@blockrun/clawrouter 0.12.281 → 0.12.282

package/dist/index.js

@@ -65931,6 +65931,156 @@ ${lines.join("\n")}`;
   }
 });
 
+// src/local-guard.ts
+import { closeSync as closeSync2, fstatSync as fstatSync2, openSync as openSync2, readSync as readSync2, realpathSync } from "fs";
+import { homedir as homedir7 } from "os";
+import { join as join10 } from "path";
+function isLocalHostname(hostname) {
+  const h = hostname.toLowerCase().replace(/\.$/, "");
+  return h === "localhost" || h === "127.0.0.1" || h === "[::1]" || h === "::1";
+}
+function untrustedRequestReason(req) {
+  const host = req.headers.host;
+  if (host) {
+    let hostname;
+    try {
+      hostname = new URL(`http://${host}`).hostname;
+    } catch {
+      return "malformed Host header";
+    }
+    if (!isLocalHostname(hostname)) return `non-local Host header (${hostname})`;
+  }
+  const origin2 = req.headers.origin;
+  if (Array.isArray(origin2)) return "multiple Origin headers";
+  if (origin2 !== void 0) {
+    if (origin2 === "null") return "opaque Origin";
+    let o3;
+    try {
+      o3 = new URL(origin2);
+    } catch {
+      return "malformed Origin header";
+    }
+    if (o3.protocol !== "http:" && o3.protocol !== "https:" || !isLocalHostname(o3.hostname)) {
+      return `cross-site Origin (${origin2})`;
+    }
+  }
+  const site = req.headers["sec-fetch-site"];
+  if (site === "cross-site") return "cross-site browser request";
+  return null;
+}
+function v4FromHex(hi, lo) {
+  return `${hi >>> 8 & 255}.${hi & 255}.${lo >>> 8 & 255}.${lo & 255}`;
+}
+function isBlockedSsrfHost(hostname) {
+  const h = hostname.toLowerCase().replace(/^\[/, "").replace(/\]$/, "").replace(/\.$/, "");
+  if (!h) return true;
+  if (h === "localhost" || h.endsWith(".localhost") || h.endsWith(".local")) return true;
+  if (h.endsWith(".internal")) return true;
+  if (METADATA_HOSTS.has(h)) return true;
+  if (h.includes(":")) {
+    if (h === "::1" || h === "::") return true;
+    if (h.startsWith("fe80:") || h.startsWith("fc") || h.startsWith("fd")) return true;
+    const sixToFour = h.match(/^2002:([0-9a-f]{1,4}):([0-9a-f]{1,4}):/);
+    if (sixToFour) {
+      return isBlockedSsrfHost(v4FromHex(parseInt(sixToFour[1], 16), parseInt(sixToFour[2], 16)));
+    }
+    const embedded = h.match(/^64:ff9b::(.+)$/) ?? h.match(/::ffff:(.+)$/);
+    if (embedded) {
+      const tail = embedded[1];
+      if (tail.includes(".")) return isBlockedSsrfHost(tail);
+      const seg = tail.split(":");
+      if (seg.length === 2)
+        return isBlockedSsrfHost(v4FromHex(parseInt(seg[0], 16), parseInt(seg[1], 16)));
+    }
+    return false;
+  }
+  const m = h.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
+  if (m) {
+    const a = Number(m[1]);
+    const b = Number(m[2]);
+    const c = Number(m[3]);
+    if (a === 127 || a === 0 || a === 10) return true;
+    if (a === 169 && b === 254) return true;
+    if (a === 172 && b >= 16 && b <= 31) return true;
+    if (a === 192 && b === 168) return true;
+    if (a === 100 && b >= 64 && b <= 127) return true;
+    if (a === 192 && b === 0 && c === 0) return true;
+  }
+  return false;
+}
+async function ssrfSafeFetch(url2, init2 = {}, maxHops = 5) {
+  const { allowPrivate, ...fetchInit } = init2;
+  let current = url2;
+  for (let hop = 0; hop <= maxHops; hop++) {
+    const u = new URL(current);
+    if (u.protocol !== "http:" && u.protocol !== "https:") {
+      throw new Error(`refusing to fetch non-http(s) URL (${u.protocol})`);
+    }
+    if (!allowPrivate && isBlockedSsrfHost(u.hostname)) {
+      throw new Error(`refusing to fetch a private/loopback/metadata address: ${u.hostname}`);
+    }
+    const res = await fetch(current, { ...fetchInit, redirect: "manual" });
+    if (res.status >= 300 && res.status < 400) {
+      const loc = res.headers.get("location");
+      if (!loc) return res;
+      current = new URL(loc, current).href;
+      continue;
+    }
+    return res;
+  }
+  throw new Error("too many redirects");
+}
