@blockrun/mcp 0.14.4 → 0.15.1

package/README.md

@@ -129,7 +129,7 @@ Run `blockrun_wallet` to see your address. Send USDC on Base.
 | Coinbase | Send → USDC → Base network → paste address |
 | Bridge from Ethereum | [bridge.base.org](https://bridge.base.org) |
 
-$5 covers ~5,000 market queries, ~500 Exa searches, ~250 image generations, or ~20 Seedance 1.5-pro clips (5s, ~$0.23 each).
+$5 covers ~5,000 market queries, ~500 Exa searches, ~250 image generations, or ~10 Seedance 1.5-pro clips (5s @ 720p+audio, ~$0.46 each).
 
 ---
 
@@ -139,7 +139,8 @@ $5 covers ~5,000 market queries, ~500 Exa searches, ~250 image generations, or ~
 |------|-------------|------|
 | `blockrun_chat` | 55+ LLMs (GPT, Claude, Gemini, DeepSeek, Kimi K2.6, GLM, NVIDIA free tier, ...) with `mode` tier routing | per token |
 | `blockrun_image` | DALL-E 3, GPT Image 1/2, Grok Imagine, Flux, CogView-4, Nano Banana — generation + editing | $0.015–0.12 |
-| `blockrun_video` | xAI Grok Imagine Video + ByteDance Seedance 1.5/2.0/2.0-fast | $0.046–0.149/sec |
+| `blockrun_video` | xAI Grok Imagine Video + ByteDance Seedance 1.5/2.0/2.0-fast (720p + audio defaults); RealFace asset → real-person video | $0.05–0.298/sec |
+| `blockrun_realface` | Enroll a real person (phone liveness → `ta_xxxx` asset) for Seedance 2.0 real-person video | free; $0.01 to enroll |
 | `blockrun_music` | MiniMax music generation | per track |
 | `blockrun_price` | Pyth-backed realtime + OHLC — crypto / FX / commodity (free), 12 stock markets (paid) | free or $0.001/call |
 | `blockrun_markets` | Polymarket (markets, candles, trades, orderbooks, leaderboards, smart-wallet PnL/clusters, UMA oracle), Kalshi, Limitless, Opinion, Predict.Fun, dFlow, Binance Futures, cross-platform match + search | $0.001–0.005/query |

package/dist/index.js

@@ -170,6 +170,7 @@ import { z } from "zod";
 import QRCode from "qrcode";
 import open from "open";
 import * as fs2 from "fs";
+import * as path3 from "path";
 import sharp from "sharp";
 
 // src/utils/constants.ts
@@ -241,6 +242,20 @@ async function generateQrPng(address, chain = "base") {
   fs2.writeFileSync(QR_FILE, finalBuf);
   return QR_FILE;
 }
+async function generateUrlQrPng(url, fileName = "realface-qr.png") {
+  if (!fs2.existsSync(WALLET_DIR)) {
+    fs2.mkdirSync(WALLET_DIR, { recursive: true, mode: 448 });
+  }
+  const outPath = path3.join(WALLET_DIR, fileName);
+  await QRCode.toFile(outPath, url, {
+    type: "png",
+    width: 400,
+    margin: 2,
+    errorCorrectionLevel: "H",
+    color: { dark: "#000000", light: "#FFFFFF" }
+  });
+  return outPath;
+}
 async function openQrInViewer(qrPath) {
   try {
     await open(qrPath);
@@ -1099,10 +1114,18 @@ var TOTAL_BUDGET_MS = 3e5;
 var POLL_INTERVAL_MS = 5e3;
 var VIDEO_PRICE_PER_SECOND = {
   "xai/grok-imagine-video": 0.05,
-  "bytedance/seedance-1.5-pro": 0.046,
-  "bytedance/seedance-2.0-fast": 0.119,
-  "bytedance/seedance-2.0": 0.149
+  "bytedance/seedance-1.5-pro": 0.092,
+  "bytedance/seedance-2.0-fast": 0.238,
+  "bytedance/seedance-2.0": 0.298
+};
+var VIDEO_PRICE_PER_SECOND_IMAGE = {
+  "bytedance/seedance-2.0-fast": 0.14,
+  "bytedance/seedance-2.0": 0.183
 };
+var REALFACE_MODELS = /* @__PURE__ */ new Set([
+  "bytedance/seedance-2.0",
+  "bytedance/seedance-2.0-fast"
+]);
 var VIDEO_DEFAULT_DURATION = {
   "xai/grok-imagine-video": 8,
   "bytedance/seedance-1.5-pro": 5,
@@ -1117,22 +1140,25 @@ function registerVideoTool(server, budget) {
 
 Turns a text prompt (and optional seed image) into a short MP4 clip. The tool submits the job, then polls until the video is ready (typical total wall-time 60-180s; 5 min hard cap). Payment is settled only when upstream returns a finished video \u2014 if the job fails or we give up, you are not charged.
 
-Models:
+Models (Seedance defaults bumped to 720p + synced audio on the gateway):
 - xai/grok-imagine-video ($0.05/sec, 8s default -> $0.42/clip) \u2014 stylized, fast
-- bytedance/seedance-1.5-pro (~$0.046/sec, 480p, 5s default up to 10s) \u2014 cheapest, token-priced upstream
-- bytedance/seedance-2.0-fast (~$0.119/sec text \xB7 ~$0.07/sec image-to-video, ~60-80s gen) \u2014 sweet-spot price/quality
-- bytedance/seedance-2.0 (~$0.149/sec text \xB7 ~$0.092/sec image-to-video, 480p Pro) \u2014 highest quality
+- bytedance/seedance-1.5-pro (~$0.092/sec, 720p + audio t2v, 5s default up to 10s) \u2014 cheapest Seedance, token-priced upstream
+- bytedance/seedance-2.0-fast (~$0.238/sec text \xB7 ~$0.140/sec image-to-video, 720p + audio, ~60-80s gen) \u2014 sweet-spot price/quality; supports BytePlus RealFace assets
+- bytedance/seedance-2.0 (~$0.298/sec text \xB7 ~$0.183/sec image-to-video, 720p + audio Pro) \u2014 highest quality; supports BytePlus RealFace assets
+
+RealFace: to generate video of a SPECIFIC real person, first enroll them with blockrun_realface (returns a ta_xxxx asset id), then pass real_face_asset_id here with a Seedance 2.0 model. Mutually exclusive with image_url.
 
