@jskit-ai/resource-core`, `@jskit-ai/resource-crud-core`
@@ -345,7 +345,7 @@ Compose application-owned Google Publisher Tag delivery with the generic rewarde
 
 - Id: `rewards/google-rewarded`
 - Keywords: `ads`, `google`, `publisher tag`, `rewarded`, `unlock`
-- Owner: `@jskit-ai/rewarded-web@0.2.39`
+- Owner: `@jskit-ai/rewarded-web@0.2.40`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/rewards/google-rewarded/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/rewards/google-rewarded/example/)
 - Requires: `@jskit-ai/rewarded-web`
@@ -356,7 +356,7 @@ Define a server feature through explicit capabilities and first-class actions, a
 
 - Id: `server/feature-package`
 - Keywords: `actions`, `aggregate`, `feature`, `handle`, `orchestration`, `owns`, `package`, `provider`, `repository`, `routes`, `server`, `table resource`
-- Owner: `@jskit-ai/agent-docs@0.1.310`
+- Owner: `@jskit-ai/agent-docs@0.1.311`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/server/feature-package/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/server/feature-package/example/)
 - Requires: `@jskit-ai/kernel`
@@ -389,7 +389,7 @@ Compose an account settings route and profile, preference, notification, and sig
 
 - Id: `users/account-settings`
 - Keywords: `account`, `link provider`, `notifications`, `oauth`, `preferences`, `profile`, `settings`, `sign-in methods`, `user`, `vue`
-- Owner: `@jskit-ai/users-web@0.2.44`
+- Owner: `@jskit-ai/users-web@0.2.45`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/users/account-settings/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/users/account-settings/example/)
 - Requires: `@jskit-ai/shell-web`, `@jskit-ai/users-core`, `@jskit-ai/users-web`
@@ -400,7 +400,7 @@ Expose user administration and workspace-scoped member operations through app-ow
 
 - Id: `users/user-administration-server`
 - Keywords: `account`, `admin`, `member`, `repository`, `resource`, `routes`, `service`, `user`, `workspace`
-- Owner: `@jskit-ai/users-core@0.2.33`
+- Owner: `@jskit-ai/users-core@0.2.34`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/users/user-administration-server/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/users/user-administration-server/example/)
 - Requires: `@jskit-ai/crud-core`, `@jskit-ai/users-core`
@@ -411,7 +411,7 @@ Configure roles, workspace access policy, invitations, and app-owned invitation
 
 - Id: `workspaces/workspace-server`
 - Keywords: `access`, `invite`, `membership`, `multitenancy`, `policy`, `role`, `tenancy`, `workspace`
-- Owner: `@jskit-ai/workspaces-core@0.2.33`
+- Owner: `@jskit-ai/workspaces-core@0.2.34`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/workspaces/workspace-server/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/workspaces/workspace-server/example/)
 - Requires: `@jskit-ai/users-core`, `@jskit-ai/workspaces-core`
@@ -422,7 +422,7 @@ Compose workspace selection, invitation, member administration, settings, and re
 
 - Id: `workspaces/workspace-surfaces`
 - Keywords: `admin`, `invite`, `member`, `navigation`, `settings`, `surface`, `switcher`, `workspace`
-- Owner: `@jskit-ai/workspaces-web@0.2.44`
+- Owner: `@jskit-ai/workspaces-web@0.2.45`
 - Read: [PATTERN.md](../../skills/jskit/references/patterns/workspaces/workspace-surfaces/PATTERN.md)
 - Examples: [example/](../../skills/jskit/references/patterns/workspaces/workspace-surfaces/example/)
 - Requires: `@jskit-ai/shell-web`, `@jskit-ai/workspaces-core`, `@jskit-ai/workspaces-web`

package/reference/autogen/packages/assistant-core.md

@@ -370,6 +370,11 @@ Local functions
 Exports
 - `createClaudeCommandRun({ bound, preparation, send, interrupt })`
 
+### `src/server/conversation/claudeEntryStop.js`
+Exports
+- `setClaudeTurnState(entry, state, message = "")`
+- `stopClaudeEntryProcess(turn, reason = "", { preparing = false } = {})`
+
 ### `src/server/conversation/claudeHistory.js`
 Exports
 - `claudeNativeMessageId(id)`
@@ -399,7 +404,7 @@ Exports
 - `type ClaudeTurnProcess`
 Local functions
 - `steeringRefusal(message, { messageCode, finished })`
-- `setClaudeTurnState(entry, state, message = "")`
+- `unsentDelivery(error)`
 - `claudeTurnResult(entry, current)`
 - `claudeProviderChange(frame)`
 - `continuesClaudeTurn(frame)`
@@ -444,6 +449,8 @@ Exports
 ### `src/server/conversation/claudePromptDelivery.js`
 Exports
 - `createClaudePromptDelivery({ store, preparation, createError, onEvent, readHistory, bindAccount, ensureProcess, snapshot })`
+Local functions
+- `rememberPromptProcess(entry, uuid)`
 
