nyxora 26.6.22-1 → 26.6.23

package/README.md

@@ -2,10 +2,11 @@
 **Your Personal Web3 Assistant.**
 
 
+[![Status: Alpha](https://img.shields.io/badge/Status-Alpha-red.svg)](#)
 [![Built on Arbitrum](https://img.shields.io/badge/Built_on-Arbitrum-28A0F0?style=flat&logo=arbitrum&logoColor=white)](https://arbitrum.io/)
 [![MCP Supported](https://img.shields.io/badge/MCP-Supported-blue.svg)](#)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Security: Production-Grade](https://img.shields.io/badge/Security-Production--Grade-blue.svg)](#️-advanced-security-threat-model)
+[![Security: Defense-in-Depth](https://img.shields.io/badge/Security-Defense--in--Depth-blue.svg)](#️-advanced-security-threat-model)
 [![Execution: Cryptographic Approval](https://img.shields.io/badge/Execution-Cryptographic--Approval-orange.svg)](#️-advanced-security-threat-model)
 [![Privacy: Local-Only Keys](https://img.shields.io/badge/Privacy-Local--Only--Keys-success.svg)](#️-advanced-security-threat-model)
 
@@ -90,7 +91,7 @@ Within the AI Brain, the Web3 codebase is strictly divided to prevent the LLM fr
 
 ## 🛡️ Advanced Security & Threat Model
 
-To dive deeper into the technical details of our Zero-Knowledge security architecture, please visit the [Nyxora Security Blueprint](https://nyxoraai.github.io/Nyxora/).
+To dive deeper into the technical details of our Zero-Knowledge security architecture, please visit the [Nyxora Security](https://nyxoraai.github.io/Nyxora/).
 
 ---
 
@@ -182,8 +183,6 @@ For complete technical deep-dives into our Cryptographic Architecture, please vi
 
 > **🔗 [Read the Full Nyxora Documentation Here](https://nyxoraai.github.io/Nyxora/)**
 
-*(Includes guides on Secure Wallet Imports, Architecture Blueprints, Troubleshooting, and Custom Skill Development).*
-
 ---
 
 **❤️ Support the Project**

package/dist/packages/core/src/gateway/WebSocketManager.js

@@ -0,0 +1,98 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.wsManager = exports.WebSocketManager = void 0;
+exports.initWebSocket = initWebSocket;
+const ws_1 = require("ws");
+const state_1 = require("../utils/state");
+class WebSocketManager {
+    wss;
+    clients = new Map();
+    ringBuffer = new Map();
+    constructor(server) {
+        this.wss = new ws_1.WebSocketServer({ noServer: true });
+        server.on('upgrade', async (request, socket, head) => {
+            try {
+                const url = new URL(request.url || '', `http://${request.headers.host}`);
+                if (url.pathname !== '/ws/stream') {
+                    socket.write('HTTP/1.1 404 Not Found\r\n\r\n');
+                    socket.destroy();
+                    return;
+                }
+                const traceId = url.searchParams.get('traceId');
+                const token = url.searchParams.get('token');
+                if (!traceId || !token) {
+                    socket.write('HTTP/1.1 401 Unauthorized\r\n\r\n');
+                    socket.destroy();
+                    return;
+                }
+                // Validate Auth Token during Upgrade Handshake
+                if (!(0, state_1.validateToken)(token)) {
+                    socket.write('HTTP/1.1 403 Forbidden\r\n\r\n');
+                    socket.destroy();
+                    return;
+                }
+                this.wss.handleUpgrade(request, socket, head, (ws) => {
+                    this.wss.emit('connection', ws, request, traceId);
+                });
+            }
+            catch (e) {
+                socket.write('HTTP/1.1 500 Internal Server Error\r\n\r\n');
+                socket.destroy();
+            }
+        });
+        this.wss.on('connection', (ws, request, traceId) => {
+            this.clients.set(traceId, ws);
+            ws.on('close', () => {
+                this.clients.delete(traceId);
+            });
+            // Flush Ring Buffer if it exists
+            const buffer = this.ringBuffer.get(traceId);
+            if (buffer) {
+                clearTimeout(buffer.timeout);
+                for (const log of buffer.logs) {
+                    ws.send(JSON.stringify(log));
+                }
+                this.ringBuffer.delete(traceId);
+            }
+        });
+    }
+    broadcast(traceId, message, level = 'info') {
+        const payload = { timestamp: Date.now(), message, level };
+        const ws = this.clients.get(traceId);
+        if (ws && ws.readyState === ws_1.WebSocket.OPEN) {
+            // Client is connected, send directly
+            ws.send(JSON.stringify(payload));
+        }
+        else {
+            // Client not connected yet, buffer the log (Anti-Race Condition)
+            let buffer = this.ringBuffer.get(traceId);
+            if (!buffer) {
+                buffer = {
+                    logs: [],
+                    timeout: setTimeout(() => {
+                        // Drop buffer after 5 seconds if client never connects
+                        this.ringBuffer.delete(traceId);
+                    }, 5000)
+                };
+                this.ringBuffer.set(traceId, buffer);
+            }
+            buffer.logs.push(payload);
+        }
+    }
+    broadcastAll(message, level = 'info') {
+        const payload = { timestamp: Date.now(), message, level };
+        const payloadStr = JSON.stringify(payload);
+        for (const [_, ws] of this.clients) {
+            if (ws.readyState === ws_1.WebSocket.OPEN) {
+                ws.send(payloadStr);
+            }
+        }
+    }
+}
+exports.WebSocketManager = WebSocketManager;
+// Global instance to be initialized in server.ts
+exports.wsManager = null;
+function initWebSocket(server) {
+    exports.wsManager = new WebSocketManager(server);
+    return exports.wsManager;
+}

