openzoo 0.50.34 → 0.50.35

package/bin/openzoo.js

@@ -93,6 +93,10 @@ usage:
                               :8443, then launches the app with
                               CURSOR_API_BASE_URL=https://127.0.0.1:8443
                               (no sudo, no /etc/hosts). Leave it running.
+                              After a reboot the login item comes back without
+                              that env — bot bounces it so send works. Already-
+                              hijacked sessions are left alone.
+                              --quit force bounce · --no-quit never bounce
   npx openzoo cursor [dir]    start proxy+tunnel, write MCP config + every model
                               into the picker, and LAUNCH Cursor on [dir]
                               (defaults to the current directory; ~ works;

package/lib/grokcli.js

@@ -99,6 +99,74 @@ ${body}
 `;
 }
 
+const GROK_BOT_BIN = `${APP}/Contents/MacOS/Grok Bot`;
+
+/** pids whose command is the Grok Bot main binary (not grep itself). */
+export function grokBotPids(run = execSync) {
+  try {
+    return run(`pgrep -f ${JSON.stringify(GROK_BOT_BIN)}`, { encoding: 'utf8' })
+      .trim().split('\n').map((s) => s.trim()).filter(Boolean);
+  } catch {
+    return [];
+  }
+}
+
+function pidHasNeedle(pid, needle, run = execSync) {
+  const n = Number(pid);
+  if (!Number.isInteger(n) || n <= 0) return false;
+  for (const cmd of [`ps -Eww -p ${n} -o command=`, `ps eww -p ${n}`]) {
+    try {
+      if (run(cmd, { encoding: 'utf8', timeout: 2000 }).includes(needle)) return true;
+    } catch { /* SIP / dead pid */ }
+  }
+  return false;
+}
+
+function somethingTalksToPort(port, run = execSync) {
+  try {
+    const out = run(`lsof -nP -iTCP:${Number(port)} -sTCP:ESTABLISHED`, {
+      encoding: 'utf8', timeout: 2000,
+    });
+    return /Grok|Electron|Helper/i.test(out);
+  } catch {
+    return false;
+  }
+}
+
+/** Is the running Grok Bot already pointed at our aiserver? */
+export function inspectGrokBotHijack(url, port = 8443, run = execSync) {
+  const pids = grokBotPids(run);
+  const needle = `CURSOR_API_BASE_URL=${url}`;
+  const envHit = pids.some((pid) => pidHasNeedle(pid, needle, run));
+  const tcpHit = somethingTalksToPort(port, run);
+  return { running: pids.length > 0, pids, hijacked: envHit || tcpHit };
+}
+
+/**
+ * Decide whether to osascript-quit / spawn Grok Bot.
+ * forceQuit = --quit / OZ_NO_QUIT=0
+ * neverQuit = --no-quit / OZ_NO_QUIT=1
+ */
+export function grokBotQuitPlan({ forceQuit = false, neverQuit = false, running = false, hijacked = false } = {}) {
+  if (forceQuit) return { quit: true, spawn: true, reason: 'forced --quit' };
+  if (neverQuit) {
+    return {
+      quit: false,
+      spawn: !hijacked,
+      reason: hijacked
+        ? 'explicit --no-quit (already hijacked)'
+        : 'explicit --no-quit (Grok Bot may be a login-item without hijack env)',
+    };
+  }
+  if (!running) return { quit: false, spawn: true, reason: 'Grok Bot not running' };
+  if (hijacked) return { quit: false, spawn: false, reason: 'already hijacked — leaving the session' };
+  return {
+    quit: true,
+    spawn: true,
+    reason: 'running without hijack env (reboot/login item) — bouncing so CURSOR_API_BASE_URL sticks',
+  };
+}
+
 /**
  * `openzoo bot` — Grok Bot.app on the zoo, no sudo, no /etc/hosts.
  *
@@ -185,31 +253,46 @@ export async function runBot(argv = []) {
     console.error('         EnsureSandBox HIJACKED here; StreamUnifiedChat -> :8402 (x402)');
   }
 
-  // Default: do not quit Grok Bot. Restarting the hijack used to osascript-quit
-  // the app and drop the session; pass --quit to get the old bounce.
-  if (argv.includes('--quit') || process.env.OZ_NO_QUIT === '0') {
+  // Default: leave a Grok Bot that is ALREADY hijacked. After a reboot the
+  // login item comes back WITHOUT CURSOR_API_BASE_URL; Electron's single-
+  // instance lock then swallows our env'd spawn and the overlay stays
+  // "Couldn't send your message". Bounce only that unhijacked case.
+  // --quit / OZ_NO_QUIT=0 force a bounce. --no-quit / OZ_NO_QUIT=1 never.
+  const state = inspectGrokBotHijack(url, port);
+  const plan = grokBotQuitPlan({
+    forceQuit: argv.includes('--quit') || process.env.OZ_NO_QUIT === '0',
+    neverQuit: argv.includes('--no-quit') || process.env.OZ_NO_QUIT === '1',
+    running: state.running,
+    hijacked: state.hijacked,
+  });
+  console.error(`openzoo: grokbot ${plan.reason}`);
+  if (plan.quit) {
     try { execSync('osascript -e \'tell application "Grok Bot" to quit\'', { stdio: 'ignore' }); } catch { /* ok */ }
     await new Promise((r) => setTimeout(r, 1500));
   }
 
-  console.error('openzoo: launching Grok Bot');
-  console.error(`         CURSOR_API_BASE_URL=${url}`);
-  spawn(bin, ['--ignore-certificate-errors'], {
-    stdio: 'ignore',
-    detached: true,
-    env: {
-      ...process.env,
-      NODE_TLS_REJECT_UNAUTHORIZED: '0',
-      CURSOR_API_BASE_URL: url,
-      SAND_BACKEND_URL: url,
-      // Helper daemon (local-exec-daemon/main.cjs) uses Node fetch, not Chromium.
-      // Without these it dials the cached cursorvm 1337 URL / dies on our
-      // self-signed cert and GET /local-exec/requests never arrives.
-      SAND_HOST_GATEWAY_URL: url,
-      SAND_HOST_GATEWAY_TOKEN: 'openzoo',
-      SAND_HOST_GATEWAY_NETWORK_TOKEN: 'openzoo',
-    },
-  }).unref();
+  if (plan.spawn) {
+    console.error('openzoo: launching Grok Bot');
+    console.error(`         CURSOR_API_BASE_URL=${url}`);
+    spawn(bin, ['--ignore-certificate-errors'], {
+      stdio: 'ignore',
+      detached: true,
+      env: {
+        ...process.env,
+        NODE_TLS_REJECT_UNAUTHORIZED: '0',
+        CURSOR_API_BASE_URL: url,
+        SAND_BACKEND_URL: url,
+        // Helper daemon (local-exec-daemon/main.cjs) uses Node fetch, not Chromium.
+        // Without these it dials the cached cursorvm 1337 URL / dies on our
+        // self-signed cert and GET /local-exec/requests never arrives.
+        SAND_HOST_GATEWAY_URL: url,
+        SAND_HOST_GATEWAY_TOKEN: 'openzoo',
+        SAND_HOST_GATEWAY_NETWORK_TOKEN: 'openzoo',
+      },
+    }).unref();
+  } else {
+    console.error('openzoo: Grok Bot already hijacked — not spawning another copy');
+  }
 
   console.error('openzoo: leave this running. ctrl-c stops the backend.');
   if (argv.includes('--once')) return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.50.34",
+  "version": "0.50.35",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",