 ### `src/server/conversation/claudeSessionCleanup.js`
 Exports
@@ -476,6 +483,7 @@ Exports
 - `type ClaudeConversationErrorFactory`
 Local functions
 - `nativeWorkSettled(entry)`
+- `promptCanStillArrive(entry, uuid)`
 - `runsNativeWork(entry)`
 
 ### `src/server/conversation/codexAccountReader.js`
@@ -1220,6 +1228,8 @@ Exports
 - `type ConversationEntry`
 - `type ConversationRequest`
 - `type ConversationDelivery`
+Local functions
+- `nativeAdmission(observation)`
 
 ### `src/server/conversation/conversationEntries.js`
 Exports

package/reference/autogen/packages/auth-provider-local-core.md

@@ -59,7 +59,8 @@ Local functions
 ### `src/server/lib/emailConfirmation.js`
 Exports
 - `CONFIRMATION_TOKEN_TTL_SECONDS`
-- `createLocalEmailConfirmation({ backend, config, confirmationSender, firstAccountSetup, invitationContextResolver, passwords, profileProjector, sessions })`
+- `confirmEveryRegistrationByLink()`
+- `createLocalEmailConfirmation({ backend, config, confirmationMode, confirmationSender, firstAccountSetup, invitationContextResolver, logger, passwords, profileProjector, sessions })`
 - `createLoggedConfirmationSender(logger)`
 - `createSimulatedConfirmationSender(logger)`
 Local functions
@@ -184,7 +185,7 @@ Exports
 
 ### `src/server/lib/service.js`
 Exports
-- `createLocalAuthService({ backend, config, confirmationSender, firstAccountSetup: givenFirstAccountSetup = null, invitationContextResolver, logger, passwordStrategy, profileProjector, recoverySender })`
+- `createLocalAuthService({ backend, config, confirmationMode = confirmEveryRegistrationByLink, confirmationSender, firstAccountSetup: givenFirstAccountSetup = null, invitationContextResolver, logger, passwordStrategy, profileProjector, recoverySender })`
 
 ### `src/server/lib/sessions.js`
 Exports
@@ -235,6 +236,7 @@ Exports
 - `type AuthLocalPasswordStrategy`
 - `type AuthLocalRecoverySender`
 - `type AuthLocalConfirmationSender`
+- `type AuthLocalConfirmationMode`
 - `type AuthLocalConfig`
 - `type AuthLocalOAuthProvider`
 - `type AuthLocalFirstAccountSetup`

package/reference/autogen/packages/http-web.md

@@ -268,6 +268,7 @@ Local functions
 
 ### `src/client/composables/runtime/operationUiHelpers.js`
 Exports
+- `createLoadRetryActionFactory({ errorStatus, retry, enabled = true })`
 - `setupRouteChangeCleanup({ enabled = true, route, feedback, onClear })`
 - `setupOperationErrorReporting({ enabled = true, source = "http-web.operation", loadError = null, notFoundError = null, loadActionFactory = noRetryAction, notFoundActionFactory = noRetryAction, loadChannel = "", notFoundChannel = "", loadSeverity = "error", notFoundSeverity = "warning", dedupeWindowMs = 2000 } = {})`
 Local functions
@@ -311,7 +312,7 @@ Local functions
 
 ### `src/client/composables/runtime/useUiFeedback.js`
 Exports
-- `useUiFeedback({ initialType = "success", source = "http-web.ui-feedback", successChannel = "", errorChannel = "", dedupeWindowMs = 2000 } = {})`
+- `useUiFeedback({ initialType = "success", source = "http-web.ui-feedback", successChannel = "", warningChannel = "", errorChannel = "", dedupeWindowMs = 2000 } = {})`
 
 ### `src/client/composables/runtime/useViewCore.js`
 Exports
@@ -325,6 +326,7 @@ Exports
 
 ### `src/client/composables/support/errorMessageHelpers.js`
 Exports
+- `toLoadRefusalMessage(error)`
 - `toQueryErrorMessage(error, fallbackMessage = "", defaultMessage = "")`
 - `toUiErrorMessage(error, fallbackMessage = "", defaultMessage = "")`
 - `toUiFieldErrors(error)`
@@ -384,8 +386,10 @@ Local functions
 Exports
 - `buildRequestRecoveryMeta(requestRecovery = null, defaults = {})`
 - `hasResolvedQueryData({ query = null, data = null } = {})`
+- `isRetryableLoadStatus(status)`
 - `mergeQueryMeta(queryOptions = null, meta = {})`
 - `mergeRequestRecoveryQueryMeta(queryOptions = null, requestRecovery = null, defaults = {})`
+- `resolveLoadErrorStatus(error)`
 Local functions
 - `normalizeRequestRecoveryInput(requestRecovery = null)`
 - `normalizeRequestRecoveryValue(name, value)`

package/skills/jskit/references/heuristics/client-requests.md

@@ -93,14 +93,14 @@ Why this is the standard JSKIT shape:
 
