@antseed/cli 0.1.95 → 0.1.97

package/dist/cli/commands/network/tag-filter.js

@@ -0,0 +1,75 @@
+/**
+ * Parse a comma-separated `--tag` argument into a lowercased set. Empty or
+ * whitespace-only entries are dropped; returns an empty set for undefined
+ * input so callers can treat "no filter" and "empty filter" uniformly.
+ */
+export function parseTagFilter(raw) {
+    const out = new Set();
+    if (!raw)
+        return out;
+    for (const piece of raw.split(',')) {
+        const normalized = piece.trim().toLowerCase();
+        if (normalized.length > 0)
+            out.add(normalized);
+    }
+    return out;
+}
+/**
+ * Collect every service category tag announced by the peer, flattened across
+ * all providers and services and lowercased so comparison is case-insensitive.
+ */
+export function collectPeerTags(peer) {
+    const tags = new Set();
+    const categories = peer.providerServiceCategories;
+    if (categories) {
+        for (const providerEntry of Object.values(categories)) {
+            for (const serviceTags of Object.values(providerEntry.services)) {
+                for (const raw of serviceTags) {
+                    const normalized = raw.trim().toLowerCase();
+                    if (normalized.length > 0)
+                        tags.add(normalized);
+                }
+            }
+        }
+    }
+    return tags;
+}
+/**
+ * Collect the tags announced for a specific (provider, service) pair.
+ * Returned sorted for stable rendering.
+ */
+export function collectServiceTags(peer, providerName, serviceName) {
+    const raw = peer.providerServiceCategories?.[providerName]?.services?.[serviceName] ?? [];
+    return Array.from(new Set(raw.map((t) => t.trim().toLowerCase()).filter((t) => t.length > 0))).sort();
+}
+/**
+ * A peer matches the tag filter when *any* of its announced service tags
+ * matches *any* of the requested tags (OR semantics across both sides).
+ * An empty requested set matches every peer.
+ */
+export function peerMatchesTagFilter(peer, requestedTags) {
+    if (requestedTags.size === 0)
+        return true;
+    const peerTags = collectPeerTags(peer);
+    for (const tag of requestedTags) {
+        if (peerTags.has(tag))
+            return true;
+    }
+    return false;
+}
+/**
+ * Does this specific (provider, service) pair match the tag filter?
+ * Used by the peer detail command to hide services that don't match while
+ * keeping providers that still have at least one matching service.
+ */
+export function serviceMatchesTagFilter(peer, providerName, serviceName, requestedTags) {
+    if (requestedTags.size === 0)
+        return true;
+    const serviceTags = new Set(collectServiceTags(peer, providerName, serviceName));
+    for (const tag of requestedTags) {
+        if (serviceTags.has(tag))
+            return true;
+    }
+    return false;
+}
+//# sourceMappingURL=tag-filter.js.map

package/dist/cli/commands/network/tag-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tag-filter.js","sourceRoot":"","sources":["../../../../src/cli/commands/network/tag-filter.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,GAAuB;IACpD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,IAAI,CAAC,GAAG;QAAE,OAAO,GAAG,CAAC;IACrB,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAc;IAC5C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,yBAAyB,CAAC;IAClD,IAAI,UAAU,EAAE,CAAC;QACf,KAAK,MAAM,aAAa,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YACtD,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAChE,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;oBAC9B,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;oBAC5C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;wBAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAClD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAc,EACd,YAAoB,EACpB,WAAmB;IAEnB,MAAM,GAAG,GAAG,IAAI,CAAC,yBAAyB,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IAC1F,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACxG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAc,EAAE,aAA0B;IAC7E,IAAI,aAAa,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAc,EACd,YAAoB,EACpB,WAAmB,EACnB,aAA0B;IAE1B,IAAI,aAAa,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;IACjF,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACxC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/proxy/buyer-proxy.d.ts

@@ -49,9 +49,9 @@ export declare class BuyerProxy {
     private readonly _peerCacheTtlMs;
     private readonly _stateDir;
     private readonly _stateFile;
+    private _stateFileWatching;
     private _pinnedPeer;
     private _pinnedService;
-    private _stateFileWatcher;
     private _stateWatchDebounce;
     private _stateWriteChain;
     private _cachedPeers;
@@ -60,8 +60,6 @@ export declare class BuyerProxy {
     private _peerRefreshPromise;
     private _lastStaleCacheLogAtMs;
     private _bgRefreshHandle;
-    private _lastSuccessfulPeerId;
-    private _lastSuccessfulPeerByRouteKey;
     constructor(config: BuyerProxyConfig);
     start(): Promise<void>;
     private _hydratePeersFromStateFile;
@@ -75,9 +73,12 @@ export declare class BuyerProxy {
     private _replacePeers;
     private _persistPeersToState;
     private _evictPeer;
+    /**
+     * Stamp `lastReachedAt` on a peer after a successful request so the
+     * carry-forward heuristic can trust local transport liveness even when the
+     * DHT record grows stale. Persisted so the signal survives restarts.
