cognova 0.2.0 → 0.2.3

package/Claude/skills/secret/secret.py

@@ -0,0 +1,146 @@
+#!/usr/bin/env python3
+"""Manage encrypted secrets in Cognova."""
+
+import argparse
+import sys
+from pathlib import Path
+
+# Add parent directory for _lib imports
+sys.path.insert(0, str(Path(__file__).parent.parent))
+from _lib.api import get, post, put, delete, get_secret
+
+
+def cmd_list(args):
+    """List all stored secrets."""
+    success, data = get("/secrets")
+    if not success:
+        print(f"Error: {data}")
+        sys.exit(1)
+
+    secrets = data if isinstance(data, list) else []
+    if not secrets:
+        print("No secrets stored.")
+        print("\nUse: python3 secret.py set KEY --value VALUE")
+        return
+
+    # Calculate column widths
+    key_width = max(len(s.get("key", "")) for s in secrets)
+    key_width = max(key_width, 3)
+
+    print(f"{'Key':<{key_width}}  {'Description':<40}  {'Updated'}")
+    print(f"{'-' * key_width}  {'-' * 40}  {'-' * 19}")
+
+    for s in secrets:
+        key = s.get("key", "")
+        desc = s.get("description", "") or ""
+        updated = s.get("updatedAt", s.get("createdAt", ""))[:19] if s.get("updatedAt") or s.get("createdAt") else ""
+        # Truncate description if too long
+        if len(desc) > 40:
+            desc = desc[:37] + "..."
+        print(f"{key:<{key_width}}  {desc:<40}  {updated}")
+
+    print(f"\n{len(secrets)} secret(s) stored.")
+
+
+def cmd_get(args):
+    """Get a secret value."""
+    success, value = get_secret(args.key)
+    if not success:
+        print(f"Error: {value}")
+        print(f"\nSecret '{args.key}' not found. Use 'list' to see available secrets.")
+        sys.exit(1)
+
+    if args.raw:
+        # Raw output for piping to other commands
+        print(value, end="")
+    else:
+        print(f"Secret '{args.key}' retrieved successfully.")
+        print(f"Value: {value}")
+
+
+def cmd_set(args):
+    """Create or update a secret."""
+    if not args.value:
+        print("Error: --value is required")
+        sys.exit(1)
+
+    data = {
+        "key": args.key,
+        "value": args.value,
+    }
+    if args.description:
+        data["description"] = args.description
+
+    # Try to check if it exists first
+    check_success, _ = get_secret(args.key)
+
+    if check_success:
+        # Update existing
+        success, result = put(f"/secrets/{args.key}", data)
+        action = "updated"
+    else:
+        # Create new
+        success, result = post("/secrets", data)
+        action = "created"
+
+    if not success:
+        print(f"Error: {result}")
+        sys.exit(1)
+
+    print(f"Secret '{args.key}' {action} successfully.")
+    if args.description:
+        print(f"Description: {args.description}")
+
+
+def cmd_delete(args):
+    """Delete a secret."""
+    success, result = delete(f"/secrets/{args.key}")
+    if not success:
+        print(f"Error: {result}")
+        sys.exit(1)
+
+    print(f"Secret '{args.key}' deleted successfully.")
+
+
+def main():
+    parser = argparse.ArgumentParser(
+        description="Manage encrypted secrets in Cognova"
+    )
+    subparsers = parser.add_subparsers(dest="command", help="Command to run")
+
+    # list
+    subparsers.add_parser("list", help="List all secrets")
+
+    # get
+    get_parser = subparsers.add_parser("get", help="Get a secret value")
+    get_parser.add_argument("key", help="Secret key name")
+    get_parser.add_argument("--raw", action="store_true", help="Output raw value only")
+
+    # set
+    set_parser = subparsers.add_parser("set", help="Create or update a secret")
+    set_parser.add_argument("key", help="Secret key name (SCREAMING_SNAKE_CASE)")
+    set_parser.add_argument("--value", required=True, help="Secret value")
+    set_parser.add_argument("--description", help="Description of what this secret is for")
+
+    # delete
+    del_parser = subparsers.add_parser("delete", help="Delete a secret")
+    del_parser.add_argument("key", help="Secret key name")
+
+    args = parser.parse_args()
+
+    if not args.command:
+        parser.print_help()
+        sys.exit(1)
+
+    commands = {
+        "list": cmd_list,
+        "get": cmd_get,
+        "set": cmd_set,
+        "delete": cmd_delete,
+    }
+
+    commands[args.command](args)
+
+
+if __name__ == "__main__":
+    main()