 Error presentation rules:
 
-- Resource load failures should stay local to the screen with the runtime's `loadError` state and a retry action.
+- Resource load failures should stay local to the screen with the runtime's `loadError` state and a retry action when trying again can help. The load notices of `useList()`, `useView()` and `useAddEdit()`, and the Retry buttons of `CrudListScreen`, `CrudViewScreen` and `CrudAddEditScreen`, offer Retry only after a network failure (no status), 408, 429 or a 5xx; a refusal (401, 403, 404, 422 and other 4xx) gets none. The three runtimes expose the status as `errorStatus` (0 for a network failure), so a custom screen can tell a refusal from a network failure and hide its own Retry the same way. After a refusal a screen says why rather than suggesting the connection: the runtimes' `loadRefusalMessage` is the server's own message when the error carries one, otherwise a neutral text for the kind of refusal (401, 403, 404, another 4xx), and empty when trying again can help; the three CRUD screens show it.
 - Do not force global banners for ordinary list/view/add-edit load failures; the shell error policy treats `resource-load` as `silent` by default.
 - Transport/connectivity failures are different from ordinary resource-load errors. `shell-web` observes the app QueryClient and reports active safe-read query failures such as `Network request failed.` or `Failed to fetch` through request recovery with a `Retry` action that calls `query.refetch()`.
 - User-visible reads should be TanStack Query-backed through `useEndpointResource()`, `useList()`, `useView()`, `useAddEdit()`, or CRUD screen composables. Do not load panel data with raw `fetch(...)` plus manual request recovery reporting.
 - Automatic shell request recovery is for `GET` and `HEAD` read refetches. Do not use it to replay `POST`, `PATCH`, `PUT`, or `DELETE`; saving and command screens own their mutation state and feedback.
 - JSKIT read composables mark their Query entries with `jskit.requestRecoveryMethod`. For hand-written TanStack Query reads outside those composables, set `meta.jskit.requestRecoveryMethod` to `GET` or `HEAD`.
 - Use `requestRecoveryLabel` on JSKIT read composables, or query meta `jskit.requestRecoveryLabel`, when the recovery banner needs a better label. Use `jskit.requestRecovery = false` only when a query owns its full connectivity recovery UI.
-- Use `useUiFeedback()` or `useCommand()` for user-triggered action feedback. Those flows report `action-feedback`, and the app-owned shell error policy decides the channel.
+- Use `useUiFeedback()` or `useCommand()` for user-triggered action feedback. Those flows report `action-feedback`, and the app-owned shell error policy decides the channel. An action that did its work with a catch the person must act on (an invitation created but not emailed) reports through `useUiFeedback().warning()`, not `success()`.
 - Use explicit shell error intents only for exceptional app-level cases: `app-recoverable` for recoverable shell/runtime failures and `blocking` for failures that require user attention.
 
 Avoid:

package/skills/jskit/references/multi-homing.md

@@ -226,7 +226,13 @@ grows with the workspace, and a lookup per row multiplies it.
 
 To send invitation email, provide the optional `workspaces.invite-mailer`
 capability from one of the application's providers. Without one, invitations
-are still created and delivery reports `mailer_unconfigured`. The mailer, typed
+are still created and delivery reports `mailer_unconfigured`. After **Send
+invite**, the Members panel's notice follows the delivery status: `sent` says
+the invite was sent; `simulated` (a test copy, whose `SIDE_EFFECTS` is not
+`live`) and `mailer_unconfigured` say no email was sent; `failed` is a warning
+that the email failed. Each of those three points to the invite link, which
+the panel shows under the form with its **Copy** button. A status the panel
+does not know says only that the invite was created. The mailer, typed
 `WorkspaceInviteMailer` in `@jskit-ai/workspaces-core/server/types`, is an
 object whose `sendWorkspaceInvite(message, options)` receives `{ inviteId,
 email, inviteUrl, workspace, inviter, roleSid, expiresAt, locale, message }`,

package/skills/jskit/references/pattern-index.md

@@ -15,7 +15,7 @@ A concrete Fastify, Vue, and JSKIT application foundation for products that do n
 
