app-store: add DuckDB app card

src/pages/app-store.astro

@@ -136,7 +136,7 @@ try {
           <div class="zoo-stat"><div class="v">security</div><div class="l">Category</div></div>
         </div>
         <div class="zoo-foot">
-          <a class="zoo-arr" href="https://aegis.pilotprotocol.network" target="_blank" rel="noopener">Visit site →</a>
+          <a class="zoo-arr" href="https://aegis.pilotprotocol.network" target="_blank" rel="noopener">View source →</a>
           <span class="zoo-badge">v0.1.4 · Apache-2.0</span>
         </div>
       </div>
@@ -187,7 +187,7 @@ try {
           <div class="zoo-stat"><div class="v">intel</div><div class="l">Category</div></div>
         </div>
         <div class="zoo-foot">
-          <a class="zoo-arr" href="https://docs.sixtyfour.ai" target="_blank" rel="noopener">View docs →</a>
+          <a class="zoo-arr" href="https://docs.sixtyfour.ai" target="_blank" rel="noopener">View source →</a>
           <span class="zoo-badge">v0.1.0 · Proprietary</span>
         </div>
       </div>
@@ -263,7 +263,7 @@ try {
           <div class="zoo-stat"><div class="v">writing</div><div class="l">Category</div></div>
         </div>
         <div class="zoo-foot">
-          <a class="zoo-arr" href="https://telepat.io" target="_blank" rel="noopener">View site →</a>
+          <a class="zoo-arr" href="https://telepat.io" target="_blank" rel="noopener">View source →</a>
           <span class="zoo-badge">v0.3.1</span>
         </div>
       </div>
@@ -289,7 +289,7 @@ try {
           <div class="zoo-stat"><div class="v">finance</div><div class="l">Category</div></div>
         </div>
         <div class="zoo-foot">
-          <a class="zoo-arr" href="https://slipstream.pilotprotocol.network" target="_blank" rel="noopener">View site →</a>
+          <a class="zoo-arr" href="https://slipstream.pilotprotocol.network" target="_blank" rel="noopener">View source →</a>
           <span class="zoo-badge">v1.0.0 · MIT</span>
         </div>
       </div>
@@ -313,7 +313,7 @@ try {
           <div class="zoo-stat"><div class="v">devops</div><div class="l">Category</div></div>
         </div>
         <div class="zoo-foot">
-          <a class="zoo-arr" href="https://miren.dev" target="_blank" rel="noopener">Visit site →</a>
+          <a class="zoo-arr" href="https://miren.dev" target="_blank" rel="noopener">View source →</a>
           <span class="zoo-badge">v0.1.0 · Proprietary</span>
         </div>
       </div>
@@ -337,7 +337,7 @@ try {
           <div class="zoo-stat"><div class="v">web</div><div class="l">Category</div></div>
         </div>
         <div class="zoo-foot">
-          <a class="zoo-arr" href="https://github.com/pilot-protocol/plainweb" target="_blank" rel="noopener">Visit site →</a>
+          <a class="zoo-arr" href="https://github.com/pilot-protocol/plainweb" target="_blank" rel="noopener">View source →</a>
           <span class="zoo-badge">v1.0.0 · Proprietary</span>
         </div>
       </div>
@@ -362,7 +362,7 @@ try {
           <div class="zoo-stat"><div class="v">browser</div><div class="l">Category</div></div>
         </div>
         <div class="zoo-foot">
-          <a class="zoo-arr" href="https://docs.telepat.io/otto" target="_blank" rel="noopener">Visit site →</a>
+          <a class="zoo-arr" href="https://docs.telepat.io/otto" target="_blank" rel="noopener">View source →</a>
           <span class="zoo-badge">v0.20.0 · MIT</span>
         </div>
       </div>
@@ -372,7 +372,7 @@ try {
           <div class="zoo-id">io.pilot.postgres</div>
           <img class="zoo-logo" src="/brand/apps/postgres.svg" alt="PostgreSQL" />
         </div>
-        <div class="zoo-name">PostgreSQL 17.5</div>
+        <div class="zoo-name">PostgreSQL 17</div>
         <div class="zoo-desc">
           Run and query PostgreSQL from an agent — provision a local server
           (<code>initdb</code>/<code>start</code>/<code>createdb</code>) and run SQL
@@ -442,6 +442,32 @@ try {
           <span class="zoo-badge">v8.6.2 · AGPL-3.0</span>
         </div>
       </div>
+
+      <div class="zoo-card">
+        <div class="zoo-top">
+          <div class="zoo-id">io.pilot.duckdb</div>
+          <img class="zoo-logo" src="/brand/apps/duckdb.png" alt="DuckDB" />
+        </div>
+        <div class="zoo-name">DuckDB</div>
+        <div class="zoo-desc">
+          Run DuckDB from an agent — an in-process analytical SQL database
+          (&ldquo;SQLite for analytics&rdquo;) with no server and no provisioning. Run SQL
+          in-memory or against a file and query CSV, Parquet, and JSON files directly
+          in place. Results as table, CSV, JSON, or Markdown, schema introspection,
+          and the full CLI via a verbatim-argv passthrough.
+        </div>
+        <div class="zoo-by">by <a href="https://pilotprotocol.network" target="_blank" rel="noopener">Pilot Protocol</a></div>
+        <div class="zoo-install"><code>pilotctl appstore install io.pilot.duckdb</code></div>
+        <div class="zoo-stats">
+          <div class="zoo-stat"><div class="v">11</div><div class="l">Methods</div></div>
+          <div class="zoo-stat"><div class="v">21<span class="unit">MB</span></div><div class="l">Download</div></div>
+          <div class="zoo-stat"><div class="v">database</div><div class="l">Category</div></div>
+        </div>
+        <div class="zoo-foot">
+          <a class="zoo-arr" href="https://github.com/duckdb/duckdb" target="_blank" rel="noopener">View source →</a>
+          <span class="zoo-badge">v1.5.4 · MIT</span>
+        </div>
+      </div>
     </div>
   </div>
 </section>

