@intentius/chant-lexicon-aws 0.0.15 → 0.0.18

package/src/generated/lexicon-aws.json

@@ -7878,9 +7878,6 @@
       "State": "State"
     },
     "propertyConstraints": {
-      "KmsKeyIdentifier": {
-        "pattern": "^[\\da-f]{8}-[\\da-f]{4}-[\\da-f]{4}-[\\da-f]{4}-[\\da-f]{12}|alias/[a-zA-Z0-9/_-]{1,250}|arn:aws[a-zA-Z-]*:kms:[a-z]{2}(-gov|-iso(b?))?-[a-z]+-\\d{1}:\\d{12}:(key/[0-9a-f-]{36}|alias/[a-zA-Z0-9/_-]{1,250})$"
-      },
       "State": {
         "enum": [
           "BAKING",
@@ -12720,6 +12717,71 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "BedrockAgentCorePolicy": {
+    "resourceType": "AWS::BedrockAgentCore::Policy",
+    "kind": "resource",
+    "lexicon": "aws",
+    "attrs": {
+      "PolicyId": "PolicyId",
+      "PolicyArn": "PolicyArn",
+      "CreatedAt": "CreatedAt",
+      "UpdatedAt": "UpdatedAt",
+      "Status": "Status",
+      "StatusReasons": "StatusReasons"
+    },
+    "propertyConstraints": {
+      "PolicyEngineId": {
+        "pattern": "^[A-Za-z][A-Za-z0-9_]*-[a-z0-9_]{10}$",
+        "minLength": 12,
+        "maxLength": 59
+      },
+      "Name": {
+        "pattern": "^[A-Za-z][A-Za-z0-9_]*$",
+        "minLength": 1,
+        "maxLength": 48
+      },
+      "Description": {
+        "minLength": 1,
+        "maxLength": 4096
+      },
+      "PolicyId": {
+        "pattern": "^[A-Za-z][A-Za-z0-9_]*-[a-z0-9_]{10}$",
+        "minLength": 12,
+        "maxLength": 59
+      },
+      "PolicyArn": {
+        "pattern": "^arn:aws[-a-z]{0,7}:bedrock-agentcore:[a-z0-9-]{9,15}:[0-9]{12}:policy-engine/[a-zA-Z][a-zA-Z0-9-_]{0,47}-[a-zA-Z0-9_]{10}/policy/[a-zA-Z][a-zA-Z0-9-_]{0,47}-[a-zA-Z0-9_]{10}$",
+        "minLength": 96,
+        "maxLength": 203
+      },
+      "CreatedAt": {
+        "format": "date-time"
+      },
+      "UpdatedAt": {
+        "format": "date-time"
+      }
+    },
+    "createOnly": [
+      "PolicyEngineId",
+      "Name"
+    ],
+    "writeOnly": [
+      "ValidationMode"
+    ],
+    "primaryIdentifier": [
+      "PolicyArn"
+    ]
+  },
+  "BedrockAgentCorePolicy_CedarPolicy": {
+    "resourceType": "AWS::BedrockAgentCore::Policy.CedarPolicy",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "BedrockAgentCorePolicy_PolicyDefinition": {
+    "resourceType": "AWS::BedrockAgentCore::Policy.PolicyDefinition",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "BedrockAgentIntentConfiguration": {
     "resourceType": "AWS::Lex::Bot.BedrockAgentIntentConfiguration",
     "kind": "property",
@@ -17169,6 +17231,11 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "CedarPolicy": {
+    "resourceType": "AWS::BedrockAgentCore::Policy.CedarPolicy",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "Cell": {
     "resourceType": "AWS::Route53RecoveryReadiness::Cell",
     "kind": "resource",
@@ -22024,9 +22091,6 @@
       "Type": {
         "pattern": "^[a-zA-Z\\.]+"
       },
-      "KmsKeyIdentifier": {
-        "pattern": "^[\\da-f]{8}-[\\da-f]{4}-[\\da-f]{4}-[\\da-f]{4}-[\\da-f]{12}|alias/[a-zA-Z0-9/_-]{1,250}|arn:aws[a-zA-Z-]*:kms:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\\d{1})?:(key/[0-9a-f-]{36}|alias/[a-zA-Z0-9/_-]{1,250})$"
-      },
       "Description": {
         "minLength": 0,
         "maxLength": 1024
@@ -24484,6 +24548,86 @@
       "tagUpdatable": true
     }
   },
+  "ContactFlowModuleAlias": {
