…, and pre-payment validation (#87)

Releases #81. Adds blockrun_polymarket_read (20th tool), annotates every tool
by effect rather than price, validates Predexon request contracts before the
x402 payment is created, and serializes paid data calls from one wallet.

Gates: 279 tests, typecheck, build, brand-numbers --check, Polymarket
read-only e2e, and a stdio smoke confirming 20 tools / 9 in the trading
profile / 4 destructive.

Two of the three rules were wrong, and both charged users for a guaranteed failure.

markets/listings settles a payment and THEN returns 410 Gone. I unblocked it in
0.33.0 because blockrun's registry still lists, prices, and advertises it — but
the gateway only proxies, and Predexon retired the route. Registry presence is
not evidence that a route serves. #81 was right; 0.33.0 was the regression.

window is not a smart-money cohort filter. No params 400s; { window: '7d' }
alone ALSO 400s; { min_trades: '100' } alone succeeds with window defaulting to
all_time. 0.33.0 counted window as a filter and passed a certain paid 400
through. Now requires a smart-wallet criterion, and names the reason when only
window is present.

The candlestick interval whitelist is removed. On one market: no interval
succeeds, 1440 succeeds, 1h 422s, 60 returns a paid 400. Which integers a market
serves is data-dependent, so a numeric whitelist blocks valid calls AND lets
paid failures through. Only shape is checkable client-side.

Tool description and prediction-markets skill corrected. 279 tests, typecheck,
build, brand-numbers --check green.

…#88)

* 0.33.1 — live-probe the pre-payment rules 0.33.0 shipped on inference

Two of the three rules were wrong, and both charged users for a guaranteed failure.

markets/listings settles a payment and THEN returns 410 Gone. I unblocked it in
0.33.0 because blockrun's registry still lists, prices, and advertises it — but
the gateway only proxies, and Predexon retired the route. Registry presence is
not evidence that a route serves. #81 was right; 0.33.0 was the regression.

window is not a smart-money cohort filter. No params 400s; { window: '7d' }
alone ALSO 400s; { min_trades: '100' } alone succeeds with window defaulting to
all_time. 0.33.0 counted window as a filter and passed a certain paid 400
through. Now requires a smart-wallet criterion, and names the reason when only
window is present.

The candlestick interval whitelist is removed. On one market: no interval
succeeds, 1440 succeeds, 1h 422s, 60 returns a paid 400. Which integers a market
serves is data-dependent, so a numeric whitelist blocks valid calls AND lets
paid failures through. Only shape is checkable client-side.

Tool description and prediction-markets skill corrected. 279 tests, typecheck,
build, brand-numbers --check green.

* perf: remove the process-global paid-call queue

0.33.0 added serializePaidRequest on the reasoning that concurrent x402
authorizations from one wallet can race at the settlement layer. Measured, it
protects nothing.

Base mints a fresh random 32-byte nonce per payment (x402.ts:235), so two
concurrent authorizations produce different EIP-712 signatures and cannot
collide. The real Solana collision — deterministic signatures from a shared
blockhash — is handled inside @blockrun/llm 3.8.4, and its check-and-add
(findDistinctTx then issuedFor().add()) is synchronous with no await between, so
it is concurrency-safe without any caller queue. The one place concurrency
genuinely broke accounting is chat's settled-cost delta, fixed with a fresh
non-cached client (wallet.ts:214) — and chat was never in the queue.

Cost of keeping it, measured on 4 concurrent markets/search calls:
  concurrent  2392ms  ok=4/4
  serialized  6417ms  ok=4/4
  +4025ms (2.68x)
The unserialized arm returned 4/4 clean, which is itself evidence there was no
race to serialize against.

Removes the module, its tests, and the tool-description and skill copy that
advertised the behavior. Closes #89. 276 tests, typecheck, build green.

* fix: close the validator bypass, and require the SDK version the queue removal relies on

Review of this PR (Codex + three independent agents) found the headline fix
didn't hold and the queue removal's justification wasn't enforced. Both
confirmed by direct probe before fixing.

Every rule was bypassable by decorating the path. validateMarketRequest
stripped only outer slashes and matched case-sensitively, so
markets/listings?venue=polymarket, Markets/Listings, markets//listings, a
trailing tab, and a #fragment all sailed past and settled a payment for the
exact failure the rule exists to prevent. The repo already had the answer 13
lines away: normalizeClassifyPath in path-safety.ts drops query/fragment,
strips slashes, and lowercases, and its own doc comment describes this hazard
for the price tables. Reused here, plus control-character strip and interior
slash-run collapse. (The price-classification path still shares the
un-collapsed helper; noted in-code, out of scope here.)

The dependency floor did not require the fix the CHANGELOG credits. ^3.6.1
admitted seven published versions with no payment-distinctness, and the
lockfile pinned the oldest. In 3.6.1 createSolanaPaymentPayload has a fixed
compute-unit price and no nonce, so two concurrent same-price Solana calls in
one blockhash window build byte-identical transactions — precisely what the
deleted queue guarded, on the version CI actually installs. Raised to ^3.8.4;
lockfile now resolves 3.9.0, verified to retain findDistinctTx/issuedFor.

The benchmark that justified the removal was necessarily Base-only, since this
branch's node_modules was 3.6.1. It supports "Base cannot collide"; it never
supported the Solana half. Said so in the CHANGELOG rather than leaving the
number to imply more than it measured.

Smart-money accepted an unusable criterion: `{ min_trades: "" }` passed a
presence-only `in` test and 400s upstream exactly like no filter. Now requires
a non-blank value, matching the orderbooks rule ten lines up. The error message
no longer asserts all seven criteria work — only min_trades was probed alone;
the rest are named as accepted-by-symmetry.

Docs were teaching the broken values. Five code blocks across two skills still
handed out interval "60" — the value this release documents as a paid 400 —
while only the prose was updated; models copy the block. The parallel-calls
guidance I added was Base-only truth stated universally (the Solana payload has
no nonce field), and it contradicted signal-to-trade-demo, which still said
"do not launch in parallel". stanford-trading-demo still listed "serialized
x402 calls" as a live safety property. All corrected and made chain-aware.

CHANGELOG claimed 279 tests; the branch had 276 (the count predated deleting
payment-serialization.test.ts in the same diff). Also softened the
unconditional "check-and-add is synchronous" claim — the exhausted-nonce branch
does await, though it is unreachable below 65 identical payments per blockhash.

Tests: added coverage for every confirmed bypass, all seven criteria (dropping
four previously kept the suite green), unusable values, and the Binance route
that must keep "1h". Mutation-checked — reverting the normalization, dropping
criteria, or restoring the presence-only check each fails the suite.

279 tests, typecheck, build, brand-numbers --check green.

* chore(release): retarget this branch at 0.36.0 on current main

Opened as 0.33.1 off 0.33.0; main is now 0.35.0, so the release number moves to
0.36.0. Minor rather than patch: the paid-call queue removal changes runtime
behavior for every paid data tool, not just its validation rules.

Lockfile regenerated from package.json rather than taking either side of the
rebase conflict; @blockrun/llm resolves to 3.9.0, satisfying the ^3.8.4 floor
this branch requires for Solana payment distinctness.

Re-ran the whole gate on this baseline: 282 tests, typecheck, build,
brand-numbers --check, CLI-loads-without-sharp, and verify:prices (0 routes
under-reserving; the 19 over-reserving by $0.001 are the known gateway tx-fee
drop, unrelated to this branch).