vibe64 0.1.47 → 0.1.49

package/node_modules/@jskit-ai/connectors-catalog/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@jskit-ai/connectors-catalog",
-  "version": "0.1.65",
+  "version": "0.2.0",
   "type": "module",
   "exports": {
-    "./shared/ai": "./src/shared/ai.js",
+    "./shared/ai": "./src/shared/english-ai.js",
     "./server/ai": "./src/server/ai.js",
-    "./shared": "./src/shared/definitions.js",
+    "./shared": "./src/shared/english-definitions.js",
     "./server/resend": "./src/server/resend.js",
     "./server/firecrawl": "./src/server/firecrawl.js",
     "./server/gmail": "./src/server/gmail.js",
@@ -115,6 +115,7 @@
     "./server/gemini-enterprise": "./src/server/gemini-enterprise.js",
     "./server/workday": "./src/server/workday.js",
     "./server/shopify": "./src/server/shopify.js",
-    "./server/wiz": "./src/server/wiz.js"
+    "./server/wiz": "./src/server/wiz.js",
+    "./locales/en.json": "./locales/en.json"
   }
 }

package/node_modules/@jskit-ai/connectors-core/CHANGELOG.md

@@ -0,0 +1,183 @@
+# Changelog
+
+## 0.2.0 - 2026-10-29
+
+- Translation ready: every user-visible text is a message key with its English in `locales/en.json`, so an app translates it by supplying translation files only. With no translations, texts and behaviour are unchanged. See the guide "Translating a JSKIT app".
+- `ConnectorError` carries `messageCode`/`messageParams`; `MESSAGE_KEY_SOURCE` links an English provider definition to its keyed original.
+- `createEnglishProviderTexts(catalog)` renders a keyed provider definition to its English.
+
+### New message keys (80)
+
+All keys in `locales/en.json` (exported as `./locales/en.json`) are new in this version.
+
+<details><summary>Key list</summary>
+
+- `jskit.connectors.configuration.accountModeUnsupported`
+- `jskit.connectors.configuration.apiKeyRegistration`
+- `jskit.connectors.configuration.assistantActionUndeclared`
+- `jskit.connectors.configuration.clientAuthenticationUnsupported`
+- `jskit.connectors.configuration.clientId`
+- `jskit.connectors.configuration.confidentialClientRequired`
+- `jskit.connectors.configuration.credentialModeUnsupported`
+- `jskit.connectors.configuration.duplicateScope`
+- `jskit.connectors.configuration.invalid`
+- `jskit.connectors.configuration.invalidJson`
+- `jskit.connectors.configuration.noCredentials`
+- `jskit.connectors.configuration.oauthFlowUnsupported`
+- `jskit.connectors.configuration.otherCredentialModeField`
+- `jskit.connectors.configuration.otherCredentialModeSetting`
+- `jskit.connectors.configuration.providerSettings`
+- `jskit.connectors.configuration.providerUnregistered`
+- `jskit.connectors.configuration.refreshTokenClientCredentials`
+- `jskit.connectors.configuration.refreshTokenOAuthOnly`
+- `jskit.connectors.configuration.refreshTokenSharedOnly`
+- `jskit.connectors.configuration.registrationSecret`
+- `jskit.connectors.configuration.registrationUndefined`
+- `jskit.connectors.configuration.requiredScopes`
+- `jskit.connectors.configuration.schemaVersionUnsupported`
+- `jskit.connectors.configuration.scopeRequired`
+- `jskit.connectors.configuration.scopeUnsupported`
+- `jskit.connectors.configuration.serviceAccountPerUser`
+- `jskit.connectors.configuration.serviceAccountRegistration`
+- `jskit.connectors.configuration.stableName`
+- `jskit.connectors.configuration.valueRequired`
+- `jskit.connectors.connection.ambiguousPermissionGrant`
+- `jskit.connectors.connection.apiKeyBindingMissingInvalid`
+- `jskit.connectors.connection.assistantActionDisabled`
+- `jskit.connectors.connection.authorizationAttemptInvalidExpired`
+- `jskit.connectors.connection.authorizationCallbackInvalid`
+- `jskit.connectors.connection.callbackDoesNotMatchRegistration`
+- `jskit.connectors.connection.callbackUrlDoesNotMeet`
+- `jskit.connectors.connection.checkOperationInputValues`
+- `jskit.connectors.connection.configureHttpsCallbackUrlLocal`
+- `jskit.connectors.connection.connectAccountAgain`
+- `jskit.connectors.connection.connectAgainPermissionRequiredOperation`
+- `jskit.connectors.connection.connectAgainPermissionRequiredVerification`
+- `jskit.connectors.connection.connectionNotAllowed`
+- `jskit.connectors.connection.envRefreshTokenRejected`
+- `jskit.connectors.connection.envSeeded`
+- `jskit.connectors.connection.integrationNotConfigured`
+- `jskit.connectors.connection.operationCancelled`
+- `jskit.connectors.connection.operationRequiresDifferentMethod`
