openzoo 0.51.5 → 0.51.7

package/README.md

@@ -25,7 +25,20 @@ paid $0.002137 (9.5× cheaper than direct) · rail solana · tx 5Kd…
 
 **Claude Code / grokui Auto** — `openzoo claude` sets the Anthropic API key + base URL to the local OpenZoo proxy (x402 pay-per-call). You do **not** need to authenticate Claude first. grokui orange Auto is this harness, not a `RUN:` text parser. PATH `~/.local/bin` is required on Mac so `claude` is found.
 
-**ChatGPT desktop (official Linux/macOS/Windows app)** — `openzoo chatgpt` puts the zoo in as the Codex provider in `~/.codex/config.toml`, starts a proxy if none is up, and launches the app; choose **sign in with API key** (any key) and the Codex / agent side pays x402 per turn. The plain ChatGPT chat tab still talks to chatgpt.com — it is not API-shaped. On Arch or anything without dpkg, `openzoo chatgpt --deb ~/Downloads/chatgpt_amd64.deb` unpacks the official .deb into `~/.openzoo/apps/chatgpt` and runs it from there (a `chatgpt*.deb` in `~/Downloads` is found automatically). `--no-launch` writes config only; `--print` shows the block.
+**ChatGPT desktop (official macOS/Windows/Linux app)** — `openzoo chatgpt` configures the zoo, reuses an installed Codex-enabled ChatGPT app or downloads and installs the current official build for your platform/architecture, starts a background proxy, and launches the app. No TryOmarchy dependency. Choose **sign in with API key** (`sk-openzoo`) if prompted. The Codex side pays x402 per turn from your OpenZoo wallet; ordinary ChatGPT chats still use chatgpt.com.
+
+- **macOS (Apple Silicon / Intel):** installs the official DMG into `~/Applications/ChatGPT.app`, verifies its signature, then launches through macOS LaunchServices. Requires a supported macOS version (currently 14+).
+- **Windows (ARM64 / x64):** installs the current official Store-signed MSIX using PowerShell `Add-AppxPackage`, then discovers its executable from the installed package manifest. Windows app-installation policies and package prerequisites still apply.
+- **Linux (ARM64 / x64):** downloads the official `.deb` and unpacks it under `~/.openzoo/apps/chatgpt`, without sudo or dpkg. Requires `bsdtar` or `ar`, plus `tar` and the desktop runtime libraries required by ChatGPT. Ubuntu/Debian/Fedora are upstream-supported; other distributions depend on compatible libraries. `--deb <file>` uses a local package when no app is installed.
+
+Configuration defaults to `~/.openzoo/chatgpt/config.toml`, with a separate desktop profile. `CODEX_HOME` overrides that location; `--config /path/to/config.toml` also sets the home used at launch. Unrelated config tables are retained, and the first existing config is saved as `config.toml.openzoo-backup`. Installed apps are reused, not upgraded by this command. Use the app's updater for later updates.
+
+`--model <id>` overrides `deepseek-v4-flash`; `--bearer` stores the non-secret placeholder token instead of requiring an environment variable. `--no-launch` writes config only (no download, install, proxy, or launch); `--no-proxy` skips proxy startup; `--print` previews without side effects. Pass app flags after `--`, for example `openzoo chatgpt -- --ozone-platform=wayland`. `OPENZOO_CHATGPT_BIN` selects an explicit executable. Failed downloads, installation, or launch commands return an error.
+
+The **savings pill** is enabled by default: an orange, draggable overlay shows spent and saved, with estimated direct cost in its expanded view. These are **all-time shared proxy totals**, not per-task ChatGPT billing; ordinary ChatGPT chats are excluded. Negative savings appear as extra cost, and unavailable totals are marked disconnected. The bridge reads `/v1/info` outside the renderer and updates only its own overlay, without modifying the signed app or its security policy. It uses a loopback-only, dynamically assigned Chromium debugging port on the OpenZoo desktop profile, exits after the app is gone for 60 seconds, and logs to `<CODEX_HOME>/desktop/openzoo-savings.log`. Use `--no-pill` to launch without the overlay/debugging flag. Run the command again to attach the pill after a separate app restart.
+
+Installer references: [ChatGPT downloads](https://chatgpt.com/download/), [Windows MSIX deployment](https://learn.chatgpt.com/docs/enterprise/windows-deployment), [Linux packages](https://learn.chatgpt.com/docs/linux/linux-app).
+
 
 **Agent of Empires** (tmux session manager for coding agents, [agent-of-empires](https://github.com/agent-of-empires/agent-of-empires)) — `openzoo aoe` registers an `openzoo` agent in aoe's `config.toml` (`[session.custom_agents] openzoo = "openzoo claude"`, detected as `claude` so status hooks, resume and fork all work), starts a background proxy if none is listening (no public tunnel unless `--tunnel`), then runs `aoe`. `openzoo aoe add . -l` creates and launches one session in the current directory; in the TUI pick **openzoo** from the agent picker. `Alt+z` opens a tool session with the wallet balance and the live receipts log. Terminal view only: aoe's structured view runs `claude-agent-acp` itself, which bills Anthropic, not the zoo. `--override-claude` additionally makes aoe's built-in `claude` agent launch through openzoo; `--no-launch` writes config only.
 

package/bin/openzoo.js

@@ -146,16 +146,19 @@ usage:
                          voice login / voice watch      PREHOOK your own outgoing Telegram
                                messages: type raw, the watcher revises in place (userbot;
                                "." prefix sends raw). X has no edit API — no equivalent.
-  npx openzoo chatgpt    OpenAI's ChatGPT desktop app on the zoo. Writes the zoo as
-                         the Codex provider in ~/.codex/config.toml (other tables kept,
-                         old file backed up), starts a background proxy if none is up,
-                         and launches the app — the Codex / agent side pays x402 per
-                         turn; pick "sign in with API key" (any key). The plain chat
-                         tab still talks to chatgpt.com.
-                         Arch / no dpkg: --deb ~/Downloads/chatgpt_amd64.deb unpacks it
-                         (a chatgpt*.deb in ~/Downloads is picked up automatically)
-                         --model <id> (claude-opus-5) --wire responses|chat --bearer
+  npx openzoo chatgpt    Configure, install if missing, and launch official ChatGPT
+                         on macOS / Windows / Linux (x64 / ARM64), no TryOmarchy.
+                         Downloads current official DMG / MSIX / .deb as needed.
+                         Uses ~/.openzoo/chatgpt/config.toml (or CODEX_HOME), keeps
+                         other tables and the original backup, starts a local proxy.
+                         Codex / agent mode pays x402; plain chat uses chatgpt.com.
+                         Choose "sign in with API key" (sk-openzoo) if prompted.
+                         --deb <file> (Linux) --config /path/to/config.toml
+                         --model <id> (deepseek-v4-flash) --wire responses|chat --bearer
+                         Savings pill: live shared proxy spend / direct estimate / saved
+                         --no-pill disables the overlay
                          --no-launch (config only) --no-proxy --tunnel --print
+                         -- <app flags>
   npx openzoo openclaw   write the zoo into ~/.openclaw/openclaw.json as a model
                          provider WITH REAL PRICES (OpenClaw's own custom-provider
                          path hard-codes $0.00 and ignores /v1/models pricing)
@@ -180,6 +183,11 @@ usage:
   npx openzoo balance    wallet balance on every rail — Solana (USDC/TOKEN/SOL),
                          Base (USDC/ETH), Robinhood Chain (USDG/memecoins/ETH)
   npx openzoo address    print both funding addresses (Solana + EVM)
+  npx openzoo model [id] pin the model every chat uses, whatever the app sends
+                         (no id = show it · reset|off = clear). Same override the
+                         chat command \`/model <id>\` sets from inside ChatGPT,
+                         Cursor or Claude Code — a running proxy picks it up
+                         without a restart.
   npx openzoo help       this text
 
 point any OpenAI-compatible harness at:
@@ -420,6 +428,12 @@ async function main() {
     case 'address':
       (await import('../lib/info.js')).printAddress();
       break;
+    // Same override file the in-chat `/model` command writes. Two doors on one
+    // switch: a harness with no model picker (ChatGPT/Codex) uses the chat
+    // command, everyone else can just type it here.
+    case 'model':
+      await (await import('../lib/modelcommand.js')).cliModel(process.argv[3]);
+      break;
     case 'help':
     case '--help':
     case '-h':

