groove-dev 0.14.1 → 0.15.0

package/node_modules/@groove-dev/daemon/src/api.js

@@ -367,8 +367,8 @@ export function createApi(app, daemon) {
 
   // --- Skills Marketplace ---
 
-  app.get('/api/skills/registry', (req, res) => {
-    const skills = daemon.skills.getRegistry({
+  app.get('/api/skills/registry', async (req, res) => {
+    const skills = await daemon.skills.getRegistry({
       search: req.query.search || '',
       category: req.query.category || 'all',
     });
@@ -406,6 +406,33 @@ export function createApi(app, daemon) {
     res.json({ id: req.params.id, content });
   });
 
+  // --- Agent Skills (attach/detach) ---
+
+  app.post('/api/agents/:agentId/skills/:skillId', (req, res) => {
+    const agent = daemon.registry.get(req.params.agentId);
+    if (!agent) return res.status(404).json({ error: 'Agent not found' });
+    const skillId = req.params.skillId;
+    if (!daemon.skills.getContent(skillId)) {
+      return res.status(400).json({ error: 'Skill not installed. Install it first.' });
+    }
+    const skills = agent.skills || [];
+    if (skills.includes(skillId)) {
+      return res.json({ id: agent.id, skills });
+    }
+    daemon.registry.update(agent.id, { skills: [...skills, skillId] });
+    daemon.audit.log('skill.attach', { agentId: agent.id, skillId });
+    res.json({ id: agent.id, skills: [...skills, skillId] });
+  });
+
+  app.delete('/api/agents/:agentId/skills/:skillId', (req, res) => {
+    const agent = daemon.registry.get(req.params.agentId);
+    if (!agent) return res.status(404).json({ error: 'Agent not found' });
+    const skills = (agent.skills || []).filter((s) => s !== req.params.skillId);
+    daemon.registry.update(agent.id, { skills });
+    daemon.audit.log('skill.detach', { agentId: agent.id, skillId: req.params.skillId });
+    res.json({ id: agent.id, skills });
+  });
+
   // --- Directory Browser ---
 
   app.get('/api/browse', (req, res) => {

package/node_modules/@groove-dev/daemon/src/introducer.js

@@ -162,6 +162,32 @@ export class Introducer {
       lines.push(archContent);
     }
 
+    // Skills injection — load attached skill content and inject into context
+    if (newAgent.skills && newAgent.skills.length > 0 && this.daemon.skills) {
+      const skillSections = [];
+      for (const skillId of newAgent.skills) {
+        const content = this.daemon.skills.getContent(skillId);
+        if (content) {
+          // Strip YAML frontmatter, keep the instruction body
+          const body = content.replace(/^---[\s\S]*?---\n*/, '').trim();
+          if (body) {
+            // Find the skill name from registry or frontmatter
+            const regEntry = this.daemon.skills.registry.find((s) => s.id === skillId);
+            const name = regEntry?.name || skillId;
+            skillSections.push(`### ${name}\n\n${body}`);
+          }
+        }
+      }
+      if (skillSections.length > 0) {
+        lines.push('');
+        lines.push(`## Skills (${skillSections.length} attached)`);
+        lines.push('');
+        lines.push(`The following skills have been attached to this agent. Follow their instructions:`);
+        lines.push('');
+        lines.push(skillSections.join('\n\n---\n\n'));
+      }
+    }
+
     return lines.join('\n');
   }
 

package/node_modules/@groove-dev/daemon/src/registry.js

@@ -22,6 +22,7 @@ export class Registry extends EventEmitter {
       prompt: config.prompt || '',
       permission: config.permission || 'full',
       workingDir: config.workingDir || process.cwd(),
+      skills: config.skills || [],
       status: 'starting',
       pid: null,
       spawnedAt: new Date().toISOString(),
@@ -48,7 +49,7 @@ export class Registry extends EventEmitter {
     if (!agent) return null;
 
     // Only allow known fields to prevent prototype pollution
-    const SAFE_FIELDS = ['status', 'pid', 'tokensUsed', 'contextUsage', 'lastActivity', 'model', 'name', 'routingMode', 'routingReason', 'sessionId'];
+    const SAFE_FIELDS = ['status', 'pid', 'tokensUsed', 'contextUsage', 'lastActivity', 'model', 'name', 'routingMode', 'routingReason', 'sessionId', 'skills'];
     for (const key of Object.keys(updates)) {
       if (SAFE_FIELDS.includes(key)) {
         agent[key] = updates[key];

package/node_modules/@groove-dev/daemon/src/skills.js

@@ -7,7 +7,19 @@ import { fileURLToPath } from 'url';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 
-const REMOTE_REGISTRY = 'https://docs.groovedev.ai/skills/registry.json';
+const SKILLS_API = 'https://docs.groovedev.ai/api/v1';
+
+// Normalize snake_case API fields to camelCase used by GUI
+function normalize(skill) {
+  return {
+    ...skill,
+    ratingCount: skill.ratingCount ?? skill.rating_count ?? 0,
+    contentUrl: skill.contentUrl ?? skill.content_url ?? null,
+    authorId: skill.authorId ?? skill.author_id ?? null,
+    createdAt: skill.createdAt ?? skill.created_at ?? null,
+    updatedAt: skill.updatedAt ?? skill.updated_at ?? null,
+  };
+}
 
 export class SkillStore {
   constructor(daemon) {
@@ -22,39 +34,58 @@ export class SkillStore {
       this.registry = JSON.parse(readFileSync(regPath, 'utf8'));
     } catch { /* no registry file */ }
 
