openzoo 0.20.2 → 0.20.4

package/bin/openzoo.js

@@ -12,11 +12,16 @@ usage:
                                a missing dir is created)
                               --profile  use an isolated editor profile the
                                          vendor account cannot re-sync over
+                              (also points cursor's own backend at 127.0.0.1 in
+                               the hosts file so it cannot re-sync over your model
+                               list or route inference around the proxy — asks for
+                               your password; --no-block skips it)
   npx openzoo vscode [path]   same, for VS Code
   npx openzoo editor [path]   whichever is installed (Cursor wins if both)
   npx openzoo launch <cmd> [args]   launch a TERMINAL Messages API client
                                     (claude, aider...) already pointed at the zoo
   npx openzoo mcp        stdio MCP server (tools: zoo_ask, zoo_bind, zoo_models, zoo_wallet, zoo_contexts)
+  npx openzoo unblock    restore the editor's own backend in the hosts file
   npx openzoo tunnel     public-url-only mode (everything key-gated, no keyless localhost)
   npx openzoo demo       ~1M-token needle demo: direct refuses, the zoo answers
                          (run it twice — the second run reuses the bound corpus and is near-free)
@@ -70,6 +75,12 @@ async function main() {
       await (await import('../lib/launch.js')).launchHarness(harness, hargs);
       break;
     }
+    case 'unblock': {
+      const { unblockBackend, isBlocked } = await import('../lib/hosts.js');
+      const r = unblockBackend();
+      console.log(r.already ? 'not blocked — nothing to undo' : (isBlocked() ? 'still blocked (sudo declined?)' : 'restored: the editor can reach its own backend again'));
+      break;
+    }
     case 'tunnel':
       await (await import('../lib/tunnel.js')).runTunnel();
       break;