src/pages/plain/app-store.astro

@@ -1,7 +1,7 @@
 ---
 // Auto-generated by scripts/regen-plain.mjs. Edit the marketing source and re-run.
 // plain-source: src/pages/app-store.astro
-// plain-source-sha256: 0a372d024a818c294cadd2fd0df3e3724e9df290ecfc57617355137631124686
+// plain-source-sha256: 5287805ddb572ab13a97baf889e018e23f50c7e80bdbd3d6b587ae576eccd4ad
 import PlainLayout from '../../layouts/PlainLayout.astro';
 ---
 <PlainLayout title="App Store — Pilot Protocol" description="Agent-native apps on the Pilot Protocol network. Install with one command; publish your own from your browser or by PR." canonical="https://pilotprotocol.network/plain/app-store/">
@@ -12,56 +12,59 @@ import PlainLayout from '../../layouts/PlainLayout.astro';
 
 <h2>How it works</h2>
 <ul>
-  <li>Discover: Agents browse the App Store through their native protocol, searching by capability.</li>
-  <li>Install: A single command, `pilotctl appstore install &lt;id&gt;`, fetches, verifies signatures, requests permissions, and spawns the app.</li>
+  <li>Discover: Agents browse the App Store through their native protocol.</li>
+  <li>Install: Apps are installed with a single command. The daemon fetches the app, verifies its signature, requests permissions, and spawns it.</li>
   <li>Run: Apps run in the agent's context with native protocol access.</li>
 </ul>
+<pre><code>pilotctl appstore install &lt;id&gt;</code></pre>
 
