@kubbisec/ai-linux-arm64 0.1.3 → 0.1.4

package/bundled/skills/chat-mentions.d.ts

@@ -0,0 +1,27 @@
+import type { AutocompleteItem } from "@earendil-works/pi-tui";
+import type { KubbisecSkillEntry } from "./list-bundled-skills.js";
+export declare const SKILL_MENTION_TOKEN = "@skill";
+export declare const PLAN_MENTION_ALIASES: readonly ["@plan", "@planejar"];
+/** Same token rules as Pi CombinedAutocompleteProvider.extractAtPrefix. */
+export declare function extractAtPrefix(textBeforeCursor: string): string | null;
+/** KubbiSec: `@skill` may include a space and partial name (not only the last @ token). */
+export declare function extractSkillMentionPrefix(textBeforeCursor: string): string | null;
+export declare function parseSkillMentionPrefix(atPrefix: string | null): {
+    query: string;
+} | null;
+export declare function parsePlanMentionPrefix(atPrefix: string | null): {
+    query: string;
+} | null;
+export declare function filterSkillSuggestions(skills: KubbisecSkillEntry[], query: string): AutocompleteItem[];
+/** Pi expands `/skill:name` — map `@skill name` before submit. */
+export declare function transformAtSkillMentions(text: string): string;
+/** Map `@plan` / `@planejar` to `/mode:plan` before submit. */
+export declare function transformAtPlanMentions(text: string): string;
+/** Apply skill transform first, then plan (CHAT-004). */
+export declare function transformChatMentions(text: string): string;
+export declare function applySkillMentionCompletion(lines: string[], cursorLine: number, cursorCol: number, item: AutocompleteItem, prefix: string): {
+    lines: string[];
+    cursorLine: number;
+    cursorCol: number;
+};
+//# sourceMappingURL=chat-mentions.d.ts.map

package/bundled/skills/chat-mentions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-mentions.d.ts","sourceRoot":"","sources":["../../src/skills/chat-mentions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAEnE,eAAO,MAAM,mBAAmB,WAAW,CAAC;AAE5C,eAAO,MAAM,oBAAoB,iCAAkC,CAAC;AAiBpE,2EAA2E;AAC3E,wBAAgB,eAAe,CAAC,gBAAgB,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOvE;AAED,2FAA2F;AAC3F,wBAAgB,yBAAyB,CAAC,gBAAgB,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CASjF;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAKzF;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CASxF;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,kBAAkB,EAAE,EAC5B,KAAK,EAAE,MAAM,GACZ,gBAAgB,EAAE,CAcpB;AAED,kEAAkE;AAClE,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,+DAA+D;AAC/D,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAS5D;AAED,yDAAyD;AACzD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,EAAE,EACf,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,gBAAgB,EACtB,MAAM,EAAE,MAAM,GACb;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAe5D"}

