openzoo 0.50.96 → 0.50.97

package/lib/grokbotAccount.js

@@ -250,6 +250,7 @@ export function shapeAgent(raw = {}) {
     updatedAt: Number(a.updatedAt) || Date.now(),
     hasUnread: !!a.hasUnread,
     unreadCount: Number(a.unreadCount) || 0,
+    hidden: a.hidden === true || a.hiddenFromSidebar === true, // GROKROOM-HIDDEN-BOTS
     notificationsEnabled: a.notificationsEnabled !== false,
     notifyOnUpdatesEnabled: a.notifyOnUpdatesEnabled !== false,
     isGroup,
@@ -267,8 +268,9 @@ export function shapeAgent(raw = {}) {
  * Full sidebar roster for SSE `agents` / listAgents. Sorts by activity and
  * stamps unread -- does not slice. The old 80-cap hid agents past the tray.
  */
-export function rosterForEvent(list, activity) {
-  const arr = Array.isArray(list) ? [...list] : [];
+export function rosterForEvent(list, activity, opts) {
+  // GROKROOM-HIDDEN-BOTS: client-facing rosters never include hidden bots; persistence passes { includeHidden: true }
+  const arr = (Array.isArray(list) ? [...list] : []).filter((a) => (opts && opts.includeHidden) || !a?.hidden);
   arr.sort((x, y) => activityTs(y, activity) - activityTs(x, activity));
   return arr.map((agent) => {
     const rec = activityRec(agent, activity) || {};

