openzoo 0.30.5 → 0.31.0

package/lib/cursorbackend.js

@@ -97,8 +97,15 @@ const CORS = {
  * active, unlimited membership so nothing is gated.
  */
 function stripeProfile() {
+  // MUST MATCH the membershipType written into the applicationUser blob — Cursor
+  // refreshes the blob FROM this profile on launch, so a hardcoded 'pro' here
+  // overwrote our 'ultra' and the free-plan gate ("free plans can only use Auto")
+  // fired anyway. Same env var, one source of truth.
+  const m = process.env.OPENZOO_MEMBERSHIP || 'pro';
   return JSON.stringify({
-    membershipType: 'pro',
+    membershipType: m,
+    individualMembershipType: m,
+    teamMembershipType: null,
     subscriptionStatus: 'active',
     verifiedStudent: false,
     trialEligible: false,
@@ -108,8 +115,6 @@ function stripeProfile() {
     hardLimitPerUser: null,
     usageBasedPricingEnabled: true,
     monthlyUsageBasedLimit: 1000000,
-    individualMembershipType: 'pro',
-    teamMembershipType: null,
   });
 }
 

package/lib/cursorcfg.js

@@ -144,14 +144,13 @@ export function writeEditorProviderConfig(which, { baseUrl, models }) {
   const before = { openAIBaseUrl: doc.openAIBaseUrl, models: (doc.availableAPIKeyModels || []).length };
   doc.openAIBaseUrl = baseUrl;
   doc.useOpenAIKey = true;
-  // THE MODEL-SELECTION GATE READS MEMBERSHIP FROM RIGHT HERE. Traced in the
-  // bundle: membershipType(){ return this.reactiveStorageService
-  // .applicationUserPersistentStorage.membershipType } — i.e. THIS blob, not
-  // cursorAuth/stripeMembershipType. Setting it entitles model selection; the
-  // api2 impersonation keeps the editor from re-syncing it back to free.
-  // OPENZOO_MEMBERSHIP overrides (pro | pro_plus | enterprise | ultra).
-  doc.membershipType = process.env.OPENZOO_MEMBERSHIP || 'pro';
-  doc.subscriptionStatus = 'active';
+  // MEMBERSHIP FORGERY IS OPT-IN. Setting membershipType here spoofs Cursor's
+  // paid-tier gate on an unpaid account — only do it when the operator explicitly
+  // asks with OPENZOO_MEMBERSHIP. Default writes leave the real membership alone.
+  if (process.env.OPENZOO_MEMBERSHIP) {
+    doc.membershipType = process.env.OPENZOO_MEMBERSHIP;
+    doc.subscriptionStatus = 'active';
+  }
   // Merge, don't clobber: a user may have their own custom models listed.
   const existing = Array.isArray(doc.availableAPIKeyModels) ? doc.availableAPIKeyModels : [];
   const names = new Set(existing.map((m) => (typeof m === 'string' ? m : m?.name)).filter(Boolean));
@@ -265,7 +264,7 @@ export function writeEditorProviderConfig(which, { baseUrl, models }) {
  * that clobbers them. Removable with unpinEditorProviderConfig.
  */
 export function pinEditorProviderConfig(which, { baseUrl, models }) {
-  const mem = process.env.OPENZOO_MEMBERSHIP || 'pro';
+  const mem = process.env.OPENZOO_MEMBERSHIP || null;
   const db = storagePath(which);
   if (!fs.existsSync(db)) return null;
   const esc = (v) => String(v).replace(/'/g, "''");
@@ -292,8 +291,8 @@ CREATE TRIGGER openzoo_pin AFTER UPDATE ON ItemTable
 WHEN NEW.key = '${KEY}'
  AND (json_extract(NEW.value,'$.openAIBaseUrl') IS NOT '${base}'
    OR json_extract(NEW.value,'$.featureModelConfigs.composer.defaultModel') IS NOT '${primary}'
-   OR json_array_length(json_extract(NEW.value,'$.availableDefaultModels2')) IS NOT ${models.length}
-   OR json_extract(NEW.value,'$.membershipType') IS NOT '${mem}')
+   OR json_array_length(json_extract(NEW.value,'$.availableDefaultModels2')) IS NOT ${models.length}${mem ? `
+   OR json_extract(NEW.value,'$.membershipType') IS NOT '${mem}'` : ''})
 BEGIN
   UPDATE ItemTable SET value = json_set(
       NEW.value,
@@ -302,9 +301,9 @@ BEGIN
       '$.availableAPIKeyModels', json('${modelJson}'),
       '$.availableDefaultModels2', json('${uiJson}'),
       '$.featureModelConfigs.composer.defaultModel', '${primary}',
-      '$.featureModelConfigs.cmdK.defaultModel', '${primary}',
+      '$.featureModelConfigs.cmdK.defaultModel', '${primary}'${mem ? `,
       '$.membershipType', '${mem}',
-      '$.subscriptionStatus', 'active'
+      '$.subscriptionStatus', 'active'` : ''}
   ) WHERE key = NEW.key;
 END;`;
   try { sqlite(db, sql); } catch (e) { return { error: e.message }; }

