@blockrun/clawrouter 0.12.281 → 0.12.283

package/dist/cli.js

@@ -32315,6 +32315,11 @@ function getSharedSpendControl() {
   host.__clawrouterSharedSpendControl ??= new SpendControl();
   return host.__clawrouterSharedSpendControl;
 }
+function parseQuotedAmountMicros(selected) {
+  const raw = selected.amount ?? selected.maxAmountRequired;
+  if (typeof raw !== "string" || !CANONICAL_AMOUNT.test(raw)) return void 0;
+  return BigInt(raw);
+}
 function parseQuotedAmountUsd(selected) {
   const raw = selected.amount ?? selected.maxAmountRequired;
   if (typeof raw !== "string" || !CANONICAL_AMOUNT.test(raw)) {
@@ -33080,6 +33085,16 @@ function createPayFetchWithPreAuth(baseFetch, client, ttlMs = DEFAULT_TTL_MS, op
       return est === void 0 ? void 0 : Number(est);
     };
     const needMicros = estimateMicros();
+    const notifyDeclinedPayment = () => {
+      if (!options?.onPaymentDeclined) return;
+      try {
+        options.onPaymentDeclined();
+      } catch (error) {
+        console.error(
+          `[ClawRouter] onPaymentDeclined callback failed: ${error instanceof Error ? error.message : String(error)}`
+        );
+      }
+    };
     const cached = !options?.skipPreAuth ? cache2.get(cacheKey2) : void 0;
     const preAuthCovers = cached !== void 0 && Date.now() - cached.cachedAt < ttlMs && cached.coverMicros !== void 0 && needMicros !== void 0 && needMicros <= cached.coverMicros;
     if (preAuthCovers) {
@@ -33098,6 +33113,7 @@ function createPayFetchWithPreAuth(baseFetch, client, ttlMs = DEFAULT_TTL_MS, op
           return response2;
         }
         paymentInFlight = false;
+        notifyDeclinedPayment();
         cache2.delete(cacheKey2);
       } catch (err) {
         cache2.delete(cacheKey2);
@@ -33142,6 +33158,7 @@ function createPayFetchWithPreAuth(baseFetch, client, ttlMs = DEFAULT_TTL_MS, op
       clonedRequest.headers.set(key3, value);
     }
     const paidResponse = await baseFetch(clonedRequest);
+    if (paidResponse.status === 402) notifyDeclinedPayment();
     notifyAcceptedPayment(paidResponse, payload);
     return paidResponse;
   };
@@ -64789,6 +64806,132 @@ var init_api_key = __esm({
   }
 });
 
+// src/session-spend.ts
+function parseMicros(raw) {
+  if (raw === void 0 || !/^\d+$/.test(raw)) return void 0;
+  return BigInt(raw);
+}
+function usdToMicros(usd2) {
+  return BigInt(Math.round(usd2 * 1e6));
+}
+function microsToUsd(micros) {
+  return Number(micros) / 1e6;
+}
+var SessionSpend, CostCapError;
+var init_session_spend = __esm({
+  "src/session-spend.ts"() {
+    "use strict";
+    init_spend_control();
+    SessionSpend = class _SessionSpend {
+      constructor(store, sessionId, capMicros, holdMicros) {
+        this.store = store;
+        this.sessionId = sessionId;
+        this.capMicros = capMicros;
+        this.heldMicros = holdMicros;
+        if (holdMicros > 0n) store.adjustSessionHold(sessionId, holdMicros);
+      }
+      store;
+      sessionId;
+      capMicros;
+      /** Budget this request still holds against the session (strict mode only). */
+      heldMicros;
+      /** Sum of payments signed by this request that still count. */
+      signedMicros = 0n;
+      /** The most recent signature not yet settled or voided — the one a decline undoes. */
+      lastSignedMicros = 0n;
+      released = false;
+      /**
+       * Strict mode: admit the request only if the session's spend, plus what its
+       * other in-flight requests hold, plus this request's estimate fits the cap —
+       * and hold the estimate in the same step.
+       */
+      static admit(store, sessionId, capMicros, estimateMicros) {
+        const spentMicros = store.getSessionCostMicros(sessionId);
+        const heldMicros = store.getSessionHoldMicros(sessionId);
+        if (spentMicros + heldMicros + estimateMicros > capMicros) {
+          return { admitted: false, spentMicros, heldMicros, estimateMicros };
+        }
+        return {
+          admitted: true,
+          spend: new _SessionSpend(store, sessionId, capMicros, estimateMicros)
+        };
+      }
+      /** Graceful mode: track signed spend, enforce nothing. */
+      static track(store, sessionId) {
+        return new _SessionSpend(store, sessionId, void 0, 0n);
+      }
+      get isStrict() {
+        return this.capMicros !== void 0;
+      }
+      /**
+       * Before a payment is created: may this request sign `quoteMicros`?
+       * Spend already recorded (including this request's own earlier signatures)
+       * plus what OTHER in-flight requests hold, plus the quote, must fit the cap.
+       * Always true in graceful mode.
+       */
+      coverPayment(quoteMicros) {
+        if (this.capMicros === void 0) return true;
+        const spent = this.store.getSessionCostMicros(this.sessionId);
+        const heldByOthers = this.store.getSessionHoldMicros(this.sessionId) - this.heldMicros;
+        if (spent + heldByOthers + quoteMicros > this.capMicros) return false;
+        if (quoteMicros > this.heldMicros) {
+          this.store.adjustSessionHold(this.sessionId, quoteMicros - this.heldMicros);
+          this.heldMicros = quoteMicros;
+        }
+        return true;
+      }
+      /** A payment was signed: it is spend now, and replaces part of the hold. */
+      recordSigned(amountMicros) {
+        if (amountMicros <= 0n) return;
+        this.signedMicros += amountMicros;
+        this.lastSignedMicros = amountMicros;
+        this.store.addSessionCost(this.sessionId, amountMicros);
+        this.shrinkHold(amountMicros);
+      }
+      /**
+       * The gateway answered the payment just signed with a 402: nothing settled.
+       * Payments within one request are signed and sent one at a time, so the
+       * decline always belongs to the latest signature. Undone at most once.
+       */
+      voidLastSigned() {
+        const undo = this.lastSignedMicros;
+        this.lastSignedMicros = 0n;
+        if (undo <= 0n) return;
+        this.signedMicros -= undo;
+        this.store.addSessionCost(this.sessionId, -undo);
+      }
+      /**
+       * An attempt succeeded. When nothing was signed for this request (the API
+       * key rail), the local estimate is the only record of the spend. When a
+       * payment was signed, it is already recorded at its real amount.
+       */
+      recordSuccess(estimateMicros) {
+        if (this.signedMicros > 0n || estimateMicros <= 0n) return;
+        this.store.addSessionCost(this.sessionId, estimateMicros);
+        this.shrinkHold(estimateMicros);
+      }
+      /** The request is over: return whatever it still holds. Idempotent. */
+      release() {
+        if (this.released) return;
+        this.released = true;
+        this.shrinkHold(this.heldMicros);
+      }
+      shrinkHold(byMicros) {
+        const drop = byMicros < this.heldMicros ? byMicros : this.heldMicros;
+        if (drop <= 0n) return;
+        this.heldMicros -= drop;
+        this.store.adjustSessionHold(this.sessionId, -drop);
+      }
+    };
+    CostCapError = class extends SpendPolicyError {
+      constructor(reason) {
+        super(reason);
+        this.name = "CostCapError";
+      }
+    };
+  }
+});
+
 // src/compression/types.ts
 var DEFAULT_COMPRESSION_CONFIG;
 var init_types2 = __esm({
@@ -65636,6 +65779,9 @@ var init_session = __esm({
     };
     SessionStore = class {
       sessions = /* @__PURE__ */ new Map();
+      // Kept apart from `sessions`: a hold belongs to requests still running, so it
+      // must not vanish when the idle-session sweep drops an entry mid-request.
+      sessionHolds = /* @__PURE__ */ new Map();
       config;
       cleanupInterval = null;
       constructor(config = {}) {
@@ -65811,14 +65957,34 @@ var init_session = __esm({
           this.sessions.set(sessionId, entry);
         }
         entry.sessionCostMicros += additionalMicros;
+        if (entry.sessionCostMicros < 0n) entry.sessionCostMicros = 0n;
       }
       /**
        * Get the total accumulated cost for a session in USD.
