The agent-native LLM router for autonomous agents. Every frontier model behind one wallet, <1ms local routing, USDC payments on Base & Solana via x402.
This report summarizes scanner evidence for BlockRunAI/ClawRouter, a TypeScript project with 6,622 GitHub stars. SynthScan examined 113,780 lines of code across 305 source files, recording 309 pattern matches distributed across 12 syntactic categories. The legacy adjusted pattern signal is 5.0 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 222 finding(s).
Are imports declared and package/API names verified? 4 finding(s).
Are wrappers, guards, and repeated structures necessary? 134 finding(s).
Which changes need focused human review? 309 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 309 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | test/resilience-stability.ts | 104 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/resilience-stability.ts | 106 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/resilience-stability.ts | 199 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/resilience-stability.ts | 201 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/resilience-stability.ts | 252 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/resilience-stability.ts | 254 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/resilience-errors.ts | 103 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/resilience-errors.ts | 105 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/resilience-errors.ts | 140 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/resilience-errors.ts | 142 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/resilience-errors.ts | 195 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/resilience-errors.ts | 197 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/resilience-errors.ts | 250 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/resilience-errors.ts | 252 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/resilience-errors.ts | 281 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/resilience-errors.ts | 283 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/resilience-errors.ts | 315 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/resilience-errors.ts | 317 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/smoke-wallet-scenarios.ts | 45 | // ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/smoke-wallet-scenarios.ts | 48 | // ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/smoke-wallet-scenarios.ts | 95 | // ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/smoke-wallet-scenarios.ts | 98 | // ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/smoke-wallet-scenarios.ts | 119 | // ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/smoke-wallet-scenarios.ts | 122 | // ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/smoke-wallet-scenarios.ts | 151 | // ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/smoke-wallet-scenarios.ts | 154 | // ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/smoke-wallet-scenarios.ts | 173 | // ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/smoke-wallet-scenarios.ts | 176 | // ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/resilience-lifecycle.ts | 93 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/resilience-lifecycle.ts | 95 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/resilience-lifecycle.ts | 145 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/resilience-lifecycle.ts | 147 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/resilience-lifecycle.ts | 174 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/resilience-lifecycle.ts | 176 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/resilience-lifecycle.ts | 211 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/resilience-lifecycle.ts | 213 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/resilience-lifecycle.ts | 233 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/resilience-lifecycle.ts | 235 | // ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/docker/edge-case-tests.sh | 66 | # ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/docker/edge-case-tests.sh | 68 | # ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/docker/edge-case-tests.sh | 126 | # ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/docker/edge-case-tests.sh | 128 | # ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/docker/edge-case-tests.sh | 185 | # ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/docker/edge-case-tests.sh | 187 | # ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/docker/edge-case-tests.sh | 272 | # ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/docker/edge-case-tests.sh | 274 | # ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/docker/edge-case-tests.sh | 371 | # ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/docker/edge-case-tests.sh | 373 | # ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/docker/edge-case-tests.sh | 466 | # ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/docker/edge-case-tests.sh | 468 | # ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/docker/edge-case-tests.sh | 518 | # ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/docker/edge-case-tests.sh | 520 | # ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/docker/edge-case-tests.sh | 551 | # ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/docker/edge-case-tests.sh | 553 | # ═══════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | test/integration/multiturn-reasoning.test.ts | 29 | // ─── Mock upstream server ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | test/integration/multiturn-reasoning.test.ts | 107 | // ─── Tests ──────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/sync-install-to-blockrun.sh | 4 | # ============================================================================ | COMMENT |
| MEDIUM | scripts/sync-install-to-blockrun.sh | 6 | # ============================================================================ | COMMENT |
| MEDIUM | scripts/sync-install-to-blockrun.sh | 21 | # ============================================================================ | COMMENT |
| MEDIUM | scripts/update.sh | 7 | # ───────────────────────────────────────────────────────────── | COMMENT |
| 21 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docs/subscription-failover.md | 87 | #### Step 1: Set Primary Model (Your Subscription) | COMMENT |
| LOW | docs/subscription-failover.md | 100 | #### Step 2: Add ClawRouter as Fallback | COMMENT |
| LOW | docs/subscription-failover.md | 110 | #### Step 3: Verify Configuration | COMMENT |
| LOW | docs/subscription-failover.md | 124 | #### Step 4: Test Failover (Optional) | COMMENT |
| LOW | docs/smart-llm-router-14-dimension-classifier.md | 27 | ## Step 1: Benchmarking the Fleet | COMMENT |
| LOW | docs/smart-llm-router-14-dimension-classifier.md | 78 | ## Step 2: Adding the Quality Dimension | COMMENT |
| LOW | docs/smart-llm-router-14-dimension-classifier.md | 130 | ## Step 3: The Failed Experiment (Latency-First Routing) | COMMENT |
| LOW | docs/smart-llm-router-14-dimension-classifier.md | 150 | ## Step 4: The 14-Dimension Scoring System | COMMENT |
| LOW | docs/smart-llm-router-14-dimension-classifier.md | 215 | ## Step 5: Tier-to-Model Mapping | COMMENT |
| LOW | docs/smart-llm-router-14-dimension-classifier.md | 272 | ## Step 6: Context-Aware Filtering | COMMENT |
