@blockrun/clawrouter 0.12.262 → 0.12.264

package/dist/cli.js

@@ -32632,7 +32632,7 @@ var init_spend_control = __esm({
           }
         }
         if (this.limits.hourly !== void 0) {
-          const hourlySpent = this.getSpendingInWindow(now2 - HOUR_MS, now2);
+          const hourlySpent = this.getSpendingInWindow(now2 - HOUR_MS, now2, now2);
           const remaining = this.limits.hourly - hourlySpent;
           if (estimatedCost2 > remaining) {
             const oldestInWindow = this.history.find((r2) => r2.timestamp >= now2 - HOUR_MS);
@@ -32647,7 +32647,7 @@ var init_spend_control = __esm({
           }
         }
         if (this.limits.daily !== void 0) {
-          const dailySpent = this.getSpendingInWindow(now2 - DAY_MS, now2);
+          const dailySpent = this.getSpendingInWindow(now2 - DAY_MS, now2, now2);
           const remaining = this.limits.daily - dailySpent;
           if (estimatedCost2 > remaining) {
             const oldestInWindow = this.history.find((r2) => r2.timestamp >= now2 - DAY_MS);
@@ -32744,17 +32744,30 @@ var init_spend_control = __esm({
           }
         }
       }
-      getSpendingInWindow(from15, to) {
+      // `now` is the single clock reading the caller already took to build the
+      // window; it must be passed in, not re-read here. In-flight reservations are
+      // "now" holds, so they count only against a window that reaches the present
+      // (`to >= now`). The bug this guards against: reading the clock a SECOND time
+      // inside this method (the old `to >= this.now()`) could land a millisecond
+      // after the caller's `now`, flip the guard false, and silently drop the
+      // pending total from the hourly/daily check — letting two concurrent payments
+      // both clear the same remaining budget. Threading the caller's `now` keeps the
+      // guard meaningful (a genuinely historical window with `to < now` still
+      // excludes live holds) without a second, racing read. Every existing test
+      // injects a frozen clock (`now: () => clock`), so the two reads always matched
+      // and the sub-ms window went uncaught; see the live-clock test in
+      // spend-control.test.ts.
+      getSpendingInWindow(from15, to, now2) {
         const recorded = this.history.filter((r2) => r2.timestamp >= from15 && r2.timestamp <= to).reduce((sum, r2) => sum + r2.amount, 0);
-        return recorded + (to >= this.now() ? this.pendingTotal() : 0);
+        return recorded + (to >= now2 ? this.pendingTotal() : 0);
       }
       getSpending(window2) {
         const now2 = this.now();
         switch (window2) {
           case "hourly":
-            return this.getSpendingInWindow(now2 - HOUR_MS, now2);
+            return this.getSpendingInWindow(now2 - HOUR_MS, now2, now2);
           case "daily":
-            return this.getSpendingInWindow(now2 - DAY_MS, now2);
+            return this.getSpendingInWindow(now2 - DAY_MS, now2, now2);
           case "session":
             return this.sessionSpent + this.pendingTotal();
         }
@@ -32766,8 +32779,8 @@ var init_spend_control = __esm({
       }
       getStatus() {
         const now2 = this.now();
-        const hourlySpent = this.getSpendingInWindow(now2 - HOUR_MS, now2);
-        const dailySpent = this.getSpendingInWindow(now2 - DAY_MS, now2);
+        const hourlySpent = this.getSpendingInWindow(now2 - HOUR_MS, now2, now2);
+        const dailySpent = this.getSpendingInWindow(now2 - DAY_MS, now2, now2);
         return {
           limits: cloneLimits(this.limits),
           spending: {
@@ -39920,6 +39933,13 @@ var init_version4 = __esm({
 import { readdir, unlink } from "fs/promises";
 import { join as join5 } from "path";
 import { homedir as homedir3 } from "os";
+function resolveStatsDays(raw) {
+  const parsed = parseInt(raw ?? "", 10);
+  if (!Number.isFinite(parsed) || parsed <= 0) {
+    return DEFAULT_STATS_DAYS;
+  }
+  return Math.min(parsed, MAX_STATS_DAYS);
+}
 async function parseLogFile(filePath) {
   try {
     const content = await readTextFile(filePath);
@@ -40105,7 +40125,8 @@ function formatStatsAscii(stats) {
   lines.push("\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255D");
   return lines.join("\n");
 }
-async function formatRecentLogs(days = 1) {
+async function formatRecentLogs(requestedDays = 1) {
+  const days = Number.isFinite(requestedDays) && requestedDays > 0 ? Math.floor(requestedDays) : 1;
   const logFiles = await getLogFiles();
   const filesToRead = logFiles.slice(0, days);
   const allEntries = [];
@@ -40161,13 +40182,15 @@ async function clearStats() {
     return { deletedFiles: 0 };
   }
 }
-var LOG_DIR2;
+var LOG_DIR2, DEFAULT_STATS_DAYS, MAX_STATS_DAYS;
 var init_stats = __esm({
   "src/stats.ts"() {
     "use strict";
     init_fs_read();
     init_version4();
     LOG_DIR2 = join5(homedir3(), ".openclaw", "blockrun", "logs");
+    DEFAULT_STATS_DAYS = 7;
+    MAX_STATS_DAYS = 30;
   }
 });
 