+function readLocalImageAsDataUri(filePath) {
+  const expanded = filePath.startsWith("~/") ? join10(homedir7(), filePath.slice(2)) : filePath;
+  const refuse = () => new Error(`Not a readable PNG, JPEG or WebP image: ${filePath}`);
+  let fd;
+  try {
+    fd = openSync2(realpathSync(expanded), "r");
+  } catch {
+    throw refuse();
+  }
+  try {
+    const st = fstatSync2(fd);
+    if (!st.isFile() || st.size === 0 || st.size > MAX_LOCAL_IMAGE_BYTES) throw refuse();
+    const head = Buffer.alloc(12);
+    readSync2(fd, head, 0, 12, 0);
+    const sig = IMAGE_SIGNATURES.find((s3) => s3.test(head));
+    if (!sig) throw refuse();
+    const data = Buffer.alloc(st.size);
+    let off = 0;
+    while (off < st.size) {
+      const n = readSync2(fd, data, off, st.size - off, off);
+      if (n === 0) break;
+      off += n;
+    }
+    return `data:${sig.mime};base64,${data.subarray(0, off).toString("base64")}`;
+  } finally {
+    closeSync2(fd);
+  }
+}
+var METADATA_HOSTS, MAX_LOCAL_IMAGE_BYTES, IMAGE_SIGNATURES;
+var init_local_guard = __esm({
+  "src/local-guard.ts"() {
+    "use strict";
+    METADATA_HOSTS = /* @__PURE__ */ new Set(["metadata", "metadata.goog", "instance-data"]);
+    MAX_LOCAL_IMAGE_BYTES = 25 * 1024 * 1024;
+    IMAGE_SIGNATURES = [
+      {
+        mime: "image/png",
+        test: (b) => b.length >= 8 && b.readUInt32BE(0) === 2303741511 && b.readUInt32BE(4) === 218765834
+      },
+      {
+        mime: "image/jpeg",
+        test: (b) => b.length >= 3 && b[0] === 255 && b[1] === 216 && b[2] === 255
+      },
+      {
+        mime: "image/webp",
+        test: (b) => b.length >= 12 && b.toString("ascii", 0, 4) === "RIFF" && b.toString("ascii", 8, 12) === "WEBP"
+      }
+    ];
+  }
+});
+
 // node_modules/undici/lib/core/symbols.js
 var require_symbols = __commonJS({
   "node_modules/undici/lib/core/symbols.js"(exports, module) {
@@ -93324,8 +93474,8 @@ var init_textual_tool_calls = __esm({
 
 // src/response-store.ts
 import { appendFile as appendFile2, mkdir as mkdir5, readFile, readdir as readdir2 } from "fs/promises";
-import { homedir as homedir7 } from "os";
-import { join as join10 } from "path";
+import { homedir as homedir8 } from "os";
+import { join as join11 } from "path";
 import { randomBytes as randomBytes7 } from "crypto";
 function isEnabled() {
   const v = process.env.BLOCKRUN_RESPONSE_STORE;
@@ -93338,7 +93488,7 @@ async function ensureDir2() {
 }
 function dailyFile(date = /* @__PURE__ */ new Date()) {
   const iso = date.toISOString().slice(0, 10);
-  return join10(STORE_DIR, `responses-${iso}.jsonl`);
+  return join11(STORE_DIR, `responses-${iso}.jsonl`);
 }
 function genId() {
   return `resp_${Date.now()}_${randomBytes7(3).toString("hex")}`;
@@ -93388,7 +93538,7 @@ async function listRecent(limit = 20, daysBack = 7) {
       d.setUTCDate(d.getUTCDate() - i);
       const iso = d.toISOString().slice(0, 10);
       const name = `responses-${iso}.jsonl`;
-      if (files.includes(name)) candidateFiles.push(join10(STORE_DIR, name));
+      if (files.includes(name)) candidateFiles.push(join11(STORE_DIR, name));
     }
     const all3 = [];
     for (const f of candidateFiles) {
@@ -93417,7 +93567,7 @@ var STORE_DIR, dirReady2;
 var init_response_store = __esm({
   "src/response-store.ts"() {
     "use strict";
-    STORE_DIR = join10(homedir7(), ".openclaw", "blockrun", "responses");
+    STORE_DIR = join11(homedir8(), ".openclaw", "blockrun", "responses");
     dirReady2 = false;
   }
 });
@@ -95054,10 +95204,10 @@ import { createHmac } from "crypto";
 import { createServer } from "http";
 import { finished, Readable } from "stream";
 import { pipeline } from "stream/promises";
-import { homedir as homedir8 } from "os";
-import { join as join11 } from "path";
+import { homedir as homedir9 } from "os";
+import { join as join12 } from "path";
 import { mkdir as mkdir6, writeFile as writeFile4, readFile as readFile2, stat as fsStat } from "fs/promises";
-import { readFileSync as readFileSync2, existsSync as existsSync2 } from "fs";
