openzoo 0.50.87 → 0.50.89

package/bin/openzoo.js

@@ -330,7 +330,7 @@ async function main() {
     }
     case 'ask': {
       const question = process.argv[3];
-      if (!question) throw new Error('usage: openzoo ask "<question>" [--context <id>] [--model <id>] [--system <text>]');
+      if (!question) throw new Error('usage: openzoo ask "<question>" [--context <id>] [--model <id>] [--system <text>] [--web [--web-results N]]');
       const ci = process.argv.indexOf('--context');
       const mi = process.argv.indexOf('--model');
       // A BARE QUESTION IS A DIFFERENT PRODUCT FROM A BRIEFED ONE.
@@ -344,7 +344,20 @@ async function main() {
       // DHH, Hyprland and theming. Same gateway, same product, one had context.
       // A caller that knows where it is running can now say so.
       const si = process.argv.indexOf('--system');
-      const system = si !== -1 ? process.argv[si + 1] : '';
+      let system = si !== -1 ? process.argv[si + 1] : '';
+      // --web: a keyless DuckDuckGo search, top results injected into THIS
+      // call's system prompt. The x402 rail strips OpenRouter's `plugins`
+      // field, so search-then-inject has to happen here, on the caller's
+      // side. EGRESS: the question text goes to duckduckgo.com. Also on with
+      // OPENZOO_ASK_WEB=1; --web-results N caps the count (default 5).
+      const wantWeb = process.argv.includes('--web') || process.env.OPENZOO_ASK_WEB === '1';
+      if (wantWeb) {
+        const wi = process.argv.indexOf('--web-results');
+        const n = wi !== -1 ? Number(process.argv[wi + 1]) || 5 : 5;
+        const { webSearch, formatWebResults } = await import('../lib/websearch.js');
+        const hits = await webSearch(question, n).catch((e) => { console.error(`web search failed: ${e.message}`); return []; });
+        if (hits.length) system = (system ? system + '\n\n' : '') + formatWebResults(question, hits);
+      }
       const { PayClient } = await import('../lib/pay.js');
       const { config } = await import('../lib/config.js');
       const client = new PayClient();

package/lib/models.js

@@ -168,9 +168,39 @@ const tokensOf = (id) => id.toLowerCase().split(/[^a-z0-9.]+/).filter((t) => t &
  * the id is already servable (no rewrite), otherwise the closest zoo id.
  * OPENZOO_DEFAULT_MODEL is an explicit user override, not a fallback tier.
  */
+/**
+ * UNOPENROUTER. OpenRouter is not an upstream any more (gateway, 2026-09-02):
+ * every completion is bought from an x402 door, and doors publish BARE ids
+ * (`grok-4.3`, `claude-sonnet-5`, `gemini-2.5-flash`). A harness that still
+ * sends the OpenRouter spelling (`x-ai/grok-4.3`, `anthropic/claude-sonnet-5`)
+ * is rewritten to the bare id whenever the live catalog serves that bare id.
+ *
+ *   OPENZOO_UNOPENROUTER=1  strip the vendor prefix ALWAYS, catalog or not
+ *   OPENZOO_UNOPENROUTER=0  never strip
+ *   unset                   strip when the bare id is in the catalog
+ *
+ * Router aliases and `openzoo-` twins are never touched: their slash is not a
+ * vendor.
+ */
+export function unopenrouter(requested, ids) {
+  const mode = process.env.OPENZOO_UNOPENROUTER;
+  if (mode === '0') return null;
+  const s = String(requested || '');
+  if (!s || isAutoModel(s) || /^openzoo[-/]/i.test(s)) return null;
+  const slash = s.indexOf('/');
+  if (slash <= 0) return null;
+  const bare = s.slice(slash + 1);
+  if (!bare || bare.includes('/')) return null;
+  if (mode === '1') return bare;
+  return Array.isArray(ids) && ids.includes(bare) ? bare : null;
+}
+
 export function resolveModel(requested, ids) {
   // Virtual router id — never family-match, never steal via OPENZOO_DEFAULT_MODEL.
   if (isAutoModel(requested)) return null;
+  // Vendor-prefixed OpenRouter spelling → the bare id the doors serve.
+  const bareVendor = unopenrouter(requested, ids);
+  if (bareVendor) return bareVendor;
   // Bare Anthropic / Claude Code ids are never live on Fly/OpenRouter
   // (`claude-opus-5` → 500 unknown model). Rewrite even on a catalog miss
   // or if a gateway row lists the bare name — the request must not leave

package/lib/proxy.js

@@ -13,7 +13,7 @@ import { withOnrampLink } from './stripeOnramp.js';
 import { tokenBalance } from './x402.js';
 import { evmTokenBalance } from './evm.js';
 import { autoContext } from './autobind.js';
-import { modelsListForRequest, isHarnessAliasId, resolveModel, quoteableRows } from './models.js';
+import { modelsListForRequest, isHarnessAliasId, resolveModel, quoteableRows, unopenrouter } from './models.js';
 