+- `jskit.connectors.connection.operationRequiresPermissionAbsentApplication`
+- `jskit.connectors.connection.providerClientIdNotConfigured`
+- `jskit.connectors.connection.providerDeniedOperation`
+- `jskit.connectors.connection.providerDoesNotDeclareAssistant`
+- `jskit.connectors.connection.providerDoesNotImplementService`
+- `jskit.connectors.connection.providerInvalidCredentialPath`
+- `jskit.connectors.connection.providerNonPkceFlowRequires`
+- `jskit.connectors.connection.providerOperationInvalidDestination`
+- `jskit.connectors.connection.providerOperationNotAvailable`
+- `jskit.connectors.connection.providerRequestFailedTryAgain`
+- `jskit.connectors.connection.providerRequestLimitReached`
+- `jskit.connectors.connection.providerRequiresJsonRequestBody`
+- `jskit.connectors.connection.providerReturnedInvalidAccountLabel`
+- `jskit.connectors.connection.providerReturnedInvalidPermissionGrant`
+- `jskit.connectors.connection.providerReturnedInvalidServiceAccount`
+- `jskit.connectors.connection.providerReturnedUnexpectedResponse`
+- `jskit.connectors.connection.refreshTokenBindingMissingInvalid`
+- `jskit.connectors.connection.requiredEnvironmentBindingMissing`
+- `jskit.connectors.connection.requiredRegistrationBindingMissing`
+- `jskit.connectors.connection.runtimeDoesNotYetSupport`
+- `jskit.connectors.connection.selectClientCredentialsConnectService`
+- `jskit.connectors.connection.selectMatchingCredentialModeVerify`
+- `jskit.connectors.connection.selectServiceAccountCredentialsVerify`
+- `jskit.connectors.connection.serviceAccountCredentialBindingMissing`
+- `jskit.connectors.connection.serviceAccountsConnectWithoutBrowser`
+- `jskit.connectors.connection.serviceAccountsDoNotUse`
+- `jskit.connectors.connection.verificationScopeAbsent`
+- `jskit.errors.connector_approval_required`
+- `jskit.errors.connector_consent_denied`
+- `jskit.errors.connector_credentials_unavailable`
+- `jskit.errors.connector_provider_timeout`
+- `jskit.errors.connector_storage_invalid`
+- `jskit.errors.integration_configuration_invalid`
+
+</details>
+
+### Codes (80)
+
+Error, field-error and message codes this package sends, with their English. Undotted codes kept their existing values and render from `jskit.errors.<code>`.
+
+| Code | English |
+| --- | --- |
+| `connectors.configuration.accountModeUnsupported` | This provider does not support this account mode. |
+| `connectors.configuration.apiKeyRegistration` | API keys do not use an OAuth registration. |
+| `connectors.configuration.assistantActionUndeclared` | This provider does not declare this assistant action. |
+| `connectors.configuration.clientAuthenticationUnsupported` | This provider does not support this client authentication method. |
+| `connectors.configuration.clientId` | Check this provider's client identifier. |
+| `connectors.configuration.confidentialClientRequired` | Client credentials require a confidential client. |
+| `connectors.configuration.credentialModeUnsupported` | This provider configuration does not support this credential mode. |
+| `connectors.configuration.duplicateScope` | Select each permission only once. |
+| `connectors.configuration.invalid` | Invalid configuration. |
+| `connectors.configuration.invalidJson` | Enter valid JSON. |
+| `connectors.configuration.noCredentials` | This mode does not use credentials. |
+| `connectors.configuration.oauthFlowUnsupported` | This provider does not support this OAuth flow. |
+| `connectors.configuration.otherCredentialModeField` | This field belongs to another credential mode. |
+| `connectors.configuration.otherCredentialModeSetting` | This setting belongs to another credential mode. |
+| `connectors.configuration.providerSettings` | Check this provider's settings. |
+| `connectors.configuration.providerUnregistered` | Install and register this provider before using it. |
+| `connectors.configuration.refreshTokenClientCredentials` | Client credentials do not use a refresh token. |
+| `connectors.configuration.refreshTokenOAuthOnly` | Only an OAuth connection can start from a refresh token. |
+| `connectors.configuration.refreshTokenSharedOnly` | Only a shared connection can start from a refresh token in Env. |
+| `connectors.configuration.registrationSecret` | Use the registration's secret reference. |
+| `connectors.configuration.registrationUndefined` | Select a registration defined in this file. |
+| `connectors.configuration.requiredScopes` | Include this provider's required permissions. |