package/bundled/skills/chat-mentions.js

@@ -0,0 +1,104 @@
+import { fuzzyFilter } from "@earendil-works/pi-tui";
+export const SKILL_MENTION_TOKEN = "@skill";
+export const PLAN_MENTION_ALIASES = ["@plan", "@planejar"];
+const PLAN_MENTION_TOKENS_LONGEST_FIRST = [...PLAN_MENTION_ALIASES].sort((a, b) => b.length - a.length);
+const PATH_DELIMITERS = new Set([" ", "\t", '"', "'", "="]);
+function findLastDelimiter(text) {
+    for (let i = text.length - 1; i >= 0; i -= 1) {
+        if (PATH_DELIMITERS.has(text[i] ?? "")) {
+            return i;
+        }
+    }
+    return -1;
+}
+/** Same token rules as Pi CombinedAutocompleteProvider.extractAtPrefix. */
+export function extractAtPrefix(textBeforeCursor) {
+    const lastDelimiterIndex = findLastDelimiter(textBeforeCursor);
+    const tokenStart = lastDelimiterIndex === -1 ? 0 : lastDelimiterIndex + 1;
+    if (textBeforeCursor[tokenStart] === "@") {
+        return textBeforeCursor.slice(tokenStart);
+    }
+    return null;
+}
+/** KubbiSec: `@skill` may include a space and partial name (not only the last @ token). */
+export function extractSkillMentionPrefix(textBeforeCursor) {
+    const idx = textBeforeCursor.lastIndexOf(SKILL_MENTION_TOKEN);
+    if (idx === -1)
+        return null;
+    if (idx > 0 && !PATH_DELIMITERS.has(textBeforeCursor[idx - 1] ?? "")) {
+        return null;
+    }
+    const slice = textBeforeCursor.slice(idx);
+    if (!parseSkillMentionPrefix(slice))
+        return null;
+    return slice;
+}
+export function parseSkillMentionPrefix(atPrefix) {
+    if (!atPrefix?.startsWith(SKILL_MENTION_TOKEN))
+        return null;
+    const tail = atPrefix.slice(SKILL_MENTION_TOKEN.length);
+    if (tail.length > 0 && !tail.startsWith(" "))
+        return null;
+    return { query: tail.startsWith(" ") ? tail.trimStart() : "" };
+}
+export function parsePlanMentionPrefix(atPrefix) {
+    if (!atPrefix)
+        return null;
+    for (const token of PLAN_MENTION_TOKENS_LONGEST_FIRST) {
+        if (!atPrefix.startsWith(token))
+            continue;
+        const tail = atPrefix.slice(token.length);
+        if (tail.length > 0 && !tail.startsWith(" "))
+            continue;
+        return { query: tail.startsWith(" ") ? tail.trimStart() : "" };
+    }
+    return null;
+}
+export function filterSkillSuggestions(skills, query) {
+    const items = skills.map((skill) => ({
+        value: skill.name,
+        label: skill.name,
+        description: skill.description,
+    }));
+    if (!query)
+        return items;
+    return fuzzyFilter(items, query, (item) => `${item.label} ${item.description ?? ""}`).map((item) => ({
+        value: item.value,
+        label: item.label,
+        description: item.description,
+    }));
+}
+/** Pi expands `/skill:name` — map `@skill name` before submit. */
+export function transformAtSkillMentions(text) {
+    return text.replace(/@skill\s+([^\s@/]+)/g, "/skill:$1");
+}
+/** Map `@plan` / `@planejar` to `/mode:plan` before submit. */
+export function transformAtPlanMentions(text) {
+    const tokenPattern = PLAN_MENTION_TOKENS_LONGEST_FIRST.map((t) => t.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("|");
+    const pattern = new RegExp(`(^|[\\s"'=])(${tokenPattern})(\\s[\\s\\S]*)?`, "g");
+    return text.replace(pattern, (_match, delim, _token, tail) => {
+        const query = tail ? tail.trimStart() : "";
+        return `${delim}/mode:plan${query ? ` ${query}` : ""}`;
+    });
+}
+/** Apply skill transform first, then plan (CHAT-004). */
+export function transformChatMentions(text) {
+    return transformAtPlanMentions(transformAtSkillMentions(text));
+}
+export function applySkillMentionCompletion(lines, cursorLine, cursorCol, item, prefix) {
+    const currentLine = lines[cursorLine] ?? "";
+    const beforePrefix = currentLine.slice(0, cursorCol - prefix.length);
+    const afterCursor = currentLine.slice(cursorCol);
+    const atIndex = beforePrefix.lastIndexOf(SKILL_MENTION_TOKEN);
+    const head = atIndex >= 0 ? beforePrefix.slice(0, atIndex) : beforePrefix;
+    const insertion = `${SKILL_MENTION_TOKEN} ${item.value} `;
+    const newLine = `${head}${insertion}${afterCursor}`;
+    const newLines = [...lines];
+    newLines[cursorLine] = newLine;
+    return {
+        lines: newLines,
+        cursorLine,
+        cursorCol: head.length + insertion.length,
+    };
+}
+//# sourceMappingURL=chat-mentions.js.map

