@jskit-ai/connectors-catalog 0.1.1

package/docs/zoho-crm.md

@@ -0,0 +1,192 @@
+# Zoho CRM
+
+Import `zohoCrmProvider` from `@jskit-ai/connectors-catalog/server/zoho-crm`.
+The initial adapter reads the current CRM user and pages of leads, contacts,
+accounts and deals. It uses the existing OAuth connection service and encrypted
+file store. Vibe64 and CLI users edit the same `integrations.json`; saving that
+file does not perform consent or verify credentials.
+
+## Register a client
+
+1. Sign into the [Zoho API Console](https://api-console.zoho.com/) with the account
+   that will own the registration. Choose **Get Started**, or add a client if
+   your console already contains registrations.
+2. Select **Server-based Applications**, then **Create Now**. This adapter uses
+   a backend-held secret. Enter **Client Name**, **Homepage URL**, and the exact
+   **Authorized Redirect URI** served by your backend. Choose **Create**.
+3. Open **Client Secret**. Copy **Client ID** into the registration below.
+   Store **Client Secret** in the runtime binding `ZOHO_CRM_CLIENT_SECRET`.
+   Store the registered redirect URI in `ZOHO_CRM_CALLBACK_URL`.
+4. In the configuration, select the data centre containing the CRM account and
+   the intended Production, Sandbox or Developer environment. During consent,
+   choose the matching organisation and environment. A token belongs to that
+   choice and cannot be reused for another CRM environment.
+5. For accounts in additional data centres, open the client's **Settings** and
+   enable **Multi DC** for each required location. Client secrets can differ by
+   data centre; assign the appropriate secret reference to each registration.
+   Confirm the target region is enabled before starting consent.
+6. Save configuration, call `beginAuthorization`, and open its URL in the system
+   browser. Complete consent through `completeAuthorization` with the same
+   authenticated owner. Verification calls `users.current`. The library requests
+   offline access, consent and PKCE; the host supplies the callback handler.
+
+[Registration fields](https://www.zoho.com/crm/developer/docs/api/v8/register-client.html),
+[organisation consent](https://www.zoho.com/crm/developer/docs/api/v8/auth-request.html),
+[Multi DC settings](https://www.zoho.com/crm/developer/docs/api/v8/multi-dc.html),
+[server apps and PKCE](https://www.zoho.com/developer/oauth/web-server-apps/overview.html).
+
+```json
+{
+  "schemaVersion": 1,
+  "registrations": {
+    "zoho": {
+      "source": "own",
+      "clientId": "1000.REPLACE_WITH_ASSIGNED_CLIENT_ID",
+      "clientSecretRef": "env:ZOHO_CRM_CLIENT_SECRET",
+      "callbackUrlRef": "env:ZOHO_CRM_CALLBACK_URL"
+    }
+  },
+  "integrations": {
+    "crm": {
+      "provider": "zoho-crm",
+      "displayName": "Personal CRM",
+      "accountMode": "per-user",
+      "authentication": { "method": "oauth2", "registrationRef": "zoho" },
+      "settings": { "region": "eu", "environment": "production" },
+      "scopes": [
+        "ZohoCRM.users.READ",
+        "ZohoCRM.modules.leads.READ",
+        "ZohoCRM.modules.contacts.READ",
+        "ZohoCRM.modules.accounts.READ",
+        "ZohoCRM.modules.deals.READ"
+      ]
+    }
+  }
+}
+```
+
+Client authentication defaults to `client_secret_post`. The form offers twelve
+permission choices; five read scopes are selected initially. Full-access scopes
+are optional and do not add write operations to this adapter. Scope names are
+case-sensitive and are sent comma-separated. [Scopes](https://www.zoho.com/crm/developer/docs/api/v8/scopes.html)
+
+## Routing and ownership
+
+| Region | Accounts host | Production API host |
+| --- | --- | --- |
+| `us` | `accounts.zoho.com` | `www.zohoapis.com` |
+| `eu` | `accounts.zoho.eu` | `www.zohoapis.eu` |
+| `in` | `accounts.zoho.in` | `www.zohoapis.in` |
+| `au` | `accounts.zoho.com.au` | `www.zohoapis.com.au` |
+| `jp` | `accounts.zoho.jp` | `www.zohoapis.jp` |
+| `ca` | `accounts.zohocloud.ca` | `www.zohoapis.ca` |
+| `cn` | `accounts.zoho.com.cn` | `www.zohoapis.com.cn` |
+
+Sandbox and Developer replace `www` with `sandbox` and `developer`. Every token
+response must contain the exact configured API origin. A different or missing
+`api_domain` fails before an API request. The runtime does not follow arbitrary
+`accounts-server` callback values or switch regions automatically; reconnect with
+the correct regional configuration and client secret. Changing region or environment
+invalidates the old connection. Additional provider regions remain outside this
+initial adapter. [Token domains and environments](https://www.zoho.com/crm/developer/docs/api/v8/access-refresh.html)
+
+The host's `authorize` policy maps an authenticated app user to a stable
+application/subject pair. `shared` deliberately maps authorized members to one
+shared subject; `assistant` uses the assistant owner's subject. The integration
+file never establishes membership or app login. For a CLI, use a trusted process
+owner, the same library, a registered callback listener, and explicit reference
+resolution. A public desktop editor must not distribute a commercial client secret.
