nyxora 26.6.21 → 26.6.23

package/dist/packages/core/src/web3/utils/vaultClient.js

@@ -9,6 +9,8 @@ const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 const os_1 = __importDefault(require("os"));
 const crypto_1 = __importDefault(require("crypto"));
+const http_1 = __importDefault(require("http"));
+const msgpackr_1 = require("msgpackr");
 function getInternalToken() {
     try {
         const tokenPath = path_1.default.join(os_1.default.homedir(), '.nyxora', 'auth', 'runtime.token');
@@ -21,19 +23,43 @@ function getInternalToken() {
 }
 async function getAddress() {
     const token = getInternalToken();
-    try {
-        const res = await fetch(`http://127.0.0.1:${process.env.POLICY_PORT || 3001}/address`, {
-            headers: token ? { 'Authorization': `Bearer ${token}` } : {},
-            signal: AbortSignal.timeout(30000)
+    return new Promise((resolve, reject) => {
+        const POLICY_SOCKET = '/tmp/nyxora-policy.sock';
+        const options = {
+            socketPath: fs_1.default.existsSync(POLICY_SOCKET) ? POLICY_SOCKET : undefined,
+            host: fs_1.default.existsSync(POLICY_SOCKET) ? undefined : '127.0.0.1',
+            port: fs_1.default.existsSync(POLICY_SOCKET) ? undefined : (process.env.POLICY_PORT || 3001),
+            path: '/address',
+            method: 'GET',
+            headers: {
+                ...(token ? { 'Authorization': `Bearer ${token}` } : {})
+            }
+        };
+        const req = http_1.default.request(options, (res) => {
+            let data = '';
+            res.on('data', chunk => data += chunk);
+            res.on('end', () => {
+                try {
+                    if (res.statusCode !== 200) {
+                        reject(new Error(data));
+                        return;
+                    }
+                    const parsed = JSON.parse(data);
+                    resolve(parsed.address);
+                }
+                catch (e) {
+                    reject(new Error(`Failed to get address from vault: ${e.message}`));
+                }
+            });
         });
-        if (!res.ok)
-            throw new Error(await res.text());
-        const data = await res.json();
-        return data.address;
-    }
-    catch (error) {
-        throw new Error(`Failed to get address from vault: ${error.message}`);
-    }
+        req.on('error', (error) => {
+            reject(new Error(`Failed to get address from vault: ${error.message}`));
+        });
+        req.setTimeout(30000, () => {
+            req.destroy(new Error('Timeout'));
+        });
+        req.end();
+    });
 }
 async function submitTransaction(txPayload) {
     const token = getInternalToken();
@@ -45,25 +71,49 @@ async function submitTransaction(txPayload) {
         const secret = getInternalToken() || '';
         txPayload.internalSignature = crypto_1.default.createHmac('sha256', secret).update(txPayload.chainName + amountWei).digest('hex');
     }
-    try {
-        const res = await fetch(`http://127.0.0.1:${process.env.POLICY_PORT || 3001}/request-tx`, {
+    return new Promise((resolve, reject) => {
+        const POLICY_SOCKET = '/tmp/nyxora-policy.sock';
+        const payloadBuffer = (0, msgpackr_1.pack)(txPayload);
+        const options = {
+            socketPath: fs_1.default.existsSync(POLICY_SOCKET) ? POLICY_SOCKET : undefined,
+            host: fs_1.default.existsSync(POLICY_SOCKET) ? undefined : '127.0.0.1',
+            port: fs_1.default.existsSync(POLICY_SOCKET) ? undefined : (process.env.POLICY_PORT || 3001),
+            path: '/request-tx',
             method: 'POST',
             headers: {
-                'Content-Type': 'application/json',
+                'Content-Type': 'application/msgpack',
+                'Content-Length': payloadBuffer.length,
                 ...(token ? { 'Authorization': `Bearer ${token}` } : {})
-            },
-            body: JSON.stringify(txPayload),
-            signal: AbortSignal.timeout(30000)
+            }
+        };
+        const req = http_1.default.request(options, (res) => {
+            let data = '';
+            res.on('data', chunk => data += chunk);
+            res.on('end', () => {
+                try {
+                    const parsed = JSON.parse(data);
+                    if (res.statusCode !== 200) {
+                        reject(new Error(parsed.error || 'Failed to submit transaction'));
+                        return;
+                    }
+                    if (parsed.status === 'pending') {
+                        resolve(`Pending (ID: ${parsed.txId})`);
+                        return;
+                    }
+                    resolve(parsed.signedHash || parsed.hash || parsed.txHash || parsed.status || 'Transaction executed successfully (No Hash returned)');
+                }
+                catch (e) {
+                    reject(new Error(`Failed to parse vault response: ${e.message}`));
+                }
+            });
         });
-        const data = await res.json();
-        if (!res.ok)
-            throw new Error(data.error || 'Failed to submit transaction');
-        if (data.status === 'pending') {
-            return `Pending (ID: ${data.txId})`;
-        }
-        return data.signedHash || data.hash || data.txHash || data.status || 'Transaction executed successfully (No Hash returned)';
-    }
-    catch (error) {
-        throw new Error(`Transaction submission failed: ${error.message}`);
-    }
+        req.on('error', (error) => {
+            reject(new Error(`Transaction submission failed: ${error.message}`));
+        });
+        req.setTimeout(30000, () => {
+            req.destroy(new Error('Timeout'));
+        });
+        req.write(payloadBuffer);
+        req.end();
+    });
 }

