nyxora 26.6.12 → 26.6.14

package/README.md

@@ -13,14 +13,14 @@ Nyxora is a **secure, non-custodial runtime infrastructure for autonomous onchai
 
 **Nyxora now natively supports the Model Context Protocol (MCP)**. You can transform your external AI agents (like Claude Desktop and Cursor) into secure Web3 actors that execute swaps and fetch balances using Nyxora's secure signer vault. [View the MCP Integration Guide](https://nyxoraai.github.io/Nyxora/guide/mcp-integration)
 
-It operates under an institutional-grade **Cryptographically Bound Human-in-the-Loop** execution model, ensuring that Remote AIs (LLMs) never have unilateral access to your funds.
+It operates under a **Zero-Trust, Defense-in-Depth Cryptographically Bound Human-in-the-Loop** execution model, ensuring that Remote AIs (LLMs) never have unilateral access to your funds.
 
 ---
 
 ## 🔥 Key Features
 
 ### Advanced Security Architecture
-*   **🛡️ On-Chain AI Kill-Switch**: Nyxora is governed by an Arbitrum Smart Contract (`NyxoraAgentRegistry`). Users have absolute cryptographic power to instantly paralyze the AI's on-chain execution if compromised, solving the Web3 AI safety dilemma. [Read more about our Arbitrum Architecture ->](https://nyxoraai.github.io/Nyxora/security/smart-contract)
+*   **🛡️ On-Chain AI Kill-Switch**: Nyxora is governed by an Arbitrum Smart Contract (`NyxoraAgentRegistry`). Users have absolute cryptographic power to instantly paralyze the AI's on-chain execution if compromised, solving the Web3 AI safety dilemma. [Read more about our Arbitrum Architecture](https://nyxoraai.github.io/Nyxora/security/smart-contract)
 *   **3-Tier IPC Architecture**: Nyxora is split into isolated processes: **Core** (LLM Runtime), **Policy Engine** (Guardrails on port 3001), and **Signer Vault** (Isolated Key Manager on Unix Sockets).
 *   **DeFi Configuration BYOK & UI Masking**: All aggregator and provider API keys are strictly isolated via a Bring Your Own Keys (BYOK) architecture into a heavily guarded `~/.nyxora/defi_keys.yaml` file. The local web Dashboard masks these injected secrets using `***********` and `IS_SET` censorship, completely neutralizing malicious browser extensions from exfiltrating your keys.
 *   **Approval Replay Protection (Nonce Guard)**: Transactions requested by the AI are drafted as hashes and signed with a randomized 16-byte Nonce. The `/api/transactions/:id/approve` endpoint strictly enforces Nonce matching to completely eliminate double-spending and Replay Attacks.
@@ -32,7 +32,7 @@ It operates under an institutional-grade **Cryptographically Bound Human-in-the-
 *   **Security Scanner**: Nyxora can scan smart contracts via GoPlus Labs to detect Honeypots, Hidden Taxes, and malicious proxy upgrades before you buy.
 *   **Advanced DeFi Optimization**: Autonomously supply assets to Aave V3, deposit into Beefy/Yearn Auto-Compounder Vaults, manage Uniswap V3 Liquidity (LP), and instantly revoke infinite approvals to secure your wallet. Features intelligent Transaction Chaining to auto-approve allowances prior to execution.
 *   **6-Engine Meta-Aggregator & Anti-MEV**: The core engine interfaces with a powerful 6-Engine Meta-Aggregator (**1inch, 0x, LI.FI, Relay, OpenOcean, and KyberSwap**) to route tokens cross-chain, ensuring absolute maximum liquidity depth.
-*   **Adaptive Auto Slippage Protection**: Nyxora enforces a dynamic and adaptive **'auto' slippage** by default to leverage dynamic MEV-protection from these enterprise aggregators. However, the user retains absolute control to override this dynamically—either globally via the Dashboard Settings or on a per-transaction basis through NLP chat commands (e.g., *"Swap 1 ETH to PEPE with 10% slippage"*).
+*   **Adaptive Auto Slippage Protection**: Nyxora enforces a dynamic and adaptive **'auto' slippage** by default to leverage dynamic MEV-protection from these industry-standard aggregators. However, the user retains absolute control to override this dynamically—either globally via the Dashboard Settings or on a per-transaction basis through NLP chat commands (e.g., *"Swap 1 ETH to PEPE with 10% slippage"*).
 