| LOW | docs/anthropic-cost-savings.md | 227 | ### Step 1: Install | COMMENT |
| LOW | docs/anthropic-cost-savings.md | 235 | ### Step 2: Update Your Code | COMMENT |
| LOW | docs/anthropic-cost-savings.md | 276 | ### Step 3: Fund (optional) | COMMENT |
| LOW⚡ | docs/plans/2026-02-13-e2e-docker-deployment.md | 784 | # Step 1: Check git status (must be clean) | COMMENT |
| LOW⚡ | docs/plans/2026-02-13-e2e-docker-deployment.md | 793 | # Step 2: Check we're on main branch | COMMENT |
| LOW⚡ | docs/plans/2026-02-13-e2e-docker-deployment.md | 803 | # Step 3: Pull latest changes | COMMENT |
| LOW⚡ | docs/plans/2026-02-13-e2e-docker-deployment.md | 809 | # Step 4: Install dependencies | COMMENT |
| LOW⚡ | docs/plans/2026-02-13-e2e-docker-deployment.md | 815 | # Step 5: Run typecheck | COMMENT |
| LOW⚡ | docs/plans/2026-02-13-e2e-docker-deployment.md | 821 | # Step 6: Run build | COMMENT |
| LOW⚡ | docs/plans/2026-02-13-e2e-docker-deployment.md | 827 | # Step 7: Run tests | COMMENT |
| LOW⚡ | docs/plans/2026-02-13-e2e-docker-deployment.md | 894 | # Step 10: Rebuild with new version | COMMENT |
| LOW⚡ | docs/plans/2026-02-13-e2e-docker-deployment.md | 900 | # Step 11: Commit version bump | COMMENT |
| LOW⚡ | docs/plans/2026-02-13-e2e-docker-deployment.md | 907 | # Step 12: Create git tag | COMMENT |
| LOW⚡ | docs/plans/2026-02-13-e2e-docker-deployment.md | 913 | # Step 13: Confirm publish | COMMENT |
| LOW⚡ | docs/plans/2026-02-13-e2e-docker-deployment.md | 929 | # Step 14: Publish to npm | COMMENT |
| LOW⚡ | docs/plans/2026-02-13-e2e-docker-deployment.md | 935 | # Step 15: Push to GitHub | COMMENT |
| LOW⚡ | docs/plans/2026-02-13-e2e-docker-deployment.md | 942 | # Step 16: Create GitHub release | COMMENT |
| LOW | docs/plans/2026-02-13-e2e-docker-deployment.md | 22 | ### Step 1: Add test for 413 Payload Too Large (150KB limit) | COMMENT |
| LOW | docs/plans/2026-02-13-e2e-docker-deployment.md | 55 | ### Step 2: Add test for 400 Bad Request (malformed JSON) | COMMENT |
| LOW | docs/plans/2026-02-13-e2e-docker-deployment.md | 76 | ### Step 3: Add test for 400 Bad Request (missing required fields) | COMMENT |
| LOW | docs/plans/2026-02-13-e2e-docker-deployment.md | 102 | ### Step 4: Add test for large message array (200 messages limit) | COMMENT |
| LOW | docs/plans/2026-02-13-e2e-docker-deployment.md | 135 | ### Step 5: Add test for invalid model name | COMMENT |
| LOW | docs/plans/2026-02-13-e2e-docker-deployment.md | 163 | ### Step 6: Add test for concurrent requests (stress test) | COMMENT |
| LOW | docs/plans/2026-02-13-e2e-docker-deployment.md | 204 | ### Step 7: Add test for negative max_tokens (should be rejected) | COMMENT |
| LOW | docs/plans/2026-02-13-e2e-docker-deployment.md | 229 | ### Step 8: Add test for empty messages array | COMMENT |
| LOW | docs/plans/2026-02-13-e2e-docker-deployment.md | 252 | ### Step 9: Add test for streaming with large response (token counting) | COMMENT |
| LOW | docs/plans/2026-02-13-e2e-docker-deployment.md | 301 | ### Step 10: Add test for balance check (verify wallet has funds) | COMMENT |
| LOW | docs/plans/2026-02-13-e2e-docker-deployment.md | 318 | ### Step 11: Run expanded E2E tests | COMMENT |
| LOW | docs/plans/2026-02-13-e2e-docker-deployment.md | 354 | ### Step 12: Commit E2E test expansion | COMMENT |
| LOW | docs/plans/2026-02-13-e2e-docker-deployment.md | 386 | ### Step 1: Create Dockerfile for installation testing | COMMENT |
| LOW | docs/plans/2026-02-13-e2e-docker-deployment.md | 414 | ### Step 2: Create bash test script with 10 test cases | COMMENT |
| LOW | docs/plans/2026-02-13-e2e-docker-deployment.md | 667 | ### Step 3: Make test script executable | COMMENT |
