openzoo 0.38.6 → 0.38.8

package/lib/cursorbackend.js

@@ -299,7 +299,10 @@ async function passthroughToRealAnthropic(req, res, body, host, full, log) {
         r.on('error', reject);
       });
       up.on('error', reject);
-      up.setTimeout(20000, () => up.destroy(new Error('upstream timeout')));
+      // WatchSandBoxMigration is a LONG POLL — a 20s cap aborts it every time and
+      // the app never learns its sandbox is ready. Streams get no deadline.
+      const streaming = /Watch|Stream|Subscribe/i.test(full);
+      if (!streaming) up.setTimeout(20000, () => up.destroy(new Error('upstream timeout')));
       if (req.method !== 'GET' && req.method !== 'HEAD' && body && body.length) up.write(body);
       up.end();
     });
@@ -311,6 +314,17 @@ async function passthroughToRealAnthropic(req, res, body, host, full, log) {
     }
     res.writeHead(status, h);
     res.end(buf);
+    // DUMP THE INTERESTING ONES. EnsureSandBox's response is what names the
+    // sandbox, and the sandbox is the candidate inference path — you cannot
+    // read that from a byte count. Written raw for offline decoding.
+    if (process.env.OPENZOO_DUMP === '1' && buf.length) {
+      try {
+        const dir = '/tmp/openzoo-sniff';
+        fs.mkdirSync(dir, { recursive: true });
+        const safe = full.replace(/[^a-zA-Z0-9]+/g, '_').slice(0, 80);
+        fs.writeFileSync(`${dir}/${Date.now()}_${safe}.bin`, buf);
+      } catch { /* dumping must never break the proxy */ }
+    }
     log(`cursor-backend:      ${req.method} ${full} -> REAL anthropic (${status}, ${buf.length}b)`);
   } catch (e) {
     res.writeHead(502, { 'content-type': 'application/json' });
@@ -461,6 +475,22 @@ export function startCursorBackend({ port = 8443, models, log = () => {} } = {})
         await handleStreamChat(req, res, body, log);
         return;
       }
+      // FULL PASSTHROUGH MODE — observe, do not stub.
+      //
+      // Stubbing unknown methods with empty protobufs BREAKS Grok Bot: it never
+      // gets a sandbox from GrokBotService/EnsureSandBox, so it re-polls
+      // WatchSandBoxMigration forever and never reaches the chat stage. That is
+      // why an intercepted run showed 40 methods and ZERO StreamChat — absence
+      // of evidence created by our own stub, not proof that chat lives
+      // elsewhere.
+      //
+      // In passthrough the app runs NORMALLY against the real backend while
+      // every method, size and status is logged here — which is what actually
+      // reveals where inference goes.
+      if (process.env.OPENZOO_PASSTHRU === '1') {
+        await passthroughToRealAnthropic(req, res, body, host, full, log);
+        return;
+      }
       try {
         respond(req, res, method, models);
         const populated = ['GetPlanInfo', 'GetMe', 'GetDefaultModel', 'IsOnNewPricing'];

package/lib/grokbot.js

@@ -169,9 +169,17 @@ export async function setupGrokBot(argv = []) {
       const { startCursorBackend } = await import('./cursorbackend.js');
       const port = 443; // Node's DNS gives no port control — we must own :443
 
-      process.env.OPENZOO_BYOK = '1';
+      // --sniff: intercept but PASS EVERYTHING THROUGH to the real backend, so
+      // the app works normally and every method/size/status is logged. This is
+      // the only way to see the chat path: stubbing breaks EnsureSandBox and the
+      // app never reaches inference at all.
+      if (argv.includes('--sniff')) { process.env.OPENZOO_PASSTHRU = '1'; process.env.OPENZOO_DUMP = '1'; }
+      else process.env.OPENZOO_BYOK = '1';
       process.env.OPENZOO_FORCE_BLOCK = '1';   // our own guard refuses otherwise
-      console.error('openzoo: TAKEOVER — pinning api2.cursor.sh and serving it locally.');
+      console.error(argv.includes('--sniff')
+        ? 'openzoo: SNIFF — pinning api2.cursor.sh, proxying it to the REAL backend, logging everything.'
+        : 'openzoo: TAKEOVER — pinning api2.cursor.sh and serving it locally.');
+      if (argv.includes('--sniff')) console.error('         response bodies -> /tmp/openzoo-sniff/');
       console.error('         sudo will ask for your password (hosts file + :443).');
       if (!isBlocked()) blockBackend();
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.38.6",
+  "version": "0.38.8",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",