openzoo 0.51.24 → 0.51.28

package/lib/proxy.js

@@ -998,6 +998,36 @@ export async function startProxy({ silent = false, requireToken = null, sessionM
           result = await client.fetch(url, init);
         }
       }
+      // A 5xx IS NOT A REASON TO CHANGE THE MODEL. An earlier build routed any
+      // gateway 5xx to OPENZOO_OUTAGE_FALLBACK and gated the model 60s. That
+      // was wrong twice over: `/model fable-5.1` then reported `x402 door for
+      // grok-4.6 failed`, so the caller read an error for a model they never
+      // picked, and a silent substitution bills them for a DIFFERENT model's
+      // answer than the one they chose and are reading. When the requested
+      // model's door is down, say so about THAT model and let the caller
+      // decide. Only the 402 "insufficient credits" branch above still
+      // reroutes, because there the gateway itself refunds and the request
+      // was never served at all.
+      const RETRYABLE_5XX = new Set([500, 502, 503, 504]);
+      if (RETRYABLE_5XX.has(result.response?.status)) {
+        let detail = '';
+        try { const j = await result.response.clone().json(); detail = String(j?.error?.message || j?.error || '').slice(0, 300); } catch { /* opaque 5xx */ }
+        log(`upstream ${result.response.status} for ${outageKey(init)}${detail ? `: ${detail}` : ''} — surfacing as-is, model NOT swapped`);
+        // "no door quoted <model>: … wrong asset/rail (base)" is a DOOR-SIDE
+        // quote failure, and measurement says it is TRANSIENT — not an empty
+        // wallet and not a dead model. 2026-09-13, five minutes apart on the
+        // same funded wallet: grok-4.6, deepseek-v4-flash and claude-fable-5-1
+        // all 502'd at 264.68 USDC, then all returned 200 at 259.00 USDC. The
+        // balance went DOWN across the recovery, so funding was never the
+        // variable. Do NOT print fund-me copy here — that sends a caller with
+        // $260 to a top-up page. Just name the model they asked for and say
+        // the door failed to quote, so a retry is the obvious next move.
+        if (/no door quoted|wrong asset\/rail/i.test(detail)) {
+          const msg = `${outageKey(init)}: the x402 door failed to quote this model, so the request never reached it and nothing was charged. This is usually transient — retry in a minute. Gateway said: ${detail}`;
+          jsonErr(res, 503, msg);
+          return;
+        }
+      }
       // A PAID 400 `invalid_tools` on a Responses body we did not flatten:
       // this model is a function-tools-only door we had not learned yet.
       // Flatten, remember it, and buy the turn once more — one billed miss

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.51.24",
+  "version": "0.51.28",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",