package/bundled/skills/chat-mentions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-mentions.js","sourceRoot":"","sources":["../../src/skills/chat-mentions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAGrD,MAAM,CAAC,MAAM,mBAAmB,GAAG,QAAQ,CAAC;AAE5C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,OAAO,EAAE,WAAW,CAAU,CAAC;AAEpE,MAAM,iCAAiC,GAAG,CAAC,GAAG,oBAAoB,CAAC,CAAC,IAAI,CACtE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAC9B,CAAC;AAEF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAE5D,SAAS,iBAAiB,CAAC,IAAY;IACrC,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACvC,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,eAAe,CAAC,gBAAwB;IACtD,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,kBAAkB,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,GAAG,CAAC,CAAC;IAC1E,IAAI,gBAAgB,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC;QACzC,OAAO,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,yBAAyB,CAAC,gBAAwB;IAChE,MAAM,GAAG,GAAG,gBAAgB,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC;IAC9D,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACrE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAAuB;IAC7D,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,mBAAmB,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAuB;IAC5D,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,iCAAiC,EAAE,CAAC;QACtD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,SAAS;QAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACvD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,MAA4B,EAC5B,KAAa;IAEb,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnC,KAAK,EAAE,KAAK,CAAC,IAAI;QACjB,KAAK,EAAE,KAAK,CAAC,IAAI;QACjB,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC,CAAC;IACJ,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,CACvF,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACT,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC,CACH,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,OAAO,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,WAAW,CAAC,CAAC;AAC3D,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,MAAM,YAAY,GAAG,iCAAiC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/D,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CACzC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,gBAAgB,YAAY,kBAAkB,EAAE,GAAG,CAAC,CAAC;IAChF,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,KAAa,EAAE,MAAc,EAAE,IAAa,EAAE,EAAE;QACpF,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,OAAO,GAAG,KAAK,aAAa,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,OAAO,uBAAuB,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAe,EACf,UAAkB,EAClB,SAAiB,EACjB,IAAsB,EACtB,MAAc;IAEd,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAC5C,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IAC1E,MAAM,SAAS,GAAG,GAAG,mBAAmB,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC;IAC1D,MAAM,OAAO,GAAG,GAAG,IAAI,GAAG,SAAS,GAAG,WAAW,EAAE,CAAC;IACpD,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC;IAC/B,OAAO;QACL,KAAK,EAAE,QAAQ;QACf,UAAU;QACV,SAAS,EAAE,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM;KAC1C,CAAC;AACJ,CAAC"}

package/bundled/skills/chat-mentions.test.ts

@@ -0,0 +1,32 @@
+import { describe, expect, it } from "vitest";
+import {
+  parsePlanMentionPrefix,
+  PLAN_MENTION_ALIASES,
+  transformAtPlanMentions,
+  transformChatMentions,
+} from "./chat-mentions.js";
+
+describe("chat-mentions", () => {
+  it("exports plan mention aliases", () => {
+    expect(PLAN_MENTION_ALIASES).toEqual(["@plan", "@planejar"]);
+  });
+
+  it("parses @plan and @planejar prefixes", () => {
+    expect(parsePlanMentionPrefix("@plan")).toEqual({ query: "" });
+    expect(parsePlanMentionPrefix("@plan fix HIGH")).toEqual({ query: "fix HIGH" });
+    expect(parsePlanMentionPrefix("@planejar scope")).toEqual({ query: "scope" });
+    expect(parsePlanMentionPrefix("@planful")).toBeNull();
+  });
+
+  it("transforms @plan to /mode:plan", () => {
+    expect(transformAtPlanMentions("@plan fix HIGH SCA")).toBe("/mode:plan fix HIGH SCA");
+    expect(transformAtPlanMentions("@planejar foo")).toBe("/mode:plan foo");
+    expect(transformAtPlanMentions("@plan")).toBe("/mode:plan");
+    expect(transformAtPlanMentions("x@plan fix")).toBe("x@plan fix");
+  });
+
+  it("transforms combined skill and plan mentions (skill first)", () => {
+    expect(transformChatMentions("@skill naus @plan fix")).toBe("/skill:naus /mode:plan fix");
+    expect(transformChatMentions("@planejar x")).toBe("/mode:plan x");
+  });
+});

