openzoo 0.48.64 → 0.48.65

package/lib/proxy.js

@@ -123,6 +123,51 @@ const boundFiles = new Set();
 // basis must reflect what the corpus actually holds, not just this turn's slice.
 const boundChars = new Map();
 
+// THIS MAP SURVIVES A RESTART, OR THE COUNTERFACTUAL DOES NOT.
+//
+// boundChars is the only record of how large a bound corpus has GROWN. It feeds
+// `x-hrr-corpus-chars`, which is what lets the gateway price the counterfactual
+// against the whole corpus instead of against the turn in front of it. Held
+// purely in memory, every restart silently reset that basis to the live body and
+// savings fell to exactly 1.00x until a session re-accumulated — with nothing in
+// the log to say why, because the corpus in the DAEMON was still there. Only our
+// accounting of it was gone.
+//
+// MEASURED minutes after a restart: `basis 16112 tok vs sent 16112 -> 4238 ·
+// billed 1.14063 direct 1.14063`. The body spilled 3.8x and the bill did not
+// move, because basis fell back to `cached.corpus?.length`.
+//
+// Advisory, never load-bearing: a corrupt or missing file just means we start
+// counting again, which is exactly today's behaviour.
+const BOUND_CHARS_FILE = path.join(os.homedir(), '.openzoo', 'bound-chars.json');
+const BOUND_CHARS_MAX = 500; // newest contexts only; this is a ledger, not a log
+
+let boundCharsRestored = 0;
+try {
+  const saved = JSON.parse(fs.readFileSync(BOUND_CHARS_FILE, 'utf8'));
+  for (const [ctx, chars] of Object.entries(saved)) {
+    if (typeof chars === 'number' && chars > 0) boundChars.set(ctx, chars);
+  }
+  boundCharsRestored = boundChars.size;
+} catch { /* absent or unreadable — start empty, same as before */ }
+
+let boundCharsTimer = null;
+/** Debounced: appends land in bursts, and the basis only has to survive a
+ *  restart, not every keystroke. Never rejects — persistence is a nicety. */
+const persistBoundChars = () => {
+  if (boundCharsTimer) return;
+  boundCharsTimer = setTimeout(() => {
+    boundCharsTimer = null;
+    try {
+      // Map preserves insertion order, so the tail is the newest.
+      const entries = [...boundChars.entries()].slice(-BOUND_CHARS_MAX);
+      mkdirSync(path.dirname(BOUND_CHARS_FILE), { recursive: true });
+      fs.writeFileSync(BOUND_CHARS_FILE, JSON.stringify(Object.fromEntries(entries)));
+    } catch { /* advisory */ }
+  }, 2000);
+  boundCharsTimer.unref?.(); // must never hold the process open
+};
+
 /**
  * Every fundable balance across all three chains, for the startup line and
  * the live refresh. Each read is independent and advisory — one lagging RPC
@@ -567,6 +612,7 @@ async function spillTranscript(body, log, req) {
       }).then((b) => {
         if (!b?.contextId) return;
         boundChars.set(b.contextId, (boundChars.get(b.contextId) || 0) + files.length);
+        persistBoundChars();
         if (!known) spillMemo.set(sessionKey, { corpus, contextId: b.contextId, hash: b.hash });
       }).catch((e) => log(`file bind failed: ${e.message}`));
     }
@@ -639,6 +685,7 @@ async function spillTranscript(body, log, req) {
   // uploads each version exactly once no matter how often the agent re-reads it.
   if (files) {
     boundChars.set(bind.contextId, (boundChars.get(bind.contextId) || corpus.length) + files.length);
+    persistBoundChars();
     void bindCorpus(files, {
       appendTo: bind.contextId,
       onStage: (stage, info) => {
@@ -1853,6 +1900,10 @@ export async function startProxy({ silent = false, requireToken = null, sessionM
         process.once('SIGTERM', () => { bye(); process.exit(0); });
         process.once('exit', bye);
         log('');
+        if (boundCharsRestored) {
+          const tot = [...boundChars.values()].reduce((a, b) => a + b, 0);
+          log(`corpus ledger restored: ${boundCharsRestored} context(s), ${mb(tot)}MB bound — counterfactual survives restarts`);
+        }
         log('cloud IDE / remote harness? use the public URL (they cannot reach localhost):');
         log(`  base_url = ${url}/v1`);
         log(`  api_key  = ${token}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.48.64",
+  "version": "0.48.65",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",