openzoo 0.48.82 → 0.48.83

package/lib/grokui.mjs

@@ -497,17 +497,25 @@ function newGroupThread(names) {
 // chunk after the first carries the PREVIOUS chunk's context_id so the
 // sidecar appends to the same bound context instead of starting fresh.
 const BIND_CHUNK_BYTES = 512 * 1024;
-// Chained auto-run commands per user message. Each hop is a paid call.
-// 8 was far too tight. A real task — install a toolchain, read a tree, wire a
-// service — is dozens of directives, so auto kept halting mid-job and telling
-// the user to type "continue", which is the exact thing auto exists to avoid.
-// Still bounded, because every hop is a paid call, but bounded at a number
-// that lets a job finish.
-const AUTO_MAX_STEPS = Number(process.env.OZ_AUTO_MAX_STEPS || 60);
+// Soft hop counter per user message. Each hop is a paid call. 8 parked a real
+// job mid-toolchain and told the user to type "continue" — the thing auto
+// exists to avoid. 60 was still a "type continue" trap on anything with a
+// crew. Hitting the number now INJECTS continue and keeps going until the
+// model emits DONE or the user flips to ask. The env var is a nudge interval,
+// not a stop.
+const AUTO_MAX_STEPS = Number(process.env.OZ_AUTO_MAX_STEPS || 500);
 // An empty completion is a provider hiccup, not an answer. In auto we retry it
 // silently rather than parking the thread behind a "say continue" note the
 // user then has to answer — that turned a transient blip into a manual step.
 const AUTO_EMPTY_RETRIES = Number(process.env.OZ_AUTO_EMPTY_RETRIES || 3);
+const NUDGE = 'That reply announced work instead of doing it — no directive line reached the harness, '
+  + 'so nothing ran. Emit the directive NOW, as the first line of your reply, with no preamble: '
+  + 'RUN:, SPAWN:, READ:, WRITE:, GLOB:, FETCH:, MCP: or SERVE:. '
+  + 'Exactly the syntax from your instructions — not [TOOL_CALL], not JSON, not a function-call envelope. '
+  + 'If several steps are needed, emit the FIRST one; you get its real output back and continue from there.';
+const AUTO_CONTINUE = 'AUTO is still on — do not stop and do not ask the user to type continue. '
+  + 'Emit the next directive now (RUN:/SPAWN:/SEND:/READ:/WRITE:/GLOB:/FETCH:/MCP:/SERVE:), '
+  + 'or DONE: if the job is actually finished.';
 // Ceiling on subagents per thread. Spawning is fire-and-forget and each child
 // can spawn too, so without a count it is unbounded — MEASURED as 15+ threads
 // all named tetris-contract, every one of them a live agent making paid calls.
@@ -1345,17 +1353,81 @@ function unwrapDirectiveLine(reply) {
  * last wrote to the parent, which is where constraints like "this is
  * ProofNetwork" and "use token22 <mint>" always live.
  */
-function spawnBrief(parent) {
+function isHarnessUserText(text) {
+  return /^\((command output|directive result)\)/.test(String(text || ''))
+    || String(text || '') === NUDGE
+    || String(text || '') === AUTO_CONTINUE;
+}
+
+function firstUserAsk(t) {
+  return (t?.history || []).find((m) => m.who === 'user' && !isHarnessUserText(m.text));
+}
+
+function lastUserAsk(t) {
+  return [...(t?.history || [])].reverse().find((m) => m.who === 'user' && !isHarnessUserText(m.text));
+}
+
+function siblingJob(sib) {
+  const text = String(firstUserAsk(sib)?.text || '');
+  const job = text.includes('--- your specific job ---')
+    ? text.split('--- your specific job ---').pop().split('--- your place in the team ---')[0]
+    : text;
+  return job.trim().replace(/\s+/g, ' ').slice(0, 400);
+}
+
+function spawnBrief(parent, { refresh = false } = {}) {
   if (!parent) return '';
-  const lastUser = [...(parent.history || [])].reverse()
-    .find((m) => m.who === 'user' && !/^\((command output|directive result)\)/.test(String(m.text || '')));
-  const text = String(lastUser?.text || '').trim();
-  if (!text) return '';
-  return 'CONTEXT — this is what was asked of the team you were just spawned into. '
-    + 'Constraints in here (the stack, addresses, what NOT to do) apply to you, and outrank '
-    + 'any assumption you would otherwise make from your own training:\n\n'
-    + text.slice(0, 4000)
-    + '\n\n--- your specific job ---\n';
+  const rootId = rootOf(parent).rootId;
+  const root = threads.get(rootId) || parent;
+  const rootAsk = String(firstUserAsk(root)?.text || '').trim();
+  const latest = String(lastUserAsk(parent)?.text || '').trim();
+  const recent = (parent.history || []).filter((m) => !isHarnessUserText(m.text)).slice(-8);
+  const siblings = [...threads.values()].filter((x) => x.parent === parent.id);
+  const cwd = parent.dir || WORKSPACE_DIR;
+  const mode = parent.runMode || 'ask';
+  const tier = parent.tier || 'medium';
+  const race = Number(parent.race) || 0;
+  const raceNeed = Number(parent.raceNeed) || 1;
+  const model = parent.model || '';
+  const lines = [
+    refresh
+      ? 'CONTEXT REFRESH — you already exist; this is the current brief. Constraints (stack, token, MCP URL, what NOT to do) outrank your training prior.'
