groove-dev 0.26.13 → 0.26.15

package/node_modules/@groove-dev/gui/src/views/marketplace.jsx

@@ -19,7 +19,7 @@ import { fmtNum, timeAgo } from '../lib/format';
 import { useGrooveStore } from '../stores/groove';
 import {
   ChevronLeft, ChevronDown, Sparkles, Plug, LogIn, LogOut,
-  User, Upload, Package, Download, ShoppingBag,
+  User, Upload, Package, Download, ShoppingBag, RefreshCw, Trash2,
 } from 'lucide-react';
 
 // ── Skill Detail ─────────────────────────────────────────
@@ -28,6 +28,8 @@ function SkillDetail({ skill, onBack }) {
   const [content, setContent] = useState('');
   const [requiresPurchase, setRequiresPurchase] = useState(false);
   const [installing, setInstalling] = useState(false);
+  const [updating, setUpdating] = useState(false);
+  const [uninstalling, setUninstalling] = useState(false);
   const [installed, setInstalled] = useState(skill.installed);
   const [loadingContent, setLoadingContent] = useState(true);
 
@@ -52,6 +54,28 @@ function SkillDetail({ skill, onBack }) {
     setInstalling(false);
   }
 
+  async function handleUpdate() {
+    setUpdating(true);
+    try {
+      await api.post(`/skills/${skill.id}/update`);
+      toast.success(`${skill.name} updated to latest`);
+      // Refresh content preview
+      const d = await api.get(`/skills/${skill.id}/content`);
+      if (d.content) setContent(d.content);
+    } catch (err) { toast.error('Update failed', err.message); }
+    setUpdating(false);
+  }
+
+  async function handleUninstall() {
+    setUninstalling(true);
+    try {
+      await api.delete(`/skills/${skill.id}`);
+      setInstalled(false);
+      toast.success(`${skill.name} uninstalled`);
+    } catch (err) { toast.error('Uninstall failed', err.message); }
+    setUninstalling(false);
+  }
+
   async function handleBuy() {
     const { marketplaceAuthenticated, marketplaceLogin, marketplaceCheckout } = useGrooveStore.getState();
     if (!marketplaceAuthenticated) {
@@ -133,13 +157,32 @@ function SkillDetail({ skill, onBack }) {
                 >
                   Buy ${(skill.price || 0).toFixed(2)}
                 </button>
+              ) : installed ? (
+                <div className="mt-3 flex flex-col gap-1.5">
+                  <button
+                    onClick={handleUpdate}
+                    disabled={updating}
+                    className="w-full py-2 px-3 text-xs font-sans font-semibold rounded cursor-pointer transition-all hover:opacity-85 disabled:opacity-60 disabled:cursor-not-allowed flex items-center justify-center gap-2 border bg-accent/15 text-accent border-accent/20 hover:bg-accent/25"
+                  >
+                    <RefreshCw size={12} className={updating ? 'animate-spin' : ''} />
+                    {updating ? 'Updating...' : 'Pull Latest'}
+                  </button>
+                  <button
+                    onClick={handleUninstall}
+                    disabled={uninstalling}
+                    className="w-full py-2 px-3 text-xs font-sans font-semibold rounded cursor-pointer transition-all hover:opacity-85 disabled:opacity-60 disabled:cursor-not-allowed flex items-center justify-center gap-2 border bg-error/10 text-error border-error/20 hover:bg-error/15"
+                  >
+                    <Trash2 size={12} />
+                    {uninstalling ? 'Removing...' : 'Uninstall'}
+                  </button>
+                </div>
               ) : (
                 <button
                   onClick={handleInstall}
-                  disabled={installing || installed}
-                  className={`w-full mt-3 py-2 px-3 text-xs font-sans font-semibold rounded cursor-pointer transition-all hover:opacity-85 disabled:opacity-60 disabled:cursor-not-allowed flex items-center justify-center gap-2 border ${installed ? 'bg-success/15 text-success border-success/20' : 'bg-accent/15 text-accent border-accent/20 hover:bg-accent/25'}`}
+                  disabled={installing}
+                  className="w-full mt-3 py-2 px-3 text-xs font-sans font-semibold rounded cursor-pointer transition-all hover:opacity-85 disabled:opacity-60 disabled:cursor-not-allowed flex items-center justify-center gap-2 border bg-accent/15 text-accent border-accent/20 hover:bg-accent/25"
                 >
-                  {installing ? 'Installing...' : installed ? '\u2713 Installed' : 'Install'}
+                  {installing ? 'Installing...' : 'Install'}
                 </button>
               )}
 
