@blockrun/clawrouter 0.12.267 → 0.12.269

package/dist/cli.js

@@ -32310,6 +32310,11 @@ function canonicalLimits(limits) {
     Object.fromEntries(Object.entries(limits).sort(([a], [b]) => a < b ? -1 : 1))
   );
 }
+function getSharedSpendControl() {
+  const host = sharedControlHost();
+  host.__clawrouterSharedSpendControl ??= new SpendControl();
+  return host.__clawrouterSharedSpendControl;
+}
 function parseQuotedAmountUsd(selected) {
   const raw = selected.amount ?? selected.maxAmountRequired;
   if (typeof raw !== "string" || !CANONICAL_AMOUNT.test(raw)) {
@@ -32385,7 +32390,7 @@ function formatDuration(seconds) {
     return mins > 0 ? `${hours}h ${mins}m` : `${hours}h`;
   }
 }
-var WALLET_DIR, HOUR_MS, DAY_MS, CAIP2_BASE, CAIP2_SOLANA_MAINNET, PAYABLE_NETWORKS, POLICY_LISTS, ADDRESS_LISTS, EVM_ADDRESS, MalformedSpendPolicyError, SpendPolicyConflictError, FileSpendControlStorage, InMemorySpendControlStorage, RESERVATION_TTL_MS, SpendControl, SpendPolicyError, CANONICAL_AMOUNT;
+var WALLET_DIR, HOUR_MS, DAY_MS, CAIP2_BASE, CAIP2_SOLANA_MAINNET, PAYABLE_NETWORKS, POLICY_LISTS, ADDRESS_LISTS, EVM_ADDRESS, UnreadableSpendPolicyError, MalformedSpendPolicyError, SpendPolicyConflictError, FileSpendControlStorage, InMemorySpendControlStorage, RESERVATION_TTL_MS, SpendControl, sharedControlHost, SpendPolicyError, CANONICAL_AMOUNT;
 var init_spend_control = __esm({
   "src/spend-control.ts"() {
     "use strict";
@@ -32404,6 +32409,12 @@ var init_spend_control = __esm({
     ];
     ADDRESS_LISTS = ["allowedPayees", "blockedPayees", "allowedAssets"];
     EVM_ADDRESS = /^0x[0-9a-fA-F]{40}$/;
+    UnreadableSpendPolicyError = class extends Error {
+      constructor(cause) {
+        super(`[ClawRouter] Failed to load spending data: ${cause}`);
+        this.name = "UnreadableSpendPolicyError";
+      }
+    };
     MalformedSpendPolicyError = class extends Error {
       constructor(key2) {
         super(
@@ -32464,9 +32475,7 @@ var init_spend_control = __esm({
           if (err instanceof MalformedSpendPolicyError) {
             throw err;
           }
-          console.error(
-            `[ClawRouter] Failed to load spending data, starting fresh (any configured spend policy is NOT in effect until this file is repaired): ${err}`
-          );
+          throw new UnreadableSpendPolicyError(err);
         }
         return null;
       }
@@ -32607,6 +32616,33 @@ var init_spend_control = __esm({
       getPolicyFileError() {
         return this.policyFileBroken;
       }
+      /**
+       * Re-read limits from storage, keeping this instance's history and open
+       * reservations. Used on an in-process proxy restart so a hand-edit to
+       * spending.json made while the process was running still applies, without
+       * resetting the rolling windows. Fails closed exactly like the constructor:
+       * a malformed file refuses every payment until repaired, and a repaired
+       * file clears that refusal.
+       */
+      reloadLimits() {
+        let data;
+        try {
+          data = this.storage.load();
+        } catch (err) {
+          if (err instanceof UnreadableSpendPolicyError) {
+            console.error(`${err.message} \u2014 keeping the limits already in effect`);
+            return;
+          }
+          if (!(err instanceof MalformedSpendPolicyError)) throw err;
+          this.policyFileBroken = err.message;
+          console.error(`[ClawRouter] ${err.message}`);
+          return;
+        }
+        this.policyFileBroken = void 0;
+        this.limits = data ? cloneLimits(data.limits) : {};
+        this.diskLimits = cloneLimits(this.limits);
+        this.limitsDirty = false;
+      }
       check(estimatedCost2, counterparty) {
         if (this.policyFileBroken !== void 0) {
           return {
@@ -32851,6 +32887,16 @@ var init_spend_control = __esm({
         const records = [...this.history].reverse();
         return limit ? records.slice(0, limit) : records;
       }
+      /**
+       * Reset the session window. `sessionSpent`/`sessionCalls` are instance state
+       * that is never persisted, so this used to happen implicitly: every
+       * startProxy() built a fresh SpendControl. The process-wide ledger outlives
+       * an in-process proxy restart, which would silently redefine `session` as
+       * "since the gateway booted" — docs/configuration.md and the /policy help
+       * both promise "session resets on restart". The restart path in index.ts
+       * calls this to keep that promise. History and the rolling hourly/daily
+       * windows are deliberately untouched.
+       */
       resetSession() {
         this.sessionSpent = 0;
         this.sessionCalls = 0;
@@ -32872,10 +32918,13 @@ var init_spend_control = __esm({
             this.storage.saveLimits(cloneLimits(this.limits), cloneLimits(this.diskLimits));
           } catch (err) {
             if (err instanceof SpendPolicyConflictError) {
-              const current = this.storage.load();
-              this.limits = cloneLimits(current?.limits ?? {});
-              this.diskLimits = cloneLimits(this.limits);
-              this.limitsDirty = false;
+              try {
+                const current = this.storage.load();
+                this.limits = cloneLimits(current?.limits ?? {});
+                this.diskLimits = cloneLimits(this.limits);
+                this.limitsDirty = false;
+              } catch {
+              }
             }
             throw err;
           }
@@ -32893,6 +32942,12 @@ var init_spend_control = __esm({
         try {
           data = this.storage.load();
         } catch (err) {
+          if (err instanceof UnreadableSpendPolicyError) {
+            console.error(
+              `${err.message} \u2014 starting fresh (any configured spend policy is NOT in effect until this file is repaired)`
+            );
+            return;
+          }
           if (!(err instanceof MalformedSpendPolicyError)) throw err;
           this.policyFileBroken = err.message;
           console.error(`[ClawRouter] ${err.message}`);
@@ -32909,6 +32964,7 @@ var init_spend_control = __esm({
         }
       }
     };
+    sharedControlHost = () => process;
     SpendPolicyError = class extends Error {
       blockedBy;
       blockedByPolicy;
@@ -32946,6 +33002,21 @@ function createPayFetchWithPreAuth(baseFetch, client, ttlMs = DEFAULT_TTL_MS, op
       }
     }
     const cacheKey2 = `${urlPath}:${requestModel}`;
+    const notifyAcceptedPayment = (response2, payload2) => {
+      const settled = response2.headers.has("payment-response") || response2.headers.has("x-payment-response");
+      if (!settled || !options?.onPayment) return;
+      try {
+        options.onPayment({
+          model: requestModel,
+          amount: payload2.accepted.amount,
+          network: payload2.accepted.network
+        });
+      } catch (error) {
+        console.error(
+          `[ClawRouter] onPayment callback failed: ${error instanceof Error ? error.message : String(error)}`
+        );
+      }
+    };
     const estimateMicros = () => {
       if (!options?.estimateAmount || !requestModel) return void 0;
       const est = options.estimateAmount(requestModel, bodyLength, maxTokens);
@@ -32966,6 +33037,7 @@ function createPayFetchWithPreAuth(baseFetch, client, ttlMs = DEFAULT_TTL_MS, op
         paymentInFlight = true;
         const response2 = await baseFetch(preAuthRequest);
         if (response2.status !== 402) {
+          notifyAcceptedPayment(response2, payload2);
           return response2;
         }
         paymentInFlight = false;
@@ -33012,7 +33084,9 @@ function createPayFetchWithPreAuth(baseFetch, client, ttlMs = DEFAULT_TTL_MS, op
     for (const [key2, value] of Object.entries(paymentHeaders)) {
       clonedRequest.headers.set(key2, value);
     }
-    return baseFetch(clonedRequest);
+    const paidResponse = await baseFetch(clonedRequest);
+    notifyAcceptedPayment(paidResponse, payload);
+    return paidResponse;
   };
 }
 var DEFAULT_TTL_MS;
@@ -40691,7 +40765,7 @@ var init_errors5 = __esm({
 });
 
 // src/balance.ts
-var USDC_BASE, CACHE_TTL_MS, BALANCE_THRESHOLDS, BalanceMonitor;
+var USDC_BASE, CACHE_TTL_MS, BALANCE_THRESHOLDS, BalanceMonitor, ApiKeyBalanceMonitor;
 var init_balance = __esm({
   "src/balance.ts"() {
     "use strict";
@@ -40820,6 +40894,38 @@ var init_balance = __esm({
         };
       }
     };
+    ApiKeyBalanceMonitor = class _ApiKeyBalanceMonitor {
+      /** Large enough that every `balance >= estimatedCost` comparison passes. */
+      static UNMETERED = BigInt(Number.MAX_SAFE_INTEGER);
+      async checkBalance() {
+        return {
+          balance: _ApiKeyBalanceMonitor.UNMETERED,
+          // Never a dollar figure: no caller may print this as if it were one.
