groove-dev 0.27.93 → 0.27.96

package/node_modules/uuid/dist/v1.js

@@ -0,0 +1,107 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.default = void 0;
+
+var _rng = _interopRequireDefault(require("./rng.js"));
+
+var _stringify = require("./stringify.js");
+
+function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+// **`v1()` - Generate time-based UUID**
+//
+// Inspired by https://github.com/LiosK/UUID.js
+// and http://docs.python.org/library/uuid.html
+let _nodeId;
+
+let _clockseq; // Previous uuid creation time
+
+
+let _lastMSecs = 0;
+let _lastNSecs = 0; // See https://github.com/uuidjs/uuid for API details
+
+function v1(options, buf, offset) {
+  let i = buf && offset || 0;
+  const b = buf || new Array(16);
+  options = options || {};
+  let node = options.node || _nodeId;
+  let clockseq = options.clockseq !== undefined ? options.clockseq : _clockseq; // node and clockseq need to be initialized to random values if they're not
+  // specified.  We do this lazily to minimize issues related to insufficient
+  // system entropy.  See #189
+
+  if (node == null || clockseq == null) {
+    const seedBytes = options.random || (options.rng || _rng.default)();
+
+    if (node == null) {
+      // Per 4.5, create and 48-bit node id, (47 random bits + multicast bit = 1)
+      node = _nodeId = [seedBytes[0] | 0x01, seedBytes[1], seedBytes[2], seedBytes[3], seedBytes[4], seedBytes[5]];
+    }
+
+    if (clockseq == null) {
+      // Per 4.2.2, randomize (14 bit) clockseq
+      clockseq = _clockseq = (seedBytes[6] << 8 | seedBytes[7]) & 0x3fff;
+    }
+  } // UUID timestamps are 100 nano-second units since the Gregorian epoch,
+  // (1582-10-15 00:00).  JSNumbers aren't precise enough for this, so
+  // time is handled internally as 'msecs' (integer milliseconds) and 'nsecs'
+  // (100-nanoseconds offset from msecs) since unix epoch, 1970-01-01 00:00.
+
+
+  let msecs = options.msecs !== undefined ? options.msecs : Date.now(); // Per 4.2.1.2, use count of uuid's generated during the current clock
+  // cycle to simulate higher resolution clock
+
+  let nsecs = options.nsecs !== undefined ? options.nsecs : _lastNSecs + 1; // Time since last uuid creation (in msecs)
+
+  const dt = msecs - _lastMSecs + (nsecs - _lastNSecs) / 10000; // Per 4.2.1.2, Bump clockseq on clock regression
+
+  if (dt < 0 && options.clockseq === undefined) {
+    clockseq = clockseq + 1 & 0x3fff;
+  } // Reset nsecs if clock regresses (new clockseq) or we've moved onto a new
+  // time interval
+
+
+  if ((dt < 0 || msecs > _lastMSecs) && options.nsecs === undefined) {
+    nsecs = 0;
+  } // Per 4.2.1.2 Throw error if too many uuids are requested
+
+
+  if (nsecs >= 10000) {
+    throw new Error("uuid.v1(): Can't create more than 10M uuids/sec");
+  }
+
+  _lastMSecs = msecs;
+  _lastNSecs = nsecs;
+  _clockseq = clockseq; // Per 4.1.4 - Convert from unix epoch to Gregorian epoch
+
+  msecs += 12219292800000; // `time_low`
+
+  const tl = ((msecs & 0xfffffff) * 10000 + nsecs) % 0x100000000;
+  b[i++] = tl >>> 24 & 0xff;
+  b[i++] = tl >>> 16 & 0xff;
+  b[i++] = tl >>> 8 & 0xff;
+  b[i++] = tl & 0xff; // `time_mid`
+
+  const tmh = msecs / 0x100000000 * 10000 & 0xfffffff;
+  b[i++] = tmh >>> 8 & 0xff;
+  b[i++] = tmh & 0xff; // `time_high_and_version`
+
+  b[i++] = tmh >>> 24 & 0xf | 0x10; // include version
+
+  b[i++] = tmh >>> 16 & 0xff; // `clock_seq_hi_and_reserved` (Per 4.2.2 - include variant)
+
+  b[i++] = clockseq >>> 8 | 0x80; // `clock_seq_low`
+
+  b[i++] = clockseq & 0xff; // `node`
+
+  for (let n = 0; n < 6; ++n) {
+    b[i + n] = node[n];
+  }
+
+  return buf || (0, _stringify.unsafeStringify)(b);
+}
+
+var _default = v1;
+exports.default = _default;