+| `connectors.configuration.schemaVersionUnsupported` | Use numeric schemaVersion 1; other versions require an explicit migration. |
+| `connectors.configuration.scopeRequired` | Select at least one permission. |
+| `connectors.configuration.scopeUnsupported` | A selected permission is not supported by this provider configuration. |
+| `connectors.configuration.serviceAccountPerUser` | A service account cannot connect as each app user. |
+| `connectors.configuration.serviceAccountRegistration` | Service-account credentials do not use a browser OAuth registration. |
+| `connectors.configuration.stableName` | Use a stable lowercase name containing letters, digits and hyphens. |
+| `connectors.configuration.valueRequired` | This value is required. |
+| `connectors.connection.ambiguousPermissionGrant` | The provider did not return an unambiguous permission grant. |
+| `connectors.connection.apiKeyBindingMissingInvalid` | The API key binding is missing or invalid. |
+| `connectors.connection.assistantActionDisabled` | This assistant action is disabled. |
+| `connectors.connection.authorizationAttemptInvalidExpired` | The authorization attempt is invalid or has expired. |
+| `connectors.connection.authorizationCallbackInvalid` | The authorization callback is invalid. |
+| `connectors.connection.callbackDoesNotMatchRegistration` | The callback does not match this registration. |
+| `connectors.connection.callbackUrlDoesNotMeet` | The callback URL does not meet this provider's requirements. |
+| `connectors.connection.checkOperationInputValues` | Check the operation's input values. |
+| `connectors.connection.configureHttpsCallbackUrlLocal` | Configure an HTTPS callback URL, or a local development callback. |
+| `connectors.connection.connectAccountAgain` | Connect this account again. |
+| `connectors.connection.connectAgainPermissionRequiredOperation` | Connect again with the permission required for this operation. |
+| `connectors.connection.connectAgainPermissionRequiredVerification` | Connect again with the permission required for verification. |
+| `connectors.connection.connectionNotAllowed` | You cannot use this connection. |
+| `connectors.connection.envRefreshTokenRejected` | The refresh token in Env no longer works; replace that Env value. |
+| `connectors.connection.envSeeded` | This connection comes from an Env value; unlink or replace that value instead. |
+| `connectors.connection.integrationNotConfigured` | This integration is not configured. |
+| `connectors.connection.operationCancelled` | The operation was cancelled. |
+| `connectors.connection.operationRequiresDifferentMethod` | This operation requires a different connection method. |
+| `connectors.connection.operationRequiresPermissionAbsentApplication` | This operation requires a permission absent from the application's configuration. |
+| `connectors.connection.providerClientIdNotConfigured` | The provider client ID is not configured. |
+| `connectors.connection.providerDeniedOperation` | The provider denied this operation. |
+| `connectors.connection.providerDoesNotDeclareAssistant` | This provider does not declare this assistant action. |
+| `connectors.connection.providerDoesNotImplementService` | This provider does not implement service-account authorization. |
+| `connectors.connection.providerInvalidCredentialPath` | This provider has an invalid credential path. |
+| `connectors.connection.providerNonPkceFlowRequires` | This provider's non-PKCE flow requires a confidential client. |
+| `connectors.connection.providerOperationInvalidDestination` | The provider operation has an invalid destination. |
+| `connectors.connection.providerOperationNotAvailable` | This provider operation is not available. |
+| `connectors.connection.providerRequestFailedTryAgain` | The provider request failed. Try again. |
+| `connectors.connection.providerRequestLimitReached` | The provider's request limit was reached. |
+| `connectors.connection.providerRequiresJsonRequestBody` | This provider requires a JSON request body. |
+| `connectors.connection.providerReturnedInvalidAccountLabel` | The provider returned an invalid account label. |
+| `connectors.connection.providerReturnedInvalidPermissionGrant` | The provider returned an invalid permission grant. |
+| `connectors.connection.providerReturnedInvalidServiceAccount` | The provider returned an invalid service-account token. |