@@ -91086,8 +91109,8 @@ async function startProxy(options) {
       if (req.url === "/stats" || req.url?.startsWith("/stats?")) {
         try {
           const url2 = new URL(req.url, "http://localhost");
-          const days = parseInt(url2.searchParams.get("days") || "7", 10);
-          const stats = await getStats(Math.min(days, 30));
+          const days = resolveStatsDays(url2.searchParams.get("days"));
+          const stats = await getStats(days);
           res.writeHead(200, {
             "Content-Type": "application/json",
             "Cache-Control": "no-cache"
@@ -117009,6 +117032,35 @@ var init_client5 = __esm({
   }
 });
 
+// src/polymarket/spend-policy.ts
+function resolveSpendControl(deps) {
+  if (deps?.spendControl) return deps.spendControl;
+  defaultControl ??= new SpendControl();
+  return defaultControl;
+}
+function usdToMicros(usd) {
+  return String(Math.ceil(usd * 1e6));
+}
+async function signUnderSpendPolicy(deps, quote, action, sign4) {
+  const control = resolveSpendControl(deps);
+  const reservation = assertSpendPolicyAllows(control, quote);
+  try {
+    const signed2 = await sign4();
+    if (reservation !== void 0) control.settleReservation(reservation, { action });
+    return signed2;
+  } catch (err) {
+    if (reservation !== void 0) control.releaseReservation(reservation);
+    throw err;
+  }
+}
+var defaultControl;
+var init_spend_policy = __esm({
+  "src/polymarket/spend-policy.ts"() {
+    "use strict";
+    init_spend_control();
+  }
+});
+
 // src/polymarket/orders.ts
 function getSessionLedger() {
   return {
@@ -117077,6 +117129,9 @@ function isCredsMismatchError(err) {
   return msg.includes("unauthorized") || msg.includes("api key not found") || msg.includes("invalid api key");
 }
 async function mapClobError(err) {
+  if (err instanceof SpendPolicyError) {
+    return `Refused by spend policy \u2014 nothing was signed. ${err.message} (see ~/.openclaw/blockrun/spending.json)`;
+  }
   const e7 = err;
   const dataText = e7?.data ? ` \u2014 ${typeof e7.data === "string" ? e7.data : JSON.stringify(e7.data)}` : "";
   const message = `${e7?.message ?? String(err)}${dataText}`;
@@ -117123,7 +117178,7 @@ async function withCredsRetry(fn) {
     return fn(fresh);
   }
 }
-async function executeTrade(input) {
+async function executeTrade(input, deps) {
   const side = input.action === "buy" ? Side.BUY : Side.SELL;
   const isLimit = input.price !== void 0;
   if (isLimit && input.size === void 0) {
@@ -117135,6 +117190,18 @@ async function executeTrade(input) {
       isError: true
     };
   }
+  if (!isLimit && input.action === "buy" && input.amount_usd !== void 0 && !(Number.isFinite(input.amount_usd) && input.amount_usd > 0)) {
+    return {
+      text: `amount_usd must be a positive dollar amount to spend, got ${input.amount_usd}.`,
+      isError: true
+    };
+  }
+  if (isLimit && input.size !== void 0 && !(Number.isFinite(input.size) && input.size > 0)) {
+    return {
+      text: `size must be a positive number of shares, got ${input.size}.`,
+      isError: true
+    };
+  }
   if (!isLimit && input.action === "sell" && input.size === void 0) {
     return { text: `Market sells need size (shares to sell).`, isError: true };
   }
@@ -117234,39 +117301,44 @@ Re-call with confirm:true to sign and submit.`,
       }
       const options = { tickSize, negRisk };
       reserveBet(notional, input.agent_id);
-      let response;
+      const policyQuote = {
+        payTo: negRisk ? NEG_RISK_CTF_EXCHANGE_V2 : CTF_EXCHANGE_V2,
+        network: `eip155:${POLYGON_CHAIN_ID}`,
+        asset: PUSD_COLLATERAL,
+        amount: usdToMicros(notional)
+      };
+      let r2;
       try {
-        response = isLimit ? await clob.createAndPostOrder(
-          {
-            tokenID: token.tokenId,
-            price,
-            size: size5,
-            side,
-            ...orderKind === "GTD" && input.expires_at ? { expiration: input.expires_at } : {}
-          },
-          options,
-          orderKind === "GTD" ? OrderType.GTD : OrderType.GTC,
-          input.post_only ?? false
-        ) : await clob.createAndPostMarketOrder(
-          {
-            tokenID: token.tokenId,
-            amount: input.action === "buy" ? input.amount_usd : size5,
-            side,
-            orderType: orderKind === "FAK" ? OrderType.FAK : OrderType.FOK
-          },
-          options,
-          orderKind === "FAK" ? OrderType.FAK : OrderType.FOK
-        );
+        r2 = await signUnderSpendPolicy(deps, policyQuote, "polymarket order", async () => {
+          const res = await (isLimit ? clob.createAndPostOrder(
+            {
+              tokenID: token.tokenId,
+              price,
+              size: size5,
+              side,
+              ...orderKind === "GTD" && input.expires_at ? { expiration: input.expires_at } : {}
+            },
+            options,
+            orderKind === "GTD" ? OrderType.GTD : OrderType.GTC,
+            input.post_only ?? false
+          ) : clob.createAndPostMarketOrder(
+            {
+              tokenID: token.tokenId,
+              amount: input.action === "buy" ? input.amount_usd : size5,
+              side,
+              orderType: orderKind === "FAK" ? OrderType.FAK : OrderType.FOK
+            },
+            options,
+            orderKind === "FAK" ? OrderType.FAK : OrderType.FOK
+          ));
+          const placed = res?.success !== false && (res?.orderID || res?.status === "matched");
+          if (!placed) throw new Error(res?.errorMsg || "order rejected");
+          return res;
+        });
       } catch (submitErr) {
         releaseBet(notional, input.agent_id);
         throw submitErr;
       }
-      const r2 = response;
-      const placed = r2?.success !== false && (r2?.orderID || r2?.status === "matched");
-      if (!placed) {
-        releaseBet(notional, input.agent_id);
-        throw new Error(r2?.errorMsg || "order rejected");
-      }
       commitBet();
       const filled = r2?.status === "matched" || (r2?.transactionsHashes?.length ?? 0) > 0;
       return {
@@ -117355,6 +117427,8 @@ var init_orders = __esm({
     init_client5();
     init_constants3();
     init_creds();
+    init_spend_control();
+    init_spend_policy();
     ledger = {
       totalUsd: 0,
       count: 0,
@@ -225289,7 +225363,7 @@ var init_setup = __esm({
 });
 