package/dist/packages/core/src/gateway/server.js

@@ -18,9 +18,11 @@ process.on('uncaughtException', (error) => {
 const path_1 = __importDefault(require("path"));
 const helmet_1 = __importDefault(require("helmet"));
 const express_rate_limit_1 = __importDefault(require("express-rate-limit"));
+const crypto_1 = __importDefault(require("crypto"));
 const os_1 = __importDefault(require("os"));
 const paths_1 = require("../config/paths");
 const state_1 = require("../utils/state");
+const WebSocketManager_1 = require("./WebSocketManager");
 const fs_1 = __importDefault(require("fs"));
 const yaml_1 = __importDefault(require("yaml"));
 const reasoning_1 = require("../agent/reasoning");
@@ -850,6 +852,22 @@ function resetIdleTimer() {
         reflection_1.ReflectionEngine.runReflection();
     }, 3 * 60 * 1000); // 3 minutes idle
 }
+app.post('/api/v1/trade', async (req, res) => {
+    try {
+        const { message, session_id } = req.body;
+        if (!message)
+            return res.status(400).json({ error: 'Message is required' });
+        const traceId = crypto_1.default.randomBytes(8).toString('hex');
+        // Asynchronous background execution
+        (0, reasoning_1.processUserInput)(message, session_id || traceId).catch(err => {
+            console.error(`[TradeAPI] Error:`, err);
+        });
+        res.status(200).json({ status: 'processing', traceId });
+    }
+    catch (error) {
+        res.status(500).json({ error: error.message });
+    }
+});
 app.post('/api/chat', async (req, res) => {
     try {
         const { message, session_id } = req.body;
@@ -1000,6 +1018,8 @@ function startServer() {
     const PORT = Number(process.env.PORT || 3000);
     const server = app.listen(PORT, '127.0.0.1', () => {
         console.log(`🤖 Nyxora API Server running on port ${PORT}`);
+        // Initialize WebSocket Manager
+        (0, WebSocketManager_1.initWebSocket)(server);
         // Start the Telegram bot listener
         (0, telegram_1.startTelegramBot)();
         // Start Asynchronous Bridge Watcher

package/dist/packages/core/src/gateway/setup.js

@@ -276,7 +276,7 @@ Provider: ${config.llm.provider}`;
             { value: 'gitManager', label: 'Git Operations (Commit/Push/Pull)' },
             { value: 'updateSecurityPolicy', label: 'Update policy.yaml rules', hint: 'safeguard' },
             { value: 'browseWeb', label: 'Browse & Scrape Webpages' },
-            { value: 'searchWeb', label: 'Smart Web Search (Tavily/Brave)', hint: 'Requires API Key' },
+            { value: 'searchWeb', label: 'Smart Web Search (Tavily/Brave/DuckDuckGo)', hint: 'Optional API Key' },
             { value: 'googleWorkspace', label: 'Google Workspace (Gmail, Docs, Sheets, Forms)', hint: 'Requires OAuth' },
             { value: 'notionWorkspace', label: 'Notion Integration' },
             { value: 'xManager', label: 'X/Twitter Management' },
@@ -308,15 +308,18 @@ Provider: ${config.llm.provider}`;
             options: [
                 { value: 'tavily', label: 'Tavily Search (Built for AI - 1000 free/mo)' },
                 { value: 'brave', label: 'Brave Search (Privacy focused - 2000 free/mo)' },
+                { value: 'duckduckgo', label: 'DuckDuckGo (Free & Built-in)' },
             ],
         });
         if ((0, prompts_1.isCancel)(searchProvider))
             return process.exit(0);
-        searchApiKey = (await (0, prompts_1.password)({
-            message: `Enter API Key for ${searchProvider} (Get it free at ${searchProvider === 'tavily' ? 'tavily.com' : 'search.brave.com'}):`,
-        }));
-        if ((0, prompts_1.isCancel)(searchApiKey))
-            return process.exit(0);
+        if (searchProvider !== 'duckduckgo') {
+            searchApiKey = (await (0, prompts_1.password)({
+                message: `Enter API Key for ${searchProvider} (Get it free at ${searchProvider === 'tavily' ? 'tavily.com' : 'search.brave.com'}):`,
+            }));
+            if ((0, prompts_1.isCancel)(searchApiKey))
+                return process.exit(0);
+        }
     }
     const setupTelegram = activeChannels.includes('telegram');
     let telegramToken = '';

package/dist/packages/core/src/gateway/tracker.js

@@ -5,6 +5,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Tracker = void 0;
 const fs_1 = __importDefault(require("fs"));
+const WebSocketManager_1 = require("./WebSocketManager");
 const paths_1 = require("../config/paths");
 const stats = {
     cost: 0,
@@ -97,6 +98,10 @@ exports.Tracker = {
         if (gatewayLogs.length > MAX_LOGS)
             gatewayLogs.pop();
         saveState();
+        // Broadcast terminal logs to Dashboard via WebSocket
+        if (WebSocketManager_1.wsManager) {
+            WebSocketManager_1.wsManager.broadcastAll(`[${formatTime()}] ${message}`, meta?.level || 'info');
+        }
     },
     getLogs: () => {
         return {

