openzoo 0.21.4 → 0.21.5

package/lib/setup.js

@@ -203,7 +203,7 @@ export async function setupEditor(which, target) {
     // does not, we say so plainly and still launch.
     if (!publicUrl) {
       process.stdout.write('waiting for the public tunnel');
-      for (let i = 0; i < 60 && !started?.publicUrl; i++) {     // up to 30s
+      for (let i = 0; i < 180 && !started?.publicUrl; i++) {    // up to 90s
         await new Promise((r) => setTimeout(r, 500));
         if (i % 4 === 3) process.stdout.write('.');
       }
@@ -212,9 +212,7 @@ export async function setupEditor(which, target) {
       tunnelKey = started?.tunnelToken ?? tunnelKey;
     }
     if (publicUrl) console.log(`tunnel:  ${publicUrl}/v1   api_key ${tunnelKey}`);
-    else console.log('tunnel:  did not come up in 30s — launching anyway on localhost;\n'
-      + '         the editor will say "Access to private networks is forbidden"\n'
-      + '         until you re-run this command.');
+    else console.log('tunnel:  did not come up in 90s.');
   } else {
     console.log(`proxy already running on ${base}`);
     // A proxy someone else started owns the tunnel; ask it for the public URL.
@@ -227,8 +225,13 @@ export async function setupEditor(which, target) {
   }
   // What the EDITOR is configured with. Localhost only as a last resort, and
   // said out loud, because it will fail with the private-networks error.
-  const editorBase = publicUrl ? `${publicUrl}/v1` : base;
-  if (!publicUrl) console.log('settings: falling back to localhost — expect "Access to private networks is forbidden"');
+  // NEVER WRITE LOCALHOST INTO THE EDITOR. Its server makes the request, so a
+  // private address is unreachable from there and every call returns "Access to
+  // private networks is forbidden". Writing it anyway does not degrade
+  // gracefully — it overwrites a config that may have been working with one
+  // that provably cannot. With no tunnel we leave the existing settings alone
+  // and say why.
+  const editorBase = publicUrl ? `${publicUrl}/v1` : null;
 
   // 2. ENV INTO THE EDITOR. Both vendor shapes, so an OpenAI-compatible pane
   //    and an Anthropic-shaped one (Claude Code extension) both route here.
@@ -256,6 +259,12 @@ export async function setupEditor(which, target) {
   // globalStorage sqlite — not an encrypted store, as previously assumed — so
   // the "paste four things into Settings" ritual is unnecessary. Must happen
   // while the editor is CLOSED or it rewrites them from memory on exit.
+  if (!editorBase) {
+    console.log('settings: NOT touched — a tunnel is required for the editor path and none came up.');
+    console.log('          (localhost cannot work here: the editor calls the endpoint from ITS server,');
+    console.log('           which answers "Access to private networks is forbidden".)');
+    console.log('          your previous settings are left as they were — re-run when the network settles.');
+  }
   const picked0 = pickEditor(which);
   const target0 = picked0?.which || which || 'cursor';
   // Quit it FOR the user — a running editor reverts our write on exit.
@@ -266,7 +275,9 @@ export async function setupEditor(which, target) {
   }
   const models = await catalogModels(base);
   let wrote = null;
-  try { wrote = writeEditorProviderConfig(target0, { baseUrl: editorBase, models, apiKey: tunnelKey }); } catch (e) { wrote = { error: e.message }; }
+  if (editorBase) {
+    try { wrote = writeEditorProviderConfig(target0, { baseUrl: editorBase, models, apiKey: tunnelKey }); } catch (e) { wrote = { error: e.message }; }
+  }
   if (wrote?.error) {
     console.log(`settings: could not write automatically (${wrote.error}) — set them in Settings → Models`);
   } else if (wrote) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.21.4",
+  "version": "0.21.5",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",