+     */
     private _rememberSuccessfulPeer;
-    private _forgetSuccessfulPeer;
-    private _buildRouteKey;
     private _discoverPeersFromNetwork;
     private _refreshPeersNow;
     private _getPeers;

package/dist/proxy/buyer-proxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"buyer-proxy.d.ts","sourceRoot":"","sources":["../../src/proxy/buyer-proxy.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,WAAW,EACX,QAAQ,EAMT,MAAM,eAAe,CAAA;AA2CtB,OAAO,EAAE,8BAA8B,EAAE,KAAK,2BAA2B,EAAE,MAAM,cAAc,CAAA;AAC/F,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAEzD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,WAAW,CAAA;IACjB,6FAA6F;IAC7F,OAAO,EAAE,MAAM,CAAA;IACf,kGAAkG;IAClG,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAwHD;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,OAAO,EACf,KAAK,GAAE,MAAmB,EAC1B,QAAQ,GAAE,MAA6B,GACtC,QAAQ,EAAE,CAoDZ;AAED;;;;;;GAMG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAC9B,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAQ;IAC7C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAQ;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,WAAW,CAAe;IAClC,OAAO,CAAC,cAAc,CAAe;IACrC,OAAO,CAAC,iBAAiB,CAAyB;IAClD,OAAO,CAAC,mBAAmB,CAA6C;IAExE,OAAO,CAAC,gBAAgB,CAAmC;IAE3D,OAAO,CAAC,YAAY,CAAiB;IACrC,OAAO,CAAC,qBAAqB,CAAI;IACjC,OAAO,CAAC,mBAAmB,CAAI;IAC/B,OAAO,CAAC,mBAAmB,CAAmC;IAC9D,OAAO,CAAC,sBAAsB,CAAI;IAClC,OAAO,CAAC,gBAAgB,CAA8C;IACtE,OAAO,CAAC,qBAAqB,CAAsB;IACnD,OAAO,CAAC,6BAA6B,CAA4B;gBAErD,MAAM,EAAE,gBAAgB;IAoB9B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAqBd,0BAA0B;IAuBlC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAmB3B,OAAO,CAAC,eAAe;YAiBT,uBAAuB;IAkBrC,0FAA0F;IAC1F,OAAO,CAAC,eAAe;YAsBT,eAAe;IAe7B,OAAO,CAAC,uBAAuB;IAQ/B,OAAO,CAAC,aAAa;IAmCrB,OAAO,CAAC,oBAAoB;IAgC5B,OAAO,CAAC,UAAU;IAWlB,OAAO,CAAC,uBAAuB;IAsB/B,OAAO,CAAC,qBAAqB;IAc7B,OAAO,CAAC,cAAc;YA0BR,yBAAyB;YASzB,gBAAgB;YA+BhB,SAAS;IA2BvB,OAAO,CAAC,+BAA+B;YAuBzB,mBAAmB;YAgHnB,cAAc;IAgV5B;;;;OAIG;YACW,eAAe;CA4T9B"}
+{"version":3,"file":"buyer-proxy.d.ts","sourceRoot":"","sources":["../../src/proxy/buyer-proxy.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,WAAW,EACX,QAAQ,EAMT,MAAM,eAAe,CAAA;AAyCtB,OAAO,EAAE,8BAA8B,EAAE,KAAK,2BAA2B,EAAE,MAAM,cAAc,CAAA;AAC/F,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAEzD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,WAAW,CAAA;IACjB,6FAA6F;IAC7F,OAAO,EAAE,MAAM,CAAA;IACf,kGAAkG;IAClG,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAwHD;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,OAAO,EACf,KAAK,GAAE,MAAmB,EAC1B,QAAQ,GAAE,MAA6B,GACtC,QAAQ,EAAE,CAmEZ;AAED;;;;;;GAMG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAC9B,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAQ;IAC7C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAQ;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,kBAAkB,CAAQ;IAClC,OAAO,CAAC,WAAW,CAAe;IAClC,OAAO,CAAC,cAAc,CAAe;IACrC,OAAO,CAAC,mBAAmB,CAA6C;IAExE,OAAO,CAAC,gBAAgB,CAAmC;IAE3D,OAAO,CAAC,YAAY,CAAiB;IACrC,OAAO,CAAC,qBAAqB,CAAI;IACjC,OAAO,CAAC,mBAAmB,CAAI;IAC/B,OAAO,CAAC,mBAAmB,CAAmC;IAC9D,OAAO,CAAC,sBAAsB,CAAI;IAClC,OAAO,CAAC,gBAAgB,CAA8C;gBAE1D,MAAM,EAAE,gBAAgB;IAoB9B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YA2Bd,0BAA0B;IAuBlC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAmB3B,OAAO,CAAC,eAAe;YAqBT,uBAAuB;IAkBrC,0FAA0F;IAC1F,OAAO,CAAC,eAAe;YAsBT,eAAe;IAe7B,OAAO,CAAC,uBAAuB;IAQ/B,OAAO,CAAC,aAAa;IAmCrB,OAAO,CAAC,oBAAoB;IAgD5B,OAAO,CAAC,UAAU;IAWlB;;;;OAIG;IACH,OAAO,CAAC,uBAAuB;YAQjB,yBAAyB;YASzB,gBAAgB;YA+BhB,SAAS;IA2BvB,OAAO,CAAC,+BAA+B;YAuBzB,mBAAmB;YAgHnB,cAAc;IAyP5B;;;;OAIG;YACW,eAAe;CA0T9B"}

package/dist/proxy/buyer-proxy.js

@@ -1,11 +1,11 @@
 import { createServer } from 'node:http';
 import { randomUUID } from 'node:crypto';
-import { watch } from 'node:fs';
+import { watchFile, unwatchFile } from 'node:fs';
 import { readFile, writeFile, rename, mkdir } from 'node:fs/promises';