+
+## Operations and failure behavior
+
+| Operation | Inputs | Result |
+| --- | --- | --- |
+| `users.current` | None | Exactly one current CRM user, in the provider's `users` envelope |
+| `leads.list` | Paging and fields | `data` and `info`; default fields `Last_Name,Email` |
+| `contacts.list` | Paging and fields | `data` and `info`; default fields `Last_Name,Email` |
+| `accounts.list` | Paging and fields | `data` and `info`; default field `Account_Name` |
+| `deals.list` | Paging and fields | `data` and `info`; default fields `Deal_Name,Stage` |
+
+Paging accepts `per_page` 1–200 (default100), `page` 1–10 (default1), or a
+`page_token`, never both page selectors. `fields` accepts up to50 distinct,
+comma-separated ordinary field API names. The adapter excludes special `$` fields.
+IDs remain strings. No arbitrary module, query, destination or write is accepted.
+
+The adapter makes one request per page and preserves cursor metadata and null
+field values. Use a returned cursor with the same user and query parameters;
+the provider limits cursor lifetime and total traversal. HTTP204 becomes an empty
+record page, while malformed HTTP200 responses fail. The application owns record
+selection, display, continued paging and policy. [Records and paging](https://www.zoho.com/crm/developer/docs/api/v8/get-records.html),
+[current user](https://www.zoho.com/crm/developer/docs/api/v8/get-users.html),
+[HTTP statuses](https://www.zoho.com/crm/developer/docs/api/v8/status-codes.html).
+
+Refresh preserves an existing refresh token when Zoho omits a replacement.
+Expired/revoked grants require reconnect; missing permissions and rate limits
+produce distinct errors. No request is retried automatically. Cancellation and
+timeouts reach the HTTP request. [Refresh](https://www.zoho.com/crm/developer/docs/api/v8/refresh.html)
+
+`disconnect` removes local connection credentials. To revoke provider access,
+open Zoho Accounts, **Connected Apps**, and revoke the appropriate application.
+Revocation is separate from deleting this integration's configuration.
+[Provider revocation](https://www.zoho.com/developer/oauth/web-server-apps/overview.html)
+
+## Application ownership, callbacks and capacity
+
+The application owner creates the provider registration and stores its secret
+in the application's private Env. Public Vibe64, Vibe64 Online and CLI users use
+this same ownership model. The configuration file holds the client ID and Env
+references; the editor does not own the application's grants.
+
+Register the exact callback implemented by the application. For a hosted project,
+start with its assigned application URL and append the implemented callback path.
+Save that same URL through the application's callback Env reference. On a domain
+or host change, update both the provider registration and callback Env if the URL
+changes. Preserve the application's identity and persistent grant store when
+moving it; neither a new editor URL nor a new hosting address creates a new owner.
+See the [callback guide](../../connectors-core/docs/oauth-callbacks.md) and
+[application setup command](../../connectors-core/docs/setup-command.md).
+
+Configure the required Multi DC settings for this client and keep all regional
+secrets in the application's private Env. Preserve the selected region with the
+connection. Separate clients do not guarantee separate CRM organisation credits;
+Zoho's quotas depend on edition, licenses and concurrency.
+[API limits](https://www.zoho.com/crm/developer/docs/api/v8/api-limits.html)
+
+## Automation feasibility and current proof
+
+AI can generate this file, validate it, compose the existing library, prepare
+callback handlers and guide an authorized operator through the portal. The reviewed
+registration instructions describe console creation; a public API for automatically
+creating these client registrations has not been established. Account sign-in,
+consent, regional enablement, secret assignment and any production/provider review
+remain operator/provider steps. The runtime itself does not create registrations.