-    // Fetch remote registry in background (auto-update)
+    // Fetch full registry from live API in background
     this._refreshRegistry();
   }
 
   async _refreshRegistry() {
     try {
-      const res = await fetch(REMOTE_REGISTRY, { signal: AbortSignal.timeout(5000) });
+      const res = await fetch(`${SKILLS_API}/skills?limit=200`, { signal: AbortSignal.timeout(5000) });
       if (res.ok) {
-        this.registry = await res.json();
+        const data = await res.json();
+        this.registry = (data.skills || data).map(normalize);
       }
     } catch { /* offline — use bundled */ }
   }
 
   /**
-   * Get all skills from the registry with installed status.
+   * Get skills from the live API, with local fallback.
+   * Server handles search + category filtering when online.
    */
-  getRegistry(query) {
+  async getRegistry(query) {
+    // Try live API first — server handles search/filter/sort
+    try {
+      const params = new URLSearchParams();
+      if (query?.search) params.set('search', query.search);
+      if (query?.category && query.category !== 'all') params.set('category', query.category);
+      params.set('limit', '200');
+
+      const res = await fetch(`${SKILLS_API}/skills?${params}`, { signal: AbortSignal.timeout(5000) });
+      if (res.ok) {
+        const data = await res.json();
+        const skills = (data.skills || data).map((s) => ({
+          ...normalize(s),
+          installed: this._isInstalled(s.id),
+        }));
+        return skills;
+      }
+    } catch { /* fall through to local */ }
+
+    // Offline fallback — filter locally from cached registry
     let skills = this.registry.map((s) => ({
       ...s,
       installed: this._isInstalled(s.id),
     }));
 
-    // Search filter
     if (query?.search) {
       const q = query.search.toLowerCase();
       skills = skills.filter((s) =>
         s.name.toLowerCase().includes(q)
         || s.description.toLowerCase().includes(q)
-        || s.tags.some((t) => t.includes(q))
+        || (s.tags || []).some((t) => t.includes(q))
       );
     }
 
-    // Category filter
     if (query?.category && query.category !== 'all') {
       skills = skills.filter((s) => s.category === query.category);
     }
@@ -97,8 +128,8 @@ export class SkillStore {
   }
 
   /**
-   * Install a skill from the registry.
-   * Downloads SKILL.md from remote URL, falls back to local Claude plugins.
+   * Install a skill.
+   * Downloads content from live API, falls back to contentUrl, then local plugins.
    */
   async install(skillId) {
     const entry = this.registry.find((s) => s.id === skillId);
@@ -107,12 +138,21 @@ export class SkillStore {
 
     let content = null;
 
-    // Try remote download first
-    if (entry.contentUrl) {
+    // Try live API content endpoint first
+    try {
+      const res = await fetch(`${SKILLS_API}/skills/${skillId}/content`, { signal: AbortSignal.timeout(10000) });
+      if (res.ok) {
+        const data = await res.json();
+        content = data.content;
+      }
+    } catch { /* fall through */ }
+
+    // Fall back to contentUrl from registry entry
+    if (!content && entry.contentUrl) {
       try {
         const res = await fetch(entry.contentUrl, { signal: AbortSignal.timeout(10000) });
         if (res.ok) content = await res.text();
-      } catch { /* fall through to local */ }
+      } catch { /* fall through */ }
     }
 
     // Fall back to local Claude plugins
@@ -129,6 +169,12 @@ export class SkillStore {
     mkdirSync(skillDir, { recursive: true });
     writeFileSync(resolve(skillDir, 'SKILL.md'), content);
 
+    // Track install on server (fire-and-forget, no auth needed)
+    fetch(`${SKILLS_API}/skills/${skillId}/install`, {
+      method: 'POST',
+      signal: AbortSignal.timeout(5000),
+    }).catch(() => {});
+
     this.daemon.audit.log('skill.install', { id: skillId, name: entry.name });
 
     return { id: skillId, name: entry.name, installed: true };

package/node_modules/@groove-dev/daemon/src/validate.js

@@ -57,6 +57,15 @@ export function validateAgentConfig(config) {
   const validPermissions = ['auto', 'full'];
   const permission = validPermissions.includes(config.permission) ? config.permission : 'full';
 
+  // Validate skills (array of skill IDs)
+  let skills = [];
+  if (config.skills !== undefined && config.skills !== null) {
+    if (!Array.isArray(config.skills)) {
+      throw new Error('Skills must be an array');
+    }
+    skills = config.skills.filter((s) => typeof s === 'string' && s.length > 0 && s.length <= 100);
+  }
+
   // Return sanitized config (only known fields)
   return {
     role: config.role,
@@ -67,6 +76,7 @@ export function validateAgentConfig(config) {
     model: typeof config.model === 'string' ? config.model : null,
     workingDir: typeof config.workingDir === 'string' ? config.workingDir : undefined,
     permission,
+    skills,
   };
 }