package/bundled/skills/chat-mentions.ts

@@ -0,0 +1,126 @@
+import type { AutocompleteItem } from "@earendil-works/pi-tui";
+import { fuzzyFilter } from "@earendil-works/pi-tui";
+import type { KubbisecSkillEntry } from "./list-bundled-skills.js";
+
+export const SKILL_MENTION_TOKEN = "@skill";
+
+export const PLAN_MENTION_ALIASES = ["@plan", "@planejar"] as const;
+
+const PLAN_MENTION_TOKENS_LONGEST_FIRST = [...PLAN_MENTION_ALIASES].sort(
+  (a, b) => b.length - a.length,
+);
+
+const PATH_DELIMITERS = new Set([" ", "\t", '"', "'", "="]);
+
+function findLastDelimiter(text: string): number {
+  for (let i = text.length - 1; i >= 0; i -= 1) {
+    if (PATH_DELIMITERS.has(text[i] ?? "")) {
+      return i;
+    }
+  }
+  return -1;
+}
+
+/** Same token rules as Pi CombinedAutocompleteProvider.extractAtPrefix. */
+export function extractAtPrefix(textBeforeCursor: string): string | null {
+  const lastDelimiterIndex = findLastDelimiter(textBeforeCursor);
+  const tokenStart = lastDelimiterIndex === -1 ? 0 : lastDelimiterIndex + 1;
+  if (textBeforeCursor[tokenStart] === "@") {
+    return textBeforeCursor.slice(tokenStart);
+  }
+  return null;
+}
+
+/** KubbiSec: `@skill` may include a space and partial name (not only the last @ token). */
+export function extractSkillMentionPrefix(textBeforeCursor: string): string | null {
+  const idx = textBeforeCursor.lastIndexOf(SKILL_MENTION_TOKEN);
+  if (idx === -1) return null;
+  if (idx > 0 && !PATH_DELIMITERS.has(textBeforeCursor[idx - 1] ?? "")) {
+    return null;
+  }
+  const slice = textBeforeCursor.slice(idx);
+  if (!parseSkillMentionPrefix(slice)) return null;
+  return slice;
+}
+
+export function parseSkillMentionPrefix(atPrefix: string | null): { query: string } | null {
+  if (!atPrefix?.startsWith(SKILL_MENTION_TOKEN)) return null;
+  const tail = atPrefix.slice(SKILL_MENTION_TOKEN.length);
+  if (tail.length > 0 && !tail.startsWith(" ")) return null;
+  return { query: tail.startsWith(" ") ? tail.trimStart() : "" };
+}
+
+export function parsePlanMentionPrefix(atPrefix: string | null): { query: string } | null {
+  if (!atPrefix) return null;
+  for (const token of PLAN_MENTION_TOKENS_LONGEST_FIRST) {
+    if (!atPrefix.startsWith(token)) continue;
+    const tail = atPrefix.slice(token.length);
+    if (tail.length > 0 && !tail.startsWith(" ")) continue;
+    return { query: tail.startsWith(" ") ? tail.trimStart() : "" };
+  }
+  return null;
+}
+
+export function filterSkillSuggestions(
+  skills: KubbisecSkillEntry[],
+  query: string,
+): AutocompleteItem[] {
+  const items = skills.map((skill) => ({
+    value: skill.name,
+    label: skill.name,
+    description: skill.description,
+  }));
+  if (!query) return items;
+  return fuzzyFilter(items, query, (item) => `${item.label} ${item.description ?? ""}`).map(
+    (item) => ({
+      value: item.value,
+      label: item.label,
+      description: item.description,
+    }),
+  );
+}
+
+/** Pi expands `/skill:name` — map `@skill name` before submit. */
+export function transformAtSkillMentions(text: string): string {
+  return text.replace(/@skill\s+([^\s@/]+)/g, "/skill:$1");
+}
+
+/** Map `@plan` / `@planejar` to `/mode:plan` before submit. */
+export function transformAtPlanMentions(text: string): string {
+  const tokenPattern = PLAN_MENTION_TOKENS_LONGEST_FIRST.map((t) =>
+    t.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"),
+  ).join("|");
+  const pattern = new RegExp(`(^|[\\s"'=])(${tokenPattern})(\\s[\\s\\S]*)?`, "g");
+  return text.replace(pattern, (_match, delim: string, _token: string, tail?: string) => {
+    const query = tail ? tail.trimStart() : "";
+    return `${delim}/mode:plan${query ? ` ${query}` : ""}`;
+  });
+}
+
+/** Apply skill transform first, then plan (CHAT-004). */
+export function transformChatMentions(text: string): string {
+  return transformAtPlanMentions(transformAtSkillMentions(text));
+}
+
+export function applySkillMentionCompletion(
+  lines: string[],
+  cursorLine: number,
+  cursorCol: number,
+  item: AutocompleteItem,
+  prefix: string,
+): { lines: string[]; cursorLine: number; cursorCol: number } {
+  const currentLine = lines[cursorLine] ?? "";
+  const beforePrefix = currentLine.slice(0, cursorCol - prefix.length);
+  const afterCursor = currentLine.slice(cursorCol);
+  const atIndex = beforePrefix.lastIndexOf(SKILL_MENTION_TOKEN);
+  const head = atIndex >= 0 ? beforePrefix.slice(0, atIndex) : beforePrefix;
+  const insertion = `${SKILL_MENTION_TOKEN} ${item.value} `;
+  const newLine = `${head}${insertion}${afterCursor}`;
+  const newLines = [...lines];
+  newLines[cursorLine] = newLine;
+  return {
+    lines: newLines,
+    cursorLine,
+    cursorCol: head.length + insertion.length,
+  };
+}