 *   **Cross-Chain Hybrid Market Scanner**: Real-time asset tracking combining CoinGecko global data with DexScreener on-chain metrics across Ethereum, Base, Solana, BSC, and more.
 *   **"Lean Degen" Auto-Whitelist**: Automatically intercepts Contract Addresses (CAs) whenever you check balances or swap tokens, saving them to your localized `user_whitelist.json` for future tracking.

package/dist/launcher.js

@@ -36,7 +36,15 @@ const spawnService = (name, command, args, env, inheritStdio = false) => {
         child = (0, child_process_1.spawn)(command, args, { env, stdio: inheritStdio ? 'inherit' : 'pipe' });
         if (!inheritStdio) {
             child.stdout?.on('data', (data) => process.stdout.write(`[${name}] ${data}`));
-            child.stderr?.on('data', (data) => process.stderr.write(`[${name}] ERROR: ${data}`));
+            child.stderr?.on('data', (data) => {
+                const msg = data.toString();
+                if (msg.toLowerCase().includes('warn')) {
+                    process.stderr.write(`[${name}] ${msg}`);
+                }
+                else {
+                    process.stderr.write(`[${name}] ERROR: ${msg}`);
+                }
+            });
         }
         child.on('close', async (code) => {
             console.log(`[${name}] Exited with code ${code}`);
@@ -101,8 +109,8 @@ if (fs_1.default.existsSync(socketPath)) {
 const children = [];
 const isCompiled = __filename.endsWith('.js');
 const ext = isCompiled ? '.js' : '.ts';
-const cmd = isCompiled ? 'node' : 'npx';
-const baseArgs = isCompiled ? [] : ['ts-node', '-T'];
+const cmd = isCompiled ? 'node' : path_1.default.join(__dirname, 'node_modules', '.bin', 'ts-node');
+const baseArgs = isCompiled ? [] : ['-T'];
 const signerPath = path_1.default.join(__dirname, `packages/signer/src/server${ext}`);
 const signer = spawnService('Signer', cmd, [...baseArgs, signerPath], env);
 children.push(signer);

package/dist/packages/core/src/agent/bridgeWatcher.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.startBridgeWatcher = startBridgeWatcher;
+const transactionManager_1 = require("./transactionManager");
+const telegram_1 = require("../gateway/telegram");
+const parser_1 = require("../config/parser");
+// In a real production environment, this would use the @eth-optimism/sdk 
+// to fetch the Merkle Proof and call proveWithdrawalTransaction on L1.
+// For the scope of this architecture prototype, we simulate the Challenge Period
+// watcher by using a time-delay, representing the exact asynchronous behavior.
+const CHALLENGE_PERIOD_MS = 2 * 60 * 1000; // Simulating a 2-minute challenge period for testnet demo
+function startBridgeWatcher() {
+    console.log('[Bridge Watcher] Started background daemon for asynchronous L2 withdrawals');
+    setInterval(async () => {
+        const config = (0, parser_1.loadConfig)();
+        const authId = config.integrations?.telegram?.authorized_chat_id;
+        if (!authId)
+            return;
+        const pending = transactionManager_1.txManager.getPendingWithdrawals();
+        const now = Date.now();
+        for (const w of pending) {
+            if (w.status === 'WAITING_FOR_CHALLENGE') {
+                if (now - w.createdAt > CHALLENGE_PERIOD_MS) {
+                    // The simulated challenge period is over. State root is "published".
+                    console.log(`[Bridge Watcher] Withdrawal ${w.id} is ready for L1 claim!`);
+                    transactionManager_1.txManager.updateWithdrawalStatus(w.id, 'READY_FOR_CLAIM');
+                    const amountDisplay = Number(w.amount) / 1e18; // assuming 18 decimals
+                    const message = `🔔 **Bridge Ready to Claim!**\n\nYour withdrawal of ${amountDisplay} ETH from ${w.l2Chain} to ${w.l1Chain} has completed its challenge period.\n\nShall I execute the Prove & Claim transaction on L1 now?`;
+                    await (0, telegram_1.sendPushNotification)(authId, message, w.id);
+                }
+            }
+        }
+    }, 30000); // Check every 30 seconds
+}

package/dist/packages/core/src/agent/reasoning.js

@@ -288,8 +288,12 @@ async function processUserInput(input, role = 'user', onProgress, sessionId) {
         if (responseMessage.tool_calls && responseMessage.tool_calls.length > 0) {
             let canFastReturnAll = true;
             let accumulatedResults = [];
-            // Disabled fastReturnTools to enforce Web3 Reasoning (V3 feature)
-            const fastReturnTools = [];
+            // Enabled fastReturnTools to eliminate 2nd LLM latency for transaction popups
+            const fastReturnTools = [
+                'transfer_token', 'transfer_native', 'swap_token', 'bridge_token',
+                'mint_nft', 'custom_tx', 'revoke_approval', 'supply_aave',
+                'deposit_yield_vault', 'provide_liquidity_v3'
+            ];
             for (const _toolCall of responseMessage.tool_calls) {
                 const toolCall = _toolCall;
                 let result = "";

