openzoo 0.38.4 → 0.38.6

package/bin/openzoo.js

@@ -25,9 +25,11 @@ usage:
                                     (claude, aider...) already pointed at the zoo
   npx openzoo grokbot         point Grok Bot / the grok CLI at the zoo — GROK MODELS ONLY,
                               paid per call by x402 instead of xAI first-party billing,
-                              then launch it with BYOK interception ON (impersonates
-                              api2.cursor.sh for that launch only — no /etc/hosts, no sudo).
-                              --no-byok plain launch · --no-launch config only
+                              then TAKE OVER the app's backend: pins api2.cursor.sh in
+                              /etc/hosts, serves it locally on :443 with byok_enabled,
+                              and launches Grok Bot with Node TLS override (sudo required;
+                              ctrl-c restores /etc/hosts).
+                              --no-takeover plain launch · --no-launch config only
   npx openzoo mcp        stdio MCP server (tools: zoo_ask, zoo_bind, zoo_models, zoo_wallet, zoo_contexts)
   npx openzoo unblock    restore the editor's own backend in the hosts file
   npx openzoo tunnel     public-url-only mode (everything key-gated, no keyless localhost)

package/lib/grokbot.js

@@ -147,6 +147,54 @@ export async function setupGrokBot(argv = []) {
     // model table, and the APP — the thing you actually look at — keeps talking
     // to Cursor's cloud, which is the whole problem it was meant to solve.
     // --no-byok drops back to plain launch.
+    // TAKEOVER IS THE DEFAULT. The --host-resolver-rules probe below is kept
+    // only for reference: it was PROVED not to intercept this app (flags present,
+    // backend listening, zero connections). Nothing routes without the hosts pin.
+    if (!argv.includes('--no-takeover')) {
+      // TAKEOVER — the Cursor recipe, because it is the only one that works.
+      //
+      // WHY NOT --host-resolver-rules: PROVED not to work here. The flag was
+      // verified present in the running process args for all four cursor hosts,
+      // the backend was listening, and ZERO connections arrived — the app kept
+      // talking to the real api2.cursor.sh (cert CN confirmed on its live
+      // sockets). That flag only steers CHROMIUM's stack; Grok Bot's Connect/gRPC
+      // transport runs in the Electron MAIN process on Node's DNS + Node's TLS,
+      // which ignore it. Same reason setup.js sets NODE_TLS_REJECT_UNAUTHORIZED
+      // for Cursor takeover.
+      //
+      // So: /etc/hosts (Node reads the OS resolver) + Node-side TLS override,
+      // and the app is spawned DIRECTLY rather than via `open`, because `open`
+      // does not pass an environment to the app.
+      const { blockBackend, unblockBackend, isBlocked } = await import('./hosts.js');
+      const { startCursorBackend } = await import('./cursorbackend.js');
+      const port = 443; // Node's DNS gives no port control — we must own :443
+
+      process.env.OPENZOO_BYOK = '1';
+      process.env.OPENZOO_FORCE_BLOCK = '1';   // our own guard refuses otherwise
+      console.error('openzoo: TAKEOVER — pinning api2.cursor.sh and serving it locally.');
+      console.error('         sudo will ask for your password (hosts file + :443).');
+      if (!isBlocked()) blockBackend();
+
+      startCursorBackend({ port, log: (m) => console.error(`  backend: ${m}`) });
+
+      const restore = () => {
+        try { unblockBackend(); console.error('openzoo: /etc/hosts restored.'); } catch { /* best effort */ }
+      };
+      process.on('SIGINT', () => { restore(); process.exit(0); });
+      process.on('exit', restore);
+
+      console.error('openzoo: launching Grok Bot with Node TLS override...');
+      spawn(`${APP}/Contents/MacOS/Grok Bot`, ['--ignore-certificate-errors'], {
+        stdio: 'ignore',
+        detached: true,
+        env: { ...process.env, NODE_TLS_REJECT_UNAUTHORIZED: '0' },
+      }).unref();
+
+      console.error('openzoo: ctrl-c to stop and RESTORE /etc/hosts (do not just close the terminal).');
+      await new Promise(() => {});
+      return;
+    }
+
     if (!argv.includes('--no-byok')) {
       // BYOK PROBE — NO /etc/hosts, NO sudo.
       //
@@ -166,7 +214,7 @@ export async function setupGrokBot(argv = []) {
       // nothing — and silence looked identical to success. Every arriving method
       // is printed so "did it connect at all" is answerable at a glance.
       startCursorBackend({ port, log: (m) => console.error(`  backend: ${m}`) });
-      console.error('openzoo: BYOK probe — impersonating api2.cursor.sh on :' + port);
+      console.error('openzoo: BYOK probe — impersonating api2/api3/api4/repo42.cursor.sh on :' + port);
       console.error('         scoped to this launch only (no /etc/hosts, no sudo)');
       console.error('         WATCH: if StreamChat starts arriving at the proxy, inference moved.');
       console.error('         If only a BYOK settings pane appears, it is xAI-key-only and buys nothing.');
@@ -180,9 +228,16 @@ export async function setupGrokBot(argv = []) {
       } catch { /* not running is fine */ }
       // give it a moment to actually exit before relaunching
       await new Promise((r) => setTimeout(r, 2500));
+      // MAP EVERY CURSOR HOST, NOT JUST api2.
+      // MEASURED: mapping api2 alone applied cleanly (verified in the running
+      // process args) and still produced ZERO requests, because Grok Bot's own
+      // surface is api3 — the bundle carries `https://api3.cursor.sh/tev1/v1`.
+      // The self-signed cert already covers all four names, so map them all.
+      const hosts = ['api2.cursor.sh', 'api3.cursor.sh', 'api4.cursor.sh', 'repo42.cursor.sh'];
+      const rules = hosts.map((h) => `MAP ${h} 127.0.0.1:${port}`).join(',');
       spawn('open', ['-n', '-a', APP, '--args',
         '--ignore-certificate-errors',
-        `--host-resolver-rules=MAP api2.cursor.sh 127.0.0.1:${port}`,
+        `--host-resolver-rules=${rules}`,
       ], { stdio: 'ignore', detached: true }).unref();
       // keep this process alive so the backend keeps answering
       console.error('openzoo: leave this running while Grok Bot is open. ctrl-c stops the');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.38.4",
+  "version": "0.38.6",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",