package/dist/packages/policy/src/server.js

@@ -15,6 +15,7 @@ const zod_1 = require("zod");
 const path_1 = __importDefault(require("path"));
 const crypto_1 = __importDefault(require("crypto"));
 const os_1 = __importDefault(require("os"));
+const msgpackr_1 = require("msgpackr");
 process.on('unhandledRejection', (reason, promise) => {
     console.error('[Anti-Crash] Unhandled Rejection at:', promise, 'reason:', reason);
 });
@@ -35,6 +36,25 @@ catch (e) {
 const SIGNER_SOCKET = process.env.SIGNER_SOCKET_PATH || '/tmp/nyxora-signer.sock';
 const app = (0, express_1.default)();
 app.use(express_1.default.json());
+// MessagePack Parser Middleware for Hyper-Optimized IPC
+app.use((req, res, next) => {
+    if (req.headers['content-type'] === 'application/msgpack') {
+        let chunks = [];
+        req.on('data', chunk => chunks.push(chunk));
+        req.on('end', () => {
+            try {
+                req.body = (0, msgpackr_1.unpack)(Buffer.concat(chunks));
+                next();
+            }
+            catch (e) {
+                res.status(400).json({ error: 'Invalid MessagePack payload' });
+            }
+        });
+    }
+    else {
+        next();
+    }
+});
 const TxRequestSchema = zod_1.z.object({
     type: zod_1.z.enum(['transfer', 'swap', 'bridge', 'mint', 'custom']),
     chainName: zod_1.z.string(),
@@ -237,7 +257,8 @@ app.post('/approve-tx/:id', (req, res) => {
     signerReq.write(requestPayload);
     signerReq.end();
 });
-const server = app.listen(PORT, '127.0.0.1', () => {
+const POLICY_SOCKET = '/tmp/nyxora-policy.sock';
+const server = app.listen(Number(PORT), '127.0.0.1', () => {
     console.log(`[Policy Engine] Listening on 127.0.0.1:${PORT} (Secured Local Loopback)`);
 });
 server.on('error', (e) => {
@@ -250,3 +271,10 @@ server.on('error', (e) => {
         process.exit(1);
     }
 });
+// Start UDS Server for Hyper-Optimized IPC
+const udsServer = http_1.default.createServer(app);
+if (fs_1.default.existsSync(POLICY_SOCKET))
+    fs_1.default.unlinkSync(POLICY_SOCKET);
+udsServer.listen(POLICY_SOCKET, () => {
+    console.log(`[Policy Engine] Listening on UDS ${POLICY_SOCKET} (Hyper-Optimized IPC)`);
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nyxora",
-  "version": "26.6.21",
+  "version": "26.6.23",
   "description": "Your Personal Web3 Assistant",
   "keywords": [
     "web3",
@@ -60,11 +60,14 @@
     "dotenv": "^17.4.2",
     "duck-duck-scrape": "^2.2.7",
     "express": "^5.2.1",
+    "msgpackr": "^2.0.4",
     "express-rate-limit": "^7.5.0",
     "helmet": "^8.0.0",
     "isolated-vm": "^6.1.2",
     "jsonwebtoken": "^9.0.2",
     "mammoth": "^1.6.0",
+    "multer": "^2.2.0",
+    "node-cron": "^4.4.1",
     "open": "^11.0.0",
     "openai": "^6.39.0",
     "pdf-parse": "^2.4.5",
@@ -77,6 +80,7 @@
     "typescript": "^6.0.3",
     "viem": "^2.51.0",
     "write-excel-file": "^4.1.1",
+    "ws": "^8.21.0",
     "yaml": "^2.9.0",
     "zod": "^3.23.8"
   },
@@ -96,7 +100,9 @@
   },
   "devDependencies": {
     "@types/jsonwebtoken": "^9.0.5",
+    "@types/ws": "^8.5.10",
     "@types/node": "^25.9.1",
+    "@types/node-cron": "^3.0.11",
     "concurrently": "^10.0.3",
     "oxc-minify": "^0.135.0",
     "vitepress": "^2.0.0-alpha.17"