 import { join } from 'node:path';
 import { createOpenAIChatToAnthropicStreamingAdapter, createOpenAIChatToResponsesStreamingAdapter, createOpenAIResponsesToChatStreamingAdapter, detectRequestServiceApiProtocol, transformAnthropicMessagesRequestToOpenAIChat, transformOpenAIChatRequestToOpenAIResponses, transformOpenAIChatResponseToAnthropicMessage, transformOpenAIChatResponseToOpenAIResponses, transformOpenAIResponsesRequestToOpenAIChat, transformOpenAIResponsesResponseToOpenAIChat, } from './service-api-adapter.js';
-import { DEBUG, log, extractRequestedService, summarizeRequestShape, summarizeErrorResponse, requestWantsStreaming, rewriteServiceInBody, isConnectionChurnError, isConnectionHealthy, isLoopbackPeer, } from './request-utils.js';
-import { getExplicitProviderOverride, getExplicitPeerIdOverride, getPreferredPeerIdHint, resolvePeerRoutePlan, selectCandidatePeersForRouting, } from './routing.js';
+import { DEBUG, log, extractRequestedService, summarizeRequestShape, summarizeErrorResponse, requestWantsStreaming, rewriteServiceInBody, isConnectionChurnError, isConnectionHealthy, } from './request-utils.js';
+import { getExplicitProviderOverride, getExplicitPeerIdOverride, resolvePeerRoutePlan, selectCandidatePeersForRouting, } from './routing.js';
 import { computeResponseTelemetry, attachAntseedTelemetryHeaders, attachStreamingAntseedHeaders, } from './telemetry.js';
 // Re-export for backward compatibility (used by tests and other consumers)
 export { selectCandidatePeersForRouting } from './routing.js';
@@ -167,6 +167,21 @@ export function parsePersistedPeers(parsed, nowMs = Date.now(), maxAgeMs = CARRY
         if (typeof entry.maxConcurrency === 'number') {
             peer.maxConcurrency = entry.maxConcurrency;
         }
+        if (typeof entry.onChainChannelCount === 'number' && Number.isFinite(entry.onChainChannelCount)) {
+            peer.onChainChannelCount = entry.onChainChannelCount;
+        }
+        if (typeof entry.onChainGhostCount === 'number' && Number.isFinite(entry.onChainGhostCount)) {
+            peer.onChainGhostCount = entry.onChainGhostCount;
+        }
+        if (typeof entry.onChainTotalVolumeUsdcMicros === 'number' && Number.isFinite(entry.onChainTotalVolumeUsdcMicros)) {
+            peer.onChainTotalVolumeUsdcMicros = entry.onChainTotalVolumeUsdcMicros;
+        }
+        if (typeof entry.onChainLastSettledAtSec === 'number' && Number.isFinite(entry.onChainLastSettledAtSec)) {
+            peer.onChainLastSettledAtSec = entry.onChainLastSettledAtSec;
+        }
+        if (typeof entry.onChainStatsFetchedAt === 'number' && Number.isFinite(entry.onChainStatsFetchedAt)) {
+            peer.onChainStatsFetchedAt = entry.onChainStatsFetchedAt;
+        }
         peers.push(peer);
     }
     return peers;
@@ -186,9 +201,9 @@ export class BuyerProxy {
     _peerCacheTtlMs;
     _stateDir;
     _stateFile;
+    _stateFileWatching = false;
     _pinnedPeer;
     _pinnedService;
-    _stateFileWatcher = null;
     _stateWatchDebounce = null;
     _stateWriteChain = Promise.resolve();
     _cachedPeers = [];
@@ -197,8 +212,6 @@ export class BuyerProxy {
     _peerRefreshPromise = null;
     _lastStaleCacheLogAtMs = 0;
     _bgRefreshHandle = null;
-    _lastSuccessfulPeerId = null;
-    _lastSuccessfulPeerByRouteKey = new Map();
     constructor(config) {
         this._node = config.node;
         this._port = config.port;
@@ -224,6 +237,12 @@ export class BuyerProxy {
         // startup route from the warm cache without blocking on DHT discovery.
         // The background refresh still runs to pick up fresh peers and IP changes.
         await this._hydratePeersFromStateFile();
+        // If the CLI didn't pass --peer/--service, adopt whatever a previous
+        // `antseed buyer connection set` wrote to buyer.state.json so the pin
+        // survives daemon restart.
