openzoo 0.51.25 → 0.51.27

package/lib/proxy.js

@@ -998,27 +998,35 @@ export async function startProxy({ silent = false, requireToken = null, sessionM
           result = await client.fetch(url, init);
         }
       }
-      // A 5xx from the gateway: its upstream errored on a retired/renamed door
-      // — e.g. gpt-6-astra maps to an upstream id the provider 404s
-      // (`unknown model openai-gpt-6-astra`). It comes back BOTH ways: an
-      // UNPAID 500 (the id cannot be priced, so no x402 quote is even reached)
-      // and a PAID 502 (settled, then the upstream call failed). Left raw,
-      // either makes the harness storm retries ("Reconnecting 5/5"). Route
-      // once to the x402 door and gate the model 60s, same as the credits
-      // outage above. 501/505 excluded — shape/protocol errors a different
-      // model would hit too.
+      // A 5xx IS NOT A REASON TO CHANGE THE MODEL. An earlier build routed any
+      // gateway 5xx to OPENZOO_OUTAGE_FALLBACK and gated the model 60s. That
+      // was wrong twice over: `/model fable-5.1` then reported `x402 door for
+      // grok-4.6 failed`, so the caller read an error for a model they never
+      // picked, and a silent substitution bills them for a DIFFERENT model's
+      // answer than the one they chose and are reading. When the requested
+      // model's door is down, say so about THAT model and let the caller
+      // decide. Only the 402 "insufficient credits" branch above still
+      // reroutes, because there the gateway itself refunds and the request
+      // was never served at all.
       const RETRYABLE_5XX = new Set([500, 502, 503, 504]);
-      if (!usedFallback && FALLBACK_MODEL && outageKey(init) !== FALLBACK_MODEL
-        && RETRYABLE_5XX.has(result.response?.status)) {
-        const st = result.response.status;
+      if (RETRYABLE_5XX.has(result.response?.status)) {
         let detail = '';
-        try { const j = await result.response.clone().json(); detail = String(j?.error?.message || j?.error || '').slice(0, 120); } catch { /* opaque 5xx */ }
-        const msg = `openzoo gateway upstream errored (HTTP ${st}${detail ? `: ${detail}` : ''}) for ${outageKey(init)}. Routing to ${FALLBACK_MODEL} (x402 door) for 60s.`;
-        upstreamOutage_.set(outageKey(init), { until: Date.now() + 60_000, msg });
-        log(`upstream ${st}: ${outageKey(init)} -> ${FALLBACK_MODEL}${detail ? ` (${detail})` : ''}`);
-        init = withModel(init, FALLBACK_MODEL);
-        usedFallback = true;
-        result = await client.fetch(url, init);
+        try { const j = await result.response.clone().json(); detail = String(j?.error?.message || j?.error || '').slice(0, 300); } catch { /* opaque 5xx */ }
+        log(`upstream ${result.response.status} for ${outageKey(init)}${detail ? `: ${detail}` : ''} — surfacing as-is, model NOT swapped`);
+        // "no door quoted <model>: … wrong asset/rail (base)" is a DOOR-SIDE
+        // quote failure, and measurement says it is TRANSIENT — not an empty
+        // wallet and not a dead model. 2026-09-13, five minutes apart on the
+        // same funded wallet: grok-4.6, deepseek-v4-flash and claude-fable-5-1
+        // all 502'd at 264.68 USDC, then all returned 200 at 259.00 USDC. The
+        // balance went DOWN across the recovery, so funding was never the
+        // variable. Do NOT print fund-me copy here — that sends a caller with
+        // $260 to a top-up page. Just name the model they asked for and say
+        // the door failed to quote, so a retry is the obvious next move.
+        if (/no door quoted|wrong asset\/rail/i.test(detail)) {
+          const msg = `${outageKey(init)}: the x402 door failed to quote this model, so the request never reached it and nothing was charged. This is usually transient — retry in a minute. Gateway said: ${detail}`;
+          jsonErr(res, 503, msg);
+          return;
+        }
       }
       // A PAID 400 `invalid_tools` on a Responses body we did not flatten:
       // this model is a function-tools-only door we had not learned yet.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.51.25",
+  "version": "0.51.27",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",