 - Id: `app/minimal-foundation`
 - Keywords: `app`, `fastify`, `foundation`, `minimal`, `server`, `vite`, `vue`
-- Owner: `@jskit-ai/agent-docs@0.1.310`
+- Owner: `@jskit-ai/agent-docs@0.1.311`
 - Read: [PATTERN.md](patterns/app/minimal-foundation/PATTERN.md)
 - Examples: [example/](patterns/app/minimal-foundation/example/)
 - Requires: `@jskit-ai/http-runtime`, `@jskit-ai/kernel`
@@ -26,7 +26,7 @@ A concrete JSKIT web application foundation with responsive shell navigation, se
 
 - Id: `app/shell-foundation`
 - Keywords: `app`, `foundation`, `material`, `navigation`, `placements`, `shell`, `vite`, `vue`
-- Owner: `@jskit-ai/agent-docs@0.1.310`
+- Owner: `@jskit-ai/agent-docs@0.1.311`
 - Read: [PATTERN.md](patterns/app/shell-foundation/PATTERN.md)
 - Examples: [example/](patterns/app/shell-foundation/example/)
 - Requires: `@jskit-ai/http-runtime`, `@jskit-ai/kernel`, `@jskit-ai/shell-web`
@@ -37,7 +37,7 @@ Configure an assistant runtime for one application surface and expose its chat a
 
 - Id: `assistant/assistant-surface`
 - Keywords: `ai`, `assistant`, `chat`, `config`, `environment`, `page`, `placement`, `settings`, `surface`
-- Owner: `@jskit-ai/assistant-runtime@0.2.52`
+- Owner: `@jskit-ai/assistant-runtime@0.2.53`
 - Read: [PATTERN.md](patterns/assistant/assistant-surface/PATTERN.md)
 - Examples: [example/](patterns/assistant/assistant-surface/example/)
 - Requires: `@jskit-ai/assistant-runtime`, `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`, `@jskit-ai/shell-web`
@@ -48,7 +48,7 @@ Run one OpenID Connect sign-in for all of an owner's apps as its own JSKIT proje
 
 - Id: `auth/accounts-hub`
 - Keywords: `accounts hub`, `auth`, `authentication`, `issuer`, `master login`, `oidc`, `openid connect`, `single sign-on`, `sso`
-- Owner: `@jskit-ai/oidc-issuer-core@0.1.30`
+- Owner: `@jskit-ai/oidc-issuer-core@0.1.31`
 - Read: [PATTERN.md](patterns/auth/accounts-hub/PATTERN.md)
 - Examples: [example/](patterns/auth/accounts-hub/example/)
 - Requires: `@jskit-ai/oidc-issuer-core`
@@ -70,7 +70,7 @@ Let people sign in with the accounts they already have in an accounts hub or ano
 
 - Id: `auth/oidc-sign-in`
 - Keywords: `accounts hub`, `auth`, `authentication`, `back-channel logout`, `dynamic client registration`, `issuer`, `master login`, `oidc`, `openid connect`, `single sign-on`, `sso`
-- Owner: `@jskit-ai/auth-provider-oidc-core@0.2.34`
+- Owner: `@jskit-ai/auth-provider-oidc-core@0.2.35`
 - Read: [PATTERN.md](patterns/auth/oidc-sign-in/PATTERN.md)
 - Examples: [example/](patterns/auth/oidc-sign-in/example/)
 - Requires: `@jskit-ai/auth-provider-oidc-core`, `@jskit-ai/auth-web`
@@ -92,7 +92,7 @@ Resolve an administrator environment key or an individual user's grant, then use
 
 - Id: `connectors/ai-connections`
 - Keywords: `ai`, `api-key`, `cli`, `environment`, `free`, `models`, `ownership`, `zai`, `zen`
-- Owner: `@jskit-ai/connectors-catalog@0.2.29`
+- Owner: `@jskit-ai/connectors-catalog@0.2.30`
 - Read: [PATTERN.md](patterns/connectors/ai-connections/PATTERN.md)
 - Examples: [example/](patterns/connectors/ai-connections/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -103,7 +103,7 @@ Compose provider operations, authorization and encrypted file storage from a CLI
 
 - Id: `connectors/api-key-connection`
 - Keywords: `api-key`, `clay`, `cli`, `clickhouse`, `connectors`, `dbt`, `files`, `firecrawl`, `granola`, `integrations`, `metrics`, `prestashop`, `resend`, `semantic-layer`, `semrush`, `x-twitter`
-- Owner: `@jskit-ai/connectors-catalog@0.2.29`
+- Owner: `@jskit-ai/connectors-catalog@0.2.30`
 - Read: [PATTERN.md](patterns/connectors/api-key-connection/PATTERN.md)
 - Examples: [example/](patterns/connectors/api-key-connection/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -114,7 +114,7 @@ Compose token-based MCP discovery and explicitly authorized tool calls using the
 