+        if (this._pinnedPeer === null && this._pinnedService === null) {
+            await this._reloadSessionOverrides();
+        }
         await new Promise((resolve, reject) => {
             this._server.once('error', reject);
             this._server.listen(this._port, '127.0.0.1', () => {
@@ -266,9 +285,9 @@ export class BuyerProxy {
             clearTimeout(this._stateWatchDebounce);
             this._stateWatchDebounce = null;
         }
-        if (this._stateFileWatcher) {
-            this._stateFileWatcher.close();
-            this._stateFileWatcher = null;
+        if (this._stateFileWatching) {
+            unwatchFile(this._stateFile);
+            this._stateFileWatching = false;
         }
         if (this._bgRefreshHandle) {
             clearInterval(this._bgRefreshHandle);
@@ -280,8 +299,15 @@ export class BuyerProxy {
         });
     }
     _watchStateFile() {
+        // Use watchFile (stat polling) rather than watch(): we rewrite
+        // buyer.state.json via rename(tmp, stateFile), and fs.watch on Linux is
+        // bound to the original inode — after the atomic rename it stops firing,
+        // silently breaking `antseed buyer connection set`. watchFile compares
+        // stat each tick and works across inode replacement.
         try {
-            this._stateFileWatcher = watch(this._stateFile, { persistent: false }, () => {
+            watchFile(this._stateFile, { persistent: false, interval: 1000 }, (curr, prev) => {
+                if (curr.mtimeMs === prev.mtimeMs && curr.ino === prev.ino)
+                    return;
                 if (this._stateWatchDebounce)
                     clearTimeout(this._stateWatchDebounce);
                 this._stateWatchDebounce = setTimeout(() => {
@@ -289,9 +315,7 @@ export class BuyerProxy {
                     void this._reloadSessionOverrides().catch(() => { });
                 }, 50);
             });
-            this._stateFileWatcher.on('error', () => {
-                // watcher error is non-fatal
-            });
+            this._stateFileWatching = true;
         }
         catch {
             // watcher setup failed; non-fatal
@@ -417,11 +441,27 @@ export class BuyerProxy {
                 defaultInputUsdPerMillion: p.defaultInputUsdPerMillion ?? 0,
                 defaultOutputUsdPerMillion: p.defaultOutputUsdPerMillion ?? 0,
                 maxConcurrency: p.maxConcurrency ?? 0,
+                currentLoad: p.currentLoad ?? null,
+                // On-chain stats read authoritatively by the buyer from AntseedChannels.
+                // Persisted so `antseed network browse` can render richer UI without a
+                // fresh DHT + RPC round-trip.
+                onChainChannelCount: p.onChainChannelCount ?? null,
+                onChainGhostCount: p.onChainGhostCount ?? null,
+                onChainTotalVolumeUsdcMicros: p.onChainTotalVolumeUsdcMicros ?? null,
+                onChainLastSettledAtSec: p.onChainLastSettledAtSec ?? null,
+                onChainStatsFetchedAt: p.onChainStatsFetchedAt ?? null,
                 lastSeen: p.lastSeen,
                 lastReachedAt: p.lastReachedAt ?? null,
             };
         });
-        this._mergeStateFile({ discoveredPeers: peers, peersUpdatedAt: Date.now() });
+        const onChainRefreshedAt = this._cachedPeers
+            .map((p) => p.onChainStatsFetchedAt ?? 0)
+            .reduce((max, v) => (v > max ? v : max), 0);
+        this._mergeStateFile({
+            discoveredPeers: peers,
+            peersUpdatedAt: Date.now(),
+            ...(onChainRefreshedAt > 0 ? { onChainStatsRefreshedAt: onChainRefreshedAt } : {}),
+        });
     }
     _evictPeer(peerId) {
         const before = this._cachedPeers.length;
@@ -433,57 +473,18 @@ export class BuyerProxy {
             log(`Evicted failing peer ${peerId.slice(0, 12)}... from cache (${this._cachedPeers.length} remaining)`);
         }
     }
-    _rememberSuccessfulPeer(routeKey, peerId) {
-        this._lastSuccessfulPeerId = peerId;
-        this._lastSuccessfulPeerByRouteKey.set(routeKey, peerId);
-        // Keep map bounded to prevent unbounded growth from long-running channels.
-        const MAX_ROUTE_HISTORY = 200;
-        if (this._lastSuccessfulPeerByRouteKey.size > MAX_ROUTE_HISTORY) {
-            const oldestKey = this._lastSuccessfulPeerByRouteKey.keys().next().value;
-            if (typeof oldestKey === 'string') {
-                this._lastSuccessfulPeerByRouteKey.delete(oldestKey);
-            }
-        }
-        // Stamp the cached peer's `lastReachedAt` so carry-forward can trust local
-        // transport liveness even when the DHT record grows stale. Persist so the
-        // signal survives restarts.
+    /**
+     * Stamp `lastReachedAt` on a peer after a successful request so the
+     * carry-forward heuristic can trust local transport liveness even when the
+     * DHT record grows stale. Persisted so the signal survives restarts.