+    "resourceType": "AWS::Connect::ContactFlowModuleAlias",
+    "kind": "resource",
+    "lexicon": "aws",
+    "attrs": {
+      "ContactFlowModuleAliasARN": "ContactFlowModuleAliasARN",
+      "AliasId": "AliasId"
+    },
+    "propertyConstraints": {
+      "ContactFlowModuleAliasARN": {
+        "pattern": "^arn:aws[-a-z0-9]*:connect:[-a-z0-9]+:[0-9]{12}:instance/[-a-zA-Z0-9]+/flow-module/[-a-zA-Z0-9]+:[-a-zA-Z0-9]+$",
+        "minLength": 1,
+        "maxLength": 500
+      },
+      "AliasId": {
+        "minLength": 1,
+        "maxLength": 500
+      },
+      "ContactFlowModuleId": {
+        "pattern": "^arn:aws[-a-z0-9]*:connect:[-a-z0-9]+:[0-9]{12}:instance/[-a-zA-Z0-9]+/flow-module/[-a-zA-Z0-9]+$",
+        "minLength": 1,
+        "maxLength": 500
+      },
+      "ContactFlowModuleVersion": {
+        "minimum": 1
+      },
+      "Name": {
+        "pattern": "^([$0-9a-zA-Z][_-]?)+$",
+        "minLength": 1,
+        "maxLength": 127
+      },
+      "Description": {
+        "minLength": 0,
+        "maxLength": 500
+      }
+    },
+    "createOnly": [
+      "ContactFlowModuleId"
+    ],
+    "primaryIdentifier": [
+      "ContactFlowModuleAliasARN"
+    ]
+  },
+  "ContactFlowModuleVersion": {
+    "resourceType": "AWS::Connect::ContactFlowModuleVersion",
+    "kind": "resource",
+    "lexicon": "aws",
+    "attrs": {
+      "ContactFlowModuleVersionARN": "ContactFlowModuleVersionARN",
+      "Version": "Version",
+      "FlowModuleContentSha256": "FlowModuleContentSha256"
+    },
+    "propertyConstraints": {
+      "ContactFlowModuleVersionARN": {
+        "pattern": "^arn:aws[-a-z0-9]*:connect:[-a-z0-9]+:[0-9]{12}:instance/[-a-zA-Z0-9]+/flow-module/[-a-zA-Z0-9]+:[0-9]+$",
+        "minLength": 1,
+        "maxLength": 500
+      },
+      "ContactFlowModuleId": {
+        "pattern": "^arn:aws[-a-z0-9]*:connect:[-a-z0-9]+:[0-9]{12}:instance/[-a-zA-Z0-9]+/flow-module/[-a-zA-Z0-9]+$",
+        "minLength": 1,
+        "maxLength": 500
+      },
+      "Description": {
+        "maxLength": 500
+      },
+      "FlowModuleContentSha256": {
+        "pattern": "^[a-zA-Z0-9]{64}$",
+        "minLength": 1,
+        "maxLength": 64
+      }
+    },
+    "createOnly": [
+      "ContactFlowModuleId",
+      "Description"
+    ],
+    "primaryIdentifier": [
+      "ContactFlowModuleVersionARN"
+    ]
+  },
   "ContactFlowModule_Tag": {
     "resourceType": "AWS::Connect::ContactFlowModule.Tag",
     "kind": "property",
@@ -62847,7 +62991,9 @@
     "attrs": {
       "LocationArn": "LocationArn",
       "LocationUri": "LocationUri",
-      "FsxFilesystemArn": "FsxFilesystemArn"
+      "FsxFilesystemArn": "FsxFilesystemArn",
+      "Protocol_SMB_ManagedSecretConfig": "Protocol.SMB.ManagedSecretConfig",
+      "Protocol_SMB_CmkSecretConfig_SecretArn": "Protocol.SMB.CmkSecretConfig.SecretArn"
     },
     "propertyConstraints": {
       "StorageVirtualMachineArn": {
@@ -62888,6 +63034,21 @@
       "tagUpdatable": true
     }
   },
+  "LocationFSxONTAP_CmkSecretConfig": {
+    "resourceType": "AWS::DataSync::LocationFSxONTAP.CmkSecretConfig",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "LocationFSxONTAP_CustomSecretConfig": {
+    "resourceType": "AWS::DataSync::LocationFSxONTAP.CustomSecretConfig",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "LocationFSxONTAP_ManagedSecretConfig": {
