@blockrun/clawrouter 0.12.263 → 0.12.265

package/dist/cli.js

@@ -117032,6 +117032,35 @@ var init_client5 = __esm({
   }
 });
 
+// src/polymarket/spend-policy.ts
+function resolveSpendControl(deps) {
+  if (deps?.spendControl) return deps.spendControl;
+  defaultControl ??= new SpendControl();
+  return defaultControl;
+}
+function usdToMicros(usd) {
+  return String(Math.ceil(usd * 1e6));
+}
+async function signUnderSpendPolicy(deps, quote, action, sign4) {
+  const control = resolveSpendControl(deps);
+  const reservation = assertSpendPolicyAllows(control, quote);
+  try {
+    const signed2 = await sign4();
+    if (reservation !== void 0) control.settleReservation(reservation, { action });
+    return signed2;
+  } catch (err) {
+    if (reservation !== void 0) control.releaseReservation(reservation);
+    throw err;
+  }
+}
+var defaultControl;
+var init_spend_policy = __esm({
+  "src/polymarket/spend-policy.ts"() {
+    "use strict";
+    init_spend_control();
+  }
+});
+
 // src/polymarket/orders.ts
 function getSessionLedger() {
   return {
@@ -117100,6 +117129,9 @@ function isCredsMismatchError(err) {
   return msg.includes("unauthorized") || msg.includes("api key not found") || msg.includes("invalid api key");
 }
 async function mapClobError(err) {
+  if (err instanceof SpendPolicyError) {
+    return `Refused by spend policy \u2014 nothing was signed. ${err.message} (see ~/.openclaw/blockrun/spending.json)`;
+  }
   const e7 = err;
   const dataText = e7?.data ? ` \u2014 ${typeof e7.data === "string" ? e7.data : JSON.stringify(e7.data)}` : "";
   const message = `${e7?.message ?? String(err)}${dataText}`;
@@ -117146,7 +117178,7 @@ async function withCredsRetry(fn) {
     return fn(fresh);
   }
 }
-async function executeTrade(input) {
+async function executeTrade(input, deps) {
   const side = input.action === "buy" ? Side.BUY : Side.SELL;
   const isLimit = input.price !== void 0;
   if (isLimit && input.size === void 0) {
@@ -117158,6 +117190,18 @@ async function executeTrade(input) {
       isError: true
     };
   }
+  if (!isLimit && input.action === "buy" && input.amount_usd !== void 0 && !(Number.isFinite(input.amount_usd) && input.amount_usd > 0)) {
+    return {
+      text: `amount_usd must be a positive dollar amount to spend, got ${input.amount_usd}.`,
+      isError: true
+    };
+  }
+  if (isLimit && input.size !== void 0 && !(Number.isFinite(input.size) && input.size > 0)) {
+    return {
+      text: `size must be a positive number of shares, got ${input.size}.`,
+      isError: true
+    };
+  }
   if (!isLimit && input.action === "sell" && input.size === void 0) {
     return { text: `Market sells need size (shares to sell).`, isError: true };
   }
@@ -117257,39 +117301,44 @@ Re-call with confirm:true to sign and submit.`,
       }
       const options = { tickSize, negRisk };
       reserveBet(notional, input.agent_id);
-      let response;
+      const policyQuote = {
+        payTo: negRisk ? NEG_RISK_CTF_EXCHANGE_V2 : CTF_EXCHANGE_V2,
+        network: `eip155:${POLYGON_CHAIN_ID}`,
+        asset: PUSD_COLLATERAL,
+        amount: usdToMicros(notional)
+      };
+      let r2;
       try {
-        response = isLimit ? await clob.createAndPostOrder(
-          {
-            tokenID: token.tokenId,
-            price,
-            size: size5,
-            side,
-            ...orderKind === "GTD" && input.expires_at ? { expiration: input.expires_at } : {}
-          },
-          options,
-          orderKind === "GTD" ? OrderType.GTD : OrderType.GTC,
-          input.post_only ?? false
-        ) : await clob.createAndPostMarketOrder(
-          {
-            tokenID: token.tokenId,
-            amount: input.action === "buy" ? input.amount_usd : size5,
-            side,
-            orderType: orderKind === "FAK" ? OrderType.FAK : OrderType.FOK
-          },
-          options,
-          orderKind === "FAK" ? OrderType.FAK : OrderType.FOK
-        );
+        r2 = await signUnderSpendPolicy(deps, policyQuote, "polymarket order", async () => {
+          const res = await (isLimit ? clob.createAndPostOrder(
+            {
+              tokenID: token.tokenId,
+              price,
+              size: size5,
+              side,
+              ...orderKind === "GTD" && input.expires_at ? { expiration: input.expires_at } : {}
+            },
+            options,
+            orderKind === "GTD" ? OrderType.GTD : OrderType.GTC,
+            input.post_only ?? false
+          ) : clob.createAndPostMarketOrder(
+            {
+              tokenID: token.tokenId,
+              amount: input.action === "buy" ? input.amount_usd : size5,
+              side,
+              orderType: orderKind === "FAK" ? OrderType.FAK : OrderType.FOK
+            },
+            options,
+            orderKind === "FAK" ? OrderType.FAK : OrderType.FOK
+          ));
+          const placed = res?.success !== false && (res?.orderID || res?.status === "matched");
+          if (!placed) throw new Error(res?.errorMsg || "order rejected");
+          return res;
+        });
       } catch (submitErr) {
         releaseBet(notional, input.agent_id);
         throw submitErr;
       }
-      const r2 = response;
-      const placed = r2?.success !== false && (r2?.orderID || r2?.status === "matched");
-      if (!placed) {
-        releaseBet(notional, input.agent_id);
-        throw new Error(r2?.errorMsg || "order rejected");
-      }
       commitBet();
       const filled = r2?.status === "matched" || (r2?.transactionsHashes?.length ?? 0) > 0;
       return {
@@ -117378,6 +117427,8 @@ var init_orders = __esm({
     init_client5();
     init_constants3();
     init_creds();
+    init_spend_control();
+    init_spend_policy();
     ledger = {
       totalUsd: 0,
       count: 0,
@@ -225312,7 +225363,7 @@ var init_setup = __esm({
 });
 