+import { readFileSync as readFileSync2 } from "fs";
 async function loadGatewayCatalog(apiBase, apiKey) {
   try {
     const controller = new AbortController();
@@ -95951,22 +96101,6 @@ async function proxyPaidApiRequest(req, res, apiBase, payFetch, getActualPayment
   }).catch(() => {
   });
 }
-function readImageFileAsDataUri(filePath) {
-  const resolved = filePath.startsWith("~/") ? join11(homedir8(), filePath.slice(2)) : filePath;
-  if (!existsSync2(resolved)) {
-    throw new Error(`Image file not found: ${resolved}`);
-  }
-  const ext = resolved.split(".").pop()?.toLowerCase() ?? "png";
-  const mimeMap = {
-    png: "image/png",
-    jpg: "image/jpeg",
-    jpeg: "image/jpeg",
-    webp: "image/webp"
-  };
-  const mime = mimeMap[ext] ?? "image/png";
-  const data = readFileSync2(resolved);
-  return `data:${mime};base64,${data.toString("base64")}`;
-}
 async function uploadDataUriToHost(dataUri) {
   const match = dataUri.match(/^data:(image\/\w+);base64,(.+)$/);
   if (!match) throw new Error("Invalid data URI format");
@@ -96243,6 +96377,13 @@ async function startProxy(options) {
           console.error(`[ClawRouter] Request finished with error: ${err.message}`);
         }
       });
+      const untrusted = untrustedRequestReason(req);
+      if (untrusted) {
+        console.warn(`[ClawRouter] Refused request to ${req.url}: ${untrusted}`);
+        res.writeHead(403, { "Content-Type": "application/json" });
+        res.end(JSON.stringify({ error: "forbidden", details: untrusted }));
+        return;
+      }
       if (req.url === "/health" || req.url?.startsWith("/health?")) {
         const url2 = new URL(req.url, "http://localhost");
         const full = url2.searchParams.get("full") === "true";
@@ -96471,7 +96612,7 @@ async function startProxy(options) {
           res.end("Bad request");
           return;
         }
-        const filePath = join11(IMAGE_DIR, filename);
+        const filePath = join12(IMAGE_DIR, filename);
         try {
           const s3 = await fsStat(filePath);
           if (!s3.isFile()) throw new Error("not a file");
@@ -96502,7 +96643,7 @@ async function startProxy(options) {
           res.end("Bad request");
           return;
         }
-        const filePath = join11(AUDIO_DIR, filename);
+        const filePath = join12(AUDIO_DIR, filename);
         try {
           const s3 = await fsStat(filePath);
           if (!s3.isFile()) throw new Error("not a file");
@@ -96532,7 +96673,7 @@ async function startProxy(options) {
           res.end("Bad request");
           return;
         }
-        const filePath = join11(VIDEO_DIR, filename);
+        const filePath = join12(VIDEO_DIR, filename);
         try {
           const s3 = await fsStat(filePath);
           if (!s3.isFile()) throw new Error("not a file");
@@ -96674,7 +96815,7 @@ async function startProxy(options) {
                 const [, mimeType, b64] = dataUriMatch;
                 const ext = mimeType === "image/jpeg" ? "jpg" : mimeType.split("/")[1] ?? "png";
                 const filename = `${Date.now()}-${Math.random().toString(36).slice(2, 10)}.${ext}`;
-                await writeFile4(join11(IMAGE_DIR, filename), Buffer.from(b64, "base64"));
+                await writeFile4(join12(IMAGE_DIR, filename), Buffer.from(b64, "base64"));
                 img.url = `http://localhost:${port2}/images/${filename}`;
                 console.log(`[ClawRouter] Image saved \u2192 ${img.url}`);
               } else if (img.url?.startsWith("https://") || img.url?.startsWith("http://")) {
@@ -96685,7 +96826,7 @@ async function startProxy(options) {
                     const ext = contentType.includes("jpeg") || contentType.includes("jpg") ? "jpg" : contentType.includes("webp") ? "webp" : "png";
                     const filename = `${Date.now()}-${Math.random().toString(36).slice(2, 10)}.${ext}`;
                     const buf = Buffer.from(await imgResp.arrayBuffer());