| LOW | docs/plans/2026-02-13-e2e-docker-deployment.md | 673 | ### Step 4: Update run-docker-test.sh to include installation tests | COMMENT |
| LOW | docs/plans/2026-02-13-e2e-docker-deployment.md | 697 | ### Step 5: Run Docker installation tests | COMMENT |
| LOW | docs/plans/2026-02-13-e2e-docker-deployment.md | 734 | ### Step 6: Commit Docker installation tests | COMMENT |
| LOW | docs/plans/2026-02-13-e2e-docker-deployment.md | 766 | ### Step 1: Create deployment script | COMMENT |
| LOW | docs/plans/2026-02-13-e2e-docker-deployment.md | 841 | # Step 8: Get version bump type | COMMENT |
| LOW | docs/plans/2026-02-13-e2e-docker-deployment.md | 882 | # Step 9: Update version in src/version.ts | COMMENT |
| LOW | docs/plans/2026-02-13-e2e-docker-deployment.md | 967 | ### Step 2: Make deployment script executable | COMMENT |
| LOW | docs/plans/2026-02-13-e2e-docker-deployment.md | 973 | ### Step 3: Add deploy command to package.json | COMMENT |
| LOW | docs/plans/2026-02-13-e2e-docker-deployment.md | 999 | ### Step 4: Test deployment script (dry run) | COMMENT |
| LOW | docs/plans/2026-02-13-e2e-docker-deployment.md | 1017 | ### Step 5: Document deployment process | COMMENT |
| LOW | docs/plans/2026-02-13-e2e-docker-deployment.md | 1156 | ### Step 6: Run deployment script (test mode) | COMMENT |
| LOW | docs/plans/2026-02-13-e2e-docker-deployment.md | 1232 | ### Step 7: Commit deployment automation | COMMENT |
| LOW | skills/release/SKILL.md | 18 | ## Step 1: Confirm the New Version | COMMENT |
| LOW | skills/release/SKILL.md | 30 | ## Step 2: Update `package.json` Version | COMMENT |
| LOW | skills/release/SKILL.md | 36 | ## Step 3: Write CHANGELOG Entry | COMMENT |
| LOW | skills/release/SKILL.md | 56 | ## Step 4: Confirm No Manual Server Sync Required | COMMENT |
| LOW | skills/release/SKILL.md | 96 | ## Step 5: Build | COMMENT |
| LOW | skills/release/SKILL.md | 106 | ## Step 6: Run Tests | COMMENT |
| 15 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | test/e2e.ts | 83 | // System prompt with reasoning/agentic keywords should NOT affect simple queries | COMMENT |
| MEDIUM | test/e2e.ts | 84 | // Bug: if client's system prompt had "step by step" / "edit files" / "fix bugs", ALL queries became REASONING/agentic | COMMENT |
| MEDIUM | test/e2e.ts | 120 | // Coding assistant system prompt should NOT force agentic mode on simple queries | COMMENT |
| MEDIUM | test/e2e.ts | 122 | // triggering agenticScore >= 0.6 on EVERY request, routing all to Sonnet via agentic tiers | COMMENT |
| MEDIUM | test/e2e.ts | 142 | // But if USER explicitly requests agentic work, it SHOULD trigger agentic mode | COMMENT |
| MEDIUM | test/e2e.ts | 143 | // Need 3+ agentic keyword matches for score 0.6: "fix", "deploy", "make sure" | COMMENT |
| MEDIUM | test/e2e.ts | 484 | // Test 6: Agentic score should be 0 for non-agentic queries | COMMENT |
| MEDIUM | docs/configuration.md | 525 | # agenticTiers: { ... } # or `null` to disable agentic switching entirely | COMMENT |
| MEDIUM | docs/configuration.md | 542 | # agenticMode: true | false # force / disable the agentic tier set (default: auto-detect) | COMMENT |
| MEDIUM | docs/features.md | 8 | - [Agentic Auto-Detection](#agentic-auto-detection) | CODE |
| MEDIUM | docs/features.md | 135 | agenticMode: true # Always use agentic tiers | CODE |
| MEDIUM | docs/features.md | 145 | // Request with tools → auto-agentic mode | COMMENT |
| MEDIUM | src/models.test.ts | 207 | // Pro tier is deliberately NOT `agentic` (mirrors gpt-5.4-pro): max-compute | COMMENT |
| MEDIUM | src/models.test.ts | 287 | // premium REASONING and agentic COMPLEX/REASONING primaries. | COMMENT |
