groove-dev 0.26.13 → 0.26.15

package/node_modules/@groove-dev/daemon/src/api.js

@@ -891,6 +891,15 @@ Keep responses concise. Help them think, don't lecture them about the system the
     }
   });
 
+  app.post('/api/skills/:id/update', async (req, res) => {
+    try {
+      const result = await daemon.skills.update(req.params.id);
+      res.json(result);
+    } catch (err) {
+      res.status(400).json({ error: err.message });
+    }
+  });
+
   app.post('/api/skills/:id/rate', async (req, res) => {
     try {
       const rating = parseInt(req.body?.rating, 10);

package/node_modules/@groove-dev/daemon/src/process.js

@@ -296,8 +296,10 @@ IMPORTANT: No task has been assigned yet. You MUST wait for the user to tell you
 
     // Apply PM review instructions for Auto permission mode
     // Agents call the PM endpoint before risky operations for AI review
+    // Skip for sandboxed providers (Codex) — localhost is unreachable from their sandbox
     const permission = config.permission || 'full';
-    if (permission === 'auto' || permission === 'supervised') {
+    const sandboxedProviders = ['codex'];
+    if ((permission === 'auto' || permission === 'supervised') && !sandboxedProviders.includes(providerName)) {
       const port = this.daemon.port || 31415;
       const pmPrompt = `## PM Review (Auto Mode)
 

package/node_modules/@groove-dev/daemon/src/skills.js

@@ -64,7 +64,7 @@ export class SkillStore {
       });
       if (res.ok) {
         user = await res.json();
-        console.log('[Groove:Auth] User object from API:', JSON.stringify(user));
+        console.log(`[Groove:Auth] Authenticated: ${user.username || user.id}`);
       } else {
         return null; // Invalid token
       }
@@ -329,6 +329,51 @@ export class SkillStore {
     return { id: skillId, installed: false };
   }
 
+  /**
+   * Update an installed skill — re-downloads latest content from the API.
+   */
+  async update(skillId) {
+    if (!this._isInstalled(skillId)) throw new Error(`Skill not installed: ${skillId}`);
+
+    let entry = this.registry.find((s) => s.id === skillId);
+    if (!entry) {
+      await this._refreshRegistry();
+      entry = this.registry.find((s) => s.id === skillId);
+    }
+
+    let content = null;
+
+    // Try live API content endpoint
+    try {
+      const res = await this._fetch(`${SKILLS_API}/skills/${skillId}/content`, { timeout: 10000 });
+      if (res.ok) {
+        const data = await res.json();
+        content = data.content;
+      }
+    } catch { /* fall through */ }
+
+    // Fall back to contentUrl
+    if (!content && entry?.contentUrl) {
+      try {
+        const res = await this._fetch(entry.contentUrl, { timeout: 10000 });
+        if (res.ok) content = await res.text();
+      } catch { /* fall through */ }
+    }
+
+    if (!content) {
+      throw new Error('Could not download latest version. Check your internet connection.');
+    }
+
+    // Overwrite local content
+    const skillDir = resolve(this.skillsDir, skillId);
+    mkdirSync(skillDir, { recursive: true });
+    writeFileSync(resolve(skillDir, 'SKILL.md'), content);
+
+    this.daemon.audit.log('skill.update', { id: skillId, name: entry?.name || skillId });
+
+    return { id: skillId, name: entry?.name || skillId, installed: true, updated: true };
+  }
+
   /**
    * Rate a skill. Proxies to the skills server.
    */

package/node_modules/@groove-dev/daemon/src/terminal-pty.js

@@ -2,6 +2,7 @@
 // FSL-1.1-Apache-2.0 — see LICENSE
 
 import { spawn, execFileSync } from 'child_process';
+import { randomUUID } from 'crypto';
 import { existsSync } from 'fs';
 
 // Python helper that creates a real PTY and relays I/O through stdin/stdout pipes.
@@ -81,12 +82,11 @@ export class TerminalManager {
   constructor(daemon) {
     this.daemon = daemon;
     this.sessions = new Map();
-    this.counter = 0;
     this._python = this._findPython();
   }
 
   spawn(ws, options = {}) {
-    const id = `term-${++this.counter}`;
+    const id = `term-${randomUUID()}`;
     const shell = this._detectShell();
     const cwd = options.cwd || this.daemon.projectDir;
     const cols = options.cols || 120;