openzoo 0.50.34 → 0.50.36

package/bin/openzoo.js

@@ -93,6 +93,10 @@ usage:
                               :8443, then launches the app with
                               CURSOR_API_BASE_URL=https://127.0.0.1:8443
                               (no sudo, no /etc/hosts). Leave it running.
+                              After a reboot the login item comes back without
+                              that env — bot bounces it so send works. Already-
+                              hijacked sessions are left alone.
+                              --quit force bounce · --no-quit never bounce
   npx openzoo cursor [dir]    start proxy+tunnel, write MCP config + every model
                               into the picker, and LAUNCH Cursor on [dir]
                               (defaults to the current directory; ~ works;

package/lib/cursorbackend.js

@@ -1549,6 +1549,11 @@ async function runLocalTool(name, args, log) {
   }
 }
 
+/** Model parked instead of writing files. Host keeps the tool loop going. */
+export function looksStoppedReply(s) {
+  return /stopped on research|no (?:new )?app files written|nothing (?:extra )?to open yet|say go again|next message i['’]?ll write|stopped — no new/i.test(String(s || ''));
+}
+
 function zooTextFromMessage(msg, data) {
   let c = msg?.content;
   if (Array.isArray(c)) {
@@ -1597,6 +1602,7 @@ async function zooComplete(prompt, log, agentId, parsed = {}) {
         'Pasted images arrive as attachments — you can see them when present. Do not claim you cannot see images if they are in this turn.',
         'Never claim you lack filesystem access or local-exec. If a tool errors, report the error.',
         'After using tools you MUST still write a normal chat reply: what you did, file paths written, and what to open. Empty content is a bug.',
+        'Do not stop mid-task. Do not write "Stopped on research", "nothing to open yet", "no app files written this turn", or "say go again". Keep using tools until the files the user asked for exist on disk THIS turn. Summarize only after those writes succeed.',
         'A spend footer is appended after your reply by the host — ignore it.',
         'Prior turns of THIS Grok Bot chat are in the messages below. Do not claim the thread starts blank or that earlier questions did not arrive.',
       ].join(' '),
@@ -1624,10 +1630,12 @@ async function zooComplete(prompt, log, agentId, parsed = {}) {
       : userContent,
   });
 
-  const maxTok = Number(process.env.OPENZOO_ASK_MAX_TOKENS || 4096);
+  const maxTok = Number(process.env.OPENZOO_ASK_MAX_TOKENS || 8192);
+  const maxSteps = Math.min(64, Math.max(8, Number(process.env.OPENZOO_ASK_TOOL_STEPS || 32)));
   let lastData = {};
   let text = '';
   const usedTools = [];
+  const KEEP_GOING = 'Do not stop. Do not wait for another message. Write the files to disk now with write_file / exec. Keep going until the requested paths exist. A summary is only allowed after the files are written.';
   const zooPost = async (payload) => {
     const ms = Number(process.env.OPENZOO_ASK_TIMEOUT_MS || 10 * 60_000);
     const post = () => fetch('http://127.0.0.1:8402/v1/chat/completions', {
@@ -1638,7 +1646,8 @@ async function zooComplete(prompt, log, agentId, parsed = {}) {
     });
     let r;
     let lastErr;
-    for (let attempt = 1; attempt <= 3; attempt++) {
+    const tries = 5;
+    for (let attempt = 1; attempt <= tries; attempt++) {
       try {
         r = await post();
         lastErr = null;
@@ -1646,8 +1655,9 @@ async function zooComplete(prompt, log, agentId, parsed = {}) {
       } catch (e) {
         lastErr = e;
         log(`cursor-backend:      zoo POST attempt=${attempt} ${e.message}`);
-        if (attempt === 3) throw e;
-        await new Promise((ok) => setTimeout(ok, 800 * attempt));
+        if (attempt === tries) throw e;
+        const abortish = /abort|timeout/i.test(String(e?.name || '') + String(e?.message || ''));
+        await new Promise((ok) => setTimeout(ok, (abortish ? 2000 : 800) * attempt));
       }
     }
     if (!r) throw lastErr || new Error('zoo POST failed');
@@ -1675,7 +1685,8 @@ async function zooComplete(prompt, log, agentId, parsed = {}) {
     }
     return { r, data };
   };
-  for (let step = 0; step < 8; step++) {
+  let keepGoingNudge = 0;
+  for (let step = 0; step < maxSteps; step++) {
     const { r, data } = await zooPost({
       model,
       messages,
@@ -1709,13 +1720,26 @@ async function zooComplete(prompt, log, agentId, parsed = {}) {
       continue;
     }
     text = zooTextFromMessage(msg, data);
-    log(`cursor-backend:      << zoo ${r.status} ${text.length}c model=${data.model || model} finish=${data.choices?.[0]?.finish_reason || '?'}`);
+    const finish = data.choices?.[0]?.finish_reason || '?';
+    log(`cursor-backend:      << zoo ${r.status} ${text.length}c model=${data.model || model} finish=${finish}`);
+    // Model likes to park after research ("Stopped on research", "say go again")
+    // instead of writing files. Measured 2026-08-30 on volume track00r.
+    if ((finish === 'length' || looksStoppedReply(text)) && keepGoingNudge < 6) {
+      keepGoingNudge += 1;
+      log(`cursor-backend:      keep-going nudge=${keepGoingNudge} finish=${finish}`);
+      messages.push(msg);
+      messages.push({ role: 'user', content: KEEP_GOING });
+      continue;
+    }
     break;
   }
   if (usedTools.length && !String(text || '').trim()) {
+    const wrote = usedTools.some((t) => t.name === 'write_file');
     messages.push({
       role: 'user',
-      content: 'Stop calling tools. Write a short chat reply summarizing what you did: files written (full paths), commands that mattered, and what the user should open. No empty message.',
+      content: wrote
+        ? 'Write a short chat reply: files written (full paths), commands that mattered, and what the user should open. No empty message.'
+        : KEEP_GOING,
     });
     const { r, data } = await zooPost({
       model,

