groove-dev 0.14.2 → 0.15.0

package/node_modules/@groove-dev/daemon/src/api.js

@@ -406,6 +406,33 @@ export function createApi(app, daemon) {
     res.json({ id: req.params.id, content });
   });
 
+  // --- Agent Skills (attach/detach) ---
+
+  app.post('/api/agents/:agentId/skills/:skillId', (req, res) => {
+    const agent = daemon.registry.get(req.params.agentId);
+    if (!agent) return res.status(404).json({ error: 'Agent not found' });
+    const skillId = req.params.skillId;
+    if (!daemon.skills.getContent(skillId)) {
+      return res.status(400).json({ error: 'Skill not installed. Install it first.' });
+    }
+    const skills = agent.skills || [];
+    if (skills.includes(skillId)) {
+      return res.json({ id: agent.id, skills });
+    }
+    daemon.registry.update(agent.id, { skills: [...skills, skillId] });
+    daemon.audit.log('skill.attach', { agentId: agent.id, skillId });
+    res.json({ id: agent.id, skills: [...skills, skillId] });
+  });
+
+  app.delete('/api/agents/:agentId/skills/:skillId', (req, res) => {
+    const agent = daemon.registry.get(req.params.agentId);
+    if (!agent) return res.status(404).json({ error: 'Agent not found' });
+    const skills = (agent.skills || []).filter((s) => s !== req.params.skillId);
+    daemon.registry.update(agent.id, { skills });
+    daemon.audit.log('skill.detach', { agentId: agent.id, skillId: req.params.skillId });
+    res.json({ id: agent.id, skills });
+  });
+
   // --- Directory Browser ---
 
   app.get('/api/browse', (req, res) => {

package/node_modules/@groove-dev/daemon/src/introducer.js

@@ -162,6 +162,32 @@ export class Introducer {
       lines.push(archContent);
     }
 
+    // Skills injection — load attached skill content and inject into context
+    if (newAgent.skills && newAgent.skills.length > 0 && this.daemon.skills) {
+      const skillSections = [];
+      for (const skillId of newAgent.skills) {
+        const content = this.daemon.skills.getContent(skillId);
+        if (content) {
+          // Strip YAML frontmatter, keep the instruction body
+          const body = content.replace(/^---[\s\S]*?---\n*/, '').trim();
+          if (body) {
+            // Find the skill name from registry or frontmatter
+            const regEntry = this.daemon.skills.registry.find((s) => s.id === skillId);
+            const name = regEntry?.name || skillId;
+            skillSections.push(`### ${name}\n\n${body}`);
+          }
+        }
+      }
+      if (skillSections.length > 0) {
+        lines.push('');
+        lines.push(`## Skills (${skillSections.length} attached)`);
+        lines.push('');
+        lines.push(`The following skills have been attached to this agent. Follow their instructions:`);
+        lines.push('');
+        lines.push(skillSections.join('\n\n---\n\n'));
+      }
+    }
+
     return lines.join('\n');
   }
 

package/node_modules/@groove-dev/daemon/src/registry.js

@@ -22,6 +22,7 @@ export class Registry extends EventEmitter {
       prompt: config.prompt || '',
       permission: config.permission || 'full',
       workingDir: config.workingDir || process.cwd(),
+      skills: config.skills || [],
       status: 'starting',
       pid: null,
       spawnedAt: new Date().toISOString(),
@@ -48,7 +49,7 @@ export class Registry extends EventEmitter {
     if (!agent) return null;
 
     // Only allow known fields to prevent prototype pollution
-    const SAFE_FIELDS = ['status', 'pid', 'tokensUsed', 'contextUsage', 'lastActivity', 'model', 'name', 'routingMode', 'routingReason', 'sessionId'];
+    const SAFE_FIELDS = ['status', 'pid', 'tokensUsed', 'contextUsage', 'lastActivity', 'model', 'name', 'routingMode', 'routingReason', 'sessionId', 'skills'];
     for (const key of Object.keys(updates)) {
       if (SAFE_FIELDS.includes(key)) {
         agent[key] = updates[key];

package/node_modules/@groove-dev/daemon/src/validate.js

@@ -57,6 +57,15 @@ export function validateAgentConfig(config) {
   const validPermissions = ['auto', 'full'];
   const permission = validPermissions.includes(config.permission) ? config.permission : 'full';
 
+  // Validate skills (array of skill IDs)
+  let skills = [];
+  if (config.skills !== undefined && config.skills !== null) {
+    if (!Array.isArray(config.skills)) {
+      throw new Error('Skills must be an array');
+    }
+    skills = config.skills.filter((s) => typeof s === 'string' && s.length > 0 && s.length <= 100);
+  }
+
   // Return sanitized config (only known fields)
   return {
     role: config.role,
@@ -67,6 +76,7 @@ export function validateAgentConfig(config) {
     model: typeof config.model === 'string' ? config.model : null,
     workingDir: typeof config.workingDir === 'string' ? config.workingDir : undefined,
     permission,
+    skills,
   };
 }