package/Claude/skills/skill-creator/SKILL.md

@@ -3,6 +3,12 @@ name: skill-creator
 description: Assists users in creating new Claude Code skills. Uses web search to find latest conventions and suggests alternative approaches (existing MCPs, plugins) when appropriate.
 allowed-tools: Bash, Read, Write, WebSearch, WebFetch
 disable-model-invocation: true
+metadata:
+  version: "1.0.0"
+  requires-secrets: []
+  author: Cognova
+  repository: ""
+  installed-from: ""
 ---
 
 # Skill Creator
@@ -11,6 +17,8 @@ Assists in creating new Claude Code skills for Cognova or personal use.
 
 ## Process
 
+> **CRITICAL: Skills must NEVER contain hardcoded secrets.** Always use `get_secret()` from `_lib/api.py` for API keys, tokens, and credentials. If the user provides a key/token during skill creation, store it via `/secret set KEY` first, then reference it by key name in the script. Declare required secrets in `metadata.requires-secrets` frontmatter.
+
 When a user asks to create a new skill:
 
 ### 1. Understand the Requirement
@@ -193,6 +201,28 @@ my_var = os.environ.get('MY_CUSTOM_VAR', 'default')
 | `user-invocable` | false | Claude-only, hidden from user menu |
 | `context` | fork | Run in subagent |
 | `agent` | Explore, Plan, general-purpose | Agent type for subagent |
+| `metadata` | object | Custom metadata (version, author, etc.) |
+
+#### Metadata Fields
+
+Nest under `metadata:` in frontmatter:
+
+```yaml
+metadata:
+  version: "1.0.0"
+  requires-secrets: ["API_KEY_NAME"]
+  author: Your Name
+  repository: ""
+  installed-from: ""
+```
+
+| Field | Type | Description |
+|-------|------|-------------|
+| `version` | string | Semantic version |
+| `requires-secrets` | string[] | Secret keys the skill needs (fetched via `get_secret()`) |
+| `author` | string | Skill author name |
+| `repository` | string | Source repository URL |
+| `installed-from` | string | Library name if installed from community |
 
 ### 7. Skill Locations
 

package/Claude/skills/task/SKILL.md

@@ -2,6 +2,12 @@
 name: task
 description: Manage Cognova tasks - create, list, update, complete tasks. Use when the user wants to track work items, todos, or action items. Can search for and associate tasks with projects.
 allowed-tools: Bash, Read
+metadata:
+  version: "1.0.0"
+  requires-secrets: []
+  author: Cognova
+  repository: ""
+  installed-from: ""
 ---
 
 # Task Management Skill

package/README.md

@@ -13,6 +13,9 @@ Personal knowledge management system with an embedded AI terminal. Built for a u
 - **Task Management** - Track tasks with status, priority, and project tags
 - **Scheduled Agents** - Cron-based Claude agents with cost tracking and real-time status
 - **Memory Dashboard** - View and manage Claude's memory context
+- **Skills Management** - Browse, enable/disable, edit, and create skills with a built-in file editor
+- **Community Skills Library** - Install skills from a [GitHub-hosted registry](https://github.com/Patrity/cognova-skills) with tag filtering and one-click updates
+- **Encrypted Secrets** - AES-256-GCM key-value store with a `/secret` skill for agent access
 - **Dashboard** - Overview of recent activity and quick capture
 - **Custom Homepage** - Override the landing page by creating `index.md` in your vault
 - **Public Document Sharing** - Share vault documents via unique link (no auth required)

package/app/app.vue

@@ -30,7 +30,7 @@ useSeoMeta({
 
 <template>
   <UApp :toaster="{ position: 'top-right' }">
-    <NuxtLoadingIndicator />
+    <NuxtLoadingIndicator color="primary" />
 