package/lib/hosts.js

@@ -147,6 +147,9 @@ export function unredirect443() {
  * runs privileged, never the wallet-holding proxy. unbindBackend443 kills it.
  */
 export function bindBackend443(modelsPath, logPath, log = console.log) {
+  // sudo strips the environment, so forward the one var the backend needs to
+  // report the right membership in the stripe profile it serves.
+  const memEnv = `OPENZOO_MEMBERSHIP='${(process.env.OPENZOO_MEMBERSHIP || 'pro').replace(/'/g, '')}'`;
   const here = path.dirname(fileURLToPath(import.meta.url));
   const script = path.join(here, '..', 'bin', 'cursor-backend.js');
   const node = process.execPath;
@@ -172,7 +175,7 @@ export function bindBackend443(modelsPath, logPath, log = console.log) {
     + `pkill -9 -f 'cursor-backend.js' 2>/dev/null; `
     + `for p in $(lsof -nP -iTCP:443 -sTCP:LISTEN -t 2>/dev/null) $(lsof -nP -iTCP:8443 -sTCP:LISTEN -t 2>/dev/null); do kill -9 "$p" 2>/dev/null; done; `
     + `for i in 1 2 3 4 5 6 7 8 9 10; do lsof -nP -iTCP:443 -sTCP:LISTEN -t >/dev/null 2>&1 || break; sleep 0.5; done; `
-    + `nohup '${node}' '${script}' 443 '${modelsPath}' '${logPath}' >/dev/null 2>&1 & `
+    + `nohup ${memEnv} '${node}' '${script}' 443 '${modelsPath}' '${logPath}' >/dev/null 2>&1 & `
     + 'sleep 1; true',
   );
   return { ok };

package/lib/setup.js

@@ -335,7 +335,7 @@ export async function setupEditor(which, target) {
   // rejected our cert — the ECONNRESET-before-ALPN wall in the backend log, and
   // exactly the model/chat calls we need. NODE_TLS_REJECT_UNAUTHORIZED=0 is the
   // Node-side switch. Only set under takeover, where we own the endpoint.
-  if (which === 'cursor' && !process.argv.includes('--no-takeover')) env.NODE_TLS_REJECT_UNAUTHORIZED = '0';
+  if (which === 'cursor' && process.argv.includes('--takeover')) env.NODE_TLS_REJECT_UNAUTHORIZED = '0';
 
   console.log('');
   console.log(`mcp:     ${mcpFile}  (openzoo: zoo_bind, zoo_ask, zoo_models, zoo_wallet, zoo_contexts)`);
@@ -459,7 +459,13 @@ export async function setupEditor(which, target) {
   // DEFAULT ON. Takeover is what makes a plan-less account route, and it is
   // harmless on an entitled one (the editor just reads our catalog instead of
   // theirs), so it runs unless explicitly disabled with --no-takeover.
-  const doTakeover = target0 === 'cursor' && !process.argv.includes('--no-takeover');
+  // OPT-IN ONLY. Takeover impersonates Cursor's backend to unlock paid-tier
+  // model selection on an unpaid account — that is defeating Cursor's own
+  // subscription gate, not routing, so it is NOT the default. Plain
+  // `openzoo cursor` writes the base URL + models and routes Auto (and any model
+  // an entitled account can pick) through the zoo. --takeover is the escape
+  // hatch for those who understand what it does.
+  const doTakeover = target0 === 'cursor' && process.argv.includes('--takeover');
   if (doTakeover) {
     try {
       const { ensureCert } = await import('./cursorbackend.js');
@@ -550,7 +556,7 @@ export async function setupEditor(which, target) {
   const args = [cwd];
   // Trust our self-signed impersonation cert without any CA install — this flag
   // is the entire reason no trust prompt is needed. Only added under --takeover.
-  if (target0 === 'cursor' && !process.argv.includes('--no-takeover')) args.unshift('--ignore-certificate-errors');
+  if (doTakeover) args.unshift('--ignore-certificate-errors');
   if (useProfile) {
     fs.mkdirSync(PROFILE_DIR, { recursive: true });
     args.unshift(`--user-data-dir=${PROFILE_DIR}`, `--extensions-dir=${path.join(PROFILE_DIR, 'extensions')}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.30.5",
+  "version": "0.31.0",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",