openzoo 0.50.13 → 0.50.14

package/lib/pay.js

@@ -339,10 +339,44 @@ export class PayClient {
       });
     }
     onStage?.('paying');
-    const response = await fetchHeaders(url, {
+    let response = await fetchHeaders(url, {
       ...init,
       headers: { ...stripAuthorization(init.headers || {}), ...paymentHeaders(payment.header) },
     });
+
+    // A REFUSED ATOMIC ROW MUST NOT TAKE THE WHOLE CALL DOWN.
+    //
+    // The candidate loop above only recovers from UnderfundedError; a payment
+    // the SERVER refuses happens out here, and used to surface as
+    // "zoo returned HTTP 402" with no second attempt. That is survivable for a
+    // row every client has always paid, and not survivable for the AtomicSettle
+    // row, which is newer, opt-in, and asks for a different signature — one
+    // gateway-side disagreement and every Base caller is dead in the water.
+    //
+    // So: if the row we chose was the atomic one and the server would not take
+    // it, drop back to the ordinary rows and pay again. We lose the
+    // response-bound receipt for this call and keep the call. Only the atomic
+    // row gets this treatment — a plain row being refused is a real failure and
+    // still surfaces.
+    if (response.status === 402 && accept?.extra?.settlement === 'atomic') {
+      const plain = candidates.filter((c) => c?.extra?.settlement !== 'atomic');
+      for (const cand of plain) {
+        try {
+          const retry = await this.buildPaymentFor(cand, onStage, quote);
+          const again = await fetchHeaders(url, {
+            ...init,
+            headers: { ...stripAuthorization(init.headers || {}), ...paymentHeaders(retry.header) },
+          });
+          if (again.status !== 402) {
+            accept = cand; payment = retry; response = again;
+            lastGoodAsset = memoKey(cand);
+            break;
+          }
+        } catch (e) {
+          if (!(e instanceof UnderfundedError)) throw e;
+        }
+      }
+    }
     // NEVER PRESENT OUR OWN SIGNATURE AS THE TRANSACTION.
     //
     // This fell back to `{ signature: payment.ownerSignature }`, and on Solana

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.50.13",
+  "version": "0.50.14",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",