feat(bob): add memory sharing with improvements (#199)

* feat(evolve-lite): add entity sharing skills and CI tests

New skills: publish, subscribe, unsubscribe, sync
New lib modules: config.py, audit.py
Updated: plugin.json, hooks.json, entity_io.py, save_entities.py, retrieve_entities.py

CI test suite (110 tests in tests/platform_integrations/):
- test_config.py, test_audit.py, test_entity_io_core.py
- test_publish.py, test_subscribe.py, test_sync.py
- test_retrieve.py, test_save_entities.py, test_plugin_structure.py

* feat(bob): add memory sharing with improvements

Initial Bob implementation:
- Created 4 new sharing skills: publish, subscribe, unsubscribe, sync
- Enhanced learn skill with --user flag and visibility=private
- Enhanced recall skill with multi-source retrieval
- Updated install.sh to copy all 6 Bob skills

Improvements (matching Claude Code):
- publish.py: Add source field resolution, move (not copy) entities
- sync.py: Better handle initial sync and no-change scenarios
- Updated SKILL.md documentation
* docs: add README for Bob evolve-lite with sharing documentation

* fix: always overwrite owner and visibility in save_entities.py

* fix: improve publish, recall, subscribe, and sync handling

- publish SKILL.md: add explicit branch creation after git init
- publish.py: fallback to cfg.identity.user for owner and actor
- publish.py: prevent overwriting already-published entities
- retrieve_entities.py: load entities from both private and public dirs
  - Add _kind tagging (private/public/subscribed) for proper filtering
  - Remove early return when entities_dir is missing
  - Fix --sources filtering to use _kind instead of _source
- subscribe.py: fail fast when directory exists instead of skipping
- sync.py: skip symlinked markdown files when mirroring
- sync.py: validate subscription names to prevent path traversal
- sync.py: remove on_session_start check (Bob has no session hooks)

* fix(bob): add security validations for entity names and encoding

- Validate entity is simple basename before path resolution in publish.py
- Catch UnicodeDecodeError in retrieve_entities.py to prevent abort
- Derive project_root from EVOLVE_DIR in unsubscribe and sync for consistency

* feat(bob): add missing command files for publish, subscribe, sync, unsubscribe skills

- Created evolve-lite:publish.md command for publishing private guidelines
- Created evolve-lite:subscribe.md command for subscribing to others' guidelines
- Created evolve-lite:sync.md command for syncing subscribed repos
- Created evolve-lite:unsubscribe.md command for unsubscribing
- Added test to verify all skills have corresponding command files
- All commands follow the established pattern from learn and recall