package/bundled/skills/github-local/SKILL.md

@@ -0,0 +1,16 @@
+---
+name: github-local
+description: Local gh/git, naus, and aspm on the machine running kbs chat — only when user passed --extended-context.
+---
+
+If extended context is disabled, tell the user to restart:
+
+`kbs chat --extended-context -p <project-id> -w /path/to/clone`
+
+## Tools
+
+- **GitHub:** `github_local_status`, `github_local_repo_summary`
+- **NAUS:** `naus_local_status`, `naus_local_validate`, `naus_local_plan`, `naus_local_run`
+- **ASPM:** `aspm_local_status`, `aspm_local_doctor`, `aspm_local_scan`, `aspm_local_upload`
+
+Cloud equivalents remain on the API (e.g. `trigger_run`, `naus_validate_yaml`, platform upload via CI).

package/bundled/skills/list-bundled-skills.d.ts

@@ -0,0 +1,7 @@
+export type KubbisecSkillEntry = {
+    name: string;
+    description: string;
+};
+/** Skills shipped under dist/skills (same dirs passed as Pi --skill). */
+export declare function listBundledKubbisecSkills(): KubbisecSkillEntry[];
+//# sourceMappingURL=list-bundled-skills.d.ts.map

package/bundled/skills/list-bundled-skills.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-bundled-skills.d.ts","sourceRoot":"","sources":["../../src/skills/list-bundled-skills.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAoBF,yEAAyE;AACzE,wBAAgB,yBAAyB,IAAI,kBAAkB,EAAE,CAiBhE"}

package/bundled/skills/list-bundled-skills.js

@@ -0,0 +1,44 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { resolveBundledDistRoot, resolveSnapshotBundledDistDir } from "../resolve-bundled-dist-root.js";
+function parseSkillFrontmatter(raw) {
+    const match = raw.match(/^---\r?\n([\s\S]*?)\r?\n---/);
+    if (!match)
+        return {};
+    const block = match[1];
+    const name = block.match(/^name:\s*(.+)$/m)?.[1]?.trim();
+    const description = block.match(/^description:\s*(.+)$/m)?.[1]?.trim();
+    return { name, description };
+}
+function resolveSkillsDir() {
+    const distDir = path.join(resolveBundledDistRoot(), "skills");
+    if (fs.existsSync(distDir))
+        return distDir;
+    const entryDir = path.dirname(resolveSnapshotBundledDistDir());
+    const srcDir = path.join(entryDir, "src/skills");
+    if (fs.existsSync(srcDir))
+        return srcDir;
+    return null;
+}
+/** Skills shipped under dist/skills (same dirs passed as Pi --skill). */
+export function listBundledKubbisecSkills() {
+    const skillsDir = resolveSkillsDir();
+    if (!skillsDir)
+        return [];
+    const entries = [];
+    for (const dir of fs.readdirSync(skillsDir, { withFileTypes: true })) {
+        if (!dir.isDirectory())
+            continue;
+        const skillMd = path.join(skillsDir, dir.name, "SKILL.md");
+        if (!fs.existsSync(skillMd))
+            continue;
+        const raw = fs.readFileSync(skillMd, "utf8");
+        const meta = parseSkillFrontmatter(raw);
+        entries.push({
+            name: meta.name?.trim() || dir.name,
+            description: meta.description?.trim() || dir.name,
+        });
+    }
+    return entries.sort((a, b) => a.name.localeCompare(b.name));
+}
+//# sourceMappingURL=list-bundled-skills.js.map