package/lib/chatgpt-install.js

@@ -0,0 +1,106 @@
+/** Official current desktop installers; no third-party distribution service. */
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { spawn } from 'node:child_process';
+import { Readable } from 'node:stream';
+import { pipeline } from 'node:stream/promises';
+
+const CDN = 'https://persistent.oaistatic.com/codex-app-prod';
+export function installerAsset(platform = process.platform, arch = process.arch) {
+  if (!['x64', 'arm64'].includes(arch)) throw new Error(`ChatGPT has no installer for ${platform}/${arch}; see https://chatgpt.com/download/`);
+  if (platform === 'darwin') return { url: `${CDN}/${arch === 'x64' ? 'ChatGPT-latest-x64.dmg' : 'ChatGPT.dmg'}`, name: 'ChatGPT.dmg' };
+  if (platform === 'win32') return { url: `${CDN}/ChatGPT-${arch}.msix`, name: 'ChatGPT.msix' };
+  if (platform === 'linux') {
+    const name = `chatgpt_${arch === 'x64' ? 'amd64' : 'arm64'}.deb`;
+    return { url: `${CDN}/linux/deb/latest/${name}`, name };
+  }
+  throw new Error(`ChatGPT desktop is not available for ${platform}; see https://chatgpt.com/download/`);
+}
+
+export function runCommand(command, args, options = {}) {
+  return new Promise((resolve, reject) => {
+    const child = spawn(command, args, { stdio: ['ignore', 'pipe', 'pipe'], ...options });
+    let stdout = '', stderr = '';
+    child.stdout?.on('data', b => { stdout = (stdout + b).slice(-1024 * 1024); });
+    child.stderr?.on('data', b => { stderr = (stderr + b).slice(-8192); });
+    child.once('error', reject);
+    child.once('close', code => code === 0 ? resolve(stdout.trim()) : reject(new Error(`${command} exited ${code}: ${stderr.trim()}`)));
+  });
+}
+
+export async function downloadInstaller(url, file, fetchImpl = fetch) {
+  const partial = `${file}.part`;
+  try {
+    const response = await fetchImpl(url, { signal: AbortSignal.timeout(15 * 60_000) });
+    if (!response.ok || !response.body) throw new Error(`download failed (${response.status}): ${url}`);
+    if (/text\/html/.test(response.headers.get('content-type') || '')) throw new Error(`installer URL returned HTML: ${url}`);
+    await pipeline(Readable.fromWeb(response.body), fs.createWriteStream(partial, { flags: 'wx' }));
+    if (!fs.statSync(partial).size) throw new Error('downloaded installer is empty');
+    fs.renameSync(partial, file);
+  } finally {
+    fs.rmSync(partial, { force: true });
+  }
+}
+
+// Query the installed package manifest instead of guessing a versioned WindowsApps path.
+// The bundled Codex engine distinguishes the combined app from ChatGPT Classic.
+export async function windowsChatGptApp(run = runCommand) {
+  const script = `$ErrorActionPreference = 'Stop'
+Get-AppxPackage | Where-Object { $_.Name -match 'OpenAI|ChatGPT|Codex' } | ForEach-Object {
+  $pkg = $_
+  $manifest = Get-AppxPackageManifest -Package $pkg.PackageFullName
+  foreach ($entry in $manifest.Package.Applications.Application) {
+    if ($entry.Executable) {
+      $exe = Join-Path $pkg.InstallLocation $entry.Executable
+      if ((Test-Path -LiteralPath $exe) -and (Test-Path -LiteralPath (Join-Path (Split-Path $exe) 'resources/codex.exe'))) { Write-Output $exe }
+    }
+  }
+}`;
+  const output = await run('powershell.exe', ['-NoProfile', '-NonInteractive', '-Command', script]);
+  return output.split(/\r?\n/).map(s => s.trim()).find(Boolean) || null;
+}
+
+export async function installChatGpt({ platform = process.platform, arch = process.arch, home = os.homedir(),
+  run = runCommand, download = downloadInstaller, unpack, findWindows = windowsChatGptApp, log = console.log } = {}) {
+  const asset = installerAsset(platform, arch);
+  const scratch = fs.mkdtempSync(path.join(os.tmpdir(), 'openzoo-chatgpt-'));
+  const file = path.join(scratch, asset.name);
+  try {
+    log(`downloading current ChatGPT for ${platform}/${arch} from ${asset.url}`);
+    await download(asset.url, file);
+    if (platform === 'linux') return unpack(file, path.join(home, '.openzoo', 'apps', 'chatgpt'));
+    if (platform === 'win32') {
+      // The path is passed through the environment, never interpolated into PowerShell code.
+      await run('powershell.exe', ['-NoProfile', '-NonInteractive', '-Command',
+        "$ErrorActionPreference = 'Stop'; Add-AppxPackage -Path $env:OPENZOO_CHATGPT_INSTALLER"],
+      { env: { ...process.env, OPENZOO_CHATGPT_INSTALLER: file } });
+      const app = await findWindows(run);
+      if (!app) throw new Error('ChatGPT MSIX installed but its desktop executable was not found');
+      return app;
+    }
+    const mount = path.join(scratch, 'mount');
+    fs.mkdirSync(mount);
+    let mounted = false;
+    try {
+      await run('hdiutil', ['attach', '-nobrowse', '-readonly', '-mountpoint', mount, file]);
+      mounted = true;
+      const source = path.join(mount, 'ChatGPT.app');
+      // Let macOS validate the vendor signature before copying executable code.
+      await run('codesign', ['--verify', '--deep', '--strict', source]);
+      if (!fs.existsSync(path.join(source, 'Contents', 'Resources', 'codex'))) throw new Error('installer contains ChatGPT Classic, not the Codex-enabled desktop app');
+      const applications = path.join(home, 'Applications');
+      fs.mkdirSync(applications, { recursive: true });
+      const destination = path.join(applications, 'ChatGPT.app');
+      if (fs.existsSync(destination)) throw new Error(`${destination} already exists but is not usable; move it aside or set OPENZOO_CHATGPT_BIN`);
+      const staged = path.join(applications, `.openzoo-chatgpt-${process.pid}-${Date.now()}.app`);
+      try {
+        await run('ditto', [source, staged]);
+        fs.renameSync(staged, destination);
+      } finally { fs.rmSync(staged, { recursive: true, force: true }); }
+      return path.join(destination, 'Contents', 'MacOS', 'ChatGPT');
+    } finally {
+      if (mounted) await run('hdiutil', ['detach', mount]);
+    }
+  } finally { fs.rmSync(scratch, { recursive: true, force: true }); }
+}

