openzoo 0.50.70 → 0.50.72

package/bin/openzoo.js

@@ -97,6 +97,8 @@ usage:
                               that env — bot bounces it so send works. Already-
                               hijacked sessions are left alone.
                               --quit force bounce · --no-quit never bounce
+                              --verbose  print every request the app makes
+                                         (default is quiet: milestones + problems)
                               --web serve the renderer in a browser instead of
                               launching the .app (http://127.0.0.1:4174)
   npx openzoo web             Grok Bot renderer in the browser. Same hijack as

package/lib/botlog.js

@@ -0,0 +1,88 @@
+/**
+ * What `openzoo bot` prints to a first-time user's terminal.
+ *
+ * MEASURED 2026-09-01 on a fresh macOS account: the console was ~60 lines of
+ * `#N POST /aiserver.v1.…`, `cursor-tls: connected`, `-> empty-ok`, `/health`
+ * before the app even painted, and nothing said how to pay. The human's words:
+ * "onboarding is not great mate" / "it's not telling me straight up how to pay".
+ *
+ * Default is QUIET: only milestones and problems. `--verbose` / OPENZOO_DEBUG=1
+ * restores the firehose (it is still the right thing for debugging the wire).
+ */
+import { privateKeyToAccount } from 'viem/accounts';
+
+const NOISE = [
+  /^cursor-backend: #\d+ (GET|POST|PUT|DELETE) /,
+  /^cursor-tls:/,
+  /-> empty-ok/,
+  /-> pod /,
+  /-> transcript /,
+  /-> getHostStatus/,
+  /-> GetMe/,
+  /-> WatchSandBoxMigration/,
+  /GetGrokBotSendStatus/,
+  /listAgents local n=/,
+  /discovered roster/,
+  /SNIFF real pod/,
+  /POST \/oauth\/token/,
+  /mcp \S+ (chrome-devtools-mcp exposes|Performance tools|\[chrome-devtools-mcp\] The connecting client)/,
+  /ProofNetwork MCP server running/,
+];
+
+const MILESTONE = [
+  /mcp ready/,
+  /mcp \S+ (mode=|FAIL|tools=\d+|re-attach|attached|appeared)/,
+  /mcp \S+ To let bots drive your real Chrome/,
+  /x402 402|upstream outage|underfunded|wallet/i,
+  /ERROR|FAIL|uncaught|rejection|timed out/,
+  /wakeups restored|wakeup fire/,
+  /ozRevive|ship_|ship:/,
+  /sendPrompt done/,
+  /create_agent tool|deleteAgents n=/,
+  /x_compose|chrome reattach/,
+];
+
+/** Pure: should this backend line reach a quiet terminal? */
+export function isBotMilestone(line) {
+  const s = String(line || '');
+  if (NOISE.some((re) => re.test(s))) return false;
+  return MILESTONE.some((re) => re.test(s));
+}
+
+export function makeBotLogger({ verbose = false, write = (m) => console.error(m) } = {}) {
+  return (m) => {
+    if (verbose || isBotMilestone(m)) write(`  backend: ${m}`);
+  };
+}
+
+/**
+ * The block a new user needs before anything else. `balances` is optional
+ * ({ USDC, TOKEN } in USD) — printed as `?` when unknown so nothing is invented.
+ */
+export function payBannerLines({ solana, evm, balances = null, whop = 'https://whop.com/staccoverflow/openzoo', chromeMode = 'own-profile' } = {}) {
+  const usd = (v) => (typeof v === 'number' && Number.isFinite(v) ? `$${v >= 0.01 || v === 0 ? v.toFixed(2) : v.toFixed(4)}` : '?');
+  const lines = [
+    'openzoo: HOW TO PAY — no account, no API key, every call is paid from this wallet:',
+    `         Solana  ${solana}`,
+    '                 send USDC or TOKEN here (TOKEN is half price)',
+    `         Base    ${evm}`,
+    '                 send USDC here',
+    balances ? `         balance Solana USDC ${usd(balances.USDC)} · TOKEN ${balances.TOKEN_UNITS != null ? `${balances.TOKEN_UNITS} units` : '?'} · Base USDC ${usd(balances.BASE_USDC)}   (recheck: openzoo balance)` : '         balance unknown right now — run: openzoo balance',
+    `         card    ${whop}  — paste the Solana address above when it asks`,
+  ];
+  if (chromeMode === 'own-profile') {
+    lines.push('openzoo: CHROME  bots open a blank Chrome until you flip chrome://inspect/#remote-debugging → "Allow remote debugging for this browser", then restart openzoo bot. After that they drive YOUR logged-in Chrome.');
+  } else {
+    lines.push(`openzoo: CHROME  attached to your real browser (${chromeMode}).`);
+  }
+  lines.push('openzoo: FIRST   type in any bot: "set up Grok Ship for ~/path/to/repo"  — or just give it work.');
+  lines.push('openzoo: QUIET   add --verbose to see every request the app makes.');
+  return lines;
+}
+
+export function walletAddresses(wallet) {
+  return {
+    solana: wallet.keypair.publicKey.toBase58(),
+    evm: privateKeyToAccount(wallet.evmPrivateKey).address,
+  };
+}