 Returns a permanent blockrun-hosted MP4 URL (the gateway mirrors the asset to GCS so URLs don't expire).`,
       inputSchema: {
         prompt: z6.string().describe("Text description of the video to generate. E.g. 'a red apple slowly spinning on a wooden table', 'a hummingbird hovering near a red flower, ultra slow motion'"),
         image_url: z6.string().url().optional().describe("Optional seed image URL for image-to-video generation"),
+        real_face_asset_id: z6.string().regex(/^ta_[A-Za-z0-9]+$/, "token360 asset id like 'ta_xxxx'").optional().describe("BytePlus RealFace asset id (from blockrun_realface enroll/list) to generate video of a specific real person. Seedance 2.0 / 2.0-fast only. Mutually exclusive with image_url."),
         duration_seconds: z6.number().int().min(1).max(60).optional().describe("Duration to bill for (defaults to the model's default \u2014 8s for xAI, 5s for Seedance; Seedance supports up to 10s)."),
         model: z6.enum(["xai/grok-imagine-video", "bytedance/seedance-1.5-pro", "bytedance/seedance-2.0-fast", "bytedance/seedance-2.0"]).optional().default("xai/grok-imagine-video").describe("Video model to use"),
         agent_id: z6.string().optional().describe("Agent identifier for budget tracking and enforcement.")
       }
     },
-    async ({ prompt, image_url, duration_seconds, model, agent_id }) => {
+    async ({ prompt, image_url, real_face_asset_id, duration_seconds, model, agent_id }) => {
       try {
         if (getChain() !== "base") {
           return {
@@ -1141,8 +1167,24 @@ Returns a permanent blockrun-hosted MP4 URL (the gateway mirrors the asset to GC
           };
         }
         const selectedModel = model || "xai/grok-imagine-video";
+        if (real_face_asset_id) {
+          if (!REALFACE_MODELS.has(selectedModel)) {
+            return {
+              content: [{ type: "text", text: formatError(`Model ${selectedModel} does not support RealFace assets. Use bytedance/seedance-2.0 or bytedance/seedance-2.0-fast.`) }],
+              isError: true
+            };
+          }
+          if (image_url) {
+            return {
+              content: [{ type: "text", text: formatError("Pass exactly one of real_face_asset_id or image_url \u2014 both seed the first frame.") }],
+              isError: true
+            };
+          }
+        }
         const billedSeconds = duration_seconds ?? VIDEO_DEFAULT_DURATION[selectedModel] ?? 8;
-        const estimatedCost = (VIDEO_PRICE_PER_SECOND[selectedModel] ?? 0.05) * billedSeconds;
+        const hasImageInput = Boolean(image_url || real_face_asset_id);
+        const perSecond = (hasImageInput ? VIDEO_PRICE_PER_SECOND_IMAGE[selectedModel] : void 0) ?? VIDEO_PRICE_PER_SECOND[selectedModel] ?? 0.05;
+        const estimatedCost = perSecond * billedSeconds;
         const budgetCheck = checkBudget(budget, agent_id, estimatedCost);
         if (!budgetCheck.allowed) {
           return {
@@ -1155,6 +1197,7 @@ Returns a permanent blockrun-hosted MP4 URL (the gateway mirrors the asset to GC
         const submitUrl = `${BLOCKRUN_API2}/v1/videos/generations`;
         const body = { model: selectedModel, prompt };
         if (image_url) body.image_url = image_url;
+        if (real_face_asset_id) body.real_face_asset_id = real_face_asset_id;
         if (duration_seconds !== void 0) body.duration_seconds = duration_seconds;
         const resp402 = await fetchWithTimeout2(submitUrl, {
           method: "POST",
@@ -1298,8 +1341,270 @@ async function fetchWithTimeout2(url, options, timeoutMs) {
   }
 }
 