 - Id: `connectors/assistant-mcp`
 - Keywords: `assistant`, `cli`, `connectors`, `files`, `integrations`, `mcp`, `n8n`, `sanity`
-- Owner: `@jskit-ai/connectors-catalog@0.2.29`
+- Owner: `@jskit-ai/connectors-catalog@0.2.30`
 - Read: [PATTERN.md](patterns/connectors/assistant-mcp/PATTERN.md)
 - Examples: [example/](patterns/connectors/assistant-mcp/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -125,7 +125,7 @@ Configure assistant OAuth clients, then compose existing state, encrypted file g
 
 - Id: `connectors/assistant-mcp-oauth`
 - Keywords: `amplitude`, `assistant`, `atlassian`, `canva`, `cli`, `client metadata`, `confidence`, `connectors`, `figma`, `files`, `granola`, `hex`, `mcp`, `miro`, `oauth`
-- Owner: `@jskit-ai/connectors-catalog@0.2.29`
+- Owner: `@jskit-ai/connectors-catalog@0.2.30`
 - Read: [PATTERN.md](patterns/connectors/assistant-mcp-oauth/PATTERN.md)
 - Examples: [example/](patterns/connectors/assistant-mcp-oauth/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -136,7 +136,7 @@ Compose signed AWS operations, file configuration and application authorization
 
 - Id: `connectors/aws-storage-queries`
 - Keywords: `athena`, `aws`, `cli`, `connectors`, `files`, `iam`, `queries`, `s3`, `storage`, `sts`
-- Owner: `@jskit-ai/connectors-catalog@0.2.29`
+- Owner: `@jskit-ai/connectors-catalog@0.2.30`
 - Read: [PATTERN.md](patterns/connectors/aws-storage-queries/PATTERN.md)
 - Examples: [example/](patterns/connectors/aws-storage-queries/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -147,7 +147,7 @@ Compose reusable connection libraries with portable configuration, application o
 
 - Id: `connectors/calendar-cli`
 - Keywords: `calendar`, `cli`, `connectors`, `google`, `integrations`, `oauth`, `permissions`
-- Owner: `@jskit-ai/connector-google-calendar@0.2.29`
+- Owner: `@jskit-ai/connector-google-calendar@0.2.30`
 - Read: [PATTERN.md](patterns/connectors/calendar-cli/PATTERN.md)
 - Examples: [example/](patterns/connectors/calendar-cli/example/)
 - Requires: `@jskit-ai/connector-google-calendar`, `@jskit-ai/connectors-core`, `@jskit-ai/database-runtime-mysql`
@@ -158,7 +158,7 @@ Compose the shared connector runtime for event delivery while leaving workflow c
 
 - Id: `connectors/event-delivery`
 - Keywords: `cli`, `connectors`, `events`, `files`, `inngest`, `integrations`, `workflows`
-- Owner: `@jskit-ai/connectors-catalog@0.2.29`
+- Owner: `@jskit-ai/connectors-catalog@0.2.30`
 - Read: [PATTERN.md](patterns/connectors/event-delivery/PATTERN.md)
 - Examples: [example/](patterns/connectors/event-delivery/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -169,7 +169,7 @@ Wire service-account grants, file storage, explicit message actions and public b
 
 - Id: `connectors/firebase-messaging`
 - Keywords: `cli`, `connectors`, `fcm`, `files`, `firebase`, `integrations`, `jwt`, `notifications`, `push`, `service-account`, `vapid`
-- Owner: `@jskit-ai/connectors-catalog@0.2.29`
+- Owner: `@jskit-ai/connectors-catalog@0.2.30`
 - Read: [PATTERN.md](patterns/connectors/firebase-messaging/PATTERN.md)
 - Examples: [example/](patterns/connectors/firebase-messaging/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -180,7 +180,7 @@ Compose reviewed Search campaigns with project-owned Google OAuth and portable s
 
 - Id: `connectors/google-ads-search`
 - Keywords: `ads`, `campaigns`, `cli`, `connectors`, `conversion`, `google`, `search`
-- Owner: `@jskit-ai/connectors-catalog@0.2.29`
+- Owner: `@jskit-ai/connectors-catalog@0.2.30`
 - Read: [PATTERN.md](patterns/connectors/google-ads-search/PATTERN.md)
 - Examples: [example/](patterns/connectors/google-ads-search/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -191,7 +191,7 @@ Compose provider consent, verification and encrypted file persistence from an ap
 
