openzoo 0.48.2 → 0.48.3

package/lib/grokui.mjs

@@ -378,8 +378,16 @@ function parseRun(reply) {
   // use U+FF5C FULLWIDTH VERTICAL LINE (｜) — matching only `|` parsed the
   // pretty-printed form in tests while missing what the model actually emits,
   // which is exactly how this survived one round of "fixed".
+  // The PARAMETER NAME is not fixed either. Models emit name="command",
+  // name="cmd", name="shell_command" and name="script" for the same thing —
+  // MEASURED live emitting `name="cmd"` inside an invoke named exec_command,
+  // against a parser that demanded name="command". One attribute apart, and
+  // the whole envelope was dropped in silence: the bot then explained what it
+  // was "about to run" forever, never running anything. Match the shape of the
+  // envelope, not one vendor's spelling of it.
   const SEP = '[|｜\\s]*';
-  const dsml = new RegExp(`<${SEP}DSML[^>]*\\bparameter\\b[^>]*name="command"[^>]*>([\\s\\S]*?)<\\/${SEP}DSML`, 'i').exec(reply);
+  const NAME = '(?:command|cmd|shell_command|script)';
+  const dsml = new RegExp(`<${SEP}DSML[^>]*\\bparameter\\b[^>]*\\bname="${NAME}"[^>]*>([\\s\\S]*?)<\\/${SEP}DSML`, 'i').exec(reply);
   if (dsml) return sanitizeRunCommand(dsml[1]);
 
   const m = /^[ \t>*-]*RUN:[ \t]*([\s\S]+)/m.exec(reply);
@@ -391,9 +399,21 @@ function parseRun(reply) {
   return sanitizeRunCommand(cmd);
 }
 
+// RUN through BASH, not /bin/sh. node's exec() defaults to /bin/sh, which on
+// Debian is dash — so every bash-ism a model writes (`for … do`, `[[ ]]`,
+// arrays, process substitution) dies as
+//   /bin/sh: 40: Syntax error: "do" unexpected
+// which reads as the model writing bad code when it wrote perfectly good bash.
+// Models overwhelmingly emit bash; give them bash. Windows is left alone so
+// node picks cmd.exe, and a box without /bin/bash falls back to the default.
+const RUN_SHELL = process.platform !== 'win32' && existsSync('/bin/bash') ? '/bin/bash' : undefined;
+// Installing a toolchain (apt-get, pip, cargo) routinely outruns two minutes,
+// and a killed install leaves a half-configured box that fails confusingly.
+const RUN_TIMEOUT_MS = Number(process.env.OZ_RUN_TIMEOUT_MS || 600000);
+
 function execCommand(command, cwd) {
   return new Promise((resolve) => {
-    exec(command, { cwd, timeout: 120000, maxBuffer: 10 * 1024 * 1024 }, (err, stdout, stderr) => {
+    exec(command, { cwd, shell: RUN_SHELL, timeout: RUN_TIMEOUT_MS, maxBuffer: 10 * 1024 * 1024 }, (err, stdout, stderr) => {
       let out = (stdout || '') + (stderr ? '\n' + stderr : '');
       if (err) out += `\n(exit ${err.code ?? 1})`;
       resolve(out.slice(0, 6000) || '(no output)');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.48.2",
+  "version": "0.48.3",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",