-// src/tools/search.ts
+// src/tools/realface.ts
 import { z as z7 } from "zod";
+import { privateKeyToAccount as privateKeyToAccount3 } from "viem/accounts";
+import {
+  createPaymentPayload as createPaymentPayload3,
+  parsePaymentRequired as parsePaymentRequired3,
+  extractPaymentDetails as extractPaymentDetails3
+} from "@blockrun/llm";
+var BLOCKRUN_API3 = "https://blockrun.ai/api";
+var ENROLLMENT_PRICE_USD = 0.01;
+async function fetchWithTimeout3(url, options, timeoutMs) {
+  const controller = new AbortController();
+  const id = setTimeout(() => controller.abort(), timeoutMs);
+  try {
+    return await fetch(url, { ...options, signal: controller.signal });
+  } finally {
+    clearTimeout(id);
+  }
+}
+function registerRealfaceTool(server, budget) {
+  server.registerTool(
+    "blockrun_realface",
+    {
+      description: `Enroll a real person's face as a BytePlus RealFace asset, then drive Seedance 2.0 video with it (blockrun_video real_face_asset_id).
+
+A RealFace asset (ta_xxxx) lets Seedance 2.0 / 2.0-fast generate video of a SPECIFIC real person \u2014 not a generic seed image. Enrollment is a multi-step flow because BytePlus requires a live phone liveness check (the real person nods + blinks on camera) before a face photo can be uploaded.
+
+Actions:
+- init: FREE. Create an asset group + a phone H5 link. The tool renders the link as a QR code and opens it; the real person scans it on their phone and completes the ~1 min liveness check. Pass group_id to refresh an expired link.
+- status: FREE. Poll a group until status:"active" (ready_to_finalize:true). The H5 link is valid ~120s \u2014 re-init if it expires.
+- enroll: PAID ($0.01 USDC, Base only). After the group is active, upload a clear front-facing photo (image_url) of the SAME person. Returns the ta_xxxx asset id.
+- list: FREE. List the RealFace assets enrolled by this wallet (their ta_xxxx ids + names) so you can pick one for blockrun_video.
+
+Typical flow:
+  1. blockrun_realface action:"init" name:"Alice"          \u2192 scan QR on phone, do liveness
+  2. blockrun_realface action:"status" group_id:"legacy_rf_\u2026"  \u2192 repeat until ready_to_finalize:true
+  3. blockrun_realface action:"enroll" name:"Alice" group_id:"legacy_rf_\u2026" image_url:"https://\u2026/alice.jpg"  \u2192 ta_xxxx
+  4. blockrun_video model:"bytedance/seedance-2.0" real_face_asset_id:"ta_xxxx" prompt:"\u2026"
+
+Privacy: BlockRun does not store face/liveness data \u2014 only the asset id, name, and the photo URL you supply.`,
+      inputSchema: {
+        action: z7.enum(["init", "status", "enroll", "list"]).describe("What to do"),
+        name: z7.string().min(1).max(64).optional().describe("Display name for the person (required for init and enroll)."),
+        group_id: z7.string().regex(/^legacy_rf_\d+$/).optional().describe("Asset-group id from init (required for status and enroll; pass to init to refresh an expired H5 link)."),
+        image_url: z7.string().url().optional().describe("Public HTTPS URL to a clear front-facing face photo (JPG/PNG/WEBP, \u226410MB). Required for enroll."),
+        agent_id: z7.string().optional().describe("Agent identifier for budget tracking and enforcement (enroll only).")
+      }
+    },
+    async ({ action, name, group_id, image_url, agent_id }) => {
+      try {
+        if (action === "init") {
+          if (!name) {
+            return { content: [{ type: "text", text: formatError('name is required for action:"init".') }], isError: true };
+          }
+          const body = { name };
+          if (group_id) body.groupId = group_id;
+          const resp = await fetchWithTimeout3(`${BLOCKRUN_API3}/v1/realface/init`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify(body)
+          }, 3e4);
+          const data = await resp.json().catch(() => ({}));
+          if (resp.status === 429) {
+            return { content: [{ type: "text", text: formatError(`Rate limited \u2014 retry in ${data.retryAfterSeconds ?? "a few"}s.`) }], isError: true };
+          }
+          if (!resp.ok) {
+            return { content: [{ type: "text", text: formatError(`init failed (${resp.status}): ${data.error || JSON.stringify(data)}`) }], isError: true };
+          }
+          const h5Link = data.h5_link;
+          let qrNote = "";
+          if (h5Link) {
+            try {
+              const qrPath = await generateUrlQrPng(h5Link, "realface-h5-qr.png");
+              await openQrInViewer(qrPath);
+              qrNote = `
+QR opened for scanning (${qrPath}).`;
+            } catch {
+              qrNote = "\n(QR generation failed \u2014 open the link below on the phone directly.)";
+            }
+          }
+          const lines = [
+            `\u{1FAAA} RealFace enrollment started${data.refreshed ? " (link refreshed)" : ""}.`,
+            `Group ID: ${data.group_id}`,
+            `Status: ${data.status}`,
+            h5Link ? `Phone link: ${h5Link}` : "",
+            data.expires_in_seconds ? `Link expires in: ${data.expires_in_seconds}s` : "",
+            qrNote.trim(),
+            ``,
+            `Next: the real person scans the QR / opens the link on their phone and completes the liveness check (nod + blink, ~1 min). Then poll: blockrun_realface action:"status" group_id:"${data.group_id}".`
+          ].filter(Boolean);
+          return {
+            content: [{ type: "text", text: lines.join("\n") }],
+            structuredContent: {
+              group_id: data.group_id,
+              status: data.status,
+              h5_link: h5Link,
+              expires_in_seconds: data.expires_in_seconds,
+              refreshed: !!data.refreshed
+            }
+          };
+        }
+        if (action === "status") {
+          if (!group_id) {
+            return { content: [{ type: "text", text: formatError('group_id is required for action:"status".') }], isError: true };
+          }
+          const resp = await fetchWithTimeout3(`${BLOCKRUN_API3}/v1/realface/status?groupId=${encodeURIComponent(group_id)}`, {
+            method: "GET"
+          }, 3e4);
+          const data = await resp.json().catch(() => ({}));
+          if (resp.status === 429) {
+            return { content: [{ type: "text", text: formatError(`Rate limited \u2014 retry in ${data.retryAfterSeconds ?? "a few"}s.`) }], isError: true };
+          }
+          if (!resp.ok) {
+            return { content: [{ type: "text", text: formatError(`status failed (${resp.status}): ${data.error || JSON.stringify(data)}`) }], isError: true };
+          }
+          const ready = !!data.ready_to_finalize;
+          const lines = [
+            `RealFace group ${data.group_id}`,
+            `Status: ${data.status}`,
+            `Assets in group: ${data.asset_count ?? 0}`,
+            ready ? `\u2705 Ready to finalize \u2014 call blockrun_realface action:"enroll" group_id:"${data.group_id}" name:"\u2026" image_url:"https://\u2026".` : `\u23F3 Not active yet. The real person must finish the phone liveness check. Re-poll, or re-init if the link expired.`
+          ];
+          return {
+            content: [{ type: "text", text: lines.join("\n") }],
+            structuredContent: {
+              group_id: data.group_id,
+              status: data.status,
+              asset_count: data.asset_count,
+              ready_to_finalize: ready
+            }
+          };
+        }
+        if (action === "list") {
+          const account = privateKeyToAccount3(getOrCreateWalletKey());
+          const resp = await fetchWithTimeout3(`${BLOCKRUN_API3}/v1/wallet/${account.address}/realfaces`, {
+            method: "GET"
+          }, 3e4);
+          const data = await resp.json().catch(() => ({}));
+          if (!resp.ok) {
+            return { content: [{ type: "text", text: formatError(`list failed (${resp.status}): ${data.error || JSON.stringify(data)}`) }], isError: true };
+          }
+          const faces = Array.isArray(data.realfaces) ? data.realfaces : [];
+          if (faces.length === 0) {
+            return {
+              content: [{ type: "text", text: `No RealFace assets enrolled for ${account.address}.
+Enroll one: blockrun_realface action:"init" name:"\u2026".` }],
+              structuredContent: { wallet: account.address, realfaces: [], count: 0 }
+            };
+          }
+          const lines = [
+            `RealFace assets for ${account.address} (${faces.length}):`,
+            ...faces.map((f) => `  \u2022 ${f.assetId}  \u2014  "${f.name}"${f.createdAt ? `  (${f.createdAt})` : ""}`),
+            ``,
+            `Use one: blockrun_video model:"bytedance/seedance-2.0" real_face_asset_id:"${faces[0].assetId}" prompt:"\u2026".`
+          ];
+          return {
+            content: [{ type: "text", text: lines.join("\n") }],
+            structuredContent: { wallet: account.address, realfaces: faces, count: faces.length }
+          };
+        }
+        if (action === "enroll") {
+          if (getChain() !== "base") {
+            return { content: [{ type: "text", text: formatError("blockrun_realface enroll settles on Base only. Switch BlockRun to Base (write 'base' to ~/.blockrun/.chain) and fund the Base wallet with USDC.") }], isError: true };
+          }
+          if (!name || !image_url || !group_id) {
+            return { content: [{ type: "text", text: formatError("enroll requires name, image_url, and group_id (from init, after the group is active).") }], isError: true };
+          }
+          const budgetCheck = checkBudget(budget, agent_id, ENROLLMENT_PRICE_USD);
+          if (!budgetCheck.allowed) {
+            return { content: [{ type: "text", text: `${budgetCheck.reason}. Use blockrun_wallet action:"report" to see usage or action:"delegate" to increase agent budget.` }], isError: true };
+          }
+          const privateKey = getOrCreateWalletKey();
+          const account = privateKeyToAccount3(privateKey);
+          const enrollUrl = `${BLOCKRUN_API3}/v1/realface/enroll`;
+          const reqBody = JSON.stringify({ name, image_url, group_id });
+          const resp402 = await fetchWithTimeout3(enrollUrl, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: reqBody
+          }, 15e3);
+          if (resp402.status !== 402) {
+            const data2 = await resp402.json().catch(() => ({}));
+            throw new Error(`Expected 402, got ${resp402.status}: ${data2.message || data2.error || JSON.stringify(data2)}`);
+          }
+          const prHeader = resp402.headers.get("payment-required") || resp402.headers.get("PAYMENT-REQUIRED");
+          if (!prHeader) throw new Error("No PAYMENT-REQUIRED header in 402 response");
+          const paymentRequired = parsePaymentRequired3(prHeader);
+          const details = extractPaymentDetails3(paymentRequired);
+          const paymentPayload = await createPaymentPayload3(
+            privateKey,
+            account.address,
+            details.recipient,
+            details.amount,
+            details.network || "eip155:8453",
+            {
+              resourceUrl: details.resource?.url || enrollUrl,
+              resourceDescription: details.resource?.description || "BlockRun RealFace enrollment",
+              maxTimeoutSeconds: Math.max(details.maxTimeoutSeconds || 0, 120),
+              extra: details.extra
+            }
+          );
+          const resp = await fetchWithTimeout3(enrollUrl, {
+            method: "POST",
+            headers: {
+              "Content-Type": "application/json",
+              "PAYMENT-SIGNATURE": paymentPayload
+            },
+            body: reqBody
+          }, 9e4);
+          const data = await resp.json().catch(() => ({}));
+          if (resp.status === 402) {
+            throw new Error("Payment rejected. Check your wallet balance.");
+          }
+          if (resp.status === 425) {
+            return { content: [{ type: "text", text: formatError(`Group not active yet \u2014 ${data.message || "finish the phone liveness check first"}. No payment taken.`) }], isError: true };
+          }
+          if (resp.status === 422) {
+            return { content: [{ type: "text", text: formatError(`Face match failed \u2014 ${data.hint || "use a clearer front-facing photo of the same person"}. No payment taken.`) }], isError: true };
+          }
+          if (!resp.ok) {
+            throw new Error(`Enroll error ${resp.status}: ${data.error || JSON.stringify(data)}`);
+          }
+          const assetId = data.asset_id;
+          if (!assetId) throw new Error(`Enroll response missing asset_id: ${JSON.stringify(data)}`);
+          recordSpending(budget, ENROLLMENT_PRICE_USD, agent_id);
+          const txHash = data.settlement?.tx_hash || void 0;
+          const lines = [
+            `\u2705 RealFace enrolled!`,
+            `Asset ID: ${assetId}`,
+            `Name: ${data.name || name}`,
+            `Cost: $${ENROLLMENT_PRICE_USD.toFixed(2)} USDC`,
+            ...txHash ? [`Tx: ${txHash}`] : [],
+            ``,
+            `Use it: blockrun_video model:"bytedance/seedance-2.0" real_face_asset_id:"${assetId}" prompt:"\u2026".`
+          ];
+          return {
+            content: [{ type: "text", text: lines.join("\n") }],
+            structuredContent: {
+              asset_id: assetId,
+              group_id: data.group_id || group_id,
+              name: data.name || name,
+              price_usd: ENROLLMENT_PRICE_USD,
+              ...txHash ? { txHash } : {}
+            }
+          };
+        }
+        return { content: [{ type: "text", text: formatError(`Unknown action: ${action}`) }], isError: true };
+      } catch (err) {
+        const errMsg = err instanceof Error ? err.message : String(err);
+        if (errMsg.includes("balance") || errMsg.includes("payment") || errMsg.includes("402") || errMsg.includes("rejected")) {
+          return {
+            content: [{ type: "text", text: `RealFace enrollment requires payment. Run blockrun_wallet with action: "setup" for funding instructions.
+Error: ${errMsg}` }],
+            isError: true
+          };
+        }
+        return { content: [{ type: "text", text: formatError(`RealFace ${action} failed: ${errMsg}`) }], isError: true };
+      }
+    }
+  );
+}
+
+// src/tools/search.ts
+import { z as z8 } from "zod";
 var SEARCH_PRICE_PER_SOURCE = 0.025;
 var SEARCH_DEFAULT_MAX_RESULTS = 10;
 function estimateSearchCost(body) {
@@ -1321,12 +1626,12 @@ Common shape:
 