 // src/polymarket/redeem.ts
-async function redeemPosition(input) {
+async function redeemPosition(input, deps) {
   if (!input.condition_id) {
     return {
       text: `Pass condition_id:"0x\u2026" (see action:"positions" for redeemable markets).`,
@@ -225388,20 +225439,31 @@ async function redeemPosition(input) {
       ]
     });
     const target = negRisk ? NEG_RISK_ADAPTER : CONDITIONAL_TOKENS;
-    let txHash;
-    if (getSigType() === 3) {
-      const res = await sendWalletBatch([{ target, value: "0", data }], owner, "Redeem");
-      txHash = res.transactionHash;
-    } else {
-      const account = getPolymarketAccount();
-      const wallet = createWalletClient({
-        account,
-        chain: polygon,
-        transport: http(POLYGON_RPC_URLS[0])
-      });
-      txHash = await wallet.sendTransaction({ to: target, data, chain: polygon, account });
-      await pc.waitForTransactionReceipt({ hash: txHash });
-    }
+    const eoa = getSigType() !== 3;
+    const txHash = await signUnderSpendPolicy(
+      deps,
+      {
+        payTo: target,
+        network: `eip155:${POLYGON_CHAIN_ID}`,
+        asset: PUSD_COLLATERAL,
+        amount: "0"
+      },
+      "polymarket redeem",
+      async () => {
+        if (!eoa) {
+          const res = await sendWalletBatch([{ target, value: "0", data }], owner, "Redeem");
+          return res.transactionHash;
+        }
+        const account = getPolymarketAccount();
+        const wallet = createWalletClient({
+          account,
+          chain: polygon,
+          transport: http(POLYGON_RPC_URLS[0])
+        });
+        return wallet.sendTransaction({ to: target, data, chain: polygon, account });
+      }
+    );
+    if (eoa) await pc.waitForTransactionReceipt({ hash: txHash });
     const balanceAfter = await getPusdBalance(owner).catch(() => null);
     return {
       text: [
@@ -225432,6 +225494,7 @@ var init_redeem = __esm({
     init_positions();
     init_relayer();
     init_setup();
+    init_spend_policy();
   }
 });
 
@@ -225444,7 +225507,13 @@ async function rawPusdBalance(owner) {
     args: [owner]
   });
 }
-async function withdrawFunds(input) {
+async function withdrawFunds(input, deps) {
+  if (input.amount_usd !== void 0 && !(Number.isFinite(input.amount_usd) && input.amount_usd > 0)) {
+    return {
+      text: `amount_usd must be a positive dollar amount, got ${input.amount_usd}. Omit it to withdraw the full balance.`,
+      isError: true
+    };
+  }
   let owner;
   try {
     owner = getFundsAddress();
@@ -225515,29 +225584,40 @@ async function withdrawFunds(input) {
       functionName: "transfer",
       args: [bridgeEvm, amountRaw]
     });
-    let txHash;
-    if (getSigType() === 3) {
-      const res = await sendWalletBatch(
-        [{ target: PUSD_COLLATERAL, value: "0", data }],
-        owner,
-        "Withdraw"
-      );
-      txHash = res.transactionHash;
-    } else {
-      const account = getPolymarketAccount();
-      const wallet = createWalletClient({
-        account,
-        chain: polygon,
-        transport: http(POLYGON_RPC_URLS[0])
-      });
-      txHash = await wallet.sendTransaction({
-        to: PUSD_COLLATERAL,
-        data,
-        chain: polygon,
-        account
-      });
-      await getPublicClient().waitForTransactionReceipt({ hash: txHash });
-    }
+    const eoa = getSigType() !== 3;
+    const txHash = await signUnderSpendPolicy(
+      deps,
+      {
+        payTo: recipient,
+        network: `eip155:${BASE_CHAIN_ID}`,
+        asset: BASE_USDC,
+        amount: amountRaw.toString()
+      },
+      "polymarket withdraw",
+      async () => {
+        if (!eoa) {
+          const res = await sendWalletBatch(
+            [{ target: PUSD_COLLATERAL, value: "0", data }],
+            owner,
+            "Withdraw"
+          );
+          return res.transactionHash;
+        }
+        const account = getPolymarketAccount();
+        const wallet = createWalletClient({
+          account,
+          chain: polygon,
+          transport: http(POLYGON_RPC_URLS[0])
+        });
+        return wallet.sendTransaction({
+          to: PUSD_COLLATERAL,
+          data,
+          chain: polygon,
+          account
+        });
+      }
+    );
+    if (eoa) await getPublicClient().waitForTransactionReceipt({ hash: txHash });
     return {
       text: [
         `\u2705 Withdrawal submitted: $${amountUsd.toFixed(2)} pUSD \u2192 USDC on Base`,
@@ -225572,6 +225652,7 @@ var init_withdraw = __esm({
     init_positions();
     init_relayer();
     init_setup();
+    init_spend_policy();
   }
 });
 