package/lib/grokcli.js

@@ -99,6 +99,74 @@ ${body}
 `;
 }
 
+const GROK_BOT_BIN = `${APP}/Contents/MacOS/Grok Bot`;
+
+/** pids whose command is the Grok Bot main binary (not grep itself). */
+export function grokBotPids(run = execSync) {
+  try {
+    return run(`pgrep -f ${JSON.stringify(GROK_BOT_BIN)}`, { encoding: 'utf8' })
+      .trim().split('\n').map((s) => s.trim()).filter(Boolean);
+  } catch {
+    return [];
+  }
+}
+
+function pidHasNeedle(pid, needle, run = execSync) {
+  const n = Number(pid);
+  if (!Number.isInteger(n) || n <= 0) return false;
+  for (const cmd of [`ps -Eww -p ${n} -o command=`, `ps eww -p ${n}`]) {
+    try {
+      if (run(cmd, { encoding: 'utf8', timeout: 2000 }).includes(needle)) return true;
+    } catch { /* SIP / dead pid */ }
+  }
+  return false;
+}
+
+function somethingTalksToPort(port, run = execSync) {
+  try {
+    const out = run(`lsof -nP -iTCP:${Number(port)} -sTCP:ESTABLISHED`, {
+      encoding: 'utf8', timeout: 2000,
+    });
+    return /Grok|Electron|Helper/i.test(out);
+  } catch {
+    return false;
+  }
+}
+
+/** Is the running Grok Bot already pointed at our aiserver? */
+export function inspectGrokBotHijack(url, port = 8443, run = execSync) {
+  const pids = grokBotPids(run);
+  const needle = `CURSOR_API_BASE_URL=${url}`;
+  const envHit = pids.some((pid) => pidHasNeedle(pid, needle, run));
+  const tcpHit = somethingTalksToPort(port, run);
+  return { running: pids.length > 0, pids, hijacked: envHit || tcpHit };
+}
+
+/**
+ * Decide whether to osascript-quit / spawn Grok Bot.
+ * forceQuit = --quit / OZ_NO_QUIT=0
+ * neverQuit = --no-quit / OZ_NO_QUIT=1
+ */
+export function grokBotQuitPlan({ forceQuit = false, neverQuit = false, running = false, hijacked = false } = {}) {
+  if (forceQuit) return { quit: true, spawn: true, reason: 'forced --quit' };
+  if (neverQuit) {
+    return {
+      quit: false,
+      spawn: !hijacked,
+      reason: hijacked
+        ? 'explicit --no-quit (already hijacked)'
+        : 'explicit --no-quit (Grok Bot may be a login-item without hijack env)',
+    };
+  }
+  if (!running) return { quit: false, spawn: true, reason: 'Grok Bot not running' };
+  if (hijacked) return { quit: false, spawn: false, reason: 'already hijacked — leaving the session' };
+  return {
+    quit: true,
+    spawn: true,
+    reason: 'running without hijack env (reboot/login item) — bouncing so CURSOR_API_BASE_URL sticks',
+  };
+}
+
 /**
  * `openzoo bot` — Grok Bot.app on the zoo, no sudo, no /etc/hosts.
  *
@@ -185,31 +253,46 @@ export async function runBot(argv = []) {
     console.error('         EnsureSandBox HIJACKED here; StreamUnifiedChat -> :8402 (x402)');
   }
 