package/packages/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nyxora-agent-core",
-  "version": "26.6.21",
+  "version": "26.6.23",
   "private": true,
   "main": "src/gateway/server.ts",
   "dependencies": {
@@ -14,6 +14,9 @@
     "express-rate-limit": "^7.5.0",
     "helmet": "^8.0.0",
     "mammoth": "^1.12.0",
+    "msgpackr": "^2.0.4",
+    "multer": "^2.2.0",
+    "node-cron": "^4.4.1",
     "open": "^11.0.0",
     "openai": "^6.39.0",
     "pdf-parse": "^2.4.5",
@@ -22,12 +25,16 @@
     "telegraf": "^4.16.3",
     "twitter-api-v2": "^1.29.0",
     "write-excel-file": "^4.1.1",
+    "ws": "^8.21.0",
     "yaml": "^2.9.0",
     "zod": "^3.25.76"
   },
   "devDependencies": {
+    "@types/multer": "^2.1.0",
     "@types/node": "^25.9.2",
+    "@types/node-cron": "^3.0.11",
     "@types/pdf-parse": "^1.1.5",
+    "@types/ws": "^8.18.1",
     "vitest": "^4.1.8"
   },
   "scripts": {

package/packages/core/src/agent/cronManager.ts

@@ -0,0 +1,87 @@
+import * as cron from 'node-cron';
+import { loadConfig } from '../config/parser';
+import { sendPushNotification } from '../gateway/telegram';
+import { randomUUID } from 'crypto';
+import pc from 'picocolors';
+
+export interface CronJob {
+  id: string;
+  expression: string;
+  prompt: string;
+  task: cron.ScheduledTask;
+  createdAt: number;
+}
+
+class CronManager {
+  private jobs: Map<string, CronJob> = new Map();
+
+  public addJob(expression: string, prompt: string): string {
+    const id = randomUUID();
+    
+    // Validate expression
+    if (!cron.validate(expression)) {
+      throw new Error(`Invalid cron expression: ${expression}`);
+    }
+
+    const task = cron.schedule(expression, async () => {
+      console.log(pc.cyan(`[Cron] Executing job ${id}: "${prompt}"`));
+      try {
+        // Dynamically import processUserInput to avoid circular dependencies
+        const { processUserInput } = await import('./reasoning');
+        
+        // Execute the prompt as a background system task
+        const response = await processUserInput(prompt, 'system', undefined, `cron-${id}`);
+        
+        // Push notification to Telegram if configured
+        const config = loadConfig();
+        if (config.integrations?.telegram?.enabled && config.integrations?.telegram?.authorized_chat_id) {
+          const message = `🤖 *AI Scheduled Report*\n\n${response}`;
+          await sendPushNotification(config.integrations.telegram.authorized_chat_id, message);
+        }
+      } catch (err: any) {
+        console.error(pc.red(`[Cron] Failed to execute job ${id}:`), err);
+        const config = loadConfig();
+        if (config.integrations?.telegram?.enabled && config.integrations?.telegram?.authorized_chat_id) {
+          await sendPushNotification(config.integrations.telegram.authorized_chat_id, `⚠️ *Cron Job Error*\n\nPrompt: ${prompt}\nError: ${err.message}`);
+        }
+      }
+    });
+
+    this.jobs.set(id, {
+      id,
+      expression,
+      prompt,
+      task,
+      createdAt: Date.now()
+    });