package/dist/packages/core/src/system/skills/searchWeb.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.searchWebToolDefinition = void 0;
 exports.searchWeb = searchWeb;
 const parser_1 = require("../../config/parser");
+const duck_duck_scrape_1 = require("duck-duck-scrape");
 const SEARXNG_INSTANCES = [
     'https://search.mdosch.de',
     'https://searx.tiekoetter.com',
@@ -79,6 +80,25 @@ async function searchSearxng(query, depth = 1) {
     }
     throw new Error('[SearXNG Error] All decentralized instances failed.');
 }
+async function searchDuckDuckGo(query, depth = 1) {
+    try {
+        const searchResults = await (0, duck_duck_scrape_1.search)(query, {
+            safeSearch: duck_duck_scrape_1.SafeSearchType.MODERATE
+        });
+        if (!searchResults.noResults && searchResults.results.length > 0) {
+            const maxResults = depth > 1 ? 15 : 8;
+            return searchResults.results.slice(0, maxResults).map(r => ({
+                title: r.title,
+                url: r.url,
+                content: r.description || r.title
+            }));
+        }
+        return [];
+    }
+    catch (e) {
+        throw new Error(`[DuckDuckGo Error] Failed to scrape: ${e.message}`);
+    }
+}
 const searchCache = new Map();
 async function searchWeb(query, depth = 1) {
     // Auto-inject current year for time-sensitive queries
@@ -119,13 +139,25 @@ async function searchWeb(query, depth = 1) {
                             results = await searchBrave(finalQuery, creds.brave_key, depth);
                         }
                         catch (e2) {
-                            console.warn('[WebSearch] Backup provider (Brave) failed. Falling back to SearXNG Mesh...');
-                            results = await searchSearxng(finalQuery, depth);
+                            console.warn('[WebSearch] Backup provider (Brave) failed. Falling back to DuckDuckGo (L3)...');
+                            try {
+                                results = await searchDuckDuckGo(finalQuery, depth);
+                            }
+                            catch (e3) {
+                                console.warn('[WebSearch] DuckDuckGo failed. Falling back to SearXNG Mesh...');
+                                results = await searchSearxng(finalQuery, depth);
+                            }
                         }
                     }
                     else {
-                        console.warn('[WebSearch] No backup provider found. Falling back to SearXNG Mesh...');
-                        results = await searchSearxng(finalQuery, depth);
+                        console.warn('[WebSearch] No backup premium provider found. Falling back to DuckDuckGo (L3)...');
+                        try {
+                            results = await searchDuckDuckGo(finalQuery, depth);
+                        }
+                        catch (e3) {
+                            console.warn('[WebSearch] DuckDuckGo failed. Falling back to SearXNG Mesh...');
+                            results = await searchSearxng(finalQuery, depth);
+                        }
                     }
                 }
                 else {
@@ -145,13 +177,25 @@ async function searchWeb(query, depth = 1) {
                             results = await searchTavily(finalQuery, creds.tavily_key, depth);
                         }
                         catch (e2) {
-                            console.warn('[WebSearch] Backup provider (Tavily) failed. Falling back to SearXNG Mesh...');
-                            results = await searchSearxng(finalQuery, depth);
+                            console.warn('[WebSearch] Backup provider (Tavily) failed. Falling back to DuckDuckGo (L3)...');
+                            try {
+                                results = await searchDuckDuckGo(finalQuery, depth);
+                            }
+                            catch (e3) {
+                                console.warn('[WebSearch] DuckDuckGo failed. Falling back to SearXNG Mesh...');
+                                results = await searchSearxng(finalQuery, depth);
+                            }
                         }
                     }
                     else {
-                        console.warn('[WebSearch] No backup provider found. Falling back to SearXNG Mesh...');
-                        results = await searchSearxng(finalQuery, depth);
+                        console.warn('[WebSearch] No backup premium provider found. Falling back to DuckDuckGo (L3)...');
+                        try {
+                            results = await searchDuckDuckGo(finalQuery, depth);
+                        }
+                        catch (e3) {
+                            console.warn('[WebSearch] DuckDuckGo failed. Falling back to SearXNG Mesh...');
+                            results = await searchSearxng(finalQuery, depth);
+                        }
                     }
                 }
                 else {
@@ -159,6 +203,15 @@ async function searchWeb(query, depth = 1) {
                 }
             }
         }
+        else if (provider === 'duckduckgo') {
+            try {
+                results = await searchDuckDuckGo(finalQuery, depth);
+            }
+            catch (e) {
+                console.warn('[WebSearch] Primary provider (DuckDuckGo) failed. Falling back to SearXNG Mesh...');
+                results = await searchSearxng(finalQuery, depth);
+            }
+        }
         else {
             results = await searchSearxng(finalQuery, depth);
         }