+
+Focused tests use controlled HTTP responses and temporary encrypted files, covering
+regional routing, environment binding, paging, scope enforcement, refresh, ownership,
+error handling and interruption. Real accounts, consent, registrations and generated
+applications are outside this test pass. Complete connection UI, native/self
+client grants, additional regions, arbitrary CRM modules, mutations and provider-side
+revocation remain unfinished; the initial read adapter does not imply full API coverage.
+
+
+## Existing-scope closeout — 13 September 2026
+
+Supported: current user and paged leads, contacts, accounts and deals through
+project-owned server OAuth, seven configured data centres and three environments,
+explicit fields/page tokens, encrypted local grants and refresh. Source and
+offline installed-package tests each pass 11/11. Historical editor form evidence
+is retained; the added inline sentence clarifying read-only operation scope was
+source-reviewed, not freshly browser-tested.
+
+Full limitations/deferred work: no create/update/delete, relationships mutations,
+arbitrary modules, required-field/module metadata discovery, search/query APIs,
+bulk jobs, attachments, webhooks or automatic pagination. Full-access scopes do
+not add these operations. Named record lists have the documented field/page
+bounds; caller owns continuation and must preserve provider tokens per user/query.
+No native/self/client-credentials grants, additional regions beyond the configured
+seven, region auto-discovery or provider-side revocation. Current-user verification
+does not prove module/field permissions. The application supplies callbacks,
+organisation/user policy, end-user connection screens and native framework wiring;
+connecting CRM is not app sign-in. Disconnect is local. Editor assistant attachment,
+live regional OAuth/permissions/data and generated-app execution remain deferred
+or unverified. The original broader CRM packet remains backlog.

package/package.json

@@ -0,0 +1,153 @@
+{
+  "name": "@jskit-ai/connectors-catalog",
+  "version": "0.1.1",
+  "description": "Provider definitions and focused API operations for JSKIT connectors.",
+  "type": "module",
+  "exports": {
+    "./shared/ai": "./src/shared/ai.js",
+    "./server/ai": "./src/server/ai.js",
+    "./shared": "./src/shared/definitions.js",
+    "./server/resend": "./src/server/resend.js",
+    "./server/firecrawl": "./src/server/firecrawl.js",
+    "./server/gmail": "./src/server/gmail.js",
+    "./server/google-drive": "./src/server/google-drive.js",
+    "./server/google-sheets": "./src/server/google-sheets.js",
+    "./server/google-docs": "./src/server/google-docs.js",
+    "./server/google-slides": "./src/server/google-slides.js",
+    "./server/google-search-console": "./src/server/google-search-console.js",
+    "./server/airtable": "./src/server/airtable.js",
+    "./server/notion": "./src/server/notion.js",
+    "./server/brevo": "./src/server/brevo.js",
+    "./server/elevenlabs": "./src/server/elevenlabs.js",
+    "./server/github-api": "./src/server/github-api.js",
+    "./server/apify": "./src/server/apify.js",
+    "./server/calendly": "./src/server/calendly.js",
+    "./server/hubspot": "./src/server/hubspot.js",
+    "./server/linear": "./src/server/linear.js",
+    "./server/pipedrive": "./src/server/pipedrive.js",
+    "./server/gitlab-api": "./src/server/gitlab-api.js",
+    "./server/tally": "./src/server/tally.js",
+    "./server/contentful": "./src/server/contentful.js",
+    "./server/asana": "./src/server/asana.js",
+    "./server/microsoft-outlook": "./src/server/microsoft-outlook.js",
+    "./server/microsoft-onedrive": "./src/server/microsoft-onedrive.js",
+    "./server/microsoft-excel": "./src/server/microsoft-excel.js",
+    "./server/microsoft-teams": "./src/server/microsoft-teams.js",
+    "./server/microsoft-onenote": "./src/server/microsoft-onenote.js",
+    "./server/microsoft-sharepoint": "./src/server/microsoft-sharepoint.js",
+    "./server/microsoft-word": "./src/server/microsoft-word.js",
+    "./server/microsoft-powerpoint": "./src/server/microsoft-powerpoint.js",
+    "./server/stripe": "./src/server/stripe.js",
+    "./server/replicate": "./src/server/replicate.js",