 // src/polymarket/redeem.ts
-async function redeemPosition(input) {
+async function redeemPosition(input, deps) {
   if (!input.condition_id) {
     return {
       text: `Pass condition_id:"0x\u2026" (see action:"positions" for redeemable markets).`,
@@ -225365,20 +225439,31 @@ async function redeemPosition(input) {
       ]
     });
     const target = negRisk ? NEG_RISK_ADAPTER : CONDITIONAL_TOKENS;
-    let txHash;
-    if (getSigType() === 3) {
-      const res = await sendWalletBatch([{ target, value: "0", data }], owner, "Redeem");
-      txHash = res.transactionHash;
-    } else {
-      const account = getPolymarketAccount();
-      const wallet = createWalletClient({
-        account,
-        chain: polygon,
-        transport: http(POLYGON_RPC_URLS[0])
-      });
-      txHash = await wallet.sendTransaction({ to: target, data, chain: polygon, account });
-      await pc.waitForTransactionReceipt({ hash: txHash });
-    }
+    const eoa = getSigType() !== 3;
+    const txHash = await signUnderSpendPolicy(
+      deps,
+      {
+        payTo: target,
+        network: `eip155:${POLYGON_CHAIN_ID}`,
+        asset: PUSD_COLLATERAL,
+        amount: "0"
+      },
+      "polymarket redeem",
+      async () => {
+        if (!eoa) {
+          const res = await sendWalletBatch([{ target, value: "0", data }], owner, "Redeem");
+          return res.transactionHash;
+        }
+        const account = getPolymarketAccount();
+        const wallet = createWalletClient({
+          account,
+          chain: polygon,
+          transport: http(POLYGON_RPC_URLS[0])
+        });
+        return wallet.sendTransaction({ to: target, data, chain: polygon, account });
+      }
+    );
+    if (eoa) await pc.waitForTransactionReceipt({ hash: txHash });
     const balanceAfter = await getPusdBalance(owner).catch(() => null);
     return {
       text: [
@@ -225409,6 +225494,7 @@ var init_redeem = __esm({
     init_positions();
     init_relayer();
     init_setup();
+    init_spend_policy();
   }
 });
 