+| `connectors.connection.providerReturnedUnexpectedResponse` | The provider returned an unexpected response. |
+| `connectors.connection.refreshTokenBindingMissingInvalid` | The refresh token binding is missing or invalid. |
+| `connectors.connection.requiredEnvironmentBindingMissing` | A required environment binding is missing. |
+| `connectors.connection.requiredRegistrationBindingMissing` | A required registration binding is missing. |
+| `connectors.connection.runtimeDoesNotYetSupport` | This runtime does not yet support the selected credential mode. |
+| `connectors.connection.selectClientCredentialsConnectService` | Select client credentials to connect a service account. |
+| `connectors.connection.selectMatchingCredentialModeVerify` | Select the matching credential mode to verify this connection. |
+| `connectors.connection.selectServiceAccountCredentialsVerify` | Select service-account credentials to verify this connection. |
+| `connectors.connection.serviceAccountCredentialBindingMissing` | The service-account credential binding is missing or invalid. |
+| `connectors.connection.serviceAccountsConnectWithoutBrowser` | Service accounts connect without browser consent. |
+| `connectors.connection.serviceAccountsDoNotUse` | Service accounts do not use an authorization callback. |
+| `connectors.connection.verificationScopeAbsent` | Connection verification requires a permission absent from the application's configuration. |
+| `connector_approval_required` | Approve this assistant action before continuing. |
+| `connector_consent_denied` | Account access was declined. |
+| `connector_credentials_unavailable` | Stored credentials could not be opened. |
+| `connector_provider_timeout` | The provider request timed out. Try again. |
+| `connector_storage_invalid` | Connection state could not be read safely. |
+| `integration_configuration_invalid` | Integration configuration is invalid. |

package/node_modules/@jskit-ai/connectors-core/locales/en.json

@@ -0,0 +1,92 @@
+{
+  "jskit": {
+    "connectors": {
+      "configuration": {
+        "accountModeUnsupported": "This provider does not support this account mode.",
+        "apiKeyRegistration": "API keys do not use an OAuth registration.",
+        "assistantActionUndeclared": "This provider does not declare this assistant action.",
+        "clientAuthenticationUnsupported": "This provider does not support this client authentication method.",
+        "clientId": "Check this provider's client identifier.",
+        "confidentialClientRequired": "Client credentials require a confidential client.",
+        "credentialModeUnsupported": "This provider configuration does not support this credential mode.",
+        "duplicateScope": "Select each permission only once.",
+        "invalid": "Invalid configuration.",
+        "invalidJson": "Enter valid JSON.",
+        "noCredentials": "This mode does not use credentials.",
+        "oauthFlowUnsupported": "This provider does not support this OAuth flow.",
+        "otherCredentialModeField": "This field belongs to another credential mode.",
+        "otherCredentialModeSetting": "This setting belongs to another credential mode.",
+        "providerSettings": "Check this provider's settings.",
+        "providerUnregistered": "Install and register this provider before using it.",
+        "refreshTokenClientCredentials": "Client credentials do not use a refresh token.",
+        "refreshTokenOAuthOnly": "Only an OAuth connection can start from a refresh token.",
+        "refreshTokenSharedOnly": "Only a shared connection can start from a refresh token in Env.",
+        "registrationSecret": "Use the registration's secret reference.",
+        "registrationUndefined": "Select a registration defined in this file.",
+        "requiredScopes": "Include this provider's required permissions.",
+        "schemaVersionUnsupported": "Use numeric schemaVersion 1; other versions require an explicit migration.",
+        "scopeRequired": "Select at least one permission.",
+        "scopeUnsupported": "A selected permission is not supported by this provider configuration.",
+        "serviceAccountPerUser": "A service account cannot connect as each app user.",
+        "serviceAccountRegistration": "Service-account credentials do not use a browser OAuth registration.",
+        "stableName": "Use a stable lowercase name containing letters, digits and hyphens.",
+        "valueRequired": "This value is required."
