openzoo 0.12.0 → 0.12.2

package/lib/proxy.js

@@ -1,3 +1,4 @@
+import { readFileSync } from 'node:fs';
 import http from 'node:http';
 import crypto from 'node:crypto';
 import { Readable } from 'node:stream';
@@ -11,6 +12,7 @@ import { bindCorpus, contextCacheDisabled, BIND_MIN_CHARS } from './hrr.js';
 import { maybeRewriteModel, rewritablePath, augmentModelList, ALIAS_IDS } from './models.js';
 import { forgetContext } from './contexts.js';
 import { injectBrief } from './brief.js';
+import { withNamespace } from './namespace.js';
 
 const HOP_BY_HOP = new Set([
   'host', 'connection', 'keep-alive', 'transfer-encoding', 'upgrade',
@@ -45,7 +47,13 @@ function upstreamHeaders(req) {
   for (const [k, v] of Object.entries(req.headers)) {
     if (!HOP_BY_HOP.has(k.toLowerCase())) out[k] = v;
   }
-  return out;
+  // EVERY forwarded request carries this wallet's context namespace, not just
+  // the ones PayClient builds itself. Without it a bind sent THROUGH the proxy
+  // (an agent posting to /v1/hrr/bind) landed in the shared tenant while the
+  // chat that referenced it looked in the wallet's tenant — the context was
+  // unreachable and every spill bind came back 400, silently forwarding the
+  // whole body at full price.
+  return withNamespace(out);
 }
 
 async function readBody(req) {
@@ -525,7 +533,15 @@ export async function startProxy({ silent = false, requireToken = null, sessionM
   });
 
   if (!silent) {
-    console.log(`openzoo proxy  ->  ${config.apiBase}`);
+    // VERSION IN THE BANNER, deliberately. `npx openzoo` can serve a STALE
+    // cached copy — npx reuses a cache entry that matches the bare spec, so a
+    // user running the newest published version still gets old behaviour and
+    // no clue why (observed: a missing tunnel and a missing token row, both
+    // "fixed" releases ago). Printing the version makes that one glance.
+    const { version } = JSON.parse(
+      readFileSync(new URL('../package.json', import.meta.url), 'utf8'),
+    );
+    console.log(`openzoo v${version}  ->  ${config.apiBase}`);
     console.log(`listening on   http://localhost:${config.port}/v1`);
     console.log('');
     if (client.walletCreated) console.log(`new burner wallet created at ${client.walletPath} (chmod 600)`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.12.0",
+  "version": "0.12.2",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",