@@ -225421,7 +225507,13 @@ async function rawPusdBalance(owner) {
     args: [owner]
   });
 }
-async function withdrawFunds(input) {
+async function withdrawFunds(input, deps) {
+  if (input.amount_usd !== void 0 && !(Number.isFinite(input.amount_usd) && input.amount_usd > 0)) {
+    return {
+      text: `amount_usd must be a positive dollar amount, got ${input.amount_usd}. Omit it to withdraw the full balance.`,
+      isError: true
+    };
+  }
   let owner;
   try {
     owner = getFundsAddress();
@@ -225492,29 +225584,40 @@ async function withdrawFunds(input) {
       functionName: "transfer",
       args: [bridgeEvm, amountRaw]
     });
-    let txHash;
-    if (getSigType() === 3) {
-      const res = await sendWalletBatch(
-        [{ target: PUSD_COLLATERAL, value: "0", data }],
-        owner,
-        "Withdraw"
-      );
-      txHash = res.transactionHash;
-    } else {
-      const account = getPolymarketAccount();
-      const wallet = createWalletClient({
-        account,
-        chain: polygon,
-        transport: http(POLYGON_RPC_URLS[0])
-      });
-      txHash = await wallet.sendTransaction({
-        to: PUSD_COLLATERAL,
-        data,
-        chain: polygon,
-        account
-      });
-      await getPublicClient().waitForTransactionReceipt({ hash: txHash });
-    }
+    const eoa = getSigType() !== 3;
+    const txHash = await signUnderSpendPolicy(
+      deps,
+      {
+        payTo: recipient,
+        network: `eip155:${BASE_CHAIN_ID}`,
+        asset: BASE_USDC,
+        amount: amountRaw.toString()
+      },
+      "polymarket withdraw",
+      async () => {
+        if (!eoa) {
+          const res = await sendWalletBatch(
+            [{ target: PUSD_COLLATERAL, value: "0", data }],
+            owner,
+            "Withdraw"
+          );
+          return res.transactionHash;
+        }
+        const account = getPolymarketAccount();
+        const wallet = createWalletClient({
+          account,
+          chain: polygon,
+          transport: http(POLYGON_RPC_URLS[0])
+        });
+        return wallet.sendTransaction({
+          to: PUSD_COLLATERAL,
+          data,
+          chain: polygon,
+          account
+        });
+      }
+    );
+    if (eoa) await getPublicClient().waitForTransactionReceipt({ hash: txHash });
     return {
       text: [
         `\u2705 Withdrawal submitted: $${amountUsd.toFixed(2)} pUSD \u2192 USDC on Base`,
@@ -225549,6 +225652,7 @@ var init_withdraw = __esm({
     init_positions();
     init_relayer();
     init_setup();
+    init_spend_policy();
   }
 });
 
@@ -226194,7 +226298,7 @@ async function bridgeAddressFor(vault) {
     throw new Error(`Bridge did not return a deposit address (got: ${JSON.stringify(res.data)}).`);
   return evm;
 }
-async function fundVault(input) {
+async function fundVault(input, deps) {
   if (input.amount_usd === void 0 || input.amount_usd <= 0) {
     return {
       text: `Pass amount_usd \u2014 the USDC amount to move from your Base wallet into your Polymarket vault (e.g. amount_usd:5).`,
@@ -226251,12 +226355,12 @@ async function fundVault(input) {
     }
     const privateKey = getOrCreateWalletKey();
     const amountMicro = String(Math.floor(amountUsd * 10 ** USDC_DECIMALS));
-    const depositAuthorization = await createPaymentPayload(
-      privateKey,
-      agent,
-      bridge,
-      amountMicro,
-      `eip155:${BASE_CHAIN_ID}`
+    const network = `eip155:${BASE_CHAIN_ID}`;
+    const depositAuthorization = await signUnderSpendPolicy(
+      deps,
+      { payTo: bridge, network, asset: BASE_USDC, amount: amountMicro },
+      "polymarket fund",
+      () => createPaymentPayload(privateKey, agent, bridge, amountMicro, network)
     );
     const client = new BlockrunClient({ privateKey });
     const result = await client.post("/v1/polymarket/fund", {
@@ -226306,6 +226410,7 @@ var init_fund = __esm({
     init_constants3();
     init_positions();
     init_setup();
+    init_spend_policy();
     FUND_FEE_USD = 0.01;
     USDC_DECIMALS = 6;
     FUND_MIN_USD = Number(process.env.POLYMARKET_FUND_MIN_USD || "2");
@@ -228605,6 +228710,7 @@ init_balance();
 init_wallet2();
 init_stats();
 init_proxy();
+init_spend_control();
 init_version4();
 import { platform, arch, freemem, totalmem } from "os";
 import { existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
@@ -228871,6 +228977,15 @@ var DOCTOR_MODELS = {
     cost: "~$0.01"
   }
 };
+function createDoctorX402Client(opts) {
+  const account = privateKeyToAccount(opts.walletKey);
+  const publicClient = createPublicClient({ chain: base, transport: http() });
+  const evmSigner = toClientEvmSigner(account, publicClient);
+  const x402 = new x402Client();
+  registerSpendPolicyHook(x402, opts.spendControl ?? new SpendControl());
+  registerExactEvmScheme(x402, { signer: evmSigner });
+  return x402;
+}
 async function analyzeWithAI(diagnostics, userQuestion, model = "sonnet") {
   if (diagnostics.wallet.isEmpty) {
     console.log("\n\u{1F4B3} Wallet is empty - cannot call AI for analysis.");
@@ -228888,11 +229003,7 @@ async function analyzeWithAI(diagnostics, userQuestion, model = "sonnet") {
 `);
   try {
     const { key: key2 } = await resolveOrGenerateWalletKey();
-    const account = privateKeyToAccount(key2);
-    const publicClient = createPublicClient({ chain: base, transport: http() });
-    const evmSigner = toClientEvmSigner(account, publicClient);
-    const x402 = new x402Client();
-    registerExactEvmScheme(x402, { signer: evmSigner });
+    const x402 = createDoctorX402Client({ walletKey: key2 });
     const paymentChain = diagnostics.wallet.paymentChain;
     if (paymentChain === "solana") {
       try {