-                    await writeFile4(join11(IMAGE_DIR, filename), buf);
+                    await writeFile4(join12(IMAGE_DIR, filename), buf);
                     img.url = `http://localhost:${port2}/images/${filename}`;
                     console.log(`[ClawRouter] Image downloaded & saved \u2192 ${img.url}`);
                   }
@@ -96748,7 +96889,10 @@ async function startProxy(options) {
             if (typeof val !== "string" || !val) continue;
             if (val.startsWith("data:")) {
             } else if (val.startsWith("https://") || val.startsWith("http://")) {
-              const imgResp = await fetch(val, { signal: clientAbort.signal });
+              const imgResp = await ssrfSafeFetch(val, {
+                signal: clientAbort.signal,
+                allowPrivate: process.env.CLAWROUTER_ALLOW_PRIVATE_FETCH === "1"
+              });
               if (!imgResp.ok)
                 throw new Error(`Failed to download ${field} from ${val}: HTTP ${imgResp.status}`);
               const contentType = imgResp.headers.get("content-type") ?? "image/png";
@@ -96758,7 +96902,7 @@ async function startProxy(options) {
                 `[ClawRouter] img2img: downloaded ${field} URL \u2192 data URI (${buf.length} bytes)`
               );
             } else {
-              parsed[field] = readImageFileAsDataUri(val);
+              parsed[field] = readLocalImageAsDataUri(val);
               console.log(`[ClawRouter] img2img: read ${field} file \u2192 data URI`);
             }
           }
@@ -96807,7 +96951,7 @@ async function startProxy(options) {
                 const [, mimeType, b64] = dataUriMatch;
                 const ext = mimeType === "image/jpeg" ? "jpg" : mimeType.split("/")[1] ?? "png";
                 const filename = `${Date.now()}-${Math.random().toString(36).slice(2, 10)}.${ext}`;
-                await writeFile4(join11(IMAGE_DIR, filename), Buffer.from(b64, "base64"));
+                await writeFile4(join12(IMAGE_DIR, filename), Buffer.from(b64, "base64"));
                 img.url = `http://localhost:${port2}/images/${filename}`;
                 console.log(`[ClawRouter] Image saved \u2192 ${img.url}`);
               } else if (img.url?.startsWith("https://") || img.url?.startsWith("http://")) {
@@ -96818,7 +96962,7 @@ async function startProxy(options) {
                     const ext = contentType.includes("jpeg") || contentType.includes("jpg") ? "jpg" : contentType.includes("webp") ? "webp" : "png";
                     const filename = `${Date.now()}-${Math.random().toString(36).slice(2, 10)}.${ext}`;
                     const buf = Buffer.from(await imgResp.arrayBuffer());
-                    await writeFile4(join11(IMAGE_DIR, filename), buf);
+                    await writeFile4(join12(IMAGE_DIR, filename), buf);
                     img.url = `http://localhost:${port2}/images/${filename}`;
                     console.log(`[ClawRouter] Image downloaded & saved \u2192 ${img.url}`);
                   }
@@ -96914,7 +97058,7 @@ async function startProxy(options) {
                     const ext = contentType.includes("wav") ? "wav" : "mp3";
                     const filename = `${Date.now()}-${Math.random().toString(36).slice(2, 10)}.${ext}`;
                     const buf = Buffer.from(await audioResp.arrayBuffer());
-                    await writeFile4(join11(AUDIO_DIR, filename), buf);
+                    await writeFile4(join12(AUDIO_DIR, filename), buf);
                     track.url = `http://localhost:${port2}/audio/${filename}`;
                     console.log(`[ClawRouter] Audio saved \u2192 ${track.url}`);
                   }
@@ -97081,7 +97225,7 @@ async function startProxy(options) {
                     const ext = contentType.includes("webm") ? "webm" : contentType.includes("quicktime") ? "mov" : "mp4";
                     const filename = `${Date.now()}-${Math.random().toString(36).slice(2, 10)}.${ext}`;
                     const buf = Buffer.from(await videoResp.arrayBuffer());