@@ -278,9 +321,15 @@ function MyLibrary() {
   const [purchases, setPurchases] = useState([]);
   const [installed, setInstalled] = useState([]);
   const [loading, setLoading] = useState(true);
+  const [busyId, setBusyId] = useState(null);
   const toast = useToast();
   const fileRef = useRef(null);
 
+  const refreshInstalled = async () => {
+    const data = await api.get('/skills/installed');
+    setInstalled(Array.isArray(data) ? data : data.skills || []);
+  };
+
   useEffect(() => {
     setLoading(true);
     Promise.all([
@@ -292,6 +341,26 @@ function MyLibrary() {
     }).finally(() => setLoading(false));
   }, [authenticated]);
 
+  async function handleUpdate(s) {
+    setBusyId(s.id);
+    try {
+      await api.post(`/skills/${s.id}/update`);
+      toast.success(`${s.name || s.id} updated`);
+      await refreshInstalled();
+    } catch (err) { toast.error('Update failed', err.message); }
+    setBusyId(null);
+  }
+
+  async function handleUninstall(s) {
+    setBusyId(s.id);
+    try {
+      await api.delete(`/skills/${s.id}`);
+      toast.success(`${s.name || s.id} uninstalled`);
+      await refreshInstalled();
+    } catch (err) { toast.error('Uninstall failed', err.message); }
+    setBusyId(null);
+  }
+
   async function handleImport(e) {
     const file = e.target.files?.[0];
     if (!file) return;
@@ -300,9 +369,7 @@ function MyLibrary() {
       const name = file.name.replace(/\.md$/i, '');
       await api.post('/skills/import', { name, content });
       toast.success(`Imported "${name}"`);
-      // Refresh installed list
-      const data = await api.get('/skills/installed');
-      setInstalled(Array.isArray(data) ? data : data.skills || []);
+      await refreshInstalled();
     } catch (err) {
       toast.error('Import failed', err.message);
     }
@@ -398,6 +465,24 @@ function MyLibrary() {
                     <div className="text-xs font-semibold text-text-0 font-sans truncate">{s.name || s.id}</div>
                     <div className="text-2xs text-text-3 font-sans truncate">{s.description || s.category || 'local skill'}</div>
                   </div>
+                  <div className="flex items-center gap-1 opacity-0 group-hover:opacity-100 transition-opacity">
+                    <button
+                      onClick={() => handleUpdate(s)}
+                      disabled={busyId === s.id}
+                      title="Pull latest version"
+                      className="p-1.5 rounded text-text-3 hover:text-accent hover:bg-accent/10 cursor-pointer transition-colors disabled:opacity-50"
+                    >
+                      <RefreshCw size={12} className={busyId === s.id ? 'animate-spin' : ''} />
+                    </button>
+                    <button
+                      onClick={() => handleUninstall(s)}
+                      disabled={busyId === s.id}
+                      title="Uninstall"
+                      className="p-1.5 rounded text-text-3 hover:text-error hover:bg-error/10 cursor-pointer transition-colors disabled:opacity-50"
+                    >
+                      <Trash2 size={12} />
+                    </button>
+                  </div>
                   <Badge variant="accent" className="text-2xs flex-shrink-0">Installed</Badge>
                 </div>
               ))}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "groove-dev",
-  "version": "0.26.13",
+  "version": "0.26.15",
   "description": "Open-source agent orchestration layer — the AI company OS. Local model agent engine (GGUF/Ollama/llama-server), HuggingFace model browser, MCP integrations (Slack, Gmail, Stripe, 15+), agent scheduling (cron), business roles (CMO, CFO, EA). GUI dashboard, multi-agent coordination, zero cold-start, infinite sessions. Works with Claude Code, Codex, Gemini CLI, Ollama, any local model.",
   "license": "FSL-1.1-Apache-2.0",
   "author": "Groove Dev <hello@groovedev.ai> (https://groovedev.ai)",

package/packages/daemon/src/api.js

@@ -891,6 +891,15 @@ Keep responses concise. Help them think, don't lecture them about the system the
     }
   });
 