package/dist/index.d.ts

@@ -1467,12 +1467,6 @@ declare function fetchWithRetry(fetchFn: (url: string, init?: RequestInit) => Pr
  */
 declare function isRetryable(errorOrResponse: Error | Response, config?: Partial<RetryConfig>): boolean;
 
-/**
- * Usage Statistics Aggregator
- *
- * Reads usage log files and aggregates statistics for terminal display.
- * Supports filtering by date range and provides multiple aggregation views.
- */
 type DailyStats = {
     date: string;
     totalRequests: number;

package/dist/index.js

@@ -34768,7 +34768,7 @@ var init_spend_control = __esm({
           }
         }
         if (this.limits.hourly !== void 0) {
-          const hourlySpent = this.getSpendingInWindow(now2 - HOUR_MS, now2);
+          const hourlySpent = this.getSpendingInWindow(now2 - HOUR_MS, now2, now2);
           const remaining = this.limits.hourly - hourlySpent;
           if (estimatedCost2 > remaining) {
             const oldestInWindow = this.history.find((r2) => r2.timestamp >= now2 - HOUR_MS);
@@ -34783,7 +34783,7 @@ var init_spend_control = __esm({
           }
         }
         if (this.limits.daily !== void 0) {
-          const dailySpent = this.getSpendingInWindow(now2 - DAY_MS, now2);
+          const dailySpent = this.getSpendingInWindow(now2 - DAY_MS, now2, now2);
           const remaining = this.limits.daily - dailySpent;
           if (estimatedCost2 > remaining) {
             const oldestInWindow = this.history.find((r2) => r2.timestamp >= now2 - DAY_MS);
@@ -34880,17 +34880,30 @@ var init_spend_control = __esm({
           }
         }
       }
-      getSpendingInWindow(from15, to) {
+      // `now` is the single clock reading the caller already took to build the
+      // window; it must be passed in, not re-read here. In-flight reservations are
+      // "now" holds, so they count only against a window that reaches the present
+      // (`to >= now`). The bug this guards against: reading the clock a SECOND time
+      // inside this method (the old `to >= this.now()`) could land a millisecond
+      // after the caller's `now`, flip the guard false, and silently drop the
+      // pending total from the hourly/daily check — letting two concurrent payments
+      // both clear the same remaining budget. Threading the caller's `now` keeps the
+      // guard meaningful (a genuinely historical window with `to < now` still
+      // excludes live holds) without a second, racing read. Every existing test
+      // injects a frozen clock (`now: () => clock`), so the two reads always matched
+      // and the sub-ms window went uncaught; see the live-clock test in
+      // spend-control.test.ts.
+      getSpendingInWindow(from15, to, now2) {
         const recorded = this.history.filter((r2) => r2.timestamp >= from15 && r2.timestamp <= to).reduce((sum, r2) => sum + r2.amount, 0);
-        return recorded + (to >= this.now() ? this.pendingTotal() : 0);
+        return recorded + (to >= now2 ? this.pendingTotal() : 0);
       }
       getSpending(window2) {
         const now2 = this.now();
         switch (window2) {
           case "hourly":
-            return this.getSpendingInWindow(now2 - HOUR_MS, now2);
+            return this.getSpendingInWindow(now2 - HOUR_MS, now2, now2);
           case "daily":
-            return this.getSpendingInWindow(now2 - DAY_MS, now2);
+            return this.getSpendingInWindow(now2 - DAY_MS, now2, now2);
           case "session":
             return this.sessionSpent + this.pendingTotal();
         }
@@ -34902,8 +34915,8 @@ var init_spend_control = __esm({
       }
       getStatus() {
         const now2 = this.now();
-        const hourlySpent = this.getSpendingInWindow(now2 - HOUR_MS, now2);
-        const dailySpent = this.getSpendingInWindow(now2 - DAY_MS, now2);
+        const hourlySpent = this.getSpendingInWindow(now2 - HOUR_MS, now2, now2);
+        const dailySpent = this.getSpendingInWindow(now2 - DAY_MS, now2, now2);
         return {
           limits: cloneLimits(this.limits),
           spending: {
@@ -39835,6 +39848,13 @@ var init_version4 = __esm({
 import { readdir, unlink } from "fs/promises";
 import { join as join5 } from "path";
 import { homedir as homedir3 } from "os";
+function resolveStatsDays(raw) {
+  const parsed = parseInt(raw ?? "", 10);
+  if (!Number.isFinite(parsed) || parsed <= 0) {
+    return DEFAULT_STATS_DAYS;
+  }
+  return Math.min(parsed, MAX_STATS_DAYS);
+}
 async function parseLogFile(filePath) {
   try {
     const content = await readTextFile(filePath);
@@ -40030,13 +40050,15 @@ async function clearStats() {
     return { deletedFiles: 0 };
   }
 }
-var LOG_DIR2;
+var LOG_DIR2, DEFAULT_STATS_DAYS, MAX_STATS_DAYS;
 var init_stats = __esm({
   "src/stats.ts"() {
     "use strict";
     init_fs_read();
     init_version4();
     LOG_DIR2 = join5(homedir3(), ".openclaw", "blockrun", "logs");
+    DEFAULT_STATS_DAYS = 7;
+    MAX_STATS_DAYS = 30;
   }
 });
 