package/dist/packages/core/src/agent/transactionManager.js

@@ -5,8 +5,32 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.txManager = void 0;
 const crypto_1 = __importDefault(require("crypto"));
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
 class TransactionManager {
     transactions = new Map();
+    withdrawals = new Map();
+    dbPath;
+    constructor() {
+        this.dbPath = path_1.default.join(process.cwd(), '.nyxora_withdrawals.json');
+        this.loadWithdrawals();
+    }
+    loadWithdrawals() {
+        if (fs_1.default.existsSync(this.dbPath)) {
+            try {
+                const data = fs_1.default.readFileSync(this.dbPath, 'utf8');
+                const parsed = JSON.parse(data);
+                parsed.forEach(w => this.withdrawals.set(w.id, w));
+            }
+            catch (e) {
+                console.error("Failed to load withdrawals DB:", e);
+            }
+        }
+    }
+    saveWithdrawals() {
+        const data = Array.from(this.withdrawals.values());
+        fs_1.default.writeFileSync(this.dbPath, JSON.stringify(data, null, 2));
+    }
     createPendingTransaction(type, chainName, details) {
         const id = crypto_1.default.randomUUID();
         const nonce = crypto_1.default.randomBytes(16).toString('hex');
@@ -36,5 +60,28 @@ class TransactionManager {
                 tx.result = result;
         }
     }
+    // --- WITHDRAWAL LOGIC ---
+    createPendingWithdrawal(data) {
+        const id = crypto_1.default.randomUUID();
+        const withdrawal = {
+            ...data,
+            id,
+            status: 'WAITING_FOR_CHALLENGE',
+            createdAt: Date.now()
+        };
+        this.withdrawals.set(id, withdrawal);
+        this.saveWithdrawals();
+        return withdrawal;
+    }
+    getPendingWithdrawals() {
+        return Array.from(this.withdrawals.values()).filter(w => w.status !== 'COMPLETED');
+    }
+    updateWithdrawalStatus(id, status) {
+        const w = this.withdrawals.get(id);
+        if (w) {
+            w.status = status;
+            this.saveWithdrawals();
+        }
+    }
 }
 exports.txManager = new TransactionManager();

package/dist/packages/core/src/config/parser.js

@@ -3,6 +3,8 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadRpcConfig = loadRpcConfig;
+exports.saveRpcConfig = saveRpcConfig;
 exports.loadApiKeys = loadApiKeys;
 exports.saveApiKeys = saveApiKeys;
 exports.loadConfig = loadConfig;
@@ -10,6 +12,27 @@ exports.saveConfig = saveConfig;
 const fs_1 = __importDefault(require("fs"));
 const yaml_1 = __importDefault(require("yaml"));
 const paths_1 = require("./paths");
+function loadRpcConfig() {
+    const rpcPath = (0, paths_1.getPath)('rpc_key.yaml');
+    if (fs_1.default.existsSync(rpcPath)) {
+        try {
+            return yaml_1.default.parse(fs_1.default.readFileSync(rpcPath, 'utf8')) || {};
+        }
+        catch (e) {
+            console.error('[Config] Failed to parse rpc_key.yaml', e);
+        }
+    }
+    return {};
+}
+function saveRpcConfig(rpcUrls) {
+    const rpcPath = (0, paths_1.getPath)('rpc_key.yaml');
+    try {
+        fs_1.default.writeFileSync(rpcPath, yaml_1.default.stringify(rpcUrls), 'utf8');
+    }
+    catch (error) {
+        console.error('Failed to save rpc_key.yaml', error);
+    }
+}
 async function loadApiKeys() {
     const config = loadConfig();
     return config.credentials || {};
@@ -23,6 +46,8 @@ async function saveApiKeys(newKeys) {
 }
 function loadConfig() {
     const configPath = (0, paths_1.getPath)('config.yaml');
+    const rpcPath = (0, paths_1.getPath)('rpc_key.yaml');
+    let rpcUrls = loadRpcConfig();
     try {
         const file = fs_1.default.readFileSync(configPath, 'utf8');
         const parsed = yaml_1.default.parse(file);
@@ -41,6 +66,16 @@ function loadConfig() {
             delete parsed.llm.credentials;
             needsSave = true;
         }
+        // Auto-migration logic: move web3.rpc_urls to rpc_key.yaml
+        if (parsed.web3 && parsed.web3.rpc_urls && Object.keys(parsed.web3.rpc_urls).length > 0) {
+            if (!fs_1.default.existsSync(rpcPath)) {
+                rpcUrls = parsed.web3.rpc_urls;
+                saveRpcConfig(rpcUrls);
+                console.log('[Config] Auto-migrated web3.rpc_urls to rpc_key.yaml.');
+            }
+            delete parsed.web3.rpc_urls;
+            needsSave = true;
+        }
         if (needsSave) {
             try {
                 const yamlStr = yaml_1.default.stringify(parsed);
@@ -65,7 +100,7 @@ function loadConfig() {
             },
             credentials: parsed.credentials || {},
             memory: parsed.memory || { type: 'file', path: './memory.json' },
-            web3: parsed.web3 || { rpc_urls: {} },
+            web3: { ...parsed.web3, rpc_urls: rpcUrls },
             integrations: parsed.integrations || {
                 telegram: { enabled: false }
             },
@@ -102,7 +137,7 @@ function loadConfig() {
             },
             credentials: {},
             memory: { type: 'file', path: './memory.json' },
-            web3: { rpc_urls: {} },
+            web3: { rpc_urls: rpcUrls },
             integrations: {
                 telegram: { enabled: false }
             },
@@ -116,7 +151,11 @@ function loadConfig() {
 function saveConfig(newConfig) {
     const configPath = (0, paths_1.getPath)('config.yaml');
     try {
-        const yamlStr = yaml_1.default.stringify(newConfig);
+        const configToSave = JSON.parse(JSON.stringify(newConfig));
+        if (configToSave.web3 && configToSave.web3.rpc_urls) {
+            delete configToSave.web3.rpc_urls;
+        }
+        const yamlStr = yaml_1.default.stringify(configToSave);
         fs_1.default.writeFileSync(configPath, yamlStr, 'utf8');
     }
     catch (error) {