     <NuxtLayout>
       <NuxtPage />

package/app/components/dashboard/StatCards.vue

@@ -10,13 +10,19 @@ function formatCurrency(value: number): string {
   if (value < 0.01 && value > 0) return '<$0.01'
   return `$${value.toFixed(2)}`
 }
+
+function formatTokens(value: number): string {
+  if (value >= 1_000_000) return `${(value / 1_000_000).toFixed(1)}M`
+  if (value >= 1_000) return `${(value / 1_000).toFixed(1)}K`
+  return String(value)
+}
 </script>
 
 <template>
-  <div class="grid gap-4 grid-cols-2 lg:grid-cols-4">
+  <div class="grid gap-4 grid-cols-2 sm:grid-cols-3 lg:grid-cols-5">
     <template v-if="loading">
       <div
-        v-for="i in 4"
+        v-for="i in 5"
         :key="i"
         class="p-4 rounded-lg bg-elevated border border-default"
       >
@@ -77,6 +83,19 @@ function formatCurrency(value: number): string {
           {{ overview.usage.totalCalls7d }}
         </p>
       </div>
+
+      <div class="p-4 rounded-lg bg-elevated border border-default">
+        <div class="flex items-center gap-2 text-muted text-sm mb-1">
+          <UIcon
+            name="i-lucide-text-cursor-input"
+            class="size-4"
+          />
+          <span>7d Tokens</span>
+        </div>
+        <p class="text-2xl font-semibold">
+          {{ formatTokens(overview.usage.totalInputTokens7d + overview.usage.totalOutputTokens7d) }}
+        </p>
+      </div>
     </template>
   </div>
 </template>

package/app/components/skills/Card.vue

@@ -0,0 +1,82 @@
+<script setup lang="ts">
+import type { SkillListItem } from '~~/shared/types'
+
+const props = defineProps<{
+  skill: SkillListItem
+}>()
+
+const emit = defineEmits<{
+  toggle: [name: string]
+}>()
+
+const toggling = ref(false)
+
+async function handleToggle() {
+  toggling.value = true
+  emit('toggle', props.skill.name)
+  toggling.value = false
+}
+</script>
+
+<template>
+  <NuxtLink
+    :to="`/skills/${skill.name}`"
+    class="block p-4 rounded-lg border border-default bg-elevated/50 hover:bg-elevated transition-colors"
+  >
+    <div class="flex items-start justify-between gap-3">
+      <div class="flex-1 min-w-0">
+        <div class="flex items-center gap-2 mb-1">
+          <span class="font-medium text-sm truncate">{{ skill.name }}</span>
+          <UBadge
+            v-if="skill.core"
+            variant="subtle"
+            color="primary"
+            size="xs"
+          >
+            Core
+          </UBadge>
+          <UBadge
+            v-if="!skill.active"
+            variant="subtle"
+            color="neutral"
+            size="xs"
+          >
+            Disabled
+          </UBadge>
+        </div>
+        <p class="text-xs text-muted line-clamp-2">
+          {{ skill.description }}
+        </p>
+      </div>
+
+      <USwitch
+        v-if="!skill.core"
+        :model-value="skill.active"
+        size="sm"
+        :loading="toggling"
+        @update:model-value="handleToggle"
+        @click.prevent.stop
+      />
+    </div>
+
+    <div class="flex items-center gap-2 mt-3">
+      <UBadge
+        v-if="skill.version"
+        variant="soft"
+        color="neutral"
+        size="xs"
+      >
+        v{{ skill.version }}
+      </UBadge>
+      <UBadge
+        v-if="skill.author"
+        variant="soft"
+        color="neutral"
+        size="xs"
+      >
+        {{ skill.author }}
+      </UBadge>
+      <span class="text-xs text-dimmed ml-auto">{{ skill.fileCount }} file{{ skill.fileCount !== 1 ? 's' : '' }}</span>
+    </div>
+  </NuxtLink>
+</template>