package/lib/chatgpt-spend.js

@@ -0,0 +1,185 @@
+/** Read-only savings overlay for the OpenZoo ChatGPT profile. */
+import fs from 'node:fs';
+import path from 'node:path';
+import { spawn } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+import { cdpSession, listCdpPages } from './ozSpendChip.js';
+
+export function chatGptSpendState(info) {
+  if (info?.youAreTalkingTo !== 'openzoo proxy') throw new Error('not an OpenZoo proxy');
+  const amount = value => typeof value === 'number' && Number.isFinite(value) && value >= 0 ? value : null;
+  const spent = amount(info.spendUsd), would = amount(info.directUsd);
+  const comparable = spent !== null && would !== null && (would > 0 || spent === 0);
+  // Do not use savedUsd: older proxies clamp negative savings to zero.
+  const saved = comparable ? would - spent : null;
+  return { spent, would: comparable ? would : null, saved,
+    pct: comparable && would > 0 ? 100 * saved / would : null,
+    scope: 'All-time · shared OpenZoo proxy', updatedAt: Date.now(), online: true };
+}
+
+/** Self-contained renderer. Only owns its shadow-root overlay, never chat content. */
+export function renderChatGptSpend(state) {
+  let host = document.getElementById('openzoo-chatgpt-spend');
+  if (!document.body) return false;
+  if (!host) {
+    host = document.createElement('div');
+    host.id = 'openzoo-chatgpt-spend';
+    host.style.cssText = 'position:fixed;right:20px;bottom:90px;z-index:2147483646;max-width:calc(100vw - 24px);-webkit-app-region:no-drag';
+    const root = host.attachShadow({ mode: 'open' });
+    root.innerHTML = `<style>
+      :host{font:12px/1.5 system-ui,sans-serif;color:#fafafa;color-scheme:dark}
+      details{max-width:min(470px,calc(100vw - 24px))}
+      summary{list-style:none;cursor:grab;touch-action:none;border-radius:999px;background:#e85d1c;color:white;padding:8px 14px;box-shadow:0 4px 18px #0006;font-weight:650;overflow-wrap:anywhere}
+      summary::-webkit-details-marker{display:none}summary:focus-visible{outline:2px solid white;outline-offset:3px}
+      section{margin-top:8px;padding:12px 14px;border:1px solid #ffffff24;border-radius:14px;background:#18181bef;box-shadow:0 4px 18px #0005}
+      dl{display:grid;grid-template-columns:1fr auto;gap:5px 24px;margin:10px 0}dd{margin:0;font-variant-numeric:tabular-nums}
+      small{display:block;color:#bfbfc7}p{margin:8px 0 0;color:#bfbfc7}button{margin-top:10px;border:1px solid #ffffff30;border-radius:8px;background:transparent;color:inherit;padding:4px 10px;cursor:pointer}
+    </style><details><summary role="button" aria-expanded="false" aria-label="OpenZoo costs and savings"></summary><section>
+      <small data-scope></small><dl><dt>Spent</dt><dd data-spent></dd><dt>Would’ve cost · estimate</dt><dd data-would></dd><dt data-saving-label>Saved</dt><dd data-saved></dd></dl>
+      <small data-status role="status"></small><p>Direct cost is the proxy’s counterfactual estimate. Totals include other apps using this proxy. Ordinary ChatGPT chats are not included.</p>
+      <button type="button">Reset position</button></section></details>`;
+    const summary = root.querySelector('summary');
+    let drag = null, moved = false;
+    const place = (left, top) => {
+      const r = host.getBoundingClientRect();
+      host.style.left = Math.max(8, Math.min(left, innerWidth - r.width - 8)) + 'px';
+      host.style.top = Math.max(8, Math.min(top, innerHeight - r.height - 8)) + 'px';
+      host.style.right = host.style.bottom = 'auto';
+    };
+    document.body.appendChild(host);
+    try { const p = JSON.parse(localStorage.getItem('openzoo-chatgpt-spend-position')); if (p && Number.isFinite(p.x) && Number.isFinite(p.y)) place(p.x, p.y); } catch { /* storage unavailable */ }
+    summary.addEventListener('pointerdown', e => {
+      if (e.button !== 0) return;
+      const r = host.getBoundingClientRect();
+      drag = { x: e.clientX, y: e.clientY, left: r.left, top: r.top }; moved = false;
+      summary.setPointerCapture(e.pointerId);
+    });
+    summary.addEventListener('pointermove', e => {
+      if (!drag) return;
+      const dx = e.clientX - drag.x, dy = e.clientY - drag.y;
+      if (Math.abs(dx) + Math.abs(dy) > 4) moved = true;
+      if (moved) place(drag.left + dx, drag.top + dy);
+    });
+    summary.addEventListener('pointerup', () => {
+      if (drag && moved) { const r = host.getBoundingClientRect(); try { localStorage.setItem('openzoo-chatgpt-spend-position', JSON.stringify({ x: r.left, y: r.top })); } catch {} }
+      drag = null;
+    });
+    summary.addEventListener('pointercancel', () => { drag = null; });
+    summary.addEventListener('click', e => { if (moved) { e.preventDefault(); moved = false; } });
+    root.querySelector('button').addEventListener('click', () => {
+      try { localStorage.removeItem('openzoo-chatgpt-spend-position'); } catch {}
+      host.style.left = host.style.top = 'auto'; host.style.right = '20px'; host.style.bottom = '90px';
+    });
+    root.querySelector('details').addEventListener('toggle', () => { summary.setAttribute('aria-expanded', String(root.querySelector('details').open)); if (host.style.left !== 'auto' && host.style.left) { const r = host.getBoundingClientRect(); place(r.left, r.top); } });
+    addEventListener('resize', () => { if (host.isConnected && host.style.left !== 'auto' && host.style.left) { const r = host.getBoundingClientRect(); place(r.left, r.top); } });
+    // A dead bridge must not leave apparently live numbers indefinitely.
+    const timer = setInterval(() => {
+      if (!host.isConnected) { clearInterval(timer); return; }
+      if (Date.now() - (host.__ozUpdate || 0) > 12000) {
+        root.querySelector('[data-status]').textContent = 'Disconnected · last known totals';
+        root.querySelector('summary').textContent = 'OpenZoo · disconnected';
+      }
+    }, 3000);
+  }
+  const root = host.shadowRoot;
+  if (!root) return false;
+  const usd = n => n === null || !Number.isFinite(n) ? '—' : '$' + Math.abs(n).toFixed(Math.abs(n) < 0.01 ? 4 : 2);
+  const more = state.saved !== null && state.saved < 0;
+  const savings = state.saved === null ? 'Savings —' : `${more ? 'Extra cost' : 'Saved'} ${usd(state.saved)}`;
+  root.querySelector('summary').textContent = state.online ? `OpenZoo · ${usd(state.spent)} spent · ${savings}` : 'OpenZoo · disconnected';
+  root.querySelector('[data-spent]').textContent = usd(state.spent);
+  root.querySelector('[data-would]').textContent = usd(state.would);
+  root.querySelector('[data-saving-label]').textContent = more ? 'Extra cost' : 'Saved';
+  root.querySelector('[data-saved]').textContent = usd(state.saved) + (state.pct === null ? '' : ` (${Math.abs(state.pct).toFixed(1)}%)`);
+  root.querySelector('[data-scope]').textContent = state.scope;
+  root.querySelector('[data-status]').textContent = state.online ? 'Updated ' + new Date(state.updatedAt).toLocaleTimeString() : 'Proxy unavailable · last known totals';
+  host.__ozUpdate = Date.now();
+  return true;
+}
+
+export function chatGptSpendSource(state) {
+  return `(${renderChatGptSpend.toString()})(${JSON.stringify(state).replace(/</g, '\\u003c')})`;
+}
+
+export function readChatGptDebugPort(profile) {
+  try {
+    const n = Number(fs.readFileSync(path.join(profile, 'DevToolsActivePort'), 'utf8').split(/\r?\n/)[0]);
+    return Number.isInteger(n) && n > 0 && n < 65536 ? n : null;
+  } catch { return null; }
+}
+
+export function isChatGptRenderer(target, port) {
+  try {
+    const ws = new URL(target.webSocketDebuggerUrl);
+    if (ws.protocol !== 'ws:' || ws.hostname !== '127.0.0.1' && ws.hostname !== 'localhost' || Number(ws.port) !== port) return false;
+    const url = new URL(target.url);
+    return target.type === 'page' && (url.protocol === 'file:' && /\/index\.html$/.test(url.pathname) || url.protocol === 'app:' && /codex|chatgpt/.test(url.hostname));
+  } catch { return false; }
+}
+
+/** Host-side polling avoids changing the signed app or relaxing renderer CSP. */
+export async function watchChatGptSpend({ profile, proxyPort, fetchImpl = fetch, connect = cdpSession,
+  sleep = ms => new Promise(r => setTimeout(r, ms)), stopped = () => false, log = console.error } = {}) {
+  const sessions = new Map();
+  let misses = 0;
+  let state = { spent: null, would: null, saved: null, pct: null, scope: 'All-time · shared OpenZoo proxy', online: false, updatedAt: 0 };
+  try {
+    while (!stopped() && misses < 20) {
+      const port = readChatGptDebugPort(profile);
+      const pages = port ? (await listCdpPages(port, fetchImpl)).filter(t => isChatGptRenderer(t, port)) : [];
+      misses = pages.length ? 0 : misses + 1;
+      const live = new Set(pages.map(t => t.webSocketDebuggerUrl));
+      for (const [id, session] of sessions) if (!live.has(id)) { session.close(); sessions.delete(id); }
+      try {
+        const r = await fetchImpl(`http://127.0.0.1:${proxyPort}/v1/info`, { signal: AbortSignal.timeout(2000) });
+        if (!r.ok) throw new Error(`proxy HTTP ${r.status}`);
+        state = chatGptSpendState(await r.json());
+      } catch { state = { ...state, online: false }; }
+      for (const page of pages) {
+        const id = page.webSocketDebuggerUrl;
+        try {
+          if (!sessions.has(id)) sessions.set(id, await connect(id, { timeoutMs: 2500, sendOrigin: false }));
+          const result = await sessions.get(id).send('Runtime.evaluate', { expression: chatGptSpendSource(state), returnByValue: true });
+          if (result.exceptionDetails) throw new Error('savings pill renderer evaluation failed');
+        } catch (e) { sessions.get(id)?.close(); sessions.delete(id); log(`openzoo: savings pill: ${e.message}`); }
+      }
+      await sleep(3000);
+    }
+    if (misses >= 20) log('openzoo: savings pill stopped: no ChatGPT renderer found for 60s');
+  } finally { for (const session of sessions.values()) session.close(); }
+}
+
+export async function startChatGptSpend({ profile, proxyPort, spawnImpl = spawn } = {}) {
+  fs.mkdirSync(profile, { recursive: true });
+  const fd = fs.openSync(path.join(profile, 'openzoo-savings.log'), 'a', 0o600);
+  try {
+    const child = spawnImpl(process.execPath, [fileURLToPath(import.meta.url), '--watch', profile, String(proxyPort)], { detached: true, stdio: ['ignore', fd, fd] });
+    await new Promise((resolve, reject) => { child.once('spawn', resolve); child.once('error', reject); });
+    child.unref();
+  } finally { fs.closeSync(fd); }
+}
+
+/** One watcher per profile, including concurrent launcher invocations. */
+export function claimSpendWatcher(profile) {
+  const lock = path.join(profile, 'openzoo-savings.lock');
+  try {
+    const pid = Number(fs.readFileSync(lock, 'utf8'));
+    if (Number.isInteger(pid) && pid > 0) {
+      try { process.kill(pid, 0); return null; } catch (e) { if (e.code !== 'ESRCH') return null; }
+    } else if (Date.now() - fs.statSync(lock).mtimeMs < 60000) return null;
+    fs.unlinkSync(lock);
+  } catch (e) { if (e.code !== 'ENOENT') throw e; }
+  let fd;
+  try { fd = fs.openSync(lock, 'wx', 0o600); } catch (e) { if (e.code === 'EEXIST') return null; throw e; }
+  fs.writeFileSync(fd, String(process.pid)); fs.closeSync(fd);
+  return () => { try { if (fs.readFileSync(lock, 'utf8') === String(process.pid)) fs.unlinkSync(lock); } catch {} };
+}
+
+if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url) && process.argv[2] === '--watch') {
+  const release = claimSpendWatcher(process.argv[3]);
+  if (release) {
+    process.once('exit', release);
+    watchChatGptSpend({ profile: process.argv[3], proxyPort: Number(process.argv[4]) })
+      .catch(e => { console.error(e.message); process.exitCode = 1; }).finally(release);
+  }
+}

