openzoo 0.50.16 → 0.50.17

package/lib/x402.js

@@ -373,15 +373,15 @@ export async function buildPaymentOnline(connection, keypair, accept) {
   // recent blockhash, because a 60-second window beats no payment at all.
   let nonce = null;
   const facilitator = accept?.extra?.facilitator;
-  // OPT-IN UNTIL IT HAS SETTLED ONCE FOR REAL.
+  // ON BY DEFAULT — PROVEN ON CHAIN 2026-08-28.
   //
-  // The fallback below covers a missing/slow/exhausted nonce, but NOT a
-  // malformed nonce transaction — if the instruction order or the account metas
-  // are wrong, the payment fails and the fallback never runs, because we only
-  // learn at settle time. This has not yet settled a single real payment, and
-  // shipping it on by default would bet every Solana payer on that. Set
-  // OPENZOO_NONCE=1 to use it; the default stays on recent blockhashes.
-  if (facilitator && process.env.OPENZOO_NONCE === '1') {
+  // It shipped opt-in first because the fallback below covers a missing, slow
+  // or exhausted nonce but NOT a malformed nonce transaction: a wrong
+  // instruction order or account meta only surfaces at settle time, after the
+  // fallback is long past. That risk is now retired by a real settlement —
+  // tx 3pJbRH2u…mMWAZ3, instruction 0 `advanceNonceAccount`, err None.
+  // OPENZOO_NONCE=0 is the kill switch back to recent blockhashes.
+  if (facilitator && process.env.OPENZOO_NONCE !== '0') {
     try {
       const r = await fetch(`${facilitator}/nonce?network=${encodeURIComponent(accept.network)}`, {
         signal: AbortSignal.timeout(4000),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.50.16",
+  "version": "0.50.17",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",