 Full request shape + worked examples in the \`search\` skill (\`skills/search/SKILL.md\`).`,
       inputSchema: {
-        path: z7.string().optional().default("").describe("Endpoint sub-path under /v1/search/ (default empty = root /v1/search). Reserved for future surfaces."),
-        body: z7.any().optional().describe("Request body. At minimum { query: '...' }. Sent as POST."),
-        agent_id: z7.string().optional().describe("Agent identifier for budget tracking and enforcement.")
+        path: z8.string().optional().default("").describe("Endpoint sub-path under /v1/search/ (default empty = root /v1/search). Reserved for future surfaces."),
+        body: z8.any().optional().describe("Request body. At minimum { query: '...' }. Sent as POST."),
+        agent_id: z8.string().optional().describe("Agent identifier for budget tracking and enforcement.")
       }
     },
-    async ({ path: path4, body, agent_id }) => {
+    async ({ path: path5, body, agent_id }) => {
       try {
         const estimatedCost = estimateSearchCost(body);
         const budgetCheck = checkBudget(budget, agent_id, estimatedCost);
@@ -1337,7 +1642,7 @@ Full request shape + worked examples in the \`search\` skill (\`skills/search/SK
           };
         }
         const client = getClient();
-        const cleanPath = (path4 ?? "").replace(/^\/+/, "").replace(/^v1\/search\/?/, "");
+        const cleanPath = (path5 ?? "").replace(/^\/+/, "").replace(/^v1\/search\/?/, "");
         const endpoint = cleanPath ? `/v1/search/${cleanPath}` : "/v1/search";
         const result = await client.requestWithPaymentRaw(endpoint, body ?? {});
         recordSpending(budget, estimatedCost, agent_id);
@@ -1353,9 +1658,9 @@ Full request shape + worked examples in the \`search\` skill (\`skills/search/SK
 }
 