        */
       getSessionCostUsd(sessionId) {
-        const entry = this.sessions.get(sessionId);
-        if (!entry) return 0;
-        return Number(entry.sessionCostMicros) / 1e6;
+        return Number(this.getSessionCostMicros(sessionId)) / 1e6;
+      }
+      /**
+       * Get the total accumulated cost for a session in USDC micros.
+       */
+      getSessionCostMicros(sessionId) {
+        return this.sessions.get(sessionId)?.sessionCostMicros ?? 0n;
+      }
+      /**
+       * Budget held by a session's in-flight requests (USDC micros) — admitted
+       * against the strict cap but not yet spent. See session-spend.ts.
+       */
+      getSessionHoldMicros(sessionId) {
+        return this.sessionHolds.get(sessionId) ?? 0n;
+      }
+      /**
+       * Grow (positive) or release (negative) a session's in-flight hold.
+       */
+      adjustSessionHold(sessionId, deltaMicros) {
+        const next = (this.sessionHolds.get(sessionId) ?? 0n) + deltaMicros;
+        if (next > 0n) this.sessionHolds.set(sessionId, next);
+        else this.sessionHolds.delete(sessionId);
       }
       /**
        * Stop the cleanup interval.
@@ -66178,6 +66344,156 @@ ${lines.join("\n")}`;
   }
 });
 
+// src/local-guard.ts
+import { closeSync as closeSync2, fstatSync as fstatSync2, openSync as openSync2, readSync as readSync2, realpathSync } from "fs";
+import { homedir as homedir7 } from "os";
+import { join as join10 } from "path";
+function isLocalHostname(hostname) {
+  const h = hostname.toLowerCase().replace(/\.$/, "");
+  return h === "localhost" || h === "127.0.0.1" || h === "[::1]" || h === "::1";
+}
+function untrustedRequestReason(req) {
+  const host = req.headers.host;
+  if (host) {
+    let hostname;
+    try {
+      hostname = new URL(`http://${host}`).hostname;
+    } catch {
+      return "malformed Host header";
+    }
+    if (!isLocalHostname(hostname)) return `non-local Host header (${hostname})`;
+  }
+  const origin2 = req.headers.origin;
+  if (Array.isArray(origin2)) return "multiple Origin headers";
+  if (origin2 !== void 0) {
+    if (origin2 === "null") return "opaque Origin";
+    let o3;
+    try {
+      o3 = new URL(origin2);
+    } catch {
+      return "malformed Origin header";
+    }
+    if (o3.protocol !== "http:" && o3.protocol !== "https:" || !isLocalHostname(o3.hostname)) {
+      return `cross-site Origin (${origin2})`;
+    }
+  }
+  const site = req.headers["sec-fetch-site"];
+  if (site === "cross-site") return "cross-site browser request";
+  return null;
+}
+function v4FromHex(hi, lo) {
+  return `${hi >>> 8 & 255}.${hi & 255}.${lo >>> 8 & 255}.${lo & 255}`;
+}
+function isBlockedSsrfHost(hostname) {
+  const h = hostname.toLowerCase().replace(/^\[/, "").replace(/\]$/, "").replace(/\.$/, "");
+  if (!h) return true;
+  if (h === "localhost" || h.endsWith(".localhost") || h.endsWith(".local")) return true;
+  if (h.endsWith(".internal")) return true;
+  if (METADATA_HOSTS.has(h)) return true;
+  if (h.includes(":")) {
+    if (h === "::1" || h === "::") return true;
+    if (h.startsWith("fe80:") || h.startsWith("fc") || h.startsWith("fd")) return true;
+    const sixToFour = h.match(/^2002:([0-9a-f]{1,4}):([0-9a-f]{1,4}):/);
+    if (sixToFour) {
+      return isBlockedSsrfHost(v4FromHex(parseInt(sixToFour[1], 16), parseInt(sixToFour[2], 16)));
+    }
+    const embedded = h.match(/^64:ff9b::(.+)$/) ?? h.match(/::ffff:(.+)$/);
+    if (embedded) {
+      const tail = embedded[1];
+      if (tail.includes(".")) return isBlockedSsrfHost(tail);
+      const seg = tail.split(":");
+      if (seg.length === 2)
+        return isBlockedSsrfHost(v4FromHex(parseInt(seg[0], 16), parseInt(seg[1], 16)));
+    }
+    return false;
+  }
+  const m = h.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
+  if (m) {
+    const a = Number(m[1]);
+    const b = Number(m[2]);
+    const c = Number(m[3]);
+    if (a === 127 || a === 0 || a === 10) return true;
+    if (a === 169 && b === 254) return true;
+    if (a === 172 && b >= 16 && b <= 31) return true;
+    if (a === 192 && b === 168) return true;
+    if (a === 100 && b >= 64 && b <= 127) return true;
+    if (a === 192 && b === 0 && c === 0) return true;
+  }
+  return false;
+}
+async function ssrfSafeFetch(url2, init2 = {}, maxHops = 5) {
+  const { allowPrivate, ...fetchInit } = init2;
+  let current = url2;
+  for (let hop = 0; hop <= maxHops; hop++) {
+    const u = new URL(current);
+    if (u.protocol !== "http:" && u.protocol !== "https:") {
+      throw new Error(`refusing to fetch non-http(s) URL (${u.protocol})`);
+    }
+    if (!allowPrivate && isBlockedSsrfHost(u.hostname)) {
+      throw new Error(`refusing to fetch a private/loopback/metadata address: ${u.hostname}`);
+    }
+    const res = await fetch(current, { ...fetchInit, redirect: "manual" });
+    if (res.status >= 300 && res.status < 400) {
+      const loc = res.headers.get("location");
+      if (!loc) return res;
+      current = new URL(loc, current).href;
+      continue;
+    }
+    return res;
+  }
+  throw new Error("too many redirects");
+}
+function readLocalImageAsDataUri(filePath) {
+  const expanded = filePath.startsWith("~/") ? join10(homedir7(), filePath.slice(2)) : filePath;
+  const refuse = () => new Error(`Not a readable PNG, JPEG or WebP image: ${filePath}`);
+  let fd;
+  try {
+    fd = openSync2(realpathSync(expanded), "r");
+  } catch {
+    throw refuse();
+  }
+  try {
+    const st = fstatSync2(fd);
+    if (!st.isFile() || st.size === 0 || st.size > MAX_LOCAL_IMAGE_BYTES) throw refuse();
+    const head = Buffer.alloc(12);
+    readSync2(fd, head, 0, 12, 0);
+    const sig = IMAGE_SIGNATURES.find((s3) => s3.test(head));
+    if (!sig) throw refuse();
+    const data = Buffer.alloc(st.size);
+    let off = 0;
+    while (off < st.size) {
+      const n = readSync2(fd, data, off, st.size - off, off);
+      if (n === 0) break;
+      off += n;
+    }
+    return `data:${sig.mime};base64,${data.subarray(0, off).toString("base64")}`;
+  } finally {
+    closeSync2(fd);
+  }
+}
+var METADATA_HOSTS, MAX_LOCAL_IMAGE_BYTES, IMAGE_SIGNATURES;
+var init_local_guard = __esm({
+  "src/local-guard.ts"() {
+    "use strict";
+    METADATA_HOSTS = /* @__PURE__ */ new Set(["metadata", "metadata.goog", "instance-data"]);
+    MAX_LOCAL_IMAGE_BYTES = 25 * 1024 * 1024;
+    IMAGE_SIGNATURES = [
+      {
+        mime: "image/png",
+        test: (b) => b.length >= 8 && b.readUInt32BE(0) === 2303741511 && b.readUInt32BE(4) === 218765834
+      },
+      {
+        mime: "image/jpeg",
+        test: (b) => b.length >= 3 && b[0] === 255 && b[1] === 216 && b[2] === 255
+      },
+      {
+        mime: "image/webp",
+        test: (b) => b.length >= 12 && b.toString("ascii", 0, 4) === "RIFF" && b.toString("ascii", 8, 12) === "WEBP"
+      }
+    ];
+  }
+});
+
 // node_modules/undici/lib/core/symbols.js
 var require_symbols = __commonJS({
   "node_modules/undici/lib/core/symbols.js"(exports, module) {
@@ -93571,8 +93887,8 @@ var init_textual_tool_calls = __esm({
 
 // src/response-store.ts
 import { appendFile as appendFile2, mkdir as mkdir5, readFile, readdir as readdir2 } from "fs/promises";
-import { homedir as homedir7 } from "os";
-import { join as join10 } from "path";
+import { homedir as homedir8 } from "os";
+import { join as join11 } from "path";
 import { randomBytes as randomBytes7 } from "crypto";
 function isEnabled() {
   const v = process.env.BLOCKRUN_RESPONSE_STORE;
@@ -93585,7 +93901,7 @@ async function ensureDir2() {
 }
 function dailyFile(date = /* @__PURE__ */ new Date()) {
   const iso = date.toISOString().slice(0, 10);
-  return join10(STORE_DIR, `responses-${iso}.jsonl`);
