openzoo 0.38.6 → 0.38.7

package/lib/cursorbackend.js

@@ -461,6 +461,22 @@ export function startCursorBackend({ port = 8443, models, log = () => {} } = {})
         await handleStreamChat(req, res, body, log);
         return;
       }
+      // FULL PASSTHROUGH MODE — observe, do not stub.
+      //
+      // Stubbing unknown methods with empty protobufs BREAKS Grok Bot: it never
+      // gets a sandbox from GrokBotService/EnsureSandBox, so it re-polls
+      // WatchSandBoxMigration forever and never reaches the chat stage. That is
+      // why an intercepted run showed 40 methods and ZERO StreamChat — absence
+      // of evidence created by our own stub, not proof that chat lives
+      // elsewhere.
+      //
+      // In passthrough the app runs NORMALLY against the real backend while
+      // every method, size and status is logged here — which is what actually
+      // reveals where inference goes.
+      if (process.env.OPENZOO_PASSTHRU === '1') {
+        await passthroughToRealAnthropic(req, res, body, host, full, log);
+        return;
+      }
       try {
         respond(req, res, method, models);
         const populated = ['GetPlanInfo', 'GetMe', 'GetDefaultModel', 'IsOnNewPricing'];

package/lib/grokbot.js

@@ -169,9 +169,16 @@ export async function setupGrokBot(argv = []) {
       const { startCursorBackend } = await import('./cursorbackend.js');
       const port = 443; // Node's DNS gives no port control — we must own :443
 
-      process.env.OPENZOO_BYOK = '1';
+      // --sniff: intercept but PASS EVERYTHING THROUGH to the real backend, so
+      // the app works normally and every method/size/status is logged. This is
+      // the only way to see the chat path: stubbing breaks EnsureSandBox and the
+      // app never reaches inference at all.
+      if (argv.includes('--sniff')) process.env.OPENZOO_PASSTHRU = '1';
+      else process.env.OPENZOO_BYOK = '1';
       process.env.OPENZOO_FORCE_BLOCK = '1';   // our own guard refuses otherwise
-      console.error('openzoo: TAKEOVER — pinning api2.cursor.sh and serving it locally.');
+      console.error(argv.includes('--sniff')
+        ? 'openzoo: SNIFF — pinning api2.cursor.sh, proxying it to the REAL backend, logging everything.'
+        : 'openzoo: TAKEOVER — pinning api2.cursor.sh and serving it locally.');
       console.error('         sudo will ask for your password (hosts file + :443).');
       if (!isBlocked()) blockBackend();
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.38.6",
+  "version": "0.38.7",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",