package/lib/grokbotAccount.js.bak-hiddenbots

@@ -0,0 +1,386 @@
+/**
+ * Grok Bot tray/roster.
+ *
+ * Electron hijack: a second Cursor login on the same Mac must not inherit the
+ * previous account's 1340 / tray (rosterForAccount still isolates that).
+ *
+ * Cafe/web: every visitor is a cookie identity on ONE house. They share the
+ * operator tray at ~/.openzoo/grokbot-agents.json plus any account agents.json
+ * under ~/.openzoo/grokbot/<id>/ -- not per-browser localStorage, not empty
+ * just because no Cursor account has logged in.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+
+export function accountSlug(accountId) {
+  const s = String(accountId || '').replace(/[^a-zA-Z0-9_-]/g, '').slice(0, 64);
+  return s || null;
+}
+
+export function accountDir(home, accountId) {
+  const slug = accountSlug(accountId);
+  if (!slug) return null;
+  return path.join(home, '.openzoo', 'grokbot', slug);
+}
+
+export function accountPodPath(home, accountId) {
+  const dir = accountDir(home, accountId);
+  return dir ? path.join(dir, 'pod.json') : null;
+}
+
+export function accountAgentsPath(home, accountId) {
+  const dir = accountDir(home, accountId);
+  return dir ? path.join(dir, 'agents.json') : null;
+}
+
+export function houseAgentsPath(home) {
+  return path.join(home, '.openzoo', 'grokbot-agents.json');
+}
+
+function readJsonFile(p) {
+  try { return JSON.parse(fs.readFileSync(p, 'utf8')); } catch { return null; }
+}
+
+/** First-seen id wins. A later pile can only *upgrade* a UUID name/stub brief. */
+export function mergeAgentRecords(piles) {
+  const seen = new Map();
+  const out = [];
+  for (const pile of piles) {
+    if (!Array.isArray(pile)) continue;
+    for (const a of pile) {
+      if (!a?.id) continue;
+      const idx = seen.get(a.id);
+      if (idx == null) {
+        seen.set(a.id, out.length);
+        out.push(a);
+        continue;
+      }
+      out[idx] = preferNamedAgent(out[idx], a);
+    }
+  }
+  return out;
+}
+
+/**
+ * Shared house tray from disk. Cafe visitors have no Cursor account — they
+ * still get this list. A live account's file is preferred, never required.
+ */
+export function readHouseRoster(home, liveAccountId) {
+  const piles = [];
+  const livePath = liveAccountId ? accountAgentsPath(home, liveAccountId) : null;
+  if (livePath) {
+    const scoped = readJsonFile(livePath);
+    if (Array.isArray(scoped)) piles.push(scoped);
+  }
+  const global = readJsonFile(houseAgentsPath(home));
+  if (Array.isArray(global)) piles.push(global);
+  try {
+    const dir = path.join(home, '.openzoo', 'grokbot');
+    for (const name of fs.readdirSync(dir)) {
+      const p = path.join(dir, name, 'agents.json');
+      if (livePath && p === livePath) continue;
+      const a = readJsonFile(p);
+      if (Array.isArray(a) && a.length) piles.push(a);
+    }
+  } catch { /* no grokbot dir yet */ }
+  return mergeAgentRecords(piles);
+}
+
+/**
+ * Isolate two Cursor logins. Cafe (no live account) gets the house fallback.
+ * `fallback` is the merged disk roster; never return [] just because oauth
+ * hasn't run — that emptied the public site's sidebar.
+ */
+export function rosterForAccount({ liveAccountId, cachedAccountId, cached, fallback }) {
+  if (liveAccountId && cachedAccountId && liveAccountId !== cachedAccountId) return [];
+  if (liveAccountId && cachedAccountId && liveAccountId === cachedAccountId) {
+    return Array.isArray(cached) ? cached : [];
+  }
+  if (Array.isArray(fallback) && fallback.length) return fallback;
+  return Array.isArray(cached) ? cached : [];
+}
+
+function activityRec(agent, activity) {
+  if (!activity || !agent?.id) return null;
+  if (typeof activity.get === 'function') return activity.get(agent.id) || null;