+          balanceUSD: "account credit",
+          isLow: false,
+          isEmpty: false,
+          walletAddress: ""
+        };
+      }
+      async checkSufficient() {
+        return { sufficient: true, info: await this.checkBalance() };
+      }
+      /** No local cache to adjust — the server keeps the books. */
+      deductEstimated() {
+      }
+      invalidate() {
+      }
+      async refresh() {
+        return this.checkBalance();
+      }
+      formatUSDC(amountMicros) {
+        return `$${(Number(amountMicros) / 1e6).toFixed(2)}`;
+      }
+      /** No wallet in this mode; callers render the account instead. */
+      getWalletAddress() {
+        return "";
+      }
+    };
   }
 });
 
@@ -59980,6 +60086,119 @@ var init_auth = __esm({
   }
 });
 
+// src/api-key.ts
+import { writeFile as writeFile2, mkdir as mkdir3, rm } from "fs/promises";
+import { join as join8 } from "path";
+import { homedir as homedir5 } from "os";
+function isValidApiKey(value) {
+  if (typeof value !== "string") return false;
+  return /^brk_[A-Za-z0-9_-]{8,}$/.test(value.trim());
+}
+function maskApiKey(key2) {
+  const trimmed = key2.trim();
+  if (trimmed.length <= 18) return `${trimmed.slice(0, 8)}\u2026`;
+  return `${trimmed.slice(0, 14)}\u2026${trimmed.slice(-4)}`;
+}
+async function readOptional2(path5) {
+  try {
+    return (await readTextFile(path5)).trim() || void 0;
+  } catch {
+    return void 0;
+  }
+}
+async function resolveApiKey() {
+  const envKey = process["env"].BLOCKRUN_API_KEY?.trim();
+  if (envKey) {
+    if (isValidApiKey(envKey)) return { key: envKey, source: "env" };
+    console.warn(
+      `[ClawRouter] \u26A0 BLOCKRUN_API_KEY is set but does not look like a BlockRun key (expected brk_\u2026) \u2014 ignoring.`
+    );
+  }
+  for (const [path5, source] of [
+    [CORE_API_KEY_FILE, "core"],
+    [API_KEY_FILE, "saved"]
+  ]) {
+    const stored = await readOptional2(path5);
+    if (stored === void 0) continue;
+    if (isValidApiKey(stored)) return { key: stored, source };
+    console.warn(
+      `[ClawRouter] \u26A0 ${path5} does not contain a BlockRun key (expected brk_\u2026) \u2014 ignoring.`
+    );
+  }
+  return void 0;
+}
+async function saveApiKey(key2) {
+  const trimmed = key2.trim();
+  if (!isValidApiKey(trimmed)) {
+    throw new Error(
+      `Not a BlockRun API key: expected it to start with "brk_". Mint one at ${PORTAL_KEYS_URL}`
+    );
+  }
+  await mkdir3(join8(homedir5(), ".blockrun"), { recursive: true });
+  await writeFile2(CORE_API_KEY_FILE, trimmed + "\n", { mode: 384 });
+  return CORE_API_KEY_FILE;
+}
+async function clearApiKey() {
+  const removed = [];
+  for (const path5 of [CORE_API_KEY_FILE, API_KEY_FILE]) {
+    if (await readOptional2(path5) === void 0) continue;
+    await rm(path5, { force: true });
+    removed.push(path5);
+  }
+  return { removed, envStillSet: Boolean(process["env"].BLOCKRUN_API_KEY?.trim()) };
+}
+function createApiKeyFetch(apiKey, baseFetch = fetch) {
+  return async (input, init2) => {
+    const headers = new Headers(init2?.headers);
+    headers.set("authorization", `Bearer ${apiKey}`);
+    headers.delete("x-payment");
+    headers.delete("x-api-key");
+    const response = await baseFetch(input, { ...init2, headers });
+    return response.ok ? response : explainApiKeyFailure(response);
+  };
+}
+async function explainApiKeyFailure(response) {
+  const hint = HINTS[response.status];
+  if (!hint) return response;
+  if (!(response.headers.get("content-type") ?? "").includes("json")) return response;
+  let parsed;
+  try {
+    parsed = await response.clone().json();
+  } catch {
+    return response;
+  }
+  if (!parsed?.error || typeof parsed.error.message !== "string") return response;
+  if (response.status === 404 && !/unsupported endpoint/i.test(parsed.error.message)) {
+    return response;
+  }
+  parsed.error.message = `${parsed.error.message} ${hint}`;
+  const headers = new Headers(response.headers);
+  headers.delete("content-length");
+  return new Response(JSON.stringify(parsed), {
+    status: response.status,
+    statusText: response.statusText,
+    headers
+  });
+}
+var API_KEY_FILE, CORE_API_KEY_FILE, PORTAL_URL, PORTAL_KEYS_URL, PORTAL_CREDITS_URL, BLOCKRUN_API_KEY_API, HINTS;
+var init_api_key = __esm({
+  "src/api-key.ts"() {
+    "use strict";
+    init_fs_read();
+    API_KEY_FILE = join8(homedir5(), ".openclaw", "blockrun", "api-key");
+    CORE_API_KEY_FILE = join8(homedir5(), ".blockrun", ".api-key");
+    PORTAL_URL = "https://user.blockrun.ai";
+    PORTAL_KEYS_URL = `${PORTAL_URL}/dashboard/keys`;
+    PORTAL_CREDITS_URL = `${PORTAL_URL}/dashboard/credits`;
+    BLOCKRUN_API_KEY_API = process["env"].BLOCKRUN_API_BASE_URL?.replace(/\/+$/, "") || "https://api.blockrun.ai";
+    HINTS = {
+      401: `Check BLOCKRUN_API_KEY, or mint a new key at ${PORTAL_KEYS_URL}.`,
+      402: `Top up your BlockRun credit at ${PORTAL_CREDITS_URL}.`,
+      404: `api.blockrun.ai does not serve this endpoint yet \u2014 it currently carries chat and text completions. For media and partner APIs, run ClawRouter in wallet mode (unset BLOCKRUN_API_KEY and run "clawrouter logout").`
+    };
+  }
+});
+
 // src/compression/types.ts
 var DEFAULT_COMPRESSION_CONFIG;
 var init_types2 = __esm({
@@ -61069,8 +61288,8 @@ var init_updater = __esm({
 
 // src/exclude-models.ts
 import { readFileSync, writeFileSync as writeFileSync2, mkdirSync as mkdirSync2, statSync } from "fs";
-import { join as join8, dirname as dirname2 } from "path";
-import { homedir as homedir5 } from "os";
+import { join as join9, dirname as dirname2 } from "path";
+import { homedir as homedir6 } from "os";
 function loadExcludeList(filePath = DEFAULT_FILE_PATH) {
   try {
     const mtimeMs = statSync(filePath).mtimeMs;
@@ -61119,7 +61338,7 @@ var init_exclude_models = __esm({
   "src/exclude-models.ts"() {
     "use strict";
     init_models();
-    DEFAULT_FILE_PATH = join8(homedir5(), ".openclaw", "blockrun", "exclude-models.json");
+    DEFAULT_FILE_PATH = join9(homedir6(), ".openclaw", "blockrun", "exclude-models.json");
     loadCache = /* @__PURE__ */ new Map();
   }
 });
@@ -76128,7 +76347,7 @@ var require_snapshot_utils = __commonJS({
 var require_snapshot_recorder = __commonJS({
   "node_modules/undici/lib/mock/snapshot-recorder.js"(exports, module) {
     "use strict";
-    var { writeFile: writeFile3, readFile: readFile3, mkdir: mkdir5 } = __require("fs/promises");
+    var { writeFile: writeFile4, readFile: readFile3, mkdir: mkdir6 } = __require("fs/promises");
     var { dirname: dirname4, resolve } = __require("path");
     var { setTimeout: setTimeout2, clearTimeout: clearTimeout2 } = __require("timers");
     var { InvalidArgumentError, UndiciError } = require_errors();
@@ -76375,12 +76594,12 @@ var require_snapshot_recorder = __commonJS({
           throw new InvalidArgumentError("Snapshot path is required");
         }
         const resolvedPath = resolve(path5);
-        await mkdir5(dirname4(resolvedPath), { recursive: true });
+        await mkdir6(dirname4(resolvedPath), { recursive: true });
         const data = Array.from(this.#snapshots.entries()).map(([hash5, snapshot]) => ({
           hash: hash5,
           snapshot
         }));
-        await writeFile3(resolvedPath, JSON.stringify(data, null, 2), { flush: true });
+        await writeFile4(resolvedPath, JSON.stringify(data, null, 2), { flush: true });
       }
       /**
        * Clears all recorded snapshots
@@ -88709,9 +88928,9 @@ var init_textual_tool_calls = __esm({
 });
 
 // src/response-store.ts
-import { appendFile as appendFile2, mkdir as mkdir3, readFile, readdir as readdir2 } from "fs/promises";
-import { homedir as homedir6 } from "os";
-import { join as join9 } from "path";
+import { appendFile as appendFile2, mkdir as mkdir4, readFile, readdir as readdir2 } from "fs/promises";
+import { homedir as homedir7 } from "os";
+import { join as join10 } from "path";
 import { randomBytes as randomBytes7 } from "crypto";
 function isEnabled() {
   const v = process.env.BLOCKRUN_RESPONSE_STORE;
@@ -88719,12 +88938,12 @@ function isEnabled() {
 }
 async function ensureDir2() {
   if (dirReady2) return;
-  await mkdir3(STORE_DIR, { recursive: true });
+  await mkdir4(STORE_DIR, { recursive: true });
   dirReady2 = true;
 }
 function dailyFile(date = /* @__PURE__ */ new Date()) {
   const iso = date.toISOString().slice(0, 10);
-  return join9(STORE_DIR, `responses-${iso}.jsonl`);
+  return join10(STORE_DIR, `responses-${iso}.jsonl`);
 }
 function genId() {
   return `resp_${Date.now()}_${randomBytes7(3).toString("hex")}`;
@@ -88774,7 +88993,7 @@ async function listRecent(limit = 20, daysBack = 7) {
       d.setUTCDate(d.getUTCDate() - i);
       const iso = d.toISOString().slice(0, 10);
       const name = `responses-${iso}.jsonl`;
-      if (files.includes(name)) candidateFiles.push(join9(STORE_DIR, name));
+      if (files.includes(name)) candidateFiles.push(join10(STORE_DIR, name));
     }
     const all3 = [];
     for (const f of candidateFiles) {
@@ -88803,7 +89022,7 @@ var STORE_DIR, dirReady2;
 var init_response_store = __esm({
   "src/response-store.ts"() {
     "use strict";
-    STORE_DIR = join9(homedir6(), ".openclaw", "blockrun", "responses");
+    STORE_DIR = join10(homedir7(), ".openclaw", "blockrun", "responses");
     dirReady2 = false;
   }
 });
@@ -90454,15 +90673,18 @@ import { AsyncLocalStorage } from "async_hooks";
 import { createHmac } from "crypto";
 import { createServer } from "http";
 import { finished } from "stream";
-import { homedir as homedir7 } from "os";
-import { join as join10 } from "path";
-import { mkdir as mkdir4, writeFile as writeFile2, readFile as readFile2, stat as fsStat } from "fs/promises";
+import { homedir as homedir8 } from "os";
+import { join as join11 } from "path";