@@ -90906,8 +90928,8 @@ async function startProxy(options) {
       if (req.url === "/stats" || req.url?.startsWith("/stats?")) {
         try {
           const url2 = new URL(req.url, "http://localhost");
-          const days = parseInt(url2.searchParams.get("days") || "7", 10);
-          const stats = await getStats(Math.min(days, 30));
+          const days = resolveStatsDays(url2.searchParams.get("days"));
+          const stats = await getStats(days);
           res.writeHead(200, {
             "Content-Type": "application/json",
             "Cache-Control": "no-cache"
@@ -116829,6 +116851,35 @@ var init_client5 = __esm({
   }
 });
 
+// src/polymarket/spend-policy.ts
+function resolveSpendControl(deps) {
+  if (deps?.spendControl) return deps.spendControl;
+  defaultControl ??= new SpendControl();
+  return defaultControl;
+}
+function usdToMicros(usd) {
+  return String(Math.ceil(usd * 1e6));
+}
+async function signUnderSpendPolicy(deps, quote, action, sign4) {
+  const control = resolveSpendControl(deps);
+  const reservation = assertSpendPolicyAllows(control, quote);
+  try {
+    const signed2 = await sign4();
+    if (reservation !== void 0) control.settleReservation(reservation, { action });
+    return signed2;
+  } catch (err) {
+    if (reservation !== void 0) control.releaseReservation(reservation);
+    throw err;
+  }
+}
+var defaultControl;
+var init_spend_policy = __esm({
+  "src/polymarket/spend-policy.ts"() {
+    "use strict";
+    init_spend_control();
+  }
+});
+
 // src/polymarket/orders.ts
 function getSessionLedger() {
   return {
@@ -116897,6 +116948,9 @@ function isCredsMismatchError(err) {
   return msg.includes("unauthorized") || msg.includes("api key not found") || msg.includes("invalid api key");
 }
 async function mapClobError(err) {
+  if (err instanceof SpendPolicyError) {
+    return `Refused by spend policy \u2014 nothing was signed. ${err.message} (see ~/.openclaw/blockrun/spending.json)`;
+  }
   const e7 = err;
   const dataText = e7?.data ? ` \u2014 ${typeof e7.data === "string" ? e7.data : JSON.stringify(e7.data)}` : "";
   const message = `${e7?.message ?? String(err)}${dataText}`;
@@ -116943,7 +116997,7 @@ async function withCredsRetry(fn) {
     return fn(fresh);
   }
 }
-async function executeTrade(input) {
+async function executeTrade(input, deps) {
   const side = input.action === "buy" ? Side.BUY : Side.SELL;
   const isLimit = input.price !== void 0;
   if (isLimit && input.size === void 0) {
@@ -116955,6 +117009,18 @@ async function executeTrade(input) {
       isError: true
     };
   }
+  if (!isLimit && input.action === "buy" && input.amount_usd !== void 0 && !(Number.isFinite(input.amount_usd) && input.amount_usd > 0)) {
+    return {
+      text: `amount_usd must be a positive dollar amount to spend, got ${input.amount_usd}.`,
+      isError: true
+    };
+  }
+  if (isLimit && input.size !== void 0 && !(Number.isFinite(input.size) && input.size > 0)) {
+    return {
+      text: `size must be a positive number of shares, got ${input.size}.`,
+      isError: true
+    };
+  }
   if (!isLimit && input.action === "sell" && input.size === void 0) {
     return { text: `Market sells need size (shares to sell).`, isError: true };
   }
@@ -117054,39 +117120,44 @@ Re-call with confirm:true to sign and submit.`,
       }
       const options = { tickSize, negRisk };
       reserveBet(notional, input.agent_id);
-      let response;
+      const policyQuote = {
+        payTo: negRisk ? NEG_RISK_CTF_EXCHANGE_V2 : CTF_EXCHANGE_V2,
+        network: `eip155:${POLYGON_CHAIN_ID}`,
+        asset: PUSD_COLLATERAL,
+        amount: usdToMicros(notional)
+      };
+      let r2;
       try {
-        response = isLimit ? await clob.createAndPostOrder(
-          {
-            tokenID: token.tokenId,
-            price,
-            size: size5,
-            side,
-            ...orderKind === "GTD" && input.expires_at ? { expiration: input.expires_at } : {}
-          },
-          options,
-          orderKind === "GTD" ? OrderType.GTD : OrderType.GTC,
-          input.post_only ?? false
-        ) : await clob.createAndPostMarketOrder(
-          {
-            tokenID: token.tokenId,
-            amount: input.action === "buy" ? input.amount_usd : size5,
-            side,
-            orderType: orderKind === "FAK" ? OrderType.FAK : OrderType.FOK
-          },
-          options,
-          orderKind === "FAK" ? OrderType.FAK : OrderType.FOK
-        );
+        r2 = await signUnderSpendPolicy(deps, policyQuote, "polymarket order", async () => {
+          const res = await (isLimit ? clob.createAndPostOrder(
+            {
+              tokenID: token.tokenId,
+              price,
+              size: size5,
+              side,
+              ...orderKind === "GTD" && input.expires_at ? { expiration: input.expires_at } : {}
+            },
+            options,
+            orderKind === "GTD" ? OrderType.GTD : OrderType.GTC,
+            input.post_only ?? false
+          ) : clob.createAndPostMarketOrder(
+            {
+              tokenID: token.tokenId,
+              amount: input.action === "buy" ? input.amount_usd : size5,
+              side,
+              orderType: orderKind === "FAK" ? OrderType.FAK : OrderType.FOK
+            },
+            options,
+            orderKind === "FAK" ? OrderType.FAK : OrderType.FOK
+          ));
+          const placed = res?.success !== false && (res?.orderID || res?.status === "matched");
+          if (!placed) throw new Error(res?.errorMsg || "order rejected");
+          return res;
+        });
       } catch (submitErr) {
         releaseBet(notional, input.agent_id);
         throw submitErr;
       }
-      const r2 = response;
-      const placed = r2?.success !== false && (r2?.orderID || r2?.status === "matched");
-      if (!placed) {
-        releaseBet(notional, input.agent_id);
-        throw new Error(r2?.errorMsg || "order rejected");
-      }
       commitBet();
       const filled = r2?.status === "matched" || (r2?.transactionsHashes?.length ?? 0) > 0;
       return {
@@ -117175,6 +117246,8 @@ var init_orders = __esm({
     init_client5();
     init_constants3();
     init_creds();
+    init_spend_control();
+    init_spend_policy();
     ledger = {
       totalUsd: 0,
       count: 0,
@@ -225109,7 +225182,7 @@ var init_setup = __esm({
 });
 
