openzoo 0.21.1 → 0.21.2

package/lib/tunnel.js

@@ -105,10 +105,18 @@ export async function ensureCloudflared(log = console.log) {
  * edge-IP or protocol survives — so cascade instead of giving up.
  */
 const TUNNEL_RUNGS = [
+  // IPv4 FIRST, deliberately. cloudflared prefers IPv6+QUIC to reach the edge
+  // whenever the interface merely HAS an IPv6 address — it never checks the
+  // route is usable. MEASURED on a box with an IPv6 address and no IPv6 route:
+  //   failed to dial to edge with quic: write udp6 [::]->[2606:4700:a8::1]:7844:
+  //   sendmsg: no route to host
+  // ...on every retry, so the tunnel registered and immediately died and the
+  // edge served 502/530 — which looks exactly like a dead origin or a rate
+  // limit, and is neither. Forcing v4 registered first try on the same machine.
+  { args: ['--edge-ip-version', '4'], why: 'ipv4 edge' },
   { args: [], why: 'default (quic, auto edge ip)' },
-  { args: ['--edge-ip-version', '4'], why: 'ipv4 edge (the ipv6 path failed to register)' },
+  { args: ['--edge-ip-version', '4', '--protocol', 'http2'], why: 'ipv4 + http2' },
   { args: ['--protocol', 'http2'], why: 'http2 (quic/udp blocked or lossy)' },
-  { args: ['--edge-ip-version', '4', '--protocol', 'http2'], why: 'ipv4 + http2 (most conservative)' },
 ];
 
 /**
@@ -194,7 +202,13 @@ export function superviseTunnel({ bin, port, url, proc, log = () => {}, onRebind
 /** Start a quick tunnel to localhost:<port>; resolve with its public URL. */
 export function startCloudflared(bin, port, log, { args = [] } = {}) {
   return new Promise((resolve, reject) => {
-    const proc = spawn(bin, ['tunnel', '--url', `http://localhost:${port}`, '--no-autoupdate', ...args], {
+    // 127.0.0.1, NOT localhost. MEASURED: the proxy binds IPv4 only, while
+    // `localhost` resolves to ::1 FIRST on macOS — cloudflared dialled the IPv6
+    // loopback, got connection-refused, and reported "Unable to reach the origin
+    // service" (502) on a tunnel that had registered with Cloudflare perfectly.
+    // Every rung failed identically, which is what made it look like a network
+    // or rate-limit problem when it was a loopback address-family mismatch.
+    const proc = spawn(bin, ['tunnel', '--url', `http://127.0.0.1:${port}`, '--no-autoupdate', ...args], {
       stdio: ['ignore', 'pipe', 'pipe'],
     });
     let settled = false;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.21.1",
+  "version": "0.21.2",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",