openzoo 0.50.19 → 0.50.21

package/lib/grokcli.js

@@ -98,6 +98,112 @@ ${body}
 `;
 }
 
+/**
+ * `openzoo bot` — Grok Bot.app on the zoo, no sudo, no /etc/hosts.
+ *
+ * CURSOR_API_BASE_URL (and SAND_BACKEND_URL) are what the Electron MAIN
+ * process actually reads. Chromium --host-resolver-rules do not. Measured:
+ * a bare `127.0.0.1:443` is HTTP and logs ERR_SSL_HTTP_REQUEST; the URL
+ * must be https://127.0.0.1:8443. The TLS warning on launch is Node
+ * complaining about NODE_TLS_REJECT_UNAUTHORIZED=0 — expected, the cert
+ * is ours and self-signed.
+ *
+ * We bind 8443 ourselves (unprivileged). :443 is the old root takeover and
+ * stubs oauth if it is the unpatched npx copy — do not point the app there.
+ */
+export async function runBot(argv = []) {
+  const port = 8443;
+  const url = `https://127.0.0.1:${port}`;
+  const bin = `${APP}/Contents/MacOS/Grok Bot`;
+  if (!existsSync(bin)) {
+    console.error('openzoo: Grok Bot.app not found at', APP);
+    process.exit(1);
+  }
+
+  const proxyBase = `http://localhost:${config.port}/v1`;
+  let up = false;
+  try { up = (await fetch(`${proxyBase}/models`, { signal: AbortSignal.timeout(2000) })).ok; } catch { up = false; }
+  if (!up) {
+    console.error('openzoo: starting proxy on', proxyBase);
+    const { startProxy } = await import('./proxy.js');
+    await startProxy({ silent: true, autoTunnel: process.env.OPENZOO_NO_TUNNEL === '1' ? false : true });
+  }
+
+  process.env.OPENZOO_BYOK = '1';
+  const sniff = argv.includes('--sniff') || argv.includes('--passthru');
+  if (sniff) {
+    // REAL pod, we only sit in the middle. EnsureSandBox is rewritten so
+    // /api/sendPrompt and getAgentTranscriptTail land here, then we proxy
+    // them to cursorvm and dump the live JSON. That is the comparison
+    // surface — hijack guesses have been wrong twice.
+    delete process.env.OZ_HIJACK_POD;
+    process.env.OPENZOO_PASSTHRU = '1';
+    process.env.OPENZOO_SNIFF = '1';
+    process.env.OZ_SNIFF_SELF = url;
+  } else {
+    // Do NOT hand Grok Bot a real cursorvm pod — inference then never leaves
+    // Anysphere (measured: EnsureSandBox -> REAL api2, then StreamUnifiedChat
+    // never arrives). Point the sandbox URLs at THIS aiserver; StreamUnifiedChat
+    // is answered from :8402 (x402).
+    process.env.OZ_HIJACK_POD = JSON.stringify({
+      region: 'local',
+      accountId: 'openzoo',
+      podId: 'openzoo-local',
+      token: 'openzoo',
+      agent: url,
+      vnc: url,
+      p1340: url,
+      p6081: url,
+    });
+    process.env.OZ_SNIFF_SELF = url;
+  }
+  const { startCursorBackend } = await import('./cursorbackend.js');
+  const models = [
+    'gpt-4o', 'gpt-4o-mini', 'gpt-4-turbo', 'gpt-4.1', 'gpt-4.1-mini', 'gpt-3.5-turbo',
+  ].map((n) => ({ name: n, label: n }));
+  const log = (m) => console.error('  backend:', m);
+  try {
+    startCursorBackend({ port, models, log });
+  } catch (e) {
+    console.error('openzoo: 8443 already bound — reusing it (', e.message, ')');
+  }
+  await new Promise((r) => setTimeout(r, 400));
+  console.error(`openzoo: aiserver on ${url}`);
+  console.error('         oauth + /sand-box creds -> real api2');
+  if (sniff) {
+    console.error('         SNIFF: real EnsureSandBox, /api/* proxied, dump ~/.openzoo/grokbot-sniff.jsonl');
+    console.error('         send a message in Grok Bot — it should paint for real');
+  } else {
+    console.error('         EnsureSandBox HIJACKED here; StreamUnifiedChat -> :8402 (x402)');
+  }
+
+  try { execSync('osascript -e \'tell application "Grok Bot" to quit\'', { stdio: 'ignore' }); } catch { /* ok */ }
+  await new Promise((r) => setTimeout(r, 1500));
+
+  console.error('openzoo: launching Grok Bot');
+  console.error(`         CURSOR_API_BASE_URL=${url}`);
+  spawn(bin, ['--ignore-certificate-errors'], {
+    stdio: 'ignore',
+    detached: true,
+    env: {
+      ...process.env,
+      NODE_TLS_REJECT_UNAUTHORIZED: '0',
+      CURSOR_API_BASE_URL: url,
+      SAND_BACKEND_URL: url,
+      // Helper daemon (local-exec-daemon/main.cjs) uses Node fetch, not Chromium.
+      // Without these it dials the cached cursorvm 1337 URL / dies on our
+      // self-signed cert and GET /local-exec/requests never arrives.
+      SAND_HOST_GATEWAY_URL: url,
+      SAND_HOST_GATEWAY_TOKEN: 'openzoo',
+      SAND_HOST_GATEWAY_NETWORK_TOKEN: 'openzoo',
+    },
+  }).unref();
+
+  console.error('openzoo: leave this running. ctrl-c stops the backend.');
+  if (argv.includes('--once')) return;
+  await new Promise(() => {});
+}
+
 export async function setupGrokBot(argv = []) {
   const base = `http://localhost:${config.port}/v1`;
   const launch = !argv.includes('--no-launch');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.50.19",
+  "version": "0.50.21",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",