 - Id: `connectors/oauth-connection`
 - Keywords: `accounting`, `assistant permissions`, `books`, `cli`, `client credentials`, `connectors`, `consent`, `crm`, `databricks`, `developer token`, `fabric`, `files`, `gaql`, `google ads`, `graphql`, `integrations`, `linkedin`, `microsoft`, `oauth`, `powerpoint`, `salesforce`, `service principal`, `shopify`, `soql`, `staffing`, `tiktok`, `twitch`, `wave`, `word`, `wordpress`, `workday`, `xero`, `zoho`
-- Owner: `@jskit-ai/connectors-catalog@0.2.29`
+- Owner: `@jskit-ai/connectors-catalog@0.2.30`
 - Read: [PATTERN.md](patterns/connectors/oauth-connection/PATTERN.md)
 - Examples: [example/](patterns/connectors/oauth-connection/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -202,7 +202,7 @@ Compose a sequential catalogue batch and preserve partial success for applicatio
 
 - Id: `connectors/paddle-catalogue`
 - Keywords: `batch`, `paddle`, `payments`, `prices`, `products`
-- Owner: `@jskit-ai/connectors-catalog@0.2.29`
+- Owner: `@jskit-ai/connectors-catalog@0.2.30`
 - Read: [PATTERN.md](patterns/connectors/paddle-catalogue/PATTERN.md)
 - Examples: [example/](patterns/connectors/paddle-catalogue/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -213,7 +213,7 @@ Resolve a publishable image key deliberately and use the shared URL library in a
 
 - Id: `connectors/public-image`
 - Keywords: `cli`, `connectors`, `files`, `images`, `integrations`, `logo-dev`, `public-key`
-- Owner: `@jskit-ai/connectors-catalog@0.2.29`
+- Owner: `@jskit-ai/connectors-catalog@0.2.30`
 - Read: [PATTERN.md](patterns/connectors/public-image/PATTERN.md)
 - Examples: [example/](patterns/connectors/public-image/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -224,7 +224,7 @@ Compose file configuration, Redshift Data API operations and application query o
 
 - Id: `connectors/redshift-queries`
 - Keywords: `aws`, `cli`, `connectors`, `files`, `iam`, `provisioned`, `redshift`, `serverless`, `sql`, `warehouse`
-- Owner: `@jskit-ai/connectors-catalog@0.2.29`
+- Owner: `@jskit-ai/connectors-catalog@0.2.30`
 - Read: [PATTERN.md](patterns/connectors/redshift-queries/PATTERN.md)
 - Examples: [example/](patterns/connectors/redshift-queries/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -235,7 +235,7 @@ Use the shared scanner runtime from a CLI or a host worker with portable configu
 
 - Id: `connectors/source-scanning`
 - Keywords: `cancellation`, `cli`, `connectors`, `integrations`, `scanning`, `security`, `source`, `wiz`, `worker`
-- Owner: `@jskit-ai/connectors-catalog@0.2.29`
+- Owner: `@jskit-ai/connectors-catalog@0.2.30`
 - Read: [PATTERN.md](patterns/connectors/source-scanning/PATTERN.md)
 - Examples: [example/](patterns/connectors/source-scanning/example/)
 - Requires: `@jskit-ai/connectors-catalog`, `@jskit-ai/connectors-core`
@@ -246,7 +246,7 @@ Add a protected administration surface, settings shell, and semantic navigation
 
 - Id: `console/console-surface`
 - Keywords: `admin`, `console`, `navigation`, `owner`, `placement`, `settings`, `surface`
-- Owner: `@jskit-ai/console-web@0.1.261`
+- Owner: `@jskit-ai/console-web@0.1.262`
 - Read: [PATTERN.md](patterns/console/console-surface/PATTERN.md)
 - Examples: [example/](patterns/console/console-surface/example/)
 - Requires: `@jskit-ai/console-core`, `@jskit-ai/console-web`, `@jskit-ai/shell-web`
@@ -268,7 +268,7 @@ Build a complete application-owned CRUD server package from a migration, a table
 
 - Id: `crud/crud-feature-package`
 - Keywords: `actions`, `crud`, `database`, `defineCrudFeature`, `json-api`, `migration`, `owns`, `permissions`, `repository`, `routes`, `service`, `table resource`
-- Owner: `@jskit-ai/crud-core@0.2.29`
+- Owner: `@jskit-ai/crud-core@0.2.30`
 - Read: [PATTERN.md](patterns/crud/crud-feature-package/PATTERN.md)
 - Examples: [example/](patterns/crud/crud-feature-package/example/)
 - Requires: `@jskit-ai/crud-core`, `@jskit-ai/resource-core`, `@jskit-ai/resource-crud-core`
@@ -279,7 +279,7 @@ Build a routed CRUD user interface as thin application pages over JSKIT's shared
 
 - Id: `crud/crud-screen-set`
 - Keywords: `actions`, `add`, `crud`, `delete`, `edit`, `filters`, `list`, `material`, `routes`, `view`, `vue`
-- Owner: `@jskit-ai/http-web@0.2.35`
+- Owner: `@jskit-ai/http-web@0.2.36`
 - Read: [PATTERN.md](patterns/crud/crud-screen-set/PATTERN.md)
 - Examples: [example/](patterns/crud/crud-screen-set/example/)
 - Requires: `@jskit-ai/http-web`, `@jskit-ai/resource-core`, `@jskit-ai/resource-crud-core`
@@ -345,7 +345,7 @@ Compose application-owned Google Publisher Tag delivery with the generic rewarde
 
