Jminnetian/askskills

CHANGELOG.md

@@ -25,6 +25,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - [EE] Added image attachments to Ask Sourcebot, letting users attach images to a chat message when the selected model supports image input. [#1375](https://github.com/sourcebot-dev/sourcebot/pull/1375)
 - Added deployment system resource stats (CPU cores + cgroup quota, host + container memory, disk, load average) to the service ping, so resource issues can be diagnosed more quickly. [#1424](https://github.com/sourcebot-dev/sourcebot/pull/1424)
 - Added a `robots.txt` that disallows crawlers, with an allowlist for link-preview bots so shared links keep their OpenGraph previews. [#1426](https://github.com/sourcebot-dev/sourcebot/pull/1426)
+- [EE] Added Ask Sourcebot skills, letting users create, import, share, sync, and auto-invoke reusable chat instructions across personal and workspace scopes. [#1410](https://github.com/sourcebot-dev/sourcebot/pull/1410)
 
 ### Fixed
 - Send anonymous server-side PostHog events as personless so unauthenticated requests don't inflate person counts. [#1367](https://github.com/sourcebot-dev/sourcebot/pull/1367)

docs/api-reference/sourcebot-public.openapi.json

@@ -576,6 +576,9 @@
           },
           "externalWebUrl": {
             "type": "string"
+          },
+          "blobSha": {
+            "type": "string"
           }
         },
         "required": [

docs/docs.json

@@ -66,6 +66,7 @@
                                 "group": "Ask Sourcebot",
                                 "root": "docs/features/ask/ask-sourcebot",
                                 "pages": [
+                                    "docs/features/ask/skills",
                                     "docs/features/ask/connectors",
                                     "docs/features/ask/chat-sharing",
                                     "docs/features/ask/add-model-providers"

docs/docs/features/ask/skills.mdx

@@ -0,0 +1,130 @@
+---
+title: Skills
+---
+
+Skills are reusable context for [Ask Sourcebot](/docs/features/ask/ask-sourcebot).
+They can capture organizational knowledge, define a workflow, or give Ask Sourcebot extra context for a class of questions.
+
+<Frame>
+  <img src="/images/skills_page.png" alt="Skills page overview" />
+</Frame>
+
+## Creating a skill
+
+Go to **Settings -> Skills** and click **Add skill**.
+
+You can create a skill in three ways:
+
+- **New skill**: Create a skill directly in Sourcebot.
+- **Import from file**: Upload a local `.md` or `.markdown` file and review it before saving.
+- **Import from repository**: Choose a markdown file from an indexed repository and keep the skill synced to that file.
+
+Each skill has four fields:
+
+- **Name**: A recognizable name for the skill.
+- **Command**: The slash command users type to run the skill, such as `/deep-research`.
+- **Description**: A short summary of when Ask Sourcebot should use the skill.
+- **Instructions**: The markdown context or guidance Ask Sourcebot uses when the skill runs.
+
+<Frame>
+  <img src="/images/skills_create.png" alt="Create a skill" />
+</Frame>
+
+## Writing instructions
+
+Keep the description specific. Ask Sourcebot uses it to decide when a skill is relevant, and users see it when browsing slash commands.
+
+Put the useful context or guidance in the instructions.
+
+<Frame>
+  <img src="/images/skills_editor.png" alt="Skill editor" />
+</Frame>
+
+## Using skills in chat
+
+Type `/` at the start of an Ask Sourcebot prompt to browse available skill commands.
+
+When you select a skill, Ask Sourcebot expands the command into that skill's instructions before answering. If the instructions include file mentions, those files are added to the chat context automatically.
+
+Ask Sourcebot may also load a matching skill automatically. When this happens, the chat details show the loaded skill name and command.
+
+<Frame>
+  <img src="/images/skills_slash_command.png" alt="Skill slash command suggestions" />
+</Frame>
+
+## Personal and shared skills
+
+Skills can be personal or shared:
+
+- **Personal skills** are private to you in the current workspace.
+- **Shared skills** are published to the workspace skill catalog.
+
+You can add or remove shared skills from your own Ask commands from **Settings -> Skills**. Skill authors and organization owners can edit or delete shared skills.
+
+Organization owners can manage shared skills from **Settings -> Workspace -> Ask Sourcebot**. Owners can also enable **Auto** for a shared skill, which adds it to members' Ask commands by default.
+
+<Frame>
+  <img src="/images/skills_workspace_manager.png" alt="Workspace shared skills manager" />
+</Frame>
+
+## Importing skills
+
+### Import from file
+
+File imports support `.md` and `.markdown` files. If the file has front matter, Sourcebot uses it to prefill the skill name, command, and description.
+
+Supported front matter fields:
+
+```md
+---
+name: Debug Build Failure
+slug: debug-build
+description: Investigate a failing CI or build error.
+---
+```
+
+You can also use `title` instead of `name`, and `command` instead of `slug`.
+
+After importing a local file, the skill is editable in Sourcebot.
+
+### Import from repository
+
+Repository imports let you choose a markdown file from an indexed repository. Sourcebot prefills the create form from the file so you can review it, add a missing description, and save. The resulting skill stays synced to that file.
+
+Synced skills behave like manually-created skills, with a link back to their source file:
+
+- Every field stays editable. Local edits are kept until you sync.
+- Sourcebot checks whether the indexed source file has changed.
+- When an update is available, use **Update from source** to replace the skill's content with the file's.
+- When the skill is already up to date, use **Force sync** to restore the content from the source file.
+- Either action warns you first if it would overwrite local edits.
+- Fields the source file does not provide (for example, a missing `description`) keep their local values when you sync.
+
+<Frame>
+  <img src="/images/skills_synced_from_repo.png" alt="Synced repository skill" />
+</Frame>
+
+## Permissions and synced skills
+
+Synced skills mirror content from a repository file, so Sourcebot only shows them to users who can access the source repository.
+
+If repository permission syncing is enabled, sharing a synced skill shows a warning before publishing it to the workspace. Members without access to the source repository will not see the skill.
+
+Organization owners can still see and manage shared synced skills from workspace settings, even if they do not have access to the source repository.
+
+## Managing skills
+
+From **Settings -> Skills**, you can:
+
+- Search personal and shared skills.
+- Create, edit, delete, or share skills.
+- Add or remove shared skills from your commands.
+- Make a shared skill personal if you manage it.
+- Update synced skills from their source file.
+
+Synced skills show their source repository and file path, plus one of these statuses:
+
+- **Up to date**: The skill matches the indexed source file.
+- **Update available**: The indexed source file has changed.
+- **Source file not found**: The file was renamed, deleted, or no longer resolves at the imported revision.
+- **Source repo unavailable**: The repository is no longer available or visible.

