nyxora 26.6.21 → 26.6.23

package/dist/packages/core/src/gateway/cli.js

@@ -52,7 +52,6 @@ const parser_1 = require("../config/parser");
 async function main() {
     // 1. Determine configuration directory
     const appDir = (0, paths_1.getAppDir)();
-    const isGlobalMode = appDir !== process.cwd();
     console.log(`================================`);
     console.log(`🤖 Nyxora CLI Agent Booting Up...`);
     console.log(`📂 Config Directory: ${appDir}`);
@@ -219,30 +218,31 @@ async function main() {
         console.log(picocolors_1.default.green('  npm uninstall -g nyxora\n'));
         process.exit(0);
     }
-    // 2. Setup boilerplate files if in global mode and they don't exist
+    // 2. Setup boilerplate files since we enforce global mode
     let isFirstBoot = false;
-    if (isGlobalMode) {
-        const globalConfigPath = (0, paths_1.getPath)('config.yaml');
-        const globalUserMdPath = (0, paths_1.getPath)('user.md');
-        const globalIdentityMdPath = (0, paths_1.getPath)('IDENTITY.md');
-        // Copy default config.yaml
-        if (!fs_1.default.existsSync(globalConfigPath)) {
-            isFirstBoot = true;
-            const exampleConfigPath = path_1.default.resolve(__dirname, '../../../config.yaml');
-            if (fs_1.default.existsSync(exampleConfigPath)) {
-                fs_1.default.copyFileSync(exampleConfigPath, globalConfigPath);
-            }
-            else {
-                fs_1.default.writeFileSync(globalConfigPath, 'agent:\n  name: Nyxora-Agent\n  default_chain: base\nllm:\n  provider: openai\n  model: gpt-4\n  temperature: 0.7\nmemory:\n  type: file\n  path: memory.json\n');
-            }
+    const globalConfigPath = (0, paths_1.getPath)('config.yaml');
+    const globalUserMdPath = (0, paths_1.getPath)('user.md');
+    const globalIdentityMdPath = (0, paths_1.getPath)('IDENTITY.md');
+    // Copy default config.yaml
+    if (!fs_1.default.existsSync(globalConfigPath)) {
+        isFirstBoot = true;
+        let exampleConfigPath = path_1.default.resolve(__dirname, '../../../config.yaml'); // Dev
+        if (!fs_1.default.existsSync(exampleConfigPath)) {
+            exampleConfigPath = path_1.default.resolve(__dirname, '../../../../../config.yaml'); // Compiled
         }
-        if (!fs_1.default.existsSync(globalUserMdPath)) {
-            fs_1.default.writeFileSync(globalUserMdPath, 'Write custom instructions, special rules, user profiles, or the persona you want for Nyxora AI in this file.\n');
+        if (fs_1.default.existsSync(exampleConfigPath)) {
+            fs_1.default.copyFileSync(exampleConfigPath, globalConfigPath);
         }
-        if (!fs_1.default.existsSync(globalIdentityMdPath)) {
-            fs_1.default.writeFileSync(globalIdentityMdPath, 'You are a Web3 AI assistant named Nyxora.\n');
+        else {
+            fs_1.default.writeFileSync(globalConfigPath, 'agent:\n  name: Nyxora-Agent\n  default_chain: base\nllm:\n  provider: openai\n  model: gpt-4\n  temperature: 0.7\nmemory:\n  type: file\n  path: memory.json\n');
         }
     }
+    if (!fs_1.default.existsSync(globalUserMdPath)) {
+        fs_1.default.writeFileSync(globalUserMdPath, 'Write custom instructions, special rules, user profiles, or the persona you want for Nyxora AI in this file.\n');
+    }
+    if (!fs_1.default.existsSync(globalIdentityMdPath)) {
+        fs_1.default.writeFileSync(globalIdentityMdPath, 'You are a Web3 AI assistant named Nyxora.\n');
+    }
     if (isFirstBoot) {
         console.log('[Setup] New installation detected. Starting Setup Wizard...');
         await (0, setup_1.runSetupWizard)();