 - Id: `rewards/google-rewarded`
 - Keywords: `ads`, `google`, `publisher tag`, `rewarded`, `unlock`
-- Owner: `@jskit-ai/rewarded-web@0.2.39`
+- Owner: `@jskit-ai/rewarded-web@0.2.40`
 - Read: [PATTERN.md](patterns/rewards/google-rewarded/PATTERN.md)
 - Examples: [example/](patterns/rewards/google-rewarded/example/)
 - Requires: `@jskit-ai/rewarded-web`
@@ -356,7 +356,7 @@ Define a server feature through explicit capabilities and first-class actions, a
 
 - Id: `server/feature-package`
 - Keywords: `actions`, `aggregate`, `feature`, `handle`, `orchestration`, `owns`, `package`, `provider`, `repository`, `routes`, `server`, `table resource`
-- Owner: `@jskit-ai/agent-docs@0.1.310`
+- Owner: `@jskit-ai/agent-docs@0.1.311`
 - Read: [PATTERN.md](patterns/server/feature-package/PATTERN.md)
 - Examples: [example/](patterns/server/feature-package/example/)
 - Requires: `@jskit-ai/kernel`
@@ -389,7 +389,7 @@ Compose an account settings route and profile, preference, notification, and sig
 
 - Id: `users/account-settings`
 - Keywords: `account`, `link provider`, `notifications`, `oauth`, `preferences`, `profile`, `settings`, `sign-in methods`, `user`, `vue`
-- Owner: `@jskit-ai/users-web@0.2.44`
+- Owner: `@jskit-ai/users-web@0.2.45`
 - Read: [PATTERN.md](patterns/users/account-settings/PATTERN.md)
 - Examples: [example/](patterns/users/account-settings/example/)
 - Requires: `@jskit-ai/shell-web`, `@jskit-ai/users-core`, `@jskit-ai/users-web`
@@ -400,7 +400,7 @@ Expose user administration and workspace-scoped member operations through app-ow
 
 - Id: `users/user-administration-server`
 - Keywords: `account`, `admin`, `member`, `repository`, `resource`, `routes`, `service`, `user`, `workspace`
-- Owner: `@jskit-ai/users-core@0.2.33`
+- Owner: `@jskit-ai/users-core@0.2.34`
 - Read: [PATTERN.md](patterns/users/user-administration-server/PATTERN.md)
 - Examples: [example/](patterns/users/user-administration-server/example/)
 - Requires: `@jskit-ai/crud-core`, `@jskit-ai/users-core`
@@ -411,7 +411,7 @@ Configure roles, workspace access policy, invitations, and app-owned invitation
 
 - Id: `workspaces/workspace-server`
 - Keywords: `access`, `invite`, `membership`, `multitenancy`, `policy`, `role`, `tenancy`, `workspace`
-- Owner: `@jskit-ai/workspaces-core@0.2.33`
+- Owner: `@jskit-ai/workspaces-core@0.2.34`
 - Read: [PATTERN.md](patterns/workspaces/workspace-server/PATTERN.md)
 - Examples: [example/](patterns/workspaces/workspace-server/example/)
 - Requires: `@jskit-ai/users-core`, `@jskit-ai/workspaces-core`
@@ -422,7 +422,7 @@ Compose workspace selection, invitation, member administration, settings, and re
 
 - Id: `workspaces/workspace-surfaces`
 - Keywords: `admin`, `invite`, `member`, `navigation`, `settings`, `surface`, `switcher`, `workspace`
-- Owner: `@jskit-ai/workspaces-web@0.2.44`
+- Owner: `@jskit-ai/workspaces-web@0.2.45`
 - Read: [PATTERN.md](patterns/workspaces/workspace-surfaces/PATTERN.md)
 - Examples: [example/](patterns/workspaces/workspace-surfaces/example/)
 - Requires: `@jskit-ai/shell-web`, `@jskit-ai/workspaces-core`, `@jskit-ai/workspaces-web`

package/skills/jskit/references/patterns/app/minimal-foundation/example/package.json

@@ -50,7 +50,7 @@
   },
   "devDependencies": {
     "@jskit-ai/config-eslint": "0.1.251",
-    "@jskit-ai/jskit-catalog": "0.2.62",
+    "@jskit-ai/jskit-catalog": "0.2.63",
     "@playwright/test": "1.61.1",
     "@vitejs/plugin-vue": "^6.0.7",
     "eslint": "^10.8.0",

package/skills/jskit/references/patterns/app/shell-foundation/example/package.json