+  return activity[agent.id] || null;
+}
+
+function activityTs(agent, activity) {
+  const rec = activityRec(agent, activity);
+  return (rec && rec.updatedAt) || agent.updatedAt || agent.createdAt || 0;
+}
+
+/**
+ * Grok Bot client persistence (Xkn) DROPS any row missing these booleans /
+ * nulls, then clears the whole persisted tray. That is how a group vanished
+ * after the first send: bumpAgent wrote a partial row, restore returned null.
+ */
+const AGENT_UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+
+/** bumpAgent used `{id, name:id}` and 1340 listAgents often echoes that — sidebar then paints UUIDs. */
+export function looksLikeAgentId(s, id) {
+  const n = String(s || '').trim();
+  if (!n) return true;
+  if (id && n === String(id)) return true;
+  return AGENT_UUID_RE.test(n);
+}
+
+export function isStubBrief(brief, id) {
+  const b = String(brief || '').trim();
+  if (!b) return true;
+  if (id && b.startsWith(`You are ${id}. Your job is ${id}`)) return true;
+  return /^You are [0-9a-f-]{36}\. Your job is [0-9a-f-]{36}/i.test(b);
+}
+
+/** Pull a human name out of a standing brief: "You are 6 · Content Studio…" / "Job: Product Simplification". */
+export function nameFromBrief(brief, id) {
+  const b = String(brief || '').replace(/^\[brief\]\s*/i, '').trim();
+  if (!b) return '';
+  const job = b.match(/\bJob:\s*([^\n.]+)/i);
+  if (job) {
+    const n = job[1].trim();
+    if (n && !looksLikeAgentId(n, id)) return n.slice(0, 80);
+  }
+  const numbered = b.match(/^You are\s+(\d+\s*[·.•.\-—–]+\s*[^\n.]+)/i);
+  if (numbered) {
+    const n = numbered[1].replace(/\s+for\s+.*$/i, '').trim();
+    if (n && !looksLikeAgentId(n, id)) return n.slice(0, 80);
+  }
+  const you = b.match(/^You are\s+(.+?)(?:\.\s|$)/i);
+  if (you) {
+    const n = you[1].replace(/\s+for\s+Stacc(?:'s)?(?:\s+LLC)?$/i, '').trim();
+    if (n && !looksLikeAgentId(n, id)) return n.slice(0, 80);
+  }
+  return '';
+}
+
+export function nameQuality(a) {
+  const n = String(a?.name || a?.title || '').trim();
+  if (!n || looksLikeAgentId(n, a?.id)) return 0;
+  if (/^(chat|group)$/i.test(n)) return 1;
+  if (/^new bot$/i.test(n)) return 2;
+  return 3;
+}
+
+/** Keep the record that still has a human name / real brief. */
+export function preferNamedAgent(keep, incoming) {
+  if (!keep) return incoming;
+  if (!incoming) return keep;
+  const kq = nameQuality(keep);
+  const iq = nameQuality(incoming);
+  const keepBrief = String(keep.brief || keep.instructions || '').trim();
+  const inBrief = String(incoming.brief || incoming.instructions || '').trim();
+  const keepStub = isStubBrief(keepBrief, keep.id);
+  const inStub = isStubBrief(inBrief, incoming.id);
+  if (iq <= kq && !(keepStub && !inStub)) return keep;
+  const nameSrc = iq > kq ? incoming : keep;
+  const briefSrc = (!inStub && keepStub) ? incoming : keep;
+  return {
+    ...keep,
+    ...incoming,
+    name: nameSrc.name || nameSrc.title,
+    title: nameSrc.title || nameSrc.name,
+    brief: briefSrc.brief || briefSrc.instructions || keepBrief || inBrief,
+  };
+}
+
+export function displayName(raw = {}) {
+  const a = raw && typeof raw === 'object' ? raw : {};
+  const id = String(a.id || '');
+  const isGroup = a.isGroup === true
+    || (Array.isArray(a.memberIds) && a.memberIds.length > 0)
+    || (Array.isArray(a.memberAgentIds) && a.memberAgentIds.length > 0);
+  for (const cand of [a.name, a.title]) {
+    const n = String(cand || '').trim();
+    if (n && !looksLikeAgentId(n, id)) return n.slice(0, 80);
+  }
+  const fromBrief = nameFromBrief(a.brief || a.instructions || a.description, id);
+  if (fromBrief) return fromBrief;
+  return isGroup ? 'group' : 'chat';
+}
+