 <h2>Featured apps</h2>
-<p>The following apps are available in the catalogue. They can be installed with `pilotctl appstore install`.</p>
-<p>AEGIS (io.pilot.aegis): A runtime firewall for AI agents that intercepts prompt injection, jailbreaks, homoglyph attacks, and infrastructure-impersonation. It is an 880 KB Rust binary that runs fully offline.</p>
+<p>The following apps are available in the catalogue.</p>
+<p>AEGIS (io.pilot.aegis): A runtime firewall for AI agents that intercepts prompt injection, jailbreaks, and other attacks at agent input surfaces. It is a fully offline Rust binary.</p>
 <pre><code>pilotctl appstore install io.pilot.aegis</code></pre>
-<p>Cosift (io.pilot.cosift): Provides grounded web search, retrieval, and research for agents. It performs keyword and semantic search, document retrieval, and returns LLM-grounded answers as structured JSON. Methods are discoverable via `cosift.help`.</p>
+<p>Cosift (io.pilot.cosift): Provides grounded web search, retrieval, and research for agents. It returns structured JSON from a crawled web corpus.</p>
 <pre><code>pilotctl appstore install io.pilot.cosift</code></pre>
-<p>Sixtyfour (io.pilot.sixtyfour): People and company intelligence for agents. Functions include contact discovery, reverse lookups, and person/company enrichment. Data is returned as structured JSON. Methods are discoverable via `sixtyfour.help`.</p>
+<p>Sixtyfour (io.pilot.sixtyfour): People and company intelligence for agents. Features include contact discovery, reverse lookups, and person/company enrichment.</p>
 <pre><code>pilotctl appstore install io.pilot.sixtyfour</code></pre>
-<p>Smol Machines (io.pilot.smolmachines): Provides fast, hardware-isolated Linux microVMs on demand with sub-second boot times. Used to safely run untrusted code, GPU tasks, or headless browser automation. Driven through `smolmachines.exec`.</p>
+<p>Smol Machines (io.pilot.smolmachines): Provides fast, hardware-isolated Linux microVMs on demand to safely run untrusted or AI-generated code.</p>
 <pre><code>pilotctl appstore install io.pilot.smolmachines</code></pre>
-<p>Wallet (io.pilot.wallet): Enables on-overlay USDC payments using x402 and EIP-3009 settlement across Base, Ethereum, and Polygon. Spend caps are declared in the manifest and enforced on every signing operation.</p>
+<p>Wallet (io.pilot.wallet): Enables on-overlay USDC payments across Base, Ethereum, and Polygon. Spend caps are declared in the manifest and enforced on signing operations.</p>
 <pre><code>pilotctl appstore install io.pilot.wallet</code></pre>
-<p>Ideon (io.telepat.ideon-free): An article generation tool for agents. `ideon-free.generate(idea)` returns a job ID, and `ideon-free.poll(jobId)` returns the finished markdown article.</p>
+<p>Ideon (io.telepat.ideon-free): An adapter for article generation. The `generate` method returns a job ID, and the `poll` method returns the finished markdown article.</p>
 <pre><code>pilotctl appstore install io.telepat.ideon-free</code></pre>
-<p>Slipstream (io.pilot.slipstream): Provides Polymarket intelligence for agents. Features include leaderboards, live signals, a market scanner, and opportunity scores, delivered over an Ed25519-signed API. Methods are discoverable via `slipstream.help`.</p>
+<p>Slipstream (io.pilot.slipstream): Provides Polymarket intelligence for agents, including leaderboards, live signals, and a market scanner over a signed API.</p>
 <pre><code>pilotctl appstore install io.pilot.slipstream</code></pre>
-<p>Miren (io.pilot.miren): Allows an agent to operate the Miren PaaS. Functions include deploying and rolling back apps, inspecting status and logs, and a passthrough `miren.exec` for any miren subcommand.</p>
+<p>Miren (io.pilot.miren): Allows an agent to operate the Miren PaaS to deploy apps, inspect status and logs, and run server commands.</p>
 <pre><code>pilotctl appstore install io.pilot.miren</code></pre>
-<p>Plainweb (io.pilot.plainweb): Retrieves any web page as plain text Markdown. The `plainweb.fetch(url)` call fetches and returns the page content.</p>
+<p>Plainweb (io.pilot.plainweb): Retrieves any web page as plain text Markdown with a single `plainweb.fetch(url)` call.</p>
 <pre><code>pilotctl appstore install io.pilot.plainweb</code></pre>
-<p>Otto (io.pilot.otto): Drives Chrome tabs from an agent. It can extract page content, run site-specific commands, and screenshot pages. Includes a passthrough `otto.exec` for any otto subcommand.</p>
+<p>Otto (io.pilot.otto): Drives Chrome tabs from an agent to extract page content, run site commands, and screenshot pages via a browser extension relay.</p>
 <pre><code>pilotctl appstore install io.pilot.otto</code></pre>
-<p>PostgreSQL 17.5 (io.pilot.postgres): Allows an agent to run and query PostgreSQL. It can provision a local server and run SQL with `psql`, or connect to any libpq target.</p>
+<p>PostgreSQL 17 (io.pilot.postgres): Allows an agent to run and query PostgreSQL. It can provision a local server or connect to any libpq target.</p>
 <pre><code>pilotctl appstore install io.pilot.postgres</code></pre>
-<p>Docker (io.pilot.docker): Allows an agent to run Docker on Linux. It includes the full Docker Engine and CLI to start a local engine, pull images, and run containers.</p>
+<p>Docker (io.pilot.docker): Allows an agent to run the full Docker Engine and CLI on Linux to pull images and run containers.</p>
 <pre><code>pilotctl appstore install io.pilot.docker</code></pre>
-<p>Redis (io.pilot.redis): Allows an agent to run Redis. It can start a local in-memory data store and interact with it using `redis-cli`.</p>
+<p>Redis (io.pilot.redis): Allows an agent to start a local Redis in-memory data store and interact with it via `redis-cli`.</p>
 <pre><code>pilotctl appstore install io.pilot.redis</code></pre>
+<p>DuckDB (io.pilot.duckdb): Allows an agent to run DuckDB, an in-process analytical SQL database. It can run SQL in-memory or query CSV, Parquet, and JSON files.</p>
+<pre><code>pilotctl appstore install io.pilot.duckdb</code></pre>
 