+     */
+    _rememberSuccessfulPeer(peerId) {
         const cached = this._cachedPeers.find((p) => p.peerId === peerId);
         if (cached) {
             cached.lastReachedAt = Date.now();
             this._persistPeersToState();
         }
     }
-    _forgetSuccessfulPeer(routeKey, peerId) {
-        const rememberedForRoute = this._lastSuccessfulPeerByRouteKey.get(routeKey);
-        if (rememberedForRoute === peerId) {
-            this._lastSuccessfulPeerByRouteKey.delete(routeKey);
-        }
-        if (this._lastSuccessfulPeerId === peerId) {
-            const stillUsedByOtherRoute = Array.from(this._lastSuccessfulPeerByRouteKey.values())
-                .some((rememberedPeerId) => rememberedPeerId === peerId);
-            if (!stillUsedByOtherRoute) {
-                this._lastSuccessfulPeerId = null;
-            }
-        }
-    }
-    _buildRouteKey(path, requestProtocol, requestedService, explicitProvider) {
-        const normalizedPath = path.split('?')[0]?.trim().toLowerCase() ?? '/';
-        const pathGroup = (normalizedPath.startsWith('/v1/messages')
-            ? '/v1/messages'
-            : normalizedPath.startsWith('/v1/chat/completions')
-                ? '/v1/chat/completions'
-                : normalizedPath.startsWith('/v1/responses')
-                    ? '/v1/responses'
-                    : normalizedPath.startsWith('/v1/models')
-                        ? '/v1/models'
-                        : normalizedPath);
-        return [
-            pathGroup,
-            requestProtocol ?? 'unknown-protocol',
-            requestedService ?? 'unknown-service',
-            explicitProvider ?? 'auto-provider',
-        ].join('|');
-    }
     async _discoverPeersFromNetwork() {
         log('Discovering peers via DHT...');
         const peers = await this._node.discoverPeers();
@@ -737,6 +738,45 @@ export class BuyerProxy {
                 onClientAbort();
             }
         });
+        const requestProtocol = detectRequestServiceApiProtocol(serializedReq);
+        const requestedService = extractRequestedService(serializedReq);
+        log(`Routing: protocol=${requestProtocol ?? 'null'} service=${requestedService ?? 'null'}`);
+        const explicitProvider = getExplicitProviderOverride(serializedReq);
+        const explicitPeerId = getExplicitPeerIdOverride(serializedReq, effectivePinnedPeer ?? undefined);
+        log(`Routing hints: provider=${explicitProvider ?? 'auto'} pin-peer=${explicitPeerId ?? 'none'}`);
+        // Auto peer selection is disabled. Every request MUST target a specific
+        // peer, either via the per-request `x-antseed-pin-peer` header or via a
+        // session-wide pin set by `antseed buyer connection set --peer <peerId>`.
+        //
+        // Surface the error in the structured shape OpenAI/Anthropic SDKs expect
+        // (`{ error: { type, code, message, ... } }`) so callers see a proper
+        // .message on their error objects instead of a raw text/plain body. We
+        // use HTTP 400 — the request is missing required information the buyer
+        // cannot infer on its own — which is what SDK retry/error logic treats
+        // as a non-retryable client mistake.
+        if (!explicitPeerId) {
+            log('Request rejected: no peer pinned');
+            const errorMessage = 'No peer pinned. Auto-selection is disabled.\n'
+                + 'Pin a peer one of two ways:\n'
+                + '  • Per-request header:   x-antseed-pin-peer: <peerId>    (40-char hex EVM address)\n'
+                + '  • Session pin:          antseed buyer connection set --peer <peerId>\n'
+                + 'Discover peers with:       antseed network browse';
+            res.writeHead(400, { 'content-type': 'application/json' });
+            res.end(JSON.stringify({
+                error: {
+                    type: 'no_peer_pinned',
+                    code: 'no_peer_pinned',
+                    message: errorMessage,
+                    param: 'x-antseed-pin-peer',
+                    help: {
+                        perRequestHeader: 'x-antseed-pin-peer: <peerId>',
+                        sessionPin: 'antseed buyer connection set --peer <peerId>',
+                        discoverPeers: 'antseed network browse',
+                    },
+                },
+            }));
+            return;
+        }
         // Discover peers
         const peers = await this._getPeers();
         if (peers.length === 0) {
@@ -745,15 +785,17 @@ export class BuyerProxy {
             res.end('No sellers available on the network. Is a seeder running?');
             return;
         }
-        const requestProtocol = detectRequestServiceApiProtocol(serializedReq);
-        const requestedService = extractRequestedService(serializedReq);
-        log(`Routing: protocol=${requestProtocol ?? 'null'} service=${requestedService ?? 'null'}`);
-        const explicitProvider = getExplicitProviderOverride(serializedReq);
-        const explicitPeerId = getExplicitPeerIdOverride(serializedReq, effectivePinnedPeer ?? undefined);
-        const preferredPeerId = getPreferredPeerIdHint(serializedReq);
-        log(`Routing hints: provider=${explicitProvider ?? 'auto'} pin-peer=${explicitPeerId ?? 'none'} prefer-peer=${preferredPeerId ?? 'none'}`);
-        const routeKey = this._buildRouteKey(serializedReq.path, requestProtocol, requestedService, explicitProvider);
-        const selectPeers = (candidateSources) => selectCandidatePeersForRouting(candidateSources, requestProtocol, requestedService, explicitProvider);
+        // Narrow the candidate set to just the pinned peer (if we already know
+        // about it) before running the per-peer protocol/service match. This
+        // avoids wasting work — and spamming "Service strict-miss" log lines —
+        // on every other discovered peer. If the pinned peer isn't in cache yet,
+        // fall through with the full list so the "not in candidate set → force
+        // refresh" path still works.