package/dist/packages/core/src/gateway/server.js

@@ -70,6 +70,7 @@ const analyzeDocument_1 = require("../system/skills/analyzeDocument");
 const searchWeb_1 = require("../system/skills/searchWeb");
 const googleWorkspace_1 = require("../system/skills/googleWorkspace");
 const telegram_1 = require("./telegram");
+const bridgeWatcher_1 = require("../agent/bridgeWatcher");
 const eventListener_1 = require("../web3/eventListener");
 const googleAuthModule_1 = require("./googleAuthModule");
 const legalGenerator_1 = require("./legalGenerator");
@@ -263,6 +264,26 @@ app.post('/api/config', (req, res) => {
         res.status(500).json({ error: error.message });
     }
 });
+app.get('/api/rpc', (req, res) => {
+    try {
+        const rpcConfig = (0, parser_1.loadRpcConfig)();
+        res.json(rpcConfig);
+    }
+    catch (error) {
+        res.status(500).json({ error: error.message });
+    }
+});
+app.post('/api/rpc', (req, res) => {
+    try {
+        const currentRpc = (0, parser_1.loadRpcConfig)();
+        const newRpc = { ...currentRpc, ...req.body };
+        (0, parser_1.saveRpcConfig)(newRpc);
+        res.json({ success: true });
+    }
+    catch (error) {
+        res.status(500).json({ error: error.message });
+    }
+});
 app.get('/api/defi-keys', (req, res) => {
     try {
         const keys = (0, defiConfigManager_1.loadDefiKeys)();
@@ -849,6 +870,8 @@ function startServer() {
         console.log(`🤖 Nyxora API Server running on port ${PORT}`);
         // Start the Telegram bot listener
         (0, telegram_1.startTelegramBot)();
+        // Start Asynchronous Bridge Watcher
+        (0, bridgeWatcher_1.startBridgeWatcher)();
         // Start Event Listener for Limit Orders (V3)
         eventListener_1.eventListener.start();
     });

package/dist/packages/core/src/gateway/setup.js

@@ -424,6 +424,7 @@ Provider: ${config.llm.provider}`;
         config.integrations.telegram.authorized_chat_id = authorizedChatId;
     }
     (0, parser_1.saveConfig)(config);
+    (0, parser_1.saveRpcConfig)({});
     // Sync disabled_skills.json based on user selection
     const allWeb3Skills = [
         'transfer', 'swapToken', 'bridgeToken', 'customTx', 'mintNft',