+
+    console.log(pc.green(`[Cron] Scheduled new job ${id} with expression '${expression}'`));
+    return id;
+  }
+
+  public removeJob(id: string): boolean {
+    const job = this.jobs.get(id);
+    if (job) {
+      job.task.stop();
+      this.jobs.delete(id);
+      console.log(pc.yellow(`[Cron] Removed job ${id}`));
+      return true;
+    }
+    return false;
+  }
+
+  public getJobs(): Omit<CronJob, 'task'>[] {
+    return Array.from(this.jobs.values()).map(job => ({
+      id: job.id,
+      expression: job.expression,
+      prompt: job.prompt,
+      createdAt: job.createdAt
+    }));
+  }
+  
+  public getActiveJobsCount(): number {
+    return this.jobs.size;
+  }
+}
+
+export const cronManager = new CronManager();

package/packages/core/src/agent/reasoning.ts

@@ -29,6 +29,7 @@ import { getTxHistoryToolDefinition, getTxHistory } from '../web3/skills/getTxHi
 import { createLimitOrderToolDefinition, createLimitOrder } from '../web3/skills/createLimitOrder';
 
 import { updateProfileToolDefinition, updateProfile } from './updateProfile';
+import { updateIdentityToolDefinition, updateIdentity } from './updateIdentity';
 import { updateSecurityPolicyToolDefinition, updateSecurityPolicy } from '../system/skills/updateSecurityPolicy';
 import { analyzeDocumentToolDefinition, analyzeDocument } from '../system/skills/analyzeDocument';
 import { readLocalFileToolDefinition, readLocalFile } from '../system/skills/readFile';
@@ -44,6 +45,8 @@ import { xManagerToolDefinition, manageTwitter } from '../system/skills/xManager
 import { notionWorkspaceToolDefinition, manageNotion } from '../system/skills/notionWorkspace';
 import { audioTranscribeToolDefinition, transcribeAudio } from '../system/skills/audioTranscribe';
 import { summarizeTextToolDefinition, summarizeText } from '../system/skills/summarizeText';
+import { scheduleTaskDefinition, executeScheduleTask } from '../system/skills/scheduleTask';
+import { cancelTaskDefinition, executeCancelTask } from '../system/skills/cancelTask';
 import { 
   readGmailInbox, 
   listCalendarEvents, 
@@ -167,35 +170,64 @@ CRITICAL RULE 11: ADAPTIVE RESPONSE RULE. You must process Web3 data (portfolio,
 CRITICAL RULE 13: WALLET CONTEXT CACHING. Portfolio data in chat history is potentially stale. Do not use cached data for transactional planning; refresh the balance via tools first.
 CRITICAL RULE 14: TRANSACTION EXECUTION. For ALL state-changing transactions (swap, bridge, transfer, stake), do NOT ask for verbal confirmation. Execute the tool IMMEDIATELY. The tool itself will trigger a secure popup in the user's dashboard UI for final approval.
 CRITICAL RULE 17: MINIMIZE UNNECESSARY TOOL CALLS. Do not call tools if the answer exists in recent verified context and freshness is not strictly required. Use history to save latency.
+CRITICAL RULE 19: GET_PRICE USAGE. Use get_price ONLY when the user explicitly asks for a simple price check (e.g. 'harga', 'price'). Do NOT use this for 'analysis', 'market analysis', or 'analisis pasar'.
 