@@ -51,7 +51,7 @@
   },
   "devDependencies": {
     "@jskit-ai/config-eslint": "0.1.251",
-    "@jskit-ai/jskit-catalog": "0.2.62",
+    "@jskit-ai/jskit-catalog": "0.2.63",
     "@playwright/test": "1.61.1",
     "@vitejs/plugin-vue": "^6.0.7",
     "eslint": "^10.8.0",

package/skills/jskit/references/patterns/auth/accounts-hub/example/package.json

@@ -4,6 +4,6 @@
   "dependencies": {
     "@jskit-ai/database-runtime": "0.1.270",
     "@jskit-ai/database-runtime-mysql": "0.1.268",
-    "@jskit-ai/oidc-issuer-core": "0.1.30"
+    "@jskit-ai/oidc-issuer-core": "0.1.31"
   }
 }

package/skills/jskit/references/patterns/auth/oidc-sign-in/example/package.json

@@ -2,7 +2,7 @@
   "private": true,
   "type": "module",
   "dependencies": {
-    "@jskit-ai/auth-provider-oidc-core": "0.2.34",
+    "@jskit-ai/auth-provider-oidc-core": "0.2.35",
     "@jskit-ai/auth-web": "0.2.32"
   }
 }

package/skills/jskit/references/patterns/connectors/calendar-cli/example/package.json

@@ -7,8 +7,8 @@
     "db:migrate:status": "knex --knexfile ./knexfile.js migrate:list"
   },
   "dependencies": {
-    "@jskit-ai/connectors-core": "0.2.29",
-    "@jskit-ai/connector-google-calendar": "0.2.29",
+    "@jskit-ai/connectors-core": "0.2.30",
+    "@jskit-ai/connector-google-calendar": "0.2.30",
     "@jskit-ai/database-runtime": "0.1.270",
     "@jskit-ai/database-runtime-mysql": "0.1.268",
     "knex": "^3.1.0"

package/skills/jskit/references/patterns/crud/crud-feature-package/example/packages/books/package.json

@@ -9,7 +9,7 @@
     "./shared": "./src/shared/index.js"
   },
   "dependencies": {
-    "@jskit-ai/crud-core": "0.2.29",
+    "@jskit-ai/crud-core": "0.2.30",
     "@jskit-ai/resource-core": "0.1.212",
     "@jskit-ai/resource-crud-core": "0.1.214"
   },

package/skills/jskit/references/patterns/users/user-administration-server/example/packages/users/package.json

@@ -10,9 +10,9 @@
     "./shared": "./src/shared/index.js"
   },
   "dependencies": {
-    "@jskit-ai/crud-core": "0.2.29",
+    "@jskit-ai/crud-core": "0.2.30",
     "@jskit-ai/resource-crud-core": "0.1.214",
-    "@jskit-ai/users-core": "0.2.33"
+    "@jskit-ai/users-core": "0.2.34"
   },
   "jskit": {
     "kind": "runtime",

package/skills/jskit/references/patterns/users/user-administration-server/example/packages/users-workspace/package.json

@@ -10,14 +10,14 @@
     "./shared": "./src/shared/index.js"
   },
   "dependencies": {
-    "@jskit-ai/crud-core": "0.2.29",
+    "@jskit-ai/crud-core": "0.2.30",
     "@jskit-ai/resource-crud-core": "0.1.214",
-    "@jskit-ai/users-core": "0.2.33",
-    "@jskit-ai/workspaces-core": "0.2.33"
+    "@jskit-ai/users-core": "0.2.34",
+    "@jskit-ai/workspaces-core": "0.2.34"
   },
   "peerDependencies": {
     "@jskit-ai/kernel": "0.2.21",
-    "@jskit-ai/resource-runtime": "0.2.26"
+    "@jskit-ai/resource-runtime": "0.2.27"
   },
   "jskit": {
     "kind": "runtime",

package/skills/jskit/references/side-effects.md

@@ -26,7 +26,11 @@ purpose: any host can set it. The host sets it; a request never chooses it.
 - The server logs once at startup whether it acts for real. A production server
   that simulates logs a warning.
 - Local-password emails (confirmation and password reset) with an installed
-  sender are logged, not sent.
+  sender are logged, not sent: local auth uses its own simulated sender in
+  place of the application's, which never runs in a test copy. An application
+  that confirms new accounts at once while its email isn't set up uses
+  `auth.local.confirmation-mode`, which a test copy keeps (see
+  [Authentication](/guide/app-setup/authentication)).
 - Workspace invitations with a provided mailer are logged. The invitation
   answers `status: "simulated"`, and the inviter copies the link.
 - Accounts-hub email is logged, not sent.