package/dist/packages/core/src/gateway/telegram.js

@@ -5,6 +5,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.formatToTelegramHTML = formatToTelegramHTML;
 exports.startTelegramBot = startTelegramBot;
+exports.sendPushNotification = sendPushNotification;
 const telegraf_1 = require("telegraf");
 const reasoning_1 = require("../agent/reasoning");
 const parser_1 = require("../config/parser");
@@ -18,6 +19,7 @@ const executeDefi_1 = require("../web3/skills/executeDefi");
 const revokeApprovals_1 = require("../web3/skills/revokeApprovals");
 const formatter_1 = require("../utils/formatter");
 const picocolors_1 = __importDefault(require("picocolors"));
+let globalBotInstance = null;
 function formatToTelegramHTML(text) {
     if (!text)
         return "";
@@ -32,9 +34,11 @@ function formatToTelegramHTML(text) {
     // Convert code blocks and inline code
     html = html.replace(/```([\s\S]*?)```/g, '<pre><code>$1</code></pre>');
     html = html.replace(/`([^`]+)`/g, '<code>$1</code>');
-    // Strip <thought> blocks completely for user-friendly output
+    // Strip <thought> and <think> blocks completely for user-friendly output
     html = html.replace(/&lt;thought&gt;[\s\S]*?&lt;\/thought&gt;\n?/g, '');
     html = html.replace(/<thought>[\s\S]*?<\/thought>\n?/g, '');
+    html = html.replace(/&lt;think&gt;[\s\S]*?&lt;\/think&gt;\n?/g, '');
+    html = html.replace(/<think>[\s\S]*?<\/think>\n?/g, '');
     // Transform Markdown Tables to <pre> monospaced blocks so they don't break on mobile
     const tableRegex = /(?:\|.*\|(?:\n|$))+/g;
     html = html.replace(tableRegex, (match) => {
@@ -51,6 +55,7 @@ function startTelegramBot() {
     }
     try {
         const bot = new telegraf_1.Telegraf(token);
+        globalBotInstance = bot;
         // Pairing state variables
         const isPaired = !!config.integrations?.telegram?.authorized_chat_id;
         let generatedPin = '';
@@ -257,3 +262,22 @@ function startTelegramBot() {
         console.error('[Telegram] Failed to initialize bot:', error);
     }
 }
+async function sendPushNotification(chatId, message, withdrawalId) {
+    if (!globalBotInstance)
+        return;
+    try {
+        let extraParams = { parse_mode: 'HTML' };
+        if (withdrawalId) {
+            extraParams = {
+                ...extraParams,
+                ...telegraf_1.Markup.inlineKeyboard([
+                    [telegraf_1.Markup.button.callback(`✅ Approve Claim`, `claim_${withdrawalId}`)]
+                ])
+            };
+        }
+        await globalBotInstance.telegram.sendMessage(chatId, formatToTelegramHTML(message), extraParams);
+    }
+    catch (error) {
+        console.error('[Telegram] Failed to send push notification:', error);
+    }
+}

package/dist/packages/core/src/web3/aggregator/aggregatorMainnet.js

@@ -238,6 +238,8 @@ async function fetchKyberSwap(fromChain, fromToken, toToken, amount, address, sl
         if (!buildRes.ok)
             throw new Error(await buildRes.text());
         const buildData = await buildRes.json();
+        const isNative = fromToken.toLowerCase() === '0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee' ||
+            fromToken === '0x0000000000000000000000000000000000000000';
         return {
             provider: 'KyberSwap',
             expectedOutput: (Number(routeData.data.routeSummary.amountOut) / 1e18).toString(),
@@ -246,7 +248,7 @@ async function fetchKyberSwap(fromChain, fromToken, toToken, amount, address, sl
             txPayload: {
                 to: buildData.data.routerAddress,
                 data: buildData.data.data,
-                value: routeData.data.routeSummary.amountInUsd // simplified value mapping
+                value: isNative ? amount : "0" // FIXED: Mengirim jumlah asli dalam WEI jika Native ETH, atau 0 jika ERC20
             },
             rawQuote: buildData.data
         };

package/dist/packages/core/src/web3/aggregator/aggregatorTestnet.js

@@ -3,21 +3,30 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.fetchTestnetBestRoute = fetchTestnetBestRoute;
 const httpClient_1 = require("../../utils/httpClient");
 const viem_1 = require("viem");
+const nativeOpBridge_1 = require("../skills/nativeOpBridge");
 async function fetchTestnetBestRoute(fromChain, toChain, fromToken, toToken, amountInWei, userAddress, slippageTolerance = "auto") {
     const promises = [];
-    // Routing Logic
-    const isRelayRoute = (fromChain === 'sepolia' && toChain === 'base_sepolia') ||
-        (fromChain === 'base_sepolia' && toChain === 'sepolia');
-    const isArbitrumRoute = (fromChain === 'sepolia' && toChain === 'arbitrum_sepolia') ||
-        (fromChain === 'arbitrum_sepolia' && toChain === 'sepolia');
-    if (isRelayRoute) {
-        promises.push(fetchRelayTestnet(fromChain, toChain, fromToken, toToken, amountInWei, userAddress));
+    // Routing Logic Hierarchy
+    const isOpStack = toChain === 'optimism_sepolia' || toChain === 'base_sepolia' ||
+        fromChain === 'optimism_sepolia' || fromChain === 'base_sepolia';
+    const isArbitrum = toChain === 'arbitrum_sepolia' || fromChain === 'arbitrum_sepolia';
+    if (isOpStack) {
+        // Primary: Universal OP Stack
+        promises.push((0, nativeOpBridge_1.fetchNativeOpBridgeTestnet)(fromChain, toChain, fromToken, toToken, amountInWei, userAddress)
+            .catch(e => { console.warn('Native OP failed:', e.message); return null; }));
+        // Fallback 1: Relay Testnet (Only supports Base Sepolia natively via Relay endpoint)
+        if (toChain === 'base_sepolia' || fromChain === 'base_sepolia') {
+            promises.push(fetchRelayTestnet(fromChain, toChain, fromToken, toToken, amountInWei, userAddress)
+                .catch(e => { console.warn('Relay Fallback failed:', e.message); return null; }));
+        }
     }
-    else if (isArbitrumRoute) {
-        promises.push(fetchArbitrumBridgeTestnet(fromChain, toChain, fromToken, toToken, amountInWei, userAddress));
+    else if (isArbitrum) {
+        // Fallback 2: Official Arbitrum Bridge
+        promises.push(fetchArbitrumBridgeTestnet(fromChain, toChain, fromToken, toToken, amountInWei, userAddress)
+            .catch(e => { console.warn('Arbitrum Bridge failed:', e.message); return null; }));
     }
     else {
-        throw new Error(`[Testnet Meta-Aggregator] Unsupported testnet route from ${fromChain} to ${toChain}. Only Sepolia <-> Base Sepolia or Sepolia <-> Arbitrum Sepolia are supported.`);
+        throw new Error(`[Testnet Meta-Aggregator] Unsupported testnet route from ${fromChain} to ${toChain}.`);
     }
     const results = await Promise.allSettled(promises);
     let bestQuote = null;

