pi-skill-shiori 0.2.1 → 0.3.1

package/CHANGELOG.md

@@ -0,0 +1,59 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+This project follows semantic versioning.
+
+## [0.3.1] - 2026-06-19
+
+### Added
+
+- `SECURITY.md` with vulnerability reporting guidance and Pi package security notes.
+- `CHANGELOG.md` for version history.
+
+### Changed
+
+- README links to `SECURITY.md` and `CHANGELOG.md`.
+- npm package files now include `SECURITY.md` and `CHANGELOG.md`.
+
+## [0.3.0] - 2026-06-08
+
+### Changed
+
+- Shiori slash commands use UI flows for doctor, bootstrap, reload, recommend, and stats.
+
+## [0.2.1] - 2026-06-02
+
+### Changed
+
+- Patch release after the recommendation flow updates in `0.2.0`.
+
+## [0.2.0] - 2026-06-02
+
+### Added
+
+- Recommendation-first `/shiori:recommend` flow with query expansion and agent task queuing.
+- Pre-loading of multiple recommended skills in one agent turn.
+- Planning-intent handling that returns a dev-plan intake template without dumping skill bodies.
+
+### Fixed
+
+- Skill retrieval for block descriptions and Japanese queries.
+
+### Changed
+
+- README install snippets aligned with the published package version.
+
+## [0.1.1] - 2026-05-26
+
+### Added
+
+- npm publish workflow and auto-release on merge to `main`.
+- npm publish commands and unpinned install examples in README.
+
+## [0.1.0] - 2026-05-24
+
+### Added
+
+- Initial Pi Skill Shiori release.
+- Zero-Catalog mode, policy-based retrieval, SQLite FTS indexing, and on-demand `shiori_load_skill` tool.

package/README.md

@@ -15,7 +15,7 @@ It is built for vaults or projects with many Agent Skills where the default cata
 
 ## Status
 
-`0.2.1` is an early working release. It is useful for local Pi workflows, but the prompt-boundary suppression logic is intentionally conservative: if Shiori cannot safely recognize a catalog boundary, it leaves the prompt untouched and warns instead of deleting too much.
+`0.3.1` is an early working release. It is useful for local Pi workflows, but the prompt-boundary suppression logic is intentionally conservative: if Shiori cannot safely recognize a catalog boundary, it leaves the prompt untouched and warns instead of deleting too much.
 
 ## Requirements
 
@@ -37,7 +37,7 @@ Pi core packages are peer dependencies and should be supplied by the Pi runtime:
 After the package is published to npm:
 
 ```bash
-pi install npm:pi-skill-shiori@0.2.1
+pi install npm:pi-skill-shiori@0.3.1
 ```
 
 Without a version pin:
@@ -51,7 +51,7 @@ pi install npm:pi-skill-shiori
 Use `-l` to write the package to the current project’s `.pi/settings.json`:
 
 ```bash
-pi install -l npm:pi-skill-shiori@0.2.1
+pi install -l npm:pi-skill-shiori@0.3.1
 ```
 
 Without a version pin:
@@ -65,7 +65,7 @@ Equivalent pinned manual `.pi/settings.json` entry:
 ```json
 {
   "packages": [
-    "npm:pi-skill-shiori@0.2.1"
+    "npm:pi-skill-shiori@0.3.1"
   ]
 }
 ```
@@ -83,7 +83,7 @@ Equivalent unpinned manual `.pi/settings.json` entry:
 ### Global install from GitHub
 
 ```bash
-pi install git:github.com/eiei114/pi-skill-shiori@v0.2.1
+pi install git:github.com/eiei114/pi-skill-shiori@v0.3.1
 ```
 
 Without a tag pin:
@@ -95,7 +95,7 @@ pi install git:github.com/eiei114/pi-skill-shiori
 ### Project-local install from GitHub
 
 ```bash
-pi install -l git:github.com/eiei114/pi-skill-shiori@v0.2.1
+pi install -l git:github.com/eiei114/pi-skill-shiori@v0.3.1
 ```
 