package/dist/packages/core/src/gateway/server.js

@@ -18,8 +18,11 @@ process.on('uncaughtException', (error) => {
 const path_1 = __importDefault(require("path"));
 const helmet_1 = __importDefault(require("helmet"));
 const express_rate_limit_1 = __importDefault(require("express-rate-limit"));
+const crypto_1 = __importDefault(require("crypto"));
+const os_1 = __importDefault(require("os"));
 const paths_1 = require("../config/paths");
 const state_1 = require("../utils/state");
+const WebSocketManager_1 = require("./WebSocketManager");
 const fs_1 = __importDefault(require("fs"));
 const yaml_1 = __importDefault(require("yaml"));
 const reasoning_1 = require("../agent/reasoning");
@@ -29,6 +32,7 @@ const config_1 = require("../web3/config");
 const tokens_1 = require("../web3/utils/tokens");
 const tracker_1 = require("./tracker");
 const transactionManager_1 = require("../agent/transactionManager");
+const multer_1 = __importDefault(require("multer"));
 const transfer_1 = require("../web3/skills/transfer");
 const swapToken_1 = require("../web3/skills/swapToken");
 const getBalance_1 = require("../web3/skills/getBalance");
@@ -64,6 +68,9 @@ const xManager_1 = require("../system/skills/xManager");
 const notionWorkspace_1 = require("../system/skills/notionWorkspace");
 const audioTranscribe_1 = require("../system/skills/audioTranscribe");
 const summarizeText_1 = require("../system/skills/summarizeText");
+const scheduleTask_1 = require("../system/skills/scheduleTask");
+const cancelTask_1 = require("../system/skills/cancelTask");
+const cronManager_1 = require("../agent/cronManager");
 const updateSecurityPolicy_1 = require("../system/skills/updateSecurityPolicy");
 const writeFile_1 = require("../system/skills/writeFile");
 const generateExcel_1 = require("../system/skills/generateExcel");
@@ -141,14 +148,11 @@ app.use('/api', (req, res, next) => {
     next();
 });
 // Serve Static Dashboard
-let rootDir = __dirname;
-while (!fs_1.default.existsSync(path_1.default.join(rootDir, 'packages', 'dashboard'))) {
-    const nextDir = path_1.default.dirname(rootDir);
-    if (nextDir === rootDir || rootDir === '/' || rootDir === 'C:\\')
-        break;
-    rootDir = nextDir;
+// __dirname is packages/core/dist/gateway (compiled) OR packages/core/src/gateway (dev)
+let dashboardPath = path_1.default.join(__dirname, '..', '..', '..', 'dashboard', 'dist'); // Dev
+if (!fs_1.default.existsSync(dashboardPath)) {
+    dashboardPath = path_1.default.join(__dirname, '..', '..', '..', '..', '..', 'packages', 'dashboard', 'dist'); // Compiled
 }
-const dashboardPath = path_1.default.join(rootDir, 'packages', 'dashboard', 'dist');
 app.use(express_1.default.static(dashboardPath));
 app.get('/', (req, res) => {
     res.sendFile(path_1.default.join(dashboardPath, 'index.html'));
@@ -159,6 +163,31 @@ app.get('/privacy', (req, res) => {
 app.get('/tos', (req, res) => {
     res.send((0, legalGenerator_1.generateTosHtml)());
 });
+const storage = multer_1.default.diskStorage({
+    destination: function (req, file, cb) {
+        const docsDir = path_1.default.join(os_1.default.homedir(), '.nyxora', 'docs');
+        if (!fs_1.default.existsSync(docsDir))
+            fs_1.default.mkdirSync(docsDir, { recursive: true });
+        cb(null, docsDir);
+    },
+    filename: function (req, file, cb) {
+        const safeName = file.originalname.replace(/[^a-zA-Z0-9.\-_]/g, '_');
+        cb(null, `${Date.now()}-${safeName}`);
+    }
+});
+const upload = (0, multer_1.default)({ storage });
+app.post('/api/upload', upload.single('file'), (req, res) => {
+    try {
+        if (!req.file) {
+            return res.status(400).json({ error: 'No file uploaded' });
+        }
+        return res.json({ filePath: req.file.path });
+    }
+    catch (err) {
+        console.error('[Upload] Error:', err);
+        return res.status(500).json({ error: 'Failed to save file' });
+    }
+});
 app.post('/api/upload-google-credentials', (req, res) => {
     try {
         const credentials = req.body.credentials;
@@ -352,7 +381,9 @@ const systemSkills = [
     xManager_1.xManagerToolDefinition,
     notionWorkspace_1.notionWorkspaceToolDefinition,
     audioTranscribe_1.audioTranscribeToolDefinition,
-    summarizeText_1.summarizeTextToolDefinition
+    summarizeText_1.summarizeTextToolDefinition,
+    scheduleTask_1.scheduleTaskDefinition,
+    cancelTask_1.cancelTaskDefinition
 ];
 app.get('/api/stats', (req, res) => {
     const stats = tracker_1.Tracker.getStats();
@@ -366,6 +397,12 @@ app.get('/api/stats', (req, res) => {
 app.get('/api/logs', (req, res) => {
     res.json(tracker_1.Tracker.getLogs());
 });
+app.get('/api/cron', (req, res) => {
+    res.json({
+        activeJobs: cronManager_1.cronManager.getActiveJobsCount(),
+        jobs: cronManager_1.cronManager.getJobs()
+    });
+});
 app.get('/api/skills', (req, res) => {
     const skillsWithStatus = allSkills.map(skill => ({
         ...skill,
@@ -815,6 +852,22 @@ function resetIdleTimer() {
         reflection_1.ReflectionEngine.runReflection();
     }, 3 * 60 * 1000); // 3 minutes idle
 }
+app.post('/api/v1/trade', async (req, res) => {
+    try {
+        const { message, session_id } = req.body;
+        if (!message)
+            return res.status(400).json({ error: 'Message is required' });
+        const traceId = crypto_1.default.randomBytes(8).toString('hex');
+        // Asynchronous background execution
+        (0, reasoning_1.processUserInput)(message, session_id || traceId).catch(err => {
+            console.error(`[TradeAPI] Error:`, err);
+        });
+        res.status(200).json({ status: 'processing', traceId });
+    }
+    catch (error) {
+        res.status(500).json({ error: error.message });
+    }
+});
 app.post('/api/chat', async (req, res) => {
     try {
         const { message, session_id } = req.body;
@@ -965,6 +1018,8 @@ function startServer() {
     const PORT = Number(process.env.PORT || 3000);
     const server = app.listen(PORT, '127.0.0.1', () => {
         console.log(`🤖 Nyxora API Server running on port ${PORT}`);
+        // Initialize WebSocket Manager
+        (0, WebSocketManager_1.initWebSocket)(server);
         // Start the Telegram bot listener
         (0, telegram_1.startTelegramBot)();
         // Start Asynchronous Bridge Watcher