package/dist/packages/core/src/web3/skills/bridgeToken.js

@@ -52,7 +52,7 @@ async function prepareBridgeToken(fromChain, toChain, tokenSymbol, amountStr, mo
             txData: route.txPayload,
             rawQuote: route.rawQuote
         });
-        return `TRANSACTION_PENDING\nBridge transaction of ${amountStr} ${tokenSymbol} from ${fromChain.toUpperCase()} to ${toChain.toUpperCase()} via ${route.provider} has been queued.\nTransaction ID: ${tx.id}\nPlease review and approve this transaction in your dashboard UI.`;
+        return `⏳ **Bridge queued:** ${amountStr} ${tokenSymbol} | ${fromChain.toUpperCase()} ➡️ ${toChain.toUpperCase()} | Via ${route.provider} | Approve below.`;
     }
     catch (error) {
         console.error("BRIDGE TOKEN ERROR:", error);

package/dist/packages/core/src/web3/skills/customTx.js

@@ -14,7 +14,7 @@ async function prepareCustomTx(chainName, toAddress, data, valueWei = "0", descr
             valueWei,
             description
         });
-        return `TRANSACTION_PENDING\nCustom transaction (${description}) on ${chainName.toUpperCase()} has been queued.\nTransaction ID: ${tx.id}\nPlease review and approve this transaction in your dashboard UI.`;
+        return `⏳ **Custom Tx queued:** ${description} | ${chainName.toUpperCase()} | Approve below.`;
     }
     catch (error) {
         return `Failed to prepare custom tx: ${error.message}`;

package/dist/packages/core/src/web3/skills/defiLending.js

@@ -62,7 +62,7 @@ async function prepareAaveSupply(chainName, tokenAddressOrSymbol, amountStr) {
                 symbol: metadata.symbol,
                 gasEstimate: "60000"
             });
-            return `TRANSACTION_PENDING: You need to approve Aave V3 to spend your ${metadata.symbol} before supplying. I have prepared the Approval transaction. ID: ${tx.id}. Please approve it on the Dashboard first.`;
+            return `⏳ **Approve queued:** ${metadata.symbol} | For: Aave V3 | ${chainName.toUpperCase()} | Approve below.`;
         }
         // 2. Simulate Supply
         let gasEstimate = 0n;
@@ -87,7 +87,7 @@ async function prepareAaveSupply(chainName, tokenAddressOrSymbol, amountStr) {
             symbol: metadata.symbol,
             gasEstimate: gasEstimate.toString()
         });
-        return `TRANSACTION_PENDING: I have prepared the Aave V3 Supply transaction for ${amountStr} ${metadata.symbol} on ${chainName}. Estimated gas units: ${gasEstimate}. Transaction ID: ${tx.id}. Wait for user to approve on the Dashboard.`;
+        return `⏳ **Aave Supply queued:** ${amountStr} ${metadata.symbol} | ${chainName.toUpperCase()} | Approve below.`;
     }
     catch (error) {
         return `Failed to prepare Aave supply: ${error.message}`;

package/dist/packages/core/src/web3/skills/mintNft.js

@@ -60,7 +60,7 @@ async function prepareMintNft(chainName, contractAddress, functionSignature, arg
             valueWei: valueWei.toString(),
             gasEstimate: gasEstimate.toString()
         });
-        return `TRANSACTION_PENDING: Simulated NFT Minting successfully. Estimated gas units: ${gasEstimate}. Transaction ID: ${tx.id}.\n\n⚠️ **SECURITY WARNING**: You are about to mint an NFT from an unverified contract address (${contractAddress}). Please ensure this is the official contract and not a honeypot or malicious proxy before approving on the Dashboard.`;
+        return `⏳ **Mint NFT queued:** ${contractAddress} | ${chainName.toUpperCase()} | ⚠️ Verify Contract | Approve below.`;
     }
     catch (error) {
         return `Simulation failed! Cannot prepare mint. Error: ${error.message}`;