package/dist/packages/core/src/web3/utils/vaultClient.js

@@ -9,6 +9,8 @@ const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 const os_1 = __importDefault(require("os"));
 const crypto_1 = __importDefault(require("crypto"));
+const http_1 = __importDefault(require("http"));
+const msgpackr_1 = require("msgpackr");
 function getInternalToken() {
     try {
         const tokenPath = path_1.default.join(os_1.default.homedir(), '.nyxora', 'auth', 'runtime.token');
@@ -21,19 +23,43 @@ function getInternalToken() {
 }
 async function getAddress() {
     const token = getInternalToken();
-    try {
-        const res = await fetch(`http://127.0.0.1:${process.env.POLICY_PORT || 3001}/address`, {
-            headers: token ? { 'Authorization': `Bearer ${token}` } : {},
-            signal: AbortSignal.timeout(30000)
+    return new Promise((resolve, reject) => {
+        const POLICY_SOCKET = '/tmp/nyxora-policy.sock';
+        const options = {
+            socketPath: fs_1.default.existsSync(POLICY_SOCKET) ? POLICY_SOCKET : undefined,
+            host: fs_1.default.existsSync(POLICY_SOCKET) ? undefined : '127.0.0.1',
+            port: fs_1.default.existsSync(POLICY_SOCKET) ? undefined : (process.env.POLICY_PORT || 3001),
+            path: '/address',
+            method: 'GET',
+            headers: {
+                ...(token ? { 'Authorization': `Bearer ${token}` } : {})
+            }
+        };
+        const req = http_1.default.request(options, (res) => {
+            let data = '';
+            res.on('data', chunk => data += chunk);
+            res.on('end', () => {
+                try {
+                    if (res.statusCode !== 200) {
+                        reject(new Error(data));
+                        return;
+                    }
+                    const parsed = JSON.parse(data);
+                    resolve(parsed.address);
+                }
+                catch (e) {
+                    reject(new Error(`Failed to get address from vault: ${e.message}`));
+                }
+            });
         });
-        if (!res.ok)
-            throw new Error(await res.text());
-        const data = await res.json();
-        return data.address;
-    }
-    catch (error) {
-        throw new Error(`Failed to get address from vault: ${error.message}`);
-    }
+        req.on('error', (error) => {
+            reject(new Error(`Failed to get address from vault: ${error.message}`));
+        });
+        req.setTimeout(30000, () => {
+            req.destroy(new Error('Timeout'));
+        });
+        req.end();
+    });
 }
 async function submitTransaction(txPayload) {
     const token = getInternalToken();
@@ -45,25 +71,49 @@ async function submitTransaction(txPayload) {
         const secret = getInternalToken() || '';
         txPayload.internalSignature = crypto_1.default.createHmac('sha256', secret).update(txPayload.chainName + amountWei).digest('hex');
     }
-    try {
-        const res = await fetch(`http://127.0.0.1:${process.env.POLICY_PORT || 3001}/request-tx`, {
+    return new Promise((resolve, reject) => {
+        const POLICY_SOCKET = '/tmp/nyxora-policy.sock';
+        const payloadBuffer = (0, msgpackr_1.pack)(txPayload);
+        const options = {
+            socketPath: fs_1.default.existsSync(POLICY_SOCKET) ? POLICY_SOCKET : undefined,
+            host: fs_1.default.existsSync(POLICY_SOCKET) ? undefined : '127.0.0.1',
+            port: fs_1.default.existsSync(POLICY_SOCKET) ? undefined : (process.env.POLICY_PORT || 3001),
+            path: '/request-tx',
             method: 'POST',
             headers: {
-                'Content-Type': 'application/json',
+                'Content-Type': 'application/msgpack',
+                'Content-Length': payloadBuffer.length,
                 ...(token ? { 'Authorization': `Bearer ${token}` } : {})
-            },
-            body: JSON.stringify(txPayload),
-            signal: AbortSignal.timeout(30000)
+            }
+        };
+        const req = http_1.default.request(options, (res) => {
+            let data = '';
+            res.on('data', chunk => data += chunk);
+            res.on('end', () => {
+                try {
+                    const parsed = JSON.parse(data);
+                    if (res.statusCode !== 200) {
+                        reject(new Error(parsed.error || 'Failed to submit transaction'));
+                        return;
+                    }
+                    if (parsed.status === 'pending') {
+                        resolve(`Pending (ID: ${parsed.txId})`);
+                        return;
+                    }
+                    resolve(parsed.signedHash || parsed.hash || parsed.txHash || parsed.status || 'Transaction executed successfully (No Hash returned)');
+                }
+                catch (e) {
+                    reject(new Error(`Failed to parse vault response: ${e.message}`));
+                }
+            });
         });
-        const data = await res.json();
-        if (!res.ok)
-            throw new Error(data.error || 'Failed to submit transaction');
-        if (data.status === 'pending') {
-            return `Pending (ID: ${data.txId})`;
-        }
-        return data.signedHash || data.hash || data.txHash || data.status || 'Transaction executed successfully (No Hash returned)';
-    }
-    catch (error) {
-        throw new Error(`Transaction submission failed: ${error.message}`);
-    }
+        req.on('error', (error) => {
+            reject(new Error(`Transaction submission failed: ${error.message}`));
+        });
+        req.setTimeout(30000, () => {
+            req.destroy(new Error('Timeout'));
+        });
+        req.write(payloadBuffer);
+        req.end();
+    });
 }

package/dist/packages/policy/src/server.js

@@ -15,6 +15,7 @@ const zod_1 = require("zod");
 const path_1 = __importDefault(require("path"));
 const crypto_1 = __importDefault(require("crypto"));
 const os_1 = __importDefault(require("os"));
+const msgpackr_1 = require("msgpackr");
 process.on('unhandledRejection', (reason, promise) => {
     console.error('[Anti-Crash] Unhandled Rejection at:', promise, 'reason:', reason);
 });
@@ -35,6 +36,25 @@ catch (e) {
 const SIGNER_SOCKET = process.env.SIGNER_SOCKET_PATH || '/tmp/nyxora-signer.sock';
 const app = (0, express_1.default)();
 app.use(express_1.default.json());
+// MessagePack Parser Middleware for Hyper-Optimized IPC
+app.use((req, res, next) => {
+    if (req.headers['content-type'] === 'application/msgpack') {
+        let chunks = [];
+        req.on('data', chunk => chunks.push(chunk));
+        req.on('end', () => {
+            try {
+                req.body = (0, msgpackr_1.unpack)(Buffer.concat(chunks));
+                next();
+            }
+            catch (e) {
+                res.status(400).json({ error: 'Invalid MessagePack payload' });
+            }
+        });
+    }
+    else {
+        next();
+    }
+});
 const TxRequestSchema = zod_1.z.object({
     type: zod_1.z.enum(['transfer', 'swap', 'bridge', 'mint', 'custom']),
     chainName: zod_1.z.string(),
@@ -237,6 +257,7 @@ app.post('/approve-tx/:id', (req, res) => {
     signerReq.write(requestPayload);
     signerReq.end();
 });
+const POLICY_SOCKET = '/tmp/nyxora-policy.sock';
 const server = app.listen(Number(PORT), '127.0.0.1', () => {
     console.log(`[Policy Engine] Listening on 127.0.0.1:${PORT} (Secured Local Loopback)`);
 });
@@ -250,3 +271,10 @@ server.on('error', (e) => {
         process.exit(1);
     }
 });
+// Start UDS Server for Hyper-Optimized IPC
+const udsServer = http_1.default.createServer(app);
+if (fs_1.default.existsSync(POLICY_SOCKET))
+    fs_1.default.unlinkSync(POLICY_SOCKET);
+udsServer.listen(POLICY_SOCKET, () => {
+    console.log(`[Policy Engine] Listening on UDS ${POLICY_SOCKET} (Hyper-Optimized IPC)`);
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nyxora",
-  "version": "26.6.22-1",
+  "version": "26.6.23",
   "description": "Your Personal Web3 Assistant",
   "keywords": [
     "web3",
@@ -60,6 +60,7 @@
     "dotenv": "^17.4.2",
     "duck-duck-scrape": "^2.2.7",
     "express": "^5.2.1",
+    "msgpackr": "^2.0.4",
     "express-rate-limit": "^7.5.0",
     "helmet": "^8.0.0",
     "isolated-vm": "^6.1.2",
@@ -79,6 +80,7 @@
     "typescript": "^6.0.3",
     "viem": "^2.51.0",
     "write-excel-file": "^4.1.1",
+    "ws": "^8.21.0",
     "yaml": "^2.9.0",
     "zod": "^3.23.8"
   },
@@ -98,6 +100,7 @@
   },
   "devDependencies": {
     "@types/jsonwebtoken": "^9.0.5",
+    "@types/ws": "^8.5.10",
     "@types/node": "^25.9.1",
     "@types/node-cron": "^3.0.11",
     "concurrently": "^10.0.3",