@@ -226217,7 +226298,7 @@ async function bridgeAddressFor(vault) {
     throw new Error(`Bridge did not return a deposit address (got: ${JSON.stringify(res.data)}).`);
   return evm;
 }
-async function fundVault(input) {
+async function fundVault(input, deps) {
   if (input.amount_usd === void 0 || input.amount_usd <= 0) {
     return {
       text: `Pass amount_usd \u2014 the USDC amount to move from your Base wallet into your Polymarket vault (e.g. amount_usd:5).`,
@@ -226274,12 +226355,12 @@ async function fundVault(input) {
     }
     const privateKey = getOrCreateWalletKey();
     const amountMicro = String(Math.floor(amountUsd * 10 ** USDC_DECIMALS));
-    const depositAuthorization = await createPaymentPayload(
-      privateKey,
-      agent,
-      bridge,
-      amountMicro,
-      `eip155:${BASE_CHAIN_ID}`
+    const network = `eip155:${BASE_CHAIN_ID}`;
+    const depositAuthorization = await signUnderSpendPolicy(
+      deps,
+      { payTo: bridge, network, asset: BASE_USDC, amount: amountMicro },
+      "polymarket fund",
+      () => createPaymentPayload(privateKey, agent, bridge, amountMicro, network)
     );
     const client = new BlockrunClient({ privateKey });
     const result = await client.post("/v1/polymarket/fund", {
@@ -226329,6 +226410,7 @@ var init_fund = __esm({
     init_constants3();
     init_positions();
     init_setup();
+    init_spend_policy();
     FUND_FEE_USD = 0.01;
     USDC_DECIMALS = 6;
     FUND_MIN_USD = Number(process.env.POLYMARKET_FUND_MIN_USD || "2");
@@ -226753,6 +226835,7 @@ var index_exports = {};
 __export(index_exports, {
   BALANCE_THRESHOLDS: () => BALANCE_THRESHOLDS,
   BLOCKRUN_MODELS: () => BLOCKRUN_MODELS,
+  BLOCKRUN_PLUGIN_ID: () => BLOCKRUN_PLUGIN_ID,
   BalanceMonitor: () => BalanceMonitor,
   CAIP2_BASE: () => CAIP2_BASE,
   CAIP2_SOLANA_MAINNET: () => CAIP2_SOLANA_MAINNET,
@@ -227067,6 +227150,35 @@ function injectModelsConfig(logger48, options = {}) {
       logger48.info(`Added ${addedCount} models to allowlist (${TOP_MODELS.length} total)`);
     }
   }
+  const pluginEntries = config.plugins?.entries;
+  if (pluginEntries && pluginEntries.clawrouter && !pluginEntries[BLOCKRUN_PLUGIN_ID]) {
+    pluginEntries[BLOCKRUN_PLUGIN_ID] = pluginEntries.clawrouter;
+    delete pluginEntries.clawrouter;
+    needsWrite = true;
+    logger48.info(
+      "Migrated plugins.entries.clawrouter -> blockrun-clawrouter (OpenClaw bundles its own `clawrouter` plugin; see #305)"
+    );
+  }
+  const pluginsCfg = config.plugins;
+  const allow = pluginsCfg?.allow;
+  if (Array.isArray(allow) && allow.includes("clawrouter") && !allow.includes(BLOCKRUN_PLUGIN_ID)) {
+    allow.push(BLOCKRUN_PLUGIN_ID);
+    needsWrite = true;
+    logger48.info(`Added ${BLOCKRUN_PLUGIN_ID} to plugins.allow (renamed from clawrouter; see #305)`);
+  }
+  const deny = pluginsCfg?.deny;
+  if (Array.isArray(deny) && deny.includes("clawrouter") && !deny.includes(BLOCKRUN_PLUGIN_ID)) {
+    deny.push(BLOCKRUN_PLUGIN_ID);
+    needsWrite = true;
+    logger48.info(`Added ${BLOCKRUN_PLUGIN_ID} to plugins.deny (renamed from clawrouter; see #305)`);
+  }
+  const installs = pluginsCfg?.installs;
+  if (installs && installs.clawrouter && !installs[BLOCKRUN_PLUGIN_ID]) {
+    installs[BLOCKRUN_PLUGIN_ID] = installs.clawrouter;
+    delete installs.clawrouter;
+    needsWrite = true;
+    logger48.info(`Migrated plugins.installs.clawrouter -> ${BLOCKRUN_PLUGIN_ID} (see #305)`);
+  }
   if (!config.tools || typeof config.tools !== "object" || Array.isArray(config.tools)) {
     config.tools = {};
     needsWrite = true;
@@ -228059,7 +228171,7 @@ Run \`openclaw plugins install @blockrun/clawrouter\` to generate a wallet.`,
     }
   };
 }
-var activeProxyHandle, pendingConfiguredStartupApi, IMAGE_DIR2, AUDIO_DIR2, VIDEO_DIR2, plugin, index_default2;
+var activeProxyHandle, pendingConfiguredStartupApi, IMAGE_DIR2, AUDIO_DIR2, VIDEO_DIR2, BLOCKRUN_PLUGIN_ID, plugin, index_default2;
 var init_index = __esm({
   "src/index.ts"() {
     "use strict";
@@ -228102,9 +228214,16 @@ var init_index = __esm({
     IMAGE_DIR2 = join16(homedir13(), ".openclaw", "blockrun", "images");
     AUDIO_DIR2 = join16(homedir13(), ".openclaw", "blockrun", "audio");
     VIDEO_DIR2 = join16(homedir13(), ".openclaw", "blockrun", "videos");
+    BLOCKRUN_PLUGIN_ID = "blockrun-clawrouter";
     plugin = {
-      id: "clawrouter",
-      name: "ClawRouter",
+      // NOT "clawrouter". OpenClaw bundles its own plugin under that id since the
+      // 2026.7.1 line (vendored at dist/extensions/clawrouter, provider `clawrouter/*`,
+      // CLAWROUTER_API_KEY, clawrouter.openclaw.ai). A duplicate id loses to the
+      // bundled one — "global plugin will be overridden by bundled plugin" — so this
+      // plugin silently never loaded and the local proxy never started. Different
+      // product, different id. See #305.
+      id: BLOCKRUN_PLUGIN_ID,
+      name: "BlockRun ClawRouter",
       description: "Smart LLM router \u2014 55+ models, x402 micropayments, 78% cost savings",
       version: VERSION,
       register(api) {
@@ -228513,13 +228632,18 @@ ${errText}`
               delete config.models.providers.blockrun;
             }
             removeManagedBlockrunMcpServerConfig(config);
-            for (const key2 of ["clawrouter", "ClawRouter", "@blockrun/clawrouter"]) {
+            for (const key2 of [
+              BLOCKRUN_PLUGIN_ID,
+              "clawrouter",
+              "ClawRouter",
+              "@blockrun/clawrouter"
+            ]) {
               if (config.plugins?.entries?.[key2]) delete config.plugins.entries[key2];
               if (config.plugins?.installs?.[key2]) delete config.plugins.installs[key2];
             }
             if (Array.isArray(config.plugins?.allow)) {
               config.plugins.allow = config.plugins.allow.filter(
-                (p) => p !== "clawrouter" && p !== "ClawRouter" && p !== "@blockrun/clawrouter"
+                (p) => p !== BLOCKRUN_PLUGIN_ID && p !== "clawrouter" && p !== "ClawRouter" && p !== "@blockrun/clawrouter"
               );
             }
             if (config.agents?.defaults?.models) {
@@ -228628,6 +228752,7 @@ init_balance();
 init_wallet2();
 init_stats();
 init_proxy();
+init_spend_control();
 init_version4();
 import { platform, arch, freemem, totalmem } from "os";
 import { existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
@@ -228894,6 +229019,15 @@ var DOCTOR_MODELS = {
     cost: "~$0.01"
   }
 };
+function createDoctorX402Client(opts) {
+  const account = privateKeyToAccount(opts.walletKey);
+  const publicClient = createPublicClient({ chain: base, transport: http() });
+  const evmSigner = toClientEvmSigner(account, publicClient);
+  const x402 = new x402Client();
+  registerSpendPolicyHook(x402, opts.spendControl ?? new SpendControl());
+  registerExactEvmScheme(x402, { signer: evmSigner });
+  return x402;
+}
 async function analyzeWithAI(diagnostics, userQuestion, model = "sonnet") {
   if (diagnostics.wallet.isEmpty) {
     console.log("\n\u{1F4B3} Wallet is empty - cannot call AI for analysis.");
@@ -228911,11 +229045,7 @@ async function analyzeWithAI(diagnostics, userQuestion, model = "sonnet") {
 `);
   try {
     const { key: key2 } = await resolveOrGenerateWalletKey();
-    const account = privateKeyToAccount(key2);
-    const publicClient = createPublicClient({ chain: base, transport: http() });
-    const evmSigner = toClientEvmSigner(account, publicClient);
-    const x402 = new x402Client();
-    registerExactEvmScheme(x402, { signer: evmSigner });
+    const x402 = createDoctorX402Client({ walletKey: key2 });
     const paymentChain = diagnostics.wallet.paymentChain;
     if (paymentChain === "solana") {
       try {

package/dist/index.d.ts

@@ -1729,6 +1729,13 @@ declare function parseCallArgs(raw: string): {
  * Delegates to the local proxy (which handles x402 payment).
  */
 declare function buildImageGenerationProvider(): ImageGenerationProviderPlugin;
+/**
+ * This plugin's OpenClaw id. NOT "clawrouter" — OpenClaw bundles its own plugin
+ * under that id since the 2026.7.1 line, and a duplicate loses to the bundled
+ * one. Kept as one constant so the manifest, the plugin definition and the
+ * config migration can never drift apart. See #305.
+ */
+declare const BLOCKRUN_PLUGIN_ID = "blockrun-clawrouter";
 declare const plugin: OpenClawPluginDefinition;
 