 [ANTI-HALLUCINATION PROTOCOL]
 CRITICAL RULE 6: NETWORK SAFETY VALIDATION. If a request implies cross-chain or mainnet/testnet mixing, or the token symbol is ambiguous (USDC vs USDC.e), YOU MUST NOT GUESS. Ask for confirmation.
 CRITICAL RULE 7: TOOL CONFIDENCE & HALUCINATION PREVENTION. NEVER fabricate blockchain data. If a tool fails or data is missing, state it explicitly. Do not estimate balances, prices, APY, or gas.
+CRITICAL RULE 18: AMOUNT PRECISION. When displaying crypto amounts, use exactly 6 decimal places for precision, or round to 2 decimals only if the value is significantly large (>$10,000). Never abbreviate unless the number is >$1,000,000.
 CRITICAL RULE 9: DEFI CONFIGURATION FALLBACK. If a tool fails due to Rate Limits, Unauthorized, or Missing API Keys, instruct the user to visit the "DeFi Configuration 🔑" menu in the dashboard.
 CRITICAL RULE 12: SMART SLIPPAGE AWARENESS. For low-liquidity assets, warn the user that default slippage might not be enough. NEVER invent specific slippage percentage numbers.
 CRITICAL RULE 16: CAPABILITY HONESTY. NEVER claim a capability not available through installed tools. If asked for an unsupported action, state honestly that the skill is missing.
-CRITICAL RULE 19: MARKET CONFIDENCE SCORE. When analyzing market data, token security, or preparing trades, you MUST explicitly declare a 'Confidence Score (0-100%)' INSIDE your <think> block. If your score is below 40%, you must firmly WARN the user and advise against the trade in your final response.`;
+CRITICAL RULE 19: MARKET CONFIDENCE SCORE. When analyzing market data, token security, or preparing trades, you MUST explicitly declare a 'Confidence Score (0-100%)' INSIDE your <think> block. If your score is below 40%, you must firmly WARN the user and advise against the trade in your final response.
+CRITICAL RULE 20: CRON JOBS VS LIMIT ORDERS. STRICT RULE: Do NOT use schedule_task for price-based trading triggers or buying/selling at a specific price level. Use create_limit_order. STRICT RULE: Do NOT use create_limit_order for time-based recurring tasks (e.g. 'every 5 minutes', 'every Monday'). Use schedule_task.
+CRITICAL RULE 21: CONFIGURATION SECURITY. You are STRICTLY FORBIDDEN from modifying config.yaml, rpc_key.yaml, or policy.yaml using OS skills or terminal commands (like sed, echo, nano). If you need to change your name, use the update_identity tool.`;
 