+      : 'CONTEXT — this is what was asked of the team you were just spawned into. Constraints in here (the stack, addresses, what NOT to do) apply to you, and outrank any assumption you would otherwise make from your own training.',
+  ];
+  // The root ask is kept WHOLE. A 4000-char slice ate "proofnetwork can do it
+  // all" / token / MCP URL and the child invented a stack from training prior.
+  if (rootAsk) {
+    lines.push('', 'ROOT ASK — the original user request for this project (not a paraphrase):', rootAsk);
+  }
+  if (latest && latest !== rootAsk) {
+    lines.push('', 'LATEST from the parent thread:', latest);
+  }
+  if (recent.length) {
+    lines.push('', 'RECENT PARENT TURNS (what the orchestrator already decided):');
+    for (const m of recent) {
+      const who = m.who === 'user' ? 'user' : (m.name || parent.name);
+      lines.push('[' + who + '] ' + String(m.text || '').trim().slice(0, 1200));
+    }
+  }
+  lines.push('', 'WORKING SET:');
+  lines.push('cwd: ' + cwd);
+  lines.push('run mode: ' + mode);
+  lines.push('tier: ' + tier
+    + (race >= 2 ? ' · race ' + (raceNeed > 1 ? raceNeed + ' of ' + race : race) : '')
+    + (model ? ' · pinned model: ' + model : ''));
+  if (siblings.length) {
+    lines.push('', 'CREW — the split already happened. Do not re-split work they own:');
+    for (const s of siblings) {
+      const job = siblingJob(s);
+      lines.push('- ' + s.name + ': ' + (job || '(no task recorded yet)'));
+    }
+  }
+  lines.push('', '--- your specific job ---', '');
+  return lines.join('\n');
+}
+
+function childKickoff(parent, childName, task, { fresh = true } = {}) {
+  return spawnBrief(parent, { refresh: !fresh }) + task + spawnPosition(parent, childName);
 }
 
 /**
@@ -1375,14 +1447,14 @@ function spawnBrief(parent) {
  */
 function spawnPosition(parent, childName) {
   if (!parent) return '';
-  const siblings = [...threads.values()].filter((x) => x.parent === parent.id).map((x) => x.name);
   const depth = rootOf(parent).depth + 1;
-  const others = siblings.filter((n) => n !== childName);
+  const others = [...threads.values()].filter((x) => x.parent === parent.id && x.name !== childName);
   return '\n\n--- your place in the team ---\n'
     + `You are "${childName}", spawned by "${parent.name}". You are at tier ${depth} of this project.\n`
     + (others.length
-      ? `The work was ALREADY SPLIT before you existed. Your siblings under ${parent.name} are: `
-        + others.join(', ') + '.\nThey hold the other slices. Yours is yours to BUILD.\n'
+      ? `The work was ALREADY SPLIT before you existed. Your siblings under ${parent.name} are:\n`
+        + others.map((s) => `- ${s.name}: ${siblingJob(s) || '(no task recorded yet)'}`).join('\n')
+        + '\nThey hold the other slices. Yours is yours to BUILD.\n'
       : '')
     + 'Do NOT re-split your own slice into more agents just because it has several parts — '
     + 'that is how a team becomes sixteen bots and zero artifacts. SPAWN only if your slice '
@@ -1489,8 +1561,7 @@ async function tryDirective(reply, originId) {
     }
     // Every thread now exists, so spawnPosition sees the COMPLETE cohort.