+    "./server/sentry": "./src/server/sentry.js",
+    "./server/incident-io": "./src/server/incident-io.js",
+    "./server/fireflies": "./src/server/fireflies.js",
+    "./server/heygen": "./src/server/heygen.js",
+    "./server/perplexity": "./src/server/perplexity.js",
+    "./server/supabase": "./src/server/supabase.js",
+    "./server/bigquery": "./src/server/bigquery.js",
+    "./server/paddle": "./src/server/paddle.js",
+    "./server/mailgun": "./src/server/mailgun.js",
+    "./server/fireworks-ai": "./src/server/fireworks-ai.js",
+    "./server/gatewayapi": "./src/server/gatewayapi.js",
+    "./server/polar": "./src/server/polar.js",
+    "./server/storyblok": "./src/server/storyblok.js",
+    "./server/oura": "./src/server/oura.js",
+    "./server/algolia": "./src/server/algolia.js",
+    "./server/twilio": "./src/server/twilio.js",
+    "./server/gong": "./src/server/gong.js",
+    "./server/posthog": "./src/server/posthog.js",
+    "./server/chargebee": "./src/server/chargebee.js",
+    "./server/ashby": "./src/server/ashby.js",
+    "./server/lexware": "./src/server/lexware.js",
+    "./server/sevdesk": "./src/server/sevdesk.js",
+    "./server/apollo-io": "./src/server/apollo-io.js",
+    "./server/attention": "./src/server/attention.js",
+    "./server/telegram": "./src/server/telegram.js",
+    "./server/klipy": "./src/server/klipy.js",
+    "./server/mapbox": "./src/server/mapbox.js",
+    "./server/google-maps-platform": "./src/server/google-maps-platform.js",
+    "./server/wordpress-com": "./src/server/wordpress-com.js",
+    "./server/n8n": "./src/server/n8n.js",
+    "./server/sanity": "./src/server/sanity.js",
+    "./server/inngest": "./src/server/inngest.js",
+    "./server/woocommerce": "./src/server/woocommerce.js",
+    "./server/wordpress-self-hosted": "./src/server/wordpress-self-hosted.js",
+    "./client/google-maps-platform": "./src/client/google-maps-platform.js",
+    "./client/google-analytics": "./src/client/google-analytics.js",
+    "./client/logo-dev": "./src/client/logo-dev.js",
+    "./server/amplitude": "./src/server/amplitude.js",
+    "./server/atlassian": "./src/server/atlassian.js",
+    "./server/canva": "./src/server/canva.js",
+    "./server/figma": "./src/server/figma.js",
+    "./server/miro": "./src/server/miro.js",
+    "./server/clay": "./src/server/clay.js",
+    "./server/prestashop": "./src/server/prestashop.js",
+    "./server/clickhouse": "./src/server/clickhouse.js",
+    "./server/twitch": "./src/server/twitch.js",
+    "./server/slack": "./src/server/slack.js",
+    "./server/aws-s3": "./src/server/aws-s3.js",
+    "./server/aws-athena": "./src/server/aws-athena.js",
+    "./server/amazon-redshift": "./src/server/amazon-redshift.js",
+    "./server/xero": "./src/server/xero.js",
+    "./server/semrush": "./src/server/semrush.js",
+    "./server/wave": "./src/server/wave.js",
+    "./server/zoho-crm": "./src/server/zoho-crm.js",
+    "./server/zoho-books": "./src/server/zoho-books.js",
+    "./server/granola": "./src/server/granola.js",
+    "./server/hex": "./src/server/hex.js",
+    "./server/confidence-flags": "./src/server/confidence.js",
+    "./server/confidence-exp": "./src/server/confidence.js",
+    "./server/lightspeed": "./src/server/lightspeed.js",
+    "./server/databricks": "./src/server/databricks.js",
+    "./server/microsoft-fabric": "./src/server/microsoft-fabric.js",
+    "./server/dbt-semantic-layer": "./src/server/dbt-semantic-layer.js",
+    "./server/salesforce": "./src/server/salesforce.js",
+    "./server/firebase-cloud-messaging": "./src/server/firebase-cloud-messaging.js",
+    "./client/firebase-cloud-messaging": "./src/client/firebase-cloud-messaging.js",
+    "./shared/google-ads-search": "./src/shared/google-ads-search.js",
+    "./server/google-ads-search": "./src/server/google-ads-search.js",
+    "./server/google-ads": "./src/server/google-ads.js",
+    "./server/wix": "./src/server/wix.js",
+    "./server/tiktok": "./src/server/tiktok.js",
+    "./server/linkedin": "./src/server/linkedin.js",
+    "./server/x-twitter": "./src/server/x-twitter.js",
+    "./server/snowflake": "./src/server/snowflake.js",
+    "./server/gemini-enterprise": "./src/server/gemini-enterprise.js",
