groove-dev 0.27.110 → 0.27.112

package/node_modules/@groove-dev/daemon/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@groove-dev/daemon",
-  "version": "0.27.110",
+  "version": "0.27.112",
   "description": "GROOVE daemon — agent orchestration engine",
   "license": "FSL-1.1-Apache-2.0",
   "type": "module",

package/node_modules/@groove-dev/daemon/src/api.js

@@ -112,7 +112,7 @@ export function createApi(app, daemon) {
       res.setHeader('Content-Security-Policy', "default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; frame-ancestors 'self'");
     } else {
       res.setHeader('X-Frame-Options', 'DENY');
-      res.setHeader('Content-Security-Policy', "default-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' ws://localhost:* ws://127.0.0.1:* http://localhost:* http://127.0.0.1:*; font-src 'self' data:; object-src 'none'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'");
+      res.setHeader('Content-Security-Policy', "default-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' ws://localhost:* ws://127.0.0.1:* http://localhost:* http://127.0.0.1:*; font-src 'self' data:; object-src 'none'; base-uri 'self'; frame-src 'self' http://127.0.0.1:* http://localhost:*; frame-ancestors 'none'");
     }
     next();
   });
@@ -4855,9 +4855,13 @@ Keep responses concise. Help them think, don't lecture them about the system the
 
   app.get('/api/training/status', (req, res) => {
     let userId = null;
-    try { userId = ConsentManager.isCaptureEnabled() ? ConsentManager.getOrCreateUserId() : null; } catch (e) { /* no db yet */ }
+    let optedIn = false;
+    try {
+      userId = ConsentManager.getOrCreateUserId();
+      optedIn = ConsentManager.isCaptureEnabled();
+    } catch (e) { /* */ }
     res.json({
-      optedIn: !!daemon.config.training_opt_in,
+      optedIn,
       userId: userId ? userId.substring(0, 8) + '...' : null,
       captureActive: !!daemon.trajectoryCapture,
       sessionsCaptured: daemon.state.get('training_sessions_captured') || 0,
@@ -4869,39 +4873,23 @@ Keep responses concise. Help them think, don't lecture them about the system the
     const { enabled } = req.body;
     if (typeof enabled !== 'boolean') return res.status(400).json({ error: 'enabled must be boolean' });
 
-    daemon.config.training_opt_in = enabled;
-    const { saveConfig } = await import('./firstrun.js');
-    saveConfig(daemon.grooveDir, daemon.config);
-
-    if (enabled) {
-      try {
-        const userId = ConsentManager.getOrCreateUserId();
-        const consent = new ConsentManager();
-        try {
-          consent.recordConsent(userId, true, '1.0');
-        } finally {
-          consent.close();
-        }
+    try {
+      const userId = ConsentManager.getOrCreateUserId();
+      const consent = new ConsentManager();
+      if (enabled) {
+        consent.recordConsent(userId, true, '1.0');
         await daemon._initTrajectoryCapture();
         daemon.state.set('training_enrolled_at', new Date().toISOString());
-      } catch (e) {
-        daemon.config.training_opt_in = false;
-        return res.status(500).json({ error: 'Failed to enable data sharing', detail: e.message });
-      }
-    } else {
-      if (daemon.trajectoryCapture) {
-        try { await daemon.trajectoryCapture.shutdown(); } catch (e) { /* */ }
-        daemon.trajectoryCapture = null;
-      }
-      try {
-        const userId = ConsentManager.getOrCreateUserId();
-        const consent = new ConsentManager();
-        try {
-          consent.revokeConsent(userId);
-        } finally {
-          consent.close();
+      } else {
+        consent.revokeConsent(userId);
+        if (daemon.trajectoryCapture) {
+          try { await daemon.trajectoryCapture.shutdown(); } catch (e) { /* */ }
+          daemon.trajectoryCapture = null;
         }
-      } catch (e) { /* no user_id yet */ }
+      }
+    } catch (e) {
+      console.error('[training/opt-in] Failed to update data sharing:', e);
+      return res.status(500).json({ error: 'Failed to update data sharing', detail: e.message });
     }
 
     daemon.broadcast({ type: 'training:status', data: { optedIn: enabled, captureActive: !!daemon.trajectoryCapture } });
@@ -4911,18 +4899,13 @@ Keep responses concise. Help them think, don't lecture them about the system the
 
   app.post('/api/training/opt-in/delete', async (req, res) => {
     try {
-      daemon.config.training_opt_in = false;
-      const { saveConfig } = await import('./firstrun.js');
-      saveConfig(daemon.grooveDir, daemon.config);
+      const userId = ConsentManager.getOrCreateUserId();
+      const consent = new ConsentManager();
+      consent.revokeConsent(userId);
       if (daemon.trajectoryCapture) {
         try { await daemon.trajectoryCapture.shutdown(); } catch (e) { /* */ }
         daemon.trajectoryCapture = null;
       }
-      try {
-        const userId = ConsentManager.getOrCreateUserId();
-        const consent = new ConsentManager();
-        try { consent.revokeConsent(userId); } finally { consent.close(); }
-      } catch (e) { /* */ }
       daemon.broadcast({ type: 'training:status', data: { optedIn: false, captureActive: false } });
       if (daemon.audit) daemon.audit.log('training.delete', {});
       res.json({ ok: true, deleted: true });
@@ -4948,7 +4931,6 @@ Keep responses concise. Help them think, don't lecture them about the system the
       'port', 'journalistInterval', 'rotationThreshold', 'autoRotation',
       'qcThreshold', 'maxAgents', 'defaultProvider', 'defaultWorkingDir',
       'onboardingDismissed', 'defaultModel', 'defaultChatProvider', 'defaultChatModel',
-      'training_opt_in',
     ];
     for (const key of Object.keys(req.body)) {
       if (!ALLOWED_KEYS.includes(key)) {

package/node_modules/@groove-dev/daemon/src/index.js

@@ -666,17 +666,15 @@ export class Daemon {
   }
 
   async _initTrajectoryCapture() {
-    if (!this.config.training_opt_in) return;
     try {
-      if (ConsentManager.isCaptureEnabled()) {
-        const pkgPath = new URL('../package.json', import.meta.url);
-        const version = JSON.parse(readFileSync(pkgPath, 'utf8')).version;
-        this.trajectoryCapture = new TrajectoryCapture({
-          centralCommandUrl: process.env.GROOVE_CENTRAL_URL || 'https://api.groovedev.ai',
-          grooveVersion: version,
-        });
-        this.trajectoryCapture.init();
-      }
+      if (!ConsentManager.isCaptureEnabled()) return;
+      const pkgPath = new URL('../package.json', import.meta.url);
+      const version = JSON.parse(readFileSync(pkgPath, 'utf8')).version;
+      this.trajectoryCapture = new TrajectoryCapture({
+        centralCommandUrl: process.env.GROOVE_CENTRAL_URL || 'https://api.groovedev.ai',
+        grooveVersion: version,
+      });
+      this.trajectoryCapture.init();
     } catch (e) {
       // Training capture is never critical
     }