The listing: same graph, Manual trigger, $0.05 on the Marketplace

`sync.mjs --trigger manual` emits gavel-drain-<chain>-listed.json — the
identical graph with the trigger swapped from Webhook to Manual, which is
what a Marketplace listing takes caller input through (P7). The webhook
graph is byte-identical before and after this change.

Listed 2026-09-11T12:36:25Z as slug `gavel-drain`, workflow
iv621084hfcq326rszuzb, workflowType write (settled BEFORE listing —
#2227 freezes it at the publish PATCH), $0.05 USDC per call.
POST https://app.keeperhub.com/api/mcp/workflows/gavel-drain/call answers
402 with an x402 v2 requirement on eip155:8453 and the input schema in the
bazaar extension. Because the row is `write`, a paid call returns
execTransaction calldata the caller signs and sends themselves — a judge can
drain a roster Safe from their own wallet.

Author: edycutjong

scripts/sync.mjs

@@ -19,6 +19,7 @@
  *   node scripts/sync.mjs --chain 8453
  *   node scripts/sync.mjs --chain 11155111 --safe-integration <id> [--discord-integration <id>]
  *   node scripts/sync.mjs --chain 11155111 --safe-integration <id> --push
+ *   node scripts/sync.mjs --chain 11155111 --safe-integration <id> --trigger manual   # Marketplace graph
  */
 
 import { readFileSync, writeFileSync, mkdirSync } from 'node:fs';
@@ -46,6 +47,15 @@ if (!chain) {
   process.exit(1);
 }
 
+/**
+ * Trigger type. Webhook is the default and what the sweeper calls. A Marketplace
+ * listing takes caller input through a Manual trigger (P7; docs/workflows/marketplace),
+ * so `--trigger manual` emits the same graph with the trigger swapped and the
+ * five template references renamed. Nothing else changes.
+ */
+const TRIGGER = String(flags.trigger ?? 'webhook').toLowerCase() === 'manual' ? 'Manual' : 'Webhook';
+const SAFE_ADDR = `{{@trigger-1:${TRIGGER}.safeAddress}}`;
+
 /** The Safe ABI fragments we need. execTransaction is the only manual ABI in the project. */
 const EXEC_ABI = [{
   inputs: [
@@ -110,7 +120,7 @@ const ROSTER = ${roster};
 // their own assemble() declaration, which hoists over the real one and
 // bypasses every guard at once. gate-addr below rejects non-addresses before
 // this node runs; this line makes the splice non-syntactic regardless.
-const __safeAddress = {{@trigger-1:Webhook.safeAddress}};
+const __safeAddress = ${SAFE_ADDR};
 const __hydrated = {{@hydrate-1:Hydrate Signatures.data}};
 const __transactions = (__hydrated && __hydrated.results) ? __hydrated.results : [];
 
@@ -141,7 +151,6 @@ return assemble({
 });`;
 }
 
-const SAFE_ADDR = '{{@trigger-1:Webhook.safeAddress}}';
 const node = (id, label, type, config, x, y) => ({
   id, type: type === 'trigger' ? 'trigger' : 'action',
   position: { x, y },
@@ -186,7 +195,7 @@ if (!web3Integration || web3Integration === true) {
 }
 
 const nodes = [
-  node('trigger-1', 'Webhook', 'trigger', { triggerType: 'Webhook' }, 0, 0),
+  node('trigger-1', TRIGGER, 'trigger', { triggerType: TRIGGER }, 0, 0),
 
   // The first thing that touches caller input. A webhook (or the public
   // Marketplace listing) can send anything; nothing downstream should have to
@@ -202,7 +211,7 @@ const nodes = [
   // `malformed-payload` for anything that slips past this.
   node('gate-addr', 'Valid Address', 'action', {
     actionType: 'Condition',
-    condition: '{{@trigger-1:Webhook.safeAddress}}.startsWith("0x") && {{@trigger-1:Webhook.safeAddress}}.length === 42',
+    condition: `${SAFE_ADDR}.startsWith("0x") && ${SAFE_ADDR}.length === 42`,
   }, 250, 0),
 
   node('queue-1', 'Safe Queue', 'action', {
@@ -276,11 +285,11 @@ if (discord) {
   nodes.push(
     node('report-exec-1', 'Report Executed', 'action', {
       actionType: 'discord/send-message', integrationId: discord,
-      message: 'gavel · {{@trigger-1:Webhook.safeAddress}} · nonce {{@assemble-1:Assemble.result.nonce}}\nEXECUTED → {{@exec-1:Exec Transaction.transactionHash}}',
+      message: `gavel · ${SAFE_ADDR} · nonce {{@assemble-1:Assemble.result.nonce}}\nEXECUTED → {{@exec-1:Exec Transaction.transactionHash}}`,
     }, 2500, -100),
     node('report-skip-1', 'Report Skipped', 'action', {
       actionType: 'discord/send-message', integrationId: discord,
-      message: 'gavel · {{@trigger-1:Webhook.safeAddress}} · nonce {{@assemble-1:Assemble.result.nonce}}\nNOT executed → {{@assemble-1:Assemble.result.reason}}\n{{@assemble-1:Assemble.result.detail}}',
+      message: `gavel · ${SAFE_ADDR} · nonce {{@assemble-1:Assemble.result.nonce}}\nNOT executed → {{@assemble-1:Assemble.result.reason}}\n{{@assemble-1:Assemble.result.detail}}`,
     }, 2250, 100),
   );
   edges.push(
@@ -290,14 +299,14 @@ if (discord) {
 }
 
 const workflow = {
-  name: `gavel-drain-${chainId}`,
+  name: `gavel-drain-${chainId}${TRIGGER === 'Manual' ? '-listed' : ''}`,
   description: 'Executes Safe transactions that already reached their signature threshold but were never executed. Generated by scripts/sync.mjs — do not hand-edit in the canvas.',
   nodes, edges,
 };
 if (MANIFEST.projectId) workflow.projectId = MANIFEST.projectId;
 
 mkdirSync(join(ROOT, 'workflows'), { recursive: true });
-const out = join(ROOT, 'workflows', `gavel-drain-${chainId}.json`);
+const out = join(ROOT, 'workflows', `gavel-drain-${chainId}${TRIGGER === 'Manual' ? '-listed' : ''}.json`);
 writeFileSync(out, JSON.stringify(workflow, null, 2));
 
 console.log(`\n  ${chain.name} (${chainId}) — ${nodes.length} nodes, ${edges.length} edges`);