openzoo 0.32.3 → 0.33.1

package/bin/openzoo.js

@@ -19,7 +19,7 @@ usage:
                                          only "Auto". Undo: npx openzoo unblock
   npx openzoo vscode [path]   same, for VS Code
   npx openzoo editor [path]   whichever is installed (Cursor wins if both)
-  npx openzoo claude [dir] [--terminal]   launch Claude on the zoo — desktop app
+  npx openzoo claude [dir]        Claude Code CLI on the zoo (x402 per turn); --desktop for the app
                                           by default, --terminal for the Claude Code CLI
   npx openzoo launch <cmd> [args]   launch a TERMINAL Messages API client
                                     (claude, aider...) already pointed at the zoo

package/lib/hosts.js

@@ -35,19 +35,24 @@ const HOSTS = WIN
 const BACKUP = `${HOSTS}.openzoo-backup`;
 const MARK = '# openzoo: force the editor onto the local proxy';
 
-/** Hosts the editor uses for model sync + its own inference proxy. */
-export const BACKEND_HOSTS = [
-  'api2.cursor.sh',
-  // Chat inference (StreamUnifiedChat) hosts — EVERY region x privacy variant,
-  // because /etc/hosts cannot wildcard *.api5.cursor.sh and Auto picks one per
-  // the account's region + privacy mode. Missing any = the chat escapes to
-  // Cursor's servers and never reaches us (observed: only api2 blocked -> no
-  // cursor-backend lines on chat).
+/**
+ * The DEFAULT block — the model-list re-sync host only. Blocking this forces a
+ * subscribed account's editor onto our model list + endpoint without severing
+ * chat, so plain `openzoo cursor` works for subbed users.
+ *
+ * The chat-inference hosts (agent.api5.*) are NOT here: blocking them without a
+ * working StreamUnifiedChat translator severs chat entirely ("Reconnecting...",
+ * observed on a working ultra account). They live in AGENT_HOSTS, blocked only
+ * under --takeover where the impersonation backend actually answers chat.
+ */
+export const BACKEND_HOSTS = ['api2.cursor.sh'];
+
+export const AGENT_HOSTS = [
   'agent.api5.cursor.sh', 'agentn.api5.cursor.sh',
   'agent-gcpp-uswest.api5.cursor.sh', 'agentn-gcpp-uswest.api5.cursor.sh',
   'agent-gcpp-eucentral.api5.cursor.sh', 'agentn-gcpp-eucentral.api5.cursor.sh',
   'agent-gcpp-apsoutheast.api5.cursor.sh', 'agentn-gcpp-apsoutheast.api5.cursor.sh',
-]
+];
 
 export function isBlocked() {
   try {
@@ -77,17 +82,17 @@ function flushDnsCmd() {
     + ' || service nscd restart 2>/dev/null; true';
 }
 
-export function blockBackend() {
+export function blockBackend(hosts = BACKEND_HOSTS) {
   // Add only the hosts NOT already present, so a prior api2-only block still gets
   // the agent/chat hosts appended (early-returning on isBlocked left them out).
   let current = '';
   try { current = fs.readFileSync(HOSTS, 'utf8'); } catch { /* new */ }
-  const missing = BACKEND_HOSTS.filter((h) => !new RegExp(`^\\s*127\\.0\\.0\\.1\\s+${h.replace(/\./g, '\\.')}\\b`, 'm').test(current));
+  const missing = hosts.filter((h) => !new RegExp(`^\\s*127\\.0\\.0\\.1\\s+${h.replace(/\./g, '\\.')}\\b`, 'm').test(current));
   if (!missing.length) return { already: true };
   const entries = missing.map((h) => `127.0.0.1 ${h}`).join('\\n');
   console.log('');
   console.log('blocking the editor\'s backend so it cannot re-sync over your model list.');
-  console.log(`  hosts   : ${BACKEND_HOSTS.join(', ')} -> 127.0.0.1`);
+  console.log(`  hosts   : ${hosts.join(', ')} -> 127.0.0.1`);
   console.log(`  backup  : ${BACKUP}`);
   console.log('  NOTE    : that host also carries the editor\'s auth/usage — it may report');
   console.log('            being signed out. Undo any time with: npx openzoo unblock');
@@ -96,7 +101,7 @@ export function blockBackend() {
   if (WIN) {
     console.log('  windows: run this in an ADMINISTRATOR PowerShell, then relaunch:');
     console.log(`    Copy-Item "${HOSTS}" "${BACKUP}" -ErrorAction SilentlyContinue`);
-    for (const h of BACKEND_HOSTS) console.log(`    Add-Content "${HOSTS}" "127.0.0.1 ${h}"`);
+    for (const h of hosts) console.log(`    Add-Content "${HOSTS}" "127.0.0.1 ${h}"`);
     console.log('    ipconfig /flushdns');
     return { ok: false, manual: true, blocked: false };
   }
@@ -112,7 +117,7 @@ export function unblockBackend() {
   if (!isBlocked()) return { already: true };
   // Remove only OUR lines, never restore wholesale — the user may have edited
   // /etc/hosts for unrelated reasons since the backup was taken.
-  const pattern = BACKEND_HOSTS.map((h) => h.replace('.', '\\.')).join('|');
+  const pattern = [...BACKEND_HOSTS, ...AGENT_HOSTS].map((h) => h.replace(/\./g, '\\.')).join('|');
   if (WIN) {
     console.log('windows: run in an ADMINISTRATOR PowerShell:');
     console.log(`  Copy-Item "${BACKUP}" "${HOSTS}" -Force; ipconfig /flushdns`);