package/bundled/skills/list-bundled-skills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-bundled-skills.js","sourceRoot":"","sources":["../../src/skills/list-bundled-skills.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,sBAAsB,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAOxG,SAAS,qBAAqB,CAAC,GAAW;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IACzD,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IACvE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,gBAAgB;IACvB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC9D,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,6BAA6B,EAAE,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACjD,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACzC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,yBAAyB;IACvC,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;IACrC,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IAE1B,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACrE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE;YAAE,SAAS;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC3D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,SAAS;QACtC,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,IAAI;YACnC,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,IAAI;SAClD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9D,CAAC"}

package/bundled/skills/list-bundled-skills.ts

@@ -0,0 +1,46 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { resolveBundledDistRoot, resolveSnapshotBundledDistDir } from "../resolve-bundled-dist-root.js";
+
+export type KubbisecSkillEntry = {
+  name: string;
+  description: string;
+};
+
+function parseSkillFrontmatter(raw: string): { name?: string; description?: string } {
+  const match = raw.match(/^---\r?\n([\s\S]*?)\r?\n---/);
+  if (!match) return {};
+  const block = match[1];
+  const name = block.match(/^name:\s*(.+)$/m)?.[1]?.trim();
+  const description = block.match(/^description:\s*(.+)$/m)?.[1]?.trim();
+  return { name, description };
+}
+
+function resolveSkillsDir(): string | null {
+  const distDir = path.join(resolveBundledDistRoot(), "skills");
+  if (fs.existsSync(distDir)) return distDir;
+  const entryDir = path.dirname(resolveSnapshotBundledDistDir());
+  const srcDir = path.join(entryDir, "src/skills");
+  if (fs.existsSync(srcDir)) return srcDir;
+  return null;
+}
+
+/** Skills shipped under dist/skills (same dirs passed as Pi --skill). */
+export function listBundledKubbisecSkills(): KubbisecSkillEntry[] {
+  const skillsDir = resolveSkillsDir();
+  if (!skillsDir) return [];
+
+  const entries: KubbisecSkillEntry[] = [];
+  for (const dir of fs.readdirSync(skillsDir, { withFileTypes: true })) {
+    if (!dir.isDirectory()) continue;
+    const skillMd = path.join(skillsDir, dir.name, "SKILL.md");
+    if (!fs.existsSync(skillMd)) continue;
+    const raw = fs.readFileSync(skillMd, "utf8");
+    const meta = parseSkillFrontmatter(raw);
+    entries.push({
+      name: meta.name?.trim() || dir.name,
+      description: meta.description?.trim() || dir.name,
+    });
+  }
+  return entries.sort((a, b) => a.name.localeCompare(b.name));
+}

package/bundled/skills/naus-pipelines/SKILL.md

@@ -0,0 +1,31 @@
+---
+name: naus-pipelines
+description: NAUS CI/CD — YAML, validação @naus/validation, runners e jobs ASPM no KubbiSec.
+---
+
+## Fluxo na plataforma (cloud)
+
+1. `naus_pipeline_docs` — 20 secções web (paridade `kubbisec://naus/*`) + runner-management + validation.
+2. `naus_schema_overview` — campos e kinds suportados.
+3. `naus_validate_yaml` — validar candidato antes de persistir.
+4. `set_editor_yaml` (preview) → `set_pipeline_yaml` (bound) → `trigger_run` → `get_run_logs_excerpt`.
+
+## Fluxo local (`kbs chat --extended-context -w <repo>`)
+
+- `naus_local_status` — `naus` no PATH.
+- `naus_local_validate` — `naus validate <path>` no workspace.
+- `naus_local_plan` — `naus plan <path>` (text ou mermaid).
+- `naus_local_run` — `naus run <path>` (até 15 min; preferir `trigger_run` em CI cloud).
+
+**Não** invocar `naus register`, `naus start` ou `naus daemon` via chat — processos persistentes; ver `naus_pipeline_docs` / runner-management.
+
+## Kinds ASPM
+
+- `kind: aspm` + `tool` (trivy, gitleaks, syft, osv, semgrep, sonar, nmap, skipfish).
+- `kind: aspm_matrix` — `parallel` com várias tools.
+- `kind: aspm_gate` — políticas após upload.
+- `kind: docker` — build/registry; `aspm.tool: trivy` para scan de imagem + gate.
+
+## Scanners locais
+
+Para `aspm scan` / `aspm upload` no host, skill `aspm-platform` e `aspm_local_*`.