+/** Standing job from a sidebar name like "6 · Content Studio" or "Bot 1 — Marketing (X)". */
+export function briefFromName(name) {
+  const n = String(name || '').trim();
+  if (!n || /^(new bot|chat|group)$/i.test(n) || looksLikeAgentId(n)) return '';
+  const role = n.replace(/^\d+\s*[·.•.\-—–]+\s*/, '').trim() || n;
+  if (role.length < 2) return '';
+  return `You are ${n}. Your job is ${role}. Do that job. Do not ask the human to re-brief you. Coordinate with list_agents and message_agent.`;
+}
+
+/** Standing job text. shapeAgent used to drop this, so every restart was amnesia. */
+export function agentBrief(raw = {}) {
+  const a = raw && typeof raw === 'object' ? raw : {};
+  const id = String(a.id || '');
+  for (const k of ['brief', 'instructions', 'customInstructions', 'systemPrompt']) {
+    const v = a[k];
+    if (typeof v === 'string' && v.trim() && !isStubBrief(v, id)) {
+      const name = displayName(a);
+      const text = v.trim();
+      if (id && name && !looksLikeAgentId(name, id) && text.startsWith(`You are ${id}`)) {
+        return (`You are ${name}` + text.slice(`You are ${id}`.length)).slice(0, 8000);
+      }
+      return text.slice(0, 8000);
+    }
+  }
+  const d = String(a.description || '').trim();
+  if (d && !isStubBrief(d, id)) return d.slice(0, 8000);
+  return briefFromName(displayName(a)).slice(0, 8000);
+}
+
+export function shapeAgent(raw = {}) {
+  const a = raw && typeof raw === 'object' ? raw : {};
+  const id = String(a.id || '');
+  const memberIds = Array.isArray(a.memberIds)
+    ? a.memberIds.map((x) => String(x)).filter(Boolean)
+    : (Array.isArray(a.memberAgentIds) ? a.memberAgentIds.map((x) => String(x)).filter(Boolean) : []);
+  const isGroup = a.isGroup === true || memberIds.length > 0;
+  const name = displayName({ ...a, isGroup, memberIds });
+  const brief = agentBrief({ ...a, name, title: a.title || name });
+  return {
+    id,
+    name,
+    brief,
+    description: String((a.description && !looksLikeAgentId(a.description, id) && a.description) || brief || ''),
+    title: String((!looksLikeAgentId(a.title, id) && a.title) || name),
+    origin: String(a.origin || 'user'),
+    path: String(a.path || (id ? `/local/${id}` : '/local')),
+    createdAt: Number(a.createdAt) || Date.now(),
+    updatedAt: Number(a.updatedAt) || Date.now(),
+    hasUnread: !!a.hasUnread,
+    unreadCount: Number(a.unreadCount) || 0,
+    notificationsEnabled: a.notificationsEnabled !== false,
+    notifyOnUpdatesEnabled: a.notifyOnUpdatesEnabled !== false,
+    isGroup,
+    memberIds: isGroup ? memberIds : [],
+    lastMessageId: a.lastMessageId == null ? null : String(a.lastMessageId),
+    lastEntry: a.lastEntry && typeof a.lastEntry === 'object' ? a.lastEntry : null,
+    awaitingUserResponse: a.awaitingUserResponse && typeof a.awaitingUserResponse === 'object'
+      ? a.awaitingUserResponse : null,
+    avatarShape: a.avatarShape ?? null,
+    avatarColor: a.avatarColor ?? null,
+  };
+}
+
+/**
+ * Full sidebar roster for SSE `agents` / listAgents. Sorts by activity and
+ * stamps unread -- does not slice. The old 80-cap hid agents past the tray.
+ */
+export function rosterForEvent(list, activity) {
+  const arr = Array.isArray(list) ? [...list] : [];
+  arr.sort((x, y) => activityTs(y, activity) - activityTs(x, activity));
+  return arr.map((agent) => {
+    const rec = activityRec(agent, activity) || {};
+    return shapeAgent({
+      ...agent,
+      updatedAt: rec.updatedAt || agent.updatedAt || agent.createdAt || 0,
+      hasUnread: !!rec.hasUnread,
+      unreadCount: rec.unreadCount || 0,
+    });
+  });
+}
+
+export const WAKEUP_MIN_SEC = 60;
+export const WAKEUP_MAX_SEC = 6 * 3600;
+export const WAKEUP_DEFAULT_SEC = 5 * 60;
