openzoo 0.50.97 → 0.50.99

package/lib/launch.js

@@ -559,7 +559,7 @@ export async function launchClaude(argv) {
     try {
       const { blockBackend, bindBackend443, unblockBackend, CLAUDE_HOSTS } = await import('./hosts.js');
       const { ensureCert } = await import('./cursorbackend.js');
-      ensureCert(console.error);
+      await ensureCert(console.error);
       const r = blockBackend(CLAUDE_HOSTS);
       console.error(r.already ? 'openzoo: api.anthropic.com already routed to us'
         : `openzoo: routing ${CLAUDE_HOSTS.join(', ')} -> 127.0.0.1 (sudo)`);

package/lib/models.js

@@ -192,7 +192,17 @@ export function unopenrouter(requested, ids) {
   const bare = s.slice(slash + 1);
   if (!bare || bare.includes('/')) return null;
   if (mode === '1') return bare;
-  return Array.isArray(ids) && ids.includes(bare) ? bare : null;
+  if (!Array.isArray(ids) || !ids.length) return null;
+  if (ids.includes(s)) return null;
+  if (ids.includes(bare)) return bare;
+  // Telnyx advertises `zai-org/GLM-5.2`, not OpenRouter's `z-ai/glm-5.2`.
+  const want = bare.toLowerCase().replace(/[._]+/g, '-');
+  const hit = ids.find((id) => {
+    if (id === s) return false;
+    const suffix = String(id).slice(String(id).lastIndexOf('/') + 1).toLowerCase().replace(/[._]+/g, '-');
+    return suffix === want;
+  });
+  return hit || null;
 }
 
 export function resolveModel(requested, ids) {

package/lib/openzooPathShim.js

@@ -0,0 +1,60 @@
+// Install a PATH shim so `openzoo` works without a system Node.
+//
+// grokui-app already ran the sidecar with Electron's own binary
+// (`ELECTRON_RUN_AS_NODE=1`). That only helps the GUI. A packaged OpenZoo Bot
+// also drops `~/.local/bin/openzoo` (Windows: %LOCALAPPDATA%\openzoo\bin)
+// pointing at the same Electron + bundled bin/openzoo.js, so the CLI
+// (`openzoo claude`, `openzoo balance`, …) works from a Finder/Dock launch
+// that has no ~/.zshrc PATH and no npx.
+
+import { chmodSync, existsSync, mkdirSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+
+export function shimDir(home = homedir(), platform = process.platform) {
+  if (platform === 'win32') return join(home, 'AppData', 'Local', 'openzoo', 'bin');
+  return join(home, '.local', 'bin');
+}
+
+export function shimPath(home = homedir(), platform = process.platform) {
+  const name = platform === 'win32' ? 'openzoo.cmd' : 'openzoo';
+  return join(shimDir(home, platform), name);
+}
+
+export function unixShimBody({ execPath, openzooJs }) {
+  return `#!/bin/sh
+# Written by OpenZoo Bot. Electron-as-node — no system Node required.
+export ELECTRON_RUN_AS_NODE=1
+exec ${shellQuote(execPath)} ${shellQuote(openzooJs)} "$@"
+`;
+}
+
+export function winShimBody({ execPath, openzooJs }) {
+  return `@echo off
+set ELECTRON_RUN_AS_NODE=1
+"${execPath}" "${openzooJs}" %*
+`;
+}
+
+function shellQuote(s) {
+  return `'${String(s).replace(/'/g, `'\\''`)}'`;
+}
+
+export function writeOpenzooShim({
+  execPath,
+  openzooJs,
+  home = homedir(),
+  platform = process.platform,
+} = {}) {
+  if (!execPath || !openzooJs) throw new Error('writeOpenzooShim needs execPath + openzooJs');
+  if (!existsSync(openzooJs)) throw new Error(`openzoo.js missing: ${openzooJs}`);
+  const dir = shimDir(home, platform);
+  mkdirSync(dir, { recursive: true });
+  const dest = shimPath(home, platform);
+  const body = platform === 'win32'
+    ? winShimBody({ execPath, openzooJs })
+    : unixShimBody({ execPath, openzooJs });
+  writeFileSync(dest, body, { encoding: 'utf8' });
+  if (platform !== 'win32') chmodSync(dest, 0o755);
+  return dest;
+}