-export { type AggregatedStats, BALANCE_THRESHOLDS, BLOCKRUN_MODELS, type BalanceInfo, BalanceMonitor, CAIP2_BASE, CAIP2_SOLANA_MAINNET, type CachedLLMResponse, type CachedResponse, type CheckResult, type CounterpartyInfo, DEFAULT_RETRY_CONFIG, DEFAULT_SESSION_CONFIG, type DailyStats, type DerivedKeys, EmptyWalletError, FileSpendControlStorage, InMemorySpendControlStorage, InsufficientFundsError, type InsufficientFundsInfo, type LowBalanceInfo, MODEL_ALIASES, MalformedSpendPolicyError, OPENCLAW_MODELS, PARTNER_SERVICES, type PartnerServiceDefinition, type PartnerToolDefinition, type PaymentChain, type PolicyList, type ProxyHandle, type ProxyOptions, RequestDeduplicator, ResponseCache, type ResponseCacheConfig, type RetryConfig, RpcError, type SessionConfig, type SessionEntry, SessionStore, type SolanaBalanceInfo, SolanaBalanceMonitor, SpendControl, type SpendControlOptions, type SpendControlStorage, type SpendLimits, SpendPolicyError, type SpendRecord, type SpendWindow, type SpendingStatus, type SufficiencyResult, type UsageEntry, VISIBLE_OPENCLAW_MODELS, type WalletConfig, type WalletResolution, blockrunProvider, buildImageGenerationProvider, buildPartnerTools, buildProviderModels, clearStats, plugin as default, deriveAllKeys, deriveEvmKey, deriveSolanaKeyBytes, fetchWithRetry, formatDuration, formatStatsAscii, generateWalletMnemonic, getAgenticModels, getModelContextWindow, getPartnerService, getProxyPort, getSessionId, getStats, hashRequestContent, injectAuthProfile, injectModelsConfig, isAgenticModel, isBalanceError, isBlockrunWebSearchDisabled, isEmptyWalletError, isInsufficientFundsError, isRetryable, isRpcError, isValidMnemonic, loadPaymentChain, logUsage, parseCallArgs, registerSpendPolicyHook, resolveModelAlias, resolvePaymentChain, savePaymentChain, setupSolana, startProxy, syncAgentModelCache };
+export { type AggregatedStats, BALANCE_THRESHOLDS, BLOCKRUN_MODELS, BLOCKRUN_PLUGIN_ID, type BalanceInfo, BalanceMonitor, CAIP2_BASE, CAIP2_SOLANA_MAINNET, type CachedLLMResponse, type CachedResponse, type CheckResult, type CounterpartyInfo, DEFAULT_RETRY_CONFIG, DEFAULT_SESSION_CONFIG, type DailyStats, type DerivedKeys, EmptyWalletError, FileSpendControlStorage, InMemorySpendControlStorage, InsufficientFundsError, type InsufficientFundsInfo, type LowBalanceInfo, MODEL_ALIASES, MalformedSpendPolicyError, OPENCLAW_MODELS, PARTNER_SERVICES, type PartnerServiceDefinition, type PartnerToolDefinition, type PaymentChain, type PolicyList, type ProxyHandle, type ProxyOptions, RequestDeduplicator, ResponseCache, type ResponseCacheConfig, type RetryConfig, RpcError, type SessionConfig, type SessionEntry, SessionStore, type SolanaBalanceInfo, SolanaBalanceMonitor, SpendControl, type SpendControlOptions, type SpendControlStorage, type SpendLimits, SpendPolicyError, type SpendRecord, type SpendWindow, type SpendingStatus, type SufficiencyResult, type UsageEntry, VISIBLE_OPENCLAW_MODELS, type WalletConfig, type WalletResolution, blockrunProvider, buildImageGenerationProvider, buildPartnerTools, buildProviderModels, clearStats, plugin as default, deriveAllKeys, deriveEvmKey, deriveSolanaKeyBytes, fetchWithRetry, formatDuration, formatStatsAscii, generateWalletMnemonic, getAgenticModels, getModelContextWindow, getPartnerService, getProxyPort, getSessionId, getStats, hashRequestContent, injectAuthProfile, injectModelsConfig, isAgenticModel, isBalanceError, isBlockrunWebSearchDisabled, isEmptyWalletError, isInsufficientFundsError, isRetryable, isRpcError, isValidMnemonic, loadPaymentChain, logUsage, parseCallArgs, registerSpendPolicyHook, resolveModelAlias, resolvePaymentChain, savePaymentChain, setupSolana, startProxy, syncAgentModelCache };

package/dist/index.js

@@ -116851,6 +116851,35 @@ var init_client5 = __esm({
   }
 });
 
+// src/polymarket/spend-policy.ts
+function resolveSpendControl(deps) {
+  if (deps?.spendControl) return deps.spendControl;
+  defaultControl ??= new SpendControl();
+  return defaultControl;
+}
+function usdToMicros(usd) {
+  return String(Math.ceil(usd * 1e6));
+}
+async function signUnderSpendPolicy(deps, quote, action, sign4) {
+  const control = resolveSpendControl(deps);
+  const reservation = assertSpendPolicyAllows(control, quote);
+  try {
+    const signed2 = await sign4();
+    if (reservation !== void 0) control.settleReservation(reservation, { action });
+    return signed2;
+  } catch (err) {
+    if (reservation !== void 0) control.releaseReservation(reservation);
+    throw err;
+  }
+}
+var defaultControl;
+var init_spend_policy = __esm({
+  "src/polymarket/spend-policy.ts"() {
+    "use strict";
+    init_spend_control();
+  }
+});
+
 // src/polymarket/orders.ts
 function getSessionLedger() {
   return {
@@ -116919,6 +116948,9 @@ function isCredsMismatchError(err) {
   return msg.includes("unauthorized") || msg.includes("api key not found") || msg.includes("invalid api key");
 }
 async function mapClobError(err) {
+  if (err instanceof SpendPolicyError) {
+    return `Refused by spend policy \u2014 nothing was signed. ${err.message} (see ~/.openclaw/blockrun/spending.json)`;
+  }
   const e7 = err;
   const dataText = e7?.data ? ` \u2014 ${typeof e7.data === "string" ? e7.data : JSON.stringify(e7.data)}` : "";
   const message = `${e7?.message ?? String(err)}${dataText}`;
@@ -116965,7 +116997,7 @@ async function withCredsRetry(fn) {
     return fn(fresh);
   }
 }
-async function executeTrade(input) {
+async function executeTrade(input, deps) {
   const side = input.action === "buy" ? Side.BUY : Side.SELL;
   const isLimit = input.price !== void 0;
   if (isLimit && input.size === void 0) {
@@ -116977,6 +117009,18 @@ async function executeTrade(input) {
       isError: true
     };
   }
+  if (!isLimit && input.action === "buy" && input.amount_usd !== void 0 && !(Number.isFinite(input.amount_usd) && input.amount_usd > 0)) {
+    return {
+      text: `amount_usd must be a positive dollar amount to spend, got ${input.amount_usd}.`,
+      isError: true
+    };
+  }
+  if (isLimit && input.size !== void 0 && !(Number.isFinite(input.size) && input.size > 0)) {
+    return {
+      text: `size must be a positive number of shares, got ${input.size}.`,
+      isError: true
+    };
+  }
   if (!isLimit && input.action === "sell" && input.size === void 0) {
     return { text: `Market sells need size (shares to sell).`, isError: true };
   }
@@ -117076,39 +117120,44 @@ Re-call with confirm:true to sign and submit.`,
       }
       const options = { tickSize, negRisk };
       reserveBet(notional, input.agent_id);
-      let response;
+      const policyQuote = {
+        payTo: negRisk ? NEG_RISK_CTF_EXCHANGE_V2 : CTF_EXCHANGE_V2,
+        network: `eip155:${POLYGON_CHAIN_ID}`,
+        asset: PUSD_COLLATERAL,
+        amount: usdToMicros(notional)
+      };
+      let r2;
       try {
-        response = isLimit ? await clob.createAndPostOrder(
-          {
-            tokenID: token.tokenId,
-            price,
-            size: size5,
-            side,
-            ...orderKind === "GTD" && input.expires_at ? { expiration: input.expires_at } : {}
-          },
-          options,
-          orderKind === "GTD" ? OrderType.GTD : OrderType.GTC,
-          input.post_only ?? false
-        ) : await clob.createAndPostMarketOrder(
-          {
-            tokenID: token.tokenId,
-            amount: input.action === "buy" ? input.amount_usd : size5,
-            side,
-            orderType: orderKind === "FAK" ? OrderType.FAK : OrderType.FOK
-          },
-          options,
-          orderKind === "FAK" ? OrderType.FAK : OrderType.FOK
-        );
+        r2 = await signUnderSpendPolicy(deps, policyQuote, "polymarket order", async () => {
+          const res = await (isLimit ? clob.createAndPostOrder(
+            {
+              tokenID: token.tokenId,
+              price,
+              size: size5,
+              side,
+              ...orderKind === "GTD" && input.expires_at ? { expiration: input.expires_at } : {}
+            },
+            options,
+            orderKind === "GTD" ? OrderType.GTD : OrderType.GTC,
+            input.post_only ?? false
+          ) : clob.createAndPostMarketOrder(
+            {
+              tokenID: token.tokenId,
+              amount: input.action === "buy" ? input.amount_usd : size5,
+              side,
+              orderType: orderKind === "FAK" ? OrderType.FAK : OrderType.FOK
+            },
+            options,
+            orderKind === "FAK" ? OrderType.FAK : OrderType.FOK
+          ));
+          const placed = res?.success !== false && (res?.orderID || res?.status === "matched");
+          if (!placed) throw new Error(res?.errorMsg || "order rejected");
+          return res;
+        });
       } catch (submitErr) {
         releaseBet(notional, input.agent_id);
         throw submitErr;
       }
-      const r2 = response;
-      const placed = r2?.success !== false && (r2?.orderID || r2?.status === "matched");
-      if (!placed) {
-        releaseBet(notional, input.agent_id);
-        throw new Error(r2?.errorMsg || "order rejected");
-      }
       commitBet();
       const filled = r2?.status === "matched" || (r2?.transactionsHashes?.length ?? 0) > 0;
       return {
@@ -117197,6 +117246,8 @@ var init_orders = __esm({
     init_client5();
     init_constants3();
     init_creds();
+    init_spend_control();
+    init_spend_policy();
     ledger = {
       totalUsd: 0,
       count: 0,
@@ -225131,7 +225182,7 @@ var init_setup = __esm({
 });
 
