@blockrun/clawrouter 0.12.264 → 0.12.265

package/dist/cli.js

@@ -226835,6 +226835,7 @@ var index_exports = {};
 __export(index_exports, {
   BALANCE_THRESHOLDS: () => BALANCE_THRESHOLDS,
   BLOCKRUN_MODELS: () => BLOCKRUN_MODELS,
+  BLOCKRUN_PLUGIN_ID: () => BLOCKRUN_PLUGIN_ID,
   BalanceMonitor: () => BalanceMonitor,
   CAIP2_BASE: () => CAIP2_BASE,
   CAIP2_SOLANA_MAINNET: () => CAIP2_SOLANA_MAINNET,
@@ -227149,6 +227150,35 @@ function injectModelsConfig(logger48, options = {}) {
       logger48.info(`Added ${addedCount} models to allowlist (${TOP_MODELS.length} total)`);
     }
   }
+  const pluginEntries = config.plugins?.entries;
+  if (pluginEntries && pluginEntries.clawrouter && !pluginEntries[BLOCKRUN_PLUGIN_ID]) {
+    pluginEntries[BLOCKRUN_PLUGIN_ID] = pluginEntries.clawrouter;
+    delete pluginEntries.clawrouter;
+    needsWrite = true;
+    logger48.info(
+      "Migrated plugins.entries.clawrouter -> blockrun-clawrouter (OpenClaw bundles its own `clawrouter` plugin; see #305)"
+    );
+  }
+  const pluginsCfg = config.plugins;
+  const allow = pluginsCfg?.allow;
+  if (Array.isArray(allow) && allow.includes("clawrouter") && !allow.includes(BLOCKRUN_PLUGIN_ID)) {
+    allow.push(BLOCKRUN_PLUGIN_ID);
+    needsWrite = true;
+    logger48.info(`Added ${BLOCKRUN_PLUGIN_ID} to plugins.allow (renamed from clawrouter; see #305)`);
+  }
+  const deny = pluginsCfg?.deny;
+  if (Array.isArray(deny) && deny.includes("clawrouter") && !deny.includes(BLOCKRUN_PLUGIN_ID)) {
+    deny.push(BLOCKRUN_PLUGIN_ID);
+    needsWrite = true;
+    logger48.info(`Added ${BLOCKRUN_PLUGIN_ID} to plugins.deny (renamed from clawrouter; see #305)`);
+  }
+  const installs = pluginsCfg?.installs;
+  if (installs && installs.clawrouter && !installs[BLOCKRUN_PLUGIN_ID]) {
+    installs[BLOCKRUN_PLUGIN_ID] = installs.clawrouter;
+    delete installs.clawrouter;
+    needsWrite = true;
+    logger48.info(`Migrated plugins.installs.clawrouter -> ${BLOCKRUN_PLUGIN_ID} (see #305)`);
+  }
   if (!config.tools || typeof config.tools !== "object" || Array.isArray(config.tools)) {
     config.tools = {};
     needsWrite = true;
@@ -228141,7 +228171,7 @@ Run \`openclaw plugins install @blockrun/clawrouter\` to generate a wallet.`,
     }
   };
 }
-var activeProxyHandle, pendingConfiguredStartupApi, IMAGE_DIR2, AUDIO_DIR2, VIDEO_DIR2, plugin, index_default2;
+var activeProxyHandle, pendingConfiguredStartupApi, IMAGE_DIR2, AUDIO_DIR2, VIDEO_DIR2, BLOCKRUN_PLUGIN_ID, plugin, index_default2;
 var init_index = __esm({
   "src/index.ts"() {
     "use strict";
@@ -228184,9 +228214,16 @@ var init_index = __esm({
     IMAGE_DIR2 = join16(homedir13(), ".openclaw", "blockrun", "images");
     AUDIO_DIR2 = join16(homedir13(), ".openclaw", "blockrun", "audio");
     VIDEO_DIR2 = join16(homedir13(), ".openclaw", "blockrun", "videos");
+    BLOCKRUN_PLUGIN_ID = "blockrun-clawrouter";
     plugin = {
-      id: "clawrouter",
-      name: "ClawRouter",
+      // NOT "clawrouter". OpenClaw bundles its own plugin under that id since the
+      // 2026.7.1 line (vendored at dist/extensions/clawrouter, provider `clawrouter/*`,
+      // CLAWROUTER_API_KEY, clawrouter.openclaw.ai). A duplicate id loses to the
+      // bundled one — "global plugin will be overridden by bundled plugin" — so this
+      // plugin silently never loaded and the local proxy never started. Different
+      // product, different id. See #305.