package/dist/packages/core/src/gateway/setup.js

@@ -276,7 +276,7 @@ Provider: ${config.llm.provider}`;
             { value: 'gitManager', label: 'Git Operations (Commit/Push/Pull)' },
             { value: 'updateSecurityPolicy', label: 'Update policy.yaml rules', hint: 'safeguard' },
             { value: 'browseWeb', label: 'Browse & Scrape Webpages' },
-            { value: 'searchWeb', label: 'Smart Web Search (Tavily/Brave)', hint: 'Requires API Key' },
+            { value: 'searchWeb', label: 'Smart Web Search (Tavily/Brave/DuckDuckGo)', hint: 'Optional API Key' },
             { value: 'googleWorkspace', label: 'Google Workspace (Gmail, Docs, Sheets, Forms)', hint: 'Requires OAuth' },
             { value: 'notionWorkspace', label: 'Notion Integration' },
             { value: 'xManager', label: 'X/Twitter Management' },
@@ -308,15 +308,18 @@ Provider: ${config.llm.provider}`;
             options: [
                 { value: 'tavily', label: 'Tavily Search (Built for AI - 1000 free/mo)' },
                 { value: 'brave', label: 'Brave Search (Privacy focused - 2000 free/mo)' },
+                { value: 'duckduckgo', label: 'DuckDuckGo (Free & Built-in)' },
             ],
         });
         if ((0, prompts_1.isCancel)(searchProvider))
             return process.exit(0);
-        searchApiKey = (await (0, prompts_1.password)({
-            message: `Enter API Key for ${searchProvider} (Get it free at ${searchProvider === 'tavily' ? 'tavily.com' : 'search.brave.com'}):`,
-        }));
-        if ((0, prompts_1.isCancel)(searchApiKey))
-            return process.exit(0);
+        if (searchProvider !== 'duckduckgo') {
+            searchApiKey = (await (0, prompts_1.password)({
+                message: `Enter API Key for ${searchProvider} (Get it free at ${searchProvider === 'tavily' ? 'tavily.com' : 'search.brave.com'}):`,
+            }));
+            if ((0, prompts_1.isCancel)(searchApiKey))
+                return process.exit(0);
+        }
     }
     const setupTelegram = activeChannels.includes('telegram');
     let telegramToken = '';