 // src/polymarket/redeem.ts
-async function redeemPosition(input) {
+async function redeemPosition(input, deps) {
   if (!input.condition_id) {
     return {
       text: `Pass condition_id:"0x\u2026" (see action:"positions" for redeemable markets).`,
@@ -225207,20 +225258,31 @@ async function redeemPosition(input) {
       ]
     });
     const target = negRisk ? NEG_RISK_ADAPTER : CONDITIONAL_TOKENS;
-    let txHash;
-    if (getSigType() === 3) {
-      const res = await sendWalletBatch([{ target, value: "0", data }], owner, "Redeem");
-      txHash = res.transactionHash;
-    } else {
-      const account = getPolymarketAccount();
-      const wallet = createWalletClient({
-        account,
-        chain: polygon,
-        transport: http(POLYGON_RPC_URLS[0])
-      });
-      txHash = await wallet.sendTransaction({ to: target, data, chain: polygon, account });
-      await pc.waitForTransactionReceipt({ hash: txHash });
-    }
+    const eoa = getSigType() !== 3;
+    const txHash = await signUnderSpendPolicy(
+      deps,
+      {
+        payTo: target,
+        network: `eip155:${POLYGON_CHAIN_ID}`,
+        asset: PUSD_COLLATERAL,
+        amount: "0"
+      },
+      "polymarket redeem",
+      async () => {
+        if (!eoa) {
+          const res = await sendWalletBatch([{ target, value: "0", data }], owner, "Redeem");
+          return res.transactionHash;
+        }
+        const account = getPolymarketAccount();
+        const wallet = createWalletClient({
+          account,
+          chain: polygon,
+          transport: http(POLYGON_RPC_URLS[0])
+        });
+        return wallet.sendTransaction({ to: target, data, chain: polygon, account });
+      }
+    );
+    if (eoa) await pc.waitForTransactionReceipt({ hash: txHash });
     const balanceAfter = await getPusdBalance(owner).catch(() => null);
     return {
       text: [
@@ -225251,6 +225313,7 @@ var init_redeem = __esm({
     init_positions();
     init_relayer();
     init_setup();
+    init_spend_policy();
   }
 });
 
@@ -225263,7 +225326,13 @@ async function rawPusdBalance(owner) {
     args: [owner]
   });
 }
-async function withdrawFunds(input) {
+async function withdrawFunds(input, deps) {
+  if (input.amount_usd !== void 0 && !(Number.isFinite(input.amount_usd) && input.amount_usd > 0)) {
+    return {
+      text: `amount_usd must be a positive dollar amount, got ${input.amount_usd}. Omit it to withdraw the full balance.`,
+      isError: true
+    };
+  }
   let owner;
   try {
     owner = getFundsAddress();
@@ -225334,29 +225403,40 @@ async function withdrawFunds(input) {
       functionName: "transfer",
       args: [bridgeEvm, amountRaw]
     });
-    let txHash;
-    if (getSigType() === 3) {
-      const res = await sendWalletBatch(
-        [{ target: PUSD_COLLATERAL, value: "0", data }],
-        owner,
-        "Withdraw"
-      );
-      txHash = res.transactionHash;
-    } else {
-      const account = getPolymarketAccount();
-      const wallet = createWalletClient({
-        account,
-        chain: polygon,
-        transport: http(POLYGON_RPC_URLS[0])
-      });
-      txHash = await wallet.sendTransaction({
-        to: PUSD_COLLATERAL,
-        data,
-        chain: polygon,
-        account
-      });
-      await getPublicClient().waitForTransactionReceipt({ hash: txHash });
-    }
+    const eoa = getSigType() !== 3;
+    const txHash = await signUnderSpendPolicy(
+      deps,
+      {
+        payTo: recipient,
+        network: `eip155:${BASE_CHAIN_ID}`,
+        asset: BASE_USDC,
+        amount: amountRaw.toString()
+      },
+      "polymarket withdraw",
+      async () => {
+        if (!eoa) {
+          const res = await sendWalletBatch(
+            [{ target: PUSD_COLLATERAL, value: "0", data }],
+            owner,
+            "Withdraw"
+          );
+          return res.transactionHash;
+        }
+        const account = getPolymarketAccount();
+        const wallet = createWalletClient({
+          account,
+          chain: polygon,
+          transport: http(POLYGON_RPC_URLS[0])
+        });
+        return wallet.sendTransaction({
+          to: PUSD_COLLATERAL,
+          data,
+          chain: polygon,
+          account
+        });
+      }
+    );
+    if (eoa) await getPublicClient().waitForTransactionReceipt({ hash: txHash });
     return {
       text: [
         `\u2705 Withdrawal submitted: $${amountUsd.toFixed(2)} pUSD \u2192 USDC on Base`,
@@ -225391,6 +225471,7 @@ var init_withdraw = __esm({
     init_positions();
     init_relayer();
     init_setup();
+    init_spend_policy();
   }
 });
 