     for (const { t: sub, task, fresh } of made) {
-      runTurn(sub.id, (fresh ? spawnBrief(parent) : '') + task
-        + (fresh ? spawnPosition(parent, sub.name) : '')).catch(() => {});
+      runTurn(sub.id, childKickoff(parent, sub.name, task, { fresh })).catch(() => {});
     }
     const fresh = made.filter((m) => m.fresh).map((m) => m.t.name);
     return [fresh.length ? `Spawned ${fresh.length} together (they can each see the full crew): ${fresh.join(', ')}` : '', ...notes]
@@ -1509,7 +1580,7 @@ async function tryDirective(reply, originId) {
     // is what SEND already does.
     const existing = findByName(name);
     if (existing) {
-      runTurn(existing.id, task).catch(() => {});
+      runTurn(existing.id, childKickoff(threads.get(originId), existing.name, task, { fresh: false })).catch(() => {});
       return `${name} already exists — sent it the task instead of spawning a duplicate.`;
     }
     // Storm guard. Fire-and-forget spawning is unbounded by construction: each
@@ -1522,7 +1593,7 @@ async function tryDirective(reply, originId) {
     }
     const sub = newThread(name, originId);
     // The child gets the ORIGINATING brief plus its own job — see spawnBrief.
-    runTurn(sub.id, spawnBrief(threads.get(originId)) + task + spawnPosition(threads.get(originId), name)).catch(() => {}); // fire and forget
+    runTurn(sub.id, childKickoff(threads.get(originId), name, task)).catch(() => {}); // fire and forget
     return `Spawned ${name} — working on it.`;
   }
   // SEND TO A NAME THAT DOES NOT EXIST YET *SPAWNS* IT.
@@ -1551,7 +1622,7 @@ async function tryDirective(reply, originId) {
     const msg = sendM[2].trim();
     const target = findByName(name);
     if (target) {
-      runTurn(target.id, msg).catch(() => {});
+      runTurn(target.id, childKickoff(threads.get(originId), target.name, msg, { fresh: false })).catch(() => {});
       return `Messaged ${name}.`;
     }
     // The SAME storm guard SPAWN uses — promoting a SEND must not be a way
@@ -1563,7 +1634,7 @@ async function tryDirective(reply, originId) {
         + `(limit ${SPAWN_MAX_CHILDREN}). Reuse one with  SEND: <existing name> | <task>.`;
     }
     const sub = newThread(name, originId);
-    runTurn(sub.id, spawnBrief(threads.get(originId)) + msg + spawnPosition(threads.get(originId), name)).catch(() => {});
+    runTurn(sub.id, childKickoff(threads.get(originId), name, msg)).catch(() => {});
     return `${name} did not exist — spawned it with that message as its task.`;
   }
   // PING had the same anchor bug — no `m`, so a PING after any preamble (or
@@ -2011,11 +2082,12 @@ async function runTurn(threadId, userText, onEvent, images) {
     bindThread(t).catch(() => {});
     return;
   }
-  // A real message from the user resets the auto budget AND the one-shot
-  // announcement nudge — otherwise a thread that got nudged once could never be
-  // nudged again for the rest of its life, which is the opposite of a per-turn
-  // guard. The nudge itself is not a reset: it must not re-arm its own budget.
-  if (!/^\(command output\)/.test(userText) && userText !== NUDGE) {
+  // A real message from the user resets the auto budget AND the announcement
+  // nudge. Harness-injected hops (command output, directive result, nudge,
+  // auto-continue) must not re-arm — that would make AUTO_MAX_STEPS a no-op
+  // on the directive path (it used to reset every hop because only
+  // "(command output)" was excluded).