 // src/tools/exa.ts
-import { z as z8 } from "zod";
-function estimateExaCost(path4, body) {
-  const cleanPath = path4.replace(/^\/+/, "").replace(/^v1\/exa\//, "");
+import { z as z9 } from "zod";
+function estimateExaCost(path5, body) {
+  const cleanPath = path5.replace(/^\/+/, "").replace(/^v1\/exa\//, "");
   if (cleanPath === "contents") {
     const urls = body && typeof body === "object" ? body.urls : void 0;
     return 2e-3 * (Array.isArray(urls) && urls.length > 0 ? urls.length : 1);
@@ -1378,14 +1683,14 @@ Categories for search: "news", "research paper", "company", "tweet", "github", "
 
 Full request/response shapes + worked research workflows in the \`exa-research\` skill.`,
       inputSchema: {
-        path: z8.string().describe("Endpoint name under /v1/exa/, e.g. 'search', 'answer', 'contents', 'find-similar'"),
-        body: z8.any().optional().describe("JSON body for the call. Sent as POST. Required for all four endpoints."),
-        agent_id: z8.string().optional().describe("Agent identifier for budget tracking and enforcement.")
+        path: z9.string().describe("Endpoint name under /v1/exa/, e.g. 'search', 'answer', 'contents', 'find-similar'"),
+        body: z9.any().optional().describe("JSON body for the call. Sent as POST. Required for all four endpoints."),
+        agent_id: z9.string().optional().describe("Agent identifier for budget tracking and enforcement.")
       }
     },
-    async ({ path: path4, body, agent_id }) => {
+    async ({ path: path5, body, agent_id }) => {
       try {
-        const estimatedCost = estimateExaCost(path4, body);
+        const estimatedCost = estimateExaCost(path5, body);
         const budgetCheck = checkBudget(budget, agent_id, estimatedCost);
         if (!budgetCheck.allowed) {
           return {
@@ -1394,7 +1699,7 @@ Full request/response shapes + worked research workflows in the \`exa-research\`
           };
         }
         const client = getClient();
-        const cleanPath = path4.replace(/^\/+/, "").replace(/^v1\/exa\//, "");
+        const cleanPath = path5.replace(/^\/+/, "").replace(/^v1\/exa\//, "");
         const endpoint = `/v1/exa/${cleanPath}`;
         const result = await client.requestWithPaymentRaw(endpoint, body ?? {});
         recordSpending(budget, estimatedCost, agent_id);
@@ -1410,10 +1715,10 @@ Full request/response shapes + worked research workflows in the \`exa-research\`
 }
 