package/lib/grokcli.js

@@ -251,7 +251,9 @@ export async function runBot(argv = []) {
   const models = [
     'gpt-4o', 'gpt-4o-mini', 'gpt-4-turbo', 'gpt-4.1', 'gpt-4.1-mini', 'gpt-3.5-turbo',
   ].map((n) => ({ name: n, label: n }));
-  const log = (m) => console.error('  backend:', m);
+  const { makeBotLogger, payBannerLines, walletAddresses } = await import('./botlog.js');
+  const verbose = argv.includes('--verbose') || !!process.env.OPENZOO_DEBUG || !!process.env.OPENZOO_VERBOSE;
+  const log = makeBotLogger({ verbose });
   const stale = killListen(port);
   if (stale.length) console.error(`openzoo: killed stale hijack on :${port} pids=${stale.join(',')}`);
   try {
@@ -326,6 +328,49 @@ export async function runBot(argv = []) {
   });
 
   console.error('openzoo: leave this running. ctrl-c stops the backend.');
+  // HOW TO PAY, up front. A first run used to be sixty lines of wire noise and
+  // the first 402 was the only thing that ever mentioned money.
+  const payBanner = async () => {
+    try {
+      const { loadOrCreateWallet } = await import('./wallet.js');
+      const addrs = walletAddresses(loadOrCreateWallet());
+      let balances = null;
+      try {
+        const { Connection } = await import('@solana/web3.js');
+        const { config, FUNDING_ASSETS } = await import('./config.js');
+        const { tokenBalance } = await import('./x402.js');
+        const { evmTokenBalance } = await import('./evm.js');
+        const { loadOrCreateWallet: lw } = await import('./wallet.js');
+        const w = lw();
+        const conn = new Connection(config.rpcUrl, 'confirmed');
+        const within = (p, ms) => Promise.race([p, new Promise((_, rej) => setTimeout(() => rej(new Error('timeout')), ms))]);
+        const usdc = FUNDING_ASSETS.find((a) => a.symbol === 'USDC');
+        const tok = FUNDING_ASSETS.find((a) => a.symbol === 'TOKEN');
+        const [u, t] = await within(Promise.all([
+          usdc ? tokenBalance(conn, w.keypair.publicKey, usdc.mint) : { ui: 0 },
+          tok ? tokenBalance(conn, w.keypair.publicKey, tok.mint) : { ui: 0 },
+        ]), 6000);
+        let baseUsdc = null;
+        try {
+          const { evmRpcFor, EVM_FUNDING_ASSETS } = await import('./config.js');
+          const b = (EVM_FUNDING_ASSETS.base || []).find((a) => a.symbol === 'USDC');
+          if (b) {
+            const r = await within(evmTokenBalance({ rpcUrl: evmRpcFor('base'), owner: addrs.evm, token: b.address }), 6000);
+            const raw = typeof r === 'object' && r !== null ? (r.raw ?? r.ui ?? 0) : r;
+            baseUsdc = Number(raw) / 10 ** (b.decimals ?? 6); // raw units → dollars
+          }
+        } catch { /* base unreachable: print ? */ }
+        // TOKEN is priced at the 402, not here: show units, never an invented $.
+        balances = { USDC: Number(u?.ui ?? 0), TOKEN_UNITS: t?.ui != null ? Number(t.ui) : null, BASE_USDC: baseUsdc };
+      } catch { balances = null; }
+      let chromeMode = 'own-profile';
+      try { const { chromeStatus } = await import('./mcpbridge.js'); chromeMode = chromeStatus().mode; } catch { /* */ }
+      for (const l of payBannerLines({ ...addrs, balances, chromeMode })) console.error(l);
+    } catch (e) {
+      console.error(`openzoo: (pay banner unavailable: ${e.message}) — run: openzoo balance`);
+    }
+  };
+  setTimeout(() => { payBanner().catch(() => {}); }, plan.spawn ? 7000 : 2500);
   if (argv.includes('--once')) return;
   await new Promise(() => {});
 }

