@kodaris/krubble-app-components 1.0.106 → 1.0.107

package/dist/krubble-app.umd.js

@@ -5778,10 +5778,10 @@
            */
           this._globalSkills = [];
           /**
-           * Latest results for the `/` composer menu: this instance's own org skills PLUS
-           * the global skills installed on it (both are invocable by code). A separate
-           * buffer from the two browse-tab lists so merging installed globals into the
-           * menu never leaks them into the "Your Org" tab.
+           * Latest results for the `/` composer menu — everything the current user can
+           * actually invoke, merged and role-filtered server-side by
+           * `/conversation/availableSkills`. A separate buffer from the two browse-tab lists
+           * so installed globals in the menu never leak into the "Your Org" tab.
            */
           this._invocableSkills = [];
           /**
@@ -6359,12 +6359,11 @@
       }
       // --- Skills ---
       /**
-       * Search the Kodaris AI skills index and store the results in `_orgSkills`.
-       * The `/` menu and the browse dialog both call this; results are shared since
-       * the two are never open at once. Mirrors the backend's own skill search (BM25
-       * over name^3/description^2/instructions, active-only) so the menu ranks skills
-       * the way the model does. An empty query uses match_all — multi_match with an
-       * empty string matches nothing, so the "show everything" case needs it.
+       * Search the Kodaris AI skills index and store the results in `_orgSkills` — the
+       * browse dialog's "Your Org" tab. Mirrors the backend's own skill search (BM25
+       * over name^3/description^2/instructions, active-only). An empty query uses
+       * match_all — multi_match with an empty string matches nothing, so the "show
+       * everything" case needs it.
        *
        * Follows the kr-combo-box `_fetch` pattern: a request-id guard drops responses
        * that arrive out of order. `/aiskills/search` returns a raw OpenSearch response,
@@ -6444,107 +6443,52 @@
           });
       }
       /**
-       * Search skills for the `/` composer menu into `_invocableSkills`: this instance's
-       * own org skills PLUS the global skills installed on it, since both are
-       * invocable by code. They come from two indexes (the local aiskills search and
-       * the registry search filtered client-side to enabled), so we fire both and
-       * concat — org skills first, then installed globals. Skill codes are unique
-       * across the two, so no dedup is needed. Kept out of `_orgSkills` so
-       * installed globals never leak into the browse dialog's "Your Org" tab.
-       * (Cross-list relevance ranking is a later concern; for now org skills lead.)
+       * Load the skills for the `/` composer menu into `_invocableSkills` from
+       * `/conversation/availableSkills` — this instance's own skills plus the installed
+       * global ones, already merged, role-filtered and ranked by the server. That's the
+       * same set the model sees via `list_skills`, so the menu can't offer a skill the
+       * chat would then refuse.
+       *
+       * Not the `aiskills` endpoints the browse dialog's Org tab uses: those require a
+       * skill-authoring role, which an ordinary chat user doesn't have.
+       *
+       * Request-id guard drops responses that arrive out of order (kr-combo-box `_fetch`
+       * pattern).
        */
       _searchInvocableSkills(query) {
           this._invocableSkillRequestId++;
           const requestId = this._invocableSkillRequestId;
-          // Same wildcard matching as _searchOrgSkills (see there for the rationale).
-          let must = { match_all: {} };
-          if (query.trim()) {
-              must = {
-                  bool: {
-                      should: [
-                          {
-                              wildcard: {
-                                  'name.raw': {
-                                      value: `*${query.trim().replace(/([*?\\])/g, '\\$1')}*`,
-                                      case_insensitive: true,
-                                  }
-                              }
-                          },
-                          {
-                              wildcard: {
-                                  'code.raw': {
-                                      value: `*${query.trim().replace(/([*?\\])/g, '\\$1')}*`,
-                                      case_insensitive: true,
-                                  }
-                              }
-                          },
-                          {
-                              wildcard: {
-                                  'description.raw': {
-                                      value: `*${query.trim().replace(/([*?\\])/g, '\\$1')}*`,
-                                      case_insensitive: true,
-                                  }
-                              }
-                          },
-                      ],
-                      minimum_should_match: 1,
-                  },
-              };
-          }
-          // Org skills — this instance's own catalog (globalPublished excluded).
-          const orgSearch = krubbleHttp.Http.fetch({
-              url: '/api/system/opensearch/aiskills/search',
-              method: 'POST',
-              body: {
-                  size: 100,
-                  query: {
-                      bool: {
-                          must: [must],
-                          filter: [{ term: { active: true } }],
-                          must_not: [{ term: { globalPublished: true } }],
-                      },
-                  },
-              },
-          })
-              .then((r) => r.json())
-              .then((res) => (res?.data?.hits?.hits || []).map((hit) => hit._source))
-              .catch((error) => {
-              console.error('kr-chatbot: invocable skill search failed', error);
-              return [];
-          });
-          // Installed globals — the registry catalog, kept only where enabled=true.
-          const globalSearch = krubbleHttp.Http.fetch({
-              url: '/api/system/opensearch/aiskills/global/search',
+          krubbleHttp.Http.fetch({
+              url: '/api/system/conversation/availableSkills',
               method: 'POST',
               body: { query: query.trim() },
           })
               .then((r) => r.json())
-              .then((res) => (res?.data || []).filter((s) => !!s.enabled))
-              .catch((error) => {
-              console.error('kr-chatbot: installed global skill search failed', error);
-              return [];
-          });
-          Promise.all([orgSearch, globalSearch]).then(([orgSkills, globalSkills]) => {
+              .then((res) => {
               // Ignore a stale response superseded by a newer search.
               if (requestId !== this._invocableSkillRequestId) {
                   return;
               }
-              this._invocableSkills = [...orgSkills, ...globalSkills];
+              this._invocableSkills = (res?.data || []);
+          })
+              .catch((error) => {
+              console.error('kr-chatbot: invocable skill search failed', error);
           });
       }
       /**
-       * Search the shared Kodaris global-skill registry into `_globalSkills`
-       * (the browse dialog's "Kodaris" tab). Unlike `/aiskills/search`,
-       * `/aiskills/global/search` returns a digested list
-       * (`data: [{ code, name, description, enabled }]`) already in `KRChatbotSkill`
-       * shape, so no `_source` lifting is needed. Only the browse dialog calls this
-       * (the `/` menu is org-only), so it isn't run per slash keystroke.
+       * Load the browse dialog's "Kodaris" tab into `_globalSkills` — the full Kodaris
+       * catalog, installed or not, each row carrying `enabled` = installed here.
+       *
+       * Uses `/conversation/globalSkillCatalog` rather than the `/aiskills/global/search`
+       * twin, which requires a skill-authoring role an ordinary chat user doesn't have.
+       * Both return the same catalog in `KRChatbotSkill` shape
+       * (`data: [{ code, name, description, enabled }]`), so no `_source` lifting is needed.
        */
       _searchGlobalSkills(query) {
           this._globalSkillRequestId++;
           const requestId = this._globalSkillRequestId;
           krubbleHttp.Http.fetch({
-              url: '/api/system/opensearch/aiskills/global/search',
+              url: '/api/system/conversation/globalSkillCatalog',
               method: 'POST',
               body: { query: query.trim() },
           })