+    "resourceType": "AWS::DataSync::LocationFSxONTAP.ManagedSecretConfig",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "LocationFSxONTAP_NFS": {
     "resourceType": "AWS::DataSync::LocationFSxONTAP.NFS",
     "kind": "property",
@@ -62987,7 +63148,9 @@
     "lexicon": "aws",
     "attrs": {
       "LocationArn": "LocationArn",
-      "LocationUri": "LocationUri"
+      "LocationUri": "LocationUri",
+      "ManagedSecretConfig": "ManagedSecretConfig",
+      "CmkSecretConfig_SecretArn": "CmkSecretConfig.SecretArn"
     },
     "propertyConstraints": {
       "Domain": {
@@ -63037,6 +63200,21 @@
       "tagUpdatable": true
     }
   },
+  "LocationFSxWindows_CmkSecretConfig": {
+    "resourceType": "AWS::DataSync::LocationFSxWindows.CmkSecretConfig",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "LocationFSxWindows_CustomSecretConfig": {
+    "resourceType": "AWS::DataSync::LocationFSxWindows.CustomSecretConfig",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "LocationFSxWindows_ManagedSecretConfig": {
+    "resourceType": "AWS::DataSync::LocationFSxWindows.ManagedSecretConfig",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "LocationFSxWindows_Tag": {
     "resourceType": "AWS::DataSync::LocationFSxWindows.Tag",
     "kind": "property",
@@ -63048,7 +63226,9 @@
     "lexicon": "aws",
     "attrs": {
       "LocationArn": "LocationArn",
-      "LocationUri": "LocationUri"
+      "LocationUri": "LocationUri",
+      "ManagedSecretConfig": "ManagedSecretConfig",
+      "CmkSecretConfig_SecretArn": "CmkSecretConfig.SecretArn"
     },
     "propertyConstraints": {
       "BlockSize": {
@@ -63116,6 +63296,21 @@
       "tagUpdatable": true
     }
   },
+  "LocationHDFS_CmkSecretConfig": {
+    "resourceType": "AWS::DataSync::LocationHDFS.CmkSecretConfig",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "LocationHDFS_CustomSecretConfig": {
+    "resourceType": "AWS::DataSync::LocationHDFS.CustomSecretConfig",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "LocationHDFS_ManagedSecretConfig": {
+    "resourceType": "AWS::DataSync::LocationHDFS.ManagedSecretConfig",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "LocationHDFS_NameNode": {
     "resourceType": "AWS::DataSync::LocationHDFS.NameNode",
     "kind": "property",
@@ -63638,6 +63833,11 @@
       "tagUpdatable": true
     }
   },
+  "LogGroupNameConfiguration": {
+    "resourceType": "AWS::ObservabilityAdmin::OrganizationCentralizationRule.LogGroupNameConfiguration",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "LogGroup_Tag": {
     "resourceType": "AWS::Logs::LogGroup.Tag",
     "kind": "property",
@@ -75337,6 +75537,11 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "OrganizationCentralizationRule_LogGroupNameConfiguration": {
+    "resourceType": "AWS::ObservabilityAdmin::OrganizationCentralizationRule.LogGroupNameConfiguration",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "OrganizationCentralizationRule_LogsBackupConfiguration": {
     "resourceType": "AWS::ObservabilityAdmin::OrganizationCentralizationRule.LogsBackupConfiguration",
     "kind": "property",
@@ -79670,11 +79875,6 @@
       "AssociationIdentifier"
     ]
   },
-  "PolicyDefinition": {
-    "resourceType": "AWS::Bedrock::AutomatedReasoningPolicy.PolicyDefinition",
-    "kind": "property",