@@ -226036,7 +226117,7 @@ async function bridgeAddressFor(vault) {
     throw new Error(`Bridge did not return a deposit address (got: ${JSON.stringify(res.data)}).`);
   return evm;
 }
-async function fundVault(input) {
+async function fundVault(input, deps) {
   if (input.amount_usd === void 0 || input.amount_usd <= 0) {
     return {
       text: `Pass amount_usd \u2014 the USDC amount to move from your Base wallet into your Polymarket vault (e.g. amount_usd:5).`,
@@ -226093,12 +226174,12 @@ async function fundVault(input) {
     }
     const privateKey = getOrCreateWalletKey();
     const amountMicro = String(Math.floor(amountUsd * 10 ** USDC_DECIMALS));
-    const depositAuthorization = await createPaymentPayload(
-      privateKey,
-      agent,
-      bridge,
-      amountMicro,
-      `eip155:${BASE_CHAIN_ID}`
+    const network = `eip155:${BASE_CHAIN_ID}`;
+    const depositAuthorization = await signUnderSpendPolicy(
+      deps,
+      { payTo: bridge, network, asset: BASE_USDC, amount: amountMicro },
+      "polymarket fund",
+      () => createPaymentPayload(privateKey, agent, bridge, amountMicro, network)
     );
     const client = new BlockrunClient({ privateKey });
     const result = await client.post("/v1/polymarket/fund", {
@@ -226148,6 +226229,7 @@ var init_fund = __esm({
     init_constants3();
     init_positions();
     init_setup();
+    init_spend_policy();
     FUND_FEE_USD = 0.01;
     USDC_DECIMALS = 6;
     FUND_MIN_USD = Number(process.env.POLYMARKET_FUND_MIN_USD || "2");
@@ -226813,6 +226895,35 @@ function injectModelsConfig(logger48, options = {}) {
       logger48.info(`Added ${addedCount} models to allowlist (${TOP_MODELS.length} total)`);
     }
   }
+  const pluginEntries = config.plugins?.entries;
+  if (pluginEntries && pluginEntries.clawrouter && !pluginEntries[BLOCKRUN_PLUGIN_ID]) {
+    pluginEntries[BLOCKRUN_PLUGIN_ID] = pluginEntries.clawrouter;
+    delete pluginEntries.clawrouter;
+    needsWrite = true;
+    logger48.info(
+      "Migrated plugins.entries.clawrouter -> blockrun-clawrouter (OpenClaw bundles its own `clawrouter` plugin; see #305)"
+    );
+  }
+  const pluginsCfg = config.plugins;
+  const allow = pluginsCfg?.allow;
+  if (Array.isArray(allow) && allow.includes("clawrouter") && !allow.includes(BLOCKRUN_PLUGIN_ID)) {
+    allow.push(BLOCKRUN_PLUGIN_ID);
+    needsWrite = true;
+    logger48.info(`Added ${BLOCKRUN_PLUGIN_ID} to plugins.allow (renamed from clawrouter; see #305)`);
+  }
+  const deny = pluginsCfg?.deny;
+  if (Array.isArray(deny) && deny.includes("clawrouter") && !deny.includes(BLOCKRUN_PLUGIN_ID)) {
+    deny.push(BLOCKRUN_PLUGIN_ID);
+    needsWrite = true;
+    logger48.info(`Added ${BLOCKRUN_PLUGIN_ID} to plugins.deny (renamed from clawrouter; see #305)`);
+  }
+  const installs = pluginsCfg?.installs;
+  if (installs && installs.clawrouter && !installs[BLOCKRUN_PLUGIN_ID]) {
+    installs[BLOCKRUN_PLUGIN_ID] = installs.clawrouter;
+    delete installs.clawrouter;
+    needsWrite = true;
+    logger48.info(`Migrated plugins.installs.clawrouter -> ${BLOCKRUN_PLUGIN_ID} (see #305)`);
+  }
   if (!config.tools || typeof config.tools !== "object" || Array.isArray(config.tools)) {
     config.tools = {};
     needsWrite = true;
@@ -227805,7 +227916,7 @@ Run \`openclaw plugins install @blockrun/clawrouter\` to generate a wallet.`,
     }
   };
 }
-var activeProxyHandle, pendingConfiguredStartupApi, IMAGE_DIR2, AUDIO_DIR2, VIDEO_DIR2, plugin, index_default2;
+var activeProxyHandle, pendingConfiguredStartupApi, IMAGE_DIR2, AUDIO_DIR2, VIDEO_DIR2, BLOCKRUN_PLUGIN_ID, plugin, index_default2;
 var init_index = __esm({
   "src/index.ts"() {
     init_provider();
@@ -227847,9 +227958,16 @@ var init_index = __esm({
     IMAGE_DIR2 = join16(homedir13(), ".openclaw", "blockrun", "images");
     AUDIO_DIR2 = join16(homedir13(), ".openclaw", "blockrun", "audio");
     VIDEO_DIR2 = join16(homedir13(), ".openclaw", "blockrun", "videos");
+    BLOCKRUN_PLUGIN_ID = "blockrun-clawrouter";
     plugin = {
-      id: "clawrouter",
-      name: "ClawRouter",
+      // NOT "clawrouter". OpenClaw bundles its own plugin under that id since the
+      // 2026.7.1 line (vendored at dist/extensions/clawrouter, provider `clawrouter/*`,
+      // CLAWROUTER_API_KEY, clawrouter.openclaw.ai). A duplicate id loses to the
+      // bundled one — "global plugin will be overridden by bundled plugin" — so this
+      // plugin silently never loaded and the local proxy never started. Different
+      // product, different id. See #305.
+      id: BLOCKRUN_PLUGIN_ID,
+      name: "BlockRun ClawRouter",
       description: "Smart LLM router \u2014 55+ models, x402 micropayments, 78% cost savings",
       version: VERSION,
       register(api) {
@@ -228258,13 +228376,18 @@ ${errText}`
               delete config.models.providers.blockrun;
             }
             removeManagedBlockrunMcpServerConfig(config);
-            for (const key2 of ["clawrouter", "ClawRouter", "@blockrun/clawrouter"]) {
+            for (const key2 of [
+              BLOCKRUN_PLUGIN_ID,
+              "clawrouter",
+              "ClawRouter",
+              "@blockrun/clawrouter"
+            ]) {
               if (config.plugins?.entries?.[key2]) delete config.plugins.entries[key2];
               if (config.plugins?.installs?.[key2]) delete config.plugins.installs[key2];
             }
             if (Array.isArray(config.plugins?.allow)) {
               config.plugins.allow = config.plugins.allow.filter(
-                (p) => p !== "clawrouter" && p !== "ClawRouter" && p !== "@blockrun/clawrouter"
+                (p) => p !== BLOCKRUN_PLUGIN_ID && p !== "clawrouter" && p !== "ClawRouter" && p !== "@blockrun/clawrouter"
               );
             }
             if (config.agents?.defaults?.models) {
@@ -228315,6 +228438,7 @@ init_index();
 export {
   BALANCE_THRESHOLDS,
   BLOCKRUN_MODELS,
+  BLOCKRUN_PLUGIN_ID,
   BalanceMonitor,
   CAIP2_BASE,
   CAIP2_SOLANA_MAINNET,

