groove-dev 0.14.2 → 0.15.1

package/node_modules/@groove-dev/daemon/src/api.js

@@ -400,12 +400,49 @@ export function createApi(app, daemon) {
     }
   });
 
+  app.post('/api/skills/:id/rate', async (req, res) => {
+    try {
+      const rating = parseInt(req.body?.rating, 10);
+      const result = await daemon.skills.rate(req.params.id, rating);
+      res.json(result);
+    } catch (err) {
+      res.status(400).json({ error: err.message });
+    }
+  });
+
   app.get('/api/skills/:id/content', (req, res) => {
     const content = daemon.skills.getContent(req.params.id);
     if (!content) return res.status(404).json({ error: 'Skill not installed' });
     res.json({ id: req.params.id, content });
   });
 
+  // --- Agent Skills (attach/detach) ---
+
+  app.post('/api/agents/:agentId/skills/:skillId', (req, res) => {
+    const agent = daemon.registry.get(req.params.agentId);
+    if (!agent) return res.status(404).json({ error: 'Agent not found' });
+    const skillId = req.params.skillId;
+    if (!daemon.skills.getContent(skillId)) {
+      return res.status(400).json({ error: 'Skill not installed. Install it first.' });
+    }
+    const skills = agent.skills || [];
+    if (skills.includes(skillId)) {
+      return res.json({ id: agent.id, skills });
+    }
+    daemon.registry.update(agent.id, { skills: [...skills, skillId] });
+    daemon.audit.log('skill.attach', { agentId: agent.id, skillId });
+    res.json({ id: agent.id, skills: [...skills, skillId] });
+  });
+
+  app.delete('/api/agents/:agentId/skills/:skillId', (req, res) => {
+    const agent = daemon.registry.get(req.params.agentId);
+    if (!agent) return res.status(404).json({ error: 'Agent not found' });
+    const skills = (agent.skills || []).filter((s) => s !== req.params.skillId);
+    daemon.registry.update(agent.id, { skills });
+    daemon.audit.log('skill.detach', { agentId: agent.id, skillId: req.params.skillId });
+    res.json({ id: agent.id, skills });
+  });
+
   // --- Directory Browser ---
 
   app.get('/api/browse', (req, res) => {

package/node_modules/@groove-dev/daemon/src/introducer.js

@@ -162,6 +162,32 @@ export class Introducer {
       lines.push(archContent);
     }
 
+    // Skills injection — load attached skill content and inject into context
+    if (newAgent.skills && newAgent.skills.length > 0 && this.daemon.skills) {
+      const skillSections = [];
+      for (const skillId of newAgent.skills) {
+        const content = this.daemon.skills.getContent(skillId);
+        if (content) {
+          // Strip YAML frontmatter, keep the instruction body
+          const body = content.replace(/^---[\s\S]*?---\n*/, '').trim();
+          if (body) {
+            // Find the skill name from registry or frontmatter
+            const regEntry = this.daemon.skills.registry.find((s) => s.id === skillId);
+            const name = regEntry?.name || skillId;
+            skillSections.push(`### ${name}\n\n${body}`);
+          }
+        }
+      }
+      if (skillSections.length > 0) {
+        lines.push('');
+        lines.push(`## Skills (${skillSections.length} attached)`);
+        lines.push('');
+        lines.push(`The following skills have been attached to this agent. Follow their instructions:`);
+        lines.push('');
+        lines.push(skillSections.join('\n\n---\n\n'));
+      }
+    }
+
     return lines.join('\n');
   }
 

package/node_modules/@groove-dev/daemon/src/registry.js

@@ -22,6 +22,7 @@ export class Registry extends EventEmitter {
       prompt: config.prompt || '',
       permission: config.permission || 'full',
       workingDir: config.workingDir || process.cwd(),
+      skills: config.skills || [],
       status: 'starting',
       pid: null,
       spawnedAt: new Date().toISOString(),
@@ -48,7 +49,7 @@ export class Registry extends EventEmitter {
     if (!agent) return null;
 
     // Only allow known fields to prevent prototype pollution
-    const SAFE_FIELDS = ['status', 'pid', 'tokensUsed', 'contextUsage', 'lastActivity', 'model', 'name', 'routingMode', 'routingReason', 'sessionId'];
+    const SAFE_FIELDS = ['status', 'pid', 'tokensUsed', 'contextUsage', 'lastActivity', 'model', 'name', 'routingMode', 'routingReason', 'sessionId', 'skills'];
     for (const key of Object.keys(updates)) {
       if (SAFE_FIELDS.includes(key)) {
         agent[key] = updates[key];

package/node_modules/@groove-dev/daemon/src/skills.js

@@ -193,6 +193,26 @@ export class SkillStore {
     return { id: skillId, installed: false };
   }
 
+  /**
+   * Rate a skill. Proxies to the skills server.
+   */
+  async rate(skillId, rating) {
+    if (!Number.isInteger(rating) || rating < 1 || rating > 5) {
+      throw new Error('Rating must be an integer from 1 to 5');
+    }
+    const res = await fetch(`${SKILLS_API}/skills/${skillId}/rate`, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ rating }),
+      signal: AbortSignal.timeout(10000),
+    });
+    if (!res.ok) {
+      const data = await res.json().catch(() => ({}));
+      throw new Error(data.error || 'Rating failed');
+    }
+    return res.json();
+  }
+
   /**
    * Get the full content of an installed skill.
    */

package/node_modules/@groove-dev/daemon/src/validate.js

@@ -57,6 +57,15 @@ export function validateAgentConfig(config) {
   const validPermissions = ['auto', 'full'];
   const permission = validPermissions.includes(config.permission) ? config.permission : 'full';
 
+  // Validate skills (array of skill IDs)
+  let skills = [];
+  if (config.skills !== undefined && config.skills !== null) {
+    if (!Array.isArray(config.skills)) {
+      throw new Error('Skills must be an array');
+    }
+    skills = config.skills.filter((s) => typeof s === 'string' && s.length > 0 && s.length <= 100);
+  }
+
   // Return sanitized config (only known fields)
   return {
     role: config.role,
@@ -67,6 +76,7 @@ export function validateAgentConfig(config) {
     model: typeof config.model === 'string' ? config.model : null,
     workingDir: typeof config.workingDir === 'string' ? config.workingDir : undefined,
     permission,
+    skills,
   };
 }