+      },
+      "connection": {
+        "ambiguousPermissionGrant": "The provider did not return an unambiguous permission grant.",
+        "apiKeyBindingMissingInvalid": "The API key binding is missing or invalid.",
+        "assistantActionDisabled": "This assistant action is disabled.",
+        "authorizationAttemptInvalidExpired": "The authorization attempt is invalid or has expired.",
+        "authorizationCallbackInvalid": "The authorization callback is invalid.",
+        "callbackDoesNotMatchRegistration": "The callback does not match this registration.",
+        "callbackUrlDoesNotMeet": "The callback URL does not meet this provider's requirements.",
+        "checkOperationInputValues": "Check the operation's input values.",
+        "configureHttpsCallbackUrlLocal": "Configure an HTTPS callback URL, or a local development callback.",
+        "connectAccountAgain": "Connect this account again.",
+        "connectAgainPermissionRequiredOperation": "Connect again with the permission required for this operation.",
+        "connectAgainPermissionRequiredVerification": "Connect again with the permission required for verification.",
+        "connectionNotAllowed": "You cannot use this connection.",
+        "envRefreshTokenRejected": "The refresh token in Env no longer works; replace that Env value.",
+        "envSeeded": "This connection comes from an Env value; unlink or replace that value instead.",
+        "integrationNotConfigured": "This integration is not configured.",
+        "operationCancelled": "The operation was cancelled.",
+        "operationRequiresDifferentMethod": "This operation requires a different connection method.",
+        "operationRequiresPermissionAbsentApplication": "This operation requires a permission absent from the application's configuration.",
+        "providerClientIdNotConfigured": "The provider client ID is not configured.",
+        "providerDeniedOperation": "The provider denied this operation.",
+        "providerDoesNotDeclareAssistant": "This provider does not declare this assistant action.",
+        "providerDoesNotImplementService": "This provider does not implement service-account authorization.",
+        "providerInvalidCredentialPath": "This provider has an invalid credential path.",
+        "providerNonPkceFlowRequires": "This provider's non-PKCE flow requires a confidential client.",
+        "providerOperationInvalidDestination": "The provider operation has an invalid destination.",
+        "providerOperationNotAvailable": "This provider operation is not available.",
+        "providerRequestFailedTryAgain": "The provider request failed. Try again.",
+        "providerRequestLimitReached": "The provider's request limit was reached.",
+        "providerRequiresJsonRequestBody": "This provider requires a JSON request body.",
+        "providerReturnedInvalidAccountLabel": "The provider returned an invalid account label.",
+        "providerReturnedInvalidPermissionGrant": "The provider returned an invalid permission grant.",
+        "providerReturnedInvalidServiceAccount": "The provider returned an invalid service-account token.",
+        "providerReturnedUnexpectedResponse": "The provider returned an unexpected response.",
+        "refreshTokenBindingMissingInvalid": "The refresh token binding is missing or invalid.",
+        "requiredEnvironmentBindingMissing": "A required environment binding is missing.",
+        "requiredRegistrationBindingMissing": "A required registration binding is missing.",
+        "runtimeDoesNotYetSupport": "This runtime does not yet support the selected credential mode.",
+        "selectClientCredentialsConnectService": "Select client credentials to connect a service account.",
+        "selectMatchingCredentialModeVerify": "Select the matching credential mode to verify this connection.",
+        "selectServiceAccountCredentialsVerify": "Select service-account credentials to verify this connection.",
+        "serviceAccountCredentialBindingMissing": "The service-account credential binding is missing or invalid.",
+        "serviceAccountsConnectWithoutBrowser": "Service accounts connect without browser consent.",
+        "serviceAccountsDoNotUse": "Service accounts do not use an authorization callback.",
+        "verificationScopeAbsent": "Connection verification requires a permission absent from the application's configuration."
+      }
+    },
+    "errors": {
+      "connector_approval_required": "Approve this assistant action before continuing.",
+      "connector_consent_denied": "Account access was declined.",
+      "connector_credentials_unavailable": "Stored credentials could not be opened.",
+      "connector_provider_timeout": "The provider request timed out. Try again.",
+      "connector_storage_invalid": "Connection state could not be read safely.",
+      "integration_configuration_invalid": "Integration configuration is invalid."
+    }
+  }
+}

package/node_modules/@jskit-ai/connectors-core/package.json

@@ -1,11 +1,12 @@
 {
   "name": "@jskit-ai/connectors-core",
-  "version": "0.1.63",
+  "version": "0.2.0",
   "type": "module",
   "exports": {
     "./shared/configuration": "./src/shared/configuration.js",
     "./server": "./src/server/index.js",
     "./server/storage": "./src/server/storage.js",
-    "./server/file-storage": "./src/server/fileStorage.js"
+    "./server/file-storage": "./src/server/fileStorage.js",
+    "./locales/en.json": "./locales/en.json"
   }
 }

package/node_modules/@jskit-ai/http-runtime/CHANGELOG.md

@@ -0,0 +1,31 @@
+# Changelog
+
+## 0.2.0 - 2026-10-29
+
+- Translation ready: every user-visible text is a message key with its English in `locales/en.json`, so an app translates it by supplying translation files only. With no translations, texts and behaviour are unchanged. See the guide "Translating a JSKIT app".
+- Error responses include `params`, `messageCode` and `messageParams`; JSON:API `errors[].meta` carries them and the field-error code.
+- A request body that fails its schema outside JSON:API returns `validation_failed` with `details.fieldErrors` and `details.fieldErrorCodes`.
+
+### New message keys (4)
+
+All keys in `locales/en.json` (exported as `./locales/en.json`) are new in this version.
+
+<details><summary>Key list</summary>
+
+- `jskit.http.request.failedWithStatus`
+- `jskit.http.request.networkFailed`
+- `jskit.errors.jsonapi_request_body_invalid`
+- `jskit.errors.jsonapi_request_type_mismatch`
+
+</details>
+
+### Codes (4)
+
+Error, field-error and message codes this package sends, with their English. Undotted codes kept their existing values and render from `jskit.errors.<code>`.
