openzoo 0.30.3 → 0.30.5

package/lib/cursorcfg.js

@@ -144,6 +144,14 @@ export function writeEditorProviderConfig(which, { baseUrl, models }) {
   const before = { openAIBaseUrl: doc.openAIBaseUrl, models: (doc.availableAPIKeyModels || []).length };
   doc.openAIBaseUrl = baseUrl;
   doc.useOpenAIKey = true;
+  // THE MODEL-SELECTION GATE READS MEMBERSHIP FROM RIGHT HERE. Traced in the
+  // bundle: membershipType(){ return this.reactiveStorageService
+  // .applicationUserPersistentStorage.membershipType } — i.e. THIS blob, not
+  // cursorAuth/stripeMembershipType. Setting it entitles model selection; the
+  // api2 impersonation keeps the editor from re-syncing it back to free.
+  // OPENZOO_MEMBERSHIP overrides (pro | pro_plus | enterprise | ultra).
+  doc.membershipType = process.env.OPENZOO_MEMBERSHIP || 'pro';
+  doc.subscriptionStatus = 'active';
   // Merge, don't clobber: a user may have their own custom models listed.
   const existing = Array.isArray(doc.availableAPIKeyModels) ? doc.availableAPIKeyModels : [];
   const names = new Set(existing.map((m) => (typeof m === 'string' ? m : m?.name)).filter(Boolean));
@@ -257,6 +265,7 @@ export function writeEditorProviderConfig(which, { baseUrl, models }) {
  * that clobbers them. Removable with unpinEditorProviderConfig.
  */
 export function pinEditorProviderConfig(which, { baseUrl, models }) {
+  const mem = process.env.OPENZOO_MEMBERSHIP || 'pro';
   const db = storagePath(which);
   if (!fs.existsSync(db)) return null;
   const esc = (v) => String(v).replace(/'/g, "''");
@@ -283,7 +292,8 @@ CREATE TRIGGER openzoo_pin AFTER UPDATE ON ItemTable
 WHEN NEW.key = '${KEY}'
  AND (json_extract(NEW.value,'$.openAIBaseUrl') IS NOT '${base}'
    OR json_extract(NEW.value,'$.featureModelConfigs.composer.defaultModel') IS NOT '${primary}'
-   OR json_array_length(json_extract(NEW.value,'$.availableDefaultModels2')) IS NOT ${models.length})
+   OR json_array_length(json_extract(NEW.value,'$.availableDefaultModels2')) IS NOT ${models.length}
+   OR json_extract(NEW.value,'$.membershipType') IS NOT '${mem}')
 BEGIN
   UPDATE ItemTable SET value = json_set(
       NEW.value,
@@ -292,7 +302,9 @@ BEGIN
       '$.availableAPIKeyModels', json('${modelJson}'),
       '$.availableDefaultModels2', json('${uiJson}'),
       '$.featureModelConfigs.composer.defaultModel', '${primary}',
-      '$.featureModelConfigs.cmdK.defaultModel', '${primary}'
+      '$.featureModelConfigs.cmdK.defaultModel', '${primary}',
+      '$.membershipType', '${mem}',
+      '$.subscriptionStatus', 'active'
   ) WHERE key = NEW.key;
 END;`;
   try { sqlite(db, sql); } catch (e) { return { error: e.message }; }
@@ -306,3 +318,31 @@ export function unpinEditorProviderConfig(which) {
   try { sqlite(db, 'DROP TRIGGER IF EXISTS openzoo_pin;'); return { unpinned: true }; }
   catch (e) { return { error: e.message }; }
 }
+
+/**
+ * Force the CACHED membership the editor stores in its own auth table to an
+ * entitled value. MEASURED: the working (ultra) machine held
+ * `cursorAuth/stripeMembershipType = "ultra"` right here in ItemTable, the free
+ * machine held "free" — and the model-selection gate reads this cached value,
+ * NOT the api2 responses (which we already answer entitled, to no effect). The
+ * api2 impersonation's job is then to stop the editor RE-SYNCING this back to
+ * free on the next focus. Best-effort; returns what it set.
+ */
+export function forceMembership(which, type = 'pro') {
+  const db = storagePath(which);
+  if (!db || !fs.existsSync(db)) return { error: 'no editor db' };
+  try { execFileSync('sqlite3', ['-version'], { stdio: 'ignore' }); } catch { return { error: 'sqlite3 not available' }; }
+  const q = (k) => `'${String(k).replace(/'/g, "''")}'`;
+  const set = (key, val) => {
+    // These auth values are stored as raw JSON strings (quoted), e.g. "ultra".
+    const json = JSON.stringify(String(val));
+    sqlite(db, `INSERT INTO ItemTable(key,value) VALUES(${q(key)},${q(json)}) `
+      + `ON CONFLICT(key) DO UPDATE SET value=${q(json)};`);
+  };
+  try {
+    set('cursorAuth/stripeMembershipType', type);
+    set('cursorAuth/stripeSubscriptionStatus', 'active');
+    const got = sqlite(db, `SELECT value FROM ItemTable WHERE key='cursorAuth/stripeMembershipType';`).trim();
+    return { set: type, verified: got };
+  } catch (e) { return { error: e.message }; }
+}

package/lib/setup.js

@@ -22,7 +22,7 @@ import { spawn } from 'node:child_process';
 import { config } from './config.js';
 import {
   writeEditorProviderConfig, editorRunning, quitEditor,
-  pinEditorProviderConfig, unpinEditorProviderConfig,
+  pinEditorProviderConfig, unpinEditorProviderConfig, forceMembership,
 } from './cursorcfg.js';
 
 /**
@@ -503,6 +503,14 @@ export async function setupEditor(which, target) {
             + '          The 443->8443 redirect is not delivering (pfctl/loopback). Tell me and I switch to a root-bound 443.');
       } catch (e) { console.log(`takeover: self-test error (${e.message})`); }
 
+      // WRITE THE CACHED MEMBERSHIP the model-gate actually reads (measured: the
+      // ultra machine held "ultra" here; api2 responses alone did not move the
+      // gate). The impersonation keeps it from re-syncing back to free.
+      try {
+        const fm = forceMembership(target0, process.env.OPENZOO_MEMBERSHIP || 'pro');
+        console.log(fm.error ? `takeover: membership write skipped (${fm.error})`
+          : `takeover: cached membership -> ${fm.verified} (was gating model selection)`);
+      } catch (e) { console.log(`takeover: membership write failed (${e.message})`); }
       console.log('takeover: launching with --ignore-certificate-errors so the self-signed cert is trusted (no CA install)');
     } catch (e) {
       console.log(`takeover: failed to start (${e.message}) — falling back to plain routing`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.30.3",
+  "version": "0.30.5",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",