-    "lexicon": "aws"
-  },
   "PolicyDefinitionRule": {
     "resourceType": "AWS::Bedrock::AutomatedReasoningPolicy.PolicyDefinitionRule",
     "kind": "property",
@@ -79705,6 +79905,68 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "PolicyEngine": {
+    "resourceType": "AWS::BedrockAgentCore::PolicyEngine",
+    "kind": "resource",
+    "lexicon": "aws",
+    "attrs": {
+      "PolicyEngineId": "PolicyEngineId",
+      "CreatedAt": "CreatedAt",
+      "UpdatedAt": "UpdatedAt",
+      "PolicyEngineArn": "PolicyEngineArn",
+      "Status": "Status",
+      "StatusReasons": "StatusReasons"
+    },
+    "propertyConstraints": {
+      "PolicyEngineId": {
+        "pattern": "^[A-Za-z][A-Za-z0-9_]*-[a-z0-9_]{10}$",
+        "minLength": 12,
+        "maxLength": 59
+      },
+      "Name": {
+        "pattern": "^[A-Za-z][A-Za-z0-9_]*$",
+        "minLength": 1,
+        "maxLength": 48
+      },
+      "Description": {
+        "minLength": 1,
+        "maxLength": 4096
+      },
+      "EncryptionKeyArn": {
+        "pattern": "^arn:aws(|-cn|-us-gov):kms:[a-zA-Z0-9-]*:[0-9]{12}:key/[a-zA-Z0-9-]{36}$",
+        "minLength": 1,
+        "maxLength": 2048
+      },
+      "CreatedAt": {
+        "format": "date-time"
+      },
+      "UpdatedAt": {
+        "format": "date-time"
+      },
+      "PolicyEngineArn": {
+        "pattern": "^arn:aws[-a-z]{0,7}:bedrock-agentcore:[a-z0-9-]{9,15}:[0-9]{12}:policy-engine/[a-zA-Z][a-zA-Z0-9-_]{0,47}-[a-zA-Z0-9_]{10}$",
+        "minLength": 76,
+        "maxLength": 136
+      }
+    },
+    "createOnly": [
+      "Name",
+      "EncryptionKeyArn"
+    ],
+    "primaryIdentifier": [
+      "PolicyEngineArn"
+    ],
+    "tagging": {
+      "taggable": true,
+      "tagOnCreate": true,
+      "tagUpdatable": true
+    }
+  },
+  "PolicyEngine_Tag": {
+    "resourceType": "AWS::BedrockAgentCore::PolicyEngine.Tag",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "PolicyGrant": {
     "resourceType": "AWS::DataZone::PolicyGrant",
     "kind": "resource",
@@ -92772,7 +93034,7 @@
     },
     "propertyConstraints": {
       "Prefix": {
-        "pattern": "^((?:[a-z0-9]+(?:[._-][a-z0-9]+)*/)*[a-z0-9]+(?:[._-][a-z0-9]+)*/?|ROOT)$",
+        "pattern": "^([a-z0-9]+((\\.|_|__|-+)[a-z0-9]+)*(\\/[a-z0-9]+((\\.|_|__|-+)[a-z0-9]+)*)*\\/?|ROOT)$",
         "minLength": 1,
         "maxLength": 256
       },

package/src/plugin.ts

@@ -899,219 +899,50 @@ aws cloudformation wait stack-update-complete --stack-name my-app-prod`,
           },
         ],
       },
+    ];
+
+    // Load file-based skills from src/skills/
+    const { readFileSync } = require("fs");
+    const { join, dirname } = require("path");
+    const { fileURLToPath } = require("url");
+    const dir = dirname(fileURLToPath(import.meta.url));
+
+    const skillFiles = [
       {
+        file: "chant-eks.md",
         name: "chant-eks",
         description: "EKS end-to-end workflow — provision cluster, configure kubectl, deploy K8s workloads",
-        content: `---
-skill: chant-eks
-description: End-to-end EKS workflow bridging AWS infrastructure and Kubernetes workloads
-user-invocable: true
----
-
-# EKS End-to-End Workflow
-
-## Overview
-
-This skill bridges two lexicons:
-- **\`@intentius/chant-lexicon-aws\`** — EKS cluster, node groups, IAM roles, OIDC provider (CloudFormation)