+  if (!isHarnessUserText(userText) && !/^\((command output|directive result)\)/.test(userText)) {
     t.autoSteps = 0;
     delete t.autoNudged;
   }
@@ -2126,11 +2198,11 @@ async function runTurn(threadId, userText, onEvent, images) {
         bindThread(t).catch(() => {});
         runTurn(threadId, condense('(command output)', output), onEvent).catch(() => {});
       } else {
-        const note = `(auto-run paused after ${AUTO_MAX_STEPS} chained commands — that is the spend ceiling, not the end of the job. Send anything to carry on, or raise OZ_AUTO_MAX_STEPS.)`;
-        t.history.push({ who: 'bot', text: note });
-        onEvent?.({ type: 'final', name: t.name, color: t.color, text: note });
-        saveThreads();
+        // Do not park. A "say continue" note is the failure mode auto exists
+        // to avoid — inject continue and keep going until DONE or ask.
+        t.autoSteps = 0;
         bindThread(t).catch(() => {});
+        runTurn(threadId, AUTO_CONTINUE, onEvent).catch(() => {});
       }
       return;
     }
@@ -2164,17 +2236,17 @@ async function runTurn(threadId, userText, onEvent, images) {
   //
   // Same budget as RUN (shared t.autoSteps, reset when the user speaks), so
   // this cannot spend more than a chained RUN loop already could.
-  if (t.runMode === 'auto' && ack !== null && ack !== undefined) {
+  if (t.runMode === 'auto' && ack !== null && ack !== undefined
+      && !/^[ \t>*-]*DONE:/m.test(reply)) {
     t.autoSteps = (t.autoSteps || 0) + 1;
+    bindThread(t).catch(() => {});   // bind every hop, not just the last one
     if (t.autoSteps < AUTO_MAX_STEPS) {
-      bindThread(t).catch(() => {});   // bind every hop, not just the last one
       runTurn(threadId, condense('(directive result)', ack), onEvent).catch(() => {});
-      return;
+    } else {
+      t.autoSteps = 0;
+      runTurn(threadId, AUTO_CONTINUE, onEvent).catch(() => {});
     }
-    const note = `(auto paused after ${AUTO_MAX_STEPS} steps — that is the spend ceiling, not the end of the job. Send anything to carry on, or raise OZ_AUTO_MAX_STEPS.)`;
-    t.history.push({ who: 'bot', text: note });
-    onEvent?.({ type: 'final', name: t.name, color: t.color, text: note });
-    saveThreads();
+    return;
   }
 
   // ANNOUNCING IS NOT DOING — so do not let it end the turn.
@@ -2193,13 +2265,22 @@ async function runTurn(threadId, userText, onEvent, images) {
   // finished reply would spend a turn arguing with a bot that already
   // succeeded. Once per turn (autoNudged), so a model that announces twice
   // still stops instead of looping on the user's wallet.
-  if (t.runMode === 'auto' && (ack === null || ack === undefined) && !t.autoNudged
-      && (t.autoSteps || 0) < AUTO_MAX_STEPS && ANNOUNCEMENT.test(reply)) {
+  if (t.runMode === 'auto' && (ack === null || ack === undefined)
+      && (STALLED_OFFER.test(reply) || ANNOUNCEMENT.test(reply))) {
+    // Offers and "Spawned X — working on it" with no directive must not end
+    // the run. The old once-only autoNudged gate parked the thread after one
+    // hedge and the user typed continue. Keep going; AUTO_MAX_STEPS injects
+    // another continue rather than stopping.
     t.autoNudged = true;
     t.autoSteps = (t.autoSteps || 0) + 1;
     saveThreads();
     bindThread(t).catch(() => {});
-    runTurn(threadId, NUDGE, onEvent).catch(() => {});
+    if (t.autoSteps < AUTO_MAX_STEPS) {
+      runTurn(threadId, NUDGE, onEvent).catch(() => {});
+    } else {
+      t.autoSteps = 0;
+      runTurn(threadId, AUTO_CONTINUE, onEvent).catch(() => {});
+    }
     return;
   }
   bindThread(t).catch(() => {});
@@ -2209,12 +2290,7 @@ async function runTurn(threadId, userText, onEvent, images) {
 // in here because they are FALSE without a SPAWN: in the same reply — the bot
 // reports success for something the harness never saw.