+    "./server/workday": "./src/server/workday.js",
+    "./server/shopify": "./src/server/shopify.js",
+    "./server/wiz": "./src/server/wiz.js"
+  },
+  "dependencies": {
+    "@aws-sdk/client-athena": "3.1128.0",
+    "@aws-sdk/client-redshift-data": "3.1128.0",
+    "@aws-sdk/client-s3": "3.1128.0",
+    "@aws-sdk/s3-request-presigner": "3.1128.0",
+    "@jskit-ai/connectors-core": "0.1.1",
+    "@modelcontextprotocol/sdk": "1.30.0",
+    "@smithy/fetch-http-handler": "5.8.0",
+    "json-rest-schema": "^1.0.17",
+    "jose": "^6.1.3"
+  },
+  "peerDependencies": {
+    "@jskit-ai/kernel": "0.1.184"
+  },
+  "jskit": {
+    "kind": "runtime",
+    "capabilities": {
+      "provides": [],
+      "requires": []
+    },
+    "runtime": {
+      "server": {
+        "providers": []
+      },
+      "client": {
+        "providers": []
+      }
+    }
+  },
+  "scripts": {
+    "test": "node --test --test-concurrency=1"
+  }
+}

package/patterns/ai-connections/PATTERN.md

@@ -0,0 +1,84 @@
+---
+id: connectors/ai-connections
+title: App-owned AI connections and static model selection
+summary: Resolve an administrator environment key or an individual user's grant, then use the application's chosen AI SDK directly.
+keywords: ai, models, free, big-pickle, zen, zai, environment, api-key, ownership, cli
+requires: @jskit-ai/connectors-core, @jskit-ai/connectors-catalog
+---
+
+# App-owned AI connections and static model selection
+
+## Use when
+
+Use the [AI guide](https://github.com/mobily-enterprises/jskit-ai/blob/main/packages/connectors-catalog/docs/ai.md) to choose the model, account owner and
+framework SDK before wiring requests. The shared catalogue is a deliberate
+static extraction, not an OpenCode runtime integration. The default Big Pickle
+route needs no account, user key or environment setup.
+
+## Framework APIs
+
+The imported library validates configuration and resolves authorized server-side
+parameters. The example only composes those parameters with an **app-supplied**
+model factory. It does not implement inference or install an SDK. Pass a factory
+for the returned provider/protocol; do not treat every model as chat completions.
+
+## Product decisions
+
+For a CLI app, read and validate `integrations.json`, use a trusted local
+operator policy and your normal private environment. For a web app, derive
+identity from its authenticated server session and explicitly authorize shared
+account use. Never adapt a permissive CLI policy into a public HTTP endpoint.
+
+## Invariants
+
+Administrator keys use `env:APP_AI_API_KEY`; the existing environment resolver
+is the default. Individual keys use an app-owned reference and a resolver scoped
+to authorized application, user, provider and integration. The application owns
+key-entry and disconnect screens. Never return connection parameters to a
+browser or share coding-agent subscription credentials.
+
+## Do not use when
+
+Frameworks outside Node follow their own configuration and AI client patterns.
+These provider facts and the text file are portable; this JavaScript example is
+not a dependency that Laravel or another framework must install.
+
+## Example files
+
+- `example/ai-model.js` composes the connection resolver with an app-owned SDK factory.
+
+## Variation points
+
+Choose shared Env or an authenticated individual-key resolver, then provide the
+SDK factory for the selected provider. The application owns prompts, request
+limits, streaming, tools and user-visible provider failures.
+
+## Verification
+
+Verify with controlled SDK factories and private test keys. Do not call live
+inference or generate/deploy a sample application to prove configuration wiring.
+
+## Avoid
+
+Do not add a runtime catalogue fetch, token billing, an inference proxy, a
+cross-language runtime or a silent paid fallback. Never infer that a model
+marked free can be used without the authentication its provider requires.
+
+## Existing Perplexity connector slots
+
+Use `example/perplexity-answer.js` when configuration already has provider
+`perplexity`. It reads that exact slot, authorizes the caller, resolves its private
+reference and passes it to an app-supplied OpenAI-compatible SDK factory.