+export const DEFAULT_WAKEUP_PROMPT = 'Wakeup. Continue your brief. Do the next real action (write a file, click, or message a worker). Do not only re-read sitrep. Do not spawn more bots. Do not exec sysctl/uptime.';
+
+export function wakeupsPath(home) {
+  return path.join(home, '.openzoo', 'grokbot-wakeups.json');
+}
+
+/** "5m" / "1h" / "90" / "30s". Floor 60s so a never-stop cron cannot storm. */
+export function parseWakeupEvery(raw) {
+  const s = String(raw ?? '').trim().toLowerCase();
+  if (!s) return WAKEUP_DEFAULT_SEC;
+  const m = s.match(/^(\d+(?:\.\d+)?)\s*(s|sec|secs|seconds?|m|min|mins|minutes?|h|hr|hrs|hours?)?$/);
+  if (!m) return WAKEUP_DEFAULT_SEC;
+  const n = Number(m[1]);
+  if (!Number.isFinite(n) || n <= 0) return WAKEUP_DEFAULT_SEC;
+  const u = m[2] || 's';
+  let sec = n;
+  if (/^m/.test(u)) sec = n * 60;
+  else if (/^h/.test(u)) sec = n * 3600;
+  return Math.min(WAKEUP_MAX_SEC, Math.max(WAKEUP_MIN_SEC, Math.round(sec)));
+}
+
+export function wantsWakeupCron(prompt) {
+  const s = String(prompt || '');
+  if (/\bcron\b.{0,48}\bwakeups?\b/i.test(s)) return true;
+  if (/\bwakeups?\b.{0,48}\bcron\b/i.test(s)) return true;
+  if (/\bnever stop\b/i.test(s)) return true;
+  if (/\bschedule\b.{0,24}\bwakeups?\b/i.test(s)) return true;
+  return false;
+}
+
+export function shapeWakeup(agentId, rec = {}, now = Date.now()) {
+  const everySec = parseWakeupEvery(rec.everySec ?? rec.every ?? rec.interval);
+  const prompt = String(rec.prompt || DEFAULT_WAKEUP_PROMPT).trim().slice(0, 2000)
+    || DEFAULT_WAKEUP_PROMPT;
+  const lastAt = Number(rec.lastAt) || 0;
+  let nextAt = Number(rec.nextAt) || 0;
+  if (!Number.isFinite(nextAt) || nextAt <= 0) nextAt = now + everySec * 1000;
+  return {
+    agentId: String(agentId || rec.agentId || ''),
+    everySec,
+    prompt,
+    lastAt,
+    nextAt,
+  };
+}
+
+export function readWakeups(home) {
+  const raw = readJsonFile(wakeupsPath(home));
+  const src = raw && typeof raw === 'object' && !Array.isArray(raw) ? raw : {};
+  const out = {};
+  for (const [id, rec] of Object.entries(src)) {
+    const w = shapeWakeup(id, rec);
+    if (w.agentId) out[w.agentId] = w;
+  }
+  return out;
+}
+
+export function deletedAgentsPath(home) {
+  return path.join(home, '.openzoo', 'grokbot-deleted.json');
+}
+
+export function readDeletedIds(home) {
+  const raw = readJsonFile(deletedAgentsPath(home));
+  const ids = Array.isArray(raw) ? raw : (raw && Array.isArray(raw.ids) ? raw.ids : []);
+  return new Set(ids.map(String).filter(Boolean));
+}
+
+export function addDeletedIds(home, ids) {
+  const s = readDeletedIds(home);
+  for (const id of ids) if (id) s.add(String(id));
+  const dir = path.dirname(deletedAgentsPath(home));
+  fs.mkdirSync(dir, { recursive: true });
+  fs.writeFileSync(deletedAgentsPath(home), JSON.stringify([...s], null, 2));
+  return s;
+}
+
+export function filterDeleted(agents, home) {
+  const del = readDeletedIds(home);
+  if (!del.size || !Array.isArray(agents)) return agents || [];
+  return agents.filter((a) => a && !del.has(String(a.id)));
+}
+
+export function writeWakeups(home, map) {
+  const dir = path.dirname(wakeupsPath(home));
+  fs.mkdirSync(dir, { recursive: true });
+  fs.writeFileSync(wakeupsPath(home), JSON.stringify(map || {}, null, 2));
+}
+
+export function callerKeyFromAuth(authorization) {
+  const a = String(authorization || '').trim();
+  if (!a) return '';
+  // Not a secret store — a session-scoped equality key so a second oauth
+  // does not inherit the previous account's 1340 / tray cache.
+  let h = 2166136261;
+  for (let i = 0; i < a.length; i++) {
+    h ^= a.charCodeAt(i);
+    h = Math.imul(h, 16777619);
+  }
+  return (h >>> 0).toString(16);
+}