-- **\`@intentius/chant-lexicon-k8s\`** — Kubernetes workloads, IRSA, ALB Ingress, storage, observability (K8s YAML)
-
-## Architecture
-
-\`\`\`
-AWS Lexicon (CloudFormation)          K8s Lexicon (kubectl apply)
-┌────────────────────────┐           ┌────────────────────────────┐
-│ VPC + Subnets          │           │ NamespaceEnv (quotas)      │
-│ EKS Cluster            │           │ AutoscaledService (app)    │
-│ Managed Node Group     │──ARNs──→  │ IrsaServiceAccount (IRSA)  │
-│ OIDC Provider          │           │ AlbIngress (ALB)           │
-│ IAM Roles (IRSA)       │           │ EbsStorageClass (gp3)      │
-│ EKS Add-ons            │           │ FluentBitAgent (logs)      │
-└────────────────────────┘           │ ExternalDnsAgent (DNS)     │
-                                     └────────────────────────────┘
-\`\`\`
-
-## Step 1: Provision AWS Infrastructure
-
-\`\`\`bash
-# Build CloudFormation template
-chant build src/infra/ --output infra.json
-
-# Deploy
-aws cloudformation deploy \\
-  --template-file infra.json \\
-  --stack-name my-eks-cluster \\
-  --capabilities CAPABILITY_NAMED_IAM
-\`\`\`
-
-Key AWS resources:
-- **EKS Cluster** — control plane
-- **Managed Node Group** — EC2 worker nodes
-- **OIDC Provider** — enables IRSA (IAM Roles for Service Accounts)
-- **IAM Roles** — node role, app IRSA roles, ALB controller role
-
-## Step 2: Configure kubectl
-
-\`\`\`bash
-aws eks update-kubeconfig --name my-cluster --region us-east-1
-kubectl get nodes  # verify connectivity
-\`\`\`
-
-## Step 3: Deploy K8s Workloads
-
-\`\`\`bash
-# Build K8s manifests
-chant build src/k8s/ --output manifests.yaml
-
-# Apply
-kubectl apply -f manifests.yaml
-\`\`\`
-
-### Key K8s composites for EKS
-
-\`\`\`typescript
-import {
-  NamespaceEnv,
-  AutoscaledService,
-  IrsaServiceAccount,
-  AlbIngress,
-  EbsStorageClass,
-  FluentBitAgent,
-  ExternalDnsAgent,
-} from "@intentius/chant-lexicon-k8s";
-
-// 1. Namespace with quotas and network isolation
-const ns = NamespaceEnv({
-  name: "prod",
-  cpuQuota: "16",
-  memoryQuota: "32Gi",
-  defaultCpuRequest: "100m",
-  defaultMemoryRequest: "128Mi",
-  defaultDenyIngress: true,
-});
-
-// 2. IRSA ServiceAccount (use IAM Role ARN from CloudFormation outputs)
-const irsa = IrsaServiceAccount({
-  name: "app-sa",
-  iamRoleArn: "arn:aws:iam::123456789012:role/app-role",  // from CF output
-  namespace: "prod",
-});
-
-// 3. Application with autoscaling
-const app = AutoscaledService({
-  name: "api",
-  image: "api:1.0",
-  port: 8080,
-  maxReplicas: 10,
-  cpuRequest: "200m",
-  memoryRequest: "256Mi",
-  namespace: "prod",
-});
-
-// 4. ALB Ingress (use ACM cert ARN from CloudFormation outputs)
-const ingress = AlbIngress({
-  name: "api-ingress",
-  hosts: [{ hostname: "api.example.com", paths: [{ path: "/", serviceName: "api", servicePort: 80 }] }],
-  certificateArn: "arn:aws:acm:us-east-1:123456789012:certificate/abc",  // from CF output
-  namespace: "prod",
-});
-
-// 5. Storage
-const storage = EbsStorageClass({ name: "gp3-encrypted", type: "gp3", encrypted: true });
-
-// 6. Observability
-const logging = FluentBitAgent({
-  logGroup: "/aws/eks/my-cluster/containers",
-  region: "us-east-1",
-  clusterName: "my-cluster",
-});
-
-// 7. DNS
-const dns = ExternalDnsAgent({
-  iamRoleArn: "arn:aws:iam::123456789012:role/external-dns-role",
