Release v0.8.5: WebSocket CONNECT/INPUT protocol, skills discovery, bash permission matching

- Refactor WebSocket protocol: split INIT into CONNECT (auth) + INPUT (prompt)
- Skills plugin discovers .claude/skills/ paths, adds SkillInfo dataclass, setup_skills handler
- Bash permission parser validates full subcommands (not just command names) with fnmatch
- Prefer-write-tool: soft reminder for file reading instead of hard block
- Console shows loaded skills in agent banner
- Session registry lifecycle: executing → connected → suspended (replaces running/completed)
- Connect client updated for CONNECT → CONNECTED → INPUT protocol
- Update tests for new protocol and permission format

Author: wu-changxing

VERSIONING.md

@@ -26,7 +26,7 @@ Example: `0.0.2`
 - Reset MINOR and PATCH to 0
 - Reserved for major breaking changes or stable releases
 
-## Current Version: 0.8.4
+## Current Version: 0.8.5
 
 ### Version History
 - 0.0.1b1 → 0.0.1b8 (Beta releases)

connectonion/__init__.py

@@ -10,7 +10,7 @@
 ConnectOnion - A simple agent framework with behavior tracking.
 """
 
-__version__ = "0.8.4"
+__version__ = "0.8.5"
 
 # Auto-load .env files for the entire framework
 from dotenv import load_dotenv

connectonion/cli/co_ai/agent.py

@@ -15,7 +15,7 @@
 Plugins included:
 - eval: Session persistence for debugging
 - system_reminder: Contextual hints
-- prefer_write_tool: Nudges toward using Write over Edit
+- prefer_write_tool: Block bash file creation, soft-remind for file reading
 - tool_approval: Approval flow for dangerous operations
 - auto_compact: Context window management
 - ulw: Ultra work mode (autonomous N-turn sessions with continuation)
@@ -46,6 +46,7 @@
 from .plugins import system_reminder
 from connectonion import Agent, bash, TodoList
 from connectonion.useful_plugins import eval, tool_approval, auto_compact, prefer_write_tool, ulw, subagents
+from connectonion.useful_plugins.skills import skills as skills_plugin
 
 
 PROMPTS_DIR = Path(__file__).parent / "prompts"
@@ -88,7 +89,7 @@ def create_coding_agent(
         system_prompt += f"\n\n---\n\n{project_context}"
 
     # Use SDK's subagents plugin instead of custom task implementation
-    plugins = [subagents, eval, system_reminder, prefer_write_tool, tool_approval, auto_compact, ulw]
+    plugins = [skills_plugin, subagents, eval, system_reminder, prefer_write_tool, tool_approval, auto_compact, ulw]
 
     agent = Agent(
         name="oo",

connectonion/cli/co_ai/prompts/connectonion/index.md

@@ -95,7 +95,7 @@ Use `load_guide(path)` to load detailed documentation.
 | `useful_plugins/tool_approval` | User approval before dangerous tool calls |
 | `useful_plugins/auto_compact` | Context window management |
 | `useful_plugins/image_result_formatter` | Format base64 images for vision models |
-| `useful_plugins/prefer_write_tool` | Nudges toward write over edit for new files |
+| `useful_plugins/prefer_write_tool` | Block bash file creation, soft-remind for file reading |
 | `useful_plugins/ulw` | Ultra work mode — autonomous multi-turn sessions |
 | `useful_plugins/gmail_plugin` | Email approval and CRM sync |
 | `useful_plugins/calendar_plugin` | Calendar operation approval |

connectonion/console.py

@@ -102,7 +102,8 @@ def print_banner(
         tools: Union[List[str], int] = 0,
         log_dir: Optional[str] = None,
         llm: Any = None,
-        balance: Optional[float] = None
+        balance: Optional[float] = None,
+        skills: Optional[List[Any]] = None,
     ) -> None:
         """Print the ConnectOnion banner (Onion Stack style).
 