package/lib/grokcli.js

@@ -16,7 +16,7 @@
 // "payment required".
 
 import { spawn, execSync } from 'node:child_process';
-import { existsSync, readFileSync, writeFileSync, copyFileSync, mkdirSync } from 'node:fs';
+import { existsSync, readFileSync, writeFileSync, copyFileSync, mkdirSync, readdirSync, chmodSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
@@ -31,7 +31,68 @@ import {
 
 const GROK_HOME = process.env.GROK_HOME || join(homedir(), '.grok');
 const CONFIG_PATH = join(GROK_HOME, 'config.toml');
-const APP = '/Applications/Grok Bot.app';
+const APP = process.env.GROK_APP || '/Applications/Grok Bot.app';
+
+/* LINUX/WIN DISCOVERY — the multiarch release ships Grok_Bot_<v>_<plat>-<arch>.AppImage
+ * / .exe. GROKBOT_BIN env always wins. */
+function linuxAppImage() {
+  const home = homedir();
+  const roots = [
+    join(home, 'Applications'),
+    join(home, '.local', 'bin'),
+    join(home, 'Downloads'),
+    '/opt',
+    '/usr/local/bin',
+    '/usr/bin',
+  ];
+  for (const dir of roots) {
+    try {
+      const hit = readdirSync(dir)
+        .filter((f) => /^grok[ _-]?bot.*\.appimage$/i.test(f))
+        .sort();
+      if (hit.length) return join(dir, hit[hit.length - 1]);
+    } catch { /* unreadable dir */ }
+  }
+  return join(home, '.local', 'bin', 'Grok_Bot.AppImage');
+}
+
+function windowsExe() {
+  const home = homedir();
+  const dirs = [
+    join(home, 'AppData', 'Local', 'Programs', 'Grok Bot'),
+    join(home, 'AppData', 'Local', 'Programs', 'grok-bot'),
+    'C:\\Program Files\\Grok Bot',
+  ];
+  for (const dir of dirs) {
+    for (const name of ['Grok Bot.exe', 'Grok_Bot.exe', 'grokbot.exe']) {
+      const p = join(dir, name);
+      if (existsSync(p)) return p;
+    }
+  }
+  return join(home, 'AppData', 'Local', 'Programs', 'Grok Bot', 'Grok Bot.exe');
+}
+
+/** Cross-platform Grok Bot binary. GROKBOT_BIN env always wins. */
+export function grokBotBinary() {
+  if (process.env.GROKBOT_BIN) return process.env.GROKBOT_BIN;
+  if (process.platform === 'darwin') return `${APP}/Contents/MacOS/Grok Bot`;
+  if (process.platform === 'linux') return linuxAppImage();
+  if (process.platform === 'win32') return windowsExe();
+  return `${APP}/Contents/MacOS/Grok Bot`;
+}
+
+/** Cross-platform quit: osascript on mac, SIGTERM pids elsewhere. */
+function quitGrokBot() {
+  try {
+    if (process.platform === 'darwin') {
+      quitGrokBot();
+    } else {
+      for (const pid of grokBotPids()) {
+        try { process.kill(Number(pid), 'SIGTERM'); } catch { /* gone */ }
+      }
+    }
+  } catch { /* ok */ }
+}
 
 /** Grok ids as the zoo serves them. Verified against GET /v1/models at write
  *  time so a renamed/retired model never lands in the picker as a dead row. */
@@ -105,7 +166,7 @@ ${body}
 `;
 }
 
-const GROK_BOT_BIN = `${APP}/Contents/MacOS/Grok Bot`;
+const GROK_BOT_BIN = grokBotBinary();
 
 /** pids whose command is the Grok Bot main binary (not grep itself). */
 export function grokBotPids(run = execSync) {
@@ -120,6 +181,14 @@ export function grokBotPids(run = execSync) {
 function pidHasNeedle(pid, needle, run = execSync) {
   const n = Number(pid);
   if (!Number.isInteger(n) || n <= 0) return false;
+  if (process.platform === 'linux') {
+    try {
+      // /proc/<pid>/environ is NUL-separated; flatten and test.
+      const env = readFileSync(`/proc/${n}/environ`, 'utf8');
+      if (env.replace(/\0/g, '\n').includes(needle)) return true;
+    } catch { /* gone */ }
+  }
+  if (process.platform === 'win32') return false;
   for (const cmd of [`ps -Eww -p ${n} -o command=`, `ps eww -p ${n}`]) {
     try {
       if (run(cmd, { encoding: 'utf8', timeout: 2000 }).includes(needle)) return true;
@@ -130,6 +199,14 @@ function pidHasNeedle(pid, needle, run = execSync) {
 