+import { mkdir as mkdir5, writeFile as writeFile3, readFile as readFile2, stat as fsStat } from "fs/promises";
 import { readFileSync as readFileSync2, existsSync as existsSync2 } from "fs";
-async function loadGatewayCatalog(apiBase) {
+async function loadGatewayCatalog(apiBase, apiKey) {
   try {
     const controller = new AbortController();
     const timer2 = setTimeout(() => controller.abort(), GATEWAY_CATALOG_TIMEOUT_MS);
-    const res = await fetch(`${apiBase}/v1/models`, { signal: controller.signal });
+    const res = await fetch(`${apiBase}/v1/models`, {
+      signal: controller.signal,
+      ...apiKey ? { headers: { authorization: `Bearer ${apiKey}` } } : {}
+    });
     clearTimeout(timer2);
     if (!res.ok) return;
     const body = await res.json();
@@ -90761,8 +90983,9 @@ async function checkExistingProxy(port) {
     clearTimeout(timeoutId);
     if (response.ok) {
       const data = await response.json();
-      if (data.status === "ok" && data.wallet) {
-        return { wallet: data.wallet, paymentChain: data.paymentChain };
+      const authMode = data.authMode === "api-key" ? "api-key" : "wallet";
+      if (data.status === "ok" && (data.wallet || authMode === "api-key")) {
+        return { wallet: data.wallet ?? "", paymentChain: data.paymentChain, authMode };
       }
     }
     return void 0;
@@ -91270,7 +91493,7 @@ async function proxyPaidApiRequest(req, res, apiBase, payFetch, getActualPayment
   });
 }
 function readImageFileAsDataUri(filePath) {
-  const resolved = filePath.startsWith("~/") ? join10(homedir7(), filePath.slice(2)) : filePath;
+  const resolved = filePath.startsWith("~/") ? join11(homedir8(), filePath.slice(2)) : filePath;
   if (!existsSync2(resolved)) {
     throw new Error(`Image file not found: ${resolved}`);
   }
@@ -91313,16 +91536,48 @@ async function uploadDataUriToHost(dataUri) {
     clearTimeout(uploadTimeout);
   }
 }
+function warnIfSpendLimitsUnenforced(spendControl) {
+  let configured;
+  try {
+    const limits = (spendControl ?? new SpendControl()).getStatus().limits;
+    configured = ["perRequest", "hourly", "daily", "session"].filter((window2) => typeof limits[window2] === "number").map((window2) => `${window2}=$${limits[window2].toFixed(2)}`);
+  } catch {
+    return;
+  }
+  if (configured.length === 0) return;
+  console.warn(
+    `[ClawRouter] \u26A0 Spend limits (${configured.join(", ")}) are NOT enforced in API-key mode \u2014 they gate x402 signing, and nothing is signed here.`
+  );
+  console.warn(
+    `[ClawRouter]   Your BlockRun account balance is the cap instead. Use maxCostPerRun for a per-session limit that still applies.`
+  );
+}
 async function startProxy(options) {
   const upstreamProxy = await applyUpstreamProxy(options.upstreamProxy);
   if (upstreamProxy) {
     console.log(`[ClawRouter] Upstream proxy: ${upstreamProxy}`);
   }
-  const walletKey = typeof options.wallet === "string" ? options.wallet : options.wallet.key;
-  const solanaPrivateKeyBytes = typeof options.wallet === "string" ? void 0 : options.wallet.solanaPrivateKeyBytes;
+  const apiKey = options.apiKey?.trim() || void 0;
+  if (apiKey && !isValidApiKey(apiKey)) {
+    throw new Error(
+      `BlockRun API key is malformed (expected it to start with "brk_"). Mint one at https://user.blockrun.ai/dashboard/keys`
+    );
+  }
+  const authMode = apiKey ? "api-key" : "wallet";
+  if (!apiKey && !options.wallet) {
+    throw new Error(
+      `startProxy needs a credential: pass either a wallet (x402) or an apiKey (brk_\u2026, from https://user.blockrun.ai/dashboard/keys).`
+    );
+  }
+  const walletKey = options.wallet === void 0 ? void 0 : typeof options.wallet === "string" ? options.wallet : options.wallet.key;
+  const solanaPrivateKeyBytes = options.wallet === void 0 || typeof options.wallet === "string" ? void 0 : options.wallet.solanaPrivateKeyBytes;
   const paymentChain = options.paymentChain ?? await resolvePaymentChain();
-  const apiBase = options.apiBase ?? (paymentChain === "solana" && solanaPrivateKeyBytes ? BLOCKRUN_SOLANA_API : BLOCKRUN_API);
-  if (paymentChain === "solana" && !solanaPrivateKeyBytes) {
+  const apiBase = options.apiBase ?? (authMode === "api-key" ? BLOCKRUN_API_KEY_API : paymentChain === "solana" && solanaPrivateKeyBytes ? BLOCKRUN_SOLANA_API : BLOCKRUN_API);
+  if (authMode === "api-key") {
+    console.log(`[ClawRouter] Auth: BlockRun API key ${maskApiKey(apiKey)} (${apiBase})`);
+    console.log(`[ClawRouter] Billing: account credit \u2014 top up at ${PORTAL_CREDITS_URL}`);
+    warnIfSpendLimitsUnenforced(options.spendControl);
+  } else if (paymentChain === "solana" && !solanaPrivateKeyBytes) {
     console.warn(
       `[ClawRouter] \u26A0 Payment chain is Solana but no mnemonic found \u2014 falling back to Base (EVM).`
     );
@@ -91333,12 +91588,31 @@ async function startProxy(options) {
   } else if (paymentChain === "solana") {
     console.log(`[ClawRouter] Payment chain: Solana (${BLOCKRUN_SOLANA_API})`);
   }
-  void loadGatewayCatalog(apiBase);
+  void loadGatewayCatalog(apiBase, apiKey);
   const listenPort = options.port ?? getProxyPort();
   const existingProxy = options.allowExistingProxy === false ? void 0 : await checkExistingProxy(listenPort);
   if (existingProxy) {
-    const account2 = privateKeyToAccount(walletKey);
     const baseUrl2 = `http://127.0.0.1:${listenPort}`;
+    if (existingProxy.authMode !== authMode) {
+      throw new Error(
+        `Existing proxy on port ${listenPort} is authenticating with ${existingProxy.authMode === "api-key" ? "a BlockRun API key" : "a wallet"} but ${authMode === "api-key" ? "an API key" : "a wallet"} was requested. Stop the existing proxy first or use a different port.`
+      );
+    }
+    if (authMode === "api-key") {
+      options.onReady?.(listenPort);
+      return {
+        port: listenPort,
+        baseUrl: baseUrl2,
+        walletAddress: "",
+        authMode,
+        apiKeyLabel: maskApiKey(apiKey),
+        balanceMonitor: new ApiKeyBalanceMonitor(),
+        // No-op: we didn't start this proxy, so we shouldn't close it
+        close: async () => {
+        }
+      };
+    }
+    const account2 = privateKeyToAccount(walletKey);
     if (existingProxy.wallet !== account2.address) {
       console.warn(
         `[ClawRouter] Existing proxy on port ${listenPort} uses wallet ${existingProxy.wallet}, but current config uses ${account2.address}. Reusing existing proxy.`
@@ -91377,20 +91651,23 @@ async function startProxy(options) {
       baseUrl: baseUrl2,
       walletAddress: existingProxy.wallet,
       solanaAddress: reuseSolanaAddress,
+      authMode,
       balanceMonitor: balanceMonitor2,
       close: async () => {
       }
     };
   }
-  const account = privateKeyToAccount(walletKey);
-  const evmPublicClient = createPublicClient({ chain: base, transport: http() });
-  const evmSigner = toClientEvmSigner(account, evmPublicClient);
-  const x402 = new x402Client();
-  const spendControl = options.spendControl ?? new SpendControl();
-  registerSpendPolicyHook(x402, spendControl);
-  registerExactEvmScheme(x402, { signer: evmSigner });
+  const account = walletKey ? privateKeyToAccount(walletKey) : void 0;
+  const x402 = authMode === "wallet" ? new x402Client() : void 0;
+  if (x402 && account) {
+    const evmPublicClient = createPublicClient({ chain: base, transport: http() });
+    const evmSigner = toClientEvmSigner(account, evmPublicClient);
+    const spendControl = options.spendControl ?? getSharedSpendControl();
+    registerSpendPolicyHook(x402, spendControl);
+    registerExactEvmScheme(x402, { signer: evmSigner });
+  }
   let solanaAddress;
-  if (solanaPrivateKeyBytes) {
+  if (x402 && solanaPrivateKeyBytes) {
     const { registerExactSvmScheme: registerExactSvmScheme2 } = await Promise.resolve().then(() => (init_client3(), client_exports));
     const { createKeyPairSignerFromPrivateKeyBytes: createKeyPairSignerFromPrivateKeyBytes2 } = await Promise.resolve().then(() => (init_index_node37(), index_node_exports));
     const solanaSigner = await createKeyPairSignerFromPrivateKeyBytes2(solanaPrivateKeyBytes);
@@ -91398,12 +91675,12 @@ async function startProxy(options) {
     registerExactSvmScheme2(x402, { signer: solanaSigner });
     console.log(`[ClawRouter] Solana wallet: ${solanaAddress}`);
   }
-  x402.onAfterPaymentCreation(async (context) => {
+  x402?.onAfterPaymentCreation(async (context) => {
     if (!context.selectedRequirements.network.startsWith("eip155")) return;
     const payload = context.paymentPayload;
     payload.extensions = withBuilderCodeServiceCode(payload.extensions);
   });
-  x402.onAfterPaymentCreation(async (context) => {
+  x402?.onAfterPaymentCreation(async (context) => {
     const network = context.selectedRequirements.network;
     const chain3 = network.startsWith("eip155") ? "Base (EVM)" : network.startsWith("solana") ? "Solana" : network;
     const amountMicros = parseInt(context.selectedRequirements.amount || "0", 10);
@@ -91412,16 +91689,22 @@ async function startProxy(options) {
     if (store) store.amountUsd = amountUsd;
     console.log(`[ClawRouter] Payment signed on ${chain3} (${network}) \u2014 $${amountUsd.toFixed(6)}`);
   });
-  const payFetch = createPayFetchWithPreAuth(fetch, x402, void 0, {
+  const payFetch = authMode === "api-key" ? createApiKeyFetch(apiKey) : createPayFetchWithPreAuth(fetch, x402, void 0, {
     skipPreAuth: paymentChain === "solana",
     // Per-request cost estimate so pre-auth is only reused when the cached
     // payment still covers the (possibly larger) request — BlockRun prices per
     // token, so one model can cost different amounts across requests.
-    estimateAmount
+    estimateAmount,
+    // Only the wallet rail settles per call. The API-key rail is billed
+    // server-side against account credit, so there is no per-request
+    // settlement for an observer to report.
