groove-dev 0.27.66 → 0.27.67

package/node_modules/@groove-dev/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@groove-dev/cli",
-  "version": "0.27.66",
+  "version": "0.27.67",
   "description": "GROOVE CLI — manage AI coding agents from your terminal",
   "license": "FSL-1.1-Apache-2.0",
   "type": "module",

package/node_modules/@groove-dev/daemon/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@groove-dev/daemon",
-  "version": "0.27.66",
+  "version": "0.27.67",
   "description": "GROOVE daemon — agent orchestration engine",
   "license": "FSL-1.1-Apache-2.0",
   "type": "module",

package/node_modules/@groove-dev/daemon/src/api.js

@@ -744,6 +744,7 @@ export function createApi(app, daemon) {
       port: daemon.port,
       projectDir: daemon.projectDir,
       edition: sub.active ? 'pro' : 'community',
+      homedir: homedir(),
     });
   });
 
@@ -763,6 +764,7 @@ export function createApi(app, daemon) {
     }
     try {
       daemon.setProjectDir(dirPath);
+      editorRootDir = daemon.projectDir;
       res.json({ projectDir: daemon.projectDir, recentProjects: daemon.config.recentProjects || [] });
     } catch (err) {
       res.status(400).json({ error: err.message });
@@ -3635,11 +3637,11 @@ Keep responses concise. Help them think, don't lecture them about the system the
 
   // --- Tunnels (Remote Access) ---
 
-  app.get('/api/tunnels', proOnly, (req, res) => {
+  app.get('/api/tunnels', (req, res) => {
     res.json(daemon.tunnelManager.getSaved());
   });
 
-  app.post('/api/tunnels', proOnly, (req, res) => {
+  app.post('/api/tunnels', (req, res) => {
     try {
       const { name, host, user, port, sshKeyPath, autoStart, autoConnect } = req.body;
       if (!name || typeof name !== 'string') return res.status(400).json({ error: 'name is required (string)' });
@@ -3651,7 +3653,7 @@ Keep responses concise. Help them think, don't lecture them about the system the
     }
   });
 
-  app.patch('/api/tunnels/:id', proOnly, (req, res) => {
+  app.patch('/api/tunnels/:id', (req, res) => {
     try {
       const result = daemon.tunnelManager.update(req.params.id, req.body);
       res.json(result);
@@ -3660,7 +3662,7 @@ Keep responses concise. Help them think, don't lecture them about the system the
     }
   });
 
-  app.delete('/api/tunnels/:id', proOnly, async (req, res) => {
+  app.delete('/api/tunnels/:id', async (req, res) => {
     try {
       await daemon.tunnelManager.delete(req.params.id);
       res.json({ ok: true });
@@ -3669,7 +3671,7 @@ Keep responses concise. Help them think, don't lecture them about the system the
     }
   });
 
-  app.post('/api/tunnels/:id/test', proOnly, async (req, res) => {
+  app.post('/api/tunnels/:id/test', async (req, res) => {
     try {
       const result = await daemon.tunnelManager.test(req.params.id);
       res.json(result);
@@ -3678,7 +3680,7 @@ Keep responses concise. Help them think, don't lecture them about the system the
     }
   });
 
-  app.post('/api/tunnels/:id/connect', proOnly, async (req, res) => {
+  app.post('/api/tunnels/:id/connect', async (req, res) => {
     try {
       const opts = {};
       if (req.body?.skipTest && req.body?.testResult) {
@@ -3694,7 +3696,7 @@ Keep responses concise. Help them think, don't lecture them about the system the
     }
   });
 
-  app.post('/api/tunnels/:id/disconnect', proOnly, async (req, res) => {
+  app.post('/api/tunnels/:id/disconnect', async (req, res) => {
     try {
       await daemon.tunnelManager.disconnect(req.params.id);
       res.json({ ok: true });
@@ -3703,7 +3705,7 @@ Keep responses concise. Help them think, don't lecture them about the system the
     }
   });
 
-  app.post('/api/tunnels/:id/install', proOnly, async (req, res) => {
+  app.post('/api/tunnels/:id/install', async (req, res) => {
     try {
       const result = await daemon.tunnelManager.remoteInstall(req.params.id);
       res.json(result);
@@ -3712,7 +3714,7 @@ Keep responses concise. Help them think, don't lecture them about the system the
     }
   });
 
-  app.post('/api/tunnels/:id/start', proOnly, async (req, res) => {
+  app.post('/api/tunnels/:id/start', async (req, res) => {
     try {
       await daemon.tunnelManager.autoStart(req.params.id);
       res.json({ ok: true });
@@ -3721,7 +3723,7 @@ Keep responses concise. Help them think, don't lecture them about the system the
     }
   });
 