package/bundled/skills/remediation/SKILL.md

@@ -0,0 +1,12 @@
+---
+name: remediation
+description: Apply minimal security fixes from KubbiSec findings; clone via API credentials (EnvPack GITHUB_TOKEN + org GitHub); auto mode opens PR with gh+git non-interactive.
+---
+
+Fix the finding using the cloned repository workspace.
+
+1. Resolve repo: `kubsec_github_repository` (token from EnvPack `GITHUB_TOKEN` / `GH_TOKEN` overrides org app token when set).
+2. Apply minimal code changes from real evidence only — no invented CVEs or paths.
+3. Auto-PR (`kbs fix --mode auto`): commit, `git push`, `gh pr create` with `GIT_TERMINAL_PROMPT=0` and `GH_PROMPT_DISABLED=1`.
+
+For local machine context in chat, user must run `kbs chat --extended-context` then `github_local_status`.

package/bundled/skills/scanner-gitleaks/SKILL.md

@@ -0,0 +1,10 @@
+---
+name: scanner-gitleaks
+description: Gitleaks — deteção de secrets em repositórios Git.
+---
+
+Chame `security_scanner_playbook(scanner="gitleaks", platform?, topic?)`.
+
+Relatório: `gitleaks-report.json`. Upload: `-s gitleaks`.
+
+NAUS: `kind: aspm` com `tool: gitleaks` ou entrada em `aspm_matrix.parallel`.

package/bundled/skills/scanner-nmap/SKILL.md

@@ -0,0 +1,10 @@
+---
+name: scanner-nmap
+description: Nmap — scan de rede e portas (XML para ASPM).
+---
+
+Chame `security_scanner_playbook(scanner="nmap", platform?, topic?)`.
+
+Relatório: `nmap-report.xml` (`-oX`). Upload: `-s nmap`.
+
+NAUS: `kind: aspm` com `tool: nmap` e `target` da rede/host.

package/bundled/skills/scanner-osv/SKILL.md

@@ -0,0 +1,10 @@
+---
+name: scanner-osv
+description: OSV-Scanner — advisories em dependências e lockfiles.
+---
+
+Chame `security_scanner_playbook(scanner="osv", platform?, topic?)`.
+
+Relatório: `osv-report.json`. Upload: `-s osv`.
+
+NAUS: `kind: aspm` com `tool: osv`.

package/bundled/skills/scanner-semgrep/SKILL.md

@@ -0,0 +1,10 @@
+---
+name: scanner-semgrep
+description: Semgrep — SAST com regras e políticas customizadas.
+---
+
+Chame `security_scanner_playbook(scanner="semgrep", platform?, topic?)`.
+
+Relatório: `semgrep-report.json`. Upload: `-s semgrep`.
+
+NAUS: `kind: aspm` com `tool: semgrep`; imagem padrão `semgrep/semgrep:latest`.

package/bundled/skills/scanner-skipfish/SKILL.md

@@ -0,0 +1,10 @@
+---
+name: scanner-skipfish
+description: Skipfish — DAST web (crawling/fuzzing).
+---
+
+Chame `security_scanner_playbook(scanner="skipfish", platform?, topic?)`.
+
+Relatório: `skipfish-report.json`. Upload: `-s skipfish`.
+
+NAUS: `kind: aspm` com `tool: skipfish` e URL em `target`.

package/bundled/skills/scanner-sonar/SKILL.md

@@ -0,0 +1,10 @@
+---
+name: scanner-sonar
+description: SonarQube — SAST via export JSON da API Sonar.
+---
+
+Chame `security_scanner_playbook(scanner="sonar", platform?, topic?)`.
+
+Relatório: `sonar-report.json` (export API). Upload: `-s sonar`.
+
+NAUS: `kind: aspm` com `tool: sonar`, frequentemente `mode: upload` após export.

