iblai-vibe-authlisted

# /iblai-vibe-auth Add ibl.ai SSO authentication to a vanilla Next.js app. After completion, unauthenticated users are redirected to login.iblai.app and returned with a session -- no API tokens to manage. > **Templates:** the auth files this skill creates (providers, store, SSO > callback, `lib/iblai/*`) are bundled here as Jinja2 assets — > [`assets/`](assets/). You render them into the project in Step 3. See > [`/iblai-vibe-scaffold`](../iblai-vibe-scaffold/SKILL.md) for the `{{ }}` variable > contract and the shared patch mechanics. Do NOT ask the user for their platform key. Read `PLATFORM` from `iblai.env` (the user fills it in) and use it as the platform key when you create the auth files in Step 3. If `iblai.env` has no real `PLATFORM`, use the placeholder `your-platform` and tell the user to replace it in `.env.local` (`NEXT_PUBLIC_MAIN_TENANT_KEY`). If `.env.local` already has `NEXT_PUBLIC_MAIN_TENANT_KEY` set to a real value (not a placeholder like `your-main-platform`, `your-tenant`, `your-platform`, `your-tenant-key`, `test-tenant`, `main`, or empty), keep that value. `iblai.env` is NOT a `.env.local` replacement — it only holds the 3 shorthand variables (`DOMAIN`, `PLATFORM`, `TOKEN`). Next.js still reads its runtime env vars from `.env.local`. Use `pnpm` as the default package manager. Fall back to `npm` if pnpm is not installed. The generated app should live in the current directory, not in a subdirectory. Project names MUST be all lowercase — npm reject