package/node_modules/uuid/dist/v3.js

@@ -0,0 +1,16 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.default = void 0;
+
+var _v = _interopRequireDefault(require("./v35.js"));
+
+var _md = _interopRequireDefault(require("./md5.js"));
+
+function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+const v3 = (0, _v.default)('v3', 0x30, _md.default);
+var _default = v3;
+exports.default = _default;

package/node_modules/uuid/dist/v35.js

@@ -0,0 +1,80 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.URL = exports.DNS = void 0;
+exports.default = v35;
+
+var _stringify = require("./stringify.js");
+
+var _parse = _interopRequireDefault(require("./parse.js"));
+
+function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+function stringToBytes(str) {
+  str = unescape(encodeURIComponent(str)); // UTF8 escape
+
+  const bytes = [];
+
+  for (let i = 0; i < str.length; ++i) {
+    bytes.push(str.charCodeAt(i));
+  }
+
+  return bytes;
+}
+
+const DNS = '6ba7b810-9dad-11d1-80b4-00c04fd430c8';
+exports.DNS = DNS;
+const URL = '6ba7b811-9dad-11d1-80b4-00c04fd430c8';
+exports.URL = URL;
+
+function v35(name, version, hashfunc) {
+  function generateUUID(value, namespace, buf, offset) {
+    var _namespace;
+
+    if (typeof value === 'string') {
+      value = stringToBytes(value);
+    }
+
+    if (typeof namespace === 'string') {
+      namespace = (0, _parse.default)(namespace);
+    }
+
+    if (((_namespace = namespace) === null || _namespace === void 0 ? void 0 : _namespace.length) !== 16) {
+      throw TypeError('Namespace must be array-like (16 iterable integer values, 0-255)');
+    } // Compute hash of namespace and value, Per 4.3
+    // Future: Use spread syntax when supported on all platforms, e.g. `bytes =
+    // hashfunc([...namespace, ... value])`
+
+
+    let bytes = new Uint8Array(16 + value.length);
+    bytes.set(namespace);
+    bytes.set(value, namespace.length);
+    bytes = hashfunc(bytes);
+    bytes[6] = bytes[6] & 0x0f | version;
+    bytes[8] = bytes[8] & 0x3f | 0x80;
+
+    if (buf) {
+      offset = offset || 0;
+
+      for (let i = 0; i < 16; ++i) {
+        buf[offset + i] = bytes[i];
+      }
+
+      return buf;
+    }
+
+    return (0, _stringify.unsafeStringify)(bytes);
+  } // Function#name is not settable on some platforms (#270)
+
+
+  try {
+    generateUUID.name = name; // eslint-disable-next-line no-empty
+  } catch (err) {} // For CommonJS default export support
+
+
+  generateUUID.DNS = DNS;
+  generateUUID.URL = URL;
+  return generateUUID;
+}

package/node_modules/uuid/dist/v4.js

@@ -0,0 +1,43 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.default = void 0;
+
+var _native = _interopRequireDefault(require("./native.js"));
+
+var _rng = _interopRequireDefault(require("./rng.js"));
+
+var _stringify = require("./stringify.js");
+
+function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+function v4(options, buf, offset) {
+  if (_native.default.randomUUID && !buf && !options) {
+    return _native.default.randomUUID();
+  }
+
+  options = options || {};
+
+  const rnds = options.random || (options.rng || _rng.default)(); // Per 4.4, set bits for version and `clock_seq_hi_and_reserved`
+
+
+  rnds[6] = rnds[6] & 0x0f | 0x40;
+  rnds[8] = rnds[8] & 0x3f | 0x80; // Copy bytes to buffer, if provided
+
+  if (buf) {
+    offset = offset || 0;
+
+    for (let i = 0; i < 16; ++i) {
+      buf[offset + i] = rnds[i];
+    }
+
+    return buf;
+  }
+
+  return (0, _stringify.unsafeStringify)(rnds);
+}
+
+var _default = v4;
+exports.default = _default;