package/lib/chatgpt.js

@@ -1,38 +1,18 @@
 /**
  * `npx openzoo chatgpt` — OpenAI's ChatGPT desktop app on the zoo.
  *
- * The Linux preview of the official app (chatgpt.com/download, August 2026)
- * ships the Codex engine inside it: `usr/lib/chatgpt/resources/codex`, and
- * `usr/bin/chatgpt` is a symlink named `codex-launcher`. That engine reads a
- * standard Codex config — `$CODEX_HOME/config.toml`, default `~/.codex` — and
- * its `[model_providers.<id>]` table is the supported way to point it at any
- * OpenAI-shaped server. MEASURED 2026-09-09 on the .deb's `codex` binary:
- * the strings `model_providers`, `env_key`, `requires_openai_auth`,
- * `experimental_bearer_token`, `responses` and `https://api.openai.com/v1`
- * (as a default, next to `ollama` and `amazon-bedrock`) are all there, and
- * a provider block pointed at :8402 answered in the app.
- *
- * What this does and does not redirect, so nobody is surprised:
- *   - the Codex / agent side of the app ("sign in with API key") → the zoo,
- *     paid per turn by x402 through the local proxy;
- *   - the plain ChatGPT conversation tab → still chatgpt.com. It talks to
- *     `chatgpt_base_url = "https://chatgpt.com/backend-api/"`, a private
- *     backend that is not API-shaped, so there is nothing to point at us.
- *   - the two auth modes are exclusive: the binary logs "ChatGPT login is
- *     required, but an API key is currently being used. Logging out." Pick
- *     API-key mode for the session that should pay x402.
- *
- * One command, end to end: write the provider into config.toml (backing up
- * the old file, keeping every other table), make sure a proxy is listening,
- * find the app — or unpack the downloaded .deb on a distro that cannot
- * install it, which is how this was first done on Arch — and launch it with
- * the env var the provider's `env_key` names.
+ * Configures an isolated Codex home, installs the current official app when
+ * missing, starts the local proxy and launches the app with that configuration.
+ * Custom provider routing applies to Codex; ordinary ChatGPT chats still use
+ * chatgpt.com. No TryOmarchy or third-party app distribution is involved.
  */
 import { spawn, spawnSync } from 'node:child_process';
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 import { config } from './config.js';
+import { startChatGptSpend } from './chatgpt-spend.js';
+import { installChatGpt, windowsChatGptApp, runCommand } from './chatgpt-install.js';
 
 export const PROVIDER_ID = 'openzoo';
 export const API_KEY_ENV = 'OPENZOO_API_KEY';
@@ -48,8 +28,15 @@ export function codexConfigPath(env = process.env, home = os.homedir()) {
 }
 
 export function defaultModel(env = process.env) {
+  // DEEPSEEK BY DEFAULT. The person running `openzoo chatgpt` has not chosen
+  // a model and mostly will not: the default is what they pay for on every
+  // turn until they type /model. It used to be claude-opus-5, the most
+  // expensive door in the catalog, so the "much less spend" pitch shipped
+  // with the priciest setting turned on. deepseek-v4-flash is a fraction of
+  // a cent per million tokens in, carries a 1M-token window, and is a bare
+  // id the doors serve directly. Anyone who wants more says /model.
   // Bare ids are what the doors serve; the gateway resolves the rest.
-  return env.OPENZOO_DEFAULT_MODEL || 'claude-opus-5';
+  return env.OPENZOO_DEFAULT_MODEL || 'deepseek-v4-flash';
 }
 
 /**
@@ -113,7 +100,7 @@ export function mergeCodexConfig(existing, { model, port, wireApi, bearer } = {}
   });
   const head = [
     OUR_MARK,
-    `model = "${model || defaultModel()}"`,
+    `model = ${JSON.stringify(model || defaultModel())}`,
     `model_provider = "${PROVIDER_ID}"`,
   ];
   // trim blank padding so reruns do not accumulate empty lines
@@ -134,14 +121,15 @@ export function mergeCodexConfig(existing, { model, port, wireApi, bearer } = {}
 
 /** Candidate app binaries, most specific first. Exported for tests. */
 export function chatGptCandidates({ env = process.env, home = os.homedir(), platform = process.platform } = {}) {
+  const paths = platform === 'win32' ? path.win32 : path;
   const out = [];
   if (env.OPENZOO_CHATGPT_BIN) out.push(env.OPENZOO_CHATGPT_BIN);
   if (platform === 'darwin') {
     out.push('/Applications/ChatGPT.app/Contents/MacOS/ChatGPT');
     out.push(path.join(home, 'Applications', 'ChatGPT.app', 'Contents', 'MacOS', 'ChatGPT'));
   } else if (platform === 'win32') {
-    const local = env.LOCALAPPDATA || path.join(home, 'AppData', 'Local');
-    out.push(path.join(local, 'Programs', 'ChatGPT', 'ChatGPT.exe'));
+    const local = env.LOCALAPPDATA || paths.join(home, 'AppData', 'Local');
+    out.push(paths.join(local, 'Programs', 'ChatGPT', 'ChatGPT.exe'));
   } else {
     // the .deb's layout (apt install), then where THIS command unpacks it,
     // then the by-hand unpack path the first Arch run used
@@ -150,15 +138,21 @@ export function chatGptCandidates({ env = process.env, home = os.homedir(), plat
     out.push(path.join(unpackDir(home), 'usr', 'lib', 'chatgpt', 'ChatGPT'));
     out.push(path.join(home, 'apps', 'chatgpt', 'usr', 'lib', 'chatgpt', 'ChatGPT'));
   }
-  for (const dir of String(env.PATH || '').split(path.delimiter).filter(Boolean)) {
-    out.push(path.join(dir, platform === 'win32' ? 'chatgpt.exe' : 'chatgpt'));
+  for (const dir of String(env.PATH || '').split(platform === 'win32' ? ';' : ':').filter(Boolean)) {
+    out.push(paths.join(dir, platform === 'win32' ? 'chatgpt.exe' : 'chatgpt'));
   }
   return out;
 }
 
 export function resolveChatGptApp(opts = {}) {
   const exists = opts.exists || ((p) => { try { fs.accessSync(p, fs.constants.X_OK); return true; } catch { return false; } });
-  return chatGptCandidates(opts).find(exists) || null;
+  return chatGptCandidates(opts).find(p => {
+    if (!exists(p)) return false;
+    if ((opts.platform || process.platform) === 'darwin' && p.endsWith('/Contents/MacOS/ChatGPT')) {
+      return exists(path.resolve(path.dirname(p), '../Resources/codex'));
+    }
+    return true;
+  }) || null;
 }
 
 /** Where `--deb` (or an auto-found download) is unpacked. */
@@ -190,27 +184,35 @@ function have(bin) {
  */
 export function unpackDeb(deb, dest = unpackDir()) {
   if (!fs.existsSync(deb)) throw new Error(`no such file: ${deb}`);
-  fs.rmSync(dest, { recursive: true, force: true });
-  fs.mkdirSync(dest, { recursive: true });
+  fs.mkdirSync(path.dirname(dest), { recursive: true });
   const outer = fs.mkdtempSync(path.join(os.tmpdir(), 'openzoo-deb-'));
+  const staged = fs.mkdtempSync(path.join(path.dirname(dest), '.chatgpt-unpack-'));
   const run = (cmd, args, cwd) => {
     const r = spawnSync(cmd, args, { cwd, stdio: ['ignore', 'ignore', 'pipe'] });
-    if (r.status !== 0) throw new Error(`${cmd} ${args.join(' ')} failed: ${String(r.stderr || '').trim().slice(0, 200)}`);
+    if (r.status !== 0) throw new Error(`${cmd} failed: ${r.error?.message || String(r.stderr || '').trim().slice(0, 200)}`);
   };
-  if (have('bsdtar')) run('bsdtar', ['-xf', deb], outer);
-  else if (have('ar')) run('ar', ['x', deb], outer);
-  else throw new Error('need bsdtar (libarchive) or ar (binutils) to unpack a .deb');
-  const data = fs.readdirSync(outer).find((n) => /^data\.tar/.test(n));
-  if (!data) throw new Error('not a .deb: no data.tar inside');
-  run('tar', ['-xf', path.join(outer, data), '-C', dest]);
-  fs.rmSync(outer, { recursive: true, force: true });
-  const app = path.join(dest, 'usr', 'lib', 'chatgpt', 'ChatGPT');
-  if (!fs.existsSync(app)) throw new Error(`unpacked, but ${app} is not there — not the ChatGPT .deb?`);
-  return app;
+  try {
+    if (have('bsdtar')) run('bsdtar', ['-xf', deb], outer);
+    else if (have('ar')) run('ar', ['x', deb], outer);
+    else throw new Error('need bsdtar (libarchive) or ar (binutils) to unpack a .deb');
+    const data = fs.readdirSync(outer).find((n) => /^data\.tar/.test(n));
+    if (!data) throw new Error('not a .deb: no data.tar inside');
+    run('tar', ['-xf', path.join(outer, data), '-C', staged]);
+    const relative = path.join('usr', 'lib', 'chatgpt', 'ChatGPT');
+    if (!fs.existsSync(path.join(staged, relative))) throw new Error('package does not contain the ChatGPT desktop executable');
+    fs.accessSync(path.join(staged, relative), fs.constants.X_OK);
+    // Do not erase a previous unpack until the replacement has been validated.
+    fs.rmSync(dest, { recursive: true, force: true });
+    fs.renameSync(staged, dest);
+    return path.join(dest, relative);
+  } finally {
+    fs.rmSync(outer, { recursive: true, force: true });
+    fs.rmSync(staged, { recursive: true, force: true });
+  }
 }
 
