openzoo 0.12.1 → 0.12.2

package/lib/proxy.js

@@ -12,6 +12,7 @@ import { bindCorpus, contextCacheDisabled, BIND_MIN_CHARS } from './hrr.js';
 import { maybeRewriteModel, rewritablePath, augmentModelList, ALIAS_IDS } from './models.js';
 import { forgetContext } from './contexts.js';
 import { injectBrief } from './brief.js';
+import { withNamespace } from './namespace.js';
 
 const HOP_BY_HOP = new Set([
   'host', 'connection', 'keep-alive', 'transfer-encoding', 'upgrade',
@@ -46,7 +47,13 @@ function upstreamHeaders(req) {
   for (const [k, v] of Object.entries(req.headers)) {
     if (!HOP_BY_HOP.has(k.toLowerCase())) out[k] = v;
   }
-  return out;
+  // EVERY forwarded request carries this wallet's context namespace, not just
+  // the ones PayClient builds itself. Without it a bind sent THROUGH the proxy
+  // (an agent posting to /v1/hrr/bind) landed in the shared tenant while the
+  // chat that referenced it looked in the wallet's tenant — the context was
+  // unreachable and every spill bind came back 400, silently forwarding the
+  // whole body at full price.
+  return withNamespace(out);
 }
 
 async function readBody(req) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.12.1",
+  "version": "0.12.2",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",