openzoo 0.9.4 → 0.9.6

package/bin/openzoo.js

@@ -30,12 +30,12 @@ env:
   OPENZOO_RPC (mainnet-beta)  OPENZOO_TOKEN (402 rail preference)  OPENZOO_WALLET (~/.openzoo/wallet.json)
   OPENZOO_RAIL (unset — force a rail: solana | base | robinhood)
   OPENZOO_BASE_RPC (https://mainnet.base.org)  OPENZOO_RH_RPC (rpc.mainnet.chain.robinhood.com)
-  OPENZOO_MAX_USD_PER_CALL (0.5)  OPENZOO_DEMO_MAX_USD (0.01)
+  OPENZOO_MAX_USD_PER_CALL (unset — NO per-call ceiling; set to add one)  OPENZOO_DEMO_MAX_USD (0.01)
   OPENZOO_CONTEXT_MIN_CHARS (16384 — bodies bigger than this bind once + reuse)
   OPENZOO_NO_CONTEXT_CACHE (0 — set 1 to always ship the full body)
   OPENZOO_ENABLE_RH (0 — let DEFAULT selection fall through to the Robinhood rail;
                      OPENZOO_RAIL=robinhood forces it without this)
-  OPENZOO_TUNNEL_MAX_USD (1.00 — public-url session ceiling)  OPENZOO_TUNNEL_TOKEN (pin the api key)
+  OPENZOO_TUNNEL_MAX_USD (unset — NO public-url session ceiling; set to add one)  OPENZOO_TUNNEL_TOKEN (pin the api key)
   OPENZOO_NO_TUNNEL (0 — set 1 for localhost-only, no public url)`;
 
 async function main() {

package/lib/config.js

@@ -15,7 +15,9 @@ export const config = {
   rhRpcUrl: process.env.OPENZOO_RH_RPC || 'https://rpc.mainnet.chain.robinhood.com',
   walletPath: process.env.OPENZOO_WALLET || path.join(os.homedir(), '.openzoo', 'wallet.json'),
   // Refuse to auto-pay any single 402 quote above this many USD (extra.billedUsd).
-  maxUsdPerCall: Number(process.env.OPENZOO_MAX_USD_PER_CALL || 0.5),
+  // UNCAPPED by default (user directive: no maximums — a giant bound-corpus
+  // call is a legitimate call). Set OPENZOO_MAX_USD_PER_CALL to add a ceiling.
+  maxUsdPerCall: process.env.OPENZOO_MAX_USD_PER_CALL ? Number(process.env.OPENZOO_MAX_USD_PER_CALL) : Infinity,
   // Demo will only actually pay if the quote is at or below this.
   demoMaxUsd: Number(process.env.OPENZOO_DEMO_MAX_USD || 0.01),
 };

