openzoo 0.32.3 → 0.33.0

package/bin/openzoo.js

@@ -19,7 +19,7 @@ usage:
                                          only "Auto". Undo: npx openzoo unblock
   npx openzoo vscode [path]   same, for VS Code
   npx openzoo editor [path]   whichever is installed (Cursor wins if both)
-  npx openzoo claude [dir] [--terminal]   launch Claude on the zoo — desktop app
+  npx openzoo claude [dir]        Claude Code CLI on the zoo (x402 per turn); --desktop for the app
                                           by default, --terminal for the Claude Code CLI
   npx openzoo launch <cmd> [args]   launch a TERMINAL Messages API client
                                     (claude, aider...) already pointed at the zoo

package/lib/launch.js

@@ -65,8 +65,12 @@ export async function launchClaude(argv) {
     }
     if (!up) { console.error(`openzoo: proxy did not come up on ${base}`); process.exit(1); }
   }
-  const terminal = argv.includes('--terminal') || argv.includes('-t');
-  const rest = argv.filter((a) => a !== '--terminal' && a !== '-t');
+  // TERMINAL (Claude Code CLI) IS THE DEFAULT — it is the guaranteed-x402 path
+  // and honours ANTHROPIC_BASE_URL. --desktop explicitly opens the desktop app
+  // (which is OAuth/subscription-bound and may ignore our endpoint).
+  const wantDesktop = argv.includes('--desktop');
+  const terminal = !wantDesktop;
+  const rest = argv.filter((a) => !['--terminal', '-t', '--desktop'].includes(a));
   const env = {
     ...process.env,
     ANTHROPIC_BASE_URL: base,

package/lib/setup.js

@@ -556,7 +556,18 @@ export async function setupEditor(which, target) {
   const args = [cwd];
   // Trust our self-signed impersonation cert without any CA install — this flag
   // is the entire reason no trust prompt is needed. Only added under --takeover.
-  if (doTakeover) args.unshift('--ignore-certificate-errors');
+  if (doTakeover) {
+    // DEFEAT DNS-OVER-HTTPS. /etc/hosts is ignored by Chromium's Secure DNS, so
+    // the agent chat connection (network-service, DoH) escaped even with every
+    // host blocked — measured: 0 backend lines on chat while api2 (renderer
+    // fetch, OS resolver) hit us fine. --host-resolver-rules overrides Chromium's
+    // resolver directly, DoH included, and takes a WILDCARD so every region /
+    // privacy variant of *.api5.cursor.sh maps to us without enumerating them.
+    args.unshift(
+      '--ignore-certificate-errors',
+      '--host-resolver-rules=MAP api2.cursor.sh 127.0.0.1,MAP *.api5.cursor.sh 127.0.0.1',
+    );
+  }
   if (useProfile) {
     fs.mkdirSync(PROFILE_DIR, { recursive: true });
     args.unshift(`--user-data-dir=${PROFILE_DIR}`, `--extensions-dir=${path.join(PROFILE_DIR, 'extensions')}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.32.3",
+  "version": "0.33.0",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",