 async function ensureProxy({ tunnel }) {
-  const { startProxy, oursOn, packageVersion } = await import('./proxy.js');
+  const { oursOn, packageVersion } = await import('./proxy.js');
   if (await oursOn(config.port)) return { started: false };
   // DETACHED, like `openzoo aoe`: the app outlives this command, so the
   // proxy must too. No public tunnel unless asked — a detached proxy nobody
@@ -237,28 +239,30 @@ async function ensureProxy({ tunnel }) {
   throw new Error(`proxy did not answer on :${config.port} within 60s — see ${logPath}`);
 }
 
-const INSTALL_HELP = `openzoo: ChatGPT desktop app not found.
-  download it from https://chatgpt.com/download (Linux: the .deb; macOS/Windows: the installer), then:
-    Debian/Ubuntu:  sudo apt install ./chatgpt_amd64.deb
-    Fedora:         sudo dnf install ./chatgpt*.rpm
-    Arch / other:   npx openzoo chatgpt --deb ~/Downloads/chatgpt_amd64.deb   (unpacked, no dpkg needed)
-  or point OPENZOO_CHATGPT_BIN at the binary.`;
-
 /**
  * `npx openzoo chatgpt [--model <id>] [--deb <file>] [--wire responses|chat]
  *                      [--bearer] [--no-launch] [--no-proxy] [--tunnel] [--print]`
  */
-export async function setupChatGpt(argv = []) {
+export async function setupChatGpt(argv = [], dependencies = {}) {
+  const { platform = process.platform, home = os.homedir(), env: sourceEnv = process.env,
+    resolve = resolveChatGptApp, install = installChatGpt, proxy = ensureProxy,
+    launch = launchChatGpt, findWindows = windowsChatGptApp, overlay = startChatGptSpend } = dependencies;
   const args = [...argv];
-  const opt = { model: null, deb: null, wireApi: 'responses', bearer: false, launch: true, proxy: true, tunnel: false, print: false, configPath: null, rest: [] };
+  const opt = { model: null, deb: null, wireApi: 'responses', bearer: false, launch: true, proxy: true, pill: true, tunnel: false, print: false, configPath: null, rest: [] };
   while (args.length) {
     const a = args.shift();
-    if (a === '--model') opt.model = String(args.shift() || '').trim() || null;
-    else if (a === '--deb') opt.deb = String(args.shift() || '').trim() || null;
-    else if (a === '--wire') opt.wireApi = String(args.shift() || '').trim();
-    else if (a === '--config') opt.configPath = String(args.shift() || '').trim() || null;
+    if (a === '--') { opt.rest.push(...args); break; }
+    const value = () => {
+      if (!args.length || args[0].startsWith('--') || !args[0].trim()) throw new Error(`${a} requires a value`);
+      return args.shift().trim();
+    };
+    if (a === '--model') opt.model = value();
+    else if (a === '--deb') opt.deb = value();
+    else if (a === '--wire') opt.wireApi = value();
+    else if (a === '--config') opt.configPath = value();
     else if (a === '--bearer') opt.bearer = true;
     else if (a === '--no-launch') opt.launch = false;
+    else if (a === '--no-pill') opt.pill = false;
     else if (a === '--no-proxy') opt.proxy = false;
     else if (a === '--tunnel') opt.tunnel = true;
     else if (a === '--print') opt.print = true;
@@ -266,7 +270,8 @@ export async function setupChatGpt(argv = []) {
     else opt.rest.push(a);
   }
   if (!['responses', 'chat'].includes(opt.wireApi)) throw new Error('--wire must be responses or chat');
-  const model = opt.model || defaultModel();
+  if (opt.deb && platform !== 'linux') throw new Error('--deb is only supported on Linux');
+  const model = opt.model || defaultModel(sourceEnv);
   const merge = { model, port: config.port, wireApi: opt.wireApi, bearer: opt.bearer };
 
   if (opt.print) {
@@ -275,54 +280,76 @@ export async function setupChatGpt(argv = []) {
   }
 
   // 1. config.toml
-  const file = opt.configPath || codexConfigPath();
+  const appHome = sourceEnv.CODEX_HOME || path.join(home, '.openzoo', 'chatgpt');
+  const file = path.resolve(opt.configPath || path.join(appHome, 'config.toml'));
+  if (path.basename(file) !== 'config.toml') throw new Error('--config must name config.toml (the filename Codex reads)');
   let existing = '';
   if (fs.existsSync(file)) {
     existing = fs.readFileSync(file, 'utf8');
-    fs.copyFileSync(file, `${file}.openzoo-backup`);
   } else {
     fs.mkdirSync(path.dirname(file), { recursive: true });
   }
   const next = mergeCodexConfig(existing, merge);
-  if (next !== existing) fs.writeFileSync(file, next);
-  console.log(`${next !== existing ? 'wrote' : 'kept'} ${file}: model_provider = "${PROVIDER_ID}" (http://localhost:${config.port}/v1, ${opt.wireApi}), model = "${model}"`);
-
-  // 2. proxy
-  if (opt.proxy) {
-    const p = await ensureProxy({ tunnel: opt.tunnel });
-    console.log(p.started ? `proxy up on :${config.port} (background)` : `proxy already on :${config.port}`);
+  if (next !== existing) {
+    if (existing && !fs.existsSync(`${file}.openzoo-backup`)) fs.copyFileSync(file, `${file}.openzoo-backup`);
+    fs.writeFileSync(file, next);
   }
+  console.log(`${next !== existing ? 'wrote' : 'kept'} ${file}: model_provider = "${PROVIDER_ID}" (http://localhost:${config.port}/v1, ${opt.wireApi}), model = "${model}"`);
 
   if (!opt.launch) {
-    console.log(`config only. launch the app with ${API_KEY_ENV}=${API_KEY_VALUE} in its environment and pick "sign in with API key".`);
+    console.log('config only; no download, installation, proxy or app launch.');
     return { file, model, launched: false };
   }
 
-  // 3. the app
-  let app = resolveChatGptApp();
-  if (!app && process.platform === 'linux') {
-    const deb = opt.deb || findDownloadedDeb();
-    if (deb) {
-      console.log(`unpacking ${deb} into ${unpackDir()} (no dpkg needed)`);
-      app = unpackDeb(deb);
-    }
-  } else if (opt.deb) {
-    app = unpackDeb(opt.deb);
-  }
-  if (!app) {
-    console.error(INSTALL_HELP);
-    process.exitCode = 1;
-    return { file, model, launched: false };
+  // Reuse an installation before attempting any download.
+  let app = resolve({ env: sourceEnv, home, platform });
+  if (!app && sourceEnv.OPENZOO_CHATGPT_BIN) throw new Error(`OPENZOO_CHATGPT_BIN is not an executable ChatGPT app: ${sourceEnv.OPENZOO_CHATGPT_BIN}`);
+  if (!app && platform === 'win32') app = await findWindows();
+  if (!app && platform === 'linux' && opt.deb) app = unpackDeb(path.resolve(opt.deb), unpackDir(home));
+  if (!app) app = await install({ platform, home, unpack: unpackDeb });
+
+  if (opt.proxy) {
+    const p = await proxy({ tunnel: opt.tunnel });
+    console.log(p.started ? `proxy up on :${config.port} (background)` : `proxy already on :${config.port}`);
   }
 