package/packages/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nyxora-agent-core",
-  "version": "26.6.22-1",
+  "version": "26.6.23",
   "private": true,
   "main": "src/gateway/server.ts",
   "dependencies": {
@@ -14,6 +14,7 @@
     "express-rate-limit": "^7.5.0",
     "helmet": "^8.0.0",
     "mammoth": "^1.12.0",
+    "msgpackr": "^2.0.4",
     "multer": "^2.2.0",
     "node-cron": "^4.4.1",
     "open": "^11.0.0",
@@ -24,6 +25,7 @@
     "telegraf": "^4.16.3",
     "twitter-api-v2": "^1.29.0",
     "write-excel-file": "^4.1.1",
+    "ws": "^8.21.0",
     "yaml": "^2.9.0",
     "zod": "^3.25.76"
   },
@@ -32,6 +34,7 @@
     "@types/node": "^25.9.2",
     "@types/node-cron": "^3.0.11",
     "@types/pdf-parse": "^1.1.5",
+    "@types/ws": "^8.18.1",
     "vitest": "^4.1.8"
   },
   "scripts": {

package/packages/core/src/config/parser.ts

@@ -115,7 +115,7 @@ export interface NyxoraConfig {
     credentials?: any; // Deprecated, kept for parsing during migration
   };
   web_search?: {
-    provider: 'tavily' | 'brave' | 'mesh';
+    provider: 'tavily' | 'brave' | 'duckduckgo' | 'mesh';
     enabled: boolean;
   };
   credentials?: {

package/packages/core/src/gateway/WebSocketManager.ts

@@ -0,0 +1,114 @@
+import { WebSocketServer, WebSocket } from 'ws';
+import http from 'http';
+import { validateToken } from '../utils/state';
+import { IncomingMessage } from 'http';
+
+interface BufferedLog {
+  timestamp: number;
+  message: string;
+  level: string;
+}
+
+export class WebSocketManager {
+  private wss: WebSocketServer;
+  private clients: Map<string, WebSocket> = new Map();
+  private ringBuffer: Map<string, { logs: BufferedLog[]; timeout: NodeJS.Timeout }> = new Map();
+
+  constructor(server: http.Server) {
+    this.wss = new WebSocketServer({ noServer: true });
+
+    server.on('upgrade', async (request: IncomingMessage, socket, head) => {
+      try {
+        const url = new URL(request.url || '', `http://${request.headers.host}`);
+        if (url.pathname !== '/ws/stream') {
+          socket.write('HTTP/1.1 404 Not Found\r\n\r\n');
+          socket.destroy();
+          return;
+        }
+
+        const traceId = url.searchParams.get('traceId');
+        const token = url.searchParams.get('token');
+
+        if (!traceId || !token) {
+          socket.write('HTTP/1.1 401 Unauthorized\r\n\r\n');
+          socket.destroy();
+          return;
+        }
+
+        // Validate Auth Token during Upgrade Handshake
+        if (!validateToken(token)) {
+          socket.write('HTTP/1.1 403 Forbidden\r\n\r\n');
+          socket.destroy();
+          return;
+        }
+
+        this.wss.handleUpgrade(request, socket, head, (ws) => {
+          this.wss.emit('connection', ws, request, traceId);
+        });
+      } catch (e) {
+        socket.write('HTTP/1.1 500 Internal Server Error\r\n\r\n');
+        socket.destroy();
+      }
+    });
+
+    this.wss.on('connection', (ws: WebSocket, request: IncomingMessage, traceId: string) => {
+      this.clients.set(traceId, ws);
+
+      ws.on('close', () => {
+        this.clients.delete(traceId);
+      });
+
+      // Flush Ring Buffer if it exists
+      const buffer = this.ringBuffer.get(traceId);
+      if (buffer) {
+        clearTimeout(buffer.timeout);
+        for (const log of buffer.logs) {
+          ws.send(JSON.stringify(log));
+        }
+        this.ringBuffer.delete(traceId);
+      }
+    });
+  }
+
+  public broadcast(traceId: string, message: string, level: string = 'info') {
+    const payload = { timestamp: Date.now(), message, level };
+    const ws = this.clients.get(traceId);
+    
+    if (ws && ws.readyState === WebSocket.OPEN) {
+      // Client is connected, send directly
+      ws.send(JSON.stringify(payload));
+    } else {
+      // Client not connected yet, buffer the log (Anti-Race Condition)
+      let buffer = this.ringBuffer.get(traceId);
+      if (!buffer) {
+        buffer = {
+          logs: [],
+          timeout: setTimeout(() => {
+            // Drop buffer after 5 seconds if client never connects
+            this.ringBuffer.delete(traceId);
+          }, 5000)
+        };
+        this.ringBuffer.set(traceId, buffer);
+      }
+      buffer.logs.push(payload);
+    }
+  }
+
+  public broadcastAll(message: string, level: string = 'info') {
+    const payload = { timestamp: Date.now(), message, level };
+    const payloadStr = JSON.stringify(payload);
+    for (const [_, ws] of this.clients) {
+      if (ws.readyState === WebSocket.OPEN) {
+        ws.send(payloadStr);
+      }
+    }
+  }
+}
+
+// Global instance to be initialized in server.ts
+export let wsManager: WebSocketManager | null = null;
+
+export function initWebSocket(server: http.Server) {
+  wsManager = new WebSocketManager(server);
+  return wsManager;
+}

package/packages/core/src/gateway/server.ts

@@ -21,6 +21,7 @@ import os from 'os';
 import { getPath } from '../config/paths';
 import { validateToken, getSessionToken } from '../utils/state';
 