-                    await writeFile4(join11(VIDEO_DIR, filename), buf);
+                    await writeFile4(join12(VIDEO_DIR, filename), buf);
                     clip.url = `http://localhost:${port2}/videos/${filename}`;
                     console.log(`[ClawRouter] Video saved \u2192 ${clip.url}`);
                   }
@@ -98047,8 +98191,8 @@ async function proxyRequest(req, res, apiBase, payFetch, options, routerOpts, de
         let imageDataUri;
         let maskDataUri;
         try {
-          imageDataUri = readImageFileAsDataUri(imagePath);
-          if (maskPath) maskDataUri = readImageFileAsDataUri(maskPath);
+          imageDataUri = readLocalImageAsDataUri(imagePath);
+          if (maskPath) maskDataUri = readLocalImageAsDataUri(maskPath);
         } catch (fileErr) {
           const fileErrMsg = fileErr instanceof Error ? fileErr.message : String(fileErr);
           sendImg2ImgText(`Failed to read image file: ${fileErrMsg}`);
@@ -99786,6 +99930,7 @@ var init_proxy = __esm({
     init_outcome_memory();
     init_config();
     init_journal();
+    init_local_guard();
     init_upstream_proxy();
     init_textual_tool_calls();
     init_response_store();
@@ -99794,10 +99939,10 @@ var init_proxy = __esm({
     paymentStore = new AsyncLocalStorage();
     BLOCKRUN_API = "https://blockrun.ai/api";
     BLOCKRUN_SOLANA_API = "https://sol.blockrun.ai/api";
-    DESKTOP_SERVICE_TOKEN_FILE = process.env.CLAWROUTER_DESKTOP_TOKEN_FILE ?? join11(homedir8(), ".clawrouter-desktop", "service-token");
-    IMAGE_DIR = join11(homedir8(), ".openclaw", "blockrun", "images");
-    AUDIO_DIR = join11(homedir8(), ".openclaw", "blockrun", "audio");
-    VIDEO_DIR = join11(homedir8(), ".openclaw", "blockrun", "videos");
+    DESKTOP_SERVICE_TOKEN_FILE = process.env.CLAWROUTER_DESKTOP_TOKEN_FILE ?? join12(homedir9(), ".clawrouter-desktop", "service-token");
+    IMAGE_DIR = join12(homedir9(), ".openclaw", "blockrun", "images");
+    AUDIO_DIR = join12(homedir9(), ".openclaw", "blockrun", "audio");
+    VIDEO_DIR = join12(homedir9(), ".openclaw", "blockrun", "videos");
     AUTO_MODEL = "blockrun/auto";
     ROUTING_PROFILES = /* @__PURE__ */ new Set([
       "blockrun/eco",
@@ -101178,7 +101323,13 @@ function buildTool(service, proxyBaseUrl) {
       if (service.proxyPath === "/pm/__dynamic__") {
         const rawPath = typeof params.path === "string" ? params.path : "";
         const normalized = rawPath.startsWith("/") ? rawPath : `/${rawPath}`;
-        if (!normalized.startsWith("/pm/") || normalized.includes("..")) {
+        let resolved;
+        try {
+          resolved = new URL(`/v1${normalized}`, "http://x").pathname;
+        } catch {
+          resolved = "";
+        }
+        if (!normalized.startsWith("/pm/") || normalized.includes("..") || /%2e|%2f|%5c|\\/i.test(normalized) || !resolved.startsWith("/v1/pm/")) {
           throw new Error(
             `predexon_endpoint_call: invalid path '${rawPath}' \u2014 must begin with '/pm/' and contain no '..'`
           );
@@ -122018,8 +122169,8 @@ var init_constants3 = __esm({
 
 // src/polymarket/wallet-adapter.ts
 import fs2 from "fs";
-import { homedir as homedir9 } from "os";
-import { join as join12 } from "path";
+import { homedir as homedir10 } from "os";
+import { join as join13 } from "path";
 function getOrCreateWalletKey() {
   const envKey = process.env.BLOCKRUN_WALLET_KEY?.trim();
   if (envKey && /^0x[0-9a-fA-F]{64}$/.test(envKey)) return envKey;
@@ -122067,7 +122218,7 @@ var init_wallet_adapter = __esm({
     init_esm();
     init_chains();
     init_constants3();
-    WALLET_FILE2 = join12(homedir9(), ".openclaw", "blockrun", "wallet.key");
+    WALLET_FILE2 = join13(homedir10(), ".openclaw", "blockrun", "wallet.key");
     BASE_RPC_URLS = [
       "https://mainnet.base.org",
       "https://base.llamarpc.com",
@@ -232583,7 +232734,7 @@ var init_retry = __esm({
 // src/index.ts
 import {
   writeFileSync as writeFileSync3,
-  existsSync as existsSync3,
+  existsSync as existsSync2,
