openzoo 0.38.2 → 0.38.4

package/bin/openzoo.js

@@ -25,7 +25,9 @@ usage:
                                     (claude, aider...) already pointed at the zoo
   npx openzoo grokbot         point Grok Bot / the grok CLI at the zoo — GROK MODELS ONLY,
                               paid per call by x402 instead of xAI first-party billing,
-                              then launch it. --no-launch just writes the config.
+                              then launch it with BYOK interception ON (impersonates
+                              api2.cursor.sh for that launch only — no /etc/hosts, no sudo).
+                              --no-byok plain launch · --no-launch config only
   npx openzoo mcp        stdio MCP server (tools: zoo_ask, zoo_bind, zoo_models, zoo_wallet, zoo_contexts)
   npx openzoo unblock    restore the editor's own backend in the hosts file
   npx openzoo tunnel     public-url-only mode (everything key-gated, no keyless localhost)

package/lib/grokbot.js

@@ -15,7 +15,7 @@
 // payment. Pointing base_url at the gateway makes every request fail
 // "payment required".
 
-import { spawn } from 'node:child_process';
+import { spawn, execSync } from 'node:child_process';
 import { existsSync, readFileSync, writeFileSync, copyFileSync, mkdirSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { join } from 'node:path';
@@ -143,7 +143,11 @@ export async function setupGrokBot(argv = []) {
 
   // 3. launch the app if it exists, else the CLI
   if (existsSync(APP)) {
-    if (argv.includes('--byok')) {
+    // BYOK IS THE DEFAULT. Without it this command only rewrites the CLI's
+    // model table, and the APP — the thing you actually look at — keeps talking
+    // to Cursor's cloud, which is the whole problem it was meant to solve.
+    // --no-byok drops back to plain launch.
+    if (!argv.includes('--no-byok')) {
       // BYOK PROBE — NO /etc/hosts, NO sudo.
       //
       // Grok Bot asks aiserver.v1 whether BYOK is allowed (`byok_enabled`,
@@ -158,17 +162,32 @@ export async function setupGrokBot(argv = []) {
       const { startCursorBackend } = await import('./cursorbackend.js');
       const port = 8443;
       process.env.OPENZOO_BYOK = '1';
+      // LOUD BY DEFAULT. The previous run failed silently — "listening" and then
+      // nothing — and silence looked identical to success. Every arriving method
+      // is printed so "did it connect at all" is answerable at a glance.
       startCursorBackend({ port, log: (m) => console.error(`  backend: ${m}`) });
       console.error('openzoo: BYOK probe — impersonating api2.cursor.sh on :' + port);
       console.error('         scoped to this launch only (no /etc/hosts, no sudo)');
       console.error('         WATCH: if StreamChat starts arriving at the proxy, inference moved.');
       console.error('         If only a BYOK settings pane appears, it is xAI-key-only and buys nothing.');
-      spawn('open', ['-a', APP, '--args',
+      // QUIT FIRST — `open -a X --args` is a NO-OP ON A RUNNING APP.
+      // macOS just activates the existing instance and drops the args, so the
+      // resolver rule never applies and the app keeps talking to the real
+      // api2.cursor.sh. MEASURED: the backend logged "listening" and then zero
+      // requests, while the app carried on answering normally.
+      try {
+        execSync('osascript -e \'tell application "Grok Bot" to quit\'', { stdio: 'ignore' });
+      } catch { /* not running is fine */ }
+      // give it a moment to actually exit before relaunching
+      await new Promise((r) => setTimeout(r, 2500));
+      spawn('open', ['-n', '-a', APP, '--args',
         '--ignore-certificate-errors',
         `--host-resolver-rules=MAP api2.cursor.sh 127.0.0.1:${port}`,
       ], { stdio: 'ignore', detached: true }).unref();
       // keep this process alive so the backend keeps answering
-      console.error('openzoo: leave this running while you test. ctrl-c to stop.');
+      console.error('openzoo: leave this running while Grok Bot is open. ctrl-c stops the');
+      console.error('         backend; the app then reconnects to xAI normally on next launch.');
+      console.error('         (skip all of this with --no-byok)');
       await new Promise(() => {});
       return;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.38.2",
+  "version": "0.38.4",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",