openzoo 0.38.3 → 0.38.5

package/lib/grokbot.js

@@ -15,7 +15,7 @@
 // payment. Pointing base_url at the gateway makes every request fail
 // "payment required".
 
-import { spawn } from 'node:child_process';
+import { spawn, execSync } from 'node:child_process';
 import { existsSync, readFileSync, writeFileSync, copyFileSync, mkdirSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { join } from 'node:path';
@@ -162,14 +162,34 @@ export async function setupGrokBot(argv = []) {
       const { startCursorBackend } = await import('./cursorbackend.js');
       const port = 8443;
       process.env.OPENZOO_BYOK = '1';
+      // LOUD BY DEFAULT. The previous run failed silently — "listening" and then
+      // nothing — and silence looked identical to success. Every arriving method
+      // is printed so "did it connect at all" is answerable at a glance.
       startCursorBackend({ port, log: (m) => console.error(`  backend: ${m}`) });
-      console.error('openzoo: BYOK probe — impersonating api2.cursor.sh on :' + port);
+      console.error('openzoo: BYOK probe — impersonating api2/api3/api4/repo42.cursor.sh on :' + port);
       console.error('         scoped to this launch only (no /etc/hosts, no sudo)');
       console.error('         WATCH: if StreamChat starts arriving at the proxy, inference moved.');
       console.error('         If only a BYOK settings pane appears, it is xAI-key-only and buys nothing.');
-      spawn('open', ['-a', APP, '--args',
+      // QUIT FIRST — `open -a X --args` is a NO-OP ON A RUNNING APP.
+      // macOS just activates the existing instance and drops the args, so the
+      // resolver rule never applies and the app keeps talking to the real
+      // api2.cursor.sh. MEASURED: the backend logged "listening" and then zero
+      // requests, while the app carried on answering normally.
+      try {
+        execSync('osascript -e \'tell application "Grok Bot" to quit\'', { stdio: 'ignore' });
+      } catch { /* not running is fine */ }
+      // give it a moment to actually exit before relaunching
+      await new Promise((r) => setTimeout(r, 2500));
+      // MAP EVERY CURSOR HOST, NOT JUST api2.
+      // MEASURED: mapping api2 alone applied cleanly (verified in the running
+      // process args) and still produced ZERO requests, because Grok Bot's own
+      // surface is api3 — the bundle carries `https://api3.cursor.sh/tev1/v1`.
+      // The self-signed cert already covers all four names, so map them all.
+      const hosts = ['api2.cursor.sh', 'api3.cursor.sh', 'api4.cursor.sh', 'repo42.cursor.sh'];
+      const rules = hosts.map((h) => `MAP ${h} 127.0.0.1:${port}`).join(',');
+      spawn('open', ['-n', '-a', APP, '--args',
         '--ignore-certificate-errors',
-        `--host-resolver-rules=MAP api2.cursor.sh 127.0.0.1:${port}`,
+        `--host-resolver-rules=${rules}`,
       ], { stdio: 'ignore', detached: true }).unref();
       // keep this process alive so the backend keeps answering
       console.error('openzoo: leave this running while Grok Bot is open. ctrl-c stops the');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.38.3",
+  "version": "0.38.5",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",