   readdirSync,
   mkdirSync as mkdirSync3,
   copyFileSync,
@@ -232592,9 +232743,9 @@ import {
   unlinkSync
 } from "fs";
 import { readFile as readFileAsync } from "fs/promises";
-import { homedir as homedir14 } from "os";
+import { homedir as homedir15 } from "os";
 import { randomUUID } from "crypto";
-import { join as join17 } from "path";
+import { join as join18 } from "path";
 async function waitForProxyHealth(port, timeoutMs = 3e3) {
   const start = Date.now();
   while (Date.now() - start < timeoutMs) {
@@ -232614,12 +232765,12 @@ function writePrivateJsonSync(path5, value) {
     renameSync2(temporary, path5);
     chmodSync(path5, 384);
   } finally {
-    if (existsSync3(temporary)) unlinkSync(temporary);
+    if (existsSync2(temporary)) unlinkSync(temporary);
   }
 }
 function hasConfiguredWallet() {
   return Boolean(
-    process["env"].BLOCKRUN_WALLET_KEY || existsSync3(CORE_WALLET_FILE) || existsSync3(WALLET_FILE)
+    process["env"].BLOCKRUN_WALLET_KEY || existsSync2(CORE_WALLET_FILE) || existsSync2(WALLET_FILE)
   );
 }
 function isCompletionMode() {
@@ -232637,11 +232788,11 @@ function isBlockrunWebSearchDisabled(config) {
 }
 function legacyPackageIsBlockRun() {
   for (const dir of [
-    join17(homedir14(), ".openclaw", "extensions", "clawrouter"),
-    join17(homedir14(), ".openclaw", "npm", "node_modules", "@blockrun", "clawrouter")
+    join18(homedir15(), ".openclaw", "extensions", "clawrouter"),
+    join18(homedir15(), ".openclaw", "npm", "node_modules", "@blockrun", "clawrouter")
   ]) {
     try {
-      const metadata = JSON.parse(readTextFileSync(join17(dir, "package.json")));
+      const metadata = JSON.parse(readTextFileSync(join18(dir, "package.json")));
       if (metadata.name === "@blockrun/clawrouter") return true;
     } catch {
     }
@@ -232649,11 +232800,11 @@ function legacyPackageIsBlockRun() {
   return false;
 }
 function injectModelsConfig(logger48, options = {}) {
-  const configDir = join17(homedir14(), ".openclaw");
-  const configPath = join17(configDir, "openclaw.json");
+  const configDir = join18(homedir15(), ".openclaw");
+  const configPath = join18(configDir, "openclaw.json");
   let config = {};
   let needsWrite = false;
-  if (!existsSync3(configDir)) {
+  if (!existsSync2(configDir)) {
     try {
       mkdirSync3(configDir, { recursive: true });
       logger48.info("Created OpenClaw config directory");
@@ -232664,7 +232815,7 @@ function injectModelsConfig(logger48, options = {}) {
       return;
     }
   }
-  if (existsSync3(configPath)) {
+  if (existsSync2(configPath)) {
     try {
       const content = readTextFileSync(configPath).trim();
       if (content) {
@@ -232871,8 +233022,8 @@ function injectModelsConfig(logger48, options = {}) {
 }
 function syncAgentModelCache(logger48, options = {}) {
   if (!isGatewayMode() && !options.forceWrite) return;
-  const agentsDir = join17(homedir14(), ".openclaw", "agents");
-  if (!existsSync3(agentsDir)) return;
+  const agentsDir = join18(homedir15(), ".openclaw", "agents");
+  if (!existsSync2(agentsDir)) return;
   let agentDirs;
   try {
     agentDirs = readdirSync(agentsDir);
@@ -232881,8 +233032,8 @@ function syncAgentModelCache(logger48, options = {}) {
   }
   const expectedIds = VISIBLE_OPENCLAW_MODELS.map((m) => m.id);
   for (const agent of agentDirs) {
-    const cachePath = join17(agentsDir, agent, "agent", "models.json");
-    if (!existsSync3(cachePath)) continue;
+    const cachePath = join18(agentsDir, agent, "agent", "models.json");
+    if (!existsSync2(cachePath)) continue;
     try {
       const raw = readTextFileSync(cachePath).trim();
       if (!raw) continue;
@@ -232910,8 +233061,8 @@ function syncAgentModelCache(logger48, options = {}) {
   }
 }
 function injectAuthProfile(logger48) {
-  const agentsDir = join17(homedir14(), ".openclaw", "agents");
-  if (!existsSync3(agentsDir)) {
+  const agentsDir = join18(homedir15(), ".openclaw", "agents");
+  if (!existsSync2(agentsDir)) {
     try {