   // 4. launch, with the env var the provider's env_key names
-  const env = { ...process.env, [API_KEY_ENV]: process.env[API_KEY_ENV] || API_KEY_VALUE };
-  if (!env.CODEX_HOME) env.CODEX_HOME = codexHome();
+  const env = { ...sourceEnv, [API_KEY_ENV]: sourceEnv[API_KEY_ENV] || API_KEY_VALUE,
+    CODEX_HOME: path.dirname(file),
+    CODEX_ELECTRON_USER_DATA_PATH: path.join(path.dirname(file), 'desktop'),
+  };
   console.log(`launching ${app}`);
   console.log(`  Codex / agent mode → the zoo, paid per turn by x402. Choose "sign in with API key" (any key).`);
   console.log('  the plain ChatGPT chat tab still talks to chatgpt.com — that half is not API-shaped.');
-  const child = spawn(app, opt.rest, { stdio: 'ignore', env, detached: true });
-  child.on('error', (e) => console.error(`openzoo: could not launch ${app}: ${e.message}`));
-  child.unref();
+  const appArgs = opt.pill ? ['--remote-debugging-address=127.0.0.1', '--remote-debugging-port=0', ...opt.rest] : opt.rest;
+  await launch(app, appArgs, { env, platform });
+  if (opt.pill) {
+    try {
+      await overlay({ profile: env.CODEX_ELECTRON_USER_DATA_PATH, proxyPort: config.port });
+      console.log('savings pill enabled · spent / estimated direct cost / saved · shared proxy totals');
+    } catch (e) { console.error(`openzoo: savings pill unavailable: ${e.message}`); }
+  }
   return { file, model, app, launched: true };
 }
+
+/** LaunchServices handles app bundles on macOS; detect early failures elsewhere. */
+export async function launchChatGpt(app, args, { env, platform = process.platform, run = runCommand, spawnImpl = spawn } = {}) {
+  if (platform === 'darwin' && app.endsWith('/Contents/MacOS/ChatGPT')) {
+    await run('open', ['-n', '--env', `CODEX_HOME=${env.CODEX_HOME}`,
+      '--env', `CODEX_ELECTRON_USER_DATA_PATH=${env.CODEX_ELECTRON_USER_DATA_PATH}`,
+      '--env', `${API_KEY_ENV}=${env[API_KEY_ENV]}`,
+      app.slice(0, -'/Contents/MacOS/ChatGPT'.length), '--args',
+      `--user-data-dir=${env.CODEX_ELECTRON_USER_DATA_PATH}`, ...args], { env });
+    return;
+  }
+  await new Promise((resolve, reject) => {
+    const child = spawnImpl(app, [`--user-data-dir=${env.CODEX_ELECTRON_USER_DATA_PATH}`, ...args], { stdio: 'ignore', env, detached: true });
+    const timer = setTimeout(() => { child.unref(); resolve(); }, 1500);
+    child.once('error', e => { clearTimeout(timer); reject(e); });
+    child.once('exit', (code, signal) => {
+      clearTimeout(timer);
+      if (code === 0) resolve(); // an existing instance accepted the launch
+      else reject(new Error(`ChatGPT exited during launch (${signal || code})`));
+    });
+  });
+}