 // src/polymarket/redeem.ts
-async function redeemPosition(input) {
+async function redeemPosition(input, deps) {
   if (!input.condition_id) {
     return {
       text: `Pass condition_id:"0x\u2026" (see action:"positions" for redeemable markets).`,
@@ -225185,20 +225258,31 @@ async function redeemPosition(input) {
       ]
     });
     const target = negRisk ? NEG_RISK_ADAPTER : CONDITIONAL_TOKENS;
-    let txHash;
-    if (getSigType() === 3) {
-      const res = await sendWalletBatch([{ target, value: "0", data }], owner, "Redeem");
-      txHash = res.transactionHash;
-    } else {
-      const account = getPolymarketAccount();
-      const wallet = createWalletClient({
-        account,
-        chain: polygon,
-        transport: http(POLYGON_RPC_URLS[0])
-      });
-      txHash = await wallet.sendTransaction({ to: target, data, chain: polygon, account });
-      await pc.waitForTransactionReceipt({ hash: txHash });
-    }
+    const eoa = getSigType() !== 3;
+    const txHash = await signUnderSpendPolicy(
+      deps,
+      {
+        payTo: target,
+        network: `eip155:${POLYGON_CHAIN_ID}`,
+        asset: PUSD_COLLATERAL,
+        amount: "0"
+      },
+      "polymarket redeem",
+      async () => {
+        if (!eoa) {
+          const res = await sendWalletBatch([{ target, value: "0", data }], owner, "Redeem");
+          return res.transactionHash;
+        }
+        const account = getPolymarketAccount();
+        const wallet = createWalletClient({
+          account,
+          chain: polygon,
+          transport: http(POLYGON_RPC_URLS[0])
+        });
+        return wallet.sendTransaction({ to: target, data, chain: polygon, account });
+      }
+    );
+    if (eoa) await pc.waitForTransactionReceipt({ hash: txHash });
     const balanceAfter = await getPusdBalance(owner).catch(() => null);
     return {
       text: [
@@ -225229,6 +225313,7 @@ var init_redeem = __esm({
     init_positions();
     init_relayer();
     init_setup();
+    init_spend_policy();
   }
 });
 