+
+| Code | English |
+| --- | --- |
+| `http.request.failedWithStatus` | Request failed with status {status}. |
+| `http.request.networkFailed` | Network request failed. |
+| `jsonapi_request_body_invalid` | JSON:API request body must contain a resource document. |
+| `jsonapi_request_type_mismatch` | JSON:API resource type must be {type}. |

package/node_modules/@jskit-ai/http-runtime/locales/en.json

@@ -0,0 +1,14 @@
+{
+  "jskit": {
+    "http": {
+      "request": {
+        "failedWithStatus": "Request failed with status {status}.",
+        "networkFailed": "Network request failed."
+      }
+    },
+    "errors": {
+      "jsonapi_request_body_invalid": "JSON:API request body must contain a resource document.",
+      "jsonapi_request_type_mismatch": "JSON:API resource type must be {type}."
+    }
+  }
+}

package/node_modules/@jskit-ai/http-runtime/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/http-runtime",
-  "version": "0.1.244",
+  "version": "0.2.0",
   "type": "module",
   "exports": {
     "./client": "./src/client/index.js",
@@ -8,6 +8,7 @@
     "./shared/validators/errorResponses": "./src/shared/validators/errorResponses.js",
     "./shared/validators/jsonApiResult": "./src/shared/validators/jsonApiResult.js",
     "./shared/validators/jsonApiRouteTransport": "./src/shared/validators/jsonApiRouteTransport.js",
-    "./shared/validators/operationValidation": "./src/shared/validators/operationValidation.js"
+    "./shared/validators/operationValidation": "./src/shared/validators/operationValidation.js",
+    "./locales/en.json": "./locales/en.json"
   }
 }

package/node_modules/@jskit-ai/kernel/CHANGELOG.md

@@ -0,0 +1,182 @@
+# Changelog
+
+## 0.2.0 - 2026-10-29
+
+- Translation ready: every user-visible text is a message key with its English in `locales/en.json`, so an app translates it by supplying translation files only. With no translations, texts and behaviour are unchanged. See the guide "Translating a JSKIT app".
+- `AppError` takes `{ code, params, messageCode, messageParams }`; every error response carries `code` and `params` next to the English `message`.
+- `createValidationError` accepts `{ field: { code, params, message } }`; responses keep `details.fieldErrors` (English) and add `details.fieldErrorCodes`.
+- Request validation maps Fastify/Ajv issues to `kernel.validation.*` field codes; resource-schema messages may be `{ code, message, params }`.
+- Client: `useJskitText()` (`t`, `text`, `serverMessage`, `fieldErrorMessages`, Intl formatting helpers), `createTextError`, `registerJskitMessages`, and `bootstrapClientShellApp({ i18n })` for the app's composition-mode vue-i18n instance (optional peer dependency `vue-i18n`).
+- Server: `createServerI18n({ appRoot, catalogs })` renders messages in a recipient's language from the app's `src/locales/<code>/jskit.json`.
+- Shared: `formatMessage`, `catalogMessage`, `mergeCatalogs`, `flattenCatalog`, `messageKeyForCode`, `messageParams`.
+- `serverMessage(source, fallback)` returns the fallback when the source has no message, as `message || fallback` did.
+
+### Upgrading
+
+- Apps translate nothing until they pass a vue-i18n instance; screens and texts stay as they were.
+- Tests that compare whole error payloads exactly: every error response now has `params` (often `{}`), and some have `messageCode`/`messageParams` (a hidden 5xx answer carries `messageCode: "internal_server_error"`). Match the fields you need instead.
+- Tests or code that expect `APP_ERROR` for a JSKIT error: errors that used to fall back to `APP_ERROR` now have their own dotted codes (listed in each package's Codes table), and `createValidationError` answers `validation_failed`. Codes that already existed keep their values.
+- A plain-JSON (non-JSON:API) request body that fails its schema now answers `validation_failed` with `details.fieldErrors`, instead of `request_failed`, so JSKIT forms show the error next to the field.
+
+### New message keys (74)
+
+All keys in `locales/en.json` (exported as `./locales/en.json`) are new in this version.
