openzoo 0.18.7 → 0.18.9

package/lib/proxy.js

@@ -363,7 +363,30 @@ export async function startProxy({ silent = false, requireToken = null, sessionM
 
     if (viaTunnel) {
       const got = (req.headers.authorization || '').replace(/^Bearer\s+/i, '').trim();
-      const authed = got === tunnelGate.token;
+      // TRUST ON FIRST USE, so a stale key still works without weakening the
+      // tunnel to "any key forever".
+      //
+      // Tunnel tokens are minted per session, so a client holding a key from an
+      // earlier run silently failed — and the only fixes were re-pasting by
+      // hand or writing into the editor's OS-encrypted credential store, which
+      // would mean prompting for keychain access to install a value the user
+      // never chose. Instead: the printed token always works, and the FIRST
+      // other key to present itself claims the tunnel for the rest of the
+      // session. Your editor (which reaches the URL first, from this machine)
+      // adopts it; anyone who finds the URL afterwards is refused because the
+      // slot is taken. The URL is unguessable and ephemeral, the spend ceiling
+      // still applies, and OPENZOO_TUNNEL_STRICT=1 restores exact-match only.
+      const strict = process.env.OPENZOO_TUNNEL_STRICT === '1';
+      let authed = got === tunnelGate.token;
+      if (!authed && !strict && got.length >= 8) {
+        if (!tunnelGate.adopted) {
+          tunnelGate.adopted = got;
+          log(`public url: adopted the caller's key (first-use) — later keys must match it`);
+          authed = true;
+        } else {
+          authed = got === tunnelGate.adopted;
+        }
+      }
       const p = (req.url || '').split('?')[0];
       // DISCOVERY IS FREE. An agent probing this URL cold should be able to
       // work out what it is and what to ask its operator for — a bare 401 on

package/lib/setup.js

@@ -23,42 +23,33 @@ import { config } from './config.js';
 import { writeEditorProviderConfig, editorRunning, quitEditor, pinEditorProviderConfig } from './cursorcfg.js';
 
 /**
- * Models offered in the editor's picker. All verified present in the live
- * catalog; the first is the default selection. A spread across vendors and
- * price tiers on purpose — the picker is where someone chooses cost, and one
- * flagship plus one cheap model is not a choice.
- * Override with OPENZOO_MODELS (comma-separated).
+ * Models offered in the editor's picker — named the way the EDITOR names them.
+ *
+ * Vendor-prefixed ids (anthropic/claude-opus-5) are foreign to Cursor's picker;
+ * its own catalog uses bare names (claude-opus-5, grok-4.6, glm-5.2). Matching
+ * that naming means the entries look native and the proxy still resolves them:
+ * lib/models.js maps each to a real catalog id (claude-opus-5 ->
+ * anthropic/claude-opus-5-fast, grok-4.6 -> x-ai/grok-4.6, composer-2.5 ->
+ * qwen/qwen-2.5-coder-32b-instruct), all verified against the live catalog.
+ * Override with OPENZOO_MODELS.
  */
 const DEFAULT_MODELS = (process.env.OPENZOO_MODELS
   ? process.env.OPENZOO_MODELS.split(',').map((m) => m.trim()).filter(Boolean)
   : [
-    'anthropic/claude-opus-5',            // default — strongest reasoning
-    'anthropic/claude-sonnet-4',
-    'openai/gpt-5.6-sol-pro',             // flagship, ~$90/M out
-    'openai/gpt-5.6-luna',
-    'x-ai/grok-4.6',
-    'z-ai/glm-5.2',
-    'google/gemini-3.1-pro-preview-customtools',
-    'deepseek/deepseek-v4-pro-0813',      // ~34x cheaper output than the flagship
-    'qwen/qwen3.8-2.4t-a95b',
-    'moonshotai/kimi-k2-0905',
-    'meta-llama/llama-4-maverick',
-    'bytedance-seed/seed-2.0-code',       // code specialist
+    'claude-opus-5',      // default
+    'claude-sonnet-5',
+    'gpt-5.6-sol',
+    'gpt-5.6-luna',
+    'grok-4.6',
+    'glm-5.2',
+    'gemini-3.1-pro',
+    'kimi-k3',
+    'gpt-5.3-codex',
+    'claude-haiku-4-5',
+    'composer-2.5',
+    'deepseek/deepseek-v4-pro-0813',   // no Cursor equivalent; cheapest output
   ]);
 
-/**
- * An ISOLATED editor profile we own.
- *
- * The editor's normal profile syncs provider settings from the vendor account
- * and overwrites local state on launch — measured repeatedly. `--user-data-dir`
- * gives it a profile directory we control, so our settings are the only ones
- * there and nothing upstream reclaims them. Opt in with OPENZOO_PROFILE=1 (or
- * --profile) because a fresh profile means signing in again and re-adding
- * extensions; that is a real cost, not a detail to spring on someone.
- */
-const PROFILE_DIR = process.env.OPENZOO_PROFILE_DIR
-  || path.join(os.homedir(), '.openzoo', 'editor-profile');
-
 const MCP_FILES = {
   cursor: path.join(os.homedir(), '.cursor', 'mcp.json'),
   vscode: path.join(os.homedir(), '.vscode', 'mcp.json'),
@@ -230,39 +221,11 @@ export async function setupEditor(which, target) {
 
   // 3. LAUNCH with that env. Editor resolved platform-agnostically; Cursor
   //    wins when both are installed.
-  // WORKSPACE, NOT WHEREVER YOU RAN THIS. Launching with '.' opens the current
-  // directory as the workspace — and running from $HOME makes the editor treat
-  // ~/.cursor as WORKSPACE config, where a stray rules/mcp file fights the
-  // global settings we just wrote. A dedicated folder has no local config to
-  // collide with. Pass a path explicitly to override.
-  let cwd = target && !target.startsWith('-') ? target : null;
-  if (!cwd) {
-    const home = os.homedir();
-    const here = process.cwd();
-    if (here === home) {
-      cwd = path.join(home, 'openzoo');
-      fs.mkdirSync(cwd, { recursive: true });
-      const readme = path.join(cwd, 'README.md');
-      if (!fs.existsSync(readme)) {
-        fs.writeFileSync(readme, [
-          '# openzoo workspace',
-          '',
-          'Opened by `npx openzoo cursor` because launching from your home directory',
-          'makes the editor read `~/.cursor` as WORKSPACE config, which collides with',
-          'the global provider settings openzoo writes.',
-          '',
-          'Every model call from this window is paid per-request over x402 from the',
-          'local burner wallet. Pick a model with a vendor prefix (e.g.',
-          '`anthropic/claude-opus-5`) — built-in models bypass the proxy.',
-          '',
-          'Run `npx openzoo cursor /path/to/your/project` to use a different folder.',
-        ].join('\n'));
-      }
-      console.log(`workspace: ${cwd}  (home dir would collide with ~/.cursor)`);
-    } else {
-      cwd = here;
-    }
-  }
+  // Open the directory you ran this from, or the one you named. The earlier
+  // "helpfully" substitute a ~/openzoo folder when run from $HOME was worse
+  // than the problem it dodged: it silently opened the wrong project.
+  const cwd = target && !target.startsWith('-') ? target : process.cwd();
+
   const picked = pickEditor(which);
   if (!picked) {
     console.error('no editor found — install Cursor or VS Code, or put `cursor`/`code` on PATH');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.18.7",
+  "version": "0.18.9",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",