 Without a tag pin:
@@ -184,11 +184,8 @@ This writes a generated review file next to `.pi/skill-shiori.yml`. Review it be
 |---|---|
 | `/shiori:doctor` | Show policy path, inventory count, retrieval backend, suppression status, and code marker. |
 | `/shiori:bootstrap` | Generate a review draft policy from discovered skill descriptions. |
-| `/shiori:reload` | Rebuild Shiori’s skill inventory and retrieval index. |
-| `/shiori:reload --runtime` | Rebuild Shiori and ask Pi to reload runtime resources. Code changes may still need full restart. |
-| `/shiori:recommend <text>` | Pre-load up to 5 matching skills and queue the task for the agent in one shot. Planning phrases (e.g. `計画を立てたい`) return the dev-plan intake template without dumping SKILL bodies. |
-| `/shiori:recommend` | Ask what you need help with, then pre-load matches and queue for the agent (Pi UI input). |
-| `/shiori:recommend --pick <text>` | Recommend skills only (compact list + manual pick UI, no agent turn). |
+| `/shiori:reload` | Ask what to reload, then rebuild Shiori’s skill inventory and optionally ask Pi to reload runtime resources. Code changes may still need full restart. |
+| `/shiori:recommend` | Ask what you need help with, then either pre-load matches and queue the task for the agent or review recommendations only. Planning phrases (e.g. `計画を立てたい`) return the dev-plan intake template without dumping SKILL bodies. |
 | `/shiori:stats` | Show operational counters. |
 
 ## Tool
@@ -270,6 +267,8 @@ npm whoami
 npm run release:npm
 ```
 
+For version history, see [`CHANGELOG.md`](CHANGELOG.md).
+
 For a first-time publish, login first:
 
 ```bash
@@ -279,7 +278,7 @@ npm login
 After publishing, verify the Pi install path:
 
 ```bash
-pi install npm:pi-skill-shiori@0.2.1
+pi install npm:pi-skill-shiori@0.3.1
 pi install npm:pi-skill-shiori
 pi list
 /shiori:doctor
@@ -293,12 +292,14 @@ git push --follow-tags
 npm run release:npm
 ```
 
-## Security notes
+## Security
 
 Pi packages execute local code with the same permissions as Pi. Review third-party packages before installing them.
 
 Shiori itself does not sandbox skills. It only changes how skill candidates are discovered and loaded. A loaded skill can still instruct the model to run tools, edit files, or execute commands according to your Pi/tool permissions.
 
+For vulnerability reporting, see [`SECURITY.md`](SECURITY.md).
+
 ## License
 
 MIT

package/SECURITY.md

@@ -0,0 +1,22 @@
+# Security Policy
+
+## Supported versions
+
+Only the latest published version receives security fixes.
+
+## Reporting a vulnerability
+
+Open a private security advisory on GitHub, or contact the maintainer by the preferred channel listed in the repository profile.
+
+Please include:
+
+- Affected version
+- Impact
+- Reproduction steps
+- Suggested fix, if known
+
+## Pi package security note
+
+Pi packages can execute code with local user permissions. Review installed packages and avoid running untrusted extensions.
+
+Pi Skill Shiori does not sandbox skills. It changes how skill candidates are discovered and loaded. A loaded skill can still instruct the model to run tools, edit files, or execute commands according to your Pi and tool permissions.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-skill-shiori",
-  "version": "0.2.1",
+  "version": "0.3.1",
   "description": "Pi extension that reduces Agent Skill catalog tokens with policy-based skill retrieval and on-demand skill loading.",
   "type": "module",
   "license": "MIT",
@@ -24,6 +24,8 @@
   "files": [
     "README.md",
     "LICENSE",
+    "SECURITY.md",
+    "CHANGELOG.md",
     "src"
   ],
   "scripts": {

package/src/index.ts

@@ -27,6 +27,11 @@ interface ShioriLoadDetails {
 
 const SHIORI_CODE_MARKER = "prompt-boundary-v3";
 const RECOMMEND_MAX_CANDIDATES = 5;
+const RELOAD_INVENTORY_ONLY = "Shiori inventory only";
+const RELOAD_WITH_RUNTIME = "Shiori inventory + Pi runtime resources";
+const RECOMMEND_QUEUE_TASK = "Pre-load matches and queue task for agent";
+const RECOMMEND_REVIEW_ONLY = "Review recommendations only";
+const CANCEL_CHOICE = "Cancel";
 
 export default function piSkillShiori(pi: ExtensionAPI) {
   let index: SkillIndex | undefined;
@@ -62,6 +67,11 @@ export default function piSkillShiori(pi: ExtensionAPI) {
     await reload(ctx.cwd);
   });
 
