openzoo 0.18.4 → 0.18.6

package/bin/openzoo.js

@@ -8,6 +8,8 @@ usage:
                          public HTTPS url for cloud IDEs (key required, printed at start)
   npx openzoo cursor [path]   start proxy+tunnel, write MCP config, and LAUNCH
                               Cursor already pointed at the zoo (env inherited)
+                              --profile  use an isolated editor profile the
+                                         vendor account cannot re-sync over
   npx openzoo vscode [path]   same, for VS Code
   npx openzoo editor [path]   whichever is installed (Cursor wins if both)
   npx openzoo launch <cmd> [args]   launch a TERMINAL Messages API client

package/lib/cursorcfg.js

@@ -149,3 +149,51 @@ export function writeEditorProviderConfig(which, { baseUrl, models }) {
   const modelsStick = models.every((m) => verified.models.includes(m));
   return { db, before, baseUrl, added, verified, modelsStick };
 }
+
+/**
+ * PIN the settings with a SQLite trigger so the editor cannot revert them.
+ *
+ * Cursor treats the model list and selection as SERVER-authoritative: it syncs
+ * them from the account on every launch and overwrites local state. Measured
+ * three times — written and verified while closed, then availableAPIKeyModels
+ * [] and composer.defaultModel "default" again after relaunch.
+ *
+ * Making the whole state.vscdb read-only would break the editor (it stores
+ * window layout, history, everything there). A trigger is surgical: Cursor
+ * keeps full write access, and only OUR fields are re-applied, on any write
+ * that clobbers them. Removable with unpinEditorProviderConfig.
+ */
+export function pinEditorProviderConfig(which, { baseUrl, models }) {
+  const db = storagePath(which);
+  if (!fs.existsSync(db)) return null;
+  const esc = (v) => String(v).replace(/'/g, "''");
+  const modelJson = esc(JSON.stringify(models.map((m) => ({ name: m, defaultOn: true, supportsAgent: true }))));
+  const primary = esc(models[0]);
+  const base = esc(baseUrl);
+  const sql = `
+DROP TRIGGER IF EXISTS openzoo_pin;
+CREATE TRIGGER openzoo_pin AFTER UPDATE ON ItemTable
+WHEN NEW.key = '${KEY}'
+ AND (json_extract(NEW.value,'$.openAIBaseUrl') IS NOT '${base}'
+   OR json_extract(NEW.value,'$.featureModelConfigs.composer.defaultModel') IS NOT '${primary}')
+BEGIN
+  UPDATE ItemTable SET value = json_set(
+      NEW.value,
+      '$.openAIBaseUrl', '${base}',
+      '$.useOpenAIKey', json('true'),
+      '$.availableAPIKeyModels', json('${modelJson}'),
+      '$.featureModelConfigs.composer.defaultModel', '${primary}',
+      '$.featureModelConfigs.cmdK.defaultModel', '${primary}'
+  ) WHERE key = NEW.key;
+END;`;
+  try { sqlite(db, sql); } catch (e) { return { error: e.message }; }
+  return { pinned: true, db };
+}
+
+/** Remove the pin — the editor goes back to managing its own settings. */
+export function unpinEditorProviderConfig(which) {
+  const db = storagePath(which);
+  if (!fs.existsSync(db)) return null;
+  try { sqlite(db, 'DROP TRIGGER IF EXISTS openzoo_pin;'); return { unpinned: true }; }
+  catch (e) { return { error: e.message }; }
+}

package/lib/setup.js

@@ -20,10 +20,23 @@ import os from 'node:os';
 import path from 'node:path';
 import { spawn } from 'node:child_process';
 import { config } from './config.js';
-import { writeEditorProviderConfig, editorRunning, quitEditor } from './cursorcfg.js';
+import { writeEditorProviderConfig, editorRunning, quitEditor, pinEditorProviderConfig } from './cursorcfg.js';
 
 const DEFAULT_MODELS = ['anthropic/claude-opus-5', 'deepseek/deepseek-v4-pro-0813'];
 