+    onPayment: options.onPayment
   });
   let balanceMonitor;
   if (options._balanceMonitorOverride) {
     balanceMonitor = options._balanceMonitorOverride;
+  } else if (authMode === "api-key") {
+    balanceMonitor = new ApiKeyBalanceMonitor();
   } else if (paymentChain === "solana" && solanaAddress) {
     const { SolanaBalanceMonitor: SolanaBalanceMonitor2 } = await Promise.resolve().then(() => (init_solana_balance(), solana_balance_exports));
     balanceMonitor = new SolanaBalanceMonitor2(solanaAddress);
@@ -91463,11 +91746,17 @@ async function startProxy(options) {
         const full = url2.searchParams.get("full") === "true";
         const response = {
           status: "ok",
-          wallet: account.address,
-          paymentChain
+          authMode
         };
-        if (solanaAddress) {
-          response.solana = solanaAddress;
+        if (authMode === "api-key") {
+          response.apiKey = maskApiKey(apiKey);
+          response.gateway = apiBase;
+        } else {
+          response.wallet = account.address;
+          response.paymentChain = paymentChain;
+          if (solanaAddress) {
+            response.solana = solanaAddress;
+          }
         }
         if (upstreamProxy) {
           response.upstreamProxy = upstreamProxy;
@@ -91483,9 +91772,15 @@ async function startProxy(options) {
                 ).unref()
               )
             ]);
-            response.balance = balanceInfo.balanceUSD;
-            response.isLow = balanceInfo.isLow;
-            response.isEmpty = balanceInfo.isEmpty;
+            if (authMode === "api-key") {
+              response.balance = null;
+              response.billing = "BlockRun account credit";
+              response.topUpUrl = PORTAL_CREDITS_URL;
+            } else {
+              response.balance = balanceInfo.balanceUSD;
+              response.isLow = balanceInfo.isLow;
+              response.isEmpty = balanceInfo.isEmpty;
+            }
           } catch {
             response.balanceError = "Could not fetch balance";
           }
@@ -91665,7 +91960,7 @@ async function startProxy(options) {
           res.end("Bad request");
           return;
         }
-        const filePath = join10(IMAGE_DIR, filename);
+        const filePath = join11(IMAGE_DIR, filename);
         try {
           const s3 = await fsStat(filePath);
           if (!s3.isFile()) throw new Error("not a file");
@@ -91696,7 +91991,7 @@ async function startProxy(options) {
           res.end("Bad request");
           return;
         }
-        const filePath = join10(AUDIO_DIR, filename);
+        const filePath = join11(AUDIO_DIR, filename);
         try {
           const s3 = await fsStat(filePath);
           if (!s3.isFile()) throw new Error("not a file");
@@ -91726,7 +92021,7 @@ async function startProxy(options) {
           res.end("Bad request");
           return;
         }
-        const filePath = join10(VIDEO_DIR, filename);
+        const filePath = join11(VIDEO_DIR, filename);
         try {
           const s3 = await fsStat(filePath);
           if (!s3.isFile()) throw new Error("not a file");
@@ -91859,7 +92154,7 @@ async function startProxy(options) {
             }
           }
           if (result.data?.length) {
-            await mkdir4(IMAGE_DIR, { recursive: true });
+            await mkdir5(IMAGE_DIR, { recursive: true });
             const port2 = server.address()?.port ?? 8402;
             for (const img of result.data) {
               const dataUriMatch = img.url?.match(/^data:(image\/\w+);base64,(.+)$/);
@@ -91867,7 +92162,7 @@ async function startProxy(options) {
                 const [, mimeType, b64] = dataUriMatch;
                 const ext = mimeType === "image/jpeg" ? "jpg" : mimeType.split("/")[1] ?? "png";
                 const filename = `${Date.now()}-${Math.random().toString(36).slice(2, 10)}.${ext}`;
-                await writeFile2(join10(IMAGE_DIR, filename), Buffer.from(b64, "base64"));
+                await writeFile3(join11(IMAGE_DIR, filename), Buffer.from(b64, "base64"));
                 img.url = `http://localhost:${port2}/images/${filename}`;
                 console.log(`[ClawRouter] Image saved \u2192 ${img.url}`);
               } else if (img.url?.startsWith("https://") || img.url?.startsWith("http://")) {
@@ -91878,7 +92173,7 @@ async function startProxy(options) {
                     const ext = contentType.includes("jpeg") || contentType.includes("jpg") ? "jpg" : contentType.includes("webp") ? "webp" : "png";
                     const filename = `${Date.now()}-${Math.random().toString(36).slice(2, 10)}.${ext}`;
                     const buf = Buffer.from(await imgResp.arrayBuffer());
-                    await writeFile2(join10(IMAGE_DIR, filename), buf);
+                    await writeFile3(join11(IMAGE_DIR, filename), buf);
                     img.url = `http://localhost:${port2}/images/${filename}`;
                     console.log(`[ClawRouter] Image downloaded & saved \u2192 ${img.url}`);
                   }
@@ -91982,7 +92277,7 @@ async function startProxy(options) {
             return;
           }
           if (result.data?.length) {
-            await mkdir4(IMAGE_DIR, { recursive: true });
+            await mkdir5(IMAGE_DIR, { recursive: true });
             const port2 = server.address()?.port ?? 8402;
             for (const img of result.data) {
               const dataUriMatch = img.url?.match(/^data:(image\/\w+);base64,(.+)$/);
@@ -91990,7 +92285,7 @@ async function startProxy(options) {
                 const [, mimeType, b64] = dataUriMatch;
                 const ext = mimeType === "image/jpeg" ? "jpg" : mimeType.split("/")[1] ?? "png";
                 const filename = `${Date.now()}-${Math.random().toString(36).slice(2, 10)}.${ext}`;
-                await writeFile2(join10(IMAGE_DIR, filename), Buffer.from(b64, "base64"));
+                await writeFile3(join11(IMAGE_DIR, filename), Buffer.from(b64, "base64"));
                 img.url = `http://localhost:${port2}/images/${filename}`;
                 console.log(`[ClawRouter] Image saved \u2192 ${img.url}`);
               } else if (img.url?.startsWith("https://") || img.url?.startsWith("http://")) {
@@ -92001,7 +92296,7 @@ async function startProxy(options) {
                     const ext = contentType.includes("jpeg") || contentType.includes("jpg") ? "jpg" : contentType.includes("webp") ? "webp" : "png";
                     const filename = `${Date.now()}-${Math.random().toString(36).slice(2, 10)}.${ext}`;
                     const buf = Buffer.from(await imgResp.arrayBuffer());
-                    await writeFile2(join10(IMAGE_DIR, filename), buf);
+                    await writeFile3(join11(IMAGE_DIR, filename), buf);
                     img.url = `http://localhost:${port2}/images/${filename}`;
                     console.log(`[ClawRouter] Image downloaded & saved \u2192 ${img.url}`);
                   }
@@ -92076,7 +92371,7 @@ async function startProxy(options) {
             return;
           }
           if (result.data?.length) {
-            await mkdir4(AUDIO_DIR, { recursive: true });
+            await mkdir5(AUDIO_DIR, { recursive: true });
             const port2 = server.address()?.port ?? 8402;
             for (const track of result.data) {
               if (track.url?.startsWith("https://") || track.url?.startsWith("http://")) {
@@ -92087,7 +92382,7 @@ async function startProxy(options) {
                     const ext = contentType.includes("wav") ? "wav" : "mp3";
                     const filename = `${Date.now()}-${Math.random().toString(36).slice(2, 10)}.${ext}`;
                     const buf = Buffer.from(await audioResp.arrayBuffer());
-                    await writeFile2(join10(AUDIO_DIR, filename), buf);
+                    await writeFile3(join11(AUDIO_DIR, filename), buf);
                     track.url = `http://localhost:${port2}/audio/${filename}`;
                     console.log(`[ClawRouter] Audio saved \u2192 ${track.url}`);
                   }
@@ -92236,7 +92531,7 @@ async function startProxy(options) {
             }
           }
           if (finalResult.data?.length) {
-            await mkdir4(VIDEO_DIR, { recursive: true });
+            await mkdir5(VIDEO_DIR, { recursive: true });
             const port2 = server.address()?.port ?? 8402;
             for (const clip of finalResult.data) {
               if (clip.url?.startsWith("https://") || clip.url?.startsWith("http://")) {
@@ -92247,7 +92542,7 @@ async function startProxy(options) {
                     const ext = contentType.includes("webm") ? "webm" : contentType.includes("quicktime") ? "mov" : "mp4";
                     const filename = `${Date.now()}-${Math.random().toString(36).slice(2, 10)}.${ext}`;
                     const buf = Buffer.from(await videoResp.arrayBuffer());
-                    await writeFile2(join10(VIDEO_DIR, filename), buf);
+                    await writeFile3(join11(VIDEO_DIR, filename), buf);
                     clip.url = `http://localhost:${port2}/videos/${filename}`;
                     console.log(`[ClawRouter] Video saved \u2192 ${clip.url}`);
                   }
@@ -92430,6 +92725,8 @@ async function startProxy(options) {
           port: listenPort,
           baseUrl: baseUrl2,
           walletAddress: error.wallet,
+          authMode,
+          ...apiKey ? { apiKeyLabel: maskApiKey(apiKey) } : {},
           balanceMonitor,
           close: async () => {
           }
@@ -92480,8 +92777,10 @@ async function startProxy(options) {
   return {
     port,
     baseUrl,
-    walletAddress: account.address,
+    walletAddress: account?.address ?? "",
     solanaAddress,
+    authMode,
+    ...apiKey ? { apiKeyLabel: maskApiKey(apiKey) } : {},
     balanceMonitor,
     close: () => new Promise((res, rej) => {
       const timeout = setTimeout(() => {
@@ -94804,6 +95103,7 @@ var init_proxy = __esm({
     init_response_cache();
     init_balance();
     init_auth();
+    init_api_key();
     init_spend_control();
     init_compression();
     init_version4();
@@ -94820,10 +95120,10 @@ var init_proxy = __esm({
     paymentStore = new AsyncLocalStorage();
     BLOCKRUN_API = "https://blockrun.ai/api";
     BLOCKRUN_SOLANA_API = "https://sol.blockrun.ai/api";
-    DESKTOP_SERVICE_TOKEN_FILE = process.env.CLAWROUTER_DESKTOP_TOKEN_FILE ?? join10(homedir7(), ".clawrouter-desktop", "service-token");
-    IMAGE_DIR = join10(homedir7(), ".openclaw", "blockrun", "images");
-    AUDIO_DIR = join10(homedir7(), ".openclaw", "blockrun", "audio");
-    VIDEO_DIR = join10(homedir7(), ".openclaw", "blockrun", "videos");
+    DESKTOP_SERVICE_TOKEN_FILE = process.env.CLAWROUTER_DESKTOP_TOKEN_FILE ?? join11(homedir8(), ".clawrouter-desktop", "service-token");
+    IMAGE_DIR = join11(homedir8(), ".openclaw", "blockrun", "images");
+    AUDIO_DIR = join11(homedir8(), ".openclaw", "blockrun", "audio");
+    VIDEO_DIR = join11(homedir8(), ".openclaw", "blockrun", "videos");
     AUTO_MODEL = "blockrun/auto";
     ROUTING_PROFILES = /* @__PURE__ */ new Set([
       "blockrun/eco",
@@ -117219,8 +117519,8 @@ var init_constants3 = __esm({
 
 // src/polymarket/wallet-adapter.ts
 import fs2 from "fs";
-import { homedir as homedir8 } from "os";
-import { join as join11 } from "path";
+import { homedir as homedir9 } from "os";
+import { join as join12 } from "path";
 function getOrCreateWalletKey() {
   const envKey = process.env.BLOCKRUN_WALLET_KEY?.trim();
   if (envKey && /^0x[0-9a-fA-F]{64}$/.test(envKey)) return envKey;
@@ -117268,7 +117568,7 @@ var init_wallet_adapter = __esm({
     init_esm();
     init_chains();
     init_constants3();
-    WALLET_FILE2 = join11(homedir8(), ".openclaw", "blockrun", "wallet.key");
+    WALLET_FILE2 = join12(homedir9(), ".openclaw", "blockrun", "wallet.key");
     BASE_RPC_URLS = [
       "https://mainnet.base.org",
       "https://base.llamarpc.com",
@@ -117670,9 +117970,7 @@ var init_client5 = __esm({
 
 // src/polymarket/spend-policy.ts
 function resolveSpendControl(deps) {
-  if (deps?.spendControl) return deps.spendControl;
-  defaultControl ??= new SpendControl();
-  return defaultControl;
+  return deps?.spendControl ?? getSharedSpendControl();
 }
 function usdToMicros(usd) {
   return String(Math.ceil(usd * 1e6));