package/node_modules/uuid/dist/v5.js

@@ -0,0 +1,16 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.default = void 0;
+
+var _v = _interopRequireDefault(require("./v35.js"));
+
+var _sha = _interopRequireDefault(require("./sha1.js"));
+
+function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+const v5 = (0, _v.default)('v5', 0x50, _sha.default);
+var _default = v5;
+exports.default = _default;

package/node_modules/uuid/dist/validate.js

@@ -0,0 +1,17 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.default = void 0;
+
+var _regex = _interopRequireDefault(require("./regex.js"));
+
+function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+function validate(uuid) {
+  return typeof uuid === 'string' && _regex.default.test(uuid);
+}
+
+var _default = validate;
+exports.default = _default;

package/node_modules/uuid/dist/version.js

@@ -0,0 +1,21 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.default = void 0;
+
+var _validate = _interopRequireDefault(require("./validate.js"));
+
+function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+function version(uuid) {
+  if (!(0, _validate.default)(uuid)) {
+    throw TypeError('Invalid UUID');
+  }
+
+  return parseInt(uuid.slice(14, 15), 16);
+}
+
+var _default = version;
+exports.default = _default;

package/node_modules/uuid/package.json

@@ -0,0 +1,135 @@
+{
+  "name": "uuid",
+  "version": "9.0.1",
+  "description": "RFC4122 (v1, v4, and v5) UUIDs",
+  "funding": [
+    "https://github.com/sponsors/broofa",
+    "https://github.com/sponsors/ctavan"
+  ],
+  "commitlint": {
+    "extends": [
+      "@commitlint/config-conventional"
+    ]
+  },
+  "keywords": [
+    "uuid",
+    "guid",
+    "rfc4122"
+  ],
+  "license": "MIT",
+  "bin": {
+    "uuid": "./dist/bin/uuid"
+  },
+  "sideEffects": false,
+  "main": "./dist/index.js",
+  "exports": {
+    ".": {
+      "node": {
+        "module": "./dist/esm-node/index.js",
+        "require": "./dist/index.js",
+        "import": "./wrapper.mjs"
+      },
+      "browser": {
+        "import": "./dist/esm-browser/index.js",
+        "require": "./dist/commonjs-browser/index.js"
+      },
+      "default": "./dist/esm-browser/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "module": "./dist/esm-node/index.js",
+  "browser": {
+    "./dist/md5.js": "./dist/md5-browser.js",
+    "./dist/native.js": "./dist/native-browser.js",
+    "./dist/rng.js": "./dist/rng-browser.js",
+    "./dist/sha1.js": "./dist/sha1-browser.js",
+    "./dist/esm-node/index.js": "./dist/esm-browser/index.js"
+  },
+  "files": [
+    "CHANGELOG.md",
+    "CONTRIBUTING.md",
+    "LICENSE.md",
+    "README.md",
+    "dist",
+    "wrapper.mjs"
+  ],
+  "devDependencies": {
+    "@babel/cli": "7.18.10",
+    "@babel/core": "7.18.10",
+    "@babel/eslint-parser": "7.18.9",
+    "@babel/preset-env": "7.18.10",
+    "@commitlint/cli": "17.0.3",
+    "@commitlint/config-conventional": "17.0.3",
+    "bundlewatch": "0.3.3",
+    "eslint": "8.21.0",
+    "eslint-config-prettier": "8.5.0",
+    "eslint-config-standard": "17.0.0",
+    "eslint-plugin-import": "2.26.0",
+    "eslint-plugin-node": "11.1.0",
+    "eslint-plugin-prettier": "4.2.1",
+    "eslint-plugin-promise": "6.0.0",
+    "husky": "8.0.1",
+    "jest": "28.1.3",
+    "lint-staged": "13.0.3",
+    "npm-run-all": "4.1.5",
+    "optional-dev-dependency": "2.0.1",
+    "prettier": "2.7.1",
+    "random-seed": "0.3.0",
+    "runmd": "1.3.9",
+    "standard-version": "9.5.0"
+  },
+  "optionalDevDependencies": {
+    "@wdio/browserstack-service": "7.16.10",
+    "@wdio/cli": "7.16.10",
+    "@wdio/jasmine-framework": "7.16.6",
+    "@wdio/local-runner": "7.16.10",
+    "@wdio/spec-reporter": "7.16.9",
+    "@wdio/static-server-service": "7.16.6"
+  },
+  "scripts": {
+    "examples:browser:webpack:build": "cd examples/browser-webpack && npm install && npm run build",
+    "examples:browser:rollup:build": "cd examples/browser-rollup && npm install && npm run build",
+    "examples:node:commonjs:test": "cd examples/node-commonjs && npm install && npm test",
+    "examples:node:esmodules:test": "cd examples/node-esmodules && npm install && npm test",
+    "examples:node:jest:test": "cd examples/node-jest && npm install && npm test",
+    "prepare": "cd $( git rev-parse --show-toplevel ) && husky install",
+    "lint": "npm run eslint:check && npm run prettier:check",
+    "eslint:check": "eslint src/ test/ examples/ *.js",
+    "eslint:fix": "eslint --fix src/ test/ examples/ *.js",
+    "pretest": "[ -n $CI ] || npm run build",
+    "test": "BABEL_ENV=commonjsNode node --throw-deprecation node_modules/.bin/jest test/unit/",
+    "pretest:browser": "optional-dev-dependency && npm run build && npm-run-all --parallel examples:browser:**",
+    "test:browser": "wdio run ./wdio.conf.js",
+    "pretest:node": "npm run build",
+    "test:node": "npm-run-all --parallel examples:node:**",
+    "test:pack": "./scripts/testpack.sh",
+    "pretest:benchmark": "npm run build",
+    "test:benchmark": "cd examples/benchmark && npm install && npm test",
+    "prettier:check": "prettier --check '**/*.{js,jsx,json,md}'",
+    "prettier:fix": "prettier --write '**/*.{js,jsx,json,md}'",
+    "bundlewatch": "npm run pretest:browser && bundlewatch --config bundlewatch.config.json",
+    "md": "runmd --watch --output=README.md README_js.md",
+    "docs": "( node --version | grep -q 'v18' ) && ( npm run build && npx runmd --output=README.md README_js.md )",
+    "docs:diff": "npm run docs && git diff --quiet README.md",
+    "build": "./scripts/build.sh",
+    "prepack": "npm run build",
+    "release": "standard-version --no-verify"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/uuidjs/uuid.git"
+  },
+  "lint-staged": {
+    "*.{js,jsx,json,md}": [
+      "prettier --write"
+    ],
+    "*.{js,jsx}": [
+      "eslint --fix"
+    ]
+  },
+  "standard-version": {
+    "scripts": {
+      "postchangelog": "prettier --write CHANGELOG.md"
+    }
+  }
+}