+  return join11(STORE_DIR, `responses-${iso}.jsonl`);
 }
 function genId() {
   return `resp_${Date.now()}_${randomBytes7(3).toString("hex")}`;
@@ -93635,7 +93951,7 @@ async function listRecent(limit = 20, daysBack = 7) {
       d.setUTCDate(d.getUTCDate() - i);
       const iso = d.toISOString().slice(0, 10);
       const name = `responses-${iso}.jsonl`;
-      if (files.includes(name)) candidateFiles.push(join10(STORE_DIR, name));
+      if (files.includes(name)) candidateFiles.push(join11(STORE_DIR, name));
     }
     const all3 = [];
     for (const f of candidateFiles) {
@@ -93664,7 +93980,7 @@ var STORE_DIR, dirReady2;
 var init_response_store = __esm({
   "src/response-store.ts"() {
     "use strict";
-    STORE_DIR = join10(homedir7(), ".openclaw", "blockrun", "responses");
+    STORE_DIR = join11(homedir8(), ".openclaw", "blockrun", "responses");
     dirReady2 = false;
   }
 });
@@ -95301,10 +95617,10 @@ import { createHmac } from "crypto";
 import { createServer } from "http";
 import { finished, Readable } from "stream";
 import { pipeline } from "stream/promises";
-import { homedir as homedir8 } from "os";
-import { join as join11 } from "path";
+import { homedir as homedir9 } from "os";
+import { join as join12 } from "path";
 import { mkdir as mkdir6, writeFile as writeFile4, readFile as readFile2, stat as fsStat } from "fs/promises";
-import { readFileSync as readFileSync2, existsSync as existsSync2 } from "fs";
+import { readFileSync as readFileSync2 } from "fs";
 async function loadGatewayCatalog(apiBase, apiKey) {
   try {
     const controller = new AbortController();
@@ -96198,22 +96514,6 @@ async function proxyPaidApiRequest(req, res, apiBase, payFetch, getActualPayment
   }).catch(() => {
   });
 }
-function readImageFileAsDataUri(filePath) {
-  const resolved = filePath.startsWith("~/") ? join11(homedir8(), filePath.slice(2)) : filePath;
-  if (!existsSync2(resolved)) {
-    throw new Error(`Image file not found: ${resolved}`);
-  }
-  const ext = resolved.split(".").pop()?.toLowerCase() ?? "png";
-  const mimeMap = {
-    png: "image/png",
-    jpg: "image/jpeg",
-    jpeg: "image/jpeg",
-    webp: "image/webp"
-  };
-  const mime = mimeMap[ext] ?? "image/png";
-  const data = readFileSync2(resolved);
-  return `data:${mime};base64,${data.toString("base64")}`;
-}
 async function uploadDataUriToHost(dataUri) {
   const match = dataUri.match(/^data:(image\/\w+);base64,(.+)$/);
   if (!match) throw new Error("Invalid data URI format");
@@ -96387,6 +96687,19 @@ async function startProxy(options) {
   }
   const account = walletKey ? privateKeyToAccount(walletKey) : void 0;
   const x402 = authMode === "wallet" ? new x402Client() : void 0;
+  x402?.onBeforePaymentCreation(async (context) => {
+    const spend = paymentStore.getStore()?.sessionSpend;
+    if (!spend?.isStrict) return;
+    const quote = parseQuotedAmountMicros(context.selectedRequirements);
+    if (quote === void 0) {
+      throw new CostCapError("ClawRouter cost cap: unreadable payment amount in the 402 quote");
+    }
+    if (!spend.coverPayment(quote)) {
+      throw new CostCapError(
+        `ClawRouter cost cap exceeded: signing $${microsToUsd(quote).toFixed(6)} would push this session past its maxCostPerRun limit`
+      );
+    }
+  });
   if (x402 && account) {
     const evmPublicClient = createPublicClient({ chain: base, transport: http() });
     const evmSigner = toClientEvmSigner(account, evmPublicClient);
@@ -96429,6 +96742,11 @@ async function startProxy(options) {
     if (store) store.amountUsd = amountUsd;
     console.log(`[ClawRouter] Payment signed on ${chain3} (${network}) \u2014 $${amountUsd.toFixed(6)}`);
   });
+  x402?.onAfterPaymentCreation(async (context) => {
+    const spend = paymentStore.getStore()?.sessionSpend;
+    const amount = parseQuotedAmountMicros(context.selectedRequirements);
+    if (spend && amount !== void 0) spend.recordSigned(amount);
+  });
   const payFetch = authMode === "api-key" ? withSpendPolicy(
     createApiKeyFetch(apiKey, fetch, apiBase),
     options.spendControl ?? getSharedSpendControl(),
@@ -96447,7 +96765,10 @@ async function startProxy(options) {
     // Only the wallet rail settles per call. The API-key rail is billed
     // server-side against account credit, so there is no per-request
     // settlement for an observer to report.
-    onPayment: options.onPayment
+    onPayment: options.onPayment,
+    // A 402 answer to a signed payment means the gateway declined it and
+    // nothing settled — take it back off the session's budget.
+    onPaymentDeclined: () => paymentStore.getStore()?.sessionSpend?.voidLastSigned()
   });
   let balanceMonitor;
   if (options._balanceMonitorOverride) {
@@ -96490,6 +96811,13 @@ async function startProxy(options) {
           console.error(`[ClawRouter] Request finished with error: ${err.message}`);
         }
       });
+      const untrusted = untrustedRequestReason(req);
+      if (untrusted) {
+        console.warn(`[ClawRouter] Refused request to ${req.url}: ${untrusted}`);
+        res.writeHead(403, { "Content-Type": "application/json" });
+        res.end(JSON.stringify({ error: "forbidden", details: untrusted }));
+        return;
+      }
       if (req.url === "/health" || req.url?.startsWith("/health?")) {
         const url2 = new URL(req.url, "http://localhost");
         const full = url2.searchParams.get("full") === "true";
@@ -96718,7 +97046,7 @@ async function startProxy(options) {
           res.end("Bad request");
           return;
         }
-        const filePath = join11(IMAGE_DIR, filename);
+        const filePath = join12(IMAGE_DIR, filename);
         try {
           const s3 = await fsStat(filePath);
           if (!s3.isFile()) throw new Error("not a file");
@@ -96749,7 +97077,7 @@ async function startProxy(options) {
           res.end("Bad request");
           return;
         }
-        const filePath = join11(AUDIO_DIR, filename);
+        const filePath = join12(AUDIO_DIR, filename);
         try {
           const s3 = await fsStat(filePath);
           if (!s3.isFile()) throw new Error("not a file");
@@ -96779,7 +97107,7 @@ async function startProxy(options) {
           res.end("Bad request");
           return;
         }
-        const filePath = join11(VIDEO_DIR, filename);
+        const filePath = join12(VIDEO_DIR, filename);
         try {
           const s3 = await fsStat(filePath);
           if (!s3.isFile()) throw new Error("not a file");
@@ -96921,7 +97249,7 @@ async function startProxy(options) {
                 const [, mimeType, b64] = dataUriMatch;
                 const ext = mimeType === "image/jpeg" ? "jpg" : mimeType.split("/")[1] ?? "png";
                 const filename = `${Date.now()}-${Math.random().toString(36).slice(2, 10)}.${ext}`;
-                await writeFile4(join11(IMAGE_DIR, filename), Buffer.from(b64, "base64"));
+                await writeFile4(join12(IMAGE_DIR, filename), Buffer.from(b64, "base64"));
                 img.url = `http://localhost:${port2}/images/${filename}`;
                 console.log(`[ClawRouter] Image saved \u2192 ${img.url}`);
               } else if (img.url?.startsWith("https://") || img.url?.startsWith("http://")) {
@@ -96932,7 +97260,7 @@ async function startProxy(options) {
                     const ext = contentType.includes("jpeg") || contentType.includes("jpg") ? "jpg" : contentType.includes("webp") ? "webp" : "png";
                     const filename = `${Date.now()}-${Math.random().toString(36).slice(2, 10)}.${ext}`;
                     const buf = Buffer.from(await imgResp.arrayBuffer());