       mkdirSync3(agentsDir, { recursive: true });
     } catch (err) {
@@ -232927,10 +233078,10 @@ function injectAuthProfile(logger48) {
       agents = ["main", ...agents];
     }
     for (const agentId of agents) {
-      const authDir = join17(agentsDir, agentId, "agent");
-      const authPath = join17(authDir, "auth-profiles.json");
-      const sqlitePath = join17(authDir, "openclaw-agent.sqlite");
-      if (existsSync3(sqlitePath)) {
+      const authDir = join18(agentsDir, agentId, "agent");
+      const authPath = join18(authDir, "auth-profiles.json");
+      const sqlitePath = join18(authDir, "openclaw-agent.sqlite");
+      if (existsSync2(sqlitePath)) {
         removeInjectedAuthPlaceholder(authPath, logger48, agentId);
         continue;
       }
@@ -232938,7 +233089,7 @@ function injectAuthProfile(logger48) {
         removeInjectedAuthPlaceholder(authPath, logger48, agentId);
         continue;
       }
-      if (!existsSync3(authDir)) {
+      if (!existsSync2(authDir)) {
         try {
           mkdirSync3(authDir, { recursive: true });
         } catch {
@@ -232949,7 +233100,7 @@ function injectAuthProfile(logger48) {
         version: 1,
         profiles: {}
       };
-      if (existsSync3(authPath)) {
+      if (existsSync2(authPath)) {
         try {
           const existing = JSON.parse(readTextFileSync(authPath));
           if (existing.version && existing.profiles) {
@@ -232982,7 +233133,7 @@ function injectAuthProfile(logger48) {
 }
 function removeInjectedAuthPlaceholder(authPath, logger48, agentId) {
   try {
-    if (!existsSync3(authPath)) return;
+    if (!existsSync2(authPath)) return;
     const parsed = JSON.parse(readTextFileSync(authPath));
     const profiles = parsed?.profiles;
     if (!profiles || typeof profiles !== "object" || Array.isArray(profiles)) return;
@@ -233437,7 +233588,7 @@ function buildImageGenerationProvider() {
         (result.data ?? []).map(async (img) => {
           const filename = img.url?.split("/images/").pop();
           if (!filename) throw new Error(`Unexpected image URL format: ${img.url}`);
-          const filePath = join17(IMAGE_DIR2, filename);
+          const filePath = join18(IMAGE_DIR2, filename);
           const buffer2 = await readFileAsync(filePath);
           const ext = filename.split(".").pop()?.toLowerCase() ?? "png";
           const mimeType = ext === "jpg" || ext === "jpeg" ? "image/jpeg" : ext === "webp" ? "image/webp" : "image/png";
@@ -233489,7 +233640,7 @@ function buildMusicGenerationProvider() {
         (result.data ?? []).map(async (track) => {
           const filename = track.url?.split("/audio/").pop();
           if (!filename) throw new Error(`Unexpected audio URL format: ${track.url}`);
-          const filePath = join17(AUDIO_DIR2, filename);
+          const filePath = join18(AUDIO_DIR2, filename);
           const buffer2 = await readFileAsync(filePath);
           const ext = filename.split(".").pop()?.toLowerCase() ?? "mp3";
           const mimeType = ext === "wav" ? "audio/wav" : "audio/mpeg";
@@ -233565,7 +233716,7 @@ function buildVideoGenerationProvider() {
         (result.data ?? []).map(async (clip) => {
           const filename = clip.url?.split("/videos/").pop();
           if (!filename) throw new Error(`Unexpected video URL format: ${clip.url}`);
-          const filePath = join17(VIDEO_DIR2, filename);
+          const filePath = join18(VIDEO_DIR2, filename);
           const buffer2 = await readFileAsync(filePath);
           const ext = filename.split(".").pop()?.toLowerCase() ?? "mp4";
           const mimeType = ext === "webm" ? "video/webm" : ext === "mov" ? "video/quicktime" : "video/mp4";
@@ -233666,7 +233817,7 @@ function createWalletCommand(api) {
         ];
         let hasMnemonic3 = false;
         try {
-          if (existsSync3(MNEMONIC_FILE)) {
+          if (existsSync2(MNEMONIC_FILE)) {
             const mnemonic = readTextFileSync(MNEMONIC_FILE).trim();
             if (mnemonic) {
               hasMnemonic3 = true;