package/openclaw.plugin.json

@@ -1,7 +1,7 @@
 {
-  "id": "clawrouter",
-  "name": "ClawRouter",
-  "description": "Smart LLM router — 55+ models, x402 micropayments, 92% cost savings. Phone lookup + AI voice calls (Twilio + Bland.ai). Surf crypto-data API (84 endpoints, on-chain SQL, 100M+ labeled wallets) via skill.",
+  "id": "blockrun-clawrouter",
+  "name": "BlockRun ClawRouter",
+  "description": "Smart LLM router \u2014 55+ models, x402 micropayments, 92% cost savings. Phone lookup + AI voice calls (Twilio + Bland.ai). Surf crypto-data API (84 endpoints, on-chain SQL, 100M+ labeled wallets) via skill.",
   "skills": ["./skills"],
   "activation": {
     "onStartup": true
@@ -44,7 +44,7 @@
     "properties": {
       "walletKey": {
         "type": "string",
-        "description": "EVM wallet private key (0x...). Optional — auto-generated if not set."
+        "description": "EVM wallet private key (0x...). Optional \u2014 auto-generated if not set."
       },
       "routing": {
         "type": "object",
@@ -56,7 +56,7 @@
     "walletKey": {
       "label": "Wallet Private Key",
       "sensitive": true,
-      "placeholder": "0x... (optional — auto-generated)"
+      "placeholder": "0x... (optional \u2014 auto-generated)"
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blockrun/clawrouter",
-  "version": "0.12.263",
+  "version": "0.12.265",
   "description": "Smart LLM router \u2014 save 84% on inference costs. 76 models (7 free), one wallet, x402 micropayments.",
   "type": "module",
   "main": "dist/index.js",
@@ -34,6 +34,7 @@
     "docs/*.png",
     "scripts",
     "!scripts/smoke-dist.mjs",
+    "!scripts/sync-brand-numbers.mjs",
     "skills",
     "src/top-models.json",
     "openclaw.plugin.json"