package/lib/ozSpendChip.js

@@ -237,6 +237,14 @@ function ozEnsureSpendCss() {
     '[data-oz-spend-hide]{display:none!important}',
     'button[aria-label="Start voice input"],button[aria-label*="voice input" i],',
     'button[aria-label*="steminvoer" i],button[aria-label^="Microphone"]{display:none!important}',
+    '#oz-share-hud{position:fixed;right:16px;bottom:148px;z-index:2147483646;max-width:min(28em,calc(100vw - 24px));',
+    'pointer-events:auto;font:600 13px/1.3 system-ui,sans-serif}',
+    '#oz-share-hud[data-feature="oz-share-hud"]{display:block}',
+    '#oz-share-hud>button,#oz-share-hud>a{display:block;width:100%;text-align:left;cursor:pointer;',
+    'background:#2563eb;color:#fff;border:0;border-radius:999px;padding:6px 12px;box-shadow:0 4px 18px rgba(0,0,0,.5);',
+    'text-decoration:none}',
+    '#oz-share-hud .oz-share-url{display:block;margin-top:6px;padding:8px 10px;border-radius:10px;',
+    'background:rgba(20,20,22,.94);color:#93c5fd;font:12px/1.4 ui-monospace,monospace;overflow-wrap:anywhere}',
   ].join('');
 }
 
@@ -560,6 +568,71 @@ function ozPollSpend() {
   })();
 }
 
+function ozShareCopy(url) {
+  const u = String(url || '');
+  if (!u) return;
+  try { navigator.clipboard.writeText(u); } catch (e) {}
+  try { window.open(u, '_blank', 'noopener'); } catch (e) {}
+}
+
+function ozEnsureShareHud(state) {
+  const url = state && typeof state.url === 'string' ? state.url.trim() : '';
+  const rooms = (state && Array.isArray(state.rooms) ? state.rooms : []).filter((r) => r && r.url);
+  const show = !!url || !!(state && state.isGroup && rooms.length);
+  let el = document.getElementById('oz-share-hud');
+  if (!show) {
+    if (el) el.remove();
+    return;
+  }
+  ozEnsureSpendCss();
+  if (!el) {
+    el = document.createElement('div');
+    el.id = 'oz-share-hud';
+    el.setAttribute('data-feature', 'oz-share-hud');
+    el.setAttribute('data-testid', 'oz-share-hud');
+    document.body.appendChild(el);
+  }
+  const primary = url || (rooms[0] && rooms[0].url) || '';
+  const lines = url
+    ? [url]
+    : rooms.map((r) => (r.name ? r.name + '  ' : '') + r.url);
+  el.replaceChildren();
+  const btn = document.createElement('button');
+  btn.type = 'button';
+  btn.setAttribute('data-testid', 'oz-share-copy');
+  btn.textContent = url ? 'Share group' : 'Share grokroom';
+  btn.addEventListener('click', () => ozShareCopy(primary));
+  el.appendChild(btn);
+  const box = document.createElement('div');
+  box.className = 'oz-share-url';
+  box.setAttribute('data-testid', 'oz-share-url');
+  box.textContent = lines.join('\n');
+  el.appendChild(box);
+  if (primary) {
+    const hint = document.createElement('div');
+    hint.setAttribute('data-testid', 'oz-share-join-hint');
+    hint.style.cssText = 'margin-top:6px;font:12px/1.35 ui-sans-serif,system-ui,sans-serif;opacity:.85;word-break:break-all';
+    hint.textContent = 'Others in OpenZoo Bot: /join ' + primary + ' — then add their bots to the group.';
+    el.appendChild(hint);
+  }
+}
+
+function ozPollShare() {
+  const urls = ['/oz-share', '/api/ozShare', 'https://127.0.0.1:8443/api/ozShare'];
+  (async () => {
+    for (let i = 0; i < urls.length; i += 1) {
+      try {
+        const r = await fetch(urls[i], { signal: AbortSignal.timeout(1500) });
+        if (!r || !r.ok) continue;
+        const j = await r.json();
+        if (!j || j.ok === false) continue;
+        ozEnsureShareHud(j);
+        return;
+      } catch (e) {}
+    }
+  })();
+}
+
 function ozWatchSpend() {
   let t = 0;
   const inComposer = () => ozInComposer(document.activeElement);
@@ -583,16 +656,17 @@ function ozWatchSpend() {
     else document.addEventListener('DOMContentLoaded', start);
   } catch (e) {}
   try { window.addEventListener('resize', debounced); } catch (e) {}
-  try { setInterval(() => { run(); ozPollSpend(); }, 2000); } catch (e) {}
+  try { setInterval(() => { run(); ozPollSpend(); ozPollShare(); }, 2000); } catch (e) {}
   try { ozPollSpend(); } catch (e) {}
+  try { ozPollShare(); } catch (e) {}
 }
 