@@ -117689,7 +117987,6 @@ async function signUnderSpendPolicy(deps, quote, action, sign4) {
     throw err;
   }
 }
-var defaultControl;
 var init_spend_policy = __esm({
   "src/polymarket/spend-policy.ts"() {
     "use strict";
@@ -227054,7 +227351,7 @@ var init_fund = __esm({
 });
 
 // src/polymarket/tool.ts
-function buildPolymarketTool() {
+function buildPolymarketTool(deps) {
   return {
     name: "blockrun_polymarket",
     description: DESCRIPTION,
@@ -227139,26 +227436,32 @@ function buildPolymarketTool() {
           result = await runSetup({ confirm });
           break;
         case "fund":
-          result = await fundVault({
-            amount_usd: params.amount_usd,
-            confirm
-          });
+          result = await fundVault(
+            {
+              amount_usd: params.amount_usd,
+              confirm
+            },
+            deps
+          );
           break;
         case "buy":
         case "sell":
-          result = await executeTrade({
-            action,
-            token_id: params.token_id,
-            condition_id: params.condition_id,
-            outcome: params.outcome,
-            price: params.price,
-            size: params.size,
-            amount_usd: params.amount_usd,
-            order_type: params.order_type,
-            expires_at: params.expires_at,
-            post_only: params.post_only,
-            confirm
-          });
+          result = await executeTrade(
+            {
+              action,
+              token_id: params.token_id,
+              condition_id: params.condition_id,
+              outcome: params.outcome,
+              price: params.price,
+              size: params.size,
+              amount_usd: params.amount_usd,
+              order_type: params.order_type,
+              expires_at: params.expires_at,
+              post_only: params.post_only,
+              confirm
+            },
+            deps
+          );
           break;
         case "orders":
           result = await listOpenOrders({
@@ -227175,17 +227478,23 @@ function buildPolymarketTool() {
           result = await listPositions();
           break;
         case "redeem":
-          result = await redeemPosition({
-            condition_id: params.condition_id,
-            confirm
-          });
+          result = await redeemPosition(
+            {
+              condition_id: params.condition_id,
+              confirm
+            },
+            deps
+          );
           break;
         case "withdraw":
-          result = await withdrawFunds({
-            amount_usd: params.amount_usd,
-            to_address: params.to_address,
-            confirm
-          });
+          result = await withdrawFunds(
+            {
+              amount_usd: params.amount_usd,
+              to_address: params.to_address,
+              confirm
+            },
+            deps
+          );
           break;
         default:
           throw new Error(`Unknown blockrun_polymarket action: ${action}`);
@@ -227601,6 +227910,7 @@ __export(index_exports, {
   SolanaBalanceMonitor: () => SolanaBalanceMonitor,
   SpendControl: () => SpendControl,
   SpendPolicyError: () => SpendPolicyError,
+  UnreadableSpendPolicyError: () => UnreadableSpendPolicyError,
   VISIBLE_OPENCLAW_MODELS: () => VISIBLE_OPENCLAW_MODELS,
   blockrunProvider: () => blockrunProvider,
   buildImageGenerationProvider: () => buildImageGenerationProvider,
@@ -227660,9 +227970,9 @@ import {
   unlinkSync
 } from "fs";
 import { readFile as readFileAsync } from "fs/promises";
-import { homedir as homedir13 } from "os";
+import { homedir as homedir14 } from "os";
 import { randomUUID } from "crypto";
-import { join as join16 } from "path";
+import { join as join17 } from "path";
 async function waitForProxyHealth(port, timeoutMs = 3e3) {
   const start = Date.now();
   while (Date.now() - start < timeoutMs) {
@@ -227704,8 +228014,8 @@ function isBlockrunWebSearchDisabled(config) {
   return cfg.tools?.web?.search?.enabled === false;
 }
 function injectModelsConfig(logger48, options = {}) {
-  const configDir = join16(homedir13(), ".openclaw");
-  const configPath = join16(configDir, "openclaw.json");
+  const configDir = join17(homedir14(), ".openclaw");
+  const configPath = join17(configDir, "openclaw.json");
   let config = {};
   let needsWrite = false;
   if (!existsSync4(configDir)) {
@@ -227926,7 +228236,7 @@ function injectModelsConfig(logger48, options = {}) {
 }
 function syncAgentModelCache(logger48, options = {}) {
   if (!isGatewayMode() && !options.forceWrite) return;
-  const agentsDir = join16(homedir13(), ".openclaw", "agents");
+  const agentsDir = join17(homedir14(), ".openclaw", "agents");
   if (!existsSync4(agentsDir)) return;
   let agentDirs;
   try {
@@ -227936,7 +228246,7 @@ function syncAgentModelCache(logger48, options = {}) {
   }
   const expectedIds = VISIBLE_OPENCLAW_MODELS.map((m) => m.id);
   for (const agent of agentDirs) {
-    const cachePath = join16(agentsDir, agent, "agent", "models.json");
+    const cachePath = join17(agentsDir, agent, "agent", "models.json");
     if (!existsSync4(cachePath)) continue;
     try {
       const raw = readTextFileSync(cachePath).trim();
@@ -227965,7 +228275,7 @@ function syncAgentModelCache(logger48, options = {}) {
   }
 }
 function injectAuthProfile(logger48) {
-  const agentsDir = join16(homedir13(), ".openclaw", "agents");
+  const agentsDir = join17(homedir14(), ".openclaw", "agents");
   if (!existsSync4(agentsDir)) {
     try {
       mkdirSync3(agentsDir, { recursive: true });
@@ -227982,9 +228292,9 @@ function injectAuthProfile(logger48) {
       agents = ["main", ...agents];
     }
     for (const agentId of agents) {
-      const authDir = join16(agentsDir, agentId, "agent");
-      const authPath = join16(authDir, "auth-profiles.json");
-      const sqlitePath = join16(authDir, "openclaw-agent.sqlite");
+      const authDir = join17(agentsDir, agentId, "agent");
+      const authPath = join17(authDir, "auth-profiles.json");
+      const sqlitePath = join17(authDir, "openclaw-agent.sqlite");
       if (existsSync4(sqlitePath)) {
         removeInjectedAuthPlaceholder(authPath, logger48, agentId);
         continue;
@@ -228131,9 +228441,21 @@ async function startProxyInBackground(api, startupGeneration) {
   if (startupGeneration !== void 0 && isProxyStartupCurrent(startupGeneration, proc)) {
     proc.__clawrouterStartupPhase = "starting";
   }
+  const pluginApiKey = api.pluginConfig?.apiKey;
+  const resolvedApiKey = typeof pluginApiKey === "string" && isValidApiKey(pluginApiKey) ? { key: pluginApiKey.trim(), source: "config" } : await resolveApiKey();
+  if (typeof pluginApiKey === "string" && !isValidApiKey(pluginApiKey)) {
+    api.logger.warn(
+      `pluginConfig.apiKey is set but invalid (expected brk_...) \u2014 ignoring it and looking elsewhere`
+    );
+  }
+  const apiKey = resolvedApiKey?.key;
   const configKey = api.pluginConfig?.walletKey;
   let wallet;
-  if (typeof configKey === "string" && /^0x[0-9a-fA-F]{64}$/.test(configKey)) {
+  if (apiKey) {
+    api.logger.info(
+      `Using BlockRun API key ${maskApiKey(apiKey)} (from ${resolvedApiKey.source}) \u2014 billing account credit, no wallet`
+    );
+  } else if (typeof configKey === "string" && /^0x[0-9a-fA-F]{64}$/.test(configKey)) {
     const account = privateKeyToAccount(configKey);
     wallet = { key: configKey, address: account.address, source: "config" };
   } else {
@@ -228144,7 +228466,8 @@ async function startProxyInBackground(api, startupGeneration) {
     }
     wallet = await resolveOrGenerateWalletKey();
   }
-  if (wallet.source === "generated") {
+  if (!wallet) {
+  } else if (wallet.source === "generated") {
     api.logger.warn(`\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550`);
     api.logger.warn(`  NEW WALLET GENERATED \u2014 BACK UP YOUR KEY NOW!`);
     api.logger.warn(`  Address : ${wallet.address}`);
@@ -228168,14 +228491,20 @@ async function startProxyInBackground(api, startupGeneration) {
       `Cost cap: $${maxCostPerRunUsd.toFixed(2)} per session (mode: ${maxCostPerRunMode})`
     );
   }
+  const sharedControl = getSharedSpendControl();
+  sharedControl.reloadLimits();
+  sharedControl.resetSession();
   const proxy = await startProxy({
-    wallet,
+    ...apiKey ? { apiKey } : { wallet },
     routingConfig,
     maxCostPerRunUsd,
     maxCostPerRunMode,
-    spendControl: liveSpendControl = new SpendControl(),
+    // The process-wide ledger: the polymarket tool and the /policy command
+    // registered below use the same instance, so hourly/daily/session windows
+    // cover every surface and a /policy write reaches the live signer.
+    spendControl: sharedControl,
     onReady: (port) => {
-      api.logger.info(`BlockRun x402 proxy listening on port ${port}`);
+      api.logger.info(`BlockRun ${apiKey ? "API-key" : "x402"} proxy listening on port ${port}`);
     },
     onError: (error) => {
       api.logger.error(`BlockRun proxy error: ${error.message}`);
@@ -228221,6 +228550,10 @@ async function startProxyInBackground(api, startupGeneration) {
   }
   api.logger.info(`ClawRouter ready \u2014 smart routing enabled`);
   api.logger.info(`Pricing: Simple ~$0.001 | Code ~$0.01 | Complex ~$0.05 | Free: $0`);
+  if (apiKey) {
+    api.logger.info(`Billing: BlockRun account credit \u2014 top up at ${PORTAL_CREDITS_URL}`);
+    return true;
+  }
   const currentChain = await resolvePaymentChain();
   const displayAddress = currentChain === "solana" && proxy.solanaAddress ? proxy.solanaAddress : wallet.address;
   const network = currentChain === "solana" ? "Solana" : "Base";
@@ -228464,7 +228797,7 @@ function buildImageGenerationProvider() {
         (result.data ?? []).map(async (img) => {
           const filename = img.url?.split("/images/").pop();
           if (!filename) throw new Error(`Unexpected image URL format: ${img.url}`);
-          const filePath = join16(IMAGE_DIR2, filename);
+          const filePath = join17(IMAGE_DIR2, filename);
           const buffer2 = await readFileAsync(filePath);
           const ext = filename.split(".").pop()?.toLowerCase() ?? "png";
           const mimeType = ext === "jpg" || ext === "jpeg" ? "image/jpeg" : ext === "webp" ? "image/webp" : "image/png";
@@ -228516,7 +228849,7 @@ function buildMusicGenerationProvider() {
         (result.data ?? []).map(async (track) => {
           const filename = track.url?.split("/audio/").pop();
           if (!filename) throw new Error(`Unexpected audio URL format: ${track.url}`);
-          const filePath = join16(AUDIO_DIR2, filename);
+          const filePath = join17(AUDIO_DIR2, filename);
           const buffer2 = await readFileAsync(filePath);
           const ext = filename.split(".").pop()?.toLowerCase() ?? "mp3";
           const mimeType = ext === "wav" ? "audio/wav" : "audio/mpeg";
@@ -228592,7 +228925,7 @@ function buildVideoGenerationProvider() {
         (result.data ?? []).map(async (clip) => {
           const filename = clip.url?.split("/videos/").pop();
           if (!filename) throw new Error(`Unexpected video URL format: ${clip.url}`);
-          const filePath = join16(VIDEO_DIR2, filename);
+          const filePath = join17(VIDEO_DIR2, filename);
           const buffer2 = await readFileAsync(filePath);
           const ext = filename.split(".").pop()?.toLowerCase() ?? "mp4";
           const mimeType = ext === "webm" ? "video/webm" : ext === "mov" ? "video/quicktime" : "video/mp4";
@@ -228645,6 +228978,22 @@ function createWalletCommand(api) {
     requireAuth: true,
     handler: async (ctx) => {
       const subcommand = ctx.args?.trim().toLowerCase() || "status";
+      const activeApiKey = (await resolveApiKey())?.key;
+      if (activeApiKey) {
+        return {
+          text: [
+            "**BlockRun account** (API key)",
+            "",
+            `**Key:** \`${maskApiKey(activeApiKey)}\``,
+            "**Billing:** account credit \u2014 no wallet, no payment chain, no gas.",
+            "",
+            `**Add credit:** ${PORTAL_CREDITS_URL}`,
+            `**Usage & keys:** ${PORTAL_KEYS_URL}`,
+            "",
+            "To pay with a USDC wallet over x402 instead, run `clawrouter logout` and restart."