package/dist/packages/core/src/gateway/telegram.js

@@ -19,6 +19,9 @@ const executeDefi_1 = require("../web3/skills/executeDefi");
 const revokeApprovals_1 = require("../web3/skills/revokeApprovals");
 const formatter_1 = require("../utils/formatter");
 const picocolors_1 = __importDefault(require("picocolors"));
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const os_1 = __importDefault(require("os"));
 let globalBotInstance = null;
 function formatToTelegramHTML(text) {
     if (!text)
@@ -162,6 +165,46 @@ function startTelegramBot() {
                 await ctx.reply('❌ Sorry, I encountered an error while processing your message.');
             }
         });
+        bot.on('document', async (ctx) => {
+            const doc = ctx.message.document;
+            const caption = ctx.message.caption || '';
+            console.log(`[Telegram] Received document from ${ctx.from?.first_name || 'User'}: ${doc.file_name}`);
+            await ctx.sendChatAction('typing');
+            try {
+                const fileLink = await ctx.telegram.getFileLink(doc.file_id);
+                const docsDir = path_1.default.join(os_1.default.homedir(), '.nyxora', 'docs');
+                if (!fs_1.default.existsSync(docsDir))
+                    fs_1.default.mkdirSync(docsDir, { recursive: true });
+                const safeName = (doc.file_name || 'telegram_doc').replace(/[^a-zA-Z0-9.\-_]/g, '_');
+                const localFilePath = path_1.default.join(docsDir, `${Date.now()}-${safeName}`);
+                const res = await fetch(fileLink.toString());
+                const buffer = await res.arrayBuffer();
+                fs_1.default.writeFileSync(localFilePath, Buffer.from(buffer));
+                const prompt = `Tolong analisis dokumen ini: ${localFilePath}\n\n${caption}`;
+                let progressMsgId = null;
+                const onProgress = async (progressText) => {
+                    try {
+                        if (!progressMsgId) {
+                            const sent = await ctx.reply(`<i>${progressText.replace(/_/g, '')}</i>`, { parse_mode: 'HTML' });
+                            progressMsgId = sent.message_id;
+                        }
+                        else {
+                            await ctx.telegram.editMessageText(ctx.chat.id, progressMsgId, undefined, `<i>${progressText.replace(/_/g, '')}</i>`, { parse_mode: 'HTML' });
+                        }
+                    }
+                    catch (e) { }
+                };
+                const response = await (0, reasoning_1.processUserInput)(prompt, 'user', onProgress, ctx.chat?.id.toString());
+                if (progressMsgId) {
+                    await ctx.telegram.deleteMessage(ctx.chat.id, progressMsgId).catch(() => { });
+                }
+                await ctx.reply(formatToTelegramHTML(response), { parse_mode: 'HTML' });
+            }
+            catch (error) {
+                console.error('[Telegram] Error processing document:', error);
+                await ctx.reply('❌ Sorry, I failed to download or analyze the document.');
+            }
+        });
         // Handle callbacks
         bot.action(/^approve_(.+)$/, async (ctx) => {
             const txId = ctx.match[1];