+
+<details><summary>Key list</summary>
+
+- `jskit.errors.internal_server_error`
+- `jskit.errors.request_failed`
+- `jskit.errors.validation_failed`
+- `jskit.errors.FST_ERR_VALIDATION`
+- `jskit.errors.not_found`
+- `jskit.errors.conflict`
+- `jskit.errors.domain_validation_failed`
+- `jskit.errors.AUTHENTICATION_REQUIRED`
+- `jskit.errors.PERMISSION_DENIED`
+- `jskit.errors.ACTION_AUTHENTICATION_REQUIRED`
+- `jskit.errors.ACTION_CHANNEL_FORBIDDEN`
+- `jskit.errors.ACTION_PERMISSION_DENIED`
+- `jskit.errors.ACTION_SURFACE_FORBIDDEN`
+- `jskit.errors.ACTION_NOT_FOUND`
+- `jskit.errors.ACTION_VALIDATION_FAILED`
+- `jskit.errors.ACTION_IDEMPOTENCY_KEY_REQUIRED`
+- `jskit.errors.ACTION_ID_REQUIRED`
+- `jskit.errors.ACTION_STREAM_KIND_REQUIRED`
+- `jskit.errors.ACTION_VERSION_INVALID`
+- `jskit.errors.ACTION_OUTPUT_VALIDATION_FAILED`
+- `jskit.errors.unsupported_media_type`
+- `jskit.kernel.validation.required`
+- `jskit.kernel.validation.type`
+- `jskit.kernel.validation.minLength`
+- `jskit.kernel.validation.maxLength`
+- `jskit.kernel.validation.minimum`
+- `jskit.kernel.validation.maximum`
+- `jskit.kernel.validation.exclusiveMinimum`
+- `jskit.kernel.validation.exclusiveMaximum`
+- `jskit.kernel.validation.multipleOf`
+- `jskit.kernel.validation.pattern`
+- `jskit.kernel.validation.format`
+- `jskit.kernel.validation.enum`
+- `jskit.kernel.validation.const`
+- `jskit.kernel.validation.minItems`
+- `jskit.kernel.validation.maxItems`
+- `jskit.kernel.validation.additionalItems`
+- `jskit.kernel.validation.uniqueItems`
+- `jskit.kernel.validation.minProperties`
+- `jskit.kernel.validation.maxProperties`
+- `jskit.kernel.validation.additionalProperties`
+- `jskit.kernel.validation.propertyNames`
+- `jskit.kernel.validation.oneOf`
+- `jskit.kernel.validation.anyOf`
+- `jskit.kernel.validation.not`
+- `jskit.kernel.validation.if`
+- `jskit.kernel.validation.invalid`
+- `jskit.kernel.validation.schemaFailed`
+- `jskit.kernel.validation.recordIdInvalid`
+- `jskit.kernel.validation.field.required`
+- `jskit.kernel.validation.field.typeCastFailed`
+- `jskit.kernel.validation.field.notNullable`
+- `jskit.kernel.validation.field.minLength`
+- `jskit.kernel.validation.field.maxLength`
+- `jskit.kernel.validation.field.minValue`
+- `jskit.kernel.validation.field.maxValue`
+- `jskit.kernel.validation.field.pattern`
+- `jskit.kernel.validation.field.enumValue`
+- `jskit.kernel.validation.field.notAllowed`
+- `jskit.kernel.validation.field.strictBoolean`
+- `jskit.kernel.validation.field.rangeExceeded`
+- `jskit.kernel.validation.field.notEmpty`
+- `jskit.kernel.action.versionInvalid`
+- `jskit.kernel.action.idRequired`
+- `jskit.kernel.action.idempotencyKeyRequired`
+- `jskit.kernel.route.handlerUnavailable`
+- `jskit.kernel.surface.pathNotServed`
+- `jskit.kernel.moduleLoad.appModuleNotDownloaded`
+- `jskit.kernel.moduleLoad.appModuleFailed`
+- `jskit.kernel.moduleLoad.pageNotDownloaded`
+- `jskit.kernel.moduleLoad.pageFailed`
+- `jskit.kernel.moduleLoad.notDownloaded`
+- `jskit.kernel.moduleLoad.failed`
+- `jskit.kernel.moduleLoad.reloadUnavailable`
+
+</details>
+
+### Codes (73)
+
+Error, field-error and message codes this package sends, with their English. Undotted codes kept their existing values and render from `jskit.errors.<code>`.