| MEDIUM | src/proxy.ts | 976 | // Happens when models like gemini-3.1-flash-lite receive complex agentic requests | COMMENT |
| MEDIUM | src/proxy.ts | 4768 | // model believe those capabilities do not exist, which breaks agentic runs. | COMMENT |
| MEDIUM | src/proxy.ts | 4769 | // Reliability is handled later via agentic routing and tool-support filters. | COMMENT |
| MEDIUM | src/proxy.ts | 5582 | // Tool detection — when tools are present, force agentic tiers for reliable tool use | COMMENT |
| MEDIUM | src/proxy.ts | 5653 | // Keep agentic routing when tools are present, even for SIMPLE queries. | COMMENT |
| MEDIUM | src/proxy.ts | 5655 | // demoting to non-agentic tiers causes fallback to models that refuse | COMMENT |
| MEDIUM | src/proxy.ts | 6146 | // Case A: tool/complex/agentic routing profile — check global model table | COMMENT |
| MEDIUM | src/proxy.ts | 6147 | // Intentionally exclude free models: they cannot handle complex/agentic tasks. | COMMENT |
| MEDIUM | src/proxy.ts | 6506 | // Complex/agentic tasks with no affordable model: already blocked above (before streaming headers). | COMMENT |
| MEDIUM | src/proxy.ts | 6529 | // (A) complex/agentic routing profile tasks (tools / COMPLEX / REASONING tier) | COMMENT |
| MEDIUM | src/models.ts | 175 | // and agentic tool use. EXPLICIT PINS ONLY: bare `qwen` deliberately stays | COMMENT |
| MEDIUM | src/models.ts | 873 | // Chat/vision only upstream — no reasoning or agentic categories. | COMMENT |
| MEDIUM | src/models.ts | 1090 | // Anthropic - all Claude models excel at agentic workflows | COMMENT |
| MEDIUM | src/models.ts | 1131 | // Newest Sonnet — near-Opus coding/agentic quality at Sonnet cost. | COMMENT |
| MEDIUM | src/models.ts | 2138 | // agentic eligibility is its own change with its own evidence bar. | COMMENT |
| MEDIUM | src/models.ts | 266 | "grok-code": "xai/grok-build-0.1", // xAI's agentic coding model (Build 0.1, 2026-06-04) | CODE |
| MEDIUM | src/polymarket/tool.ts | 11 | // engine's guardrails (confirm:true hard gate, POLYMARKET_MAX_BET_USD per-order | COMMENT |
| MEDIUM | src/router/brand-numbers.test.ts | 42 | // eco / auto / premium / agentic — one tier table each. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/test-e2e.ts | 325 | function extractFirstMessageContent(payload: ResponsePayload): string | undefined { | CODE |
| LOW | apps/desktop/electron/core/manager.ts | 698 | function currencyNumberOrUndefined(value: unknown): number | undefined { | CODE |
| LOW | apps/desktop/electron/core/manager.ts | 863 | function solanaAddressFromMnemonic(mnemonic: string): string { | CODE |
| LOW | apps/desktop/electron/core/service-auth.ts | 65 | async function readTokenAfterConcurrentCreate(path: string): Promise<string> { | CODE |
| LOW | apps/desktop/electron/core/files.ts | 112 | export async function canonicalWriteDestination(path: string): Promise<string> { | CODE |
| LOW | src/mcp-config.ts | 41 | function normalizeServerDefinition(server: McpServerDefinition): Record<string, unknown> { | CODE |
| LOW⚡ | src/mcp-config.ts | 61 | function looksLikeBlockrunPackageArgs(args: string[]): boolean { | CODE |
| LOW⚡ | src/mcp-config.ts | 65 | function looksLikeLocalBlockrunDistArgs(args: string[]): boolean { | CODE |
| LOW⚡ | src/mcp-config.ts | 69 | export function createBlockrunMcpServerDefinition(opts?: { | CODE |
| LOW | src/mcp-config.ts | 92 | function isManagedBlockrunMcpServerDefinition(value: unknown): value is McpServerDefinition { | CODE |
| LOW | src/mcp-config.ts | 101 | export function ensureBlockrunMcpServerConfig( | CODE |
| LOW | src/mcp-config.ts | 139 | export function removeManagedBlockrunMcpServerConfig(config: OpenClawConfig): boolean { | CODE |