-  domainFilters: ["example.com"],
-});
-\`\`\`
-
-## Step 4: Verify
-
-\`\`\`bash
-kubectl get pods -n prod
-kubectl get ingress -n prod
-kubectl logs -n amazon-cloudwatch -l app.kubernetes.io/name=fluent-bit
-\`\`\`
-
-## Cleanup
-
-\`\`\`bash
-# Delete K8s workloads first
-kubectl delete -f manifests.yaml
-
-# Then delete AWS infrastructure
-aws cloudformation delete-stack --stack-name my-eks-cluster
-aws cloudformation wait stack-delete-complete --stack-name my-eks-cluster
-\`\`\`
-
-## Cross-Lexicon Value Flow
-
-CloudFormation outputs flow into K8s composite props:
-
-| CloudFormation Output | K8s Composite Prop |
-|----------------------|-------------------|
-| App IAM Role ARN | \`IrsaServiceAccount.iamRoleArn\` |
-| ALB Controller Role ARN | \`IrsaServiceAccount.iamRoleArn\` (for ALB controller SA) |
-| ACM Certificate ARN | \`AlbIngress.certificateArn\` |
-| ExternalDNS Role ARN | \`ExternalDnsAgent.iamRoleArn\` |
-| EKS Cluster Name | \`FluentBitAgent.clusterName\`, \`AdotCollector.clusterName\` |
-| EFS Filesystem ID | \`EfsStorageClass.fileSystemId\` |
-
-## EKS Init Template
-
-Scaffold a dual-lexicon EKS project:
-
-\`\`\`bash
-chant init --lexicon aws --template eks
-\`\`\`
-
-This creates:
-- \`src/infra/\` — EKS cluster, node group, IAM (AWS lexicon)
-- \`src/k8s/\` — namespace, app, ingress, storage (K8s lexicon)
-- \`package.json\` with both \`@intentius/chant-lexicon-aws\` and \`@intentius/chant-lexicon-k8s\`
-`,
         triggers: [
           { type: "context", value: "eks" },
           { type: "context", value: "kubernetes" },
           { type: "context", value: "k8s-workloads" },
         ],
-        preConditions: [
-          "AWS CLI is installed and configured",
-          "chant CLI is installed",
-          "kubectl is installed",
-        ],
-        postConditions: [
-          "EKS cluster is running",
-          "K8s workloads are deployed",
-        ],
         parameters: [],
         examples: [
           {
             title: "Full EKS deployment",
-            description: "Deploy infrastructure and workloads end-to-end",
             input: "Set up a complete EKS environment with my API",
-            output: `# 1. Build and deploy infrastructure
-chant build src/infra/ --output infra.json
-aws cloudformation deploy --template-file infra.json --stack-name my-eks --capabilities CAPABILITY_NAMED_IAM
-
-# 2. Configure kubectl
-aws eks update-kubeconfig --name my-cluster
-
-# 3. Build and deploy workloads
-chant build src/k8s/ --output manifests.yaml
-kubectl apply -f manifests.yaml`,
+            output: "chant build src/infra/ --output infra.json && aws cloudformation deploy --template-file infra.json --stack-name my-eks --capabilities CAPABILITY_NAMED_IAM",
           },
         ],
       },
     ];
+
+    for (const skill of skillFiles) {
+      try {
+        const content = readFileSync(join(dir, "skills", skill.file), "utf-8");
+        skills.push({
+          name: skill.name,
+          description: skill.description,
+          content,
+          triggers: skill.triggers,
+          parameters: skill.parameters,
+          examples: skill.examples,
+        });
+      } catch { /* skip missing skills */ }
+    }
+
+    return skills;
   },
 
   completionProvider(ctx: CompletionContext): CompletionItem[] {