+      id: BLOCKRUN_PLUGIN_ID,
+      name: "BlockRun ClawRouter",
       description: "Smart LLM router \u2014 55+ models, x402 micropayments, 78% cost savings",
       version: VERSION,
       register(api) {
@@ -228595,13 +228632,18 @@ ${errText}`
               delete config.models.providers.blockrun;
             }
             removeManagedBlockrunMcpServerConfig(config);
-            for (const key2 of ["clawrouter", "ClawRouter", "@blockrun/clawrouter"]) {
+            for (const key2 of [
+              BLOCKRUN_PLUGIN_ID,
+              "clawrouter",
+              "ClawRouter",
+              "@blockrun/clawrouter"
+            ]) {
               if (config.plugins?.entries?.[key2]) delete config.plugins.entries[key2];
               if (config.plugins?.installs?.[key2]) delete config.plugins.installs[key2];
             }
             if (Array.isArray(config.plugins?.allow)) {
               config.plugins.allow = config.plugins.allow.filter(
-                (p) => p !== "clawrouter" && p !== "ClawRouter" && p !== "@blockrun/clawrouter"
+                (p) => p !== BLOCKRUN_PLUGIN_ID && p !== "clawrouter" && p !== "ClawRouter" && p !== "@blockrun/clawrouter"
               );
             }
             if (config.agents?.defaults?.models) {

package/dist/index.d.ts

@@ -1729,6 +1729,13 @@ declare function parseCallArgs(raw: string): {
  * Delegates to the local proxy (which handles x402 payment).
  */
 declare function buildImageGenerationProvider(): ImageGenerationProviderPlugin;
+/**
+ * This plugin's OpenClaw id. NOT "clawrouter" — OpenClaw bundles its own plugin
+ * under that id since the 2026.7.1 line, and a duplicate loses to the bundled
+ * one. Kept as one constant so the manifest, the plugin definition and the
+ * config migration can never drift apart. See #305.
+ */
+declare const BLOCKRUN_PLUGIN_ID = "blockrun-clawrouter";
 declare const plugin: OpenClawPluginDefinition;
 
-export { type AggregatedStats, BALANCE_THRESHOLDS, BLOCKRUN_MODELS, type BalanceInfo, BalanceMonitor, CAIP2_BASE, CAIP2_SOLANA_MAINNET, type CachedLLMResponse, type CachedResponse, type CheckResult, type CounterpartyInfo, DEFAULT_RETRY_CONFIG, DEFAULT_SESSION_CONFIG, type DailyStats, type DerivedKeys, EmptyWalletError, FileSpendControlStorage, InMemorySpendControlStorage, InsufficientFundsError, type InsufficientFundsInfo, type LowBalanceInfo, MODEL_ALIASES, MalformedSpendPolicyError, OPENCLAW_MODELS, PARTNER_SERVICES, type PartnerServiceDefinition, type PartnerToolDefinition, type PaymentChain, type PolicyList, type ProxyHandle, type ProxyOptions, RequestDeduplicator, ResponseCache, type ResponseCacheConfig, type RetryConfig, RpcError, type SessionConfig, type SessionEntry, SessionStore, type SolanaBalanceInfo, SolanaBalanceMonitor, SpendControl, type SpendControlOptions, type SpendControlStorage, type SpendLimits, SpendPolicyError, type SpendRecord, type SpendWindow, type SpendingStatus, type SufficiencyResult, type UsageEntry, VISIBLE_OPENCLAW_MODELS, type WalletConfig, type WalletResolution, blockrunProvider, buildImageGenerationProvider, buildPartnerTools, buildProviderModels, clearStats, plugin as default, deriveAllKeys, deriveEvmKey, deriveSolanaKeyBytes, fetchWithRetry, formatDuration, formatStatsAscii, generateWalletMnemonic, getAgenticModels, getModelContextWindow, getPartnerService, getProxyPort, getSessionId, getStats, hashRequestContent, injectAuthProfile, injectModelsConfig, isAgenticModel, isBalanceError, isBlockrunWebSearchDisabled, isEmptyWalletError, isInsufficientFundsError, isRetryable, isRpcError, isValidMnemonic, loadPaymentChain, logUsage, parseCallArgs, registerSpendPolicyHook, resolveModelAlias, resolvePaymentChain, savePaymentChain, setupSolana, startProxy, syncAgentModelCache };