package/node_modules/uuid/wrapper.mjs

@@ -0,0 +1,10 @@
+import uuid from './dist/index.js';
+export const v1 = uuid.v1;
+export const v3 = uuid.v3;
+export const v4 = uuid.v4;
+export const v5 = uuid.v5;
+export const NIL = uuid.NIL;
+export const version = uuid.version;
+export const validate = uuid.validate;
+export const stringify = uuid.stringify;
+export const parse = uuid.parse;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "groove-dev",
-  "version": "0.27.93",
+  "version": "0.27.96",
   "description": "Open-source agent orchestration layer — the AI company OS. Local model agent engine (GGUF/Ollama/llama-server), HuggingFace model browser, MCP integrations (Slack, Gmail, Stripe, 15+), agent scheduling (cron), business roles (CMO, CFO, EA). GUI dashboard, multi-agent coordination, zero cold-start, infinite sessions. Works with Claude Code, Codex, Gemini CLI, Ollama, any local model.",
   "license": "FSL-1.1-Apache-2.0",
   "author": "Groove Dev <hello@groovedev.ai> (https://groovedev.ai)",
@@ -44,7 +44,8 @@
     "packages/daemon",
     "packages/cli",
     "packages/gui",
-    "packages/desktop"
+    "packages/desktop",
+    "moe-training"
   ],
   "engines": {
     "node": ">=20.0.0"
@@ -62,6 +63,7 @@
   "bundleDependencies": [
     "@groove-dev/daemon",
     "@groove-dev/cli",
-    "@groove-dev/gui"
+    "@groove-dev/gui",
+    "moe-training"
   ]
 }