+import { initWebSocket } from './WebSocketManager';
 import fs from 'fs';
 import yaml from 'yaml';
 import { processUserInput, logger } from '../agent/reasoning';
@@ -910,6 +911,24 @@ function resetIdleTimer() {
   }, 3 * 60 * 1000); // 3 minutes idle
 }
 
+app.post('/api/v1/trade', async (req, res) => {
+  try {
+    const { message, session_id } = req.body;
+    if (!message) return res.status(400).json({ error: 'Message is required' });
+    
+    const traceId = crypto.randomBytes(8).toString('hex');
+    
+    // Asynchronous background execution
+    processUserInput(message, session_id || traceId).catch(err => {
+      console.error(`[TradeAPI] Error:`, err);
+    });
+
+    res.status(200).json({ status: 'processing', traceId });
+  } catch (error: any) {
+    res.status(500).json({ error: error.message });
+  }
+});
+
 app.post('/api/chat', async (req, res) => {
   try {
     const { message, session_id } = req.body;
@@ -1069,6 +1088,9 @@ export function startServer() {
   const server = app.listen(PORT, '127.0.0.1', () => {
     console.log(`🤖 Nyxora API Server running on port ${PORT}`);
     
+    // Initialize WebSocket Manager
+    initWebSocket(server);
+    
     // Start the Telegram bot listener
     startTelegramBot();
     

package/packages/core/src/gateway/setup.ts

@@ -288,7 +288,7 @@ Provider: ${config.llm.provider}`;
       { value: 'gitManager', label: 'Git Operations (Commit/Push/Pull)' },
       { value: 'updateSecurityPolicy', label: 'Update policy.yaml rules', hint: 'safeguard' },
       { value: 'browseWeb', label: 'Browse & Scrape Webpages' },
-      { value: 'searchWeb', label: 'Smart Web Search (Tavily/Brave)', hint: 'Requires API Key' },
+      { value: 'searchWeb', label: 'Smart Web Search (Tavily/Brave/DuckDuckGo)', hint: 'Optional API Key' },
       { value: 'googleWorkspace', label: 'Google Workspace (Gmail, Docs, Sheets, Forms)', hint: 'Requires OAuth' },
       { value: 'notionWorkspace', label: 'Notion Integration' },
       { value: 'xManager', label: 'X/Twitter Management' },
@@ -320,14 +320,17 @@ Provider: ${config.llm.provider}`;
       options: [
         { value: 'tavily', label: 'Tavily Search (Built for AI - 1000 free/mo)' },
         { value: 'brave', label: 'Brave Search (Privacy focused - 2000 free/mo)' },
+        { value: 'duckduckgo', label: 'DuckDuckGo (Free & Built-in)' },
       ],
     });
     if (isCancel(searchProvider)) return process.exit(0);
 
-    searchApiKey = (await password({
-      message: `Enter API Key for ${searchProvider} (Get it free at ${searchProvider === 'tavily' ? 'tavily.com' : 'search.brave.com'}):`,
-    })) as string;
-    if (isCancel(searchApiKey)) return process.exit(0);
+    if (searchProvider !== 'duckduckgo') {
+      searchApiKey = (await password({
+        message: `Enter API Key for ${searchProvider} (Get it free at ${searchProvider === 'tavily' ? 'tavily.com' : 'search.brave.com'}):`,
+      })) as string;
+      if (isCancel(searchApiKey)) return process.exit(0);
+    }
   }
 
   const setupTelegram = activeChannels.includes('telegram');

package/packages/core/src/gateway/tracker.ts

@@ -1,5 +1,6 @@
 import fs from 'fs';
 import path from 'path';
+import { wsManager } from './WebSocketManager';
 import { getPath } from '../config/paths';
 
 interface Stats {
@@ -114,6 +115,11 @@ export const Tracker = {
     gatewayLogs.unshift({ timestamp: formatTime(), message, meta });
     if (gatewayLogs.length > MAX_LOGS) gatewayLogs.pop();
     saveState();
+    
+    // Broadcast terminal logs to Dashboard via WebSocket
+    if (wsManager) {
+      wsManager.broadcastAll(`[${formatTime()}] ${message}`, meta?.level || 'info');
+    }
   },
 
   getLogs: () => {

package/packages/core/src/system/skills/searchWeb.ts

@@ -1,4 +1,5 @@
 import { loadConfig, loadApiKeys } from '../../config/parser';
+import { search, SafeSearchType } from 'duck-duck-scrape';
 
 interface SearchQueryResult {
   title: string;
@@ -90,6 +91,26 @@ async function searchSearxng(query: string, depth: number = 1): Promise<SearchQu
   throw new Error('[SearXNG Error] All decentralized instances failed.');
 }
 