@@ -131,8 +132,17 @@ def print_banner(
             tools_count = tools
         tools_str = f"{tools_count} tool{'s' if tools_count != 1 else ''}" if tools_count else ""
 
-        # Build meta line: model · tools
-        meta_parts = [p for p in [model, tools_str] if p]
+        # Build skills string
+        skills_str = ""
+        if skills:
+            names = [s.name for s in skills]
+            if len(names) <= 4:
+                skills_str = f"{len(names)} skill{'s' if len(names) != 1 else ''} ({', '.join(names)})"
+            else:
+                skills_str = f"{len(names)} skills"
+
+        # Build meta line: model · tools · skills
+        meta_parts = [p for p in [model, tools_str, skills_str] if p]
         meta_line = " · ".join(meta_parts)
 
         # Check if using OpenOnion managed keys (free credits from Aaron)
@@ -210,6 +220,19 @@ def print_banner(
                     f.write(f"{line}\n")
                 f.write("\n")
 
+    def print_skills(self, skills: List[Any]) -> None:
+        """Print loaded skills after agent banner."""
+        if not skills:
+            return
+        names = '  '.join(f'[cyan]/{s.name}[/cyan]' for s in skills)
+        _rich_console.print(f"      [{DIM_COLOR}]skills:[/{DIM_COLOR}] {names}")
+        _rich_console.print()
+
+    def print_skill_invocation(self, skill_name: str, description: str = "") -> None:
+        """Print when a skill is triggered by user /command."""
+        desc = f"  [dim]{description}[/dim]" if description else ""
+        _rich_console.print(f"{_prefix()} [bold cyan]/{skill_name}[/bold cyan]{desc}")
+
     def print(self, message: str, style: str = None, use_prefix: bool = True):
         """Print message to console and/or log file.
 

connectonion/core/agent.py

@@ -47,6 +47,7 @@ def __init__(
         co_dir: Optional[Union[str, Path]] = None
     ):
         self.name = name
+        self.co_dir = Path(co_dir) if co_dir else Path(".co")
         self.system_prompt = load_system_prompt(system_prompt)
         self.max_iterations = max_iterations
 
@@ -154,7 +155,8 @@ def __init__(
                 model=self.llm.model,
                 tools=len(self.tools),
                 log_dir=log_dir,
-                llm=self.llm
+                llm=self.llm,
+                skills=getattr(self, 'skills', []),
             )
 
     def _next_trace_id(self) -> str:

connectonion/network/asgi/__init__.py

@@ -4,7 +4,7 @@
   Dependencies: imports from [asgi/http.py, asgi/websocket.py, time, asyncio] | imported by [network/host/server.py, network/__init__.py] | tested by [tests/network/test_asgi.py]
   Data flow: create_app(route_handlers, storage, trust, blacklist, whitelist, on_startup, on_shutdown) → returns ASGI app callable → uvicorn calls app(scope, receive, send) → handles lifespan for startup/shutdown → routes to handle_http() or handle_websocket() based on scope type
   State/Effects: captures start_time for uptime | runs on_startup/on_shutdown callbacks during lifespan | relay connection runs as async task in same event loop
-  Integration: exposes create_app() factory, handle_http(), handle_websocket(), _pump_messages(), CORS_HEADERS, read_body(), send_json(), send_html(), send_text() | raw ASGI (no FastAPI/Starlette) for protocol control | lifespan support for relay connection
+  Integration: exposes create_app() factory, handle_http(), handle_websocket(), _pipe_ws_io(), CORS_HEADERS, read_body(), send_json(), send_html(), send_text() | raw ASGI (no FastAPI/Starlette) for protocol control | lifespan support for relay connection
   Performance: minimal overhead (direct ASGI protocol) | async I/O for concurrency | single event loop for HTTP, WebSocket, and relay
   Errors: none (errors handled in http.py/websocket.py)
 ASGI application for HTTP and WebSocket handling.
@@ -18,7 +18,7 @@
 from typing import Callable, Awaitable
 
 from .http import handle_http, send_json, send_html, send_text, read_body, CORS_HEADERS
-from .websocket import handle_websocket, _pump_messages
+from .websocket import handle_websocket, _pipe_ws_io
 
 
 def create_app(
@@ -107,7 +107,7 @@ async def app(scope, receive, send):
     "create_app",
     "handle_http",
     "handle_websocket",
-    "_pump_messages",
+    "_pipe_ws_io",
     "CORS_HEADERS",
     "read_body",
     "send_json",

connectonion/network/host/routes.py

@@ -152,9 +152,10 @@ def info_handler(agent_metadata: dict, trust, trust_config: dict | None = None,
         "name": agent_metadata["name"],
         "address": agent_metadata["address"],
         "tools": agent_metadata["tools"],
-        "model": agent_metadata.get("model", "unknown"),  # Add model info
+        "model": agent_metadata.get("model", "unknown"),
         "trust": trust.trust,  # Extract level string from TrustAgent
         "version": __version__,
+        "skills": agent_metadata.get("skills", []),
         "accepted_inputs": {
             "text": True,
             "images": True,