package/lib/mcpbridge.js

@@ -349,7 +349,7 @@ async function connectOne(cfg, log) {
     try {
       transport.stderr?.on?.('data', (buf) => {
         const line = String(buf).trim().split('\n')[0];
-        if (line && !/No handler registered for issue code/.test(line)) log?.(`cursor-backend:      mcp ${cfg.name} ${line.slice(0, 160)}`);
+        if (line && !/No handler registered for issue code|exposes content of the browser|Performance tools may send|did not negotiate the MCP roots/.test(line)) log?.(`cursor-backend:      mcp ${cfg.name} ${line.slice(0, 160)}`);
       });
     } catch { /* */ }
   }

package/lib/proxy.js

@@ -309,8 +309,10 @@ export async function startProxy({ silent = false, requireToken = null, sessionM
   // (OpenRouter) was out of credits. Paying again buys nothing, and the
   // "wallet underfunded" copy blamed the user's burner. When the paid 402 says
   // upstream credits, stop paying for a minute and say what is actually wrong.
-  let upstreamOutageUntil = 0;
-  let upstreamOutageMsg = '';
+  // Keyed by model: an OpenRouter outage must not gate a door-only id like
+  // bare grok-4.6 that never touches OpenRouter.
+  const upstreamOutage_ = new Map(); // model -> { until, msg }
+  const outageKey = (init) => { try { return String(JSON.parse(String(init?.body || '{}')).model || ''); } catch { return ''; } };
   const upstreamOutage = (body) => {
     const m = String(body?.error?.message || body?.message || '');
     const src = String(body?.error?.metadata?.limit_source || '');
@@ -696,10 +698,13 @@ export async function startProxy({ silent = false, requireToken = null, sessionM
     }
 
     try {
-      if (Date.now() < upstreamOutageUntil) {
-        log('upstream outage: not paying (gate)');
-        jsonErr(res, 503, upstreamOutageMsg);
-        return;
+      {
+        const gate = upstreamOutage_.get(outageKey(init));
+        if (gate && Date.now() < gate.until) {
+          log(`upstream outage: not paying (gate) model=${outageKey(init)}`);
+          jsonErr(res, 503, gate.msg);
+          return;
+        }
       }
       const result = await client.fetch(url, init);
       const { response, paid, receipt, accept } = result;
@@ -808,13 +813,13 @@ export async function startProxy({ silent = false, requireToken = null, sessionM
         if (paid && upstreamOutage(q402)) {
           const settle = q402?.x402?.settle;
           const tx = settle?.transaction || result.receipt?.tx || '';
-          upstreamOutageMsg = 'openzoo gateway upstream is out of credits (OpenRouter: "Insufficient credits"). '
+          const msg = 'openzoo gateway upstream is out of credits (OpenRouter: "Insufficient credits"). '
             + `Your payment settled${tx ? ` (tx ${tx})` : ''} — this is NOT your wallet. `
             + 'The gateway operator must top up OpenRouter or route this model to another upstream. '
-            + 'Pausing paid retries for 60s.';
-          upstreamOutageUntil = Date.now() + 60_000;
-          log(`upstream outage: ${upstreamOutageMsg.slice(0, 120)}`);
-          jsonErr(res, 503, upstreamOutageMsg);
+            + `Pausing paid retries for ${outageKey(init) || 'this model'} for 60s.`;
+          upstreamOutage_.set(outageKey(init), { until: Date.now() + 60_000, msg });
+          log(`upstream outage: model=${outageKey(init)} ${msg.slice(0, 100)}`);
+          jsonErr(res, 503, msg);
           return;
         }
         try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.50.70",
+  "version": "0.50.72",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",