+        const narrowToPinned = (sources) => {
+            const match = sources.find((p) => p.peerId.toLowerCase() === explicitPeerId);
+            return match ? [match] : sources;
+        };
+        const selectPeers = (candidateSources) => selectCandidatePeersForRouting(narrowToPinned(candidateSources), requestProtocol, requestedService, explicitProvider);
         let hasForcedRefresh = false;
         const refreshPeerSelection = async (reason) => {
             if (hasForcedRefresh) {
@@ -783,150 +825,44 @@ export class BuyerProxy {
         }
         log(`Routing candidates: ${routingPeers.length} peer(s)`);
         const router = this._node.router;
-        if (explicitPeerId) {
-            // Pinned peers must use fresh discovery data so IP changes are picked up.
-            // Safe with the hasForcedRefresh guard: if an earlier refresh already ran
-            // this request, the cache is already fresh and cacheAgeMs will be < TTL.
-            const cacheAgeMs = Date.now() - this._cacheLastUpdatedAtMs;
-            if (cacheAgeMs > this._peerCacheTtlMs) {
-                await refreshPeerSelection(`pinned peer with stale cache (${cacheAgeMs}ms old)`);
-            }
-            let pinnedRoutingPeers = routingPeers;
-            let pinnedRoutePlans = routingPlans;
-            let selectedPeer = pinnedRoutingPeers.find((p) => p.peerId.toLowerCase() === explicitPeerId) ?? null;
-            if (!selectedPeer) {
-                await refreshPeerSelection(`pinned peer ${explicitPeerId.slice(0, 12)}... not in candidate set`);
-                pinnedRoutingPeers = routingPeers;
-                pinnedRoutePlans = routingPlans;
-                selectedPeer = pinnedRoutingPeers.find((p) => p.peerId.toLowerCase() === explicitPeerId) ?? null;
-            }
-            if (!selectedPeer) {
-                const source = serializedReq.headers['x-antseed-pin-peer'] ? 'x-antseed-pin-peer header' : '--peer flag';
-                const peerDiscovered = discoveredPeers.some((peer) => peer.peerId.toLowerCase() === explicitPeerId);
-                const protocolLabel = requestProtocol ? `protocol=${requestProtocol}` : 'protocol=unknown';
-                const providerLabel = explicitProvider ? `provider=${explicitProvider}` : 'provider=auto';
-                const serviceLabel = requestedService ? `service=${requestedService}` : 'service=none';
-                const mismatchHint = peerDiscovered
-                    ? `Peer is discoverable but filtered as incompatible (${protocolLabel}, ${providerLabel}, ${serviceLabel}).`
-                    : 'Peer is not discoverable right now.';
-                log(`Pinned peer ${explicitPeerId.slice(0, 12)}... not found in candidate list (${source})`);
-                res.writeHead(502, { 'content-type': 'text/plain' });
-                res.end(`Pinned peer ${explicitPeerId.slice(0, 12)}... is not available or does not support this request. ${mismatchHint}`);
-                return;
-            }
-            log(`Using pinned peer ${selectedPeer.peerId.slice(0, 12)}...`);
-            const result = await this._dispatchToPeer(res, serializedReq, selectedPeer, routeKey, pinnedRoutePlans, requestProtocol, requestedService, explicitProvider, router, RETRYABLE_STATUS_CODES, clientAbortController.signal);
-            if (!result.done) {
-                this._forgetSuccessfulPeer(routeKey, selectedPeer.peerId);
-                // Pinned peer returned a retryable error, but we don't retry — send error to client
-                res.writeHead(result.statusCode, result.responseHeaders);
-                res.end(result.responseBody);
-            }
-            return;
+        // Pinned-peer dispatch (the only path — auto-selection is disabled).
+        // Pinned peers must use fresh discovery data so IP changes are picked up.
+        // Safe with the hasForcedRefresh guard: if an earlier refresh already ran
+        // this request, the cache is already fresh and cacheAgeMs will be < TTL.
+        const cacheAgeMs = Date.now() - this._cacheLastUpdatedAtMs;
+        if (cacheAgeMs > this._peerCacheTtlMs) {
+            await refreshPeerSelection(`pinned peer with stale cache (${cacheAgeMs}ms old)`);
         }
-        // Non-pinned: retry with failover on provider errors
-        const MAX_ATTEMPTS = 3;
-        const triedPeerIds = new Set();
-        let lastStatusCode = 502;
-        let lastResponseBody = null;
-        let lastResponseHeaders = { 'content-type': 'text/plain' };
-        for (let attempt = 0; attempt < MAX_ATTEMPTS; attempt++) {
-            const availableCandidates = routingPeers.filter((peer) => !triedPeerIds.has(peer.peerId));
-            if (availableCandidates.length === 0)
-                break;
-            let selectedPeer = null;
-            // Prefer a recently successful peer for the same request route.