package/lib/hosts.js

@@ -0,0 +1,111 @@
+/**
+ * Force the editor off its own backend by blackholing it in /etc/hosts.
+ *
+ * WHY THIS IS NEEDED: Cursor renders its model picker from IN-MEMORY state that
+ * it re-syncs from `api2.cursor.sh` on window focus. Writing the database is not
+ * enough — measured, the DB held 413 openzoo models and the correct selection
+ * while the UI showed none, because the sync repainted memory a moment later.
+ * The same host is `bcProxyUrl`, the route Cursor's own inference takes, so
+ * while it is reachable the editor will always prefer it over a custom endpoint.
+ *
+ * Pointing it at 127.0.0.1 makes that path fail, leaving the configured OpenAI
+ * base URL as the only way out.
+ *
+ * COLLATERAL, STATED PLAINLY: that host also carries auth and usage reporting.
+ * The editor may report being signed out or degraded. This is a system-wide
+ * change needing a password, so it always backs up the hosts file first and
+ * `npx openzoo unblock` restores it. `--no-block` skips it entirely.
+ */
+import fs from 'node:fs';
+import { execFileSync, spawnSync } from 'node:child_process';
+
+/**
+ * Hosts-file location and the privilege/flush mechanics differ per platform:
+ *   macOS   /etc/hosts          sudo   + dscacheutil/mDNSResponder
+ *   Linux   /etc/hosts          sudo   + systemd-resolve or nscd (best effort)
+ *   Windows %SystemRoot%\\System32\\drivers\\etc\\hosts, needs an ELEVATED shell
+ * Everything below branches on that rather than assuming macOS.
+ */
+const WIN = process.platform === 'win32';
+const HOSTS = WIN
+  ? `${process.env.SystemRoot || 'C:\\Windows'}\\System32\\drivers\\etc\\hosts`
+  : '/etc/hosts';
+const BACKUP = `${HOSTS}.openzoo-backup`;
+const MARK = '# openzoo: force the editor onto the local proxy';
+
+/** Hosts the editor uses for model sync + its own inference proxy. */
+export const BACKEND_HOSTS = ['api2.cursor.sh'];
+
+export function isBlocked() {
+  try {
+    const txt = fs.readFileSync(HOSTS, 'utf8');
+    return BACKEND_HOSTS.every((h) => new RegExp(`^\\s*127\\.0\\.0\\.1\\s+${h.replace('.', '\\.')}`, 'm').test(txt));
+  } catch { return false; }
+}
+
+/**
+ * Run a privileged command. On unix sudo prompts in the user's own terminal;
+ * on Windows we cannot elevate from here, so we return false and the caller
+ * prints the line to run in an Administrator shell.
+ */
+function privileged(unixLine) {
+  if (WIN) return false;
+  const r = spawnSync('sudo', ['sh', '-c', unixLine], { stdio: 'inherit' });
+  return r.status === 0;
+}
+
+/** Flush the OS resolver cache, best effort, per platform. */
+function flushDnsCmd() {
+  if (process.platform === 'darwin') {
+    return 'dscacheutil -flushcache 2>/dev/null; killall -HUP mDNSResponder 2>/dev/null; true';
+  }
+  // Linux: whichever of these exists; none is fatal.
+  return 'resolvectl flush-caches 2>/dev/null || systemd-resolve --flush-caches 2>/dev/null'
+    + ' || service nscd restart 2>/dev/null; true';
+}
+
+export function blockBackend() {
+  if (isBlocked()) return { already: true };
+  const entries = BACKEND_HOSTS.map((h) => `127.0.0.1 ${h}`).join('\\n');
+  console.log('');
+  console.log('blocking the editor\'s backend so it cannot re-sync over your model list.');
+  console.log(`  hosts   : ${BACKEND_HOSTS.join(', ')} -> 127.0.0.1`);
+  console.log(`  backup  : ${BACKUP}`);
+  console.log('  NOTE    : that host also carries the editor\'s auth/usage — it may report');
+  console.log('            being signed out. Undo any time with: npx openzoo unblock');
+  console.log('            skip this next time with: --no-block');
+  console.log('  sudo will ask for your password now.');
+  if (WIN) {
+    console.log('  windows: run this in an ADMINISTRATOR PowerShell, then relaunch:');
+    console.log(`    Copy-Item "${HOSTS}" "${BACKUP}" -ErrorAction SilentlyContinue`);
+    for (const h of BACKEND_HOSTS) console.log(`    Add-Content "${HOSTS}" "127.0.0.1 ${h}"`);
+    console.log('    ipconfig /flushdns');
+    return { ok: false, manual: true, blocked: false };
+  }
+  const ok = privileged(
+    `cp -n ${HOSTS} ${BACKUP} 2>/dev/null; `
+    + `printf '\\n${MARK}\\n${entries}\\n' >> ${HOSTS}; `
+    + flushDnsCmd(),
+  );
+  return { ok, blocked: isBlocked() };
+}
+
+export function unblockBackend() {
+  if (!isBlocked()) return { already: true };
+  // Remove only OUR lines, never restore wholesale — the user may have edited
+  // /etc/hosts for unrelated reasons since the backup was taken.
+  const pattern = BACKEND_HOSTS.map((h) => h.replace('.', '\\.')).join('|');
+  if (WIN) {
+    console.log('windows: run in an ADMINISTRATOR PowerShell:');
+    console.log(`  Copy-Item "${BACKUP}" "${HOSTS}" -Force; ipconfig /flushdns`);
+    return { ok: false, manual: true };
+  }
+  // BSD sed (macOS) needs -i ''; GNU sed (linux) must NOT have it. Use a temp
+  // file instead so one command is correct on both.
+  const re = `/^[[:space:]]*127\\.0\\.0\\.1[[:space:]]+(${pattern})[[:space:]]*$/d; /openzoo: force the editor/d`;
+  const ok = privileged(
+    `sed -E '${re}' ${HOSTS} > ${HOSTS}.oztmp && cat ${HOSTS}.oztmp > ${HOSTS} && rm -f ${HOSTS}.oztmp; `
+    + flushDnsCmd(),
+  );
+  return { ok, blocked: isBlocked() };
+}

package/lib/setup.js

@@ -246,6 +246,19 @@ export async function setupEditor(which, target) {
     console.log('  verify: send one message, watch for "paid $0.0… · rail solana · tx …" here.');
   }
 
+  // 2b. THE BACKEND BLOCK. Pinning the database is not sufficient on its own:
+  //     the editor re-syncs its model list from its own backend into MEMORY on
+  //     window focus and repaints the picker empty, and that same host is the
+  //     route its own inference takes. Blackholing it in the hosts file is what
+  //     leaves the configured base URL as the only way out. System-wide and
+  //     needs a password, so it is opt-in and reversible.
+  if (target0 === 'cursor' && !process.argv.includes('--no-block')) {
+    const { blockBackend, isBlocked } = await import('./hosts.js');
+    const r = blockBackend();
+    if (r.already) console.log('backend: already blocked (npx openzoo unblock to restore)');
+    else console.log(`backend: ${isBlocked() ? 'blocked -> 127.0.0.1' : 'NOT blocked — the editor will re-sync over your model list'}`);
+  }
+
   // 3. LAUNCH with that env. Editor resolved platform-agnostically; Cursor
   //    wins when both are installed.
   // Open the directory you ran this from, or the one you named. The earlier

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.20.2",
+  "version": "0.20.4",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",