+export { type AggregatedStats, BALANCE_THRESHOLDS, BLOCKRUN_MODELS, BLOCKRUN_PLUGIN_ID, type BalanceInfo, BalanceMonitor, CAIP2_BASE, CAIP2_SOLANA_MAINNET, type CachedLLMResponse, type CachedResponse, type CheckResult, type CounterpartyInfo, DEFAULT_RETRY_CONFIG, DEFAULT_SESSION_CONFIG, type DailyStats, type DerivedKeys, EmptyWalletError, FileSpendControlStorage, InMemorySpendControlStorage, InsufficientFundsError, type InsufficientFundsInfo, type LowBalanceInfo, MODEL_ALIASES, MalformedSpendPolicyError, OPENCLAW_MODELS, PARTNER_SERVICES, type PartnerServiceDefinition, type PartnerToolDefinition, type PaymentChain, type PolicyList, type ProxyHandle, type ProxyOptions, RequestDeduplicator, ResponseCache, type ResponseCacheConfig, type RetryConfig, RpcError, type SessionConfig, type SessionEntry, SessionStore, type SolanaBalanceInfo, SolanaBalanceMonitor, SpendControl, type SpendControlOptions, type SpendControlStorage, type SpendLimits, SpendPolicyError, type SpendRecord, type SpendWindow, type SpendingStatus, type SufficiencyResult, type UsageEntry, VISIBLE_OPENCLAW_MODELS, type WalletConfig, type WalletResolution, blockrunProvider, buildImageGenerationProvider, buildPartnerTools, buildProviderModels, clearStats, plugin as default, deriveAllKeys, deriveEvmKey, deriveSolanaKeyBytes, fetchWithRetry, formatDuration, formatStatsAscii, generateWalletMnemonic, getAgenticModels, getModelContextWindow, getPartnerService, getProxyPort, getSessionId, getStats, hashRequestContent, injectAuthProfile, injectModelsConfig, isAgenticModel, isBalanceError, isBlockrunWebSearchDisabled, isEmptyWalletError, isInsufficientFundsError, isRetryable, isRpcError, isValidMnemonic, loadPaymentChain, logUsage, parseCallArgs, registerSpendPolicyHook, resolveModelAlias, resolvePaymentChain, savePaymentChain, setupSolana, startProxy, syncAgentModelCache };

package/dist/index.js

@@ -226895,6 +226895,35 @@ function injectModelsConfig(logger48, options = {}) {
       logger48.info(`Added ${addedCount} models to allowlist (${TOP_MODELS.length} total)`);
     }
   }
+  const pluginEntries = config.plugins?.entries;
+  if (pluginEntries && pluginEntries.clawrouter && !pluginEntries[BLOCKRUN_PLUGIN_ID]) {
+    pluginEntries[BLOCKRUN_PLUGIN_ID] = pluginEntries.clawrouter;
+    delete pluginEntries.clawrouter;
+    needsWrite = true;
+    logger48.info(
+      "Migrated plugins.entries.clawrouter -> blockrun-clawrouter (OpenClaw bundles its own `clawrouter` plugin; see #305)"
+    );
+  }
+  const pluginsCfg = config.plugins;
+  const allow = pluginsCfg?.allow;
+  if (Array.isArray(allow) && allow.includes("clawrouter") && !allow.includes(BLOCKRUN_PLUGIN_ID)) {
+    allow.push(BLOCKRUN_PLUGIN_ID);
+    needsWrite = true;
+    logger48.info(`Added ${BLOCKRUN_PLUGIN_ID} to plugins.allow (renamed from clawrouter; see #305)`);
+  }
+  const deny = pluginsCfg?.deny;
+  if (Array.isArray(deny) && deny.includes("clawrouter") && !deny.includes(BLOCKRUN_PLUGIN_ID)) {
+    deny.push(BLOCKRUN_PLUGIN_ID);
+    needsWrite = true;
+    logger48.info(`Added ${BLOCKRUN_PLUGIN_ID} to plugins.deny (renamed from clawrouter; see #305)`);
+  }
+  const installs = pluginsCfg?.installs;
+  if (installs && installs.clawrouter && !installs[BLOCKRUN_PLUGIN_ID]) {
+    installs[BLOCKRUN_PLUGIN_ID] = installs.clawrouter;
+    delete installs.clawrouter;
+    needsWrite = true;
+    logger48.info(`Migrated plugins.installs.clawrouter -> ${BLOCKRUN_PLUGIN_ID} (see #305)`);
+  }
   if (!config.tools || typeof config.tools !== "object" || Array.isArray(config.tools)) {