| LOW | src/payment-preauth.ts | 52 | export function createPayFetchWithPreAuth( | CODE |
| LOW | src/web-search-provider.ts | 114 | function normalizeBlockRunExaPayload(query: string, payload: unknown): Record<string, unknown> { | CODE |
| LOW | src/web-search-provider.ts | 149 | function ensureBlockrunExaSelection(config: OpenClawConfig): OpenClawConfig { | CODE |
| LOW | src/timestamp-strip.ts | 19 | export function stripLeadingTextBlockTimestamp(blocks: unknown[]): unknown[] { | CODE |
| LOW | src/share-formatters.ts | 539 | export function transformForTelegramSplit(md: string): string[] { | CODE |
| LOW | src/builder-code.ts | 25 | export function withBuilderCodeServiceCode( | CODE |
| LOW | src/proxy.ts | 788 | export function debugHeadersEnabledFromEnv( | CODE |
| LOW | src/proxy.ts | 939 | export function detectDegradedSuccessResponse(body: string): string | undefined { | CODE |
| LOW | src/proxy.ts | 1195 | function normalizeMessagesForGoogle(messages: ChatMessage[]): ChatMessage[] { | CODE |
| LOW | src/proxy.ts | 1260 | export function normalizeMessagesForThinking( | CODE |
| LOW | src/proxy.ts | 1851 | export function estimateBalancePreflightAmount( | CODE |
| LOW | src/proxy.ts | 2086 | export function resolvePhoneTelemetryCost(args: { | CODE |
| LOW | src/proxy.ts | 2180 | function gatewayRemainingCreditUsd(response: Response | undefined): number | undefined { | CODE |
| LOW | src/proxy.ts | 2544 | function warnIfSpendLimitsUnenforced(spendControl: SpendControl | undefined): void { | CODE |
| LOW | src/proxy.ts | 2585 | function assertExistingProxyBillsUs( | CODE |
| LOW | src/index.ts | 162 | function isBlockrunWebSearchDisabled(config?: unknown): boolean { | CODE |
| LOW | src/index.ts | 771 | function removeInjectedAuthPlaceholder( | CODE |
| LOW | src/index.ts | 815 | function clearDeferredProxyStartTimer( | CODE |
| LOW | src/index.ts | 856 | function startPendingConfiguredProxyIfQueued( | CODE |
| LOW | src/index.ts | 872 | function resumePendingConfiguredProxyAfterStaleFailure( | CODE |
| LOW | src/index.ts | 881 | function supersedeEmptyConfigStartup(api: OpenClawPluginApi): void { | CODE |
| LOW | src/index.ts | 1323 | export function buildImageGenerationProvider(): ImageGenerationProviderPlugin { | CODE |
| LOW | src/index.ts | 1440 | function buildMusicGenerationProvider(): MusicGenerationProviderPlugin { | CODE |
| LOW | src/index.ts | 1520 | function buildVideoGenerationProvider(): VideoGenerationProviderPlugin { | CODE |
| LOW | src/index.ts | 1608 | function restartProxyForChainSwitch(api: OpenClawPluginApi): void { | CODE |
| LOW | src/auth.ts | 146 | export async function migrateLegacyWalletToCore(): Promise<LegacyWalletMigration> { | CODE |
| LOW | src/auth.ts | 365 | async function warnIfLegacyWalletDiffers(coreAddress: string): Promise<void> { | CODE |
| LOW | src/auth.ts | 450 | export async function resolveOrGenerateWalletKey(): Promise<WalletResolution> { | CODE |
| LOW | src/auth.ts | 471 | async function loadCoreSolanaKeyForSelectedChain(): Promise<Uint8Array | undefined> { | CODE |
| LOW | src/auth.ts | 548 | export async function recoverWalletFromMnemonic(): Promise<void> { | CODE |
| LOW | src/openclaw-plugin-config.ts | 30 | export function prepareBlockRunPluginConfig( | CODE |
| LOW | src/polymarket/creds.ts | 120 | export function loadDepositWalletForSigner(signer: string): string | undefined { | CODE |
| LOW | src/polymarket/relayer.ts | 34 | export function relayerCredsMissingMessage(): string { | CODE |
| LOW | src/polymarket/relayer.ts | 46 | async function getOrCreateBuilderCreds(): Promise<{ | CODE |
