openzoo 0.50.16 → 0.50.18

package/lib/x402.js

@@ -373,15 +373,15 @@ export async function buildPaymentOnline(connection, keypair, accept) {
   // recent blockhash, because a 60-second window beats no payment at all.
   let nonce = null;
   const facilitator = accept?.extra?.facilitator;
-  // OPT-IN UNTIL IT HAS SETTLED ONCE FOR REAL.
+  // ON BY DEFAULT — PROVEN ON CHAIN 2026-08-28.
   //
-  // The fallback below covers a missing/slow/exhausted nonce, but NOT a
-  // malformed nonce transaction — if the instruction order or the account metas
-  // are wrong, the payment fails and the fallback never runs, because we only
-  // learn at settle time. This has not yet settled a single real payment, and
-  // shipping it on by default would bet every Solana payer on that. Set
-  // OPENZOO_NONCE=1 to use it; the default stays on recent blockhashes.
-  if (facilitator && process.env.OPENZOO_NONCE === '1') {
+  // It shipped opt-in first because the fallback below covers a missing, slow
+  // or exhausted nonce but NOT a malformed nonce transaction: a wrong
+  // instruction order or account meta only surfaces at settle time, after the
+  // fallback is long past. That risk is now retired by a real settlement —
+  // tx 3pJbRH2u…mMWAZ3, instruction 0 `advanceNonceAccount`, err None.
+  // OPENZOO_NONCE=0 is the kill switch back to recent blockhashes.
+  if (facilitator && process.env.OPENZOO_NONCE !== '0') {
     try {
       const r = await fetch(`${facilitator}/nonce?network=${encodeURIComponent(accept.network)}`, {
         signal: AbortSignal.timeout(4000),
@@ -433,13 +433,31 @@ export function receiptLine(accept, settle) {
     : (Number.isFinite(billed) && billed > 0 && Number.isFinite(direct) ? direct / billed : null);
   // Wallet path: OpenRouter price, plus 33% of savings vs direct when any.
   // Never print extra.markup — that field is leftover 3× and is not the quote.
-  const saves = ratio != null
-    ? (ratio >= 1.05
-        ? ` (${ratio.toFixed(1)}× cheaper than direct)`
-        : ' (at OpenRouter price — nothing to compress; bind a corpus to save)')
-    : (Number.isFinite(saved) && saved > 0
+  //
+  // THE BASIS DECIDES THE CLAIM, NOT THE RATIO'S SIZE.
+  //
+  // This used to gate the discount purely on `ratio >= 1.05`, which is the
+  // wrong test: on the `markup` basis the gateway sets directUsd to its OWN
+  // forwarded cost so downstream sums stay like-for-like (quote.ts), and
+  // savesVsDirect is computed against that same internal number — so the ratio
+  // can read well above 1 while billedUsd and directUsd are IDENTICAL.
+  // MEASURED 2026-08-28 on a live short-body call: billed $0.0013178, direct
+  // $0.0013178, savesVsDirect 1.457 — and this line printed "1.5× cheaper than
+  // direct" on a call that by its own two dollar figures saved nothing.
+  //
+  // The 402's own `description` already guards this correctly by branching on
+  // q.pricing; the receipt did not, so the challenge told the truth and the
+  // receipt for the same call did not. Only the counterfactual basis — leCore
+  // actually spilled, so "what this would have cost sent whole" is a real
+  // computed number — has earned the discount claim.
+  const counterfactual = x.pricing === 'counterfactual';
+  const saves = !counterfactual
+    ? ' (at OpenRouter price — nothing to compress; bind a corpus to save)'
+    : ratio != null && ratio >= 1.05
+      ? ` (${ratio.toFixed(1)}× cheaper than direct)`
+      : Number.isFinite(saved) && saved > 0
         ? ` ($${saved.toFixed(4)} saved vs direct)`
-        : ' (at OpenRouter price — short body)');
+        : ' (at OpenRouter price — nothing to compress; bind a corpus to save)';
   const tx = settle?.transaction || settle?.txHash || settle?.signature;
   const rail = railOf(accept);
   return `paid ${usd}${saves}${rail ? ` · rail ${rail}` : ''}${tx ? ` · tx ${tx}` : ''}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.50.16",
+  "version": "0.50.18",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",