package/lib/proxy.js

@@ -271,12 +271,37 @@ export async function startProxy({ silent = false, requireToken = null, sessionM
     }
     if (viaTunnel) {
       const got = (req.headers.authorization || '').replace(/^Bearer\s+/i, '').trim();
-      if (got !== tunnelGate.token) {
-        log(`public url: 401 ${req.method} ${req.url}`);
-        jsonErr(res, 401, 'unauthorized: this openzoo public URL requires the api key printed at startup');
-        return;
+      const authed = got === tunnelGate.token;
+      const p = (req.url || '').split('?')[0];
+      // DISCOVERY IS FREE. An agent probing this URL cold should be able to
+      // work out what it is and what to ask its operator for — a bare 401 on
+      // every path just sends it spelunking through the operator's machine.
+      // Reads that cost nothing and leak nothing (the catalog is public on
+      // the zoo anyway) go through without the key; money paths stay gated.
+      if (!authed) {
+        if (req.method === 'GET' && (p === '/' || p === '/v1' || p === '/v1/info')) {
+          res.writeHead(200, { 'content-type': 'application/json' });
+          res.end(JSON.stringify({
+            name: 'openzoo proxy (public tunnel)',
+            what: 'OpenAI-compatible pay-per-call proxy — the operator\'s wallet pays per request via x402; no account, no signup.',
+            authentication: 'All POST endpoints require `Authorization: Bearer <api key>`. The key is printed in the operator\'s terminal at proxy startup — ask them for it. It is NOT guessable.',
+            endpoints: {
+              'GET /v1/models': 'model catalog with pricing + context_length — no key needed',
+              'GET /v1/models/{id}': 'single-model probe — no key needed',
+              'POST /v1/chat/completions': 'chat (streaming supported, any model id — unknown ids are matched to the nearest served model) — key required',
+            },
+            docs: 'https://openzoo.fun · https://www.npmjs.com/package/openzoo',
+          }, null, 2));
+          return;
+        }
+        const freeRead = req.method === 'GET' && (p === '/v1/models' || p.startsWith('/v1/models/'));
+        if (!freeRead) {
+          log(`public url: 401 ${req.method} ${req.url}`);
+          jsonErr(res, 401, 'unauthorized: this openzoo public URL requires the api key printed at the operator\'s proxy startup — GET / for discovery, GET /v1/models is open');
+          return;
+        }
       }
-      if (tunnelSpent >= tunnelGate.sessionMaxUsd) {
+      if (authed && tunnelSpent >= tunnelGate.sessionMaxUsd) {
         jsonErr(res, 402, `openzoo public-URL session cap reached ($${tunnelGate.sessionMaxUsd}) — restart the proxy or raise OPENZOO_TUNNEL_MAX_USD`);
         return;
       }
@@ -515,7 +540,7 @@ export async function startProxy({ silent = false, requireToken = null, sessionM
       try {
         const { ensureCloudflared, startCloudflared, mintToken } = await import('./tunnel.js');
         const token = mintToken();
-        const cap = Number(process.env.OPENZOO_TUNNEL_MAX_USD || 1);
+        const cap = process.env.OPENZOO_TUNNEL_MAX_USD ? Number(process.env.OPENZOO_TUNNEL_MAX_USD) : Infinity;
         const bin = await ensureCloudflared((m) => log(m));
         const { url, proc } = await startCloudflared(bin, config.port, log);
         tunnelGate = { token, sessionMaxUsd: cap };
@@ -527,8 +552,8 @@ export async function startProxy({ silent = false, requireToken = null, sessionM
         log('cloud IDE / remote harness? use the public URL (they cannot reach localhost):');
         log(`  base_url = ${url}/v1`);
         log(`  api_key  = ${token}`);
-        log(`  (key REQUIRED on the public URL — it spends this wallet; capped at $${cap.toFixed(2)}/session,`);
-        log('   OPENZOO_TUNNEL_MAX_USD to change, OPENZOO_NO_TUNNEL=1 for localhost-only)');
+        log(`  (key REQUIRED on the public URL — it spends this wallet; ${Number.isFinite(cap) ? `capped at $${cap.toFixed(2)}/session` : 'NO session cap — OPENZOO_TUNNEL_MAX_USD adds one'},`);
+        log('   OPENZOO_NO_TUNNEL=1 for localhost-only)');
       } catch (err) {
         log(`public URL unavailable (${err.message}) — localhost still works; OPENZOO_NO_TUNNEL=1 hides this line`);
       }

package/lib/tunnel.js

@@ -16,8 +16,8 @@
  * front of your money, so tunnel mode is the ONE mode where the api key is real:
  *   - a random bearer token is minted per session and REQUIRED (401 otherwise),
  *     checked before anything is forwarded, quoted, or paid;
- *   - the per-call cap (OPENZOO_MAX_USD_PER_CALL) still applies, and a session
- *     ceiling (OPENZOO_TUNNEL_MAX_USD, default $1) stops paying when reached;
+ *   - caps are OPT-IN (user directive: no maximums by default) — set
+ *     OPENZOO_MAX_USD_PER_CALL and/or OPENZOO_TUNNEL_MAX_USD to add them;
  *   - every tunnel-served request is logged with its running spend.
  */
 import { spawn } from 'node:child_process';
@@ -119,7 +119,8 @@ export async function runTunnel() {
   const { config } = await import('./config.js');
 
   const token = mintToken();
-  const sessionCap = Number(process.env.OPENZOO_TUNNEL_MAX_USD || 1);
+  // Uncapped unless the user sets a ceiling — the required token is the gate.
+  const sessionCap = process.env.OPENZOO_TUNNEL_MAX_USD ? Number(process.env.OPENZOO_TUNNEL_MAX_USD) : null;
 
   // The proxy enforces the gate itself: nothing is forwarded, quoted or paid
   // without the bearer token, and the session ceiling stops spend cold.
@@ -136,7 +137,9 @@ export async function runTunnel() {
   console.log('  ┌─────────────────────────────────────────────────────────────');
   console.log('  │  THIS URL SPENDS REAL MONEY FROM YOUR WALLET.');
   console.log('  │  The token below is the only thing protecting it.');
-  console.log(`  │  Session ceiling: $${sessionCap.toFixed(2)} — then it stops paying.`);
+  console.log(sessionCap != null
+    ? `  │  Session ceiling: $${sessionCap.toFixed(2)} — then it stops paying.`
+    : '  │  NO session ceiling — OPENZOO_TUNNEL_MAX_USD adds one.');
   console.log('  │  Ctrl-C when you are done; the URL dies with this process.');
   console.log('  └─────────────────────────────────────────────────────────────');
   console.log('');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openzoo",
-  "version": "0.9.4",
+  "version": "0.9.6",
   "description": "Local x402-paying proxy + MCP server for openzoo.fun — point any OpenAI-compatible harness (Cursor, Claude Code, aider, SDKs) at localhost and it pays per call from a local burner wallet. Solana and Base rails live; Robinhood experimental.",
   "license": "MIT",
   "type": "module",