-  app.get('/api/tunnels/:id/status', proOnly, (req, res) => {
+  app.get('/api/tunnels/:id/status', (req, res) => {
     const s = daemon.tunnelManager.getStatus(req.params.id);
     if (!s) return res.status(404).json({ error: 'Remote not found' });
     res.json(s);
@@ -3869,27 +3871,6 @@ Keep responses concise. Help them think, don't lecture them about the system the
     res.json({ ok: true });
   });
 
-  // --- Project Directory ---
-
-  app.post('/api/project-dir', async (req, res) => {
-    const { dir } = req.body;
-    if (!dir || typeof dir !== 'string') return res.status(400).json({ error: 'dir required' });
-    if (/[\0\n\r]/.test(dir)) return res.status(400).json({ error: 'Invalid characters in path' });
-    const { existsSync, statSync } = await import('fs');
-    const { resolve, isAbsolute } = await import('path');
-    const resolved = resolve(dir);
-    if (!isAbsolute(resolved)) return res.status(400).json({ error: 'Path must be absolute' });
-    if (!existsSync(resolved) || !statSync(resolved).isDirectory()) {
-      return res.status(400).json({ error: 'Directory does not exist' });
-    }
-    daemon.config.defaultWorkingDir = resolved;
-    const { saveConfig } = await import('./firstrun.js');
-    saveConfig(daemon.grooveDir, daemon.config);
-    daemon.broadcast({ type: 'config:updated', data: { defaultWorkingDir: resolved } });
-    daemon.audit.log('project.dir.change', { dir: resolved });
-    res.json({ ok: true, dir: resolved });
-  });
-
   // --- Config ---
 
   app.get('/api/config', (req, res) => {

package/node_modules/@groove-dev/daemon/src/tunnel-manager.js

@@ -85,7 +85,7 @@ export class TunnelManager {
     }));
   }
 
-  save({ name, host, user, port, sshKeyPath, autoStart, autoConnect }) {
+  save({ name, host, user, port, sshKeyPath, autoStart, autoConnect, projectDir }) {
     validateField(name, 'name');
     validateField(host, 'host');
     validateField(user, 'user');
@@ -104,6 +104,15 @@ export class TunnelManager {
       }
     }
 
+    if (projectDir) {
+      if (typeof projectDir !== 'string' || !projectDir.startsWith('/')) {
+        throw new Error('projectDir must be an absolute path');
+      }
+      if (/[;|&`$(){}[\]<>!#\n\r\\]/.test(projectDir)) {
+        throw new Error('Invalid characters in projectDir');
+      }
+    }
+
     const id = crypto.randomUUID().slice(0, 8);
     const entry = {
       id,
@@ -114,6 +123,7 @@ export class TunnelManager {
       sshKeyPath: sshKeyPath || null,
       autoStart: !!autoStart,
       autoConnect: !!autoConnect,
+      projectDir: projectDir ? projectDir.trim() : null,
       createdAt: new Date().toISOString(),
     };
 
@@ -163,6 +173,19 @@ export class TunnelManager {
     }
     if (config.autoStart !== undefined) merged.autoStart = !!config.autoStart;
     if (config.autoConnect !== undefined) merged.autoConnect = !!config.autoConnect;
+    if (config.projectDir !== undefined) {
+      if (config.projectDir) {
+        if (typeof config.projectDir !== 'string' || !config.projectDir.startsWith('/')) {
+          throw new Error('projectDir must be an absolute path');
+        }
+        if (/[;|&`$(){}[\]<>!#\n\r\\]/.test(config.projectDir)) {
+          throw new Error('Invalid characters in projectDir');
+        }
+        merged.projectDir = config.projectDir.trim();
+      } else {
+        merged.projectDir = null;
+      }
+    }
 
     this.saved.set(id, merged);
     this._save();
@@ -380,7 +403,7 @@ export class TunnelManager {
         '-o', 'ConnectTimeout=10',
         '-o', 'BatchMode=yes',
         target,
-        `bash -lc 'nohup groove start > /tmp/groove-daemon.log 2>&1 < /dev/null & disown; sleep 5; curl -sf http://localhost:${REMOTE_PORT}/api/health > /dev/null && echo __DAEMON_OK__ || (echo __DAEMON_FAIL__; tail -20 /tmp/groove-daemon.log 2>/dev/null)'`,
+        `bash -lc '${config.projectDir ? `cd "${config.projectDir}" && ` : ''}nohup groove start > /tmp/groove-daemon.log 2>&1 < /dev/null & disown; sleep 5; curl -sf http://localhost:${REMOTE_PORT}/api/health > /dev/null && echo __DAEMON_OK__ || (echo __DAEMON_FAIL__; tail -20 /tmp/groove-daemon.log 2>/dev/null)'`,
       ], {
         encoding: 'utf8',
         timeout: 45000,