openzoo 0.39.2 → 0.39.3

package/lib/cursorbackend.js

@@ -469,6 +469,17 @@ export function startCursorBackend({ port = 8443, models, log = () => {} } = {})
         return;
       }
       log(`cursor-backend: #${conns} ${req.method} ${full}  ct=${ct}  body=${body.length}b`);
+      // HIJACK EnsureSandBox FIRST — before passthrough, or passthrough eats it.
+      // MEASURED: with OPENZOO_PASSTHRU=1 set, EnsureSandBox went `-> REAL
+      // anthropic (200, 707b)` every time and the app got a real cursorvm pod,
+      // never our box. This method (and ONLY this one) must be answered locally
+      // with OUR box so Grok Bot's UI wires to our sandbox; everything else
+      // still passes through so the app loads normally.
+      if (/GrokBotService\/EnsureSandBox/.test(full) && process.env.OZ_HIJACK_POD) {
+        respond(req, res, method, models);   // encodeForMethod('EnsureSandBox') reads OZ_HIJACK_POD
+        log(`cursor-backend:      -> HIJACKED EnsureSandBox -> our box`);
+        return;
+      }
       // CAPTURE the chat inference request so its schema can be decoded from
       // REAL bytes (Auto's StreamUnifiedChat). Written once; inspect then build.
       if (/StreamUnifiedChat/.test(full)) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.39.2",
+  "version": "0.39.3",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",