openzoo 0.18.6 → 0.18.8

package/lib/proxy.js

@@ -363,7 +363,30 @@ export async function startProxy({ silent = false, requireToken = null, sessionM
 
     if (viaTunnel) {
       const got = (req.headers.authorization || '').replace(/^Bearer\s+/i, '').trim();
-      const authed = got === tunnelGate.token;
+      // TRUST ON FIRST USE, so a stale key still works without weakening the
+      // tunnel to "any key forever".
+      //
+      // Tunnel tokens are minted per session, so a client holding a key from an
+      // earlier run silently failed — and the only fixes were re-pasting by
+      // hand or writing into the editor's OS-encrypted credential store, which
+      // would mean prompting for keychain access to install a value the user
+      // never chose. Instead: the printed token always works, and the FIRST
+      // other key to present itself claims the tunnel for the rest of the
+      // session. Your editor (which reaches the URL first, from this machine)
+      // adopts it; anyone who finds the URL afterwards is refused because the
+      // slot is taken. The URL is unguessable and ephemeral, the spend ceiling
+      // still applies, and OPENZOO_TUNNEL_STRICT=1 restores exact-match only.
+      const strict = process.env.OPENZOO_TUNNEL_STRICT === '1';
+      let authed = got === tunnelGate.token;
+      if (!authed && !strict && got.length >= 8) {
+        if (!tunnelGate.adopted) {
+          tunnelGate.adopted = got;
+          log(`public url: adopted the caller's key (first-use) — later keys must match it`);
+          authed = true;
+        } else {
+          authed = got === tunnelGate.adopted;
+        }
+      }
       const p = (req.url || '').split('?')[0];
       // DISCOVERY IS FREE. An agent probing this URL cold should be able to
       // work out what it is and what to ask its operator for — a bare 401 on

package/lib/setup.js

@@ -22,7 +22,29 @@ import { spawn } from 'node:child_process';
 import { config } from './config.js';
 import { writeEditorProviderConfig, editorRunning, quitEditor, pinEditorProviderConfig } from './cursorcfg.js';
 
-const DEFAULT_MODELS = ['anthropic/claude-opus-5', 'deepseek/deepseek-v4-pro-0813'];
+/**
+ * Models offered in the editor's picker. All verified present in the live
+ * catalog; the first is the default selection. A spread across vendors and
+ * price tiers on purpose — the picker is where someone chooses cost, and one
+ * flagship plus one cheap model is not a choice.
+ * Override with OPENZOO_MODELS (comma-separated).
+ */
+const DEFAULT_MODELS = (process.env.OPENZOO_MODELS
+  ? process.env.OPENZOO_MODELS.split(',').map((m) => m.trim()).filter(Boolean)
+  : [
+    'anthropic/claude-opus-5',            // default — strongest reasoning
+    'anthropic/claude-sonnet-4',
+    'openai/gpt-5.6-sol-pro',             // flagship, ~$90/M out
+    'openai/gpt-5.6-luna',
+    'x-ai/grok-4.6',
+    'z-ai/glm-5.2',
+    'google/gemini-3.1-pro-preview-customtools',
+    'deepseek/deepseek-v4-pro-0813',      // ~34x cheaper output than the flagship
+    'qwen/qwen3.8-2.4t-a95b',
+    'moonshotai/kimi-k2-0905',
+    'meta-llama/llama-4-maverick',
+    'bytedance-seed/seed-2.0-code',       // code specialist
+  ]);
 
 /**
  * An ISOLATED editor profile we own.
@@ -208,7 +230,11 @@ export async function setupEditor(which, target) {
 
   // 3. LAUNCH with that env. Editor resolved platform-agnostically; Cursor
   //    wins when both are installed.
-  const cwd = target && !target.startsWith('-') ? target : '.';
+  // Open the directory you ran this from, or the one you named. The earlier
+  // "helpfully" substitute a ~/openzoo folder when run from $HOME was worse
+  // than the problem it dodged: it silently opened the wrong project.
+  const cwd = target && !target.startsWith('-') ? target : process.cwd();
+
   const picked = pickEditor(which);
   if (!picked) {
     console.error('no editor found — install Cursor or VS Code, or put `cursor`/`code` on PATH');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.18.6",
+  "version": "0.18.8",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",