package/dist/packages/core/src/gateway/tracker.js

@@ -1,6 +1,12 @@
 "use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Tracker = void 0;
+const fs_1 = __importDefault(require("fs"));
+const WebSocketManager_1 = require("./WebSocketManager");
+const paths_1 = require("../config/paths");
 const stats = {
     cost: 0,
     tokens: 0,
@@ -9,6 +15,55 @@ const stats = {
 const eventLogs = [];
 const gatewayLogs = [];
 const MAX_LOGS = 100;
+let trackerFile = '';
+try {
+    trackerFile = (0, paths_1.getPath)('tracker.json');
+}
+catch (e) {
+    // Fallback
+}
+function loadState() {
+    if (!trackerFile)
+        return;
+    try {
+        if (fs_1.default.existsSync(trackerFile)) {
+            const data = JSON.parse(fs_1.default.readFileSync(trackerFile, 'utf8'));
+            if (data.stats)
+                Object.assign(stats, data.stats);
+            if (data.eventLogs && Array.isArray(data.eventLogs)) {
+                eventLogs.splice(0, eventLogs.length, ...data.eventLogs);
+            }
+            if (data.gatewayLogs && Array.isArray(data.gatewayLogs)) {
+                gatewayLogs.splice(0, gatewayLogs.length, ...data.gatewayLogs);
+            }
+        }
+    }
+    catch (e) { }
+}
+let savePending = false;
+function saveState() {
+    if (!trackerFile)
+        return;
+    if (savePending)
+        return;
+    savePending = true;
+    setTimeout(() => {
+        flushState();
+        savePending = false;
+    }, 1000);
+}
+function flushState() {
+    if (!trackerFile)
+        return;
+    try {
+        fs_1.default.writeFileSync(trackerFile, JSON.stringify({ stats, eventLogs, gatewayLogs }));
+    }
+    catch (e) { }
+}
+process.on('exit', flushState);
+process.on('SIGTERM', () => { flushState(); process.exit(0); });
+process.on('SIGINT', () => { flushState(); process.exit(0); });
+loadState();
 function formatTime() {
     const now = new Date();
     return now.toTimeString().split(' ')[0]; // Returns HH:MM:SS
@@ -23,9 +78,11 @@ exports.Tracker = {
         else if (provider === 'gemini')
             rate = 0.00001;
         stats.cost += (amount * rate);
+        saveState();
     },
     addMessage: () => {
         stats.messages += 1;
+        saveState();
     },
     getStats: () => {
         return { ...stats, cost: Number(stats.cost.toFixed(4)) };
@@ -34,11 +91,17 @@ exports.Tracker = {
         eventLogs.unshift({ timestamp: formatTime(), event, meta });
         if (eventLogs.length > MAX_LOGS)
             eventLogs.pop();
+        saveState();
     },
     addGatewayLog: (message, meta) => {
         gatewayLogs.unshift({ timestamp: formatTime(), message, meta });
         if (gatewayLogs.length > MAX_LOGS)
             gatewayLogs.pop();
+        saveState();
+        // Broadcast terminal logs to Dashboard via WebSocket
+        if (WebSocketManager_1.wsManager) {
+            WebSocketManager_1.wsManager.broadcastAll(`[${formatTime()}] ${message}`, meta?.level || 'info');
+        }
     },
     getLogs: () => {
         return {

package/dist/packages/core/src/memory/logger.js

@@ -169,7 +169,7 @@ class Logger {
         SELECT * FROM (
           SELECT role, content, name, tool_call_id, tool_calls, session_id, id 
           FROM messages 
-          WHERE session_id IS NULL 
+          WHERE session_id IS NULL
           ORDER BY id DESC LIMIT 40
         ) ORDER BY id ASC
       `).all();

package/dist/packages/core/src/system/skills/cancelTask.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.cancelTaskDefinition = void 0;
+exports.executeCancelTask = executeCancelTask;
+const cronManager_1 = require("../../agent/cronManager");
+exports.cancelTaskDefinition = {
+    type: "function",
+    function: {
+        name: "cancel_task",
+        description: "Cancel a scheduled background task (cron job). Use this when the user asks you to stop monitoring or cancel a previously scheduled task.",
+        parameters: {
+            type: "object",
+            properties: {
+                jobId: {
+                    type: "string",
+                    description: "The unique Job ID of the scheduled task to cancel."
+                }
+            },
+            required: ["jobId"]
+        }
+    }
+};
+async function executeCancelTask(args) {
+    const { jobId } = args;
+    if (!jobId) {
+        return "Error: Missing required parameter jobId.";
+    }
+    try {
+        const success = cronManager_1.cronManager.removeJob(jobId);
+        if (success) {
+            return `Success! I have cancelled the scheduled background task with Job ID: ${jobId}.`;
+        }
+        else {
+            return `Failed to cancel task. No active task found with Job ID: ${jobId}. You can check active jobs by asking me what tasks are currently running.`;
+        }
+    }
+    catch (error) {
+        return `Failed to cancel task: ${error.message}`;
+    }
+}