-                    await writeFile4(join11(IMAGE_DIR, filename), buf);
+                    await writeFile4(join12(IMAGE_DIR, filename), buf);
                     img.url = `http://localhost:${port2}/images/${filename}`;
                     console.log(`[ClawRouter] Image downloaded & saved \u2192 ${img.url}`);
                   }
@@ -96995,7 +97323,10 @@ async function startProxy(options) {
             if (typeof val !== "string" || !val) continue;
             if (val.startsWith("data:")) {
             } else if (val.startsWith("https://") || val.startsWith("http://")) {
-              const imgResp = await fetch(val, { signal: clientAbort.signal });
+              const imgResp = await ssrfSafeFetch(val, {
+                signal: clientAbort.signal,
+                allowPrivate: process.env.CLAWROUTER_ALLOW_PRIVATE_FETCH === "1"
+              });
               if (!imgResp.ok)
                 throw new Error(`Failed to download ${field} from ${val}: HTTP ${imgResp.status}`);
               const contentType = imgResp.headers.get("content-type") ?? "image/png";
@@ -97005,7 +97336,7 @@ async function startProxy(options) {
                 `[ClawRouter] img2img: downloaded ${field} URL \u2192 data URI (${buf.length} bytes)`
               );
             } else {
-              parsed[field] = readImageFileAsDataUri(val);
+              parsed[field] = readLocalImageAsDataUri(val);
               console.log(`[ClawRouter] img2img: read ${field} file \u2192 data URI`);
             }
           }
@@ -97054,7 +97385,7 @@ async function startProxy(options) {
                 const [, mimeType, b64] = dataUriMatch;
                 const ext = mimeType === "image/jpeg" ? "jpg" : mimeType.split("/")[1] ?? "png";
                 const filename = `${Date.now()}-${Math.random().toString(36).slice(2, 10)}.${ext}`;
-                await writeFile4(join11(IMAGE_DIR, filename), Buffer.from(b64, "base64"));
+                await writeFile4(join12(IMAGE_DIR, filename), Buffer.from(b64, "base64"));
                 img.url = `http://localhost:${port2}/images/${filename}`;
                 console.log(`[ClawRouter] Image saved \u2192 ${img.url}`);
               } else if (img.url?.startsWith("https://") || img.url?.startsWith("http://")) {
@@ -97065,7 +97396,7 @@ async function startProxy(options) {
                     const ext = contentType.includes("jpeg") || contentType.includes("jpg") ? "jpg" : contentType.includes("webp") ? "webp" : "png";
                     const filename = `${Date.now()}-${Math.random().toString(36).slice(2, 10)}.${ext}`;
                     const buf = Buffer.from(await imgResp.arrayBuffer());
-                    await writeFile4(join11(IMAGE_DIR, filename), buf);
+                    await writeFile4(join12(IMAGE_DIR, filename), buf);
                     img.url = `http://localhost:${port2}/images/${filename}`;
                     console.log(`[ClawRouter] Image downloaded & saved \u2192 ${img.url}`);
                   }
@@ -97161,7 +97492,7 @@ async function startProxy(options) {
                     const ext = contentType.includes("wav") ? "wav" : "mp3";
                     const filename = `${Date.now()}-${Math.random().toString(36).slice(2, 10)}.${ext}`;
                     const buf = Buffer.from(await audioResp.arrayBuffer());
-                    await writeFile4(join11(AUDIO_DIR, filename), buf);
+                    await writeFile4(join12(AUDIO_DIR, filename), buf);
                     track.url = `http://localhost:${port2}/audio/${filename}`;
                     console.log(`[ClawRouter] Audio saved \u2192 ${track.url}`);
                   }
@@ -97328,7 +97659,7 @@ async function startProxy(options) {
                     const ext = contentType.includes("webm") ? "webm" : contentType.includes("quicktime") ? "mov" : "mp4";
                     const filename = `${Date.now()}-${Math.random().toString(36).slice(2, 10)}.${ext}`;
                     const buf = Buffer.from(await videoResp.arrayBuffer());
-                    await writeFile4(join11(VIDEO_DIR, filename), buf);
+                    await writeFile4(join12(VIDEO_DIR, filename), buf);
                     clip.url = `http://localhost:${port2}/videos/${filename}`;
                     console.log(`[ClawRouter] Video saved \u2192 ${clip.url}`);
                   }
@@ -97721,6 +98052,17 @@ async function tryModelRequest(upstreamUrl, method, headers, body, modelId, maxT
     return { success: true, response };
   } catch (err) {
     const errorMsg = err instanceof Error ? err.message : String(err);
+    if (err instanceof CostCapError) {
+      return {
+        success: false,
+        errorBody: JSON.stringify({
+          error: { message: errorMsg, type: "cost_cap_exceeded", code: "cost_cap_exceeded" }
+        }),
+        errorStatus: 429,
+        isProviderError: false,
+        errorCategory: "payment_error"
+      };
+    }
     if (err instanceof SpendPolicyError) {
       return {
         success: false,
@@ -98294,8 +98636,8 @@ async function proxyRequest(req, res, apiBase, payFetch, options, routerOpts, de
         let imageDataUri;
         let maskDataUri;
         try {
-          imageDataUri = readImageFileAsDataUri(imagePath);
-          if (maskPath) maskDataUri = readImageFileAsDataUri(maskPath);
+          imageDataUri = readLocalImageAsDataUri(imagePath);
+          if (maskPath) maskDataUri = readLocalImageAsDataUri(maskPath);
         } catch (fileErr) {
           const fileErrMsg = fileErr instanceof Error ? fileErr.message : String(fileErr);
           sendImg2ImgText(`Failed to read image file: ${fileErrMsg}`);
@@ -98800,14 +99142,23 @@ async function proxyRequest(req, res, apiBase, payFetch, options, routerOpts, de
       }
     }
   }
+  let sessionSpend;
   if (options.maxCostPerRunUsd && effectiveSessionId && !isFreeModel && (options.maxCostPerRunMode ?? "graceful") === "strict") {
-    const runCostUsd = sessionStore.getSessionCostUsd(effectiveSessionId);
     const thisReqEstStr = estimatedCostMicros !== void 0 ? estimatedCostMicros.toString() : modelId ? estimateAmount(modelId, body.length, maxTokens) : void 0;
-    const thisReqEstUsd = thisReqEstStr ? Number(thisReqEstStr) / 1e6 : 0;
-    const projectedCostUsd = runCostUsd + thisReqEstUsd;
-    if (projectedCostUsd > options.maxCostPerRunUsd) {
+    const admission = SessionSpend.admit(
+      sessionStore,
+      effectiveSessionId,
+      usdToMicros(options.maxCostPerRunUsd),
+      parseMicros(thisReqEstStr) ?? 0n
+    );
+    if (!admission.admitted) {
+      const spentUsd = microsToUsd(admission.spentMicros);
+      const heldUsd = microsToUsd(admission.heldMicros);
+      const estUsd = microsToUsd(admission.estimateMicros);
+      const projectedCostUsd = spentUsd + heldUsd + estUsd;
+      const breakdown = `spent $${spentUsd.toFixed(4)}${heldUsd > 0 ? ` + in flight $${heldUsd.toFixed(4)}` : ""} + est $${estUsd.toFixed(4)}`;
       console.log(
-        `[ClawRouter] Cost cap exceeded for session ${effectiveSessionId.slice(0, 8)}...: projected $${projectedCostUsd.toFixed(4)} (spent $${runCostUsd.toFixed(4)} + est $${thisReqEstUsd.toFixed(4)}) > $${options.maxCostPerRunUsd} limit`
+        `[ClawRouter] Cost cap exceeded for session ${effectiveSessionId.slice(0, 8)}...: projected $${projectedCostUsd.toFixed(4)} (${breakdown}) > $${options.maxCostPerRunUsd} limit`
       );
       res.writeHead(429, {
         "Content-Type": "application/json",
@@ -98816,7 +99167,7 @@ async function proxyRequest(req, res, apiBase, payFetch, options, routerOpts, de
       res.end(
         JSON.stringify({
           error: {
