nyxora 1.4.2 → 1.4.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +100 -38
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -1,70 +1,132 @@
|
|
|
1
1
|
# Nyxora Agent 🤖
|
|
2
2
|
|
|
3
|
-
|
|
3
|
+
[](https://opensource.org/licenses/MIT)
|
|
4
|
+
[](#)
|
|
5
|
+
[](#)
|
|
6
|
+
[](#)
|
|
4
7
|
|
|
5
|
-
|
|
8
|
+
A **secure, non-custodial, AI-native Web3 and System Automation Agent** built with Node.js and React. Designed for autonomous workflows with a premium Glassmorphism UI dashboard and client-side key isolation. It operates under a strict **Human-in-the-Loop** execution model for financial transactions, requiring explicit operator approval for any on-chain action.
|
|
6
9
|
|
|
7
10
|
---
|
|
8
11
|
|
|
9
|
-
##
|
|
12
|
+
## Key Features
|
|
13
|
+
|
|
14
|
+
### Advanced Trading, Security & Operations (New in v1.4.1)
|
|
15
|
+
* **System Automation & Full OS Access**: Instruct the agent to read/write local files, run terminal commands, and browse the web natively.
|
|
16
|
+
* **NLP Security Policy**: Command Nyxora using natural language to set security boundaries (e.g., *"Never touch partition E"*). Nyxora autonomously enforces these rules.
|
|
17
|
+
* **Dynamic Plugin Manager**: Dynamically load community-built skills. Simply provide a GitHub Gist URL, and Nyxora will hot-load the third-party skill.
|
|
18
|
+
* **Anti-Rugpull & Security Scanner**: Nyxora can scan smart contracts via GoPlus Labs to detect Honeypots, Hidden Taxes, and malicious proxy upgrades before you buy.
|
|
19
|
+
* **Automated Limit Orders**: Set natural language rules (e.g., "Sell my PEPE if price drops below $0.001"). Nyxora runs a background cron monitor and executes the swap while you sleep.
|
|
20
|
+
* **PNL & Portfolio Tracking**: The AI scans your wallets and multiplies balances by live DEX prices to give you real-time Net Worth estimations.
|
|
21
|
+
|
|
22
|
+
### Core Features
|
|
23
|
+
* **Multi-LLM Support**: Seamlessly switch between Google Gemini, OpenAI, OpenRouter (unlimited models!), or local Ollama models dynamically.
|
|
24
|
+
* **Premium Glassmorphism UI**: A gorgeous, resizable split-pane interface with Pseudo-Generative UI widgets (`<BalanceWidget>`, `<MarketWidget>`, `<SwapWidget>`).
|
|
25
|
+
* **Round-Robin API Rotation**: Add up to 10 API keys via the dashboard. The system will auto-rotate them to prevent rate-limiting and token drain.
|
|
26
|
+
* **Deep Personalization**: Feed the agent custom rules via `user.md` and define its core persona via `IDENTITY.md`.
|
|
27
|
+
* **Multi-Lingual Auto-Sync**: The agent natively detects your language and replies in the exact same language automatically.
|
|
28
|
+
* **Omnichannel Approvals & Telegram Integration**: Connect Nyxora to a Telegram Bot to execute trades, check prices, and chat on the go. Approve transactions directly from Telegram inline buttons!
|
|
29
|
+
* **Multi-Chain Support**: Pre-configured support for Ethereum, Base, BSC, Arbitrum, Optimism, and Sepolia Testnet.