| LOW | src/polymarket/relayer.ts | 117 | export async function deriveDepositWalletNoCreds(): Promise<Hex> { | CODE |
| LOW | src/polymarket/client.ts | 72 | export function installUnderscoreHeaderBridge(instance: { | CODE |
| LOW | src/polymarket/wallet-adapter.ts | 38 | export function getOrCreateWalletKey(): Hex { | CODE |
| LOW | src/compression/layers/whitespace.ts | 52 | export function normalizeMessagesWhitespace(messages: NormalizedMessage[]): WhitespaceResult { | CODE |
| LOW | src/compression/layers/dynamic-codebook.ts | 166 | export function generateDynamicCodebookHeader(codebook: Record<string, string>): string { | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | docs/worker-network.md | 1321 | cd /Users/vickyfu/Documents/blockrun-web/ClawRouter | COMMENT |
| LOW | docs/configuration.md | 421 | // { | COMMENT |
| LOW | docs/configuration.md | 481 | - id: "@blockrun/clawrouter" | COMMENT |
| LOW | docs/configuration.md | 501 | # Strategy. Default: portfolio (Router Core V3.4 — constraint-first ranking | COMMENT |
| LOW | scripts/sync-install-to-blockrun.sh | 1 | #!/bin/bash | COMMENT |
| LOW | .github/workflows/brand-sync.yml | 1 | # Vendored into every repo listed in blockrun's brand/consumers.json — the | COMMENT |
| LOW | .github/workflows/ci.yml | 61 | - name: Brand numbers | COMMENT |
| LOW | src/models.test.ts | 281 | it("keeps vision on Claude models that blockrun's catalog under-claims", () => { | COMMENT |
| LOW | src/models.test.ts | 301 | // blockrun-sol owner. | COMMENT |
| LOW | src/proxy.ts | 161 | // direct callers (ClawRouter using the full ID) still get HTTP 200; only | COMMENT |
| LOW | src/proxy.ts | 181 | // completion hangs; the gateway 400s the `free/` id) and hidden from the | COMMENT |
| LOW | src/proxy.ts | 201 | // vs OpenRouter's $0 pool), so one pool's outage does not take | COMMENT |
| LOW | src/proxy.ts | 1981 | "nano-banana-pro": "google/nano-banana-pro", | COMMENT |
| LOW | src/proxy.ts | 2381 | responseHeaders[key] = value; | COMMENT |
| LOW | src/proxy.ts | 4041 | if (!res.headersSent) { | COMMENT |
| LOW | src/proxy.ts | 5661 | } | COMMENT |
| LOW | src/proxy.ts | 6301 | res.on("close", onClientClose); | COMMENT |
| LOW | src/proxy.ts | 7761 | // API-key rail: no x402 payment happens, so `actualPayment` is always 0 | COMMENT |
| LOW | src/top-models.test.ts | 21 | // HTTP 410 Gone at NVIDIA in blockrun's 2026-07-28 re-probe (baa967b) — | COMMENT |
| LOW | src/index.ts | 441 | // | COMMENT |
| LOW | src/index.ts | 481 | COMMENT | |
| LOW | src/index.ts | 2061 | api: "openai-completions", | COMMENT |
| LOW | src/index.ts | 2421 | }); | COMMENT |
| LOW | src/index.ts | 2501 | // | COMMENT |
| LOW | src/models.ts | 41 | // (delisted 2026-06-13, both direct-Anthropic and Bedrock re-probed HTTP 200). | COMMENT |
| LOW | src/models.ts | 161 | // would silently ~5x every generic-`kimi` quote and break per-call-cap wallets (mirrors | COMMENT |
| LOW | src/models.ts | 201 | "qwen3.7-flash": "qwen/qwen3.7-flash", | COMMENT |
| LOW | src/models.ts | 281 | // | COMMENT |
| LOW | src/models.ts | 321 | "nvidia/nemotron-nano-12b-v2-vl": "free/nemotron-nano-12b-v2-vl", | COMMENT |
| LOW | src/models.ts | 341 | "qwen3.5-122b": "free/qwen3.5-122b-a10b", | COMMENT |
| LOW | src/models.ts | 381 | // nemotron-nano-9b-v2 hit 410 on 2026-08-30; the generic shorthands follow | COMMENT |
| LOW | src/models.ts | 441 | // `free` = the free-tier default. Must equal router-core's ecoTiers.SIMPLE | COMMENT |
| LOW | src/models.ts | 1301 | reasoning: true, | COMMENT |
| LOW | src/models.ts | 1981 | // NO `vision: true` — 2026-08-31. Both catalogs advertise vision on this | COMMENT |
| LOW | src/models.ts | 2061 | // both of blockrun's probe passes (blockrun #448, the #391 shape). Upstream | COMMENT |
