openzoo 0.38.7 → 0.38.8

package/lib/cursorbackend.js

@@ -299,7 +299,10 @@ async function passthroughToRealAnthropic(req, res, body, host, full, log) {
         r.on('error', reject);
       });
       up.on('error', reject);
-      up.setTimeout(20000, () => up.destroy(new Error('upstream timeout')));
+      // WatchSandBoxMigration is a LONG POLL — a 20s cap aborts it every time and
+      // the app never learns its sandbox is ready. Streams get no deadline.
+      const streaming = /Watch|Stream|Subscribe/i.test(full);
+      if (!streaming) up.setTimeout(20000, () => up.destroy(new Error('upstream timeout')));
       if (req.method !== 'GET' && req.method !== 'HEAD' && body && body.length) up.write(body);
       up.end();
     });
@@ -311,6 +314,17 @@ async function passthroughToRealAnthropic(req, res, body, host, full, log) {
     }
     res.writeHead(status, h);
     res.end(buf);
+    // DUMP THE INTERESTING ONES. EnsureSandBox's response is what names the
+    // sandbox, and the sandbox is the candidate inference path — you cannot
+    // read that from a byte count. Written raw for offline decoding.
+    if (process.env.OPENZOO_DUMP === '1' && buf.length) {
+      try {
+        const dir = '/tmp/openzoo-sniff';
+        fs.mkdirSync(dir, { recursive: true });
+        const safe = full.replace(/[^a-zA-Z0-9]+/g, '_').slice(0, 80);
+        fs.writeFileSync(`${dir}/${Date.now()}_${safe}.bin`, buf);
+      } catch { /* dumping must never break the proxy */ }
+    }
     log(`cursor-backend:      ${req.method} ${full} -> REAL anthropic (${status}, ${buf.length}b)`);
   } catch (e) {
     res.writeHead(502, { 'content-type': 'application/json' });

package/lib/grokbot.js

@@ -173,12 +173,13 @@ export async function setupGrokBot(argv = []) {
       // the app works normally and every method/size/status is logged. This is
       // the only way to see the chat path: stubbing breaks EnsureSandBox and the
       // app never reaches inference at all.
-      if (argv.includes('--sniff')) process.env.OPENZOO_PASSTHRU = '1';
+      if (argv.includes('--sniff')) { process.env.OPENZOO_PASSTHRU = '1'; process.env.OPENZOO_DUMP = '1'; }
       else process.env.OPENZOO_BYOK = '1';
       process.env.OPENZOO_FORCE_BLOCK = '1';   // our own guard refuses otherwise
       console.error(argv.includes('--sniff')
         ? 'openzoo: SNIFF — pinning api2.cursor.sh, proxying it to the REAL backend, logging everything.'
         : 'openzoo: TAKEOVER — pinning api2.cursor.sh and serving it locally.');
+      if (argv.includes('--sniff')) console.error('         response bodies -> /tmp/openzoo-sniff/');
       console.error('         sudo will ask for your password (hosts file + :443).');
       if (!isBlocked()) blockBackend();
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.38.7",
+  "version": "0.38.8",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",