openzoo 0.30.6 → 0.31.0

package/lib/cursorcfg.js

@@ -144,14 +144,13 @@ export function writeEditorProviderConfig(which, { baseUrl, models }) {
   const before = { openAIBaseUrl: doc.openAIBaseUrl, models: (doc.availableAPIKeyModels || []).length };
   doc.openAIBaseUrl = baseUrl;
   doc.useOpenAIKey = true;
-  // THE MODEL-SELECTION GATE READS MEMBERSHIP FROM RIGHT HERE. Traced in the
-  // bundle: membershipType(){ return this.reactiveStorageService
-  // .applicationUserPersistentStorage.membershipType } — i.e. THIS blob, not
-  // cursorAuth/stripeMembershipType. Setting it entitles model selection; the
-  // api2 impersonation keeps the editor from re-syncing it back to free.
-  // OPENZOO_MEMBERSHIP overrides (pro | pro_plus | enterprise | ultra).
-  doc.membershipType = process.env.OPENZOO_MEMBERSHIP || 'pro';
-  doc.subscriptionStatus = 'active';
+  // MEMBERSHIP FORGERY IS OPT-IN. Setting membershipType here spoofs Cursor's
+  // paid-tier gate on an unpaid account — only do it when the operator explicitly
+  // asks with OPENZOO_MEMBERSHIP. Default writes leave the real membership alone.
+  if (process.env.OPENZOO_MEMBERSHIP) {
+    doc.membershipType = process.env.OPENZOO_MEMBERSHIP;
+    doc.subscriptionStatus = 'active';
+  }
   // Merge, don't clobber: a user may have their own custom models listed.
   const existing = Array.isArray(doc.availableAPIKeyModels) ? doc.availableAPIKeyModels : [];
   const names = new Set(existing.map((m) => (typeof m === 'string' ? m : m?.name)).filter(Boolean));
@@ -265,7 +264,7 @@ export function writeEditorProviderConfig(which, { baseUrl, models }) {
  * that clobbers them. Removable with unpinEditorProviderConfig.
  */
 export function pinEditorProviderConfig(which, { baseUrl, models }) {
-  const mem = process.env.OPENZOO_MEMBERSHIP || 'pro';
+  const mem = process.env.OPENZOO_MEMBERSHIP || null;
   const db = storagePath(which);
   if (!fs.existsSync(db)) return null;
   const esc = (v) => String(v).replace(/'/g, "''");
@@ -292,8 +291,8 @@ CREATE TRIGGER openzoo_pin AFTER UPDATE ON ItemTable
 WHEN NEW.key = '${KEY}'
  AND (json_extract(NEW.value,'$.openAIBaseUrl') IS NOT '${base}'
    OR json_extract(NEW.value,'$.featureModelConfigs.composer.defaultModel') IS NOT '${primary}'
-   OR json_array_length(json_extract(NEW.value,'$.availableDefaultModels2')) IS NOT ${models.length}
-   OR json_extract(NEW.value,'$.membershipType') IS NOT '${mem}')
+   OR json_array_length(json_extract(NEW.value,'$.availableDefaultModels2')) IS NOT ${models.length}${mem ? `
+   OR json_extract(NEW.value,'$.membershipType') IS NOT '${mem}'` : ''})
 BEGIN
   UPDATE ItemTable SET value = json_set(
       NEW.value,
@@ -302,9 +301,9 @@ BEGIN
       '$.availableAPIKeyModels', json('${modelJson}'),
       '$.availableDefaultModels2', json('${uiJson}'),
       '$.featureModelConfigs.composer.defaultModel', '${primary}',
-      '$.featureModelConfigs.cmdK.defaultModel', '${primary}',
+      '$.featureModelConfigs.cmdK.defaultModel', '${primary}'${mem ? `,
       '$.membershipType', '${mem}',
-      '$.subscriptionStatus', 'active'
+      '$.subscriptionStatus', 'active'` : ''}
   ) WHERE key = NEW.key;
 END;`;
   try { sqlite(db, sql); } catch (e) { return { error: e.message }; }

package/lib/setup.js

@@ -335,7 +335,7 @@ export async function setupEditor(which, target) {
   // rejected our cert — the ECONNRESET-before-ALPN wall in the backend log, and
   // exactly the model/chat calls we need. NODE_TLS_REJECT_UNAUTHORIZED=0 is the
   // Node-side switch. Only set under takeover, where we own the endpoint.
-  if (which === 'cursor' && !process.argv.includes('--no-takeover')) env.NODE_TLS_REJECT_UNAUTHORIZED = '0';
+  if (which === 'cursor' && process.argv.includes('--takeover')) env.NODE_TLS_REJECT_UNAUTHORIZED = '0';
 
   console.log('');
   console.log(`mcp:     ${mcpFile}  (openzoo: zoo_bind, zoo_ask, zoo_models, zoo_wallet, zoo_contexts)`);
@@ -459,7 +459,13 @@ export async function setupEditor(which, target) {
   // DEFAULT ON. Takeover is what makes a plan-less account route, and it is
   // harmless on an entitled one (the editor just reads our catalog instead of
   // theirs), so it runs unless explicitly disabled with --no-takeover.
-  const doTakeover = target0 === 'cursor' && !process.argv.includes('--no-takeover');
+  // OPT-IN ONLY. Takeover impersonates Cursor's backend to unlock paid-tier
+  // model selection on an unpaid account — that is defeating Cursor's own
+  // subscription gate, not routing, so it is NOT the default. Plain
+  // `openzoo cursor` writes the base URL + models and routes Auto (and any model
+  // an entitled account can pick) through the zoo. --takeover is the escape
+  // hatch for those who understand what it does.
+  const doTakeover = target0 === 'cursor' && process.argv.includes('--takeover');
   if (doTakeover) {
     try {
       const { ensureCert } = await import('./cursorbackend.js');
@@ -550,7 +556,7 @@ export async function setupEditor(which, target) {
   const args = [cwd];
   // Trust our self-signed impersonation cert without any CA install — this flag
   // is the entire reason no trust prompt is needed. Only added under --takeover.
-  if (target0 === 'cursor' && !process.argv.includes('--no-takeover')) args.unshift('--ignore-certificate-errors');
+  if (doTakeover) args.unshift('--ignore-certificate-errors');
   if (useProfile) {
     fs.mkdirSync(PROFILE_DIR, { recursive: true });
     args.unshift(`--user-data-dir=${PROFILE_DIR}`, `--extensions-dir=${path.join(PROFILE_DIR, 'extensions')}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.30.6",
+  "version": "0.31.0",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",