|
|
10
30
|
|
|
11
|
-
|
|
31
|
+
---
|
|
32
|
+
|
|
33
|
+
## 📐 Architecture Workflow
|
|
34
|
+
|
|
35
|
+
This diagram shows how user interactions flow through the Nyxora Agent, from chat input to on-chain or OS execution:
|
|
36
|
+
|
|
37
|
+
```mermaid
|
|
38
|
+
graph TD
|
|
39
|
+
A[User Chat / Telegram Bot] -->|Natural Language Command| B(Nyxora LLM Core)
|
|
40
|
+
B --> C{Determine Required Skill}
|
|
41
|
+
C -->|Web3 Action| D[Web3 Skill Modules]
|
|
42
|
+
C -->|System Action| E[OS & Plugin Modules]
|
|
43
|
+
D --> F{Transaction Type}
|
|
44
|
+
F -->|Read-only| G[Fetch On-chain Data & Prices]
|
|
45
|
+
F -->|Write-action| H[Queue in Transaction Manager]
|
|
46
|
+
H --> I[Require Human-in-the-Loop Approval]
|
|
47
|
+
I -->|Approved| J[Broadcast to Blockchain]
|
|
48
|
+
I -->|Rejected| K[Cancel Transaction]
|
|
49
|
+
E --> L{Security Policy Check}
|
|
50
|
+
L -->|Violates Policy| M[Ask Explicit Permission]
|
|
51
|
+
L -->|Safe| N[Execute Shell / File Ops]
|
|
52
|
+
G --> O[Render Dashboard UI / Chat Response]
|
|
53
|
+
J --> O
|
|
54
|
+
K --> O
|
|
55
|
+
N --> O
|
|
56
|
+
```
|
|
57
|
+
|
|
58
|
+
---
|
|
59
|
+
|
|
60
|
+
## 🛡️ Safety Model
|
|
12
61
|
|
|
13
|
-
|
|
14
|
-
Nyxora dibekali dengan dompet (wallet) bawaan yang terenkripsi aman secara lokal.
|
|
15
|
-
* **Generate Wallet:** Anda dapat memerintahkan AI untuk membuat dompet EVM baru secara instan.
|
|
16
|
-
* **Cek Saldo & Portofolio:** Memeriksa saldo koin native (ETH, BNB, MATIC) atau token ERC-20, serta menghitung total kekayaan (Net Worth) secara real-time.
|
|
62
|
+
To protect user assets and prevent common security concerns associated with AI agents, `Nyxora` operates under a strict safety specification:
|
|
17
63
|
|
|
18
|
-
|
|
19
|
-
|
|
64
|
+
* **No .env Leaks**: Your Private Key is encrypted using `AES-256-GCM` and locked behind a custom Master Password in `~/.nyxora/keystore.json`.
|
|
65
|
+
* **No Credential Collection**: Private keys are handled strictly within local volatile memory and are never transmitted to LLM providers.
|
|
66
|
+
* **Explicit Transaction Confirmation**: Write actions (like transfers, swaps, bridges) require manual, explicit confirmation from the human operator via the Web Dashboard or Telegram before broadcasting.
|
|
67
|
+
* **Human-in-the-Loop Execution**: The tool is engineered as a secure operational utility. The AI agent acts as a command generator, leaving financial execution authority with the human controller.
|
|
20
68
|
|
|
21
|
-
|
|
22
|
-
* **Swap Token:** Menukar token di jaringan yang sama dengan simulasi rute likuiditas dan estimasi gas.
|
|
23
|
-
* **Bridge Lintas Jaringan:** Mengirim dan menukar token dari satu jaringan ke jaringan lainnya (misal: Arbitrum ke Base).
|
|
69
|
+
---
|
|
24
70
|
|
|
25
|
-
|
|
26
|
-
Anda dapat menetapkan aturan khusus dalam bahasa natural (misal: *"Jual PEPE saya jika harga turun di bawah $0.001"*). Nyxora akan menjalankan pemantauan (cron monitor) di latar belakang dan mengeksekusi *swap* secara otomatis saat Anda tidur!
|
|
71
|
+
## 📋 Example Safe Workflows
|
|
27
72
|
|
|
28
|
-
|
|
29
|
-
* **Market Intelligence:** Mengambil harga kripto secara live, pergerakan pasar 24 jam, dan likuiditas (terintegrasi dengan CoinGecko & DexScreener).
|
|
30
|
-
* **Security Scanner (GoPlus Labs):** Agen dapat memindai *smart contract* untuk mendeteksi Honeypot, pajak tersembunyi (Hidden Taxes), dan proksi berbahaya sebelum Anda membeli token.
|
|
73
|
+
The agent is designed for Web3 exploration, daily operations, and secure transaction execution. Typical workflows include:
|
|
31
74
|
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
* **
|
|
35
|
-
* **
|
|
75
|
+
* **Audit New Tokens**: Tell the AI, *"Check if the contract 0x... on Base is safe to buy."*
|
|
76
|
+
* **Track Portfolio Assets**: Tell the AI, *"What is my total net worth across all chains right now?"*
|
|
77
|
+
* **Automate Trading**: Tell the AI, *"Create a limit order to sell 1000 USDC for ETH if ETH drops below $3000."*
|
|
78
|
+
* **System Operations**: Tell the AI, *"Check my computer's RAM usage and save it to stats.txt."*
|
|
36
79
|
|
|
37
80
|
---
|
|
38
81
|
|
|
39
|
-
##
|
|
82
|
+
## 🔒 Security, Threat Model & Permission Boundary
|
|
83
|
+
|
|
84
|
+
This agent is designed with a **Zero-Knowledge to LLM** architectural pattern to ensure the highest levels of security:
|
|
85
|
+
|
|
86
|
+
* **Zero-Knowledge to AI Agent (LLM)**: Remote AI Agents and Large Language Models (LLMs) **never** handle your private keys. The LLM only generates structured JSON tool calls.