-  // Read IDENTITY.md for core AI persona
+  const identityMdPath = getPath('IDENTITY.md');
+  const userMdPath = getPath('user.md');
+  
+  let isFirstTime = false;
   try {
-    const identityMdPath = getPath('IDENTITY.md');
-    if (fs.existsSync(identityMdPath)) {
-      const identityInstructions = fs.readFileSync(identityMdPath, 'utf8');
-      basePrompt += `\n\n--- CORE IDENTITY & PERSONA ---\n${identityInstructions}`;
-    }
-  } catch (error) {
-    console.error('Failed to read IDENTITY.md:', error);
+    const identityContent = fs.existsSync(identityMdPath) ? fs.readFileSync(identityMdPath, 'utf8').trim() : '';
+    const userContent = fs.existsSync(userMdPath) ? fs.readFileSync(userMdPath, 'utf8').trim() : '';
+    
+    // Check if files are empty or contain the default installation text
+    const isIdentityDefault = !identityContent || identityContent.includes('You are a Web3 AI assistant named Nyxora.');
+    const isUserDefault = !userContent || userContent.includes('Write custom instructions, special rules, user profiles');
+    
+    isFirstTime = isIdentityDefault && isUserDefault;
+  } catch (e) {
+    isFirstTime = true;
   }
 
-  // Read user.md for custom instructions
-  try {
-    const userMdPath = getPath('user.md');
-    if (fs.existsSync(userMdPath)) {
-      const customInstructions = fs.readFileSync(userMdPath, 'utf8');
-      basePrompt += `\n\n--- CUSTOM USER INSTRUCTIONS ---\n${customInstructions}`;
+  if (isFirstTime) {
+    basePrompt += `\n\n[ONBOARDING MODE]
+This is your VERY FIRST interaction with the user. You MUST warmly welcome them to Nyxora and ask for 4 things to initialize your setup:
+1. Their Name
+2. What they want to name YOU (the AI Agent)
+3. Their Hobbies or Job (so you can tailor your conversation context)
+4. Your Persona/Character (e.g., professional, sarcastic, JARVIS, anime waifu)
+Do NOT perform any web3 tasks or generic answers until they provide all 4 details. Once they answer, use 'update_profile' to save their name and hobbies/job to user.md, and use 'update_identity' (making sure to provide the 'agentName' parameter!) to save your new name and persona to IDENTITY.md.`;
+  } else {
+    // Read IDENTITY.md for core AI persona
+    try {
+      if (fs.existsSync(identityMdPath)) {
+        const identityInstructions = fs.readFileSync(identityMdPath, 'utf8');
+        basePrompt += `\n\n--- CORE IDENTITY & PERSONA ---\n${identityInstructions}`;
+      }
+    } catch (error) {
+      console.error('Failed to read IDENTITY.md:', error);
+    }
+
+    // Read user.md for custom instructions
+    try {
+      if (fs.existsSync(userMdPath)) {
+        const customInstructions = fs.readFileSync(userMdPath, 'utf8');
+        basePrompt += `\n\n--- CUSTOM USER INSTRUCTIONS ---\n${customInstructions}`;
+      }
+    } catch (error) {
+      console.error('Failed to read user.md:', error);
     }
-  } catch (error) {
-    console.error('Failed to read user.md:', error);
   }
 
   // Read policy.yaml for NLP security constraints
@@ -254,7 +286,7 @@ export async function processUserInput(input: string, role: 'user' | 'system' =
   const history = logger.getHistory(sessionId);
   
   // Format messages for OpenAI
-  const messages: any[] = [
+  let messages: any[] = [
     { role: 'system', content: getSystemPrompt() },
     ...history
       .filter(m => !(m.role === 'tool' && !m.tool_call_id))
@@ -269,6 +301,11 @@ export async function processUserInput(input: string, role: 'user' | 'system' =
       })
   ];
 