package/packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@groove-dev/cli",
-  "version": "0.27.93",
+  "version": "0.27.96",
   "description": "GROOVE CLI — manage AI coding agents from your terminal",
   "license": "FSL-1.1-Apache-2.0",
   "type": "module",

package/packages/daemon/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@groove-dev/daemon",
-  "version": "0.27.93",
+  "version": "0.27.96",
   "description": "GROOVE daemon — agent orchestration engine",
   "license": "FSL-1.1-Apache-2.0",
   "type": "module",

package/packages/daemon/src/api.js

@@ -3277,20 +3277,26 @@ Keep responses concise. Help them think, don't lecture them about the system the
       .filter((a) => a.role === 'planner' && a.workingDir)
       .sort((a, b) => (b.lastActivity || b.spawnedAt || '').localeCompare(a.lastActivity || a.spawnedAt || ''));
 
-    // Check planner workingDirs first — most recently active planner wins
+    const candidates = [];
     for (const planner of planners) {
       const p = resolve(planner.workingDir, '.groove', 'recommended-team.json');
-      if (existsSync(p)) return { path: p, teamId: planner.teamId || null, agentId: planner.id || null };
+      if (existsSync(p)) candidates.push({ path: p, teamId: planner.teamId || null, agentId: planner.id || null });
     }
+    const fallback = resolve(daemon.grooveDir, 'recommended-team.json');
+    if (existsSync(fallback) && !candidates.some(c => c.path === fallback)) {
+      candidates.push({ path: fallback, teamId: planners[0]?.teamId || null, agentId: planners[0]?.id || null });
+    }
+    if (candidates.length === 0) return null;
 
-    // Fallback to daemon's .groove dir — try to attribute to most recent planner
-    const p = resolve(daemon.grooveDir, 'recommended-team.json');
-    if (existsSync(p)) {
-      const fallbackTeamId = planners[0]?.teamId || null;
-      const fallbackAgentId = planners[0]?.id || null;
-      return { path: p, teamId: fallbackTeamId, agentId: fallbackAgentId };
+    for (const c of candidates) {
+      try {
+        const data = JSON.parse(readFileSync(c.path, 'utf8'));
+        if (data._meta?.teamId) {
+          return { path: c.path, teamId: data._meta.teamId, agentId: data._meta.agentId || c.agentId };
+        }
+      } catch {}
     }
-    return null;
+    return candidates[0];
   }
 
   app.get('/api/recommended-team', (req, res) => {
@@ -3300,6 +3306,7 @@ Keep responses concise. Help them think, don't lecture them about the system the
     }
     try {
       const raw = JSON.parse(readFileSync(found.path, 'utf8'));
+      delete raw._meta;
       // Support both old format (bare array) and new format ({ projectDir, agents })
       if (Array.isArray(raw)) {
         res.json({ exists: true, agents: raw, teamId: found.teamId });
@@ -3322,6 +3329,7 @@ Keep responses concise. Help them think, don't lecture them about the system the
     const planContents = readFileSync(planPath, 'utf8');
     try {
       const raw = JSON.parse(planContents);
+      delete raw._meta;
 
       // Delete immediately after reading to prevent duplicate launches from poll races.
       // If every spawn below fails, we'll restore the plan from planContents so the
@@ -3686,18 +3694,26 @@ Keep responses concise. Help them think, don't lecture them about the system the
       const baseDir = daemon.config?.defaultWorkingDir || daemon.projectDir;
 
       if (mode === 'plan-first') {
-        // Spawn a headless planner to generate per-agent prompts, then auto-launch
+        const rolesList = roles.map(r => r.role || r.name || r).join(', ');
+        const providerNote = teamProvider ? ` (provider: ${teamProvider})` : '';
+        let plannerPrompt;
+        if (task) {
+          plannerPrompt = `The user wants these agents: ${rolesList}${providerNote}. Task: ${task}`;
+        } else {
+          plannerPrompt = '';
+        }
         const plannerConfig = validateAgentConfig({
           role: 'planner',
-          prompt: task || 'Analyze the codebase and create a plan for the team.',
+          prompt: plannerPrompt,
           provider: teamProvider,
           model: teamModel,
           workingDir: baseDir,
         });
         plannerConfig.teamId = defaultTeamId;
+        plannerConfig.teamBuilderRoles = roles.map(r => ({ role: r.role || r, provider: r.provider || null }));
         const planner = await daemon.processes.spawn(plannerConfig);
         daemon.audit.log('team-builder.plan-first', { plannerId: planner.id, roles: roles.length });
-        return res.status(202).json({ mode: 'plan-first', plannerId: planner.id, message: 'Planner spawned — team will launch when plan is ready' });
+        return res.status(202).json({ mode: 'plan-first', plannerId: planner.id, message: 'Planner spawned — waiting for user instructions' });
       }
 
       const spawned = [];
@@ -4149,17 +4165,17 @@ Keep responses concise. Help them think, don't lecture them about the system the
   // --- Federation ---
 