 function somethingTalksToPort(port, run = execSync) {
   try {
+    if (process.platform === 'linux') {
+      const out = run('ss -tnp', { encoding: 'utf8', timeout: 2000 });
+      return out.includes(':' + Number(port)) && /grok|electron|bot/i.test(out);
+    }
+    if (process.platform === 'win32') {
+      const out = run('netstat -ano', { encoding: 'utf8', timeout: 5000 });
+      return new RegExp(':' + Number(port) + '[^0-9].*ESTABLISHED', 'i').test(out);
+    }
     const out = run(`lsof -nP -iTCP:${Number(port)} -sTCP:ESTABLISHED`, {
       encoding: 'utf8', timeout: 2000,
     });
@@ -208,9 +285,11 @@ export async function runBot(argv = []) {
   }
   const port = 8443;
   const url = `https://127.0.0.1:${port}`;
-  const bin = `${APP}/Contents/MacOS/Grok Bot`;
+  const bin = GROK_BOT_BIN;
   if (!existsSync(bin)) {
-    console.error('openzoo: Grok Bot.app not found at', APP);
+    console.error(`openzoo: Grok Bot binary not found — looked for ${bin}`);
+    console.error('  set GROKBOT_BIN=/path/to/Grok_Bot_0.36.0_linux-x64.AppImage');
+    console.error('  or drop the AppImage in ~/Applications, ~/.local/bin, /opt, ~/Downloads');
     process.exit(1);
   }
 
@@ -294,13 +373,16 @@ export async function runBot(argv = []) {
   });
   console.error(`openzoo: grokbot ${plan.reason}`);
   if (plan.quit) {
-    try { execSync('osascript -e \'tell application "Grok Bot" to quit\'', { stdio: 'ignore' }); } catch { /* ok */ }
+    try { quitGrokBot(); } catch { /* ok */ }
     await new Promise((r) => setTimeout(r, 1500));
   }
 
   const launchGrokBot = () => {
     console.error('openzoo: launching Grok Bot');
     console.error(`         CURSOR_API_BASE_URL=${url}`);
+        if (process.platform === 'linux' && /\.appimage$/i.test(bin)) {
+      try { chmodSync(bin, 0o755); } catch { /* read-only */ }
+    }
     spawn(bin, grokBotChromiumArgs(), {
       stdio: 'ignore',
       detached: true,
@@ -481,7 +563,7 @@ export async function setupGrokBot(argv = []) {
       // api2.cursor.sh. MEASURED: the backend logged "listening" and then zero
       // requests, while the app carried on answering normally.
       try {
-        execSync('osascript -e \'tell application "Grok Bot" to quit\'', { stdio: 'ignore' });
+        quitGrokBot();
       } catch { /* not running is fine */ }
       // give it a moment to actually exit before relaunching
       await new Promise((r) => setTimeout(r, 2500));