+
+| Code | English |
+| --- | --- |
+| `internal_server_error` | Internal server error. |
+| `request_failed` | Request failed. |
+| `validation_failed` | Validation failed. |
+| `not_found` | Not found. |
+| `conflict` | Conflict. |
+| `domain_validation_failed` | Domain validation failed. |
+| `AUTHENTICATION_REQUIRED` | Authentication required. |
+| `PERMISSION_DENIED` | Forbidden. |
+| `ACTION_AUTHENTICATION_REQUIRED` | Authentication required. |
+| `ACTION_CHANNEL_FORBIDDEN` | Forbidden. |
+| `ACTION_PERMISSION_DENIED` | Forbidden. |
+| `ACTION_SURFACE_FORBIDDEN` | Forbidden. |
+| `ACTION_NOT_FOUND` | Not found. |
+| `ACTION_VALIDATION_FAILED` | Validation failed. |
+| `ACTION_IDEMPOTENCY_KEY_REQUIRED` | Validation failed. |
+| `ACTION_ID_REQUIRED` | Validation failed. |
+| `ACTION_STREAM_KIND_REQUIRED` | Validation failed. |
+| `ACTION_VERSION_INVALID` | Validation failed. |
+| `ACTION_OUTPUT_VALIDATION_FAILED` | Action output validation failed. |
+| `unsupported_media_type` | Content-Type must be {contentType}. |
+| `kernel.validation.required` | must have required property '{missingProperty}' |
+| `kernel.validation.type` | must be {type} |
+| `kernel.validation.minLength` | must NOT have fewer than {limit} characters |
+| `kernel.validation.maxLength` | must NOT have more than {limit} characters |
+| `kernel.validation.minimum` | must be >= {limit} |
+| `kernel.validation.maximum` | must be <= {limit} |
+| `kernel.validation.exclusiveMinimum` | must be > {limit} |
+| `kernel.validation.exclusiveMaximum` | must be < {limit} |
+| `kernel.validation.multipleOf` | must be multiple of {multipleOf} |
+| `kernel.validation.pattern` | must match pattern "{pattern}" |
+| `kernel.validation.format` | must match format "{format}" |
+| `kernel.validation.enum` | must be equal to one of the allowed values |
+| `kernel.validation.const` | must be equal to constant |
+| `kernel.validation.minItems` | must NOT have fewer than {limit} items |
+| `kernel.validation.maxItems` | must NOT have more than {limit} items |
+| `kernel.validation.additionalItems` | must NOT have more than {limit} items |
+| `kernel.validation.uniqueItems` | must NOT have duplicate items (items ## {j} and {i} are identical) |
+| `kernel.validation.minProperties` | must NOT have fewer than {limit} properties |
+| `kernel.validation.maxProperties` | must NOT have more than {limit} properties |
+| `kernel.validation.additionalProperties` | must NOT have additional properties |
+| `kernel.validation.propertyNames` | property name must be valid |
+| `kernel.validation.oneOf` | must match exactly one schema in oneOf |
+| `kernel.validation.anyOf` | must match a schema in anyOf |
+| `kernel.validation.not` | must NOT be valid |
+| `kernel.validation.if` | must match "{failingKeyword}" schema |
+| `kernel.validation.invalid` | Invalid value. |
+| `kernel.validation.schemaFailed` | Schema validation failed. |
+| `kernel.validation.recordIdInvalid` | Record id must be a canonical positive integer string. |
+| `kernel.validation.field.required` | Field is required |
+| `kernel.validation.field.typeCastFailed` | Value could not be cast to the required type. |
+| `kernel.validation.field.notNullable` | Field cannot be null |
+| `kernel.validation.field.minLength` | Length must be at least {min} characters. |
+| `kernel.validation.field.maxLength` | Length must be no more than {max} characters. |
+| `kernel.validation.field.minValue` | Value must be at least {min}. |
+| `kernel.validation.field.maxValue` | Value must be no more than {max}. |
+| `kernel.validation.field.pattern` | Value does not match the required pattern. |
+| `kernel.validation.field.enumValue` | Value must match one of the allowed enum values. |
+| `kernel.validation.field.notAllowed` | Field not allowed |
+| `kernel.validation.field.strictBoolean` | Value must be a boolean. |
+| `kernel.validation.field.rangeExceeded` | Numeric value is out of the allowed character range. |
+| `kernel.validation.field.notEmpty` | Field cannot be empty. |
+| `kernel.action.versionInvalid` | version must be an integer >= 1. |
+| `kernel.action.idRequired` | actionId is required. |
+| `kernel.action.idempotencyKeyRequired` | Idempotency key is required for this action. |
+| `kernel.route.handlerUnavailable` | Route handler is not available in this runtime profile. |
+| `kernel.surface.pathNotServed` | Path {path} is not served by {surface} surface server. |
+| `kernel.moduleLoad.appModuleNotDownloaded` | App module did not download. The app may have been updated, or the network request failed. |
+| `kernel.moduleLoad.appModuleFailed` | App module could not load. |
+| `kernel.moduleLoad.pageNotDownloaded` | Page did not download. The app may have been updated, or the network request failed. |
+| `kernel.moduleLoad.pageFailed` | Page could not load. |
+| `kernel.moduleLoad.notDownloaded` | {label} did not download. The app may have been updated, or the network request failed. |
+| `kernel.moduleLoad.failed` | {label} could not load. |
+| `kernel.moduleLoad.reloadUnavailable` | The app cannot reload because the app server is not reachable. Restart the server, then click Retry or Reload. |