 /**
  * Quoteable catalog ids, cached 5 minutes, for the fuzzy /v1/models/<id> probe.
@@ -622,6 +622,24 @@ export async function startProxy({ silent = false, requireToken = null, sessionM
       servedRequests += 1;
       say(`\n<- request #${servedRequests} from ${(req.headers['user-agent'] || 'unknown').slice(0, 40)}`);
       try { wantsStream = JSON.parse(bodyBuf.toString('utf8'))?.stream === true; } catch { /* not JSON */ }
+      // UNOPENROUTER THE MODEL ID before anything downstream sees the body —
+      // the replay key, the outage gate, the wire. A vendor-prefixed
+      // OpenRouter spelling becomes the bare id the doors serve when the
+      // catalog lists it (OPENZOO_UNOPENROUTER=1 forces it, =0 disables).
+      // This is the one place the body is rewritten; see models.js.
+      try {
+        const parsed = JSON.parse(bodyBuf.toString('utf8'));
+        if (parsed && typeof parsed.model === 'string') {
+          let ids = [];
+          try { ids = await catalogIdsCached(`${config.apiBase}/v1/models`, upstreamHeaders(req)); } catch { /* catalog unreachable: only the forced mode rewrites */ }
+          const bare = unopenrouter(parsed.model, ids);
+          if (bare) {
+            say(`   model ${parsed.model} -> ${bare} (bare id: doors, not OpenRouter)`);
+            parsed.model = bare;
+            bodyBuf = Buffer.from(JSON.stringify(parsed));
+          }
+        }
+      } catch { /* not JSON */ }
     }
 
     // Retry of a body we answered seconds ago? Serve the cached completion —

package/lib/websearch.js

@@ -0,0 +1,31 @@
+// Keyless web search for `openzoo ask --web`: DuckDuckGo's HTML endpoint,
+// scraped for title / url / snippet. No API key, no account, one GET. The
+// only thing that leaves is the question text, to duckduckgo.com.
+const strip = (s) => String(s || '')
+  .replace(/<[^>]+>/g, '')
+  .replace(/&amp;/g, '&').replace(/&quot;/g, '"').replace(/&#x27;/g, "'").replace(/&lt;/g, '<').replace(/&gt;/g, '>')
+  .replace(/\s+/g, ' ').trim();
+
+export async function webSearch(query, max = 5) {
+  const res = await fetch('https://html.duckduckgo.com/html/?q=' + encodeURIComponent(query), {
+    headers: { 'user-agent': 'Mozilla/5.0 openzoo-ask/1.0' },
+    signal: AbortSignal.timeout(12_000),
+  });
+  if (!res.ok) throw new Error(`duckduckgo HTTP ${res.status}`);
+  const html = await res.text();
+  const out = [];
+  const re = /<a[^>]*class="result__a"[^>]*href="([^"]+)"[^>]*>([\s\S]*?)<\/a>[\s\S]*?class="result__snippet"[^>]*>([\s\S]*?)<\/a>/g;
+  let m;
+  while ((m = re.exec(html)) && out.length < Math.max(1, Math.min(10, max))) {
+    let url = m[1];
+    const redirected = url.match(/uddg=([^&]+)/);
+    if (redirected) url = decodeURIComponent(redirected[1]);
+    out.push({ title: strip(m[2]), url, snippet: strip(m[3]).slice(0, 400) });
+  }
+  return out;
+}
+
+export function formatWebResults(query, hits) {
+  const lines = hits.map((h, i) => `${i + 1}. ${h.title} — ${h.url}\n   ${h.snippet}`);
+  return `Web search results for "${query}" (DuckDuckGo, fetched just now; cite the url when you rely on one):\n${lines.join('\n')}`;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.50.87",
+  "version": "0.50.89",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",