package/bundled/skills/scanner-syft/SKILL.md

@@ -0,0 +1,10 @@
+---
+name: scanner-syft
+description: Syft — geração de SBOM (CycloneDX/SPDX) para ASPM.
+---
+
+Chame `security_scanner_playbook(scanner="syft", platform?, topic?)`.
+
+Relatório: `sbom.json` (cyclonedx-json). Upload: `-s syft`.
+
+NAUS: `kind: aspm` com `tool: syft`; matrix com `format: cyclonedx-json`.

package/bundled/skills/scanner-trivy/SKILL.md

@@ -0,0 +1,10 @@
+---
+name: scanner-trivy
+description: Trivy — SCA, imagens Docker, IaC; upload ASPM e job NAUS.
+---
+
+Chame `security_scanner_playbook(scanner="trivy", platform="linux"|"macos"|"windows", topic="install"|"scan"|"upload"|"naus"|"formats"|"all")`.
+
+Relatório típico: `trivy-report.json`. Upload: `aspm upload trivy-report.json -s trivy`.
+
+NAUS: `kind: aspm` com `tool: trivy`; preset `kind: docker` com `aspm.tool: trivy` e gate.

package/bundled/skills/sec-brainstorm/SKILL.md

@@ -0,0 +1,74 @@
+---
+name: sec-brainstorm
+description: "Before any implementation: explore context, threat model, design; write .kbs/specs/*.md; HARD-GATE until user approves."
+metadata:
+  kubbisec:
+    category: workflow
+    requires: [session-questionnaire.json]
+    produces: kbs-spec
+---
+
+# sec-brainstorm — Design + threat model (KubbiSec)
+
+**Announce:** `Using sec-brainstorm to explore design and write runtime spec.`
+
+<HARD-GATE>
+Do NOT invoke implementation actions (edit/write/bash that mutates repo), domain skills that change code, or claim work complete until:
+
+1. A runtime spec exists at `.kbs/specs/*.md`, AND
+2. The user has explicitly approved it (`approved` / `aprovado`).
+
+Read-only tools (read, grep, ls) are always allowed.
+</HARD-GATE>
+
+## When to use
+
+- New feature, refactor, or security policy change in chat
+- `/mode:plan` or `@plan` with no approved runtime spec yet
+- After `sec-clarify` (or equivalent structured brief)
+
+## When NOT to use
+
+- CVE remediation in `kbs fix` harness
+- Trivial typo-only changes (user must confirm below HARD-GATE threshold in writing)
+- Mid-implementation — use domain skills instead
+
+## Process
+
+1. **Explore context** — read relevant repo paths, `docs/`, recent git log (read-only)
+2. **Clarifying questions** — one at a time, max 5 after clarify if gaps remain
+3. **Propose 2–3 approaches** — security trade-offs; recommend one
+4. **Present design** — section by section; user confirms or revises
+5. **Threat model** — STRIDE-lite table (min 3 rows for auth/network/deps)
+6. **Write spec** — `.kbs/specs/YYYY-MM-DD-<slug>.md` with `status: draft`
+7. **Self-review** — fix placeholders, contradictions inline
+8. **Request approval** — "Revise o arquivo ou responda `approved` para liberar implementação."
+9. **Handoff** — on approval, invoke **`sec-plan` only** (never direct implementation)
+
+## Runtime spec template
+
+Write `.kbs/specs/YYYY-MM-DD-<slug>.md` with these sections:
+
+- **Metadata** — yaml block: `id`, `status: draft`, `created`, `orgId`, `projectId`
+- **Problem statement**
+- **Threat model (required)** — table: Threat | STRIDE | Mitigation in design | Verification
+- **Design** — recommended approach
+- **Out of scope**
+- **Approval** — checkbox for user `approved` / `aprovado`
+
+Slug rules: `YYYY-MM-DD-<kebab-slug>.md`, max 48 chars, `[a-z0-9-]` only.
+
+## Threat model must address
+
+- Injection, authz, secrets handling, supply chain (deps), logging sensitive data
+- Do not propose storing credentials in repo or `.kbs/`
+
+## Anti-patterns
+
+- Skipping HARD-GATE for "simple" changes without user written confirmation
+- Writing app code before `approved`
+- Conflicts with `docs/kubbisec-ai/specs/` — prefer repo product specs as platform truth; note conflicts in spec
+
+---
+
+*Adapted from Superpowers (obra/superpowers) — MIT License.*