 // src/tools/markets.ts
-import { z as z9 } from "zod";
-function estimateMarketCost(path4, body) {
+import { z as z10 } from "zod";
+function estimateMarketCost(path5, body) {
   if (body !== void 0) return 5e-3;
-  const p = path4.toLowerCase();
+  const p = path5.toLowerCase();
   if (p.includes("wallet") || p.includes("smart") || p.includes("matching-markets") || p.includes("markets/search") || p.includes("binance/")) {
     return 5e-3;
   }
@@ -1475,15 +1780,15 @@ CROSS-PLATFORM:
 
 Pass query params via 'params' (GET). Use 'body' only for POST endpoints (e.g. polymarket/wallet/identities).`,
       inputSchema: {
-        path: z9.string().describe("Endpoint path, e.g. 'polymarket/events', 'kalshi/markets/KXBTC-25MAR14', 'polymarket/wallet/0xabc...', 'markets/search'"),
-        params: z9.record(z9.string(), z9.string()).optional().describe("Query parameters for GET requests (e.g. { limit: '20', active: 'true' })"),
-        body: z9.any().optional().describe("JSON body for POST queries (triggers pmQuery \u2014 most endpoints are GET)"),
-        agent_id: z9.string().optional().describe("Agent identifier for budget tracking and enforcement.")
+        path: z10.string().describe("Endpoint path, e.g. 'polymarket/events', 'kalshi/markets/KXBTC-25MAR14', 'polymarket/wallet/0xabc...', 'markets/search'"),
+        params: z10.record(z10.string(), z10.string()).optional().describe("Query parameters for GET requests (e.g. { limit: '20', active: 'true' })"),
+        body: z10.any().optional().describe("JSON body for POST queries (triggers pmQuery \u2014 most endpoints are GET)"),
+        agent_id: z10.string().optional().describe("Agent identifier for budget tracking and enforcement.")
       }
     },
-    async ({ path: path4, params, body, agent_id }) => {
+    async ({ path: path5, params, body, agent_id }) => {
       try {
-        const estimatedCost = estimateMarketCost(path4, body);
+        const estimatedCost = estimateMarketCost(path5, body);
         const budgetCheck = checkBudget(budget, agent_id, estimatedCost);
         if (!budgetCheck.allowed) {
           return {
@@ -1492,7 +1797,7 @@ Pass query params via 'params' (GET). Use 'body' only for POST endpoints (e.g. p
           };
         }
         const llm = getClient();
-        const result = body !== void 0 ? await llm.pmQuery(path4, body) : await llm.pm(path4, params);
+        const result = body !== void 0 ? await llm.pmQuery(path5, body) : await llm.pm(path5, params);
         recordSpending(budget, estimatedCost, agent_id);
         return {
           content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
@@ -1510,9 +1815,9 @@ Pass query params via 'params' (GET). Use 'body' only for POST endpoints (e.g. p
 }
 
 // src/tools/price.ts
-import { z as z10 } from "zod";
-var CATEGORY = z10.enum(["crypto", "fx", "commodity", "usstock", "stocks"]);
-var MARKET = z10.enum([
+import { z as z11 } from "zod";
+var CATEGORY = z11.enum(["crypto", "fx", "commodity", "usstock", "stocks"]);
+var MARKET = z11.enum([
   "us",
   "hk",
   "jp",
@@ -1526,9 +1831,9 @@ var MARKET = z10.enum([
   "cn",
   "ca"
 ]);
-var RESOLUTION = z10.enum(["1", "5", "15", "60", "240", "D", "W", "M"]);
-var SESSION = z10.enum(["pre", "post", "on"]);
-var ACTION = z10.enum(["price", "history", "list"]);
+var RESOLUTION = z11.enum(["1", "5", "15", "60", "240", "D", "W", "M"]);
+var SESSION = z11.enum(["pre", "post", "on"]);
+var ACTION = z11.enum(["price", "history", "list"]);
 function isPaidPriceCall(action, category) {
   return action !== "list" && (category === "stocks" || category === "usstock");
 }
@@ -1556,15 +1861,15 @@ Examples:
       inputSchema: {
         action: ACTION.describe("Which endpoint to hit: price, history, or list."),
         category: CATEGORY.describe("Market category."),
-        symbol: z10.string().optional().describe("Ticker (required for price+history). e.g. BTC-USD, AAPL, EUR-USD."),
+        symbol: z11.string().optional().describe("Ticker (required for price+history). e.g. BTC-USD, AAPL, EUR-USD."),
         market: MARKET.optional().describe("Stock market code \u2014 required when category='stocks'."),
         session: SESSION.optional().describe("Equity session hint (pre/post/on); ignored for non-equity."),
         resolution: RESOLUTION.optional().describe("Bar resolution for history (default D)."),
-        from: z10.number().optional().describe("History window start (unix seconds)."),
-        to: z10.number().optional().describe("History window end (unix seconds)."),
-        query: z10.string().optional().describe("Free-text filter for list."),
-        limit: z10.number().int().positive().max(2e3).optional().describe("Max items for list (default 100, max 2000)."),
-        agent_id: z10.string().optional().describe("Agent identifier for budget tracking and enforcement.")
+        from: z11.number().optional().describe("History window start (unix seconds)."),
+        to: z11.number().optional().describe("History window end (unix seconds)."),
+        query: z11.string().optional().describe("Free-text filter for list."),
+        limit: z11.number().int().positive().max(2e3).optional().describe("Max items for list (default 100, max 2000)."),
+        agent_id: z11.string().optional().describe("Agent identifier for budget tracking and enforcement.")
       }
     },
     async ({ action, category, symbol, market, session, resolution, from, to, query, limit, agent_id }) => {
@@ -1637,7 +1942,7 @@ Examples:
 }
 