package/app/components/skills/CreateModal.vue

@@ -0,0 +1,156 @@
+<script setup lang="ts">
+const props = defineProps<{
+  open: boolean
+}>()
+
+const emit = defineEmits<{
+  'update:open': [value: boolean]
+  'created': [name: string]
+}>()
+
+const router = useRouter()
+const toast = useToast()
+
+const mode = ref<'blank' | 'generate'>('blank')
+const name = ref('')
+const description = ref('')
+const loading = ref(false)
+
+function resetForm() {
+  mode.value = 'blank'
+  name.value = ''
+  description.value = ''
+  loading.value = false
+}
+
+function close() {
+  emit('update:open', false)
+  resetForm()
+}
+
+async function handleCreate() {
+  if (!name.value.trim()) return
+
+  loading.value = true
+  try {
+    if (mode.value === 'blank') {
+      await $fetch('/api/skills/create', {
+        method: 'POST',
+        body: { name: name.value.trim(), description: description.value.trim() || undefined }
+      })
+      toast.add({ title: `Skill '${name.value}' created`, color: 'success' })
+      emit('created', name.value.trim())
+      close()
+      router.push(`/skills/${name.value.trim()}`)
+    } else {
+      if (!description.value.trim()) {
+        toast.add({ title: 'Description is required for AI generation', color: 'warning' })
+        loading.value = false
+        return
+      }
+      const res = await $fetch<{ data: { name: string, costUsd: number } }>('/api/skills/generate', {
+        method: 'POST',
+        body: { name: name.value.trim(), description: description.value.trim() }
+      })
+      toast.add({
+        title: `Skill '${name.value}' generated`,
+        description: `Cost: $${res.data.costUsd.toFixed(4)} — created in inactive state for review`,
+        color: 'success'
+      })
+      emit('created', name.value.trim())
+      close()
+      router.push(`/skills/${name.value.trim()}`)
+    }
+  } catch (e: unknown) {
+    const message = e instanceof Error ? e.message : 'Failed to create skill'
+    toast.add({ title: message, color: 'error' })
+  } finally {
+    loading.value = false
+  }
+}
+</script>
+
+<template>
+  <UModal
+    :open="props.open"
+    @update:open="emit('update:open', $event)"
+  >
+    <template #header>
+      <span class="font-semibold">Create Skill</span>
+    </template>
+
+    <template #body>
+      <div class="space-y-4">
+        <div class="flex gap-2">
+          <UButton
+            :variant="mode === 'blank' ? 'solid' : 'outline'"
+            color="neutral"
+            size="sm"
+            icon="i-lucide-file-plus"
+            @click="mode = 'blank'"
+          >
+            Blank Skill
+          </UButton>
+          <UButton
+            :variant="mode === 'generate' ? 'solid' : 'outline'"
+            color="neutral"
+            size="sm"
+            icon="i-lucide-sparkles"
+            @click="mode = 'generate'"
+          >
+            AI Generate
+          </UButton>
+        </div>
+
+        <UFormField label="Name">
+          <UInput
+            v-model="name"
+            placeholder="my-skill"
+            :disabled="loading"
+            class="w-full"
+          />
+        </UFormField>
+
+        <UFormField
+          label="Description"
+          :required="mode === 'generate'"
+        >
+          <UTextarea
+            v-model="description"
+            :placeholder="mode === 'generate' ? 'Describe what this skill should do...' : 'Optional description'"
+            :rows="3"
+            :disabled="loading"
+            class="w-full"
+          />
+        </UFormField>
+
+        <p
+          v-if="mode === 'generate'"
+          class="text-xs text-muted"
+        >
+          AI-generated skills are created in an inactive state so you can review them before enabling.
+        </p>
+      </div>
+    </template>
+
+    <template #footer>
+      <div class="flex justify-end gap-2">
+        <UButton
+          variant="ghost"
+          color="neutral"
+          :disabled="loading"
+          @click="close"
+        >
+          Cancel
+        </UButton>
+        <UButton
+          :loading="loading"
+          :disabled="!name.trim()"
+          @click="handleCreate"
+        >
+          {{ mode === 'generate' ? 'Generate' : 'Create' }}
+        </UButton>
+      </div>
+    </template>
+  </UModal>
+</template>