package/dist/packages/core/src/system/skills/editFile.js

@@ -10,6 +10,11 @@ const path_1 = __importDefault(require("path"));
 function editLocalFile(filePath, searchString, replacementString) {
     try {
         const absolutePath = path_1.default.resolve(filePath);
+        // Security Firewall: Block modification of core configuration files
+        const basename = path_1.default.basename(absolutePath);
+        if (['config.yaml', 'rpc_key.yaml', 'policy.yaml'].includes(basename)) {
+            return `Error: Access Denied. You are strictly forbidden from modifying core configuration files directly. If you need to update your agent name, use the update_identity tool instead.`;
+        }
         if (!fs_1.default.existsSync(absolutePath)) {
             return `Error: File not found at ${absolutePath}`;
         }

package/dist/packages/core/src/system/skills/scheduleTask.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.scheduleTaskDefinition = void 0;
+exports.executeScheduleTask = executeScheduleTask;
+const cronManager_1 = require("../../agent/cronManager");
+exports.scheduleTaskDefinition = {
+    type: "function",
+    function: {
+        name: "schedule_task",
+        description: "Schedule a recurring background task for the AI to execute automatically using a cron expression. Use this when the user asks you to remind them or monitor something periodically (e.g. 'check price every hour', 'monitor my wallet every 5 minutes'). The AI will execute the provided prompt at the scheduled interval and send the result via Telegram notification.",
+        parameters: {
+            type: "object",
+            properties: {
+                cronExpression: {
+                    type: "string",
+                    description: "A standard 5-field cron expression (minute hour day month day-of-week). Examples: '*/5 * * * *' (every 5 mins), '0 * * * *' (every hour), '0 8 * * *' (every day at 8 AM)."
+                },
+                prompt: {
+                    type: "string",
+                    description: "The prompt/command that the AI should execute when the cron triggers. E.g., 'What is the current price of Ethereum?'"
+                }
+            },
+            required: ["cronExpression", "prompt"]
+        }
+    }
+};
+async function executeScheduleTask(args) {
+    const { cronExpression, prompt } = args;
+    if (!cronExpression || !prompt) {
+        return "Error: Missing required parameters cronExpression or prompt.";
+    }
+    try {
+        const jobId = cronManager_1.cronManager.addJob(cronExpression, prompt);
+        return `Success! I have scheduled the background task.\nJob ID: ${jobId}\nSchedule: ${cronExpression}\nPrompt to execute: "${prompt}"\n\nYou will receive a notification via Telegram every time this task completes.`;
+    }
+    catch (error) {
+        return `Failed to schedule task: ${error.message}. Please ensure the cron expression is valid.`;
+    }
+}