-            message: `ClawRouter cost cap exceeded: projected spend $${projectedCostUsd.toFixed(4)} (spent $${runCostUsd.toFixed(4)} + est $${thisReqEstUsd.toFixed(4)}) would exceed limit $${options.maxCostPerRunUsd}`,
+            message: `ClawRouter cost cap exceeded: projected spend $${projectedCostUsd.toFixed(4)} (${breakdown}) would exceed limit $${options.maxCostPerRunUsd}`,
             type: "cost_cap_exceeded",
             code: "cost_cap_exceeded"
           }
@@ -98825,7 +99176,12 @@ async function proxyRequest(req, res, apiBase, payFetch, options, routerOpts, de
       deduplicator.removeInflight(dedupKey);
       return;
     }
+    sessionSpend = admission.spend;
+  } else if (options.maxCostPerRunUsd && effectiveSessionId) {
+    sessionSpend = SessionSpend.track(sessionStore, effectiveSessionId);
   }
+  const requestStore = paymentStore.getStore();
+  if (requestStore) requestStore.sessionSpend = sessionSpend;
   if (options.maxCostPerRunUsd && effectiveSessionId && !isFreeModel && (options.maxCostPerRunMode ?? "graceful") === "graceful") {
     const runCostUsd = sessionStore.getSessionCostUsd(effectiveSessionId);
     const remainingUsd = options.maxCostPerRunUsd - runCostUsd;
@@ -99221,11 +99577,9 @@ data: [DONE]
         actualModelUsed = tryModel;
         recordOutcome(tryModel, requestKind, true);
         console.log(`[ClawRouter] Success with model: ${tryModel}`);
-        if (options.maxCostPerRunUsd && effectiveSessionId && !FREE_MODELS.has(tryModel)) {
-          const costEst = estimateAmount(tryModel, body.length, maxTokens);
-          if (costEst) {
-            sessionStore.addSessionCost(effectiveSessionId, BigInt(costEst));
-          }
+        if (sessionSpend && !FREE_MODELS.has(tryModel)) {
+          const costEst = parseMicros(estimateAmount(tryModel, body.length, maxTokens));
+          if (costEst !== void 0) sessionSpend.recordSuccess(costEst);
         }
         break;
       }
@@ -99299,11 +99653,9 @@ data: [DONE]
             upstream = retryResult.response;
             actualModelUsed = tryModel;
             console.log(`[ClawRouter] Explicit-pin retry succeeded for: ${tryModel}`);
-            if (options.maxCostPerRunUsd && effectiveSessionId && !FREE_MODELS.has(tryModel)) {
-              const costEst = estimateAmount(tryModel, body.length, maxTokens);
-              if (costEst) {
-                sessionStore.addSessionCost(effectiveSessionId, BigInt(costEst));
-              }
+            if (sessionSpend && !FREE_MODELS.has(tryModel)) {
+              const costEst = parseMicros(estimateAmount(tryModel, body.length, maxTokens));
+              if (costEst !== void 0) sessionSpend.recordSuccess(costEst);
             }
             break;
           }
@@ -99370,11 +99722,9 @@ data: [DONE]
                 upstream = retryResult.response;
                 actualModelUsed = tryModel;
                 console.log(`[ClawRouter] Rate-limit retry succeeded for: ${tryModel}`);
-                if (options.maxCostPerRunUsd && effectiveSessionId && !FREE_MODELS.has(tryModel)) {
-                  const costEst = estimateAmount(tryModel, body.length, maxTokens);
-                  if (costEst) {
-                    sessionStore.addSessionCost(effectiveSessionId, BigInt(costEst));
-                  }
+                if (sessionSpend && !FREE_MODELS.has(tryModel)) {
+                  const costEst = parseMicros(estimateAmount(tryModel, body.length, maxTokens));
+                  if (costEst !== void 0) sessionSpend.recordSuccess(costEst);
                 }
                 break;
               }
@@ -99468,6 +99818,7 @@ data: [DONE]
       );
       const rawErrBody = lastError?.body || structuredMessage;
       const errStatus = lastError?.status || 502;
+      const costCapRefusal = errStatus === 429 && rawErrBody.includes('"cost_cap_exceeded"');
       const transformedErr = transformPaymentError(rawErrBody);
       requestHadError = true;
       if (headersSentEarly) {
@@ -99504,7 +99855,8 @@ data: [DONE]
           "Content-Type": "application/json",
           "x-context-used-kb": String(originalContextSizeKB),
           "x-context-limit-kb": String(CONTEXT_LIMIT_KB),
-          ...lastError?.requestId ? { "x-blockrun-request-id": lastError.requestId } : {}
+          ...lastError?.requestId ? { "x-blockrun-request-id": lastError.requestId } : {},
+          ...costCapRefusal ? { "X-ClawRouter-Cost-Cap-Exceeded": "1" } : {}
         });
         res.end(transformedErr);
         deduplicator.complete(dedupKey, {
@@ -99938,6 +100290,8 @@ data: [DONE]
       throw new Error(`Request timed out after ${timeoutMs}ms`, { cause: err });
     }
     throw err;
+  } finally {
+    sessionSpend?.release();
   }
   const logModel = routingDecision?.model ?? modelId;
   if (logModel) {
@@ -100024,6 +100378,7 @@ var init_proxy = __esm({
     init_auth();
     init_api_key();
     init_spend_control();
+    init_session_spend();
     init_compression();
     init_errors5();
     init_version4();
@@ -100033,6 +100388,7 @@ var init_proxy = __esm({
     init_outcome_memory();
     init_config();
     init_journal();
+    init_local_guard();
     init_upstream_proxy();
     init_textual_tool_calls();
     init_response_store();
@@ -100041,10 +100397,10 @@ var init_proxy = __esm({
     paymentStore = new AsyncLocalStorage();
     BLOCKRUN_API = "https://blockrun.ai/api";
     BLOCKRUN_SOLANA_API = "https://sol.blockrun.ai/api";
-    DESKTOP_SERVICE_TOKEN_FILE = process.env.CLAWROUTER_DESKTOP_TOKEN_FILE ?? join11(homedir8(), ".clawrouter-desktop", "service-token");
-    IMAGE_DIR = join11(homedir8(), ".openclaw", "blockrun", "images");
-    AUDIO_DIR = join11(homedir8(), ".openclaw", "blockrun", "audio");
-    VIDEO_DIR = join11(homedir8(), ".openclaw", "blockrun", "videos");
+    DESKTOP_SERVICE_TOKEN_FILE = process.env.CLAWROUTER_DESKTOP_TOKEN_FILE ?? join12(homedir9(), ".clawrouter-desktop", "service-token");
+    IMAGE_DIR = join12(homedir9(), ".openclaw", "blockrun", "images");
+    AUDIO_DIR = join12(homedir9(), ".openclaw", "blockrun", "audio");
+    VIDEO_DIR = join12(homedir9(), ".openclaw", "blockrun", "videos");
     AUTO_MODEL = "blockrun/auto";
     ROUTING_PROFILES = /* @__PURE__ */ new Set([
       "blockrun/eco",
@@ -101154,7 +101510,13 @@ function buildTool(service, proxyBaseUrl) {
       if (service.proxyPath === "/pm/__dynamic__") {
         const rawPath = typeof params.path === "string" ? params.path : "";
         const normalized = rawPath.startsWith("/") ? rawPath : `/${rawPath}`;
-        if (!normalized.startsWith("/pm/") || normalized.includes("..")) {
+        let resolved;
+        try {
+          resolved = new URL(`/v1${normalized}`, "http://x").pathname;
+        } catch {
+          resolved = "";
+        }
+        if (!normalized.startsWith("/pm/") || normalized.includes("..") || /%2e|%2f|%5c|\\/i.test(normalized) || !resolved.startsWith("/v1/pm/")) {
           throw new Error(
             `predexon_endpoint_call: invalid path '${rawPath}' \u2014 must begin with '/pm/' and contain no '..'`
           );
@@ -101493,8 +101855,8 @@ __export(reconcile_exports, {
   reconcile: () => reconcile
 });
 import { readFile as readFile3, readdir as readdir3 } from "fs/promises";
-import { join as join12 } from "path";
-import { homedir as homedir9 } from "os";
+import { join as join13 } from "path";
+import { homedir as homedir10 } from "os";
 async function loadLocalRows(since) {
   let files;
   try {
@@ -101507,7 +101869,7 @@ async function loadLocalRows(since) {
   for (const file of files) {
     let text;
     try {
-      text = await readFile3(join12(LOG_DIR3, file), "utf8");
+      text = await readFile3(join13(LOG_DIR3, file), "utf8");