 // src/tools/dex.ts
-import { z as z11 } from "zod";
+import { z as z12 } from "zod";
 function registerDexTool(server) {
   server.registerTool(
     "blockrun_dex",
@@ -1654,10 +1959,10 @@ Examples:
   blockrun_dex({ token: "So11...xxx" })    -> Get specific token data
   blockrun_dex({ symbol: "PEPE" })         -> Search by symbol`,
       inputSchema: {
-        query: z11.string().optional().describe("Search query (token name, symbol, or address)"),
-        token: z11.string().optional().describe("Token address for direct lookup"),
-        symbol: z11.string().optional().describe("Token symbol to search"),
-        chain: z11.string().optional().describe("Filter by chain (ethereum, solana, base, etc.)")
+        query: z12.string().optional().describe("Search query (token name, symbol, or address)"),
+        token: z12.string().optional().describe("Token address for direct lookup"),
+        symbol: z12.string().optional().describe("Token symbol to search"),
+        chain: z12.string().optional().describe("Filter by chain (ethereum, solana, base, etc.)")
       }
     },
     async ({ query, token, symbol, chain }) => {
@@ -1718,9 +2023,9 @@ ${lines.join("\n\n")}` }],
 }
 
 // src/tools/modal.ts
-import { z as z12 } from "zod";
-function estimateModalCost(path4) {
-  return path4.includes("sandbox/create") ? 0.01 : 1e-3;
+import { z as z13 } from "zod";
+function estimateModalCost(path5) {
+  return path5.includes("sandbox/create") ? 0.01 : 1e-3;
 }
 function registerModalTool(server, budget) {
   server.registerTool(
@@ -1738,14 +2043,14 @@ Common paths (all POST):
 
 Full action shapes + GPU type details in the \`modal\` skill.`,
       inputSchema: {
-        path: z12.string().describe("Endpoint under /v1/modal/, e.g. 'sandbox/create', 'sandbox/exec'"),
-        body: z12.any().optional().describe("JSON body. Sent as POST."),
-        agent_id: z12.string().optional().describe("Agent identifier for budget tracking and enforcement.")
+        path: z13.string().describe("Endpoint under /v1/modal/, e.g. 'sandbox/create', 'sandbox/exec'"),
+        body: z13.any().optional().describe("JSON body. Sent as POST."),
+        agent_id: z13.string().optional().describe("Agent identifier for budget tracking and enforcement.")
       }
     },
-    async ({ path: path4, body, agent_id }) => {
+    async ({ path: path5, body, agent_id }) => {
       try {
-        const cleanPath = path4.replace(/^\/+/, "").replace(/^v1\/modal\//, "");
+        const cleanPath = path5.replace(/^\/+/, "").replace(/^v1\/modal\//, "");
         const estimatedCost = estimateModalCost(cleanPath);
         const budgetCheck = checkBudget(budget, agent_id, estimatedCost);
         if (!budgetCheck.allowed) {
@@ -1770,15 +2075,15 @@ Full action shapes + GPU type details in the \`modal\` skill.`,
 }
 
 // src/tools/phone.ts
-import { z as z13 } from "zod";
-function estimatePhoneCost(path4, hasBody) {
-  if (!hasBody && path4.startsWith("voice/call/")) return 0;
-  if (path4 === "phone/numbers/release") return 0;
-  if (path4 === "phone/lookup") return 0.01;
-  if (path4 === "phone/lookup/fraud") return 0.05;
-  if (path4 === "phone/numbers/buy" || path4 === "phone/numbers/renew") return 5;
-  if (path4 === "phone/numbers/list") return 1e-3;
-  if (path4 === "voice/call") return 0.54;
+import { z as z14 } from "zod";
+function estimatePhoneCost(path5, hasBody) {
+  if (!hasBody && path5.startsWith("voice/call/")) return 0;
+  if (path5 === "phone/numbers/release") return 0;
+  if (path5 === "phone/lookup") return 0.01;
+  if (path5 === "phone/lookup/fraud") return 0.05;
+  if (path5 === "phone/numbers/buy" || path5 === "phone/numbers/renew") return 5;
+  if (path5 === "phone/numbers/list") return 1e-3;
+  if (path5 === "voice/call") return 0.54;
   return hasBody ? 1e-3 : 0;
 }
 function registerPhoneTool(server, budget) {
@@ -1803,14 +2108,14 @@ Voice presets: nat, josh, maya, june, paige, derek, florian. Phone numbers use E
 
 Voice call flow + voice preset details + full body shapes in the \`phone\` skill.`,
       inputSchema: {
-        path: z13.string().describe("Endpoint after /v1/. Use 'phone/...' for lookup + number ops, 'voice/call' for outbound AI calls, 'voice/call/{id}' (no body) to poll status."),
-        body: z13.any().optional().describe("JSON body. Sent as POST. Omit for the free GET poll (voice/call/{call_id})."),
-        agent_id: z13.string().optional().describe("Agent identifier for budget tracking and enforcement.")
+        path: z14.string().describe("Endpoint after /v1/. Use 'phone/...' for lookup + number ops, 'voice/call' for outbound AI calls, 'voice/call/{id}' (no body) to poll status."),
+        body: z14.any().optional().describe("JSON body. Sent as POST. Omit for the free GET poll (voice/call/{call_id})."),
+        agent_id: z14.string().optional().describe("Agent identifier for budget tracking and enforcement.")
       }
     },
-    async ({ path: path4, body, agent_id }) => {
+    async ({ path: path5, body, agent_id }) => {
       try {
-        const cleanPath = path4.replace(/^\/+/, "").replace(/^v1\//, "");
+        const cleanPath = path5.replace(/^\/+/, "").replace(/^v1\//, "");
         const estimatedCost = estimatePhoneCost(cleanPath, body !== void 0);
         const budgetCheck = checkBudget(budget, agent_id, estimatedCost);
         if (!budgetCheck.allowed) {
@@ -1835,7 +2140,7 @@ Voice call flow + voice preset details + full body shapes in the \`phone\` skill
 }
 