| LOW | src/models.ts | 2121 | // been told, by the flag, that it would be seen. | COMMENT |
| LOW | src/models.ts | 2301 | maxOutput: 131072, | COMMENT |
| LOW | src/auth.ts | 401 | ...(await resolvedSolanaMaterial(coreSolanaKey)), | COMMENT |
| LOW | src/polymarket/tool.ts | 1 | // src/polymarket/tool.ts | COMMENT |
| LOW | src/polymarket/l1-auth-1271.ts | 1 | // src/utils/polymarket/l1-auth-1271.ts | COMMENT |
| LOW | src/polymarket/orders.ts | 1 | // src/utils/polymarket/orders.ts | COMMENT |
| LOW | src/polymarket/orders.ts | 301 | return { text: `Limit orders need both price and size (shares).`, isError: true }; | COMMENT |
| LOW | src/polymarket/constants.ts | 1 | // src/utils/polymarket/constants.ts | COMMENT |
| LOW | src/polymarket/creds.ts | 1 | // src/utils/polymarket/creds.ts | COMMENT |
| LOW | src/polymarket/relayer.ts | 1 | // src/utils/polymarket/relayer.ts | COMMENT |
| LOW | src/polymarket/client.ts | 1 | // src/utils/polymarket/client.ts | COMMENT |
| LOW | src/polymarket/wallet-adapter.ts | 1 | // src/polymarket/wallet-adapter.ts | COMMENT |
| LOW | src/polymarket/spend-policy.ts | 1 | // src/polymarket/spend-policy.ts | COMMENT |
| LOW | src/polymarket/withdraw.ts | 1 | // src/utils/polymarket/withdraw.ts | COMMENT |
| LOW | src/polymarket/redeem.ts | 1 | // src/utils/polymarket/redeem.ts | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/cli.ts | 650 | // Step 1: locate OpenClaw. `command -v` alone is not enough — npm runs lifecycle | COMMENT |
| LOW | src/cli.ts | 699 | // Step 2: preflight config compatibility before installation. Do not add the | COMMENT |
| LOW | src/cli.ts | 944 | // Step 3: sync the models allowlist + provider config + auth profile directly. | COMMENT |
| LOW | src/proxy.ts | 3384 | // Step 1: submit job. Fast models return 200 + image data inline within | COMMENT |
| LOW | src/proxy.ts | 3415 | // Step 2: slow path — BlockRun returned 202 + poll_url (slow model > 30s | COMMENT |
| LOW | src/proxy.ts | 3497 | // Step 3: save images to ~/.openclaw/blockrun/images/ and replace with localhost URLs | COMMENT |
| LOW | src/proxy.ts | 3873 | // Step 1: submit job. Server returns 202 with poll_url. | COMMENT |
| LOW | src/proxy.ts | 3904 | // Step 2: if no poll_url, upstream responded with the final result (legacy server) — | COMMENT |
| LOW | src/proxy.ts | 3991 | // Step 3: download any hosted URLs to local disk + rewrite to localhost. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | src/models.test.ts | 299 | // llama-3.2-11b-vision said "I'm unable to see the image" on 3 of 3 while a | COMMENT |
| MEDIUM | src/models.ts | 2201 | // back "I'm unable to see the image" / "you haven't provided an image", | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | openclaw.plugin.json | 64 | "placeholder": "brk_live_... (optional \u2014 pay by card at user.blockrun.ai)" | CODE |
| LOW | openclaw.plugin.json | 69 | "placeholder": "0x... (optional \u2014 auto-generated)" | CODE |
| LOW | test/test-model-selection.sh | 58 | apiKey: 'dummy-key', | CODE |
| LOW | src/proxy.api-key-services.test.ts | 152 | "x-api-key": "placeholder", | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/benchmark.py | 93 | except Exception as e: | CODE |
| LOW | scripts/benchmark.py | 161 | except Exception as e: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/docker-install-tests.sh | 97 | # Check if openclaw.plugin.json exists in the package | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/sync-install-to-blockrun.sh | 17 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | test/e2e.ts | 418 | "async function handleRequest() { ... }" | CODE |