package/lib/launch.js

@@ -65,8 +65,12 @@ export async function launchClaude(argv) {
     }
     if (!up) { console.error(`openzoo: proxy did not come up on ${base}`); process.exit(1); }
   }
-  const terminal = argv.includes('--terminal') || argv.includes('-t');
-  const rest = argv.filter((a) => a !== '--terminal' && a !== '-t');
+  // TERMINAL (Claude Code CLI) IS THE DEFAULT — it is the guaranteed-x402 path
+  // and honours ANTHROPIC_BASE_URL. --desktop explicitly opens the desktop app
+  // (which is OAuth/subscription-bound and may ignore our endpoint).
+  const wantDesktop = argv.includes('--desktop');
+  const terminal = !wantDesktop;
+  const rest = argv.filter((a) => !['--terminal', '-t', '--desktop'].includes(a));
   const env = {
     ...process.env,
     ANTHROPIC_BASE_URL: base,

package/lib/proxy.js

@@ -280,6 +280,7 @@ export async function startProxy({ silent = false, requireToken = null, sessionM
   // lines / payment receipts there corrupts that program's output (observed: the
   // Solana receipt leaking into the Claude Code CLI). When silent, route this
   // channel to a log file instead; only print to the console when we own it.
+  let paidCalls = 0;
   let sayFile = null;
   if (silent) {
     try {
@@ -611,6 +612,15 @@ export async function startProxy({ silent = false, requireToken = null, sessionM
         if (requireToken) say(`${line}  ·  session $${sessionSpent.toFixed(6)}`);
         else if (viaTunnel) say(`${line}  ·  public-url session $${tunnelSpent.toFixed(6)}`);
         else say(line);
+        // ALWAYS-ON SPEND, TUI-SAFE. When a harness owns the terminal (silent),
+        // the receipt lines go to a file (they corrupt a TUI). But the running
+        // total should still be visible — so write it to the terminal TITLE via
+        // an OSC escape, which updates the window/tab title without touching the
+        // TUI's content. `openzoo ● $0.0042 · 12 calls` in the title bar, live.
+        if (receipt.ok && typeof receipt.billedUsd === 'number') { paidCalls += 1; }
+        if (sayFile) {
+          try { process.stderr.write(`]0;openzoo ● $${sessionSpent.toFixed(4)} · ${paidCalls} call${paidCalls === 1 ? '' : 's'}`); } catch { /* no tty */ }
+        }
         scheduleRefresh(4000); // settlement lands on-chain in a few seconds
       }
       // Chat completions come back as one JSON object (settle-before-serve).

package/lib/setup.js

@@ -443,8 +443,14 @@ export async function setupEditor(which, target) {
   //
   // --no-block opts out for anyone who would rather keep the vendor catalog.
   if (target0 === 'cursor' && !process.argv.includes('--no-block')) {
-    const { blockBackend, isBlocked } = await import('./hosts.js');
-    const r = blockBackend();
+    const { blockBackend, isBlocked, BACKEND_HOSTS, AGENT_HOSTS } = await import('./hosts.js');
+    // Default: block ONLY the model-list re-sync host (safe for subbed users).
+    // Under --takeover we also block the chat-inference hosts, because only then
+    // does the impersonation backend answer their chat — blocking them otherwise
+    // just severs Cursor ("Reconnecting...").
+    const hostsToBlock = process.argv.includes('--takeover')
+      ? [...BACKEND_HOSTS, ...AGENT_HOSTS] : BACKEND_HOSTS;
+    const r = blockBackend(hostsToBlock);
     if (r.already) console.log('backend: already blocked (required for routing; npx openzoo unblock to undo)');
     else if (isBlocked()) console.log('backend: blocked -> 127.0.0.1 (this is what forces the editor onto the zoo)');
     else console.log('backend: NOT blocked — the editor will keep using its own backend and\n         nothing will reach the zoo. Re-run and enter your password.');
@@ -556,7 +562,18 @@ export async function setupEditor(which, target) {
   const args = [cwd];
   // Trust our self-signed impersonation cert without any CA install — this flag
   // is the entire reason no trust prompt is needed. Only added under --takeover.
-  if (doTakeover) args.unshift('--ignore-certificate-errors');
+  if (doTakeover) {
+    // DEFEAT DNS-OVER-HTTPS. /etc/hosts is ignored by Chromium's Secure DNS, so
+    // the agent chat connection (network-service, DoH) escaped even with every
+    // host blocked — measured: 0 backend lines on chat while api2 (renderer
+    // fetch, OS resolver) hit us fine. --host-resolver-rules overrides Chromium's
+    // resolver directly, DoH included, and takes a WILDCARD so every region /
+    // privacy variant of *.api5.cursor.sh maps to us without enumerating them.
+    args.unshift(
+      '--ignore-certificate-errors',
+      '--host-resolver-rules=MAP api2.cursor.sh 127.0.0.1,MAP *.api5.cursor.sh 127.0.0.1',
+    );
+  }
   if (useProfile) {
     fs.mkdirSync(PROFILE_DIR, { recursive: true });
     args.unshift(`--user-data-dir=${PROFILE_DIR}`, `--extensions-dir=${path.join(PROFILE_DIR, 'extensions')}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.32.3",
+  "version": "0.33.1",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",