@@ -225241,7 +225326,13 @@ async function rawPusdBalance(owner) {
     args: [owner]
   });
 }
-async function withdrawFunds(input) {
+async function withdrawFunds(input, deps) {
+  if (input.amount_usd !== void 0 && !(Number.isFinite(input.amount_usd) && input.amount_usd > 0)) {
+    return {
+      text: `amount_usd must be a positive dollar amount, got ${input.amount_usd}. Omit it to withdraw the full balance.`,
+      isError: true
+    };
+  }
   let owner;
   try {
     owner = getFundsAddress();
@@ -225312,29 +225403,40 @@ async function withdrawFunds(input) {
       functionName: "transfer",
       args: [bridgeEvm, amountRaw]
     });
-    let txHash;
-    if (getSigType() === 3) {
-      const res = await sendWalletBatch(
-        [{ target: PUSD_COLLATERAL, value: "0", data }],
-        owner,
-        "Withdraw"
-      );
-      txHash = res.transactionHash;
-    } else {
-      const account = getPolymarketAccount();
-      const wallet = createWalletClient({
-        account,
-        chain: polygon,
-        transport: http(POLYGON_RPC_URLS[0])
-      });
-      txHash = await wallet.sendTransaction({
-        to: PUSD_COLLATERAL,
-        data,
-        chain: polygon,
-        account
-      });
-      await getPublicClient().waitForTransactionReceipt({ hash: txHash });
-    }
+    const eoa = getSigType() !== 3;
+    const txHash = await signUnderSpendPolicy(
+      deps,
+      {
+        payTo: recipient,
+        network: `eip155:${BASE_CHAIN_ID}`,
+        asset: BASE_USDC,
+        amount: amountRaw.toString()
+      },
+      "polymarket withdraw",
+      async () => {
+        if (!eoa) {
+          const res = await sendWalletBatch(
+            [{ target: PUSD_COLLATERAL, value: "0", data }],
+            owner,
+            "Withdraw"
+          );
+          return res.transactionHash;
+        }
+        const account = getPolymarketAccount();
+        const wallet = createWalletClient({
+          account,
+          chain: polygon,
+          transport: http(POLYGON_RPC_URLS[0])
+        });
+        return wallet.sendTransaction({
+          to: PUSD_COLLATERAL,
+          data,
+          chain: polygon,
+          account
+        });
+      }
+    );
+    if (eoa) await getPublicClient().waitForTransactionReceipt({ hash: txHash });
     return {
       text: [
         `\u2705 Withdrawal submitted: $${amountUsd.toFixed(2)} pUSD \u2192 USDC on Base`,
@@ -225369,6 +225471,7 @@ var init_withdraw = __esm({
     init_positions();
     init_relayer();
     init_setup();
+    init_spend_policy();
   }
 });
 
@@ -226014,7 +226117,7 @@ async function bridgeAddressFor(vault) {
     throw new Error(`Bridge did not return a deposit address (got: ${JSON.stringify(res.data)}).`);
   return evm;
 }
-async function fundVault(input) {
+async function fundVault(input, deps) {
   if (input.amount_usd === void 0 || input.amount_usd <= 0) {
     return {
       text: `Pass amount_usd \u2014 the USDC amount to move from your Base wallet into your Polymarket vault (e.g. amount_usd:5).`,
@@ -226071,12 +226174,12 @@ async function fundVault(input) {
     }
     const privateKey = getOrCreateWalletKey();
     const amountMicro = String(Math.floor(amountUsd * 10 ** USDC_DECIMALS));
-    const depositAuthorization = await createPaymentPayload(
-      privateKey,
-      agent,
-      bridge,
-      amountMicro,
-      `eip155:${BASE_CHAIN_ID}`
+    const network = `eip155:${BASE_CHAIN_ID}`;
+    const depositAuthorization = await signUnderSpendPolicy(
+      deps,
+      { payTo: bridge, network, asset: BASE_USDC, amount: amountMicro },
+      "polymarket fund",
+      () => createPaymentPayload(privateKey, agent, bridge, amountMicro, network)
     );
     const client = new BlockrunClient({ privateKey });
     const result = await client.post("/v1/polymarket/fund", {
@@ -226126,6 +226229,7 @@ var init_fund = __esm({
     init_constants3();
     init_positions();
     init_setup();
+    init_spend_policy();
     FUND_FEE_USD = 0.01;
     USDC_DECIMALS = 6;
     FUND_MIN_USD = Number(process.env.POLYMARKET_FUND_MIN_USD || "2");

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@blockrun/clawrouter",
-  "version": "0.12.262",
-  "description": "Smart LLM router — save 84% on inference costs. 76 models (7 free), one wallet, x402 micropayments.",
+  "version": "0.12.264",
+  "description": "Smart LLM router \u2014 save 84% on inference costs. 76 models (7 free), one wallet, x402 micropayments.",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",