groove-dev 0.27.106 → 0.27.107

package/moe-training/client/scrubber.js

@@ -65,7 +65,7 @@ export class PIIScrubber {
       },
       {
         name: 'ipv6',
-        regex: /(?:[0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|(?:[0-9a-fA-F]{1,4}:){1,7}:|(?:[0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|::(?:[fF]{4}:)?(?:\d{1,3}\.){3}\d{1,3}|::1?\b/g,
+        regex: /(?:[0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|(?:[0-9a-fA-F]{1,4}:){1,7}:|(?:[0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|::(?:[fF]{4}:)?(?:\d{1,3}\.){3}\d{1,3}|::1\b/g,
         replacement: '[IP]',
       },
       {
@@ -100,7 +100,7 @@ export class PIIScrubber {
       },
       {
         name: 'base64_secret',
-        regex: /(?<![A-Za-z0-9+/])[A-Za-z0-9+/]{40,}={0,2}(?![A-Za-z0-9+/])/g,
+        regex: /(?<![A-Za-z0-9+])[A-Za-z0-9+]{40,}={0,2}(?![A-Za-z0-9+])/g,
         replacement: '[API_KEY]',
       },
     ];

package/moe-training/test/client/scrubber.test.js

@@ -131,6 +131,30 @@ describe('PIIScrubber', () => {
     assert.equal(scrubber.scrub(input), 'cd ~');
   });
 
+  it('does not scrub CSS pseudo-elements as IPv6', () => {
+    const input = '.hero-icon::before { content: ""; }';
+    assert.equal(scrubber.scrub(input), input);
+  });
+
+  it('still scrubs IPv6 loopback ::1', () => {
+    const input = 'listening on ::1 port 3000';
+    assert.equal(scrubber.scrub(input), 'listening on [IP] port 3000');
+  });
+
+  it('does not scrub file paths as base64 secrets', () => {
+    const input = '/home/user/project/groove/packages/gui/src/views/settings.jsx';
+    const result = scrubber.scrub(input);
+    assert.ok(!result.includes('[API_KEY]'), `expected no [API_KEY] in: ${result}`);
+  });
+
+  it('still scrubs real base64 secrets without slashes', () => {
+    const b64 = 'YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXoxMjM0NTY3ODk';
+    const input = `key: ${b64} end`;
+    const result = scrubber.scrub(input);
+    assert.ok(result.includes('[API_KEY]'), `expected [API_KEY] in: ${result}`);
+    assert.ok(!result.includes(b64));
+  });
+
   it('patterns do not interfere with each other', () => {
     const input = 'user@example.com called 555-123-4567 from 192.168.1.1';
     const result = scrubber.scrub(input);

package/node_modules/@groove-dev/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@groove-dev/cli",
-  "version": "0.27.106",
+  "version": "0.27.107",
   "description": "GROOVE CLI — manage AI coding agents from your terminal",
   "license": "FSL-1.1-Apache-2.0",
   "type": "module",

package/node_modules/@groove-dev/daemon/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@groove-dev/daemon",
-  "version": "0.27.106",
+  "version": "0.27.107",
   "description": "GROOVE daemon — agent orchestration engine",
   "license": "FSL-1.1-Apache-2.0",
   "type": "module",

package/node_modules/@groove-dev/daemon/src/api.js

@@ -740,9 +740,10 @@ export function createApi(app, daemon) {
           };
 
           const proc = spawn('codex', ['login'], {
-            stdio: ['ignore', 'pipe', 'pipe'],
+            stdio: ['pipe', 'pipe', 'pipe'],
             shell: true,
           });
+          proc.stdin.on('error', () => {});
           let stdout = '';
           let stderr = '';
           proc.stdout.on('data', (d) => { stdout += d.toString(); });
@@ -751,8 +752,8 @@ export function createApi(app, daemon) {
           const timeout = setTimeout(() => {
             const urlMatch = (stdout + stderr).match(/https:\/\/\S+/);
             respond(urlMatch
-              ? { status: 'pending', url: urlMatch[0] }
-              : { status: 'pending', message: 'Login started — check your browser' });
+              ? { status: 'pending', url: urlMatch[0], browserOpened: true }
+              : { status: 'pending', message: 'Login started — check your browser', browserOpened: true });
           }, 5000);
 
           proc.on('close', (code) => {
@@ -4665,7 +4666,13 @@ Keep responses concise. Help them think, don't lecture them about the system the
       const hasKey = daemon.credentials.hasKey(p.id);
       let authStatus = 'not-configured';
       if (p.authType === 'subscription') {
-        authStatus = p.installed ? 'authenticated' : 'not-configured';
+        if (!p.installed) {
+          authStatus = 'not-configured';
+        } else {
+          const provObj = getProvider(p.id);
+          const authResult = provObj?.constructor?.isAuthenticated?.();
+          authStatus = authResult?.authenticated ? 'authenticated' : 'not-configured';
+        }
       } else if (p.authType === 'api-key') {
         authStatus = hasKey ? 'key-set' : 'not-configured';
         if (p.authStatus?.authenticated) authStatus = 'authenticated';