     config.tools = {};
     needsWrite = true;
@@ -227887,7 +227916,7 @@ Run \`openclaw plugins install @blockrun/clawrouter\` to generate a wallet.`,
     }
   };
 }
-var activeProxyHandle, pendingConfiguredStartupApi, IMAGE_DIR2, AUDIO_DIR2, VIDEO_DIR2, plugin, index_default2;
+var activeProxyHandle, pendingConfiguredStartupApi, IMAGE_DIR2, AUDIO_DIR2, VIDEO_DIR2, BLOCKRUN_PLUGIN_ID, plugin, index_default2;
 var init_index = __esm({
   "src/index.ts"() {
     init_provider();
@@ -227929,9 +227958,16 @@ var init_index = __esm({
     IMAGE_DIR2 = join16(homedir13(), ".openclaw", "blockrun", "images");
     AUDIO_DIR2 = join16(homedir13(), ".openclaw", "blockrun", "audio");
     VIDEO_DIR2 = join16(homedir13(), ".openclaw", "blockrun", "videos");
+    BLOCKRUN_PLUGIN_ID = "blockrun-clawrouter";
     plugin = {
-      id: "clawrouter",
-      name: "ClawRouter",
+      // NOT "clawrouter". OpenClaw bundles its own plugin under that id since the
+      // 2026.7.1 line (vendored at dist/extensions/clawrouter, provider `clawrouter/*`,
+      // CLAWROUTER_API_KEY, clawrouter.openclaw.ai). A duplicate id loses to the
+      // bundled one — "global plugin will be overridden by bundled plugin" — so this
+      // plugin silently never loaded and the local proxy never started. Different
+      // product, different id. See #305.
+      id: BLOCKRUN_PLUGIN_ID,
+      name: "BlockRun ClawRouter",
       description: "Smart LLM router \u2014 55+ models, x402 micropayments, 78% cost savings",
       version: VERSION,
       register(api) {
@@ -228340,13 +228376,18 @@ ${errText}`
               delete config.models.providers.blockrun;
             }
             removeManagedBlockrunMcpServerConfig(config);
-            for (const key2 of ["clawrouter", "ClawRouter", "@blockrun/clawrouter"]) {
+            for (const key2 of [
+              BLOCKRUN_PLUGIN_ID,
+              "clawrouter",
+              "ClawRouter",
+              "@blockrun/clawrouter"
+            ]) {
               if (config.plugins?.entries?.[key2]) delete config.plugins.entries[key2];
               if (config.plugins?.installs?.[key2]) delete config.plugins.installs[key2];
             }
             if (Array.isArray(config.plugins?.allow)) {
               config.plugins.allow = config.plugins.allow.filter(
-                (p) => p !== "clawrouter" && p !== "ClawRouter" && p !== "@blockrun/clawrouter"
+                (p) => p !== BLOCKRUN_PLUGIN_ID && p !== "clawrouter" && p !== "ClawRouter" && p !== "@blockrun/clawrouter"
               );
             }
             if (config.agents?.defaults?.models) {
@@ -228397,6 +228438,7 @@ init_index();
 export {
   BALANCE_THRESHOLDS,
   BLOCKRUN_MODELS,
+  BLOCKRUN_PLUGIN_ID,
   BalanceMonitor,
   CAIP2_BASE,
   CAIP2_SOLANA_MAINNET,

package/openclaw.plugin.json

@@ -1,7 +1,7 @@
 {
-  "id": "clawrouter",
-  "name": "ClawRouter",
-  "description": "Smart LLM router — 55+ models, x402 micropayments, 92% cost savings. Phone lookup + AI voice calls (Twilio + Bland.ai). Surf crypto-data API (84 endpoints, on-chain SQL, 100M+ labeled wallets) via skill.",
+  "id": "blockrun-clawrouter",
+  "name": "BlockRun ClawRouter",
+  "description": "Smart LLM router \u2014 55+ models, x402 micropayments, 92% cost savings. Phone lookup + AI voice calls (Twilio + Bland.ai). Surf crypto-data API (84 endpoints, on-chain SQL, 100M+ labeled wallets) via skill.",
   "skills": ["./skills"],
   "activation": {
     "onStartup": true
@@ -44,7 +44,7 @@
     "properties": {
       "walletKey": {
         "type": "string",
-        "description": "EVM wallet private key (0x...). Optional — auto-generated if not set."