package/scripts/sync-brand-numbers.mjs

@@ -1,270 +0,0 @@
-#!/usr/bin/env node
-/**
- * Sync marketing numbers from BlockRun's canonical brand artifact.
- *
- * This file is copied byte-for-byte into every public repo as
- * scripts/sync-brand-numbers.mjs. It is a copy rather than an npm package on
- * purpose: a package would mean 37 dependency bumps, and several consuming
- * repos have no package.json at all. Zero dependencies, plain Node.
- *
- *   node scripts/sync-brand-numbers.mjs            rewrite markers in place
- *   node scripts/sync-brand-numbers.mjs --check    exit 1 on drift, write nothing
- *   node scripts/sync-brand-numbers.mjs --refresh  re-fetch the artifact first
- *
- * --check NEVER touches the network. PR CI must be deterministic and offline:
- * if it fetched, a deploy in progress would fail every repo in the org at once.
- * Freshness is the fan-out job's problem, not the pull request's.
- *
- * Markers look like:  <!-- br:models.chatVisible -->66<!-- /br:models.chatVisible -->
- * and wrap the WHOLE token, so a badge URL, its alt text and the prose number
- * can all regenerate from one key.
- */
-import { existsSync, lstatSync, readFileSync, writeFileSync, readdirSync } from "node:fs";
-import { join, relative, extname } from "node:path";
-
-const ROOT = process.cwd();
-const SNAPSHOT = join(ROOT, "brand-numbers.json");
-// ORIGIN is tried first because it IS the truth — the mirror can only ever be
-// as fresh as the last time someone refreshed it. The mirror exists so a repo
-// can still sync while blockrun.ai is down, not to front the origin.
-//
-// The mirror is awesome-blockrun's own brand-numbers.json: that repo consumes
-// the artifact like every other, and its snapshot doubles as the org's copy.
-// One file, one role per repo, nothing to keep in step by hand.
-const ORIGIN = "https://blockrun.ai/brand/numbers.json";
-const MIRROR =
-  "https://raw.githubusercontent.com/BlockRunAI/awesome-blockrun/main/brand-numbers.json";
-
-const argv = new Set(process.argv.slice(2));
-const check = argv.has("--check");
-const refresh = argv.has("--refresh");
-
-const SKIP_DIRS = new Set([
-  "node_modules", ".git", "dist", "build", "out", ".next", "coverage",
-  "vendor", "target", "__pycache__", ".venv", "venv",
-]);
-// .txt is here for llms.txt, which is a first-class marketing surface: it is
-// what agents read to find out what BlockRun serves. Scanning other .txt files
-// costs a read and changes nothing — only files with markers are ever written.
-const TEXT_EXT = new Set([".md", ".mdx", ".txt"]);
-
-/* ── 1. numbers ──────────────────────────────────────────────────────────── */
-
-async function loadNumbers() {
-  if (!refresh) {
-    try {
-      return JSON.parse(readFileSync(SNAPSHOT, "utf8"));
-    } catch {
-      fail(
-        `no brand-numbers.json in ${ROOT}\n` +
-          `  run with --refresh once to seed it from ${ORIGIN}`,
-      );
-    }
-  }
-  for (const url of [ORIGIN, MIRROR]) {
-    try {
-      const res = await fetch(url, { signal: AbortSignal.timeout(10_000) });
-      if (!res.ok) continue;
-      const json = await res.json();
-      writeFileSync(SNAPSHOT, `${JSON.stringify(json, null, 2)}\n`);
-      return json;
-    } catch {
-      /* try the next source */
-    }
-  }
-  fail(`could not refresh from ${MIRROR} or ${ORIGIN}`);
-}
-
-/** Flatten nested numbers into dotted keys, ignoring $comment / rationale prose. */
-function flatten(obj, prefix = "") {
-  return Object.entries(obj).flatMap(([k, v]) => {
-    if (k.startsWith("$")) return [];
-    const key = `${prefix}${k}`;
-    if (v && typeof v === "object" && !Array.isArray(v)) return flatten(v, `${key}.`);
-    if (v === null) return [];
-    return [[key, v]];
-  });
-}
-
-/* ── 2. renderers ────────────────────────────────────────────────────────── */
-
-/**
- * How a key becomes text. Default is the bare value.
- *
- * A marker may carry an `@modifier` — `<!-- br:mcp.tools@badge -->` — which
- * selects a renderer without changing which number is looked up. The modifier
- * is what makes a key reusable: the same mcp.tools appears as a shields badge
- * at the top of a README and as a bare "19 tools" in a table two screens down,
- * and one marker still keeps the badge URL, its alt text and the label in step.
- *
- * Renderers are registered under the FULL marker name so a badge's label is
- * written out rather than guessed from the key.
- */
-const badge = (label) => (n) =>
-  `<img src="https://img.shields.io/badge/${label}-${n}-5B9BF6?style=flat-square&labelColor=0B0A0F" alt="${n} ${label}">`;
-
-const RENDER = {
-  "mcp.tools@badge": badge("tools"),
-  "models.totalVisible@badge": badge("models"),
-  "models.chatVisible@badge": badge("models"),
-};
-const render = (marker, value) => (RENDER[marker] ?? String)(value);
-
-/** `mcp.tools@badge` looks up `mcp.tools`. Unmodified markers are unaffected. */
-const keyOf = (marker) => marker.split("@")[0];
-
-/* ── 3. marker rewriting ─────────────────────────────────────────────────── */
-
-const esc = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-const OPEN_ANY = /<!--\s*br:([A-Za-z0-9_.@]+)\s*-->/g;
-const CLOSE_ANY = /<!--\s*\/br:([A-Za-z0-9_.@]+)\s*-->/g;
-
-/** Byte ranges of fenced code blocks — markers inside them are documentation. */
-function fencedRanges(text) {
-  const ranges = [];
-  const fence = /^(\s*)(`{3,}|~{3,})[^\n]*$/gm;
-  let open = null;
-  for (let m; (m = fence.exec(text)); ) {
-    if (open === null) open = m.index;
-    else {
-      ranges.push([open, m.index + m[0].length]);
-      open = null;
-    }
-  }
-  return ranges;
-}
-
-function syncFile(file, numbers, problems) {
-  const before = readFileSync(file, "utf8");
-  const rel = relative(ROOT, file);
-  const fenced = fencedRanges(before);
-  const inFence = (i) => fenced.some(([a, b]) => i >= a && i < b);
-  const known = new Map(numbers);
-  const used = new Set();
-
-  // Markers actually present, so a file is only ever rewritten for what it uses
-  // and an @modifier is carried through to the renderer verbatim.
-  const markers = new Set();
-  // A marker naming a key that does not exist is an error, never a silent
-  // no-op: a typo'd marker would otherwise sit there looking synced forever.
-  for (const [re, shown] of [
-    [OPEN_ANY, (n) => `<!-- br:${n} -->`],
-    [CLOSE_ANY, (n) => `<!-- /br:${n} -->`],
-  ]) {
-    for (const m of before.matchAll(re)) {
-      if (inFence(m.index)) continue;
-      markers.add(m[1]);
-      if (!known.has(keyOf(m[1]))) problems.push(`${rel}: unknown key ${shown(m[1])}`);
-    }
-  }
-
-  let after = before;
-  for (const marker of markers) {
-    const key = keyOf(marker);
-    if (!known.has(key)) continue;
-    const value = known.get(key);
-    const pair = new RegExp(
-      `(<!--\\s*br:${esc(marker)}\\s*-->)([\\s\\S]*?)(<!--\\s*/br:${esc(marker)}\\s*-->)`,
-      "g",
-    );
-    after = after.replace(pair, (whole, open, inner, close, offset) => {
-      if (inFence(offset)) return whole;
-      // Nesting means the closing tag of an inner marker would be consumed by
-      // the outer one. Refuse rather than produce mangled output.
-      if (/<!--\s*\/?br:/.test(inner)) {
-        problems.push(`${rel}: nested marker inside br:${marker}`);
-        return whole;
-      }
-      used.add(marker);
-      return open + render(marker, value) + close;
-    });
-
-    // An opening tag with no partner silently swallows the rest of the file on
-    // a naive regex, so catch it explicitly.
-    const opens = [...before.matchAll(new RegExp(`<!--\\s*br:${esc(marker)}\\s*-->`, "g"))]
-      .filter((m) => !inFence(m.index)).length;
-    const closes = [...before.matchAll(new RegExp(`<!--\\s*/br:${esc(marker)}\\s*-->`, "g"))]
-      .filter((m) => !inFence(m.index)).length;
-    if (opens !== closes) problems.push(`${rel}: unbalanced marker br:${marker} (${opens} open, ${closes} close)`);
-  }
-
-  return { before, after, changed: before !== after, used };
-}
-
-/* ── 4. walk ─────────────────────────────────────────────────────────────── */
-
-function* walk(dir) {
-  for (const name of readdirSync(dir)) {
-    if (SKIP_DIRS.has(name)) continue;
-    const p = join(dir, name);
-    // lstat, not stat: a symlinked directory is reached by its real path or not
-    // at all. blockrun's docs/ -> awesome-blockrun/docs is exactly the case that
-    // matters — following it would edit a submodule's files behind the skip
-    // below, and a link pointing at an ancestor would recurse forever.
-    const s = lstatSync(p);
-    if (s.isSymbolicLink()) continue;
-    if (s.isDirectory()) {
-      // A nested repo is a submodule or vendored checkout: it carries its own
-      // brand-numbers.json and syncs itself. Rewriting its markers from THIS
-      // repo's snapshot would dirty a submodule nobody asked us to touch, and
-      // would report drift that belongs to another repo's CI.
-      if (existsSync(join(p, ".git"))) continue;
-      yield* walk(p);
-    } else if (TEXT_EXT.has(extname(name))) yield p;
-  }
-}
-
-function fail(msg) {
-  console.error(`brand-numbers: ${msg}`);
-  process.exit(1);
-}
-
-/* ── 5. run ──────────────────────────────────────────────────────────────── */
-
-const raw = await loadNumbers();
-const numbers = flatten(raw);
-const problems = [];
-const drifted = [];
-const everUsed = new Set();
-
-for (const file of walk(ROOT)) {
-  const { before, after, changed, used } = syncFile(file, numbers, problems);
-  used.forEach((k) => everUsed.add(k));
-  if (!changed) continue;
-  drifted.push({ file: relative(ROOT, file), before, after });
-  if (!check) writeFileSync(file, after);
-}
-
-if (problems.length) {
-  for (const p of problems) console.error(`  ${p}`);
-  fail(`${problems.length} marker problem(s)`);
-}
-
-if (check) {
-  if (drifted.length === 0) {
-    console.log(`brand-numbers: up to date (${everUsed.size} keys in use)`);
-    process.exit(0);
-  }
-  console.error("brand-numbers: these files disagree with brand-numbers.json\n");
-  for (const { file, before, after } of drifted) {
-    const b = before.split("\n");
-    const a = after.split("\n");
-    for (let i = 0; i < Math.max(b.length, a.length); i++) {
-      if (b[i] !== a[i]) {
-        console.error(`  ${file}:${i + 1}`);
-        console.error(`    - ${(b[i] ?? "").trim()}`);
-        console.error(`    + ${(a[i] ?? "").trim()}`);
-      }
-    }
-  }
-  console.error(
-    "\n  fix with:  node scripts/sync-brand-numbers.mjs && git commit -am 'chore: sync brand numbers'",
-  );
-  process.exit(1);
-}
-
-console.log(
-  drifted.length
-    ? `brand-numbers: updated ${drifted.length} file(s)`
-    : `brand-numbers: already up to date (${everUsed.size} keys in use)`,
-);