package/dist/packages/core/src/web3/skills/nativeOpBridge.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fetchNativeOpBridgeTestnet = fetchNativeOpBridgeTestnet;
+const viem_1 = require("viem");
+const OP_L1_PORTAL_MAP = {
+    'base_sepolia': '0xfd0bf71f60660e2f608ed56e1659c450eb113120',
+    'optimism_sepolia': '0xfbb0621e0b23b5478b630bd55a5f21f67730b0f1'
+};
+const L2_STANDARD_BRIDGE = '0x4200000000000000000000000000000000000010';
+async function fetchNativeOpBridgeTestnet(fromChain, toChain, fromToken, toToken, amount, address) {
+    const isL1toL2 = fromChain === 'sepolia' && OP_L1_PORTAL_MAP[toChain];
+    const isL2toL1 = toChain === 'sepolia' && OP_L1_PORTAL_MAP[fromChain];
+    if (!isL1toL2 && !isL2toL1) {
+        throw new Error(`[Native OP Bridge] Unsupported route from ${fromChain} to ${toChain}`);
+    }
+    // Ensure it's Native ETH for simplicity
+    const isNative = fromToken.toLowerCase() === 'eth' ||
+        fromToken.toLowerCase() === '0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee' ||
+        fromToken === '0x0000000000000000000000000000000000000000';
+    if (!isNative) {
+        throw new Error(`[Native OP Bridge] Only Native ETH bridging is supported natively in this version.`);
+    }
+    if (isL1toL2) {
+        // Deposit (L1 -> L2)
+        const portalAddress = OP_L1_PORTAL_MAP[toChain];
+        const bridgeEthAbi = (0, viem_1.parseAbi)(['function bridgeETHTo(address _to, uint32 _minGasLimit, bytes _extraData) payable']);
+        const callData = (0, viem_1.encodeFunctionData)({
+            abi: bridgeEthAbi,
+            functionName: 'bridgeETHTo',
+            args: [address, 200000, '0x']
+        });
+        return {
+            provider: 'Native OP Stack Bridge (L1->L2)',
+            txPayload: {
+                to: portalAddress,
+                data: callData,
+                value: amount
+            },
+            expectedOutput: amount,
+            expectedOutputRaw: amount,
+            gasCostUsd: 0,
+            rawQuote: { note: 'Direct L1->L2 Deposit via OP Portal. Funds will arrive instantly on L2.' }
+        };
+    }
+    else {
+        // Withdrawal (L2 -> L1)
+        const withdrawEthAbi = (0, viem_1.parseAbi)(['function bridgeETHTo(address _to, uint32 _minGasLimit, bytes _extraData) payable']);
+        const callData = (0, viem_1.encodeFunctionData)({
+            abi: withdrawEthAbi,
+            functionName: 'bridgeETHTo',
+            args: [address, 200000, '0x']
+        });
+        return {
+            provider: 'Native OP Stack Bridge (L2->L1)',
+            txPayload: {
+                to: L2_STANDARD_BRIDGE,
+                data: callData,
+                value: amount
+            },
+            expectedOutput: amount,
+            expectedOutputRaw: amount,
+            gasCostUsd: 0,
+            rawQuote: {
+                note: 'Direct L2->L1 Withdrawal. WARNING: Requires 7-day challenge period.',
+                isAsyncWithdrawal: true,
+                l1PortalAddress: OP_L1_PORTAL_MAP[fromChain]
+            }
+        };
+    }
+}

package/dist/packages/core/src/web3/skills/provideLiquidity.js

@@ -111,11 +111,11 @@ async function prepareProvideLiquidity(chainName, token0AddressOrSymbol, token1A
         });
         if (allowance0 < amount0Wei) {
             const tx = transactionManager_1.txManager.createPendingTransaction('approve', chainName, { spenderAddress: positionManagerAddress, tokenAddress: token0, amountStr: amount0, symbol: meta0.symbol, gasEstimate: "60000" });
-            return `TRANSACTION_PENDING: You need to approve Uniswap V3 to spend your ${meta0.symbol}. ID: ${tx.id}. Please approve on Dashboard first.`;
+            return `⏳ **Approve queued:** ${meta0.symbol} | For: Uniswap V3 | ${chainName.toUpperCase()} | Approve below.`;
         }
         if (allowance1 < amount1Wei) {
             const tx = transactionManager_1.txManager.createPendingTransaction('approve', chainName, { spenderAddress: positionManagerAddress, tokenAddress: token1, amountStr: amount1, symbol: meta1.symbol, gasEstimate: "60000" });
-            return `TRANSACTION_PENDING: You need to approve Uniswap V3 to spend your ${meta1.symbol}. ID: ${tx.id}. Please approve on Dashboard first.`;
+            return `⏳ **Approve queued:** ${meta1.symbol} | For: Uniswap V3 | ${chainName.toUpperCase()} | Approve below.`;
         }
         // 2. Simulate Mint
         const deadline = BigInt(Math.floor(Date.now() / 1000) + 1200); // 20 mins
@@ -148,7 +148,7 @@ async function prepareProvideLiquidity(chainName, token0AddressOrSymbol, token1A
             positionManagerAddress, token0, token1, amount0, amount1, tickLower, tickUpper,
             gasEstimate: gasEstimate.toString()
         });
-        return `TRANSACTION_PENDING: Prepared Univ3 Liquidity deposit for ${amount0} ${meta0.symbol} & ${amount1} ${meta1.symbol}. Estimated gas: ${gasEstimate}. ID: ${tx.id}. Wait for user approval.`;
+        return `⏳ **Add Liquidity queued:** ${amount0} ${meta0.symbol} & ${amount1} ${meta1.symbol} | ${chainName.toUpperCase()} | Approve below.`;
     }
     catch (error) {
         return `Failed to prepare liquidity provision: ${error.message}`;