-  // Default: do not quit Grok Bot. Restarting the hijack used to osascript-quit
-  // the app and drop the session; pass --quit to get the old bounce.
-  if (argv.includes('--quit') || process.env.OZ_NO_QUIT === '0') {
+  // Default: leave a Grok Bot that is ALREADY hijacked. After a reboot the
+  // login item comes back WITHOUT CURSOR_API_BASE_URL; Electron's single-
+  // instance lock then swallows our env'd spawn and the overlay stays
+  // "Couldn't send your message". Bounce only that unhijacked case.
+  // --quit / OZ_NO_QUIT=0 force a bounce. --no-quit / OZ_NO_QUIT=1 never.
+  const state = inspectGrokBotHijack(url, port);
+  const plan = grokBotQuitPlan({
+    forceQuit: argv.includes('--quit') || process.env.OZ_NO_QUIT === '0',
+    neverQuit: argv.includes('--no-quit') || process.env.OZ_NO_QUIT === '1',
+    running: state.running,
+    hijacked: state.hijacked,
+  });
+  console.error(`openzoo: grokbot ${plan.reason}`);
+  if (plan.quit) {
     try { execSync('osascript -e \'tell application "Grok Bot" to quit\'', { stdio: 'ignore' }); } catch { /* ok */ }
     await new Promise((r) => setTimeout(r, 1500));
   }
 
-  console.error('openzoo: launching Grok Bot');
-  console.error(`         CURSOR_API_BASE_URL=${url}`);
-  spawn(bin, ['--ignore-certificate-errors'], {
-    stdio: 'ignore',
-    detached: true,
-    env: {
-      ...process.env,
-      NODE_TLS_REJECT_UNAUTHORIZED: '0',
-      CURSOR_API_BASE_URL: url,
-      SAND_BACKEND_URL: url,
-      // Helper daemon (local-exec-daemon/main.cjs) uses Node fetch, not Chromium.
-      // Without these it dials the cached cursorvm 1337 URL / dies on our
-      // self-signed cert and GET /local-exec/requests never arrives.
-      SAND_HOST_GATEWAY_URL: url,
-      SAND_HOST_GATEWAY_TOKEN: 'openzoo',
-      SAND_HOST_GATEWAY_NETWORK_TOKEN: 'openzoo',
-    },
-  }).unref();
+  if (plan.spawn) {
+    console.error('openzoo: launching Grok Bot');
+    console.error(`         CURSOR_API_BASE_URL=${url}`);
+    spawn(bin, ['--ignore-certificate-errors'], {
+      stdio: 'ignore',
+      detached: true,
+      env: {
+        ...process.env,
+        NODE_TLS_REJECT_UNAUTHORIZED: '0',
+        CURSOR_API_BASE_URL: url,
+        SAND_BACKEND_URL: url,
+        // Helper daemon (local-exec-daemon/main.cjs) uses Node fetch, not Chromium.
+        // Without these it dials the cached cursorvm 1337 URL / dies on our
+        // self-signed cert and GET /local-exec/requests never arrives.
+        SAND_HOST_GATEWAY_URL: url,
+        SAND_HOST_GATEWAY_TOKEN: 'openzoo',
+        SAND_HOST_GATEWAY_NETWORK_TOKEN: 'openzoo',
+      },
+    }).unref();
+  } else {
+    console.error('openzoo: Grok Bot already hijacked — not spawning another copy');
+  }
 
   console.error('openzoo: leave this running. ctrl-c stops the backend.');
   if (argv.includes('--once')) return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.50.34",
+  "version": "0.50.36",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",