|
|
87
|
+
* **Cryptographic Memory Isolation**: Transaction signing occurs strictly client-side within the local Node.js process runtime using `viem`.
|
|
40
88
|
|
|
41
|
-
|
|
89
|
+
### 🛡️ Threat Model
|
|
90
|
+
* **NLP Sandboxing**: System access is bounded by plain-text rules defined in `security_policy.md`. The AI evaluates its own actions against this policy before execution.
|
|
91
|
+
* **Strict API Auth**: The local Express server is protected via ephemeral Session Tokens (`x-nyxora-token`) and Strict CORS.
|
|
92
|
+
* **Non-Autonomous Financials**: The tool never executes unsolicited on-chain actions. Every financial transaction is queued pending human approval.
|
|
42
93
|
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
94
|
+
### 📋 Permission Boundary Matrix
|
|
95
|
+
|
|
96
|
+
| Access Category | Permission Boundary | Rationale |
|
|
97
|
+
| :--- | :--- | :--- |
|
|
98
|
+
| **Read Access** | Read-Only Blockchain Queries | Fetching balances, contract security audits, transaction logs, and technical indicators. |
|
|
99
|
+
| **Write Access**| Optional Wallet Signing | Required **only** for broadcasting transactions (swap, bridge, mint, transfer). Locked behind Human Approval. |
|
|
100
|
+
| **Network Access**| Bounded Public APIs | Restricted strictly to the configured RPC endpoints, Block Explorers, DexScreener, and LLM APIs. |
|
|
101
|
+
| **System Access**| Local Machine Access | Governed entirely by `security_policy.md`. The agent can run OS commands but will halt if it detects a policy violation. |
|
|
102
|
+
|
|
103
|
+
For the full detailed security specifications, contact info, and vulnerability reporting procedures, refer to the [SECURITY.md](SECURITY.md) policy document.
|
|
47
104
|
|
|
48
105
|
---
|
|
49
106
|
|
|
50
|
-
##
|
|
107
|
+
## 🚀 Quick Start & Installation
|
|
51
108
|
|
|
52
|
-
Nyxora
|
|
109
|
+
Nyxora is available on NPM and can be installed as a global CLI tool on your operating system.
|
|
53
110
|
|
|
54
|
-
### 1.
|
|
55
|
-
|
|
111
|
+
### 1. Global Installation
|
|
112
|
+
Open your terminal (Command Prompt, PowerShell, or Linux Terminal) and run:
|
|
56
113
|
```bash
|
|
57
114
|
npm install -g nyxora
|
|
58
115
|
```
|
|
59
116
|
|
|
60
|
-
### 2.
|
|
61
|
-
|
|
117
|
+
### 2. Launching Nyxora
|
|
118
|
+
No need to navigate to any specific folder! Just type:
|
|
62
119
|
```bash
|
|
63
120
|
nyxora
|
|
64
121
|
```
|
|
65
|
-
|
|
122
|
+
On first launch, Nyxora will greet you with an **Interactive Setup Wizard**. This CLI wizard will guide you to securely configure your LLM providers, API keys, and Master Password Wallet.
|
|
123
|
+
|
|
124
|
+
The system will automatically initialize a secure vault in your `~/.nyxora/` directory and open the Web Dashboard in your browser!
|
|
66
125
|
|
|
67
|
-
|
|
126
|
+
## Architecture
|
|
127
|
+
* **Backend**: Node.js, Express, Viem (Web3), node-telegram-bot-api, OpenAI API.
|
|
128
|
+
* **Frontend**: React, Vite, Vanilla CSS, Web Speech API (TTS/STT).
|
|
129
|
+
* **Data**: Local `~/.nyxora/config.yaml` and `~/.nyxora/memory.json`.
|
|
68
130
|
|
|
69
|
-
|
|
70
|
-
|
|
131
|
+
## License
|
|
132
|
+
MIT License
|