openzoo 0.38.5 → 0.38.7

package/bin/openzoo.js

@@ -25,9 +25,11 @@ usage:
                                     (claude, aider...) already pointed at the zoo
   npx openzoo grokbot         point Grok Bot / the grok CLI at the zoo — GROK MODELS ONLY,
                               paid per call by x402 instead of xAI first-party billing,
-                              then launch it with BYOK interception ON (impersonates
-                              api2.cursor.sh for that launch only — no /etc/hosts, no sudo).
-                              --no-byok plain launch · --no-launch config only
+                              then TAKE OVER the app's backend: pins api2.cursor.sh in
+                              /etc/hosts, serves it locally on :443 with byok_enabled,
+                              and launches Grok Bot with Node TLS override (sudo required;
+                              ctrl-c restores /etc/hosts).
+                              --no-takeover plain launch · --no-launch config only
   npx openzoo mcp        stdio MCP server (tools: zoo_ask, zoo_bind, zoo_models, zoo_wallet, zoo_contexts)
   npx openzoo unblock    restore the editor's own backend in the hosts file
   npx openzoo tunnel     public-url-only mode (everything key-gated, no keyless localhost)

package/lib/cursorbackend.js

@@ -461,6 +461,22 @@ export function startCursorBackend({ port = 8443, models, log = () => {} } = {})
         await handleStreamChat(req, res, body, log);
         return;
       }
+      // FULL PASSTHROUGH MODE — observe, do not stub.
+      //
+      // Stubbing unknown methods with empty protobufs BREAKS Grok Bot: it never
+      // gets a sandbox from GrokBotService/EnsureSandBox, so it re-polls
+      // WatchSandBoxMigration forever and never reaches the chat stage. That is
+      // why an intercepted run showed 40 methods and ZERO StreamChat — absence
+      // of evidence created by our own stub, not proof that chat lives
+      // elsewhere.
+      //
+      // In passthrough the app runs NORMALLY against the real backend while
+      // every method, size and status is logged here — which is what actually
+      // reveals where inference goes.
+      if (process.env.OPENZOO_PASSTHRU === '1') {
+        await passthroughToRealAnthropic(req, res, body, host, full, log);
+        return;
+      }
       try {
         respond(req, res, method, models);
         const populated = ['GetPlanInfo', 'GetMe', 'GetDefaultModel', 'IsOnNewPricing'];

package/lib/grokbot.js

@@ -147,6 +147,61 @@ export async function setupGrokBot(argv = []) {
     // model table, and the APP — the thing you actually look at — keeps talking
     // to Cursor's cloud, which is the whole problem it was meant to solve.
     // --no-byok drops back to plain launch.
+    // TAKEOVER IS THE DEFAULT. The --host-resolver-rules probe below is kept
+    // only for reference: it was PROVED not to intercept this app (flags present,
+    // backend listening, zero connections). Nothing routes without the hosts pin.
+    if (!argv.includes('--no-takeover')) {
+      // TAKEOVER — the Cursor recipe, because it is the only one that works.
+      //
+      // WHY NOT --host-resolver-rules: PROVED not to work here. The flag was
+      // verified present in the running process args for all four cursor hosts,
+      // the backend was listening, and ZERO connections arrived — the app kept
+      // talking to the real api2.cursor.sh (cert CN confirmed on its live
+      // sockets). That flag only steers CHROMIUM's stack; Grok Bot's Connect/gRPC
+      // transport runs in the Electron MAIN process on Node's DNS + Node's TLS,
+      // which ignore it. Same reason setup.js sets NODE_TLS_REJECT_UNAUTHORIZED
+      // for Cursor takeover.
+      //
+      // So: /etc/hosts (Node reads the OS resolver) + Node-side TLS override,
+      // and the app is spawned DIRECTLY rather than via `open`, because `open`
+      // does not pass an environment to the app.
+      const { blockBackend, unblockBackend, isBlocked } = await import('./hosts.js');
+      const { startCursorBackend } = await import('./cursorbackend.js');
+      const port = 443; // Node's DNS gives no port control — we must own :443
+
+      // --sniff: intercept but PASS EVERYTHING THROUGH to the real backend, so
+      // the app works normally and every method/size/status is logged. This is
+      // the only way to see the chat path: stubbing breaks EnsureSandBox and the
+      // app never reaches inference at all.
+      if (argv.includes('--sniff')) process.env.OPENZOO_PASSTHRU = '1';
+      else process.env.OPENZOO_BYOK = '1';
+      process.env.OPENZOO_FORCE_BLOCK = '1';   // our own guard refuses otherwise
+      console.error(argv.includes('--sniff')
+        ? 'openzoo: SNIFF — pinning api2.cursor.sh, proxying it to the REAL backend, logging everything.'
+        : 'openzoo: TAKEOVER — pinning api2.cursor.sh and serving it locally.');
+      console.error('         sudo will ask for your password (hosts file + :443).');
+      if (!isBlocked()) blockBackend();
+
+      startCursorBackend({ port, log: (m) => console.error(`  backend: ${m}`) });
+
+      const restore = () => {
+        try { unblockBackend(); console.error('openzoo: /etc/hosts restored.'); } catch { /* best effort */ }
+      };
+      process.on('SIGINT', () => { restore(); process.exit(0); });
+      process.on('exit', restore);
+
+      console.error('openzoo: launching Grok Bot with Node TLS override...');
+      spawn(`${APP}/Contents/MacOS/Grok Bot`, ['--ignore-certificate-errors'], {
+        stdio: 'ignore',
+        detached: true,
+        env: { ...process.env, NODE_TLS_REJECT_UNAUTHORIZED: '0' },
+      }).unref();
+
+      console.error('openzoo: ctrl-c to stop and RESTORE /etc/hosts (do not just close the terminal).');
+      await new Promise(() => {});
+      return;
+    }
+
     if (!argv.includes('--no-byok')) {
       // BYOK PROBE — NO /etc/hosts, NO sudo.
       //

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.38.5",
+  "version": "0.38.7",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",