openzoo 0.18.7 → 0.18.8

package/lib/proxy.js

@@ -363,7 +363,30 @@ export async function startProxy({ silent = false, requireToken = null, sessionM
 
     if (viaTunnel) {
       const got = (req.headers.authorization || '').replace(/^Bearer\s+/i, '').trim();
-      const authed = got === tunnelGate.token;
+      // TRUST ON FIRST USE, so a stale key still works without weakening the
+      // tunnel to "any key forever".
+      //
+      // Tunnel tokens are minted per session, so a client holding a key from an
+      // earlier run silently failed — and the only fixes were re-pasting by
+      // hand or writing into the editor's OS-encrypted credential store, which
+      // would mean prompting for keychain access to install a value the user
+      // never chose. Instead: the printed token always works, and the FIRST
+      // other key to present itself claims the tunnel for the rest of the
+      // session. Your editor (which reaches the URL first, from this machine)
+      // adopts it; anyone who finds the URL afterwards is refused because the
+      // slot is taken. The URL is unguessable and ephemeral, the spend ceiling
+      // still applies, and OPENZOO_TUNNEL_STRICT=1 restores exact-match only.
+      const strict = process.env.OPENZOO_TUNNEL_STRICT === '1';
+      let authed = got === tunnelGate.token;
+      if (!authed && !strict && got.length >= 8) {
+        if (!tunnelGate.adopted) {
+          tunnelGate.adopted = got;
+          log(`public url: adopted the caller's key (first-use) — later keys must match it`);
+          authed = true;
+        } else {
+          authed = got === tunnelGate.adopted;
+        }
+      }
       const p = (req.url || '').split('?')[0];
       // DISCOVERY IS FREE. An agent probing this URL cold should be able to
       // work out what it is and what to ask its operator for — a bare 401 on

package/lib/setup.js

@@ -230,39 +230,11 @@ export async function setupEditor(which, target) {
 
   // 3. LAUNCH with that env. Editor resolved platform-agnostically; Cursor
   //    wins when both are installed.
-  // WORKSPACE, NOT WHEREVER YOU RAN THIS. Launching with '.' opens the current
-  // directory as the workspace — and running from $HOME makes the editor treat
-  // ~/.cursor as WORKSPACE config, where a stray rules/mcp file fights the
-  // global settings we just wrote. A dedicated folder has no local config to
-  // collide with. Pass a path explicitly to override.
-  let cwd = target && !target.startsWith('-') ? target : null;
-  if (!cwd) {
-    const home = os.homedir();
-    const here = process.cwd();
-    if (here === home) {
-      cwd = path.join(home, 'openzoo');
-      fs.mkdirSync(cwd, { recursive: true });
-      const readme = path.join(cwd, 'README.md');
-      if (!fs.existsSync(readme)) {
-        fs.writeFileSync(readme, [
-          '# openzoo workspace',
-          '',
-          'Opened by `npx openzoo cursor` because launching from your home directory',
-          'makes the editor read `~/.cursor` as WORKSPACE config, which collides with',
-          'the global provider settings openzoo writes.',
-          '',
-          'Every model call from this window is paid per-request over x402 from the',
-          'local burner wallet. Pick a model with a vendor prefix (e.g.',
-          '`anthropic/claude-opus-5`) — built-in models bypass the proxy.',
-          '',
-          'Run `npx openzoo cursor /path/to/your/project` to use a different folder.',
-        ].join('\n'));
-      }
-      console.log(`workspace: ${cwd}  (home dir would collide with ~/.cursor)`);
-    } else {
-      cwd = here;
-    }
-  }
+  // Open the directory you ran this from, or the one you named. The earlier
+  // "helpfully" substitute a ~/openzoo folder when run from $HOME was worse
+  // than the problem it dodged: it silently opened the wrong project.
+  const cwd = target && !target.startsWith('-') ? target : process.cwd();
+
   const picked = pickEditor(which);
   if (!picked) {
     console.error('no editor found — install Cursor or VS Code, or put `cursor`/`code` on PATH');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.18.7",
+  "version": "0.18.8",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",