-            if (attempt === 0) {
-                const routePreferredPeerId = this._lastSuccessfulPeerByRouteKey.get(routeKey);
-                if (routePreferredPeerId) {
-                    const remembered = availableCandidates.find((peer) => peer.peerId === routePreferredPeerId) ?? null;
-                    if (remembered) {
-                        selectedPeer = remembered;
-                        log(`Reusing last successful route peer ${selectedPeer.peerId.slice(0, 12)}...`);
-                    }
-                }
-            }
-            // Fallback to the latest globally successful peer.
-            if (!selectedPeer && attempt === 0 && this._lastSuccessfulPeerId && !requestedService) {
-                const remembered = availableCandidates.find((peer) => peer.peerId === this._lastSuccessfulPeerId) ?? null;
-                if (remembered) {
-                    selectedPeer = remembered;
-                    log(`Reusing last successful peer ${selectedPeer.peerId.slice(0, 12)}...`);
-                }
-            }
-            // Soft peer affinity: try caller-preferred peer first, but allow normal fallback.
-            if (!selectedPeer && attempt === 0 && preferredPeerId) {
-                const preferred = availableCandidates.find((peer) => peer.peerId.toLowerCase() === preferredPeerId) ?? null;
-                if (preferred) {
-                    selectedPeer = preferred;
-                    log(`Preferring requested peer ${selectedPeer.peerId.slice(0, 12)}...`);
-                }
-            }
-            // Prefer local peers on first attempt
-            if (!selectedPeer && attempt === 0) {
-                const localPeers = availableCandidates.filter((peer) => isLoopbackPeer(peer));
-                if (localPeers.length > 0) {
-                    selectedPeer = router
-                        ? router.selectPeer(serializedReq, localPeers)
-                        : localPeers[0] ?? null;
-                    if (selectedPeer) {
-                        log(`Preferring local peer ${selectedPeer.peerId.slice(0, 12)}... @ ${selectedPeer.publicAddress ?? 'unknown'}`);
-                    }
-                }
-            }
-            // Prefer peers that can serve the request protocol directly without adapter transform.
-            if (!selectedPeer && requestProtocol === 'anthropic-messages') {
-                const shouldPreferDirect = !requestedService || /claude|anthropic/i.test(requestedService);
-                if (shouldPreferDirect) {
-                    const directPeers = availableCandidates.filter((peer) => {
-                        const plan = routingPlans.get(peer.peerId);
-                        if (!plan)
-                            return false;
-                        return !plan.selection || !plan.selection.requiresTransform;
-                    });
-                    if (directPeers.length > 0) {
-                        selectedPeer = router
-                            ? router.selectPeer(serializedReq, directPeers)
-                            : directPeers[0] ?? null;
-                        if (selectedPeer) {
-                            log(`Preferring direct protocol peer ${selectedPeer.peerId.slice(0, 12)}...`);
-                        }
-                    }
-                }
-            }
-            if (!selectedPeer) {
-                selectedPeer = router
-                    ? (router.selectPeer(serializedReq, availableCandidates) ?? availableCandidates[0] ?? null)
-                    : availableCandidates[0] ?? null;
-            }
-            if (!selectedPeer)
-                break;
-            triedPeerIds.add(selectedPeer.peerId);
-            const result = await this._dispatchToPeer(res, serializedReq, selectedPeer, routeKey, routingPlans, requestProtocol, requestedService, explicitProvider, router, RETRYABLE_STATUS_CODES, clientAbortController.signal);
-            if (result.done)
-                return;
-            this._forgetSuccessfulPeer(routeKey, selectedPeer.peerId);
-            // Request failed with a retryable error — try another peer
-            lastStatusCode = result.statusCode;
-            lastResponseBody = result.responseBody;
-            lastResponseHeaders = result.responseHeaders;
-            if (attempt < MAX_ATTEMPTS - 1) {
-                log(`Peer ${selectedPeer.peerId.slice(0, 12)}... returned ${result.statusCode}, retrying with another peer (attempt ${attempt + 2}/${MAX_ATTEMPTS})`);
-            }
+        let pinnedRoutingPeers = routingPeers;
+        let pinnedRoutePlans = routingPlans;
+        let selectedPeer = pinnedRoutingPeers.find((p) => p.peerId.toLowerCase() === explicitPeerId) ?? null;
+        if (!selectedPeer) {
+            await refreshPeerSelection(`pinned peer ${explicitPeerId.slice(0, 12)}... not in candidate set`);
+            pinnedRoutingPeers = routingPeers;
+            pinnedRoutePlans = routingPlans;
+            selectedPeer = pinnedRoutingPeers.find((p) => p.peerId.toLowerCase() === explicitPeerId) ?? null;
         }
-        // All retries exhausted or no peers available
-        if (!res.headersSent) {
-            if (lastResponseBody) {