+        "description": "EVM wallet private key (0x...). Optional \u2014 auto-generated if not set."
       },
       "routing": {
         "type": "object",
@@ -56,7 +56,7 @@
     "walletKey": {
       "label": "Wallet Private Key",
       "sensitive": true,
-      "placeholder": "0x... (optional — auto-generated)"
+      "placeholder": "0x... (optional \u2014 auto-generated)"
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blockrun/clawrouter",
-  "version": "0.12.264",
+  "version": "0.12.265",
   "description": "Smart LLM router \u2014 save 84% on inference costs. 76 models (7 free), one wallet, x402 micropayments.",
   "type": "module",
   "main": "dist/index.js",
@@ -34,6 +34,7 @@
     "docs/*.png",
     "scripts",
     "!scripts/smoke-dist.mjs",
+    "!scripts/sync-brand-numbers.mjs",
     "skills",
     "src/top-models.json",
     "openclaw.plugin.json"

package/scripts/sync-brand-numbers.mjs

@@ -1,270 +0,0 @@
-#!/usr/bin/env node
-/**
- * Sync marketing numbers from BlockRun's canonical brand artifact.
- *
- * This file is copied byte-for-byte into every public repo as
- * scripts/sync-brand-numbers.mjs. It is a copy rather than an npm package on
- * purpose: a package would mean 37 dependency bumps, and several consuming
- * repos have no package.json at all. Zero dependencies, plain Node.
- *
- *   node scripts/sync-brand-numbers.mjs            rewrite markers in place
- *   node scripts/sync-brand-numbers.mjs --check    exit 1 on drift, write nothing
- *   node scripts/sync-brand-numbers.mjs --refresh  re-fetch the artifact first
- *
- * --check NEVER touches the network. PR CI must be deterministic and offline:
- * if it fetched, a deploy in progress would fail every repo in the org at once.
- * Freshness is the fan-out job's problem, not the pull request's.
- *
- * Markers look like:  <!-- br:models.chatVisible -->66<!-- /br:models.chatVisible -->
- * and wrap the WHOLE token, so a badge URL, its alt text and the prose number
- * can all regenerate from one key.
- */
-import { existsSync, lstatSync, readFileSync, writeFileSync, readdirSync } from "node:fs";
-import { join, relative, extname } from "node:path";
-
-const ROOT = process.cwd();
-const SNAPSHOT = join(ROOT, "brand-numbers.json");
-// ORIGIN is tried first because it IS the truth — the mirror can only ever be
-// as fresh as the last time someone refreshed it. The mirror exists so a repo
-// can still sync while blockrun.ai is down, not to front the origin.
-//
-// The mirror is awesome-blockrun's own brand-numbers.json: that repo consumes
-// the artifact like every other, and its snapshot doubles as the org's copy.
-// One file, one role per repo, nothing to keep in step by hand.
-const ORIGIN = "https://blockrun.ai/brand/numbers.json";
-const MIRROR =
-  "https://raw.githubusercontent.com/BlockRunAI/awesome-blockrun/main/brand-numbers.json";
-
-const argv = new Set(process.argv.slice(2));
-const check = argv.has("--check");
-const refresh = argv.has("--refresh");
-
-const SKIP_DIRS = new Set([
-  "node_modules", ".git", "dist", "build", "out", ".next", "coverage",
-  "vendor", "target", "__pycache__", ".venv", "venv",
-]);
-// .txt is here for llms.txt, which is a first-class marketing surface: it is
-// what agents read to find out what BlockRun serves. Scanning other .txt files
-// costs a read and changes nothing — only files with markers are ever written.
