openzoo 0.18.4 → 0.18.5

package/lib/cursorcfg.js

@@ -149,3 +149,51 @@ export function writeEditorProviderConfig(which, { baseUrl, models }) {
   const modelsStick = models.every((m) => verified.models.includes(m));
   return { db, before, baseUrl, added, verified, modelsStick };
 }
+
+/**
+ * PIN the settings with a SQLite trigger so the editor cannot revert them.
+ *
+ * Cursor treats the model list and selection as SERVER-authoritative: it syncs
+ * them from the account on every launch and overwrites local state. Measured
+ * three times — written and verified while closed, then availableAPIKeyModels
+ * [] and composer.defaultModel "default" again after relaunch.
+ *
+ * Making the whole state.vscdb read-only would break the editor (it stores
+ * window layout, history, everything there). A trigger is surgical: Cursor
+ * keeps full write access, and only OUR fields are re-applied, on any write
+ * that clobbers them. Removable with unpinEditorProviderConfig.
+ */
+export function pinEditorProviderConfig(which, { baseUrl, models }) {
+  const db = storagePath(which);
+  if (!fs.existsSync(db)) return null;
+  const esc = (v) => String(v).replace(/'/g, "''");
+  const modelJson = esc(JSON.stringify(models.map((m) => ({ name: m, defaultOn: true, supportsAgent: true }))));
+  const primary = esc(models[0]);
+  const base = esc(baseUrl);
+  const sql = `
+DROP TRIGGER IF EXISTS openzoo_pin;
+CREATE TRIGGER openzoo_pin AFTER UPDATE ON ItemTable
+WHEN NEW.key = '${KEY}'
+ AND (json_extract(NEW.value,'$.openAIBaseUrl') IS NOT '${base}'
+   OR json_extract(NEW.value,'$.featureModelConfigs.composer.defaultModel') IS NOT '${primary}')
+BEGIN
+  UPDATE ItemTable SET value = json_set(
+      NEW.value,
+      '$.openAIBaseUrl', '${base}',
+      '$.useOpenAIKey', json('true'),
+      '$.availableAPIKeyModels', json('${modelJson}'),
+      '$.featureModelConfigs.composer.defaultModel', '${primary}',
+      '$.featureModelConfigs.cmdK.defaultModel', '${primary}'
+  ) WHERE key = NEW.key;
+END;`;
+  try { sqlite(db, sql); } catch (e) { return { error: e.message }; }
+  return { pinned: true, db };
+}
+
+/** Remove the pin — the editor goes back to managing its own settings. */
+export function unpinEditorProviderConfig(which) {
+  const db = storagePath(which);
+  if (!fs.existsSync(db)) return null;
+  try { sqlite(db, 'DROP TRIGGER IF EXISTS openzoo_pin;'); return { unpinned: true }; }
+  catch (e) { return { error: e.message }; }
+}

package/lib/setup.js

@@ -20,7 +20,7 @@ import os from 'node:os';
 import path from 'node:path';
 import { spawn } from 'node:child_process';
 import { config } from './config.js';
-import { writeEditorProviderConfig, editorRunning, quitEditor } from './cursorcfg.js';
+import { writeEditorProviderConfig, editorRunning, quitEditor, pinEditorProviderConfig } from './cursorcfg.js';
 
 const DEFAULT_MODELS = ['anthropic/claude-opus-5', 'deepseek/deepseek-v4-pro-0813'];
 
@@ -183,21 +183,15 @@ export async function setupEditor(which, target) {
   } else if (wrote) {
     console.log(`settings: openAIBaseUrl -> ${wrote.verified?.openAIBaseUrl || base}`);
     console.log('          useOpenAIKey  -> true');
-    // Cursor syncs availableAPIKeyModels + featureModelConfigs from its ACCOUNT
-    // on every launch and overwrites whatever is on disk — measured: written
-    // and verified while closed (modelsStick true, selected set), then [] and
-    // "default" again after relaunch. Only openAIBaseUrl survives. So we no
-    // longer pretend the model was configured; the base URL is done for you and
-    // the model is a genuine one-time UI action.
-    console.log('');
-    console.log(`  DONE for you:  base URL -> ${base}, key -> sk-openzoo`);
-    console.log('  ONE-TIME (Cursor syncs models from your account, so this cannot be scripted):');
-    console.log('    Settings -> Models -> + Add model');
-    console.log(`      ${models[0]}`);
-    console.log('    then select it in the chat model dropdown.');
-    console.log('    Built-in models and "Auto" route to Cursor\'s backend, never here.');
-    console.log('  Verify it worked: send one message and watch this terminal for a');
-    console.log('    "paid $0.0… · rail solana · tx …" line. No line = it did not route.');
+    // PIN so the editor's account-sync cannot revert it on launch.
+    const pin = pinEditorProviderConfig(target0, { baseUrl: base, models });
+    console.log(`          models        -> ${models.join(', ')}`);
+    console.log(`          selected      -> ${models[0]}`);
+    console.log(pin?.pinned
+      ? '          pinned        -> yes (the editor re-syncs these from its account; a DB trigger re-applies them)'
+      : `          pinned        -> NO (${pin?.error || 'unavailable'}) — the editor may revert these on launch`);
+    console.log('  verify: send one message, watch for "paid $0.0… · rail solana · tx …" here.');
+  }
 
   // 3. LAUNCH with that env. Editor resolved platform-agnostically; Cursor
   //    wins when both are installed.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.18.4",
+  "version": "0.18.5",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",