package/lib/launch.js

@@ -164,7 +164,30 @@ export function claudeZooEnv(baseEnv = process.env, { base, port } = {}) {
   // Correct here for the same reason as everything else in this block: the
   // proxy binds the prefix and forwards a bounded tail, so the request that
   // leaves this machine stays small no matter how long the conversation runs.
-  if (baseEnv.OPENZOO_KEEP_COMPACT !== '1') {
+  //
+  // OPT-IN NOW, BECAUSE THE PRECONDITION IS NOT REAL.
+  //
+  // Everything above is correct ONLY IF something bounds the body that leaves
+  // this machine. Two comments here named that something — `spillTranscript`,
+  // and the knobs `OPENZOO_TAIL_MAX_CHARS` / `OPENZOO_KEEP_TAIL_MSGS`. None of
+  // the three exists: `grep -rn spillTranscript` matches nothing but these
+  // comments, in this package and in the gateway. Checked 2026-09-03.
+  //
+  // So the shipped behaviour was: compaction off, ceiling raised to 1M, and
+  // NOTHING trimming the transcript — Claude Code accumulates without limit and
+  // re-sends the whole thing every turn. The gateway's leCore cannot rescue it
+  // either: an agent body is few-and-huge, so `msgs.length <= KEEP_TAIL` leaves
+  // nothing "older than the live window", and what bulk there is sits in the
+  // system block and first user turn, both deliberately never spilled.
+  //
+  // MEASURED on a user's session: 20 calls, $13.86, `spilled 0/20`, 1.0159x vs
+  // direct — paying almost exactly retail to send an ever-growing transcript.
+  //
+  // Until a real bound ships, default to Claude Code's own behaviour, which is
+  // bounded and known-good. OPENZOO_UNBOUNDED_CONTEXT=1 restores the old
+  // settings for anyone who wants them back.
+  const unboundedContext = baseEnv.OPENZOO_UNBOUNDED_CONTEXT === '1';
+  if (unboundedContext && baseEnv.OPENZOO_KEEP_COMPACT !== '1') {
     env.DISABLE_COMPACT = baseEnv.DISABLE_COMPACT || '1';
     env.DISABLE_AUTO_COMPACT = baseEnv.DISABLE_AUTO_COMPACT || '1';
   }
@@ -177,9 +200,9 @@ export function claudeZooEnv(baseEnv = process.env, { base, port } = {}) {
   // sent. Disabling auto-compact WITHOUT raising this made it worse: it used to
   // compact and carry on, and instead it just stopped.
   //
-  // Safe only because spillTranscript is real: OPENZOO_TAIL_MAX_CHARS bounds what
-  // leaves this machine however long the conversation gets.
-  if (baseEnv.OPENZOO_KEEP_COMPACT !== '1' && !baseEnv.CLAUDE_CODE_MAX_CONTEXT_TOKENS) {
+  // WAS justified by `spillTranscript` / OPENZOO_TAIL_MAX_CHARS — neither of
+  // which exists. Now gated behind OPENZOO_UNBOUNDED_CONTEXT; see below.
+  if (unboundedContext && baseEnv.OPENZOO_KEEP_COMPACT !== '1' && !baseEnv.CLAUDE_CODE_MAX_CONTEXT_TOKENS) {
     env.CLAUDE_CODE_MAX_CONTEXT_TOKENS = baseEnv.OPENZOO_CLAUDE_CONTEXT_TOKENS || '1000000';
   }
   return env;
@@ -360,7 +383,15 @@ export async function launchClaude(argv) {
         // side by side is the only way the markup is visible while it is happening.
         + 'const ac=j.actual||{};'
         + 'const real=(ac.calls>0)?("  \\u00b7 $"+Number(ac.upstreamUsd||0).toFixed(4)+" real"+(ac.markupX?(" ("+ac.markupX+"x)"):"")):"";'
-        + 'process.stdout.write("\\x1b[38;5;208m\\u25cf\\x1b[0m openzoo  $"+(Number(j.spendUsd)||0).toFixed(4)+"  "+(j.paidCalls||0)+" call"+((j.paidCalls||0)===1?"":"s")+save+real+spill+cr+"  \\u00b7 x402")}'
+        // TWO NUMBERS, NEVER ONE. `spent` is cumulative across every session on
+        // this machine (restored from ~/.openzoo/session.json); `wallet` is what
+        // is left to pay with. Shown unlabelled, the first was read as the
+        // second — "$13.86" on screen while the wallet held $0.18 and every call
+        // 402'd underfunded. The words `spent` and `wallet` are the whole fix.
+        + 'const wu=Number(j.walletUsd);'
+        + 'const wcol=(!isFinite(wu)||wu<=0)?"\\x1b[31m":(wu<0.5?"\\x1b[33m":"\\x1b[90m");'
+        + 'const wal=isFinite(wu)?("  \\u00b7 "+wcol+"wallet $"+wu.toFixed(2)+"\\x1b[0m"):"";'
+        + 'process.stdout.write("\\x1b[38;5;208m\\u25cf\\x1b[0m openzoo  spent $"+(Number(j.spendUsd)||0).toFixed(4)+" all-time"+wal+"  \\u00b7 "+(j.paidCalls||0)+" call"+((j.paidCalls||0)===1?"":"s")+save+real+spill+cr+"  \\u00b7 x402")}'
         + 'catch{process.stdout.write("\\x1b[38;5;208m\\u25cf\\x1b[0m openzoo  \\u00b7 x402")}})\'\n');
       fs.chmodSync(scriptPath, 0o755);
       const settingsPath = path.join(os.homedir(), '.claude', 'settings.json');

package/lib/modelroute/README.md

@@ -0,0 +1 @@
+Measured route table. catalog.json + router.json + outcomes.json. Regenerated from leCore bench_ledger_hard.jsonl. Do not edit by hand.