openzoo 0.29.5 → 0.29.7

package/lib/hosts.js

@@ -155,9 +155,23 @@ export function bindBackend443(modelsPath, logPath, log = console.log) {
     log(`    "${node}" "${script}" 443 "${modelsPath}" "${logPath}"`);
     return { ok: false, manual: true };
   }
-  // nohup + & so sudo returns immediately; the root process keeps 443 bound.
+  // KILL THE OLD ROOT BACKEND FIRST, HARD, AND WAIT FOR 443 TO FREE.
+  // A prior version's root-owned listener keeps holding 443; `pkill openzoo` as
+  // the user cannot touch it, so the new backend hit "port taken" and the OLD,
+  // broken one kept answering — the reason a fix looked like it never landed.
+  // We SIGKILL by name AND by whoever holds 443, poll until the port is actually
+  // free (up to ~5s), then start the new one.
+  // FLUSH THE OLD pfctl 443->8443 REDIRECT FIRST. Versions 0.29.0-0.29.2 installed
+  // a pf anchor that redirects 443 to a stale user-process backend on 8443. While
+  // that rule is loaded, pf intercepts 443 BEFORE our new root bind ever sees it,
+  // so every fix looked like it never landed. Flush the anchor + kill 8443 + kill
+  // 443 by name and by port, wait for both to free, THEN bind.
+  const flushPf = process.platform === 'darwin' ? 'pfctl -a openzoo -F all 2>/dev/null; ' : '';
   const ok = privileged(
-    `pkill -f 'cursor-backend.js' 2>/dev/null; `
+    flushPf
+    + `pkill -9 -f 'cursor-backend.js' 2>/dev/null; `
+    + `for p in $(lsof -nP -iTCP:443 -sTCP:LISTEN -t 2>/dev/null) $(lsof -nP -iTCP:8443 -sTCP:LISTEN -t 2>/dev/null); do kill -9 "$p" 2>/dev/null; done; `
+    + `for i in 1 2 3 4 5 6 7 8 9 10; do lsof -nP -iTCP:443 -sTCP:LISTEN -t >/dev/null 2>&1 || break; sleep 0.5; done; `
     + `nohup '${node}' '${script}' 443 '${modelsPath}' '${logPath}' >/dev/null 2>&1 & `
     + 'sleep 1; true',
   );
@@ -166,5 +180,10 @@ export function bindBackend443(modelsPath, logPath, log = console.log) {
 
 export function unbindBackend443() {
   if (WIN) return { ok: false, manual: true };
-  return { ok: privileged("pkill -f 'cursor-backend.js' 2>/dev/null; true") };
+  const flushPf = process.platform === 'darwin' ? 'pfctl -a openzoo -F all 2>/dev/null; ' : '';
+  return { ok: privileged(
+    flushPf
+    + "pkill -9 -f 'cursor-backend.js' 2>/dev/null; "
+    + 'for p in $(lsof -nP -iTCP:8443 -sTCP:LISTEN -t 2>/dev/null); do kill -9 "$p" 2>/dev/null; done; true',
+  ) };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.29.5",
+  "version": "0.29.7",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",