openzoo 0.50.61 → 0.50.63

package/lib/cursorbackend.js

@@ -1843,11 +1843,18 @@ const MODEL_ALIASES = {
   'glm-5.3': 'zai-org/glm-5.3-flash',
   'glm-5.3-flash': 'zai-org/glm-5.3-flash',
   flash: 'zai-org/glm-5.3-flash',
+  deepseek: 'deepseek/deepseek-v4-pro',
+  'deepseek-pro': 'deepseek/deepseek-v4-pro',
+  'deepseek-flash': 'deepseek/deepseek-v4-flash',
+  'deepseek-v4': 'deepseek/deepseek-v4-pro',
   abliterated: 'abliterated-model-large-v2',
   ablit: 'abliterated-model-large-v2',
   'abliterated-large': 'abliterated-model-large-v2',
   'abliterated-small': 'abliterated-model',
 };
+/** Default zoo model for every bot without a /model override. DeepSeek v4 pro:
+ *  tool-capable, ~$1/M in · $2/M out — grok-4.6 burned $82 in one afternoon. */
+export const DEFAULT_ZOO_MODEL = 'deepseek/deepseek-v4-pro';
 async function resolveModelId(raw) {
   const s = String(raw || '').trim();
   if (!s) return null;
@@ -1865,7 +1872,7 @@ async function resolveModelId(raw) {
 function currentModel(agentId) {
   return agentModels.get(agentId)
     || process.env.OPENZOO_DEFAULT_MODEL
-    || 'x-ai/grok-4.6';
+    || DEFAULT_ZOO_MODEL;
 }
 
 const execFileAsync = promisify(execFile);
@@ -2944,6 +2951,30 @@ async function handleHijackedPodHttp(req, res, full, body, log) {
   }
   if (!path0.startsWith('/api/')) return false;
   const name = path0.slice('/api/'.length);
+  // Revive: the minutely cron (scripts/revive-bots.sh) calls this after it has
+  // made sure the hijack + app are alive. Every non-group bot gets a wakeup
+  // timer if it lost one; nothing is spawned, nothing already armed is touched.
+  if (name === 'ozRevive') {
+    let parsed = {};
+    try { parsed = JSON.parse(String(body || '{}')); } catch { parsed = {}; }
+    const every = String(parsed.every || '5m');
+    const wakes = readWakeups(HOME);
+    const list = (cachedAgentList() || []).filter((a) => a?.id && !a.isGroup);
+    const armed = [];
+    const already = [];
+    for (const a of list) {
+      if (wakes[a.id]) { already.push(a.id); continue; }
+      try {
+        scheduleAgentWakeup(a.id, { every, prompt: parsed.prompt });
+        armed.push({ id: a.id, name: a.name });
+      } catch (e) {
+        log(`cursor-backend:      ozRevive ${a.id} ${e.message}`);
+      }
+    }
+    log(`cursor-backend:      ozRevive total=${list.length} armed=${armed.length} already=${already.length} every=${every}`);
+    jsonSend(res, { ok: true, total: list.length, armed, already: already.length, every });
+    return true;
+  }
   if (name === 'getHostStatus') {
     jsonSend(res, { status: 'ready', ready: true, state: 'ready', hostStatus: 'ready' });
     log('cursor-backend:      -> getHostStatus ready');

package/lib/proxy.js

@@ -304,6 +304,18 @@ function replayPut(key, data, settle) {
  */
 export async function startProxy({ silent = false, requireToken = null, sessionMaxUsd = null, autoTunnel = false } = {}) {
   const client = new PayClient();
+  // HOUSE OUTAGE GATE. Measured 2026-09-01: TOKEN payments settled on chain
+  // (tx 3rwy5z…) and the gateway still answered 402 because ITS upstream
+  // (OpenRouter) was out of credits. Paying again buys nothing, and the
+  // "wallet underfunded" copy blamed the user's burner. When the paid 402 says
+  // upstream credits, stop paying for a minute and say what is actually wrong.
+  let upstreamOutageUntil = 0;
+  let upstreamOutageMsg = '';
+  const upstreamOutage = (body) => {
+    const m = String(body?.error?.message || body?.message || '');
+    const src = String(body?.error?.metadata?.limit_source || '');
+    return /openrouter_credits/i.test(src) || /insufficient credits/i.test(m);
+  };
   const log = silent ? () => {} : (...a) => console.log(...a);
   // ALWAYS-ON, BUT NEVER INTO A HARNESS'S TERMINAL. `silent` means another
   // process (openzoo claude, the editor launcher) owns stdio — printing request
@@ -684,6 +696,11 @@ export async function startProxy({ silent = false, requireToken = null, sessionM
     }
 
     try {
+      if (Date.now() < upstreamOutageUntil) {
+        log('upstream outage: not paying (gate)');
+        jsonErr(res, 503, upstreamOutageMsg);
+        return;
+      }
       const result = await client.fetch(url, init);
       const { response, paid, receipt, accept } = result;
       if (paid && receipt) {
@@ -786,8 +803,22 @@ export async function startProxy({ silent = false, requireToken = null, sessionM
       if (response.status === 402) {
         let quoted = '';
         let usd;
+        let q402 = null;
+        try { q402 = await response.clone().json(); } catch { q402 = null; }
+        if (paid && upstreamOutage(q402)) {
+          const settle = q402?.x402?.settle;
+          const tx = settle?.transaction || result.receipt?.tx || '';
+          upstreamOutageMsg = 'openzoo gateway upstream is out of credits (OpenRouter: "Insufficient credits"). '
+            + `Your payment settled${tx ? ` (tx ${tx})` : ''} — this is NOT your wallet. `
+            + 'The gateway operator must top up OpenRouter or route this model to another upstream. '
+            + 'Pausing paid retries for 60s.';
+          upstreamOutageUntil = Date.now() + 60_000;
+          log(`upstream outage: ${upstreamOutageMsg.slice(0, 120)}`);
+          jsonErr(res, 503, upstreamOutageMsg);
+          return;
+        }
         try {
-          const q = await response.clone().json();
+          const q = q402;
           usd = Number(q?.accepts?.[0]?.extra?.billedUsd);
           if (Number.isFinite(usd)) quoted = ` This call needs ≈$${usd.toFixed(4)}.`;
         } catch { /* body was not the quote after all */ }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.50.61",
+  "version": "0.50.63",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",