package/lib/modelcommand.js

@@ -0,0 +1,443 @@
+import { readFileSync, writeFileSync, mkdirSync, statSync, unlinkSync } from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { config } from './config.js';
+import { quoteableRows } from './models.js';
+
+/**
+ * `/model <name>` AS A CHAT COMMAND.
+ *
+ * THE FAILURE THIS EXISTS FOR. A user running ChatGPT desktop (Codex side,
+ * pointed at this proxy) typed `/model fable-5` into the chat box expecting the
+ * app to switch models. The app has NO such command — it forwarded the line to
+ * the model as an ordinary question. The model then spent six minutes and real
+ * money shelling around the gateway trying to work out what the user meant,
+ * and the model never changed. Codex/ChatGPT gives no model picker for a
+ * custom provider, so without this the only ways to switch are editing
+ * ~/.codex/config.toml and restarting the app.
+ *
+ * So the PROXY answers the command: it never reaches the wire, nothing is
+ * paid, and the override is remembered on disk so it survives a proxy restart.
+ * Everything here is a pure function except the four file helpers, so the
+ * tests can drive it without a socket.
+ */
+
+/**
+ * Normalised form for id comparison. MUST mirror the gateway's own matcher
+ * (x402-tokens src/modelmatch.ts) — a name the proxy accepts and the gateway
+ * then rejects is worse than no command at all, because the user has already
+ * been told "switched".
+ *
+ * Drop the vendor prefix, lowercase, and treat `.`/`_`/space as `-`, because
+ * the same model is spelled `claude-fable-5.1`, `claude_fable_5_1` and
+ * `anthropic/claude-fable-5-1` depending on who is printing it.
+ */
+export function normaliseModelId(s) {
+  const raw = String(s ?? '');
+  const bare = raw.slice(raw.lastIndexOf('/') + 1);
+  return bare
+    .toLowerCase()
+    .replace(/[._\s]+/g, '-')
+    .replace(/-+/g, '-')
+    .replace(/^-|-$/g, '');
+}
+
+/** Shortest normalised id first, then lexical on the REAL id — a total order,
+ *  so the same typed name always lands on the same model. `claude-fable-5` and
+ *  `venice/claude-fable-5` normalise identically; without the second key the
+ *  winner would depend on catalog order, which changes hourly. */
+function bestOf(cands) {
+  return cands.sort((a, b) => (
+    a.norm.length - b.norm.length || (a.id < b.id ? -1 : a.id > b.id ? 1 : 0)
+  ))[0]?.id ?? null;
+}
+
+/**
+ * Resolve a typed name against the gateway catalog. Exact normalised match,
+ * else a candidate ENDING in `-<want>` (so `fable-5` finds `claude-fable-5`),
+ * else a candidate merely containing it. Returns null when nothing fits.
+ *
+ * Two-character inputs are refused outright: `/model o3` style stubs matched
+ * dozens of unrelated ids by substring and the shortest-id tiebreak then picked
+ * an arbitrary one. A wrong model chosen silently is the failure mode this
+ * whole file is trying to end.
+ */
+export function matchCatalogId(want, ids) {
+  const w = normaliseModelId(want);
+  if (w.length < 3) return null;
+  const cands = (Array.isArray(ids) ? ids : [])
+    .filter((id) => typeof id === 'string' && id)
+    .map((id) => ({ id, norm: normaliseModelId(id) }));
+  const exact = cands.filter((c) => c.norm === w);
+  if (exact.length) return bestOf(exact);
+  const suffix = cands.filter((c) => c.norm.endsWith(`-${w}`));
+  if (suffix.length) return bestOf(suffix);
+  const contains = cands.filter((c) => c.norm.includes(w));
+  if (contains.length) return bestOf(contains);
+  return null;
+}
+
+/**
+ * Up to `n` ids to suggest after a miss. matchCatalogId already tried plain
+ * substring, so this deliberately goes LOOSER — every dash-token of what was
+ * typed, then shrinking prefixes — or a typo like `fabel-5` would print
+ * "no model matches" with no way forward.
+ */
+export function closestIds(want, ids, n = 3) {
+  const w = normaliseModelId(want);
+  const cands = (Array.isArray(ids) ? ids : [])
+    .filter((id) => typeof id === 'string' && id)
+    .map((id) => ({ id, norm: normaliseModelId(id) }));
+  const probes = [];
+  for (const tok of w.split('-')) if (tok.length >= 3) probes.push(tok);
+  for (let len = w.length - 1; len >= 3; len -= 1) probes.push(w.slice(0, len));
+  const out = [];
+  const seen = new Set();
+  for (const probe of probes) {
+    const hits = cands.filter((c) => c.norm.includes(probe))
+      .sort((a, b) => a.norm.length - b.norm.length || (a.id < b.id ? -1 : a.id > b.id ? 1 : 0));
+    for (const h of hits) {
+      if (seen.has(h.id)) continue;
+      seen.add(h.id);
+      out.push(h.id);
+      if (out.length >= n) return out;
+    }
+  }
+  return out;
+}
+
+/** Names people actually type, resolved against the LIVE catalog rather than
+ *  hardcoded — a hardcoded list goes stale the week the zoo re-quotes. */
+const POPULAR_HINTS = ['claude-fable-5', 'claude-opus-5', 'gpt-5', 'grok-4', 'gemini-3-pro'];
+
+export function popularIds(ids, n = 5) {
+  const out = [];
+  const push = (id) => { if (id && !out.includes(id)) out.push(id); };
+  for (const hint of POPULAR_HINTS) push(matchCatalogId(hint, ids));
+  for (const id of Array.isArray(ids) ? ids : []) { if (out.length >= n) break; push(id); }
+  return out.slice(0, n);
+}
+
+// ---------------------------------------------------------------------------
+// Detection: what did the user's LAST turn actually say?
+// ---------------------------------------------------------------------------
+
+/** Text of one message/item `content`, which is a bare string on the Chat
+ *  Completions side and an array of typed parts on the Responses side
+ *  (Codex sends `input_text`, browsers send `text`). */
+function partsText(content) {
+  if (typeof content === 'string') return content;
+  if (!Array.isArray(content)) return '';
+  return content
+    .filter((p) => p && typeof p.text === 'string' && (!p.type || p.type === 'text' || p.type === 'input_text' || p.type === 'output_text'))
+    .map((p) => p.text)
+    .join('\n');
+}
+
+/**
+ * The last USER turn of a request body, for both shapes we are ever sent:
+ * `messages[]` (chat completions + Anthropic messages) and `input`
+ * (Responses API — what ChatGPT/Codex posts). Anything else returns ''.
+ *
+ * Last-user-turn only, never a scan of the whole conversation: a transcript
+ * that happens to quote "/model fable-5" from three turns ago must not
+ * re-trigger the switch on an unrelated question.
+ */
+export function lastUserText(body) {
+  if (!body || typeof body !== 'object') return '';
+  if (Array.isArray(body.messages)) {
+    for (let i = body.messages.length - 1; i >= 0; i -= 1) {
+      const m = body.messages[i];
+      if (m && m.role === 'user') return partsText(m.content);
+    }
+    return '';
+  }
+  if (typeof body.input === 'string') return body.input;
+  if (Array.isArray(body.input)) {
+    for (let i = body.input.length - 1; i >= 0; i -= 1) {
+      const it = body.input[i];
+      if (it && it.role === 'user') return partsText(it.content);
+    }
+    return '';
+  }
+  return '';
+}
+
+/**
+ * `{ arg }` when the last user turn IS the command, else null. Deliberately
+ * anchored: a message that merely mentions /model, or asks a question about
+ * it, is a real question and must be paid for and answered by a model.
+ */
+export function detectModelCommand(body) {
+  const text = String(lastUserText(body) || '').trim();
+  if (!text) return null;
+  const m = /^\/model(?:\s+(.+))?$/i.exec(text);
+  if (!m) return null;
+  return { arg: (m[1] || '').trim() };
+}
+
+// ---------------------------------------------------------------------------
+// Persistence — one line in ~/.openzoo/model
+// ---------------------------------------------------------------------------
+
+/** Same directory as the wallet and proxy.log; there is no OPENZOO_HOME
+ *  convention in this codebase, so homedir() it is (which honours $HOME, and
+ *  that is how the tests get a throwaway one). */
+export function modelFilePath(home = os.homedir()) {
+  return path.join(home, '.openzoo', 'model');
+}
+
+// Cached by (mtime,size) rather than read-once: `openzoo model X` in a second
+// terminal writes this file while the proxy is running, and a plain in-memory
+// cache would keep serving the old id until restart — the exact "no restart"
+// promise the command makes.
+let memo = { file: null, stamp: null, id: null };
+
+export function readOverride(file = modelFilePath()) {
+  let stamp = 'missing';
+  try { const st = statSync(file); stamp = `${st.mtimeMs}:${st.size}`; } catch { /* not set */ }
+  if (memo.file === file && memo.stamp === stamp) return memo.id;
+  let id = null;
+  if (stamp !== 'missing') {
+    try { id = readFileSync(file, 'utf8').split('\n')[0].trim() || null; } catch { id = null; }
+  }
+  memo = { file, stamp, id };
+  return id;
+}
+
+export function writeOverride(id, file = modelFilePath()) {
+  mkdirSync(path.dirname(file), { recursive: true });
+  writeFileSync(file, `${id}\n`);
+  memo = { file: null, stamp: null, id: null };
+  return id;
+}
+
+export function clearOverride(file = modelFilePath()) {
+  try { unlinkSync(file); } catch { /* already gone */ }
+  memo = { file: null, stamp: null, id: null };
+}
+
+const RESET_WORDS = new Set(['reset', 'default', 'off', 'none', 'clear']);
+
+/**
+ * Run the command and return what to say back. Pure apart from the one file
+ * write, so the reply text is testable.
+ */
+export function applyModelCommand(arg, ids, file = modelFilePath()) {
+  const current = readOverride(file);
+  const wanted = String(arg || '').trim();
+  if (!wanted) {
+    return { text: statusText(current, ids), model: current || 'openzoo', changed: false };
+  }
+  if (RESET_WORDS.has(wanted.toLowerCase())) {
+    clearOverride(file);
+    return {
+      text: current
+        ? `Cleared the model override (was ${current}). Chats now use whatever the app sends.`
+        : 'No model override was set. Chats use whatever the app sends.',
+      model: 'openzoo',
+      changed: Boolean(current),
+    };
+  }
+  const hit = matchCatalogId(wanted, ids);
+  if (!hit) {
+    // A catalog we could not reach is NOT a bad name. Refusing here would make
+    // the command useless exactly when the gateway is flaky, so take the id as
+    // typed and say so — the next real request surfaces a wrong id anyway.
+    if (!Array.isArray(ids) || !ids.length) {
+      writeOverride(wanted, file);
+      return {
+        text: `Could not reach the model catalog, so I took "${wanted}" as typed. Every chat from here uses it until you send /model reset.`,
+        model: wanted,
+        changed: true,
+      };
+    }
+    const near = closestIds(wanted, ids);
+    return {
+      text: near.length
+        ? `No model matches "${wanted}". Closest: ${near.join(', ')}.`
+        : `No model matches "${wanted}". Send /model on its own to see some ids.`,
+      model: current || 'openzoo',
+      changed: false,
+    };
+  }
+  writeOverride(hit, file);
+  return {
+    text: `Switched to ${hit}. Every chat from here uses it until you send /model reset.`,
+    model: hit,
+    changed: hit !== current,
+  };
+}
+
+export function statusText(current, ids) {
+  const lines = [current
+    ? `Model override: ${current} — every chat uses it until you send /model reset.`
+    : 'Model override: none, using what the app sends.'];
+  const pop = popularIds(ids);
+  if (pop.length) {
+    lines.push('', 'Popular ids:');
+    for (const id of pop) lines.push(`  ${id}`);
+  }
+  lines.push('', 'Usage:  /model <name>   ·   /model reset');
+  return lines.join('\n');
+}
+
+// ---------------------------------------------------------------------------
+// Reply synthesisers — one per wire shape the proxy serves
+// ---------------------------------------------------------------------------
+
+/** Which of the four paid shapes is this? The reply has to be in the SHAPE the
+ *  client parses; a chat.completion sent to Codex's Responses parser is a hard
+ *  client error, which reads to the user as "the proxy is broken". */
+export function shapeForPath(rawPath) {
+  const p = String(rawPath || '');
+  if (/\/responses$/.test(p)) return 'responses';
+  if (/\/messages$/.test(p)) return 'anthropic';
+  return 'chat';
+}
+
+export function chatCompletionReply(text, model, now = Date.now()) {
+  return {
+    id: `chatcmpl-model-${now}`,
+    object: 'chat.completion',
+    created: Math.floor(now / 1000),
+    model,
+    choices: [{ index: 0, message: { role: 'assistant', content: text }, finish_reason: 'stop' }],
+    usage: { prompt_tokens: 0, completion_tokens: 0, total_tokens: 0 },
+  };
+}
+
+export function responsesReply(text, model, now = Date.now()) {
+  return {
+    id: `resp_model_${now}`,
+    object: 'response',
+    created_at: Math.floor(now / 1000),
+    status: 'completed',
+    model,
+    output: [{
+      type: 'message',
+      id: `msg_model_${now}`,
+      status: 'completed',
+      role: 'assistant',
+      content: [{ type: 'output_text', text, annotations: [] }],
+    }],
+    usage: { input_tokens: 0, output_tokens: 0, total_tokens: 0 },
+  };
+}
+
+/**
+ * The Responses SSE script, in the order Codex's parser walks it. Codex
+ * ALWAYS streams, so this — not the JSON object above — is the path that
+ * actually runs in the app. `sequence_number` increments from 0 on every
+ * event: the parser tolerates gaps today, but an out-of-order or missing
+ * counter is the first thing that breaks when it stops tolerating them.
+ */
+export function responsesStreamEvents(text, model, now = Date.now()) {
+  const id = `resp_model_${now}`;
+  const itemId = `msg_model_${now}`;
+  const head = { id, object: 'response', created_at: Math.floor(now / 1000), model };
+  const item = (status, content) => ({ type: 'message', id: itemId, status, role: 'assistant', content });
+  const finished = item('completed', [{ type: 'output_text', text, annotations: [] }]);
+  let seq = 0;
+  const ev = (event, data) => ({ event, data: { ...data, sequence_number: seq++ } });
+  return [
+    ev('response.created', { type: 'response.created', response: { ...head, status: 'in_progress', output: [] } }),
+    ev('response.output_item.added', { type: 'response.output_item.added', output_index: 0, item: item('in_progress', []) }),
+    ev('response.content_part.added', { type: 'response.content_part.added', output_index: 0, item_id: itemId, content_index: 0, part: { type: 'output_text', text: '' } }),
+    ev('response.output_text.delta', { type: 'response.output_text.delta', output_index: 0, item_id: itemId, content_index: 0, delta: text }),
+    ev('response.output_text.done', { type: 'response.output_text.done', output_index: 0, item_id: itemId, content_index: 0, text }),
+    ev('response.content_part.done', { type: 'response.content_part.done', output_index: 0, item_id: itemId, content_index: 0, part: { type: 'output_text', text, annotations: [] } }),
+    ev('response.output_item.done', { type: 'response.output_item.done', output_index: 0, item: finished }),
+    ev('response.completed', { type: 'response.completed', response: { ...head, status: 'completed', output: [finished], usage: { input_tokens: 0, output_tokens: 0, total_tokens: 0 } } }),
+  ];
+}
+
+export function anthropicReply(text, model, now = Date.now()) {
+  return {
+    id: `msg_model_${now}`,
+    type: 'message',
+    role: 'assistant',
+    model,
+    content: [{ type: 'text', text }],
+    stop_reason: 'end_turn',
+    stop_sequence: null,
+    usage: { input_tokens: 0, output_tokens: 0 },
+  };
+}
+
+/** Anthropic's own event script. Same reason as the Responses one: a Messages
+ *  client that asked for a stream and got a JSON body sits on a dead socket. */
+export function anthropicStreamEvents(text, model, now = Date.now()) {
+  const message = { ...anthropicReply('', model, now), content: [], stop_reason: null };
+  return [
+    { event: 'message_start', data: { type: 'message_start', message } },
+    { event: 'content_block_start', data: { type: 'content_block_start', index: 0, content_block: { type: 'text', text: '' } } },
+    { event: 'content_block_delta', data: { type: 'content_block_delta', index: 0, delta: { type: 'text_delta', text } } },
+    { event: 'content_block_stop', data: { type: 'content_block_stop', index: 0 } },
+    { event: 'message_delta', data: { type: 'message_delta', delta: { stop_reason: 'end_turn', stop_sequence: null }, usage: { output_tokens: 0 } } },
+    { event: 'message_stop', data: { type: 'message_stop' } },
+  ];
+}
+
+export const SSE_HEADERS = {
+  'content-type': 'text/event-stream; charset=utf-8',
+  'cache-control': 'no-cache',
+  // Same reason as serveAsSse in proxy.js: a buffering hop in front of us
+  // (quick tunnel, nginx) merges frames and the client sees nothing until the
+  // end, which looks like a hang.
+  'x-accel-buffering': 'no',
+  connection: 'keep-alive',
+};
+
+export function writeSseEvents(res, events) {
+  res.writeHead(200, SSE_HEADERS);
+  for (const { event, data } of events) res.write(`event: ${event}\ndata: ${JSON.stringify(data)}\n\n`);
+  res.end();
+}
+
+/**
+ * Answer the command on the socket, in whatever shape/streaming mode the
+ * client asked for. `serveAsSse` is injected rather than imported so this
+ * module stays free of proxy.js (which would be a cycle) and so the tests can
+ * pass a recording fake.
+ */
+export function serveModelCommand(res, { rawPath, stream, text, model, serveAsSse, now = Date.now() }) {
+  const shape = shapeForPath(rawPath);
+  if (shape === 'responses') {
+    if (stream) { writeSseEvents(res, responsesStreamEvents(text, model, now)); return shape; }
+    res.writeHead(200, { 'content-type': 'application/json' });
+    res.end(JSON.stringify(responsesReply(text, model, now)));
+    return shape;
+  }
+  if (shape === 'anthropic') {
+    if (stream) { writeSseEvents(res, anthropicStreamEvents(text, model, now)); return shape; }
+    res.writeHead(200, { 'content-type': 'application/json' });
+    res.end(JSON.stringify(anthropicReply(text, model, now)));
+    return shape;
+  }
+  const data = chatCompletionReply(text, model, now);
+  if (stream && typeof serveAsSse === 'function') { serveAsSse(res, data, null); return shape; }
+  res.writeHead(200, { 'content-type': 'application/json' });
+  res.end(JSON.stringify(data));
+  return shape;
+}
+
+/** Catalog ids for the CLI, which has no proxy cache to borrow. Soft-fails to
+ *  [] so `openzoo model x` still sets an override with the gateway down. */
+export async function catalogIds(apiBase = config.apiBase) {
+  try {
+    const r = await fetch(`${apiBase}/v1/models`, { signal: AbortSignal.timeout(8000) });
+    if (!r.ok) return [];
+    const payload = await r.json();
+    return quoteableRows(payload?.data).map((m) => m.id);
+  } catch { return []; }
+}
+
+/** `openzoo model [id|reset]` — same override file the chat command writes, so
+ *  a terminal and the chat box cannot disagree about which model is live. */
+export async function cliModel(arg) {
+  const ids = await catalogIds();
+  const out = applyModelCommand(arg, ids);
+  console.log(out.text);
+  if (out.changed) console.log('(a running proxy picks this up on its next request — no restart)');
+}