@@ -233737,7 +233888,7 @@ function createWalletCommand(api) {
               ].join("\n")
             };
           }
-          if (existsSync3(MNEMONIC_FILE)) {
+          if (existsSync2(MNEMONIC_FILE)) {
             const existingMnemonic = readTextFileSync(MNEMONIC_FILE).trim();
             if (existingMnemonic) {
               await savePaymentChain("solana");
@@ -233929,9 +234080,9 @@ var init_index = __esm({
     init_partners();
     activeProxyHandle = null;
     pendingConfiguredStartupApi = null;
-    IMAGE_DIR2 = join17(homedir14(), ".openclaw", "blockrun", "images");
-    AUDIO_DIR2 = join17(homedir14(), ".openclaw", "blockrun", "audio");
-    VIDEO_DIR2 = join17(homedir14(), ".openclaw", "blockrun", "videos");
+    IMAGE_DIR2 = join18(homedir15(), ".openclaw", "blockrun", "images");
+    AUDIO_DIR2 = join18(homedir15(), ".openclaw", "blockrun", "audio");
+    VIDEO_DIR2 = join18(homedir15(), ".openclaw", "blockrun", "videos");
     plugin = {
       // NOT "clawrouter". OpenClaw bundles its own plugin under that id since the
       // 2026.7.1 line (vendored at dist/extensions/clawrouter, provider `clawrouter/*`,
@@ -234071,7 +234222,8 @@ var init_index = __esm({
           name: "cr-imagegen",
           description: "Generate an image (BlockRun image models, paid via wallet)",
           acceptsArgs: true,
-          requireAuth: false,
+          // Paid from the wallet: only authorized senders.
+          requireAuth: true,
           handler: async (ctx) => {
             const parsed = parseGenArgs(ctx.args ?? "");
             if (!parsed.prompt) {
@@ -234123,7 +234275,8 @@ ${errText}`
           name: "videogen",
           description: "Generate a short video (Grok Imagine / Seedance, paid via wallet)",
           acceptsArgs: true,
-          requireAuth: false,
+          // Paid from the wallet: only authorized senders.
+          requireAuth: true,
           handler: async (ctx) => {
             const parsed = parseGenArgs(ctx.args ?? "");
             if (!parsed.prompt) {
@@ -234172,7 +234325,8 @@ ${errText}`
           name: "cr-call",
           description: "Place an AI voice call via BlockRun + Bland.ai (paid from wallet, $0.54/call)",
           acceptsArgs: true,
-          requireAuth: false,
+          // Paid from the wallet: only authorized senders.
+          requireAuth: true,
           handler: async (ctx) => {
             const parsed = parseCallArgs(ctx.args ?? "");
             if (!parsed.to || !parsed.task) {
@@ -234369,8 +234523,8 @@ ${errText}`
         }
         resetProxyStartupState();
         try {
-          const configPath = join17(homedir14(), ".openclaw", "openclaw.json");
-          if (existsSync3(configPath)) {
+          const configPath = join18(homedir15(), ".openclaw", "openclaw.json");
+          if (existsSync2(configPath)) {
             const config = JSON.parse(readTextFileSync(configPath));
             if (config.models?.providers?.blockrun) {
               delete config.models.providers.blockrun;
@@ -234411,12 +234565,12 @@ ${errText}`
           api.logger.warn(`Config cleanup failed: ${err instanceof Error ? err.message : String(err)}`);
         }
         try {
-          const agentsDir = join17(homedir14(), ".openclaw", "agents");
-          if (existsSync3(agentsDir)) {
+          const agentsDir = join18(homedir15(), ".openclaw", "agents");
+          if (existsSync2(agentsDir)) {
             for (const entry of readdirSync(agentsDir, { withFileTypes: true })) {
               if (!entry.isDirectory()) continue;
-              const authPath = join17(agentsDir, entry.name, "agent", "auth-profiles.json");
-              if (!existsSync3(authPath)) continue;
+              const authPath = join18(agentsDir, entry.name, "agent", "auth-profiles.json");
+              if (!existsSync2(authPath)) continue;
               try {
                 const store = JSON.parse(readTextFileSync(authPath));
                 if (store.profiles?.["blockrun:default"]) {