openzoo 0.34.5 → 0.34.6

package/bin/cursor-backend.js

@@ -31,5 +31,19 @@ let models = [];
 try { models = JSON.parse(fs.readFileSync(modelsPath, 'utf8')); }
 catch (e) { log(`cursor-backend: could not read models (${e.message})`); process.exit(1); }
 
+// NEVER LET ONE BAD REQUEST KILL THE SERVER. The h2 header bug threw out of an
+// async handler, which is an unhandled rejection / uncaught throw at process
+// level — node tore the whole backend down mid-request, so :443 went dead and
+// every later attempt logged ECONNRESET with no listener behind it. This is a
+// static impersonation server; staying up while logging the fault is always
+// better than exiting and blackholing the host the app depends on.
+process.on('uncaughtException', (e) => {
+  log(`cursor-backend: UNCAUGHT ${e && e.code ? e.code + ' ' : ''}${e && e.message}`);
+  if (e && e.stack) log(String(e.stack).split('\n').slice(1, 4).join('\n'));
+});
+process.on('unhandledRejection', (e) => {
+  log(`cursor-backend: UNHANDLED REJECTION ${e && e.message ? e.message : e}`);
+});
+
 startCursorBackend({ port, models, log });
 log(`cursor-backend: standalone up on :${port} (${models.length} models)`);

package/lib/cursorbackend.js

@@ -305,7 +305,21 @@ export function startCursorBackend({ port = 8443, models, log = () => {} } = {})
           });
           const buf = Buffer.from(await up.arrayBuffer());
           const h = { ...CORS };
-          up.headers.forEach((v, k) => { if (!['content-encoding', 'transfer-encoding', 'connection'].includes(k)) h[k] = v; });
+          // STRIP EVERY CONNECTION-SPECIFIC HEADER, NOT JUST `connection`.
+          // RFC 7540 §8.1.2.2 bans all of these on HTTP/2, and Node enforces it
+          // by THROWING ERR_HTTP2_INVALID_CONNECTION_HEADERS out of writeHead.
+          // The local proxy answers with `keep-alive`, which sailed past a
+          // denylist that only knew about `connection` — so the very first
+          // desktop request killed the whole backend process (uncaught, since
+          // this is inside the async handler), and every later attempt got
+          // ECONNRESET with nothing listening. Content-length goes too: the
+          // body was re-buffered, so let Node recompute it.
+          const HOP_BY_HOP = new Set([
+            'connection', 'keep-alive', 'upgrade', 'proxy-connection',
+            'transfer-encoding', 'te', 'trailer', 'proxy-authenticate',
+            'proxy-authorization', 'content-encoding', 'content-length',
+          ]);
+          up.headers.forEach((v, k) => { if (!HOP_BY_HOP.has(k.toLowerCase())) h[k] = v; });
           res.writeHead(up.status, h);
           res.end(buf);
           log(`cursor-backend: #${conns} ${req.method} ${full}  ANTHROPIC -> proxy (${up.status}, ${buf.length}b)`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.34.5",
+  "version": "0.34.6",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",