+async function searchDuckDuckGo(query: string, depth: number = 1): Promise<SearchQueryResult[]> {
+  try {
+    const searchResults = await search(query, {
+      safeSearch: SafeSearchType.MODERATE
+    });
+    
+    if (!searchResults.noResults && searchResults.results.length > 0) {
+      const maxResults = depth > 1 ? 15 : 8;
+      return searchResults.results.slice(0, maxResults).map(r => ({
+        title: r.title,
+        url: r.url,
+        content: r.description || r.title
+      }));
+    }
+    return [];
+  } catch (e: any) {
+    throw new Error(`[DuckDuckGo Error] Failed to scrape: ${e.message}`);
+  }
+}
+
 const searchCache = new Map<string, {data: SearchQueryResult[], timestamp: number}>();
 
 export async function searchWeb(query: string, depth: number = 1): Promise<string> {
@@ -134,12 +155,22 @@ export async function searchWeb(query: string, depth: number = 1): Promise<strin
             try {
               results = await searchBrave(finalQuery, creds.brave_key, depth);
             } catch (e2: any) {
-              console.warn('[WebSearch] Backup provider (Brave) failed. Falling back to SearXNG Mesh...');
-              results = await searchSearxng(finalQuery, depth);
+              console.warn('[WebSearch] Backup provider (Brave) failed. Falling back to DuckDuckGo (L3)...');
+              try {
+                results = await searchDuckDuckGo(finalQuery, depth);
+              } catch (e3) {
+                console.warn('[WebSearch] DuckDuckGo failed. Falling back to SearXNG Mesh...');
+                results = await searchSearxng(finalQuery, depth);
+              }
             }
           } else {
-            console.warn('[WebSearch] No backup provider found. Falling back to SearXNG Mesh...');
-            results = await searchSearxng(finalQuery, depth);
+            console.warn('[WebSearch] No backup premium provider found. Falling back to DuckDuckGo (L3)...');
+            try {
+              results = await searchDuckDuckGo(finalQuery, depth);
+            } catch (e3) {
+              console.warn('[WebSearch] DuckDuckGo failed. Falling back to SearXNG Mesh...');
+              results = await searchSearxng(finalQuery, depth);
+            }
           }
         } else {
           throw e;
@@ -155,17 +186,34 @@ export async function searchWeb(query: string, depth: number = 1): Promise<strin
             try {
               results = await searchTavily(finalQuery, creds.tavily_key, depth);
             } catch (e2: any) {
-              console.warn('[WebSearch] Backup provider (Tavily) failed. Falling back to SearXNG Mesh...');
-              results = await searchSearxng(finalQuery, depth);
+              console.warn('[WebSearch] Backup provider (Tavily) failed. Falling back to DuckDuckGo (L3)...');
+              try {
+                results = await searchDuckDuckGo(finalQuery, depth);
+              } catch (e3) {
+                console.warn('[WebSearch] DuckDuckGo failed. Falling back to SearXNG Mesh...');
+                results = await searchSearxng(finalQuery, depth);
+              }
             }
           } else {
-            console.warn('[WebSearch] No backup provider found. Falling back to SearXNG Mesh...');
-            results = await searchSearxng(finalQuery, depth);
+            console.warn('[WebSearch] No backup premium provider found. Falling back to DuckDuckGo (L3)...');
+            try {
+              results = await searchDuckDuckGo(finalQuery, depth);
+            } catch (e3) {
+              console.warn('[WebSearch] DuckDuckGo failed. Falling back to SearXNG Mesh...');
+              results = await searchSearxng(finalQuery, depth);
+            }
           }
         } else {
           throw e;
         }
       }
+    } else if (provider === 'duckduckgo') {
+      try {
+        results = await searchDuckDuckGo(finalQuery, depth);
+      } catch (e: any) {
+        console.warn('[WebSearch] Primary provider (DuckDuckGo) failed. Falling back to SearXNG Mesh...');
+        results = await searchSearxng(finalQuery, depth);
+      }
     } else {
       results = await searchSearxng(finalQuery, depth);
     }

package/packages/core/src/web3/utils/vaultClient.ts

@@ -2,6 +2,8 @@ import fs from 'fs';
 import path from 'path';
 import os from 'os';
 import crypto from 'crypto';
+import http from 'http';
+import { pack } from 'msgpackr';
 
 function getInternalToken(): string | undefined {
   try {
@@ -15,17 +17,46 @@ function getInternalToken(): string | undefined {
 
 export async function getAddress(): Promise<string> {
   const token = getInternalToken();
-  try {
-    const res = await fetch(`http://127.0.0.1:${process.env.POLICY_PORT || 3001}/address`, {
-      headers: token ? { 'Authorization': `Bearer ${token}` } : {},
-      signal: AbortSignal.timeout(30000)
+  return new Promise((resolve, reject) => {
+    const POLICY_SOCKET = '/tmp/nyxora-policy.sock';
+    const options = {
+      socketPath: fs.existsSync(POLICY_SOCKET) ? POLICY_SOCKET : undefined,
+      host: fs.existsSync(POLICY_SOCKET) ? undefined : '127.0.0.1',
+      port: fs.existsSync(POLICY_SOCKET) ? undefined : (process.env.POLICY_PORT || 3001),
+      path: '/address',
+      method: 'GET',
+      headers: {
+        ...(token ? { 'Authorization': `Bearer ${token}` } : {})
+      }
+    };
+
+    const req = http.request(options, (res) => {
+      let data = '';
+      res.on('data', chunk => data += chunk);
+      res.on('end', () => {
+        try {
+          if (res.statusCode !== 200) {
+            reject(new Error(data));
+            return;
+          }
+          const parsed = JSON.parse(data);
+          resolve(parsed.address);
+        } catch (e: any) {
+          reject(new Error(`Failed to get address from vault: ${e.message}`));
+        }
+      });
     });
-    if (!res.ok) throw new Error(await res.text());
-    const data = await res.json();
-    return data.address;
-  } catch (error: any) {
-    throw new Error(`Failed to get address from vault: ${error.message}`);
-  }
+
+    req.on('error', (error) => {
+      reject(new Error(`Failed to get address from vault: ${error.message}`));
+    });
+
+    req.setTimeout(30000, () => {
+      req.destroy(new Error('Timeout'));
+    });
+
+    req.end();
+  });
 }
 