package/dist/packages/core/src/web3/skills/revokeApprovals.js

@@ -39,7 +39,7 @@ async function prepareRevokeApproval(chainName, tokenAddressOrSymbol, spenderAdd
             symbol,
             gasEstimate: gasEstimate.toString()
         });
-        return `TRANSACTION_PENDING: I have prepared the Revoke Approval transaction for ${symbol} to block spender ${spenderAddress}. Estimated gas units: ${gasEstimate}. Transaction ID: ${tx.id}. Wait for user to approve on the Dashboard.`;
+        return `⏳ **Revoke queued:** ${symbol} | Spender: ${spenderAddress} | ${chainName.toUpperCase()} | Approve below.`;
     }
     catch (error) {
         return `Failed to prepare revoke approval: ${error.message}`;

package/dist/packages/core/src/web3/skills/swapToken.js

@@ -38,7 +38,7 @@ async function prepareSwapToken(chainName, fromToken, toToken, amountStr, mode =
             txData: route.txPayload,
             rawQuote: route.rawQuote
         });
-        return `TRANSACTION_PENDING\nSwap transaction of ${amountStr} ${fromToken} to ${toToken} on ${chainName.toUpperCase()} via ${route.provider} has been queued. Expected output: ${route.expectedOutput} ${toToken}.\nTransaction ID: ${tx.id}\nPlease review and approve this transaction in your dashboard UI.`;
+        return `⏳ **Swap queued:** ${amountStr} ${fromToken} ➡️ ${route.expectedOutput} ${toToken} | ${chainName.toUpperCase()} | Via ${route.provider} | Approve below.`;
     }
     catch (error) {
         return `Failed to prepare swap: ${error.message}`;

package/dist/packages/core/src/web3/skills/transfer.js

@@ -66,7 +66,7 @@ async function prepareTransfer(chainName, toAddress, amountStr, token) {
             gasEstimate: gasEstimate.toString()
         });
         const tokenName = isNative ? "Native Token" : symbol;
-        return `TRANSACTION_PENDING: I have prepared the ${tokenName} transfer and simulated it successfully. Estimated gas units: ${gasEstimate}. Transaction ID: ${tx.id}. Wait for user to approve.`;
+        return `⏳ **Transfer queued:** ${amountStr} ${tokenName} | ${chainName.toUpperCase()} ➡️ ${toAddress} | Approve below.`;
     }
     catch (error) {
         return `Simulation failed! Cannot prepare transfer. Error: ${error.message}`;

package/dist/packages/core/src/web3/skills/yieldVault.js

@@ -50,7 +50,7 @@ async function prepareVaultDeposit(chainName, protocol, vaultAddress, tokenAddre
                 symbol: metadata.symbol,
                 gasEstimate: "60000"
             });
-            return `TRANSACTION_PENDING: You need to approve the ${protocol.toUpperCase()} Vault to spend your ${metadata.symbol}. I have prepared the Approval transaction. ID: ${tx.id}. Please approve it on the Dashboard first.`;
+            return `⏳ **Approve queued:** ${metadata.symbol} | For: ${protocol.toUpperCase()} Vault | ${chainName.toUpperCase()} | Approve below.`;
         }
         // 2. Simulate Deposit
         let gasEstimate = 0n;
@@ -76,7 +76,7 @@ async function prepareVaultDeposit(chainName, protocol, vaultAddress, tokenAddre
             protocol,
             gasEstimate: gasEstimate.toString()
         });
-        return `TRANSACTION_PENDING: I have prepared the deposit of ${amountStr} ${metadata.symbol} into the ${protocol.toUpperCase()} Auto-Compounder Vault. Estimated gas: ${gasEstimate}. Transaction ID: ${tx.id}. Wait for user approval on Dashboard.`;
+        return `⏳ **Vault Deposit queued:** ${amountStr} ${metadata.symbol} | ${protocol.toUpperCase()} | ${chainName.toUpperCase()} | Approve below.`;
     }
     catch (error) {
         return `Failed to prepare Vault deposit: ${error.message}`;