packages/db/prisma/migrations/20260706000100_add_agent_skills/migration.sql

@@ -0,0 +1,87 @@
+-- CreateEnum
+CREATE TYPE "AgentSkillVisibility" AS ENUM ('PERSONAL', 'SHARED');
+
+-- CreateTable
+CREATE TABLE "AgentSkill" (
+    "id" TEXT NOT NULL,
+    "visibility" "AgentSkillVisibility" NOT NULL,
+    "scopeId" TEXT NOT NULL,
+    "slug" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "description" TEXT NOT NULL,
+    "instructions" TEXT NOT NULL,
+    "createdById" TEXT NOT NULL,
+    "updatedById" TEXT,
+    "orgId" INTEGER NOT NULL,
+    "enabled" BOOLEAN NOT NULL DEFAULT true,
+    "autoEnrolled" BOOLEAN NOT NULL DEFAULT false,
+    "sourceRepoName" TEXT,
+    "sourceFilePath" TEXT,
+    "sourceRevision" TEXT,
+    "sourceBlobSha" TEXT,
+    "sourceImportedAt" TIMESTAMP(3),
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "AgentSkill_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "AgentSkillAdoption" (
+    "id" TEXT NOT NULL,
+    "userId" TEXT NOT NULL,
+    "orgId" INTEGER NOT NULL,
+    "agentSkillId" TEXT NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "removedAt" TIMESTAMP(3),
+
+    CONSTRAINT "AgentSkillAdoption_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE INDEX "AgentSkill_createdById_idx" ON "AgentSkill"("createdById");
+
+-- CreateIndex
+CREATE INDEX "AgentSkill_updatedById_idx" ON "AgentSkill"("updatedById");
+
+-- CreateIndex
+CREATE INDEX "AgentSkill_orgId_idx" ON "AgentSkill"("orgId");
+
+-- CreateIndex
+CREATE INDEX "AgentSkill_orgId_visibility_scopeId_idx" ON "AgentSkill"("orgId", "visibility", "scopeId");
+
+-- CreateIndex
+CREATE INDEX "AgentSkill_shared_catalog_idx" ON "AgentSkill"("orgId", "visibility", "scopeId", "enabled", "updatedAt" DESC, "name");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "AgentSkill_orgId_visibility_scopeId_slug_key" ON "AgentSkill"("orgId", "visibility", "scopeId", "slug");
+
+-- CreateIndex
+CREATE INDEX "AgentSkillAdoption_userId_orgId_removedAt_idx" ON "AgentSkillAdoption"("userId", "orgId", "removedAt");
+
+-- CreateIndex
+CREATE INDEX "AgentSkillAdoption_agentSkillId_idx" ON "AgentSkillAdoption"("agentSkillId");
+
+-- CreateIndex
+CREATE INDEX "AgentSkillAdoption_orgId_idx" ON "AgentSkillAdoption"("orgId");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "AgentSkillAdoption_orgId_userId_agentSkillId_key" ON "AgentSkillAdoption"("orgId", "userId", "agentSkillId");
+
+-- AddForeignKey
+ALTER TABLE "AgentSkill" ADD CONSTRAINT "AgentSkill_createdById_fkey" FOREIGN KEY ("createdById") REFERENCES "User"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "AgentSkill" ADD CONSTRAINT "AgentSkill_updatedById_fkey" FOREIGN KEY ("updatedById") REFERENCES "User"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "AgentSkill" ADD CONSTRAINT "AgentSkill_orgId_fkey" FOREIGN KEY ("orgId") REFERENCES "Org"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "AgentSkillAdoption" ADD CONSTRAINT "AgentSkillAdoption_userId_fkey" FOREIGN KEY ("userId") REFERENCES "User"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "AgentSkillAdoption" ADD CONSTRAINT "AgentSkillAdoption_orgId_fkey" FOREIGN KEY ("orgId") REFERENCES "Org"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "AgentSkillAdoption" ADD CONSTRAINT "AgentSkillAdoption_agentSkillId_fkey" FOREIGN KEY ("agentSkillId") REFERENCES "AgentSkill"("id") ON DELETE CASCADE ON UPDATE CASCADE;

