openzoo 0.30.4 → 0.30.6

package/lib/cursorbackend.js

@@ -97,8 +97,15 @@ const CORS = {
  * active, unlimited membership so nothing is gated.
  */
 function stripeProfile() {
+  // MUST MATCH the membershipType written into the applicationUser blob — Cursor
+  // refreshes the blob FROM this profile on launch, so a hardcoded 'pro' here
+  // overwrote our 'ultra' and the free-plan gate ("free plans can only use Auto")
+  // fired anyway. Same env var, one source of truth.
+  const m = process.env.OPENZOO_MEMBERSHIP || 'pro';
   return JSON.stringify({
-    membershipType: 'pro',
+    membershipType: m,
+    individualMembershipType: m,
+    teamMembershipType: null,
     subscriptionStatus: 'active',
     verifiedStudent: false,
     trialEligible: false,
@@ -108,8 +115,6 @@ function stripeProfile() {
     hardLimitPerUser: null,
     usageBasedPricingEnabled: true,
     monthlyUsageBasedLimit: 1000000,
-    individualMembershipType: 'pro',
-    teamMembershipType: null,
   });
 }
 

package/lib/cursorcfg.js

@@ -144,6 +144,14 @@ export function writeEditorProviderConfig(which, { baseUrl, models }) {
   const before = { openAIBaseUrl: doc.openAIBaseUrl, models: (doc.availableAPIKeyModels || []).length };
   doc.openAIBaseUrl = baseUrl;
   doc.useOpenAIKey = true;
+  // THE MODEL-SELECTION GATE READS MEMBERSHIP FROM RIGHT HERE. Traced in the
+  // bundle: membershipType(){ return this.reactiveStorageService
+  // .applicationUserPersistentStorage.membershipType } — i.e. THIS blob, not
+  // cursorAuth/stripeMembershipType. Setting it entitles model selection; the
+  // api2 impersonation keeps the editor from re-syncing it back to free.
+  // OPENZOO_MEMBERSHIP overrides (pro | pro_plus | enterprise | ultra).
+  doc.membershipType = process.env.OPENZOO_MEMBERSHIP || 'pro';
+  doc.subscriptionStatus = 'active';
   // Merge, don't clobber: a user may have their own custom models listed.
   const existing = Array.isArray(doc.availableAPIKeyModels) ? doc.availableAPIKeyModels : [];
   const names = new Set(existing.map((m) => (typeof m === 'string' ? m : m?.name)).filter(Boolean));
@@ -257,6 +265,7 @@ export function writeEditorProviderConfig(which, { baseUrl, models }) {
  * that clobbers them. Removable with unpinEditorProviderConfig.
  */
 export function pinEditorProviderConfig(which, { baseUrl, models }) {
+  const mem = process.env.OPENZOO_MEMBERSHIP || 'pro';
   const db = storagePath(which);
   if (!fs.existsSync(db)) return null;
   const esc = (v) => String(v).replace(/'/g, "''");
@@ -283,7 +292,8 @@ CREATE TRIGGER openzoo_pin AFTER UPDATE ON ItemTable
 WHEN NEW.key = '${KEY}'
  AND (json_extract(NEW.value,'$.openAIBaseUrl') IS NOT '${base}'
    OR json_extract(NEW.value,'$.featureModelConfigs.composer.defaultModel') IS NOT '${primary}'
-   OR json_array_length(json_extract(NEW.value,'$.availableDefaultModels2')) IS NOT ${models.length})
+   OR json_array_length(json_extract(NEW.value,'$.availableDefaultModels2')) IS NOT ${models.length}
+   OR json_extract(NEW.value,'$.membershipType') IS NOT '${mem}')
 BEGIN
   UPDATE ItemTable SET value = json_set(
       NEW.value,
@@ -292,7 +302,9 @@ BEGIN
       '$.availableAPIKeyModels', json('${modelJson}'),
       '$.availableDefaultModels2', json('${uiJson}'),
       '$.featureModelConfigs.composer.defaultModel', '${primary}',
-      '$.featureModelConfigs.cmdK.defaultModel', '${primary}'
+      '$.featureModelConfigs.cmdK.defaultModel', '${primary}',
+      '$.membershipType', '${mem}',
+      '$.subscriptionStatus', 'active'
   ) WHERE key = NEW.key;
 END;`;
   try { sqlite(db, sql); } catch (e) { return { error: e.message }; }

package/lib/hosts.js

@@ -147,6 +147,9 @@ export function unredirect443() {
  * runs privileged, never the wallet-holding proxy. unbindBackend443 kills it.
  */
 export function bindBackend443(modelsPath, logPath, log = console.log) {
+  // sudo strips the environment, so forward the one var the backend needs to
+  // report the right membership in the stripe profile it serves.
+  const memEnv = `OPENZOO_MEMBERSHIP='${(process.env.OPENZOO_MEMBERSHIP || 'pro').replace(/'/g, '')}'`;
   const here = path.dirname(fileURLToPath(import.meta.url));
   const script = path.join(here, '..', 'bin', 'cursor-backend.js');
   const node = process.execPath;
@@ -172,7 +175,7 @@ export function bindBackend443(modelsPath, logPath, log = console.log) {
     + `pkill -9 -f 'cursor-backend.js' 2>/dev/null; `
     + `for p in $(lsof -nP -iTCP:443 -sTCP:LISTEN -t 2>/dev/null) $(lsof -nP -iTCP:8443 -sTCP:LISTEN -t 2>/dev/null); do kill -9 "$p" 2>/dev/null; done; `
     + `for i in 1 2 3 4 5 6 7 8 9 10; do lsof -nP -iTCP:443 -sTCP:LISTEN -t >/dev/null 2>&1 || break; sleep 0.5; done; `
-    + `nohup '${node}' '${script}' 443 '${modelsPath}' '${logPath}' >/dev/null 2>&1 & `
+    + `nohup ${memEnv} '${node}' '${script}' 443 '${modelsPath}' '${logPath}' >/dev/null 2>&1 & `
     + 'sleep 1; true',
   );
   return { ok };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.30.4",
+  "version": "0.30.6",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",