 const ANNOUNCEMENT = /\b(?:I(?:'| a)?ll |I will |let me |I'm going to |I am going to |first,? |next,? |now I'll |starting|kicking off|spawn(?:ing|ed)|about to|going to (?:check|run|create|start|install))\b/i;
-
-const NUDGE = 'That reply announced work instead of doing it — no directive line reached the harness, '
-  + 'so nothing ran. Emit the directive NOW, as the first line of your reply, with no preamble: '
-  + 'RUN:, SPAWN:, READ:, WRITE:, GLOB:, FETCH:, MCP: or SERVE:. '
-  + 'Exactly the syntax from your instructions — not [TOOL_CALL], not JSON, not a function-call envelope. '
-  + 'If several steps are needed, emit the FIRST one; you get its real output back and continue from there.';
+const STALLED_OFFER = /\b(?:if you want(?:ed)?,? I can|should I\b|let me know(?: and I['’]ll)?|ready to proceed|want me to|would you like(?: me to)?|spawned \S[\s\S]{0,80}working on it|kicked that off)\b/i;
 
 /**
  * The PROJECT a thread belongs to = the root of its spawn tree, and how deep
@@ -2420,17 +2496,22 @@ const APP_HTML = `<!doctype html>
   @keyframes twarnpulse { 0%,100% { opacity: 1; } 50% { opacity: .45; } }
   @media (prefers-reduced-motion: reduce) { .twarn { animation: none; } }
   #main { flex: 1; min-width: 0; display: flex; flex-direction: column; height: 100vh; }
-  #chatHeader { padding: 14px 20px; border-bottom: 1px solid #1c1c1e; display: flex; align-items: center; gap: 10px;
-                font-weight: 600; }
+  #chatHeader { padding: 14px 20px; border-bottom: 1px solid #1c1c1e; display: flex; align-items: center;
+                flex-wrap: wrap; gap: 8px 10px; font-weight: 600; }
   #chatHeader .tavatar { width: 26px; height: 26px; border-radius: 7px; font-size: 11px; flex: 0 0 26px; }
-  .hname { display: flex; flex-direction: column; gap: 1px; min-width: 0; }
+  /* Title shrinks and wraps; the spend dials must stay on screen. margin-left:auto
+     on #modeToggle used to shove cheap/race/wallet off the right edge. */
+  #chatHeaderId { display: flex; align-items: center; gap: 10px; flex: 1 1 120px; min-width: 0; overflow: hidden; }
+  #headerDials { display: flex; flex-wrap: wrap; align-items: center; gap: 8px; margin-left: auto; flex: 0 1 auto; }
+  .hname { display: flex; flex-direction: column; gap: 1px; min-width: 0; overflow: hidden; }
+  .hname > div:first-child { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
   .hdir { font-weight: 400; font-size: 11px; color: #8e8e93; white-space: nowrap; overflow: hidden;
           text-overflow: ellipsis; max-width: 420px; }
   /* Run-mode toggle. The "/mode auto|ask" chat command still works and is
      still what the bots are told about, but it is invisible until you know it
      exists — and it controls whether shell commands run without asking, which
      is exactly the setting a user should be able to SEE at a glance. */
-  #modeToggle { margin-left: auto; display: flex; align-items: center; gap: 0;
+  #modeToggle { display: flex; align-items: center; gap: 0;
                 background: #1c1c1e; border: 1px solid #333340; border-radius: 999px; padding: 2px; }
   .modebtn { border: 0; background: none; color: #8e8e93; font: inherit; font-size: 11px;
              font-weight: 600; padding: 4px 11px; border-radius: 999px; cursor: pointer;
@@ -2453,9 +2534,9 @@ const APP_HTML = `<!doctype html>
   .dial.pinned { color: #4c4d5a; border-color: #1c1c1e; }
   /* WALLET. GET /wallet shipped in 1.5.22 with nothing pointing at it, so the
      box's own deposit addresses were reachable only by curl — on a product
-     whose entire premise is that the box pays for itself. An address you
-     cannot copy is an address you cannot fund, so every one of them is a
-     click-to-copy row, not selectable text. */
+     whose entire premise is that the box pays for itself. Click-to-copy is a
+     shortcut; the address is selectable so Cmd/Ctrl+C still works if copy
+     fails. */
   #walletOverlay, #assetsOverlay { position: fixed; inset: 0; background: rgba(0,0,0,.66); z-index: 1200;