   // Federation status (v1 — includes whitelist, connections, ambassadors)
-  app.get('/api/federation', proOnly, (req, res) => {
+  app.get('/api/federation', (req, res) => {
     res.json(daemon.federation.getStatus());
   });
 
   // List peers
-  app.get('/api/federation/peers', proOnly, (req, res) => {
+  app.get('/api/federation/peers', (req, res) => {
     res.json(daemon.federation.getPeers());
   });
 
   // Unpair a peer
-  app.delete('/api/federation/peers/:id', proOnly, (req, res) => {
+  app.delete('/api/federation/peers/:id', (req, res) => {
     try {
       daemon.federation.unpair(req.params.id);
       res.json({ ok: true });
@@ -4169,7 +4185,7 @@ Keep responses concise. Help them think, don't lecture them about the system the
   });
 
   // Initiate pairing with a remote daemon
-  app.post('/api/federation/initiate', proOnly, async (req, res) => {
+  app.post('/api/federation/initiate', async (req, res) => {
     try {
       const { remoteUrl } = req.body;
       if (!remoteUrl || typeof remoteUrl !== 'string') {
@@ -4184,11 +4200,11 @@ Keep responses concise. Help them think, don't lecture them about the system the
 
   // --- Federation v1: Whitelist ---
 
-  app.get('/api/federation/whitelist', proOnly, (req, res) => {
+  app.get('/api/federation/whitelist', (req, res) => {
     res.json(daemon.federation.whitelist?.list() || []);
   });
 
-  app.post('/api/federation/whitelist', proOnly, (req, res) => {
+  app.post('/api/federation/whitelist', (req, res) => {
     try {
       const { ip, port, name } = req.body;
       if (!ip || typeof ip !== 'string') {
@@ -4202,7 +4218,7 @@ Keep responses concise. Help them think, don't lecture them about the system the
     }
   });
 
-  app.delete('/api/federation/whitelist/:ip', proOnly, (req, res) => {
+  app.delete('/api/federation/whitelist/:ip', (req, res) => {
     try {
       daemon.federation.whitelist.remove(req.params.ip);
       daemon.broadcast({ type: 'federation:whitelist', data: daemon.federation.whitelist.list() });
@@ -4240,7 +4256,7 @@ Keep responses concise. Help them think, don't lecture them about the system the
 
   // --- Federation v1: Connections ---
 
-  app.get('/api/federation/connections', proOnly, (req, res) => {
+  app.get('/api/federation/connections', (req, res) => {
     res.json(daemon.federation.connections?.getStatus() || []);
   });
 
@@ -4263,13 +4279,13 @@ Keep responses concise. Help them think, don't lecture them about the system the
     }
   });
 
-  app.get('/api/federation/pouch/log', proOnly, (req, res) => {
+  app.get('/api/federation/pouch/log', (req, res) => {
     const limit = Math.min(parseInt(req.query.limit, 10) || 50, 200);
     res.json(daemon.federation.ambassadors?.getPouchLog(limit) || []);
   });
 
   // Send a pouch message to a peer (local agents/GUI call this)
-  app.post('/api/federation/pouch/send', proOnly, async (req, res) => {
+  app.post('/api/federation/pouch/send', async (req, res) => {
     try {
       const { peerId, contract } = req.body;
       if (!peerId || !contract) {
@@ -4315,7 +4331,7 @@ Keep responses concise. Help them think, don't lecture them about the system the
     }
   });
 
-  app.post('/api/federation/contract/send', proOnly, async (req, res) => {
+  app.post('/api/federation/contract/send', async (req, res) => {
     try {
       const { peerId, contract } = req.body;
       if (!peerId || !contract) {