@kodaris/krubble-app-components 1.0.106 → 1.0.107

package/dist/krubble-app.bundled.js

@@ -5775,10 +5775,10 @@ let KRChatbot = class KRChatbot extends i$3 {
          */
         this._globalSkills = [];
         /**
-         * Latest results for the `/` composer menu: this instance's own org skills PLUS
-         * the global skills installed on it (both are invocable by code). A separate
-         * buffer from the two browse-tab lists so merging installed globals into the
-         * menu never leaks them into the "Your Org" tab.
+         * Latest results for the `/` composer menu — everything the current user can
+         * actually invoke, merged and role-filtered server-side by
+         * `/conversation/availableSkills`. A separate buffer from the two browse-tab lists
+         * so installed globals in the menu never leak into the "Your Org" tab.
          */
         this._invocableSkills = [];
         /**
@@ -6356,12 +6356,11 @@ let KRChatbot = class KRChatbot extends i$3 {
     }
     // --- Skills ---
     /**
-     * Search the Kodaris AI skills index and store the results in `_orgSkills`.
-     * The `/` menu and the browse dialog both call this; results are shared since
-     * the two are never open at once. Mirrors the backend's own skill search (BM25
-     * over name^3/description^2/instructions, active-only) so the menu ranks skills
-     * the way the model does. An empty query uses match_all — multi_match with an
-     * empty string matches nothing, so the "show everything" case needs it.
+     * Search the Kodaris AI skills index and store the results in `_orgSkills` — the
+     * browse dialog's "Your Org" tab. Mirrors the backend's own skill search (BM25
+     * over name^3/description^2/instructions, active-only). An empty query uses
+     * match_all — multi_match with an empty string matches nothing, so the "show
+     * everything" case needs it.
      *
      * Follows the kr-combo-box `_fetch` pattern: a request-id guard drops responses
      * that arrive out of order. `/aiskills/search` returns a raw OpenSearch response,
@@ -6441,107 +6440,52 @@ let KRChatbot = class KRChatbot extends i$3 {
         });
     }
     /**
-     * Search skills for the `/` composer menu into `_invocableSkills`: this instance's
-     * own org skills PLUS the global skills installed on it, since both are
-     * invocable by code. They come from two indexes (the local aiskills search and
-     * the registry search filtered client-side to enabled), so we fire both and
-     * concat — org skills first, then installed globals. Skill codes are unique
-     * across the two, so no dedup is needed. Kept out of `_orgSkills` so
-     * installed globals never leak into the browse dialog's "Your Org" tab.
-     * (Cross-list relevance ranking is a later concern; for now org skills lead.)
+     * Load the skills for the `/` composer menu into `_invocableSkills` from
+     * `/conversation/availableSkills` — this instance's own skills plus the installed
+     * global ones, already merged, role-filtered and ranked by the server. That's the
+     * same set the model sees via `list_skills`, so the menu can't offer a skill the
+     * chat would then refuse.
+     *
+     * Not the `aiskills` endpoints the browse dialog's Org tab uses: those require a
+     * skill-authoring role, which an ordinary chat user doesn't have.
+     *
+     * Request-id guard drops responses that arrive out of order (kr-combo-box `_fetch`
+     * pattern).
      */
     _searchInvocableSkills(query) {
         this._invocableSkillRequestId++;
         const requestId = this._invocableSkillRequestId;
-        // Same wildcard matching as _searchOrgSkills (see there for the rationale).
-        let must = { match_all: {} };
-        if (query.trim()) {
-            must = {
-                bool: {
-                    should: [
-                        {
-                            wildcard: {
-                                'name.raw': {
-                                    value: `*${query.trim().replace(/([*?\\])/g, '\\$1')}*`,
-                                    case_insensitive: true,
-                                }
-                            }
-                        },
-                        {
-                            wildcard: {
-                                'code.raw': {
-                                    value: `*${query.trim().replace(/([*?\\])/g, '\\$1')}*`,
-                                    case_insensitive: true,
-                                }
-                            }
-                        },
-                        {
-                            wildcard: {
-                                'description.raw': {
-                                    value: `*${query.trim().replace(/([*?\\])/g, '\\$1')}*`,
-                                    case_insensitive: true,
-                                }
-                            }
-                        },
-                    ],
-                    minimum_should_match: 1,
-                },
-            };
-        }
-        // Org skills — this instance's own catalog (globalPublished excluded).
-        const orgSearch = KRHttp.fetch({
-            url: '/api/system/opensearch/aiskills/search',
-            method: 'POST',
-            body: {
-                size: 100,
-                query: {
-                    bool: {
-                        must: [must],
-                        filter: [{ term: { active: true } }],
-                        must_not: [{ term: { globalPublished: true } }],
-                    },
-                },
-            },
-        })
-            .then((r) => r.json())
-            .then((res) => (res?.data?.hits?.hits || []).map((hit) => hit._source))
-            .catch((error) => {
-            console.error('kr-chatbot: invocable skill search failed', error);
-            return [];
-        });
-        // Installed globals — the registry catalog, kept only where enabled=true.
-        const globalSearch = KRHttp.fetch({
-            url: '/api/system/opensearch/aiskills/global/search',
+        KRHttp.fetch({
+            url: '/api/system/conversation/availableSkills',
             method: 'POST',
             body: { query: query.trim() },
         })
             .then((r) => r.json())
-            .then((res) => (res?.data || []).filter((s) => !!s.enabled))
-            .catch((error) => {
-            console.error('kr-chatbot: installed global skill search failed', error);
-            return [];
-        });
-        Promise.all([orgSearch, globalSearch]).then(([orgSkills, globalSkills]) => {
+            .then((res) => {
             // Ignore a stale response superseded by a newer search.
             if (requestId !== this._invocableSkillRequestId) {
                 return;
             }
-            this._invocableSkills = [...orgSkills, ...globalSkills];
+            this._invocableSkills = (res?.data || []);
+        })
+            .catch((error) => {
+            console.error('kr-chatbot: invocable skill search failed', error);
         });
     }
     /**
-     * Search the shared Kodaris global-skill registry into `_globalSkills`
-     * (the browse dialog's "Kodaris" tab). Unlike `/aiskills/search`,
-     * `/aiskills/global/search` returns a digested list
-     * (`data: [{ code, name, description, enabled }]`) already in `KRChatbotSkill`
-     * shape, so no `_source` lifting is needed. Only the browse dialog calls this
-     * (the `/` menu is org-only), so it isn't run per slash keystroke.
+     * Load the browse dialog's "Kodaris" tab into `_globalSkills` — the full Kodaris
+     * catalog, installed or not, each row carrying `enabled` = installed here.
+     *
+     * Uses `/conversation/globalSkillCatalog` rather than the `/aiskills/global/search`
+     * twin, which requires a skill-authoring role an ordinary chat user doesn't have.
+     * Both return the same catalog in `KRChatbotSkill` shape
+     * (`data: [{ code, name, description, enabled }]`), so no `_source` lifting is needed.
      */
     _searchGlobalSkills(query) {
         this._globalSkillRequestId++;
         const requestId = this._globalSkillRequestId;
         KRHttp.fetch({
-            url: '/api/system/opensearch/aiskills/global/search',
+            url: '/api/system/conversation/globalSkillCatalog',
             method: 'POST',
             body: { query: query.trim() },
         })