packages/db/prisma/schema.prisma

@@ -334,6 +334,8 @@ model Org {
   repoVisits RepoVisit[]
 
   mcpServers McpServer[]
+  agentSkills AgentSkill[]
+  agentSkillAdoptions AgentSkillAdoption[]
 
   license License?
   servicePingEvents ServicePingEvent[]
@@ -519,6 +521,9 @@ model User {
   sessionVersion Int @default(0)
 
   userMcpServers       UserMcpServer[]
+  createdAgentSkills   AgentSkill[] @relation("AgentSkillCreatedBy")
+  updatedAgentSkills   AgentSkill[] @relation("AgentSkillUpdatedBy")
+  agentSkillAdoptions  AgentSkillAdoption[]
 
   createdAt DateTime @default(now())
   updatedAt DateTime @updatedAt
@@ -741,6 +746,93 @@ model ChatAccess {
   @@unique([chatId, userId])
 }
 
+enum AgentSkillVisibility {
+  PERSONAL
+  SHARED
+}
+
+model AgentSkill {
+  id String @id @default(cuid())
+
+  // Namespace identity for slash-command uniqueness and lookup.
+  // This is not a foreign key and should not be used as an authorization check by itself.
+  //
+  // Every skill belongs to an org (orgId is always set).
+  // PERSONAL: scopeId is the user id; the skill is private to that user within the org.
+  // SHARED:   scopeId is String(orgId); the skill is visible to the whole org (opt-in via adoptions).
+  //
+  // Future sharing/grants should treat this as the skill's home namespace, not as the ACL.
+  visibility AgentSkillVisibility
+  scopeId    String
+  slug       String
+
+  name         String
+  description  String
+  instructions String
+
+  // The user who authored the skill. This is audit metadata, separate from
+  // the namespace that owns the slash-command slug.
+  createdBy   User   @relation("AgentSkillCreatedBy", fields: [createdById], references: [id], onDelete: Cascade)
+  createdById String
+
+  updatedBy   User?   @relation("AgentSkillUpdatedBy", fields: [updatedById], references: [id], onDelete: SetNull)
+  updatedById String?
+
+  // The owning org. Both PERSONAL and SHARED skills are scoped to an org, so a
+  // user's personal skills change when they switch orgs.
+  org   Org @relation(fields: [orgId], references: [id], onDelete: Cascade)
+  orgId Int
+
+  enabled      Boolean  @default(true)
+  autoEnrolled Boolean  @default(false)
+
+  // Provenance for skills imported from an indexed repository file. All null for
+  // skills created manually or imported from a local file. When set, the skill's
+  // content is a read-only mirror of the source file: edits happen in the repo and
+  // are pulled in via "Update from source". sourceBlobSha (the git blob OID at
+  // import) is the comparison key used to detect when the indexed file has changed.
+  // Sync is personal-only; publishing to shared snapshots the content and drops
+  // these fields.
+  sourceRepoName   String?
+  sourceFilePath   String?
+  sourceRevision   String?
+  sourceBlobSha    String?
+  sourceImportedAt DateTime?
+
+  createdAt DateTime @default(now())
+  updatedAt DateTime @updatedAt
+
+  adoptions AgentSkillAdoption[]
+
+  @@unique([orgId, visibility, scopeId, slug])
+  @@index([createdById])
+  @@index([updatedById])
+  @@index([orgId])
+  @@index([orgId, visibility, scopeId])
+  @@index([orgId, visibility, scopeId, enabled, updatedAt(sort: Desc), name], map: "AgentSkill_shared_catalog_idx")
+}
+
+model AgentSkillAdoption {
+  id String @id @default(cuid())
+
+  user   User   @relation(fields: [userId], references: [id], onDelete: Cascade)
+  userId String
+
+  org   Org @relation(fields: [orgId], references: [id], onDelete: Cascade)
+  orgId Int
+
+  agentSkill   AgentSkill @relation(fields: [agentSkillId], references: [id], onDelete: Cascade)
+  agentSkillId String
+
+  createdAt DateTime @default(now())
+  removedAt DateTime?
+
+  @@unique([orgId, userId, agentSkillId])
+  @@index([userId, orgId, removedAt])
+  @@index([agentSkillId])
+  @@index([orgId])
+}
+
 // OAuth2 Authorization Server models
 // @see: https://datatracker.ietf.org/doc/html/rfc6749