From de58ec6b0859340f0d3ec1aea2dd22dcf5253a13 Mon Sep 17 00:00:00 2001
From: MayaTheShy <MayaTheShy@gmail.com>
Date: Fri, 20 Feb 2026 03:44:11 -0500
Subject: [PATCH] Refactor group command handling to enforce server control of
 turtle movement and reject legacy commands

---
 server/server.js | 9 +++------
 1 file changed, 3 insertions(+), 6 deletions(-)

diff --git a/server/server.js b/server/server.js
index 90cbe67..d6c2c88 100644
--- a/server/server.js
+++ b/server/server.js
@@ -1303,18 +1303,15 @@ app.post('/api/groups/:groupId/command', (req, res) => {
     for (const member of members) {
       const turtle = turtles.get(member.turtle_id);
       if (turtle) {
+        // All group commands are state changes — server controls all movement
         if (command === 'set_state' || command === 'setState') {
           const stateName = param?.state || param;
           const stateData = param?.data || {};
           turtle.setState(stateName, stateData);
+          successCount++;
         } else {
-          turtle.pendingLegacyCommands.push({
-            command,
-            param,
-            timestamp: Date.now()
-          });
+          console.log(`⚠️ Legacy group command rejected: ${command}`);
         }
-        successCount++;
       }
     }