-<h2>For builders</h2>
-<p>Existing HTTP APIs can be wrapped in a signed adapter and published to the catalogue.</p>
+<h2>Publishing an app</h2>
+<p>Existing HTTP APIs can be wrapped in a signed adapter and published to the catalogue. There are two ways to publish.</p>
 <ul>
-  <li>Publish in a browser: A publish wizard is used to describe the app's ID, methods, backend URL, and auth headers. The adapter is then generated, signed, and verified before a team review.</li>
-  <li>Publish by pull request: The `pilot-app` toolkit turns a `pilot.app.yaml` file into a signed adapter bundle. A pull request is opened to `pilot-protocol/app-template`, where CI verifies the bundle before a maintainer review.</li>
+  <li>Publish in browser: Use the publish wizard to describe the app's ID, methods, backend URL, and auth headers. The adapter is generated, signed, and verified automatically before team review.</li>
+  <li>Publish by PR: Use the `pilot-app` toolkit to turn a `pilot.app.yaml` into a signed adapter bundle. Open a pull request to the `pilot-protocol/app-template` repository for verification and release.</li>
 </ul>
-<p>All apps have the following properties:</p>
+<p>All apps have the following security features:</p>
 <ul>
-  <li>Verified: Every adapter is sha256-pinned and signed by its publisher. The daemon re-verifies the signature and binary hash each time it spawns the app.</li>
-  <li>Scoped: Apps declare required permissions, such as network access or file I/O. The agent grants or denies these permissions at install time.</li>
+  <li>Verified: Adapters are sha256-pinned and signed by the publisher. The daemon verifies the signature and hash on every spawn.</li>
+  <li>Scoped: Apps declare required permissions, such as network access or file I/O, which the agent grants or denies at install time.</li>
 </ul>
 
 <h2>Related</h2>
 <ul>
-  <li><a href="/plain/publish">Publish an app</a></li>
-  <li><a href="/docs/app-store">App Store documentation</a></li>
+  <li><a href="/plain/publish">Publish your app</a></li>
+  <li><a href="/docs/app-store">App Store Docs</a></li>
 </ul>
 
 </PlainLayout>