+It neither creates another `ai` slot nor stores another copy of the key.
+The app installs its own native SDK, for example `openai`, and supplies
+`createClient: options => new OpenAI(options)`. No SDK is a dependency of this
+connector package. Call the returned function with context, integrationId,
+question, current provider model name and optional stream/signal.
+For a normal result render choices[0].message.content with citations and
+search_results. For stream=true consume the async iterator, rendering deltas
+and retaining final citations/search_results; cancel with AbortSignal.
+Allow only safe HTTP(S) links in rendered citations. Never send the API key/client
+to a browser. A public route must sanitize SDK failures and enforce app budgets.
+This is direct app-to-provider traffic, with no Vibe64 token sales or proxy.
+A trusted CLI operator can use the same JSON/Env and factory. Other frameworks
+use their own native Perplexity/OpenAI-compatible clients and the same slot.

package/patterns/ai-connections/example/ai-model.js

@@ -0,0 +1,11 @@
+import { createAiConnectionResolver } from "@jskit-ai/connectors-catalog/server/ai";
+
+// App-owned composition. Supply the authenticated authorization policy and the
+// SDK model factory used by this application. Omit resolveReference for Env.
+export function createConfiguredAiModel({ configuration, authorize, resolveReference, createModel }) {
+  const connections = createAiConnectionResolver({ configuration, authorize, resolveReference });
+  return async ({ context, integrationId }) => {
+    const parameters = await connections.resolve({ context, integrationId });
+    return createModel(parameters); // Backend only; the app owns subsequent inference.
+  };
+}

package/patterns/ai-connections/example/perplexity-answer.js

@@ -0,0 +1,29 @@
+import { ConnectorError, createEnvironmentReferenceResolver } from "@jskit-ai/connectors-core/server";
+import { validateIntegrationConfiguration } from "@jskit-ai/connectors-core/shared/configuration";
+import { perplexityProvider } from "@jskit-ai/connectors-catalog/server/perplexity";
+
+// App-owned composition, not an inference service. Supply the application's native
+// OpenAI-compatible client factory. Credentials and the returned client stay server-side.
+export function createPerplexityAnswers({ configuration, authorize, createClient,
+  resolveReference = createEnvironmentReferenceResolver() }) {
+  if (typeof authorize !== "function" || typeof createClient !== "function") throw new TypeError("Supply application authorization and its native client factory.");
+  const config = validateIntegrationConfiguration(configuration, { providers: [perplexityProvider], allowUnknownProviders: true });
+  return async ({ context, integrationId, question, model, stream = false, signal }) => {
+    const slot = Object.hasOwn(config.integrations, integrationId) ? config.integrations[integrationId] : null;
+    if (slot?.provider !== "perplexity") throw new ConnectorError("connector_not_found", "Configure a Perplexity slot.", { statusCode: 404 });
+    const owner = await authorize(context, { integrationId, accountMode: slot.accountMode, operation: "perplexity.answer", input: { question, model, stream } });
+    if (!owner?.applicationId || !owner?.subjectId) throw new ConnectorError("connector_access_denied", "Perplexity access was denied.", { statusCode: 403 });
+    if (typeof question !== "string" || !question.trim() || question.length > 20000 || typeof model !== "string" || !model.trim() || model.length > 200 || typeof stream !== "boolean")
+      throw new ConnectorError("connector_input_invalid", "Supply a question, provider model name and boolean stream flag.", { statusCode: 422 });
+    signal?.throwIfAborted();
+    let apiKey;
+    try {
+      apiKey = await resolveReference(slot.authentication.secretRef, owner, { integrationId, accountMode: slot.accountMode, providerId: "perplexity" });
+      if (typeof apiKey !== "string" || !apiKey.trim() || apiKey.trim() === "MISSING" || /[\r\n\0]/.test(apiKey) || apiKey.length > 16384) throw new Error();
+    } catch { throw new ConnectorError("connector_binding_missing", "Set this Perplexity credential in the application's private Env.", { statusCode: 422 }); }
+    const client = createClient({ apiKey, baseURL: "https://api.perplexity.ai", maxRetries: 0, timeout: 60000 });
+    // Preserve citations/search_results/usage and streaming chunks. The application
+    // renders them, accounts for usage and sanitizes failures at its HTTP boundary.
+    return client.chat.completions.create({ model, messages: [{ role: "user", content: question }], stream }, { signal });
+  };
+}