                    display: none; align-items: center; justify-content: center; padding: 24px; }
   #walletOverlay.show, #assetsOverlay.show { display: flex; }
@@ -2471,8 +2552,10 @@ const APP_HTML = `<!doctype html>
      pushes the copy affordance out of the box — the same flexbox trap that
      once pushed the cost button off-screen. */
   .wrow .waddr { flex: 1; min-width: 0; font-family: ui-monospace, SFMono-Regular, Menlo, monospace;
-                 font-size: 12px; word-break: break-all; line-height: 1.45; }
-  .wrow .wcopy { flex: 0 0 auto; color: #6f7080; font-size: 10px; text-transform: uppercase; letter-spacing: .06em; }
+                 font-size: 12px; word-break: break-all; line-height: 1.45; cursor: text;
+                 -webkit-user-select: all; user-select: all; -webkit-app-region: no-drag; }
+  .wrow .wcopy { flex: 0 0 auto; color: #6f7080; font-size: 10px; text-transform: uppercase; letter-spacing: .06em;
+                 user-select: none; }
   .wrow:hover .wcopy { color: #b8f240; }
   .wbal { border: 1px solid #1c1c1e; border-radius: 12px; padding: 10px 12px; margin-bottom: 10px;
           font-size: 12px; color: #ececec; line-height: 1.7; word-break: break-word; }
@@ -2501,8 +2584,7 @@ const APP_HTML = `<!doctype html>
   .scmd b { color: #b8f240; font-weight: 600; font-family: ui-monospace, SFMono-Regular, Menlo, monospace; }
   .scmd i { color: #6f7080; font-style: normal; font-family: ui-monospace, SFMono-Regular, Menlo, monospace; }
   .scmd span { color: #999aa8; margin-left: auto; text-align: right; }
-  #hudBtn { margin-left: 10px; }
-  #chatHeaderId { display: flex; align-items: center; gap: 10px; }
+  #hudBtn { margin-left: 2px; }
   #hud { position: fixed; top: 40px; right: 14px; width: 250px; background: rgba(14,14,17,.94);
          border: 1px solid #333340; border-radius: 10px; padding: 12px 14px; font: 11px/1.5 Menlo, monospace;
          display: none; z-index: 300; box-shadow: 0 12px 30px rgba(0,0,0,.5); }
@@ -2520,7 +2602,9 @@ const APP_HTML = `<!doctype html>
                 color: #f0c9a8; font-size: 10.5px; line-height: 1.45; }
   #hud .hhint.show { display: block; }
   #hud .hhint b { color: #f28c4d; font-weight: 600; }
-  #sidebar, #main { -webkit-app-region: no-drag; }
+  #sidebar, #main, #walletOverlay, #assetsOverlay, #composeOverlay,
+  #inp, #search, #composeInp, .wpass, .bubble, .md-pre, .runoutput, .runcmd {
+    -webkit-app-region: no-drag; }
   #log { flex: 1; min-width: 0; overflow-y: auto; overflow-x: hidden; padding: 20px 24px 12px;
          display: flex; flex-direction: column; gap: 6px;
          -webkit-user-select: text; user-select: text; }
@@ -2573,9 +2657,10 @@ const APP_HTML = `<!doctype html>
     padding: 3px 8px; border: 1px solid #3a3a3d; border-radius: 8px;
     background: #1c1c1e; color: #b9b9c0;
     font: 500 10.5px/1.4 ui-sans-serif, -apple-system, system-ui, sans-serif;
-    letter-spacing: .02em; cursor: pointer;
+    letter-spacing: .02em; cursor: pointer; user-select: none;
     transition: opacity .12s ease, background .12s ease, color .12s ease;
   }
+  .md-pre, .runoutput, .runcmd { -webkit-user-select: text; user-select: text; }
   .row.bot .copybtn { right: -2px; }
   .row.user .copybtn { left: -2px; }
   .row:hover .copybtn, .row:focus-within .copybtn { opacity: 1; pointer-events: auto; }
@@ -2710,14 +2795,15 @@ const APP_HTML = `<!doctype html>
   </div>
   <div id="walletOverlay" data-component="wallet-modal">
     <div id="walletBox">
-      <h3>This box's wallet</h3>
-      <div class="wsub">Every model call is paid from here, per call. No account, no API key.</div>
+      <h3>Your wallet</h3>
+      <div class="wsub">This is <b>your</b> local burner on this machine (or this box). Keys stay in ~/.openzoo/wallet.json. It is not openzoo’s wallet, not a shared zoo account, not the model’s. You fund these deposit addresses; the app pays x402 per call from this wallet. Public addresses only — the UI never shows the key.</div>
       <div id="walletBody">loading…</div>
     </div>
   </div>
   <div id="main">
     <div id="chatHeader">