-const TEXT_EXT = new Set([".md", ".mdx", ".txt"]);
-
-/* ── 1. numbers ──────────────────────────────────────────────────────────── */
-
-async function loadNumbers() {
-  if (!refresh) {
-    try {
-      return JSON.parse(readFileSync(SNAPSHOT, "utf8"));
-    } catch {
-      fail(
-        `no brand-numbers.json in ${ROOT}\n` +
-          `  run with --refresh once to seed it from ${ORIGIN}`,
-      );
-    }
-  }
-  for (const url of [ORIGIN, MIRROR]) {
-    try {
-      const res = await fetch(url, { signal: AbortSignal.timeout(10_000) });
-      if (!res.ok) continue;
-      const json = await res.json();
-      writeFileSync(SNAPSHOT, `${JSON.stringify(json, null, 2)}\n`);
-      return json;
-    } catch {
-      /* try the next source */
-    }
-  }
-  fail(`could not refresh from ${MIRROR} or ${ORIGIN}`);
-}
-
-/** Flatten nested numbers into dotted keys, ignoring $comment / rationale prose. */
-function flatten(obj, prefix = "") {
-  return Object.entries(obj).flatMap(([k, v]) => {
-    if (k.startsWith("$")) return [];
-    const key = `${prefix}${k}`;
-    if (v && typeof v === "object" && !Array.isArray(v)) return flatten(v, `${key}.`);
-    if (v === null) return [];
-    return [[key, v]];
-  });
-}
-
-/* ── 2. renderers ────────────────────────────────────────────────────────── */
-
-/**
- * How a key becomes text. Default is the bare value.
- *
- * A marker may carry an `@modifier` — `<!-- br:mcp.tools@badge -->` — which
- * selects a renderer without changing which number is looked up. The modifier
- * is what makes a key reusable: the same mcp.tools appears as a shields badge
- * at the top of a README and as a bare "19 tools" in a table two screens down,
- * and one marker still keeps the badge URL, its alt text and the label in step.
- *
- * Renderers are registered under the FULL marker name so a badge's label is
- * written out rather than guessed from the key.
- */
-const badge = (label) => (n) =>
-  `<img src="https://img.shields.io/badge/${label}-${n}-5B9BF6?style=flat-square&labelColor=0B0A0F" alt="${n} ${label}">`;
-
-const RENDER = {
-  "mcp.tools@badge": badge("tools"),
-  "models.totalVisible@badge": badge("models"),
-  "models.chatVisible@badge": badge("models"),
-};
-const render = (marker, value) => (RENDER[marker] ?? String)(value);
-
-/** `mcp.tools@badge` looks up `mcp.tools`. Unmodified markers are unaffected. */
-const keyOf = (marker) => marker.split("@")[0];
-
-/* ── 3. marker rewriting ─────────────────────────────────────────────────── */
-
-const esc = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-const OPEN_ANY = /<!--\s*br:([A-Za-z0-9_.@]+)\s*-->/g;
-const CLOSE_ANY = /<!--\s*\/br:([A-Za-z0-9_.@]+)\s*-->/g;
-
-/** Byte ranges of fenced code blocks — markers inside them are documentation. */
-function fencedRanges(text) {
-  const ranges = [];
-  const fence = /^(\s*)(`{3,}|~{3,})[^\n]*$/gm;
-  let open = null;
-  for (let m; (m = fence.exec(text)); ) {
-    if (open === null) open = m.index;
-    else {
-      ranges.push([open, m.index + m[0].length]);
-      open = null;
-    }
-  }
-  return ranges;
-}
-
-function syncFile(file, numbers, problems) {
-  const before = readFileSync(file, "utf8");
-  const rel = relative(ROOT, file);
-  const fenced = fencedRanges(before);
-  const inFence = (i) => fenced.some(([a, b]) => i >= a && i < b);
-  const known = new Map(numbers);
-  const used = new Set();
-
-  // Markers actually present, so a file is only ever rewritten for what it uses
-  // and an @modifier is carried through to the renderer verbatim.
-  const markers = new Set();
-  // A marker naming a key that does not exist is an error, never a silent
-  // no-op: a typo'd marker would otherwise sit there looking synced forever.
-  for (const [re, shown] of [
-    [OPEN_ANY, (n) => `<!-- br:${n} -->`],
-    [CLOSE_ANY, (n) => `<!-- /br:${n} -->`],
-  ]) {
-    for (const m of before.matchAll(re)) {
-      if (inFence(m.index)) continue;
-      markers.add(m[1]);
-      if (!known.has(keyOf(m[1]))) problems.push(`${rel}: unknown key ${shown(m[1])}`);
-    }
-  }
-
-  let after = before;
-  for (const marker of markers) {
-    const key = keyOf(marker);
-    if (!known.has(key)) continue;
-    const value = known.get(key);
-    const pair = new RegExp(
-      `(<!--\\s*br:${esc(marker)}\\s*-->)([\\s\\S]*?)(<!--\\s*/br:${esc(marker)}\\s*-->)`,
-      "g",
-    );
-    after = after.replace(pair, (whole, open, inner, close, offset) => {
-      if (inFence(offset)) return whole;
-      // Nesting means the closing tag of an inner marker would be consumed by
-      // the outer one. Refuse rather than produce mangled output.