+  // Remove orphaned tool responses (truncated by the 40-message limit) at the start of the history window
+  while (messages.length > 1 && messages[1].role === 'tool') {
+    messages.splice(1, 1);
+  }
+
   try {
     const lowerInput = input.toLowerCase();
     const hasWeb3Keyword = /swap|transfer|price|token|crypto|bridge|wallet|balance|portfolio|buy|sell|send|receive|address|market|limit|mint|nft/i.test(lowerInput);
@@ -299,7 +336,7 @@ export async function processUserInput(input: string, role: 'user' | 'system' =
         createLimitOrderToolDefinition
       );
     }
-    const SYSTEM_TOOLS = [updateProfileToolDefinition, updateSecurityPolicyToolDefinition, analyzeDocumentToolDefinition, readLocalFileToolDefinition, writeLocalFileToolDefinition, generateExcelToolDefinition, runTerminalCommandToolDefinition, browseWebsiteToolDefinition, searchWebToolDefinition, editLocalFileToolDefinition, gitManagerToolDefinition, xManagerToolDefinition, notionWorkspaceToolDefinition, audioTranscribeToolDefinition, summarizeTextToolDefinition];
+    const SYSTEM_TOOLS = [updateProfileToolDefinition, updateIdentityToolDefinition, updateSecurityPolicyToolDefinition, analyzeDocumentToolDefinition, readLocalFileToolDefinition, writeLocalFileToolDefinition, generateExcelToolDefinition, runTerminalCommandToolDefinition, browseWebsiteToolDefinition, searchWebToolDefinition, editLocalFileToolDefinition, gitManagerToolDefinition, xManagerToolDefinition, notionWorkspaceToolDefinition, audioTranscribeToolDefinition, summarizeTextToolDefinition, scheduleTaskDefinition, cancelTaskDefinition];
     const GOOGLE_TOOLS = [readGmailInboxToolDefinition, listCalendarEventsToolDefinition, appendRowToSheetsToolDefinition, readGoogleDocsToolDefinition, readGoogleFormResponsesToolDefinition];
 
     let activeTools: any[] = [];
@@ -499,6 +536,10 @@ export async function processUserInput(input: string, role: 'user' | 'system' =
               result = updateProfile(args.content, args.mode);
               break;
             }
+            case 'update_identity': {
+              result = updateIdentity(args.content, args.mode);
+              break;
+            }
             case 'update_security_policy': {
               result = await updateSecurityPolicy(args.policy, args.action || 'add');
               break;
@@ -555,6 +596,14 @@ export async function processUserInput(input: string, role: 'user' | 'system' =
               result = await searchWeb(args.query, args.depth);
               break;
             }
+            case 'schedule_task': {
+              result = await executeScheduleTask(args);
+              break;
+            }
+            case 'cancel_task': {
+              result = await executeCancelTask(args);
+              break;
+            }
 
             case 'read_gmail_inbox': {
               result = await readGmailInbox(args.maxResults);
@@ -642,12 +691,33 @@ export async function processUserInput(input: string, role: 'user' | 'system' =
       }
       Tracker.addEvent('llm.final_response', { provider: config.llm.provider });
 
-      const finalContent = secondResponse.choices[0].message.content || "";
+      let finalContent = secondResponse.choices[0].message.content || "";
+      
+      // Clean up orphaned <think> blocks that forgot to output </think>
+      finalContent = finalContent.replace(/<thought>[\s\S]*?<\/thought>\n?/gi, '');
+      finalContent = finalContent.replace(/<think>[\s\S]*?<\/think>\n?/gi, '');
+      if (finalContent.includes('<think>')) {
+        finalContent = finalContent.replace(/<think>[\s\S]*?\n\n/i, '');
+        finalContent = finalContent.replace(/<think>[\s\S]*$/i, '');
+      }
+      finalContent = finalContent.trim();
+
       logger.addEntry({ role: 'assistant', content: finalContent }, sessionId);
       return finalContent;
     }
 