     } catch {
       continue;
     }
@@ -101665,7 +102027,7 @@ var init_reconcile = __esm({
   "src/reconcile.ts"() {
     "use strict";
     init_api_key();
-    LOG_DIR3 = join12(homedir9(), ".openclaw", "blockrun", "logs");
+    LOG_DIR3 = join13(homedir10(), ".openclaw", "blockrun", "logs");
     CENT_EPSILON = 1e-9;
     usd = (n) => Math.abs(n) < 0.01 ? `$${n.toFixed(6)}` : `$${n.toFixed(2)}`;
   }
@@ -122657,8 +123019,8 @@ var init_constants3 = __esm({
 
 // src/polymarket/wallet-adapter.ts
 import fs2 from "fs";
-import { homedir as homedir10 } from "os";
-import { join as join13 } from "path";
+import { homedir as homedir11 } from "os";
+import { join as join14 } from "path";
 function getOrCreateWalletKey() {
   const envKey = process.env.BLOCKRUN_WALLET_KEY?.trim();
   if (envKey && /^0x[0-9a-fA-F]{64}$/.test(envKey)) return envKey;
@@ -122706,7 +123068,7 @@ var init_wallet_adapter = __esm({
     init_esm();
     init_chains();
     init_constants3();
-    WALLET_FILE2 = join13(homedir10(), ".openclaw", "blockrun", "wallet.key");
+    WALLET_FILE2 = join14(homedir11(), ".openclaw", "blockrun", "wallet.key");
     BASE_RPC_URLS = [
       "https://mainnet.base.org",
       "https://base.llamarpc.com",
@@ -123110,7 +123472,7 @@ var init_client5 = __esm({
 function resolveSpendControl(deps) {
   return deps?.spendControl ?? getSharedSpendControl();
 }
-function usdToMicros(usd2) {
+function usdToMicros2(usd2) {
   return String(Math.ceil(usd2 * 1e6));
 }
 async function signUnderSpendPolicy(deps, quote, action, sign4) {
@@ -123376,7 +123738,7 @@ Re-call with confirm:true to sign and submit.`,
         payTo: negRisk ? NEG_RISK_CTF_EXCHANGE_V2 : CTF_EXCHANGE_V2,
         network: `eip155:${POLYGON_CHAIN_ID}`,
         asset: PUSD_COLLATERAL,
-        amount: usdToMicros(notional)
+        amount: usdToMicros2(notional)
       };
       let r2;
       try {
@@ -233099,7 +233461,7 @@ __export(index_exports, {
 });
 import {
   writeFileSync as writeFileSync3,
-  existsSync as existsSync4,
+  existsSync as existsSync3,
   readdirSync,
   mkdirSync as mkdirSync3,
   copyFileSync,
@@ -233108,9 +233470,9 @@ import {
   unlinkSync
 } from "fs";
 import { readFile as readFileAsync } from "fs/promises";
-import { homedir as homedir15 } from "os";
+import { homedir as homedir16 } from "os";
 import { randomUUID } from "crypto";
-import { join as join18 } from "path";
+import { join as join19 } from "path";
 async function waitForProxyHealth(port, timeoutMs = 3e3) {
   const start = Date.now();
   while (Date.now() - start < timeoutMs) {
@@ -233130,12 +233492,12 @@ function writePrivateJsonSync(path5, value) {
     renameSync2(temporary, path5);
     chmodSync(path5, 384);
   } finally {
-    if (existsSync4(temporary)) unlinkSync(temporary);
+    if (existsSync3(temporary)) unlinkSync(temporary);
   }
 }
 function hasConfiguredWallet() {
   return Boolean(
-    process["env"].BLOCKRUN_WALLET_KEY || existsSync4(CORE_WALLET_FILE) || existsSync4(WALLET_FILE)
+    process["env"].BLOCKRUN_WALLET_KEY || existsSync3(CORE_WALLET_FILE) || existsSync3(WALLET_FILE)
   );
 }
 function isCompletionMode() {
@@ -233153,11 +233515,11 @@ function isBlockrunWebSearchDisabled(config) {
 }
 function legacyPackageIsBlockRun() {
   for (const dir of [
-    join18(homedir15(), ".openclaw", "extensions", "clawrouter"),
-    join18(homedir15(), ".openclaw", "npm", "node_modules", "@blockrun", "clawrouter")
+    join19(homedir16(), ".openclaw", "extensions", "clawrouter"),
+    join19(homedir16(), ".openclaw", "npm", "node_modules", "@blockrun", "clawrouter")
   ]) {
     try {
-      const metadata = JSON.parse(readTextFileSync(join18(dir, "package.json")));
+      const metadata = JSON.parse(readTextFileSync(join19(dir, "package.json")));
       if (metadata.name === "@blockrun/clawrouter") return true;
     } catch {
     }
@@ -233165,11 +233527,11 @@ function legacyPackageIsBlockRun() {
   return false;
 }
 function injectModelsConfig(logger48, options = {}) {
-  const configDir = join18(homedir15(), ".openclaw");
-  const configPath = join18(configDir, "openclaw.json");
+  const configDir = join19(homedir16(), ".openclaw");
+  const configPath = join19(configDir, "openclaw.json");
   let config = {};
   let needsWrite = false;
-  if (!existsSync4(configDir)) {
+  if (!existsSync3(configDir)) {
     try {
       mkdirSync3(configDir, { recursive: true });
       logger48.info("Created OpenClaw config directory");
@@ -233180,7 +233542,7 @@ function injectModelsConfig(logger48, options = {}) {
       return;
     }
   }
-  if (existsSync4(configPath)) {
+  if (existsSync3(configPath)) {
     try {
       const content = readTextFileSync(configPath).trim();
       if (content) {
@@ -233387,8 +233749,8 @@ function injectModelsConfig(logger48, options = {}) {
 }
 function syncAgentModelCache(logger48, options = {}) {
   if (!isGatewayMode() && !options.forceWrite) return;
-  const agentsDir = join18(homedir15(), ".openclaw", "agents");
-  if (!existsSync4(agentsDir)) return;
+  const agentsDir = join19(homedir16(), ".openclaw", "agents");
+  if (!existsSync3(agentsDir)) return;
   let agentDirs;
   try {
     agentDirs = readdirSync(agentsDir);
@@ -233397,8 +233759,8 @@ function syncAgentModelCache(logger48, options = {}) {
   }
   const expectedIds = VISIBLE_OPENCLAW_MODELS.map((m) => m.id);
   for (const agent of agentDirs) {
-    const cachePath = join18(agentsDir, agent, "agent", "models.json");
-    if (!existsSync4(cachePath)) continue;
+    const cachePath = join19(agentsDir, agent, "agent", "models.json");
+    if (!existsSync3(cachePath)) continue;
     try {
       const raw = readTextFileSync(cachePath).trim();
       if (!raw) continue;
@@ -233426,8 +233788,8 @@ function syncAgentModelCache(logger48, options = {}) {
   }
 }
 function injectAuthProfile(logger48) {
-  const agentsDir = join18(homedir15(), ".openclaw", "agents");
-  if (!existsSync4(agentsDir)) {
+  const agentsDir = join19(homedir16(), ".openclaw", "agents");
+  if (!existsSync3(agentsDir)) {
     try {
       mkdirSync3(agentsDir, { recursive: true });
     } catch (err) {
@@ -233443,10 +233805,10 @@ function injectAuthProfile(logger48) {
       agents = ["main", ...agents];
     }
     for (const agentId of agents) {
-      const authDir = join18(agentsDir, agentId, "agent");
-      const authPath = join18(authDir, "auth-profiles.json");
-      const sqlitePath = join18(authDir, "openclaw-agent.sqlite");
-      if (existsSync4(sqlitePath)) {
+      const authDir = join19(agentsDir, agentId, "agent");
+      const authPath = join19(authDir, "auth-profiles.json");
+      const sqlitePath = join19(authDir, "openclaw-agent.sqlite");
+      if (existsSync3(sqlitePath)) {
         removeInjectedAuthPlaceholder(authPath, logger48, agentId);
         continue;
       }
@@ -233454,7 +233816,7 @@ function injectAuthProfile(logger48) {
         removeInjectedAuthPlaceholder(authPath, logger48, agentId);
         continue;
       }
-      if (!existsSync4(authDir)) {
+      if (!existsSync3(authDir)) {
         try {
           mkdirSync3(authDir, { recursive: true });
         } catch {
@@ -233465,7 +233827,7 @@ function injectAuthProfile(logger48) {
         version: 1,
         profiles: {}
       };
-      if (existsSync4(authPath)) {
+      if (existsSync3(authPath)) {
         try {
           const existing = JSON.parse(readTextFileSync(authPath));
           if (existing.version && existing.profiles) {
@@ -233498,7 +233860,7 @@ function injectAuthProfile(logger48) {
 }
 function removeInjectedAuthPlaceholder(authPath, logger48, agentId) {
   try {
-    if (!existsSync4(authPath)) return;