-                log(`All ${triedPeerIds.size} peer(s) failed, returning last error (${lastStatusCode})`);
-                res.writeHead(lastStatusCode, lastResponseHeaders);
-                res.end(lastResponseBody);
-            }
-            else {
-                const diagnostics = this._formatPeerSelectionDiagnostics(routingPeers);
-                log('No peers available for request');
-                res.writeHead(502, { 'content-type': 'text/plain' });
-                res.end(`Router could not select a suitable peer. ${diagnostics}`);
-            }
+        if (!selectedPeer) {
+            const source = serializedReq.headers['x-antseed-pin-peer'] ? 'x-antseed-pin-peer header' : '--peer flag or session pin';
+            const peerDiscovered = discoveredPeers.some((peer) => peer.peerId.toLowerCase() === explicitPeerId);
+            const protocolLabel = requestProtocol ? `protocol=${requestProtocol}` : 'protocol=unknown';
+            const providerLabel = explicitProvider ? `provider=${explicitProvider}` : 'provider=auto';
+            const serviceLabel = requestedService ? `service=${requestedService}` : 'service=none';
+            const mismatchHint = peerDiscovered
+                ? `Peer is discoverable but filtered as incompatible (${protocolLabel}, ${providerLabel}, ${serviceLabel}).`
+                : 'Peer is not discoverable right now.';
+            log(`Pinned peer ${explicitPeerId.slice(0, 12)}... not found in candidate list (${source})`);
+            res.writeHead(502, { 'content-type': 'text/plain' });
+            res.end(`Pinned peer ${explicitPeerId.slice(0, 12)}... is not available or does not support this request. ${mismatchHint}`);
+            return;
+        }
+        log(`Using pinned peer ${selectedPeer.peerId.slice(0, 12)}...`);
+        const result = await this._dispatchToPeer(res, serializedReq, selectedPeer, pinnedRoutePlans, requestProtocol, requestedService, explicitProvider, router, RETRYABLE_STATUS_CODES, clientAbortController.signal);
+        if (!result.done) {
+            // Pinned peer returned a retryable error. We never retry against another
+            // peer — auto-selection is disabled — so surface the error to the client.
+            res.writeHead(result.statusCode, result.responseHeaders);
+            res.end(result.responseBody);
         }
     }
     /**
@@ -934,7 +870,7 @@ export class BuyerProxy {
      * was sent to the client (success or non-retryable error), or retry info if the
      * caller should try another peer.
      */
-    async _dispatchToPeer(res, serializedReq, selectedPeer, routeKey, routePlanByPeerId, requestProtocol, requestedService, explicitProvider, router, retryableStatusCodes, requestSignal) {
+    async _dispatchToPeer(res, serializedReq, selectedPeer, routePlanByPeerId, requestProtocol, requestedService, explicitProvider, router, retryableStatusCodes, requestSignal) {
         const selectedRoutePlan = routePlanByPeerId.get(selectedPeer.peerId)
             ?? resolvePeerRoutePlan(selectedPeer, requestProtocol, requestedService, explicitProvider);
         if (!selectedRoutePlan) {
@@ -1050,7 +986,7 @@ export class BuyerProxy {
                 if (streamed) {
                     // Headers already sent to client, can't retry
                     if (responseForClient.statusCode >= 200 && responseForClient.statusCode < 400) {
-                        this._rememberSuccessfulPeer(routeKey, selectedPeer.peerId);
+                        this._rememberSuccessfulPeer(selectedPeer.peerId);
                     }
                     if (!res.writableEnded) {
                         res.end();
@@ -1069,7 +1005,7 @@ export class BuyerProxy {
                     };
                 }
                 if (responseForClient.statusCode >= 200 && responseForClient.statusCode < 400) {
-                    this._rememberSuccessfulPeer(routeKey, selectedPeer.peerId);
+                    this._rememberSuccessfulPeer(selectedPeer.peerId);
                 }
                 res.writeHead(responseForClient.statusCode, responseHeaders);
                 res.end(Buffer.from(responseForClient.body));
@@ -1109,7 +1045,7 @@ export class BuyerProxy {
                     return { done: false, statusCode: response.statusCode, responseBody: Buffer.from(response.body), responseHeaders, errorMessage: null };
                 }
                 if (response.statusCode >= 200 && response.statusCode < 400) {
-                    this._rememberSuccessfulPeer(routeKey, selectedPeer.peerId);
+                    this._rememberSuccessfulPeer(selectedPeer.peerId);
                 }
                 // Forward response headers and body to the HTTP client
                 res.writeHead(response.statusCode, responseHeaders);
@@ -1184,7 +1120,6 @@ export class BuyerProxy {
                 // Evict only the failing peer — others remain usable.
                 this._evictPeer(selectedPeer.peerId);
             }
-            this._forgetSuccessfulPeer(routeKey, selectedPeer.peerId);
             if (res.headersSent) {
                 // Headers already sent (streaming), can't retry
                 if (!res.writableEnded) {