fix(web): hide invalid slash skill completions

[nateEc]

Fixes #8758.

The slash menu offered skills at the start of any line, even though providers can only invoke them when the command begins the full prompt. Selecting one in a later line silently produced a non-running command.

Filter skill entries from slash completion outside prompt position zero while keeping built-in and provider slash commands available there.

Verification: vp fmt --check and focused slash command search tests (7 passing).

Model and harness: GPT-5 Codex via Codex CLI.

---

Note

Low Risk
Narrow UX fix to slash-completion filtering with no auth, data, or provider invocation changes beyond what users can already type.

Overview
Fixes invalid skill suggestions in the composer slash menu when / is typed on a later line of the message.

Adds slashCommandItemsForPromptPosition, which drops skill-typed menu entries unless the slash trigger is at prompt offset zero (composerTrigger.rangeStart === 0). Built-in and provider slash commands still appear on any line. ChatComposer runs the combined slash list through this filter before searchSlashCommandItems.

Tests cover that skills remain at prompt start and are omitted when isAtPromptStart is false.

^{Reviewed by Cursor Bugbot for commit caa9777. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Hide skill items from slash command completions unless cursor is at prompt start

• Adds slashCommandItemsForPromptPosition to filter out skill-type items when the cursor is not at position 0 in composerSlashCommandSearch.ts
• ChatComposer now wraps the combined built-in, provider, and skill item list with this function before searching, passing composerTrigger.rangeStart === 0 as the start flag
• Tests cover skills being hidden mid-prompt and shown at the start
• Risk: only skill items are filtered by position; if other item types should also be position-sensitive, they are unaffected

^{Macroscope summarized caa9777.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 6890ca53-7964-4e69-94c9-c8eaa1372835

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

Warning

Your free Security trial is over. An organization admin can activate Security or dismiss this notice.

---

_{Comment @coderabbitai help to get the list of available commands.}

[macroscopeapp]

Approvability

Verdict: Approved at caa9777

Macroscope's review found this PR approvable — This is a narrow web-composer bug fix that filters invalid skill suggestions only after the first prompt line, while preserving existing valid command behavior. The helper and focused tests are isolated, with no schema, infrastructure, security, billing, or default-setting changes.

^{You can add or adjust custom eligibility rules. Learn more.}