 // src/tools/surf.ts
-import { z as z14 } from "zod";
+import { z as z15 } from "zod";
 var SURF_T3_PATHS = /* @__PURE__ */ new Set([
   "onchain/sql",
   "onchain/query",
@@ -1864,8 +2169,8 @@ var SURF_T2_PATHS = /* @__PURE__ */ new Set([
   "web/fetch"
 ]);
 var SURF_T2_PREFIXES = ["search/", "wallet/"];
-function estimateSurfCost(path4) {
-  const p = path4.toLowerCase().replace(/^\/+/, "");
+function estimateSurfCost(path5) {
+  const p = path5.toLowerCase().replace(/^\/+/, "");
   if (SURF_T3_PATHS.has(p)) return 0.02;
   if (SURF_T2_PATHS.has(p)) return 5e-3;
   for (const prefix of SURF_T2_PREFIXES) {
@@ -1899,15 +2204,15 @@ Common paths (full 84-endpoint catalog in the surf skill):
 Method is auto-routed: pass 'body' for POST endpoints; otherwise GET with 'params'.
 Each Surf endpoint pre-validates required params before settling \u2014 you get a 400 (not a charge) if a required field is missing. Browse the full catalog: https://blockrun.ai/marketplace/surf`,
       inputSchema: {
-        path: z14.string().describe("Endpoint path under /v1/surf/, e.g. 'market/price', 'prediction-market/polymarket/ranking', 'wallet/detail', 'onchain/sql', 'chat/completions'"),
-        params: z14.record(z14.string(), z14.string()).optional().describe("Query parameters for GET endpoints, e.g. { symbol: 'BTC' } or { address: '0x...', chain: 'ethereum' }"),
-        body: z14.any().optional().describe("JSON body for POST endpoints. Provide for: onchain/query, onchain/sql, chat/completions. When set, the call is sent as POST; otherwise GET with params."),
-        agent_id: z14.string().optional().describe("Agent identifier for budget tracking and enforcement.")
+        path: z15.string().describe("Endpoint path under /v1/surf/, e.g. 'market/price', 'prediction-market/polymarket/ranking', 'wallet/detail', 'onchain/sql', 'chat/completions'"),
+        params: z15.record(z15.string(), z15.string()).optional().describe("Query parameters for GET endpoints, e.g. { symbol: 'BTC' } or { address: '0x...', chain: 'ethereum' }"),
+        body: z15.any().optional().describe("JSON body for POST endpoints. Provide for: onchain/query, onchain/sql, chat/completions. When set, the call is sent as POST; otherwise GET with params."),
+        agent_id: z15.string().optional().describe("Agent identifier for budget tracking and enforcement.")
       }
     },
-    async ({ path: path4, params, body, agent_id }) => {
+    async ({ path: path5, params, body, agent_id }) => {
       try {
-        const cleanPath = path4.replace(/^\/+/, "").replace(/^v1\/surf\//, "").replace(/^api\/v1\/surf\//, "");
+        const cleanPath = path5.replace(/^\/+/, "").replace(/^v1\/surf\//, "").replace(/^api\/v1\/surf\//, "");
         const estimatedCost = estimateSurfCost(cleanPath);
         const budgetCheck = checkBudget(budget, agent_id, estimatedCost);
         if (!budgetCheck.allowed) {
@@ -1944,6 +2249,7 @@ function initializeMcpServer(server) {
   registerImageTool(server, budget);
   registerMusicTool(server, budget);
   registerVideoTool(server, budget);
+  registerRealfaceTool(server, budget);
   registerSearchTool(server, budget);
   registerExaTool(server, budget);
   registerMarketsTool(server, budget);
@@ -1992,7 +2298,7 @@ function initializeMcpServer(server) {
 
 // src/utils/key-leak-scanner.ts
 import fs3 from "fs";
-import path3 from "path";
+import path4 from "path";
 import os3 from "os";
 function looksLikeRawPrivateKey(value) {
   if (typeof value !== "string") return false;
@@ -2031,10 +2337,10 @@ function scanFile(file) {
 function warnOnLeakedKeys() {
   const home = os3.homedir();
   const candidates = [
-    path3.join(home, ".claude.json"),
-    path3.join(home, "Library", "Application Support", "Claude", "claude_desktop_config.json"),
-    path3.join(home, ".config", "claude", "claude_desktop_config.json"),
-    path3.join(home, "AppData", "Roaming", "Claude", "claude_desktop_config.json")
+    path4.join(home, ".claude.json"),
+    path4.join(home, "Library", "Application Support", "Claude", "claude_desktop_config.json"),
+    path4.join(home, ".config", "claude", "claude_desktop_config.json"),
+    path4.join(home, "AppData", "Roaming", "Claude", "claude_desktop_config.json")
   ];
   const findings = [];
   for (const f of candidates) findings.push(...scanFile(f));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blockrun/mcp",
-  "version": "0.14.4",
+  "version": "0.15.1",
   "mcpName": "io.github.BlockRunAI/blockrun-mcp",
   "description": "BlockRun MCP Server - Give your AI agent web search, deep research, prediction markets, crypto data, X/Twitter intelligence. Paid via x402 micropayments.",
   "type": "module",