package/dist/packages/core/src/system/skills/searchWeb.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.searchWebToolDefinition = void 0;
 exports.searchWeb = searchWeb;
 const parser_1 = require("../../config/parser");
+const duck_duck_scrape_1 = require("duck-duck-scrape");
 const SEARXNG_INSTANCES = [
     'https://search.mdosch.de',
     'https://searx.tiekoetter.com',
@@ -79,6 +80,25 @@ async function searchSearxng(query, depth = 1) {
     }
     throw new Error('[SearXNG Error] All decentralized instances failed.');
 }
+async function searchDuckDuckGo(query, depth = 1) {
+    try {
+        const searchResults = await (0, duck_duck_scrape_1.search)(query, {
+            safeSearch: duck_duck_scrape_1.SafeSearchType.MODERATE
+        });
+        if (!searchResults.noResults && searchResults.results.length > 0) {
+            const maxResults = depth > 1 ? 15 : 8;
+            return searchResults.results.slice(0, maxResults).map(r => ({
+                title: r.title,
+                url: r.url,
+                content: r.description || r.title
+            }));
+        }
+        return [];
+    }
+    catch (e) {
+        throw new Error(`[DuckDuckGo Error] Failed to scrape: ${e.message}`);
+    }
+}
 const searchCache = new Map();
 async function searchWeb(query, depth = 1) {
     // Auto-inject current year for time-sensitive queries
@@ -119,13 +139,25 @@ async function searchWeb(query, depth = 1) {
                             results = await searchBrave(finalQuery, creds.brave_key, depth);
                         }
                         catch (e2) {
-                            console.warn('[WebSearch] Backup provider (Brave) failed. Falling back to SearXNG Mesh...');
-                            results = await searchSearxng(finalQuery, depth);
+                            console.warn('[WebSearch] Backup provider (Brave) failed. Falling back to DuckDuckGo (L3)...');
+                            try {
+                                results = await searchDuckDuckGo(finalQuery, depth);
+                            }
+                            catch (e3) {
+                                console.warn('[WebSearch] DuckDuckGo failed. Falling back to SearXNG Mesh...');
+                                results = await searchSearxng(finalQuery, depth);
+                            }
                         }
                     }
                     else {
-                        console.warn('[WebSearch] No backup provider found. Falling back to SearXNG Mesh...');
-                        results = await searchSearxng(finalQuery, depth);
+                        console.warn('[WebSearch] No backup premium provider found. Falling back to DuckDuckGo (L3)...');
+                        try {
+                            results = await searchDuckDuckGo(finalQuery, depth);
+                        }
+                        catch (e3) {
+                            console.warn('[WebSearch] DuckDuckGo failed. Falling back to SearXNG Mesh...');
+                            results = await searchSearxng(finalQuery, depth);
+                        }
                     }
                 }
                 else {
@@ -145,13 +177,25 @@ async function searchWeb(query, depth = 1) {
                             results = await searchTavily(finalQuery, creds.tavily_key, depth);
                         }
                         catch (e2) {
-                            console.warn('[WebSearch] Backup provider (Tavily) failed. Falling back to SearXNG Mesh...');
-                            results = await searchSearxng(finalQuery, depth);
+                            console.warn('[WebSearch] Backup provider (Tavily) failed. Falling back to DuckDuckGo (L3)...');
+                            try {
+                                results = await searchDuckDuckGo(finalQuery, depth);
+                            }
+                            catch (e3) {
+                                console.warn('[WebSearch] DuckDuckGo failed. Falling back to SearXNG Mesh...');
+                                results = await searchSearxng(finalQuery, depth);
+                            }
                         }
                     }
                     else {
-                        console.warn('[WebSearch] No backup provider found. Falling back to SearXNG Mesh...');
-                        results = await searchSearxng(finalQuery, depth);
+                        console.warn('[WebSearch] No backup premium provider found. Falling back to DuckDuckGo (L3)...');
+                        try {
+                            results = await searchDuckDuckGo(finalQuery, depth);
+                        }
+                        catch (e3) {
+                            console.warn('[WebSearch] DuckDuckGo failed. Falling back to SearXNG Mesh...');
+                            results = await searchSearxng(finalQuery, depth);
+                        }
                     }
                 }
                 else {
@@ -159,6 +203,15 @@ async function searchWeb(query, depth = 1) {
                 }
             }
         }
+        else if (provider === 'duckduckgo') {
+            try {
+                results = await searchDuckDuckGo(finalQuery, depth);
+            }
+            catch (e) {
+                console.warn('[WebSearch] Primary provider (DuckDuckGo) failed. Falling back to SearXNG Mesh...');
+                results = await searchSearxng(finalQuery, depth);
+            }
+        }
         else {
             results = await searchSearxng(finalQuery, depth);
         }

package/dist/packages/core/src/system/skills/writeFile.js

@@ -10,6 +10,11 @@ const path_1 = __importDefault(require("path"));
 function writeLocalFile(filePath, content) {
     try {
         const absolutePath = path_1.default.resolve(filePath);
+        // Security Firewall: Block modification of core configuration files
+        const basename = path_1.default.basename(absolutePath);
+        if (['config.yaml', 'rpc_key.yaml', 'policy.yaml'].includes(basename)) {
+            return `Error: Access Denied. You are strictly forbidden from modifying core configuration files directly. If you need to update your agent name, use the update_identity tool instead.`;
+        }
         const dir = path_1.default.dirname(absolutePath);
         if (!fs_1.default.existsSync(dir)) {
             fs_1.default.mkdirSync(dir, { recursive: true });

package/dist/packages/core/src/web3/skills/getPrice.js

@@ -7,7 +7,7 @@ exports.getPriceToolDefinition = {
     type: "function",
     function: {
         name: "get_price",
-        description: "Fetches the current price of a cryptocurrency. Use ONLY when the user explicitly asks for a simple price check (e.g. 'harga', 'price'). Do NOT use this for 'analysis', 'market analysis', or 'analisis pasar'.",
+        description: "Fetches the current price of a cryptocurrency.",
         parameters: {
             type: "object",
             properties: {