 export async function submitTransaction(txPayload: any): Promise<string> {
@@ -39,25 +70,54 @@ export async function submitTransaction(txPayload: any): Promise<string> {
     const secret = getInternalToken() || '';
     txPayload.internalSignature = crypto.createHmac('sha256', secret).update(txPayload.chainName + amountWei).digest('hex');
   }
-  try {
-    const res = await fetch(`http://127.0.0.1:${process.env.POLICY_PORT || 3001}/request-tx`, {
+  return new Promise((resolve, reject) => {
+    const POLICY_SOCKET = '/tmp/nyxora-policy.sock';
+    const payloadBuffer = pack(txPayload);
+
+    const options = {
+      socketPath: fs.existsSync(POLICY_SOCKET) ? POLICY_SOCKET : undefined,
+      host: fs.existsSync(POLICY_SOCKET) ? undefined : '127.0.0.1',
+      port: fs.existsSync(POLICY_SOCKET) ? undefined : (process.env.POLICY_PORT || 3001),
+      path: '/request-tx',
       method: 'POST',
       headers: { 
-        'Content-Type': 'application/json',
+        'Content-Type': 'application/msgpack',
+        'Content-Length': payloadBuffer.length,
         ...(token ? { 'Authorization': `Bearer ${token}` } : {})
-      },
-      body: JSON.stringify(txPayload),
-      signal: AbortSignal.timeout(30000)
+      }
+    };
+
+    const req = http.request(options, (res) => {
+      let data = '';
+      res.on('data', chunk => data += chunk);
+      res.on('end', () => {
+        try {
+          const parsed = JSON.parse(data);
+          if (res.statusCode !== 200) {
+            reject(new Error(parsed.error || 'Failed to submit transaction'));
+            return;
+          }
+          if (parsed.status === 'pending') {
+            resolve(`Pending (ID: ${parsed.txId})`);
+            return;
+          }
+          resolve(parsed.signedHash || parsed.hash || parsed.txHash || parsed.status || 'Transaction executed successfully (No Hash returned)');
+        } catch (e: any) {
+          reject(new Error(`Failed to parse vault response: ${e.message}`));
+        }
+      });
     });
-    const data = await res.json();
-    if (!res.ok) throw new Error(data.error || 'Failed to submit transaction');
-    
-    if (data.status === 'pending') {
-      return `Pending (ID: ${data.txId})`;
-    }
-    return data.signedHash || data.hash || data.txHash || data.status || 'Transaction executed successfully (No Hash returned)';
-  } catch (error: any) {
-    throw new Error(`Transaction submission failed: ${error.message}`);
-  }
+
+    req.on('error', (error) => {
+      reject(new Error(`Transaction submission failed: ${error.message}`));
+    });
+
+    req.setTimeout(30000, () => {
+      req.destroy(new Error('Timeout'));
+    });
+
+    req.write(payloadBuffer);
+    req.end();
+  });
 }
 

package/packages/dashboard/package.json

@@ -1,7 +1,7 @@
 {
   "name": "nyxora-dashboard",
   "private": true,
-  "version": "26.6.22-1",
+  "version": "26.6.23",
   "type": "module",
   "scripts": {
     "dev": "vite",

package/packages/mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nyxora-mcp-server",
-  "version": "26.6.22-1",
+  "version": "26.6.23",
   "description": "Nyxora MCP Subserver, for external AI clients",
   "main": "dist/server.js",
   "scripts": {

package/packages/policy/package.json

@@ -1,12 +1,13 @@
 {
   "name": "nyxora-policy-engine",
-  "version": "26.6.22-1",
+  "version": "26.6.23",
   "private": true,
   "main": "src/server.ts",
   "dependencies": {
     "express": "^5.2.1",
-    "zod": "^3.23.8",
     "jsonwebtoken": "^9.0.2",
-    "yaml": "^2.9.0"
+    "msgpackr": "^2.0.4",
+    "yaml": "^2.9.0",
+    "zod": "^3.23.8"
   }
 }

package/packages/policy/src/server.ts

@@ -11,6 +11,7 @@ import { z } from 'zod';
 import path from 'path';
 import crypto from 'crypto';
 import os from 'os';
+import { unpack } from 'msgpackr';
 
 process.on('unhandledRejection', (reason, promise) => {
   console.error('[Anti-Crash] Unhandled Rejection at:', promise, 'reason:', reason);
@@ -36,6 +37,24 @@ const SIGNER_SOCKET = process.env.SIGNER_SOCKET_PATH || '/tmp/nyxora-signer.sock
 const app = express();
 app.use(express.json());
 
+// MessagePack Parser Middleware for Hyper-Optimized IPC
+app.use((req, res, next) => {
+  if (req.headers['content-type'] === 'application/msgpack') {
+    let chunks: Buffer[] = [];
+    req.on('data', chunk => chunks.push(chunk));
+    req.on('end', () => {
+      try {
+        req.body = unpack(Buffer.concat(chunks));
+        next();
+      } catch (e) {
+        res.status(400).json({ error: 'Invalid MessagePack payload' });
+      }
+    });
+  } else {
+    next();
+  }
+});
+
 const TxRequestSchema = z.object({
   type: z.enum(['transfer', 'swap', 'bridge', 'mint', 'custom']),
   chainName: z.string(),
@@ -261,6 +280,8 @@ app.post('/approve-tx/:id', (req, res) => {
   signerReq.end();
 });
 
+const POLICY_SOCKET = '/tmp/nyxora-policy.sock';
+
 const server = app.listen(Number(PORT), '127.0.0.1', () => {
   console.log(`[Policy Engine] Listening on 127.0.0.1:${PORT} (Secured Local Loopback)`);
 });
@@ -274,3 +295,10 @@ server.on('error', (e: any) => {
     process.exit(1);
   }
 });
+
+// Start UDS Server for Hyper-Optimized IPC
+const udsServer = http.createServer(app);
+if (fs.existsSync(POLICY_SOCKET)) fs.unlinkSync(POLICY_SOCKET);
+udsServer.listen(POLICY_SOCKET, () => {
+  console.log(`[Policy Engine] Listening on UDS ${POLICY_SOCKET} (Hyper-Optimized IPC)`);
+});

package/packages/signer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nyxora-signer",
-  "version": "26.6.22-1",
+  "version": "26.6.23",
   "private": true,
   "main": "src/server.ts",
   "dependencies": {