connectonion/network/host/server.py

@@ -103,10 +103,13 @@ def _extract_agent_metadata(create_agent: Callable) -> tuple[dict, object]:
         (metadata dict, sample_agent) - sample_agent for additional extraction
     """
     sample = create_agent()
+    raw_skills = getattr(sample, 'skills', [])
     metadata = {
         "name": sample.name,
         "tools": sample.tools.names(),
-        "model": sample.llm.model,  # Add model to metadata
+        "model": sample.llm.model,
+        "skills": [{"name": s.name, "description": s.description, "location": s.location}
+                   for s in raw_skills],
     }
     return metadata, sample
 

connectonion/useful_plugins/prefer_write_tool.py

@@ -1,25 +1,21 @@
 """
-Purpose: Reject bash file operations and remind agent to use proper tools instead
+Purpose: Block bash file creation and soft-remind for file reading
 LLM-Note:
   Dependencies: imports from [core/events.py] | imported by [useful_plugins/__init__.py]
-  Data flow: before_each_tool fires → detect bash file operations → raise ValueError with system reminder
-  State/Effects: none (rejects tool before execution)
+  Data flow: before_each_tool fires → block file creation (ValueError) or flag file reading →
+             after_each_tool fires → append soft reminder to tool result for file reading
+  State/Effects: sets session['_prefer_read_file_reminder'] flag for soft reminders
   Integration: exposes prefer_write_tool plugin list
-  Errors: raises ValueError when bash tries to create or read files
+  Errors: raises ValueError only for bash file creation
 
-Prefer Write Tool Plugin - Block bash file operations, remind to use proper tools.
+Prefer Write Tool Plugin - Block bash file creation, soft-remind for file reading.
 
 AI models often use bash commands for file operations:
-- Creating: `cat <<EOF > file.py`, `echo > file.py`
-- Reading: `cat file.txt`, `head file.txt`, `tail file.txt`
+- Creating: `cat <<EOF > file.py`, `echo > file.py` → BLOCKED
+- Reading: `cat file.txt`, `head file.txt`, `tail file.txt` → SOFT REMINDER
 
-This is an anti-pattern because:
-1. Bypasses proper tool UI/diffs/approval flow
-2. Escaping issues with special characters
-3. Harder to review and track
-4. No line numbers or formatting
-
-This plugin detects these patterns BEFORE execution and rejects with a reminder.
+File creation is blocked because it bypasses tool UI/diffs/approval flow.
+File reading is allowed but a system reminder suggests using read_file tool instead.
 
 Usage:
     from connectonion import Agent
@@ -31,35 +27,34 @@
 import re
 from typing import TYPE_CHECKING
 
-from ..core.events import before_each_tool
+from ..core.events import before_each_tool, after_each_tool
 
 if TYPE_CHECKING:
     from ..core.agent import Agent
 
 
-# Patterns that indicate bash is being used to create/write files
+# Patterns that indicate bash is being used to create/write files (hard blocked)
 FILE_CREATION_PATTERNS = [
     re.compile(r"cat\s+<<"),              # cat <<EOF, cat <<'EOF', cat << 'EOF'
     re.compile(r">\s*\S+\.\w+\s*<<"),     # > file.py <<EOF
-    re.compile(r"echo\s+.*>\s*\S+"),      # echo "..." > file
-    re.compile(r"printf\s+.*>\s*\S+"),    # printf "..." > file
+    re.compile(r"echo\s+.*[^2]>\s*\S+"),  # echo "..." > file (but not 2>)
+    re.compile(r"printf\s+.*[^2]>\s*\S+"),# printf "..." > file (but not 2>)
     re.compile(r"tee\s+\S+"),             # tee file.py
-    re.compile(r">\s*[~/\.]"),            # > file, > ./file, > ~/file, > /path
-    re.compile(r">>\s*[~/\.]"),           # >> file, >> ./file, >> ~/file, >> /path
-    re.compile(r"\s+>\s+\S+"),            # cmd > file (with spaces)
-    re.compile(r"\s+>>\s+\S+"),           # cmd >> file (with spaces)
+    re.compile(r"(?<!\d)>\s*[~\.]"),      # > ./file, > ~/file (not 2>/dev/null)
+    re.compile(r"(?<!\d)>>\s*[~\.]"),     # >> ./file, >> ~/file
 ]
 