 export function spendChipSource() {
   return [
     '(function ozSpendChip(){',
     "'use strict';",
-    'if (window.__OZ_SPEND_CHIP__ === 16) return;',
-    'window.__OZ_SPEND_CHIP__ = 16;',
+    'if (window.__OZ_SPEND_CHIP__ === 18) return;',
+    'window.__OZ_SPEND_CHIP__ = 18;',
     chipUsd.toString(),
     labelFromSpendBody.toString(),
     spendLinesOnly.toString(),
@@ -615,6 +689,9 @@ export function spendChipSource() {
     ozDragFloat.toString(),
     ozLabelFromInfo.toString(),
     ozPollSpend.toString(),
+    ozShareCopy.toString(),
+    ozEnsureShareHud.toString(),
+    ozPollShare.toString(),
     ozWatchSpend.toString(),
     'ozWatchSpend();',
     '})();',

package/lib/pay.js

@@ -63,16 +63,39 @@ export class UnderfundedError extends Error {
  * rest. A payment still decrements the cached figure so a burst cannot overdraw.
  */
 const BALANCE_TTL_MS = Number(process.env.OPENZOO_BALANCE_TTL_MS || 8_000);
+/**
+ * HARD CEILING ON STALENESS — the SWR branch has no age bound of its own.
+ *
+ * It returns the cached figure and merely KICKS OFF a refresh, so a positive
+ * entry was served forever whenever the refresh kept losing: an RPC that keeps
+ * throwing leaves `refreshing` false and the old number in place, and several
+ * workers sharing one wallet never see each other's spends at all — each
+ * process only ever debits what IT paid.
+ *
+ * MEASURED 2026-09-03: deposit wallet 4QtgGwMt… holding 0.003603 USDC kept
+ * signing the 0.009204 USDC row. Every settle came back `Error: insufficient
+ * funds` (Tokenkeg custom program error 0x1) in a tight retry loop, while the
+ * TOKEN row it could pay (47,411 held vs 19.28 needed) sat next to it in the
+ * same accepts[]. Past this ceiling, block on a live read instead of guessing.
+ */
+const BALANCE_STALE_MAX_MS = Number(process.env.OPENZOO_BALANCE_STALE_MAX_MS || 60_000);
 const balanceCache = new Map();   // key -> { raw, ui, at, refreshing }
 
 const balKey = (owner, mint) => `${owner}|${mint}`;
 
+/** Drop a cached figure so the next read is live. Called when the gateway
+ *  refuses a payment we already signed — the cache is what mispriced it. */
+export function forgetCachedBalance(owner, mint) {
+  balanceCache.delete(balKey(owner?.toBase58 ? owner.toBase58() : String(owner), mint));
+}
+
 async function cachedTokenBalance(connection, owner, mint, { force = false } = {}) {
   const key = balKey(owner.toBase58 ? owner.toBase58() : String(owner), mint);
   const hit = balanceCache.get(key);
   const zero = !!(hit && hit.raw === 0n);
-  const fresh = hit && !force && !zero && (Date.now() - hit.at) < BALANCE_TTL_MS;
-  if (hit && !force && !zero) {
+  const age = hit ? Date.now() - hit.at : Infinity;
+  const fresh = hit && !force && !zero && age < BALANCE_TTL_MS;
+  if (hit && !force && !zero && age < BALANCE_STALE_MAX_MS) {
     if (!fresh && !hit.refreshing) {
       hit.refreshing = true;
       tokenBalance(connection, owner, mint)
@@ -402,6 +425,11 @@ export class PayClient {
     // into a silent spend loop.
     if (response.status === 402 && !this._rebuilt) {
       this._rebuilt = true;
+      // The gateway just refused a payment we signed. If the reason was funds
+      // rather than a dead blockhash, the cached balance is exactly what got it
+      // wrong — drop it so the rebuild re-reads live and the candidate walk can
+      // fall through to a rail the wallet can actually pay.
+      try { forgetCachedBalance(this.keypair?.publicKey, accept?.asset); } catch { /* advisory */ }
       try {
         // TAKE THE GATEWAY'S ADVICE BEFORE RE-QUOTING BLIND. On "payer balance
         // insufficient" the 402 now carries advice.retryWithMaxTokens — the