+          ].join("\n")
+        };
+      }
       let wallet;
       try {
         wallet = subcommand === "status" || subcommand === "export" ? await resolveExistingWalletKey() : await resolveOrGenerateWalletKey();
@@ -228896,12 +229245,13 @@ function createWalletCommand(api) {
     }
   };
 }
-var activeProxyHandle, liveSpendControl, pendingConfiguredStartupApi, IMAGE_DIR2, AUDIO_DIR2, VIDEO_DIR2, plugin, index_default2;
+var activeProxyHandle, pendingConfiguredStartupApi, IMAGE_DIR2, AUDIO_DIR2, VIDEO_DIR2, plugin, index_default2;
 var init_index = __esm({
   "src/index.ts"() {
     "use strict";
     init_provider();
     init_proxy();
+    init_api_key();
     init_web_search_provider();
     init_auth();
     init_balance();
@@ -228914,10 +229264,10 @@ var init_index = __esm({
     init_stats();
     init_partners();
     init_tool();
+    init_spend_control();
     init_stats2();
     init_exclude();
     init_policy();
-    init_spend_control();
     init_mcp_config();
     init_openclaw_plugin_config();
     init_openclaw_plugin_config();
@@ -228939,11 +229289,10 @@ var init_index = __esm({
     init_response_cache();
     init_partners();
     activeProxyHandle = null;
-    liveSpendControl = null;
     pendingConfiguredStartupApi = null;
-    IMAGE_DIR2 = join16(homedir13(), ".openclaw", "blockrun", "images");
-    AUDIO_DIR2 = join16(homedir13(), ".openclaw", "blockrun", "audio");
-    VIDEO_DIR2 = join16(homedir13(), ".openclaw", "blockrun", "videos");
+    IMAGE_DIR2 = join17(homedir14(), ".openclaw", "blockrun", "images");
+    AUDIO_DIR2 = join17(homedir14(), ".openclaw", "blockrun", "audio");
+    VIDEO_DIR2 = join17(homedir14(), ".openclaw", "blockrun", "videos");
     plugin = {
       // NOT "clawrouter". OpenClaw bundles its own plugin under that id since the
       // 2026.7.1 line (vendored at dist/extensions/clawrouter, provider `clawrouter/*`,
@@ -229255,7 +229604,7 @@ ${errText}`
         api.registerCommand(createExcludeCommand());
         api.registerCommand(
           createPolicyCommand({
-            liveControl: () => activeProxyHandle ? liveSpendControl ?? void 0 : void 0
+            liveControl: () => process.__clawrouterProxyStarted ? getSharedSpendControl() : void 0
           })
         );
         if (shouldLogRegistration) {
@@ -229360,7 +229709,7 @@ ${errText}`
         }
         resetProxyStartupState();
         try {
-          const configPath = join16(homedir13(), ".openclaw", "openclaw.json");
+          const configPath = join17(homedir14(), ".openclaw", "openclaw.json");
           if (existsSync4(configPath)) {
             const config = JSON.parse(readTextFileSync(configPath));
             if (config.models?.providers?.blockrun) {
@@ -229402,11 +229751,11 @@ ${errText}`
           api.logger.warn(`Config cleanup failed: ${err instanceof Error ? err.message : String(err)}`);
         }
         try {
-          const agentsDir = join16(homedir13(), ".openclaw", "agents");
+          const agentsDir = join17(homedir14(), ".openclaw", "agents");
           if (existsSync4(agentsDir)) {
             for (const entry of readdirSync(agentsDir, { withFileTypes: true })) {
               if (!entry.isDirectory()) continue;
-              const authPath = join16(agentsDir, entry.name, "agent", "auth-profiles.json");
+              const authPath = join17(agentsDir, entry.name, "agent", "auth-profiles.json");
               if (!existsSync4(authPath)) continue;
               try {
                 const store = JSON.parse(readTextFileSync(authPath));
@@ -229485,6 +229834,7 @@ init_client2();
 init_esm5();
 init_auth();
 init_balance();
+init_api_key();
 init_wallet2();
 init_stats();
 init_proxy();
@@ -229526,7 +229876,48 @@ function collectSystemInfo() {
     memoryTotal: formatBytes(totalmem())
   };
 }
-async function collectWalletInfo() {
+async function collectApiKeyInfo() {
+  const resolved = await resolveApiKey();
+  if (!resolved) {
+    return {
+      configured: false,
+      masked: null,
+      source: null,
+      gateway: BLOCKRUN_API_KEY_API,
+      accepted: null
+    };
+  }
+  let accepted = null;
+  try {
+    const response = await fetch(`${BLOCKRUN_API_KEY_API}/v1/models`, {
+      headers: { authorization: `Bearer ${resolved.key}` },
+      signal: AbortSignal.timeout(1e4)
+    });
+    if (response.status === 401) accepted = false;
+    else if (response.ok) accepted = true;
+  } catch {
+  }
+  return {
+    configured: true,
+    masked: maskApiKey(resolved.key),
+    source: resolved.source,
+    gateway: BLOCKRUN_API_KEY_API,
+    accepted
+  };
+}
+async function collectWalletInfo(apiKeyConfigured) {
+  const empty = {
+    exists: false,
+    valid: false,
+    address: null,
+    solanaAddress: null,
+    balance: null,
+    isLow: false,
+    isEmpty: true,
+    source: null,
+    paymentChain: "base"
+  };
+  if (apiKeyConfigured) return { ...empty, isEmpty: false };
   try {
     const { key: key2, address: address2, source, solanaPrivateKeyBytes } = await resolveOrGenerateWalletKey();
     if (!key2 || !address2) {
@@ -229645,6 +230036,14 @@ async function collectLogInfo() {
 }
 function identifyIssues(result) {
   const issues = [];
+  if (result.apiKey.configured) {
+    if (result.apiKey.accepted === false) {
+      issues.push(
+        `BlockRun rejected the API key (${result.apiKey.masked}) \u2014 it may be revoked or mistyped. Mint a new one at ${PORTAL_KEYS_URL}`
+      );
+    }
+    return finishIssues(result, issues);
+  }
   if (!result.wallet.exists) {
     issues.push("No wallet found");
   }
@@ -229657,6 +230056,9 @@ function identifyIssues(result) {
   } else if (result.wallet.isLow) {
     issues.push("Wallet balance is low (< $1.00)");
   }
+  return finishIssues(result, issues);
+}
+function finishIssues(result, issues) {
   if (!result.network.blockrunApi.reachable) {
     issues.push("Cannot reach BlockRun API - check internet connection");
   }
@@ -229690,6 +230092,22 @@ function printDiagnostics(result) {
   console.log(
     `  ${green(`Memory: ${result.system.memoryFree} free / ${result.system.memoryTotal}`)}`
   );
+  if (result.apiKey.configured) {
+    console.log("\nBlockRun account (API key)");
+    console.log(`  ${green(`Key: ${result.apiKey.masked} (from ${result.apiKey.source})`)}`);
+    console.log(`  ${green(`Gateway: ${result.apiKey.gateway}`)}`);
+    if (result.apiKey.accepted === true) {
+      console.log(`  ${green("Key accepted by BlockRun")}`);
+    } else if (result.apiKey.accepted === false) {
+      console.log(`  ${red("Key REJECTED by BlockRun (401) \u2014 revoked or mistyped")}`);
+      console.log(`  ${yellow(`Mint a new key: ${PORTAL_KEYS_URL}`)}`);
+    } else {
+      console.log(`  ${yellow("Could not verify the key (gateway unreachable)")}`);
+    }
+    console.log(`  ${green(`Credit: billed server-side \u2014 top up at ${PORTAL_CREDITS_URL}`)}`);
+    printRestOfDiagnostics(result);
+    return;
+  }
   console.log("\nWallet");
   if (result.wallet.exists && result.wallet.valid) {
     const walletPath = result.wallet.source === "core" ? CORE_WALLET_FILE : WALLET_FILE;
@@ -229717,6 +230135,9 @@ function printDiagnostics(result) {
   } else {
     console.log(`  ${red("No wallet found")}`);
   }
+  printRestOfDiagnostics(result);
+}
+function printRestOfDiagnostics(result) {
   console.log("\nNetwork");
   if (result.network.blockrunApi.reachable) {
     console.log(
@@ -229761,11 +230182,15 @@ function createDoctorX402Client(opts) {
   const publicClient = createPublicClient({ chain: base, transport: http() });
   const evmSigner = toClientEvmSigner(account, publicClient);
   const x402 = new x402Client();
-  registerSpendPolicyHook(x402, opts.spendControl ?? new SpendControl());
+  registerSpendPolicyHook(x402, opts.spendControl ?? getSharedSpendControl());
   registerExactEvmScheme(x402, { signer: evmSigner });
   return x402;
 }
 async function analyzeWithAI(diagnostics, userQuestion, model = "sonnet") {
+  if (diagnostics.apiKey.configured) {
+    await analyzeWithApiKey(diagnostics, userQuestion, model);
+    return;
+  }
   if (diagnostics.wallet.isEmpty) {
     console.log("\n\u{1F4B3} Wallet is empty - cannot call AI for analysis.");
     console.log(`   Fund your EVM wallet with USDC on Base: ${diagnostics.wallet.address}`);
@@ -229813,30 +230238,7 @@ async function analyzeWithAI(diagnostics, userQuestion, model = "sonnet") {
       body: JSON.stringify({
         model: modelConfig.id,
         stream: false,
-        messages: [
-          {
-            role: "system",
-            content: `You are a technical support expert for BlockRun and ClawRouter.