-# Patterns that indicate bash is being used to read files
+# Patterns that indicate bash is being used to read files (standalone, not in pipelines)
+# These trigger a soft reminder, not a hard block
 FILE_READING_PATTERNS = [
-    re.compile(r"^\s*cat\s+\S+"),      # cat file.txt (at start of command)
-    re.compile(r"[;&|]\s*cat\s+\S+"),  # ... && cat file.txt
-    re.compile(r"^\s*head\s+\S+"),     # head file.txt
-    re.compile(r"[;&|]\s*head\s+\S+"), # ... && head file.txt
-    re.compile(r"^\s*tail\s+\S+"),     # tail file.txt
-    re.compile(r"[;&|]\s*tail\s+\S+"), # ... && tail file.txt
-    re.compile(r"^\s*less\s+\S+"),     # less file.txt
-    re.compile(r"^\s*more\s+\S+"),     # more file.txt
+    re.compile(r"^\s*cat\s+\S+\s*$"),           # cat file.txt (standalone, no pipe)
+    re.compile(r"[;&]\s*cat\s+\S+\s*$"),        # ... && cat file.txt (standalone at end)
+    re.compile(r"^\s*head\s+\S+"),              # head file.txt
+    re.compile(r"[;&|]\s*head\s+\S+"),          # ... && head file.txt
+    re.compile(r"^\s*tail\s+\S+"),              # tail file.txt
+    re.compile(r"[;&|]\s*tail\s+\S+"),          # ... && tail file.txt
+    re.compile(r"^\s*less\s+\S+"),              # less file.txt
+    re.compile(r"^\s*more\s+\S+"),              # more file.txt
 ]
 
 
@@ -81,7 +76,7 @@ def _is_file_reading_command(command: str) -> bool:
 
 @before_each_tool
 def block_bash_file_creation(agent: 'Agent') -> None:
-    """Block bash commands that create/read files, remind to use proper tools."""
+    """Block bash file creation. Flag file reading for soft reminder."""
     pending = agent.current_session.get('pending_tool')
     if not pending:
         return
@@ -92,7 +87,7 @@ def block_bash_file_creation(agent: 'Agent') -> None:
 
     command = pending['arguments'].get('command', '')
 
-    # Check for file creation
+    # File creation → hard block (raises ValueError)
     if _is_file_creation_command(command):
         if hasattr(agent, 'logger') and agent.logger:
             agent.logger.print("[yellow]⚠ Blocked bash file creation. Use Write tool instead.[/yellow]")
@@ -119,30 +114,30 @@ def block_bash_file_creation(agent: 'Agent') -> None:
             "</system-reminder>"
         )
 
-    # Check for file reading
+    # Check for file reading — soft flag, don't block
     if _is_file_reading_command(command):
+        agent.current_session['_prefer_read_file_reminder'] = True
         if hasattr(agent, 'logger') and agent.logger:
-            agent.logger.print("[yellow]⚠ Blocked bash file reading. Use read_file tool instead.[/yellow]")
+            agent.logger.print("[yellow]⚠ Consider using read_file tool instead of bash for reading files.[/yellow]")
 
-        if agent.io:
-            agent.io.send({
-                'type': 'tool_blocked',
-                'tool': tool_name,
-                'reason': 'file_reading',
-                'message': 'Use read_file tool instead of bash for reading files',
-                'command': command,
-            })
 
-        raise ValueError(
-            "Bash file reading blocked."
-            "\n\n<system-reminder>"
-            "You tried to read a file using bash (cat, head, tail, etc). This is blocked.\n\n"
-            "Use the read_file tool instead:\n"
-            "  read_file(file_path=\"/path/to/file.txt\")\n\n"
-            "Why: read_file provides line numbers, proper formatting, and better control.\n"
-            "Do NOT retry with bash. Use read_file tool now."
-            "</system-reminder>"
-        )
+@after_each_tool
+def remind_read_file(agent: 'Agent') -> None:
+    """Append soft system reminder to tool result when bash was used to read files."""
+    if not agent.current_session.pop('_prefer_read_file_reminder', False):
+        return
+
+    messages = agent.current_session.get('messages', [])
+    for msg in reversed(messages):
+        if msg.get('role') == 'tool':
+            msg['content'] = msg.get('content', '') + (
+                "\n\n<system-reminder>"
+                "You used bash to read a file. Consider using the read_file tool instead:\n"
+                "  read_file(file_path=\"/path/to/file.txt\")\n\n"
+                "Why: read_file provides line numbers, proper formatting, and better control."
+                "</system-reminder>"
+            )
+            break
 
 
-prefer_write_tool = [block_bash_file_creation]
+prefer_write_tool = [block_bash_file_creation, remind_read_file]