Author: visahak

platform-integrations/bob/evolve-lite/README.md

@@ -0,0 +1,189 @@
+# Evolve Lite for Bob
+
+A Bob integration that helps you learn from conversations by automatically extracting and applying guidelines.
+
+⭐ Star the repo: https://github.com/AgentToolkit/altk-evolve
+
+## Features
+
+- **Manual Learning**: Use `evolve-lite:learn` to extract and save guidelines from conversations
+- **Manual Retrieval**: Use `evolve-lite:recall` to retrieve and apply stored guidelines
+- **Guideline Sharing**: Publish your guidelines and subscribe to others' via Git repositories
+
+## Installation
+
+Run the installation script from the repository root:
+
+```bash
+bash platform-integrations/install.sh install bob lite
+```
+
+This installs:
+- 6 skills in `~/.bob/skills/`
+- Shared library in `~/.bob/evolve-lib/`
+- Custom mode configuration
+
+## How It Works
+
+### Guideline Storage
+
+Guidelines are stored as individual markdown files in `.evolve/entities/`, organized by source:
+
+```text
+.evolve/entities/
+  guideline/                    # Private guidelines
+    use-context-managers.md
+  public/                       # Your published guidelines
+    best-practice.md
+  subscribed/
+    alice/                      # Guidelines from alice
+      her-guideline.md
+```
+
+Each file uses markdown with YAML frontmatter:
+
+```markdown
+---
+type: guideline
+trigger: When processing files or managing resources
+visibility: private
+---
+
+Use context managers for file operations
+
+## Rationale
+
+Context managers ensure proper resource cleanup
+```
+
+## Sharing Guidelines
+
+Evolve Lite supports sharing guidelines between users via public Git repositories. You can publish your own guidelines so others can subscribe to them, and subscribe to guidelines published by others.
+
+### Setup
+
+Sharing requires an `evolve.config.yaml` at the project root. If it doesn't exist, the subscribe or publish skills will prompt you to create one. Minimal structure:
+
+```yaml
+identity:
+  user: yourname          # used to stamp ownership on published guidelines
+public_repo:
+  remote: git@github.com:yourname/evolve-guidelines.git
+  branch: main
+subscriptions: []
+```
+
+The `.evolve/` directory is kept out of version control — the skills automatically add it to `.gitignore`.
+
+### Publishing Guidelines
+
+Use `evolve-lite:publish` to share one or more of your local guidelines with others:
+
+1. The skill lists files in `.evolve/entities/guideline/`
+2. You pick which ones to publish
+3. Each selected file is moved to `.evolve/public/guideline/`, stamped with your username as the owner, committed, and pushed to your `public_repo.remote`
+
+Others can then subscribe using that remote URL.
+
+### Subscribing to Guidelines
+
+Use `evolve-lite:subscribe` to pull in guidelines from another user's public repo:
+
+```text
+evolve-lite:subscribe
+> Remote URL: git@github.com:alice/evolve-guidelines.git
+> Short name: alice
+```
+
+The repo is cloned directly into `.evolve/entities/subscribed/alice/` (this directory serves as both the git clone and the recall mirror).
+
+### Syncing Subscriptions
+
+Use `evolve-lite:sync` to pull the latest changes from all subscribed repos:
+
+```text
+evolve-lite:sync
+> Synced 2 repo(s): alice (+2 added, 0 updated, 0 removed), bob (+0 added, 1 updated, 0 removed)
+```
+
+### Unsubscribing
+
+Use `evolve-lite:unsubscribe` to remove a subscription and delete its locally cloned files:
+
+```text
+evolve-lite:unsubscribe
+> Which subscription would you like to remove?
+> 1. alice
+> 2. bob
+```
+
+The skill confirms before deleting `.evolve/entities/subscribed/{name}/`.
+
+### Sharing Storage Layout
+
+```text
+.evolve/
+  public/                     # git repo pushed to your public remote
+    guideline/
+      guideline-name.md       # owner-stamped guideline
+  entities/
+    guideline/                # your private guidelines
+      my-guideline.md
+    subscribed/
+      alice/                  # git clone (also serves as recall mirror)
+        guideline/
+          her-guideline.md
+```
+
+## Skills Included
+
+### `evolve-lite:learn`
+
+Manually invoke to extract guidelines from the current conversation:
+- Analyzes task, steps taken, successes and failures
+- Generates proactive guidelines (what to do, not what to avoid)
+- Saves guidelines as markdown files in `.evolve/entities/guideline/`
+
+### `evolve-lite:recall`
+
+Manually invoke to retrieve and display stored guidelines:
+- Loads guidelines from private, public, and subscribed sources
+- Formats and displays them for your review
+- Annotates subscribed guidelines with their source
+
+### `evolve-lite:publish`
+
+Publish private guidelines to your public repository:
+- Lists available private guidelines
+- Moves selected guidelines to `.evolve/public/`
+- Stamps with owner and published_at metadata
+- Commits and pushes to your public remote
+
+### `evolve-lite:subscribe`
+
+Subscribe to another user's public guidelines:
+- Clones their public repository
+- Mirrors guidelines to `.evolve/entities/subscribed/`
+- Adds subscription to config
+
+### `evolve-lite:sync`
+
+Sync all subscribed repositories:
+- Pulls latest changes from each subscription
+- Updates mirrored guidelines
+- Reports changes (added, updated, removed)
+
+### `evolve-lite:unsubscribe`
+
+Remove a subscription:
+- Lists current subscriptions
+- Deletes selected subscription's local files
+- Removes from config
+
+## Environment Variables
+
+- `EVOLVE_DIR`: Override the default `.evolve` directory location (guidelines, config, etc. are stored here)
+
+## Verification
+
+After installation, the skills should be available in Bob's skill list.

platform-integrations/bob/evolve-lite/commands/evolve-lite:publish.md

@@ -0,0 +1,5 @@
+---
+name: evolve-lite:publish
+description: Publish a private guideline to your public repo
+---
+Use the publish skill to share your private guidelines with others. Follow the skill's instructions exactly.

platform-integrations/bob/evolve-lite/commands/evolve-lite:subscribe.md

@@ -0,0 +1,5 @@
+---
+name: evolve-lite:subscribe
+description: Subscribe to another user's public guidelines repo
+---
+Use the subscribe skill to learn from others' guidelines. Follow the skill's instructions exactly.