package/app/components/skills/Editor.vue

@@ -0,0 +1,135 @@
+<script setup lang="ts">
+import type { CodeLanguage } from '~~/shared/types'
+
+const props = defineProps<{
+  skillName: string
+  filePath: string
+}>()
+
+const emit = defineEmits<{
+  saved: []
+}>()
+
+const toast = useToast()
+const content = ref('')
+const originalContent = ref('')
+const loading = ref(true)
+const saving = ref(false)
+
+const isDirty = computed(() => content.value !== originalContent.value)
+
+const language = computed<CodeLanguage>(() => {
+  const ext = props.filePath.split('.').pop()?.toLowerCase()
+  switch (ext) {
+    case 'py': return 'python'
+    case 'md': return 'markdown'
+    case 'json': return 'json'
+    case 'ts': return 'typescript'
+    case 'js': return 'javascript'
+    case 'yaml':
+    case 'yml': return 'yaml'
+    case 'sh':
+    case 'bash': return 'bash'
+    default: return 'plaintext'
+  }
+})
+
+async function loadFile() {
+  loading.value = true
+  try {
+    const res = await $fetch<{ data: { content: string } }>(`/api/skills/${props.skillName}/files/read`, {
+      method: 'POST',
+      body: { path: props.filePath }
+    })
+    content.value = res.data.content
+    originalContent.value = res.data.content
+  } catch {
+    toast.add({ title: 'Failed to load file', color: 'error' })
+  } finally {
+    loading.value = false
+  }
+}
+
+async function save() {
+  saving.value = true
+  try {
+    await $fetch(`/api/skills/${props.skillName}/files/write`, {
+      method: 'POST',
+      body: { path: props.filePath, content: content.value }
+    })
+    originalContent.value = content.value
+    toast.add({ title: 'File saved', color: 'success' })
+    emit('saved')
+  } catch {
+    toast.add({ title: 'Failed to save file', color: 'error' })
+  } finally {
+    saving.value = false
+  }
+}
+
+// Ctrl+S / Cmd+S keyboard shortcut
+function handleKeydown(e: KeyboardEvent) {
+  if ((e.metaKey || e.ctrlKey) && e.key === 's') {
+    e.preventDefault()
+    if (isDirty.value) save()
+  }
+}
+
+onMounted(() => {
+  loadFile()
+  window.addEventListener('keydown', handleKeydown)
+})
+
+onUnmounted(() => {
+  window.removeEventListener('keydown', handleKeydown)
+})
+
+watch(() => props.filePath, () => loadFile())
+</script>
+
+<template>
+  <div class="flex flex-col h-full">
+    <div class="flex items-center justify-between px-4 py-2 border-b border-default">
+      <div class="flex items-center gap-2 text-sm text-muted">
+        <UIcon
+          name="i-lucide-file-code"
+          class="size-4"
+        />
+        <span>{{ filePath }}</span>
+        <UBadge
+          v-if="isDirty"
+          variant="soft"
+          color="warning"
+          size="xs"
+        >
+          Modified
+        </UBadge>
+      </div>
+      <UButton
+        size="xs"
+        :loading="saving"
+        :disabled="!isDirty"
+        @click="save"
+      >
+        Save
+      </UButton>
+    </div>
+
+    <div
+      v-if="loading"
+      class="flex-1 flex items-center justify-center"
+    >
+      <UIcon
+        name="i-lucide-loader-2"
+        class="size-6 animate-spin text-dimmed"
+      />
+    </div>
+
+    <EditorCodeEditor
+      v-else
+      v-model="content"
+      :language="language"
+      class="flex-1"
+    />
+  </div>
+</template>