+    if (!existsSync3(authPath)) return;
     const parsed = JSON.parse(readTextFileSync(authPath));
     const profiles = parsed?.profiles;
     if (!profiles || typeof profiles !== "object" || Array.isArray(profiles)) return;
@@ -233953,7 +234315,7 @@ function buildImageGenerationProvider() {
         (result.data ?? []).map(async (img) => {
           const filename = img.url?.split("/images/").pop();
           if (!filename) throw new Error(`Unexpected image URL format: ${img.url}`);
-          const filePath = join18(IMAGE_DIR2, filename);
+          const filePath = join19(IMAGE_DIR2, filename);
           const buffer2 = await readFileAsync(filePath);
           const ext = filename.split(".").pop()?.toLowerCase() ?? "png";
           const mimeType = ext === "jpg" || ext === "jpeg" ? "image/jpeg" : ext === "webp" ? "image/webp" : "image/png";
@@ -234005,7 +234367,7 @@ function buildMusicGenerationProvider() {
         (result.data ?? []).map(async (track) => {
           const filename = track.url?.split("/audio/").pop();
           if (!filename) throw new Error(`Unexpected audio URL format: ${track.url}`);
-          const filePath = join18(AUDIO_DIR2, filename);
+          const filePath = join19(AUDIO_DIR2, filename);
           const buffer2 = await readFileAsync(filePath);
           const ext = filename.split(".").pop()?.toLowerCase() ?? "mp3";
           const mimeType = ext === "wav" ? "audio/wav" : "audio/mpeg";
@@ -234081,7 +234443,7 @@ function buildVideoGenerationProvider() {
         (result.data ?? []).map(async (clip) => {
           const filename = clip.url?.split("/videos/").pop();
           if (!filename) throw new Error(`Unexpected video URL format: ${clip.url}`);
-          const filePath = join18(VIDEO_DIR2, filename);
+          const filePath = join19(VIDEO_DIR2, filename);
           const buffer2 = await readFileAsync(filePath);
           const ext = filename.split(".").pop()?.toLowerCase() ?? "mp4";
           const mimeType = ext === "webm" ? "video/webm" : ext === "mov" ? "video/quicktime" : "video/mp4";
@@ -234182,7 +234544,7 @@ function createWalletCommand(api) {
         ];
         let hasMnemonic3 = false;
         try {
-          if (existsSync4(MNEMONIC_FILE)) {
+          if (existsSync3(MNEMONIC_FILE)) {
             const mnemonic = readTextFileSync(MNEMONIC_FILE).trim();
             if (mnemonic) {
               hasMnemonic3 = true;
@@ -234253,7 +234615,7 @@ function createWalletCommand(api) {
               ].join("\n")
             };
           }
-          if (existsSync4(MNEMONIC_FILE)) {
+          if (existsSync3(MNEMONIC_FILE)) {
             const existingMnemonic = readTextFileSync(MNEMONIC_FILE).trim();
             if (existingMnemonic) {
               await savePaymentChain("solana");
@@ -234446,9 +234808,9 @@ var init_index = __esm({
     init_partners();
     activeProxyHandle = null;
     pendingConfiguredStartupApi = null;
-    IMAGE_DIR2 = join18(homedir15(), ".openclaw", "blockrun", "images");
-    AUDIO_DIR2 = join18(homedir15(), ".openclaw", "blockrun", "audio");
-    VIDEO_DIR2 = join18(homedir15(), ".openclaw", "blockrun", "videos");
+    IMAGE_DIR2 = join19(homedir16(), ".openclaw", "blockrun", "images");
+    AUDIO_DIR2 = join19(homedir16(), ".openclaw", "blockrun", "audio");
+    VIDEO_DIR2 = join19(homedir16(), ".openclaw", "blockrun", "videos");
     plugin = {
       // NOT "clawrouter". OpenClaw bundles its own plugin under that id since the
       // 2026.7.1 line (vendored at dist/extensions/clawrouter, provider `clawrouter/*`,
@@ -234588,7 +234950,8 @@ var init_index = __esm({
           name: "cr-imagegen",
           description: "Generate an image (BlockRun image models, paid via wallet)",
           acceptsArgs: true,
-          requireAuth: false,
+          // Paid from the wallet: only authorized senders.
+          requireAuth: true,
           handler: async (ctx) => {
             const parsed = parseGenArgs(ctx.args ?? "");
             if (!parsed.prompt) {
@@ -234640,7 +235003,8 @@ ${errText}`
           name: "videogen",
           description: "Generate a short video (Grok Imagine / Seedance, paid via wallet)",
           acceptsArgs: true,
-          requireAuth: false,
+          // Paid from the wallet: only authorized senders.
+          requireAuth: true,
           handler: async (ctx) => {
             const parsed = parseGenArgs(ctx.args ?? "");
             if (!parsed.prompt) {
@@ -234689,7 +235053,8 @@ ${errText}`
           name: "cr-call",
           description: "Place an AI voice call via BlockRun + Bland.ai (paid from wallet, $0.54/call)",
           acceptsArgs: true,
-          requireAuth: false,
+          // Paid from the wallet: only authorized senders.
+          requireAuth: true,
           handler: async (ctx) => {
             const parsed = parseCallArgs(ctx.args ?? "");
             if (!parsed.to || !parsed.task) {
@@ -234886,8 +235251,8 @@ ${errText}`
         }
         resetProxyStartupState();
         try {
-          const configPath = join18(homedir15(), ".openclaw", "openclaw.json");
-          if (existsSync4(configPath)) {
+          const configPath = join19(homedir16(), ".openclaw", "openclaw.json");
+          if (existsSync3(configPath)) {
             const config = JSON.parse(readTextFileSync(configPath));
             if (config.models?.providers?.blockrun) {
               delete config.models.providers.blockrun;
@@ -234928,12 +235293,12 @@ ${errText}`
           api.logger.warn(`Config cleanup failed: ${err instanceof Error ? err.message : String(err)}`);
         }
         try {
-          const agentsDir = join18(homedir15(), ".openclaw", "agents");
-          if (existsSync4(agentsDir)) {
+          const agentsDir = join19(homedir16(), ".openclaw", "agents");
+          if (existsSync3(agentsDir)) {
             for (const entry of readdirSync(agentsDir, { withFileTypes: true })) {
               if (!entry.isDirectory()) continue;
-              const authPath = join18(agentsDir, entry.name, "agent", "auth-profiles.json");
-              if (!existsSync4(authPath)) continue;
+              const authPath = join19(agentsDir, entry.name, "agent", "auth-profiles.json");
+              if (!existsSync3(authPath)) continue;
               try {
                 const store = JSON.parse(readTextFileSync(authPath));
                 if (store.profiles?.["blockrun:default"]) {
@@ -235018,7 +235383,7 @@ init_proxy();
 init_spend_control();
 init_version4();
 import { platform, arch, freemem, totalmem } from "os";
-import { existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
+import { existsSync as existsSync2, readFileSync as readFileSync3 } from "fs";
 function formatBytes(bytes) {
   const gb = bytes / (1024 * 1024 * 1024);
   return `${gb.toFixed(1)}GB`;
@@ -235388,7 +235753,7 @@ async function analyzeWithAI(diagnostics, userQuestion, model = "sonnet") {
     const paymentChain = diagnostics.wallet.paymentChain;
     if (paymentChain === "solana") {
       try {
-        if (!existsSync3(MNEMONIC_FILE)) {
+        if (!existsSync2(MNEMONIC_FILE)) {
           throw new Error(`mnemonic file missing at ${MNEMONIC_FILE}`);
         }
         const mnemonic = readFileSync3(MNEMONIC_FILE, "utf8").trim();
@@ -236037,7 +236402,7 @@ async function cmdSetup() {
   const {
     copyFileSync: copyFileSync2,
     cpSync,
-    existsSync: existsSync5,
+    existsSync: existsSync4,
     mkdirSync: mkdirSync4,
     readFileSync: readFileSync4,
     readdirSync: readdirSync2,
@@ -236046,8 +236411,8 @@ async function cmdSetup() {
     unlinkSync: unlinkSync2,
     writeFileSync: writeFileSync4
   } = await import("fs");