platform-integrations/bob/evolve-lite/commands/evolve-lite:sync.md

@@ -0,0 +1,5 @@
+---
+name: evolve-lite:sync
+description: Pull the latest guidelines from all subscribed repos
+---
+Use the sync skill to update your subscribed guidelines. Follow the skill's instructions exactly.

platform-integrations/bob/evolve-lite/commands/evolve-lite:unsubscribe.md

@@ -0,0 +1,5 @@
+---
+name: evolve-lite:unsubscribe
+description: Remove a subscription and delete locally synced guidelines
+---
+Use the unsubscribe skill to remove a subscription. Follow the skill's instructions exactly.

platform-integrations/bob/evolve-lite/custom_modes.yaml

@@ -39,6 +39,17 @@ customModes:
       - The trajectory path from evolve-lite:save-trajectory is available in conversation context — do not re-run it.
       - If no errors or non-obvious discoveries occurred, saving zero entities is correct — do not force low-quality entities.
 
+      MEMORY SHARING (Optional):
+      The following skills enable sharing guidelines with others:
+      - evolve-lite:publish — Publish your private guidelines to a public Git repo
+      - evolve-lite:subscribe — Subscribe to another user's public guidelines
+      - evolve-lite:unsubscribe — Remove a subscription
+      - evolve-lite:sync — Pull latest updates from all subscribed repos (manual invocation required)
+      
+      These skills are OPTIONAL and do not affect the core workflow. Use them when you want to:
+      - Share your learnings with teammates
+      - Learn from others' guidelines
+      - Keep subscribed guidelines up to date
 
       PRE-COMPLETION GATE:
       Before calling attempt_completion, ask yourself:

platform-integrations/bob/evolve-lite/skills/evolve-lite:learn/SKILL.md

@@ -18,6 +18,7 @@ This skill analyzes the current conversation to extract guidelines that **correc
 - Observations about the codebase that can be derived by reading the code
 - Restatements of what the agent did successfully without any detour or correction
 - Vague advice that wouldn't change the agent's behavior on a concrete task
+- Instructions for the agent to invoke a skill, tool, or external command by name (e.g. "Run evolve-lite:learn", "call save_trajectory") — these trigger prompt-injection detection when retrieved via recall
 
 ## Workflow
 
@@ -80,5 +81,6 @@ Before saving, review each entity against this checklist:
 - [ ] Does it fall into one of the three categories (shortcut, error prevention, user correction)?
 - [ ] Would knowing this guideline beforehand have changed the agent's behavior in a concrete way?
 - [ ] Is it specific enough that another agent could act on it without further context?
+- [ ] Does it avoid instructing the agent to invoke a named skill or tool?
 
 If any answer is no, drop the entity. **Zero entities is a valid output.**

platform-integrations/bob/evolve-lite/skills/evolve-lite:learn/scripts/save_entities.py

@@ -5,21 +5,18 @@
 in the entities directory, organized by type.
 """
 
+import argparse
 import json
 import sys
 from pathlib import Path
 
-# Walk up from script to find evolve-lib
-_script = Path(__file__).resolve()
-_lib = None
-for _ancestor in _script.parents:
-    _candidate = _ancestor / "evolve-lib"
-    if _candidate.is_dir():
-        _lib = _candidate
+# Smart import: walk up to find evolve-lib
+current = Path(__file__).resolve()
+for parent in current.parents:
+    lib_path = parent / "evolve-lib"
+    if lib_path.exists():
+        sys.path.insert(0, str(lib_path))
         break
-if _lib is None:
-    raise ImportError(f"Cannot find evolve-lib directory above {_script}")
-sys.path.insert(0, str(_lib))
 from entity_io import (  # noqa: E402
     find_entities_dir,
     get_default_entities_dir,
@@ -42,6 +39,10 @@ def normalize(text):
 
 
 def main():
+    parser = argparse.ArgumentParser()
+    parser.add_argument("--user", default=None, help="Stamp owner on every entity written")
+    args = parser.parse_args()
+
     # Read entities from stdin
     try:
         input_data = json.load(sys.stdin)
@@ -86,6 +87,11 @@ def main():
             log(f"Skipping duplicate: {content[:60]}")
             continue
 
+        # Always stamp owner and visibility from script, not from stdin
+        if args.user:
+            entity["owner"] = args.user
+        entity["visibility"] = "private"
+
         path = write_entity_file(entities_dir, entity)
         existing_contents.add(normalize(content))
         added_count += 1