openzoo 0.24.0 → 0.26.0

package/bin/openzoo.js

@@ -12,10 +12,11 @@ usage:
                                a missing dir is created)
                               --profile  use an isolated editor profile the
                                          vendor account cannot re-sync over
-                              (also points cursor's own backend at 127.0.0.1 in
-                               the hosts file so it cannot re-sync over your model
-                               list or route inference around the proxy — asks for
-                               your password; --no-block skips it)
+                              --block-backend  OPT-IN: point cursor's own backend
+                                         at 127.0.0.1 so it cannot re-sync over your
+                                         model list. WARNING: that host also serves
+                                         cursor's own catalog, so the picker may show
+                                         only "Auto". Undo: npx openzoo unblock
   npx openzoo vscode [path]   same, for VS Code
   npx openzoo editor [path]   whichever is installed (Cursor wins if both)
   npx openzoo launch <cmd> [args]   launch a TERMINAL Messages API client

package/lib/setup.js

@@ -193,8 +193,48 @@ async function proxyUp(base) {
   } catch { return false; }
 }
 
+
+/** Facts about THIS run, before anything can go wrong silently. */
+async function printStartupDiagnostic(base, which) {
+  const q = (fn, dflt = '?') => { try { return fn(); } catch { return dflt; } };
+  let version = '?';
+  try {
+    const here = path.dirname(new URL(import.meta.url).pathname);
+    version = JSON.parse(fs.readFileSync(path.join(here, '..', 'package.json'), 'utf8')).version;
+  } catch { /* keep ? */ }
+
+  const picked = q(() => pickEditor(which), null);
+  let hosts = 'n/a';
+  try {
+    const { isBlocked, BACKEND_HOSTS } = await import('./hosts.js');
+    hosts = isBlocked() ? `blocked (${BACKEND_HOSTS.join(', ')})` : 'NOT blocked';
+  } catch { /* n/a */ }
+
+  const portBusy = await proxyUp(base);
+
+  console.log('openzoo diagnostic');
+  console.log(`  version    : ${version}   node ${process.version}   ${process.platform}/${process.arch}`);
+  console.log(`  port ${config.port}  : ${portBusy ? 'ALREADY SERVING (an older proxy may still be running — kill it if this build is newer)' : 'free'}`);
+  console.log(`  editor     : ${picked ? `${picked.which} @ ${picked.cmd}` : 'NONE FOUND'}`);
+  console.log(`  running    : ${picked ? (q(() => editorRunning(picked.which), false) ? 'yes — will be quit so settings stick' : 'no') : '-'}`);
+  console.log(`  backend    : ${hosts}`);
+  console.log(`  upstream   : ${config.apiBase}`);
+  const envs = ['OPENZOO_DEFAULT_MODEL', 'OPENZOO_EDITOR_MODELS', 'OPENZOO_EDITOR_MAP', 'OPENZOO_NO_LABELS', 'OPENZOO_NO_TUNNEL']
+    .filter((k) => process.env[k]).map((k) => `${k}=${process.env[k]}`);
+  if (envs.length) console.log(`  env        : ${envs.join('  ')}`);
+  console.log('');
+}
+
 export async function setupEditor(which, target) {
   const base = `http://localhost:${config.port}/v1`;
+
+  // STARTUP DIAGNOSTIC. Printed unconditionally because every hard bug tonight
+  // was invisible from the outside: a STALE BUILD writing old config (npm caches
+  // metadata and silently serves an older version), a hosts block that never
+  // applied because the sudo prompt was skipped, an editor that was still running
+  // so it clobbered the write, a tunnel that printed a URL and never served.
+  // One block up front turns each of those from a guess into a fact.
+  await printStartupDiagnostic(base, which);
   const mcpFile = addMcpServer(MCP_FILES[which] || MCP_FILES.cursor);
 
   // 1. PROXY + TUNNEL. Start in-process if nothing is listening, so the user
@@ -360,6 +400,18 @@ export async function setupEditor(which, target) {
       ? '          pinned        -> yes (the editor re-syncs these from its account; a DB trigger re-applies them)'
       : `          pinned        -> NO (${pin?.error || 'unavailable'}) — the editor may revert these on launch`);
     console.log('  verify: send one message, watch for "paid $0.0… · rail solana · tx …" here.');
+    // READ-BACK, not what we intended to write. A pin trigger or a running editor
+    // can rewrite this between the write and the launch, and that silent revert
+    // is exactly what made the editor point at a dead tunnel for hours.
+    try {
+      const back = writeEditorProviderConfig(target0, { baseUrl: editorBase, models, apiKey: tunnelKey })?.verified;
+      console.log('  db now  : baseUrl=' + (back?.openAIBaseUrl || '?'));
+      console.log('            models =' + (Array.isArray(back?.availableAPIKeyModels)
+        ? back.availableAPIKeyModels.map((m) => m.name).join(', ') : '?'));
+      if (back?.openAIBaseUrl && back.openAIBaseUrl !== editorBase) {
+        console.log('  WARNING : the database does NOT match what we wrote — something is reverting it.');
+      }
+    } catch (e) { console.log('  db now  : could not read back (' + e.message + ')'); }
   }
 
   // 2b. THE BACKEND BLOCK. Pinning the database is not sufficient on its own:
@@ -368,13 +420,30 @@ export async function setupEditor(which, target) {
   //     route its own inference takes. Blackholing it in the hosts file is what
   //     leaves the configured base URL as the only way out. System-wide and
   //     needs a password, so it is opt-in and reversible.
-  if (target0 === 'cursor' && !process.argv.includes('--no-block')) {
+  // THE BACKEND BLOCK IS NOW OPT-IN — it was doing more harm than good.
+  //
+  // Blackholing api2.cursor.sh stopped the editor re-syncing its model list over
+  // ours, which was real. But that same host serves the editor's OWN catalog and
+  // auth, so blocking it means the picker cannot populate — the symptom is a
+  // picker showing only "Auto" and every named model "unavailable". It also
+  // re-applied itself on every run, so a user who removed the line by hand got it
+  // straight back and could not tell why.
+  // Routing does not need it: the editor honours the custom base URL on its own.
+  if (target0 === 'cursor' && process.argv.includes('--block-backend')) {
     const { blockBackend, isBlocked } = await import('./hosts.js');
     const r = blockBackend();
     if (r.already) console.log('backend: already blocked (npx openzoo unblock to restore)');
-    else console.log(`backend: ${isBlocked() ? 'blocked -> 127.0.0.1' : 'NOT blocked — the editor will re-sync over your model list'}`);
+    else console.log(`backend: ${isBlocked() ? 'blocked -> 127.0.0.1' : 'NOT blocked'}`);
+  } else if (target0 === 'cursor') {
+    const { isBlocked } = await import('./hosts.js');
+    if (isBlocked()) {
+      console.log('backend: BLOCKED in /etc/hosts from an earlier run.');
+      console.log('         That stops the editor loading its own model catalog — if the picker');
+      console.log('         shows only "Auto", this is why. Undo with:  npx openzoo unblock');
+    }
   }
 
+
   // 3. LAUNCH with that env. Editor resolved platform-agnostically; Cursor
   //    wins when both are installed.
   // Open the directory you ran this from, or the one you named. The earlier

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.24.0",
+  "version": "0.26.0",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",