npm - openzoo - Versions diffs - 0.43.8 → 0.43.9 - Mend

openzoo 0.43.8 → 0.43.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/lib/grokui.mjs CHANGED Viewed

@@ -529,7 +529,7 @@ const APP_HTML = `<!doctype html>
   .tname { font-size: 14px; font-weight: 500; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
   .tprev { font-size: 12px; color: #8e8e93; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
   .tdot { width: 8px; height: 8px; border-radius: 50%; background: #0a84ff; flex: 0 0 8px; }
-  #main { flex: 1; display: flex; flex-direction: column; height: 100vh; }
+  #main { flex: 1; min-width: 0; display: flex; flex-direction: column; height: 100vh; }
   #chatHeader { padding: 14px 20px; border-bottom: 1px solid #1c1c1e; display: flex; align-items: center; gap: 10px;
                 font-weight: 600; }
   #chatHeader .tavatar { width: 26px; height: 26px; border-radius: 7px; font-size: 11px; flex: 0 0 26px; }
@@ -549,16 +549,23 @@ const APP_HTML = `<!doctype html>
   #hud .hember { color: #f28c4d; }
   #hud .hfoot { border-top: 1px solid #333340; margin-top: 10px; padding-top: 8px; color: #999aa8; font-size: 10px; }
   #sidebar, #main { -webkit-app-region: no-drag; }
-  #log { flex: 1; overflow-y: auto; padding: 20px 24px 12px; display: flex; flex-direction: column; gap: 6px;
+  #log { flex: 1; min-width: 0; overflow-y: auto; overflow-x: hidden; padding: 20px 24px 12px;
+         display: flex; flex-direction: column; gap: 6px;
          -webkit-user-select: text; user-select: text; }
   .hdr { align-self: flex-start; display: flex; align-items: center; gap: 6px; margin: 12px 0 4px;
          color: #8e8e93; font-size: 13px; }
   .hdr .avatar { width: 18px; height: 18px; border-radius: 5px; display: flex; align-items: center;
                  justify-content: center; color: #fff; font-size: 9px; font-weight: 700; }
-  .row { display: flex; max-width: 78%; margin: 2px 0; }
+  /* min-width:0 is load-bearing. A flex item defaults to min-width:auto, so it
+     refuses to shrink below its content's intrinsic width — one long
+     unbreakable line (a curl command, a JSON blob) in a <pre> then stretches
+     the row past max-width, widens the whole column, and pushes the header's
+     cost button off-screen. */
+  .row { display: flex; max-width: 78%; min-width: 0; margin: 2px 0; }
   .row.user { align-self: flex-end; }
   .row.bot { align-self: flex-start; }
   .bubble { padding: 11px 16px; border-radius: 20px; white-space: pre-wrap; word-break: break-word;
+            min-width: 0; max-width: 100%; overflow-x: hidden;
             -webkit-user-select: text; user-select: text; cursor: text; }
   .bubble a { color: #6ab0ff; text-decoration: underline; cursor: pointer; }
   /* rendered markdown. The bubble is pre-wrap for plain text, but block
@@ -582,7 +589,8 @@ const APP_HTML = `<!doctype html>
   .md-table th { background: #1c1c1e; font-weight: 600; }
   .bubble-images { display: flex; gap: 6px; flex-wrap: wrap; margin-bottom: 8px; }
   .bubble-images img { max-width: 160px; max-height: 160px; border-radius: 12px; display: block; }
-  .runcard { background: #1c1c1e; border: 1px solid #333; border-radius: 14px; padding: 12px 14px; max-width: 100%; }
+  .runcard { background: #1c1c1e; border: 1px solid #333; border-radius: 14px; padding: 12px 14px;
+             max-width: 100%; min-width: 0; overflow: hidden; }
   .runcmd { font-family: Menlo, monospace; font-size: 12.5px; color: #ececec; white-space: pre-wrap;
             word-break: break-word; margin-bottom: 8px; }
   .runactions { display: flex; gap: 8px; }

package/lib/namespace.js CHANGED Viewed

@@ -47,8 +47,73 @@ export function namespaceHeaderValue() {
   return cached;
 }
-/** Merge the namespace header into any headers object. */
+/**
+ * PROVE the namespace claim instead of merely asserting it.
+ *
+ * The header above is derived from the PUBLIC key, so on its own it is not
+ * authentication: anyone who knows this wallet's address can recompute the
+ * same value and land in the same sidecar tenant — and since the sidecar gates
+ * context access purely on tenant match, that is the whole door. The gateway
+ * (nsauth.ts) verifies a signature over `openzoo-namespace:<ns>:<ts>` and
+ * derives the tenant from sha256(chain:signer:namespace), which binds the
+ * PROVEN signer in, so another wallet signing an identical label lands
+ * somewhere else.
+ *
+ * Signed with the same Solana key x402 already pays from — no new secret, and
+ * nothing leaves the machine but a public key and a signature. The timestamp
+ * is what bounds replay (the gateway enforces its own window), so it is minted
+ * per call and these headers are deliberately NOT cached.
+ */
+const PKCS8_ED25519_PREFIX = Buffer.from('302e020100300506032b657004220420', 'hex');
+function signNamespace(namespace) {
+  const w = loadOrCreateWallet();
+  const timestamp = String(Date.now());
+  // Node has no raw-ed25519 signer, but it will build one from a PKCS8 DER
+  // wrapper around the 32-byte seed (a Solana secretKey is seed||pubkey).
+  const der = Buffer.concat([PKCS8_ED25519_PREFIX, Buffer.from(w.keypair.secretKey.slice(0, 32))]);
+  const key = crypto.createPrivateKey({ key: der, format: 'der', type: 'pkcs8' });
+  const sig = crypto.sign(null, Buffer.from(`openzoo-namespace:${namespace}:${timestamp}`), key);
+  return {
+    'x-openzoo-namespace-sig': base58encode(sig),
+    'x-openzoo-namespace-signer': w.keypair.publicKey.toBase58(),
+    'x-openzoo-namespace-ts': timestamp,
+    'x-openzoo-namespace-chain': 'solana',
+  };
+}
+/** Merge the namespace header — and its proof — into any headers object. */
 export function withNamespace(headers = {}) {
   const ns = namespaceHeaderValue();
-  return ns ? { ...headers, 'x-openzoo-namespace': ns } : headers;
+  if (!ns) return headers;
+  let proof = {};
+  try {
+    proof = signNamespace(ns);
+  } catch {
+    // Unsigned still works while the gateway is in soft launch. Sending the
+    // bare namespace is strictly better than sending nothing: it keeps the
+    // caller in their existing tenant instead of silently relocating every
+    // bound corpus to the shared one.
+  }
+  return { ...headers, 'x-openzoo-namespace': ns, ...proof };
+}
+// Bitcoin-alphabet base58, matching what the gateway's bs58 decode expects.
+// Local rather than a dependency for the same reason lib/x402.js keeps its own.
+const B58 = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz';
+function base58encode(bytes) {
+  const digits = [0];
+  for (const byte of bytes) {
+    let carry = byte;
+    for (let j = 0; j < digits.length; j++) {
+      carry += digits[j] << 8;
+      digits[j] = carry % 58;
+      carry = (carry / 58) | 0;
+    }
+    while (carry > 0) { digits.push(carry % 58); carry = (carry / 58) | 0; }
+  }
+  let out = '';
+  for (const b of bytes) { if (b === 0) out += '1'; else break; } // leading zeros
+  for (let i = digits.length - 1; i >= 0; i--) out += B58[digits[i]];
+  return out;
 }

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.43.8",
+  "version": "0.43.9",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",