package/lib/podagent.mjs

@@ -196,7 +196,9 @@ function execFrame(command, cwd = '/tmp') {
     approvalId: randomUUID(),
     // agent.v1.ExecServerMessage as protobuf-es JSON (camelCase). The daemon
     // assigns `id`; we only supply the shell variant.
-    serverMessage: { shellArgs: { command: guardFindCwd(command, cwd), workingDirectory: cwd, timeout: 120 } },
+    // `timeout` is MILLISECONDS (the daemon reads it via resolveShellTimeoutMs).
+    // This said 120, which aborted every command after 120ms — exit 0, no output.
+    serverMessage: { shellArgs: { command: guardFindCwd(command, cwd), workingDirectory: cwd, timeout: 120_000 } },
   };
 }
 

package/lib/proxy.js

@@ -40,9 +40,10 @@ import { attachX402Proof } from './spendProof.js';
 
 /** Kill whatever is LISTEN on this port except this process.
  *  lsof first (macOS), then fuser, then /proc (Omarchy/Arch with neither).
+ *  Windows: netstat -ano + taskkill — lsof/kill do not exist (measured 2026-09-03).
  *  Every openzoo subcommand that binds :8402 goes through this. Hopping to
  *  8403 was the second-burner bug. */
-export function killListen(port, run = execSync) {
+export function killListen(port, run = execSync, platform = process.platform) {
   const n = Number(port);
   const seen = new Set();
   const addFrom = (out) => {
@@ -56,9 +57,23 @@ export function killListen(port, run = execSync) {
       return run(cmd, { encoding: 'utf8', timeout: 2000, stdio: ['ignore', 'pipe', 'ignore'], ...opts });
     } catch { return ''; }
   };
+  if (platform === 'win32') {
+    const ns = tryRun('netstat -ano -p tcp');
+    for (const line of String(ns).split(/\r?\n/)) {
+      if (!/LISTENING/i.test(line)) continue;
+      const m = line.match(new RegExp(`[:\\]]${n}\\s+\\S+\\s+LISTENING\\s+(\\d+)\\s*$`, 'i'));
+      if (!m) continue;
+      const pid = Number(m[1]);
+      if (Number.isInteger(pid) && pid > 0 && pid !== process.pid) seen.add(pid);
+    }
+    for (const pid of seen) {
+      try { run(`taskkill /PID ${pid} /F`, { stdio: 'ignore', timeout: 2000 }); } catch { /* already gone */ }
+    }
+    return [...seen];
+  }
   addFrom(tryRun(`lsof -nP -iTCP:${n} -sTCP:LISTEN -t`));
   addFrom(tryRun(`fuser -n tcp ${n}`));
-  if (process.platform === 'linux' && seen.size === 0) {
+  if (platform === 'linux' && seen.size === 0) {
     addFrom(tryRun(`python3 - ${n}`, {
       timeout: 2500,
       input: `import os, glob, sys

package/lib/setup.js

@@ -478,7 +478,7 @@ export async function setupEditor(which, target) {
       const backModels = models.map((m) => ({ name: m, label: m }));
       // Cert is minted as the USER (root can still read it); models handed to the
       // privileged listener via a temp file.
-      ensureCert(console.log);
+      await ensureCert(console.log);
       const modelsFile = path.join(os.tmpdir(), 'openzoo-cursor-models.json');
       fs.writeFileSync(modelsFile, JSON.stringify(backModels));
       const backendLog = path.join(os.homedir(), '.openzoo', 'cursor-backend.log');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.50.97",
+  "version": "0.50.99",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",