-Analyze the diagnostics and:
-1. Identify the root cause of any issues
-2. Provide specific, actionable fix commands (bash)
-3. Explain why the issue occurred briefly
-4. Be concise but thorough
-5. Format commands in code blocks`
-          },
-          {
-            role: "user",
-            content: userQuestion ? `Here are my system diagnostics:
-
-${JSON.stringify(diagnostics, null, 2)}
-
-User's question: ${userQuestion}` : `Here are my system diagnostics:
-
-${JSON.stringify(diagnostics, null, 2)}
-
-Please analyze and help me fix any issues.`
-          }
-        ],
+        messages: doctorMessages(diagnostics, userQuestion),
         max_tokens: 1e3
       })
     });
@@ -229860,13 +230262,91 @@ Error calling AI: ${err instanceof Error ? err.message : String(err)}`);
     console.log("Try again or check your wallet balance.\n");
   }
 }
+async function analyzeWithApiKey(diagnostics, userQuestion, model) {
+  const resolved = await resolveApiKey();
+  if (!resolved) return;
+  const modelConfig = DOCTOR_MODELS[model];
+  console.log(`
+\u{1F4E4} Sending to ${modelConfig.name} (${modelConfig.cost})...
+`);
+  try {
+    const response = await fetch(`${BLOCKRUN_API_KEY_API}/v1/chat/completions`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        authorization: `Bearer ${resolved.key}`
+      },
+      body: JSON.stringify({
+        model: modelConfig.id,
+        stream: false,
+        messages: doctorMessages(diagnostics, userQuestion),
+        max_tokens: 1e3
+      })
+    });
+    if (!response.ok) {
+      const text = await response.text();
+      console.log(`Error: ${response.status} - ${text}`);
+      if (response.status === 402) {
+        console.log(`
+Your BlockRun credit is exhausted. Top up: ${PORTAL_CREDITS_URL}
+`);
+      } else if (response.status === 401) {
+        console.log(`
+BlockRun rejected the key. Mint a new one: ${PORTAL_KEYS_URL}
+`);
+      }
+      return;
+    }
+    const data = await response.json();
+    const content = data.choices?.[0]?.message?.content;
+    if (content) {
+      console.log("\u{1F916} AI Analysis:\n");
+      console.log(content);
+      console.log();
+    } else {
+      console.log("Error: No response from AI");
+    }
+  } catch (err) {
+    console.log(`
+Error calling AI: ${err instanceof Error ? err.message : String(err)}`);
+    console.log(`Try again, or check your credit at ${PORTAL_CREDITS_URL}
+`);
+  }
+}
+function doctorMessages(diagnostics, userQuestion) {
+  return [
+    {
+      role: "system",
+      content: `You are a technical support expert for BlockRun and ClawRouter.
+Analyze the diagnostics and:
+1. Identify the root cause of any issues
+2. Provide specific, actionable fix commands (bash)
+3. Explain why the issue occurred briefly
+4. Be concise but thorough
+5. Format commands in code blocks`
+    },
+    {
+      role: "user",
+      content: userQuestion ? `Here are my system diagnostics:
+
+${JSON.stringify(diagnostics, null, 2)}
+
+User's question: ${userQuestion}` : `Here are my system diagnostics:
+
+${JSON.stringify(diagnostics, null, 2)}
+
+Please analyze and help me fix any issues.`
+    }
+  ];
+}
 async function runDoctor(userQuestion, model = "sonnet") {
   console.log(`
 \u{1FA7A} BlockRun Doctor v${VERSION}
 `);
+  const apiKey = await collectApiKeyInfo();
   const [system, wallet, network, logs, latestVersion] = await Promise.all([
     collectSystemInfo(),
-    collectWalletInfo(),
+    collectWalletInfo(apiKey.configured),
     collectNetworkInfo(),
     collectLogInfo(),
     fetchLatestVersion()
@@ -229876,6 +230356,7 @@ async function runDoctor(userQuestion, model = "sonnet") {
     latestVersion,
     timestamp: (/* @__PURE__ */ new Date()).toISOString(),
     system,
+    apiKey,
     wallet,
     network,
     logs,
@@ -229889,12 +230370,15 @@ async function runDoctor(userQuestion, model = "sonnet") {
 // src/cli.ts
 init_partners();
 init_policy();
+init_api_key();
 function printHelp() {
   console.log(`
 ClawRouter v${VERSION} - Smart LLM Router
 
 Usage:
   clawrouter [options]
+  clawrouter login [brk_...]           # Use a BlockRun API key (card-funded credit)
+  clawrouter logout                    # Forget the API key and go back to the wallet
   clawrouter status                    # Live proxy status (wallet, balance, chain)
   clawrouter wallet                    # Wallet details + balance
   clawrouter models                    # List available models
@@ -229945,11 +230429,20 @@ Management Commands:
   partners          List available partner APIs with pricing
   partners test     Test partner API endpoints (expect 402 = alive)
   wallet recover    Restore wallet.key from mnemonic (if generated by ClawRouter)
+  login             Store a BlockRun API key in ~/.blockrun/.api-key (persists)
+  logout            Delete the stored API key and fall back to the wallet
   chain solana      Switch to Solana (persists)
   chain base        Switch to Base EVM (persists)
   policy            Edit spend limits and counterparty lists (fail-closed; restart proxy to apply)
 
+Paying for calls \u2014 two ways, and ClawRouter prefers the API key when both exist:
+  API key   Sign up at ${PORTAL_URL}, top up with a card, mint a key, then run
+            "clawrouter login brk_live_...". Calls go to api.blockrun.ai.
+  Wallet    The default. A USDC wallet is generated on first run and pays for
+            each call over x402 \u2014 Solana for new installs, Base for older ones.
+
 Environment Variables:
+  BLOCKRUN_API_KEY        BlockRun API key (brk_...) \u2014 wins over the wallet when set
   BLOCKRUN_WALLET_KEY     Private key for x402 payments (auto-generated if not set)
   BLOCKRUN_PROXY_PORT     Default proxy port (default: 8402)
 
@@ -230032,7 +230525,7 @@ Use: clawrouter share <id> --as=<feishu|slack|discord|telegram|whatsapp|plain>
   const idOrLast = tgt === "last" ? "last" : tgt;
   if (all3) {
     try {
-      const { writeFile: writeFile3 } = await import("fs/promises");
+      const { writeFile: writeFile4 } = await import("fs/promises");
       const { tmpdir } = await import("os");
       const { join: pjoin } = await import("path");
       const paths = [];
@@ -230040,7 +230533,7 @@ Use: clawrouter share <id> --as=<feishu|slack|discord|telegram|whatsapp|plain>
         const path5 = idOrLast === "last" ? `/share/last?as=${p}` : `/share/${idOrLast}/render?as=${p}`;
         const result = await queryProxy(path5, port);
         const file = pjoin(tmpdir(), `claw-share-${result.id}-${p}.txt`);
-        await writeFile3(file, result.rendered, "utf8");
+        await writeFile4(file, result.rendered, "utf8");
         paths.push(file);
       }
       console.log("\n\u2713 Wrote all 6 preset variants:");
@@ -230085,12 +230578,19 @@ async function cmdStatus(port) {
 ClawRouter Status (port ${port})
 `);
     console.log(`  Status:        ${data.status}`);
-    console.log(`  Payment Chain: ${data.paymentChain}`);
-    console.log(`  EVM Wallet:    ${data.wallet}`);
-    if (data.solana) console.log(`  Solana Wallet: ${data.solana}`);
-    console.log(`  Balance:       ${data.balance ?? "unknown"}`);
-    if (data.isLow) console.log(`  \u26A0 Balance is low`);
-    if (data.isEmpty) console.log(`  \u26A0 Balance is empty \u2014 using free models`);
+    if (data.authMode === "api-key") {
+      console.log(`  Auth:          BlockRun API key ${data.apiKey}`);
+      console.log(`  Gateway:       ${data.gateway}`);
+      console.log(`  Billing:       account credit \u2014 top up at ${PORTAL_CREDITS_URL}`);
+    } else {
+      console.log(`  Auth:          wallet (x402)`);
+      console.log(`  Payment Chain: ${data.paymentChain}`);
+      console.log(`  EVM Wallet:    ${data.wallet}`);
+      if (data.solana) console.log(`  Solana Wallet: ${data.solana}`);
+      console.log(`  Balance:       ${data.balance ?? "unknown"}`);
+      if (data.isLow) console.log(`  \u26A0 Balance is low`);
+      if (data.isEmpty) console.log(`  \u26A0 Balance is empty \u2014 using free models`);
+    }
     if (data.upstreamProxy) console.log(`  Upstream Proxy: ${data.upstreamProxy}`);
     console.log();
   } catch {
@@ -230102,6 +230602,20 @@ ClawRouter Status (port ${port})
 async function cmdWallet(port) {
   try {
     const data = await queryProxy("/health?full=true", port);
+    if (data.authMode === "api-key") {
+      console.log(`
+ClawRouter Account
+`);
+      console.log(`  Auth:    BlockRun API key ${data.apiKey}`);
+      console.log(`  Gateway: ${data.gateway}`);
+      console.log(`  Billing: account credit (no wallet, no chain)`);
+      console.log(`  Top up:  ${PORTAL_CREDITS_URL}`);
+      console.log(`  Usage:   ${PORTAL_URL}/dashboard`);
+      console.log();
+      console.log(`  To pay with a USDC wallet instead: clawrouter logout`);
+      console.log();
+      return;
+    }
     console.log(`
 ClawRouter Wallet
 `);
@@ -230327,8 +230841,8 @@ async function cmdSetup() {
     unlinkSync: unlinkSync2,
     writeFileSync: writeFileSync4
   } = await import("fs");
-  const { dirname: dirname4, join: join17 } = await import("path");
-  const { homedir: homedir14 } = await import("os");
+  const { dirname: dirname4, join: join18 } = await import("path");
+  const { homedir: homedir15 } = await import("os");
   const { injectModelsConfig: injectModelsConfig2, injectAuthProfile: injectAuthProfile2, syncAgentModelCache: syncAgentModelCache2, VISIBLE_OPENCLAW_MODELS: VISIBLE_OPENCLAW_MODELS2 } = await Promise.resolve().then(() => (init_index(), index_exports));
   const { BLOCKRUN_PLUGIN_ID: BLOCKRUN_PLUGIN_ID2, prepareBlockRunPluginConfig: prepareBlockRunPluginConfig2 } = await Promise.resolve().then(() => (init_openclaw_plugin_config(), openclaw_plugin_config_exports));
   console.log("\u{1F99E} ClawRouter setup\n");
@@ -230343,19 +230857,19 @@ async function cmdSetup() {
     } catch {
     }
     if (process.env.npm_config_prefix) {
-      candidates.push(join17(process.env.npm_config_prefix, "bin", "openclaw"));