package/lib/ozSpendChip.js

@@ -758,7 +758,7 @@ function decodeWsFrames(buf) {
   return { frames, rest };
 }
 
-export function cdpSession(wsUrl, { timeoutMs = 8000 } = {}) {
+export function cdpSession(wsUrl, { timeoutMs = 8000, sendOrigin = true } = {}) {
   return new Promise((resolve, reject) => {
     let u;
     try { u = new URL(wsUrl); } catch (e) { reject(e); return; }
@@ -793,7 +793,7 @@ export function cdpSession(wsUrl, { timeoutMs = 8000 } = {}) {
         + 'Connection: Upgrade\r\n'
         + 'Sec-WebSocket-Version: 13\r\n'
         + `Sec-WebSocket-Key: ${key}\r\n`
-        + `Origin: http://${u.host}\r\n`
+        + (sendOrigin ? `Origin: http://${u.host}\r\n` : '')
         + '\r\n',
       );
     });

package/lib/proxy.js

@@ -14,6 +14,7 @@ import { tokenBalance } from './x402.js';
 import { evmTokenBalance } from './evm.js';
 import { autoContext } from './autobind.js';
 import { modelsListForRequest, isHarnessAliasId, resolveModel, quoteableRows, unopenrouter } from './models.js';
+import { detectModelCommand, applyModelCommand, serveModelCommand, readOverride } from './modelcommand.js';
 
 /**
  * Quoteable catalog ids, cached 5 minutes, for the fuzzy /v1/models/<id> probe.
@@ -440,6 +441,10 @@ export async function startProxy({ silent = false, requireToken = null, sessionM
     lastQuoteUsd = n > 1 ? billed / n : billed;
   };
   let tunnelSpent = 0;
+  // Last `from -> to` model rewrite we announced. The override applies to EVERY
+  // paid request, and saying so on every one buries the payment lines it sits
+  // next to; the user needs to know once, when it changes.
+  let saidOverride = null;
   // Live balance refresh state — the real implementation is assigned in the
   // banner section below; the handler only ever calls scheduleRefresh().
   let lastSnap = null;
@@ -763,6 +768,40 @@ export async function startProxy({ silent = false, requireToken = null, sessionM
       servedRequests += 1;
       say(`\n<- request #${servedRequests} from ${(req.headers['user-agent'] || 'unknown').slice(0, 40)}`);
       try { wantsStream = JSON.parse(bodyBuf.toString('utf8'))?.stream === true; } catch { /* not JSON */ }
+      // `/model <name>` IS A COMMAND, NOT A QUESTION.
+      //
+      // A user typed `/model fable-5` into ChatGPT desktop (Codex side, pointed
+      // here). The app has no such command, so it sent the line to the model as
+      // an ordinary turn — which then spent six minutes and real money shelling
+      // around the gateway trying to work out what was being asked, and the
+      // model never changed. Answer it here instead: no upstream call, no 402,
+      // no payment, and the choice is remembered in ~/.openzoo/model so it
+      // outlives the proxy. Must sit AHEAD of the replay key and the pay path.
+      try {
+        const parsed = JSON.parse(bodyBuf.toString('utf8'));
+        const cmd = parsed ? detectModelCommand(parsed) : null;
+        if (cmd) {
+          let ids = [];
+          try { ids = await catalogIdsCached(`${config.apiBase}/v1/models`, upstreamHeaders(req)); } catch { /* offline: applyModelCommand takes the id as typed */ }
+          const out = applyModelCommand(cmd.arg, ids);
+          say(`   /model ${cmd.arg || '(status)'} — answered locally, nothing paid`);
+          if (out.changed) saidOverride = null;
+          serveModelCommand(res, {
+            rawPath, stream: wantsStream, text: out.text, model: out.model, serveAsSse,
+          });
+          return;
+        }
+        // THE OVERRIDE ITSELF. Applied before the replay key so a switched
+        // model is a different cache entry, and before pay so the 402 is quoted
+        // for the model that will actually answer.
+        const override = readOverride();
+        if (override && parsed && typeof parsed.model === 'string' && parsed.model !== override) {
+          const pair = `${parsed.model} -> ${override}`;
+          if (saidOverride !== pair) { say(`   model override: ${pair}`); saidOverride = pair; }
+          parsed.model = override;
+          bodyBuf = Buffer.from(JSON.stringify(parsed));
+        }
+      } catch { /* not JSON */ }
       // UNOPENROUTER THE MODEL ID before anything downstream sees the body —
       // the replay key, the outage gate, the wire. A vendor-prefixed
       // OpenRouter spelling becomes the bare id the doors serve when the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.51.5",
+  "version": "0.51.7",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun \u2014 point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",