openzoo 0.48.54 → 0.48.55

package/lib/info.js

@@ -38,11 +38,23 @@ async function quotedPrices() {
   try {
     // Imported here, not at module scope, matching affordableUsd below — this
     // file is loaded by `openzoo address`, which must work with no network.
-    const { withNamespace } = await import('./namespace.js');
-    const r = await fetch(`${config.apiBase}/v1/credits/topup`, {
+    // PRICE OFF THE CHAT 402, NOT THE CREDIT 402.
+    //
+    // /v1/credits/topup sells a USD-denominated product, so every rail in its
+    // challenge quotes tokenUsd = 1 — a dollar of credit costs a dollar,
+    // whichever asset pays for it. Reading unit prices from there valued every
+    // holding at $1: MEASURED, a wallet of 776,302 TOKEN (actually worth ~$178 at the
+    // chat 402's 0.00022906) printed "$776302.53", and 1,985 ROBINHOODS worth
+    // ~$0.01 printed "$1985.78". Total "≈ $778288.41" for roughly $180 of
+    // assets — and `openzoo topup all` then tried to buy $758,819 of credit off
+    // that number.
+    //
+    // The chat challenge prices each asset at its real spot (DexScreener), and
+    // needs no namespace signature, so it is both correct and simpler.
+    const r = await fetch(`${config.apiBase}/v1/chat/completions`, {
       method: 'POST',
-      headers: withNamespace({ 'content-type': 'application/json' }),
-      body: JSON.stringify({ usd: 1 }),
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ model: config.defaultModel || 'anthropic/claude-sonnet-5', max_tokens: 1, messages: [{ role: 'user', content: 'x' }] }),
     });
     if (r.status !== 402) return out;
     const ch = await r.json().catch(() => ({}));
@@ -180,15 +192,32 @@ export async function affordableUsd() {
 export async function topUp(usdArg) {
   // "all" spends everything the wallet can cover, minus a small margin so a
   // price tick between quote and settle does not fail the payment outright.
+  // A BARE `openzoo topup` IS NOT `all`.
+  //
+  // It used to be, and the result was alarming: with a TOKEN-heavy wallet the
+  // no-arg form printed "wallet covers ~$782288.39 — buying $758819.73" and only
+  // THEN hit the 1-500 clamp and threw. Nothing was ever spent, but a user
+  // reading their terminal has every reason to think a three-quarter-million
+  // dollar purchase just started. A command with no argument prints usage and
+  // touches no wallet.
+  if (usdArg === undefined || usdArg === null || String(usdArg).trim() === '') {
+    throw new Error('usage: openzoo topup <usd|all>   (1-500)');
+  }
+  const MAX_TOPUP = 500;
   let usd = Number(usdArg);
-  if (String(usdArg).toLowerCase() === 'all' || usdArg === undefined) {
+  if (String(usdArg).toLowerCase() === 'all') {
     const max = await affordableUsd();
-    usd = Math.floor(max * 0.97 * 100) / 100;
+    // CLAMP TO THE CEILING THE VALIDATOR ENFORCES. Without this, "all" on any
+    // wallet worth more than ~$515 computes a number the very next line
+    // rejects, so the feature was unusable for exactly the wallets it was for.
+    usd = Math.min(Math.floor(max * 0.97 * 100) / 100, MAX_TOPUP);
     if (!(usd >= 1)) throw new Error(`wallet covers only $${max.toFixed(4)} of credit — fund it first (openzoo balance)`);
-    console.log(`wallet covers ~$${max.toFixed(2)} — buying $${usd.toFixed(2)}`);
+    console.log(max > MAX_TOPUP
+      ? `wallet covers ~$${max.toFixed(2)} — buying $${usd.toFixed(2)} (per-topup max is $${MAX_TOPUP}; run it again for more)`
+      : `wallet covers ~$${max.toFixed(2)} — buying $${usd.toFixed(2)}`);
   }
-  if (!Number.isFinite(usd) || usd < 1 || usd > 500) {
-    throw new Error('usage: openzoo topup <usd|all>   (1-500)');
+  if (!Number.isFinite(usd) || usd < 1 || usd > MAX_TOPUP) {
+    throw new Error(`usage: openzoo topup <usd|all>   (1-${MAX_TOPUP})`);
   }
   const { PayClient } = await import('./pay.js');
   const client = new PayClient();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.48.54",
+  "version": "0.48.55",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",