-    return responseMessage.content || "No response generated.";
+    let finalContent = responseMessage.content || "No response generated.";
+    
+    // Clean up orphaned <think> blocks that forgot to output </think>
+    finalContent = finalContent.replace(/<thought>[\s\S]*?<\/thought>\n?/gi, '');
+    finalContent = finalContent.replace(/<think>[\s\S]*?<\/think>\n?/gi, '');
+    if (finalContent.includes('<think>')) {
+      finalContent = finalContent.replace(/<think>[\s\S]*?\n\n/i, '');
+      finalContent = finalContent.replace(/<think>[\s\S]*$/i, '');
+    }
+    finalContent = finalContent.trim();
+    
+    return finalContent;
   } catch (error: any) {
     console.error("LLM Error:", error);
     const errorMsg = '⚠️ All models are temporarily rate-limited. Please try again in a few minutes.';

package/packages/core/src/agent/transactionManager.ts

@@ -1,6 +1,7 @@
 import crypto from 'crypto';
 import fs from 'fs';
 import path from 'path';
+import { getPath } from '../config/paths';
 
 export type TransactionType = 'transfer' | 'swap' | 'bridge' | 'mint' | 'custom' | 'approve' | 'revokeApproval' | 'aaveSupply' | 'vaultDeposit' | 'univ3Mint' | 'limit_order';
 
@@ -35,7 +36,7 @@ class TransactionManager {
   private dbPath: string;
 
   constructor() {
-    this.dbPath = path.join(process.cwd(), '.nyxora_withdrawals.json');
+    this.dbPath = getPath('.nyxora_withdrawals.json');
     this.loadWithdrawals();
   }
 

package/packages/core/src/agent/updateIdentity.ts

@@ -0,0 +1,68 @@
+import fs from 'fs';
+import { getPath } from '../config/paths';
+import { loadConfig, saveConfig } from '../config/parser';
+
+export function updateIdentity(content: string, mode: 'append' | 'replace', agentName?: string): string {
+  try {
+    const identityMdPath = getPath('IDENTITY.md');
+    
+    if (mode === 'replace') {
+      fs.writeFileSync(identityMdPath, content, 'utf8');
+      
+      let msg = "Identity replaced successfully. New IDENTITY.md has been saved.";
+      if (agentName) {
+        const config = loadConfig();
+        config.agent.name = agentName;
+        saveConfig(config);
+        msg += ` Agent Name updated to '${agentName}' in config.`;
+      }
+      return msg;
+    } else {
+      let existingContent = "";
+      if (fs.existsSync(identityMdPath)) {
+        existingContent = fs.readFileSync(identityMdPath, 'utf8');
+      }
+      
+      const newContent = existingContent + "\n" + content;
+      fs.writeFileSync(identityMdPath, newContent, 'utf8');
+      
+      let msg = "Identity appended successfully. New instructions added to IDENTITY.md.";
+      if (agentName) {
+        const config = loadConfig();
+        config.agent.name = agentName;
+        saveConfig(config);
+        msg += ` Agent Name updated to '${agentName}' in config.`;
+      }
+      return msg;
+    }
+  } catch (error: any) {
+    return `Failed to update identity: ${error.message}`;
+  }
+}
+
+export const updateIdentityToolDefinition = {
+  type: "function",
+  function: {
+    name: "update_identity",
+    description: "Updates or rewrites the IDENTITY.md file. Use this when the user sets or changes your AI name, persona, or core character instructions.",
+    parameters: {
+      type: "object",
+      properties: {
+        content: {
+          type: "string",
+          description: "The content to write or append to IDENTITY.md",
+        },
+        mode: {
+          type: "string",
+          enum: ["append", "replace"],
+          description: "Whether to append the content to the existing file or replace the entire file.",
+        },
+        agentName: {
+          type: "string",
+          description: "The short display name of the AI agent (e.g. Hinata, Nyxora). MUST be provided if the user assigns you a new name.",
+        }
+      },
+      required: ["content", "mode"],
+    },
+  },
+};

package/packages/core/src/config/parser.ts

@@ -115,7 +115,7 @@ export interface NyxoraConfig {
     credentials?: any; // Deprecated, kept for parsing during migration
   };
   web_search?: {
-    provider: 'tavily' | 'brave' | 'mesh';
+    provider: 'tavily' | 'brave' | 'duckduckgo' | 'mesh';
     enabled: boolean;
   };
   credentials?: {