-      if (/<!--\s*\/?br:/.test(inner)) {
-        problems.push(`${rel}: nested marker inside br:${marker}`);
-        return whole;
-      }
-      used.add(marker);
-      return open + render(marker, value) + close;
-    });
-
-    // An opening tag with no partner silently swallows the rest of the file on
-    // a naive regex, so catch it explicitly.
-    const opens = [...before.matchAll(new RegExp(`<!--\\s*br:${esc(marker)}\\s*-->`, "g"))]
-      .filter((m) => !inFence(m.index)).length;
-    const closes = [...before.matchAll(new RegExp(`<!--\\s*/br:${esc(marker)}\\s*-->`, "g"))]
-      .filter((m) => !inFence(m.index)).length;
-    if (opens !== closes) problems.push(`${rel}: unbalanced marker br:${marker} (${opens} open, ${closes} close)`);
-  }
-
-  return { before, after, changed: before !== after, used };
-}
-
-/* ── 4. walk ─────────────────────────────────────────────────────────────── */
-
-function* walk(dir) {
-  for (const name of readdirSync(dir)) {
-    if (SKIP_DIRS.has(name)) continue;
-    const p = join(dir, name);
-    // lstat, not stat: a symlinked directory is reached by its real path or not
-    // at all. blockrun's docs/ -> awesome-blockrun/docs is exactly the case that
-    // matters — following it would edit a submodule's files behind the skip
-    // below, and a link pointing at an ancestor would recurse forever.
-    const s = lstatSync(p);
-    if (s.isSymbolicLink()) continue;
-    if (s.isDirectory()) {
-      // A nested repo is a submodule or vendored checkout: it carries its own
-      // brand-numbers.json and syncs itself. Rewriting its markers from THIS
-      // repo's snapshot would dirty a submodule nobody asked us to touch, and
-      // would report drift that belongs to another repo's CI.
-      if (existsSync(join(p, ".git"))) continue;
-      yield* walk(p);
-    } else if (TEXT_EXT.has(extname(name))) yield p;
-  }
-}
-
-function fail(msg) {
-  console.error(`brand-numbers: ${msg}`);
-  process.exit(1);
-}
-
-/* ── 5. run ──────────────────────────────────────────────────────────────── */
-
-const raw = await loadNumbers();
-const numbers = flatten(raw);
-const problems = [];
-const drifted = [];
-const everUsed = new Set();
-
-for (const file of walk(ROOT)) {
-  const { before, after, changed, used } = syncFile(file, numbers, problems);
-  used.forEach((k) => everUsed.add(k));
-  if (!changed) continue;
-  drifted.push({ file: relative(ROOT, file), before, after });
-  if (!check) writeFileSync(file, after);
-}
-
-if (problems.length) {
-  for (const p of problems) console.error(`  ${p}`);
-  fail(`${problems.length} marker problem(s)`);
-}
-
-if (check) {
-  if (drifted.length === 0) {
-    console.log(`brand-numbers: up to date (${everUsed.size} keys in use)`);
-    process.exit(0);
-  }
-  console.error("brand-numbers: these files disagree with brand-numbers.json\n");
-  for (const { file, before, after } of drifted) {
-    const b = before.split("\n");
-    const a = after.split("\n");
-    for (let i = 0; i < Math.max(b.length, a.length); i++) {
-      if (b[i] !== a[i]) {
-        console.error(`  ${file}:${i + 1}`);
-        console.error(`    - ${(b[i] ?? "").trim()}`);
-        console.error(`    + ${(a[i] ?? "").trim()}`);
-      }
-    }
-  }
-  console.error(
-    "\n  fix with:  node scripts/sync-brand-numbers.mjs && git commit -am 'chore: sync brand numbers'",
-  );
-  process.exit(1);
-}
-
-console.log(
-  drifted.length
-    ? `brand-numbers: updated ${drifted.length} file(s)`
-    : `brand-numbers: already up to date (${everUsed.size} keys in use)`,
-);