openzoo 0.38.0 → 0.38.2

package/lib/cursorapi.js

@@ -130,11 +130,40 @@ export function encodeIsOnNewPricing() {
   return new Buf().bool(1, false).bool(2, false).bool(3, false).bool(5, false).done();
 }
 
+/**
+ * BYOK, forced on.
+ *
+ * Grok Bot (com.anysphere.sand) is Anysphere's app on the SAME aiserver.v1 API
+ * Cursor uses, and BYOK there is a SERVER-DELIVERED FLAG, not a local setting:
+ * the settings message carries `byok_enabled` at field 14 and `byok_disabled`
+ * at field 19 (read from the app bundle). The empty-protobuf default this
+ * server returns for unknown methods decodes byok_enabled = false, so BYOK
+ * stays hidden unless we say otherwise.
+ *
+ * UNVERIFIED, AND IT MATTERS: flipping this reveals the BYOK surface, but the
+ * ByokEntry message is only { enabled, models[] } — it has NO base_url field.
+ * So this may only let you supply an xAI key (still billing xAI) rather than
+ * redirect inference to the zoo. Run with OPENZOO_LOG_METHODS=1 and watch
+ * whether StreamChat starts arriving here before trusting it.
+ */
+export function encodeByokConfig() {
+  return new Buf()
+    .bool(14, true)    // byok_enabled
+    .bool(19, false)   // byok_disabled (admin kill-switch)
+    .done();
+}
+
 /**
  * The bare proto body for a method, or null to fall through to empty-ok.
  * Only the methods that gate entitlement or the model list are populated.
  */
 export function encodeForMethod(method, models) {
+  // Any settings/config-shaped method carries the feature flags; answering the
+  // wrong one is harmless (extra fields are ignored by proto), answering none
+  // leaves BYOK off.
+  if (process.env.OPENZOO_BYOK === '1' && /Config|Settings|FeatureFlags/i.test(method)) {
+    return encodeByokConfig();
+  }
   switch (method) {
     case 'AvailableModels': return encodeAvailableModels(models);
     case 'GetPlanInfo': return encodeGetPlanInfo();

package/lib/grokbot.js

@@ -143,6 +143,35 @@ export async function setupGrokBot(argv = []) {
 
   // 3. launch the app if it exists, else the CLI
   if (existsSync(APP)) {
+    if (argv.includes('--byok')) {
+      // BYOK PROBE — NO /etc/hosts, NO sudo.
+      //
+      // Grok Bot asks aiserver.v1 whether BYOK is allowed (`byok_enabled`,
+      // field 14). Answering that ourselves needs us to BE api2.cursor.sh, and
+      // the obvious way — pinning it in /etc/hosts — is exactly what took the
+      // app offline for an hour with "Reconnecting to your computer", because
+      // the pin is machine-wide and outlives the app.
+      //
+      // Chromium's own --host-resolver-rules does the same redirect scoped to
+      // THIS LAUNCH ONLY. Quit and reopen normally and it is gone; nothing
+      // persists, nothing else on the machine is affected, no password needed.
+      const { startCursorBackend } = await import('./cursorbackend.js');
+      const port = 8443;
+      process.env.OPENZOO_BYOK = '1';
+      startCursorBackend({ port, log: (m) => console.error(`  backend: ${m}`) });
+      console.error('openzoo: BYOK probe — impersonating api2.cursor.sh on :' + port);
+      console.error('         scoped to this launch only (no /etc/hosts, no sudo)');
+      console.error('         WATCH: if StreamChat starts arriving at the proxy, inference moved.');
+      console.error('         If only a BYOK settings pane appears, it is xAI-key-only and buys nothing.');
+      spawn('open', ['-a', APP, '--args',
+        '--ignore-certificate-errors',
+        `--host-resolver-rules=MAP api2.cursor.sh 127.0.0.1:${port}`,
+      ], { stdio: 'ignore', detached: true }).unref();
+      // keep this process alive so the backend keeps answering
+      console.error('openzoo: leave this running while you test. ctrl-c to stop.');
+      await new Promise(() => {});
+      return;
+    }
     console.error('openzoo: launching Grok Bot...');
     spawn('open', ['-a', APP], { stdio: 'ignore', detached: true }).unref();
   } else {

package/lib/hosts.js

@@ -137,6 +137,25 @@ export function blockBackend(hosts = BACKEND_HOSTS) {
     }
   }
   if (!pairs.length) return { already: true };
+
+  // GROK BOT SHARES CURSOR'S BACKEND — REFUSE RATHER THAN BREAK IT.
+  // MEASURED 2026-08-16: api2.cursor.sh pinned to 127.0.0.1 by this function
+  // took out Grok Bot (bundle com.anysphere.sand, Anysphere's app on Cursor
+  // infrastructure) completely — "Reconnecting to your computer...",
+  // edge/handler-failed: [unavailable] on every call, and profile writes
+  // failing. The user uninstalled and reinstalled the app twice chasing it,
+  // because nothing in the app can reveal an OS-level DNS blackhole.
+  // This block predates Grok Bot existing, so it never knew to warn.
+  if (!process.env.OPENZOO_FORCE_BLOCK && fs.existsSync('/Applications/Grok Bot.app')) {
+    console.log('');
+    console.log('REFUSING to block the editor backend: Grok Bot is installed.');
+    console.log('  Grok Bot runs on the SAME host this would blackhole (api2.cursor.sh),');
+    console.log('  so blocking it breaks Grok Bot entirely — it will report');
+    console.log('  "Reconnecting to your computer" and edge/handler-failed forever,');
+    console.log('  and reinstalling the app cannot fix an /etc/hosts entry.');
+    console.log('  Re-run without --block-backend, or set OPENZOO_FORCE_BLOCK=1 to override.');
+    return { ok: false, blocked: false, refused: 'grok-bot-installed' };
+  }
   const entries = pairs.join('\\n');
   console.log('');
   console.log('blocking the editor\'s backend so it cannot re-sync over your model list.');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.38.0",
+  "version": "0.38.2",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",