openzoo 0.38.1 → 0.38.3

package/bin/openzoo.js

@@ -25,7 +25,9 @@ usage:
                                     (claude, aider...) already pointed at the zoo
   npx openzoo grokbot         point Grok Bot / the grok CLI at the zoo — GROK MODELS ONLY,
                               paid per call by x402 instead of xAI first-party billing,
-                              then launch it. --no-launch just writes the config.
+                              then launch it with BYOK interception ON (impersonates
+                              api2.cursor.sh for that launch only — no /etc/hosts, no sudo).
+                              --no-byok plain launch · --no-launch config only
   npx openzoo mcp        stdio MCP server (tools: zoo_ask, zoo_bind, zoo_models, zoo_wallet, zoo_contexts)
   npx openzoo unblock    restore the editor's own backend in the hosts file
   npx openzoo tunnel     public-url-only mode (everything key-gated, no keyless localhost)

package/lib/cursorapi.js

@@ -130,11 +130,40 @@ export function encodeIsOnNewPricing() {
   return new Buf().bool(1, false).bool(2, false).bool(3, false).bool(5, false).done();
 }
 
+/**
+ * BYOK, forced on.
+ *
+ * Grok Bot (com.anysphere.sand) is Anysphere's app on the SAME aiserver.v1 API
+ * Cursor uses, and BYOK there is a SERVER-DELIVERED FLAG, not a local setting:
+ * the settings message carries `byok_enabled` at field 14 and `byok_disabled`
+ * at field 19 (read from the app bundle). The empty-protobuf default this
+ * server returns for unknown methods decodes byok_enabled = false, so BYOK
+ * stays hidden unless we say otherwise.
+ *
+ * UNVERIFIED, AND IT MATTERS: flipping this reveals the BYOK surface, but the
+ * ByokEntry message is only { enabled, models[] } — it has NO base_url field.
+ * So this may only let you supply an xAI key (still billing xAI) rather than
+ * redirect inference to the zoo. Run with OPENZOO_LOG_METHODS=1 and watch
+ * whether StreamChat starts arriving here before trusting it.
+ */
+export function encodeByokConfig() {
+  return new Buf()
+    .bool(14, true)    // byok_enabled
+    .bool(19, false)   // byok_disabled (admin kill-switch)
+    .done();
+}
+
 /**
  * The bare proto body for a method, or null to fall through to empty-ok.
  * Only the methods that gate entitlement or the model list are populated.
  */
 export function encodeForMethod(method, models) {
+  // Any settings/config-shaped method carries the feature flags; answering the
+  // wrong one is harmless (extra fields are ignored by proto), answering none
+  // leaves BYOK off.
+  if (process.env.OPENZOO_BYOK === '1' && /Config|Settings|FeatureFlags/i.test(method)) {
+    return encodeByokConfig();
+  }
   switch (method) {
     case 'AvailableModels': return encodeAvailableModels(models);
     case 'GetPlanInfo': return encodeGetPlanInfo();

package/lib/grokbot.js

@@ -143,6 +143,41 @@ export async function setupGrokBot(argv = []) {
 
   // 3. launch the app if it exists, else the CLI
   if (existsSync(APP)) {
+    // BYOK IS THE DEFAULT. Without it this command only rewrites the CLI's
+    // model table, and the APP — the thing you actually look at — keeps talking
+    // to Cursor's cloud, which is the whole problem it was meant to solve.
+    // --no-byok drops back to plain launch.
+    if (!argv.includes('--no-byok')) {
+      // BYOK PROBE — NO /etc/hosts, NO sudo.
+      //
+      // Grok Bot asks aiserver.v1 whether BYOK is allowed (`byok_enabled`,
+      // field 14). Answering that ourselves needs us to BE api2.cursor.sh, and
+      // the obvious way — pinning it in /etc/hosts — is exactly what took the
+      // app offline for an hour with "Reconnecting to your computer", because
+      // the pin is machine-wide and outlives the app.
+      //
+      // Chromium's own --host-resolver-rules does the same redirect scoped to
+      // THIS LAUNCH ONLY. Quit and reopen normally and it is gone; nothing
+      // persists, nothing else on the machine is affected, no password needed.
+      const { startCursorBackend } = await import('./cursorbackend.js');
+      const port = 8443;
+      process.env.OPENZOO_BYOK = '1';
+      startCursorBackend({ port, log: (m) => console.error(`  backend: ${m}`) });
+      console.error('openzoo: BYOK probe — impersonating api2.cursor.sh on :' + port);
+      console.error('         scoped to this launch only (no /etc/hosts, no sudo)');
+      console.error('         WATCH: if StreamChat starts arriving at the proxy, inference moved.');
+      console.error('         If only a BYOK settings pane appears, it is xAI-key-only and buys nothing.');
+      spawn('open', ['-a', APP, '--args',
+        '--ignore-certificate-errors',
+        `--host-resolver-rules=MAP api2.cursor.sh 127.0.0.1:${port}`,
+      ], { stdio: 'ignore', detached: true }).unref();
+      // keep this process alive so the backend keeps answering
+      console.error('openzoo: leave this running while Grok Bot is open. ctrl-c stops the');
+      console.error('         backend; the app then reconnects to xAI normally on next launch.');
+      console.error('         (skip all of this with --no-byok)');
+      await new Promise(() => {});
+      return;
+    }
     console.error('openzoo: launching Grok Bot...');
     spawn('open', ['-a', APP], { stdio: 'ignore', detached: true }).unref();
   } else {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.38.1",
+  "version": "0.38.3",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",