-  const { dirname: dirname5, join: join19 } = await import("path");
-  const { homedir: homedir16 } = await import("os");
+  const { dirname: dirname5, join: join20 } = await import("path");
+  const { homedir: homedir17 } = await import("os");
   const { injectModelsConfig: injectModelsConfig2, injectAuthProfile: injectAuthProfile2, syncAgentModelCache: syncAgentModelCache2, VISIBLE_OPENCLAW_MODELS: VISIBLE_OPENCLAW_MODELS2 } = await Promise.resolve().then(() => (init_index(), index_exports));
   const { BLOCKRUN_PLUGIN_ID: BLOCKRUN_PLUGIN_ID2, prepareBlockRunPluginConfig: prepareBlockRunPluginConfig2 } = await Promise.resolve().then(() => (init_openclaw_plugin_config(), openclaw_plugin_config_exports));
   console.log("\u{1F99E} ClawRouter setup\n");
@@ -236062,22 +236427,22 @@ async function cmdSetup() {
     } catch {
     }
     if (process.env.npm_config_prefix) {
-      candidates.push(join19(process.env.npm_config_prefix, "bin", "openclaw"));
+      candidates.push(join20(process.env.npm_config_prefix, "bin", "openclaw"));
     }
     try {
       const npmRoot = execSync("npm root -g", {
         encoding: "utf8",
         stdio: ["ignore", "pipe", "ignore"]
       }).trim();
-      if (npmRoot) candidates.push(join19(dirname5(dirname5(npmRoot)), "bin", "openclaw"));
+      if (npmRoot) candidates.push(join20(dirname5(dirname5(npmRoot)), "bin", "openclaw"));
     } catch {
     }
     candidates.push(
-      join19(homedir16(), ".npm-global", "bin", "openclaw"),
-      join19(homedir16(), ".local", "bin", "openclaw"),
+      join20(homedir17(), ".npm-global", "bin", "openclaw"),
+      join20(homedir17(), ".local", "bin", "openclaw"),
       "/usr/local/bin/openclaw"
     );
-    return candidates.find((candidate) => existsSync5(candidate)) ?? "";
+    return candidates.find((candidate) => existsSync4(candidate)) ?? "";
   })();
   if (!openclawPath) {
     console.error("  \u2717 openclaw not found on PATH");
@@ -236086,31 +236451,31 @@ async function cmdSetup() {
     process.exit(1);
   }
   console.log(`  \u2713 Found openclaw at ${openclawPath}`);
-  const configPath = join19(homedir16(), ".openclaw", "openclaw.json");
-  const configInitiallyExisted = existsSync5(configPath);
+  const configPath = join20(homedir17(), ".openclaw", "openclaw.json");
+  const configInitiallyExisted = existsSync4(configPath);
   const configRollbackBackup = configInitiallyExisted ? `${configPath}.before-${BLOCKRUN_PLUGIN_ID2}.${Date.now()}` : void 0;
   if (configRollbackBackup) copyFileSync2(configPath, configRollbackBackup);
   const ensureConfigRollbackBackup = () => {
     return configRollbackBackup;
   };
   let installAttempted = false;
-  const openclawRoot = join19(homedir16(), ".openclaw");
+  const openclawRoot = join20(homedir17(), ".openclaw");
   const findManagedBlockRunInstalls = () => {
     const candidates = [
-      join19(openclawRoot, "extensions", BLOCKRUN_PLUGIN_ID2),
-      join19(openclawRoot, "extensions", "clawrouter"),
-      join19(openclawRoot, "npm", "node_modules", "@blockrun", "clawrouter")
+      join20(openclawRoot, "extensions", BLOCKRUN_PLUGIN_ID2),
+      join20(openclawRoot, "extensions", "clawrouter"),
+      join20(openclawRoot, "npm", "node_modules", "@blockrun", "clawrouter")
     ];
-    const projectsDir = join19(openclawRoot, "npm", "projects");
+    const projectsDir = join20(openclawRoot, "npm", "projects");
     try {
       for (const project of readdirSync2(projectsDir)) {
-        candidates.push(join19(projectsDir, project, "node_modules", "@blockrun", "clawrouter"));
+        candidates.push(join20(projectsDir, project, "node_modules", "@blockrun", "clawrouter"));
       }
     } catch {
     }
     return [...new Set(candidates)].filter((candidate) => {
       try {
-        const metadata = JSON.parse(readFileSync4(join19(candidate, "package.json"), "utf8"));
+        const metadata = JSON.parse(readFileSync4(join20(candidate, "package.json"), "utf8"));
         return metadata.name === "@blockrun/clawrouter";
       } catch {
         return false;
@@ -236118,7 +236483,7 @@ async function cmdSetup() {
     });
   };
   const initialPluginDirs = findManagedBlockRunInstalls();
-  const setupRollbackRoot = join19(
+  const setupRollbackRoot = join20(
     openclawRoot,
     "blockrun",
     "setup-rollbacks",
@@ -236128,16 +236493,16 @@ async function cmdSetup() {
   if (initialPluginDirs.length > 0) {
     mkdirSync4(setupRollbackRoot, { recursive: true, mode: 448 });
     for (const [index2, pluginDir] of initialPluginDirs.entries()) {
-      const backup = join19(setupRollbackRoot, String(index2));
+      const backup = join20(setupRollbackRoot, String(index2));
       cpSync(pluginDir, backup, { recursive: true });
       pluginRollbackBackups.set(pluginDir, backup);
     }
   }
   const restoreSetupConfig = () => {
-    if (configRollbackBackup && existsSync5(configRollbackBackup)) {
+    if (configRollbackBackup && existsSync4(configRollbackBackup)) {
       copyFileSync2(configRollbackBackup, configPath);
       console.error(`  \u2713 Restored original OpenClaw config from ${configRollbackBackup}`);
-    } else if (!configInitiallyExisted && existsSync5(configPath)) {
+    } else if (!configInitiallyExisted && existsSync4(configPath)) {
       rmSync(configPath);
       console.error("  \u2713 Removed the partially created OpenClaw config");
     }
@@ -236159,7 +236524,7 @@ async function cmdSetup() {
         }
       }
       for (const [pluginDir, backup] of pluginRollbackBackups) {
-        if (!existsSync5(backup)) continue;
+        if (!existsSync4(backup)) continue;
         rmSync(pluginDir, { recursive: true, force: true });
         mkdirSync4(dirname5(pluginDir), { recursive: true });
         cpSync(backup, pluginDir, { recursive: true });
@@ -236170,17 +236535,17 @@ async function cmdSetup() {
   };
   let legacyBlockRunInstall = false;
   let stagedLegacyEntry;
-  if (existsSync5(configPath)) {
+  if (existsSync4(configPath)) {
     try {
       const config = JSON.parse(readFileSync4(configPath, "utf8"));
-      const legacyPackagePath = join19(
-        homedir16(),
+      const legacyPackagePath = join20(
+        homedir17(),
         ".openclaw",
         "extensions",
         "clawrouter",
         "package.json"
       );
-      if (existsSync5(legacyPackagePath)) {
+      if (existsSync4(legacyPackagePath)) {
         try {
           const legacyPackage = JSON.parse(readFileSync4(legacyPackagePath, "utf8"));
           legacyBlockRunInstall = legacyPackage.name === "@blockrun/clawrouter";
@@ -236261,7 +236626,7 @@ async function cmdSetup() {
     );
     process.exit(1);
   }
-  if (existsSync5(configPath)) {
+  if (existsSync4(configPath)) {
     try {
       const config = JSON.parse(readFileSync4(configPath, "utf8"));
       if (stagedLegacyEntry) {
@@ -236303,7 +236668,7 @@ async function cmdSetup() {
     info: (msg) => console.log(`  ${msg}`)
   };
   try {
-    if (existsSync5(configPath)) ensureConfigRollbackBackup();
+    if (existsSync4(configPath)) ensureConfigRollbackBackup();
     injectModelsConfig2(setupLogger, { forceWrite: true });
     syncAgentModelCache2(setupLogger, { forceWrite: true });
     injectAuthProfile2(setupLogger);
@@ -236314,7 +236679,7 @@ async function cmdSetup() {
   }
   console.log("\n\u2713 Setup complete.");
   rmSync(setupRollbackRoot, { recursive: true, force: true });
-  if (configRollbackBackup && existsSync5(configRollbackBackup)) {
+  if (configRollbackBackup && existsSync4(configRollbackBackup)) {
     unlinkSync2(configRollbackBackup);
   }
   console.log("\nNext: restart the gateway to load ClawRouter:");