+/**
+ * An ISOLATED editor profile we own.
+ *
+ * The editor's normal profile syncs provider settings from the vendor account
+ * and overwrites local state on launch — measured repeatedly. `--user-data-dir`
+ * gives it a profile directory we control, so our settings are the only ones
+ * there and nothing upstream reclaims them. Opt in with OPENZOO_PROFILE=1 (or
+ * --profile) because a fresh profile means signing in again and re-adding
+ * extensions; that is a real cost, not a detail to spring on someone.
+ */
+const PROFILE_DIR = process.env.OPENZOO_PROFILE_DIR
+  || path.join(os.homedir(), '.openzoo', 'editor-profile');
+
 const MCP_FILES = {
   cursor: path.join(os.homedir(), '.cursor', 'mcp.json'),
   vscode: path.join(os.homedir(), '.vscode', 'mcp.json'),
@@ -183,21 +196,15 @@ export async function setupEditor(which, target) {
   } else if (wrote) {
     console.log(`settings: openAIBaseUrl -> ${wrote.verified?.openAIBaseUrl || base}`);
     console.log('          useOpenAIKey  -> true');
-    // Cursor syncs availableAPIKeyModels + featureModelConfigs from its ACCOUNT
-    // on every launch and overwrites whatever is on disk — measured: written
-    // and verified while closed (modelsStick true, selected set), then [] and
-    // "default" again after relaunch. Only openAIBaseUrl survives. So we no
-    // longer pretend the model was configured; the base URL is done for you and
-    // the model is a genuine one-time UI action.
-    console.log('');
-    console.log(`  DONE for you:  base URL -> ${base}, key -> sk-openzoo`);
-    console.log('  ONE-TIME (Cursor syncs models from your account, so this cannot be scripted):');
-    console.log('    Settings -> Models -> + Add model');
-    console.log(`      ${models[0]}`);
-    console.log('    then select it in the chat model dropdown.');
-    console.log('    Built-in models and "Auto" route to Cursor\'s backend, never here.');
-    console.log('  Verify it worked: send one message and watch this terminal for a');
-    console.log('    "paid $0.0… · rail solana · tx …" line. No line = it did not route.');
+    // PIN so the editor's account-sync cannot revert it on launch.
+    const pin = pinEditorProviderConfig(target0, { baseUrl: base, models });
+    console.log(`          models        -> ${models.join(', ')}`);
+    console.log(`          selected      -> ${models[0]}`);
+    console.log(pin?.pinned
+      ? '          pinned        -> yes (the editor re-syncs these from its account; a DB trigger re-applies them)'
+      : `          pinned        -> NO (${pin?.error || 'unavailable'}) — the editor may revert these on launch`);
+    console.log('  verify: send one message, watch for "paid $0.0… · rail solana · tx …" here.');
+  }
 
   // 3. LAUNCH with that env. Editor resolved platform-agnostically; Cursor
   //    wins when both are installed.
@@ -208,8 +215,16 @@ export async function setupEditor(which, target) {
     console.error(`(config is written either way: ${mcpFile})`);
     return;
   }
-  console.log(`launching ${picked.which}...`);
-  const child = spawn(picked.cmd, [cwd], { stdio: 'ignore', env, detached: true });
+  const useProfile = process.env.OPENZOO_PROFILE === '1' || process.argv.includes('--profile');
+  const args = [cwd];
+  if (useProfile) {
+    fs.mkdirSync(PROFILE_DIR, { recursive: true });
+    args.unshift(`--user-data-dir=${PROFILE_DIR}`, `--extensions-dir=${path.join(PROFILE_DIR, 'extensions')}`);
+    console.log(`profile: ${PROFILE_DIR}  (isolated — vendor account sync cannot reclaim these settings)`);
+    console.log('         first run in this profile asks you to sign in; extensions are separate.');
+  }
+  console.log(`launching ${picked.which}${useProfile ? ' (isolated profile)' : ''}...`);
+  const child = spawn(picked.cmd, args, { stdio: 'ignore', env, detached: true });
   child.on('error', (e) => {
     console.error(`could not launch ${picked.which}: ${e.message}`);
   });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.18.4",
+  "version": "0.18.6",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",