+  pi.on("session_shutdown", () => {
+    index?.close?.();
+    index = undefined;
+  });
+
   pi.on("input", async (event) => {
     if (/^\/(skill:|shiori:)/.test(event.text.trim())) {
       stats.explicitInvocationCount += 1;
@@ -196,9 +206,23 @@ export default function piSkillShiori(pi: ExtensionAPI) {
 
   pi.registerCommand("shiori:reload", {
     description: "Rebuild Pi Skill Shiori inventory and optional Pi runtime resources",
-    handler: async (args, ctx) => {
+    handler: async (_args, ctx) => {
+      let target = RELOAD_INVENTORY_ONLY;
+      if (ctx.hasUI) {
+        const choice = await ctx.ui.select("Reload what?", [
+          RELOAD_INVENTORY_ONLY,
+          RELOAD_WITH_RUNTIME,
+          CANCEL_CHOICE,
+        ]);
+        if (!choice || choice === CANCEL_CHOICE) {
+          ctx.ui.notify("Reload cancelled.", "info");
+          return;
+        }
+        target = choice;
+      }
+
       await reload(ctx.cwd);
-      if (args.includes("--runtime")) {
+      if (target === RELOAD_WITH_RUNTIME) {
         await ctx.reload();
         return;
       }
@@ -208,35 +232,39 @@ export default function piSkillShiori(pi: ExtensionAPI) {
 
   pi.registerCommand("shiori:recommend", {
     description: "Recommend Agent Skills for a natural-language task and queue it for the agent",
-    handler: async (args, ctx) => {
+    handler: async (_args, ctx) => {
       const current = await ensureIndex(ctx.cwd);
-      const pickOnly = args.trimStart().startsWith("--pick");
-      let query = (pickOnly ? args.replace(/^--pick\s*/, "") : args).trim();
+      if (!ctx.hasUI) {
+        ctx.ui.notify("Run /shiori:recommend in the Pi UI to enter a task description.", "warning");
+        return;
+      }
 
+      const input = await ctx.ui.input(
+        "What do you want help with?",
+        "Describe your task in natural language…",
+      );
+      const query = input?.trim();
       if (!query) {
-        if (!ctx.hasUI) {
-          ctx.ui.notify(
-            "Provide a task description: /shiori:recommend <what you want to do>",
-            "warning",
-          );
-          return;
-        }
-        const input = await ctx.ui.input(
-          "What do you want help with?",
-          "Describe your task in natural language…",
-        );
-        if (!input?.trim()) {
-          ctx.ui.notify("Recommendation cancelled.", "info");
-          return;
-        }
-        query = input.trim();
+        ctx.ui.notify("Recommendation cancelled.", "info");
+        return;
+      }
+
+      const action = await ctx.ui.select("How should Shiori use these recommendations?", [
+        RECOMMEND_QUEUE_TASK,
+        RECOMMEND_REVIEW_ONLY,
+        CANCEL_CHOICE,
+      ]);
+      if (!action || action === CANCEL_CHOICE) {
+        ctx.ui.notify("Recommendation cancelled.", "info");
+        return;
       }
 
       const policy = withRecommendLimits(current);
       const candidates = retrieveCandidatesExpanded(query, current.skills, policy, current);
       const planning = isPlanningIntent(query);
-      const loaded = planning ? [] : await loadRecommendedSkills(candidates);
-      const summary = planning
+      const reviewOnly = action === RECOMMEND_REVIEW_ONLY;
+      const loaded = planning || reviewOnly ? [] : await loadRecommendedSkills(candidates);
+      const summary = planning || reviewOnly
         ? candidates.length > 0
           ? `Matched ${candidates.length} skill(s): ${candidates.map((c) => c.skill.name).join(", ")}`
           : ""
@@ -248,7 +276,7 @@ export default function piSkillShiori(pi: ExtensionAPI) {
         ctx.ui.notify("No matching skills for that request.", "warning");
       }
 
-      if (!pickOnly) {
+      if (!reviewOnly) {
         const kickoff = isPlanningIntent(query)
           ? formatPlanningKickoffMessage(query, candidates)
           : formatRecommendKickoffMessage(query, loaded);
@@ -264,7 +292,7 @@ export default function piSkillShiori(pi: ExtensionAPI) {
         return;
       }
 
-      if (candidates.length === 0 || !ctx.hasUI) {
+      if (candidates.length === 0) {
         return;
       }