       <div id="chatHeaderId"></div>
+      <div id="headerDials">
       <div id="modeToggle" data-component="run-mode-toggle" role="group" aria-label="Shell command mode">
         <button class="modebtn ask on" id="modeAsk" data-mode="ask"
                 title="Shell commands pause and wait for your approval">ask</button>
@@ -2748,9 +2834,10 @@ const APP_HTML = `<!doctype html>
       <button class="dial" id="assetsBtn" data-component="assets-unlock"
               title="Unlock the encrypted assets baked into this box's image">assets</button>
       <button class="dial" id="walletBtn" data-component="wallet-open"
-              title="This box's own wallet — deposit addresses and live balances">wallet</button>
+              title="Your local burner wallet — deposit addresses and live balances">wallet</button>
       <button class="icon-btn" id="reloadBtn" title="Restart grokui on this box">&#8635;</button>
       <button class="icon-btn" id="hudBtn">◎</button>
+      </div>
     </div>
     <div id="hud">
       <div class="htitle">YOUR WALLET · THIS SESSION</div>
@@ -3060,7 +3147,7 @@ const APP_HTML = `<!doctype html>
     // did not say, and guessing "empty" there would send someone to top up a
     // wallet that is fine.
     note.textContent = w.funded === false
-      ? 'This wallet is EMPTY — calls will fail with HTTP 402 until it is funded. ' + (w.funding || '')
+      ? 'This wallet is EMPTY — calls will fail with HTTP 402 until you fund the addresses above. ' + (w.funding || '')
       : (w.funding || '');
     if (w.funded === false) note.classList.add('wempty');
     if (note.textContent.trim()) walletBody.appendChild(note);
@@ -3113,6 +3200,27 @@ const APP_HTML = `<!doctype html>
   });
 
   document.getElementById('walletBtn').addEventListener('click', openWallet);
+  // First launch: if the burner is empty, open the wallet once so they see
+  // addresses they can copy — and whose wallet this is. localStorage so a
+  // funded session or a dismiss does not keep popping it.
+  (async function maybeOpenWalletOnce() {
+    if (localStorage.getItem('openzoo.wallet.seen')) return;
+    for (let i = 0; i < 8; i++) {
+      try {
+        const r = await fetch(API + '/wallet');
+        const w = r.ok ? await r.json() : null;
+        if (!w || (!w.solana && !w.evm)) {
+          await new Promise((res) => setTimeout(res, 400));
+          continue;
+        }
+        localStorage.setItem('openzoo.wallet.seen', '1');
+        if (w.funded === false) await openWallet();
+        return;
+      } catch (e) {
+        await new Promise((res) => setTimeout(res, 400));
+      }
+    }
+  })();
   // Click-outside and Escape both close it — a modal you can only dismiss one
   // way is a modal people get stuck in.
   walletOverlay.addEventListener('click', (e) => {
@@ -3175,15 +3283,22 @@ const APP_HTML = `<!doctype html>
      instead of silently doing nothing, which is the worst outcome for a button
      whose entire job is invisible. */
   async function copyText(text) {
+    const value = String(text ?? '');
+    try {
+      if (window.electronAPI && typeof window.electronAPI.copyText === 'function') {
+        const ok = await window.electronAPI.copyText(value);
+        if (ok) return true;
+      }
+    } catch (e) { /* fall through */ }
     try {
       if (navigator.clipboard && window.isSecureContext) {
-        await navigator.clipboard.writeText(text);
+        await navigator.clipboard.writeText(value);
         return true;
       }
     } catch (e) { /* fall through to the legacy path */ }
     try {
       const ta = document.createElement('textarea');
-      ta.value = text;
+      ta.value = value;
       // Off-screen but focusable: display:none or visibility:hidden make
       // execCommand('copy') a no-op in several browsers.
       ta.style.cssText = 'position:fixed;top:-1000px;left:-1000px;opacity:0';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.48.82",
+  "version": "0.48.83",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",