openzoo 0.30.3 → 0.30.4

package/lib/cursorcfg.js

@@ -306,3 +306,31 @@ export function unpinEditorProviderConfig(which) {
   try { sqlite(db, 'DROP TRIGGER IF EXISTS openzoo_pin;'); return { unpinned: true }; }
   catch (e) { return { error: e.message }; }
 }
+
+/**
+ * Force the CACHED membership the editor stores in its own auth table to an
+ * entitled value. MEASURED: the working (ultra) machine held
+ * `cursorAuth/stripeMembershipType = "ultra"` right here in ItemTable, the free
+ * machine held "free" — and the model-selection gate reads this cached value,
+ * NOT the api2 responses (which we already answer entitled, to no effect). The
+ * api2 impersonation's job is then to stop the editor RE-SYNCING this back to
+ * free on the next focus. Best-effort; returns what it set.
+ */
+export function forceMembership(which, type = 'pro') {
+  const db = storagePath(which);
+  if (!db || !fs.existsSync(db)) return { error: 'no editor db' };
+  try { execFileSync('sqlite3', ['-version'], { stdio: 'ignore' }); } catch { return { error: 'sqlite3 not available' }; }
+  const q = (k) => `'${String(k).replace(/'/g, "''")}'`;
+  const set = (key, val) => {
+    // These auth values are stored as raw JSON strings (quoted), e.g. "ultra".
+    const json = JSON.stringify(String(val));
+    sqlite(db, `INSERT INTO ItemTable(key,value) VALUES(${q(key)},${q(json)}) `
+      + `ON CONFLICT(key) DO UPDATE SET value=${q(json)};`);
+  };
+  try {
+    set('cursorAuth/stripeMembershipType', type);
+    set('cursorAuth/stripeSubscriptionStatus', 'active');
+    const got = sqlite(db, `SELECT value FROM ItemTable WHERE key='cursorAuth/stripeMembershipType';`).trim();
+    return { set: type, verified: got };
+  } catch (e) { return { error: e.message }; }
+}

package/lib/setup.js

@@ -22,7 +22,7 @@ import { spawn } from 'node:child_process';
 import { config } from './config.js';
 import {
   writeEditorProviderConfig, editorRunning, quitEditor,
-  pinEditorProviderConfig, unpinEditorProviderConfig,
+  pinEditorProviderConfig, unpinEditorProviderConfig, forceMembership,
 } from './cursorcfg.js';
 
 /**
@@ -503,6 +503,14 @@ export async function setupEditor(which, target) {
             + '          The 443->8443 redirect is not delivering (pfctl/loopback). Tell me and I switch to a root-bound 443.');
       } catch (e) { console.log(`takeover: self-test error (${e.message})`); }
 
+      // WRITE THE CACHED MEMBERSHIP the model-gate actually reads (measured: the
+      // ultra machine held "ultra" here; api2 responses alone did not move the
+      // gate). The impersonation keeps it from re-syncing back to free.
+      try {
+        const fm = forceMembership(target0, process.env.OPENZOO_MEMBERSHIP || 'pro');
+        console.log(fm.error ? `takeover: membership write skipped (${fm.error})`
+          : `takeover: cached membership -> ${fm.verified} (was gating model selection)`);
+      } catch (e) { console.log(`takeover: membership write failed (${e.message})`); }
       console.log('takeover: launching with --ignore-certificate-errors so the self-signed cert is trusted (no CA install)');
     } catch (e) {
       console.log(`takeover: failed to start (${e.message}) — falling back to plain routing`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.30.3",
+  "version": "0.30.4",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",