+      candidates.push(join18(process.env.npm_config_prefix, "bin", "openclaw"));
     }
     try {
       const npmRoot = execSync("npm root -g", {
         encoding: "utf8",
         stdio: ["ignore", "pipe", "ignore"]
       }).trim();
-      if (npmRoot) candidates.push(join17(dirname4(dirname4(npmRoot)), "bin", "openclaw"));
+      if (npmRoot) candidates.push(join18(dirname4(dirname4(npmRoot)), "bin", "openclaw"));
     } catch {
     }
     candidates.push(
-      join17(homedir14(), ".npm-global", "bin", "openclaw"),
-      join17(homedir14(), ".local", "bin", "openclaw"),
+      join18(homedir15(), ".npm-global", "bin", "openclaw"),
+      join18(homedir15(), ".local", "bin", "openclaw"),
       "/usr/local/bin/openclaw"
     );
     return candidates.find((candidate) => existsSync5(candidate)) ?? "";
@@ -230367,7 +230881,7 @@ async function cmdSetup() {
     process.exit(1);
   }
   console.log(`  \u2713 Found openclaw at ${openclawPath}`);
-  const configPath = join17(homedir14(), ".openclaw", "openclaw.json");
+  const configPath = join18(homedir15(), ".openclaw", "openclaw.json");
   const configInitiallyExisted = existsSync5(configPath);
   const configRollbackBackup = configInitiallyExisted ? `${configPath}.before-${BLOCKRUN_PLUGIN_ID2}.${Date.now()}` : void 0;
   if (configRollbackBackup) copyFileSync2(configPath, configRollbackBackup);
@@ -230375,23 +230889,23 @@ async function cmdSetup() {
     return configRollbackBackup;
   };
   let installAttempted = false;
-  const openclawRoot = join17(homedir14(), ".openclaw");
+  const openclawRoot = join18(homedir15(), ".openclaw");
   const findManagedBlockRunInstalls = () => {
     const candidates = [
-      join17(openclawRoot, "extensions", BLOCKRUN_PLUGIN_ID2),
-      join17(openclawRoot, "extensions", "clawrouter"),
-      join17(openclawRoot, "npm", "node_modules", "@blockrun", "clawrouter")
+      join18(openclawRoot, "extensions", BLOCKRUN_PLUGIN_ID2),
+      join18(openclawRoot, "extensions", "clawrouter"),
+      join18(openclawRoot, "npm", "node_modules", "@blockrun", "clawrouter")
     ];
-    const projectsDir = join17(openclawRoot, "npm", "projects");
+    const projectsDir = join18(openclawRoot, "npm", "projects");
     try {
       for (const project of readdirSync2(projectsDir)) {
-        candidates.push(join17(projectsDir, project, "node_modules", "@blockrun", "clawrouter"));
+        candidates.push(join18(projectsDir, project, "node_modules", "@blockrun", "clawrouter"));
       }
     } catch {
     }
     return [...new Set(candidates)].filter((candidate) => {
       try {
-        const metadata = JSON.parse(readFileSync4(join17(candidate, "package.json"), "utf8"));
+        const metadata = JSON.parse(readFileSync4(join18(candidate, "package.json"), "utf8"));
         return metadata.name === "@blockrun/clawrouter";
       } catch {
         return false;
@@ -230399,7 +230913,7 @@ async function cmdSetup() {
     });
   };
   const initialPluginDirs = findManagedBlockRunInstalls();
-  const setupRollbackRoot = join17(
+  const setupRollbackRoot = join18(
     openclawRoot,
     "blockrun",
     "setup-rollbacks",
@@ -230409,7 +230923,7 @@ async function cmdSetup() {
   if (initialPluginDirs.length > 0) {
     mkdirSync4(setupRollbackRoot, { recursive: true, mode: 448 });
     for (const [index2, pluginDir] of initialPluginDirs.entries()) {
-      const backup = join17(setupRollbackRoot, String(index2));
+      const backup = join18(setupRollbackRoot, String(index2));
       cpSync(pluginDir, backup, { recursive: true });
       pluginRollbackBackups.set(pluginDir, backup);
     }
@@ -230454,8 +230968,8 @@ async function cmdSetup() {
   if (existsSync5(configPath)) {
     try {
       const config = JSON.parse(readFileSync4(configPath, "utf8"));
-      const legacyPackagePath = join17(
-        homedir14(),
+      const legacyPackagePath = join18(
+        homedir15(),
         ".openclaw",
         "extensions",
         "clawrouter",
@@ -230639,7 +231153,10 @@ function parseArgs(args) {
     phoneArg: void 0,
     phoneAreaCode: void 0,
     policy: false,
-    policyArgs: []
+    policyArgs: [],
+    login: false,
+    loginKey: void 0,
+    logout: false
   };
   for (let i = 0; i < args.length; i++) {
     const arg = args[i];
@@ -230700,6 +231217,14 @@ function parseArgs(args) {
     } else if ((arg === "chain" || arg === "/wallet") && (args[i + 1] === "solana" || args[i + 1] === "base")) {
       result.chain = args[i + 1];
       i++;
+    } else if (arg === "login") {
+      result.login = true;
+      if (args[i + 1] && !args[i + 1].startsWith("-")) {
+        result.loginKey = args[i + 1];
+        i++;
+      }
+    } else if (arg === "logout") {
+      result.logout = true;
     } else if (arg === "policy") {
       result.policy = true;
       result.policyArgs = args.slice(i + 1);
@@ -230782,6 +231307,58 @@ function parseArgs(args) {
   }
   return result;
 }
+async function promptForApiKey() {
+  const { createInterface } = await import("readline/promises");
+  const rl = createInterface({ input: process.stdin, output: process.stdout });
+  try {
+    console.log(`Sign up, add credit with a card, and mint a key at ${PORTAL_KEYS_URL}`);
+    return (await rl.question("Paste your BlockRun API key (brk_...): ")).trim();
+  } finally {
+    rl.close();
+  }
+}
+function installShutdownHandlers(proxy) {
+  const shutdown = async (signal) => {
+    console.log(`
+[ClawRouter] Received ${signal}, shutting down...`);
+    try {
+      await proxy.close();
+      console.log(`[ClawRouter] Proxy closed`);
+      process.exit(0);
+    } catch (err) {
+      console.error(`[ClawRouter] Error during shutdown: ${err}`);
+      process.exit(1);
+    }
+  };
+  process.on("SIGINT", () => shutdown("SIGINT"));
+  process.on("SIGTERM", () => shutdown("SIGTERM"));
+}
+async function startWithApiKey(apiKey, source, args) {
+  const origin2 = source === "env" ? "BLOCKRUN_API_KEY" : source === "core" ? "~/.blockrun/.api-key" : source;
+  console.log(`[ClawRouter] Using BlockRun API key ${maskApiKey(apiKey)} (from ${origin2})`);
+  const proxy = await startProxy({
+    apiKey,
+    port: args.port,
+    allowExistingProxy: !args.noReuse,
+    onReady: (port) => {
+      console.log(`[ClawRouter] v${VERSION} | Proxy listening on http://127.0.0.1:${port}`);
+      console.log(`[ClawRouter] Health check: http://127.0.0.1:${port}/health`);
+    },
+    onError: (error) => {
+      console.error(`[ClawRouter] Error: ${error.message}`);
+    },
+    onRouted: (decision) => {
+      const cost = decision.costEstimate.toFixed(4);
+      const saved = (decision.savings * 100).toFixed(0);
+      console.log(`[ClawRouter] [${decision.tier}] ${decision.model} $${cost} (saved ${saved}%)`);
+    }
+  });
+  console.log(`[ClawRouter] Billing: BlockRun account credit \u2014 ${PORTAL_CREDITS_URL}`);
+  console.log(`[ClawRouter] Ready - Ctrl+C to stop`);
+  installShutdownHandlers(proxy);
+  await new Promise(() => {
+  });
+}
 async function main() {
   const args = parseArgs(process.argv.slice(2));
   if (args.version) {
@@ -230919,6 +231496,37 @@ ClawRouter Partner APIs (v${VERSION})
     await recoverWalletFromMnemonic();
     process.exit(0);
   }
+  if (args.login) {
+    const key2 = args.loginKey ?? await promptForApiKey();
+    if (!isValidApiKey(key2)) {
+      console.error(`[ClawRouter] That does not look like a BlockRun API key (expected brk_...).`);
+      console.error(`[ClawRouter] Sign up and mint one at ${PORTAL_KEYS_URL}`);
+      process.exit(1);
+    }
+    const path5 = await saveApiKey(key2);
+    console.log(`[ClawRouter] Signed in with ${maskApiKey(key2)}`);
+    console.log(`[ClawRouter] Key saved to ${path5} (readable only by you)`);
+    console.log(`[ClawRouter] Calls now go to api.blockrun.ai and bill your account credit.`);
+    console.log(`[ClawRouter] Top up: ${PORTAL_CREDITS_URL}`);
+    console.log(`[ClawRouter] Restart the proxy to apply.`);
+    process.exit(0);
+  }
+  if (args.logout) {
+    const { removed, envStillSet } = await clearApiKey();
+    if (removed.length === 0) {
+      console.log(`[ClawRouter] No stored API key \u2014 already using the wallet.`);
+    } else {
+      for (const path5 of removed) console.log(`[ClawRouter] Removed ${path5}`);
+      console.log(`[ClawRouter] Back to wallet mode (x402). Restart the proxy to apply.`);
+    }
+    if (envStillSet) {
+      console.warn(
+        `[ClawRouter] \u26A0 BLOCKRUN_API_KEY is still set in this environment and overrides the wallet.`
+      );
+      console.warn(`[ClawRouter]   Unset it too: unset BLOCKRUN_API_KEY`);
+    }
+    process.exit(0);
+  }
   if (args.chain) {
     const targetChain = args.chain;
     if (targetChain === "solana") {
@@ -230955,6 +231563,11 @@ ClawRouter Partner APIs (v${VERSION})
     console.log(report);
     process.exit(0);
   }
+  const apiKeyResolution = await resolveApiKey();
+  if (apiKeyResolution) {
+    await startWithApiKey(apiKeyResolution.key, apiKeyResolution.source, args);
+    return;
+  }
   const wallet = await resolveOrGenerateWalletKey();
   if (wallet.source === "generated") {
     console.log(`[ClawRouter] Generated new wallet: ${wallet.address}`);
@@ -231017,20 +231630,7 @@ ClawRouter Partner APIs (v${VERSION})
     console.log(`[ClawRouter] Wallet: ${displayAddress} (balance check pending)`);
   }
   console.log(`[ClawRouter] Ready - Ctrl+C to stop`);
-  const shutdown = async (signal) => {
-    console.log(`
-[ClawRouter] Received ${signal}, shutting down...`);
-    try {
-      await proxy.close();
-      console.log(`[ClawRouter] Proxy closed`);
-      process.exit(0);
-    } catch (err) {
-      console.error(`[ClawRouter] Error during shutdown: ${err}`);
-      process.exit(1);
-    }
-  };
-  process.on("SIGINT", () => shutdown("SIGINT"));
-  process.on("SIGTERM", () => shutdown("SIGTERM"));
+  installShutdownHandlers(proxy);
   await new Promise(() => {
   });
 }