+  app.post('/api/skills/:id/update', async (req, res) => {
+    try {
+      const result = await daemon.skills.update(req.params.id);
+      res.json(result);
+    } catch (err) {
+      res.status(400).json({ error: err.message });
+    }
+  });
+
   app.post('/api/skills/:id/rate', async (req, res) => {
     try {
       const rating = parseInt(req.body?.rating, 10);

package/packages/daemon/src/process.js

@@ -296,8 +296,10 @@ IMPORTANT: No task has been assigned yet. You MUST wait for the user to tell you
 
     // Apply PM review instructions for Auto permission mode
     // Agents call the PM endpoint before risky operations for AI review
+    // Skip for sandboxed providers (Codex) — localhost is unreachable from their sandbox
     const permission = config.permission || 'full';
-    if (permission === 'auto' || permission === 'supervised') {
+    const sandboxedProviders = ['codex'];
+    if ((permission === 'auto' || permission === 'supervised') && !sandboxedProviders.includes(providerName)) {
       const port = this.daemon.port || 31415;
       const pmPrompt = `## PM Review (Auto Mode)
 

package/packages/daemon/src/skills.js

@@ -64,7 +64,7 @@ export class SkillStore {
       });
       if (res.ok) {
         user = await res.json();
-        console.log('[Groove:Auth] User object from API:', JSON.stringify(user));
+        console.log(`[Groove:Auth] Authenticated: ${user.username || user.id}`);
       } else {
         return null; // Invalid token
       }
@@ -329,6 +329,51 @@ export class SkillStore {
     return { id: skillId, installed: false };
   }
 
+  /**
+   * Update an installed skill — re-downloads latest content from the API.
+   */
+  async update(skillId) {
+    if (!this._isInstalled(skillId)) throw new Error(`Skill not installed: ${skillId}`);
+
+    let entry = this.registry.find((s) => s.id === skillId);
+    if (!entry) {
+      await this._refreshRegistry();
+      entry = this.registry.find((s) => s.id === skillId);
+    }
+
+    let content = null;
+
+    // Try live API content endpoint
+    try {
+      const res = await this._fetch(`${SKILLS_API}/skills/${skillId}/content`, { timeout: 10000 });
+      if (res.ok) {
+        const data = await res.json();
+        content = data.content;
+      }
+    } catch { /* fall through */ }
+
+    // Fall back to contentUrl
+    if (!content && entry?.contentUrl) {
+      try {
+        const res = await this._fetch(entry.contentUrl, { timeout: 10000 });
+        if (res.ok) content = await res.text();
+      } catch { /* fall through */ }
+    }
+
+    if (!content) {
+      throw new Error('Could not download latest version. Check your internet connection.');
+    }
+
+    // Overwrite local content
+    const skillDir = resolve(this.skillsDir, skillId);
+    mkdirSync(skillDir, { recursive: true });
+    writeFileSync(resolve(skillDir, 'SKILL.md'), content);
+
+    this.daemon.audit.log('skill.update', { id: skillId, name: entry?.name || skillId });
+
+    return { id: skillId, name: entry?.name || skillId, installed: true, updated: true };
+  }
+
   /**
    * Rate a skill. Proxies to the skills server.
    */

package/packages/daemon/src/terminal-pty.js

@@ -2,6 +2,7 @@
 // FSL-1.1-Apache-2.0 — see LICENSE
 
 import { spawn, execFileSync } from 'child_process';
+import { randomUUID } from 'crypto';
 import { existsSync } from 'fs';
 
 // Python helper that creates a real PTY and relays I/O through stdin/stdout pipes.
@@ -81,12 +82,11 @@ export class TerminalManager {
   constructor(daemon) {
     this.daemon = daemon;
     this.sessions = new Map();
-    this.counter = 0;
     this._python = this._findPython();
   }
 
   spawn(ws, options = {}) {
-    const id = `term-${++this.counter}`;
+    const id = `term-${randomUUID()}`;
     const shell = this._detectShell();
     const cwd = options.cwd || this.daemon.projectDir;
     const cols = options.cols || 120;