openzoo 0.51.24 → 0.51.26

package/lib/proxy.js

@@ -998,6 +998,37 @@ export async function startProxy({ silent = false, requireToken = null, sessionM
           result = await client.fetch(url, init);
         }
       }
+      // A 5xx IS NOT A REASON TO CHANGE THE MODEL. An earlier build routed any
+      // gateway 5xx to OPENZOO_OUTAGE_FALLBACK and gated the model 60s. That
+      // was wrong twice over: `/model fable-5.1` then reported `x402 door for
+      // grok-4.6 failed`, so the caller read an error for a model they never
+      // picked, and a silent substitution bills them for a DIFFERENT model's
+      // answer than the one they chose and are reading. When the requested
+      // model's door is down, say so about THAT model and let the caller
+      // decide. Only the 402 "insufficient credits" branch above still
+      // reroutes, because there the gateway itself refunds and the request
+      // was never served at all.
+      const RETRYABLE_5XX = new Set([500, 502, 503, 504]);
+      if (RETRYABLE_5XX.has(result.response?.status)) {
+        let detail = '';
+        try { const j = await result.response.clone().json(); detail = String(j?.error?.message || j?.error || '').slice(0, 300); } catch { /* opaque 5xx */ }
+        log(`upstream ${result.response.status} for ${outageKey(init)}${detail ? `: ${detail}` : ''} — surfacing as-is, model NOT swapped`);
+        // "no door quoted <model>: … wrong asset/rail (base)" IS AN EMPTY
+        // WALLET WEARING A 502. Measured 2026-09-13: Solana USDC ran down to
+        // dust, the rail picker fell through to Base (which held $0.0016), and
+        // every door that only quotes Solana refused the offer — grok-4.6,
+        // deepseek and fable all "502"d while abliterated-model (~$0.0005/call)
+        // still paid out of the dust and looked fine. The raw 502 sent the
+        // harness into a reconnect storm and read like a dead model. Say what
+        // it is, and name the model the caller actually asked for.
+        if (/no door quoted|wrong asset\/rail/i.test(detail)) {
+          const rail = /\(([^)]+)\)/.exec(detail.match(/wrong asset\/rail \([^)]*\)/i)?.[0] || '')?.[1] || '';
+          let msg = `${outageKey(init)} could not be paid for: the x402 door refused the offer${rail ? ` on the ${rail} rail` : ''}. This is almost always an empty wallet on the rail that door takes — the request never reached the model, and nothing was charged.`;
+          msg = await withOnrampLink(msg, { solana: client.address, evm: client.evmAddress, force: true });
+          jsonErr(res, 402, msg);
+          return;
+        }
+      }
       // A PAID 400 `invalid_tools` on a Responses body we did not flatten:
       // this model is a function-tools-only door we had not learned yet.
       // Flatten, remember it, and buy the turn once more — one billed miss

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.51.24",
+  "version": "0.51.26",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",